last executing test programs: 2m56.021824059s ago: executing program 3 (id=3434): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x12, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 2m54.888792477s ago: executing program 3 (id=3443): mmap$auto(0x6, 0x2000d, 0x0, 0xebe, 0x404, 0x10008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) pread64$auto(r0, 0x0, 0x1ff, 0x8800000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) unshare$auto(0x3) (async) unshare$auto(0x3) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) shmctl$auto(0x8, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xb, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xb, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_BTRFS_IOC_SCAN_DEV(r2, 0x50009404, &(0x7f0000000440)={@raw=0x1, "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"}) io_uring_setup$auto(0x1, 0x0) socket(0x28, 0x5, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, 0x0, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(0x0, 0x0, 0xf, 0x9) mmap$auto(0xfffffffffffffffd, 0x40, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) open(&(0x7f0000000000)='./file0\x00', 0xa2942, 0x4b) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0xa2942, 0x4b) ioctl$auto_FS_IOC_SETFLAGS2(r3, 0x40086602, 0x0) (async) ioctl$auto_FS_IOC_SETFLAGS2(r3, 0x40086602, 0x0) pwrite64$auto(r3, 0x0, 0x8, 0x200000000000003) (async) pwrite64$auto(r3, 0x0, 0x8, 0x200000000000003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x6, 0x13b9) 2m52.989115468s ago: executing program 3 (id=3452): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/reboot/mode\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@phonet={0x23, 0x7f, 0x66, 0xf7}, 0xd7) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0xf42f, 0x7f) setsockopt$auto_SO_LINGER(r1, 0x6, 0xd, &(0x7f00000000c0)='&r@!/}*\\].\x00', 0x1ff) 2m52.873487661s ago: executing program 3 (id=3453): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r5 = socket(0x2, 0x1, 0x106) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x401, 0x0) 2m52.023104482s ago: executing program 3 (id=3456): utime$auto(0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x202000d, 0x3, 0x1000eb1, 0xfffffffffffffffa, 0x8000) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1, 0x10401}, 0x0) (async, rerun: 64) r0 = getpid() (async, rerun: 64) r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) (async) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x5, 0x5, 0xff, 0xac1, 0x5, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x800, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) (async) clone$auto(0x20003b4a, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) (async) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1071311f", @ANYRES16=r4, @ANYBLOB="01002bbd7000fadbdf250400000004000d00"], 0x18}}, 0x4044830) mmap$auto(0x0, 0x420008, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) socket(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 64) 2m49.044661265s ago: executing program 3 (id=3463): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon5\x00', 0x101040, 0x0) ioctl$auto_MON_IOCH_MFLUSH(r0, 0x9208, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x6af82, 0x0) mmap$auto(0x0, 0x109c, 0x4000000000e0, 0x10, 0x401, 0x300000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioperm$auto(0x7, 0x5ad2, 0x8) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x10000000000000d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x0, 0x62, 0x8000001d, 0x7, 0x6d3e, 0x6, 0x2, 0x4]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) 2m33.97679747s ago: executing program 32 (id=3463): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon5\x00', 0x101040, 0x0) ioctl$auto_MON_IOCH_MFLUSH(r0, 0x9208, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x6af82, 0x0) mmap$auto(0x0, 0x109c, 0x4000000000e0, 0x10, 0x401, 0x300000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioperm$auto(0x7, 0x5ad2, 0x8) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x10000000000000d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x0, 0x62, 0x8000001d, 0x7, 0x6d3e, 0x6, 0x2, 0x4]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) 1m12.115219219s ago: executing program 4 (id=3803): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000001640)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x28842, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x521602, 0x0) shmctl$auto_SHM_INFO(0xd, 0xe, &(0x7f00000002c0)={{0x0, 0x0, 0xee01, 0x7, 0x4, 0x8, 0x1}, 0x9, 0x4, 0x8, 0x8a, @inferred, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000140)="21582bf4f4a93f426fbef5bdf77be003ae3726538f55f9ea4c65f6f9db6609cc60d2cfa6cb6fa3cf3c69dc62cf67027b71c430c068d9d8221bbe4b452b39421abf6c8ce976da4594195307d987ce5aa614f514f751fd0661c0c5773def2621e248e2", &(0x7f0000000240)="3634b35a00bd53b0ef5cee2893cdb2d1479304e223f077c40b4057de56411122fea7cb4a654c0f948c68d6364f0f8db3f00c3b1540ced051688ef73aff37288c43bd6a70af332c310e00c335119b307bb9f8feb88081cc60ac7b"}) fsconfig$auto(r0, 0x9, 0x0, &(0x7f0000000100)="94d689f5247242cccdb34beadfe6b6354bcead7bc0073820e138656d80bbc2110dc8c3ec5e514c3c253bc4e9cb3c497f1b7a3b2c91b306f91920249c07", r2) r3 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vkms/encoder-1/bridges\x00', 0xc100, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r3, 0x7, 0x50, &(0x7f0000000080)='/dev/input/event1\x00', 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x81, 0x9b72, 0x7, 0x27ffd) r4 = socket(0x1, 0x1, 0x1) bind$auto(r4, &(0x7f0000000140), 0xd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) connect$auto(0x3, &(0x7f0000000140), 0x55) r5 = socketpair$auto(0x1, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) socket(0xa, 0x5, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) shmctl$auto_IPC_RMID(0x0, 0x0, 0x0) chown$auto(&(0x7f00000000c0)='./file0\x00', r1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) 1m11.4596423s ago: executing program 4 (id=3806): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'bridge_slave_0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4) (async) setuid$auto(0xe) bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_7={@start_id=0x1, 0x4, 0xf}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x101}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) 1m11.201045118s ago: executing program 4 (id=3808): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x28082, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000100)=@test={r0, 0x7f, 0x0, 0x7ff, 0x354, 0x1, 0x80000001, 0x0, 0x80000001, 0x7, 0x100, 0x1, 0x9, 0x6, 0x1826}, 0x32) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r1) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, 0x0, 