last executing test programs: 33m12.567864635s ago: executing program 3 (id=2004): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0x0) openat$auto_stats_fops_2(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$auto_userio_fops_userio(r0, &(0x7f0000000080)="80c6e18710ec", 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) io_uring_setup$auto(0x488, 0x0) socket(0xa, 0x5, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x83) 33m12.182193395s ago: executing program 3 (id=2005): set_mempolicy$auto(0x1, 0x0, 0x21) set_mempolicy$auto(0x9, &(0x7f0000000180)=0x5, 0x7) socket(0xa, 0x5, 0x0) move_pages$auto(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, 0x0, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x2000000000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) read$auto_null_fops_mem(r1, &(0x7f0000000200)=""/57, 0x39) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) mmap$auto(0x8, 0x2020009, 0x100000000000003, 0xeb2, 0xfffffffffffffffb, 0x100000001) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\xff\xfe\x02\xff\xfe\x00\x00\x02'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) 33m6.145101044s ago: executing program 3 (id=2014): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0x0) openat$auto_stats_fops_2(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$auto_userio_fops_userio(r0, &(0x7f0000000080)="80c6e18710ec", 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) io_uring_setup$auto(0x488, 0x0) socket(0xa, 0x5, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x83) 33m5.640145229s ago: executing program 3 (id=2016): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x882) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="050018000100010008001700080000000800120007000000"], 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) pipe$auto(&(0x7f0000000080)=r2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r6 = prctl$auto(0x3e, 0x1, r5, 0x1, 0x0) msync$auto(0x0, 0x2000000005, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_HPET_IRQFREQ(r6, 0x40086806, &(0x7f0000000040)=0x2) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x6) membarrier$auto(0x1005, 0xe, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r7, 0x0, 0x1f40) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) 33m4.822192719s ago: executing program 3 (id=2019): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) read$auto(0x3, 0x0, 0x8080) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000200)="624d1b0800003bb0b113004e5cca199a0400ef61080000000010000400e8fdffff0000160000bb43000000a7ed73de11691c0600c8901f57a7d9e2eb3eea15213c82bed0a17e0930afe6574dfef500000000008008dc31b6cb21d9c8583bd9c6fa9f7068c77052930753f418", 0xffffffffffffffed) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x9, 0x2, '.^&^\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rxrpc/bundles\x00', 0x8200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000b00)=""/147, 0x93) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) ioctl$auto(0x3, 0x80000541b, 0x38) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) lseek$auto(r5, 0x8, 0x0) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) 33m1.102245162s ago: executing program 3 (id=2024): waitid$auto_P_PID(0x1, 0x0, 0xfffffffffffffffc, 0x1, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0xe8a82, 0x0) read$auto_mISDN_fops_timerdev(r1, &(0x7f0000000040)=""/81, 0x51) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x4, 0x6a) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0xa40, 0x0) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TUNSETVNETBE(r3, 0x400454de, &(0x7f00000000c0)=0x70000) getsockopt$auto(0x6, 0x10f, 0x4, 0xfffffffffffffffe, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r4, 0x80044100, 0x0) write$auto(r0, 0x0, 0x400000000005) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r5, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRES16=r6, @ANYBLOB="230027bd7000fcdbdf25090000001800038005000180030000000c000800feffffffffffffff0400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) unshare$auto(0x1) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) read$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000080)=""/12, 0xc) madvise$auto(0x8400000405, 0x200004207ff00000, 0xfff) get_robust_list$auto(0x0, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x40880, 0x0) 32m45.78599559s ago: executing program 32 (id=2024): waitid$auto_P_PID(0x1, 0x0, 0xfffffffffffffffc, 0x1, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0xe8a82, 0x0) read$auto_mISDN_fops_timerdev(r1, &(0x7f0000000040)=""/81, 0x51) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x4, 0x6a) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0xa40, 0x0) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TUNSETVNETBE(r3, 0x400454de, &(0x7f00000000c0)=0x70000) getsockopt$auto(0x6, 0x10f, 0x4, 0xfffffffffffffffe, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r4, 0x80044100, 0x0) write$auto(r0, 0x0, 0x400000000005) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r5, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRES16=r6, @ANYBLOB="230027bd7000fcdbdf25090000001800038005000180030000000c000800feffffffffffffff0400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) unshare$auto(0x1) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) read$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000080)=""/12, 0xc) madvise$auto(0x8400000405, 0x200004207ff00000, 0xfff) get_robust_list$auto(0x0, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x40880, 0x0) 14m53.168973763s ago: executing program 4 (id=4553): bind$auto(0x3, 0x0, 0x6c) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setgroups$auto(0x678, 0x0) rseq$auto(&(0x7f0000000140)={0x2c, 0x5, 0xfffffffffffffffd, 0xffff25e4, 0x3, 0x2, "0089d6a56368a9aec7396c71b7259bda0a91a21eaa2e444f3577f923b06d83061a1cf2fb825a89f5aca2fc98"}, 0x2, 0x7, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0x3f1) getdents$auto(r2, 0x0, 0xa2b0) 14m52.80408872s ago: executing program 4 (id=4555): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, 0x0, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = getegid() r4 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r0, r3, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r4, @raw=0x5, 0x5, 0x0, &(0x7f0000000740)="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", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e44b022d7d64730dd5127ccd9f02f7590e93c2c7d8eb"}) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8a042, 0x0) 14m50.492117881s ago: executing program 4 (id=4561): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) mq_timedreceive$auto(r0, 0x0, 0x3, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r1, 0x6) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_OOBINLINE(r2, 0xff, 0xa, &(0x7f0000000040)='/proc/self/mem\x00', &(0x7f0000000080)=0x6) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) sysfs$auto(0x2, 0x20, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) 14m32.883268276s ago: executing program 4 (id=4563): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296", 0x2e) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 14m31.202833996s ago: executing program 4 (id=4596): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/pm_debug_messages\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/64, 0x40) setsockopt$auto(r1, 0x11, 0xb, 0x0, 0x5) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)=@link_detach, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) 14m30.727685891s ago: executing program 4 (id=4598): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r0, 0x0, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r4, @raw=0x5, 0x5, 0x0, &(0x7f0000000740)="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", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481e"}) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8a042, 0x0) 14m15.364871904s ago: executing program 33 (id=4598): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r0, 0x0, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r4, @raw=0x5, 0x5, 0x0, &(0x7f0000000740)="4f98c640887224e1536d4e40a39df261f6e1a7f64a12d388a9762ec2c53cb209dd81a9c6e8ae66bc479f7d92b6c649f07587e8084d4fd558d54a2ddca9c318eb050342e0fbb295dd58250b8d185616881413c9b3a8bbc9cb6f3059624b9d64d81f5b347672273ff0eac474a4fce025de7972a1b178c920727aab101d7741be7f42a7acc5ee4675ca2c96a2d08ca9a74b63a71fb65c71061963f9693b6afa898480b20dc6d2e4f35f2381eabde6ac3f3b34948a701f6d2314878f346459ef0a11d7cb4fe7732d8d9e95d0cc7450914c2b63d6054c10080ba951b8f095adaead86e8bf209f5a9ecef565321572507c2b71c3a04fe37344219aad0795ee33107accb66cd5675c0ba442bb8eb7ee9a6303a495b707f005b0a4581a3d04f5c60f468f9ce831536e7cdf0f0b5069cfb5ec87563a682cc5eb05d831d97ab9ae4bc6b64d74e7f3a063db2d696205006551640a2ebf23c9417ddac417fdb57b08a49f620e580860f5576429bbda77b580fe964d74e3089670a05dd71be1ab2db47be48ab7996a", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481e"}) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8a042, 0x0) 24.808726205s ago: executing program 0 (id=7248): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywa\x00', 0x9fe801206abe1784, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) prctl$auto(0x34, 0x17, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x250781, 0x0) mknod$auto(0x0, 0xea3, 0x2) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) 24.093432421s ago: executing program 0 (id=7251): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x202, 0x7) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0x1, 0x44b, 0x4, 0x1, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x8, 0x80200000000001, 0x800000000fff, 0xde6, 0x9809588, 0xfffffffd, 0x2, 0xbb2f, 0x864, 0x6, 0x22000, 0x200, 0x0, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x3, 0x0, 0x0, 0x7fdf, 0x3, 0x4, 0x100, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44cd98b, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6, 0x2a, 0x180000001, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xfff]}, 0xa, 0xd) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r2, 0x11, &(0x7f0000000000), 0x0) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/netdevsim/netdevsim4/take_snapshot\x00', 0x758200, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcde251f0000000500060009000000080003000400000005000400e900000008000200f7000000180001801400020076657468305f766972745f7769666900fe630c7477f03c14b313de98d424a0614416010d7a0f5ecc928342f63a5c599dcc9e81ee11504806d405279176ca7e561a16f9e617ce5f0603cd34d000ff639ee87957c897b1290ab2399dc088fb649daba56143c4b262aedc7dff577f4cf5b262d99a05d1e7c29f233db9fd88018c60b59a2204d19ea7e9efe58192cca559b95c59ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) shutdown$auto(r4, 0x2) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x1d1d40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 21.478198271s ago: executing program 0 (id=7257): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x202, 0x7) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0x1, 0x44b, 0x4, 0x1, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x8, 0x80200000000001, 0x800000000fff, 0xde6, 0x9809588, 0xfffffffd, 0x2, 0xbb2f, 0x864, 0x6, 0x22000, 0x200, 0x0, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x3, 0x0, 0x0, 0x7fdf, 0x3, 0x4, 0x100, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44cd98b, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6, 0x2a, 0x180000001, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xfff]}, 0xa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r2, 0x11, &(0x7f0000000000), 0x0) unshare$auto(0x7) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/netdevsim/netdevsim4/take_snapshot\x00', 0x758200, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcde251f0000000500060009000000080003000400000005000400e900000008000200f7000000180001801400020076657468305f766972745f7769666900fe630c7477f03c14b313de98d424a0614416010d7a0f5ecc928342f63a5c599dcc9e81ee11504806d405279176ca7e561a16f9e617ce5f0603cd34d000ff639ee87957c897b1290ab2399dc088fb649daba56143c4b262aedc7dff577f4cf5b262d99a05d1e7c29f233db9fd88018c60b59a2204d19ea7e9efe58192cca559b95c59ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) shutdown$auto(r4, 0x2) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x1d1d40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 19.050963556s ago: executing program 0 (id=7264): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1f, 0x80002, 0xfffff800) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x40020000}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r1, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x44b, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x7, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3, 0x1, 0x0, 0x2, 0x4, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0xfffffffffffffffc]}, 0xa, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYRES16=0x0, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x24002080}, 0x20044841) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000340)="df3e733af445a6a890544c9fc48370eeec5267ce1805fc203a993ee514d6166083833b845ba780a9084541990523a3ca5527f676e1b6c7182b0f3c13fa0c6059cd31c8") ioctl$sock_SIOCGIFINDEX(r5, 0x89b0, &(0x7f0000000080)={'syzkaller0\x00'}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xfffffffffffffffd, 0x8, 0x1, 0x2, 0xffff, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 17.856808716s ago: executing program 0 (id=7266): open(&(0x7f0000000100)='./file1\x00', 0x40100, 0xe1d2b27bdc14ab1e) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x4f64b1d2) write$auto(r0, 0x0, 0x40000000080) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) write$auto(r1, 0x0, 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/nf_conntrack_irc/parameters/dcc_timeout\x00', 0x128082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40000c, 0x45bb, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty57\x00', 0x2a00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0x2004000000000df, 0x411, r2, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1000) 17.508979046s ago: executing program 0 (id=7268): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)="fc1c4959f721a2458364a2b1590d19513f344e1b39ce") 9.47594841s ago: executing program 5 (id=7282): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) mmap$auto(0x0, 0x1, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400000000400008, 0x9, 0xf1, 0x2, 0x18000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r2, &(0x7f000000b040)='\x00', 0x7, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r6, r6, 0x0, 0x3) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r7, 0xc0205648, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4044820) 7.632723051s ago: executing program 2 (id=7284): r0 = open(&(0x7f0000000100)='./file1\x00', 0x40100, 0xe1d2b27bdc14ab1e) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4f64b1d2) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) write$auto(0xffffffffffffffff, 0x0, 0x40000000080) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) write$auto(r1, 0x0, 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/nf_conntrack_irc/parameters/dcc_timeout\x00', 0x128082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40000c, 0x45bb, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty57\x00', 0x2a00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0x2004000000000df, 0x411, r2, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1000) 7.516477206s ago: executing program 1 (id=7285): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = open(0x0, 0x14d27e, 0x72) getsockopt$auto_SO_PEERNAME(r2, 0xfffffffa, 0x1c, &(0x7f00000000c0)='\xaa+.$[\x00', &(0x7f0000000180)=0x8) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x4, 0x7, 0x6d3f, 0xffffffffffffff7a, 0x5, 0x5]}, 0x0) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) 7.2495131s ago: executing program 5 (id=7286): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0x1, 0x44b, 0x4, 0x1, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x8, 0x80200000000001, 0x800000000fff, 0xde6, 0x9809588, 0xfffffffd, 0x2, 0xbb2f, 0x864, 0x6, 0x22000, 0x200, 0x0, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x3, 0x0, 0x0, 0x7fdf, 0x3, 0x4, 0x100, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44cd98b, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6, 0x2a, 0x180000001, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xfff]}, 0xa, 0xd) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r2, 0x11, &(0x7f0000000000), 0x0) unshare$auto(0x7) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/netdevsim/netdevsim4/take_snapshot\x00', 0x758200, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcde251f0000000500060009000000080003000400000005000400e900000008000200f7000000180001801400020076657468305f766972745f7769666900fe630c7477f03c14b313de98d424a0614416010d7a0f5ecc928342f63a5c599dcc9e81ee11504806d405279176ca7e561a16f9e617ce5f0603cd34d000ff639ee87957c897b1290ab2399dc088fb649daba56143c4b262aedc7dff577f4cf5b262d99a05d1e7c29f233db9fd88018c60b59a2204d19ea7e9efe58192cca559b95c59ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) shutdown$auto(r4, 0x2) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x1d1d40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 7.138849453s ago: executing program 2 (id=7287): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x202, 0x7) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0x1, 0x44b, 0x4, 0x1, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x8, 0x80200000000001, 0x800000000fff, 0xde6, 0x9809588, 0xfffffffd, 0x2, 0xbb2f, 0x864, 0x6, 0x22000, 0x200, 0x0, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x3, 0x0, 0x0, 0x7fdf, 0x3, 0x4, 0x100, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44cd98b, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6, 0x2a, 0x180000001, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xfff]}, 0xa, 0xd) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_register$auto(0xffffffffffffffff, 0x11, &(0x7f0000000000), 0x0) unshare$auto(0x7) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/netdevsim/netdevsim4/take_snapshot\x00', 0x758200, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd700002dcde251f0000000500060009000000080003000400000005000400e900000008000200f7000000180001801400020076657468305f766972745f7769666900fe630c7477f03c14b313de98d424a0614416010d7a0f5ecc928342f63a5c599dcc9e81ee11504806d405279176ca7e561a16f9e617ce5f0603cd34d000ff639ee87957c897b1290ab2399dc088fb649daba56143c4b262aedc7dff577f4cf5b262d99a05d1e7c29f233db9fd88018c60b59a2204d19ea7e9efe58192cca559b95c59ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) shutdown$auto(r3, 0x2) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x1d1d40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 6.128406522s ago: executing program 1 (id=7288): setsockopt$auto(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x8) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xb4, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_UNSPEC={0x9d, 0x0, "b4268ca8f5de4b933a841c1491a0a2c0561d94930e7b00f8bda10e729d1d1f1ecf432b001879a6156e956c050bde8d59084c03e413c5e0981260fa469b2b36e6d38f69f895bfef4589016f1e07d5ac6a96b4ff7d2435b6a0386e38ceda6743a80e0e176f634a3184e0b6abcfe9c5e1ace664dd4d57ba10a523624d9d91da14eb254f791ec71f3f5a4fa6b68cee7606bb37ccae551a778e95e4"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8094}, 0x20044090) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x22342, 0x0) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram10/queue/max_integrity_segments\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) 5.833216525s ago: executing program 1 (id=7289): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x1000000, 0x841}, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = getegid() r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r0, r4, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r5, @raw=0x5, 0x5, 0x0, &(0x7f0000000740)="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", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e44b022d7d64730dd5127ccd9f02f7590e93c2c7d8eb"}) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8a042, 0x0) 4.345357076s ago: executing program 2 (id=7290): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b2) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) mq_timedreceive$auto(r0, 0x0, 0x3, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r0, 0x0, 0x10000, 0x124b, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@can, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto(r3, &(0x7f00000001c0)='-\x001c\xc2.b\x97\x1a\xf4\xd8\x1a\x1c\xb2\x9db\xb1\xec\xdeGDr=\xc2\xdc\xdf\x8cg\xa10Fzk\x86bd\xfc\x19\x96y\x9cYy\xc1\xc4\xf1\x0fH\x0f2\xa6\xbd\x9b\xe8\x97\xb0>,\xbf\xb8Kje\x05\xc4\xf8\x01\xd3]\x7f\xb8\x83S\xaf\xc5\xceZZlTO\xf5\x81`$\xec=|\t\x00\x00\x00Q\xf6\a\x81)\x94\xdaJ/\x04\xf2\xd7O\xa7=u1\xcd$\x17(t\xa4.