last executing test programs: 4m49.657722261s ago: executing program 3 (id=37): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fanotify_mark$auto(r4, 0x4, 0x4, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r5 = socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x80047453, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, 0x0, 0x40084) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 4m43.843115074s ago: executing program 3 (id=48): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/cpu_dma_latency\x00', 0x86c1) r3 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x4}, 0x6f4) r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) epoll_ctl$auto_EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000040)={0xffff8000, 0x7}) r7 = socket(0x10, 0x3, 0x6) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40200004}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r8, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_QUEUES={0x34, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x8}, @NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x2}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x6}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x2}]}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x3}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xffffffff}]}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r4}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r10}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r6}, @NETDEV_A_DMABUF_QUEUES={0xc, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xb7b0}]}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r11}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r12}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r14, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000440)=ANY=[@ANYRES64=r9, @ANYRES16=r15, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r16, @ANYBLOB="0800140000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0xc000) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_MODULE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}]}, @ETHTOOL_A_MODULE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20004091}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x74c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x400, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x6, 0x8c48, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x1, 0x1, 0x3, 0x40, 0x1000, 0x8, 0x100000000}}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r17], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) socket$nl_generic(0x10, 0x3, 0x10) 4m42.643806871s ago: executing program 3 (id=50): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x9) mmap$auto(0x6, 0x3, 0x3, 0x1eb1, r0, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r2 = fspick$auto(0xffffffffffffffff, 0x0, 0x9) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0xaa262, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x95c9) futimesat$auto(0xda, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="082b4565c20da6dee51fe4813fb7b228fea2fce40771bebe5ab7c2cbbc9da60602d6a41e44e347d53acf2f35b3b6731fd7d6fac204ed27b7a304b703d0163dbd7b88d335ea9757ee2a562ef3d311ecd4886fc9023e11ca06405b8a4ad7139dd676559a4a1ddbd06c637e9420079f948fcb5991b04cd692b558ed3dde70c1d4a499bea75f778457998c5313da96d7611f1c5a45e2823beda99bc8b214ba3b5205c8933c160caae9802b1641d0085a147b93c2c9207f0649e0c4f6fb57f42340bd2781916b3cdf79bc9a4a73", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES8=r3, @ANYRESOCT=r4, @ANYRES64=r0, @ANYRES8=r2, @ANYRES8=r4, @ANYRESHEX=r1], 0xb4}}, 0x20000054) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r4, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xffffffffffffffff, 0xffffffff, 0x15) unshare$auto(0x40000080) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) r6 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) ppoll$auto(&(0x7f0000000440)={r6, 0x0, 0x101}, 0x5, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x3cd606, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000001bc0)="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", 0x930) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x10000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x501, 0x0) close_range$auto(r8, r5, 0x5) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) 4m40.835509912s ago: executing program 3 (id=55): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = open(0x0, 0x161342, 0x100) write$auto(r2, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0x0) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r3 = memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000400)={r3, &(0x7f0000000240)="c099d4f256158c5b4b5d36e15687a9109c95538bdfd31f53bfc13156bb095ef179306bd35f514b7fd0e8f264772180a1003cb7c8ed16ebaa69dbcfe4e6e87f3252f3b3ba79354a5b2926f3cba5efb2f7b6fdba6a46ccf3ae4dd94e457105e25abcb3da080c37f4f68f5ff2e8f8759346d6c96cdd", 0x401, &(0x7f00000002c0)="1a8bceabafbb25d08f652c687c1f388ca9973a14723e848afc3fc44fd9cc23a4b89603b12d88063ffdd227ea32de58512be579d684d96b72a1580da5bf23aabbacbf103c2de01932583065382c323efc52d235b2d34869f90489fde45960c1c17a305669a2a0b6c1d3e82ecbe2789fae09ec6bc6c1ad40785e5a3328f48459ff3ef2b49519aa6bbff29d2abd049762df05cf83179d3f5509", 0xffffffff, &(0x7f0000000380)="723ec7b05c47aef595a509fa998c191b8582c5c30bc45e3b0ac2ade296bc0d3e519f8f95dca1f5f03b92c9b8770b796f472642b4cfcb3d03e460c788a47c94e7", &(0x7f00000003c0)=0x9}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050725bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r7 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd27, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r7, 0xa22, 0x70bd29, 0x25dfdbfd, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x8001) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) write$auto(r8, 0x0, 0x8ed) socket(0x26, 0x3, 0x4) 4m39.38813186s ago: executing program 3 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x100000000006d, 0x7, 0xb4, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x33, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x7, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x100000, 0x800000001, 0x6, 0x7, 0x2, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x5, 0xffff, 0x50ce0883, 0xbd6, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16d, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0x7, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="34020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) open(0x0, 0x22040, 0x75) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy2\x00', 0x100, 0x0) (async) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) (async) io_uring_setup$auto(0x7e1b, 0x0) (async) socket(0x2, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) r3 = getpid() pidfd_open$auto(r3, 0x0) 4m39.003899694s ago: executing program 3 (id=61): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24008800) r0 = bpf$auto(0x0, &(0x7f0000000780)=@bpf_attr_1={0xffffffffffffffff, 0x0, @next_key=0x1, 0x2}, 0xa0) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040), 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x6, 0x3, 0x2, 0x948f, 0x3, 0x6, 0x1, 0x6, 0x62, 0x6, 0x0, 0x6d3f, 0x9, 0x2, 0xf4]}, 0x0) (async) write$auto(r1, &(0x7f0000000840)='/d\xb5\xdbb\x9c\x00\x00\x00\x00\x00\x01\xb2\x1fZ\x1f5\x8d\xf0[\f)$\xc9\x82\xd3\xcc\xe6T\xeb\xe6\xe3\xcd\x93d\x16\xde%\x8c\xeb\x01\x91\xa95\b\x8f\x9d\xa7\xdb\x1e%\xb6$0\xe2HX\x9f\xc4\xb41P\xf4\xe0\x80Q\x82\xf2)\x1e\xe2\xba\x81x\xf2\xe8\xdb\xc9MT\xeb\xff\x90\x1d\xc0\xe4\xf5\x04\xfak\xe0\xc4X\x7ff\x97ny\fGC\xa6\x99\x1du.+d\xbcO\xe9a\xaf\xf3\x04S\xd2\xbc\xde\xe8\xfa\x8c*\x9e\xbbY=*(]\xfa=z\xa9\x86p\xe0W\x9e\xae\xd4\x9f\f\x04\v_y\xafv\xa4\x00\x9b\x05\x00x\x10\xce0\'\xd0\xa6\xad\xe3\xec\xd2\x12z\xc0\xb4\xb2\x1d3F\xdf@\xf1lc@_3Zne,\xd0\xb9\x05\x86\xc4\xf0\x1c\xacUz\xec', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x100000001, 0x5, 0x1, 0x4, 0x3, 0xa199, 0x5, 0x3, 0x8, 0x5, 0x7a0, 0x6d3c, 0x9, 0x6, 0x200000009]}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000b6792beb6b672a2d0bdc0012000100898771f1c19f177904859082884700004e8ab0d7b1d5fd09dc37bbe152336cde243d2a3b8acacea74a8f8298efb1e3a447a672c3a1f14917faf7d9b23b935302c719ad9f09d0ea66e00f34abe70bdcbe986bb5a9e4ff4e7449e69dc762332254e8a87a6dcf1fa6c0a7576f0bf0c84c5d26e7fd85eaea0eb44765b25599e2b339fca28fc6d2"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r4], 0x1ac}}, 0x40001) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) (async) mmap$auto(0x0, 0x400004, 0x200000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000000c0)={0x1, 0x81, 0xec, 0x1, 0x5, "e7227115127a1e8f00"}) 4m22.945862257s ago: executing program 32 (id=61): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24008800) r0 = bpf$auto(0x0, &(0x7f0000000780)=@bpf_attr_1={0xffffffffffffffff, 0x0, @next_key=0x1, 0x2}, 0xa0) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040), 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x6, 0x3, 0x2, 0x948f, 0x3, 0x6, 0x1, 0x6, 0x62, 0x6, 0x0, 0x6d3f, 0x9, 0x2, 0xf4]}, 0x0) (async) write$auto(r1, &(0x7f0000000840)='/d\xb5\xdbb\x9c\x00\x00\x00\x00\x00\x01\xb2\x1fZ\x1f5\x8d\xf0[\f)$\xc9\x82\xd3\xcc\xe6T\xeb\xe6\xe3\xcd\x93d\x16\xde%\x8c\xeb\x01\x91\xa95\b\x8f\x9d\xa7\xdb\x1e%\xb6$0\xe2HX\x9f\xc4\xb41P\xf4\xe0\x80Q\x82\xf2)\x1e\xe2\xba\x81x\xf2\xe8\xdb\xc9MT\xeb\xff\x90\x1d\xc0\xe4\xf5\x04\xfak\xe0\xc4X\x7ff\x97ny\fGC\xa6\x99\x1du.+d\xbcO\xe9a\xaf\xf3\x04S\xd2\xbc\xde\xe8\xfa\x8c*\x9e\xbbY=*(]\xfa=z\xa9\x86p\xe0W\x9e\xae\xd4\x9f\f\x04\v_y\xafv\xa4\x00\x9b\x05\x00x\x10\xce0\'\xd0\xa6\xad\xe3\xec\xd2\x12z\xc0\xb4\xb2\x1d3F\xdf@\xf1lc@_3Zne,\xd0\xb9\x05\x86\xc4\xf0\x1c\xacUz\xec', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x100000001, 0x5, 0x1, 0x4, 0x3, 0xa199, 0x5, 0x3, 0x8, 0x5, 0x7a0, 0x6d3c, 0x9, 0x6, 0x200000009]}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000b6792beb6b672a2d0bdc0012000100898771f1c19f177904859082884700004e8ab0d7b1d5fd09dc37bbe152336cde243d2a3b8acacea74a8f8298efb1e3a447a672c3a1f14917faf7d9b23b935302c719ad9f09d0ea66e00f34abe70bdcbe986bb5a9e4ff4e7449e69dc762332254e8a87a6dcf1fa6c0a7576f0bf0c84c5d26e7fd85eaea0eb44765b25599e2b339fca28fc6d2"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r4], 0x1ac}}, 0x40001) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) (async) mmap$auto(0x0, 0x400004, 0x200000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000000c0)={0x1, 0x81, 0xec, 0x1, 0x5, "e7227115127a1e8f00"}) 2m50.200113663s ago: executing program 4 (id=364): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x5523, r0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x4) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) pread64$auto(r6, 0x0, 0x3, 0x5ef6) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(r7, 0x0, 0x20000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x11d4, 0x200000000000006, 0x10, 0x8cfb7, 0x9, 0x6]}, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)="e769ffff91a9bccbf2a814c2b1c2da6a4642e71e42496c6bac2cd2cc3aa9633c36df13128be76976577ef8b494eb27dd7c5c300903663e1e87c15519219ff691bef8e8162e8a841e0b720ba4c432a0b5e1e6ce3fba9b6c4462c74f701a8daaf2a07cdcee8ef120a79f8ecfef3532373fcfc0602284e9ecfab10a02", 0x7b) getsockopt$auto_SO_BPF_EXTENSIONS(r3, 0x9, 0x30, &(0x7f0000000180)='\xf8\x1b\xf3', &(0x7f0000000200)) 2m43.800099294s ago: executing program 4 (id=384): gettid() r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fff) setsockopt$auto_SO_DEBUG(r0, 0x6, 0x1, &(0x7f0000000000)='$/&}-#)f-&D)[,\x00', 0xda3) r2 = socket(0xa, 0x2, 0xfffffffc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), r2) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8402, 0x0) 2m39.450789514s ago: executing program 4 (id=391): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) setgroups$auto(0x0, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfccd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd04, &(0x7f00000001c0)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f0000001100)="50433ae3fbc35ede2b5cba2e4025a3ebbb46df35a14b6caa89c8cf96c1fa621511a9f29a73dfac1004e7d8a6a97ddbe6c0974d1e93804b4120b16b156b1401deb2db973d647c8de2", 0x48) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x807, 0x23, 0xb) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) mmap$auto(0x5b16, 0x100000000202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioperm$auto(0x7, 0x6, 0x80) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m35.241332515s ago: executing program 4 (id=404): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.11/usb31/tx_lanes\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000280)="6f7f96ead7e219857711b3e61243e3f8e4511f33a631bdb54ee48ea73d1abfe8d186da445029ae4679f86ade135672dd4c1ab94f06f67b75fa34e541e40957a06315ff3aca750ccefc2bcd81870c8222f955ae332ffa2e6c748b1e0b3410b36b107a0320a41890199d413b31ebf3c0f15fd0050dfa1cc9deb5030000005a95", 0x7f) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x5, 0xe, 0x8000, 0x9b72, r0, 0x8002) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd, 0x5) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) (async) socket(0x25, 0x1, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r1, &(0x7f0000000180)={0x0, 0x5}, 0x3, 0x700, 0x5) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen_full\x00', 0xe0003, 0x0) socket(0x21, 0x80000, 0xfffffffb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) (async) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) kexec_load$auto(0xff, 0xfff, 0x0, 0x4) bind$auto(0x3, 0x0, 0x4) (async) bind$auto(0x3, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r4, 0xe503, 0x0) 2m30.443704535s ago: executing program 4 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000180), 0x40a002, 0x0) (async) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$auto_rtc_dev_fops_dev(r3, &(0x7f0000000040)=""/21, 0x15) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r1, 0x301, 0x2070b52c, 0x25dffbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) (async) mq_open$auto(&(0x7f0000001780)='ovs_vport\x00', 0x3ff, 0x6, &(0x7f00000017c0)={0x80000007, 0x100000001, 0x8000000000000000, 0x4}) (async) r4 = socket(0x2a, 0x2, 0x0) bind$auto(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x6b) (async) r5 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/ns/cgroup\x00', 0x60000, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r5, 0x8004b709, &(0x7f0000000100)=0x523) (async) socket(0x2, 0xa, 0x80000001) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r0) 2m27.35620577s ago: executing program 4 (id=428): gettid() r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fff) setsockopt$auto_SO_DEBUG(r0, 0x6, 0x1, &(0x7f0000000000)='$/&}-#)f-&D)[,\x00', 0xda3) r2 = socket(0xa, 0x2, 0xfffffffc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), r2) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x2c, 0x2, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x6e}]}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8402, 0x0) 2m11.969361827s ago: executing program 33 (id=428): gettid() r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fff) setsockopt$auto_SO_DEBUG(r0, 0x6, 0x1, &(0x7f0000000000)='$/&}-#)f-&D)[,\x00', 0xda3) r2 = socket(0xa, 0x2, 0xfffffffc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), r2) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x2c, 0x2, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x6e}]}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8402, 0x0) 8.513378511s ago: executing program 1 (id=871): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20881, 0x0) write$auto(0x3, 0x0, 0x81) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2, 0x10000001}, 0x6a) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x3) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(0x0, 0x3, 0x1, 0x0, &(0x7f0000000000)=0x14, 0x2) clock_settime$auto(0xffff418f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r1) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x40000, 0x0) read$auto(r2, &(0x7f0000000a80)='vdpa\x00', 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x801, 0x84) r4 = getsockopt$auto(r3, 0x84, 0x86, 0x0, &(0x7f0000000000)=0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2a, 0x2, 0xfffdfffa) syslog$auto(0x9, &(0x7f0000000200)='..\xfd\xadc\x89\xc9\xfd\xb4-lyx\x84 \x06\xdd\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') getdents64$auto(r5, 0x0, 0x18) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(0xffffffffffffffff, 0x4008af03, 0x0) 6.294461255s ago: executing program 1 (id=877): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60182, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40000, 0x0) sysfs$auto(0x80002, 0x6, 0xfffffffffffffffe) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x400, 0x3, 0x8) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, "434b638d1d"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x844) writev$auto(r2, &(0x7f00000000c0)={&(0x7f0000000040)="bdd8c7d8fde688cceb608c0318694e8bfbe9486743afeb696c65999b158022770931e0826ce6cc29d268cbe95670e3a5a19c8d9b0d695ce78dbe4dafb2545acc0e1f4be42ad573f4c5cef49682d93f9079fdfa94c9485dd60e87d225948f3262457dacd7fd1686f94e10f05de59e3462b0b990add0428db36b33d40a88", 0x3}, 0x6) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 6.274750458s ago: executing program 0 (id=878): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev4\x00', 0x280, 0x0) ioctl$auto(r3, 0xc040563e, r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0xffffffff, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x800, 0x10008, 0x7, 0x1000049, 0xffffffffffffffff, 0x9, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x4004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x4800, 0x0) ioctl$auto_TUNGETIFF2(r4, 0x800454d2, &(0x7f0000000040)=0x80) 6.227298074s ago: executing program 2 (id=879): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x9) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) (async) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffffd, 0x0) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) (async) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x2, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/rpc/auth.unix.gid/flush\x00', 0x7e1bc1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045035, 0x0) (async) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045035, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='hfs\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7\f\xef\xe0S\x93\xd3\xb1KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNE\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x9bH\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x01\xdbK\xf3\xc2#\x18\x1c\xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G\x00'/208, 0x56, 0x0) (async) mount$auto(0x0, &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='hfs\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7\f\xef\xe0S\x93\xd3\xb1KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNE\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x9bH\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x01\xdbK\xf3\xc2#\x18\x1c\xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G\x00'/208, 0x56, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) (async) socket(0xa, 0x2, 0x3a) 5.977173075s ago: executing program 2 (id=881): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r2, 0x0, 0x2) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/pm_type\x00', 0xe0002, 0x0) write$auto(r3, &(0x7f0000000180)='//\xf2\x00', 0x8) r4 = getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, &(0x7f0000000080)="56f51e30dca0a0ffdcedac82cdce57aeb0ce8db18c02f826a80b270dbcbc00e25a5e33cabede5e869d83951af5360b60") msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2d}, &(0x7f0000000180)=""/84, 0x54, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) 5.809327187s ago: executing program 0 (id=882): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) madvise$auto(0x6, 0x80000000, 0x269) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) mprotect$auto(0x12c7, 0x806120, 0x8) mprotect$auto(0xfffffffffffff54b, 0x81, 0xbd4) 5.277108595s ago: executing program 5 (id=883): close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f00000042c0), 0x200000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c06, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x20000000000ffb, 0x8000000008011, 0x3, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) r2 = epoll_create$auto(0x8800001) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r3, 0x3314, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) r5 = prctl$auto(0x349, 0x400, r1, 0x3, 0x6) r6 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0xc0801, 0x0) pread64$auto(r6, &(0x7f0000000080)=']$\xf4FY\xeb', 