0x73d, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x8010) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0x400100, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) 1m11.004523336s ago: executing program 4 (id=3810): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioperm$auto(0x7, 0x6, 0x2) getcpu$auto(0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r2, 0x0, 0x100000a3d9) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x2, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/live_regions\x00', 0x60000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) r3 = socket(0x25, 0x5, 0x27) getsockopt$auto(r3, 0x3, 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r5 = socket(0x1e, 0x1, 0x0) connect$auto(r5, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r6) 1m8.402662573s ago: executing program 4 (id=3812): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000004c0), 0xffffffffffffffff) (async) mseal$auto(0x0, 0x7dda, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = prctl$auto_PR_SET_MM_START_CODE(0x7, 0x1, 0xffffffffffffffff, 0x3, 0xfffffffffffffbff) (async) r2 = getuid() keyctl$auto(0x8, 0x0, r2, 0x0, 0x2) setreuid$auto(r2, 0x0) (async) tkill$auto(0x1, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw9\x00', 0x30b001, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) (async) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a8180000", @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf2d080000002015098008005e00", @ANYRES32, @ANYBLOB="1215c4800400d9800800e700", @ANYRES32=r2, @ANYBLOB="08001e00a00f0000e27b9801d133d176abe1ddb081b84ebff74f65f5513546d5af7a2c951a8e2f62b8c6fd12198828527a7171a71adaddfb60d4b061e4b858e556e21d5c06ced97285cc6871cc249fbf7c31075ba844d07f8062f4f59133bdea0f4987c72fad1ff795ed1a8696eaea68845f6384889e58fdcebb0b5668f2a19983d01705bb0511d8acc174baf3e54581ba8f656fcc9fbc4dbab1b9ec0fce7c5918943b6a8a23c2a7ae63a8bbbfe3f066f7e9f40f180d5ce5c009f0b30243d2f837243f2e4e4884bbf113be802000558014001300fe8000000000000000000000000000aa08004a00", @ANYRES32=r2, @ANYBLOB="6c12d88070111e808c4e4b507848401e3ade570fd929fbd6cc9dc6a0611c49bc0d93bc904c76b4d24937682422b29bc20e1d54612d34c25e015d68a234a65888f070e85b4f65190c430deb84fba41c5ae291659b851fc1e311d4f78dc38662cc2bd82f6d7030f5d32a7ea5c845f06041bb44ceca70ef129e672fea824455a43f1c7e04b74e4528c1a3b71f629dde8fa87591eca6db93339ef2dd2c7364f70ec30f4be28e4a0a18e5fe77f6c4d5e50aeadf611faefea56af77f3e5117a339a663b08a3e883b997cee46fd18687138f0e532dbeab7040037800400e880194367ff28e1f6afc0b9fe54fb8a350adf81fc55421df6e9e8f839189f68ac834f4ef59a2aa6285386b591cea117e3827c7c0b4ebbbbd8fbc7b522482694f7a68dba6eeb6323490ecd6c8c1753dd36972fb14698553351d861588bde3d41de433a9b2fc25799c2edef8ad5b5600c655ef39e7d5273323a57c409da4fadfbfb580dd7926afb5299a656050d991f132c3d3101cfe7d0de728efdaef568364e6d36efd92be92a28d0cc25ebd0c579d56d81d2a83f467840406f12807a8e8f1db622d38420e2ad45c25f7642e77bc4f709574556aac73a9a69ed2fc4211240b3c1b16121ac05df1d2fcb2f26e611c77f019f97ed7cb3e6836939ab2c0362598b484925ccb764aea439d13da8a22eac7373915094ac4513d8f2068c750cd613a44f1db6a403c863476f196917e84a2e29407987cea2dd31bb408d5ce8c1dec45823aac93ae502474bd21f91d937348d60fb4e6042cd9a42a8600d74f419ec80447dbae9b4ea8be2330ee25539a5d4bb0b8491feb5472bde2326113840021ef67f4743b60378a64e4afed81d656bf6996a098e159e23081fce9cd10e7b27c035e1224a92922e04a92edfcff69fe39cc0be3fdd1f4a299002366bdeb8a9e674e2d4b8fee66d2d5e085b511466a04401f15b498f5140f450d8807041053e87d8db05b34e250fc799dad90299d7b10976b77fd03fb6186ff12da0c0e6ea92c3c5a170f5928c3ec910e7857646661e90fb701c9a932bb316c27d94a2b0c7017d87399653d5b1ff9352b00b583157a319467d7754d95c3edf9c44528e6d32d189203b135b1b643fa72c6f0e55f728f5ac142b3253518cfa20306e2d647eaff9c88d67d4841492c842f67b385820c672481477b64f5d3ce6092da8d81df6da8e51453d688ed4e0f45071d10677adc6ca0fa335da01c4bfc15133622646c68e40ae918a911196488489862c68dc6a3d9a937a9d6b7951fcd92a8437fb064128827e20dd9e0279794e0d802ac5235b688d5f47814732ab9c64c0a19143b2161d40f0f1fcecb45667e4abf0a37126c74612d8a7eb0843e44ff5f697784d68ff47cd1a40c524b6c019e2019919fe6de5d1bb573c9b0ef1c73bcb85415028f488c7e1ad2018273e6e184c95c30740f318f2af7c427e43ed982c5bc7ceec19f887f578b659f93f28b5fb0843bfb9731dbd9419e350a03cb3f309e0f38eb0d84801232b5805a0737c791d435fcfd5a8fea12652287401db66d4a93f0d55cf6e3ee496d3495cb8c6d405013fae6d7518f2870dc3d9806e7ee116a282d1812c1193d39687a8d4fc5984cbffa5c3987f3445d79fc5743bf186e072d8161fcc2f8c76505f568713bf1a256205e6650db745dd5c7bcd573a2c622f012fc07aeba451d65c9c6aab56c6c98ae8af140a0eec8f1bd07b8836895c057acaf58aedcabe404335426ed20d880d52d6767ef9a0c5581d5e9f2a69dafe0401d50a437304d085dc258fb82f3910530cd835692a8d9ca13c5b290be29e7b61b790ae0d9d6e447782f9577a875848319113a8f3f5a1a7efb2cf39ffef6dd8ca7edfce6af971607a5a084f57df84c095cf3f32d2f0db13261faf20b426c8213b07a82d3405dc647758c6a3a4d9610b55b117d43d92be60279f9688af19c6d30da03044e1dbf2bf0386245996e41594ca9a46554aae40908209bcc9429cd30650aa11c520d632c6e3b2f5d16853dc0f759b733a1a0d9a0488ad3dc2a76bfeca0f7861480f140de6d43cb8eacd1294a2ba3610f57f324bf21bfe9c27ac0ee130c78e4aaa00486c353256aa10291ac11a6d9cc34f7e1119339aaa80d0d6e97079025f4fb0a102319bcc9945e11e4b4778017e7b2418c39dc9f4e144b3efffb18043ffa93cf50abbd14fb85a9b19fddf8b30b81e755afd40df6b3ec80c302173608b16e1089e8a6dee0feefa9d533fb4928f8a98c1cf04136fcd602bc3a7947a93b25d0a0bb713400308afe690cdd43ff060a920f4c2f70c1c58904b761fe758a4f9eddd729b0b7ed758af950e3e091205fbc39c3888a19566ddc11a3e3ce7855147bea32648d85e19d8842de722473d4783c9c85425f0abdac485d948f9dd55b8764a44b24870dc09436c44100b0324c59e157aa1f67d8926d85c497cc44d811284d0d992c7005f5d86ef9524cf800a3ab5938def6e99c7a07a0af66f85650b47fbdf75d96e4a41a6aaeb09d757eaa98b9f64643615aeba7779281413385877aaa802ad3b9e0468ee9f517daf5e45c67b0b2caebe4703f74bec1f33e3d2a359e405fbada96224bb8023a08137de3daa80b3628c5f023f50c50b6e8e25072d3eb8946495db34d4d5994cf3efe4f3e1a4cd9f8b92733545b0e23f63d8f2726c50a1a7f1582d92303c849e51e7c6fd772f8a350d95d0683db36e8a28e894fdace2dd84db910732f9020fc0e611711dc1a81a2086f0751724ec853887a4e10eeb69794f2bf6fc5a015422338b287d215ae8aa698d1e824406d004a8d9f5f329d2d73166ce595c7ce93d8dadfdb5df61d9e14cacca2624410890e16742b9d7c1a3865ae5c659aec5a05fab5370db5ec3617480e26e1990e7094fc954e7aeb14255b4b80301ad734a23948fb33113e126cdfb32e1b8f72c6eeaf684ed3c7829bd40768e0955d6ae06b3382aa296305dfd93bec681c94a2cba7c58562ba37057204fb7acdf03122e6234da1c5f5150ac704ea63f360f89ad9fd29ec97a90a6dfe4a561e8cc48c8877ef116ff9b9afff2ef51f7805ac567b22ad210a7c2675d17e770d8bba01616345bd62bc25c84c53cd4b23e71671d9c610b4569d06febaab80697545a782a92a8895827f5341f1872b54ddbca226f20b9f3661eadb27f01486479ffe2984600ba8dc3dd29b33ee834fd3cd8d3f50207e1fd114f1a4ec73bf1c7e62b290a50f16ffca02169659429db1ffeea0a24ad1b7e9e707b24312cb8d43c181aebcb27216200c312923698f7bab5671a53cd7ea2a4f0d4496debfcaed82fa7e07f03bb4bbf2ccd487c73826147a9c87a2b2196444548ce54b3349806b5c208dbb9a6f6a3b877fc230341347bc842cada5611443927