last executing test programs: 3m9.762145433s ago: executing program 0 (id=954): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x20000, 0x0) ioctl$auto_BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000340)={@raw=0xffffffffffffffff, 0x8000, 0x3f, @unused, @devid=0x74}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(0x3, 0x0, 0x6a) ioctl$auto(0xffffffffffffffff, 0x4b44, 0x1) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0x3, 0xfffffffffffffffd, 0xc44, 0x8) 3m8.830584238s ago: executing program 0 (id=956): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r2) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029d40ab62c15de217000fddbdf252f000000187465616d5f736c61766472773a03d90700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r6 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xab700, 0x0) read$auto_proc_timers_operations_base(r6, &(0x7f0000000080)=""/173, 0xad) write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r8, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r5, 0x4008af20, &(0x7f00000001c0)={0xe0}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) clock_gettime$auto(0xa, &(0x7f0000000000)={0xf, 0xb}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f0000000240)=0xf6, 0x3, 0x3, 0x0, &(0x7f0000000200)=0xb, 0x71a8dce8) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) 3m6.878715891s ago: executing program 0 (id=966): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x10, 0x2, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002000000000000000000008869e71e0000", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880800030004"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) capget$auto(&(0x7f0000000000)={0x4, 0xffffffffffffffff}, &(0x7f0000000040)={0x6, 0x2a, 0x401}) getpgid$auto(r2) prctl$auto_PR_SET_MM_ENV_END(0x36020000, 0xb, r2, 0x4, 0x80000009) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000084b5596fae3778de0f273e1e0ee2111bb44b22c195c4355d63836e427f99c6cc3b743d2a9c00b51b55f1e20e6d8b8ce03da3fedce816dc860486410386de198be8f9bb54d3bddbcbc85883b72d21318a31108c5135b329777034d8f5a0c0fc0c479146eb27f521de0cbfbaf31b9dd61db05d25c31dac5d59bcfed34d18e12f70013a6017f", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf25960000001a000d01e2d1b2c3e0f4246df8a3901298f8aa701033e4ad88680000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x300) 3m4.24459509s ago: executing program 0 (id=976): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0xe983, 0xdf, 0xeb1, 0x401, 0x6) socket(0x1d, 0x3, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2081, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) poll$auto(0x0, 0x4, 0x100004) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/ib-comp-unb-wq/max_active\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) 3m3.235889579s ago: executing program 0 (id=978): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2a, 0x2, 0xb) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) r1 = pipe$auto(0x0) getsockopt$auto_SO_TXREHASH(r1, 0xfff, 0x4a, &(0x7f0000000000)='{.{.\x00', &(0x7f0000000040)=0x4) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_GET_MSRS(r4, 0x4068aea3, &(0x7f0000000080)={0xa3}) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010001000000ffdbf4c617000000250002002f70726f632f6e656c2f7761746368646f675f74687265736800000000bff9be31a6b2d6f9e38bd2bf8bc972ce2f88dbc65ee8a7389a9ca18e33766f37fb80f0ef6d00c3e49047bfcf8fff6716d1a24ca660c9ab3897b2f6e786dd0f6031a5adfe21c54c11600678d4aec308b7e17bd504d599551d9d80095602a1d2c7e485bc1603ebae8045"], 0x3c}, 0x1, 0x0, 0x0, 0xc810}, 0x40) fcntl$auto(r0, 0x5, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x2ab01, 0x0) socketcall$auto_SYS_SHUTDOWN(0xd, &(0x7f0000000000)=0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r6 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(r6, 0x1, r6) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) 3m1.960058308s ago: executing program 0 (id=982): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lo/mtu\x00', 0x2062, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000054c0), r1) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005500)={0x14, r2, 0x1b15f34c990b8f8f, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r7 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x80044943, 0x0) ioctl$auto_I2C_SMBUS(r6, 0x720, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7}, @NFSD_A_SERVER_SCOPE={0xc, 0x4, 'ethtool\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x3ff}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xc}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xfffc}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) bpf$auto(0x0, &(0x7f0000000300)=@bpf_attr_7={@prog_id=0x6, 0x6bd, 0x4, r5}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x8000, 0xeb1, 0x401, 0x7fff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2, 0xa, 0x1) 2m48.54184883s ago: executing program 2 (id=1028): r0 = socket(0xa, 0x3, 0x3a) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x1000004, 0x40009, 0xdf, 0xa5d1, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) r1 = socketpair$auto(0x20004, 0x1, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0xc642, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) getrandom$auto(&(0x7f0000000080)='/dev/ttyS2\x00', 0xf, 0x7) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mq_open$auto(0x0, 0x400056a, 0x9, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, 0x0, 0x4008005) 2m46.672941057s ago: executing program 32 (id=982): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lo/mtu\x00', 0x2062, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000054c0), r1) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005500)={0x14, r2, 0x1b15f34c990b8f8f, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r7 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x80044943, 0x0) ioctl$auto_I2C_SMBUS(r6, 0x720, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7}, @NFSD_A_SERVER_SCOPE={0xc, 0x4, 'ethtool\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x3ff}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xc}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xfffc}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) bpf$auto(0x0, &(0x7f0000000300)=@bpf_attr_7={@prog_id=0x6, 0x6bd, 0x4, r5}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x8000, 0xeb1, 0x401, 0x7fff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2, 0xa, 0x1) 2m46.671378146s ago: executing program 2 (id=1035): r0 = semctl$auto(0x5, 0x7, 0xd1, 0xc8) rt_sigqueueinfo$auto(r0, 0x4, &(0x7f0000000240)={@siginfo_0_0={0xefdd, 0x7, 0x2, @_sigfault={&(0x7f0000000000)="d83cd099797aa85df1b0dea74810925b98db6ce5e1d315cf9db8161233274300f2eece6681efec907ad1bc77a7d1a888c5e537cd6601607a91da1878dc03cba5466bed0977e628428d40a86effefade8ea2fe9a60949557ba47883c23ed6aa9afb6f89bba7160912c94e02eb4cac3f4e61f031408aa31ab2e467c038287b12b58041f2b04cf93b68d0c689f08c90e75c5a289d90c89bf23fac158348180c8331ff36e3fa49a072a92c5f6dae16340a3ca32a4d44517b1467a42443f6b4e14446e5", @_addr_bnd={"3f2c512e09b3aad6", &(0x7f0000000100)="276c6c5fa5a70b60f1a750be9e0fc12b42fa48dcc5710e60d64868a9ae5f08732a4cfb60a991167b4a1ee3271116e3902c8f8b0e0b199dcec4fb42a10a57cb5562f8bdc266a4cff15577cdebe56f915b3e9d67cf7ba9bbe700a60dd54b93cabf71fecf5127a2efdbe8cee7df91d899808e032a2a0acf9aac7be88f2cf33e10ffe0337c7f833fa8dd6528016fb0cbf145c93bef39c07055016d75907440823008ae3dc1aa2fa68f6f5d1dc82ec3e981", &(0x7f00000001c0)="cdd28d0e91a9407f24414f95a037345f956a2e31c22182cfae993bb8f8f44490c9648b1bf8857a98f472801459c0a4acd441c55475fcfa636957cee4a183579ab508d4ad78a21d5f5896d6c4f776c2cb7e07258e3e7d"}}}}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x1c1000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyprintk\x00', 0xd8743, 0x0) msgctl$auto(0x8, 0x9, &(0x7f00000003c0)={{0x7fffffff, 0xee01, 0x0, 0x1, 0x684, 0x4, 0x3}, &(0x7f0000000340)=0xa, &(0x7f0000000380)=0x6, 0xf, 0x7, 0x7f, 0x7fffffffffffffff, 0x6, 0x8000, 0x4629, 0x7, @raw=0x3, @inferred=r0}) shmctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000000580)={{0xab, 0xffffffffffffffff, 0xee00, 0x1, 0x2, 0x2, 0x2}, 0x4, 0x2c, 0x2, 0x0, @raw=0x9, @raw=0x2, 0x6, 0x0, &(0x7f0000000440)="7a78b7b47cca0161f60e436594ea08149667403e7212801b1cc7fed7c23bf3670af74c8f41bb05f7dce641b6450b16ebbd30961d108b85119477c1899de2a48ff87b57587ec493c20a8709b214290f9608ca7800394d7b198f49bb9a749d55b1457ef77fd6fc32c6ac51a9d038bdc3a9cc33d8227d5e0c4408d957ccf187b6c901bca070ccb00810f2d4e2139fe66b87c863e1f972339ac91cf2115b2fb5b8129e642788049c7ac9bd3f99c75ad3566544f520c6cecbe68af820d828f8264899ed004aada32f036e9a040b1385ea4055191b1a1fa1ec4df934d978639bee797b2e6b1d1267f64203e3", &(0x7f0000000540)="8e719bb578335c92f1d89723e73fc45c122c12"}) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f0000000680)={{0x6, r2, r4, 0x7, 0x7, 0x7fff, 0x1}, 0xffffdfce, 0x8000000000000000, 0x7fff, 0x80000001, @raw=0x2, @inferred=r0, 0x6, 0x0, &(0x7f0000000600)="14efb86e15cb4c26e439fdb4b1", &(0x7f0000000640)="74a79b05bb46d560a452d13fe62b672a41621caea9adc2e5622a9703e3c4de"}) lsm_set_self_attr$auto(0x10000, &(0x7f0000000700)={0xfffffffffffffffe, 0x5, 0x8, 0x8b, "dfe14d80858f3c3a4b26369803c562696210f13e355a753f0e935c3d89cd8163f3dd66a810a11fd0f40fd55f5e49bde8f52a24cea82bfa2d5ff16b12d542fc5975c3e0ea4ec7df97d7aad2beef9d175314546c02e727415c403e55cbe8169b17ea93c21d49ac1b319f054fa03ee274cc81f69d889b510d20399b2bda363472b35af180def0822c7f12cb2f"}, 0x8, 0x8) lsm_get_self_attr$auto(0x2, &(0x7f00000007c0)={0x6, 0x6, 0x100000001, 0x2e, "dc50e0c4169d95bb26926efea257db0b9d28d676b93ed49960112222bbe29fa68cd2d4995bbd8f6e9b315e2114bd"}, &(0x7f0000000840)=0x401, 0x5) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x200, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2800c0c5) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x101000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000a00)={{0x8, 0x2, 0x2, 0x0, 0x6}, "da5d3d89c18f64e26fa873642ebcf2a9021afcab7ac9a9d717cac56c1216dd91"}) write$auto(r1, &(0x7f0000000a40)='nl80211\x00', 0x6) lsm_get_self_attr$auto(0xa, &(0x7f0000000a80)={0x5, 0x0, 0x0, 0x1000, "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"}, &(0x7f0000001ac0)=0x32e6, 0xb4) r9 = pipe$auto(&(0x7f0000001b00)=r8) r11 = ioctl$auto_TUNGETVNETLE2(r10, 0x800454dd, &(0x7f0000001b40)=0x7) shmctl$auto_SHM_INFO(0x5a, 0xe, &(0x7f0000001c80)={{0xfffffffb, r5, r4, 0x7, 0x5, 0x3, 0xe12}, 0xae6, 0x40a, 0x6, 0x100000000, @raw=0x6, @raw=0x3ff, 0x3, 0x0, &(0x7f0000001b80)="f3fd46206969d550ac7053c91a42b07c6e15146cc906d7e386dd99ede1520eec9af15d95466cef", &(0x7f0000001bc0)="c9c57f5e15935477ed5346451856f63737a16010b23958e1f2d926ff4651e55f23689726129d21fa4f02dc829e30685ee73369f291310574d541d54e77fddf5a64c0a4a9729d4647c938c0cf069472a08a5b67f88e88d959a2d9d3e033071b2531e0db7f6eecc0c8c875d856c232fe184d60bb81d573d046b6f45d31da52f317ab66ba2721d0b298a80cd162eda5caee40f02b60c53a61db3e3dbe9ba93133c3ed6d58de097a"}) ioctl$auto(r9, 0x3, r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001d00)={'ip6gre0\x00', 0x0}) r13 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001d40)='/sys/kernel/debug/ieee80211/phy16/netdev:wlan0/rc_rateidx_vht_mcs_mask_5ghz\x00', 0x80800, 0x0) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000001dc0)=@bpf_attr_5={@target_ifindex=r12, r8, 0x6, 0x9, r11, @relative_fd=r13, 0x4}, 0x6fb) r16 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001ec0), r9) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r9, &(0x7f00000021c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002180)={&(0x7f0000001f00)={0x248, r16, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x234, 0x1, 0x0, 0x1, [@nested={0x170, 0x129, 0x0, 0x1, [@generic="7028cff3397c", @generic="d636096e5662e7bf62b4ad3cb8677756c7edc74f4a5f", @typed={0x8, 0x69, 0x0, 0x0, @u32=0x80000000}, @typed={0x8, 0x126, 0x0, 0x0, @u32=0x40}, @generic="29e04445459a3dcbf45c3b3e064fc999c2ce3eb61aeac51f27a76ce9da5da052894fa88bc055b4b039f96fda4714e232fd4a792a42b094fe81aa92adce69431165e0dd5cd5b59e3493952f8cc090e55a3f1f94d0764ec54788cf479556de21ccdb", @generic="3e81e901b032a4faf53f29b7cbea6af2141985f4656666e9b659de5ca8637e4459e2b4e616dc5347497e6106354902f6f2f5fc0b5d618811c65e52f9d420d4e3b9dccf84a056be0e0a733fe4322e9573f627d61aa2e7a268c3b2f5c004ef56d38d0ea540e01e91dbad3aed4f524f1098e804297c4e87ac591ff70314bdeef2c05949a113c7959b45d8f1e7d650dfb3c1c9b4c12685a93774de91e3d9caa66ad97d98a3081682ed82be97ddd60a9c7e8a8c0ed3fd9afaf0addf90aa30925057170fbdc398ff5bae870e0c3d7cd2f83c685388cb", @nested={0x4, 0x4a}, @typed={0x8, 0x33, 0x0, 0x0, @pid=r6}]}, @typed={0xb8, 0x69, 0x0, 0x0, @binary="8b84e332007b58434c7aaae4eb185fe32cd1fa7da2e852e3a670e6a7a04017ebd8fcc8451bc0980530e51de33891dab178605d5d2b9eed19f5eaaf6d06f0e67f45252fc0348e02e649b0f6998a576198fa2eb6c13b473c3ea45fb70b0492dbe83e29807f5f8653a54ce9ea6b55dc7c4404ff4ebb48c7db04c79b52cd64d8f61a1fa340f3693604d65bb0c2acaa887073802181292fbbbba2e165f055bfc62b1b50d1e6678f507cbd42c44303411be9760cd3b2fb"}, @typed={0x8, 0xab, 0x0, 0x0, @uid=r3}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20004044}, 0x40) lsm_set_self_attr$auto(0x4, &(0x7f0000002200)={0x9, 0xff, 0x1, 0x1000, "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"}, 0x5, 0x9) ioctl$auto_MON_IOCX_MFETCH(r14, 0xc0109207, &(0x7f0000003280)={&(0x7f0000003240), 0x4, 0xe}) ioctl$auto_CDROMEJECT(r15, 0x5309, &(0x7f00000032c0)="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") waitid$auto_P_PID(0x1, r6, &(0x7f0000004300)={@siginfo_0_0={0x5, 0x9, 0xfffff001, @_sigfault={&(0x7f00000042c0)="0fb877df2fcf", @_addr_lsb=0x8}}}, 0x0, &(0x7f0000004380)={{0x4, 0xbe6b}, {0x4, 0x3ff}, 0x8, 0xff, 0x7, 0x9, 0x1, 0x8, 0x0, 0x40c3, 0x10, 0x7, 0xc, 0x5, 0x5, 0x10000}) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000004440)='/proc/thread-self/clear_refs\x00', 0x40840, 0x0) lsm_get_self_attr$auto(0x4, &(0x7f0000004480)={0x8, 0x800, 0x5, 0xa8, "3bf8a9b4654145e4f55b2df21853fefd8aa69778a0d52197a819fc60d5e28f18d74e390fdf34da513d0eb05e04f5ca43a87230df6f1faa3d563e5d0e3ac93dcacaf66325159a6e03b0a3cb506000bec7aa95a122ab79d51b6dd6b13e84f47ca4627d7e993f8605c6fdfcf0eedc4c540bb3f2d797448c5c392a5b231218e46b018edb869d18ff1f2f9f44657807e5955041939a663e8dd328b2d92f5c3331640398cbe2e79db2844c"}, &(0x7f0000004580)=0x5, 0xed79) 2m46.569447301s ago: executing program 2 (id=1037): write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)="34aeede84184", 0x6) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r0, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x92003, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) close_range$auto(r1, 0xffffffffffffffff, 0xfffffffd) close_range$auto(0xffffffffffffffff, r1, 0x9) 2m45.581348101s ago: executing program 2 (id=1039): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0xe983, 0xdf, 0xeb1, 0x401, 0x6) socket(0x1d, 0x3, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) 2m45.20383067s ago: executing program 2 (id=1041): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x8000000000000001) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop13/hctx0/active\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x3a55) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x4000000000000000) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) mmap$auto(0x0, 0x3, 0x20004000000000df, 0xeb1, 0x401, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) socket(0xa, 0x1, 0x0) ioctl$auto(0x3, 0x5411, 0x38) r4 = socket(0x39, 0x2, 0x1ffffffc) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r4, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, r2, 0x10000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x90080, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x1) ioctl$auto_BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) 2m43.361809515s ago: executing program 2 (id=1044): get_robust_list$auto(0x0, &(0x7f0000000200)=&(0x7f00000001c0)={{}, 0x8, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, 0x0) (async) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) open(0x0, 0x22240, 0x55) socket(0x1d, 0x2, 0x7) (async) r0 = socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800337f6e7d0267930000", @ANYRES16=r4, @ANYBLOB="02002dbd7000fcdbdf257f00000004004601"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) (async) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800337f6e7d0267930000", @ANYRES16=r4, @ANYBLOB="02002dbd7000fcdbdf257f00000004004601"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.3/usb16/busnum\x00', 0x141543, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0xa, 0x1) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r5, 0x2, 0x9) (async) ioctl$auto(r5, 0x2, 0x9) ioctl$auto(r5, 0x400c4d06, r5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$auto(r6, 0x800064c2, 0x1e6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) madvise$auto(0x20000000, 0xfffffffffffffffb, 0x6) 2m27.899546303s ago: executing program 33 (id=1044): get_robust_list$auto(0x0, &(0x7f0000000200)=&(0x7f00000001c0)={{}, 0x8, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, 0x0) (async) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) open(0x0, 0x22240, 0x55) socket(0x1d, 0x2, 0x7) (async) r0 = socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800337f6e7d0267930000", @ANYRES16=r4, @ANYBLOB="02002dbd7000fcdbdf257f00000004004601"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) (async) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800337f6e7d0267930000", @ANYRES16=r4, @ANYBLOB="02002dbd7000fcdbdf257f00000004004601"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.3/usb16/busnum\x00', 0x141543, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0xa, 0x1) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r5, 0x2, 0x9) (async) ioctl$auto(r5, 0x2, 0x9) ioctl$auto(r5, 0x400c4d06, r5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$auto(r6, 0x800064c2, 0x1e6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) madvise$auto(0x20000000, 0xfffffffffffffffb, 0x6) 1m40.398218624s ago: executing program 3 (id=1267): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) 1m39.55547003s ago: executing program 3 (id=1269): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x1c, 0x0, 0x0) name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0xc, 0x75c0237c, "6d962c000400003344980946"}, 0x0, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r2) sendmsg$auto_TIPC_NL_PUBL_GET(r2, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000300)={0x2c, r3, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x840) r4 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x10000, 0x0) r5 = getpgid(0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x13c4, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@typed={0x7, 0x116, 0x0, 0x0, @str='-\'\x00'}, @generic="43b86f6a23ceb626fce4f4326bb9985ebccf6f96", @typed={0x4, 0x32}, @typed={0x8, 0x11, 0x0, 0x0, @fd=r4}]}, @TIPC_NLA_MEDIA={0x1383, 0x5, 0x0, 0x1, [@nested={0x301, 0xaa, 0x0, 0x1, [@generic="3f36043a87959fad6955b2a1906e5a96c733b4d05912e455f75d43087afa0cc597fa4ca10ab9a686643a34afa72eda7973dcdc9a49c7ddf561229110e7300db2efe07b2378f8d63f46c79c302c0e480a", @generic="d70390ea259a8a484f0eabac2b8d4764306980cbf3ea84d72e3215dc3df672e9b456ba1a7851ea8c00a748f5ab0d36baaf347633f43e2a001fc8d439ed2781636d9680851702261b8092ddbb909fb95d77ba99", @generic="4253dc4635ae0513258dcd9232928d700ecf5808f7f55d36fe0f3eb440c756048a2d7bce818f739b90aefbced548eddf6de5ea05b253fe64fb6837abb36bca103ee1545cdeaac856481cb47b7a0fb27f786a839a4d0519f7f4de248d7a9e7e7b9319627c851552fddced4d9c529a0022df432c02537a5768235a75eb5a573ab339fe7e0c3426a0074b9188405a3432cc533e5035cff9fa2b7cf518a710e66a80c9c8ddd6d8f67838d756bd8a84f10d7fb0e7bdbd1855a69f4257d3ea6447d15ad02ef1c486ea18d18479f0872bac6c5d774a59b8ab0132eb8dd66fc89b836b4dcf105dfbb90d028dfd59083a", @nested={0x4, 0x3a}, @typed={0x8, 0xfc, 0x0, 0x0, @pid=r5}, @generic="d318d3e59436cce84917d99435e10e0e7e09630a8d73a4fceb52b44970504092ac21dbd284afb1bc0b38ec074a3c1bdce5fdf5383baa4bfaf5b0e46c7074d56294b594babc72b4d59a6239dc5345ef05e4dae7297451ff2ea28f0921ddfce4c14c32ba154770b8810c953aa91d0be8b222fa6a64cf7d6b0ef215c8a3c21424d4be6747dddd8265860f9e0faadf8e59c3a04104fb76115700e85656b2459f98c398e0501eabcf2936af3d12dd5229315a633251772c17ae1cda5312b0e6cfba3e2f9ed8a9ecd04b81131e2684a92db210a69226f2889224750fc7271f36a690e48ddfe0f88d086b", @nested={0x4, 0x8b}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x79}, @generic="aa4606fa7073c25b32cc2f4e505a60f90b0a0b52831fb132a502e8bfa3447ebcac41a3a7bd9dd83d6fa58287d0541d02007e8815f73bebb352289f062a25c2a4e891daf06b78c8fb282fcc0ee6d35f14b332ef2169ae362db1cdbe61a552e94c79ad8996d6e35311ba9109"]}, @generic, @typed={0xc, 0x46, 0x0, 0x0, @u64}, @nested={0x8, 0x118, 0x0, 0x1, [@typed={0x4, 0x9}]}, @generic="cca3c02226139c8aae2fed2a5439a75e53caa66f174034c8fe0b3d0a6e782d1ce5dd137153cda4a766dedd607e63e5e25cc2828c50f104e0ce301d1011ad55bdb6d084", @typed={0x23, 0x0, 0x0, 0x0, @binary="f171ec9703d4cec744b39cc9eb6a631cdfb3f6cef77e1864e540a93487c6d9"}, @generic="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"]}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1m39.261344324s ago: executing program 3 (id=1270): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x2800, 0x2, 0x17) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x1069c1, 0x4b) write$auto(r1, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) socket$nl_generic(0x10, 0x3, 0x10) semget$auto(0x80000000, 0x13c, 0x3ff) unshare$auto(0x40000080) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) close_range$auto(0x2, 0x8, 0x0) 1m37.006148433s ago: executing program 3 (id=1274): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x40002, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0x4, 