0x8, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005400), r7) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f00000055c0)=ANY=[@ANYBLOB="c8050000", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf254300000019000700d73fe7e87811e4e50024957720fcf62a866ab6e84d00000008000a01040000000500d3000300000006009500040000007f057f00fa441a0fd4ff383a106d459ee5c288e32c89ec71b22fec86bbc01c4948c869657c74d76990d389b14fdd4d2d482149c27f730650b89fc0a925cb6c7637482d1480152bccbcbc3a13c7f7a2e9db319cb8e61b9a84eaee49c80dd9831206b846d800483a53b848a9f1a7411b4f6a0ebbd725cc912cdb09336e0e1ed1d4bca252188fd7049a9b2e6acd4de9d39940ee99eec2e266295406d13002addb7c6633e3386bbdbd1af2cfdb69991d827793bfcf3b8f61eb5dccaeb05d7f2b36089bd835e82b174155135f6e6da7a06dc9d8e1397821cb28f37d4debef7a7fed9b2c5e0db62919289f3c68a84ce9f6d8e68eb95af34c8609062aa43a399368d760f1ef52d3ea2cecaa8692cfc557a0870ecf8e797333a75450d6c75c631cdfb10d7524aa705b3e6dd271d7c463a7b8b646cfb27f52b2b2e68c78efd44031b2f7d199936a249c2efcf848e876c72903aba5e27ada169bad460e01e05ccc2c0c4514eda510a43aa0c3eb5feb7e788b4fcf6f1571e3bb6862533d2d5d15f351bafa34bef27fba7ee15bd8f42249fa86317650c66c926326ad0e3729815bf530b1a9b9f12b059a00f7f2b9a4dd0b2b623fe0633efd0134fbcee314c9d765f618acfec239176f8721906b5263acb06496f30ad37008d7d4579b1ab10c1dcc35dc9a26f3ecb25cb98600a9caccd5d3167cfc34398d55275006a16c44c56f4845994ed8f66feb91f71a3208318df5a43e938e04ded3c7121d28ec299c96cf12e76f4b6de4a2d78c005bb954d91c35d04eba8be4b2899b31967257b91edf299da6959b2226d8e5a093deb46e0b452d20e749af3b3ae624052032344f8305f797f2b2f9969f019e7cd55bb6bd1a0d3a1b6d3a72ab2bd775883c2e2612751b4c723aa5a79918387fd760303fcce310b60f64d19ee7435507b4ff2e85321477b5cc6fc6f3a8ad99f4811279517acbf4649423ecd39a85eb8ee3ecb59b7bdca7eda51805e551e71c85d5017c35229b5d72c90d3733fb69d1f5ef9554b3bc465c961abf8268c7c775c32167ac5b36b5df77eb191faf3366e286a11f9cec29fdd09d05d5c457799b6c718e920ec4bc5e14a1d9e1631bc56bb53e2720590690d5e03e52236ac996a0b609b03d3469423cfc043dba88dc1445c5db4faecc84acd12708244bcda826101196515ab09bf6f5868775869c6d82b1e032d8ec19e8ba99af8066b34f21102d2939f7ef4d1fded615d5bcee933907652e7a11af7caf0693e16a9d384dec80214f81e6e47b9cf9834ddfb019f2efee68cbb7d1891316cc45d2e5f74017c86f80d6bf2c512d2a7d7afced7cf57372988a28730b1dc0bf607cac5031c13032e7882afb331d8d7986dbc826663068d455675900403e64d0724ff972661ac83268ba5b50b06d77af8bb069a691a1f0f9b98e3308264814bb935f363a6c1bcbc9692592e821a2168fa5cedbdbc96715a4bbb7986da58a61f1d885367a97f18d61deff8324c549b0c458f38191a2e817749d07a98ede07d84e1a4f59c83a1954afd001f82295d5ae764e79a6fa1ea14802e2b36638e758fc1ddfbc65cfcc0fd57463f19c712af31f2119488e54bff94154ffe4f53b1fdc76bb75a628bc2b3a011eaa3cba7b6d68d08923c9b2b858c3319f09bd8018583b34bad8acea8545b51516c64e6b4ab03d81211172f3cc40f0530356a5dbe05e867dad827294e02fee09119929a44966d37dda6eb6c7be6b33db5dbefdb23861449feea1273b609ed801ec8de73060707d31b3830508d738b8b075bdc1104fdef2a9c303653515579498a65282b51a9f9a8f8687c4cb5d59ee664e54b376d4d73d926b4dbc80f4ce4d678cd73c6e6f2589cab0f572ba19fc6d0bb48a9c502450de3b13cacaf58a630e03f9c644e25ac98815b388994132c2d8731f17acd0e2f8c19d4e24f5cbf51db87cf45d3fb0302a9be0192fc49283fab0f6fa86e17829c2d8f400"], 0x5c8}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x101c, r8, 0x100, 0x70bd2b, 0x6, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "f676b2bf29c30156918526f7e5f99101228aaf329bf43b3638af544182ccfe6066d80f4f0619ca839812815575f650591a2e08ea9ef999eb3f67408e3283f2f181626b14a71e2febe36188fc648a66ae18a85249807e30a576e7b894bb29fd2130ca5563abfe15362b66e0d262ca4b2796f102ea936b5ebab6194bcd7ee0e7ae1b1ac650e85a892b21b9057e05fa93efc7705bf1283de379d9ea1b37427b0a00f01870b973662764fd82c32d3a0c601e471a28871ea0c77dd377cf3bc0b0c9fc248484581e8de263874dfb28963eeec9d33ed8b31d840a91ba69887ce4924fadb85fdefe6ed693ccc61f901625532975caf8b3252256fbf1fa9ace4abcba3408c540d85d17e71920da27279efb27751ac815acf67da3d94fc38771b426cde44128bbd4c20b836a427bc0410345e1f8cdd40d712d1e30718fb94034ac5231a97624d968f3ddd00584963af83e217fd732cd89f3915f0d56bd09783bb23f229d0605be1a4cf05da64bbb3f41b6be5fb61bbead1b3dfa906383067e007791c3c5ca221e9f783c16c6fc6fa4b032427e0117f905d7e1ca31bccb498b5f65f42db416cac9b9080b0da027e95aa69c2a67e308d4d8a4e7727675d6823b48ef6983d392930a130a664df15a2055acf9652d1d74116026df7d7b03e6951e67adb3cfd6e8cd495639b786cf6dd03b50e7687e59568076a7a5647e68dd4add452fee2a64e67e65694bc041c501f4b0d96190e34d1e6814b499d60e4861112824c43ca051996c5729fe173f2d8703e4279f96e3f700caf9ac2bdc81b6aa614dc909b054006e52d176e29ac5322f8ec427048260a086318deeee66a9f41d4ef0937105bce3cea87f481d556063e7422f6f20acd023c090b5f1b5402b94defb1081c482bdbf1df4cdfc2256c413fc9687d3756ee11ce0f92b083e72d5010664af32e2b6356f827a651a7e00fa1ca02dd187c4f05adccdbe1d123a863bb3160fa2ef61c6278913d22a3c4fe688ada03c630dabbab5aa6a8396f5a675c407a8736b222ada4ddc398fd7b00e3907a624a09a9c6ca847bf9d58283b7e769a00a958ec739262727e496ef02f1a0c8be2655f0d0b803c4f48ac00a6ed88ec87be9879c3eb9a115ae072a3ed6cd226b872cfae0c50bb022a6a24d8450a468322d1e8f18c610b32e691af5fa8f81b016f4d7dcaf164ee5cdac9cb6705f6983895b62cca5d0ee3bfb76866c709eb05d57fc9ce44768e8f987ad7ace35575c5c12eaf276eb4e395ed91114c7b6478fd39ab6d109f3c13c6a57a8a942b65fb1a52c854cc3ccb3426a6185841b9611ee60e775a98405ded54628d673d0b6df7798b56b725186883c7e68e61e28cd96a03972d876e555058aec17d4347c1ee6736df4a0bb41f3cda9f6e807fcd89230e31bc3cc1764c239e65a9db64d63e66b97b3ff5d3efb0ff00919a5d5e89671230468c17c1ea03ff899dfa467b532212d8a291816165a1a7fd750410e2dcb613b153d5dde1dfed25bd51c72fcff1d2c9ccea4d299f07ed15ba038ad912376e2e7ec2cd5290a2234173c98a8b3c1125074d5c99694c975b10215219c1c14831d151b7d9fd97aadda4be9fc70cd6d17a7ba3c1141de0daf6693acb30e91443030c538d05efb5b30b95547a79e491dc452890547ef055ce5d6845c41aa6e9dc65a14795e085f8e29064cfb786479e89cfa750858f0294a889d3cef310465c10bc548b4ddaee3efa5588882f970a4ef1977d8fab2e2c0c827fd714db6b809a3714bd11befbf246a23bf2b249818b6079f992618107be4225267e06549b195ede3b59e4ba755b9600c038c3f0eb762b1ca77a4cb7813f2dd18cf36050c583594e7d5f62be2a3f229ec8ae52b72aaf7b6672abba2718dc85544b1050979ea3685ec983d805f1f44e3fa28a82624b4a776b60a9acf55dcdfbe88e97d4d53c09d5aa01542259e87ccfaba566905da2626dc2ef1e593d3e9895106ec93ecffaa87f7abee64ec97a86ed8fe747243df59a0eec890e53d7afd6d7a7406ca187600a94f1843e4391c3cb6d1fbfc157a29fe47151e25b39802b97b1c23f9f478e6eefae6692baad250458d1d91e1863666de7f33f6532194c7b8a15adaf391d76c0a956c9560f7ac9569b3cabbe939dba56f514c59d10d864864fbf836d70185961d9cd19da17786ff96257828213d369e20256694c33d270112d81ae6844ffaa7f4d59b7f6117de3e509ae8321e5a221cd09ca1a3de496420836f341dba34dc138aa7c058981dd7664d953d178e976fa720279a7c582fe17fbc4e3ff3fa21b1cbfa9d3de7d91ef390c1eb7ffe71834ce1cb85cf8bdd9f6b3db4ae17053a2db956e843f24d5a1712f1a207783362b1a05ffc99952438ad19cf3198edaa5a14baf1607d17d1a08d020293f78fae8b3362b139c1cb9f8d29addfb0f62c830e1147163602ca2223313127dc2428e66fe3f0f9b45c128e1357bc143e533c84259e39350822bf64cb9bf1f3b313d214204b4975b52869cf1e663f8b9ab6a9a140357b86040d27967e5a5b9e97e3250e73d279fa100629cc12b9c07728d0be0565107e3b03e1213bdd780ac5f4f27d736f17397b4cd3ef03486bcab10f18b2d5a36c10da26740dfd84ea291354fd82f338decce4c98237597eb02e535a7ff79507e3e1113d1e1b500aa3d747391c4a43702930793eac67b58c94971783af044f34868fa517506d957209821f3fde8a91fa65a0544e9eab1d090c8890ca074c29386c2b8a9672863d51c90c29042593065270496f98d723126c7fd2ded24280792bd897334e8471d0e1b2c8359cbbb082ec13eb6d3d1221bc07c7051aa13d2b057a4cd39b71bbf800f30fff64830741a106796d82d5f6fb4059f906ff512d87d8ee48b14a2ef430bda357727c426cb2a5b6ca6f79cd191b4d5a065d1509b4171f02fcc968f4f66f5566f51a160446729f8b9b875caa37e7846d723fc3675fcd710546734410b9794ffaf4f12474d9d4ac0f7f01803b72ddef0b0b229e1f4d2469f4ce74da819b2fe8d105bfb478c2a818d23e821136a3a2de8d31a4ea2f5402de836ad1254eca2bc8cd5ad2e7a27bd112a956a35041c9043bded62a057e63fc34c6d6792afc0ef7433ad072d635f72edac098135ba220feee5d4348c87744198d38044c43fcd6cefc216010a4ca524101fc68ba52b90e005f704cf08cd3b3b0eab0956ad3b12f5f8bc32ab8b71229608dc72aacd02506d020be0ccf30fd70b1abc5b16ade0fedc8abdd6c0b9af6e0dc131c50f9eb1bea83cdd7513733726effc0b6fdd0958c974b4e7e9b3e393932aa76f2f3e67db5178472bd2319486940daa83db4c09f7f69aca3106f65f2e74963fdbc4ecc286c7a8887a63a708beb1e7b14e18af5058d53195c3966a9ba71445ba84c7eb884d0ab673292a18ce89526c80d39407985f267ef8046980799ec9cc761e5ccd62df92ddd6434981bd2006541847eba20d9d44fc6992607f97ef30157351393bb42bd336865f36923cd462d8c26ceb1a94069bd80f982249a71e4c18799b6687d7af0548c4b90b8779443ce9175888c1dd1b326938258f26c205b5e45ab4060f9a9725c4c58985bcb72ce6e52a8f9e2a53342ab3431e9ba35d3569087041c0f20f3b52300352bb04aeded7759f7eba384487f9dcb6570af86d3ef22f1dbd4a26b0db7be53530583b5df76643814c3d68f6829ad187782ac87ac5fbae1d111ab47a6866aba06ac275ec7207f2252466d98eb1cad283bef28a6b2f8adc421df4104c22ea8907352967ba37e88535ea505d7bd8b3000ce27acb7812f17c653a8b09d23cde9fc4d02865b6ee9ba1ddcb86910f6d7727dc86935cc80abd50150f3803a6c5cb23ec1a4589618cc276b4bf3886e3ceddd1c397ba31dac8fee465e6540c2eff41c9c0e2b371eb9c5e7900af4979dcc451c2d49a663a02a1024e13acc3bec5faac76272587307da8457931c71c99bf5b8699f77390b31f179ed4913310d4e5764319991853282ad17702dbf1858431dca742f21953c5515303e795660a6064d568fed3bb2612c6a87a01da2713f761c3d074a267dce4ad7f8e6f20f4f70a6a46f09ddc68441ed851d1156b7927c8947845f068762a7c245a7fc823ea33058b4d5a06b0f8d166c1921e86e7b2fafe6815969e71f0e80dfa4d6190f56428b838cc50fb2bde140f510c209bff40879400c8d7a8d0cac787932b85da7ca2b74817d616ffa2402d9c1a7af26e9f2ebf895c7bf660e68284e03175d17dfb7babc1d4ee8451faeeaf88bb2c357fb7faeded6b557d3acd2a622d0fb569d5985d7dab596fa128061d1b235a08f51a96ff4fd05b0af6150987a51e1fadbdb8ca6a03d0c492910df92d05cc8782ef60407c4ea5da814e53b1bc61fa4676eaf09e42795d3337246cfbfea1cd0a8e3d1a401d28e77c973fa02362e1e8187c8dd5b6e036ad8f878796fd272494109465b8febe1e4a3f95fa33bc780ba254415942572b6b3703e6a94842237ad85bfccf1f47de23788c8429115dbbf13ea5b3c23c4332d9abd9e3fbcccfca2b46046091e3dd33cd1e3ad39dd87356a78ed44dbb3eac1af401fd67737712933fb3f99a1daafee37b45fae1a999be95ca99cba557348c933e0cab4605fe9610e93f1819fb06674bd9269a88ee903375b9279baca99aba4303bf2949f4410af58f191caa5646a01eee8c18d0967eae9979e42e17590b2ace02f595272de3304e1106aae224727703f1e79fa16355a4b35fe0958666554794887da41b4a0f36652d4d97a5f0eba0e7bb552185faf9066138a36e0cdc51c704dceee2280e66c6ab935f905df5be9dd279f50815217f098dda44abaf68f6ec0f9203c183ae944b0fa03674cb443433dcb09d13aa299c6295e9cc2c5ee36586513e874df483fdcc84cdb7e71fb59c6357293b6fa9589d34abaed9c692cfb1d7d43e37652b707a41b8747fdfa66326b7d3e2897a4258dbee3d0f640e7963409432e8079355e8599290fb8b2ce92b3ee78791a62242e577ef7e1de48d79aaf16b8f0311f2eb831a6f48840b34bb48a8db41d7048700f2c50bd27c2344a185d3e8576706632fd038bedc36945f2086f839e9585e718c881466b42f427b7c5f1fee22c5c5d623f35e43533c1b0cca051d503481f4d32256173998923d03007b88481e9214c4c3ad0017228593ac6426735016d538f8d83e17ee6bcab20c4e15c028a1a33e889a231aad0f5a62c69b0fa8733bb56d850fd76051ad09e7ac5ebce276ac39e4d43816259a0363f35a69782482af39ba1f8c94a760ae6ce63374f46b7d9a04b8c3f74055c4583fbf6d2b4bce70f51f7ecd605f2cf24d5ac8c139e8ba52220ae570238b9bff68156a60dd99aa1eb7ab748cbc66461483cfa03fef266f70c1336a8a1d0fb4411bc422451e5c872438ae3ee490c3f77016d65958f0f9f4c2d043d56cfb7705584b8676be624c84b7649d61e80cc88ecd88760139b655138b78f603a5768b1e254ff3475c7783c66bc7495f4dc5b327d4fd7bd8c8b564bf6153f3ab3ec763610dc9b2afe75a471ba737ababe45b415c9a9107b4aa056f5041530b6a5f26bc6e650072749531c08dc41a8842e0ecf0c7ce0cefefe82cf0573dfcb95a89cf1e0dc57ffba18d9d495cc932025b69cf321d86d3a6d10037ba40285f9d1ce32df35b52f30dfd432932923df7900dcee47649e39f9deb6ed52138de03f9e0027cf5aa3b9383cf94066d1b9602c01e9099c0ed31e83542c844421ffc5d3ff9690fba33cae23bb6c0f48b89c69afca214e3ba435f"}]}, 0x101c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) pipe$auto(0x0) getrandom$auto(&(0x7f0000000080)='s+/\x00', 0x3, 0x10001) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) 5.071224522s ago: executing program 1 (id=884): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x680b40, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb9, 0xfffffffffffffffa, 0x48003) (async) mmap$auto(0x6, 0x8, 0x5, 0xacdb, 0x5, 0x0) (async) socket(0xa, 0x801, 0x106) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) timerfd_create$auto(0x7, 0x0) (async) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x44201, 0x0) (async) timerfd_gettime$auto(0x4, 0x0) listen$auto(0x3, 0x83) (async) setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x9) (async) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r0, 0x64c6, 0x1e2) 4.552084906s ago: executing program 5 (id=885): socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) (async) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) pread64$auto(r1, 0x0, 0x1fffe001, 0xb) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r0) (async) socket(0x2, 0x80002, 0x73) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendto$auto(r0, 0x0, 0x8, 0x101, &(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0xe0384cf543247b2f}, 0x1a) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xf, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x2100000, 0x7fffffff, 0xfffffffffffffffe, 0x1, 0x0, 0x2000000000000e8, 0x0, 0x4, 0x0, 0x8}) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) (async, rerun: 32) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x40502, 0x0) (rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x101004, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async, rerun: 64) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) (rerun: 64) 3.214525608s ago: executing program 0 (id=886): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20881, 0x0) write$auto(0x3, 0x0, 0x81) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2, 0x10000001}, 0x6a) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x3) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(0x0, 0x3, 0x1, 0x0, &(0x7f0000000000)=0x14, 0x2) clock_settime$auto(0xffff418f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r1) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x40000, 0x0) read$auto(r2, &(0x7f0000000a80)='vdpa\x00', 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x801, 0x84) r4 = getsockopt$auto(r3, 0x84, 0x86, 0x0, &(0x7f0000000000)=0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2a, 0x2, 0xfffdfffa) syslog$auto(0x9, &(0x7f0000000200)='..\xfd\xadc\x89\xc9\xfd\xb4-lyx\x84 \x06\xdd\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') getdents64$auto(r5, 0x0, 0x18) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(0xffffffffffffffff, 0x4008af03, 0x0) 3.214005644s ago: executing program 1 (id=887): openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1e40, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r0, 0x40045564, r0) r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000180)=@bpf_attr_5={@target_fd, r0, 0x3, 0x2, r0, @relative_id=0x3, 0x10000}, 0x3) mmap$auto(0x6df, 0xc, 0xdf, 0xeb4, r1, 0x8001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) setsockopt$auto_SO_OOBINLINE(r2, 0x6173, 0xa, &(0x7f0000000000)='^\xd2:-\x00', 0x1) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCGDEBUG(r2, 0x80047441, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0xa6342, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)="3318a96b065d5c255667daa48467eab215cb") fcntl$auto_F_SETLEASE(r3, 0x400, 0x7) write$auto(0x3, 0x0, 0x7fffffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 3.212482688s ago: executing program 2 (id=888): syz_clone3(&(0x7f0000000580)={0x800000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000002c0), {0x15}, &(0x7f0000000440)=""/231, 0xe7, &(0x7f0000000300)=""/186, &(0x7f0000000540)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) prctl$auto(0x3, 0x9, r0, 0x100000000002, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x1, 0x84) ioctl$auto_FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000080)="d786d318e2f67356a6bd48591c932386d5e8cdb0c7c62c479631cf644777a36a05e2dbcffb909b66cb918c2a30703fa6e9ecceedf37c4a2294f4ec72bb492753ad3494ea98ed13be78e35813c1d49158f6f059a098c54e1c2f064862bed9371fa0a566db5b99c57c5a53f9efbb1dabcba33455268e4ba9be49d6dd8ff5434f8f9b83624ab2fd47caad8170c89448ea0af74c13fafa74bff9667a95fd1f47d098318c6a638b050036f749c57bd0a510b8976e5da62eb4601fb7771a66056eff8c93006df62522f771430d669bd73260a96b2c4a105d388bbdb695f375cf3da39843") r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x33, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/orangefs/stats/reads\x00', 0x2000, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioperm$auto(0x7, 0x6, 0x10) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000001c0)=""/229, 0xe5) setsockopt$auto(r1, 0x0, 0x60, 0x0, 0x6f7250c4) 3.152678076s ago: executing program 5 (id=889): mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) pipe$auto(0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x9) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) ioctl$auto_FS_IOC_GETFLAGS(r0, 0x80086601, 0x8000000000000001) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182, 0x0) setpriority$auto(0x7, 0x8, 0x8) keyctl$auto(0x9, 0x0, 0xfffffffffffffffd, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x1e, 0x1, 0x1) setrlimit$auto(0x4, &(0x7f0000000040)={0x4, 0x5}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) io_uring_setup$auto(0x85, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x14, 0x7, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffd, 0x4000000000009, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) writev$auto(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000240)="0025d75b3c1c3e252688f438fd8259c7d00db0a9f5b9e0dc41f767dad45fc66cabd54f99487f5682a9006e3e795710ad2437ce1737fa3b60d8cce5c63d58731c95ae1ce1fcbb5f96f1263ef3b051a1a8d31ad667c423287cf97094eb55ad08fae4f80f87ee019c863f279a86e4d2e5d09d81d15ce8486c31e0de04f2d261bcd78bc86a3602c52beb5ed2a601b8529653a6cd76a70f83aecf8999aefd2a4b4ea950c34584b0175fd955d77e4409bf4c546d13a6d28c8443d6f061b0e979e814624d325b2aa610658f61658db2d4", 0x27}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) close_range$auto(0x2, 0x8, 0x2) finit_module$auto(0x1, 0xfffffffffffffffc, 0x1) setsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x4, 0x40, &(0x7f0000000000)='.\x00', 0x9) connect$auto(0x3, &(0x7f00000018c0)=@phonet={0x23, 0xb9, 0x3, 0x5}, 0x55) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)="000004") io_uring_setup$auto(0x1, 0x0) 2.698756639s ago: executing program 5 (id=890): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xb24266d9b7231c3d, 0x800, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x7, 0x7fffffff, 0x0, 0x400000000031, 0x401, 0x8000) r1 = wait4$auto(0xffffffffffffffff, &(0x7f00000000c0)=0xe, 0xdcc, &(0x7f0000000100)={{0xf8, 0x1}, {0x7ff, 0x7855}, 0x3, 0x7ff, 0x100, 0x100000000, 0x6, 0x5, 0xe8d5, 0x3a, 0x8, 0x8, 0xa, 0x5, 0x4, 0x137c}) r2 = prctl$auto(0x1000000003b, 0x1, r1, 0x9, 0x45be) getsockopt$auto_SO_INCOMING_NAPI_ID(r2, 0x3, 0x38, &(0x7f0000000000)='nl80211\x00', &(0x7f0000000080)=0x5) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x9e6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x83) 2.613504255s ago: executing program 2 (id=891): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x2, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40000403c6f2b, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_SMC_NETLINK_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)={0x1014, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, "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"}, 0x1014}, 0x1, 0x0, 0x0, 0x4}, 0xa4baf30b788b7f2) sendmsg$auto_TIPC_NL_NET_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)={0x14, r1, 0x492a92567041df2f, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0\x00', 0x48000, 0x0) ioctl$auto_MEMGETINFO(r6, 0x80204d01, &(0x7f0000000240)={0x40, 0xfffffff0, 0x4, 0x5, 0x3, 0x9}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x13d603, 0x0) 2.148804323s ago: executing program 0 (id=892): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60182, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40000, 0x0) sysfs$auto(0x80002, 0x6, 0xfffffffffffffffe) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x400, 0x3, 0x8) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, "434b638d1d"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x844) writev$auto(r2, &(0x7f00000000c0)={&(0x7f0000000040)="bdd8c7d8fde688cceb608c0318694e8bfbe9486743afeb696c65999b158022770931e0826ce6cc29d268cbe95670e3a5a19c8d9b0d695ce78dbe4dafb2545acc0e1f4be42ad573f4c5cef49682d93f9079fdfa94c9485dd60e87d225948f3262457dacd7fd1686f94e10f05de59e3462b0b990add0428db36b33d40a88", 0x3}, 0x6) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 1.973257348s ago: executing program 1 (id=893): r0 = socket(0x6, 0x2, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r2, &(0x7f0000000240)={0x0, 0x4}, 0x6) r3 = mq_open$auto(&(0x7f0000000040)='/dev/ttyS0\x00', 0x7, 0x4, &(0x7f0000000080)={0x7fffffffffffffff, 0x8, 0x2, 0x400}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x4a0842, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r6) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x8000000000000001, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) msgctl$auto_MSG_STAT(0x4, 0xb, &(0x7f0000001800)={{0x3, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x6352}, &(0x7f0000001d80)=0x7f, &(0x7f00000017c0)=0x1, 0x3, 0x7, 0x9, 0x2, 0x7, 0x4, 0x0, 