dc1cab534474648805e8f84f41e44b28b208c13e1af73f0525aa206d157a060f8b763d031fce7dd2954836fd7b086ec9d7e6533448439f3c5592f18c1d2d761873ab9c3731eba9cc6a126bd2d5fcf9d136e1deb6c35fd09e99aa65f3e60a9ec8ee3a3b67590c128bde06ef82bb7b9cb2ea30eabdfe9a46fec0940435ef2e1768f7403168519cd2e5e0df195dae870939dbff210f01603959b36f014baffac60893e9255af10a7637c6897739351aa97580f393afaf5aaada2f25c38378eaa96568d0c7bb6c2b8c218c8c98802226da1e8e2d61f66aa0dc0fb110f38d4a29df8dc7bdafb0be2d5a22ea30225ff27a450ae6a77aa8240ff7ca173789be27c0878ac1c6c578eaf0e6be1df682dd57bfb7834a71ac5f8558568a55001ada083910b912a98caf7a9221fd459b3829c2ec290dc3c3a0df9a502b7b66530fb8c6c5342946303c7ed7b89bc08b0c3fd18f2f5bd94d4ec8fb8881981a1b1051a1e25eaa99a3d4aa58466a3eb443fb93323cae921db90439d60158fe01ddd5864948222ec785fbd7ad255cb22e6f984fa44c0562723f23038eec17d8a6981f50817b4be9157e44cf90fbab183ff007ca797642a35061bade5979097c2c85a2539aa956d39ddc9ea0462fb1a20f542f075bca79a4372946fa7bf95460895d655f8e832908d830dd48b0bea692a3f5dc39fedd3c99dc2de8271544e8087a21d53a460d0ef9e37b61ccacd4dce433e3312254e64822874dd459fb10e2aa9b25384a4f5cfa63a85794de975c3430853235801e9554f83d875b250031dcdacac5c0c75ac0073172dc1877d478a005ee84410db6af6a7eac256a337eb35280dd8a65635115c85738f6f9a20d70ec0a9d03146093852d865ca26512c550866f635e6468a8ad43be1d93f70859a47f2b934a14d30251b7ec06aed82f1ff1c49807c061246cd2c31ed61ddb5a347a96e442b903f2257d741c1ff65dfa93efcc49b2ea56fbb083150a918a9c2238658c955a3274240e164508bdcdc75c9ee075b062a35865f789e1e19c775bae4b17cc3a416877c20d158c62e3d851ed4910f8004513f728e9f9a4452cc55243181fbb20cf03990e7061b68379d60e117c067fb71458a6b59a3e90ae8a58158fc5279d033727bdb96c763619f2d5b98b49373944e29526c3cb4774e1bffb370be42d8cfec5fae820bad40511171a56c09be46f6b1d250d00357636f44073ebe21e6e99109ed40c43bb10cd4ba2aaa2582765c677609d1eee68cc96e799052e148d587183b5ff978d2b94d75081e033d7a2a9d0fb91e75acc9ac786e03337ea5606d88c8524140032b49c2e9c6c24e5d7e2b612b1ff530aa5d484280ec0f4a1b641fd2e808dad7e88385f1632c496c3732391648d7230b8bd6d31440d8db9a57482fa92a31ffbf2fdb1fcec5321bf7bea9b63ef72d260b8f83e58fea1e028a7e2e9f52937f04ddd709f2c9cf4a6e7a4abbd229ce7a6715633b7c6345460187754412da98e0b4460027f13e3c7d8d05291881a8727619c874c3c957f0e49cf1d6949f0c9dc39bfcf24a007e1500ea8224c50cd3607209a352f2ec8cde98d79e6029578c9a34e4f4862e67d98be4214cde7f301193435d61e5c9fb57475a3368939b55c954baa961e3c83bcc4d36ef52b2f466a323c4876c6f14e32c5492c9958085043afbf7fd2f4107c044632069d6a690959596a0f8a7851477cf3669265c6f347cfc1afb413b39e2b020b85b025076606c86d92dff11626367b1d33c5bb9e1d17a3bcf7d88603ba0f241e4bbb66e8c56646939a6480205ecf751bc271fc19b0643147322cd553de76b2751e983e233bd1b53edb2247488ef4b4362d7e430add1149b7f6191a96654afdcff22227751535b7dd0c3163a9578b60f57f3f347f9ea85454c98fd85f9461c9f762e69bbd677a41f00ff031e7b91d444c0d1661eb3b6c0bed050ab9a9a590e44b47c09b8b6209142fddfbf504e3a1762c231658a3930e9105505cf3908ad3d6ce664a5cc1d271eea078e1d059e983f89d84cea501105dd268f837319781c65344dd63835af3ecc0aecce48dd32987b2f886a6f18089d8a36af83e1cce336114c8961134beee580d46214dd2021c6ac1e9a58bdf3995be784b2391767e41bb0dcb9f14f99340c6e89e4ddf32539e8295055182a6bdef9df2ccb8af64b3d4fafd1188e657d3fb6676e24685377a27639ec1351339f464380036cb89a0d081ed0ae6fac442b62d6e75d62a27d2d803978f0b5cabc79cf710c75bfd0723605b5478b3163eba1e1a0198c7272948d19ded606bd88a8e7da75ca379e15ccda186e5ba38f3f5bb0ca85d08f3947661ed616cc539ac5f37f0cc90b2a23a225cf783f7843d05f468e92cad96b866ede340cc2052e4173668c60bc33bcada37b1f5f9f16549ac2cf1f252dd93da88926c60c549943dd1564a85ef6bb563fc1b2cf0b9a71f703a9b73d8748af1d7a0cf5d786ee8d68a6ccc9a6e734aee58f1b76b0e86d92f94579ab60f7ffff1b494995868cc748156f8396c01e38375a71e20d443cfa2c9c80befed10c748f75ddb4227b5fb51ee64a4edac4a1bca2726975a39d5a5296e23715a1aa0fb2da69215bc9fc706fc0b3eacb6625fced12a6dafb02b8de728b5dac7c3948c023ea462bf7e288230d06f3a2513586a834b48caf3fd7c274750627f0316aec94f5c9b7e9b28a55b953b1ce8b71ef115ff0dae0cc6375f3bb85bd3d54d25836ebed49ecbb383e3ec047c3973069181025f473f4c78a29617b5cbb3f4d0404db44abb0b1f6a133e3e725f0d172c5e5ecb99e4423c12f1aa95dbfd6de1ad8f039b935ff2200f9130d44387933e06e7058f4233945fe84c44b63dd4c98e6ddf61ea663ac21055927e77b363fd9cc76c5268e9ebc630d92e20b85eba7b935feda332428cabf3fe7000d78008004500", @ANYRES32, @ANYBLOB="553f671313ae5093af5f7478c9238c3be18213c8aa52a549a326b670784de204c9107d2d075c6d80832af50a5c112431fd7d2de1f8207ce653d1fa2e8e4f2b77a48ae51197923dab65759962bef63ef92649a02116acf9ec2d0694c804006c8004009c808d07294929899011ea650201f0405a309b2ce3c695a688aca650cd7731681a1ac08a67515f0f462f9d7eb6e3413b345dad3d41a6d5b5bbe9a306166ed937ef7c6bb37ebdf62f17d42c089f29ce733d8f9a301a2cc59eebb730005900f17c5826f622c25d8ab5050182cba3072f5eb99bada6eaf3d5eae1d5e401da4154bef9707e43ee9a86510f47080017006c02000008004d00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="56d536b8fd4e73b7ac7612f0578267a506778e3d25e47cca43baad836a701569b59c75efa8d035ec79fc2e8f2f29a3773c75c175ea7c64a45212b6dc0203775125a1c4a72dff3080b5b3c457a669a4fc5f10b9d29553fecc1144e8b82451ed2c3987d298fa30ad4d13b747279395f89c4acae7eb5158eb6f34a5fe11fc780cb59a7296f7a7f288f43e0800f1000300000008006500020000000400cb800000e500a6800400028032009000813340c9023790f806d062ef8f442dd74f0663ab35e41ca5aa0aa0d8d3442dc221d482823d8ce4cf2d413beee6ce000017b0df41abf5e84247decfa8031eb35937aa46091d358f61480078432119e827e275ed8a954ad2ddd42103eab1ecad4b15b69e6a83f5982d4e2acd193ffdaad00ad8ac0b0d67bb40531fcfb50b9b3a207eaa0d86fa66467e28cea263429eb33ee192dc25fb185ca8c478aee97f27b25a16ad943b8335239ad52094f13728fe8e7960fb233c099b85bb4a2b46670834a8e1ac7ce93064684803100d17b7ee13797408007700ac1414150000005fef60f0957e0be5f1f8c8f6d25b2632dbe2a80b8133b162dbf6ddd9a09cac0cd020a34e1b2b25a85ec4393e54623aaa7978cbf1b6ef12ff6c65f58b183cf4fef5b086cffb9c791a4db0966d7da383b2dde828cea9564710b9651191fc0ef9d75c107468c99537fbdb2a9ed533c90c00d10003000000000000000000"], 0x18a8}}, 0x20006415) 1m8.040335318s ago: executing program 4 (id=3813): r0 = socket(0x28, 0x800, 0x38) (async, rerun: 64) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000901fedac1f50ba8be1ede", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) (async) unshare$auto(0x40000080) (async) mmap$auto(0x2, 0x8, 0x100000000000dc, 0x9b73, r0, 0x28002) (async) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r3, &(0x7f0000000000), 0x0) rename$auto(&(0x7f0000000140)='.