0x8000000008011, 0x3, 0x8000) fcntl$auto(0xff80000000000000, 0x406, 0x1) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x40000, 0x0) ioctl$auto_BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x10802, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) 1m36.861339308s ago: executing program 3 (id=1275): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) (async) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) set_mempolicy$auto(0x4, 0x0, 0x9) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r4, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x8aq\x8d\xee\xd9\xdf\x11\x16V`\xf6\x959\xcf/\xe4\x12\xe7\xfd\x10\x85VH`\xf7\x83,\xe9\xa2\r\xb2\xc3E\x8aL\xc1Xn03\nM\x93JZ1\x83\xe3j\xda\x8e\'q\xba\xb3l\xce\x8a~_\xce*\xc14\xb6\xf8\x1b\xc8z\x15\x96\xc4\xcd\xac\xd0\xc0T\x9e3L\x87\xffq(\xcat\x82\xc1\xadt7\xc1\n\xf7\x90\x8cm\xf1\xb3*>9\xc7q\xae\x84\xec0\xda\\\xe3L\n\a~}\xbcy\xe6\xf8\xcf\x1e\xc7]V\xb7I~\xb7\xdc', 0x81) (async) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x22, 0x2, 0x9, 0x7fb, &(0x7f00000004c0)="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"}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r1) r5 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x40, 0x0) pread64$auto(r5, 0x0, 0x200, 0x80) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYRES16=0x0, @ANYRES8=r5], 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4040891) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000840)={{@inferred, 0x6, 0x1, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9"}, 0x0, @iec958={"72bf44a500395e00", "a91fc8e037099af9ad6bc66279a152dfeb842b81b0b7eb07cb7edaae7f6c2d1b7e03b6fa7f3dfe1fef07b117ee62a6ab146d13bf3bd229d28cb3cb23bc035280f03ee60f1b6b6bce28f01e56da04248afa9ab37c00c39e2ec88444c13b47acce692d4c75e6d074a7d0e6442ffda84b8cfafbf6e705d7c6aa1e3d76000e1bb28762f3160e00", 0x0, "9eab3312"}, "fa491e0810895cdd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef2c2b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) setsockopt$auto_SO_ERROR(r3, 0x81, 0x4, &(0x7f00000002c0)='nfsd\x00', 0x2) (async) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/adsp1\x00', 0x400200, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f00000003c0)="9ecf4cc0d10a4ba862defe8cbaf367bd337a1249497ba2e6c1c82f473866f28802d2f7edb4af9de3fa3f541302873a5382f720") close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2585, 0x0) (async) shmctl$auto_IPC_SET(0xfff, 0x1, &(0x7f0000000740)={{0x7fffffff, 0xee01, 0x0, 0xfff, 0xd7d1, 0x0, 0x7ff}, 0x4, 0x8001, 0xffffffff, 0x4, @raw=0x4, @raw=0xf35, 0xa, 0x0, &(0x7f0000000640)="c213c74ee05ebe5e2aa5fd015d458658ac338bf8da3a90822c9503f715a3c998780d75fefbaca25f7a307c5292bc3c4e0c4760fd47c8ee5db7810aba7c7a241160b17683cc79068e24aca09732ff1f481c617ec711", &(0x7f00000006c0)="b22e7445cd2da6340aaa49f6e426adc56950b2097372463aae90fc20e2535b042d9e15ba6e667bcfebb17e1b0d7acf7022e0363e107813d08d761c90d63f2d6ecdc887c30da30ec15fe5498612d8e8e0f30f790f06a1c69c1569266c6f0acf53698bd4"}) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000d40)={0x1, @raw=0x5, @raw=0x8, 0x8, 0x9, '\x00', {0x20000000000, 0x6, 0x7, 0x0, r7, 0x6, 0x6, 0x7, {0xff, 0x3def}, {0x56, 0xfffffffa}, {0x0, 0x5}, 0x5, 0xb, 0x7, 0x5, 0x7, 0x6, 0x8, 0x2dae, 0xbc, 0x1, '\x00', 0x9, 0x4, 0x5, 0x80}}) (async) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x80102, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) 1m36.585347224s ago: executing program 3 (id=1276): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) prctl$auto(0x3e, 0x1, r1, 0x5, 0xfffffffffffffffe) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) 1m21.423309649s ago: executing program 34 (id=1276): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) prctl$auto(0x3e, 0x1, r1, 0x5, 0xfffffffffffffffe) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) 15.217342882s ago: executing program 4 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2367e4646d4b411d}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/spca500/remove_id\x00', 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/uevent\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x10001fc) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000000c0)={0x200, 0x1, 0x0, 0x62000000000000, 0x9, 0x0}) shmctl$auto_SHM_INFO(0x9, 0xe, &(0x7f0000000380)={{0x7, 0xee01, 0x0, 0xc, 0xd9ce, 0x80000000}, 0x3, 0x0, 0x9284, 0x7, @raw=0x7fffffff, @raw=0x8, 0x7, 0x0, &(0x7f0000000280)="c01b7108b3c0e5c6beb7234e763c7b927cfe71b295833256616f6f3bdde121e19e7bdbe251cd8c134d83a3a2dac9202c8f71ceb93d6af4b50ab6e2da18fd05cd6bc4a484e560f89a6b46adc24a5c7867d13aea3a759231d3b282f2eb5a16b8bdc91afb26e5cd7ac97be1dc0d5021", &(0x7f0000000100)}) fstat$auto(r2, &(0x7f0000000400)={0xcf35, 0x31b73f71, 0x1, 0x5, 0xee00, 0x0, 0x0, 0x9a, 0x80, 0x7, 0x0, 0x8, 0x0, 0x0, 0x100000001, 0xffffffff, 0x200}) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x458, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}, @NL802154_ATTR_COORDINATOR={0xda, 0x1e, 0x0, 0x1, [@generic="7be3e2fa9f66e0a89bdc0fe737a37f3f3ff75ffa808f886e194c5380cdd6e40cb00dcd4586901764909ac6ab9e40f5877a86a578809b6b91832ffb1d02216dbe5f3c1cf856f423ef0bacbb47cda8a7c69d5018f6a320eac1611a1668cb1e08e7a25b21928ffc", @typed={0x4, 0x89}, @generic="821e8e31cbbd0fa85662f0e23245b5ed6b95ebe13b9ab5143e950cb15596c172af4e3f51de0d024298ed5315c5c6029df7b1fb32f677962d31ad13f1104550208930cc20f27245d6d67a24a1e6", @generic="756d0871ef29da833d0fe26161546da01600405c438b2dd295ab9ac47e3bd3"]}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x356, 0x2b, 0x0, 0x1, [@nested={0xba, 0x39, 0x0, 0x1, [@nested={0x4, 0xff}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xeb}, @generic="b4e86c2e57950ac005f301bf4ed7269bacc785df48d45fb67172574c0d88d0d829b853f7e2439bdd61153b9e0d62b5e3d7f1dc9ab8f2e362cfd94a528948196056dcb85f155a2af753d30a9d6e2389d77223a3e03c78e89546f949ada7116e7bc36c82476c780f9bc6fb13a278e3681382a602e98e76306c07b92997cd6692502609", @typed={0x1e, 0xa3, 0x0, 0x0, @binary="9298c494b33f98d8f9a34c3c16588964affd7d79ec3cb497c671"}, @nested={0x4, 0x141}]}, @nested={0x74, 0x7, 0x0, 0x1, [@typed={0x4d, 0x33, 0x0, 0x0, @str='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/uevent\x00'}, @nested={0x4, 0x143}, @generic="60136af188c48d95f4bacc81230a80e0", @typed={0x4, 0x111}, @nested={0x4, 0xa9}, @nested={0x4, 0x10a}]}, @generic="2d67237a1c799e6aecf9e12dfbf8026eb09d239784c7f8497e5dca4056e1b1a62f9092b101d9124a58172eff5b25cd6e4294f4d4a723845f26b3aa43edf7f3f45fcf3e9f3f3d42acc7dfd30927d5f6bf5a5f69a1b9bfabb84ac4ed4c1bd7cb6024977299de3fb6aa3ff166139f4d6e16036352738bc0bfa67abd51ee91eb362b703e5ae476d297f6d885", @nested={0x18e, 0x3d, 0x0, 0x1, [@generic="1a6d62abb782e1b972f95ced95daf8", @nested={0x4, 0x7}, @generic="98478ef7e75135784484a9049a771d1d4564bd6cf571215747ce086f36bc4830485d20c3d00bc84ed2232205b23d996c9fc57f240e42d8bc475687b554538977efec0daff4b6970c6b36ebd18cb6ee77d1b7b0f1e12ae3bb834aadd89416891e28370d98a69795abd819878eb241ba96aa4fdf76666a6f3007cd94d160", @typed={0x8, 0xf4, 0x0, 0x0, @uid=r6}, @generic="699f0fa811d98c669fad33881e2403e5a4779d8919bfd1253c8b50785a3c920e931f219c4ddc447da73f532e82972baf231d669f88ace03ae7b416b648340b16e1fa2980944800bf74829a2f36b879e4aaefff8764052f09836254913c7deed2a16bc3bc5a525634ebc626f82f13fda569568b7c239d063386cb22af5bb958e28d53f16bccd4a44688ace8a29cb691e9748c9a550a4ac679b342c94347ff721b442f5f71e2f92f87407fc91a497ef6a8c9c8fa4eaff187211248b11b285167d0ef66c10e64618044de7e7d03baf068db320fee2cb4710ed58bf97a2eb7c39ab034fa4d3aa2d164c9db1289bdcbf4", @nested={0x4, 0x121}]}, @typed={0x8, 0x10a, 0x0, 0x0, @uid=r7}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x5f17558cbf9c1fa9}, 0x24000480) setsockopt$auto_SO_RESERVE_MEM(r2, 0x1, 0x49, &(0x7f0000000040)='ethtool\x00', 0x627) pread64$auto(r4, &(0x7f0000000100)='\xfc+]\x1e}\\\x00', 0x7, 0x60000000000) pidfd_getfd$auto(r2, r2, 0x6d) 14.030083017s ago: executing program 4 (id=1562): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029d40ab62c15de217000fddbdf252f000000187465616d5f736c61766472773a03d90700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r5 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xab700, 0x0) read$auto_proc_timers_operations_base(r5, &(0x7f0000000080)=""/173, 0xad) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r7, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r4, 0x4008af20, &(0x7f00000001c0)={0xe0}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) clock_gettime$auto(0xa, &(0x7f0000000000)={0xf, 0xb}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f0000000240)=0xf6, 0x3, 0x3, 0x0, &(0x7f0000000200)=0xb, 0x71a8dce8) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) 12.846596626s ago: executing program 4 (id=1556): openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x30b140, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) pread64$auto(r2, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) unshare$auto(0x40000080) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) fcntl$auto(0x3, 0x4, 0xa553) 11.045500127s ago: executing program 4 (id=1565): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xffffffffffffffff, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0x1e, 0x5, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/blk_cgname\x00', 0x68c002, 0x0) getsockopt$auto_SO_DONTROUTE(0xffffffffffffffff, 0x10000, 0x5, &(0x7f0000000180)='*$<\x00', &(0x7f00000001c0)=0x9) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(r3, 0x407, 0x0) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 10.014912131s ago: executing program 4 (id=1567): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029d40ab62c15de217000fddbdf252f000000187465616d5f736c61766472773a03d90700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r5 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xab700, 0x0) read$auto_proc_timers_operations_base(r5, &(0x7f0000000080)=""/173, 0xad) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r7, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r4, 0x4008af20, &(0x7f00000001c0)={0xe0}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) clock_gettime$auto(0xa, &(0x7f0000000000)={0xf, 0xb}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f0000000240)=0xf6, 0x3, 0x3, 0x0, &(0x7f0000000200)=0xb, 0x71a8dce8) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) 9.655856465s ago: executing program 4 (id=1571): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000003c0)={0xed2, 0x3, 0x3145, 0x5, 0xa8, 0x0}) get_robust_list$auto(r1, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)={&(0x7f0000000080)}}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x1b\xad\x065\xd5\xc6P\x97)\xcf:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\x17\xcc\'[\x90\x81kV\x0fN\x85%\xfa=)\xb2\x10\x8fWw\xe2\xa3K\bE\a', 0x100000a3d9) write$auto(r3, &(0x7f0000000380)=',{5,\x00', 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80008000) prctl$auto(0x2, 0x1000001, r1, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) prctl$auto(0x7, 0x1, r1, 0xe, 0x8) write$auto(r3, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc626) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) 7.396558051s ago: executing program 1 (id=1577): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, 0x0, 0xc004) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) (async, rerun: 32) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 32) mmap$auto(0x0, 0x48de6aa000, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, 0x0, 0x0) (async) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x40000) (async, rerun: 64) setresuid$auto(0x8000000000000001, 0x1, 0x200) (rerun: 64) mlockall$auto(0x7) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) (async, rerun: 64) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/14/smp_affinity\x00', 0x40001, 0x0) (rerun: 64) write$auto(r3, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) 7.249910424s ago: executing program 1 (id=1578): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r0 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) getdents$auto(r0, 0x0, 0xde) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) r2 = socket(0x15, 0x5, 0x0) r3 = getsockopt$auto(r2, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r3) (async) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo$auto(r5, r6, 0x21, 0x0) (async) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_MASK={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @pid=r5}]}, @OVS_FLOW_ATTR_ACTIONS={0x19c, 0x2, 0x0, 0x1, [@generic="c147ddf87ef472c11162f52381a55d60d40538408003dc8c471d40b4fb79dbeeeb43d26c84fa41a90cb211d0ba3726", @generic="3479247d40898500d78c61eea1bcdcc3f5caa7dbb6a7331e8c6457b437ed25d8a8fdc2973437e35e82b32e4bf91a4b7d66b4789e3eb403fceb66d03d8700f45bac6b00ed1c6e9530c792b33a11c252a73488abd557e8154f5c5e748aca", @nested={0x10b, 0x27, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0xc, 0x124, 0x0, 0x0, @u64=0x95e6}, @generic="c82f9f7754f6573ec2f4736af38480720a0334cabc7856ed2f016ac11ab52f7e282a8c70c1f86c9ec56a961d0d8344a20e85141a0d5b7d709fdac55ec6a74aef9a9e6d62e012ca44d6d2d179d17bf8d37f87439442333523e1e75e5240af0bcc845360e1beb5308f6e1e885b12af740f06e1d4ffbf9551fc80c3caac7bcbbd483af3479cae9b0180af9d439234e8515ec87ea72d223d3d93bf9e2880b338b457dad7584b2b2001832f2f531c2cce5a155dbd36647032995cbf7860a75c8301dcb5fe3528e605c58dc8b21a9e720b1d6087c37eabbd1e12c485efef5b94bae711ddca773010123e9b1c5596cc2b6c05b85ec78c", @nested={0x4, 0x2}]}]}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x43}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1d0}}, 0x1) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000080)={"92cdb1a92c2a1a956f2477928eefe24df5c44c738e2caa303789b7af2afdcb14", 0x1, 0x3, 0xfffff801, 0x0, 0x8, 0x0}) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x480, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_MASK={0x10, 0x7, 0x0, 0x1, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0x190a}]}, @OVS_FLOW_ATTR_MASK={0x332, 0x7, 0x0, 0x1, [@generic="a3645dde5bc132df8b20c5b7f6333e46cd20a560eaf6673173d6ede3a87012d8018bc2368dcad068961f3f4e03ce51165f5d011770e323f15e4ee6d01512b1485c8a9e8ab5ad9eff0fdcd83082b36b8567aa1d2a721a4e8419b416a267e23034128fe4be76bad1c68752dd91d0082b27f445ae0e1715defdb0fd3eb93ad2ea86c8785ba82b0df48afc3f6478a8e7563e62eade9b932eb2e1f259bc98a1f5a1f6587b69e7832ff8457ec2b88f5a1567e141d67ee7fac24afd3328831f1a3ff67a4fb1cb83e3f91189a5c90e5b030398d4dd3b1d2f8392bd84cd4663f5f7a65b70b53ecb9996bff9abb40d", @nested={0xd4, 0xb, 0x0, 0x1, [@generic="fe2301f4c4ef4b3be16f0c332ecd65aad74e6cd32380ae17b4de910f928102c7aaaed6e5b3f4aa84ee9b5005acdbfbc648cfaaac007b5df6c225c83c8b2c1c54d406b3a87d4d84505b345b23305ad34c5cfbcdc6c25ae562fd385665730152c7cea7f3c3f2c0e36c73ca959360", @generic="ee1f7c66cfc1943f80e26c98062b1e5f3ce25889d42e29fcf6a7d2e24b5d1dda5c1bd69393b318aebb8fb8ae1a1d3b2b8fde52af86d8b144c42edf3edfd0b78040128c0d2e308958113130647b4b25569936867efa8c256849731454caa3ea4c3eb294"]}, @nested={0x102, 0x114, 0x0, 0x1, [@generic="b93a84a7644d3868c566e105a517d82de0df159aa01ba19a91687765a64655f4803d1c6c4fad9687746113ca4a882dc33837568ddf5150e489ec3a47acd76e5a69c4f0dfd530138b1f515e98948dde16e2e71f1d981371c926a7675905982157d79fabda60ff255a702caac11e852c9b9289fe46e4c85a34bc1bbd0108281db56aca48a75ee7dbbbc2515c13faad331389a9b617abba98b538c115e7ca1f925253b26a045159e3f85b3db9e92fa47877c82332f74e0c072fe362ce01fe4e79257964c92b5f04ec424da5d2e9c98fed2f88b75b64af4a95895c0942d2cec52b4123d0976b894644bf4939c1df285fbed85c8c5d2d9470", @nested={0x4, 0x94}, @nested={0x4, 0x150}]}, @generic="fda2af234660f90fb8860931ea79810a3c96741c0479eca65decc518ac109731d430ee6c055c5cd61447bb5646575296835aa002af0dd03458367d3769c4c7f377aa0d4fa94fd5f155185a257ad8dfc57909c8af94c03e2652b04d2e671b7d4ed250896c51b39aa8e51f79f0"]}, @OVS_FLOW_ATTR_UFID={0x5}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x116, 0x2, 0x0, 0x1, [@typed={0x8, 0x28, 0x0, 0x0, @pid=r7}, @generic="184ef6df4beb6799fec180e893078589", @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="0c75a79adde18ef3fee13a224593386274d1933c6cfbf06829d086dde36ac0a4d278e0a4e884b810f0a89b89a900ad037649e33417948c194ce614e5332c3672ed6c2b40b012d3b58a557a082d463b048f737fe11aa35a180c25e46da8a5cd6b8388ccfc68d7fdce647de43112e3b127e16ba33106d585763b69726cbecf660426f7b72c997b16c09b5dac94a1e776cd2751c7b824c4e6ecf88d8df6d8cca431788b0a2b5074069bcf39b0131b7ee07ec393575786deed5346b8b7531a817e06c80624ae3f712cb0a0b4674ec3d1dc89a583cf88c8fa16b7ca34374f849c7fad6dbd617131ee3a88a450c9a239f7b1b63a7d"]}]}, 0x480}, 0x1, 0x0, 0x0, 0xc000}, 0x4040000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) r9 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r9, 0x400454ca, 0x38) (async) r10 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) (async) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r10, 0x1261, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) (async) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r8, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) 6.798153614s ago: executing program 6 (id=1581): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) shmctl$auto_IPC_RMID(0x0, 0x0, 0x0) chown$auto(&(0x7f00000000c0)='./file0\x00', 0xee01, 0x0) prctl$auto(0x2, 0x8, 0x0, 0x7, 0x800000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)={0x3, 0x81, 0x5b, 0x4, 0x0, 0x0, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x1, 0x0}) r1 = getpgrp(0x0) prctl$auto(0x1000000003b, 0x7ff, r1, 0x0, 0xd) madvise$auto(0x2, 0x8, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x7, 0x4000000000003, 0x916) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.8/usb25/devpath\x00', 0x34001, 0x0) preadv$auto(r2, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) socket(0x15, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x20, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) 5.666496184s ago: executing program 6 (id=1583): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r2 = socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8000, 0x0) socket(0x1, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') socket(0x80000000000000a, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000300)=@link_update={r2, @new_prog_fd=r1, 0x100, @old_map_fd=r1}, 0x10) bpf$auto(0x3, &(0x7f0000000340)=@enable_stats={0x5}, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000700fbe1803000000"], 0x14}}, 0x40054) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) setsockopt$auto_SO_RESERVE_MEM(r0, 0x80000001, 0x49, &(0x7f0000000040)='ethtool\x00', 0x627) 5.665525623s ago: executing program 1 (id=1591): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon39\x00', 0x18d040, 0x0) ioctl$auto_MON_IOCH_MFLUSH(r0, 0x9208, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x6af82, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioperm$auto(0x7, 0x5ad2, 0x8) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000001, 0x3, 0x62, 0x8000001d, 0x7, 0x6d3e, 0x9, 0x2, 0x4]}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0xffffffffffffbffd, 0x8, 0xfffffffffefffffd, 0xeb2, r1, 0x200000101) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x11, 0x3, 0x9) eventfd$auto(0x8c) io_uring_setup$auto(0x555a, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x28, 0x2, 0x17) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x100) 5.392468688s ago: executing program 6 (id=1584): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r0, 0x0) mmap$auto(0x0, 0x9, 0xffffffffffffffff, 0x8012, 0x3, 0x2000008000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC0\x00', 0x2100, 0x0) socket(0x2, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="9c050000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf250400000008000500ffffff7f080004000800000008000500f8ffffff08030180f9023480f601828008002400", @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="56f5f3dad1191b2e5770edbb643f4c615fb3709d914bc8d4b3eb63ec955de36268855c375440d8ed34373b16eefe3b36bf6169aa337543d62f4d1974182871225eaf22916fda5f73fc81577c04a9e4e952c56daefecb16d6828197acb3413477d8f36f4756dce245e0e869998176b60a823e1904eadd4d9f4b5bd7ace04ac1e1040013800800c300e00000016fece24136f1214b4d7e82ffe535edf5cf5888641407fee6c650b3f611d1c9bfe2841251bcf4aa49808f05a060547824401c47824a552b815f46f560884ec042fe03f0617152913281ace8ec0a49f327a9c1bbd3e3aae8ea77143c08f6dfa69111250efe230000000800960004000000660202809b692e7dc89f39eb4b1fd311e43cca1a59e73912e5a02b1525dcfbf0177fe331637bf2e88d7c71b65678ff7e55283c26703d26aedc821c02ae5478513058051e12236acb313cdb23557e8d07afd37aa5e7d802b15a35dc72073e6ec3a4ba962c06ded7ff6658ef1382aa89546ab69c418fa7a37303339ff5243aa3423bcc9b8099e18c1e7b96a2b9dc374bdaa241583779f8b5c0d30b02dae8128f2c921de5232e1b6efb77d8aaf98fcaedb030ab588f1a6ea8be52d1278a3733918e2cc96ecb760d8d4e867a4531ac66a569a00c5203ac0e526e34343d1502452b4003f018a6c00800a300", @ANYRES32=r0, @ANYBLOB="f30051800800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20008001}, 0x10) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) socketpair$auto(0x2000001e, 0x3, 0x9, 0x0) write$auto(0x3, 0x0, 0xfdf3) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, 0x0) timer_create$auto(0x3, &(0x7f0000000040)={@sival_ptr=&(0x7f0000000440)="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", @raw=0x180000, 0x8}, &(0x7f0000000080)=0x80000000) write$auto(r5, 0x0, 0x6) syslog$auto(0x3, 0x0, 0x5) unshare$auto(0x40000080) 3.300994004s ago: executing program 5 (id=1589): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/id/id\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4088, 0xff8) bind$auto(r0, &(0x7f0000000000)=@ethernet={0x306}, 0x5) 3.200651837s ago: executing program 5 (id=1590): ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x80000) 2.825669374s ago: executing program 5 (id=1592): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r2) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029d40ab62c15de217000fddbdf252f000000187465616d5f736c61766472773a03d90700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r6 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xab700, 0x0) read$auto_proc_timers_operations_base(r6, &(0x7f0000000080)=""/173, 0xad) write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r8, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r5, 0x4008af20, &(0x7f00000001c0)={0xe0}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) clock_gettime$auto(0xa, &(0x7f0000000000)={0xf, 0xb}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f0000000240)=0xf6, 0x3, 0x3, 0x0, &(0x7f0000000200)=0xb, 0x71a8dce8) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) 2.356567976s ago: executing program 1 (id=1593): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000000)="bc3af5a96ab1104b8825996ca4a578830fcc22f7b67616dd087f043d316ab99f40f7d2bf5987a4e399187018af9d5a247dab3171b61e41f5b416cb65e5b63766ad5f706818cfc455626471e3e346b3cb57e106373554ff0f69db0c2e7fb331e5930397a24e6eb9ae6f7947df87bb32566e0027e3ae73a66497af2f1c565951ace1a51caae2e19aafe8703a22a10fd579fc8948c2c8edffc3f080a8c697dbb22c48b41e3566973ef988176bf067d7a05aa7648754b6e0bb87e02df91ff5d96269b9f1c2a25f91bd710c30d3bdbda22b24a17074abf766cc25a62450") 1.932369083s ago: executing program 1 (id=1594): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x1efe82, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x13, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x810006, 0x400000000ffb, 0x8000000008014, 0x3, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async, rerun: 32) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0x7, 0x6, 0x2) (async) getcpu$auto(0x0, 0x0, 0x0) (async, rerun: 64) ioctl$auto_BLKTRACESTART2(r5, 0x1274, 0x0) (async, rerun: 64) write$auto(0xffffffffffffffff, 0x0, 0xfff) (async, rerun: 64) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (rerun: 64) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) (async) mprotect$auto(0x110c238000, 0x1, 0x3) (async) madvise$auto(0x110c230000, 0x8031ca, 0x9) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x2, 0x0) 1.882622079s ago: executing program 6 (id=1595): r0 = socket(0x28, 0x5, 0x0) connect$auto(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x56) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) r2 = socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040026bd7000fcdbdf250100000020025fd4480a8dd80037ee2a9e73dfe7594d463763fe2b3d0c9bab842cf570181c7b4dec6176f85990666af51c99321dd93eb96dd59320c5218ff84d63252002382fd87e"], 0x14}}, 0x20000000) readv$auto(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x29e4}, 0xe8) read$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000001e40)=""/109, 0x6d) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x1, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec22\x00', 0x28000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(r1, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000007ec0)=""/253, 0xfd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1fe, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x400000000006f29, 0x0) setfsuid$auto(0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 779.760319ms ago: executing program 1 (id=1596): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48041) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2b, 0x3, 0x6) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04\x01\x04\x00\x00\x00\xf1\xff\x00\xb6', 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000080)="97ca09bd689a850edbe36136c853df77fd9b3e", 0x13) sendfile$auto(r3, r3, 0x0, 0x3) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) 779.538579ms ago: executing program 5 (id=1597): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.2/usb14/14-0:1.0/usb14-port5/state\x00', 0x183841, 0x0) r1 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xfe4f, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="efa4f38abeca10e6c3f65700c95d0e46339fccbafcff50c14a363928f3c30a105ac2ab4a8e1dcc175082778cd098798364fb14a73b2cf10fc399b60e41b73ed4acd3c20257306cd62f4098e909221c3a2d1eb5e76ef593384588b070e8bc36d5cf65f8f84eb2edf3ea04d37c720ff265851f5d3e19955751ea15a1c87bfa746a72dc9431493a7b55cbdd34b1a127d2a4081f74c968dd15cd0e6ffe623d6a6cf1c146b51fe8a500a4cebe8ba7b62113eac43f6a631860d7ca058bd7073fbb10c8e733b5e903ba2e1d6e723e86808cfa4ec15a66132596c8fbe6ac1f8e2b5a9740f1e12267172250fa1d1805", @ANYRESOCT=r1, @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x24040081}, 0x4000) mmap$auto(0x33, 0x20009, 0x7fffffff, 0x13, r0, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/hwsim0/mtu\x00', 0x80000, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x80000000d, 0x1d, r2, 0x47) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x103fe, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x382c02, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20842, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0) write$auto_tracing_mark_fops_trace(r4, &(0x7f0000000440)="55884f8d2a8b0c4a5fd25790158d1451d0f2b1dda25eb13b16bc4272cb615083942c9eb9cb7e07c971162320d82f24423645ed9bacd901e0672b75d4484417089c29f9ef2bcaf9542ccd21c9ee0ce6dd3f5245405d3109194ec723c98862c03fee7e76679d931392cf44c00744323cb04629a8d5be15da6285a18b3f69a706f0e9c1bd4b39d9fd2a3b23c177513d6fecb9b843a27ac2e47364ba7f55d59dd5188fd4cb8b3713117a7429934c6c3e650cfc6d48dd964c6e43c76417a7d7345962dc96472bdc8594a12d2649be3eba50d8f231b5abf60773fe7bc234fc46ec34def7a43244bc543c65c8f86913a856ddab8563372bfe65eaae6e", 0xf9) socket(0x10, 0x2, 0x0) socketpair$auto(0xfdff7fff, 0xffffffff, 0xfff, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptybc\x00', 0x288002, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 779.42635ms ago: executing program 6 (id=1598): ioctl$auto_USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={0x81, 0x7fdfff46, 0x8, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x201042, 0x192) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ab, &(0x7f0000000100)={&(0x7f0000000040)='L', 0x49}, 0x1, &(0x7f0000000040), 0x4c, 0x1}, 0x5}, 0x2, 0x100) setsockopt$auto_SO_RESERVE_MEM(r0, 0x1, 0x49, &(0x7f0000000040)='ethtool\x00', 0x627) 399.270041ms ago: executing program 6 (id=1599): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video43\x00', 0x169000, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) prctl$auto_PR_SET_MM_BRK(0x7fff, 0x7, 0x0, 0x8000000000000001, 0x9) r4 = eventfd$auto(0x1000) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)={0xfffffd2e, 0x0, [{r1, 0x0, 0x7, 0x28}, {r4, 0x0, 0xf5, 0x6}, {r0, 0x0, 0x2, 0x100000001}]}) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) r5 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x5, 0x80000001) ioctl$auto_FS_IOC_ENABLE_VERITY3(r5, 0x40806685, 0x0) getsockopt$auto_SO_PEEK_OFF(r2, 0x8, 0x2a, &(0x7f0000000040)='/sys\xbd\xf8/kern\x05\x00\x00\x00ebug/netdevsim\'netd\x04vsim2/healt9\xec.|\xa7\x84\xc5%\xb1\x88\x1c,\xf6', &(0x7f00000001c0)=0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video43\x00', 0x169000, 0x0) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) prctl$auto_PR_SET_MM_BRK(0x7fff, 0x7, 0x0, 0x8000000000000001, 0x9) (async) eventfd$auto(0x1000) (async) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)={0xfffffd2e, 0x0, [{r1, 0x0, 0x7, 0x28}, {r4, 0x0, 0xf5, 0x6}, {r0, 0x0, 0x2, 0x100000001}]}) (async) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) (async) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x5, 0x80000001) (async) ioctl$auto_FS_IOC_ENABLE_VERITY3(r5, 0x40806685, 0x0) (async) getsockopt$auto_SO_PEEK_OFF(r2, 0x8, 0x2a, &(0x7f0000000040)='/sys\xbd\xf8/kern\x05\x00\x00\x00ebug/netdevsim\'netd\x04vsim2/healt9\xec.|\xa7\x84\xc5%\xb1\x88\x1c,\xf6', &(0x7f00000001c0)=0x6) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) 368.396691ms ago: executing program 5 (id=1600): r0 = socket(0x10, 0x2, 0x4) (async, rerun: 32) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) bpf$auto(0xffffffff, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x800, 0x10008, 0x6, 0x1000049, 0xffffffffffffffff, 0x9, 0x3}, 0x6f3) (async) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x80, 0xaab, 0x5, 0x7]}, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 5 (id=1601): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) semctl$auto(0x27, 0x6, 0x13, 0x40000000000001) lsm_list_modules$auto(0x0, 0x0, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) lsm_list_modules$auto(&(0x7f0000000040)=0xfffffffffffffff9, &(0x7f0000000180)=0xd19, 0x7) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x40, &(0x7f0000000080)={0x7fffffff, 0xc, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xfffffff8], {0x2, 0x6, 0x10, 0x29f, 0x5, 0x10000, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000100)={0x24000000, 0x4734fcdb, 0x2, @raw=0x2580, &(0x7f0000000000)={@raw=0x8, 0x0, 0x2, 0x80, "53d12b34243cbdb967e2a03c25b96f24940abaa6685155e7f7afa949b595de8c912930829f5962ea837d2672", @raw=0x5}, "ffadaaa9c46d65aaaa70d7dfef26b09dbbfcd33d970c9627063b464656bc68eff53ec5008beaabdd18ee262cc055c32bfc42"}) io_uring_enter$auto(r0, 0x9, 0x820e, 0x29, 0x0, 0x18) kernel console output (not intermixed with test programs): T8576] do_syscall_64+0xcd/0x4b0 [ 242.304974][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.305002][ T8576] RIP: 0033:0x7ff72178eec9 [ 242.305024][ T8576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.305050][ T8576] RSP: 002b:00007ff72260f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 242.305079][ T8576] RAX: ffffffffffffffda RBX: 00007ff7219e5fa0 RCX: 00007ff72178eec9 [ 242.305096][ T8576] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 242.305113][ T8576] RBP: 00007ff721811f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.305130][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.305147][ T8576] R13: 00007ff7219e6038 R14: 00007ff7219e5fa0 R15: 00007ffcd51c5868 [ 242.305185][ T8576] [ 243.727586][ T8583] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.742417][ T8583] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.766573][ T8583] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.772777][ T8583] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.577826][ T5844] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 245.134155][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.249499][ T5844] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 245.639943][ T8613] sd 0:0:1:0: PR command failed: 1026 [ 245.719658][ T8613] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 245.755927][ T8613] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 245.774567][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.774704][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.780671][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 247.943786][ T8629] netlink: 330 bytes leftover after parsing attributes in process `syz.2.553'. [ 248.012872][ T8630] netlink: 330 bytes leftover after parsing attributes in process `syz.1.552'. [ 249.878955][ T30] audit: type=1800 audit(4294967385.300:5): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.559" name="lu_gp_id" dev="configfs" ino=23701 res=0 errno=0 [ 252.727572][ T8719] vivid-003: ================= START STATUS ================= [ 252.767791][ T8719] vivid-003: Radio HW Seek Mode: Bounded [ 252.773472][ T8719] vivid-003: Radio Programmable HW Seek: false [ 252.780531][ T8719] vivid-003: RDS Rx I/O Mode: Block I/O [ 252.786457][ T8719] vivid-003: Generate RBDS Instead of RDS: false [ 252.807987][ T8719] vivid-003: RDS Reception: true [ 252.814209][ T8719] vivid-003: RDS Program Type: 0 inactive [ 252.828358][ T8719] vivid-003: RDS PS Name: inactive [ 252.844148][ T8719] vivid-003: RDS Radio Text: inactive [ 252.884183][ T8719] vivid-003: RDS Traffic Announcement: false inactive [ 252.901941][ T8719] vivid-003: RDS Traffic Program: false inactive [ 252.913190][ T8719] vivid-003: RDS Music: false inactive [ 252.921060][ T8719] vivid-003: ================== END STATUS ================== [ 253.757121][ T8705] netlink: 330 bytes leftover after parsing attributes in process `syz.0.563'. [ 255.426908][ T30] audit: type=1804 audit(4294967390.860:6): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.577" name="/newroot/143/file0" dev="tmpfs" ino=758 res=1 errno=0 [ 255.530032][ T30] audit: type=1804 audit(4294967390.890:7): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.577" name="/newroot/143/file0" dev="tmpfs" ino=758 res=1 errno=0 [ 255.698859][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.706604][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.546547][ T8841] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 259.998256][ T8856] raw_sendmsg: syz.3.593 forgot to set AF_INET. Fix it! [ 263.583396][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 263.911599][ T8921] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 263.941017][ T8921] netlink: 230 bytes leftover after parsing attributes in process `syz.3.603'. [ 264.424488][ T8928] zswap: compressor not available [ 267.077441][ T8975] netlink: 334 bytes leftover after parsing attributes in process `syz.1.612'. [ 267.317597][ T8980] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 267.922715][ T8988] FAULT_INJECTION: forcing a failure. [ 267.922715][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 267.984439][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.1.615 Not tainted syzkaller #0 PREEMPT(full) [ 267.984478][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.984493][ T8988] Call Trace: [ 267.984503][ T8988] [ 267.984513][ T8988] dump_stack_lvl+0x16c/0x1f0 [ 267.984555][ T8988] should_fail_ex+0x512/0x640 [ 267.984579][ T8988] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 267.984624][ T8988] should_failslab+0xc2/0x120 [ 267.984653][ T8988] __kmalloc_cache_node_noprof+0x6d/0x420 [ 267.984691][ T8988] ? register_lock_class+0x41/0x4c0 [ 267.984729][ T8988] ? __get_vm_area_node+0x101/0x330 [ 267.984768][ T8988] __get_vm_area_node+0x101/0x330 [ 267.984808][ T8988] __vmalloc_node_range_noprof+0x271/0x14b0 [ 267.984845][ T8988] ? n_tty_open+0x1a/0x170 [ 267.984871][ T8988] ? look_up_lock_class+0x6b/0x150 [ 267.984917][ T8988] ? n_tty_open+0x1a/0x170 [ 267.984954][ T8988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.984990][ T8988] ? console_unlock+0x184/0x210 [ 267.985017][ T8988] ? __pfx_console_unlock+0x10/0x10 [ 267.985058][ T8988] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 267.985095][ T8988] ? n_tty_open+0x1a/0x170 [ 267.985121][ T8988] __vmalloc_node_noprof+0xad/0xf0 [ 267.985157][ T8988] ? n_tty_open+0x1a/0x170 [ 267.985184][ T8988] ? __pfx_n_tty_open+0x10/0x10 [ 267.985213][ T8988] n_tty_open+0x1a/0x170 [ 267.985241][ T8988] ? __pfx_n_tty_open+0x10/0x10 [ 267.985267][ T8988] tty_ldisc_open+0x9c/0x120 [ 267.985303][ T8988] tty_ldisc_setup+0x40/0x100 [ 267.985340][ T8988] tty_init_dev.part.0+0x1ec/0x500 [ 267.985370][ T8988] tty_open+0xa4f/0xf90 [ 267.985402][ T8988] ? __pfx_tty_open+0x10/0x10 [ 267.985427][ T8988] ? chrdev_open+0x10b/0x6a0 [ 267.985460][ T8988] ? __pfx_tty_open+0x10/0x10 [ 267.985486][ T8988] chrdev_open+0x231/0x6a0 [ 267.985513][ T8988] ? __pfx_apparmor_file_open+0x10/0x10 [ 267.985536][ T8988] ? __pfx_chrdev_open+0x10/0x10 [ 267.985565][ T8988] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 267.985600][ T8988] do_dentry_open+0x97f/0x1530 [ 267.985629][ T8988] ? __pfx_chrdev_open+0x10/0x10 [ 267.985665][ T8988] vfs_open+0x82/0x3f0 [ 267.985703][ T8988] path_openat+0x1de4/0x2cb0 [ 267.985743][ T8988] ? __pfx_path_openat+0x10/0x10 [ 267.985779][ T8988] do_filp_open+0x20b/0x470 [ 267.985807][ T8988] ? __pfx_do_filp_open+0x10/0x10 [ 267.985863][ T8988] ? alloc_fd+0x471/0x7d0 [ 267.985912][ T8988] do_sys_openat2+0x11b/0x1d0 [ 267.985945][ T8988] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.985994][ T8988] __x64_sys_openat+0x174/0x210 [ 267.986034][ T8988] ? __pfx___x64_sys_openat+0x10/0x10 [ 267.986087][ T8988] do_syscall_64+0xcd/0x4b0 [ 267.986129][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.986155][ T8988] RIP: 0033:0x7fbac638eec9 [ 267.986177][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.986202][ T8988] RSP: 002b:00007fbac7265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.986227][ T8988] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638eec9 [ 267.986245][ T8988] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 267.986263][ T8988] RBP: 00007fbac6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 267.986278][ T8988] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 267.986293][ T8988] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 267.986331][ T8988] [ 267.986563][ T8988] syz.1.615: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 267.989600][ T8991] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff816380da (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 268.347003][ T8991] Call Trace: [ 268.350284][ T8991] [ 268.353215][ T8991] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 268.359890][ T8991] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 268.365704][ T8991] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 268.372220][ T8991] mce_cpu_restart+0xd9/0x1f0 [ 268.376907][ T8991] ? __pfx_mce_cpu_restart+0x10/0x10 [ 268.382190][ T8991] smp_call_function_many_cond+0x122a/0x1600 [ 268.388198][ T8991] ? __pfx_mce_cpu_restart+0x10/0x10 [ 268.393505][ T8991] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 268.399321][ T8991] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 268.405653][ T8991] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 268.411649][ T8991] ? __pfx_mce_cpu_restart+0x10/0x10 [ 268.416931][ T8991] on_each_cpu_cond_mask+0x40/0x90 [ 268.422052][ T8991] set_bank+0x240/0x3a0 [ 268.426203][ T8991] ? __pfx_set_bank+0x10/0x10 [ 268.430905][ T8991] ? find_held_lock+0x2b/0x80 [ 268.435603][ T8991] ? __pfx_set_bank+0x10/0x10 [ 268.440274][ T8991] dev_attr_store+0x55/0x80 [ 268.444777][ T8991] ? __pfx_dev_attr_store+0x10/0x10 [ 268.449975][ T8991] sysfs_kf_write+0xf2/0x150 [ 268.454561][ T8991] kernfs_fop_write_iter+0x3af/0x570 [ 268.459848][ T8991] ? __pfx_sysfs_kf_write+0x10/0x10 [ 268.465047][ T8991] vfs_write+0x7d0/0x11d0 [ 268.469389][ T8991] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 268.475221][ T8991] ? __pfx___mutex_lock+0x10/0x10 [ 268.480264][ T8991] ? __pfx_vfs_write+0x10/0x10 [ 268.485062][ T8991] ksys_write+0x12a/0x250 [ 268.489411][ T8991] ? __pfx_ksys_write+0x10/0x10 [ 268.494275][ T8991] do_syscall_64+0xcd/0x4b0 [ 268.498796][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.504688][ T8991] RIP: 0033:0x7f6bf7b8eec9 [ 268.509113][ T8991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.528735][ T8991] RSP: 002b:00007f6bf8af9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.537152][ T8991] RAX: ffffffffffffffda RBX: 00007f6bf7de5fa0 RCX: 00007f6bf7b8eec9 [ 268.545124][ T8991] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000013 [ 268.553088][ T8991] RBP: 00007f6bf7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.561049][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.569011][ T8991] R13: 00007f6bf7de6038 R14: 00007f6bf7de5fa0 R15: 00007ffc83831288 [ 268.576994][ T8991] [ 268.588627][ T8988] ,cpuset=/,mems_allowed=0-1 [ 268.698475][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.1.615 Not tainted syzkaller #0 PREEMPT(full) [ 268.698512][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.698528][ T8988] Call Trace: [ 268.698537][ T8988] [ 268.698546][ T8988] dump_stack_lvl+0x16c/0x1f0 [ 268.698593][ T8988] warn_alloc+0x248/0x3a0 [ 268.698624][ T8988] ? __pfx_warn_alloc+0x10/0x10 [ 268.698650][ T8988] ? rcu_is_watching+0x12/0xc0 [ 268.698681][ T8988] ? trace_kmalloc+0x2b/0xd0 [ 268.698710][ T8988] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 268.698754][ T8988] ? __kasan_kmalloc+0x8a/0xb0 [ 268.698781][ T8988] ? __get_vm_area_node+0x208/0x330 [ 268.698823][ T8988] __vmalloc_node_range_noprof+0xb2c/0x14b0 [ 268.698861][ T8988] ? look_up_lock_class+0x6b/0x150 [ 268.698906][ T8988] ? n_tty_open+0x1a/0x170 [ 268.698942][ T8988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.698978][ T8988] ? console_unlock+0x184/0x210 [ 268.699007][ T8988] ? __pfx_console_unlock+0x10/0x10 [ 268.699040][ T8988] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 268.699074][ T8988] ? n_tty_open+0x1a/0x170 [ 268.699101][ T8988] __vmalloc_node_noprof+0xad/0xf0 [ 268.699137][ T8988] ? n_tty_open+0x1a/0x170 [ 268.699164][ T8988] ? __pfx_n_tty_open+0x10/0x10 [ 268.699204][ T8988] n_tty_open+0x1a/0x170 [ 268.699232][ T8988] ? __pfx_n_tty_open+0x10/0x10 [ 268.699260][ T8988] tty_ldisc_open+0x9c/0x120 [ 268.699297][ T8988] tty_ldisc_setup+0x40/0x100 [ 268.699335][ T8988] tty_init_dev.part.0+0x1ec/0x500 [ 268.699365][ T8988] tty_open+0xa4f/0xf90 [ 268.699399][ T8988] ? __pfx_tty_open+0x10/0x10 [ 268.699424][ T8988] ? chrdev_open+0x10b/0x6a0 [ 268.699458][ T8988] ? __pfx_tty_open+0x10/0x10 [ 268.699483][ T8988] chrdev_open+0x231/0x6a0 [ 268.699511][ T8988] ? __pfx_apparmor_file_open+0x10/0x10 [ 268.699537][ T8988] ? __pfx_chrdev_open+0x10/0x10 [ 268.699568][ T8988] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 268.699601][ T8988] do_dentry_open+0x97f/0x1530 [ 268.699628][ T8988] ? __pfx_chrdev_open+0x10/0x10 [ 268.699663][ T8988] vfs_open+0x82/0x3f0 [ 268.699701][ T8988] path_openat+0x1de4/0x2cb0 [ 268.699740][ T8988] ? __pfx_path_openat+0x10/0x10 [ 268.699778][ T8988] do_filp_open+0x20b/0x470 [ 268.699820][ T8988] ? __pfx_do_filp_open+0x10/0x10 [ 268.699876][ T8988] ? alloc_fd+0x471/0x7d0 [ 268.699926][ T8988] do_sys_openat2+0x11b/0x1d0 [ 268.699959][ T8988] ? __pfx_do_sys_openat2+0x10/0x10 [ 268.700008][ T8988] __x64_sys_openat+0x174/0x210 [ 268.700044][ T8988] ? __pfx___x64_sys_openat+0x10/0x10 [ 268.700096][ T8988] do_syscall_64+0xcd/0x4b0 [ 268.700136][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.700163][ T8988] RIP: 0033:0x7fbac638eec9 [ 268.700184][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.700218][ T8988] RSP: 002b:00007fbac7265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.700243][ T8988] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638eec9 [ 268.700261][ T8988] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 268.700279][ T8988] RBP: 00007fbac6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.700296][ T8988] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 268.700313][ T8988] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 268.700352][ T8988] [ 268.700363][ T8988] Mem-Info: [ 269.232706][ T8988] active_anon:10914 inactive_anon:7 isolated_anon:0 [ 269.232706][ T8988] active_file:20215 inactive_file:40852 isolated_file:0 [ 269.232706][ T8988] unevictable:768 dirty:2694 writeback:0 [ 269.232706][ T8988] slab_reclaimable:11659 slab_unreclaimable:90313 [ 269.232706][ T8988] mapped:27699 shmem:1357 pagetables:1145 [ 269.232706][ T8988] sec_pagetables:0 bounce:0 [ 269.232706][ T8988] kernel_misc_reclaimable:0 [ 269.232706][ T8988] free:1314165 free_pcp:21152 free_cma:0 [ 269.512193][ T8988] Node 0 active_anon:42176kB inactive_anon:28kB active_file:80860kB inactive_file:163208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106724kB dirty:10200kB writeback:864kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11800kB pagetables:4352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.641675][ T8988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.684194][ T8988] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.814626][ T8988] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 269.820458][ T8988] Node 0 DMA32 free:1349616kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46236kB inactive_anon:28kB active_file:80860kB inactive_file:163108kB unevictable:1536kB writepending:9044kB present:3129332kB managed:2547908kB mlocked:0kB bounce:0kB free_pcp:63104kB local_pcp:25284kB free_cma:0kB [ 269.898885][ T8988] lowmem_reserve[]: 0 0 0 0 0 [ 269.903678][ T8988] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.974812][ T8988] lowmem_reserve[]: 0 0 0 0 0 [ 270.043032][ T8988] Node 1 Normal free:3894008kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:5216kB free_cma:0kB [ 270.245968][ T8988] lowmem_reserve[]: 0 0 0 0 0 [ 270.250905][ T8988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.264174][ T8988] Node 0 DMA32: 3189*4kB (UME) 1330*8kB (UM) 1100*16kB (UME) 876*32kB (UM) 347*64kB (UM) 270*128kB (UME) 169*256kB (UME) 86*512kB (UME) 29*1024kB (UM) 4*2048kB (UM) 269*4096kB (UM) = 1352804kB [ 270.292008][ T8988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 270.355277][ T8988] Node 1 Normal: 164*4kB (UE) 57*8kB (UME) 38*16kB (UME) 144*32kB (UME) 40*64kB (UME) 9*128kB (UME) 2*256kB (M) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3894072kB [ 270.475653][ T8988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.565621][ T8988] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 270.587281][ T8988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.604458][ T8988] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 270.613862][ T8988] 61445 total pagecache pages [ 270.627481][ T8988] 9 pages in swap cache [ 270.663728][ T8988] Free swap = 122932kB [ 270.668215][ T8988] Total swap = 124996kB [ 270.672385][ T8988] 2097051 pages RAM [ 270.676271][ T8988] 0 pages HighMem/MovableOnly [ 270.682814][ T8988] 428432 pages reserved [ 270.688398][ T8988] 0 pages cma reserved [ 270.692695][ T8988] tty tty26: ldisc open failed (-12), clearing slot 25 [ 270.946868][ T9031] FAULT_INJECTION: forcing a failure. [ 270.946868][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 270.960888][ T9031] CPU: 1 UID: 0 PID: 9031 Comm: syz.3.621 Not tainted syzkaller #0 PREEMPT(full) [ 270.960923][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.960937][ T9031] Call Trace: [ 270.960945][ T9031] [ 270.960955][ T9031] dump_stack_lvl+0x16c/0x1f0 [ 270.960997][ T9031] should_fail_ex+0x512/0x640 [ 270.961019][ T9031] ? __kmalloc_noprof+0xbf/0x510 [ 270.961046][ T9031] ? __seq_open_private+0x22/0xd0 [ 270.961078][ T9031] should_failslab+0xc2/0x120 [ 270.961106][ T9031] __kmalloc_noprof+0xd2/0x510 [ 270.961130][ T9031] ? __pfx_apparmor_file_open+0x10/0x10 [ 270.961162][ T9031] __seq_open_private+0x22/0xd0 [ 270.961196][ T9031] proc_timers_open+0x27/0x150 [ 270.961231][ T9031] do_dentry_open+0x97f/0x1530 [ 270.961259][ T9031] ? __pfx_proc_timers_open+0x10/0x10 [ 270.961299][ T9031] vfs_open+0x82/0x3f0 [ 270.961335][ T9031] path_openat+0x1de4/0x2cb0 [ 270.961372][ T9031] ? __pfx_path_openat+0x10/0x10 [ 270.961408][ T9031] do_filp_open+0x20b/0x470 [ 270.961432][ T9031] ? __pfx_do_filp_open+0x10/0x10 [ 270.961470][ T9031] ? __pfx_kfree_link+0x10/0x10 [ 270.961510][ T9031] ? alloc_fd+0x471/0x7d0 [ 270.961557][ T9031] do_sys_openat2+0x11b/0x1d0 [ 270.961589][ T9031] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.961634][ T9031] __x64_sys_openat+0x174/0x210 [ 270.961669][ T9031] ? __pfx___x64_sys_openat+0x10/0x10 [ 270.961719][ T9031] do_syscall_64+0xcd/0x4b0 [ 270.961758][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.961784][ T9031] RIP: 0033:0x7f6bf7b8eec9 [ 270.961805][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.961831][ T9031] RSP: 002b:00007f6bf8af9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.961864][ T9031] RAX: ffffffffffffffda RBX: 00007f6bf7de5fa0 RCX: 00007f6bf7b8eec9 [ 270.961880][ T9031] RDX: 00000000001a3540 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 270.961896][ T9031] RBP: 00007f6bf7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.961912][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.961927][ T9031] R13: 00007f6bf7de6038 R14: 00007f6bf7de5fa0 R15: 00007ffc83831288 [ 270.961961][ T9031] [ 271.409716][ T9041] usb usb36: usbfs: process 9041 (syz.3.621) did not claim interface 0 before use [ 271.680169][ T9031] zswap: compressor not available [ 274.169461][ T9085] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 274.540093][ T9104] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 275.268528][ T9102] netlink: 268 bytes leftover after parsing attributes in process `syz.1.632'. [ 275.731262][ T9102] syz.1.632 (9102) used greatest stack depth: 17544 bytes left [ 277.271806][ T9154] random: crng reseeded on system resumption [ 279.352528][ T9177] netlink: 330 bytes leftover after parsing attributes in process `syz.0.644'. [ 282.623214][ T9240] FAULT_INJECTION: forcing a failure. [ 282.623214][ T9240] name failslab, interval 1, probability 0, space 0, times 0 [ 282.670051][ T9240] CPU: 1 UID: 0 PID: 9240 Comm: syz.0.654 Not tainted syzkaller #0 PREEMPT(full) [ 282.670085][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.670099][ T9240] Call Trace: [ 282.670108][ T9240] [ 282.670118][ T9240] dump_stack_lvl+0x16c/0x1f0 [ 282.670161][ T9240] should_fail_ex+0x512/0x640 [ 282.670185][ T9240] ? __kmalloc_noprof+0xbf/0x510 [ 282.670213][ T9240] ? __seq_open_private+0x22/0xd0 [ 282.670245][ T9240] should_failslab+0xc2/0x120 [ 282.670273][ T9240] __kmalloc_noprof+0xd2/0x510 [ 282.670298][ T9240] ? __pfx_apparmor_file_open+0x10/0x10 [ 282.670331][ T9240] __seq_open_private+0x22/0xd0 [ 282.670365][ T9240] proc_timers_open+0x27/0x150 [ 282.670408][ T9240] do_dentry_open+0x97f/0x1530 [ 282.670439][ T9240] ? __pfx_proc_timers_open+0x10/0x10 [ 282.670483][ T9240] vfs_open+0x82/0x3f0 [ 282.670515][ T9240] path_openat+0x1de4/0x2cb0 [ 282.670552][ T9240] ? __pfx_path_openat+0x10/0x10 [ 282.670585][ T9240] do_filp_open+0x20b/0x470 [ 282.670613][ T9240] ? __pfx_do_filp_open+0x10/0x10 [ 282.670636][ T9240] ? rcu_is_watching+0x12/0xc0 [ 282.670676][ T9240] ? __pfx_kfree_link+0x10/0x10 [ 282.670718][ T9240] ? alloc_fd+0x471/0x7d0 [ 282.670766][ T9240] do_sys_openat2+0x11b/0x1d0 [ 282.670799][ T9240] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.670848][ T9240] __x64_sys_openat+0x174/0x210 [ 282.670882][ T9240] ? __pfx___x64_sys_openat+0x10/0x10 [ 282.670929][ T9240] do_syscall_64+0xcd/0x4b0 [ 282.670968][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.670990][ T9240] RIP: 0033:0x7f576a18eec9 [ 282.671011][ T9240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.671033][ T9240] RSP: 002b:00007f576b0f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.671054][ T9240] RAX: ffffffffffffffda RBX: 00007f576a3e5fa0 RCX: 00007f576a18eec9 [ 282.671069][ T9240] RDX: 00000000001a3540 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 282.671086][ T9240] RBP: 00007f576a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 282.671102][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.671118][ T9240] R13: 00007f576a3e6038 R14: 00007f576a3e5fa0 R15: 00007ffc0468b6c8 [ 282.671152][ T9240] [ 283.001090][ T9245] zswap: compressor not available [ 283.038947][ T9240] usb usb36: usbfs: process 9240 (syz.0.654) did not claim interface 0 before use [ 287.110574][ T9334] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 287.826601][ T9344] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 287.836329][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 287.895679][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 287.906721][ T9333] netlink: 268 bytes leftover after parsing attributes in process `syz.2.677'. [ 287.945024][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 287.953298][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 287.970662][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 288.025550][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 288.082529][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 288.151827][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 288.221600][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 288.243191][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 288.251783][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 288.260471][ T9343] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 288.767336][ T30] audit: type=1800 audit(4294967307.700:8): pid=9353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.681" name="discovery_nqn" dev="configfs" ino=26564 res=0 errno=0 [ 289.607967][ T30] audit: type=1800 audit(4294967308.540:9): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.691" name="version" dev="configfs" ino=27403 res=0 errno=0 [ 289.649820][ T9384] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 289.698644][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 289.713049][ T9384] ipvlan0: entered promiscuous mode [ 289.718776][ T9384] ipvlan0: entered allmulticast mode [ 289.728901][ T9384] veth0_vlan: entered allmulticast mode [ 290.178435][ T9397] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 290.737986][ T9399] netlink: 268 bytes leftover after parsing attributes in process `syz.3.693'. [ 294.245169][ T9476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.709'. [ 296.086681][ T9513] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 296.163781][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 296.224460][ T9513] ipvlan0: entered promiscuous mode [ 296.229679][ T9513] ipvlan0: entered allmulticast mode [ 296.269367][ T9513] veth0_vlan: entered allmulticast mode [ 296.526869][ T9520] netlink: 342 bytes leftover after parsing attributes in process `syz.1.716'. [ 296.526913][ T9521] netlink: 342 bytes leftover after parsing attributes in process `syz.1.716'. [ 299.684691][ T9562] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 299.832957][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.725'. [ 306.450841][ T30] audit: type=1326 audit(4294967325.360:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.1.747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbac638eec9 code=0x0 [ 307.424683][ T9675] delete_channel: no stack [ 307.492849][ T9698] netlink: 330 bytes leftover after parsing attributes in process `syz.3.749'. [ 310.570391][ T9720] netlink: 330 bytes leftover after parsing attributes in process `syz.0.754'. [ 310.975642][ T9750] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 312.941280][ T9762] netlink: 330 bytes leftover after parsing attributes in process `syz.2.763'. [ 316.978464][ T9846] device-mapper: ioctl: Unable to rename non-existent device,  to [ 317.118817][ T9846] netlink: 206 bytes leftover after parsing attributes in process `syz.1.781'. [ 317.139461][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.146036][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.031822][ T9866] FAULT_INJECTION: forcing a failure. [ 318.031822][ T9866] name failslab, interval 1, probability 0, space 0, times 0 [ 318.045145][ T9866] CPU: 0 UID: 0 PID: 9866 Comm: syz.1.786 Not tainted syzkaller #0 PREEMPT(full) [ 318.045181][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.045198][ T9866] Call Trace: [ 318.045207][ T9866] [ 318.045216][ T9866] dump_stack_lvl+0x16c/0x1f0 [ 318.045260][ T9866] should_fail_ex+0x512/0x640 [ 318.045291][ T9866] should_failslab+0xc2/0x120 [ 318.045325][ T9866] __kmalloc_cache_noprof+0x6a/0x3e0 [ 318.045366][ T9866] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 318.045418][ T9866] tipc_nametbl_insert_publ+0x700/0x1720 [ 318.045460][ T9866] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 318.045484][ T9866] ? net_generic+0xea/0x2a0 [ 318.045527][ T9866] tipc_nametbl_publish+0x137/0x280 [ 318.045570][ T9866] tipc_sk_publish+0x1d8/0x430 [ 318.045610][ T9866] ? __pfx_tipc_sk_publish+0x10/0x10 [ 318.045654][ T9866] ? __local_bh_enable_ip+0xa4/0x120 [ 318.045692][ T9866] tipc_sk_bind+0x16f/0x380 [ 318.045719][ T9866] tipc_bind+0x190/0x2a0 [ 318.045746][ T9866] __sys_bind+0x1a7/0x260 [ 318.045779][ T9866] ? __pfx___sys_bind+0x10/0x10 [ 318.045823][ T9866] ? xfd_validate_state+0x61/0x180 [ 318.045847][ T9866] ? __pfx_do_writev+0x10/0x10 [ 318.045880][ T9866] __x64_sys_bind+0x72/0xb0 [ 318.045908][ T9866] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.045943][ T9866] do_syscall_64+0xcd/0x4b0 [ 318.045991][ T9866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.046096][ T9866] RIP: 0033:0x7fbac638eec9 [ 318.046145][ T9866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.046160][ T9866] RSP: 002b:00007fbac7244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 318.046174][ T9866] RAX: ffffffffffffffda RBX: 00007fbac65e6090 RCX: 00007fbac638eec9 [ 318.046184][ T9866] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000009 [ 318.046193][ T9866] RBP: 00007fbac6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.046202][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.046210][ T9866] R13: 00007fbac65e6128 R14: 00007fbac65e6090 R15: 00007ffc5f48dac8 [ 318.046229][ T9866] [ 318.046237][ T9866] tipc: Failed to bind to 65,0,0 [ 318.663564][ T5844] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 320.848202][T10002] netlink: zone id is out of range [ 321.164260][T10040] zswap: compressor not available [ 322.427987][T10158] FAULT_INJECTION: forcing a failure. [ 322.427987][T10158] name failslab, interval 1, probability 0, space 0, times 0 [ 322.441279][T10158] CPU: 0 UID: 0 PID: 10158 Comm: syz.3.803 Not tainted syzkaller #0 PREEMPT(full) [ 322.441312][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.441326][T10158] Call Trace: [ 322.441334][T10158] [ 322.441344][T10158] dump_stack_lvl+0x16c/0x1f0 [ 322.441383][T10158] should_fail_ex+0x512/0x640 [ 322.441407][T10158] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 322.441445][T10158] should_failslab+0xc2/0x120 [ 322.441473][T10158] __kmalloc_cache_noprof+0x6a/0x3e0 [ 322.441509][T10158] ? misc_read+0x80/0x240 [ 322.441538][T10158] misc_read+0x80/0x240 [ 322.441567][T10158] short_proxy_read+0x12c/0x190 [ 322.441602][T10158] ? __pfx_short_proxy_read+0x10/0x10 [ 322.441639][T10158] vfs_read+0x1e4/0xcf0 [ 322.441669][T10158] ? __pfx___mutex_lock+0x10/0x10 [ 322.441702][T10158] ? __pfx_vfs_read+0x10/0x10 [ 322.441736][T10158] ? __fget_files+0x20e/0x3c0 [ 322.441769][T10158] ksys_read+0x12a/0x250 [ 322.441792][T10158] ? __pfx_ksys_read+0x10/0x10 [ 322.441827][T10158] do_syscall_64+0xcd/0x4b0 [ 322.441863][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.441888][T10158] RIP: 0033:0x7f6bf7b8eec9 [ 322.441908][T10158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.441931][T10158] RSP: 002b:00007f6bf8af9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.441955][T10158] RAX: ffffffffffffffda RBX: 00007f6bf7de5fa0 RCX: 00007f6bf7b8eec9 [ 322.441972][T10158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 322.441987][T10158] RBP: 00007f6bf8af9090 R08: 0000000000000000 R09: 0000000000000000 [ 322.442002][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.442017][T10158] R13: 00007f6bf7de6038 R14: 00007f6bf7de5fa0 R15: 00007ffc83831288 [ 322.442052][T10158] [ 326.583268][T10372] FAULT_INJECTION: forcing a failure. [ 326.583268][T10372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.695171][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.1.812 Not tainted syzkaller #0 PREEMPT(full) [ 326.695206][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.695220][T10372] Call Trace: [ 326.695229][T10372] [ 326.695239][T10372] dump_stack_lvl+0x16c/0x1f0 [ 326.695278][T10372] should_fail_ex+0x512/0x640 [ 326.695308][T10372] _copy_to_user+0x32/0xd0 [ 326.695335][T10372] simple_read_from_buffer+0xcb/0x170 [ 326.695374][T10372] proc_fail_nth_read+0x197/0x240 [ 326.695414][T10372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.695455][T10372] ? rw_verify_area+0xcf/0x6c0 [ 326.695488][T10372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.695526][T10372] vfs_read+0x1e4/0xcf0 [ 326.695555][T10372] ? __pfx___mutex_lock+0x10/0x10 [ 326.695595][T10372] ? __pfx_vfs_read+0x10/0x10 [ 326.695629][T10372] ? __fget_files+0x20e/0x3c0 [ 326.695662][T10372] ksys_read+0x12a/0x250 [ 326.695685][T10372] ? __pfx_ksys_read+0x10/0x10 [ 326.695719][T10372] do_syscall_64+0xcd/0x4b0 [ 326.695757][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.695782][T10372] RIP: 0033:0x7fbac638d8dc [ 326.695802][T10372] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.695825][T10372] RSP: 002b:00007fbac7265030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.695848][T10372] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638d8dc [ 326.695865][T10372] RDX: 000000000000000f RSI: 00007fbac72650a0 RDI: 0000000000000004 [ 326.695880][T10372] RBP: 00007fbac7265090 R08: 0000000000000000 R09: 0000000000000000 [ 326.695895][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.695909][T10372] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 326.695943][T10372] [ 327.708321][T10384] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 328.503796][T10406] netlink: 342 bytes leftover after parsing attributes in process `syz.0.818'. [ 329.109781][T10424] zswap: compressor not available [ 330.595231][T10497] netlink: 'syz.3.828': attribute type 3 has an invalid length. [ 330.625726][T10421] netlink: 330 bytes leftover after parsing attributes in process `syz.0.821'. [ 331.016899][T10506] FAULT_INJECTION: forcing a failure. [ 331.016899][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 331.049068][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.1.827 Not tainted syzkaller #0 PREEMPT(full) [ 331.049097][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 331.049106][T10506] Call Trace: [ 331.049111][T10506] [ 331.049118][T10506] dump_stack_lvl+0x16c/0x1f0 [ 331.049146][T10506] should_fail_ex+0x512/0x640 [ 331.049160][T10506] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 331.049178][T10506] should_failslab+0xc2/0x120 [ 331.049194][T10506] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 331.049210][T10506] ? __d_alloc+0x32/0xae0 [ 331.049228][T10506] __d_alloc+0x32/0xae0 [ 331.049246][T10506] d_alloc_parallel+0x111/0x1480 [ 331.049273][T10506] ? __pfx_d_alloc_parallel+0x10/0x10 [ 331.049295][T10506] ? lockdep_init_map_type+0x5c/0x280 [ 331.049318][T10506] ? lockdep_init_map_type+0x5c/0x280 [ 331.049344][T10506] __lookup_slow+0x193/0x460 [ 331.049364][T10506] ? __pfx___lookup_slow+0x10/0x10 [ 331.049386][T10506] ? __is_kernel_percpu_address+0x110/0x2c0 [ 331.049406][T10506] ? __is_kernel_percpu_address+0x110/0x2c0 [ 331.049421][T10506] ? d_lookup+0xe7/0x190 [ 331.049443][T10506] lookup_noperm+0xe1/0x110 [ 331.049462][T10506] simple_start_creating+0xd1/0x1b0 [ 331.049487][T10506] debugfs_start_creating.part.0+0x82/0x190 [ 331.049505][T10506] __debugfs_create_file+0xa7/0x6b0 [ 331.049524][T10506] debugfs_create_file_full+0x41/0x60 [ 331.049543][T10506] ? __pfx_ppp_setup+0x10/0x10 [ 331.049557][T10506] ref_tracker_dir_debugfs+0x19d/0x290 [ 331.049572][T10506] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 331.049608][T10506] ? __kvmalloc_node_noprof+0x298/0x620 [ 331.049634][T10506] ? lockdep_init_map_type+0x5c/0x280 [ 331.049660][T10506] alloc_netdev_mqs+0x30f/0x1530 [ 331.049687][T10506] ppp_ioctl+0x1761/0x2670 [ 331.049705][T10506] ? find_held_lock+0x2b/0x80 [ 331.049721][T10506] ? __pfx_ppp_ioctl+0x10/0x10 [ 331.049742][T10506] ? __fget_files+0x20e/0x3c0 [ 331.049757][T10506] ? __pfx_ppp_ioctl+0x10/0x10 [ 331.049775][T10506] __x64_sys_ioctl+0x18e/0x210 [ 331.049796][T10506] do_syscall_64+0xcd/0x4b0 [ 331.049819][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.049837][T10506] RIP: 0033:0x7fbac638eec9 [ 331.049850][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.049864][T10506] RSP: 002b:00007fbac7265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.049878][T10506] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638eec9 [ 331.049888][T10506] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 331.049896][T10506] RBP: 00007fbac6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.049904][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.049913][T10506] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 331.049933][T10506] [ 331.331309][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.890367][T10716] netlink: zone id is out of range [ 337.657026][T10762] netlink: 302 bytes leftover after parsing attributes in process `syz.0.850'. [ 339.671196][T10848] random: crng reseeded on system resumption [ 347.745928][ T5844] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 350.780116][T11301] nfsd: Unknown parameter '^B-' [ 351.711518][T11394] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 354.445644][T11461] netlink: 330 bytes leftover after parsing attributes in process `syz.0.915'. [ 356.053434][T11611] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 357.093074][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'. [ 357.263117][ T5844] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 358.187573][T11714] Invalid input. Must be >= 4608 [ 358.194874][T11714] netlink: 'syz.2.932': attribute type 11 has an invalid length. [ 358.228164][T11707] netlink: 330 bytes leftover after parsing attributes in process `syz.3.928'. [ 359.294265][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 360.907873][T11872] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 361.163673][T11874] netlink: zone id is out of range [ 361.180444][T11874] netlink: zone id is out of range [ 361.201565][T11874] netlink: zone id is out of range [ 361.213110][T11874] netlink: zone id is out of range [ 361.220636][T11874] netlink: zone id is out of range [ 361.247139][T11874] netlink: zone id is out of range [ 361.262747][T11874] netlink: zone id is out of range [ 361.323467][T11874] netlink: zone id is out of range [ 361.477557][T11874] netlink: zone id is out of range [ 361.491012][T11874] netlink: zone id is out of range [ 361.603151][T11878] ovs_: entered promiscuous mode [ 362.492395][T11936] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 362.568925][T11886] netlink: 330 bytes leftover after parsing attributes in process `syz.0.946'. [ 363.500988][T11972] svc: failed to register nfsdv3 RPC service (errno 111). [ 363.520023][T11972] svc: failed to register nfsaclv3 RPC service (errno 111). [ 365.385308][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.963'. [ 365.438676][ C1] vcan0: j1939_session_tx_dat: 0xffff88805b784800: queue data error: -100 [ 366.245133][T12066] svc: failed to register nfsdv3 RPC service (errno 111). [ 366.283292][T12066] svc: failed to register nfsaclv3 RPC service (errno 111). [ 366.965252][T12103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 367.519151][T12103] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 367.727940][T12046] netlink: 330 bytes leftover after parsing attributes in process `syz.0.966'. [ 367.741400][T12084] netlink: 330 bytes leftover after parsing attributes in process `syz.2.971'. [ 368.601110][T12163] random: crng reseeded on system resumption [ 371.200909][T12214] netlink: 330 bytes leftover after parsing attributes in process `syz.2.980'. [ 371.728845][T12254] netlink: 330 bytes leftover after parsing attributes in process `syz.1.981'. [ 372.221693][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.984'. [ 372.477080][T12355] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 375.627301][T12456] net_ratelimit: 1 callbacks suppressed [ 375.627324][T12456] netlink: set zone limit has 8 unknown bytes [ 375.803246][T12429] netlink: 330 bytes leftover after parsing attributes in process `syz.1.993'. [ 375.992653][T12489] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 378.353966][T12542] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1004'. [ 378.498044][T12580] FAULT_INJECTION: forcing a failure. [ 378.498044][T12580] name failslab, interval 1, probability 0, space 0, times 0 [ 378.539036][T12580] CPU: 0 UID: 0 PID: 12580 Comm: syz.3.1007 Not tainted syzkaller #0 PREEMPT(full) [ 378.539059][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.539068][T12580] Call Trace: [ 378.539073][T12580] [ 378.539080][T12580] dump_stack_lvl+0x16c/0x1f0 [ 378.539106][T12580] should_fail_ex+0x512/0x640 [ 378.539121][T12580] ? __kvmalloc_node_noprof+0x124/0x620 [ 378.539146][T12580] should_failslab+0xc2/0x120 [ 378.539164][T12580] __kvmalloc_node_noprof+0x137/0x620 [ 378.539188][T12580] ? __do_sys_setgroups+0x111/0x4e0 [ 378.539213][T12580] ? __do_sys_setgroups+0x111/0x4e0 [ 378.539238][T12580] __do_sys_setgroups+0x111/0x4e0 [ 378.539259][T12580] ? 0xffffffffff600000 [ 378.539270][T12580] ? rcu_is_watching+0x12/0xc0 [ 378.539290][T12580] do_syscall_64+0xcd/0x4b0 [ 378.539312][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.539327][T12580] RIP: 0033:0x7f6bf7b8eec9 [ 378.539339][T12580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.539353][T12580] RSP: 002b:00007f6bf8af9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 378.539367][T12580] RAX: ffffffffffffffda RBX: 00007f6bf7de5fa0 RCX: 00007f6bf7b8eec9 [ 378.539376][T12580] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000c00000000 [ 378.539385][T12580] RBP: 00007f6bf7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 378.539393][T12580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.539401][T12580] R13: 00007f6bf7de6038 R14: 00007f6bf7de5fa0 R15: 00007ffc83831288 [ 378.539416][T12580] ? 0xffffffffff600000 [ 378.539429][T12580] [ 378.809334][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.819821][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.115203][T12596] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1010'. [ 381.358715][T12699] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1016'. [ 382.133846][T12767] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1029'. [ 383.559209][T12852] CIFS: VFS: Invalid SecurityFlags: [ 383.664363][T12852] ICMPv6: process `syz.1.1026' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 383.805651][T12811] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1020'. [ 384.518159][T12856] netlink: set zone limit has 8 unknown bytes [ 386.477342][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.488339][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.496510][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.508481][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.517122][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.039617][T12962] chnl_net:caif_netlink_parms(): no params data found [ 387.499125][T13120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 387.734874][T12962] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.776205][T12962] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.783477][T12962] bridge_slave_0: entered allmulticast mode [ 387.804140][T13105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.821524][T12962] bridge_slave_0: entered promiscuous mode [ 387.836067][T13105] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 387.860908][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.869988][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.877901][T12962] bridge_slave_1: entered allmulticast mode [ 387.885419][T12962] bridge_slave_1: entered promiscuous mode [ 388.056317][T13105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.077685][T13105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.077821][T13105] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 388.158745][T13105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.160089][T13105] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 388.160199][T13105] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 388.379468][T12962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.398903][T13105] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 388.426524][T12962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.582838][T12962] team0: Port device team_slave_0 added [ 388.681368][T12962] team0: Port device team_slave_1 added [ 388.798431][T12962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.833728][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.893272][T12962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.924080][T12962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.931222][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.960331][T12962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.137152][T12962] hsr_slave_0: entered promiscuous mode [ 389.185610][T12962] hsr_slave_1: entered promiscuous mode [ 389.191869][T12962] debugfs: 'hsr0' already exists in 'hsr' [ 389.212644][T12962] Cannot create hsr debugfs directory [ 389.351352][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 389.481773][T13292] zero sized request [ 389.862845][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 390.094189][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 390.094659][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 390.174791][ T5841] Bluetooth: hci4: command 0x041b tx timeout [ 390.176096][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 390.369675][T12962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.426214][T12962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.463431][T12962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.485484][T12962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.517010][T13389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1049'. [ 390.727212][T13389] zswap: compressor not available [ 390.813019][T12962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.855235][T12962] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.926919][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.934339][ T7489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.981644][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.988851][ T7489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.672899][T12962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.954190][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 392.174221][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 392.254390][ T5844] Bluetooth: hci4: command 0x041b tx timeout [ 392.321214][T12962] veth0_vlan: entered promiscuous mode [ 392.466211][T12962] veth1_vlan: entered promiscuous mode [ 392.606401][T12962] veth0_macvtap: entered promiscuous mode [ 392.648844][T12962] veth1_macvtap: entered promiscuous mode [ 392.673868][T13455] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1054'. [ 392.818035][T12962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.840877][T12962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.945058][ T7491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.958824][ T7491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.016164][ T7491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.107740][T13519] FAULT_INJECTION: forcing a failure. [ 393.107740][T13519] name failslab, interval 1, probability 0, space 0, times 0 [ 393.111601][ T7491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.135378][T13519] CPU: 1 UID: 0 PID: 13519 Comm: syz.3.1057 Not tainted syzkaller #0 PREEMPT(full) [ 393.135418][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.135434][T13519] Call Trace: [ 393.135444][T13519] [ 393.135455][T13519] dump_stack_lvl+0x16c/0x1f0 [ 393.135500][T13519] should_fail_ex+0x512/0x640 [ 393.135525][T13519] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 393.135569][T13519] should_failslab+0xc2/0x120 [ 393.135600][T13519] __kmalloc_cache_noprof+0x6a/0x3e0 [ 393.135636][T13519] ? alloc_fs_context+0x57/0x9c0 [ 393.135669][T13519] alloc_fs_context+0x57/0x9c0 [ 393.135704][T13519] mq_init_ns+0x172/0x620 [ 393.135735][T13519] copy_ipcs+0x2d6/0x550 [ 393.135764][T13519] create_new_namespaces+0x20a/0xa90 [ 393.135797][T13519] ? security_capable+0x7e/0x260 [ 393.135841][T13519] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 393.135878][T13519] ksys_unshare+0x45b/0xa40 [ 393.135915][T13519] ? __pfx_ksys_unshare+0x10/0x10 [ 393.135955][T13519] ? xfd_validate_state+0x61/0x180 [ 393.135991][T13519] __x64_sys_unshare+0x31/0x40 [ 393.136035][T13519] do_syscall_64+0xcd/0x4b0 [ 393.136076][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.136103][T13519] RIP: 0033:0x7f6bf7b8eec9 [ 393.136126][T13519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.136151][T13519] RSP: 002b:00007f6bf8af9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 393.136176][T13519] RAX: ffffffffffffffda RBX: 00007f6bf7de5fa0 RCX: 00007f6bf7b8eec9 [ 393.136194][T13519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 393.136210][T13519] RBP: 00007f6bf7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 393.136227][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.136242][T13519] R13: 00007f6bf7de6038 R14: 00007f6bf7de5fa0 R15: 00007ffc83831288 [ 393.136278][T13519] [ 393.677309][T13474] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1055'. [ 393.875389][ T7487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.907980][ T7487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.153653][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.171783][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.334142][ T5844] Bluetooth: hci4: command 0x041b tx timeout [ 396.036897][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 396.414378][ T5844] Bluetooth: hci4: command 0x041b tx timeout [ 396.491734][T13711] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1064'. [ 398.085765][T13857] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.130293][T13857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.130504][T13857] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.131200][T13857] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.132173][T13857] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 398.527003][T13855] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1080'. [ 400.096997][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.174180][ T5844] Bluetooth: hci4: command 0x041b tx timeout [ 400.174575][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.180224][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 400.186394][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.156640][T13948] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1091'. [ 401.474133][T13933] Bluetooth: hci0: unexpected event 0x3e length: 509 > 260 [ 401.474237][T13933] Bluetooth: hci0: unexpected subevent 0x02 length: 508 > 260 [ 401.489743][T13933] Bluetooth: hci0: Dropping invalid advertising data [ 401.806917][T14054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 402.215342][T14087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 402.221632][T14087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 402.235669][T14087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 402.254095][T13933] Bluetooth: hci4: command 0x041b tx timeout [ 402.255434][T14087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 402.270887][T14087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 402.618497][T14066] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1099'. [ 403.725890][ T30] audit: type=1800 audit(1843104526.680:11): pid=14149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1106" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 404.254377][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 404.254416][T13933] Bluetooth: hci1: command 0x0c1a tx timeout [ 404.260439][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 404.334109][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 404.344470][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 405.093760][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.105049][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.113731][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.123211][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.131440][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.675265][T14343] FAULT_INJECTION: forcing a failure. [ 406.675265][T14343] name fail_futex, interval 1, probability 0, space 0, times 0 [ 406.693284][T14343] CPU: 0 UID: 0 PID: 14343 Comm: syz.3.1121 Not tainted syzkaller #0 PREEMPT(full) [ 406.693329][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.693345][T14343] Call Trace: [ 406.693354][T14343] [ 406.693365][T14343] dump_stack_lvl+0x16c/0x1f0 [ 406.693409][T14343] should_fail_ex+0x512/0x640 [ 406.693434][T14343] ? unwind_get_return_address+0x59/0xa0 [ 406.693472][T14343] get_futex_key+0x1d0/0x1560 [ 406.693514][T14343] ? __pfx_get_futex_key+0x10/0x10 [ 406.693549][T14343] ? stack_trace_save+0x8e/0xc0 [ 406.693581][T14343] ? __pfx_stack_trace_save+0x10/0x10 [ 406.693621][T14343] futex_wait_setup+0x9d/0x550 [ 406.693659][T14343] __futex_wait+0x193/0x2f0 [ 406.693688][T14343] ? __pfx___futex_wait+0x10/0x10 [ 406.693721][T14343] ? __pfx_futex_wake_mark+0x10/0x10 [ 406.693753][T14343] ? futex_private_hash_put+0x176/0x300 [ 406.693793][T14343] ? futex_private_hash_put+0x18a/0x300 [ 406.693831][T14343] futex_wait+0xe8/0x380 [ 406.693857][T14343] ? __pfx_futex_wait+0x10/0x10 [ 406.693892][T14343] ? kmem_cache_free+0x2d1/0x4d0 [ 406.693916][T14343] ? fd_install+0x225/0x750 [ 406.693952][T14343] ? putname+0x154/0x1a0 [ 406.693989][T14343] do_futex+0x229/0x350 [ 406.694024][T14343] ? __pfx_do_futex+0x10/0x10 [ 406.694060][T14343] ? __pfx___might_resched+0x10/0x10 [ 406.694093][T14343] __x64_sys_futex+0x1e0/0x4c0 [ 406.694131][T14343] ? __x64_sys_openat+0x174/0x210 [ 406.694163][T14343] ? __pfx___x64_sys_futex+0x10/0x10 [ 406.694213][T14343] do_syscall_64+0xcd/0x4b0 [ 406.694253][T14343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.694279][T14343] RIP: 0033:0x7f6bf7b8eec9 [ 406.694301][T14343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.694334][T14343] RSP: 002b:00007f6bf8ad80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 406.694358][T14343] RAX: ffffffffffffffda RBX: 00007f6bf7de6098 RCX: 00007f6bf7b8eec9 [ 406.694376][T14343] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6bf7de6098 [ 406.694393][T14343] RBP: 00007f6bf7de6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.694409][T14343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.694425][T14343] R13: 00007f6bf7de6128 R14: 00007ffc838311a0 R15: 00007ffc83831288 [ 406.694460][T14343] [ 406.945975][T14237] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1113'. [ 407.226100][ T5841] Bluetooth: hci5: command tx timeout [ 407.295698][T14217] chnl_net:caif_netlink_parms(): no params data found [ 407.581409][T14217] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.593058][T14217] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.602124][T14217] bridge_slave_0: entered allmulticast mode [ 407.610307][T14217] bridge_slave_0: entered promiscuous mode [ 407.618397][T14217] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.625758][T14217] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.632935][T14217] bridge_slave_1: entered allmulticast mode [ 407.640846][T14217] bridge_slave_1: entered promiscuous mode [ 407.725581][T14217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.746325][T14217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.829155][T14217] team0: Port device team_slave_0 added [ 407.843531][T14217] team0: Port device team_slave_1 added [ 407.886472][T14217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.893454][T14217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.922157][T14217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.941355][T14217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.974063][T14217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.050647][T14217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.323335][T14217] hsr_slave_0: entered promiscuous mode [ 408.347546][T14217] hsr_slave_1: entered promiscuous mode [ 408.354362][T14217] debugfs: 'hsr0' already exists in 'hsr' [ 408.360118][T14217] Cannot create hsr debugfs directory [ 409.305872][ T5841] Bluetooth: hci5: command tx timeout [ 409.650527][T14728] FAULT_INJECTION: forcing a failure. [ 409.650527][T14728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.669618][T14728] CPU: 1 UID: 0 PID: 14728 Comm: syz.3.1126 Not tainted syzkaller #0 PREEMPT(full) [ 409.669653][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.669667][T14728] Call Trace: [ 409.669675][T14728] [ 409.669684][T14728] dump_stack_lvl+0x16c/0x1f0 [ 409.669723][T14728] should_fail_ex+0x512/0x640 [ 409.669752][T14728] _copy_from_user+0x2e/0xd0 [ 409.669778][T14728] ____sys_sendmsg+0x607/0xc70 [ 409.669808][T14728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.669838][T14728] ? __pfx__kstrtoull+0x10/0x10 [ 409.669873][T14728] ___sys_sendmsg+0x134/0x1d0 [ 409.669907][T14728] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.669955][T14728] ? find_held_lock+0x2b/0x80 [ 409.670003][T14728] __sys_sendmmsg+0x200/0x420 [ 409.670039][T14728] ? __pfx___sys_sendmmsg+0x10/0x10 [ 409.670080][T14728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 409.670132][T14728] ? fput+0x9b/0xd0 [ 