0x5, @raw=0x7, @raw=0x6}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001d40)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001880)=ANY=[@ANYBLOB="60040000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0400d10014004000fe8000000000000000000000000000bb08000400", @ANYRES32=r8, @ANYBLOB="1c00a38004004e800400748008004c00", @ANYRES32=r1, @ANYBLOB="0400ad800400ba80c0a485601cb8c9798ecd73c55ea20ac6b2e3c22d065d8408e3af5a929fb813cbbc5d1563f4b14662ee8b91b5424906124ed1cccba9332937f94b49173025307ea9e1a7d19e37ea3bc41eeda3f78f9f405d71511f78e2dc01ff8eba2302f2f439144c0d81a70b05fdc53bd29f161eb850f3a72abe1132936387003c800400fd801400890000000000000000000000000000000001ce7eb458ef039f769ad5992550ef07430400c4800cddfc008067b717be6199c02a1328da9c5d7f50ea67f043e69ccdf80cee21c8f42c6a141b87960da4387bc3f4af7308000700ffffffff040027800c00db0008000000000000000008002400"/268, @ANYRES32=r9, @ANYBLOB='\x00'], 0x460}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040) setsockopt$auto_SO_RCVLOWAT(r5, 0x2, 0x12, &(0x7f0000000400)='7\x00\x00\xec\x007\xfe(\xbd\x1c\xa4\b\x00\x00\x00\x86\xf6\xa3\x00kO\xb9\xcd\xb0\x86\xe0yK\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:e\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xbc\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacnQ>\aH\xf6\xd6`/f\xcf', 0x1) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), 0xffffffffffffffff) unshare$auto(0x40000080) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) write$auto(r10, 0x0, 0x400000000003) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000016c0)={{r4, &(0x7f00000002c0), 0x7, &(0x7f00000001c0)="36660b2d66c73160b2995873677ce00a5cbd6975c243c8586fec5c7b7b6448cefc01", 0xf2c, &(0x7f0000000200)="1353cc25ec09b5a1b52ba03e585922cff6bdc4904048", &(0x7f0000000380)=0xffffffff}, 0x80000001, &(0x7f00000003c0)={0xf, 0xfffffe01, 0x0, &(0x7f00000004c0)="d9b6fe23d3ea5902393be8f0184a9e28436da976d3aa4959393f66b536f9049980ecf8127aa8878e2f3d57c1f5dcf371d63ae1bbc3f586721fc256be4357dbaaa49dd9a5fa36f8adf95abca2fb95919d16f6a08f36d536e363801660be35c6686078faa446cb6e791b36d1905628d88bdb946211312f5a727f755235dcb82ea06e3d080f56c022c624cd02a44aa920585389164cd93d256f6b4c65cda3b7b8ed8cdfec06ce87771207e61496ccff4684", 0xeca, 0x8}}) bind$auto(0xffffffffffffffff, &(0x7f0000001dc0)=@in={0x2, 0x4f24, @local}, 0x3) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) r11 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r11, 0xc1105511, &(0x7f0000000080)={{@raw=0x1000, 0x7ff, 0xa, 0xb, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb"}, 0xfffffffc, 0xfffffffe, 0x2, @raw=0x31c7bc85, @enumerated={0x1000, 0x3, "013d5144c830bb2d19afc38f8dc0fd1b1adeee2772267b71a3e9451c2d391f1e43314f35572235b028537fec00000000000300", 0x4, 0x80}, "18a817f26a5c7f8773b2dbc01a81805359eeadc8357752b72fa176254d8797cdffd02539e383a07983eeddcd24b626f54ad9d763dcdc91a4af8b7c848ceb55a7"}) 1.678624744s ago: executing program 5 (id=894): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x1a, 0x2, 0x7ffc) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@phonet={0x23, 0xc, 0x4, 0x7}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, r0, 0x8000) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x4301, 0x0) pread64$auto(r2, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x12, 0xfffffffffffffffa, 0xe4) r4 = socket(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf254400000005018793b6b3f548ea000000050060006000000004000b00000000"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20000800) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x583841, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, 0x0, 0x85) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r7) sendmsg$auto_NBD_CMD_STATUS(r7, 0x0, 0x4008050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) 1.547923712s ago: executing program 2 (id=895): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) (async) r0 = getpid() (async) mmap$auto(0x2, 0x2, 0x3, 0x1f, 0xfffffffffffffff7, 0x0) r1 = socket(0x8, 0x2, 0x6) getsockopt$auto(r1, 0x1000000a, 0x1, 0x0, 0x0) (async, rerun: 64) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r0, 0x80) (rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000300), 0x505442, 0x0) (async) mmap$auto(0x0, 0xe983, 0x6, 0x20000000000eb1, 0xffffffffffffffff, 0x8000) (async) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) (async) r2 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r2, 0x0, 0x0) (async, rerun: 32) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (rerun: 32) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) pread64$auto(r3, 0x0, 0x6, 0x7d94) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) set_tid_address$auto(&(0x7f0000000040)=0x14) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) r6 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000480), 0x82200, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f00000004c0)={0x5, 0x2e9, [{0xffffffffffffffff, 0x0, 0x5, 0xd}, {0xffffffffffffffff, 0x0, 0xffff, 0x4}, {0xffffffffffffffff, 0x0, 0xc43, 0x3}]}) pwrite64$auto(0xffffffffffffffff, 0x0, 0x8001, 0x5) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1.255115984s ago: executing program 0 (id=896): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x581643, 0x0) socket(0x26, 0x800, 0x0) dup2$auto(0x0, 0x3) mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000600)={0x0, 0x6, 0x9, 0x401, 0x7, 0xffffffffffffffff}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0x20000000000008ff, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x5, &(0x7f0000000280)=0xfb, 0x400, 0x3) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7ffffffffffffffb, 0x3) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x63, 0x0, &(0x7f00000000c0)=0x1e) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r1, &(0x7f0000000640)=""/188, 0xbc) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1, 0x10, 0x401, 0x948e, 0x4000000000000002, 0x15f4da0a, 0x5, 0x3, 0x3, 0x2000080000001, 0x16, 0x6d39, 0xf, 0x5, 0x1]}, 0x0) 157.969084ms ago: executing program 1 (id=897): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) madvise$auto(0x6, 0x80000000, 0x269) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) mprotect$auto(0x12c7, 0x806120, 0x8) mprotect$auto(0xfffffffffffff54b, 0x81, 0xbd4) 157.689225ms ago: executing program 5 (id=898): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20044085}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) exit$auto(0xf30) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1d, 0x2, 0x6) poll$auto(0x0, 0x2, 0xc) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0xff, 0x0, 0x8}, {0x8, 0x7, 0x1}, {0x800, 0x80000000, 0x7}, {0x3, 0x2, 0x4}]}) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r5) writev$auto(r2, &(0x7f0000000300)={&(0x7f0000000280)="9b3fb1a54062696dcf0b8292b5bf0d", 0x7}, 0xaf) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="be000000", @ANYRES16=r6, @ANYBLOB="200026bd7000fddbdf2509000000a8000e80280051800400578014005800fc01000000000000000000000000000104004b800800e00005000000f4678722ccbfdd75e371861ad4072aa87afad83bcc22983537bc8c8a8c3343d32ce92da780dfefd0aecf2f3d234dad47b52118d19919e4dcc5142ae3efa515a2f01f59e58afb965f454506cb543b5f232b5502bdfb66dc7d73c09f6d8431b6aac5ba21d9a18c7eb8fa93cd436604d295d44b8f7f247ecc3690e023ca"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008805) 151.525414ms ago: executing program 0 (id=905): mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r0, 0x9, &(0x7f0000000040)='{6y\xfa\xd6\bk\xf0\xe3\n', 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000d3e, 0x1, 0xffffffffffffffeb, 0x7, 0x2, 0x10001, 0x3, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x8, 0x2, 0x1]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) mremap$auto(0x110c230000, 0x7fffffffe000, 0x101, 0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0182, 0x0) readv$auto(r3, 0x0, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r5 = setfsuid$auto(0xffffffffffffffff) shmctl$auto_SHM_INFO(0xa2f, 0xe, &(0x7f0000000640)={{0x5, r5, 0xee01, 0xfffffffd, 0x3, 0x5, 0x9ea}, 0x20001, 0x3, 0x986e, 0xfffffffffffffff8, @inferred, @inferred=0xffffffffffffffff, 0x200, 0x0, &(0x7f00000001c0)="bea15593c82475fd5248a63a91759021d6e4fcfc88a7e58ca6a168b90588e0804889015fa5fef2f444b534f014f85474cfced4f3723c3e2f508d173b8c5e22bd07247a0c1176cd041ea2f5923feebaecefa5f8245cc1bc543f5e9bb491615411fea1576dfcb36e4954f971d67555ab1bbd25ffc3e78213766b258f9fe76122b6f27631d5b19b91a0735ae3914524eb700e568be650d4b1bcd3ab21faa89b0324b352def14eec477a83703ca7f9570d7b5b5c8cf1c1241bc2", &(0x7f0000000340)="b58f21a22cc64c6523596578f2f6e69da241c537e192500273f1fed4f02fb9c96843f4d336c9d16f0990c945fa4eeb40592c140337326fedaff73c7f3cdefba8044bbe6f634b42b9690ccca4f2d9997ad86d54b89fb6921a6beb2b571610e337169516ae3d7884eb83343e8b177976ddf075a17011e905ef72fb58830c7171055b922df9a7c8"}) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="6d160000215a23fa667eaf851cdccc4c746e99640aaa469ba20dc288d4cc01", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf250f000000d414068008008c00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00'], 0x166c}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0xec3, 0x9) io_setup$auto(0x7ffe, 0x0) gettimeofday$auto(0x0, &(0x7f0000000080)={0x3, 0xdd6}) 0s ago: executing program 2 (id=899): gettid() r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fff) setsockopt$auto_SO_DEBUG(r0, 0x6, 0x1, 0x0, 0xda3) r2 = socket(0xa, 0x2, 0xfffffffc) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), r2) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x2c, 0x2, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x6e}]}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8402, 0x0) kernel console output (not intermixed with test programs): __pfx_do_mmap+0x10/0x10 [ 224.332875][ T7709] ? __pfx_down_write_killable+0x10/0x10 [ 224.332904][ T7709] vm_mmap_pgoff+0x29e/0x470 [ 224.332958][ T7709] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 224.333003][ T7709] ? __pfx___might_resched+0x10/0x10 [ 224.333049][ T7709] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 224.333095][ T7709] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 224.333144][ T7709] ksys_mmap_pgoff+0x7d/0x5c0 [ 224.333188][ T7709] ? xfd_validate_state+0x61/0x180 [ 224.333224][ T7709] __x64_sys_mmap+0x125/0x190 [ 224.333260][ T7709] do_syscall_64+0xcd/0xf80 [ 224.333312][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.333345][ T7709] RIP: 0033:0x7fcf1dd8f7c9 [ 224.333370][ T7709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.333400][ T7709] RSP: 002b:00007fcf1ece9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 224.333430][ T7709] RAX: ffffffffffffffda RBX: 00007fcf1dfe5fa0 RCX: 00007fcf1dd8f7c9 [ 224.333452][ T7709] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 224.333470][ T7709] RBP: 00007fcf1de13f91 R08: fffffffffffffffa R09: 0000000000008000 [ 224.333490][ T7709] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 224.333510][ T7709] R13: 00007fcf1dfe6038 R14: 00007fcf1dfe5fa0 R15: 00007fff7ba8d068 [ 224.333553][ T7709] [ 227.130349][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'. [ 227.776414][ T7760] netlink: 62 bytes leftover after parsing attributes in process `syz.4.305'. [ 228.149274][ T7765] net_ratelimit: 6 callbacks suppressed [ 228.150491][ T7765] netlink: zone id is out of range [ 228.181865][ T7765] netlink: zone id is out of range [ 228.187493][ T7765] netlink: zone id is out of range [ 228.192826][ T7765] netlink: zone id is out of range [ 228.202207][ T7765] netlink: zone id is out of range [ 228.228870][ T7765] netlink: zone id is out of range [ 228.285668][ T7765] netlink: zone id is out of range [ 228.323254][ T7765] netlink: zone id is out of range [ 228.364384][ T7765] netlink: zone id is out of range [ 228.390008][ T7765] netlink: zone id is out of range [ 230.673832][ T7807] netlink: 338 bytes leftover after parsing attributes in process `syz.2.315'. [ 231.252477][ T7818] nfs: Bad value for 'source' [ 232.842009][ T7810] FAULT_INJECTION: forcing a failure. [ 232.842009][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 232.855799][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT(full) [ 232.855840][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.855860][ T7810] Call Trace: [ 232.855870][ T7810] [ 232.855882][ T7810] dump_stack_lvl+0x16c/0x1f0 [ 232.855939][ T7810] should_fail_ex+0x512/0x640 [ 232.855978][ T7810] ? kmem_cache_alloc_noprof+0x62/0x770 [ 232.856024][ T7810] should_failslab+0xc2/0x120 [ 232.856077][ T7810] kmem_cache_alloc_noprof+0x83/0x770 [ 232.856117][ T7810] ? kmem_cache_alloc_noprof+0x221/0x770 [ 232.856156][ T7810] ? anon_vma_fork+0xe6/0x620 [ 232.856200][ T7810] ? anon_vma_fork+0xe6/0x620 [ 232.856240][ T7810] anon_vma_fork+0xe6/0x620 [ 232.856273][ T7810] ? vm_area_dup+0x5a1/0x8d0 [ 232.856311][ T7810] dup_mmap+0x12d3/0x20e0 [ 232.856357][ T7810] ? __pfx_dup_mmap+0x10/0x10 [ 232.856438][ T7810] copy_process+0x3b9f/0x7430 [ 232.856489][ T7810] ? preempt_schedule_thunk+0x16/0x30 [ 232.856541][ T7810] ? __pfx_copy_process+0x10/0x10 [ 232.856592][ T7810] ? find_held_lock+0x2b/0x80 [ 232.856644][ T7810] ? futex_private_hash_put+0x160/0x1b0 [ 232.856688][ T7810] kernel_clone+0xfc/0x910 [ 232.856738][ T7810] ? __pfx_futex_wake+0x10/0x10 [ 232.856780][ T7810] ? __pfx_kernel_clone+0x10/0x10 [ 232.856823][ T7810] ? __pfx_vfs_writev+0x10/0x10 [ 232.856892][ T7810] __do_sys_clone+0xce/0x120 [ 232.856942][ T7810] ? __pfx___do_sys_clone+0x10/0x10 [ 232.857015][ T7810] ? xfd_validate_state+0x61/0x180 [ 232.857042][ T7810] ? __pfx_do_writev+0x10/0x10 [ 232.857098][ T7810] do_syscall_64+0xcd/0xf80 [ 232.857152][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.857186][ T7810] RIP: 0033:0x7fb7d198f7c9 [ 232.857219][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.857251][ T7810] RSP: 002b:00007fb7cfbf5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 232.857282][ T7810] RAX: ffffffffffffffda RBX: 00007fb7d1be5fa0 RCX: 00007fb7d198f7c9 [ 232.857304][ T7810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 232.857325][ T7810] RBP: 00007fb7d1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.857345][ T7810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.857364][ T7810] R13: 00007fb7d1be6038 R14: 00007fb7d1be5fa0 R15: 00007ffe7351df88 [ 232.857411][ T7810] [ 233.708742][ T7841] FAULT_INJECTION: forcing a failure. [ 233.708742][ T7841] name failslab, interval 1, probability 0, space 0, times 0 [ 233.738037][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.2.324 Not tainted syzkaller #0 PREEMPT(full) [ 233.738083][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.738102][ T7841] Call Trace: [ 233.738113][ T7841] [ 233.738125][ T7841] dump_stack_lvl+0x16c/0x1f0 [ 233.738181][ T7841] should_fail_ex+0x512/0x640 [ 233.738218][ T7841] ? kmem_cache_alloc_noprof+0x62/0x770 [ 233.738264][ T7841] should_failslab+0xc2/0x120 [ 233.738315][ T7841] kmem_cache_alloc_noprof+0x83/0x770 [ 233.738357][ T7841] ? dup_fd+0x52/0xc70 [ 233.738412][ T7841] ? dup_fd+0x52/0xc70 [ 233.738456][ T7841] dup_fd+0x52/0xc70 [ 233.738518][ T7841] __do_sys_close_range+0x4ca/0x730 [ 233.738576][ T7841] ? __pfx___do_sys_close_range+0x10/0x10 [ 233.738642][ T7841] do_syscall_64+0xcd/0xf80 [ 233.738694][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.738728][ T7841] RIP: 0033:0x7fb7d198f7c9 [ 233.738754][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.738785][ T7841] RSP: 002b:00007fb7cfbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 233.738825][ T7841] RAX: ffffffffffffffda RBX: 00007fb7d1be5fa0 RCX: 00007fb7d198f7c9 [ 233.738847][ T7841] RDX: 0000000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 233.738868][ T7841] RBP: 00007fb7d1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.738888][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.738907][ T7841] R13: 00007fb7d1be6038 R14: 00007fb7d1be5fa0 R15: 00007ffe7351df88 [ 233.738949][ T7841] [ 233.763884][ T7849] netlink: 338 bytes leftover after parsing attributes in process `syz.0.326'. [ 235.726104][ T7893] binder: BINDER_SET_CONTEXT_MGR already set [ 235.760181][ T7893] binder: 7890:7893 ioctl 4018620d 9 returned -16 [ 236.670611][ T7904] input: jJǸ-9%vJ86 as /devices/virtual/input/input8 [ 242.636350][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.655450][ T7965] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 242.768125][ T7965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.825329][ T7965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.963424][ T7965] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.015806][ T7965] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 243.344463][ T7965] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 244.794625][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.874481][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.046047][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 247.124307][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 247.457955][ T8016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.196762][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 251.295591][ T8073] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 252.028589][ T8085] FAULT_INJECTION: forcing a failure. [ 252.028589][ T8085] name failslab, interval 1, probability 0, space 0, times 0 [ 252.064683][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(full) [ 252.064715][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.064733][ T8085] Call Trace: [ 252.064741][ T8085] [ 252.064753][ T8085] dump_stack_lvl+0x16c/0x1f0 [ 252.064802][ T8085] should_fail_ex+0x512/0x640 [ 252.064829][ T8085] ? __kvmalloc_node_noprof+0x129/0xa40 [ 252.064867][ T8085] should_failslab+0xc2/0x120 [ 252.064906][ T8085] __kvmalloc_node_noprof+0x14a/0xa40 [ 252.064941][ T8085] ? lockdep_init_map_type+0x5c/0x270 [ 252.064966][ T8085] ? alloc_netdev_mqs+0xc91/0x1550 [ 252.065007][ T8085] ? alloc_netdev_mqs+0xc91/0x1550 [ 252.065040][ T8085] alloc_netdev_mqs+0xc91/0x1550 [ 252.065081][ T8085] slip_open+0x35c/0x1150 [ 252.065126][ T8085] ? __pfx___might_resched+0x10/0x10 [ 252.065161][ T8085] ? find_held_lock+0x2b/0x80 [ 252.065191][ T8085] ? __pfx_slip_open+0x10/0x10 [ 252.065228][ T8085] ? down_write+0x14d/0x200 [ 252.065253][ T8085] ? __pfx_slip_open+0x10/0x10 [ 252.065289][ T8085] tty_ldisc_open+0x9f/0x120 [ 252.065320][ T8085] tty_set_ldisc+0x32b/0x780 [ 252.065355][ T8085] tty_ioctl+0xc2d/0x1650 [ 252.065390][ T8085] ? __pfx_tty_ioctl+0x10/0x10 [ 252.065433][ T8085] ? find_held_lock+0x2b/0x80 [ 252.065463][ T8085] ? hook_file_ioctl_common+0x144/0x410 [ 252.065498][ T8085] ? __fget_files+0x20e/0x3c0 [ 252.065537][ T8085] ? __pfx_tty_ioctl+0x10/0x10 [ 252.065572][ T8085] __x64_sys_ioctl+0x18e/0x210 [ 252.065604][ T8085] do_syscall_64+0xcd/0xf80 [ 252.065642][ T8085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.065693][ T8085] RIP: 0033:0x7f6e22b8f7c9 [ 252.065712][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.065735][ T8085] RSP: 002b:00007f6e2397e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.065757][ T8085] RAX: ffffffffffffffda RBX: 00007f6e22de6090 RCX: 00007f6e22b8f7c9 [ 252.065772][ T8085] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 000000000000000b [ 252.065786][ T8085] RBP: 00007f6e22c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 252.065800][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.065813][ T8085] R13: 00007f6e22de6128 R14: 00007f6e22de6090 R15: 00007ffc9fb0e9e8 [ 252.065848][ T8085] [ 254.639319][ T8108] UHID_CREATE from different security context by process 464 (syz.0.376), this is not allowed. [ 254.666364][ T8108] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 259.370277][ T8177] net_ratelimit: 5 callbacks suppressed [ 259.370304][ T8177] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 259.606520][ T30] audit: type=1804 audit(1766713521.234:4): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.390" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format" dev="tracefs" ino=19680823 res=1 errno=0 [ 261.014380][ T8199] usbcore.quirks: string doesn't fit in 127 chars. [ 261.079754][ T8200] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 262.608465][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 264.130858][ T8237] FAULT_INJECTION: forcing a failure. [ 264.130858][ T8237] name failslab, interval 1, probability 0, space 0, times 0 [ 264.195747][ T8238] zswap: compressor not available [ 264.213431][ T8237] CPU: 0 UID: 0 PID: 8237 Comm: syz.0.403 Not tainted syzkaller #0 PREEMPT(full) [ 264.213476][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.213496][ T8237] Call Trace: [ 264.213506][ T8237] [ 264.213518][ T8237] dump_stack_lvl+0x16c/0x1f0 [ 264.213576][ T8237] should_fail_ex+0x512/0x640 [ 264.213611][ T8237] ? kmem_cache_alloc_noprof+0x62/0x770 [ 264.213657][ T8237] should_failslab+0xc2/0x120 [ 264.213707][ T8237] kmem_cache_alloc_noprof+0x83/0x770 [ 264.213736][ T8237] ? __proc_create+0x2c8/0x8d0 [ 264.213774][ T8237] ? __proc_create+0x2c8/0x8d0 [ 264.213803][ T8237] __proc_create+0x2c8/0x8d0 [ 264.213836][ T8237] ? __pfx___proc_create+0x10/0x10 [ 264.213873][ T8237] ? _raw_write_unlock+0x28/0x50 [ 264.213907][ T8237] ? proc_register+0x559/0x8b0 [ 264.213942][ T8237] proc_create_reg+0x7d/0x180 [ 264.213978][ T8237] ? __pfx_sockstat6_seq_show+0x10/0x10 [ 264.214005][ T8237] proc_create_net_single+0x86/0x180 [ 264.214076][ T8237] ? __pfx_proc_create_net_single+0x10/0x10 [ 264.214127][ T8237] ? __pfx_ndisc_net_init+0x10/0x10 [ 264.214169][ T8237] ? __pfx_ipv6_proc_init_net+0x10/0x10 [ 264.214204][ T8237] ipv6_proc_init_net+0x56/0x1e0 [ 264.214246][ T8237] ops_init+0x1e2/0x5f0 [ 264.214294][ T8237] setup_net+0x11d/0x3a0 [ 264.214340][ T8237] ? __pfx_setup_net+0x10/0x10 [ 264.214382][ T8237] ? lockdep_init_map_type+0x5c/0x270 [ 264.214417][ T8237] ? mutex_init_lockep+0x110/0x150 [ 264.214445][ T8237] copy_net_ns+0x351/0x7c0 [ 264.214483][ T8237] create_new_namespaces+0x3ea/0xab0 [ 264.214524][ T8237] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 264.214560][ T8237] ksys_unshare+0x45b/0xa40 [ 264.214599][ T8237] ? __pfx_ksys_unshare+0x10/0x10 [ 264.214638][ T8237] ? xfd_validate_state+0x61/0x180 [ 264.214668][ T8237] __x64_sys_unshare+0x31/0x40 [ 264.214689][ T8237] do_syscall_64+0xcd/0xf80 [ 264.214728][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.214752][ T8237] RIP: 0033:0x7f6e22b8f7c9 [ 264.214771][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.214794][ T8237] RSP: 002b:00007f6e2399f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 264.214815][ T8237] RAX: ffffffffffffffda RBX: 00007f6e22de5fa0 RCX: 00007f6e22b8f7c9 [ 264.214830][ T8237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 264.214844][ T8237] RBP: 00007f6e22c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 264.214858][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.214872][ T8237] R13: 00007f6e22de6038 R14: 00007f6e22de5fa0 R15: 00007ffc9fb0e9e8 [ 264.214902][ T8237] [ 266.882478][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.895526][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.361819][ T30] audit: type=1800 audit(1766713528.994:5): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.412" name="discovery_nqn" dev="configfs" ino=19285 res=0 errno=0 [ 268.113246][ T8292] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 269.916519][ T8329] binder: 8327:8329 ioctl c00c620f 200000000540 returned -22 [ 269.950575][ T8332] FAULT_INJECTION: forcing a failure. [ 269.950575][ T8332] name failslab, interval 1, probability 0, space 0, times 0 [ 270.115904][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.1.421 Not tainted syzkaller #0 PREEMPT(full) [ 270.115935][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.115949][ T8332] Call Trace: [ 270.115956][ T8332] [ 270.115964][ T8332] dump_stack_lvl+0x16c/0x1f0 [ 270.116004][ T8332] should_fail_ex+0x512/0x640 [ 270.116029][ T8332] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 270.116068][ T8332] should_failslab+0xc2/0x120 [ 270.116104][ T8332] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 270.116139][ T8332] ? kvasprintf_const+0x66/0x1a0 [ 270.116171][ T8332] ? kvasprintf+0xbc/0x150 [ 270.116195][ T8332] kvasprintf+0xbc/0x150 [ 270.116219][ T8332] ? __pfx_kvasprintf+0x10/0x10 [ 270.116248][ T8332] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 270.116282][ T8332] ? __debug_object_init+0x2de/0x3d0 [ 270.116323][ T8332] kvasprintf_const+0x66/0x1a0 [ 270.116351][ T8332] kobject_set_name_vargs+0x5a/0x140 [ 270.116376][ T8332] dev_set_name+0xc7/0x100 [ 270.116411][ T8332] ? __pfx_dev_set_name+0x10/0x10 [ 270.116449][ T8332] ? lockdep_init_map_type+0x5c/0x270 [ 270.116474][ T8332] ? __init_waitqueue_head+0xca/0x150 [ 270.116508][ T8332] wakeup_source_device_create+0x204/0x2e0 [ 270.116544][ T8332] wakeup_source_sysfs_add+0x1c/0x90 [ 270.116576][ T8332] wakeup_source_register+0x154/0x3e0 [ 270.116605][ T8332] ep_create_wakeup_source+0x1dd/0x2e0 [ 270.116642][ T8332] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 270.116690][ T8332] ? do_epoll_ctl+0x1565/0x3790 [ 270.116733][ T8332] do_epoll_ctl+0x1f60/0x3790 [ 270.116781][ T8332] ? __pfx_do_epoll_ctl+0x10/0x10 [ 270.116817][ T8332] ? find_held_lock+0x2b/0x80 [ 270.116845][ T8332] ? __might_fault+0xe3/0x190 [ 270.116871][ T8332] ? __might_fault+0xe3/0x190 [ 270.116908][ T8332] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 270.116949][ T8332] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 270.116988][ T8332] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 270.117035][ T8332] do_syscall_64+0xcd/0xf80 [ 270.117072][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.117096][ T8332] RIP: 0033:0x7fcf1dd8f7c9 [ 270.117114][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.117136][ T8332] RSP: 002b:00007fcf1ecc8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 270.117157][ T8332] RAX: ffffffffffffffda RBX: 00007fcf1dfe6090 RCX: 00007fcf1dd8f7c9 [ 270.117172][ T8332] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 270.117185][ T8332] RBP: 00007fcf1de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.117199][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.117213][ T8332] R13: 00007fcf1dfe6128 R14: 00007fcf1dfe6090 R15: 00007fff7ba8d068 [ 270.117243][ T8332] [ 270.117410][ T8335] binder: 8327:8335 ioctl c00c620f 200000000540 returned -22 [ 270.828117][ T8337] FAULT_INJECTION: forcing a failure. [ 270.828117][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 270.869314][ T8337] CPU: 0 UID: 0 PID: 8337 Comm: syz.0.420 Not tainted syzkaller #0 PREEMPT(full) [ 270.869373][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.869393][ T8337] Call Trace: [ 270.869404][ T8337] [ 270.869417][ T8337] dump_stack_lvl+0x16c/0x1f0 [ 270.869475][ T8337] should_fail_ex+0x512/0x640 [ 270.869512][ T8337] ? __kmalloc_noprof+0xca/0x910 [ 270.869554][ T8337] should_failslab+0xc2/0x120 [ 270.869606][ T8337] __kmalloc_noprof+0xeb/0x910 [ 270.869643][ T8337] ? ring_buffer_read_start+0x1b9/0x500 [ 270.869697][ T8337] ? ring_buffer_read_start+0x1b9/0x500 [ 270.869740][ T8337] ring_buffer_read_start+0x1b9/0x500 [ 270.869788][ T8337] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 270.869831][ T8337] ? lockdep_init_map_type+0x5c/0x270 [ 270.869866][ T8337] ? ring_buffer_overruns+0x195/0x1f0 [ 270.869909][ T8337] tracing_open+0x93f/0xe10 [ 270.869956][ T8337] do_dentry_open+0x748/0x1590 [ 270.870006][ T8337] ? __pfx_tracing_open+0x10/0x10 [ 270.870055][ T8337] vfs_open+0x82/0x3f0 [ 270.870097][ T8337] path_openat+0x2078/0x3140 [ 270.870162][ T8337] ? __pfx_path_openat+0x10/0x10 [ 270.870230][ T8337] do_filp_open+0x20b/0x470 [ 270.870284][ T8337] ? __pfx_do_filp_open+0x10/0x10 [ 270.870376][ T8337] ? alloc_fd+0x471/0x7d0 [ 270.870441][ T8337] do_sys_openat2+0x121/0x290 [ 270.870479][ T8337] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.870535][ T8337] __x64_sys_openat+0x174/0x210 [ 270.870574][ T8337] ? __pfx___x64_sys_openat+0x10/0x10 [ 270.870631][ T8337] do_syscall_64+0xcd/0xf80 [ 270.870687][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.870721][ T8337] RIP: 0033:0x7f6e22b8f7c9 [ 270.870746][ T8337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.870780][ T8337] RSP: 002b:00007f6e2397e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.870811][ T8337] RAX: ffffffffffffffda RBX: 00007f6e22de6090 RCX: 00007f6e22b8f7c9 [ 270.870833][ T8337] RDX: 1a6b75d638828712 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 270.870854][ T8337] RBP: 00007f6e22c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.870875][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.870895][ T8337] R13: 00007f6e22de6128 R14: 00007f6e22de6090 R15: 00007ffc9fb0e9e8 [ 270.870941][ T8337] [ 271.346108][ T8342] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.423'. [ 271.416522][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 272.358419][ T8371] FAULT_INJECTION: forcing a failure. [ 272.358419][ T8371] name failslab, interval 1, probability 0, space 0, times 0 [ 272.436068][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz.0.427 Not tainted syzkaller #0 PREEMPT(full) [ 272.436114][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.436134][ T8371] Call Trace: [ 272.436145][ T8371] [ 272.436158][ T8371] dump_stack_lvl+0x16c/0x1f0 [ 272.436216][ T8371] should_fail_ex+0x512/0x640 [ 272.436254][ T8371] ? __kmalloc_noprof+0xca/0x910 [ 272.436295][ T8371] should_failslab+0xc2/0x120 [ 272.436348][ T8371] __kmalloc_noprof+0xeb/0x910 [ 272.436385][ T8371] ? lsm_blob_alloc+0x68/0x90 [ 272.436439][ T8371] ? lsm_blob_alloc+0x68/0x90 [ 272.436495][ T8371] lsm_blob_alloc+0x68/0x90 [ 272.436545][ T8371] security_prepare_creds+0x2f/0x270 [ 272.436595][ T8371] prepare_creds+0x5d6/0x940 [ 272.436638][ T8371] __sys_setfsgid+0xe3/0x380 [ 272.436683][ T8371] ? rcu_is_watching+0x12/0xc0 [ 272.436734][ T8371] do_syscall_64+0xcd/0xf80 [ 272.436786][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.436818][ T8371] RIP: 0033:0x7f6e22b8f7c9 [ 272.436844][ T8371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.436877][ T8371] RSP: 002b:00007f6e2399f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 272.436909][ T8371] RAX: ffffffffffffffda RBX: 00007f6e22de5fa0 RCX: 00007f6e22b8f7c9 [ 272.436930][ T8371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 272.436949][ T8371] RBP: 00007f6e22c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 272.436969][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.436988][ T8371] R13: 00007f6e22de6038 R14: 00007f6e22de5fa0 R15: 00007ffc9fb0e9e8 [ 272.437031][ T8371] [ 272.785324][ T7866] syz.4.325 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 272.801603][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.4.325 Not tainted syzkaller #0 PREEMPT(full) [ 272.801651][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.801665][ T7866] Call Trace: [ 272.801672][ T7866] [ 272.801682][ T7866] dump_stack_lvl+0x16c/0x1f0 [ 272.801723][ T7866] dump_header+0x101/0x960 [ 272.801752][ T7866] oom_kill_process+0x176/0x910 [ 272.801781][ T7866] out_of_memory+0x350/0x1700 [ 272.801807][ T7866] ? __lock_acquire+0x436/0x2890 [ 272.801833][ T7866] ? __pfx_out_of_memory+0x10/0x10 [ 272.801867][ T7866] mem_cgroup_out_of_memory+0x118/0x130 [ 272.801895][ T7866] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 272.801930][ T7866] ? do_raw_spin_unlock+0x172/0x230 [ 272.801963][ T7866] try_charge_memcg+0x695/0xd30 [ 272.802006][ T7866] ? __pfx_try_charge_memcg+0x10/0x10 [ 272.802043][ T7866] ? __print_lock_name+0x51/0xe0 [ 272.802074][ T7866] ? rcu_read_unlock+0x17/0x60 [ 272.802103][ T7866] charge_memcg+0x8a/0x230 [ 272.802140][ T7866] __mem_cgroup_charge+0x2b/0x1e0 [ 272.802165][ T7866] shmem_alloc_and_add_folio+0x50c/0xc20 [ 272.802199][ T7866] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 272.802228][ T7866] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 272.802262][ T7866] shmem_get_folio_gfp+0x67f/0x1610 [ 272.802295][ T7866] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 272.802331][ T7866] shmem_write_begin+0x1a4/0x3b0 [ 272.802360][ T7866] ? __pfx_shmem_write_begin+0x10/0x10 [ 272.802388][ T7866] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 272.802424][ T7866] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.802468][ T7866] generic_perform_write+0x3c4/0x900 [ 272.802500][ T7866] ? __pfx_generic_perform_write+0x10/0x10 [ 272.802544][ T7866] ? file_update_time_flags+0x35c/0x520 [ 272.802572][ T7866] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 272.802603][ T7866] shmem_file_write_iter+0x10e/0x140 [ 272.802637][ T7866] __kernel_write_iter+0x31a/0xb10 [ 272.802675][ T7866] ? __pfx___kernel_write_iter+0x10/0x10 [ 272.802708][ T7866] ? __up_read+0x2d1/0x700 [ 272.802737][ T7866] ? dump_user_range+0x756/0xb70 [ 272.802778][ T7866] dump_user_range+0x413/0xb70 [ 272.802820][ T7866] ? __pfx_dump_user_range+0x10/0x10 [ 272.802857][ T7866] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 272.802888][ T7866] ? __pfx_writenote+0x10/0x10 [ 272.802933][ T7866] elf_core_dump+0x29c3/0x3c10 [ 272.802969][ T7866] ? __pfx_elf_core_dump+0x10/0x10 [ 272.802989][ T7866] ? finish_task_switch.isra.0+0x207/0xbd0 [ 272.803022][ T7866] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.803056][ T7866] ? finish_task_switch.isra.0+0x207/0xbd0 [ 272.803092][ T7866] ? trace_sched_exit_tp+0xd1/0x110 [ 272.803126][ T7866] ? __schedule+0x10b9/0x6150 [ 272.803157][ T7866] ? 0xffffffffff600000 [ 272.803224][ T7866] ? vfs_coredump+0x2b85/0x55e0 [ 272.803258][ T7866] vfs_coredump+0x2b85/0x55e0 [ 272.803303][ T7866] ? __pfx_vfs_coredump+0x10/0x10 [ 272.803337][ T7866] ? __lock_acquire+0x436/0x2890 [ 272.803364][ T7866] ? __lock_acquire+0x436/0x2890 [ 272.803388][ T7866] ? lock_acquire+0x179/0x330 [ 272.803416][ T7866] ? lock_acquire+0x179/0x330 [ 272.803461][ T7866] ? arch_stack_walk+0xa6/0x100 [ 272.803500][ T7866] ? stack_trace_save+0x8e/0xc0 [ 272.803536][ T7866] ? __pfx_stack_trace_save+0x10/0x10 [ 272.803574][ T7866] ? stack_depot_save_flags+0x29/0x9b0 [ 272.803601][ T7866] ? __lock_acquire+0x436/0x2890 [ 272.803625][ T7866] ? kasan_save_stack+0x42/0x60 [ 272.803705][ T7866] ? proc_coredump_connector+0x2d1/0x4f0 [ 272.803742][ T7866] ? __pfx_proc_coredump_connector+0x10/0x10 [ 272.803786][ T7866] ? rcu_is_watching+0x12/0xc0 [ 272.803823][ T7866] get_signal+0x22e1/0x26d0 [ 272.803866][ T7866] ? __pfx_get_signal+0x10/0x10 [ 272.803897][ T7866] ? find_held_lock+0x2b/0x80 [ 272.803926][ T7866] ? fixup_vdso_exception+0x34b/0x400 [ 272.803969][ T7866] arch_do_signal_or_restart+0x8f/0x7a0 [ 272.804006][ T7866] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 272.804049][ T7866] ? do_user_addr_fault+0xa62/0x1370 [ 272.804083][ T7866] irqentry_exit+0x38a/0x8c0 [ 272.804122][ T7866] asm_exc_page_fault+0x26/0x30 [ 272.804144][ T7866] RIP: 0033:0x0 [ 272.804159][ T7866] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 272.804169][ T7866] RSP: 002b:000000000000000d EFLAGS: 00010217 [ 272.804187][ T7866] RAX: 0000000000000000 RBX: 00007f4e9bde6540 RCX: 00007f4e9bb8f7c9 [ 272.804201][ T7866] RDX: 0000200000000180 RSI: 0000000000000005 RDI: 0000000000000002 [ 272.804215][ T7866] RBP: 00007f4e9bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 272.804254][ T7866] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 272.804271][ T7866] R13: 00007f4e9bde65d8 R14: 00007f4e9bde6540 R15: 00007fff9ee637e8 [ 272.804313][ T7866] [ 273.277260][ T7866] memory: usage 307200kB, limit 307200kB, failcnt 36172 [ 273.317888][ T7866] memory+swap: usage 431532kB, limit 9007199254740988kB, failcnt 0 [ 273.403325][ T7866] kmem: usage 3184kB, limit 9007199254740988kB, failcnt 0 [ 273.574427][ T7866] Memory cgroup stats for /syz4: [ 273.574920][ T7866] cache 310722560 [ 273.583578][ T7866] rss 131072 [ 273.660387][ T7866] rss_huge 0 [ 273.665399][ T7866] shmem 310702080 [ 273.669188][ T7866] mapped_file 58933248 [ 273.673384][ T7866] dirty 0 [ 273.676996][ T7866] writeback 0 [ 273.680444][ T7866] workingset_refault_anon 315 [ 273.685305][ T7866] workingset_refault_file 1367 [ 273.690120][ T7866] swap 127315968 [ 273.694984][ T7866] swapcached 495616 [ 273.698914][ T7866] pgpgin 258553 [ 273.702384][ T7866] pgpgout 182555 [ 273.707563][ T7866] pgfault 90194 [ 273.711141][ T7866] pgmajfault 195 [ 273.714829][ T7866] inactive_anon 79552512 [ 273.719303][ T7866] active_anon 231714816 [ 273.723605][ T7866] inactive_file 12288 [ 273.727671][ T7866] active_file 0 [ 273.733892][ T7866] unevictable 0 [ 273.738652][ T7866] hierarchical_memory_limit 314572800 [ 273.744337][ T7866] hierarchical_memsw_limit 9223372036854771712 [ 273.758435][ T7866] total_cache 310722560 [ 273.762648][ T7866] total_rss 131072 [ 273.769663][ T7866] total_rss_huge 0 [ 273.774596][ T7866] total_shmem 310702080 [ 273.779844][ T7866] total_mapped_file 58933248 [ 273.909497][ T7866] total_dirty 0 [ 273.942474][ T7866] total_writeback 0 [ 273.959900][ T7866] total_workingset_refault_anon 315 [ 274.064132][ T8383] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 274.109403][ T7866] total_workingset_refault_file 1367 [ 274.406144][ T7866] total_swap 127315968 [ 274.723236][ T7866] total_swapcached 495616 [ 274.916575][ T7866] total_pgpgin 258553 [ 274.920630][ T7866] total_pgpgout 182555 [ 274.944490][ T7866] total_pgfault 90194 [ 274.949480][ T7866] total_pgmajfault 195 [ 274.964327][ T7866] total_inactive_anon 79552512 [ 274.988155][ T7866] total_active_anon 231714816 [ 275.014374][ T7866] total_inactive_file 12288 [ 275.018942][ T7866] total_active_file 0 [ 275.022965][ T7866] total_unevictable 0 [ 275.099262][ T7866] anon_cost 0 [ 275.114368][ T7866] file_cost 0 [ 275.123388][ T7866] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.325,pid=7866,uid=0 [ 275.273692][ T7866] Memory cgroup out of memory: Killed process 7866 (syz.4.325) total-vm:131884kB, anon-rss:1196kB, file-rss:48016kB, shmem-rss:32888kB, UID:0 pgtables:272kB oom_score_adj:1000 [ 275.549302][ T8391] zswap: compressor not available [ 276.318845][ T30] audit: type=1804 audit(1766713537.954:6): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.433" name="/newroot/102/file0" dev="tmpfs" ino=553 res=1 errno=0 [ 276.380693][ T7857] syz.4.325 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 276.403609][ T30] audit: type=1804 audit(1766713537.994:7): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.433" name="/newroot/102/file0" dev="tmpfs" ino=553 res=1 errno=0 [ 276.639728][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.4.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.639777][ T7857] Tainted: [L]=SOFTLOCKUP [ 276.639788][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.639805][ T7857] Call Trace: [ 276.639816][ T7857] [ 276.639827][ T7857] dump_stack_lvl+0x16c/0x1f0 [ 276.639883][ T7857] dump_header+0x101/0x960 [ 276.639922][ T7857] oom_kill_process+0x176/0x910 [ 276.639964][ T7857] out_of_memory+0x350/0x1700 [ 276.640000][ T7857] ? __lock_acquire+0x436/0x2890 [ 276.640038][ T7857] ? __pfx_out_of_memory+0x10/0x10 [ 276.640093][ T7857] mem_cgroup_out_of_memory+0x118/0x130 [ 276.640133][ T7857] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 276.640183][ T7857] ? do_raw_spin_unlock+0x172/0x230 [ 276.640229][ T7857] try_charge_memcg+0x695/0xd30 [ 276.640290][ T7857] ? __pfx_try_charge_memcg+0x10/0x10 [ 276.640342][ T7857] ? __print_lock_name+0x51/0xe0 [ 276.640387][ T7857] ? rcu_read_unlock+0x17/0x60 [ 276.640428][ T7857] charge_memcg+0x8a/0x230 [ 276.640478][ T7857] __mem_cgroup_charge+0x2b/0x1e0 [ 276.640513][ T7857] filemap_add_folio+0xe6/0x610 [ 276.640555][ T7857] ? __pfx_filemap_add_folio+0x10/0x10 [ 276.640608][ T7857] __filemap_get_folio_mpol+0x511/0xc60 [ 276.640672][ T7857] filemap_fault+0x684/0x29d0 [ 276.640721][ T7857] ? __pfx_filemap_fault+0x10/0x10 [ 276.640782][ T7857] ? __pfx_filemap_map_pages+0x10/0x10 [ 276.640815][ T7857] __do_fault+0x10d/0x490 [ 276.640855][ T7857] ? __pfx_filemap_map_pages+0x10/0x10 [ 276.640886][ T7857] do_fault+0xae4/0x1ad0 [ 276.640926][ T7857] ? __pfx_filemap_map_pages+0x10/0x10 [ 276.640964][ T7857] __handle_mm_fault+0x1919/0x2bb0 [ 276.641003][ T7857] ? __pfx___handle_mm_fault+0x10/0x10 [ 276.641035][ T7857] ? __pte_offset_map_lock+0x174/0x310 [ 276.641076][ T7857] ? find_held_lock+0x2b/0x80 [ 276.641128][ T7857] ? follow_page_pte+0x5cf/0x1390 [ 276.641178][ T7857] handle_mm_fault+0x3fe/0xad0 [ 276.641213][ T7857] __get_user_pages+0x54e/0x3590 [ 276.641270][ T7857] ? __pfx___get_user_pages+0x10/0x10 [ 276.641313][ T7857] ? __kernel_write_iter+0x5a5/0xb10 [ 276.641361][ T7857] get_dump_page+0x257/0x3d0 [ 276.641410][ T7857] ? __pfx_get_dump_page+0x10/0x10 [ 276.641454][ T7857] ? dump_user_range+0x756/0xb70 [ 276.641504][ T7857] dump_user_range+0x195/0xb70 [ 276.641558][ T7857] ? __pfx_dump_user_range+0x10/0x10 [ 276.641619][ T7857] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 276.641656][ T7857] ? __pfx_writenote+0x10/0x10 [ 276.641710][ T7857] elf_core_dump+0x29c3/0x3c10 [ 276.641753][ T7857] ? __pfx_elf_core_dump+0x10/0x10 [ 276.641794][ T7857] ? kasan_save_stack+0x33/0x60 [ 276.641830][ T7857] ? kasan_save_track+0x14/0x30 [ 276.641867][ T7857] ? __kasan_kmalloc+0xaa/0xb0 [ 276.641901][ T7857] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 276.641938][ T7857] ? vfs_coredump+0x1dd9/0x55e0 [ 276.641978][ T7857] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 276.642016][ T7857] ? irqentry_exit+0x38a/0x8c0 [ 276.642056][ T7857] ? asm_exc_page_fault+0x26/0x30 [ 276.642095][ T7857] ? 