\x1d\xfd\xf1\xc8e\x9c\xb4k\xfd\x94+B\x17o\\>4\xb7d5\a\xef\xb6\xe5F\xba\xf9Q\xdb\xd0\xb5\xa6\x1b\\\x0e\xb7\xab\xc3\x7fO`\x0e\x15\xca\x01z\xc23\xa1\x03\xdd@\xf3', 0xfdee) mmap$auto(0x100000007, 0x400008, 0x1fe, 0x9b72, r1, 0x6) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_OOBINLINE(r4, 0xff, 0xa, &(0x7f0000000040)='/proc/self/mem\x00', &(0x7f0000000080)=0x6) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x2007, 0x100000000) sysfs$auto(0x2, 0x20, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) shmget$auto(0x8, 0x10563, 0x568d1af2) 4.305952376s ago: executing program 5 (id=7291): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1f, 0x80002, 0xfffff800) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x40020000}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r1, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x44b, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x7, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3, 0x1, 0x0, 0x2, 0x4, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0xfffffffffffffffc]}, 0xa, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYRES16=0x0, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x24002080}, 0x20044841) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000340)="df3e733af445a6a890544c9fc48370eeec5267ce1805fc203a993ee514d6166083833b845ba780a9084541990523a3ca5527f676e1b6c7182b0f3c13fa0c6059cd31c8") ioctl$sock_SIOCGIFINDEX(r5, 0x89b0, &(0x7f0000000080)={'syzkaller0\x00'}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xfffffffffffffffd, 0x8, 0x1, 0x2, 0xffff, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 3.858265899s ago: executing program 2 (id=7292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000ff", @ANYRES16=r1, @ANYBLOB="01002bbd7000fff8df25013f000008000900", @ANYBLOB="0800050006000000110001006f76735f12fffe020000000002000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 3.3926123s ago: executing program 1 (id=7293): mmap$auto(0x0, 0x4, 0x4000000000df, 0x12, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x40020000}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r0, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x44b, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x7, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3, 0x1, 0x0, 0x2, 0x4, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0xfffffffffffffffc]}, 0xa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd01, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYRES16=0x0, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x24002080}, 0x20044841) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000340)="df3e733af445a6a890544c9fc48370eeec5267ce1805fc203a993ee514d6166083833b845ba780a9084541990523a3ca5527f676e1b6c7182b0f3c13fa0c6059cd31c8") ioctl$sock_SIOCGIFINDEX(r4, 0x89b0, &(0x7f0000000080)={'syzkaller0\x00'}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xfffffffffffffffd, 0x8, 0x1, 0x2, 0xffff, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 3.390084264s ago: executing program 2 (id=7294): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x202, 0x7) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0x1, 0x44b, 0x4, 0x1, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x8, 0x80200000000001, 0x800000000fff, 0xde6, 0x9809588, 0xfffffffd, 0x2, 0xbb2f, 0x864, 0x6, 0x22000, 0x200, 0x0, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x3, 0x0, 0x0, 0x7fdf, 0x3, 0x4, 0x100, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44cd98b, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6, 0x2a, 0x180000001, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xfff]}, 0xa, 0xd) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r1, 0x11, &(0x7f0000000000), 0x0) unshare$auto(0x7) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/netdevsim/netdevsim4/take_snapshot\x00', 0x758200, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd700002dcde251f0000000500060009000000080003000400000005000400e900000008000200f7000000180001801400020076657468305f766972745f7769666900fe630c7477f03c14b313de98d424a0614416010d7a0f5ecc928342f63a5c599dcc9e81ee11504806d405279176ca7e561a16f9e617ce5f0603cd34d000ff639ee87957c897b1290ab2399dc088fb649daba56143c4b262aedc7dff577f4cf5b262d99a05d1e7c29f233db9fd88018c60b59a2204d19ea7e9efe58192cca559b95c59ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) shutdown$auto(r3, 0x2) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x1d1d40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 2.662654844s ago: executing program 5 (id=7295): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)="000004") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/all/mldv1_unsolicited_report_interval\x00', 0x1500, 0x0) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r8 = setfsuid$auto(0xee00) setreuid$auto(r8, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000829bd7000ffdbdf25230000000c0006007f51000000000000080016000101000048022d802e013880e0d5d6b656ef053745caec2c8a5d5f900a3c9fccde194da1a2ac8b32c9464725bb9e25206935313df674aaf778eecc40860345f8c18f510fbe10bd97644be8652b4712b812619f79dbf59199866ca05615ccef4ea4b276586ae019d60e7b60ca41c3d1558371fbf8a691f2cb8df0e4963319cd30edac9989e72308007e000000000004004280d45caae53f6199eeac120b2f4dc37b71f3d041cb415b674a4c88943e81373e57219929f9ff3f262f07502d26ae26999eb2225cbc36cf2b9ac2183d3cf559ff7d3f11dd6b12c312b68cd1b59a78ae5f6a9a2ee163207b92822b6117e03193a7ff1e932b1fbb4f1af66ba9ec44d5101d161eb942e58e5f597001d8097fd920e0995d2656bfef29ddbfb968", @ANYRES32, @ANYBLOB="04002f8008006b00", @ANYRES32, @ANYBLOB="5858606dc35d196156edd240403c455df677373ead5b474ddfcb767be4e648386d56a4f976a9ca7bccbbb4f3b0c5d390c2b5c5f2a960df9aebfd29b24329e7adc3de6c4d4699fe1132efc0e8dc1a2a208b4c5727efd0d94a1b700789d32742dbe6edad1617e263534609b0513cd9c41f40441337fb979636167b193ddaaef6ef432f93c3af7ff511ff674bfc7fdf56a9ea6dea4dd4129f335797d89aad464ea6c71bbb736b0bd2f9ce1f42ab49684f28de77ff9087e32c6c22eab57b71a034b7184a41602f44fc2f8bb5ac187af395d3301fceee4701aaec02422654e180000008003900", @ANYRES32=r8, @ANYBLOB="0c008b00000000004575000008000b00f1000000"], 0x278}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r9 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/usb/usbmon/13s\x00', 0x40040, 0x0) r10 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) close_range$auto(r9, r10, 0x8000) ioctl$auto__ctl_fops_dm_ioctl(r10, 0x1ff, 0x0) r11 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r10, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5d14f42ce68ab3b37b14450000005d576e9b2518aab55001916f472a269fee", @ANYRES16=r11, @ANYBLOB="00087f000000fbdbdf250700000008001e00050000000500100007000000060011000100000008000100040000000600110040000000080004000200000005000f000600000005000c000600000008001500626a0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x14, r11, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4008000) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac000000", @ANYBLOB="20002dbd7000fedbdf2515000000080014002c902d2f880019000df0ecd65a3ff707bb11721c7d181a4656b102cf1653ddac5c0d342e1dca1eb2dba9cbd6534e4005d0aa0b9528450d7577b29f6a47beaa2e83083c96c2e5ada4eb8c3afa1d762338b29be5b900b88dd1703b4bc55fc49c2a8b21315ec5a41d06355373d23470d6cae607c1bed4bad85e1072530acac39daf9d91eb0cf1cd9f0de89a47370800010069080000"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x810) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7e, 0x0, 0x175c}}, 0x14}, 0x1, 0x68, 0xf0ffffff0f0000, 0x24000000}, 0xd0) sendfile$auto(r1, r2, 0x0, 0x80) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20942, 0x0) close_range$auto(0x2, 0xa, 0x0) 1.96711638s ago: executing program 1 (id=7296): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/175, 0xaf) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000000900)=ANY=[@ANYBLOB="080700000044006ad246cef9", @ANYRES16=r2, @ANYBLOB="e3db28bd7000fbdbdf2510000000f1130980300047000376314684e56a1502c41702b862ab38b4c49363eefb89cb58f5405b7b10bc59471626055ac6669880be261fcd8631e17cf6fd2db908008e00", @ANYRES32=r1, @ANYBLOB="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"], 0x1408}, 0x1, 0x0, 0x0, 0x841}, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = getegid() r4 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r0, r3, 0x1, 0x6, 0x81, 0x48d}, 0x2, 0xe, 0x9, 0x2, @inferred=r4, @raw=0x5, 0x5, 0x0, &(0x7f0000000740)="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", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e44b022d7d64730dd5127ccd9f02f7590e93c2c7d8eb"}) r5 = socket(0x2, 0x5, 0x0) getsockopt$auto(r5, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x9, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec3\x00', 0x0, 0x0) 1.195648044s ago: executing program 5 (id=7297): r0 = open(&(0x7f0000000100)='./file1\x00', 0x40100, 0xe1d2b27bdc14ab1e) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4f64b1d2) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) write$auto(0xffffffffffffffff, 0x0, 0x40000000080) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) write$auto(r1, 0x0, 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/nf_conntrack_irc/parameters/dcc_timeout\x00', 0x128082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40000c, 0x45bb, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty57\x00', 0x2a00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0x2004000000000df, 0x411, r2, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1000) 765.607226ms ago: executing program 5 (id=7298): mmap$auto(0x0, 0x4, 0x4000000000df, 0x12, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1f, 0x80002, 0xfffff800) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x40020000}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r1, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x44b, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x7, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3, 0x1, 0x0, 0x2, 0x4, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0xfffffffffffffffc]}, 0xa, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYRES16=0x0, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x24002080}, 0x20044841) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000340)="df3e733af445a6a890544c9fc48370eeec5267ce1805fc203a993ee514d6166083833b845ba780a9084541990523a3ca5527f676e1b6c7182b0f3c13fa0c6059cd31c8") ioctl$sock_SIOCGIFINDEX(r5, 0x89b0, &(0x7f0000000080)={'syzkaller0\x00'}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xfffffffffffffffd, 0x8, 0x1, 0x2, 0xffff, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 590.814909ms ago: executing program 2 (id=7299): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) mmap$auto(0x0, 0x1, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400000000400008, 0x9, 0xf1, 0x2, 0x18000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r2, &(0x7f000000b040)='\x00', 0x7, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r6, r6, 0x0, 0x3) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r7, 0xc0205648, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044820) 0s ago: executing program 1 (id=7300): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x15, 0x5, 0x0) r0 = eventfd$auto(0x7) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) r1 = gettid() kcmp$auto_KCMP_FILES(r1, r1, 0x2, 0x800, 0x1) ptrace$auto(0x2, r1, 0x2, 0x10) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x0, 0x22, 0xfffffffffffffffe, 0x0) kernel console output (not intermixed with test programs): 2011.803523][T17544] ? preempt_schedule_thunk+0x16/0x30 [ 2011.803573][T17544] ? __pfx_try_to_wake_up+0x10/0x10 [ 2011.803605][T17544] ? futex_private_hash_put+0xd5/0x190 [ 2011.803640][T17544] ? __pfx_futex_wake_mark+0x10/0x10 [ 2011.803688][T17544] ? ksys_write+0x190/0x250 [ 2011.803720][T17544] do_futex+0x11a/0x350 [ 2011.803753][T17544] ? __pfx_do_futex+0x10/0x10 [ 2011.803794][T17544] __x64_sys_futex+0x1e0/0x4c0 [ 2011.803829][T17544] ? fput+0x9b/0xd0 [ 2011.803867][T17544] ? __pfx___x64_sys_futex+0x10/0x10 [ 2011.803921][T17544] ? xfd_validate_state+0x61/0x180 [ 2011.803953][T17544] ? __pfx_ksys_write+0x10/0x10 [ 2011.803987][T17544] do_syscall_64+0xcd/0xfa0 [ 2011.804017][T17544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2011.804041][T17544] RIP: 0033:0x7f25da38f749 [ 2011.804059][T17544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2011.804081][T17544] RSP: 002b:00007f25db29e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2011.804102][T17544] RAX: ffffffffffffffda RBX: 00007f25da5e5fa0 RCX: 00007f25da38f749 [ 2011.804118][T17544] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2011.804132][T17544] RBP: 00007f25da413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2011.804146][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2011.804160][T17544] R13: 00007f25da5e6038 R14: 00007f25da5e5fa0 R15: 00007ffcb5b350d8 [ 2011.804189][T17544] [ 2012.743718][T13175] Bluetooth: hci1: command 0x0406 tx timeout [ 2013.140139][T13175] Bluetooth: hci3: command 0x0c1a tx timeout [ 2013.220450][T13175] Bluetooth: hci0: command 0x041b tx timeout [ 2013.226591][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 2014.783382][T17590] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2014.915705][ T31] audit: type=1326 audit(4294967630.630:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17592 comm="syz.0.5482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25da38f749 code=0x0 [ 2015.164328][T17594] zswap: compressor not available [ 2016.148002][T17617] netlink: 338 bytes leftover after parsing attributes in process `syz.0.5486'. [ 2016.342785][T17601] input: f¬ as /devices/virtual/input/input72 [ 2017.473494][T17641] netlink: 'syz.0.5499': attribute type 17 has an invalid length. [ 2017.558503][T17641] netlink: 326 bytes leftover after parsing attributes in process `syz.0.5499'. [ 2019.205567][T17668] input: f¬ as /devices/virtual/input/input73 [ 2019.719505][T17675] nfs: Unknown parameter 'w¾Ã`' [ 2020.477239][T17691] netlink: 338 bytes leftover after parsing attributes in process `syz.1.5503'. [ 2021.849143][T17707] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2025.130226][T17759] FAULT_INJECTION: forcing a failure. [ 2025.130226][T17759] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2025.143401][T17759] CPU: 0 UID: 0 PID: 17759 Comm: syz.5.5525 Not tainted syzkaller #0 PREEMPT(full) [ 2025.143432][T17759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2025.143447][T17759] Call Trace: [ 2025.143455][T17759] [ 2025.143463][T17759] dump_stack_lvl+0x16c/0x1f0 [ 2025.143497][T17759] should_fail_ex+0x512/0x640 [ 2025.143540][T17759] should_fail_futex+0x4c/0x60 [ 2025.143570][T17759] futex_lock_pi_atomic+0x148/0xd50 [ 2025.143620][T17759] futex_lock_pi+0x23f/0x7c0 [ 2025.143662][T17759] ? __pfx_futex_lock_pi+0x10/0x10 [ 2025.143716][T17759] ? preempt_schedule_common+0x44/0xc0 [ 2025.143747][T17759] ? preempt_schedule_thunk+0x16/0x30 [ 2025.143809][T17759] ? __pfx_try_to_wake_up+0x10/0x10 [ 2025.143841][T17759] ? futex_private_hash_put+0xd5/0x190 [ 2025.143876][T17759] ? __pfx_futex_wake_mark+0x10/0x10 [ 2025.143944][T17759] ? ksys_write+0x190/0x250 [ 2025.143977][T17759] do_futex+0x11a/0x350 [ 2025.144011][T17759] ? __pfx_do_futex+0x10/0x10 [ 2025.144054][T17759] __x64_sys_futex+0x1e0/0x4c0 [ 2025.144090][T17759] ? fput+0x9b/0xd0 [ 2025.144122][T17759] ? __pfx___x64_sys_futex+0x10/0x10 [ 2025.144158][T17759] ? xfd_validate_state+0x61/0x180 [ 2025.144193][T17759] ? __pfx_ksys_write+0x10/0x10 [ 2025.144229][T17759] do_syscall_64+0xcd/0xfa0 [ 2025.144262][T17759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.144287][T17759] RIP: 0033:0x7fe048d8f749 [ 2025.144308][T17759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2025.144332][T17759] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2025.144355][T17759] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2025.144372][T17759] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2025.144387][T17759] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2025.144402][T17759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2025.144418][T17759] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2025.144450][T17759] [ 2030.033202][T17809] FAULT_INJECTION: forcing a failure. [ 2030.033202][T17809] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2030.046360][T17809] CPU: 0 UID: 0 PID: 17809 Comm: syz.1.5536 Not tainted syzkaller #0 PREEMPT(full) [ 2030.046391][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2030.046406][T17809] Call Trace: [ 2030.046413][T17809] [ 2030.046422][T17809] dump_stack_lvl+0x16c/0x1f0 [ 2030.046455][T17809] should_fail_ex+0x512/0x640 [ 2030.046497][T17809] should_fail_futex+0x4c/0x60 [ 2030.046528][T17809] futex_lock_pi_atomic+0x148/0xd50 [ 2030.046571][T17809] futex_lock_pi+0x23f/0x7c0 [ 2030.046614][T17809] ? __pfx_futex_lock_pi+0x10/0x10 [ 2030.046650][T17809] ? preempt_schedule_common+0x44/0xc0 [ 2030.046680][T17809] ? preempt_schedule_thunk+0x16/0x30 [ 2030.046729][T17809] ? __pfx_try_to_wake_up+0x10/0x10 [ 2030.046761][T17809] ? futex_private_hash_put+0xd5/0x190 [ 2030.046796][T17809] ? __pfx_futex_wake_mark+0x10/0x10 [ 2030.046845][T17809] ? ksys_write+0x190/0x250 [ 2030.046877][T17809] do_futex+0x11a/0x350 [ 2030.046911][T17809] ? __pfx_do_futex+0x10/0x10 [ 2030.046951][T17809] __x64_sys_futex+0x1e0/0x4c0 [ 2030.046986][T17809] ? fput+0x9b/0xd0 [ 2030.047018][T17809] ? __pfx___x64_sys_futex+0x10/0x10 [ 2030.047051][T17809] ? xfd_validate_state+0x61/0x180 [ 2030.047085][T17809] ? __pfx_ksys_write+0x10/0x10 [ 2030.047150][T17809] do_syscall_64+0xcd/0xfa0 [ 2030.047183][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.047209][T17809] RIP: 0033:0x7f9f9e18f749 [ 2030.047229][T17809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2030.047254][T17809] RSP: 002b:00007f9f9f0b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2030.047277][T17809] RAX: ffffffffffffffda RBX: 00007f9f9e3e5fa0 RCX: 00007f9f9e18f749 [ 2030.047293][T17809] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2030.047308][T17809] RBP: 