409.670160][T14728] ? ksys_write+0x1ac/0x250 [ 409.670183][T14728] ? __pfx_ksys_write+0x10/0x10 [ 409.670214][T14728] __x64_sys_sendmmsg+0x9c/0x100 [ 409.670247][T14728] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.670278][T14728] do_syscall_64+0xcd/0x4b0 [ 409.670314][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.670338][T14728] RIP: 0033:0x7f6bf7b8eec9 [ 409.670358][T14728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.670386][T14728] RSP: 002b:00007f6bf8af9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.670410][T14728] RAX: ffffffffffffffda RBX: 00007f6bf7de5fa0 RCX: 00007f6bf7b8eec9 [ 409.670427][T14728] RDX: 00000000ffffffff RSI: 0000200000000080 RDI: 0000000000000003 [ 409.670442][T14728] RBP: 00007f6bf8af9090 R08: 0000000000000000 R09: 0000000000000000 [ 409.670457][T14728] R10: 0000000000000b10 R11: 0000000000000246 R12: 0000000000000001 [ 409.670472][T14728] R13: 00007f6bf7de6038 R14: 00007f6bf7de5fa0 R15: 00007ffc83831288 [ 409.670508][T14728] [ 410.452370][T14217] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 410.497416][T14217] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 410.548117][T14217] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 410.581079][T14217] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 410.750365][T14732] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1127'. [ 411.374130][ T5841] Bluetooth: hci5: command tx timeout [ 411.427421][T14217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.470581][T14217] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.492184][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.500419][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.655527][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.662721][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.831131][T14834] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1136'. [ 411.867533][T14834] : renamed from bond0 (while UP) [ 412.239068][T14217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.255614][T14932] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1130'. [ 413.454454][ T5841] Bluetooth: hci5: command tx timeout [ 413.949570][T14217] veth0_vlan: entered promiscuous mode [ 414.038931][T14217] veth1_vlan: entered promiscuous mode [ 414.065480][ T5841] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 414.398231][T14217] veth0_macvtap: entered promiscuous mode [ 414.487294][T14217] veth1_macvtap: entered promiscuous mode [ 414.630049][T14217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.778108][T14217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.790455][T15109] FAULT_INJECTION: forcing a failure. [ 414.790455][T15109] name failslab, interval 1, probability 0, space 0, times 0 [ 414.824162][T15109] CPU: 0 UID: 0 PID: 15109 Comm: syz.1.1138 Not tainted syzkaller #0 PREEMPT(full) [ 414.824196][T15109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 414.824210][T15109] Call Trace: [ 414.824218][T15109] [ 414.824228][T15109] dump_stack_lvl+0x16c/0x1f0 [ 414.824268][T15109] should_fail_ex+0x512/0x640 [ 414.824296][T15109] should_failslab+0xc2/0x120 [ 414.824325][T15109] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 414.824352][T15109] ? dst_alloc+0x99/0x1a0 [ 414.824387][T15109] dst_alloc+0x99/0x1a0 [ 414.824421][T15109] rt_dst_alloc+0x35/0x3a0 [ 414.824460][T15109] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 414.824502][T15109] ip_route_output_key_hash+0x137/0x2e0 [ 414.824539][T15109] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 414.824580][T15109] ? find_held_lock+0x2b/0x80 [ 414.824613][T15109] ip_route_output_flow+0x27/0x150 [ 414.824645][T15109] ping_v4_sendmsg+0xa70/0x1a40 [ 414.824683][T15109] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 414.824762][T15109] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 414.824790][T15109] inet_sendmsg+0x119/0x140 [ 414.824820][T15109] ____sys_sendmsg+0x973/0xc70 [ 414.824851][T15109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.824884][T15109] ? __pfx__kstrtoull+0x10/0x10 [ 414.824923][T15109] ___sys_sendmsg+0x134/0x1d0 [ 414.824959][T15109] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.825012][T15109] ? find_held_lock+0x2b/0x80 [ 414.825064][T15109] __sys_sendmmsg+0x200/0x420 [ 414.825103][T15109] ? __pfx___sys_sendmmsg+0x10/0x10 [ 414.825150][T15109] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 414.825200][T15109] ? fput+0x9b/0xd0 [ 414.825229][T15109] ? ksys_write+0x1ac/0x250 [ 414.825253][T15109] ? __pfx_ksys_write+0x10/0x10 [ 414.825284][T15109] __x64_sys_sendmmsg+0x9c/0x100 [ 414.825317][T15109] ? lockdep_hardirqs_on+0x7c/0x110 [ 414.825349][T15109] do_syscall_64+0xcd/0x4b0 [ 414.825386][T15109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.825411][T15109] RIP: 0033:0x7fbac638eec9 [ 414.825431][T15109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.825455][T15109] RSP: 002b:00007fbac7265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 414.825479][T15109] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638eec9 [ 414.825495][T15109] RDX: 00000000ffffffff RSI: 0000200000000080 RDI: 0000000000000003 [ 414.825516][T15109] RBP: 00007fbac7265090 R08: 0000000000000000 R09: 0000000000000000 [ 414.825531][T15109] R10: 0000000000000b10 R11: 0000000000000246 R12: 0000000000000001 [ 414.825546][T15109] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 414.825582][T15109] [ 415.192293][ T8793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.385245][ T8793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.386846][ T7487] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.393086][ T8793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.404053][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.442990][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.453333][ T7487] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.494024][ T7487] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.635458][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 417.643558][T15208] random: crng reseeded on system resumption [ 418.528330][T15243] random: crng reseeded on system resumption [ 419.085427][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 420.615842][T15277] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1152'. [ 421.055622][T15394] FAULT_INJECTION: forcing a failure. [ 421.055622][T15394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.081799][T15394] CPU: 0 UID: 0 PID: 15394 Comm: syz.1.1167 Not tainted syzkaller #0 PREEMPT(full) [ 421.081834][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.081848][T15394] Call Trace: [ 421.081856][T15394] [ 421.081866][T15394] dump_stack_lvl+0x16c/0x1f0 [ 421.081902][T15394] should_fail_ex+0x512/0x640 [ 421.081927][T15394] _copy_from_user+0x2e/0xd0 [ 421.081951][T15394] ucma_write+0x128/0x330 [ 421.081982][T15394] ? __pfx_ucma_write+0x10/0x10 [ 421.082010][T15394] ? bpf_lsm_file_permission+0x9/0x10 [ 421.082038][T15394] ? security_file_permission+0x71/0x210 [ 421.082068][T15394] ? rw_verify_area+0xcf/0x6c0 [ 421.082105][T15394] ? __pfx_ucma_write+0x10/0x10 [ 421.082132][T15394] vfs_write+0x29d/0x11d0 [ 421.082162][T15394] ? __pfx_vfs_write+0x10/0x10 [ 421.082183][T15394] ? find_held_lock+0x2b/0x80 [ 421.082211][T15394] ? __fget_files+0x204/0x3c0 [ 421.082238][T15394] ? __fget_files+0x20e/0x3c0 [ 421.082270][T15394] ksys_write+0x1f8/0x250 [ 421.082293][T15394] ? __pfx_ksys_write+0x10/0x10 [ 421.082327][T15394] do_syscall_64+0xcd/0x4b0 [ 421.082363][T15394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.082388][T15394] RIP: 0033:0x7fbac638eec9 [ 421.082416][T15394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.082440][T15394] RSP: 002b:00007fbac7265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.082463][T15394] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638eec9 [ 421.082480][T15394] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 000000000000000d [ 421.082495][T15394] RBP: 00007fbac7265090 R08: 0000000000000000 R09: 0000000000000000 [ 421.082510][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.082525][T15394] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 421.082557][T15394] [ 421.500514][T15402] Invalid ELF header magic: != ELF [ 422.776613][T15455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1164'. [ 423.428424][T15515] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 423.921423][T15541] random: crng reseeded on system resumption [ 424.468066][T15467] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1165'. [ 424.648835][T15467] : renamed from bond0 (while UP) [ 426.898768][T15662] random: crng reseeded on system resumption [ 426.998969][T15670] FAULT_INJECTION: forcing a failure. [ 426.998969][T15670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.022177][T15670] CPU: 0 UID: 0 PID: 15670 Comm: syz.3.1188 Not tainted syzkaller #0 PREEMPT(full) [ 427.022212][T15670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 427.022226][T15670] Call Trace: [ 427.022235][T15670] [ 427.022244][T15670] dump_stack_lvl+0x16c/0x1f0 [ 427.022288][T15670] should_fail_ex+0x512/0x640 [ 427.022317][T15670] _copy_from_user+0x2e/0xd0 [ 427.022344][T15670] kstrtouint_from_user+0xd6/0x1d0 [ 427.022376][T15670] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 427.022405][T15670] ? __lock_acquire+0xb97/0x1ce0 [ 427.022458][T15670] proc_fail_nth_write+0x83/0x220 [ 427.022484][T15670] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 427.022518][T15670] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 427.022540][T15670] vfs_write+0x29d/0x11d0 [ 427.022571][T15670] ? __pfx___mutex_lock+0x10/0x10 [ 427.022606][T15670] ? __pfx_vfs_write+0x10/0x10 [ 427.022640][T15670] ? __fget_files+0x20e/0x3c0 [ 427.022674][T15670] ksys_write+0x12a/0x250 [ 427.022698][T15670] ? __pfx_ksys_write+0x10/0x10 [ 427.022734][T15670] do_syscall_64+0xcd/0x4b0 [ 427.022771][T15670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.022805][T15670] RIP: 0033:0x7f6bf7b8d97f [ 427.022826][T15670] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 427.022849][T15670] RSP: 002b:00007f6bf8af9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 427.022872][T15670] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6bf7b8d97f [ 427.022888][T15670] RDX: 0000000000000001 RSI: 00007f6bf8af90a0 RDI: 000000000000000e [ 427.022903][T15670] RBP: 00007f6bf8af9090 R08: 0000000000000000 R09: 0000000000000000 [ 427.022918][T15670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 427.022932][T15670] R13: 00007f6bf7de6038 R14: 00007f6bf7de5fa0 R15: 00007ffc83831288 [ 427.022963][T15670] [ 427.819010][T15710] zero sized request [ 428.288065][T15668] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1186'. [ 428.762802][T15755] __vm_enough_memory: pid: 15755, comm: syz.3.1194, bytes: 4398046511104 not enough memory for the allocation [ 430.173219][T15804] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 430.621902][T15813] FAULT_INJECTION: forcing a failure. [ 430.621902][T15813] name failslab, interval 1, probability 0, space 0, times 0 [ 430.665711][T15813] CPU: 1 UID: 0 PID: 15813 Comm: syz.3.1203 Not tainted syzkaller #0 PREEMPT(full) [ 430.665743][T15813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.665757][T15813] Call Trace: [ 430.665765][T15813] [ 430.665775][T15813] dump_stack_lvl+0x16c/0x1f0 [ 430.665813][T15813] should_fail_ex+0x512/0x640 [ 430.665835][T15813] ? __kmalloc_noprof+0xbf/0x510 [ 430.665861][T15813] ? __register_sysctl_table+0xb3/0x1900 [ 430.665892][T15813] should_failslab+0xc2/0x120 [ 430.665918][T15813] __kmalloc_noprof+0xd2/0x510 [ 430.665949][T15813] __register_sysctl_table+0xb3/0x1900 [ 430.665978][T15813] ? is_module_address+0x5f/0xf0 [ 430.666001][T15813] ? __pfx___register_sysctl_table+0x10/0x10 [ 430.666027][T15813] ? is_module_address+0x69/0xf0 [ 430.666042][T15813] ? register_net_sysctl_sz+0x228/0x3e0 [ 430.666078][T15813] ? __asan_memcpy+0x3c/0x60 [ 430.666114][T15813] xfrm_sysctl_init+0x1f5/0x2d0 [ 430.666140][T15813] xfrm_net_init+0x842/0xcc0 [ 430.666180][T15813] ? __pfx_xfrm_net_init+0x10/0x10 [ 430.666213][T15813] ops_init+0x1df/0x5f0 [ 430.666252][T15813] setup_net+0x100/0x390 [ 430.666287][T15813] ? __pfx_setup_net+0x10/0x10 [ 430.666324][T15813] ? debug_mutex_init+0x37/0x70 [ 430.666355][T15813] copy_net_ns+0x2f8/0x690 [ 430.666381][T15813] create_new_namespaces+0x3ea/0xa90 [ 430.666421][T15813] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 430.666455][T15813] ksys_unshare+0x45b/0xa40 [ 430.666490][T15813] ? __pfx_ksys_unshare+0x10/0x10 [ 430.666526][T15813] ? xfd_validate_state+0x61/0x180 [ 430.666561][T15813] __x64_sys_unshare+0x31/0x40 [ 430.666594][T15813] do_syscall_64+0xcd/0x4b0 [ 430.666632][T15813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.666657][T15813] RIP: 0033:0x7f6bf7b8eec9 [ 430.666678][T15813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.666712][T15813] RSP: 002b:00007f6bf8af9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 430.666740][T15813] RAX: ffffffffffffffda RBX: 00007f6bf7de5fa0 RCX: 00007f6bf7b8eec9 [ 430.666757][T15813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 430.666772][T15813] RBP: 00007f6bf7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.666787][T15813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.666801][T15813] R13: 00007f6bf7de6038 R14: 00007f6bf7de5fa0 R15: 00007ffc83831288 [ 430.666837][T15813] [ 430.912968][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.286926][T15816] vhci_hcd: invalid port number 16 [ 431.287827][T15875] zero sized request [ 431.292080][T15816] vhci_hcd: invalid port number 16 [ 431.357731][T15877] random: crng reseeded on system resumption [ 431.752902][T15824] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1205'. [ 434.745399][T16043] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1217'. [ 434.807674][T16034] [U]  [ 434.812620][T16034] [U] [ 435.321282][T16082] can: request_module (can-proto-0) failed. [ 436.002229][T16085] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1218'. [ 436.246371][T16126] input: jJǸ-9%v as /devices/virtual/input/input11 [ 436.627064][T16127] usb usb37: usbfs: process 16127 (syz.5.1223) did not claim interface 0 before use [ 437.165396][T16183] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 437.958109][T16115] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1222'. [ 440.028566][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.037521][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.467572][T16377] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1233'. [ 441.540048][T16405] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1234'. [ 441.895388][T16509] zswap: compressor not available [ 441.901446][T16513] Setting dangerous option i915.mitigations - tainting kernel [ 443.446718][T16540] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1238'. [ 443.459837][T16614] [U]  [ 443.482198][T16614] [U] [ 443.917423][T16665] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 444.115750][T16671] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 444.279656][T16665] kexec: Could not allocate control_code_buffer [ 446.126262][T16789] input: jJǸ-9%v as /devices/virtual/input/input12 [ 446.435634][T16789] usb usb37: usbfs: process 16789 (syz.3.1251) did not claim interface 0 before use [ 446.522036][T16776] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1250'. [ 446.776245][T16754] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1247'. [ 448.392234][T16885] netlink: 'syz.4.1261': attribute type 2 has an invalid length. [ 449.220409][T16900] netlink: 'syz.5.1263': attribute type 2 has an invalid length. [ 449.290021][T16897] zswap: compressor not available [ 449.326571][T16901] Setting dangerous option i915.mitigations - tainting kernel [ 450.989693][T16972] netlink: zone id is out of range [ 450.995065][T16972] netlink: zone id is out of range [ 451.049718][T16972] netlink: zone id is out of range [ 451.074091][T16972] netlink: del zone limit has 4 unknown bytes [ 451.772062][T17037] input: jJǸ-9%v as /devices/virtual/input/input13 [ 452.286236][T17037] usb usb37: usbfs: process 17037 (syz.4.1265) did not claim interface 0 before use [ 452.900071][T17075] zswap: compressor not available [ 452.914190][T17077] Setting dangerous option i915.mitigations - tainting kernel [ 453.184228][T17098] netlink: 'syz.3.1269': attribute type 2 has an invalid length. [ 453.984091][ T30] audit: type=1804 audit(4294967332.040:12): pid=17120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1270" name="/newroot/338/file0" dev="tmpfs" ino=1756 res=1 errno=0 [ 454.026092][ T30] audit: type=1804 audit(4294967332.070:13): pid=17121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1270" name="/newroot/338/file0" dev="tmpfs" ino=1756 res=1 errno=0 [ 455.052880][T17169] mkiss: ax0: crc mode is auto. [ 456.717787][T17276] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1277'. [ 457.180812][T17317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1282'. [ 457.194548][T17317] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 457.312568][T17355] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 459.380175][T17441] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1292'. [ 459.833054][T17493] FAULT_INJECTION: forcing a failure. [ 459.833054][T17493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.904922][T17493] CPU: 0 UID: 0 PID: 17493 Comm: syz.5.1297 Tainted: G U syzkaller #0 PREEMPT(full) [ 459.904962][T17493] Tainted: [U]=USER [ 459.904970][T17493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.904984][T17493] Call Trace: [ 459.904993][T17493] [ 459.905002][T17493] dump_stack_lvl+0x16c/0x1f0 [ 459.905041][T17493] should_fail_ex+0x512/0x640 [ 459.905069][T17493] _copy_from_user+0x2e/0xd0 [ 459.905095][T17493] get_timespec64+0x8b/0x1b0 [ 459.905128][T17493] ? __pfx_get_timespec64+0x10/0x10 [ 459.905158][T17493] ? ktime_get+0x200/0x310 [ 459.905198][T17493] __x64_sys_futex+0x288/0x4c0 [ 459.905236][T17493] ? __pfx___x64_sys_futex+0x10/0x10 [ 459.905270][T17493] ? xfd_validate_state+0x61/0x180 [ 459.905306][T17493] do_syscall_64+0xcd/0x4b0 [ 459.905343][T17493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.905367][T17493] RIP: 0033:0x7ff31798eec9 [ 459.905387][T17493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.905410][T17493] RSP: 002b:00007ffe4aaea5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 459.905433][T17493] RAX: ffffffffffffffda RBX: 0000000000070421 RCX: 00007ff31798eec9 [ 459.905449][T17493] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff317be5fac [ 459.905464][T17493] RBP: 0000000000000032 R08: 00007ff318805000 R09: 000000144aaea89f [ 459.905480][T17493] R10: 00007ffe4aaea6a0 R11: 0000000000000246 R12: 00007ff317be5fac [ 459.905496][T17493] R13: 00007ffe4aaea6a0 R14: 0000000000070453 R15: 00007ffe4aaea6c0 [ 459.905529][T17493] [ 460.402091][T17515] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 461.749725][T17542] FAULT_INJECTION: forcing a failure. [ 461.749725][T17542] name failslab, interval 1, probability 0, space 0, times 0 [ 461.799503][T17542] CPU: 0 UID: 0 PID: 17542 Comm: syz.4.1305 Tainted: G U syzkaller #0 PREEMPT(full) [ 461.799543][T17542] Tainted: [U]=USER [ 461.799551][T17542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 461.799566][T17542] Call Trace: [ 461.799574][T17542] [ 461.799584][T17542] dump_stack_lvl+0x16c/0x1f0 [ 461.799628][T17542] should_fail_ex+0x512/0x640 [ 461.799651][T17542] ? __kvmalloc_node_noprof+0x124/0x620 [ 461.799697][T17542] should_failslab+0xc2/0x120 [ 461.799728][T17542] __kvmalloc_node_noprof+0x137/0x620 [ 461.799774][T17542] ? do_getxattr+0xa8/0x360 [ 461.799818][T17542] ? do_getxattr+0xa8/0x360 [ 461.799855][T17542] do_getxattr+0xa8/0x360 [ 461.799893][T17542] path_getxattrat+0x25d/0x2d0 [ 461.799921][T17542] ? __pfx_path_getxattrat+0x10/0x10 [ 461.799986][T17542] ? syscall_user_dispatch+0x78/0x140 [ 461.800026][T17542] do_syscall_64+0xcd/0x4b0 [ 461.800066][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.800093][T17542] RIP: 0033:0x7f8f3558eec9 [ 461.800131][T17542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.800157][T17542] RSP: 002b:00007f8f364e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 461.800184][T17542] RAX: ffffffffffffffda RBX: 00007f8f357e6090 RCX: 00007f8f3558eec9 [ 461.800202][T17542] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 461.800219][T17542] RBP: 00007f8f35611f91 R08: 0000000000000000 R09: 0000000000000000 [ 461.800236][T17542] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 461.800253][T17542] R13: 00007f8f357e6128 R14: 00007f8f357e6090 R15: 00007ffc78750d98 [ 461.800289][T17542] [ 462.099971][T17527] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1303'. [ 463.362861][T17599] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1307'. [ 464.988949][T17644] device-mapper: ioctl: Invalid ioctl structure: name , dev 400007f00010006 [ 465.264169][T17693] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k 1 [ 471.806102][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 471.817800][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 471.826097][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 471.834950][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 472.159637][T18050] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1347'. [ 472.554948][T18035] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1340'. [ 472.742531][T18188] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 472.842878][T18188] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1342'. [ 