\x00', 0x0) (async) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0x6, 0x0) (async) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) (async) mmap$auto(0x9, 0x100000004, 0x4, 0x100000000ebd, 0xffffffffffffffff, 0x7fffff7ffffffff8) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async, rerun: 64) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) ioctl$auto_BLKROGET(r3, 0x125e, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mseal$auto(0x0, 0x7dda, 0x0) (async) socket(0xa, 0x1, 0x84) (async) socket(0x2, 0x1, 0x106) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000000)='/dev/audio1\x00', 0x100000a3d9) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event\x00', 0xa0301, 0x0) 1m7.62071673s ago: executing program 33 (id=3813): r0 = socket(0x28, 0x800, 0x38) (async, rerun: 64) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000901fedac1f50ba8be1ede", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) (async) unshare$auto(0x40000080) (async) mmap$auto(0x2, 0x8, 0x100000000000dc, 0x9b73, r0, 0x28002) (async) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r3, &(0x7f0000000000), 0x0) rename$auto(&(0x7f0000000140)='.\x00', 0x0) (async) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0x6, 0x0) (async) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) (async) mmap$auto(0x9, 0x100000004, 0x4, 0x100000000ebd, 0xffffffffffffffff, 0x7fffff7ffffffff8) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async, rerun: 64) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) ioctl$auto_BLKROGET(r3, 0x125e, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mseal$auto(0x0, 0x7dda, 0x0) (async) socket(0xa, 0x1, 0x84) (async) socket(0x2, 0x1, 0x106) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000000)='/dev/audio1\x00', 0x100000a3d9) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event\x00', 0xa0301, 0x0) 55.67239338s ago: executing program 0 (id=3850): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000700)={{@raw=0x9, 0x7f, 0x2, 0x5, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer=@value=[0x4, 0x80, 0x1, 0x7a3, 0x3, 0xe0, 0xc1, 0x5, 0xd, 0x7f, 0x1, 0x922, 0x15, 0x8, 0x9, 0x25, 0xa, 0xe01, 0xb3b, 0x1, 0x5, 0xd85c, 0x8000000000000000, 0x5, 0xfffffffffffffbff, 0x3, 0xadd0, 0x7, 0x6c275d6c, 0x6, 0x5, 0x3, 0x3, 0x9, 0x7, 0x0, 0x6, 0x0, 0x5, 0x4, 0x4, 0x1000, 0x100000001, 0x0, 0xffff, 0x5, 0x3, 0x8, 0x2, 0x8, 0x7fffffffffffffff, 0x8, 0x6, 0x1000000000000, 0x2, 0x1, 0x0, 0x2, 0x3f, 0x4, 0x8, 0x7, 0x6, 0x2, 0x9, 0xc6b, 0x10001, 0x5, 0x8, 0x8000, 0x1, 0x0, 0x0, 0x5, 0x9cf8, 0xfffffffffffffffa, 0x1, 0x4, 0x3, 0xc6c4, 0x6, 0x3ff, 0xffffffffffffffff, 0xa0fa, 0x1, 0x5, 0x0, 0xffffffffffffffff, 0xd, 0x6, 0x100, 0x2, 0x8404, 0x3, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x7, 0x8, 0x439, 0x0, 0x4, 0x0, 0x8, 0xb4, 0x7ff, 0x1ff, 0x5, 0xd, 0x0, 0x0, 0x6, 0x0, 0x9, 0x1, 0x6, 0x800, 0x4, 0x4, 0x100, 0x2, 0x8, 0x100000001, 0x80, 0x0, 0x5, 0x7], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x73) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x2a4742, 0x0) socket(0x2, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103280, 0x0) ioctl$auto(0x3, 0x4040ae79, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) setsockopt$auto(r3, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f0000001200)={@raw=0x88f9, "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"}) r4 = clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) r5 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/o2hb/livenodes\x00', 0x543a00, 0x0) fcntl$auto_F_RDLCK(r5, 0x3, 0x0) unshare$auto(0x4) getsid$auto(r4) 53.851234863s ago: executing program 0 (id=3849): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3f}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) (async) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044089}, 0x14085) 53.05692696s ago: executing program 0 (id=3852): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000280)="978693dc87b1c1fd2f1eb908a830a9", 0xf) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000080)=0x2070c199) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = geteuid() setreuid$auto(r3, 0x0) lstat$auto(0x0, &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) 51.204118054s ago: executing program 0 (id=3856): r0 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x114, r2, 0x10c, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MLD_ADDR={0x31, 0x13a, "2e8e8802ff8cf981b0d4ae2ba1ecd1cd02085ece0ef94e288cbd91a690a234b0136836dee3c669f27513328a16"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_STA_FLAGS2={0xc5, 0x43, "58b2c18048379b5ea6f81f4e9140252a1088e47556d54b33073913bd88a000f274bfb975e8ae418eeb4a22ab639aa3b68fe34c0fe1a79a6ef6b1dde0cebecb6e0d29e2528d6c9809b225b40882bd83bd51d0c00500956fe407a8704124f3d5298f9b27643d934e99835c4adaa1eaed2ec834c7b730ceff9565fd76c3bf28a6226b2ff27a7335b45c4523e5cf172b9a8112019c6d204dd6959edaa5bdf5d89d0d0c7a0ae903506115eb90f4e5a0f0477a9e2b7262fea10939a1a4c0c5618ad402d5"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x44) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) read$auto(r0, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x114, r2, 0x10c, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MLD_ADDR={0x31, 0x13a, "2e8e8802ff8cf981b0d4ae2ba1ecd1cd02085ece0ef94e288cbd91a690a234b0136836dee3c669f27513328a16"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_STA_FLAGS2={0xc5, 0x43, "58b2c18048379b5ea6f81f4e9140252a1088e47556d54b33073913bd88a000f274bfb975e8ae418eeb4a22ab639aa3b68fe34c0fe1a79a6ef6b1dde0cebecb6e0d29e2528d6c9809b225b40882bd83bd51d0c00500956fe407a8704124f3d5298f9b27643d934e99835c4adaa1eaed2ec834c7b730ceff9565fd76c3bf28a6226b2ff27a7335b45c4523e5cf172b9a8112019c6d204dd6959edaa5bdf5d89d0d0c7a0ae903506115eb90f4e5a0f0477a9e2b7262fea10939a1a4c0c5618ad402d5"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x44) (async) 50.929106426s ago: executing program 0 (id=3858): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) timer_create$auto(0x2, 0x0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x2000000000008000) setresuid$auto(0x0, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x41) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x10001, 0x5}, 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x700) 50.364212596s ago: executing program 0 (id=3860): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000300)={{0x3fe, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x81, @raw=0x1, @raw=0x3, 0x0, 0x0, 0x0, 0x0}) r2 = setfsgid$auto(r1) fchown$auto(0xffffffffffffffff, 0xee00, r2) keyctl$auto(0x6, 0xffffffffffffffff, 0xee01, r2, 0x9) fchdir$auto(r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xebe, 0x401, 0x8000) unshare$auto(0x60000080) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="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") mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo$auto(r3, r3, 0x208, &(0x7f0000000100)={@siginfo_0_0={0x3, 0xffff, 0x0, @_sigsys={&(0x7f0000000340)="ec74806b2476647892201c4d01266dbe7daeea4c50216dfa9bb7ac7a1af0699d5b33b0cd904da5b38dafd565d72e0a15979c507e71d5e19a9ee807300c87e310e68416d0126632feb19d5a63e6a57331396f8357c2ec0140ebeab267845b10feabcc4685663da350872a518b27d0f6eba650c6107877b146d81cb5d8fc137619e587d556043e06b0c5a0a2695a6e6010bc03eaeb5d9c089fa9b6165f7c0d2b37b834c484aa6357dafc6d5f8b59e8d04dd54f4faf8ffe2b8d90ec55662168368fa518f79c41558df8f5a192521261c118fb7f3c4fcadf1e5846cc6e4038ecce8da8aff0a7e925be3536e15bb928e25d6e7a47f8dfe35f37", 