0xffffffffff600000 [ 276.642174][ T7857] ? vfs_coredump+0x2b85/0x55e0 [ 276.642214][ T7857] vfs_coredump+0x2b85/0x55e0 [ 276.642269][ T7857] ? __pfx_vfs_coredump+0x10/0x10 [ 276.642309][ T7857] ? __lock_acquire+0x436/0x2890 [ 276.642342][ T7857] ? __lock_acquire+0x436/0x2890 [ 276.642370][ T7857] ? lock_acquire+0x179/0x330 [ 276.642403][ T7857] ? lock_acquire+0x179/0x330 [ 276.642452][ T7857] ? arch_stack_walk+0xa6/0x100 [ 276.642499][ T7857] ? stack_trace_save+0x8e/0xc0 [ 276.642543][ T7857] ? __pfx_stack_trace_save+0x10/0x10 [ 276.642587][ T7857] ? stack_depot_save_flags+0x29/0x9b0 [ 276.642620][ T7857] ? __lock_acquire+0x436/0x2890 [ 276.642649][ T7857] ? kasan_save_stack+0x42/0x60 [ 276.642747][ T7857] ? proc_coredump_connector+0x2d1/0x4f0 [ 276.642793][ T7857] ? __pfx_proc_coredump_connector+0x10/0x10 [ 276.642846][ T7857] ? rcu_is_watching+0x12/0xc0 [ 276.642890][ T7857] get_signal+0x22e1/0x26d0 [ 276.642942][ T7857] ? __pfx_get_signal+0x10/0x10 [ 276.642979][ T7857] ? find_held_lock+0x2b/0x80 [ 276.643013][ T7857] ? fixup_vdso_exception+0x34b/0x400 [ 276.643064][ T7857] arch_do_signal_or_restart+0x8f/0x7a0 [ 276.643110][ T7857] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 276.643162][ T7857] ? do_user_addr_fault+0xa62/0x1370 [ 276.643202][ T7857] irqentry_exit+0x38a/0x8c0 [ 276.643249][ T7857] asm_exc_page_fault+0x26/0x30 [ 276.643275][ T7857] RIP: 0033:0x0 [ 276.643292][ T7857] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 276.643304][ T7857] RSP: 002b:000000000000000d EFLAGS: 00010217 [ 276.643325][ T7857] RAX: 0000000000000000 RBX: 00007f4e9bde6540 RCX: 00007f4e9bb8f7c9 [ 276.643343][ T7857] RDX: 0000200000000180 RSI: 0000000000000005 RDI: 0000000000000002 [ 276.643359][ T7857] RBP: 00007f4e9bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 276.643375][ T7857] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 276.643391][ T7857] R13: 00007f4e9bde65d8 R14: 00007f4e9bde6540 R15: 00007fff9ee637e8 [ 276.643428][ T7857] [ 277.385751][ T7857] memory: usage 299292kB, limit 307200kB, failcnt 36866 [ 277.392778][ T7857] memory+swap: usage 395556kB, limit 9007199254740988kB, failcnt 0 [ 277.773314][ T7857] kmem: usage 2816kB, limit 9007199254740988kB, failcnt 0 [ 277.827604][ T7857] Memory cgroup stats for /syz4: [ 277.827917][ T7857] cache 302796800 [ 278.004662][ T8406] FAULT_INJECTION: forcing a failure. [ 278.004662][ T8406] name failslab, interval 1, probability 0, space 0, times 0 [ 278.019449][ T7857] rss 126976 [ 278.048860][ T8420] vivid-007: ================= START STATUS ================= [ 278.057582][ T7857] rss_huge 0 [ 278.060849][ T7857] shmem 302796800 [ 278.074994][ T8420] vivid-007: Generate PTS: true [ 278.079954][ T8420] vivid-007: Generate SCR: true [ 278.092432][ T8406] CPU: 1 UID: 0 PID: 8406 Comm: syz.1.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.092488][ T8406] Tainted: [L]=SOFTLOCKUP [ 278.092500][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.092520][ T8406] Call Trace: [ 278.092531][ T8406] [ 278.092543][ T8406] dump_stack_lvl+0x16c/0x1f0 [ 278.092603][ T8406] should_fail_ex+0x512/0x640 [ 278.092641][ T8406] ? __kmalloc_cache_noprof+0x5f/0x800 [ 278.092684][ T8406] should_failslab+0xc2/0x120 [ 278.092736][ T8406] __kmalloc_cache_noprof+0x80/0x800 [ 278.092776][ T8406] ? ring_buffer_read_start+0x149/0x500 [ 278.092829][ T8406] ? ring_buffer_read_start+0x149/0x500 [ 278.092873][ T8406] ring_buffer_read_start+0x149/0x500 [ 278.092930][ T8406] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 278.092976][ T8406] ? lockdep_init_map_type+0x5c/0x270 [ 278.093012][ T8406] ? ring_buffer_overruns+0x195/0x1f0 [ 278.093056][ T8406] tracing_open+0x93f/0xe10 [ 278.093103][ T8406] do_dentry_open+0x748/0x1590 [ 278.093153][ T8406] ? __pfx_tracing_open+0x10/0x10 [ 278.093202][ T8406] vfs_open+0x82/0x3f0 [ 278.093244][ T8406] path_openat+0x2078/0x3140 [ 278.093308][ T8406] ? __pfx_path_openat+0x10/0x10 [ 278.093374][ T8406] do_filp_open+0x20b/0x470 [ 278.093428][ T8406] ? __pfx_do_filp_open+0x10/0x10 [ 278.093511][ T8406] ? alloc_fd+0x471/0x7d0 [ 278.093573][ T8406] do_sys_openat2+0x121/0x290 [ 278.093610][ T8406] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.093665][ T8406] __x64_sys_openat+0x174/0x210 [ 278.093705][ T8406] ? __pfx___x64_sys_openat+0x10/0x10 [ 278.093761][ T8406] do_syscall_64+0xcd/0xf80 [ 278.093815][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.093849][ T8406] RIP: 0033:0x7fcf1dd8f7c9 [ 278.093875][ T8406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.093908][ T8406] RSP: 002b:00007fcf1ece9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.093947][ T8406] RAX: ffffffffffffffda RBX: 00007fcf1dfe5fa0 RCX: 00007fcf1dd8f7c9 [ 278.093970][ T8406] RDX: 1a6b75d638828712 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 278.093991][ T8406] RBP: 00007fcf1de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.094012][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.094032][ T8406] R13: 00007fcf1dfe6038 R14: 00007fcf1dfe5fa0 R15: 00007fff7ba8d068 [ 278.094077][ T8406] [ 278.102037][ T8420] tpg source WxH: 320x240 (Y'CbCr) [ 278.404422][ T7857] mapped_file 55271424 [ 278.418843][ T7857] dirty 0 [ 278.421862][ T7857] writeback 0 [ 278.533768][ T7857] workingset_refault_anon 315 [ 278.590156][ T8420] tpg field: 1 [ 278.593714][ T8420] tpg crop: (0,0)/320x240 [ 278.611854][ T8422] zswap: compressor not available [ 278.635209][ T8420] tpg compose: (0,0)/320x240 [ 278.639927][ T8420] tpg colorspace: 8 [ 278.643796][ T8420] tpg transfer function: 0/0 [ 278.674312][ T8420] tpg Y'CbCr encoding: 0/0 [ 278.680223][ T8420] tpg quantization: 0/0 [ 278.684510][ T8420] tpg RGB range: 0/2 [ 278.688451][ T8420] vivid-007: ================== END STATUS ================== [ 278.715059][ T7857] workingset_refault_file 1367 [ 278.794502][ T7857] swap 98574336 [ 278.798055][ T7857] swapcached 471040 [ 278.801911][ T7857] pgpgin 259340 [ 278.947117][ T7857] pgpgout 185264 [ 278.950754][ T7857] pgfault 90213 [ 279.114398][ T7857] pgmajfault 195 [ 279.179515][ T7857] inactive_anon 226500608 [ 279.183927][ T7857] active_anon 76640256 [ 279.270078][ T7857] inactive_file 0 [ 279.334426][ T7857] active_file 0 [ 279.337981][ T7857] unevictable 0 [ 279.341476][ T7857] hierarchical_memory_limit 314572800 [ 279.621769][ T7857] hierarchical_memsw_limit 9223372036854771712 [ 279.714405][ T7857] total_cache 302796800 [ 279.764397][ T7857] total_rss 126976 [ 279.786212][ T7857] total_rss_huge 0 [ 279.790011][ T7857] total_shmem 302796800 [ 279.794203][ T7857] total_mapped_file 55271424 [ 279.820464][ T30] audit: type=1800 audit(1766713541.454:8): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.435" name="lu_gp_id" dev="configfs" ino=21513 res=0 errno=0 [ 279.964389][ T7857] total_dirty 0 [ 279.967956][ T7857] total_writeback 0 [ 279.971798][ T7857] total_workingset_refault_anon 315 [ 280.088205][ T7857] total_workingset_refault_file 1367 [ 280.194455][ T7857] total_swap 98574336 [ 280.221197][ T7857] total_swapcached 471040 [ 280.270150][ T7857] total_pgpgin 259340 [ 280.274211][ T7857] total_pgpgout 185264 [ 280.410684][ T7857] total_pgfault 90213 [ 280.423024][ T7857] total_pgmajfault 195 [ 280.508378][ T7857] total_inactive_anon 226500608 [ 280.513315][ T7857] total_active_anon 76640256 [ 280.646627][ T7857] total_inactive_file 0 [ 280.651073][ T7857] total_active_file 0 [ 280.655278][ T7857] total_unevictable 0 [ 280.659384][ T7857] anon_cost 0 [ 280.662789][ T7857] file_cost 0 [ 280.666243][ T7857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.325,pid=7871,uid=0 [ 280.686634][ T7857] Memory cgroup out of memory: Killed process 7871 (syz.4.325) total-vm:131884kB, anon-rss:1116kB, file-rss:50444kB, shmem-rss:14528kB, UID:0 pgtables:272kB oom_score_adj:1000 [ 282.669647][ T8482] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.449'. [ 282.989357][ T8492] FAULT_INJECTION: forcing a failure. [ 282.989357][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 283.045888][ T8492] CPU: 0 UID: 0 PID: 8492 Comm: syz.1.451 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.045939][ T8492] Tainted: [L]=SOFTLOCKUP [ 283.045949][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.045966][ T8492] Call Trace: [ 283.045975][ T8492] [ 283.045987][ T8492] dump_stack_lvl+0x16c/0x1f0 [ 283.046041][ T8492] should_fail_ex+0x512/0x640 [ 283.046077][ T8492] ? __kvmalloc_node_noprof+0x129/0xa40 [ 283.046126][ T8492] should_failslab+0xc2/0x120 [ 283.046187][ T8492] __kvmalloc_node_noprof+0x14a/0xa40 [ 283.046234][ T8492] ? seq_read_iter+0x830/0x12d0 [ 283.046288][ T8492] ? seq_read_iter+0x830/0x12d0 [ 283.046328][ T8492] seq_read_iter+0x830/0x12d0 [ 283.046390][ T8492] kernfs_fop_read_iter+0x46c/0x610 [ 283.046444][ T8492] ? rw_verify_area+0xcf/0x6c0 [ 283.046490][ T8492] vfs_read+0x8bf/0xcf0 [ 283.046545][ T8492] ? __pfx_vfs_read+0x10/0x10 [ 283.046618][ T8492] ksys_read+0x12a/0x250 [ 283.046662][ T8492] ? __pfx_ksys_read+0x10/0x10 [ 283.046711][ T8492] do_syscall_64+0xcd/0xf80 [ 283.046756][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.046784][ T8492] RIP: 0033:0x7fcf1dd8f7c9 [ 283.046804][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.046830][ T8492] RSP: 002b:00007fcf1ece9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.046856][ T8492] RAX: ffffffffffffffda RBX: 00007fcf1dfe5fa0 RCX: 00007fcf1dd8f7c9 [ 283.046873][ T8492] RDX: 000000000000002e RSI: 0000200000000080 RDI: 0000000000000006 [ 283.046890][ T8492] RBP: 00007fcf1de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 283.046911][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.046927][ T8492] R13: 00007fcf1dfe6038 R14: 00007fcf1dfe5fa0 R15: 00007fff7ba8d068 [ 283.046964][ T8492] [ 283.504085][ T8498] vhci_hcd: not connected 4 [ 283.546947][ T8498] FAULT_INJECTION: forcing a failure. [ 283.546947][ T8498] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 283.604442][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.2.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.604496][ T8498] Tainted: [L]=SOFTLOCKUP [ 283.604508][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.604527][ T8498] Call Trace: [ 283.604538][ T8498] [ 283.604551][ T8498] dump_stack_lvl+0x16c/0x1f0 [ 283.604609][ T8498] should_fail_ex+0x512/0x640 [ 283.604653][ T8498] _copy_from_iter+0x2a4/0x16c0 [ 283.604695][ T8498] ? __build_skb_around+0x278/0x390 [ 283.604730][ T8498] ? __pfx__copy_from_iter+0x10/0x10 [ 283.604766][ T8498] ? alloc_pages_noprof+0x23c/0x390 [ 283.604822][ T8498] ? skb_page_frag_refill+0x11d/0x5c0 [ 283.604880][ T8498] ? sk_page_frag_refill+0x6c/0x340 [ 283.604919][ T8498] kcm_sendmsg+0x16be/0x2ca0 [ 283.604965][ T8498] ? __lock_acquire+0x380/0x2890 [ 283.605020][ T8498] ? __pfx_kcm_sendmsg+0x10/0x10 [ 283.605069][ T8498] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 283.605134][ T8498] ____sys_sendmsg+0xa5d/0xc30 [ 283.605197][ T8498] ? copy_msghdr_from_user+0x10a/0x160 [ 283.605239][ T8498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.605297][ T8498] ? find_held_lock+0x2b/0x80 [ 283.605343][ T8498] ? futex_unqueue+0x133/0x2c0 [ 283.605386][ T8498] ___sys_sendmsg+0x134/0x1d0 [ 283.605432][ T8498] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.605475][ T8498] ? __pfx___futex_wait+0x10/0x10 [ 283.605518][ T8498] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 283.605582][ T8498] ? find_held_lock+0x2b/0x80 [ 283.605653][ T8498] __sys_sendmmsg+0x200/0x420 [ 283.605702][ T8498] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.605758][ T8498] ? __pfx_do_futex+0x10/0x10 [ 283.605819][ T8498] ? xfd_validate_state+0x61/0x180 [ 283.605859][ T8498] __x64_sys_sendmmsg+0x9c/0x100 [ 283.605902][ T8498] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.605952][ T8498] do_syscall_64+0xcd/0xf80 [ 283.606005][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.606039][ T8498] RIP: 0033:0x7fb7d198f7c9 [ 283.606065][ T8498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.606097][ T8498] RSP: 002b:00007fb7cfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 283.606129][ T8498] RAX: ffffffffffffffda RBX: 00007fb7d1be5fa0 RCX: 00007fb7d198f7c9 [ 283.606156][ T8498] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 283.606176][ T8498] RBP: 00007fb7d1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 283.606196][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.606216][ T8498] R13: 00007fb7d1be6038 R14: 00007fb7d1be5fa0 R15: 00007ffe7351df88 [ 283.606262][ T8498] [ 284.063925][ T8501] netlink: 334 bytes leftover after parsing attributes in process `syz.1.454'. [ 284.624631][ T30] audit: type=1804 audit(1766713546.254:9): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.455" name="/newroot/136/file0" dev="tmpfs" ino=738 res=1 errno=0 [ 284.830984][ T30] audit: type=1804 audit(1766713546.464:10): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.455" name="/newroot/136/file0" dev="tmpfs" ino=738 res=1 errno=0 [ 288.626555][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.638663][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.657713][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.690128][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.701148][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.252114][ T8565] chnl_net:caif_netlink_parms(): no params data found [ 289.849215][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.869109][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.876967][ T8565] bridge_slave_0: entered allmulticast mode [ 289.910579][ T8565] bridge_slave_0: entered promiscuous mode [ 290.053127][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.071495][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.089691][ T8565] bridge_slave_1: entered allmulticast mode [ 290.108165][ T8565] bridge_slave_1: entered promiscuous mode [ 290.319837][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.370631][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.501146][ T8565] team0: Port device team_slave_0 added [ 290.590039][ T8565] team0: Port device team_slave_1 added [ 290.741123][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.758408][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.794577][ T5841] Bluetooth: hci2: command tx timeout [ 290.874537][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.899048][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.908579][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.934959][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.057146][ T8565] hsr_slave_0: entered promiscuous mode [ 291.078091][ T8565] hsr_slave_1: entered promiscuous mode [ 291.105425][ T8565] debugfs: 'hsr0' already exists in 'hsr' [ 291.111239][ T8565] Cannot create hsr debugfs directory [ 291.332901][ T8605] ICMPv6: process `syz.0.477' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 292.874568][ T5841] Bluetooth: hci2: command tx timeout [ 293.064154][ T1314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.167801][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 293.308979][ T8565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.353448][ T8565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.420550][ T8565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.518515][ T1314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.587685][ T8565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.785176][ T1314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.213311][ T1314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.816199][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.956587][ T5841] Bluetooth: hci2: command tx timeout [ 295.309833][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.447146][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.454500][ T8303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.514571][ T1314] bridge_slave_1: left allmulticast mode [ 295.520311][ T1314] bridge_slave_1: left promiscuous mode [ 295.540708][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.548954][ T8659] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 295.580386][ T1314] bridge_slave_0: left allmulticast mode [ 295.591040][ T8659] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 295.614432][ T1314] bridge_slave_0: left promiscuous mode [ 295.620293][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.656301][ T8659] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 295.874583][ T8659] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 296.161745][ T8665] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 296.194968][ T8665] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 296.209744][ T8665] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 296.226371][ T8665] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 296.747781][ T1314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.760456][ T1314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.772084][ T1314] bond0 (unregistering): Released all slaves [ 296.848758][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.856000][ T8303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.049605][ T5837] Bluetooth: hci2: command tx timeout [ 297.124570][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 297.202035][ T8668] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 297.261917][ T8668] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 297.314744][ T8668] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 297.344448][ T8668] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 297.483058][ T8669] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 297.550061][ T8669] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 297.574957][ T8669] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 297.637528][ T8669] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 297.800034][ T1314] hsr_slave_0: left promiscuous mode [ 297.827495][ T1314] hsr_slave_1: left promiscuous mode [ 297.838222][ T8677] futex_wake_op: syz.2.490 tries to shift op by -2048; fix this program [ 297.849459][ T1314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.860743][ T8677] futex_wake_op: syz.2.490 tries to shift op by -2048; fix this program [ 297.869570][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.890909][ T8677] 0x000000000001-0x000000020000 : "" [ 297.897883][ T1314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.920125][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.947159][ T8677] ftl_cs: FTL header corrupt! [ 298.035278][ T1314] veth1_macvtap: left promiscuous mode [ 298.049621][ T1314] veth0_macvtap: left promiscuous mode [ 298.062562][ T1314] veth1_vlan: left promiscuous mode [ 298.087984][ T1314] veth0_vlan: left promiscuous mode [ 299.330529][ T1314] team0 (unregistering): Port device team_slave_1 removed [ 299.419362][ T1314] team0 (unregistering): Port device team_slave_0 removed [ 300.700215][ T8698] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 300.744602][ T8698] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 300.794684][ T8698] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 300.815368][ T8698] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 300.911584][ T8701] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 300.935672][ T8701] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 300.969119][ T8701] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 300.992834][ T8701] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 301.201338][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.373886][ T8710] netlink: 330 bytes leftover after parsing attributes in process `syz.1.495'. [ 301.513830][ T8709] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 301.549253][ T8709] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 301.614859][ T8709] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 301.671089][ T8709] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 301.930943][ T8719] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 301.964311][ T8719] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 302.034781][ T8719] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 302.084345][ T8719] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 302.543123][ T8724] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 302.570637][ T8724] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 302.585902][ T8724] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 302.603560][ T8724] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 302.944174][ T8565] veth0_vlan: entered promiscuous mode [ 303.084175][ T8565] veth1_vlan: entered promiscuous mode [ 303.511809][ T8739] openvswitch: netlink: Key type 66 is out of range max 32 [ 303.888133][ T8565] veth0_macvtap: entered promiscuous mode [ 303.939688][ T8565] veth1_macvtap: entered promiscuous mode [ 304.022753][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.059739][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.111756][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.134173][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.225524][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.248847][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.488306][ T8750] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.500'. [ 304.829347][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.862548][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.026831][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.068216][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.644892][ T8766] netlink: 'syz.1.502': attribute type 11 has an invalid length. [ 305.914548][ T30] audit: type=1804 audit(1766713567.544:11): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.467" name="/newroot/0/file0" dev="tmpfs" ino=18 res=1 errno=0 [ 305.944853][ T30] audit: type=1804 audit(1766713567.544:12): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.467" name="/newroot/0/file0" dev="tmpfs" ino=18 res=1 errno=0 [ 306.406216][ T5841] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 307.211232][ T8791] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 308.220102][ T8807] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.510'. [ 308.615241][ T8815] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.511'. [ 309.195153][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 311.279805][ T8868] 0x000200000001-0xa29656a63616329 : "" [ 311.285572][ T8868] mtd: partition "" is out of reach -- disabled [ 311.322305][ T8868] ftl_cs: FTL header not found. [ 311.965311][ T8875] FAULT_INJECTION: forcing a failure. [ 311.965311][ T8875] name fail_futex, interval 1, probability 0, space 0, times 0 [ 312.025989][ T8875] CPU: 0 UID: 0 PID: 8875 Comm: syz.1.520 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.026039][ T8875] Tainted: [L]=SOFTLOCKUP [ 312.026050][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.026070][ T8875] Call Trace: [ 312.026080][ T8875] [ 312.026093][ T8875] dump_stack_lvl+0x16c/0x1f0 [ 312.026148][ T8875] should_fail_ex+0x512/0x640 [ 312.026191][ T8875] get_futex_key+0x1d0/0x15f0 [ 312.026231][ T8875] ? __pfx_get_futex_key+0x10/0x10 [ 312.026270][ T8875] ? __up_read+0x2d1/0x700 [ 312.026314][ T8875] futex_wake+0xea/0x530 [ 312.026364][ T8875] ? __pfx_futex_wake+0x10/0x10 [ 312.026418][ T8875] ? up_write+0x282/0x4e0 [ 312.026460][ T8875] do_futex+0x1e3/0x350 [ 312.026509][ T8875] ? __pfx_do_futex+0x10/0x10 [ 312.026550][ T8875] ? count_memcg_events+0x122/0x290 [ 312.026605][ T8875] __x64_sys_futex+0x1e0/0x4c0 [ 312.026650][ T8875] ? __pfx___x64_sys_futex+0x10/0x10 [ 312.026687][ T8875] ? ksys_mmap_pgoff+0x85/0x5c0 [ 312.026734][ T8875] ? xfd_validate_state+0x61/0x180 [ 312.026779][ T8875] do_syscall_64+0xcd/0xf80 [ 312.026833][ T8875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.026866][ T8875] RIP: 0033:0x7fcf1dd8f7c9 [ 312.026891][ T8875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.026925][ T8875] RSP: 002b:00007fcf1ec650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 312.026957][ T8875] RAX: ffffffffffffffda RBX: 00007fcf1dfe6368 RCX: 00007fcf1dd8f7c9 [ 312.026979][ T8875] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcf1dfe636c [ 312.027000][ T8875] RBP: 00007fcf1dfe6360 R08: 00007fcf1ecea000 R09: 0000000000000000 [ 312.027021][ T8875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.027042][ T8875] R13: 00007fcf1dfe63f8 R14: 00007fff7ba8cf80 R15: 00007fff7ba8d068 [ 312.027087][ T8875] [ 312.361767][ T8874] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 312.793022][ T8882] FAULT_INJECTION: forcing a failure. [ 312.793022][ T8882] name failslab, interval 1, probability 0, space 0, times 0 [ 312.806669][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.2.