473.075863][T18038] chnl_net:caif_netlink_parms(): no params data found [ 473.673850][T18038] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.684558][T18038] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.691863][T18038] bridge_slave_0: entered allmulticast mode [ 473.712100][T18038] bridge_slave_0: entered promiscuous mode [ 473.727331][T18038] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.735192][T18038] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.743331][T18038] bridge_slave_1: entered allmulticast mode [ 473.752901][T18038] bridge_slave_1: entered promiscuous mode [ 473.913030][T18038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.932720][T18293] FAULT_INJECTION: forcing a failure. [ 473.932720][T18293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.948730][T18293] CPU: 0 UID: 0 PID: 18293 Comm: syz.1.1344 Tainted: G U syzkaller #0 PREEMPT(full) [ 473.948769][T18293] Tainted: [U]=USER [ 473.948777][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.948791][T18293] Call Trace: [ 473.948799][T18293] [ 473.948806][T18293] dump_stack_lvl+0x16c/0x1f0 [ 473.948832][T18293] should_fail_ex+0x512/0x640 [ 473.948849][T18293] _copy_from_user+0x2e/0xd0 [ 473.948864][T18293] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 473.948883][T18293] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 473.948906][T18293] sk_setsockopt+0x162/0x3af0 [ 473.948927][T18293] ? __pfx___might_resched+0x10/0x10 [ 473.948947][T18293] ? __pfx_sk_setsockopt+0x10/0x10 [ 473.948968][T18293] ? aa_sk_perm+0x2f4/0xb10 [ 473.948984][T18293] ? ksys_write+0x190/0x250 [ 473.949000][T18293] ? __pfx_aa_sk_perm+0x10/0x10 [ 473.949017][T18293] ? find_held_lock+0x2b/0x80 [ 473.949036][T18293] ? aa_sock_opt_perm+0xfd/0x1c0 [ 473.949060][T18293] do_sock_setsockopt+0x193/0x1d0 [ 473.949077][T18293] __sys_setsockopt+0x120/0x1a0 [ 473.949099][T18293] __x64_sys_setsockopt+0xbd/0x160 [ 473.949117][T18293] ? do_syscall_64+0x91/0x4b0 [ 473.949138][T18293] ? lockdep_hardirqs_on+0x7c/0x110 [ 473.949157][T18293] do_syscall_64+0xcd/0x4b0 [ 473.949184][T18293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.949199][T18293] RIP: 0033:0x7fbac638eec9 [ 473.949212][T18293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.949225][T18293] RSP: 002b:00007fbac7265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 473.949239][T18293] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638eec9 [ 473.949248][T18293] RDX: 0000000000000049 RSI: 0000000000000001 RDI: 0000000000000003 [ 473.949256][T18293] RBP: 00007fbac7265090 R08: 0000000000000627 R09: 0000000000000000 [ 473.949264][T18293] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 473.949273][T18293] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 473.949291][T18293] [ 474.161275][ T5841] Bluetooth: hci6: command tx timeout [ 474.266123][T18038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.483833][T18038] team0: Port device team_slave_0 added [ 474.507307][T18320] random: crng reseeded on system resumption [ 474.546384][T18038] team0: Port device team_slave_1 added [ 474.717446][T18038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.739892][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.778327][T18038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.877431][T18038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.948928][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.026328][T18038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.163762][T18355] ovs_: entered promiscuous mode [ 475.300272][ T5884] Process accounting resumed [ 475.369623][T18038] hsr_slave_0: entered promiscuous mode [ 475.396237][T18038] hsr_slave_1: entered promiscuous mode [ 475.422375][T18038] debugfs: 'hsr0' already exists in 'hsr' [ 475.444363][T18038] Cannot create hsr debugfs directory [ 476.174937][ T5841] Bluetooth: hci6: command tx timeout [ 476.532249][T18524] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 476.684298][T18524] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1352'. [ 476.931675][T18038] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 476.955194][T18038] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 476.987590][T18038] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.025669][T18038] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 477.079843][T18419] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1351'. [ 477.252880][T18038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.295585][T18038] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.337700][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.344821][ T7487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.396308][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.403454][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.621456][T18577] FAULT_INJECTION: forcing a failure. [ 477.621456][T18577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.680380][T18577] CPU: 1 UID: 0 PID: 18577 Comm: syz.5.1356 Tainted: G U syzkaller #0 PREEMPT(full) [ 477.680418][T18577] Tainted: [U]=USER [ 477.680425][T18577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.680437][T18577] Call Trace: [ 477.680444][T18577] [ 477.680453][T18577] dump_stack_lvl+0x16c/0x1f0 [ 477.680489][T18577] should_fail_ex+0x512/0x640 [ 477.680514][T18577] _copy_to_user+0x32/0xd0 [ 477.680538][T18577] simple_read_from_buffer+0xcb/0x170 [ 477.680572][T18577] proc_fail_nth_read+0x197/0x240 [ 477.680607][T18577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.680643][T18577] ? rw_verify_area+0xcf/0x6c0 [ 477.680674][T18577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.680707][T18577] vfs_read+0x1e4/0xcf0 [ 477.680732][T18577] ? __pfx___mutex_lock+0x10/0x10 [ 477.680762][T18577] ? __pfx_vfs_read+0x10/0x10 [ 477.680791][T18577] ? __fget_files+0x20e/0x3c0 [ 477.680821][T18577] ksys_read+0x12a/0x250 [ 477.680841][T18577] ? __pfx_ksys_read+0x10/0x10 [ 477.680871][T18577] do_syscall_64+0xcd/0x4b0 [ 477.680904][T18577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.680926][T18577] RIP: 0033:0x7ff31798d8dc [ 477.680945][T18577] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 477.680965][T18577] RSP: 002b:00007ff318804030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.680986][T18577] RAX: ffffffffffffffda RBX: 00007ff317be5fa0 RCX: 00007ff31798d8dc [ 477.681000][T18577] RDX: 000000000000000f RSI: 00007ff3188040a0 RDI: 0000000000000004 [ 477.681013][T18577] RBP: 00007ff318804090 R08: 0000000000000000 R09: 0000000000000000 [ 477.681026][T18577] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 477.681039][T18577] R13: 00007ff317be6038 R14: 00007ff317be5fa0 R15: 00007ffe4aaea448 [ 477.681070][T18577] [ 477.893836][ T5841] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 478.254474][ T5841] Bluetooth: hci6: command tx timeout [ 478.627264][T18038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.490235][T18038] veth0_vlan: entered promiscuous mode [ 479.552857][T18038] veth1_vlan: entered promiscuous mode [ 479.599065][T18038] veth0_macvtap: entered promiscuous mode [ 479.621749][T18038] veth1_macvtap: entered promiscuous mode [ 479.642298][T18038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.686970][T18038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.701423][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.711143][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.733169][ T8799] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.746900][ T8799] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.831691][ T7487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.849342][ T7487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.878011][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.888040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.334470][ T5841] Bluetooth: hci6: command tx timeout [ 480.459148][T18758] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 480.891872][T18758] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1362'. [ 481.305320][T18707] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1369'. [ 481.826008][T18813] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 481.893160][ T9] Process accounting resumed [ 484.188797][T18919] random: crng reseeded on system resumption [ 484.197104][T18868] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1380'. [ 484.313310][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1386'. [ 484.827536][T18924] hub 8-0:1.0: USB hub found [ 484.874476][T18924] hub 8-0:1.0: 1 port detected [ 485.119975][T18960] ovs_: entered promiscuous mode [ 485.553749][T18991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1388'. [ 487.865393][T19017] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1392'. [ 487.965691][T19017] : renamed from bond0 (while UP) [ 488.152103][T19067] random: crng reseeded on system resumption [ 488.737413][T19123] random: crng reseeded on system resumption [ 488.792786][T19133] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 489.099914][T19133] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1406'. [ 489.639290][T19159] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 489.816747][T19142] ovs_: entered promiscuous mode [ 491.947858][T19226] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1409'. [ 492.675929][T19314] wlan1: mtu less than device minimum [ 494.541870][T19373] can: request_module (can-proto-0) failed. [ 494.876619][T19411] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 495.238632][T19411] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1424'. [ 495.741609][T19413] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1425'. [ 496.001775][T19488] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 496.364312][T19488] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1427'. [ 497.356498][T19525] nvme_fabrics: missing parameter 'transport=%s' [ 497.382710][T19525] nvme_fabrics: missing parameter 'nqn=%s' [ 498.415024][T19591] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 498.627630][T19591] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1437'. [ 499.755516][T19637] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 500.242095][T19637] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1442'. [ 501.451351][T19666] [U] /Eev/audio1 [ 501.457944][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.474609][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.511987][T19666] [U] F츱Z|GP)\nC:DubΧtUwUU3.O"4Y8@Z5`mb4*mlD)}K>f&9- [ 501.523031][T19666] [U] WwK E6?(I,k8D [ 501.528273][T19666] [U] [ 501.530948][T19666] [U] [ 501.838557][T19666] [U] [ 501.841318][T19666] [U] [ 501.844032][T19666] [U] [ 501.846751][T19666] [U] [ 501.964176][T19666] [U] [ 501.966909][T19666] [U] [ 501.969585][T19666] [U] [ 501.972256][T19666] [U] [ 501.977128][T19666] [U] [ 501.979845][T19666] [U] [ 501.982561][T19666] [U] [ 501.985255][T19666] [U] [ 501.988853][T19666] [U] [ 501.991576][T19666] [U] [ 501.994288][T19666] [U] [ 501.996996][T19666] [U] [ 502.000945][T19666] [U] [ 502.003671][T19666] [U] [ 502.006397][T19666] [U] [ 502.009106][T19666] [U] [ 502.013267][T19666] [U] [ 502.015996][T19666] [U] [ 502.018709][T19666] [U] [ 502.021420][T19666] [U] [ 502.025583][T19666] [U] [ 502.028307][T19666] [U] [ 502.031020][T19666] [U] [ 502.033727][T19666] [U] [ 502.037297][T19666] [U] [ 502.040001][T19666] [U] [ 502.042678][T19666] [U] [ 502.045377][T19666] [U] [ 502.048068][T19666] [U] [ 502.051612][T19666] [U] [ 502.054324][T19666] [U] [ 502.057034][T19666] [U] [ 502.059722][T19666] [U] [ 502.063186][T19666] [U] [ 502.065906][T19666] [U] [ 502.068596][T19666] [U] [ 502.071280][T19666] [U] [ 502.075055][T19666] [U] [ 502.077739][T19666] [U] [ 502.080410][T19666] [U] [ 502.083084][T19666] [U] [ 502.089163][T19666] [U] [ 502.091867][T19666] [U] [ 502.094542][T19666] [U] [ 502.097213][T19666] [U] [ 502.183761][T19666] [U] [ 502.843275][T19706] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.946685][T19707] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1451'. [ 503.140107][T19706] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1450'. [ 503.654610][T19746] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 503.858532][T19756] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1453'. [ 504.714807][T19755] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1454'. [ 505.311151][T19824] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 505.783032][T19835] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 505.837784][T19824] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1459'. [ 506.146943][T19847] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 507.231215][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1465'. [ 507.378366][T19892] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1465'. [ 507.977125][T19903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 508.352423][T19903] FAULT_INJECTION: forcing a failure. [ 508.352423][T19903] name failslab, interval 1, probability 0, space 0, times 0 [ 508.396486][T19903] CPU: 0 UID: 0 PID: 19903 Comm: syz.1.1467 Tainted: G U syzkaller #0 PREEMPT(full) [ 508.396527][T19903] Tainted: [U]=USER [ 508.396536][T19903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.396548][T19903] Call Trace: [ 508.396556][T19903] [ 508.396565][T19903] dump_stack_lvl+0x16c/0x1f0 [ 508.396605][T19903] should_fail_ex+0x512/0x640 [ 508.396628][T19903] ? __kmalloc_noprof+0xbf/0x510 [ 508.396657][T19903] ? ethnl_default_notify+0x176/0xa40 [ 508.396688][T19903] should_failslab+0xc2/0x120 [ 508.396719][T19903] __kmalloc_noprof+0xd2/0x510 [ 508.396742][T19903] ? netlink_broadcast_filtered+0x477/0xf90 [ 508.396783][T19903] ethnl_default_notify+0x176/0xa40 [ 508.396818][T19903] ? __build_skb_around+0x278/0x3b0 [ 508.396846][T19903] ? __pfx_ethnl_default_notify+0x10/0x10 [ 508.396880][T19903] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 508.396930][T19903] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 508.396964][T19903] ? __pfx_ethnl_default_notify+0x10/0x10 [ 508.396989][T19903] ethnl_notify+0xc2/0x200 [ 508.397010][T19903] ethnl_netdev_event+0x10a/0x190 [ 508.397031][T19903] notifier_call_chain+0xbc/0x410 [ 508.397052][T19903] ? __pfx_ethnl_netdev_event+0x10/0x10 [ 508.397076][T19903] call_netdevice_notifiers_info+0xbe/0x140 [ 508.397093][T19903] netdev_update_features+0xca/0xe0 [ 508.397115][T19903] ? __pfx_netdev_update_features+0x10/0x10 [ 508.397138][T19903] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 508.397154][T19903] __tun_chr_ioctl+0x4d1/0x48b0 [ 508.397175][T19903] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 508.397198][T19903] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 508.397220][T19903] ? hook_file_ioctl_common+0x145/0x410 [ 508.397243][T19903] ? __fget_files+0x20e/0x3c0 [ 508.397259][T19903] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 508.397279][T19903] __x64_sys_ioctl+0x18e/0x210 [ 508.397300][T19903] do_syscall_64+0xcd/0x4b0 [ 508.397323][T19903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.397337][T19903] RIP: 0033:0x7fbac638eec9 [ 508.397350][T19903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.397364][T19903] RSP: 002b:00007fbac7265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.397378][T19903] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638eec9 [ 508.397396][T19903] RDX: 0000000000000073 RSI: 00000000400454d0 RDI: 00000000000000c8 [ 508.397404][T19903] RBP: 00007fbac6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 508.397414][T19903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.397422][T19903] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 508.397441][T19903] [ 508.841299][T19911] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1468'. [ 509.081669][T19974] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1470'. [ 509.152299][T19983] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 509.317461][T19974] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1470'. [ 509.335719][T19983] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1471'. [ 509.967659][T20013] FAULT_INJECTION: forcing a failure. [ 509.967659][T20013] name failslab, interval 1, probability 0, space 0, times 0 [ 510.004256][T20013] CPU: 0 UID: 0 PID: 20013 Comm: syz.6.1473 Tainted: G U syzkaller #0 PREEMPT(full) [ 510.004395][T20013] Tainted: [U]=USER [ 510.004405][T20013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.004422][T20013] Call Trace: [ 510.004432][T20013] [ 510.004442][T20013] dump_stack_lvl+0x16c/0x1f0 [ 510.004505][T20013] should_fail_ex+0x512/0x640 [ 510.004532][T20013] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 510.004565][T20013] should_failslab+0xc2/0x120 [ 510.004595][T20013] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 510.004628][T20013] ? vm_area_alloc+0x1f/0x160 [ 510.004673][T20013] vm_area_alloc+0x1f/0x160 [ 510.004711][T20013] create_init_stack_vma+0x29/0x700 [ 510.004747][T20013] alloc_bprm+0x420/0x710 [ 510.004789][T20013] do_execveat_common.isra.0+0x1ce/0x610 [ 510.004835][T20013] __x64_sys_execve+0x8e/0xb0 [ 510.004872][T20013] do_syscall_64+0xcd/0x4b0 [ 510.004918][T20013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.004945][T20013] RIP: 0033:0x7f8713f8eec9 [ 510.004967][T20013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.004992][T20013] RSP: 002b:00007f8714ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 510.005018][T20013] RAX: ffffffffffffffda RBX: 00007f87141e6090 RCX: 00007f8713f8eec9 [ 510.005035][T20013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 510.005051][T20013] RBP: 00007f8714011f91 R08: 0000000000000000 R09: 0000000000000000 [ 510.005068][T20013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.005083][T20013] R13: 00007f87141e6128 R14: 00007f87141e6090 R15: 00007fff297d4468 [ 510.005119][T20013] [ 510.655319][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 510.698352][T20047] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1475'. [ 510.890649][T20052] FAULT_INJECTION: forcing a failure. [ 510.890649][T20052] name failslab, interval 1, probability 0, space 0, times 0 [ 510.926433][T20052] CPU: 0 UID: 0 PID: 20052 Comm: syz.6.1476 Tainted: G U syzkaller #0 PREEMPT(full) [ 510.926477][T20052] Tainted: [U]=USER [ 510.926486][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.926502][T20052] Call Trace: [ 510.926510][T20052] [ 510.926520][T20052] dump_stack_lvl+0x16c/0x1f0 [ 510.926563][T20052] should_fail_ex+0x512/0x640 [ 510.926587][T20052] ? fs_reclaim_acquire+0xae/0x150 [ 510.926624][T20052] should_failslab+0xc2/0x120 [ 510.926653][T20052] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 510.926682][T20052] ? security_inode_alloc+0x3b/0x2b0 [ 510.926714][T20052] security_inode_alloc+0x3b/0x2b0 [ 510.926742][T20052] inode_init_always_gfp+0xce4/0x1030 [ 510.926787][T20052] alloc_inode+0x86/0x240 [ 510.926815][T20052] sock_alloc+0x40/0x280 [ 510.926852][T20052] __sock_create+0xc1/0x8d0 [ 510.926882][T20052] __sys_socket+0x14d/0x260 [ 510.926907][T20052] ? __pfx___sys_socket+0x10/0x10 [ 510.926932][T20052] ? xfd_validate_state+0x61/0x180 [ 510.926959][T20052] ? __pfx_do_writev+0x10/0x10 [ 510.926985][T20052] __x64_sys_socket+0x72/0xb0 [ 510.927009][T20052] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.927047][T20052] do_syscall_64+0xcd/0x4b0 [ 510.927082][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.927106][T20052] RIP: 0033:0x7f8713f8eec9 [ 510.927125][T20052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.927146][T20052] RSP: 002b:00007f8714ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 510.927167][T20052] RAX: ffffffffffffffda RBX: 00007f87141e6090 RCX: 00007f8713f8eec9 [ 510.927182][T20052] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 510.927196][T20052] RBP: 00007f8714011f91 R08: 0000000000000000 R09: 0000000000000000 [ 510.927209][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.927223][T20052] R13: 00007f87141e6128 R14: 00007f87141e6090 R15: 00007fff297d4468 [ 510.927252][T20052] [ 510.927413][T20052] socket: no more sockets [ 511.927024][T20109] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 512.298811][T20134] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 512.470326][T20134] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1484'. [ 512.743585][T20109] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1481'. [ 513.223499][T20104] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1482'. [ 513.345636][T20164] FAULT_INJECTION: forcing a failure. [ 513.345636][T20164] name failslab, interval 1, probability 0, space 0, times 0 [ 513.358474][T20164] CPU: 0 UID: 0 PID: 20164 Comm: syz.1.1485 Tainted: G U syzkaller #0 PREEMPT(full) [ 513.358499][T20164] Tainted: [U]=USER [ 513.358504][T20164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.358514][T20164] Call Trace: [ 513.358519][T20164] [ 513.358525][T20164] dump_stack_lvl+0x16c/0x1f0 [ 513.358551][T20164] should_fail_ex+0x512/0x640 [ 513.358565][T20164] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 513.358583][T20164] should_failslab+0xc2/0x120 [ 513.358600][T20164] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 513.358616][T20164] ? vm_area_alloc+0x1f/0x160 [ 513.358640][T20164] vm_area_alloc+0x1f/0x160 [ 513.358661][T20164] create_init_stack_vma+0x29/0x700 [ 513.358679][T20164] alloc_bprm+0x420/0x710 [ 513.358703][T20164] do_execveat_common.isra.0+0x1ce/0x610 [ 513.358730][T20164] __x64_sys_execve+0x8e/0xb0 [ 513.358743][T20164] do_syscall_64+0xcd/0x4b0 [ 513.358766][T20164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.358780][T20164] RIP: 0033:0x7fbac638eec9 [ 