0x9}}}) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) open(0x0, 0x2a4c0, 0x40) socket(0x6, 0x1, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0xa}, 0x3) 35.098729925s ago: executing program 34 (id=3860): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000300)={{0x3fe, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x81, @raw=0x1, @raw=0x3, 0x0, 0x0, 0x0, 0x0}) r2 = setfsgid$auto(r1) fchown$auto(0xffffffffffffffff, 0xee00, r2) keyctl$auto(0x6, 0xffffffffffffffff, 0xee01, r2, 0x9) fchdir$auto(r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xebe, 0x401, 0x8000) unshare$auto(0x60000080) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="9e0839d502484f8af75c1000226ca59d1a2eb71caa281e1647d76bfa482b37c7e16e7536a55d10cf54d5e382c7514c70f31f5ca964180c28ca2a2827836d03e1a9e73cc343d7e9ad821727e0064bebdcf62d3b8173cc4ab3745c16c484d5bb9289c508000000f46d4369202ad194cae093fb4f086091e895c13b5c3c00000000495ee97f0d934c05e9a6c0a5b36c0783348f4bc1dfc48fbc73e97cc523b6c10a88454525699e49c5e742c2ea8b62344dc4c89bec882f52e08b3cccd3597bf4b324876476f787a4551e0e3822098e67e6c88d3b2795a3c0c6e35c1136feb6c65d7e27b52ac38897d8f27b1a03f8ab85ac24053fcd76fef86d1cb0055bb0c39564f8a6c000868a71ca6f065317273ae322c30dedf182dd796a645f8e70cb6cb687f8daa319bd8c9d2610d11d8c513fe9357cac430025cc8e82d3dc7e50") mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo$auto(r3, r3, 0x208, &(0x7f0000000100)={@siginfo_0_0={0x3, 0xffff, 0x0, @_sigsys={&(0x7f0000000340)="ec74806b2476647892201c4d01266dbe7daeea4c50216dfa9bb7ac7a1af0699d5b33b0cd904da5b38dafd565d72e0a15979c507e71d5e19a9ee807300c87e310e68416d0126632feb19d5a63e6a57331396f8357c2ec0140ebeab267845b10feabcc4685663da350872a518b27d0f6eba650c6107877b146d81cb5d8fc137619e587d556043e06b0c5a0a2695a6e6010bc03eaeb5d9c089fa9b6165f7c0d2b37b834c484aa6357dafc6d5f8b59e8d04dd54f4faf8ffe2b8d90ec55662168368fa518f79c41558df8f5a192521261c118fb7f3c4fcadf1e5846cc6e4038ecce8da8aff0a7e925be3536e15bb928e25d6e7a47f8dfe35f37", 0x9}}}) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) open(0x0, 0x2a4c0, 0x40) socket(0x6, 0x1, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0xa}, 0x3) 12.388062038s ago: executing program 2 (id=3987): mmap$auto(0x0, 0xfffffffffffffffa, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x7ffd) capget$auto(0x0, 0xfffffffffffffffe) prctl$auto_PR_SET_TIMERSLACK(0x1d, 0x0, 0x3, 0x0, 0xfa) socket(0x1d, 0x3, 0x1) (async) r0 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x65, 0x8, 0x0, 0x0) 12.165125744s ago: executing program 2 (id=3989): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) r0 = socket(0x23, 0x5, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x90) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) 10.365205411s ago: executing program 2 (id=3996): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) mkdir$auto(&(0x7f00000001c0)='./file0/file0\x00', 0xc000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) rmdir$auto(&(0x7f0000000000)='./file0\x00') mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) setsockopt$auto_SO_DEBUG(r0, 0xc, 0x1, &(0x7f0000000840)='/Aev/\x03\b\x00\x00\x001\x00T\xc0\xd7\xa6pXd\x89--\x8a{j\n\xe2\xa7$\xa3\x17\x0f\xe5/on\xee2\xba{!y(\xb7U\xe72Z\x064\xf7\x00v\xef\x0e~O\xcem\xc1\xd2u5\xfe\xd5\x13V\xe4V\xca\xef\"A\xcabl\xf8A\xcd\x93P\xf39\xe3\v\xa4+\x93\x87\\\xad\x1e\x9f\x17D\xae\xe1e\xd3\xd2\xd3\xbc\x80v;\xd0U\xbcq\x801\xd4\xf5\x02\x9bN\x8b\xd7\x96?/\x1a\xf3\x16\xb5\xcc\xc6_\xc3\a\x90a\xdcOz\xd3\xf5\xc4m\x1e7\x15\x9b\x1e3\x97\x0fZ\x00\xe4\xf965\x9b\xb7\xedn8r\xc1\xf3\xc1\xf4\xacrt-d\xf6X\x80\x05\x82!\x83!.\x86~t\xd7\xf5\x19\x14\xf7\xc4\x89l\xc1!\xfb\x84\xc2v\xd66|\x9a?\xda\x19\x0f\xa0\x9c\a\xc5\xb0\xcad\xc0\xa3\xc6Nt\x85\rV\rB\xdc\xc8\xfe\xaf\x1d\xf3\xc0j1\x9b\xb3[\x9aw\xb2~\xe8\xb67S\x0e\xc5X\xea\x14s\x18%\a@M\x8c\xf1\xac\x13\x18\xca\xab\xfeA\xf0X\x10*F\xb8\xe6X)k\xe1]~\x8d\xc3\xfa\xd8\xcdR<\x9b\xcae9\xa2\x8d\x92w\x11\xce\xcc41\f\xe3yi\xec\xbf\xf9\xadX\x10\xff\x0f0.\xabl_\xf4\x1e\v\xfc\x8b\xd2\xca\x1c\xf3}\xea\xae\xe6\xa5\xdfG\x13\xfe\xb1g\xd2\"\xe3\xc8\x05KFv\x89w\'\xe0\xa8\\\x8c\xca\v\"`\x02G\xba=\xee\xa8\xed\x1f?\xa79GC\xcb\xd9\xbc\xcd@K\r\x12\x8c\xfe\xa8\xec\xc2s\xfb\xa2\xe3\xa8\x9f\x9aP\x15E\xa0\x9a>v\xb7\f\xf6s\xee\xe1\x04\xdd\xc8)\xd5bAe\xa2Rs6\xcd_\xce\xbfl\xa1s}T`\x16\xb0\xc0\xa7_+\xb3\xaas\x86\xf6\xcb\xeb\xbc\xe4\xcc\xe9\xc3X\x10h\xc1#6\\\x80Lp\x113\xe2\xb5\xcd\xa0)\xeb\x909\xf8uA\xa7\x15\xe1\x1d\x15\x89W\xec^\'\x1a\x8a\xc7\x1a \x13[\xbe5\a\xe4\x98\xe0$\xe3\x14B\xee\xd7e\xeb\xb2\xd5\xeb\xad\xe1\x87\xfcCv,|y\xf8\xd3\x1e_\xc8\x00N\x0f\xf8md\xbd/\xaf4-a)tP\xde\x98A\x9c\x9a\x0e:b\x117\x15\x9aS\xa2\xb3j\xbe$.\x01kx\x88j\xe7\x81R\xaaB\x87$\xb2q\xef/\x99\ae\x8dm\x9f\x1a\xd9c<\xcf^\xf7\x05\x00\x00\x00\x00\x00\x00\x00\xf0\xad\xe2\xb2\xf2\xa8\xad\xa0dK\xd0\xbat\xc7\xdc\xdb1\x93e\xa9@\x0f#\'\x00U\x1a}\x9e\x81\xf7\xff\xff\xff\xff\xff\xff\xff\x1a\x15\x9e\x960xee01, 0x2, 0x200}) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/247, 0xf7) r7 = socket(0x2, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xfffffffffffffff8, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x12, 0x1, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x4000000003, 0x65, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000240)={0x4, r6, 0x389, 0x74d}) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000340), r0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="02804d2f87f5a95ebf88", @ANYBLOB="251729bd7000fcdbc725010000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x64810) write$auto_console_fops_tty_io(r8, &(0x7f0000000e00)="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", 0xbcc) sendfile$auto(r0, r7, 0x0, 0x88) 6.984051609s ago: executing program 5 (id=4009): close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya7\x00', 0x169701, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0x0) (async) memfd_create$auto(0x0, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) (async) ftruncate$auto(r0, 0xa0) (async, rerun: 64) writev$auto(0xffffffffffffffff, 0x0, 0x1) (rerun: 64) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0x3f1) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x80001, 0x0) (async, rerun: 32) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video15\x00', 0xc0400, 0x0) (rerun: 32) ioctl$auto(0x3, 0x4020565a, 0x38) (async, rerun: 64) r4 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) (async, rerun: 64) ioctl$auto_BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000440)={@raw=0x4, "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"}) (async) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) (async) ioctl$auto(r5, 