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.806723][ T8882] Tainted: [L]=SOFTLOCKUP [ 312.806735][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.806755][ T8882] Call Trace: [ 312.806766][ T8882] [ 312.806778][ T8882] dump_stack_lvl+0x16c/0x1f0 [ 312.806839][ T8882] should_fail_ex+0x512/0x640 [ 312.806875][ T8882] ? __kmalloc_cache_noprof+0x5f/0x800 [ 312.806919][ T8882] should_failslab+0xc2/0x120 [ 312.806974][ T8882] __kmalloc_cache_noprof+0x80/0x800 [ 312.807012][ T8882] ? lock_acquire+0x179/0x330 [ 312.807042][ T8882] ? snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 312.807086][ T8882] ? snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 312.807121][ T8882] snd_pcm_oss_change_params_locked+0x1db/0x3ab0 [ 312.807160][ T8882] ? __mutex_lock+0x27b/0x1ca0 [ 312.807218][ T8882] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 312.807253][ T8882] ? __flush_work+0xa48/0xcc0 [ 312.807292][ T8882] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 312.807350][ T8882] ? __pfx___mutex_lock+0x10/0x10 [ 312.807406][ T8882] ? __lock_acquire+0x436/0x2890 [ 312.807474][ T8882] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 312.807512][ T8882] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 312.807548][ T8882] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.807603][ T8882] snd_pcm_oss_poll+0x5a5/0xb90 [ 312.807641][ T8882] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 312.807672][ T8882] ? __fget_files+0x20e/0x3c0 [ 312.807729][ T8882] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 312.807762][ T8882] do_sys_poll+0x55c/0xdf0 [ 312.807822][ T8882] ? __pfx_do_sys_poll+0x10/0x10 [ 312.807908][ T8882] ? __futex_wait+0x24b/0x2f0 [ 312.808034][ T8882] ? __pfx_timespec64_add_safe+0x10/0x10 [ 312.808074][ T8882] ? ktime_get_ts64+0x2d2/0x400 [ 312.808110][ T8882] ? read_tsc+0x9/0x20 [ 312.808154][ T8882] ? ktime_get_ts64+0x256/0x400 [ 312.808199][ T8882] __x64_sys_poll+0x1a6/0x450 [ 312.808246][ T8882] ? __pfx___x64_sys_poll+0x10/0x10 [ 312.808308][ T8882] do_syscall_64+0xcd/0xf80 [ 312.808363][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.808398][ T8882] RIP: 0033:0x7fb7d198f7c9 [ 312.808434][ T8882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.808469][ T8882] RSP: 002b:00007fb7cfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 312.808501][ T8882] RAX: ffffffffffffffda RBX: 00007fb7d1be5fa0 RCX: 00007fb7d198f7c9 [ 312.808524][ T8882] RDX: 00000000000ffffc RSI: 0000000000000040 RDI: 00002000000002c0 [ 312.808546][ T8882] RBP: 00007fb7d1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.808567][ T8882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.808587][ T8882] R13: 00007fb7d1be6038 R14: 00007fb7d1be5fa0 R15: 00007ffe7351df88 [ 312.808633][ T8882] [ 313.761868][ T8884] EXT4-fs warning: 12 callbacks suppressed [ 313.761892][ T8884] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 313.825676][ T8884] EXT4-fs error: 12 callbacks suppressed [ 313.825702][ T8884] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 313.875888][ T8884] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 313.898505][ T8884] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 314.189147][ T8891] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 314.244872][ T8891] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 314.260106][ T8891] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 314.284935][ T8891] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 314.725440][ T8898] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 314.744125][ T8898] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 314.759884][ T8898] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 314.784337][ T8898] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 315.758459][ T8914] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 315.844593][ T8914] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 315.867598][ T8914] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 315.893263][ T8914] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 317.039842][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 317.065549][ T5164] Trying to write to read-only block-device sda1 [ 317.660807][ T8943] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 317.939543][ T8946] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 318.404088][ T8972] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.544'. [ 318.721666][ T30] audit: type=1804 audit(1766713580.344:13): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.541" name="/newroot/9/file0" dev="tmpfs" ino=67 res=1 errno=0 [ 318.790057][ T30] audit: type=1804 audit(1766713580.344:14): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.541" name="/newroot/9/file0" dev="tmpfs" ino=67 res=1 errno=0 [ 319.179099][ T8986] FAULT_INJECTION: forcing a failure. [ 319.179099][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 319.266025][ T8986] CPU: 0 UID: 0 PID: 8986 Comm: syz.0.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.266079][ T8986] Tainted: [L]=SOFTLOCKUP [ 319.266091][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.266112][ T8986] Call Trace: [ 319.266123][ T8986] [ 319.266136][ T8986] dump_stack_lvl+0x16c/0x1f0 [ 319.266195][ T8986] should_fail_ex+0x512/0x640 [ 319.266234][ T8986] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 319.266289][ T8986] should_failslab+0xc2/0x120 [ 319.266341][ T8986] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 319.266392][ T8986] ? create_filter_start.constprop.0+0x16a/0x300 [ 319.266449][ T8986] ? kstrdup+0x53/0x100 [ 319.266486][ T8986] kstrdup+0x53/0x100 [ 319.266528][ T8986] create_filter_start.constprop.0+0x16a/0x300 [ 319.266581][ T8986] create_filter+0xb5/0x210 [ 319.266628][ T8986] ? __pfx_create_filter+0x10/0x10 [ 319.266678][ T8986] ? find_held_lock+0x2b/0x80 [ 319.266728][ T8986] apply_event_filter+0x220/0x500 [ 319.266787][ T8986] ? __pfx_apply_event_filter+0x10/0x10 [ 319.266849][ T8986] ? __pfx_event_filter_write+0x10/0x10 [ 319.266880][ T8986] event_filter_write+0x16d/0x290 [ 319.266916][ T8986] vfs_writev+0x5df/0xde0 [ 319.266974][ T8986] ? __pfx_vfs_writev+0x10/0x10 [ 319.267019][ T8986] ? fdget_pos+0x2a2/0x370 [ 319.267101][ T8986] ? __fget_files+0x20e/0x3c0 [ 319.267161][ T8986] ? do_writev+0x132/0x340 [ 319.267203][ T8986] do_writev+0x132/0x340 [ 319.267249][ T8986] ? __pfx_do_writev+0x10/0x10 [ 319.267308][ T8986] do_syscall_64+0xcd/0xf80 [ 319.267363][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.267397][ T8986] RIP: 0033:0x7f6e22b8f7c9 [ 319.267426][ T8986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.267460][ T8986] RSP: 002b:00007f6e2399f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 319.267492][ T8986] RAX: ffffffffffffffda RBX: 00007f6e22de5fa0 RCX: 00007f6e22b8f7c9 [ 319.267516][ T8986] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 319.267537][ T8986] RBP: 00007f6e22c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.267558][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.267578][ T8986] R13: 00007f6e22de6038 R14: 00007f6e22de5fa0 R15: 00007ffc9fb0e9e8 [ 319.267624][ T8986] [ 320.676030][ T8991] zswap: compressor not available [ 321.605383][ T9000] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 321.844411][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 323.169610][ T9045] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.556'. [ 324.017078][ T9063] FAULT_INJECTION: forcing a failure. [ 324.017078][ T9063] name failslab, interval 1, probability 0, space 0, times 0 [ 324.036709][ T9063] CPU: 0 UID: 0 PID: 9063 Comm: syz.2.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.036759][ T9063] Tainted: [L]=SOFTLOCKUP [ 324.036769][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.036787][ T9063] Call Trace: [ 324.036797][ T9063] [ 324.036808][ T9063] dump_stack_lvl+0x16c/0x1f0 [ 324.036862][ T9063] should_fail_ex+0x512/0x640 [ 324.036903][ T9063] ? fs_reclaim_acquire+0xae/0x150 [ 324.036956][ T9063] should_failslab+0xc2/0x120 [ 324.037009][ T9063] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 324.037056][ T9063] ? generic_fillattr+0x6bf/0x940 [ 324.037083][ T9063] ? ima_collect_measurement+0x4c2/0xa50 [ 324.037128][ T9063] ? krealloc_node_align_noprof+0x2ea/0x3d0 [ 324.037172][ T9063] krealloc_node_align_noprof+0x2ea/0x3d0 [ 324.037216][ T9063] ? ima_calc_file_hash+0x1e2/0x490 [ 324.037248][ T9063] ima_collect_measurement+0x4c2/0xa50 [ 324.037277][ T9063] ? do_filp_open+0x20b/0x470 [ 324.037328][ T9063] ? __pfx_ima_collect_measurement+0x10/0x10 [ 324.037360][ T9063] ? lock_acquire+0x179/0x330 [ 324.037412][ T9063] ? process_measurement+0x7f8/0x22d0 [ 324.037457][ T9063] ? is_bad_inode+0xd/0x40 [ 324.037491][ T9063] ? xattr_resolve_name+0x27b/0x3f0 [ 324.037537][ T9063] ? vfs_getxattr_alloc+0xec/0x350 [ 324.037585][ T9063] ? ima_get_hash_algo+0x27c/0x400 [ 324.037628][ T9063] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 324.037677][ T9063] ? process_measurement+0x11b9/0x22d0 [ 324.037721][ T9063] process_measurement+0x11b9/0x22d0 [ 324.037775][ T9063] ? lock_acquire+0x179/0x330 [ 324.037800][ T9063] ? __pfx_process_measurement+0x10/0x10 [ 324.037851][ T9063] ? find_held_lock+0x2b/0x80 [ 324.037888][ T9063] ? rcu_read_unlock+0x17/0x60 [ 324.037942][ T9063] ? seq_open+0x116/0x170 [ 324.037971][ T9063] ? __pfx_tracing_clock_show+0x10/0x10 [ 324.038000][ T9063] ? single_open+0x15f/0x1f0 [ 324.038030][ T9063] ? inode_to_bdi+0x9e/0x160 [ 324.038070][ T9063] ima_file_check+0xc7/0x110 [ 324.038115][ T9063] ? __pfx_ima_file_check+0x10/0x10 [ 324.038169][ T9063] security_file_post_open+0x8e/0x210 [ 324.038205][ T9063] path_openat+0xe5f/0x3140 [ 324.038257][ T9063] ? __pfx_path_openat+0x10/0x10 [ 324.038312][ T9063] do_filp_open+0x20b/0x470 [ 324.038355][ T9063] ? __pfx_do_filp_open+0x10/0x10 [ 324.038427][ T9063] ? alloc_fd+0x471/0x7d0 [ 324.038478][ T9063] do_sys_openat2+0x121/0x290 [ 324.038509][ T9063] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.038538][ T9063] ? __pfx___might_resched+0x10/0x10 [ 324.038579][ T9063] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 324.038614][ T9063] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.038662][ T9063] __x64_sys_openat+0x174/0x210 [ 324.038694][ T9063] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.038741][ T9063] do_syscall_64+0xcd/0xf80 [ 324.038786][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.038814][ T9063] RIP: 0033:0x7fb7d198f7c9 [ 324.038836][ T9063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.038863][ T9063] RSP: 002b:00007fb7cfbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.038888][ T9063] RAX: ffffffffffffffda RBX: 00007fb7d1be6090 RCX: 00007fb7d198f7c9 [ 324.038906][ T9063] RDX: 0000000000088000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 324.038925][ T9063] RBP: 00007fb7d1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 324.038942][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.038958][ T9063] R13: 00007fb7d1be6128 R14: 00007fb7d1be6090 R15: 00007ffe7351df88 [ 324.038994][ T9063] [ 324.040785][ T30] audit: type=1800 audit(1766713585.674:15): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.560" name="trace_clock" dev="tracefs" ino=166 res=0 errno=0 [ 324.886957][ T9077] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 324.928262][ T9075] hub 1-0:1.0: USB hub found [ 324.934740][ T9075] hub 1-0:1.0: 1 port detected [ 325.062486][ T9082] netlink: 'syz.2.563': attribute type 11 has an invalid length. [ 325.206973][ T9087] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 325.491096][ T9092] syz.2.564 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 326.568237][ T9115] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.568'. [ 326.934163][ T5841] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 327.681363][ T9145] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 327.969162][ T9147] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 328.321365][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.327751][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.658596][ T9157] random: crng reseeded on system resumption [ 329.580383][ T9176] __vm_enough_memory: pid: 9176, comm: syz.2.583, bytes: 4398046511104 not enough memory for the allocation [ 329.714621][ T9177] zswap: compressor not available [ 330.261968][ T9198] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 330.934117][ T5841] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 331.598396][ T9192] FAULT_INJECTION: forcing a failure. [ 331.598396][ T9192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.661298][ T9218] zswap: compressor not available [ 331.684735][ T9192] CPU: 1 UID: 0 PID: 9192 Comm: syz.5.584 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.684790][ T9192] Tainted: [L]=SOFTLOCKUP [ 331.684803][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.684822][ T9192] Call Trace: [ 331.684833][ T9192] [ 331.684857][ T9192] dump_stack_lvl+0x16c/0x1f0 [ 331.684918][ T9192] should_fail_ex+0x512/0x640 [ 331.684956][ T9192] ? page_copy_sane+0xcd/0x2d0 [ 331.684991][ T9192] copy_folio_from_iter_atomic+0x3ba/0x1a10 [ 331.685044][ T9192] ? __pfx_timestamp_truncate+0x10/0x10 [ 331.685104][ T9192] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 331.685145][ T9192] ? shmem_write_begin+0x1ba/0x3b0 [ 331.685185][ T9192] ? __pfx_shmem_write_begin+0x10/0x10 [ 331.685226][ T9192] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 331.685284][ T9192] generic_perform_write+0x221/0x900 [ 331.685332][ T9192] ? __pfx_generic_perform_write+0x10/0x10 [ 331.685390][ T9192] ? generic_update_time+0xcf/0xf0 [ 331.685422][ T9192] ? mnt_put_write_access_file+0x45/0xf0 [ 331.685474][ T9192] ? file_update_time_flags+0x35c/0x520 [ 331.685516][ T9192] shmem_file_write_iter+0x10e/0x140 [ 331.685566][ T9192] vfs_write+0x7d3/0x11d0 [ 331.685613][ T9192] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 331.685665][ T9192] ? __pfx_vfs_write+0x10/0x10 [ 331.685742][ T9192] ksys_write+0x12a/0x250 [ 331.685792][ T9192] ? __pfx_ksys_write+0x10/0x10 [ 331.685860][ T9192] do_syscall_64+0xcd/0xf80 [ 331.685917][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.685952][ T9192] RIP: 0033:0x7f2fb538f7c9 [ 331.685980][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.686013][ T9192] RSP: 002b:00007f2fb61a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.686045][ T9192] RAX: ffffffffffffffda RBX: 00007f2fb55e5fa0 RCX: 00007f2fb538f7c9 [ 331.686069][ T9192] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 331.686088][ T9192] RBP: 00007f2fb5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.686108][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.686129][ T9192] R13: 00007f2fb55e6038 R14: 00007f2fb55e5fa0 R15: 00007ffda0d01398 [ 331.686176][ T9192] [ 333.632639][ T9258] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 334.346916][ T9274] nvme_fcloop: unknown parameter or missing value '7' [ 334.657892][ T9274] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 334.659481][ T9277] ima: policy update failed [ 334.694562][ T30] audit: type=1802 audit(1766713596.324:16): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.602" res=0 errno=0 [ 335.010187][ T9283] HfR: entered promiscuous mode [ 336.578211][ T9311] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 336.703784][ T9321] netlink: 2468 bytes leftover after parsing attributes in process `syz.5.610'. [ 339.577921][ T9379] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 339.987853][ T9383] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 340.431203][ T9391] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.627'. [ 341.254189][ T9410] FAULT_INJECTION: forcing a failure. [ 341.254189][ T9410] name fail_futex, interval 1, probability 0, space 0, times 0 [ 341.267288][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.1.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.267339][ T9410] Tainted: [L]=SOFTLOCKUP [ 341.267351][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.267371][ T9410] Call Trace: [ 341.267382][ T9410] [ 341.267395][ T9410] dump_stack_lvl+0x16c/0x1f0 [ 341.267451][ T9410] should_fail_ex+0x512/0x640 [ 341.267496][ T9410] get_futex_key+0x1d0/0x15f0 [ 341.267536][ T9410] ? find_held_lock+0x2b/0x80 [ 341.267580][ T9410] ? __pfx_get_futex_key+0x10/0x10 [ 341.267623][ T9410] ? tomoyo_path_number_perm+0x18d/0x580 [ 341.267679][ T9410] futex_wake+0xea/0x530 [ 341.267729][ T9410] ? __pfx_futex_wake+0x10/0x10 [ 341.267786][ T9410] ? do_vfs_ioctl+0x128/0x14f0 [ 341.267834][ T9410] do_futex+0x1e3/0x350 [ 341.267884][ T9410] ? __pfx_do_futex+0x10/0x10 [ 341.267925][ T9410] ? find_held_lock+0x2b/0x80 [ 341.267974][ T9410] __x64_sys_futex+0x1e0/0x4c0 [ 341.268036][ T9410] ? __fget_files+0x20e/0x3c0 [ 341.268090][ T9410] ? __pfx___x64_sys_futex+0x10/0x10 [ 341.268137][ T9410] ? fput+0x70/0xf0 [ 341.268176][ T9410] do_syscall_64+0xcd/0xf80 [ 341.268231][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.268265][ T9410] RIP: 0033:0x7fcf1dd8f7c9 [ 341.268292][ T9410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.268332][ T9410] RSP: 002b:00007fcf1ece90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.268365][ T9410] RAX: ffffffffffffffda RBX: 00007fcf1dfe5fa8 RCX: 00007fcf1dd8f7c9 [ 341.268387][ T9410] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcf1dfe5fac [ 341.268410][ T9410] RBP: 00007fcf1dfe5fa0 R08: 00007fcf1ecea000 R09: 0000000000000000 [ 341.268431][ T9410] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 341.268452][ T9410] R13: 00007fcf1dfe6038 R14: 00007fff7ba8cf80 R15: 00007fff7ba8d068 [ 341.268497][ T9410] [ 342.558892][ T9439] netlink: 206 bytes leftover after parsing attributes in process `syz.5.636'. [ 342.670846][ T9422] FAULT_INJECTION: forcing a failure. [ 342.670846][ T9422] name failslab, interval 1, probability 0, space 0, times 0 [ 342.685750][ T9422] CPU: 1 UID: 0 PID: 9422 Comm: syz.0.