00007f9f9e213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2030.047324][T17809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2030.047339][T17809] R13: 00007f9f9e3e6038 R14: 00007f9f9e3e5fa0 R15: 00007ffd88c1b6f8 [ 2030.047372][T17809] [ 2033.237021][T17836] netlink: 338 bytes leftover after parsing attributes in process `syz.2.5552'. [ 2034.312863][T17852] Console: switching to colour VGA+ 80x25 [ 2036.422002][T17885] input: f¬ as /devices/virtual/input/input74 [ 2036.506217][T17887] input: f¬ as /devices/virtual/input/input75 [ 2037.269384][T17902] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2037.286886][T17903] netlink: 338 bytes leftover after parsing attributes in process `syz.2.5560'. [ 2038.393773][T17921] random: crng reseeded on system resumption [ 2039.830275][T17937] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2042.401404][T17973] random: crng reseeded on system resumption [ 2045.730164][T18020] input: f¬ as /devices/virtual/input/input77 [ 2046.232933][T18030] netlink: 338 bytes leftover after parsing attributes in process `syz.0.5594'. [ 2047.869905][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.889036][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2048.333768][T18054] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1937339183.1986356271.1936024425), cmd(2) [ 2048.981263][T18064] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2050.264648][T18086] netlink: 'syz.5.5605': attribute type 17 has an invalid length. [ 2050.324400][T18086] netlink: 326 bytes leftover after parsing attributes in process `syz.5.5605'. [ 2051.825934][T18111] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2052.185122][T18120] input: f¬ as /devices/virtual/input/input79 [ 2052.915793][T18132] hub 1-0:1.0: USB hub found [ 2052.952221][T18132] hub 1-0:1.0: 1 port detected [ 2054.358908][T18153] FAULT_INJECTION: forcing a failure. [ 2054.358908][T18153] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2054.371982][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.5.5623 Not tainted syzkaller #0 PREEMPT(full) [ 2054.372016][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2054.372032][T18153] Call Trace: [ 2054.372039][T18153] [ 2054.372049][T18153] dump_stack_lvl+0x16c/0x1f0 [ 2054.372085][T18153] should_fail_ex+0x512/0x640 [ 2054.372129][T18153] should_fail_futex+0x4c/0x60 [ 2054.372161][T18153] futex_lock_pi_atomic+0x101/0xd50 [ 2054.372206][T18153] futex_lock_pi+0x23f/0x7c0 [ 2054.372250][T18153] ? __pfx_futex_lock_pi+0x10/0x10 [ 2054.372288][T18153] ? __futex_wait+0x24b/0x2f0 [ 2054.372333][T18153] ? futex_private_hash_put+0xd5/0x190 [ 2054.372370][T18153] ? __pfx_futex_wake_mark+0x10/0x10 [ 2054.372419][T18153] ? ksys_write+0x190/0x250 [ 2054.372452][T18153] do_futex+0x11a/0x350 [ 2054.372487][T18153] ? __pfx_do_futex+0x10/0x10 [ 2054.372529][T18153] __x64_sys_futex+0x1e0/0x4c0 [ 2054.372565][T18153] ? fput+0x9b/0xd0 [ 2054.372598][T18153] ? __pfx___x64_sys_futex+0x10/0x10 [ 2054.372632][T18153] ? xfd_validate_state+0x61/0x180 [ 2054.372667][T18153] ? __pfx_ksys_write+0x10/0x10 [ 2054.372703][T18153] do_syscall_64+0xcd/0xfa0 [ 2054.372736][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2054.372760][T18153] RIP: 0033:0x7fe048d8f749 [ 2054.372780][T18153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2054.372811][T18153] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2054.372835][T18153] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2054.372851][T18153] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2054.372866][T18153] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2054.372882][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2054.372897][T18153] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2054.372931][T18153] [ 2054.972229][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5626'. [ 2055.587447][T18171] netlink: 'syz.5.5628': attribute type 1 has an invalid length. [ 2055.596318][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5636'. [ 2057.913745][T18207] FAULT_INJECTION: forcing a failure. [ 2057.913745][T18207] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2057.927008][T18207] CPU: 0 UID: 0 PID: 18207 Comm: syz.1.5637 Not tainted syzkaller #0 PREEMPT(full) [ 2057.927041][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2057.927057][T18207] Call Trace: [ 2057.927065][T18207] [ 2057.927074][T18207] dump_stack_lvl+0x16c/0x1f0 [ 2057.927110][T18207] should_fail_ex+0x512/0x640 [ 2057.927153][T18207] should_fail_futex+0x4c/0x60 [ 2057.927185][T18207] futex_lock_pi_atomic+0x101/0xd50 [ 2057.927230][T18207] futex_lock_pi+0x23f/0x7c0 [ 2057.927274][T18207] ? __pfx_futex_lock_pi+0x10/0x10 [ 2057.927311][T18207] ? __futex_wait+0x24b/0x2f0 [ 2057.927357][T18207] ? futex_private_hash_put+0xd5/0x190 [ 2057.927393][T18207] ? __pfx_futex_wake_mark+0x10/0x10 [ 2057.927443][T18207] ? ksys_write+0x190/0x250 [ 2057.927491][T18207] do_futex+0x11a/0x350 [ 2057.927525][T18207] ? __pfx_do_futex+0x10/0x10 [ 2057.927568][T18207] __x64_sys_futex+0x1e0/0x4c0 [ 2057.927604][T18207] ? fput+0x9b/0xd0 [ 2057.927636][T18207] ? __pfx___x64_sys_futex+0x10/0x10 [ 2057.927671][T18207] ? xfd_validate_state+0x61/0x180 [ 2057.927706][T18207] ? __pfx_ksys_write+0x10/0x10 [ 2057.927742][T18207] do_syscall_64+0xcd/0xfa0 [ 2057.927776][T18207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2057.927801][T18207] RIP: 0033:0x7f9f9e18f749 [ 2057.927820][T18207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2057.927845][T18207] RSP: 002b:00007f9f9f0b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2057.927868][T18207] RAX: ffffffffffffffda RBX: 00007f9f9e3e5fa0 RCX: 00007f9f9e18f749 [ 2057.927884][T18207] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2057.927900][T18207] RBP: 00007f9f9e213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2057.927915][T18207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2057.927930][T18207] R13: 00007f9f9e3e6038 R14: 00007f9f9e3e5fa0 R15: 00007ffd88c1b6f8 [ 2057.927962][T18207] [ 2059.117522][T18224] FAULT_INJECTION: forcing a failure. [ 2059.117522][T18224] name failslab, interval 1, probability 393216, space 0, times 0 [ 2059.207347][T18224] CPU: 0 UID: 0 PID: 18224 Comm: syz.0.5643 Not tainted syzkaller #0 PREEMPT(full) [ 2059.207387][T18224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2059.207403][T18224] Call Trace: [ 2059.207411][T18224] [ 2059.207422][T18224] dump_stack_lvl+0x16c/0x1f0 [ 2059.207457][T18224] should_fail_ex+0x512/0x640 [ 2059.207497][T18224] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2059.207524][T18224] should_failslab+0xc2/0x120 [ 2059.207558][T18224] __kmalloc_cache_noprof+0x72/0x780 [ 2059.207581][T18224] ? trace_kmalloc+0x2b/0xd0 [ 2059.207612][T18224] ? __kmalloc_noprof+0x34f/0x880 [ 2059.207650][T18224] ? __asan_memcpy+0x3c/0x60 [ 2059.207674][T18224] ? __alloc_workqueue+0x158/0x1810 [ 2059.207712][T18224] ? __alloc_workqueue+0x158/0x1810 [ 2059.207745][T18224] __alloc_workqueue+0x158/0x1810 [ 2059.207778][T18224] ? __pfx_vsnprintf+0x10/0x10 [ 2059.207805][T18224] ? lockdep_hardirqs_on+0x7c/0x110 [ 2059.207836][T18224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2059.207869][T18224] alloc_workqueue_noprof+0xd2/0x200 [ 2059.207902][T18224] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 2059.207944][T18224] ? __pfx___debug_object_init+0x10/0x10 [ 2059.207983][T18224] nci_register_device+0x21e/0xb80 [ 2059.208011][T18224] ? __pfx_nci_register_device+0x10/0x10 [ 2059.208040][T18224] ? lockdep_init_map_type+0x5c/0x280 [ 2059.208082][T18224] virtual_ncidev_open+0x141/0x220 [ 2059.208111][T18224] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2059.208139][T18224] misc_open+0x26d/0x450 [ 2059.208178][T18224] ? __pfx_misc_open+0x10/0x10 [ 2059.208216][T18224] chrdev_open+0x234/0x6a0 [ 2059.208246][T18224] ? __pfx_apparmor_file_open+0x10/0x10 [ 2059.208285][T18224] ? __pfx_chrdev_open+0x10/0x10 [ 2059.208318][T18224] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2059.208357][T18224] do_dentry_open+0x982/0x1530 [ 2059.208392][T18224] ? __pfx_chrdev_open+0x10/0x10 [ 2059.208429][T18224] vfs_open+0x82/0x3f0 [ 2059.208469][T18224] path_openat+0x1de4/0x2cb0 [ 2059.208507][T18224] ? __pfx_path_openat+0x10/0x10 [ 2059.208537][T18224] ? __lock_acquire+0xb8a/0x1c90 [ 2059.208574][T18224] do_filp_open+0x20b/0x470 [ 2059.208603][T18224] ? __pfx_do_filp_open+0x10/0x10 [ 2059.208653][T18224] ? alloc_fd+0x471/0x7d0 [ 2059.208686][T18224] do_sys_openat2+0x11b/0x1d0 [ 2059.208723][T18224] ? __pfx_do_sys_openat2+0x10/0x10 [ 2059.208773][T18224] __x64_sys_openat+0x174/0x210 [ 2059.208811][T18224] ? __pfx___x64_sys_openat+0x10/0x10 [ 2059.208862][T18224] do_syscall_64+0xcd/0xfa0 [ 2059.208895][T18224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2059.208921][T18224] RIP: 0033:0x7f25da38f749 [ 2059.208941][T18224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2059.208965][T18224] RSP: 002b:00007f25db29e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2059.208988][T18224] RAX: ffffffffffffffda RBX: 00007f25da5e5fa0 RCX: 00007f25da38f749 [ 2059.209005][T18224] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2059.209021][T18224] RBP: 00007f25da413f91 R08: 0000000000000000 R09: 0000000000000000 [ 2059.209037][T18224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2059.209052][T18224] R13: 00007f25da5e6038 R14: 00007f25da5e5fa0 R15: 00007ffcb5b350d8 [ 2059.209085][T18224] [ 2059.738560][T18231] FAULT_INJECTION: forcing a failure. [ 2059.738560][T18231] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2059.751500][T18231] CPU: 0 UID: 0 PID: 18231 Comm: syz.0.5646 Not tainted syzkaller #0 PREEMPT(full) [ 2059.751533][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2059.751548][T18231] Call Trace: [ 2059.751557][T18231] [ 2059.751567][T18231] dump_stack_lvl+0x16c/0x1f0 [ 2059.751602][T18231] should_fail_ex+0x512/0x640 [ 2059.751650][T18231] should_fail_futex+0x4c/0x60 [ 2059.751682][T18231] futex_lock_pi_atomic+0x101/0xd50 [ 2059.751728][T18231] futex_lock_pi+0x23f/0x7c0 [ 2059.751771][T18231] ? __pfx_futex_lock_pi+0x10/0x10 [ 2059.751809][T18231] ? __futex_wait+0x24b/0x2f0 [ 2059.751837][T18231] ? lockdep_hardirqs_on+0x7c/0x110 [ 2059.751886][T18231] ? futex_private_hash_put+0xd5/0x190 [ 2059.751922][T18231] ? __pfx_futex_wake_mark+0x10/0x10 [ 2059.751972][T18231] ? ksys_write+0x190/0x250 [ 2059.752005][T18231] do_futex+0x11a/0x350 [ 2059.752040][T18231] ? __pfx_do_futex+0x10/0x10 [ 2059.752082][T18231] __x64_sys_futex+0x1e0/0x4c0 [ 2059.752118][T18231] ? fput+0x9b/0xd0 [ 2059.752151][T18231] ? __pfx___x64_sys_futex+0x10/0x10 [ 2059.752186][T18231] ? xfd_validate_state+0x61/0x180 [ 2059.752222][T18231] ? __pfx_ksys_write+0x10/0x10 [ 2059.752258][T18231] do_syscall_64+0xcd/0xfa0 [ 2059.752291][T18231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2059.752317][T18231] RIP: 0033:0x7f25da38f749 [ 2059.752337][T18231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2059.752362][T18231] RSP: 002b:00007f25db29e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2059.752385][T18231] RAX: ffffffffffffffda RBX: 00007f25da5e5fa0 RCX: 00007f25da38f749 [ 2059.752403][T18231] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2059.752418][T18231] RBP: 00007f25da413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2059.752434][T18231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2059.752449][T18231] R13: 00007f25da5e6038 R14: 00007f25da5e5fa0 R15: 00007ffcb5b350d8 [ 2059.752482][T18231] [ 2062.206904][T18262] input: f¬ as /devices/virtual/input/input80 [ 2062.280759][T18264] FAULT_INJECTION: forcing a failure. [ 2062.280759][T18264] name failslab, interval 1, probability 393216, space 0, times 0 [ 2062.396097][T18264] CPU: 0 UID: 0 PID: 18264 Comm: syz.5.5655 Not tainted syzkaller #0 PREEMPT(full) [ 2062.396136][T18264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2062.396151][T18264] Call Trace: [ 2062.396160][T18264] [ 2062.396170][T18264] dump_stack_lvl+0x16c/0x1f0 [ 2062.396205][T18264] should_fail_ex+0x512/0x640 [ 2062.396243][T18264] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2062.396270][T18264] should_failslab+0xc2/0x120 [ 2062.396305][T18264] __kmalloc_cache_noprof+0x72/0x780 [ 2062.396329][T18264] ? lockdep_init_map_type+0x5c/0x280 [ 2062.396365][T18264] ? nci_hci_allocate+0x45/0x330 [ 2062.396395][T18264] ? debug_mutex_init+0x37/0x70 [ 2062.396422][T18264] ? nci_hci_allocate+0x45/0x330 [ 2062.396451][T18264] nci_hci_allocate+0x45/0x330 [ 2062.396482][T18264] nci_allocate_device+0x26f/0x430 [ 2062.396526][T18264] virtual_ncidev_open+0x6f/0x220 [ 2062.396556][T18264] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2062.396584][T18264] misc_open+0x26d/0x450 [ 2062.396623][T18264] ? __pfx_misc_open+0x10/0x10 [ 2062.396661][T18264] chrdev_open+0x234/0x6a0 [ 2062.396691][T18264] ? __pfx_apparmor_file_open+0x10/0x10 [ 2062.396729][T18264] ? __pfx_chrdev_open+0x10/0x10 [ 2062.396762][T18264] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2062.396797][T18264] do_dentry_open+0x982/0x1530 [ 2062.396827][T18264] ? __pfx_chrdev_open+0x10/0x10 [ 2062.396863][T18264] vfs_open+0x82/0x3f0 [ 2062.396902][T18264] path_openat+0x1de4/0x2cb0 [ 2062.396940][T18264] ? __pfx_path_openat+0x10/0x10 [ 2062.396970][T18264] ? __lock_acquire+0xb8a/0x1c90 [ 2062.397008][T18264] do_filp_open+0x20b/0x470 [ 2062.397036][T18264] ? __pfx_do_filp_open+0x10/0x10 [ 2062.397094][T18264] ? alloc_fd+0x471/0x7d0 [ 2062.397128][T18264] do_sys_openat2+0x11b/0x1d0 [ 2062.397165][T18264] ? __pfx_do_sys_openat2+0x10/0x10 [ 2062.397215][T18264] __x64_sys_openat+0x174/0x210 [ 2062.397254][T18264] ? __pfx___x64_sys_openat+0x10/0x10 [ 2062.397304][T18264] do_syscall_64+0xcd/0xfa0 [ 2062.397338][T18264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2062.397364][T18264] RIP: 0033:0x7fe048d8f749 [ 2062.397384][T18264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2062.397409][T18264] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2062.397432][T18264] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2062.397450][T18264] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2062.397466][T18264] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2062.397482][T18264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2062.397497][T18264] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2062.397529][T18264] [ 2062.696829][T18266] FAULT_INJECTION: forcing a failure. [ 2062.696829][T18266] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2062.710091][T18266] CPU: 0 UID: 0 PID: 18266 Comm: syz.0.5656 Not tainted syzkaller #0 PREEMPT(full) [ 2062.710124][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2062.710140][T18266] Call Trace: [ 2062.710147][T18266] [ 2062.710157][T18266] dump_stack_lvl+0x16c/0x1f0 [ 2062.710192][T18266] should_fail_ex+0x512/0x640 [ 2062.710235][T18266] should_fail_futex+0x4c/0x60 [ 2062.710267][T18266] futex_lock_pi_atomic+0x101/0xd50 [ 2062.710312][T18266] futex_lock_pi+0x23f/0x7c0 [ 2062.710356][T18266] ? __pfx_futex_lock_pi+0x10/0x10 [ 2062.710393][T18266] ? __futex_wait+0x24b/0x2f0 [ 2062.710439][T18266] ? futex_private_hash_put+0xd5/0x190 [ 2062.710476][T18266] ? __pfx_futex_wake_mark+0x10/0x10 [ 2062.710525][T18266] ? ksys_write+0x190/0x250 [ 2062.710559][T18266] do_futex+0x11a/0x350 [ 2062.710593][T18266] ? __pfx_do_futex+0x10/0x10 [ 2062.710635][T18266] __x64_sys_futex+0x1e0/0x4c0 [ 2062.710671][T18266] ? fput+0x9b/0xd0 [ 2062.710704][T18266] ? __pfx___x64_sys_futex+0x10/0x10 [ 2062.710738][T18266] ? xfd_validate_state+0x61/0x180 [ 2062.710773][T18266] ? __pfx_ksys_write+0x10/0x10 [ 2062.710809][T18266] do_syscall_64+0xcd/0xfa0 [ 2062.710842][T18266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2062.710874][T18266] RIP: 0033:0x7f25da38f749 [ 2062.710894][T18266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2062.710918][T18266] RSP: 002b:00007f25db29e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2062.710945][T18266] RAX: ffffffffffffffda RBX: 00007f25da5e5fa0 RCX: 00007f25da38f749 [ 2062.710962][T18266] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2062.710976][T18266] RBP: 00007f25da413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2062.710996][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2062.711011][T18266] R13: 00007f25da5e6038 R14: 00007f25da5e5fa0 R15: 00007ffcb5b350d8 [ 2062.711043][T18266] [ 2064.754005][T18300] FAULT_INJECTION: forcing a failure. [ 2064.754005][T18300] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2064.766970][T18300] CPU: 0 UID: 0 PID: 18300 Comm: syz.5.5667 Not tainted syzkaller #0 PREEMPT(full) [ 2064.767003][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2064.767018][T18300] Call Trace: [ 2064.767026][T18300] [ 2064.767036][T18300] dump_stack_lvl+0x16c/0x1f0 [ 2064.767071][T18300] should_fail_ex+0x512/0x640 [ 2064.767114][T18300] should_fail_futex+0x4c/0x60 [ 2064.767146][T18300] futex_lock_pi_atomic+0x148/0xd50 [ 2064.767191][T18300] futex_lock_pi+0x23f/0x7c0 [ 2064.767235][T18300] ? __pfx_futex_lock_pi+0x10/0x10 [ 2064.767272][T18300] ? preempt_schedule_common+0x44/0xc0 [ 2064.767303][T18300] ? preempt_schedule_thunk+0x16/0x30 [ 2064.767354][T18300] ? __pfx_try_to_wake_up+0x10/0x10 [ 2064.767387][T18300] ? futex_private_hash_put+0xd5/0x190 [ 2064.767424][T18300] ? __pfx_futex_wake_mark+0x10/0x10 [ 2064.767474][T18300] ? ksys_write+0x190/0x250 [ 2064.767507][T18300] do_futex+0x11a/0x350 [ 2064.767541][T18300] ? __pfx_do_futex+0x10/0x10 [ 2064.767584][T18300] __x64_sys_futex+0x1e0/0x4c0 [ 2064.767620][T18300] ? fput+0x9b/0xd0 [ 2064.767652][T18300] ? __pfx___x64_sys_futex+0x10/0x10 [ 2064.767687][T18300] ? xfd_validate_state+0x61/0x180 [ 2064.767722][T18300] ? __pfx_ksys_write+0x10/0x10 [ 2064.767758][T18300] do_syscall_64+0xcd/0xfa0 [ 2064.767791][T18300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.767815][T18300] RIP: 0033:0x7fe048d8f749 [ 2064.767835][T18300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2064.767866][T18300] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2064.767889][T18300] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2064.767906][T18300] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2064.767921][T18300] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2064.767937][T18300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2064.767952][T18300] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2064.767985][T18300] [ 2068.228925][T18359] netlink: 326 bytes leftover after parsing attributes in process `syz.5.5684'. [ 2070.206240][T18390] FAULT_INJECTION: forcing a failure. [ 2070.206240][T18390] name failslab, interval 1, probability 393216, space 0, times 0 [ 2070.307540][T18390] CPU: 0 UID: 0 PID: 18390 Comm: syz.2.5693 Not tainted syzkaller #0 PREEMPT(full) [ 2070.307572][T18390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2070.307586][T18390] Call Trace: [ 2070.307594][T18390] [ 2070.307603][T18390] dump_stack_lvl+0x16c/0x1f0 [ 2070.307636][T18390] should_fail_ex+0x512/0x640 [ 2070.307671][T18390] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2070.307696][T18390] should_failslab+0xc2/0x120 [ 2070.307728][T18390] __kmalloc_cache_noprof+0x72/0x780 [ 2070.307768][T18390] ? nfc_allocate_device+0x15b/0x5e0 [ 2070.307805][T18390] ? nfc_allocate_device+0x15b/0x5e0 [ 2070.307835][T18390] nfc_allocate_device+0x15b/0x5e0 [ 2070.307865][T18390] ? __init_swait_queue_head+0xca/0x150 [ 2070.307909][T18390] nci_allocate_device+0x23b/0x430 [ 2070.307951][T18390] virtual_ncidev_open+0x6f/0x220 [ 2070.307979][T18390] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2070.308007][T18390] misc_open+0x26d/0x450 [ 2070.308045][T18390] ? __pfx_misc_open+0x10/0x10 [ 2070.308088][T18390] chrdev_open+0x234/0x6a0 [ 2070.308117][T18390] ? __pfx_apparmor_file_open+0x10/0x10 [ 2070.308155][T18390] ? __pfx_chrdev_open+0x10/0x10 [ 2070.308186][T18390] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2070.308220][T18390] do_dentry_open+0x982/0x1530 [ 2070.308249][T18390] ? __pfx_chrdev_open+0x10/0x10 [ 2070.308295][T18390] vfs_open+0x82/0x3f0 [ 2070.308353][T18390] path_openat+0x1de4/0x2cb0 [ 2070.308392][T18390] ? __pfx_path_openat+0x10/0x10 [ 2070.308422][T18390] ? __lock_acquire+0xb8a/0x1c90 [ 2070.308460][T18390] do_filp_open+0x20b/0x470 [ 2070.308488][T18390] ? __pfx_do_filp_open+0x10/0x10 [ 2070.308539][T18390] ? alloc_fd+0x471/0x7d0 [ 2070.308573][T18390] do_sys_openat2+0x11b/0x1d0 [ 2070.308610][T18390] ? __pfx_do_sys_openat2+0x10/0x10 [ 2070.308659][T18390] __x64_sys_openat+0x174/0x210 [ 2070.308698][T18390] ? __pfx___x64_sys_openat+0x10/0x10 [ 2070.308749][T18390] do_syscall_64+0xcd/0xfa0 [ 2070.308791][T18390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.308817][T18390] RIP: 0033:0x7f6e4318f749 [ 2070.308837][T18390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2070.308862][T18390] RSP: 002b:00007f6e44065038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2070.308886][T18390] RAX: ffffffffffffffda RBX: 00007f6e433e5fa0 RCX: 00007f6e4318f749 [ 2070.308904][T18390] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2070.308921][T18390] RBP: 00007f6e43213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2070.308937][T18390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2070.308952][T18390] R13: 00007f6e433e6038 R14: 00007f6e433e5fa0 R15: 00007fff798c2a28 [ 2070.308985][T18390] [ 2072.111242][T18431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5706'. [ 2072.156779][T18431] veth1_macvtap: left promiscuous mode [ 2074.271643][T18482] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2074.278674][T18482] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2075.048753][T18493] FAULT_INJECTION: forcing a failure. [ 2075.048753][T18493] name failslab, interval 1, probability 393216, space 0, times 0 [ 2075.115485][T18493] CPU: 0 UID: 0 PID: 18493 Comm: syz.5.5729 Not tainted syzkaller #0 PREEMPT(full) [ 2075.115519][T18493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2075.115535][T18493] Call Trace: [ 2075.115543][T18493] [ 2075.115552][T18493] dump_stack_lvl+0x16c/0x1f0 [ 2075.115588][T18493] should_fail_ex+0x512/0x640 [ 2075.115626][T18493] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2075.115654][T18493] should_failslab+0xc2/0x120 [ 2075.115688][T18493] __kmalloc_cache_noprof+0x72/0x780 [ 2075.115712][T18493] ? lockdep_init_map_type+0x5c/0x280 [ 2075.115747][T18493] ? nci_hci_allocate+0x45/0x330 [ 2075.115776][T18493] ? debug_mutex_init+0x37/0x70 [ 2075.115803][T18493] ? nci_hci_allocate+0x45/0x330 [ 2075.115832][T18493] nci_hci_allocate+0x45/0x330 [ 2075.115863][T18493] nci_allocate_device+0x26f/0x430 [ 2075.115915][T18493] virtual_ncidev_open+0x6f/0x220 [ 2075.115945][T18493] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2075.115973][T18493] misc_open+0x26d/0x450 [ 2075.116012][T18493] ? __pfx_misc_open+0x10/0x10 [ 2075.116049][T18493] chrdev_open+0x234/0x6a0 [ 2075.116080][T18493] ? __pfx_apparmor_file_open+0x10/0x10 [ 2075.116118][T18493] ? __pfx_chrdev_open+0x10/0x10 [ 2075.116151][T18493] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2075.116185][T18493] do_dentry_open+0x982/0x1530 [ 2075.116216][T18493] ? __pfx_chrdev_open+0x10/0x10 [ 2075.116252][T18493] vfs_open+0x82/0x3f0 [ 2075.116291][T18493] path_openat+0x1de4/0x2cb0 [ 2075.116329][T18493] ? __pfx_path_openat+0x10/0x10 [ 2075.116359][T18493] ? __lock_acquire+0xb8a/0x1c90 [ 2075.116396][T18493] do_filp_open+0x20b/0x470 [ 2075.116425][T18493] ? __pfx_do_filp_open+0x10/0x10 [ 2075.116474][T18493] ? alloc_fd+0x471/0x7d0 [ 2075.116507][T18493] do_sys_openat2+0x11b/0x1d0 [ 2075.116544][T18493] ? __pfx_do_sys_openat2+0x10/0x10 [ 2075.116593][T18493] __x64_sys_openat+0x174/0x210 [ 2075.116631][T18493] ? __pfx___x64_sys_openat+0x10/0x10 [ 2075.116682][T18493] do_syscall_64+0xcd/0xfa0 [ 2075.116715][T18493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2075.116740][T18493] RIP: 0033:0x7fe048d8f749 [ 2075.116759][T18493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2075.116784][T18493] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2075.116807][T18493] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2075.116824][T18493] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2075.116840][T18493] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2075.116855][T18493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2075.116875][T18493] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2075.116908][T18493] [ 2076.234067][T18516] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 2079.486455][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5751'. [ 2082.902381][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5770'. [ 2082.999930][T18633] veth1_macvtap: left promiscuous mode [ 2084.620485][T18662] input: f¬ as /devices/virtual/input/input87 [ 2085.857118][T18692] input: f¬ as /devices/virtual/input/input88 [ 2086.311122][T18701] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2086.317613][T18701] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2088.275152][T18735] input: f¬ as /devices/virtual/input/input89 [ 2088.627270][T18742] input: f¬ as /devices/virtual/input/input90 [ 2089.755549][T18766] FAULT_INJECTION: forcing a failure. [ 2089.755549][T18766] name failslab, interval 1, probability 393216, space 0, times 0 [ 2089.831410][T18766] CPU: 0 UID: 0 PID: 18766 Comm: syz.2.5813 Not tainted syzkaller #0 PREEMPT(full) [ 2089.831452][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2089.831468][T18766] Call Trace: [ 2089.831476][T18766] [ 2089.831486][T18766] dump_stack_lvl+0x16c/0x1f0 [ 2089.831521][T18766] should_fail_ex+0x512/0x640 [ 2089.831560][T18766] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2089.831590][T18766] should_failslab+0xc2/0x120 [ 2089.831625][T18766] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2089.831650][T18766] ? __pmd_alloc+0xbf/0x8b0 [ 2089.831690][T18766] ? __pmd_alloc+0xbf/0x8b0 [ 2089.831722][T18766] __pmd_alloc+0xbf/0x8b0 [ 2089.831754][T18766] ? find_held_lock+0x2b/0x80 [ 2089.831782][T18766] __handle_mm_fault+0xada/0x2aa0 [ 2089.831835][T18766] ? __pfx___handle_mm_fault+0x10/0x10 [ 2089.831900][T18766] handle_mm_fault+0x589/0xd10 [ 2089.831946][T18766] __get_user_pages+0x54e/0x3530 [ 2089.831990][T18766] ? down_read_killable+0x220/0x4b0 [ 2089.832033][T18766] ? __pfx___get_user_pages+0x10/0x10 [ 2089.832077][T18766] __gup_longterm_locked+0xa92/0x17e0 [ 2089.832117][T18766] ? is_bpf_text_address+0x8a/0x1a0 [ 2089.832157][T18766] ? __pfx___gup_longterm_locked+0x10/0x10 [ 2089.832197][T18766] ? find_held_lock+0x2b/0x80 [ 2089.832231][T18766] gup_fast_fallback+0xee2/0x22a0 [ 2089.832271][T18766] ? stack_trace_save+0x8e/0xc0 [ 2089.832315][T18766] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2089.832349][T18766] ? __x64_sys_futex+0x1e0/0x4c0 [ 2089.832383][T18766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.832422][T18766] get_user_pages_fast+0xa7/0xf0 [ 2089.832462][T18766] ? __pfx_get_user_pages_fast+0x10/0x10 [ 2089.832507][T18766] get_futex_key+0x2c6/0x1560 [ 2089.832543][T18766] ? __pfx_get_futex_key+0x10/0x10 [ 2089.832579][T18766] ? kasan_save_track+0x14/0x30 [ 2089.832608][T18766] ? __kasan_kmalloc+0xaa/0xb0 [ 2089.832641][T18766] futex_lock_pi+0x1cc/0x7c0 [ 2089.832681][T18766] ? preempt_schedule_thunk+0x16/0x30 [ 2089.832722][T18766] ? __pfx_futex_lock_pi+0x10/0x10 [ 2089.832759][T18766] ? preempt_schedule_common+0x44/0xc0 [ 2089.832790][T18766] ? preempt_schedule_thunk+0x16/0x30 [ 2089.832840][T18766] ? __pfx_try_to_wake_up+0x10/0x10 [ 2089.832874][T18766] ? futex_private_hash_put+0xd5/0x190 [ 2089.832911][T18766] ? __pfx_futex_wake_mark+0x10/0x10 [ 2089.832961][T18766] ? ksys_write+0x190/0x250 [ 2089.832993][T18766] do_futex+0x11a/0x350 [ 2089.833028][T18766] ? __pfx_do_futex+0x10/0x10 [ 2089.833071][T18766] __x64_sys_futex+0x1e0/0x4c0 [ 2089.833107][T18766] ? fput+0x9b/0xd0 [ 2089.833139][T18766] ? __pfx___x64_sys_futex+0x10/0x10 [ 2089.833174][T18766] ? xfd_validate_state+0x61/0x180 [ 2089.833209][T18766] ? __pfx_ksys_write+0x10/0x10 [ 2089.833246][T18766] do_syscall_64+0xcd/0xfa0 [ 2089.833279][T18766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.833304][T18766] RIP: 0033:0x7f6e4318f749 [ 2089.833323][T18766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2089.833348][T18766] RSP: 002b:00007f6e44065038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2089.833372][T18766] RAX: ffffffffffffffda RBX: 00007f6e433e5fa0 RCX: 00007f6e4318f749 [ 2089.833389][T18766] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2089.833404][T18766] RBP: 00007f6e43213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2089.833419][T18766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2089.833435][T18766] R13: 00007f6e433e6038 R14: 00007f6e433e5fa0 R15: 00007fff798c2a28 [ 2089.833485][T18766] [ 2090.341152][T18770] input: f¬ as /devices/virtual/input/input91 [ 2090.506183][T18778] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2090.512681][T18778] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2093.168551][T18827] FAULT_INJECTION: forcing a failure. [ 2093.168551][T18827] name failslab, interval 1, probability 393216, space 0, times 0 [ 2093.244590][T18827] CPU: 0 UID: 0 PID: 18827 Comm: syz.5.5830 Not tainted syzkaller #0 PREEMPT(full) [ 2093.244623][T18827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2093.244637][T18827] Call Trace: [ 2093.244645][T18827] [ 2093.244653][T18827] dump_stack_lvl+0x16c/0x1f0 [ 2093.244686][T18827] should_fail_ex+0x512/0x640 [ 2093.244720][T18827] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2093.244751][T18827] should_failslab+0xc2/0x120 [ 2093.244782][T18827] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2093.244805][T18827] ? __pmd_alloc+0xbf/0x8b0 [ 2093.244841][T18827] ? __pmd_alloc+0xbf/0x8b0 [ 2093.244870][T18827] __pmd_alloc+0xbf/0x8b0 [ 2093.244899][T18827] ? find_held_lock+0x2b/0x80 [ 2093.244924][T18827] __handle_mm_fault+0xada/0x2aa0 [ 2093.244967][T18827] ? __pfx___handle_mm_fault+0x10/0x10 [ 2093.245045][T18827] handle_mm_fault+0x589/0xd10 [ 2093.245104][T18827] __get_user_pages+0x54e/0x3530 [ 2093.245147][T18827] ? down_read_killable+0x220/0x4b0 [ 2093.245184][T18827] ? __pfx___get_user_pages+0x10/0x10 [ 2093.245225][T18827] __gup_longterm_locked+0xa92/0x17e0 [ 2093.245262][T18827] ? is_bpf_text_address+0x8a/0x1a0 [ 2093.245299][T18827] ? __pfx___gup_longterm_locked+0x10/0x10 [ 2093.245337][T18827] ? find_held_lock+0x2b/0x80 [ 2093.245368][T18827] gup_fast_fallback+0xee2/0x22a0 [ 2093.245406][T18827] ? stack_trace_save+0x8e/0xc0 [ 2093.245448][T18827] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2093.245480][T18827] ? __x64_sys_futex+0x1e0/0x4c0 [ 2093.245512][T18827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2093.245549][T18827] get_user_pages_fast+0xa7/0xf0 [ 2093.245582][T18827] ? __pfx_get_user_pages_fast+0x10/0x10 [ 2093.245625][T18827] get_futex_key+0x2c6/0x1560 [ 2093.245658][T18827] ? __pfx_get_futex_key+0x10/0x10 [ 2093.245692][T18827] ? kasan_save_track+0x14/0x30 [ 2093.245720][T18827] ? __kasan_kmalloc+0xaa/0xb0 [ 2093.245750][T18827] futex_lock_pi+0x1cc/0x7c0 [ 2093.245791][T18827] ? __pfx_futex_lock_pi+0x10/0x10 [ 2093.245826][T18827] ? __futex_wait+0x24b/0x2f0 [ 2093.245870][T18827] ? futex_private_hash_put+0xd5/0x190 [ 2093.245905][T18827] ? __pfx_futex_wake_mark+0x10/0x10 [ 2093.245952][T18827] ? ksys_write+0x190/0x250 [ 2093.245983][T18827] do_futex+0x11a/0x350 [ 2093.246016][T18827] ? __pfx_do_futex+0x10/0x10 [ 2093.246057][T18827] __x64_sys_futex+0x1e0/0x4c0 [ 2093.246097][T18827] ? fput+0x9b/0xd0 [ 2093.246128][T18827] ? __pfx___x64_sys_futex+0x10/0x10 [ 2093.246162][T18827] ? xfd_validate_state+0x61/0x180 [ 2093.246197][T18827] ? __pfx_ksys_write+0x10/0x10 [ 2093.246232][T18827] do_syscall_64+0xcd/0xfa0 [ 2093.246265][T18827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2093.246289][T18827] RIP: 0033:0x7fe048d8f749 [ 2093.246308][T18827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2093.246332][T18827] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2093.246354][T18827] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2093.246370][T18827] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2093.246385][T18827] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2093.246400][T18827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2093.246414][T18827] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2093.246445][T18827] [ 2098.740463][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5850'. [ 2099.771680][T18926] FAULT_INJECTION: forcing a failure. [ 2099.771680][T18926] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2099.785067][T18926] CPU: 0 UID: 0 PID: 18926 Comm: syz.0.5856 Not tainted syzkaller #0 PREEMPT(full) [ 2099.785099][T18926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2099.785119][T18926] Call Trace: [ 2099.785127][T18926] [ 2099.785136][T18926] dump_stack_lvl+0x16c/0x1f0 [ 2099.785172][T18926] should_fail_ex+0x512/0x640 [ 2099.785214][T18926] should_fail_futex+0x4c/0x60 [ 2099.785244][T18926] futex_lock_pi_atomic+0x148/0xd50 [ 2099.785288][T18926] futex_lock_pi+0x23f/0x7c0 [ 2099.785331][T18926] ? __pfx_futex_lock_pi+0x10/0x10 [ 2099.785366][T18926] ? preempt_schedule_common+0x44/0xc0 [ 2099.785396][T18926] ? preempt_schedule_thunk+0x16/0x30 [ 2099.785471][T18926] ? __pfx_try_to_wake_up+0x10/0x10 [ 2099.785505][T18926] ? futex_private_hash_put+0xd5/0x190 [ 2099.785541][T18926] ? __pfx_futex_wake_mark+0x10/0x10 [ 2099.785591][T18926] ? ksys_write+0x190/0x250 [ 2099.785625][T18926] do_futex+0x11a/0x350 [ 2099.785659][T18926] ? __pfx_do_futex+0x10/0x10 [ 2099.785702][T18926] __x64_sys_futex+0x1e0/0x4c0 [ 2099.785738][T18926] ? fput+0x9b/0xd0 [ 2099.785771][T18926] ? __pfx___x64_sys_futex+0x10/0x10 [ 2099.785806][T18926] ? xfd_validate_state+0x61/0x180 [ 2099.785841][T18926] ? __pfx_ksys_write+0x10/0x10 [ 2099.785877][T18926] do_syscall_64+0xcd/0xfa0 [ 2099.785910][T18926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.785935][T18926] RIP: 0033:0x7f25da38f749 [ 2099.785955][T18926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2099.785980][T18926] RSP: 002b:00007f25db29e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2099.786002][T18926] RAX: ffffffffffffffda RBX: 00007f25da5e5fa0 RCX: 00007f25da38f749 [ 2099.786019][T18926] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2099.786034][T18926] RBP: 00007f25da413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2099.786049][T18926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.786065][T18926] R13: 00007f25da5e6038 R14: 00007f25da5e5fa0 R15: 00007ffcb5b350d8 [ 2099.786104][T18926] [ 2102.173207][T18967] FAULT_INJECTION: forcing a failure. [ 2102.173207][T18967] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2102.186322][T18967] CPU: 0 UID: 0 PID: 18967 Comm: syz.5.5866 Not tainted syzkaller #0 PREEMPT(full) [ 2102.186354][T18967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2102.186369][T18967] Call Trace: [ 2102.186377][T18967] [ 2102.186385][T18967] dump_stack_lvl+0x16c/0x1f0 [ 2102.186419][T18967] should_fail_ex+0x512/0x640 [ 2102.186461][T18967] should_fail_futex+0x4c/0x60 [ 2102.186491][T18967] futex_lock_pi_atomic+0x148/0xd50 [ 2102.186535][T18967] futex_lock_pi+0x23f/0x7c0 [ 2102.186578][T18967] ? __pfx_futex_lock_pi+0x10/0x10 [ 2102.186613][T18967] ? preempt_schedule_common+0x44/0xc0 [ 2102.186643][T18967] ? preempt_schedule_thunk+0x16/0x30 [ 2102.186692][T18967] ? __pfx_try_to_wake_up+0x10/0x10 [ 2102.186724][T18967] ? futex_private_hash_put+0xd5/0x190 [ 2102.186760][T18967] ? __pfx_futex_wake_mark+0x10/0x10 [ 2102.186808][T18967] ? ksys_write+0x190/0x250 [ 2102.186840][T18967] do_futex+0x11a/0x350 [ 2102.186873][T18967] ? __pfx_do_futex+0x10/0x10 [ 2102.186914][T18967] __x64_sys_futex+0x1e0/0x4c0 [ 2102.186948][T18967] ? fput+0x9b/0xd0 [ 2102.186979][T18967] ? __pfx___x64_sys_futex+0x10/0x10 [ 2102.187013][T18967] ? xfd_validate_state+0x61/0x180 [ 2102.187047][T18967] ? __pfx_ksys_write+0x10/0x10 [ 2102.187082][T18967] do_syscall_64+0xcd/0xfa0 [ 2102.187114][T18967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2102.187138][T18967] RIP: 0033:0x7fe048d8f749 [ 2102.187157][T18967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2102.187181][T18967] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2102.187203][T18967] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2102.187219][T18967] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2102.187240][T18967] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2102.187255][T18967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2102.187270][T18967] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2102.187301][T18967] [ 2102.963892][T18976] FAULT_INJECTION: forcing a failure. [ 2102.963892][T18976] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2103.048612][T18976] CPU: 0 UID: 0 PID: 18976 Comm: syz.1.5867 Not tainted syzkaller #0 PREEMPT(full) [ 2103.048646][T18976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2103.048661][T18976] Call Trace: [ 2103.048669][T18976] [ 2103.048677][T18976] dump_stack_lvl+0x16c/0x1f0 [ 2103.048712][T18976] should_fail_ex+0x512/0x640 [ 2103.048754][T18976] get_futex_key+0x293/0x1560 [ 2103.048789][T18976] ? __pfx_get_futex_key+0x10/0x10 [ 2103.048820][T18976] ? __mutex_trylock_common+0xe9/0x250 [ 2103.048864][T18976] futex_wake+0xea/0x530 [ 2103.048904][T18976] ? __pfx_futex_wake+0x10/0x10 [ 2103.048940][T18976] ? __lock_acquire+0xb8a/0x1c90 [ 2103.048986][T18976] do_futex+0x1e3/0x350 [ 2103.049019][T18976] ? __pfx_do_futex+0x10/0x10 [ 2103.049050][T18976] ? __might_fault+0xe3/0x190 [ 2103.049083][T18976] mm_release+0x24e/0x300 [ 2103.049111][T18976] do_exit+0x68e/0x2bf0 [ 2103.049151][T18976] ? __pfx_do_exit+0x10/0x10 [ 2103.049183][T18976] ? do_raw_spin_lock+0x12c/0x2b0 [ 2103.049226][T18976] ? find_held_lock+0x2b/0x80 [ 2103.049256][T18976] do_group_exit+0xd3/0x2a0 [ 2103.049293][T18976] get_signal+0x2671/0x26d0 [ 2103.049323][T18976] ? kmem_cache_free+0x2d4/0x6c0 [ 2103.049356][T18976] ? __pfx_get_signal+0x10/0x10 [ 2103.049384][T18976] ? do_futex+0x122/0x350 [ 2103.049416][T18976] ? __pfx_do_futex+0x10/0x10 [ 2103.049455][T18976] arch_do_signal_or_restart+0x8f/0x790 [ 2103.049488][T18976] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2103.049536][T18976] exit_to_user_mode_loop+0x85/0x130 [ 2103.049575][T18976] do_syscall_64+0x426/0xfa0 [ 2103.049608][T18976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2103.049633][T18976] RIP: 0033:0x7f9f9e18f749 [ 2103.049651][T18976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2103.049675][T18976] RSP: 002b:00007f9f9f0b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2103.049698][T18976] RAX: fffffffffffffe00 RBX: 00007f9f9e3e5fa8 RCX: 00007f9f9e18f749 [ 2103.049715][T18976] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f9e3e5fa8 [ 2103.049730][T18976] RBP: 00007f9f9e3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2103.049745][T18976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2103.049760][T18976] R13: 00007f9f9e3e6038 R14: 00007ffd88c1b610 R15: 00007ffd88c1b6f8 [ 2103.049791][T18976] [ 2103.894410][T18993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2103.901032][T18993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2106.314233][T19038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5886'. [ 2106.721651][T19040] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2106.728149][T19040] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2107.975540][ T31] audit: type=1326 audit(4294967723.690:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19062 comm="syz.5.5893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe048d8f749 code=0x0 [ 2108.406796][T19064] zswap: compressor not available [ 2109.106529][T19078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5896'. [ 2109.322725][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2109.329560][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2111.079765][ T31] audit: type=1326 audit(4294967726.790:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19115 comm="syz.5.5907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe048d8f749 code=0x0 [ 2111.458172][T19117] zswap: compressor not available [ 2111.565115][T19122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5909'. [ 2113.404285][T19150] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2113.410880][T19150] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2114.492689][T19167] FAULT_INJECTION: forcing a failure. [ 2114.492689][T19167] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2114.505636][T19167] CPU: 0 UID: 0 PID: 19167 Comm: syz.0.5920 Not tainted syzkaller #0 PREEMPT(full) [ 2114.505668][T19167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2114.505683][T19167] Call Trace: [ 2114.505691][T19167] [ 2114.505700][T19167] dump_stack_lvl+0x16c/0x1f0 [ 2114.505736][T19167] should_fail_ex+0x512/0x640 [ 2114.505779][T19167] should_fail_futex+0x4c/0x60 [ 2114.505812][T19167] futex_lock_pi_atomic+0x101/0xd50 [ 2114.505858][T19167] futex_lock_pi+0x23f/0x7c0 [ 2114.505901][T19167] ? __pfx_futex_lock_pi+0x10/0x10 [ 2114.505939][T19167] ? __futex_wait+0x24b/0x2f0 [ 2114.505965][T19167] ? lockdep_hardirqs_on+0x7c/0x110 [ 2114.506013][T19167] ? futex_private_hash_put+0xd5/0x190 [ 2114.506056][T19167] ? __pfx_futex_wake_mark+0x10/0x10 [ 2114.506106][T19167] ? ksys_write+0x190/0x250 [ 2114.506139][T19167] do_futex+0x11a/0x350 [ 2114.506174][T19167] ? __pfx_do_futex+0x10/0x10 [ 2114.506216][T19167] __x64_sys_futex+0x1e0/0x4c0 [ 2114.506264][T19167] ? fput+0x9b/0xd0 [ 2114.506295][T19167] ? __pfx___x64_sys_futex+0x10/0x10 [ 2114.506329][T19167] ? xfd_validate_state+0x61/0x180 [ 2114.506382][T19167] ? __pfx_ksys_write+0x10/0x10 [ 2114.506419][T19167] do_syscall_64+0xcd/0xfa0 [ 2114.506452][T19167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2114.506490][T19167] RIP: 0033:0x7f25da38f749 [ 2114.506509][T19167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2114.506538][T19167] RSP: 002b:00007f25db29e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2114.506561][T19167] RAX: ffffffffffffffda RBX: 00007f25da5e5fa0 RCX: 00007f25da38f749 [ 2114.506578][T19167] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2114.506595][T19167] RBP: 00007f25da413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2114.506611][T19167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2114.506627][T19167] R13: 00007f25da5e6038 R14: 00007f25da5e5fa0 R15: 00007ffcb5b350d8 [ 2114.506658][T19167] [ 2117.468601][T19211] FAULT_INJECTION: forcing a failure. [ 2117.468601][T19211] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2117.481657][T19211] CPU: 0 UID: 0 PID: 19211 Comm: syz.1.5931 Not tainted syzkaller #0 PREEMPT(full) [ 2117.481686][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2117.481700][T19211] Call Trace: [ 2117.481708][T19211] [ 2117.481716][T19211] dump_stack_lvl+0x16c/0x1f0 [ 2117.481753][T19211] should_fail_ex+0x512/0x640 [ 2117.481792][T19211] should_fail_futex+0x4c/0x60 [ 2117.481821][T19211] futex_lock_pi_atomic+0x148/0xd50 [ 2117.481862][T19211] futex_lock_pi+0x23f/0x7c0 [ 2117.481923][T19211] ? __pfx_futex_lock_pi+0x10/0x10 [ 2117.481957][T19211] ? preempt_schedule_common+0x44/0xc0 [ 2117.481987][T19211] ? preempt_schedule_thunk+0x16/0x30 [ 2117.482036][T19211] ? __pfx_try_to_wake_up+0x10/0x10 [ 2117.482068][T19211] ? futex_private_hash_put+0xd5/0x190 [ 2117.482103][T19211] ? __pfx_futex_wake_mark+0x10/0x10 [ 2117.482150][T19211] ? ksys_write+0x190/0x250 [ 2117.482182][T19211] do_futex+0x11a/0x350 [ 2117.482215][T19211] ? __pfx_do_futex+0x10/0x10 [ 2117.482256][T19211] __x64_sys_futex+0x1e0/0x4c0 [ 2117.482290][T19211] ? fput+0x9b/0xd0 [ 2117.482321][T19211] ? __pfx___x64_sys_futex+0x10/0x10 [ 2117.482355][T19211] ? xfd_validate_state+0x61/0x180 [ 2117.482388][T19211] ? __pfx_ksys_write+0x10/0x10 [ 2117.482423][T19211] do_syscall_64+0xcd/0xfa0 [ 2117.482454][T19211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2117.482478][T19211] RIP: 0033:0x7f9f9e18f749 [ 2117.482497][T19211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2117.482521][T19211] RSP: 002b:00007f9f9f0b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2117.482544][T19211] RAX: ffffffffffffffda RBX: 00007f9f9e3e5fa0 RCX: 00007f9f9e18f749 [ 2117.482561][T19211] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2117.482576][T19211] RBP: 00007f9f9e213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2117.482592][T19211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2117.482607][T19211] R13: 00007f9f9e3e6038 R14: 00007f9f9e3e5fa0 R15: 00007ffd88c1b6f8 [ 2117.482640][T19211] [ 2120.523902][T19258] FAULT_INJECTION: forcing a failure. [ 2120.523902][T19258] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2120.537058][T19258] CPU: 0 UID: 0 PID: 19258 Comm: syz.1.5943 Not tainted syzkaller #0 PREEMPT(full) [ 2120.537090][T19258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2120.537105][T19258] Call Trace: [ 2120.537113][T19258] [ 2120.537121][T19258] dump_stack_lvl+0x16c/0x1f0 [ 2120.537156][T19258] should_fail_ex+0x512/0x640 [ 2120.537197][T19258] should_fail_futex+0x4c/0x60 [ 2120.537228][T19258] futex_lock_pi_atomic+0x101/0xd50 [ 2120.537272][T19258] futex_lock_pi+0x23f/0x7c0 [ 2120.537315][T19258] ? __pfx_futex_lock_pi+0x10/0x10 [ 2120.537352][T19258] ? __futex_wait+0x24b/0x2f0 [ 2120.537396][T19258] ? futex_private_hash_put+0xd5/0x190 [ 2120.537432][T19258] ? __pfx_futex_wake_mark+0x10/0x10 [ 2120.537481][T19258] ? ksys_write+0x190/0x250 [ 2120.537524][T19258] do_futex+0x11a/0x350 [ 2120.537558][T19258] ? __pfx_do_futex+0x10/0x10 [ 2120.537600][T19258] __x64_sys_futex+0x1e0/0x4c0 [ 2120.537636][T19258] ? fput+0x9b/0xd0 [ 2120.537668][T19258] ? __pfx___x64_sys_futex+0x10/0x10 [ 2120.537702][T19258] ? xfd_validate_state+0x61/0x180 [ 2120.537736][T19258] ? __pfx_ksys_write+0x10/0x10 [ 2120.537771][T19258] do_syscall_64+0xcd/0xfa0 [ 2120.537803][T19258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.537828][T19258] RIP: 0033:0x7f9f9e18f749 [ 2120.537847][T19258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2120.537870][T19258] RSP: 002b:00007f9f9f0b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2120.537892][T19258] RAX: ffffffffffffffda RBX: 00007f9f9e3e5fa0 RCX: 00007f9f9e18f749 [ 2120.537908][T19258] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2120.537923][T19258] RBP: 00007f9f9e213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2120.537938][T19258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.537964][T19258] R13: 00007f9f9e3e6038 R14: 00007f9f9e3e5fa0 R15: 00007ffd88c1b6f8 [ 2120.537996][T19258] [ 2124.123764][T19308] FAULT_INJECTION: forcing a failure. [ 2124.123764][T19308] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2124.136739][T19308] CPU: 0 UID: 0 PID: 19308 Comm: syz.1.5955 Not tainted syzkaller #0 PREEMPT(full) [ 2124.136770][T19308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2124.136786][T19308] Call Trace: [ 2124.136794][T19308] [ 2124.136802][T19308] dump_stack_lvl+0x16c/0x1f0 [ 2124.136836][T19308] should_fail_ex+0x512/0x640 [ 2124.136882][T19308] should_fail_futex+0x4c/0x60 [ 2124.136914][T19308] futex_lock_pi_atomic+0x101/0xd50 [ 2124.136958][T19308] futex_lock_pi+0x23f/0x7c0 [ 2124.137000][T19308] ? __pfx_futex_lock_pi+0x10/0x10 [ 2124.137036][T19308] ? __futex_wait+0x24b/0x2f0 [ 2124.137061][T19308] ? lockdep_hardirqs_on+0x7c/0x110 [ 2124.137108][T19308] ? futex_private_hash_put+0xd5/0x190 [ 2124.137148][T19308] ? __pfx_futex_wake_mark+0x10/0x10 [ 2124.137196][T19308] ? ksys_write+0x190/0x250 [ 2124.137228][T19308] do_futex+0x11a/0x350 [ 2124.137261][T19308] ? __pfx_do_futex+0x10/0x10 [ 2124.137302][T19308] __x64_sys_futex+0x1e0/0x4c0 [ 2124.137337][T19308] ? fput+0x9b/0xd0 [ 2124.137368][T19308] ? __pfx___x64_sys_futex+0x10/0x10 [ 2124.137402][T19308] ? xfd_validate_state+0x61/0x180 [ 2124.137435][T19308] ? __pfx_ksys_write+0x10/0x10 [ 2124.137470][T19308] do_syscall_64+0xcd/0xfa0 [ 2124.137502][T19308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.137527][T19308] RIP: 0033:0x7f9f9e18f749 [ 2124.137546][T19308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2124.137570][T19308] RSP: 002b:00007f9f9f0b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2124.137592][T19308] RAX: ffffffffffffffda RBX: 00007f9f9e3e5fa0 RCX: 00007f9f9e18f749 [ 2124.137608][T19308] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2124.137622][T19308] RBP: 00007f9f9e213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2124.137638][T19308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2124.137653][T19308] R13: 00007f9f9e3e6038 R14: 00007f9f9e3e5fa0 R15: 00007ffd88c1b6f8 [ 2124.137684][T19308] [ 2126.146213][T19334] binder: 19333:19334 ioctl c00c6211 0 returned -14 [ 2126.233109][T19334] binder: 19333:19334 ioctl c0306201 200000000000 returned -14 [ 2126.803779][T19348] FAULT_INJECTION: forcing a failure. [ 2126.803779][T19348] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2126.816707][T19348] CPU: 0 UID: 0 PID: 19348 Comm: syz.2.5966 Not tainted syzkaller #0 PREEMPT(full) [ 2126.816738][T19348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2126.816753][T19348] Call Trace: [ 2126.816761][T19348] [ 2126.816770][T19348] dump_stack_lvl+0x16c/0x1f0 [ 2126.816804][T19348] should_fail_ex+0x512/0x640 [ 2126.816846][T19348] should_fail_futex+0x4c/0x60 [ 2126.816877][T19348] futex_lock_pi_atomic+0x101/0xd50 [ 2126.816921][T19348] futex_lock_pi+0x23f/0x7c0 [ 2126.816963][T19348] ? __pfx_futex_lock_pi+0x10/0x10 [ 2126.817001][T19348] ? __futex_wait+0x24b/0x2f0 [ 2126.817055][T19348] ? futex_private_hash_put+0xd5/0x190 [ 2126.817088][T19348] ? __pfx_futex_wake_mark+0x10/0x10 [ 2126.817160][T19348] ? ksys_write+0x190/0x250 [ 2126.817204][T19348] do_futex+0x11a/0x350 [ 2126.817237][T19348] ? __pfx_do_futex+0x10/0x10 [ 2126.817275][T19348] __x64_sys_futex+0x1e0/0x4c0 [ 2126.817307][T19348] ? fput+0x9b/0xd0 [ 2126.817355][T19348] ? __pfx___x64_sys_futex+0x10/0x10 [ 2126.817389][T19348] ? xfd_validate_state+0x61/0x180 [ 2126.817422][T19348] ? __pfx_ksys_write+0x10/0x10 [ 2126.817457][T19348] do_syscall_64+0xcd/0xfa0 [ 2126.817489][T19348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.817514][T19348] RIP: 0033:0x7f6e4318f749 [ 2126.817533][T19348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2126.817556][T19348] RSP: 002b:00007f6e44065038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2126.817578][T19348] RAX: ffffffffffffffda RBX: 00007f6e433e5fa0 RCX: 00007f6e4318f749 [ 2126.817594][T19348] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2126.817609][T19348] RBP: 00007f6e43213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2126.817625][T19348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2126.817639][T19348] R13: 00007f6e433e6038 R14: 00007f6e433e5fa0 R15: 00007fff798c2a28 [ 2126.817671][T19348] [ 2127.514461][ T31] audit: type=1326 audit(4294967743.210:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.2.5968" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e4318f749 code=0x0 [ 2127.906197][T19357] zswap: compressor not available [ 2132.033574][ T31] audit: type=1326 audit(4294967747.750:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.5.5982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe048d8f749 code=0x0 [ 2135.907484][ T31] audit: type=1326 audit(4294967751.610:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.2.5996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e4318f749 code=0x0 [ 2139.830049][ T31] audit: type=1326 audit(4294967755.460:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz.1.6013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f9e18f749 code=0x0 [ 2143.286537][T19593] FAULT_INJECTION: forcing a failure. [ 2143.286537][T19593] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2143.299741][T19593] CPU: 0 UID: 0 PID: 19593 Comm: syz.5.6032 Not tainted syzkaller #0 PREEMPT(full) [ 2143.299771][T19593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2143.299785][T19593] Call Trace: [ 2143.299792][T19593] [ 2143.299800][T19593] dump_stack_lvl+0x16c/0x1f0 [ 2143.299832][T19593] should_fail_ex+0x512/0x640 [ 2143.299871][T19593] should_fail_futex+0x4c/0x60 [ 2143.299900][T19593] futex_lock_pi_atomic+0x148/0xd50 [ 2143.299941][T19593] futex_lock_pi+0x23f/0x7c0 [ 2143.299984][T19593] ? __pfx_futex_lock_pi+0x10/0x10 [ 2143.300017][T19593] ? preempt_schedule_common+0x44/0xc0 [ 2143.300045][T19593] ? preempt_schedule_thunk+0x16/0x30 [ 2143.300090][T19593] ? __pfx_try_to_wake_up+0x10/0x10 [ 2143.300120][T19593] ? futex_private_hash_put+0xd5/0x190 [ 2143.300153][T19593] ? __pfx_futex_wake_mark+0x10/0x10 [ 2143.300198][T19593] ? ksys_write+0x190/0x250 [ 2143.300228][T19593] do_futex+0x11a/0x350 [ 2143.300259][T19593] ? __pfx_do_futex+0x10/0x10 [ 2143.300298][T19593] __x64_sys_futex+0x1e0/0x4c0 [ 2143.300336][T19593] ? fput+0x9b/0xd0 [ 2143.300366][T19593] ? __pfx___x64_sys_futex+0x10/0x10 [ 2143.300398][T19593] ? xfd_validate_state+0x61/0x180 [ 2143.300430][T19593] ? __pfx_ksys_write+0x10/0x10 [ 2143.300473][T19593] do_syscall_64+0xcd/0xfa0 [ 2143.300504][T19593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.300527][T19593] RIP: 0033:0x7fe048d8f749 [ 2143.300545][T19593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2143.300567][T19593] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2143.300588][T19593] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2143.300604][T19593] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2143.300618][T19593] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2143.300632][T19593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2143.300646][T19593] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2143.300675][T19593] [ 2145.365886][ T31] audit: type=1326 audit(4294967761.070:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.6041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25da38f749 code=0x0 [ 2148.039189][ T31] audit: type=1326 audit(4294967763.750:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19680 comm="syz.1.6058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f9e18f749 code=0x0 [ 2151.655371][ T31] audit: type=1326 audit(4294967767.370:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19734 comm="syz.1.6071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f9e18f749 code=0x0 [ 2152.077136][T19736] zswap: compressor not available [ 2156.353807][ T31] audit: type=1326 audit(4294967772.070:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.0.6083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25da38f749 code=0x0 [ 2156.706975][T19790] zswap: compressor not available [ 2161.022049][ T31] audit: type=1326 audit(4294967776.740:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.6094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25da38f749 code=0x0 [ 2161.446739][T19840] zswap: compressor not available [ 2161.952062][T19850] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2163.741694][T19866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6100'. [ 2166.052882][T19891] binder: 19885:19891 ioctl c00c6211 0 returned -14 [ 2166.189099][T19892] binder: 19885:19892 ioctl c0306201 200000000000 returned -14 [ 2166.697110][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6110'. [ 2167.441247][T19912] random: crng reseeded on system resumption [ 2169.706780][T19930] zswap: compressor not available [ 2170.096752][T19942] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2170.621217][T19952] binder: 19948:19952 ioctl c00c6211 0 returned -14 [ 2170.747158][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.753579][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2170.810204][T19954] binder: 19948:19954 ioctl c0306201 200000000000 returned -14 [ 2172.995205][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6125'. [ 2177.029281][T20007] zswap: compressor not available [ 2179.793852][T20056] zswap: compressor not available [ 2185.860552][T20145] zswap: compressor not available [ 2190.842788][T20210] zswap: compressor not available [ 2201.868703][T20329] zswap: compressor not available [ 2205.744461][T20389] netlink: 'syz.1.6220': attribute type 17 has an invalid length. [ 2205.809822][T20389] netlink: 326 bytes leftover after parsing attributes in process `syz.1.6220'. [ 2210.558441][T20436] random: crng reseeded on system resumption [ 2232.186960][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2232.193426][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2232.683567][T20668] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2233.817293][T20680] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2237.018142][T20719] zswap: compressor not available [ 2240.727206][T20757] zswap: compressor not available [ 2240.914151][T20763] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2241.519750][T20774] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2242.447798][T20783] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 2242.570065][T20783] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 2243.395510][T20795] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2243.456578][T20791] binder: BINDER_SET_CONTEXT_MGR already set [ 2243.664978][T20791] binder: 20787:20791 ioctl 4018620d 9 returned -16 [ 2244.734553][T20806] FAULT_INJECTION: forcing a failure. [ 2244.734553][T20806] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2244.747526][T20806] CPU: 0 UID: 0 PID: 20806 Comm: syz.1.6314 Not tainted syzkaller #0 PREEMPT(full) [ 2244.747557][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2244.747571][T20806] Call Trace: [ 2244.747579][T20806] [ 2244.747587][T20806] dump_stack_lvl+0x16c/0x1f0 [ 2244.747625][T20806] should_fail_ex+0x512/0x640 [ 2244.747664][T20806] should_fail_futex+0x4c/0x60 [ 2244.747693][T20806] futex_lock_pi_atomic+0x101/0xd50 [ 2244.747733][T20806] futex_lock_pi+0x23f/0x7c0 [ 2244.747773][T20806] ? __pfx_futex_lock_pi+0x10/0x10 [ 2244.747806][T20806] ? __futex_wait+0x24b/0x2f0 [ 2244.747848][T20806] ? futex_private_hash_put+0xd5/0x190 [ 2244.747881][T20806] ? __pfx_futex_wake_mark+0x10/0x10 [ 2244.747944][T20806] ? ksys_write+0x190/0x250 [ 2244.747976][T20806] do_futex+0x11a/0x350 [ 2244.748010][T20806] ? __pfx_do_futex+0x10/0x10 [ 