0x3b8e, r4) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0xa, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0xb, 0x6d3c, 0x7, 0x2, 0x104af46a]}, 0x0) 5.89259858s ago: executing program 5 (id=4012): ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) keyctl$auto(0x3, 0xfffffffd, 0x101, 0x1, 0x7) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000002b80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="02002cbd7000ffdbdf250100000008000200", @ANYRES32, @ANYBLOB="0800050006003fccc92ead0000000000000000000000000000000013292b87ab685fbad9f735b2e5ddaeba7fe208aaaf6e0b0b"], 0x2c}, 0x1, 0x0, 0x0, 0x400008c}, 0x4000090) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)) read$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/tty12\x00', 0x7) socket(0x10, 0x2, 0xc) msgctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000140)={{0x85, 0x0, 0xee01, 0x2, 0x9, 0x1, 0x2}, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x1, 0x0, 0x73000000000, 0x0, 0x159, 0x7, 0x9, 0x6, 0x4, @inferred=0xffffffffffffffff, @raw=0x77}) set_tid_address$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0xff, 0x2, 0x0, 0xfff) pkey_free$auto(0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x402e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setfsuid$auto(r1) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) pkey_free$auto(0x1) symlink$auto(0x0, 0x0) socket(0x2, 0x1, 0x0) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_PID(0x1, 0x0, &(0x7f00000001c0)={@siginfo_0_0={0x5, 0x3, 0x8, @_sigpoll={0x6, r3}}}, 0x1ff, &(0x7f0000000300)={{0x5, 0x7ff}, {0x14a4, 0x7}, 0xaac, 0x5, 0x2, 0xffffffff80000001, 0x4, 0x4, 0x231, 0x3, 0x4, 0x2, 0x101, 0x7ff, 0x8, 0x100}) 4.719680218s ago: executing program 1 (id=4015): mincore$auto(0x1ff, 0x2, &(0x7f0000000000)='\x00') (async) socket(0x10, 0x2, 0xc) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c6, 0x1e2) (async) close_range$auto(r0, r0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mincore$auto(0x1000000000008000, 0x80040006, &(0x7f00000001c0)='!.^\xe2{&,\xde\x00') pidfd_send_signal$auto_SIGCONT(r0, 0x12, &(0x7f0000000040)={@_si_pad}, 0x3ff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) getpgrp(0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) (async, rerun: 32) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async, rerun: 32) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x381083, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002007353165201912bddadf945f26c6f0000000000000900000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20c84) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) ioctl$auto(0xffffffffffffffff, 0x901064aa, 0xffeffffffffffdff) 4.719299658s ago: executing program 5 (id=4016): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) ioctl$auto(r0, 0x1, r0) (async, rerun: 64) write$auto(r1, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea\x18*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) (async) syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) r2 = memfd_create$auto(0x0, 0x4) (rerun: 64) socket(0x2, 0x3, 0xa) (async) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) (async, rerun: 64) keyctl$auto(0xe, 0x2, 0x76f, 0x9, 0xf13) (async, rerun: 64) read$auto_component_list_fops_(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x15, 0x5, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) (async) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000)="e58177b04e45273a1f9bc1b3fb914486547572a0523fb0e7c8f42f5b5acbdd6f22c8ec2450d5483dd3f26bb5626260af840b5903f0b52d46253d69d401054bde5a266728a4e70fc19c3db9da602f863858ecdb8e1fe0679b714d4ffc033791bc6ddb8bcebc8f6cefccb56e8aaa628903", 0xcd4e, &(0x7f0000000140)={&(0x7f0000000100)="ef5cd3fb49de4f6ce501933cd3", 0x5}, 0xffff, &(0x7f0000000380)="344a556200756e669914443c5983f58ef2cef3fb522be99c31c4b81b1378f54ddb1fc3e79cc9dcf9f4179e5799e7a8522261757a46a0b344a4f292abfa4ce0f6122addefbb443eba781102adfc3961adbdca503f3abe1b4dd161e4fbe775d54843bc9ac57d118e69b57c6b684a162ec99b77cdd2ba175cfc257bc8b05477b65d06954c31848a7b7a1cbe7e485b75e92d74868de48fb355369e617183f742830a23ffc3adad7de679ef5f60eb07cc10", 0x7, 0x8}, 0x1}, 0xf78d, 0x5) unshare$auto(0x40000080) socket(0x11, 0x2, 0x9) mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0x8010aebc, r3) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r4, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 4.413195904s ago: executing program 1 (id=4017): execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/integrity/write_generate\x00', 0x80242, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000000), 0xffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) faccessat$auto(r1, &(0x7f0000000140)='./cgroup\x00', 0x2) 4.408589141s ago: executing program 5 (id=4018): quotactl$auto(0x9, 0x0, 0x62a0, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000ffffdf251300000002000000060000000500050008ec000005001d0004000000050017000d00000005082800120000000500210002000000"], 0x44}}, 0xc80) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) epoll_ctl$auto_EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x200, 0x1e}) mmap$auto(0x0, 0x2020009, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1e, 0x5, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x40, 0x0) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000085) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_PREFER_BUSY_POLL(r4, 0xe52e, 0x45, &(0x7f00000001c0)='802.15.4 MAC\x00', 0xb31) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000140), 0x303302, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4004ae8b, 0x80ffff) madvise$auto(0x0, 0x1, 0x15) connect$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(r6, 0xc0c0586d, 0x0) mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x401, 0x8000) 4.122487513s ago: executing program 1 (id=4020): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x81) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24048010}, 0x4000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcd) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000008c0)=""/61, 0x3d) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/add_random\x00', 0x1a1842, 0x0) write$auto(r6, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) setresuid$auto(0x2, 0x7, 0x8080) sendfile$auto(r8, r8, 0x0, 0xd) write$auto(0xffffffffffffffff, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_BLKRRPART(r7, 0x125f, 0x0) 4.0265072s ago: executing program 5 (id=4021): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x8) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x401, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, &(0x7f0000000040)=""/73, 0x49) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) 3.645050228s ago: executing program 6 (id=4022): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x185002, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x3, &(0x7f0000001640)='+\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x109b80, 0x0) socket(0x25, 0x5, 0x29) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x1, 0x0) mmap$auto(0x2000000000000000, 0x2020009, 0x9, 0xd70, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfdef) r2 = prctl$auto(0x4002f, 0xfffffffffffffffc, 0x0, 0x10003, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x1) mmap$auto(0x2, 0x2020009, 0x18000004, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r3 = socket(0x10, 0x2, 0xf) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x1, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r3, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x4, 0x5, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd=r3, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r2) 3.469888624s ago: executing program 5 (id=4023): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xfffffffffffffff8, 0xe2, 0xeb1, 0x405, 0x7ffd) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x4, 0x0, 0x1, 0x9}, 0x4}, 0x8, 0x1f00) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) semctl$auto(0x4, 0x2cee, 0x1, 0x5) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xffffffffffffffff, 0x1010, r2, 0x800007ffc) (async) r3 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x136a}, 0x7d) (async) mount$auto(0x0, 0x0, 0x0, 0x5, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) (async) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 332.073901ms ago: executing program 6 (id=4031): readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) 164.926072ms ago: executing program 2 (id=4032): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigsuspend$auto(&(0x7f0000000000)={0x80}, 0x8) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.pressure\x00', 0x42802, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)='C', 0x1) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000000000002e}, 0x8000040000000001) madvise$auto(0x8, 0xffffffffffffff80, 0x7ff) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0xc06, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) ioctl$auto(0x3, 0x4020aeb2, 0xffffffffffffffff) 116.355216ms ago: executing program 6 (id=4033): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x1f, 0xa, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x11, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10000, 0x1, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x10, 0x2, 0x0, 0x20000004, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x3, 0x73) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$auto_SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000080)) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/mb_groups\x00', 0x40102, 0x0) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) keyctl$auto(0x1e, 0xfffffffffffffffc, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=4034): socket(0x25, 0x1, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r0, 0x1, 0x2, 0x6653) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x10000000003, 0x9, 0x2080000001, 0x4007, 0x5, 0x9, 0x1, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) getxattrat$auto(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x9, &(0x7f0000000300)='^\x00', &(0x7f0000000340)={0x2, 0x5, 0xfffff517}, 0x8) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/enable\x00', 0xa0102, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x2, 0x0) msgctl$auto(0x7, 0xa3, &(0x7f0000000240)={{0x8, 0xee00, 0xee01, 0x5, 0xa, 0x0, 0xfe01}, 0x0, 0x0, 0x6, 0xa, 0x6, 0x31f4, 0x51c, 0x3, 0x1, 0x3, @inferred=0xffffffffffffffff, @raw=0x8}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000180)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) kernel console output (not intermixed with test programs): x1be/0x730 [ 1044.165417][T24601] acpi_ds_exec_end_op+0x3b0/0x1460 [ 1044.165440][T24601] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1044.165460][T24601] acpi_ps_parse_loop+0x425/0x1d00 [ 1044.165485][T24601] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1044.165504][T24601] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1044.165531][T24601] acpi_ps_parse_aml+0x3c1/0xcb0 [ 1044.165555][T24601] acpi_ps_execute_method+0x55a/0xb30 [ 1044.165578][T24601] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 1044.165596][T24601] acpi_ns_evaluate+0x76c/0xca0 [ 1044.165620][T24601] ? kasan_save_track+0x14/0x30 [ 1044.165636][T24601] acpi_evaluate_object+0x1fa/0xa90 [ 1044.165657][T24601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.165673][T24601] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1044.165693][T24601] ? __mutex_trylock_common+0xe9/0x250 [ 1044.165719][T24601] acpi_evaluate_integer+0xdd/0x200 [ 1044.165736][T24601] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1044.165767][T24601] ? __pfx_status_show+0x10/0x10 [ 1044.165787][T24601] status_show+0xa0/0x120 [ 1044.165807][T24601] ? __pfx_status_show+0x10/0x10 [ 1044.165833][T24601] dev_attr_show+0x56/0xe0 [ 1044.165850][T24601] ? __pfx_dev_attr_show+0x10/0x10 [ 1044.165864][T24601] sysfs_kf_seq_show+0x213/0x3e0 [ 1044.165883][T24601] seq_read_iter+0x509/0x12c0 [ 1044.165919][T24601] kernfs_fop_read_iter+0x46c/0x610 [ 1044.165942][T24601] ? rw_verify_area+0xcf/0x6c0 [ 1044.165965][T24601] vfs_read+0x8bf/0xcf0 [ 1044.165982][T24601] ? __pfx___mutex_lock+0x10/0x10 [ 1044.165996][T24601] ? __pfx_vfs_read+0x10/0x10 [ 1044.166023][T24601] ksys_read+0x12a/0x250 [ 1044.166036][T24601] ? __pfx_ksys_read+0x10/0x10 [ 1044.166055][T24601] do_syscall_64+0xcd/0x4b0 [ 1044.166071][T24601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.166086][T24601] RIP: 0033:0x7f0c4b18eec9 [ 1044.166098][T24601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.166113][T24601] RSP: 002b:00007f0c493f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1044.166127][T24601] RAX: ffffffffffffffda RBX: 00007f0c4b3e6090 RCX: 00007f0c4b18eec9 [ 1044.166137][T24601] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 1044.166147][T24601] RBP: 00007f0c4b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1044.166157][T24601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.166167][T24601] R13: 00007f0c4b3e6128 R14: 00007f0c4b3e6090 R15: 00007ffd7331bc78 [ 1044.166187][T24601] [ 1044.170211][T24601] ACPI Error: [ 1045.069158][T15400] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1045.069183][T15400] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1045.069183][T15400] [ 1045.227542][T24601] Failed to extend the result stack (20250404/dswstate-130) [ 1045.227658][T24601] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 1045.515522][T24681] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.3363: iget: checksum invalid [ 