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.685805][ T9422] Tainted: [L]=SOFTLOCKUP [ 342.685818][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.685838][ T9422] Call Trace: [ 342.685849][ T9422] [ 342.685862][ T9422] dump_stack_lvl+0x16c/0x1f0 [ 342.685923][ T9422] should_fail_ex+0x512/0x640 [ 342.685959][ T9422] ? __kmalloc_noprof+0xca/0x910 [ 342.686000][ T9422] should_failslab+0xc2/0x120 [ 342.686055][ T9422] __kmalloc_noprof+0xeb/0x910 [ 342.686094][ T9422] ? handler_new_ref+0x1b0/0xc60 [ 342.686153][ T9422] ? handler_new_ref+0x1b0/0xc60 [ 342.686203][ T9422] handler_new_ref+0x1b0/0xc60 [ 342.686267][ T9422] v4l2_ctrl_new+0x196c/0x2190 [ 342.686335][ T9422] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 342.686390][ T9422] ? lock_acquire+0x179/0x330 [ 342.686427][ T9422] ? __pfx___might_resched+0x10/0x10 [ 342.686475][ T9422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.686531][ T9422] v4l2_ctrl_new_std+0x1be/0x290 [ 342.686599][ T9422] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 342.686674][ T9422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 342.686736][ T9422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.686789][ T9422] ? __asan_memcpy+0x3c/0x60 [ 342.686829][ T9422] ? find_ref+0x20b/0x420 [ 342.686884][ T9422] handler_new_ref+0x827/0xc60 [ 342.686949][ T9422] v4l2_ctrl_new+0x196c/0x2190 [ 342.687018][ T9422] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 342.687085][ T9422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.687141][ T9422] v4l2_ctrl_new_std+0x1be/0x290 [ 342.687207][ T9422] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 342.687269][ T9422] ? trace_kmalloc+0x2b/0xb0 [ 342.687323][ T9422] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 342.687383][ T9422] ? media_request_object_init+0x100/0x180 [ 342.687432][ T9422] vicodec_open+0x1b2/0xf70 [ 342.687473][ T9422] ? kobject_get_unless_zero+0x156/0x1e0 [ 342.687538][ T9422] v4l2_open+0x1d2/0x5e0 [ 342.687583][ T9422] ? __pfx_v4l2_open+0x10/0x10 [ 342.687641][ T9422] chrdev_open+0x234/0x6a0 [ 342.687694][ T9422] ? __pfx_apparmor_file_open+0x10/0x10 [ 342.687729][ T9422] ? __pfx_chrdev_open+0x10/0x10 [ 342.687783][ T9422] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 342.687848][ T9422] do_dentry_open+0x748/0x1590 [ 342.687896][ T9422] ? __pfx_chrdev_open+0x10/0x10 [ 342.687957][ T9422] vfs_open+0x82/0x3f0 [ 342.687997][ T9422] path_openat+0x2078/0x3140 [ 342.688061][ T9422] ? __pfx_path_openat+0x10/0x10 [ 342.688126][ T9422] do_filp_open+0x20b/0x470 [ 342.688176][ T9422] ? __pfx_do_filp_open+0x10/0x10 [ 342.688258][ T9422] ? alloc_fd+0x471/0x7d0 [ 342.688320][ T9422] do_sys_openat2+0x121/0x290 [ 342.688376][ T9422] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.688432][ T9422] __x64_sys_openat+0x174/0x210 [ 342.688471][ T9422] ? __pfx___x64_sys_openat+0x10/0x10 [ 342.688527][ T9422] do_syscall_64+0xcd/0xf80 [ 342.688582][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.688625][ T9422] RIP: 0033:0x7f6e22b8f7c9 [ 342.688654][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.688691][ T9422] RSP: 002b:00007f6e2399f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 342.688721][ T9422] RAX: ffffffffffffffda RBX: 00007f6e22de5fa0 RCX: 00007f6e22b8f7c9 [ 342.688744][ T9422] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 342.688765][ T9422] RBP: 00007f6e22c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 342.688786][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.688805][ T9422] R13: 00007f6e22de6038 R14: 00007f6e22de5fa0 R15: 00007ffc9fb0e9e8 [ 342.688850][ T9422] [ 344.258803][ T30] audit: type=1326 audit(1766713605.894:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.1.646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf1dd8f7c9 code=0x0 [ 344.999201][ T9476] FAULT_INJECTION: forcing a failure. [ 344.999201][ T9476] name failslab, interval 1, probability 0, space 0, times 0 [ 345.046542][ T9476] CPU: 1 UID: 0 PID: 9476 Comm: syz.2.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.046580][ T9476] Tainted: [L]=SOFTLOCKUP [ 345.046588][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.046603][ T9476] Call Trace: [ 345.046610][ T9476] [ 345.046620][ T9476] dump_stack_lvl+0x16c/0x1f0 [ 345.046663][ T9476] should_fail_ex+0x512/0x640 [ 345.046690][ T9476] ? __kmalloc_cache_noprof+0x5f/0x800 [ 345.046721][ T9476] should_failslab+0xc2/0x120 [ 345.046760][ T9476] __kmalloc_cache_noprof+0x80/0x800 [ 345.046789][ T9476] ? slip_open+0x846/0x1150 [ 345.046832][ T9476] ? slip_open+0x846/0x1150 [ 345.046867][ T9476] slip_open+0x846/0x1150 [ 345.046908][ T9476] ? find_held_lock+0x2b/0x80 [ 345.046941][ T9476] ? __pfx_slip_open+0x10/0x10 [ 345.046978][ T9476] ? down_write+0x14d/0x200 [ 345.047004][ T9476] ? __pfx_slip_open+0x10/0x10 [ 345.047041][ T9476] tty_ldisc_open+0x9f/0x120 [ 345.047073][ T9476] tty_set_ldisc+0x32b/0x780 [ 345.047109][ T9476] tty_ioctl+0xc2d/0x1650 [ 345.047144][ T9476] ? __pfx_tty_ioctl+0x10/0x10 [ 345.047188][ T9476] ? find_held_lock+0x2b/0x80 [ 345.047219][ T9476] ? hook_file_ioctl_common+0x144/0x410 [ 345.047255][ T9476] ? __fget_files+0x20e/0x3c0 [ 345.047295][ T9476] ? __pfx_tty_ioctl+0x10/0x10 [ 345.047331][ T9476] __x64_sys_ioctl+0x18e/0x210 [ 345.047363][ T9476] do_syscall_64+0xcd/0xf80 [ 345.047410][ T9476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.047435][ T9476] RIP: 0033:0x7fb7d198f7c9 [ 345.047454][ T9476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.047478][ T9476] RSP: 002b:00007fb7cfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.047500][ T9476] RAX: ffffffffffffffda RBX: 00007fb7d1be5fa0 RCX: 00007fb7d198f7c9 [ 345.047516][ T9476] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000008 [ 345.047530][ T9476] RBP: 00007fb7d1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.047544][ T9476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.047558][ T9476] R13: 00007fb7d1be6038 R14: 00007fb7d1be5fa0 R15: 00007ffe7351df88 [ 345.047589][ T9476] [ 349.744066][ T9555] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 349.792542][ T9555] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 349.809544][ T9554] FAULT_INJECTION: forcing a failure. [ 349.809544][ T9554] name failslab, interval 1, probability 0, space 0, times 0 [ 349.844720][ T9555] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 349.864500][ T9554] CPU: 1 UID: 0 PID: 9554 Comm: syz.1.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.864553][ T9554] Tainted: [L]=SOFTLOCKUP [ 349.864564][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.864584][ T9554] Call Trace: [ 349.864594][ T9554] [ 349.864609][ T9554] dump_stack_lvl+0x16c/0x1f0 [ 349.864666][ T9554] should_fail_ex+0x512/0x640 [ 349.864703][ T9554] ? __kmalloc_cache_noprof+0x5f/0x800 [ 349.864747][ T9554] should_failslab+0xc2/0x120 [ 349.864800][ T9554] __kmalloc_cache_noprof+0x80/0x800 [ 349.864841][ T9554] ? slip_open+0x88a/0x1150 [ 349.864909][ T9554] ? slip_open+0x88a/0x1150 [ 349.864959][ T9554] slip_open+0x88a/0x1150 [ 349.865020][ T9554] ? __pfx_slip_open+0x10/0x10 [ 349.865073][ T9554] ? down_write+0x14d/0x200 [ 349.865108][ T9554] ? __pfx_slip_open+0x10/0x10 [ 349.865159][ T9554] tty_ldisc_open+0x9f/0x120 [ 349.865203][ T9554] tty_set_ldisc+0x32b/0x780 [ 349.865254][ T9554] tty_ioctl+0xc2d/0x1650 [ 349.865303][ T9554] ? __pfx_tty_ioctl+0x10/0x10 [ 349.865366][ T9554] ? find_held_lock+0x2b/0x80 [ 349.865408][ T9554] ? hook_file_ioctl_common+0x144/0x410 [ 349.865458][ T9554] ? __fget_files+0x20e/0x3c0 [ 349.865520][ T9554] ? __pfx_tty_ioctl+0x10/0x10 [ 349.865569][ T9554] __x64_sys_ioctl+0x18e/0x210 [ 349.865615][ T9554] do_syscall_64+0xcd/0xf80 [ 349.865671][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.865707][ T9554] RIP: 0033:0x7fcf1dd8f7c9 [ 349.865734][ T9554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.865769][ T9554] RSP: 002b:00007fcf1ece9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.865802][ T9554] RAX: ffffffffffffffda RBX: 00007fcf1dfe5fa0 RCX: 00007fcf1dd8f7c9 [ 349.865824][ T9554] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000008 [ 349.865845][ T9554] RBP: 00007fcf1de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.865873][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.865899][ T9554] R13: 00007fcf1dfe6038 R14: 00007fcf1dfe5fa0 R15: 00007fff7ba8d068 [ 349.865946][ T9554] [ 350.364670][ T9555] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 350.409035][ T9558] ptrace attach of "./syz-executor exec"[5830] was attempted by ",՚'R\x0d3ߓч(gCKpZpH8Y kT\x0c`\x0cC}sR3Lf C,PV.B\x1bUU|pT4C|er$ƲAf}B^(HgKZbyu+kW h&Ҟ;8MοmD|LYZOZ\x0aG2TyܼϊkM\x22He'<*\x1b޴:NY\x0bgt>(nb1h0j/ޗ/Y8\x07$ln~ZPWfBywؔ#?fߙ T[kIi.D/g`p'6*3'Q [ 361.321085][ T9770] dump_stack_lvl+0x16c/0x1f0 [ 361.321132][ T9770] should_fail_ex+0x512/0x640 [ 361.321160][ T9770] ? __kmalloc_noprof+0xca/0x910 [ 361.321189][ T9770] should_failslab+0xc2/0x120 [ 361.321227][ T9770] __kmalloc_noprof+0xeb/0x910 [ 361.321253][ T9770] ? lsm_blob_alloc+0x68/0x90 [ 361.321293][ T9770] ? lsm_blob_alloc+0x68/0x90 [ 361.321326][ T9770] lsm_blob_alloc+0x68/0x90 [ 361.321361][ T9770] security_prepare_creds+0x2f/0x270 [ 361.321397][ T9770] prepare_creds+0x5d6/0x940 [ 361.321428][ T9770] __sys_setregid+0x101/0x910 [ 361.321457][ T9770] ? rcu_is_watching+0x12/0xc0 [ 361.321494][ T9770] do_syscall_64+0xcd/0xf80 [ 361.321532][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.321556][ T9770] RIP: 0033:0x7f6e22b8f7c9 [ 361.321575][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.321599][ T9770] RSP: 002b:00007f6e2395d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 361.321621][ T9770] RAX: ffffffffffffffda RBX: 00007f6e22de6180 RCX: 00007f6e22b8f7c9 [ 361.321636][ T9770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 361.321651][ T9770] RBP: 00007f6e22c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 361.321665][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.321678][ T9770] R13: 00007f6e22de6218 R14: 00007f6e22de6180 R15: 00007ffc9fb0e9e8 [ 361.321709][ T9770] [ 361.567137][ T9770] netlink: 54 bytes leftover after parsing attributes in process `syz.0.706'. [ 361.647717][ T9766] zswap: compressor not available [ 362.817581][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 363.579667][ T9809] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 363.604269][ T9809] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 363.662066][ T9809] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 363.734705][ T9809] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 363.941870][ T9810] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 364.048892][ T9810] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 364.064779][ T9810] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 364.082833][ T9810] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 364.193717][ T9813] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 364.284895][ T9813] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 364.301293][ T9813] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 364.328486][ T9813] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 365.184727][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 365.198475][ T9819] netlink: 13 bytes leftover after parsing attributes in process `syz.2.718'. [ 365.381315][ T9815] Process accounting resumed [ 365.611537][ T9836] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 373.942659][T10010] dump_stack_lvl+0x16c/0x1f0 [ 373.942711][T10010] should_fail_ex+0x512/0x640 [ 373.942748][T10010] get_futex_key+0x1d0/0x15f0 [ 373.942785][T10010] ? __pfx_get_futex_key+0x10/0x10 [ 373.942829][T10010] futex_wake+0xea/0x530 [ 373.942868][T10010] ? kasan_quarantine_put+0x10a/0x240 [ 373.942910][T10010] ? __pfx_futex_wake+0x10/0x10 [ 373.942954][T10010] ? putname+0xf5/0x1a0 [ 373.942989][T10010] do_futex+0x1e3/0x350 [ 373.943023][T10010] ? __pfx_do_futex+0x10/0x10 [ 373.943067][T10010] __x64_sys_futex+0x1e0/0x4c0 [ 373.943104][T10010] ? __x64_sys_openat+0x174/0x210 [ 373.943138][T10010] ? __pfx___x64_sys_futex+0x10/0x10 [ 373.943187][T10010] do_syscall_64+0xcd/0xf80 [ 373.943235][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.943266][T10010] RIP: 0033:0x7fcf1dd8f7c9 [ 373.943289][T10010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.943318][T10010] RSP: 002b:00007fcf1ece90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.943345][T10010] RAX: ffffffffffffffda RBX: 00007fcf1dfe5fa8 RCX: 00007fcf1dd8f7c9 [ 373.943364][T10010] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcf1dfe5fac [ 373.943382][T10010] RBP: 00007fcf1dfe5fa0 R08: 00007fcf1ecea000 R09: 0000000000000000 [ 373.943401][T10010] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 373.943418][T10010] R13: 00007fcf1dfe6038 R14: 00007fff7ba8cf80 R15: 00007fff7ba8d068 [ 373.943458][T10010] [ 374.522020][T10018] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 376.429104][T10050] zswap: compressor not available [ 376.625173][ T5841] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 376.625219][ T5841] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 376.644252][ T5841] Bluetooth: hci1: Dropping invalid advertising data [ 376.652803][ T5841] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 376.652845][ T5841] Bluetooth: hci1: Dropping invalid advertising data [ 376.667853][ T5841] Bluetooth: hci1: Malformed LE Event: 0x02 [ 377.181783][T10076] [U] 0="/ [ 377.185696][T10076] [U] [ 377.189686][T10076] [U] EeQ@ [ 377.193878][T10076] [U]  [ 379.739406][T10105] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.780'. [ 380.267661][T10116] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.781'. [ 380.596163][T10113] Invalid ELF header magic: != ELF [ 381.676216][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 382.857753][T10151] netlink: 206 bytes leftover after parsing attributes in process `syz.2.787'. [ 383.190246][T10154] FAULT_INJECTION: forcing a failure. [ 383.190246][T10154] name failslab, interval 1, probability 0, space 0, times 0 [ 383.214393][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.5.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.214443][T10154] Tainted: [L]=SOFTLOCKUP [ 383.214453][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.214471][T10154] Call Trace: [ 383.214483][T10154] [ 383.214494][T10154] dump_stack_lvl+0x16c/0x1f0 [ 383.214554][T10154] should_fail_ex+0x512/0x640 [ 383.214589][T10154] ? __kmalloc_noprof+0xca/0x910 [ 383.214625][T10154] should_failslab+0xc2/0x120 [ 383.214675][T10154] __kmalloc_noprof+0xeb/0x910 [ 383.214708][T10154] ? splice_from_pipe_next+0x1f7/0x5d0 [ 383.214755][T10154] ? copy_splice_read+0x1a8/0xc20 [ 383.214833][T10154] ? copy_splice_read+0x1a8/0xc20 [ 383.214880][T10154] copy_splice_read+0x1a8/0xc20 [ 383.214928][T10154] ? __pfx_pipe_to_null+0x10/0x10 [ 383.214980][T10154] ? __pfx_copy_splice_read+0x10/0x10 [ 383.215024][T10154] ? pipe_unlock+0x4a/0x70 [ 383.215072][T10154] ? __pfx_splice_from_pipe+0x10/0x10 [ 383.215129][T10154] ? find_held_lock+0x2b/0x80 [ 383.215176][T10154] ? __pfx_copy_splice_read+0x10/0x10 [ 383.215221][T10154] do_splice_read+0x285/0x370 [ 383.215272][T10154] splice_direct_to_actor+0x2a1/0xa30 [ 383.215323][T10154] ? __pfx_direct_splice_actor+0x10/0x10 [ 383.215380][T10154] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 383.215446][T10154] do_splice_direct+0x174/0x240 [ 383.215497][T10154] ? __pfx_do_splice_direct+0x10/0x10 [ 383.215547][T10154] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 383.215596][T10154] ? bpf_lsm_file_permission+0x9/0x10 [ 383.215634][T10154] ? security_file_permission+0x71/0x210 [ 383.215677][T10154] ? rw_verify_area+0xcf/0x6c0 [ 383.215722][T10154] do_sendfile+0xb06/0xe50 [ 383.215772][T10154] ? __pfx_do_sendfile+0x10/0x10 [ 383.215823][T10154] ? __fget_files+0x204/0x3c0 [ 383.215872][T10154] ? __x64_sys_futex+0x1e0/0x4c0 [ 383.215914][T10154] ? __x64_sys_futex+0x1e9/0x4c0 [ 383.215956][T10154] __x64_sys_sendfile64+0x1d8/0x220 [ 383.215990][T10154] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 383.216021][T10154] ? syscall_user_dispatch+0x78/0x140 [ 383.216071][T10154] do_syscall_64+0xcd/0xf80 [ 383.216138][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.216170][T10154] RIP: 0033:0x7f2fb538f7c9 [ 383.216195][T10154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.216226][T10154] RSP: 002b:00007f2fb6181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 383.216257][T10154] RAX: ffffffffffffffda RBX: 00007f2fb55e6090 RCX: 00007f2fb538f7c9 [ 383.216278][T10154] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 383.216297][T10154] RBP: 00007f2fb5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 383.216317][T10154] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 383.216337][T10154] R13: 00007f2fb55e6128 R14: 00007f2fb55e6090 R15: 00007ffda0d01398 [ 383.216381][T10154] [ 384.393378][T10177] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.793'. [ 385.428886][T10195] FAULT_INJECTION: forcing a failure. [ 385.428886][T10195] name failslab, interval 1, probability 0, space 0, times 0 [ 385.494644][T10195] CPU: 1 UID: 0 PID: 10195 Comm: syz.1.797 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.494694][T10195] Tainted: [L]=SOFTLOCKUP [ 385.494706][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.494723][T10195] Call Trace: [ 385.494731][T10195] [ 385.494741][T10195] dump_stack_lvl+0x16c/0x1f0 [ 385.494790][T10195] should_fail_ex+0x512/0x640 [ 385.494820][T10195] ? fs_reclaim_acquire+0xae/0x150 [ 385.494868][T10195] should_failslab+0xc2/0x120 [ 385.494912][T10195] __kmalloc_noprof+0xeb/0x910 [ 385.494942][T10195] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 385.495006][T10195] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 385.495045][T10195] tomoyo_realpath_from_path+0xc2/0x6e0 [ 385.495093][T10195] tomoyo_check_open_permission+0x2ab/0x3c0 [ 385.495128][T10195] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 385.495192][T10195] ? lock_acquire+0x179/0x330 [ 385.495219][T10195] ? find_held_lock+0x2b/0x80 [ 385.495255][T10195] ? mnt_get_write_access+0x52/0x2f0 [ 385.495290][T10195] tomoyo_file_open+0x6b/0x90 [ 385.495335][T10195] security_file_open+0x84/0x1e0 [ 385.495373][T10195] do_dentry_open+0x597/0x1590 [ 385.495418][T10195] ? security_inode_permission+0xbf/0x260 [ 385.495456][T10195] vfs_open+0x82/0x3f0 [ 385.495490][T10195] path_openat+0x2078/0x3140 [ 385.495552][T10195] ? __pfx_path_openat+0x10/0x10 [ 385.495608][T10195] do_filp_open+0x20b/0x470 [ 385.495651][T10195] ? __pfx_do_filp_open+0x10/0x10 [ 385.495719][T10195] ? alloc_fd+0x471/0x7d0 [ 385.495770][T10195] do_sys_openat2+0x121/0x290 [ 385.495801][T10195] ? __pfx_do_sys_openat2+0x10/0x10 [ 385.495845][T10195] __x64_sys_openat+0x174/0x210 [ 385.495878][T10195] ? __pfx___x64_sys_openat+0x10/0x10 [ 385.495925][T10195] do_syscall_64+0xcd/0xf80 [ 385.495970][T10195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.495998][T10195] RIP: 0033:0x7fcf1dd8f7c9 [ 385.496019][T10195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.496046][T10195] RSP: 002b:00007fcf1ecc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 385.496072][T10195] RAX: ffffffffffffffda RBX: 00007fcf1dfe6090 RCX: 00007fcf1dd8f7c9 [ 385.496090][T10195] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 385.496108][T10195] RBP: 00007fcf1de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 385.496125][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.496141][T10195] R13: 00007fcf1dfe6128 R14: 00007fcf1dfe6090 R15: 00007fff7ba8d068 [ 385.496176][T10195] [ 385.496193][T10195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.014833][T10228] FAULT_INJECTION: forcing a failure. [ 388.014833][T10228] name failslab, interval 1, probability 0, space 0, times 0 [ 388.099939][T10228] CPU: 0 UID: 0 PID: 10228 Comm: syz.2.804 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.099977][T10228] Tainted: [L]=SOFTLOCKUP [ 388.099984][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.099997][T10228] Call Trace: [ 388.100005][T10228] [ 388.100013][T10228] dump_stack_lvl+0x16c/0x1f0 [ 388.100052][T10228] should_fail_ex+0x512/0x640 [ 388.100082][T10228] ? __kvmalloc_node_noprof+0x129/0xa40 [ 388.100118][T10228] should_failslab+0xc2/0x120 [ 388.100154][T10228] __kvmalloc_node_noprof+0x14a/0xa40 [ 388.100189][T10228] ? v4l2_ctrl_new+0x982/0x2190 [ 388.100226][T10228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 388.100267][T10228] ? v4l2_ctrl_new+0x982/0x2190 [ 388.100302][T10228] v4l2_ctrl_new+0x982/0x2190 [ 388.100349][T10228] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 388.100384][T10228] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 388.100428][T10228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 388.100467][T10228] v4l2_ctrl_new_std+0x1be/0x290 [ 388.100512][T10228] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 388.100548][T10228] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 388.100600][T10228] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 388.100641][T10228] ? media_request_object_init+0x100/0x180 [ 388.100675][T10228] vicodec_open+0x1d9/0xf70 [ 388.100704][T10228] ? kobject_get_unless_zero+0x156/0x1e0 [ 388.100748][T10228] v4l2_open+0x1d2/0x5e0 [ 388.100781][T10228] ? __pfx_v4l2_open+0x10/0x10 [ 388.100812][T10228] chrdev_open+0x234/0x6a0 [ 388.100848][T10228] ? __pfx_apparmor_file_open+0x10/0x10 [ 388.100872][T10228] ? __pfx_chrdev_open+0x10/0x10 [ 388.100909][T10228] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 388.100953][T10228] do_dentry_open+0x748/0x1590 [ 388.100987][T10228] ? __pfx_chrdev_open+0x10/0x10 [ 388.101031][T10228] vfs_open+0x82/0x3f0 [ 388.101059][T10228] path_openat+0x2078/0x3140 [ 388.101104][T10228] ? __pfx_path_openat+0x10/0x10 [ 388.101150][T10228] do_filp_open+0x20b/0x470 [ 388.101186][T10228] ? __pfx_do_filp_open+0x10/0x10 [ 388.101243][T10228] ? alloc_fd+0x471/0x7d0 [ 388.101286][T10228] do_sys_openat2+0x121/0x290 [ 388.101311][T10228] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.101349][T10228] __x64_sys_openat+0x174/0x210 [ 388.101376][T10228] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.101415][T10228] do_syscall_64+0xcd/0xf80 [ 388.101453][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.101476][T10228] RIP: 0033:0x7fb7d198f7c9 [ 388.101494][T10228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.101517][T10228] RSP: 002b:00007fb7cfbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.101539][T10228] RAX: ffffffffffffffda RBX: 00007fb7d1be6090 RCX: 00007fb7d198f7c9 [ 388.101559][T10228] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 388.101574][T10228] RBP: 00007fb7d1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.101588][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.101602][T10228] R13: 00007fb7d1be6128 R14: 00007fb7d1be6090 R15: 00007ffe7351df88 [ 388.101632][T10228] [ 388.906982][T10245] netlink: 'syz.0.809': attribute type 33 has an invalid length. [ 388.924668][T10245] netlink: 322 bytes leftover after parsing attributes in process `syz.0.809'. [ 389.486752][T10249] Invalid ELF header magic: != ELF [ 389.784612][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.794703][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.808195][T10275] netlink: 334 bytes leftover after parsing attributes in process `syz.5.815'. [ 391.833125][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 393.005225][T10282] random: crng reseeded on system resumption [ 393.695962][T10299] can: request_module (can-proto-3) failed. [ 394.778898][T10327] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.824'. [ 396.004357][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.828'. [ 396.246660][T10337] netlink: 25 bytes leftover after parsing attributes in process `syz.1.825'. [ 396.446782][T10363] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 396.467785][T10337] Process accounting paused [ 400.284764][T10413] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 400.690962][T10421] netlink: 2468 bytes leftover after parsing attributes in process `syz.5.844'. [ 402.083716][T10439] NFSD: Failed to start, no listeners configured. [ 402.909403][T10454] zswap: compressor 000 not available [ 404.503748][T10487] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 405.113827][T10472] Invalid ELF header magic: != ELF [ 406.737038][T10512] FAULT_INJECTION: forcing a failure. [ 406.737038][T10512] name fail_futex, interval 1, probability 0, space 0, times 0 [ 406.867278][T10506] FAULT_INJECTION: forcing a failure. [ 406.867278][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 406.895984][T10512] CPU: 1 UID: 0 PID: 10512 Comm: syz.1.857 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.896039][T10512] Tainted: [L]=SOFTLOCKUP [ 406.896052][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.896072][T10512] Call Trace: [ 406.896083][T10512] [ 406.896096][T10512] dump_stack_lvl+0x16c/0x1f0 [ 406.896155][T10512] should_fail_ex+0x512/0x640 [ 406.896199][T10512] get_futex_key+0x1d0/0x15f0 [ 406.896242][T10512] ? __pfx_get_futex_key+0x10/0x10 [ 406.896294][T10512] futex_wake+0xea/0x530 [ 406.896340][T10512] ? kasan_quarantine_put+0x10a/0x240 [ 406.896387][T10512] ? __pfx_futex_wake+0x10/0x10 [ 406.896438][T10512] ? putname+0xf5/0x1a0 [ 406.896487][T10512] do_futex+0x1e3/0x350 [ 406.896533][T10512] ? __pfx_do_futex+0x10/0x10 [ 406.896585][T10512] __x64_sys_futex+0x1e0/0x4c0 [ 406.896628][T10512] ? __x64_sys_openat+0x174/0x210 [ 406.896669][T10512] ? __pfx___x64_sys_futex+0x10/0x10 [ 406.896726][T10512] do_syscall_64+0xcd/0xf80 [ 406.896781][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.896814][T10512] RIP: 0033:0x7fcf1dd8f7c9 [ 406.896841][T10512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.896875][T10512] RSP: 002b:00007fcf1ecc80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 406.896908][T10512] RAX: ffffffffffffffda RBX: 00007fcf1dfe6098 RCX: 00007fcf1dd8f7c9 [ 406.896930][T10512] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcf1dfe609c [ 406.896952][T10512] RBP: 00007fcf1dfe6090 R08: 00007fcf1ecea000 R09: 0000000000000000 [ 406.896974][T10512] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 406.896994][T10512] R13: 00007fcf1dfe6128 R14: 00007fff7ba8cf80 R15: 00007fff7ba8d068 [ 406.897040][T10512] [ 407.015092][T10506] CPU: 0 UID: 0 PID: 10506 Comm: syz.0.856 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.015228][T10506] Tainted: [L]=SOFTLOCKUP [ 407.015265][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.015318][T10506] Call Trace: [ 407.015342][T10506] [ 407.015380][T10506] dump_stack_lvl+0x16c/0x1f0 [ 407.015516][T10506] should_fail_ex+0x512/0x640 [ 407.015641][T10506] ? __kmalloc_cache_noprof+0x5f/0x800 [ 407.015780][T10506] should_failslab+0xc2/0x120 [ 407.015917][T10506] __kmalloc_cache_noprof+0x80/0x800 [ 407.016021][T10506] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 407.016169][T10506] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 407.016292][T10506] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 407.016424][T10506] drm_atomic_get_crtc_state+0x1de/0x620 [ 407.016517][T10506] drm_atomic_get_plane_state+0x4a3/0x760 [ 407.016622][T10506] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 407.016747][T10506] ? rcu_is_watching+0x12/0xc0 [ 407.016896][T10506] ? __mutex_lock+0x27b/0x1ca0 [ 407.017084][T10506] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 407.017199][T10506] ? trace_contention_end+0xdd/0x110 [ 407.017400][T10506] drm_client_modeset_commit_locked+0x14d/0x580 [ 407.017523][T10506] drm_client_modeset_commit+0x4f/0x80 [ 407.017638][T10506] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 407.017779][T10506] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 407.017911][T10506] drm_fbdev_client_restore+0x1b/0x30 [ 407.018047][T10506] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 407.018190][T10506] drm_client_dev_restore+0x200/0x2a0 [ 407.018318][T10506] drm_release+0x2c6/0x360 [ 407.018457][T10506] ? __pfx_drm_release+0x10/0x10 [ 407.018552][T10506] __fput+0x402/0xb70 [ 407.018668][T10506] task_work_run+0x150/0x240 [ 407.018775][T10506] ? __pfx_task_work_run+0x10/0x10 [ 407.018862][T10506] ? __do_sys_close_range+0x278/0x730 [ 407.019030][T10506] exit_to_user_mode_loop+0xfb/0x540 [ 407.019154][T10506] do_syscall_64+0x4ee/0xf80 [ 407.019301][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.019391][T10506] RIP: 0033:0x7f6e22b8f7c9 [ 407.019463][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.019540][T10506] RSP: 002b:00007f6e2395d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 407.019623][T10506] RAX: 0000000000000000 RBX: 00007f6e22de6180 RCX: 00007f6e22b8f7c9 [ 407.019677][T10506] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 407.019753][T10506] RBP: 00007f6e22c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.019820][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.019885][T10506] R13: 00007f6e22de6218 R14: 00007f6e22de6180 R15: 00007ffc9fb0e9e8 [ 407.020008][T10506] [ 407.945963][T10519] synth uevent: /bus/mei: unknown uevent action string [ 407.994452][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 409.967207][T10550] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 410.842775][T10566] netlink: 9 bytes leftover after parsing attributes in process `syz.1.868'. [ 412.314594][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 413.176522][T10597] FAULT_INJECTION: forcing a failure. [ 413.176522][T10597] name failslab, interval 1, probability 0, space 0, times 0 [ 413.219829][T10597] CPU: 1 UID: 0 PID: 10597 Comm: syz.2.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.219878][T10597] Tainted: [L]=SOFTLOCKUP [ 413.219888][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.219906][T10597] Call Trace: [ 413.219916][T10597] [ 413.219928][T10597] dump_stack_lvl+0x16c/0x1f0 [ 413.219987][T10597] should_fail_ex+0x512/0x640 [ 413.220021][T10597] ? __kmalloc_noprof+0xca/0x910 [ 413.220059][T10597] should_failslab+0xc2/0x120 [ 413.220108][T10597] __kmalloc_noprof+0xeb/0x910 [ 413.220143][T10597] ? lsm_blob_alloc+0x68/0x90 [ 413.220197][T10597] ? lsm_blob_alloc+0x68/0x90 [ 413.220238][T10597] lsm_blob_alloc+0x68/0x90 [ 413.220287][T10597] security_prepare_creds+0x2f/0x270 [ 413.220334][T10597] prepare_creds+0x5d6/0x940 [ 413.220374][T10597] set_current_groups+0x15/0xd0 [ 413.220410][T10597] __do_sys_setgroups+0x3e0/0x4f0 [ 413.220450][T10597] do_syscall_64+0xcd/0xf80 [ 413.220501][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.220534][T10597] RIP: 0033:0x7fb7d198f7c9 [ 413.220558][T10597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.220592][T10597] RSP: 002b:00007fb7cfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 413.220621][T10597] RAX: ffffffffffffffda RBX: 00007fb7d1be5fa0 RCX: 00007fb7d198f7c9 [ 413.220643][T10597] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 413.220662][T10597] RBP: 00007fb7d1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.220682][T10597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.220701][T10597] R13: 00007fb7d1be6038 R14: 00007fb7d1be5fa0 R15: 00007ffe7351df88 [ 413.220746][T10597] [ 413.910021][T10606] zswap: compressor q} not available [ 414.052646][T10620] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 414.649246][T10628] random: crng reseeded on system resumption [ 414.907228][T10629] hub 1-0:1.0: USB hub found [ 415.010554][T10629] hub 1-0:1.0: 1 port detected [ 416.885875][T10657] bridge0: port 3(batadv0) entered blocking state [ 416.911180][T10657] bridge0: port 3(batadv0) entered disabled state [ 416.921306][T10657] batadv0: entered allmulticast mode [ 416.937373][T10657] batadv0: entered promiscuous mode [ 416.943682][T10657] bridge0: port 3(batadv0) entered blocking state [ 416.950352][T10657] bridge0: port 3(batadv0) entered forwarding state [ 417.275213][ T9911] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 417.284956][ T9911] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 418.180642][T10685] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 419.183764][T10692] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 419.224791][T10692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.231023][T10692] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.244693][T10692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.253161][T10692] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 420.236393][ C1] ------------[ cut here ]------------ [ 420.242379][ C1] WARNING: net/mptcp/subflow.c:1527 at subflow_data_ready+0x40b/0x790, CPU#1: ksoftirqd/1/23 [ 420.252710][ C1] Modules linked in: [ 420.256944][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.267870][ C1] Tainted: [L]=SOFTLOCKUP [ 420.272242][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.282420][ C1] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 420.288307][ C1] Code: 89 ee e8 f8 4d 5d f6 40 84 ed 75 21 e8 ae 53 5d f6 44 89 fe bf 07 00 00 00 e8 41 4e 5d f6 41 83 ff 07 74 09 e8 96 53 5d f6 90 <0f> 0b 90 e8 8d 53 5d f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 420.308181][ C1] RSP: 0018:ffffc900001d7308 EFLAGS: 00010246 [ 420.314370][ C1] RAX: 0000000000000000 RBX: ffff88807e43a640 RCX: ffffffff8b6104ff [ 420.322394][ C1] RDX: ffff88801daf5b80 RSI: ffffffff8b61050a RDI: 0000000000000005 [ 420.330518][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 420.338612][ C1] R10: 0000000000000004 R11: ffff88801daf66b0 R12: ffff88807d1c4800 [ 420.346720][ C1] R13: 1ffff9200003ae61 R14: ffff88807eb1cc00 R15: 0000000000000004 [ 420.354795][ C1] FS: 0000000000000000(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 [ 420.363819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.370493][ C1] CR2: 0000200000177000 CR3: 00000000612d0000 CR4: 00000000003526f0 [ 420.378546][ C1] Call Trace: [ 420.381879][ C1] [ 420.384889][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 420.390537][ C1] ? tcp_data_ecn_check+0x54/0x740 [ 420.395786][ C1] tcp_data_ready+0x114/0x5a0 [ 420.400534][ C1] tcp_data_queue+0x1ac2/0x4ff0 [ 420.405529][ C1] ? tcp_urg+0x10f/0xb80 [ 420.409865][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 420.415111][ C1] ? tcp_try_undo_loss+0x860/0x860 [ 420.420266][ C1] tcp_rcv_state_process+0xfb6/0x6540 [ 420.425713][ C1] ? lock_acquire+0x179/0x330 [ 420.430440][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 420.436428][ C1] ? sk_filter_trim_cap+0x11a/0xde0 [ 420.441709][ C1] ? lock_acquire+0x179/0x330 [ 420.446441][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 420.451506][ C1] ? tcp_v4_do_rcv+0x68e/0x10a0 [ 420.456412][ C1] tcp_v4_do_rcv+0x68e/0x10a0 [ 420.461122][ C1] tcp_v4_rcv+0x3077/0x4db0 [ 420.465718][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 420.470593][ C1] ? find_held_lock+0x2b/0x80 [ 420.475353][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 420.480880][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 420.485820][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 420.491293][ C1] ip_local_deliver_finish+0x3f2/0x720 [ 420.496862][ C1] ip_local_deliver+0x18e/0x1f0 [ 420.501748][ C1] ip_rcv+0x2e0/0x600 [ 420.505801][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 420.510352][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 420.516306][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 420.522753][ C1] ? lock_acquire+0x179/0x330 [ 420.527489][ C1] ? process_backlog+0x450/0x1650 [ 420.532547][ C1] __netif_receive_skb+0x1d/0x160 [ 420.537628][ C1] process_backlog+0x4a2/0x1650 [ 420.542517][ C1] __napi_poll.constprop.0+0xb3/0x540 [ 420.547951][ C1] net_rx_action+0x9f9/0xfa0 [ 420.552575][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 420.557735][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.562531][ C1] ? finish_task_switch.isra.0+0x207/0xbd0 [ 420.568401][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.573662][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 420.578943][ C1] ? sched_clock+0x38/0x60 [ 420.583443][ C1] ? sched_clock_cpu+0x6c/0x530 [ 420.588435][ C1] handle_softirqs+0x219/0x950 [ 420.593241][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 420.598610][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 420.603752][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 420.608924][ C1] run_ksoftirqd+0x3a/0x60 [ 420.613405][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 420.618438][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 420.623934][ C1] kthread+0x3c5/0x780 [ 420.628057][ C1] ? __pfx_kthread+0x10/0x10 [ 420.632671][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.637498][ C1] ? __pfx_kthread+0x10/0x10 [ 420.642132][ C1] ret_from_fork+0x983/0xb10 [ 420.646837][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 420.652001][ C1] ? __switch_to+0x7af/0x10d0 [ 420.656739][ C1] ? __pfx_kthread+0x10/0x10 [ 420.661374][ C1] ret_from_fork_asm+0x1a/0x30 [ 420.666237][ C1] [ 420.669272][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 420.676563][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.687350][ C1] Tainted: [L]=SOFTLOCKUP [ 420.691679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.701770][ C1] Call Trace: [ 420.705075][ C1] [ 420.708025][ C1] dump_stack_lvl+0x3d/0x1f0 [ 420.712703][ C1] vpanic+0x640/0x6f0 [ 420.716732][ C1] ? subflow_data_ready+0x40b/0x790 [ 420.721966][ C1] panic+0xca/0xd0 [ 420.725721][ C1] ? __pfx_panic+0x10/0x10 [ 420.730184][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 420.735319][ C1] check_panic_on_warn+0xab/0xb0 [ 420.740328][ C1] __warn+0x108/0x3c0 [ 420.744340][ C1] __report_bug+0x2a0/0x520 [ 420.748886][ C1] ? subflow_data_ready+0x40b/0x790 [ 420.754114][ C1] ? __pfx___report_bug+0x10/0x10 [ 420.759197][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 420.765048][ C1] ? __ip_queue_xmit+0x94d/0x2330 [ 420.770202][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 420.776138][ C1] ? mptcp_get_options+0x19c/0x2c50 [ 420.781371][ C1] ? subflow_data_ready+0x40b/0x790 [ 420.786593][ C1] report_bug+0xb2/0x220 [ 420.790876][ C1] ? subflow_data_ready+0x40b/0x790 [ 420.796099][ C1] handle_bug+0x127/0x260 [ 420.800461][ C1] exc_invalid_op+0x17/0x50 [ 420.804993][ C1] asm_exc_invalid_op+0x1a/0x20 [ 420.809941][ C1] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 420.815771][ C1] Code: 89 ee e8 f8 4d 5d f6 40 84 ed 75 21 e8 ae 53 5d f6 44 89 fe bf 07 00 00 00 e8 41 4e 5d f6 41 83 ff 07 74 09 e8 96 53 5d f6 90 <0f> 0b 90 e8 8d 53 5d f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 420.835422][ C1] RSP: 0018:ffffc900001d7308 EFLAGS: 00010246 [ 420.841523][ C1] RAX: 0000000000000000 RBX: ffff88807e43a640 RCX: ffffffff8b6104ff [ 420.849515][ C1] RDX: ffff88801daf5b80 RSI: ffffffff8b61050a RDI: 0000000000000005 [ 420.857521][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 420.865521][ C1] R10: 0000000000000004 R11: ffff88801daf66b0 R12: ffff88807d1c4800 [ 420.873518][ C1] R13: 1ffff9200003ae61 R14: ffff88807eb1cc00 R15: 0000000000000004 [ 420.881532][ C1] ? subflow_data_ready+0x3ff/0x790 [ 420.886750][ C1] ? subflow_data_ready+0x40a/0x790 [ 420.892064][ C1] ? subflow_data_ready+0x40a/0x790 [ 420.897280][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 420.902876][ C1] ? tcp_data_ecn_check+0x54/0x740 [ 420.908031][ C1] tcp_data_ready+0x114/0x5a0 [ 420.912760][ C1] tcp_data_queue+0x1ac2/0x4ff0 [ 420.917650][ C1] ? tcp_urg+0x10f/0xb80 [ 420.921936][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 420.927165][ C1] ? tcp_try_undo_loss+0x860/0x860 [ 420.932335][ C1] tcp_rcv_state_process+0xfb6/0x6540 [ 420.937735][ C1] ? lock_acquire+0x179/0x330 [ 420.942536][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 420.948380][ C1] ? sk_filter_trim_cap+0x11a/0xde0 [ 420.953648][ C1] ? lock_acquire+0x179/0x330 [ 420.958351][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 420.963440][ C1] ? tcp_v4_do_rcv+0x68e/0x10a0 [ 420.968414][ C1] tcp_v4_do_rcv+0x68e/0x10a0 [ 420.973151][ C1] tcp_v4_rcv+0x3077/0x4db0 [ 420.977706][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 420.982596][ C1] ? find_held_lock+0x2b/0x80 [ 420.987321][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 420.992850][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 420.997737][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 421.003241][ C1] ip_local_deliver_finish+0x3f2/0x720 [ 421.008734][ C1] ip_local_deliver+0x18e/0x1f0 [ 421.013638][ C1] ip_rcv+0x2e0/0x600 [ 421.017656][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 421.022205][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 421.028127][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 421.034587][ C1] ? lock_acquire+0x179/0x330 [ 421.039309][ C1] ? process_backlog+0x450/0x1650 [ 421.044389][ C1] __netif_receive_skb+0x1d/0x160 [ 421.049458][ C1] process_backlog+0x4a2/0x1650 [ 421.054365][ C1] __napi_poll.constprop.0+0xb3/0x540 [ 421.059805][ C1] net_rx_action+0x9f9/0xfa0 [ 421.064434][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 421.069595][ C1] ? rcu_is_watching+0x12/0xc0 [ 421.074420][ C1] ? finish_task_switch.isra.0+0x207/0xbd0 [ 421.080269][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 421.085513][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 421.090752][ C1] ? sched_clock+0x38/0x60 [ 421.095211][ C1] ? sched_clock_cpu+0x6c/0x530 [ 421.100213][ C1] handle_softirqs+0x219/0x950 [ 421.105025][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 421.110445][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 421.115591][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 421.120770][ C1] run_ksoftirqd+0x3a/0x60 [ 421.125219][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 421.130208][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 421.135714][ C1] kthread+0x3c5/0x780 [ 421.139914][ C1] ? __pfx_kthread+0x10/0x10 [ 421.144602][ C1] ? rcu_is_watching+0x12/0xc0 [ 421.149422][ C1] ? __pfx_kthread+0x10/0x10 [ 421.154048][ C1] ret_from_fork+0x983/0xb10 [ 421.158660][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 421.163800][ C1] ? __switch_to+0x7af/0x10d0 [ 421.168513][ C1] ? __pfx_kthread+0x10/0x10 [ 421.173162][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.177981][ C1] [ 421.181632][ C1] Kernel Offset: disabled [ 421.186006][ C1] Rebooting in 86400 seconds..