513.358792][T20164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.358806][T20164] RSP: 002b:00007fbac7244038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 513.358820][T20164] RAX: ffffffffffffffda RBX: 00007fbac65e6090 RCX: 00007fbac638eec9 [ 513.358829][T20164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 513.358837][T20164] RBP: 00007fbac6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 513.358846][T20164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.358854][T20164] R13: 00007fbac65e6128 R14: 00007fbac65e6090 R15: 00007ffc5f48dac8 [ 513.358872][T20164] [ 516.212464][T20227] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1491'. [ 518.820410][T20370] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1493'. [ 518.888213][T20373] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1493'. [ 520.555511][T20442] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 520.982548][T20442] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1502'. [ 522.445978][T20463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1503'. [ 523.899696][T20564] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 524.370168][T20564] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1507'. [ 524.670990][T20587] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 525.817680][T20652] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 525.911487][T20669] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 526.319998][T20598] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1515'. [ 526.819158][T20730] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000000101 [ 527.918064][T20766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1531'. [ 527.984400][T20769] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 528.120123][T20771] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 528.531536][T20771] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1522'. [ 529.139968][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 530.328325][T20867] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1528'. [ 531.450396][T20979] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 531.571897][T20988] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 531.688980][T20979] syz.1.1534: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 531.745571][T20979] CPU: 0 UID: 0 PID: 20979 Comm: syz.1.1534 Tainted: G U syzkaller #0 PREEMPT(full) [ 531.745615][T20979] Tainted: [U]=USER [ 531.745623][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.745639][T20979] Call Trace: [ 531.745647][T20979] [ 531.745657][T20979] dump_stack_lvl+0x16c/0x1f0 [ 531.745702][T20979] warn_alloc+0x248/0x3a0 [ 531.745732][T20979] ? __pfx_warn_alloc+0x10/0x10 [ 531.745761][T20979] ? alloc_pages_mpol+0x25a/0x550 [ 531.745792][T20979] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 531.745837][T20979] __vmalloc_node_range_noprof+0x11d2/0x14b0 [ 531.745886][T20979] ? kernel_clone+0xfc/0x930 [ 531.745930][T20979] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.745981][T20979] ? kernel_clone+0xfc/0x930 [ 531.746014][T20979] __vmalloc_node_noprof+0xad/0xf0 [ 531.746050][T20979] ? kernel_clone+0xfc/0x930 [ 531.746088][T20979] copy_process+0x2c6e/0x76a0 [ 531.746149][T20979] ? __pfx_copy_process+0x10/0x10 [ 531.746185][T20979] ? futex_private_hash_put+0x176/0x300 [ 531.746224][T20979] ? futex_private_hash_put+0x18a/0x300 [ 531.746260][T20979] kernel_clone+0xfc/0x930 [ 531.746293][T20979] ? __pfx_futex_wake+0x10/0x10 [ 531.746317][T20979] ? __pfx_kernel_clone+0x10/0x10 [ 531.746373][T20979] __do_sys_clone+0xce/0x120 [ 531.746409][T20979] ? __pfx___do_sys_clone+0x10/0x10 [ 531.746460][T20979] ? xfd_validate_state+0x61/0x180 [ 531.746483][T20979] ? __task_pid_nr_ns+0x1f5/0x500 [ 531.746532][T20979] do_syscall_64+0xcd/0x4b0 [ 531.746576][T20979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.746602][T20979] RIP: 0033:0x7fbac638eec9 [ 531.746623][T20979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.746651][T20979] RSP: 002b:00007fbac7264fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 531.746676][T20979] RAX: ffffffffffffffda RBX: 00007fbac65e5fa0 RCX: 00007fbac638eec9 [ 531.746695][T20979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 531.746710][T20979] RBP: 00007fbac6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 531.746726][T20979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.746742][T20979] R13: 00007fbac65e6038 R14: 00007fbac65e5fa0 R15: 00007ffc5f48dac8 [ 531.746778][T20979] [ 531.752455][T20979] Mem-Info: [ 532.074134][T20979] active_anon:43784 inactive_anon:5 isolated_anon:527 [ 532.074134][T20979] active_file:20007 inactive_file:60070 isolated_file:0 [ 532.074134][T20979] unevictable:1793 dirty:639 writeback:1 [ 532.074134][T20979] slab_reclaimable:11950 slab_unreclaimable:101478 [ 532.074134][T20979] mapped:54818 shmem:26919 pagetables:1368 [ 532.074134][T20979] sec_pagetables:0 bounce:0 [ 532.074134][T20979] kernel_misc_reclaimable:0 [ 532.074134][T20979] free:1224464 free_pcp:8157 free_cma:0 [ 532.180447][T20979] Node 0 active_anon:175420kB inactive_anon:20kB active_file:80028kB inactive_file:240080kB unevictable:5636kB isolated(anon):2108kB isolated(file):0kB mapped:219272kB dirty:2560kB writeback:4kB shmem:106136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12940kB pagetables:5352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.250957][T20979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.376327][T20979] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.575038][T20979] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 532.580824][T20979] Node 0 DMA32 free:971068kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:174052kB inactive_anon:20kB active_file:80028kB inactive_file:239980kB unevictable:5636kB writepending:2572kB present:3129332kB managed:2547908kB mlocked:4100kB bounce:0kB free_pcp:39396kB local_pcp:21256kB free_cma:0kB [ 532.626072][T20979] lowmem_reserve[]: 0 0 0 0 0 [ 532.666595][T20979] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.737085][T20979] lowmem_reserve[]: 0 0 0 0 0 [ 532.778304][T20979] Node 1 Normal free:3911376kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.934137][T20979] lowmem_reserve[]: 0 0 0 0 0 [ 532.938888][T20979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 533.004602][T20979] Node 0 DMA32: 1812*4kB (UME) 1500*8kB (UM) 1101*16kB (UM) 556*32kB (UME) 270*64kB (UME) 195*128kB (UME) 110*256kB (UM) 47*512kB (UME) 11*1024kB (UME) 3*2048kB (M) 197*4096kB (UM) = 973440kB [ 533.071650][T20979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 533.108304][T20979] Node 1 Normal: 166*4kB (UME) 61*8kB (UME) 39*16kB (UME) 219*32kB (UME) 102*64kB (UME) 30*128kB (UME) 8*256kB (UM) 6*512kB (UME) 2*1024kB (UM) 3*2048kB (UME) 947*4096kB (M) = 3911376kB [ 533.147067][T20979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.267242][T20979] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 533.304162][T20979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.320305][T20979] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 533.349340][T20979] 107002 total pagecache pages [ 533.371403][T20979] 10 pages in swap cache [ 533.425774][T20979] Free swap = 120732kB [ 533.429973][T20979] Total swap = 124996kB [ 533.455662][T20979] 2097051 pages RAM [ 533.459518][T20979] 0 pages HighMem/MovableOnly [ 533.470621][T20979] 428432 pages reserved [ 533.479913][T20979] 0 pages cma reserved [ 534.707070][T21060] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 535.031519][ T5841] Bluetooth: hci6: unexpected event 0x01 length: 5 > 1 [ 535.956470][T21114] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 536.230029][T21114] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1544'. [ 536.372157][T21072] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1543'. [ 536.927476][T21158] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 538.909291][T21264] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 539.901478][ T5841] Bluetooth: hci5: unexpected event 0x01 length: 5 > 1 [ 543.034329][T21423] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 543.162418][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.277026][T21423] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1570'. [ 543.288897][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.436910][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.747919][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.127344][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 544.138399][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 544.148123][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 544.161575][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 544.171821][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.701452][ T12] bridge_slave_1: left allmulticast mode [ 544.713363][ T12] bridge_slave_1: left promiscuous mode [ 544.729591][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.817691][ T12] bridge_slave_0: left allmulticast mode [ 544.831019][ T12] bridge_slave_0: left promiscuous mode [ 544.852364][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.255549][ T51] Bluetooth: hci4: command tx timeout [ 546.520147][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.537399][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.550341][ T12]  (unregistering): Released all slaves [ 546.642788][ T12] ovs_: left promiscuous mode [ 547.687542][ T12] hsr_slave_0: left promiscuous mode [ 547.696885][ T12] hsr_slave_1: left promiscuous mode [ 547.717694][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.750129][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.810774][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.903984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.981342][ T12] veth1_macvtap: left promiscuous mode [ 548.004303][ T12] veth0_macvtap: left promiscuous mode [ 548.017598][ T12] veth1_vlan: left promiscuous mode [ 548.031010][ T12] veth0_vlan: left promiscuous mode [ 548.334438][ T51] Bluetooth: hci4: command tx timeout [ 548.781624][ T12] team0 (unregistering): Port device team_slave_1 removed [ 548.832498][ T12] team0 (unregistering): Port device team_slave_0 removed [ 549.613427][T21450] chnl_net:caif_netlink_parms(): no params data found [ 550.090493][T21450] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.102758][T21450] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.124652][T21450] bridge_slave_0: entered allmulticast mode [ 550.153993][T21450] bridge_slave_0: entered promiscuous mode [ 550.173731][T21450] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.214254][T21450] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.221517][T21450] bridge_slave_1: entered allmulticast mode [ 550.296105][T21450] bridge_slave_1: entered promiscuous mode [ 550.414086][ T51] Bluetooth: hci4: command tx timeout [ 550.497754][T21450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.553501][T21450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.876095][T21450] team0: Port device team_slave_0 added [ 550.966098][T21450] team0: Port device team_slave_1 added [ 551.165118][T21450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.172544][T21450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.205935][T21450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.235921][T21450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.251835][T21450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.292200][T21450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.527365][T21450] hsr_slave_0: entered promiscuous mode [ 551.543047][T21450] hsr_slave_1: entered promiscuous mode [ 551.555373][T21450] debugfs: 'hsr0' already exists in 'hsr' [ 551.561631][T21450] Cannot create hsr debugfs directory [ 552.378477][ T51] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 552.498489][ T51] Bluetooth: hci4: command tx timeout [ 552.655377][ T31] INFO: task syz.2.1044:13293 blocked for more than 143 seconds. [ 552.663166][ T31] Tainted: G U syzkaller #0 [ 552.676919][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 552.705463][ T31] task:syz.2.1044 state:D stack:26408 pid:13293 tgid:13291 ppid:5850 task_flags:0x400140 flags:0x00080002 [ 552.747646][ T31] Call Trace: [ 552.750978][ T31] [ 552.779627][ T31] __schedule+0x1190/0x5de0 [ 552.818861][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 552.828330][ T31] ? __pfx___schedule+0x10/0x10 [ 552.833248][ T31] ? find_held_lock+0x2b/0x80 [ 552.864283][ T31] ? schedule+0x2d7/0x3a0 [ 552.885182][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 552.910124][ T31] schedule+0xe7/0x3a0 [ 552.942468][ T31] schedule_preempt_disabled+0x13/0x30 [ 553.013761][ T31] __mutex_lock+0x818/0x1060 [ 553.034087][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 553.039188][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 553.044947][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 553.050114][ T31] ? net_generic+0xea/0x2a0 [ 553.055946][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 553.061378][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 553.071484][ T31] nfsd_umount+0x48/0xe0 [ 553.078333][ T31] deactivate_locked_super+0xbe/0x1a0 [ 553.093562][ T31] deactivate_super+0xde/0x100 [ 553.103173][ T31] cleanup_mnt+0x225/0x450 [ 553.109412][ T31] task_work_run+0x150/0x240 [ 553.116571][ T31] ? __pfx_task_work_run+0x10/0x10 [ 553.121740][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 553.156970][ T31] exit_to_user_mode_loop+0xdd/0x100 [ 553.162298][ T31] do_syscall_64+0x419/0x4b0 [ 553.197921][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.212698][ T31] RIP: 0033:0x7ff72178eec9 [ 553.217603][ T31] RSP: 002b:00007ff7225ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 553.226338][ T31] RAX: ffffffffffffffec RBX: 00007ff7219e6090 RCX: 00007ff72178eec9 [ 553.234645][ T31] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.242618][ T31] RBP: 00007ff721811f91 R08: 0000000000000000 R09: 0000000000000000 [ 553.251118][ T31] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 553.260065][ T31] R13: 00007ff7219e6128 R14: 00007ff7219e6090 R15: 00007ffcd51c5868 [ 553.268448][ T31] [ 553.271550][ T31] [ 553.271550][ T31] Showing all locks held in the system: [ 553.308870][ T31] 1 lock held by khungtaskd/31: [ 553.344356][ T31] #0: ffffffff8e1c34a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 553.372112][ T31] 1 lock held by dhcpcd/5505: [ 553.377176][ T31] #0: ffffffff8fede948 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26d/0x1f50 [ 553.454457][ T31] 2 locks held by getty/5599: [ 553.459283][ T31] #0: ffff8880349a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 553.520517][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 553.531662][ T31] 2 locks held by sshd-session/5823: [ 553.537361][ T31] 2 locks held by syz-executor/5836: [ 553.544271][ T31] #0: ffff88803a3160e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 553.555423][ T31] #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 553.565687][ T31] 3 locks held by kworker/u8:10/7487: [ 553.571337][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 553.582982][ T31] #1: ffffc90016f57d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 553.594761][ T31] #2: ffffffff8fede948 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 553.603885][ T31] 6 locks held by kworker/u8:23/8799: [ 553.612072][ T31] #0: ffff88801bef6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 553.623565][ T31] #1: ffffc9000494fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 553.638102][ T31] #2: ffffffff8fec85b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 553.647861][ T31] #3: ffffffff8fede948 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x64/0x3c0 [ 553.659491][ T31] #4: ffff888032df0f80 (&caifn->caifdevs.lock){+.+.}-{4:4}, at: caif_exit_net+0x7b/0x3c0 [ 553.679014][ T31] #5: ffffffff8e1cea38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 553.690089][ T31] 2 locks held by syz.0.982/12256: [ 553.760261][ T31] #0: ffffffff8ff81f90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.770392][ T31] #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 553.782547][ T31] 2 locks held by syz.2.1044/13293: [ 553.788850][ T31] #0: ffff88803073e0e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 553.799963][ T31] #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 553.810590][ T31] 1 lock held by syz-executor/18019: [ 553.822359][ T31] 1 lock held by syz-executor/18038: [ 553.828157][ T31] #0: ffffffff8e1cea38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 553.838669][ T31] 2 locks held by syz-executor/21450: [ 553.846606][ T31] #0: ffffffff906122a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 553.858444][ T31] #1: ffffffff8fede948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 553.872026][ T31] 2 locks held by syz.1.1596/22018: [ 553.877825][ T31] #0: ffffffff8fec85b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 553.887860][ T31] #1: ffffffff8fede948 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21d/0x7d0 [ 553.897703][ T31] [ 553.900058][ T31] ============================================= [ 553.900058][ T31] [ 553.909269][ T31] NMI backtrace for cpu 0 [ 553.909293][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 553.909328][ T31] Tainted: [U]=USER [ 553.909336][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.909349][ T31] Call Trace: [ 553.909357][ T31] [ 553.909366][ T31] dump_stack_lvl+0x116/0x1f0 [ 553.909404][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 553.909429][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 553.909461][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 553.909499][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 553.909530][ T31] watchdog+0xf0e/0x1260 [ 553.909560][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.909583][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.909618][ T31] ? __kthread_parkme+0x19e/0x250 [ 553.909650][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.909670][ T31] kthread+0x3c2/0x780 [ 553.909686][ T31] ? __pfx_kthread+0x10/0x10 [ 553.909706][ T31] ? rcu_is_watching+0x12/0xc0 [ 553.909744][ T31] ? __pfx_kthread+0x10/0x10 [ 553.909764][ T31] ret_from_fork+0x56d/0x730 [ 553.909786][ T31] ? __pfx_kthread+0x10/0x10 [ 553.909809][ T31] ret_from_fork_asm+0x1a/0x30 [ 553.909855][ T31] [ 553.909864][ T31] Sending NMI from CPU 0 to CPUs 1: [ 554.039666][ C1] NMI backtrace for cpu 1 [ 554.039688][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U syzkaller #0 PREEMPT(full) [ 554.039719][ C1] Tainted: [U]=USER [ 554.039726][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 554.039738][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 554.039771][ C1] Code: 26 5e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 64 1b 00 fb f4 bc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 554.039792][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 554.039810][ C1] RAX: 00000000005ba7bd RBX: 0000000000000001 RCX: ffffffff8b4ea1d9 [ 554.039824][ C1] RDX: 0000000000000000 RSI: ffffffff8d9c34d8 RDI: ffffffff8bd01040 [ 554.039839][ C1] RBP: ffffed1003b5fb58 R08: 0000000000000001 R09: ffffed10170e6655 [ 554.039852][ C1] R10: ffff8880b87332ab R11: 0000000000000000 R12: 0000000000000001 [ 554.039865][ C1] R13: ffff88801dafdac0 R14: ffffffff9060e490 R15: 0000000000000000 [ 554.039880][ C1] FS: 0000000000000000(0000) GS:ffff888124f5d000(0000) knlGS:0000000000000000 [ 554.039900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.039915][ C1] CR2: 00005631ce331498 CR3: 000000000df82000 CR4: 00000000003526f0 [ 554.039929][ C1] Call Trace: [ 554.039936][ C1] [ 554.039943][ C1] default_idle+0x13/0x20 [ 554.039962][ C1] default_idle_call+0x6c/0xb0 [ 554.039981][ C1] do_idle+0x38d/0x500 [ 554.040007][ C1] ? __pfx_do_idle+0x10/0x10 [ 554.040031][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 554.040055][ C1] cpu_startup_entry+0x4f/0x60 [ 554.040079][ C1] start_secondary+0x21d/0x2b0 [ 554.040110][ C1] ? __pfx_start_secondary+0x10/0x10 [ 554.040144][ C1] common_startup_64+0x13e/0x148 [ 554.040178][ C1] [ 554.227260][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 554.234194][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 554.244897][ T31] Tainted: [U]=USER [ 554.248710][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 554.258783][ T31] Call Trace: [ 554.262075][ T31] [ 554.265014][ T31] dump_stack_lvl+0x3d/0x1f0 [ 554.269637][ T31] vpanic+0x6e8/0x7a0 [ 554.273636][ T31] ? __pfx_vpanic+0x10/0x10 [ 554.278162][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 554.284083][ T31] panic+0xca/0xd0 [ 554.287822][ T31] ? __pfx_panic+0x10/0x10 [ 554.292243][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 554.297638][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 554.303814][ T31] ? watchdog+0xd78/0x1260 [ 554.308248][ T31] ? watchdog+0xd6b/0x1260 [ 554.312680][ T31] watchdog+0xd89/0x1260 [ 554.316947][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.321637][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 554.326862][ T31] ? __kthread_parkme+0x19e/0x250 [ 554.331913][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.336612][ T31] kthread+0x3c2/0x780 [ 554.340702][ T31] ? __pfx_kthread+0x10/0x10 [ 554.345326][ T31] ? rcu_is_watching+0x12/0xc0 [ 554.350114][ T31] ? __pfx_kthread+0x10/0x10 [ 554.354719][ T31] ret_from_fork+0x56d/0x730 [ 554.359320][ T31] ? __pfx_kthread+0x10/0x10 [ 554.363924][ T31] ret_from_fork_asm+0x1a/0x30 [ 554.368726][ T31] [ 554.371987][ T31] Kernel Offset: disabled [ 554.376307][ T31] Rebooting in 86400 seconds..