2244.748051][T20806] __x64_sys_futex+0x1e0/0x4c0 [ 2244.748086][T20806] ? fput+0x9b/0xd0 [ 2244.748118][T20806] ? __pfx___x64_sys_futex+0x10/0x10 [ 2244.748152][T20806] ? xfd_validate_state+0x61/0x180 [ 2244.748186][T20806] ? __pfx_ksys_write+0x10/0x10 [ 2244.748221][T20806] do_syscall_64+0xcd/0xfa0 [ 2244.748253][T20806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2244.748278][T20806] RIP: 0033:0x7f9f9e18f749 [ 2244.748298][T20806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2244.748321][T20806] RSP: 002b:00007f9f9f0b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2244.748344][T20806] RAX: ffffffffffffffda RBX: 00007f9f9e3e5fa0 RCX: 00007f9f9e18f749 [ 2244.748360][T20806] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2244.748374][T20806] RBP: 00007f9f9e213f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2244.748408][T20806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2244.748424][T20806] R13: 00007f9f9e3e6038 R14: 00007f9f9e3e5fa0 R15: 00007ffd88c1b6f8 [ 2244.748456][T20806] [ 2246.792628][T20827] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2246.816435][T20828] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 2246.869396][T20828] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 2246.890635][T20830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2246.908147][T20830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2246.924422][T20830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2246.932404][T20830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2246.939989][T20830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2247.783878][ T3470] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.033467][ T3470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.578009][ T3470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.980199][T20830] Bluetooth: hci4: command tx timeout [ 2249.131759][ T3470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.495144][ T3470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.791629][T20829] chnl_net:caif_netlink_parms(): no params data found [ 2250.149075][ T3470] bridge_slave_1: left allmulticast mode [ 2250.172163][ T3470] bridge_slave_1: left promiscuous mode [ 2250.177966][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.264791][ T3470] bridge_slave_0: left allmulticast mode [ 2250.280868][ T3470] bridge_slave_0: left promiscuous mode [ 2250.300214][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.060542][T20830] Bluetooth: hci4: command tx timeout [ 2252.099727][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2252.142600][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2252.193779][ T3470] bond0 (unregistering): Released all slaves [ 2252.396110][ T3470] ovs_ÿþ: left promiscuous mode [ 2252.525892][T20829] bridge0: port 1(bridge_slave_0) entered blocking state [ 2252.551520][T20829] bridge0: port 1(bridge_slave_0) entered disabled state [ 2252.590269][T20829] bridge_slave_0: entered allmulticast mode [ 2252.643388][T20829] bridge_slave_0: entered promiscuous mode [ 2252.724946][ T3470] ovs_: left promiscuous mode [ 2252.765043][T20829] bridge0: port 2(bridge_slave_1) entered blocking state [ 2252.794894][T20829] bridge0: port 2(bridge_slave_1) entered disabled state [ 2252.850222][T20829] bridge_slave_1: entered allmulticast mode [ 2252.896770][T20829] bridge_slave_1: entered promiscuous mode [ 2253.140719][T20830] Bluetooth: hci4: command tx timeout [ 2253.205218][T20829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2253.446227][T20829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2253.754223][T20829] team0: Port device team_slave_0 added [ 2253.814790][T20829] team0: Port device team_slave_1 added [ 2254.168855][T20829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2254.191890][T20829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2254.277736][T20829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2254.413629][T20829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2254.441633][T20829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2254.533777][T20829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2254.971407][T20829] hsr_slave_0: entered promiscuous mode [ 2255.008303][T20829] hsr_slave_1: entered promiscuous mode [ 2255.220196][T20830] Bluetooth: hci4: command tx timeout [ 2257.285252][T20934] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2257.476512][ T3470] hsr_slave_0: left promiscuous mode [ 2257.515718][ T3470] hsr_slave_1: left promiscuous mode [ 2257.546619][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2257.576012][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2257.599755][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2257.619836][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2257.661400][ T3470] veth0_macvtap: left promiscuous mode [ 2257.674654][ T3470] veth1_vlan: left promiscuous mode [ 2257.687935][ T3470] veth0_vlan: left promiscuous mode [ 2258.454418][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 2258.497829][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 2259.244103][T20829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2259.322614][T20829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2259.356247][T20829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2259.416936][T20829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2260.339215][T20829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2260.675245][T20829] 8021q: adding VLAN 0 to HW filter on device team0 [ 2260.981017][T14161] bridge0: port 1(bridge_slave_0) entered blocking state [ 2260.988206][T14161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2261.107976][T14161] bridge0: port 2(bridge_slave_1) entered blocking state [ 2261.115192][T14161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2261.375158][T20829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2262.638023][T20829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2263.024930][T20829] veth0_vlan: entered promiscuous mode [ 2263.105407][T20829] veth1_vlan: entered promiscuous mode [ 2263.277900][T20829] veth0_macvtap: entered promiscuous mode [ 2263.355691][T20829] veth1_macvtap: entered promiscuous mode [ 2263.789150][T20829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2263.835323][T21020] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92 [ 2263.875421][T20829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2264.078522][T14144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.263771][T14144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.311374][T14144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.395590][T14144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.606224][T21030] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2264.726310][T14161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2264.810147][T14161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2265.246538][T14161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2265.280922][T14161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2266.071789][T21049] binder: 21048:21049 ioctl c018620c 0 returned -22 [ 2266.575760][T21055] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2267.633694][T21070] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2268.995043][T21091] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2271.720443][T21131] FAULT_INJECTION: forcing a failure. [ 2271.720443][T21131] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2271.733341][T21131] CPU: 0 UID: 0 PID: 21131 Comm: syz.5.6369 Not tainted syzkaller #0 PREEMPT(full) [ 2271.733372][T21131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2271.733387][T21131] Call Trace: [ 2271.733396][T21131] [ 2271.733405][T21131] dump_stack_lvl+0x16c/0x1f0 [ 2271.733440][T21131] should_fail_ex+0x512/0x640 [ 2271.733483][T21131] should_fail_futex+0x4c/0x60 [ 2271.733514][T21131] futex_lock_pi_atomic+0x101/0xd50 [ 2271.733557][T21131] futex_lock_pi+0x23f/0x7c0 [ 2271.733600][T21131] ? __pfx_futex_lock_pi+0x10/0x10 [ 2271.733636][T21131] ? __futex_wait+0x24b/0x2f0 [ 2271.733680][T21131] ? futex_private_hash_put+0xd5/0x190 [ 2271.733715][T21131] ? __pfx_futex_wake_mark+0x10/0x10 [ 2271.733763][T21131] ? ksys_write+0x190/0x250 [ 2271.733795][T21131] do_futex+0x11a/0x350 [ 2271.733829][T21131] ? __pfx_do_futex+0x10/0x10 [ 2271.733870][T21131] __x64_sys_futex+0x1e0/0x4c0 [ 2271.733905][T21131] ? fput+0x9b/0xd0 [ 2271.733936][T21131] ? __pfx___x64_sys_futex+0x10/0x10 [ 2271.733970][T21131] ? xfd_validate_state+0x61/0x180 [ 2271.734023][T21131] ? __pfx_ksys_write+0x10/0x10 [ 2271.734060][T21131] do_syscall_64+0xcd/0xfa0 [ 2271.734098][T21131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2271.734125][T21131] RIP: 0033:0x7fe048d8f749 [ 2271.734155][T21131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2271.734193][T21131] RSP: 002b:00007fe049c54038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2271.734216][T21131] RAX: ffffffffffffffda RBX: 00007fe048fe5fa0 RCX: 00007fe048d8f749 [ 2271.734232][T21131] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2271.734247][T21131] RBP: 00007fe048e13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2271.734263][T21131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2271.734277][T21131] R13: 00007fe048fe6038 R14: 00007fe048fe5fa0 R15: 00007ffc02d2b988 [ 2271.734328][T21131] [ 2271.983538][T21134] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2273.914254][T21160] binder: 21156:21160 ioctl c018620c 0 returned -22 [ 2274.262862][T21169] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2276.198284][T21200] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2278.495344][T21227] netlink: 318 bytes leftover after parsing attributes in process `syz.2.6389'. [ 2280.175046][T21253] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2282.893305][T21281] netlink: 318 bytes leftover after parsing attributes in process `syz.0.6402'. [ 2284.053952][T21296] binder: BINDER_SET_CONTEXT_MGR already set [ 2284.099757][T21296] binder: 21290:21296 ioctl 4018620d 9 returned -16 [ 2288.080319][T21361] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2289.367589][T21378] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2290.543847][T21391] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2290.978516][T21398] binder: BINDER_SET_CONTEXT_MGR already set [ 2291.016309][T21398] binder: 21393:21398 ioctl 4018620d 9 returned -16 [ 2291.562976][T21414] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2293.215777][T21433] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2293.626127][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2293.635260][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2296.357328][T21475] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2298.014277][T21500] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2300.028422][T21534] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2302.198306][T21553] input: f¬ as /devices/virtual/input/input93 [ 2305.242923][T21611] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2307.703304][T21647] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2309.277683][T21662] binder: 21661:21662 ioctl c0306201 200000000000 returned -14 [ 2311.199096][T21694] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2313.388334][T21730] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2317.113884][T21797] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2318.227861][T21814] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2319.627974][T21842] netlink: 338 bytes leftover after parsing attributes in process `syz.2.6535'. [ 2326.121198][T21932] FAULT_INJECTION: forcing a failure. [ 2326.121198][T21932] name failslab, interval 1, probability 393216, space 0, times 0 [ 2326.191671][T21932] CPU: 0 UID: 0 PID: 21932 Comm: syz.2.6564 Not tainted syzkaller #0 PREEMPT(full) [ 2326.191704][T21932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2326.191720][T21932] Call Trace: [ 2326.191728][T21932] [ 2326.191738][T21932] dump_stack_lvl+0x16c/0x1f0 [ 2326.191772][T21932] should_fail_ex+0x512/0x640 [ 2326.191809][T21932] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2326.191849][T21932] should_failslab+0xc2/0x120 [ 2326.191882][T21932] __kmalloc_cache_noprof+0x72/0x780 [ 2326.191909][T21932] ? lockdep_init_map_type+0x5c/0x280 [ 2326.191945][T21932] ? nci_hci_allocate+0x45/0x330 [ 2326.191974][T21932] ? debug_mutex_init+0x37/0x70 [ 2326.192019][T21932] ? nci_hci_allocate+0x45/0x330 [ 2326.192048][T21932] nci_hci_allocate+0x45/0x330 [ 2326.192078][T21932] nci_allocate_device+0x26f/0x430 [ 2326.192122][T21932] virtual_ncidev_open+0x6f/0x220 [ 2326.192152][T21932] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2326.192180][T21932] misc_open+0x26d/0x450 [ 2326.192219][T21932] ? __pfx_misc_open+0x10/0x10 [ 2326.192257][T21932] chrdev_open+0x234/0x6a0 [ 2326.192287][T21932] ? __pfx_apparmor_file_open+0x10/0x10 [ 2326.192326][T21932] ? __pfx_chrdev_open+0x10/0x10 [ 2326.192358][T21932] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2326.192393][T21932] do_dentry_open+0x982/0x1530 [ 2326.192423][T21932] ? __pfx_chrdev_open+0x10/0x10 [ 2326.192460][T21932] vfs_open+0x82/0x3f0 [ 2326.192500][T21932] path_openat+0x1de4/0x2cb0 [ 2326.192538][T21932] ? __pfx_path_openat+0x10/0x10 [ 2326.192568][T21932] ? __lock_acquire+0xb8a/0x1c90 [ 2326.192605][T21932] do_filp_open+0x20b/0x470 [ 2326.192633][T21932] ? __pfx_do_filp_open+0x10/0x10 [ 2326.192683][T21932] ? alloc_fd+0x471/0x7d0 [ 2326.192716][T21932] do_sys_openat2+0x11b/0x1d0 [ 2326.192753][T21932] ? __pfx_do_sys_openat2+0x10/0x10 [ 2326.192803][T21932] __x64_sys_openat+0x174/0x210 [ 2326.192846][T21932] ? __pfx___x64_sys_openat+0x10/0x10 [ 2326.192897][T21932] do_syscall_64+0xcd/0xfa0 [ 2326.192931][T21932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.192956][T21932] RIP: 0033:0x7f07ec58f749 [ 2326.192976][T21932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2326.193001][T21932] RSP: 002b:00007f07ed378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2326.193024][T21932] RAX: ffffffffffffffda RBX: 00007f07ec7e5fa0 RCX: 00007f07ec58f749 [ 2326.193041][T21932] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2326.193057][T21932] RBP: 00007f07ec613f91 R08: 0000000000000000 R09: 0000000000000000 [ 2326.193074][T21932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2326.193089][T21932] R13: 00007f07ec7e6038 R14: 00007f07ec7e5fa0 R15: 00007ffc2decd218 [ 2326.193122][T21932] [ 2327.761018][T21967] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2329.879408][T22001] FAULT_INJECTION: forcing a failure. [ 2329.879408][T22001] name failslab, interval 1, probability 393216, space 0, times 0 [ 2329.945978][T22001] CPU: 0 UID: 0 PID: 22001 Comm: syz.1.6572 Not tainted syzkaller #0 PREEMPT(full) [ 2329.946011][T22001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2329.946025][T22001] Call Trace: [ 2329.946033][T22001] [ 2329.946042][T22001] dump_stack_lvl+0x16c/0x1f0 [ 2329.946075][T22001] should_fail_ex+0x512/0x640 [ 2329.946110][T22001] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2329.946136][T22001] should_failslab+0xc2/0x120 [ 2329.946167][T22001] __kmalloc_cache_noprof+0x72/0x780 [ 2329.946189][T22001] ? lockdep_init_map_type+0x5c/0x280 [ 2329.946221][T22001] ? nci_hci_allocate+0x45/0x330 [ 2329.946248][T22001] ? debug_mutex_init+0x37/0x70 [ 2329.946272][T22001] ? nci_hci_allocate+0x45/0x330 [ 2329.946298][T22001] nci_hci_allocate+0x45/0x330 [ 2329.946326][T22001] nci_allocate_device+0x26f/0x430 [ 2329.946365][T22001] virtual_ncidev_open+0x6f/0x220 [ 2329.946391][T22001] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2329.946417][T22001] misc_open+0x26d/0x450 [ 2329.946452][T22001] ? __pfx_misc_open+0x10/0x10 [ 2329.946493][T22001] chrdev_open+0x234/0x6a0 [ 2329.946521][T22001] ? __pfx_apparmor_file_open+0x10/0x10 [ 2329.946556][T22001] ? __pfx_chrdev_open+0x10/0x10 [ 2329.946585][T22001] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2329.946616][T22001] do_dentry_open+0x982/0x1530 [ 2329.946644][T22001] ? __pfx_chrdev_open+0x10/0x10 [ 2329.946677][T22001] vfs_open+0x82/0x3f0 [ 2329.946713][T22001] path_openat+0x1de4/0x2cb0 [ 2329.946747][T22001] ? __pfx_path_openat+0x10/0x10 [ 2329.946774][T22001] ? __lock_acquire+0xb8a/0x1c90 [ 2329.946807][T22001] do_filp_open+0x20b/0x470 [ 2329.946833][T22001] ? __pfx_do_filp_open+0x10/0x10 [ 2329.946878][T22001] ? alloc_fd+0x471/0x7d0 [ 2329.946908][T22001] do_sys_openat2+0x11b/0x1d0 [ 2329.946941][T22001] ? __pfx_do_sys_openat2+0x10/0x10 [ 2329.946986][T22001] __x64_sys_openat+0x174/0x210 [ 2329.947020][T22001] ? __pfx___x64_sys_openat+0x10/0x10 [ 2329.947065][T22001] do_syscall_64+0xcd/0xfa0 [ 2329.947095][T22001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2329.947119][T22001] RIP: 0033:0x7f9f9e18f749 [ 2329.947137][T22001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2329.947158][T22001] RSP: 002b:00007f9f9f0b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2329.947179][T22001] RAX: ffffffffffffffda RBX: 00007f9f9e3e5fa0 RCX: 00007f9f9e18f749 [ 2329.947194][T22001] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2329.947208][T22001] RBP: 00007f9f9e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2329.947222][T22001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2329.947236][T22001] R13: 00007f9f9e3e6038 R14: 00007f9f9e3e5fa0 R15: 00007ffd88c1b6f8 [ 2329.947265][T22001] [ 2331.063456][T22012] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2335.324746][T22073] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2340.293036][T22144] FAULT_INJECTION: forcing a failure. [ 2340.293036][T22144] name failslab, interval 1, probability 393216, space 0, times 0 [ 2340.352191][T22144] CPU: 0 UID: 0 PID: 22144 Comm: syz.0.6608 Not tainted syzkaller #0 PREEMPT(full) [ 2340.352226][T22144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2340.352242][T22144] Call Trace: [ 2340.352251][T22144] [ 2340.352261][T22144] dump_stack_lvl+0x16c/0x1f0 [ 2340.352297][T22144] should_fail_ex+0x512/0x640 [ 2340.352335][T22144] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2340.352365][T22144] should_failslab+0xc2/0x120 [ 2340.352399][T22144] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2340.352425][T22144] ? __pmd_alloc+0xbf/0x8b0 [ 2340.352473][T22144] ? __pmd_alloc+0xbf/0x8b0 [ 2340.352505][T22144] __pmd_alloc+0xbf/0x8b0 [ 2340.352538][T22144] ? find_held_lock+0x2b/0x80 [ 2340.352566][T22144] __handle_mm_fault+0xada/0x2aa0 [ 2340.352614][T22144] ? __pfx___handle_mm_fault+0x10/0x10 [ 2340.352680][T22144] handle_mm_fault+0x589/0xd10 [ 2340.352725][T22144] __get_user_pages+0x54e/0x3530 [ 2340.352769][T22144] ? down_read_killable+0x220/0x4b0 [ 2340.352808][T22144] ? __pfx___get_user_pages+0x10/0x10 [ 2340.352851][T22144] __gup_longterm_locked+0xa92/0x17e0 [ 2340.352891][T22144] ? is_bpf_text_address+0x8a/0x1a0 [ 2340.352930][T22144] ? __pfx___gup_longterm_locked+0x10/0x10 [ 2340.352971][T22144] ? find_held_lock+0x2b/0x80 [ 2340.353004][T22144] gup_fast_fallback+0xee2/0x22a0 [ 2340.353044][T22144] ? stack_trace_save+0x8e/0xc0 [ 2340.353087][T22144] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2340.353121][T22144] ? __x64_sys_futex+0x1e0/0x4c0 [ 2340.353155][T22144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2340.353194][T22144] get_user_pages_fast+0xa7/0xf0 [ 2340.353229][T22144] ? __pfx_get_user_pages_fast+0x10/0x10 [ 2340.353274][T22144] get_futex_key+0x2c6/0x1560 [ 2340.353309][T22144] ? __pfx_get_futex_key+0x10/0x10 [ 2340.353345][T22144] ? kasan_save_track+0x14/0x30 [ 2340.353374][T22144] ? __kasan_kmalloc+0xaa/0xb0 [ 2340.353406][T22144] futex_lock_pi+0x1cc/0x7c0 [ 2340.353455][T22144] ? __pfx_futex_lock_pi+0x10/0x10 [ 2340.353492][T22144] ? __futex_wait+0x24b/0x2f0 [ 2340.353538][T22144] ? futex_private_hash_put+0xd5/0x190 [ 2340.353575][T22144] ? __pfx_futex_wake_mark+0x10/0x10 [ 2340.353624][T22144] ? ksys_write+0x190/0x250 [ 2340.353658][T22144] do_futex+0x11a/0x350 [ 2340.353693][T22144] ? __pfx_do_futex+0x10/0x10 [ 2340.353736][T22144] __x64_sys_futex+0x1e0/0x4c0 [ 2340.353772][T22144] ? fput+0x9b/0xd0 [ 2340.353804][T22144] ? __pfx___x64_sys_futex+0x10/0x10 [ 2340.353839][T22144] ? xfd_validate_state+0x61/0x180 [ 2340.353875][T22144] ? __pfx_ksys_write+0x10/0x10 [ 2340.353911][T22144] do_syscall_64+0xcd/0xfa0 [ 2340.353944][T22144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2340.353969][T22144] RIP: 0033:0x7f25da38f749 [ 2340.353989][T22144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2340.354013][T22144] RSP: 002b:00007f25db29e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2340.354036][T22144] RAX: ffffffffffffffda RBX: 00007f25da5e5fa0 RCX: 00007f25da38f749 [ 2340.354053][T22144] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2340.354067][T22144] RBP: 00007f25da413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2340.354083][T22144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2340.354099][T22144] R13: 00007f25da5e6038 R14: 00007f25da5e5fa0 R15: 00007ffcb5b350d8 [ 2340.354131][T22144] [ 2347.479407][T22259] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2351.029179][T22310] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2352.389483][T22338] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2352.395985][T22338] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2354.035548][T22372] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2355.091744][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2355.099507][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2358.303387][T22429] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2363.608972][T22509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6695'. [ 2366.152318][T22540] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2367.049759][T22555] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2367.056278][T22555] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2372.318052][T22640] FAULT_INJECTION: forcing a failure. [ 2372.318052][T22640] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2372.331164][T22640] CPU: 0 UID: 0 PID: 22640 Comm: syz.0.6728 Not tainted syzkaller #0 PREEMPT(full) [ 2372.331194][T22640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2372.331208][T22640] Call Trace: [ 2372.331215][T22640] [ 2372.331224][T22640] dump_stack_lvl+0x16c/0x1f0 [ 2372.331257][T22640] should_fail_ex+0x512/0x640 [ 2372.331306][T22640] should_fail_futex+0x4c/0x60 [ 2372.331333][T22640] futex_lock_pi_atomic+0x101/0xd50 [ 2372.331372][T22640] futex_lock_pi+0x23f/0x7c0 [ 2372.331428][T22640] ? __pfx_futex_lock_pi+0x10/0x10 [ 2372.331460][T22640] ? __futex_wait+0x24b/0x2f0 [ 2372.331499][T22640] ? futex_private_hash_put+0xd5/0x190 [ 2372.331530][T22640] ? __pfx_futex_wake_mark+0x10/0x10 [ 2372.331572][T22640] ? ksys_write+0x190/0x250 [ 2372.331601][T22640] do_futex+0x11a/0x350 [ 2372.331630][T22640] ? __pfx_do_futex+0x10/0x10 [ 2372.331666][T22640] __x64_sys_futex+0x1e0/0x4c0 [ 2372.331698][T22640] ? fput+0x9b/0xd0 [ 2372.331725][T22640] ? __pfx___x64_sys_futex+0x10/0x10 [ 2372.331755][T22640] ? xfd_validate_state+0x61/0x180 [ 2372.331785][T22640] ? __pfx_ksys_write+0x10/0x10 [ 2372.331832][T22640] do_syscall_64+0xcd/0xfa0 [ 2372.331862][T22640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2372.331886][T22640] RIP: 0033:0x7f25da38f749 [ 2372.331904][T22640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2372.331926][T22640] RSP: 002b:00007f25db29e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2372.331947][T22640] RAX: ffffffffffffffda RBX: 00007f25da5e5fa0 RCX: 00007f25da38f749 [ 2372.331964][T22640] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 2372.331978][T22640] RBP: 00007f25da413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 2372.332009][T22640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2372.332024][T22640] R13: 00007f25da5e6038 R14: 00007f25da5e5fa0 R15: 00007ffcb5b350d8 [ 2372.332056][T22640] [ 2372.778469][T13175] Bluetooth: hci4: command 0x0406 tx timeout [ 2373.827535][T22655] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2374.114553][T22664] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2376.012358][T22690] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2386.845530][T22868] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2386.930784][T22869] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1919116591.1718907001), cmd(1) [ 2390.170261][T22919] binder: 22918:22919 ioctl c0306201 200000000000 returned -14 [ 2405.671228][T23085] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2410.202273][T23133] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2413.760247][T23163] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2416.504460][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2416.515347][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2417.712738][T23212] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2422.433919][T23263] binder: BINDER_SET_CONTEXT_MGR already set [ 2422.473131][T23263] binder: 23260:23263 ioctl 4018620d 9 returned -16 [ 2423.211567][T23280] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2425.186569][T23301] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2427.243995][T23337] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2427.905673][T23342] binder: BINDER_SET_CONTEXT_MGR already set [ 2427.951317][T23342] binder: 23339:23342 ioctl 4018620d 9 returned -16 [ 2430.025938][T23379] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2432.966135][T23413] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2437.427828][T23477] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2442.910486][T23557] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2443.581755][T23565] binder: BINDER_SET_CONTEXT_MGR already set [ 2443.633997][T23565] binder: 23555:23565 ioctl 4018620d 9 returned -16 [ 2447.803039][T23617] binder: BINDER_SET_CONTEXT_MGR already set [ 2447.843577][T23617] binder: 23615:23617 ioctl 4018620d 9 returned -16 [ 2448.497940][T23629] binder: BINDER_SET_CONTEXT_MGR already set [ 2448.546825][T23629] binder: 23626:23629 ioctl 4018620d 9 returned -16 [ 2448.950117][T23639] binder: BINDER_SET_CONTEXT_MGR already set [ 2448.964335][T23639] binder: 23634:23639 ioctl 4018620d 9 returned -16 [ 2454.989984][T23700] binder: BINDER_SET_CONTEXT_MGR already set [ 2455.067125][T23700] binder: 23694:23700 ioctl 4018620d 9 returned -16 [ 2455.990333][T23716] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2457.618682][T23730] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2459.182381][T23742] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2462.727249][T23779] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2464.981136][T23814] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2465.051146][T23806] binder: BINDER_SET_CONTEXT_MGR already set [ 2465.057172][T23806] binder: 23804:23806 ioctl 4018620d 9 returned -16 [ 2470.732583][T23889] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2471.570014][T23903] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2474.140560][T23940] netlink: 'syz.5.7008': attribute type 17 has an invalid length. [ 2474.182062][T23940] netlink: 326 bytes leftover after parsing attributes in process `syz.5.7008'. [ 2476.278437][T23966] binder: BINDER_SET_CONTEXT_MGR already set [ 2476.304804][T23966] binder: 23963:23966 ioctl 4018620d 9 returned -16 [ 2477.960242][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2477.966601][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2478.425375][T24004] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2481.001128][T24041] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2482.520210][T24061] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2483.308465][T24077] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2483.630931][T24080] binder: BINDER_SET_CONTEXT_MGR already set [ 2483.657183][T24080] binder: 24075:24080 ioctl 4018620d 9 returned -16 [ 2485.338666][T20830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2485.354167][T20830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2485.364615][T20830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2485.373462][T20830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2485.395040][T20830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2485.837482][T14161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.163450][T14161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.311836][T14161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.465441][T14161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2487.087018][T14161] bridge_slave_1: left allmulticast mode [ 2487.135141][T14161] bridge_slave_1: left promiscuous mode [ 2487.162840][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 2487.205020][T14161] bridge_slave_0: left allmulticast mode [ 2487.237531][T14161] bridge_slave_0: left promiscuous mode [ 2487.269646][T14161] bridge0: port 1(bridge_slave_0) entered disabled state [ 2487.464628][T20830] Bluetooth: hci1: command tx timeout [ 2488.905801][T14161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2488.948173][T14161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2488.986780][T14161] bond0 (unregistering): Released all slaves [ 2489.093056][T14161] ovs_ÿþ: left promiscuous mode [ 2489.198135][T24100] chnl_net:caif_netlink_parms(): no params data found [ 2489.540299][T20830] Bluetooth: hci1: command tx timeout [ 2489.914970][T24100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2489.941215][T24100] bridge0: port 1(bridge_slave_0) entered disabled state [ 2489.972623][T24100] bridge_slave_0: entered allmulticast mode [ 2489.995701][T24162] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2490.016650][T24100] bridge_slave_0: entered promiscuous mode [ 2490.050770][T24100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2490.083319][T24100] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.131296][T24100] bridge_slave_1: entered allmulticast mode [ 2490.164868][T24100] bridge_slave_1: entered promiscuous mode [ 2490.445834][T24100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2490.565252][T24100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2490.989440][T24100] team0: Port device team_slave_0 added [ 2491.027340][T24100] team0: Port device team_slave_1 added [ 2491.517710][T24100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2491.550102][T24100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2491.621611][T20830] Bluetooth: hci1: command tx timeout [ 2491.638972][T24100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2491.670053][T24100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2491.684980][T24100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2491.715494][T24100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2491.956690][T24100] hsr_slave_0: entered promiscuous mode [ 2491.987319][T24100] hsr_slave_1: entered promiscuous mode [ 2492.012424][T24100] debugfs: 'hsr0' already exists in 'hsr' [ 2492.036073][T24100] Cannot create hsr debugfs directory [ 2492.430898][T24195] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2493.701636][T20830] Bluetooth: hci1: command tx timeout [ 2495.690315][T24243] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2496.161914][T24100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2496.229689][T24100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2496.394161][T24100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2496.574825][T24100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2496.645808][T24260] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2498.104850][T24100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2498.254561][T24100] 8021q: adding VLAN 0 to HW filter on device team0 [ 2498.508571][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 2498.515766][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2498.584845][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 2498.592039][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2499.411139][T14161] hsr_slave_0: left promiscuous mode [ 2499.437064][T14161] hsr_slave_1: left promiscuous mode [ 2499.471984][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2499.516300][T14161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2499.577196][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2499.610033][T14161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2499.709145][T14161] veth0_macvtap: left promiscuous mode [ 2499.775924][T14161] veth1_vlan: left promiscuous mode [ 2500.807343][T24330] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2501.715744][T14161] team0 (unregistering): Port device team_slave_1 removed [ 2501.755569][T14161] team0 (unregistering): Port device team_slave_0 removed [ 2502.387776][T24345] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2502.564821][T24100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2504.136584][T24100] veth0_vlan: entered promiscuous mode [ 2504.323497][T24100] veth1_vlan: entered promiscuous mode [ 2504.523716][T24100] veth0_macvtap: entered promiscuous mode [ 2504.571730][T24100] veth1_macvtap: entered promiscuous mode [ 2504.912407][T24100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2505.049309][T24100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2505.120070][ T3470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2505.135585][T14167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2505.212331][T14167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2505.252935][T14167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2505.713560][T14163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2505.723945][T24390] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2505.761515][T14163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2506.219219][T14161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2506.267035][T14161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2510.194492][T24462] netlink: 'syz.0.7093': attribute type 17 has an invalid length. [ 2510.270128][T24462] netlink: 326 bytes leftover after parsing attributes in process `syz.0.7093'. [ 2512.098233][T24494] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2513.978074][T24516] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2514.837743][T24532] netlink: 'syz.0.7108': attribute type 17 has an invalid length. [ 2514.904474][T24532] netlink: 326 bytes leftover after parsing attributes in process `syz.0.7108'. [ 2515.738638][T24545] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2516.202148][T24553] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2519.176961][T24600] netlink: 'syz.5.7121': attribute type 17 has an invalid length. [ 2519.286286][T24600] netlink: 326 bytes leftover after parsing attributes in process `syz.5.7121'. [ 2521.015423][T24621] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2521.991327][T24638] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2522.470317][T24643] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2523.184098][T24650] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2523.650563][T24659] netlink: 'syz.0.7135': attribute type 17 has an invalid length. [ 2523.692495][T24659] netlink: 326 bytes leftover after parsing attributes in process `syz.0.7135'. [ 2524.825109][T24673] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2525.437756][T24687] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2526.203990][T24690] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2527.491538][T24712] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2528.312623][T24727] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2529.803455][T24748] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2532.391504][T24778] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2533.079517][T24793] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2533.834771][T24805] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1919116591.1718907001), cmd(1) [ 2534.713089][T24819] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2536.237833][T24840] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2536.377011][T24845] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1919116591.1718907001), cmd(1) [ 2537.954519][T24872] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 2538.697068][T24877] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2539.326264][T24884] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2539.385313][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2539.392923][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2541.214523][T24911] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2543.558146][T24946] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2543.640877][T24946] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1919116591.1718907001), cmd(1) [ 2544.204791][T24959] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1919116591.1718907001), cmd(1) [ 2546.437922][T24994] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2547.558528][T25009] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2549.770787][T25034] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2553.813435][T25096] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2556.296486][T25136] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2557.630146][T25153] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2558.484101][T25165] netlink: 'syz.0.7243': attribute type 17 has an invalid length. [ 2558.631653][T25165] netlink: 326 bytes leftover after parsing attributes in process `syz.0.7243'. [ 2560.855108][T25201] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2561.228872][T25211] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2563.419882][T25234] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2563.502855][T25235] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2565.473349][T25256] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2566.901693][T25281] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2567.078577][T25287] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2568.892262][T13175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2568.903130][T25305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2568.913902][T25305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2568.926020][T25305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2568.935592][T25305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2569.553971][T25309] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2569.675076][T14167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2569.698555][T25313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7273'. [ 2569.952031][T25313] openvswitch: ovs_ÿþ: Dropping previously announced user features [ 2570.054284][T25313] FAULT_INJECTION: forcing a failure. [ 2570.054284][T25313] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2570.136370][T14167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2570.202619][T25313] CPU: 0 UID: 0 PID: 25313 Comm: syz.1.7273 Not tainted syzkaller #0 PREEMPT(full) [ 2570.202664][T25313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2570.202680][T25313] Call Trace: [ 2570.202688][T25313] [ 2570.202697][T25313] dump_stack_lvl+0x16c/0x1f0 [ 2570.202733][T25313] should_fail_ex+0x512/0x640 [ 2570.202775][T25313] get_futex_key+0x1d0/0x1560 [ 2570.202811][T25313] ? __pfx_get_futex_key+0x10/0x10 [ 2570.202841][T25313] ? find_held_lock+0x2b/0x80 [ 2570.202869][T25313] ? __lock_acquire+0x622/0x1c90 [ 2570.202906][T25313] futex_wake+0xea/0x530 [ 2570.202947][T25313] ? __pfx_futex_wake+0x10/0x10 [ 2570.202990][T25313] ? task_mm_cid_work+0x37b/0x900 [ 2570.203024][T25313] do_futex+0x1e3/0x350 [ 2570.203058][T25313] ? __pfx_do_futex+0x10/0x10 [ 2570.203091][T25313] ? __pfx_task_mm_cid_work+0x10/0x10 [ 2570.203116][T25313] ? __pfx___might_resched+0x10/0x10 [ 2570.203145][T25313] __x64_sys_futex+0x1e0/0x4c0 [ 2570.203180][T25313] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 2570.203211][T25313] ? __pfx___x64_sys_futex+0x10/0x10 [ 2570.203245][T25313] ? xfd_validate_state+0x61/0x180 [ 2570.203297][T25313] do_syscall_64+0xcd/0xfa0 [ 2570.203326][T25313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2570.203347][T25313] RIP: 0033:0x7f9f9e18f749 [ 2570.203365][T25313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2570.203387][T25313] RSP: 002b:00007f9f9f0b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2570.203410][T25313] RAX: ffffffffffffffda RBX: 00007f9f9e3e5fa8 RCX: 00007f9f9e18f749 [ 2570.203425][T25313] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f9e3e5fac [ 2570.203440][T25313] RBP: 00007f9f9e3e5fa0 R08: 00007f9f9f0b7000 R09: 0000000000000000 [ 2570.203454][T25313] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 2570.203469][T25313] R13: 00007f9f9e3e6038 R14: 00007ffd88c1b610 R15: 00007ffd88c1b6f8 [ 2570.203504][T25313] [ 2570.658862][T14167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2570.682367][T25329] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2570.725276][T25303] chnl_net:caif_netlink_parms(): no params data found [ 2570.979923][T25305] Bluetooth: hci3: command tx timeout [ 2571.348037][T25303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2571.375223][T25303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2571.407189][T25303] bridge_slave_0: entered allmulticast mode [ 2571.435828][T25303] bridge_slave_0: entered promiscuous mode [ 2571.505632][T25303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2571.535547][T25303] bridge0: port 2(bridge_slave_1) entered disabled state [ 2571.564950][T25303] bridge_slave_1: entered allmulticast mode [ 2571.597721][T25303] bridge_slave_1: entered promiscuous mode [ 2571.698804][T14167] bridge_slave_1: left allmulticast mode [ 2571.723644][T14167] bridge_slave_1: left promiscuous mode [ 2571.729401][T14167] bridge0: port 2(bridge_slave_1) entered disabled state [ 2571.797672][T14167] bridge_slave_0: left allmulticast mode [ 2571.847864][T14167] bridge_slave_0: left promiscuous mode [ 2571.882110][T14167] bridge0: port 1(bridge_slave_0) entered disabled state [ 2573.068108][T25305] Bluetooth: hci3: command tx timeout [ 2573.697423][T14167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2573.713907][T14167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2573.727951][T14167] bond0 (unregistering): Released all slaves [ 2573.897008][T25303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2573.918086][T14167] ovs_: left promiscuous mode [ 2573.975199][T25303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2574.124684][T14167] tipc: Left network mode [ 2574.209240][T25303] team0: Port device team_slave_0 added [ 2574.263947][T25303] team0: Port device team_slave_1 added [ 2574.276842][T25377] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2574.404753][T25303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2574.432274][T25303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2574.527510][T25303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2574.646356][T25303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2574.677278][T25303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2574.770612][T25303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2575.139917][T25305] Bluetooth: hci3: command tx timeout [ 2575.716435][T25391] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2575.781123][T25303] hsr_slave_0: entered promiscuous mode [ 2575.821174][T25303] hsr_slave_1: entered promiscuous mode [ 2575.827465][T25303] debugfs: 'hsr0' already exists in 'hsr' [ 2575.884175][T25303] Cannot create hsr debugfs directory [ 2577.219926][T25305] Bluetooth: hci3: command tx timeout [ 2577.874889][T25424] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2577.921078][T25426] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 2578.595951][T25303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2578.858637][T25303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2578.921408][T25303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2579.201874][T25303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2580.637780][T25463] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2580.814414][T25303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2581.131912][T25303] 8021q: adding VLAN 0 to HW filter on device team0 [ 2581.269551][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 2581.276786][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2581.374130][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 2581.381323][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2583.373712][T25303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2583.738255][T25303] veth0_vlan: entered promiscuous mode [ 2583.846933][T25303] veth1_vlan: entered promiscuous mode [ 2584.133261][T25506] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 2584.171048][T25303] veth0_macvtap: entered promiscuous mode [ 2584.234988][T25303] veth1_macvtap: entered promiscuous mode [ 2584.386994][T25303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2584.533826][T25303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2584.683420][T14163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.730750][T14163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.739589][T14163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.828383][T14163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2585.249691][T25515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2585.413650][T14163] ================================================================== [ 2585.421759][T14163] BUG: KASAN: slab-use-after-free in __mutex_lock+0xc6d/0x1060 [ 2585.429330][T14163] Read of size 8 at addr ffff88802907f4b0 by task kworker/u8:27/14163 [ 2585.437575][T14163] [ 2585.439906][T14163] CPU: 0 UID: 0 PID: 14163 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 2585.439934][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2585.439951][T14163] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 2585.439990][T14163] Call Trace: [ 2585.440000][T14163] [ 2585.440009][T14163] dump_stack_lvl+0x116/0x1f0 [ 2585.440040][T14163] print_report+0xcd/0x630 [ 2585.440072][T14163] ? __virt_addr_valid+0x81/0x610 [ 2585.440104][T14163] ? __phys_addr+0xe8/0x180 [ 2585.440136][T14163] ? __mutex_lock+0xc6d/0x1060 [ 2585.440167][T14163] kasan_report+0xe0/0x110 [ 2585.440200][T14163] ? __mutex_lock+0xc6d/0x1060 [ 2585.440235][T14163] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 2585.440269][T14163] __mutex_lock+0xc6d/0x1060 [ 2585.440301][T14163] ? udp_tunnel_nic_device_sync_work+0x27/0xa10 [ 2585.440344][T14163] ? __pfx___mutex_lock+0x10/0x10 [ 2585.440380][T14163] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2585.440409][T14163] ? debug_object_deactivate+0x1ec/0x3a0 [ 2585.440443][T14163] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 2585.440477][T14163] ? rtnl_lock+0x9/0x20 [ 2585.440509][T14163] udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 2585.440547][T14163] ? rcu_is_watching+0x12/0xc0 [ 2585.440575][T14163] process_one_work+0x9cf/0x1b70 [ 2585.440619][T14163] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 2585.440653][T14163] ? __pfx_process_one_work+0x10/0x10 [ 2585.440697][T14163] ? assign_work+0x1a0/0x250 [ 2585.440733][T14163] worker_thread+0x6c8/0xf10 [ 2585.440759][T14163] ? __kthread_parkme+0x19e/0x250 [ 2585.440790][T14163] ? __pfx_worker_thread+0x10/0x10 [ 2585.440811][T14163] kthread+0x3c5/0x780 [ 2585.440847][T14163] ? __pfx_kthread+0x10/0x10 [ 2585.440883][T14163] ? rcu_is_watching+0x12/0xc0 [ 2585.440909][T14163] ? __pfx_kthread+0x10/0x10 [ 2585.440944][T14163] ret_from_fork+0x675/0x7d0 [ 2585.440980][T14163] ? __pfx_kthread+0x10/0x10 [ 2585.441016][T14163] ret_from_fork_asm+0x1a/0x30 [ 2585.441058][T14163] [ 2585.441066][T14163] [ 2585.634575][T14163] Allocated by task 25303: [ 2585.638990][T14163] kasan_save_stack+0x33/0x60 [ 2585.643679][T14163] kasan_save_track+0x14/0x30 [ 2585.648370][T14163] __kasan_kmalloc+0xaa/0xb0 [ 2585.653081][T14163] __kmalloc_noprof+0x32f/0x880 [ 2585.658037][T14163] udp_tunnel_nic_netdevice_event+0x1298/0x1e30 [ 2585.664299][T14163] notifier_call_chain+0xbc/0x410 [ 2585.669342][T14163] call_netdevice_notifiers_info+0xbe/0x140 [ 2585.675334][T14163] register_netdevice+0x182e/0x2270 [ 2585.680539][T14163] nsim_create+0xdd5/0x13f0 [ 2585.685055][T14163] __nsim_dev_port_add+0x435/0x7d0 [ 2585.690602][T14163] nsim_drv_probe+0xe40/0x1520 [ 2585.695455][T14163] really_probe+0x241/0xa90 [ 2585.699966][T14163] __driver_probe_device+0x1de/0x440 [ 2585.705266][T14163] driver_probe_device+0x4c/0x1b0 [ 2585.710308][T14163] __device_attach_driver+0x1df/0x310 [ 2585.715702][T14163] bus_for_each_drv+0x159/0x1e0 [ 2585.720580][T14163] __device_attach+0x1e4/0x4b0 [ 2585.725393][T14163] bus_probe_device+0x17f/0x1c0 [ 2585.730280][T14163] device_add+0x1148/0x1aa0 [ 2585.734877][T14163] new_device_store+0x41b/0x730 [ 2585.739736][T14163] bus_attr_store+0x74/0xb0 [ 2585.744244][T14163] sysfs_kf_write+0xf2/0x150 [ 2585.748843][T14163] kernfs_fop_write_iter+0x3af/0x570 [ 2585.754132][T14163] vfs_write+0x7d3/0x11d0 [ 2585.758471][T14163] ksys_write+0x12a/0x250 [ 2585.762805][T14163] do_syscall_64+0xcd/0xfa0 [ 2585.767319][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2585.773215][T14163] [ 2585.775624][T14163] Freed by task 25515: [ 2585.779686][T14163] kasan_save_stack+0x33/0x60 [ 2585.784425][T14163] kasan_save_track+0x14/0x30 [ 2585.789113][T14163] __kasan_save_free_info+0x3b/0x60 [ 2585.794318][T14163] __kasan_slab_free+0x5f/0x80 [ 2585.799113][T14163] kfree+0x2b8/0x6d0 [ 2585.803097][T14163] udp_tunnel_nic_netdevice_event+0xc3f/0x1e30 [ 2585.809270][T14163] notifier_call_chain+0xbc/0x410 [ 2585.814314][T14163] call_netdevice_notifiers_info+0xbe/0x140 [ 2585.820238][T14163] unregister_netdevice_many_notify+0xf5c/0x25c0 [ 2585.826582][T14163] unregister_netdevice_queue+0x305/0x3f0 [ 2585.832401][T14163] nsim_destroy+0x1a0/0x800 [ 2585.836921][T14163] __nsim_dev_port_del+0x189/0x240 [ 2585.842098][T14163] nsim_drv_port_del+0x118/0x180 [ 2585.847043][T14163] del_port_store+0x129/0x170 [ 2585.851732][T14163] dev_attr_store+0x58/0x80 [ 2585.856252][T14163] sysfs_kf_write+0xf2/0x150 [ 2585.860855][T14163] kernfs_fop_write_iter+0x3af/0x570 [ 2585.866144][T14163] vfs_write+0x7d3/0x11d0 [ 2585.870478][T14163] ksys_write+0x12a/0x250 [ 2585.874812][T14163] do_syscall_64+0xcd/0xfa0 [ 2585.879327][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2585.885228][T14163] [ 2585.887551][T14163] Last potentially related work creation: [ 2585.893262][T14163] kasan_save_stack+0x33/0x60 [ 2585.897951][T14163] kasan_record_aux_stack+0xa7/0xc0 [ 2585.903150][T14163] insert_work+0x36/0x230 [ 2585.907499][T14163] __queue_work+0x3f8/0x1160 [ 2585.912090][T14163] queue_work_on+0x1a4/0x1f0 [ 2585.916682][T14163] __udp_tunnel_nic_add_port+0x6f8/0xde0 [ 2585.922328][T14163] udp_tunnel_notify_add_rx_port+0x254/0x470 [ 2585.928318][T14163] geneve_sock_add+0x675/0x930 [ 2585.933091][T14163] geneve_open+0xe2/0x1c0 [ 2585.937424][T14163] __dev_open+0x2e7/0x7c0 [ 2585.941765][T14163] __dev_change_flags+0x55d/0x720 [ 2585.946882][T14163] netif_change_flags+0x8d/0x160 [ 2585.951827][T14163] do_setlink.constprop.0+0xb53/0x4380 [ 2585.957384][T14163] rtnl_newlink+0x1446/0x2000 [ 2585.962075][T14163] rtnetlink_rcv_msg+0x95e/0xe90 [ 2585.967105][T14163] netlink_rcv_skb+0x158/0x420 [ 2585.971963][T14163] netlink_unicast+0x5aa/0x870 [ 2585.976753][T14163] netlink_sendmsg+0x8c8/0xdd0 [ 2585.981539][T14163] __sys_sendto+0x4a3/0x520 [ 2585.986061][T14163] __x64_sys_sendto+0xe0/0x1c0 [ 2585.990857][T14163] do_syscall_64+0xcd/0xfa0 [ 2585.995373][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2586.001359][T14163] [ 2586.003677][T14163] Second to last potentially related work creation: [ 2586.010254][T14163] kasan_save_stack+0x33/0x60 [ 2586.014945][T14163] kasan_record_aux_stack+0xa7/0xc0 [ 2586.020147][T14163] insert_work+0x36/0x230 [ 2586.024495][T14163] __queue_work+0x97e/0x1160 [ 2586.029090][T14163] queue_work_on+0x1a4/0x1f0 [ 2586.033682][T14163] __udp_tunnel_nic_add_port+0x6f8/0xde0 [ 2586.039327][T14163] udp_tunnel_notify_add_rx_port+0x254/0x470 [ 2586.045317][T14163] geneve_sock_add+0x675/0x930 [ 2586.050087][T14163] geneve_open+0xad/0x1c0 [ 2586.054422][T14163] __dev_open+0x2e7/0x7c0 [ 2586.058757][T14163] __dev_change_flags+0x55d/0x720 [ 2586.063782][T14163] netif_change_flags+0x8d/0x160 [ 2586.068724][T14163] do_setlink.constprop.0+0xb53/0x4380 [ 2586.074188][T14163] rtnl_newlink+0x1446/0x2000 [ 2586.078869][T14163] rtnetlink_rcv_msg+0x95e/0xe90 [ 2586.083810][T14163] netlink_rcv_skb+0x158/0x420 [ 2586.088592][T14163] netlink_unicast+0x5aa/0x870 [ 2586.093374][T14163] netlink_sendmsg+0x8c8/0xdd0 [ 2586.098147][T14163] __sys_sendto+0x4a3/0x520 [ 2586.102668][T14163] __x64_sys_sendto+0xe0/0x1c0 [ 2586.107449][T14163] do_syscall_64+0xcd/0xfa0 [ 2586.111972][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2586.117873][T14163] [ 2586.120193][T14163] The buggy address belongs to the object at ffff88802907f400 [ 2586.120193][T14163] which belongs to the cache kmalloc-256 of size 256 [ 2586.134270][T14163] The buggy address is located 176 bytes inside of [ 2586.134270][T14163] freed 256-byte region [ffff88802907f400, ffff88802907f500) [ 2586.148069][T14163] [ 2586.150478][T14163] The buggy address belongs to the physical page: [ 2586.156898][T14163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2907e [ 2586.165658][T14163] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2586.174155][T14163] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2586.181715][T14163] page_type: f5(slab) [ 2586.185706][T14163] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 2586.194308][T14163] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2586.202897][T14163] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 2586.211574][T14163] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2586.220249][T14163] head: 00fff00000000001 ffffea0000a41f81 00000000ffffffff 00000000ffffffff [ 2586.229186][T14163] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 2586.237849][T14163] page dumped because: kasan: bad access detected [ 2586.244259][T14163] page_owner tracks the page as allocated [ 2586.249969][T14163] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21441086800, free_ts 0 [ 2586.268311][T14163] post_alloc_hook+0x1af/0x220 [ 2586.273099][T14163] get_page_from_freelist+0x10a3/0x3a30 [ 2586.278649][T14163] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 2586.284595][T14163] alloc_pages_mpol+0x1fb/0x550 [ 2586.289470][T14163] new_slab+0x24a/0x360 [ 2586.293647][T14163] ___slab_alloc+0xd79/0x1a50 [ 2586.298346][T14163] __slab_alloc.constprop.0+0x63/0x110 [ 2586.303832][T14163] __kmalloc_cache_noprof+0x477/0x780 [ 2586.309209][T14163] usb_string+0x116/0x670 [ 2586.313573][T14163] usb_cache_string+0x80/0x150 [ 2586.318352][T14163] usb_new_device+0x169/0x1a60 [ 2586.323118][T14163] register_root_hub+0x299/0x730 [ 2586.328061][T14163] usb_add_hcd+0xaf2/0x1730 [ 2586.332572][T14163] dummy_hcd_probe+0x15c/0x380 [ 2586.337527][T14163] platform_probe+0x106/0x1d0 [ 2586.342207][T14163] really_probe+0x241/0xa90 [ 2586.346721][T14163] page_owner free stack trace missing [ 2586.352082][T14163] [ 2586.354399][T14163] Memory state around the buggy address: [ 2586.360023][T14163] ffff88802907f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2586.368083][T14163] ffff88802907f400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2586.376144][T14163] >ffff88802907f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2586.384201][T14163] ^ [ 2586.389827][T14163] ffff88802907f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2586.397885][T14163] ffff88802907f580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2586.405952][T14163] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2587.681268][T14163] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2587.688530][T14163] CPU: 0 UID: 0 PID: 14163 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 2587.698168][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2587.708228][T14163] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 2587.715541][T14163] Call Trace: [ 2587.718832][T14163] [ 2587.721768][T14163] dump_stack_lvl+0x3d/0x1f0 [ 2587.726390][T14163] vpanic+0x640/0x6f0 [ 2587.730395][T14163] panic+0xca/0xd0 [ 2587.734131][T14163] ? __pfx_panic+0x10/0x10 [ 2587.738564][T14163] ? __mutex_lock+0xc6d/0x1060 [ 2587.743340][T14163] ? preempt_schedule_common+0x44/0xc0 [ 2587.748815][T14163] ? preempt_schedule_thunk+0x16/0x30 [ 2587.754218][T14163] ? check_panic_on_warn+0x1f/0xb0 [ 2587.759351][T14163] check_panic_on_warn+0xab/0xb0 [ 2587.764317][T14163] end_report+0x107/0x170 [ 2587.768674][T14163] kasan_report+0xee/0x110 [ 2587.773105][T14163] ? __mutex_lock+0xc6d/0x1060 [ 2587.777888][T14163] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 2587.784160][T14163] __mutex_lock+0xc6d/0x1060 [ 2587.788772][T14163] ? udp_tunnel_nic_device_sync_work+0x27/0xa10 [ 2587.795178][T14163] ? __pfx___mutex_lock+0x10/0x10 [ 2587.800235][T14163] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2587.806055][T14163] ? debug_object_deactivate+0x1ec/0x3a0 [ 2587.811712][T14163] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 2587.817970][T14163] ? rtnl_lock+0x9/0x20 [ 2587.822145][T14163] udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 2587.828236][T14163] ? rcu_is_watching+0x12/0xc0 [ 2587.833016][T14163] process_one_work+0x9cf/0x1b70 [ 2587.837979][T14163] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 2587.843640][T14163] ? __pfx_process_one_work+0x10/0x10 [ 2587.849039][T14163] ? assign_work+0x1a0/0x250 [ 2587.853645][T14163] worker_thread+0x6c8/0xf10 [ 2587.858244][T14163] ? __kthread_parkme+0x19e/0x250 [ 2587.863283][T14163] ? __pfx_worker_thread+0x10/0x10 [ 2587.868400][T14163] kthread+0x3c5/0x780 [ 2587.872485][T14163] ? __pfx_kthread+0x10/0x10 [ 2587.877095][T14163] ? rcu_is_watching+0x12/0xc0 [ 2587.881870][T14163] ? __pfx_kthread+0x10/0x10 [ 2587.886477][T14163] ret_from_fork+0x675/0x7d0 [ 2587.891090][T14163] ? __pfx_kthread+0x10/0x10 [ 2587.895698][T14163] ret_from_fork_asm+0x1a/0x30 [ 2587.900494][T14163] [ 2587.903593][T14163] Kernel Offset: disabled [ 2587.907921][T14163] Rebooting in 86400 seconds..