1045.515693][T24681] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1045.515817][T24681] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.3363: iget: checksum invalid [ 1045.515940][T24681] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1045.516051][T24681] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.3363: iget: checksum invalid [ 1045.516174][T24681] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1045.516286][T24681] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.3363: iget: checksum invalid [ 1045.516408][T24681] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1045.516432][T24681] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1045.516447][T24681] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1045.558496][T23204] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1045.558522][T23204] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1045.558522][T23204] [ 1046.777239][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3368'. [ 1046.777525][T24709] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3368'. [ 1046.815560][T24711] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1047.037074][T15575] Bluetooth: hci2: unexpected event 0x3e length: 509 > 260 [ 1047.037104][T15575] Bluetooth: hci2: unexpected subevent 0x02 length: 508 > 260 [ 1047.037120][T15575] Bluetooth: hci2: Dropping invalid advertising data [ 1047.037152][T15575] Bluetooth: hci2: Dropping invalid advertising data [ 1047.104075][T24718] bond0: invalid ARP target specified [ 1047.587132][T15400] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1047.587158][T15400] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1047.587158][T15400] [ 1048.660012][T24733] tty tty17: ldisc open failed (-12), clearing slot 16 [ 1049.139863][T24752] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 1050.124980][T24784] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1050.177660][T15575] Bluetooth: hci2: unexpected event 0x3e length: 509 > 260 [ 1050.177685][T15575] Bluetooth: hci2: unexpected subevent 0x02 length: 508 > 260 [ 1050.192379][T15575] Bluetooth: hci2: Dropping invalid advertising data [ 1050.200897][T15575] Bluetooth: hci2: Dropping invalid advertising data [ 1050.207657][T15575] Bluetooth: hci2: unknown advertising packet type: 0x08 [ 1050.207674][T15575] Bluetooth: hci2: Dropping invalid advertising data [ 1050.221434][T15575] Bluetooth: hci2: Dropping invalid advertising data [ 1050.228845][T15575] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1051.498921][T24834] zero sized request [ 1052.029194][T15400] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1052.106517][T15400] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1052.106517][T15400] [ 1052.327559][T15575] Bluetooth: hci0: unexpected event 0x3e length: 509 > 260 [ 1052.327584][T15575] Bluetooth: hci0: unexpected subevent 0x02 length: 508 > 260 [ 1052.345149][T15575] Bluetooth: hci0: Dropping invalid advertising data [ 1052.589630][T24853] sock: sock_timestamping_bind_phc: sock not bind to device [ 1052.981962][ T30] audit: type=1800 audit(4294967303.610:67): pid=24860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3398" name="dbroot" dev="configfs" ino=98447 res=0 errno=0 [ 1054.473744][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.480035][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.382917][T15575] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1056.382941][T15575] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 1056.398901][T15575] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1056.398935][T15575] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1056.530792][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'. [ 1056.541862][T24965] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input23 [ 1056.757719][T24964] netlink: 'syz.3.3417': attribute type 7 has an invalid length. [ 1058.009805][T24995] FAULT_INJECTION: forcing a failure. [ 1058.009805][T24995] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.067928][T24988] FAULT_INJECTION: forcing a failure. [ 1058.067928][T24988] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.080783][T24988] CPU: 0 UID: 0 PID: 24988 Comm: syz.3.3422 Tainted: G U syzkaller #0 PREEMPT(full) [ 1058.080808][T24988] Tainted: [U]=USER [ 1058.080813][T24988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1058.080823][T24988] Call Trace: [ 1058.080834][T24988] [ 1058.080841][T24988] dump_stack_lvl+0x16c/0x1f0 [ 1058.080871][T24988] should_fail_ex+0x512/0x640 [ 1058.080898][T24988] should_failslab+0xc2/0x120 [ 1058.080916][T24988] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1058.080932][T24988] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1058.080955][T24988] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1058.080978][T24988] idr_get_free+0x528/0xa30 [ 1058.081006][T24988] idr_alloc_u32+0x190/0x2f0 [ 1058.081029][T24988] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1058.081052][T24988] ? lock_acquire+0x179/0x350 [ 1058.081077][T24988] idr_alloc_cyclic+0x10b/0x230 [ 1058.081100][T24988] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1058.081120][T24988] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1058.081135][T24988] ? lsm_blob_alloc+0x2b/0x90 [ 1058.081159][T24988] map_create+0x143e/0x27e0 [ 1058.081180][T24988] ? __pfx_map_create+0x10/0x10 [ 1058.081192][T24988] ? __might_fault+0xe3/0x190 [ 1058.081206][T24988] ? __might_fault+0xe3/0x190 [ 1058.081218][T24988] ? __might_fault+0x13b/0x190 [ 1058.081238][T24988] __sys_bpf+0x3d98/0x4980 [ 1058.081253][T24988] ? futex_private_hash_put+0x18a/0x300 [ 1058.081274][T24988] ? __pfx___sys_bpf+0x10/0x10 [ 1058.081290][T24988] ? __pfx_futex_wait+0x10/0x10 [ 1058.081314][T24988] ? do_futex+0x122/0x350 [ 1058.081344][T24988] ? fput+0x9b/0xd0 [ 1058.081361][T24988] ? xfd_validate_state+0x61/0x180 [ 1058.081384][T24988] ? __pfx_ksys_write+0x10/0x10 [ 1058.081404][T24988] __x64_sys_bpf+0x78/0xc0 [ 1058.081418][T24988] ? lockdep_hardirqs_on+0x7c/0x110 [ 1058.081440][T24988] do_syscall_64+0xcd/0x4b0 [ 1058.081454][T24988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.081469][T24988] RIP: 0033:0x7f2c7398eec9 [ 1058.081482][T24988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.081496][T24988] RSP: 002b:00007f2c748b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1058.081511][T24988] RAX: ffffffffffffffda RBX: 00007f2c73be6090 RCX: 00007f2c7398eec9 [ 1058.081521][T24988] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 1058.081531][T24988] RBP: 00007f2c73a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1058.081540][T24988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.081549][T24988] R13: 00007f2c73be6128 R14: 00007f2c73be6090 R15: 00007ffef9106f58 [ 1058.081569][T24988] [ 1058.081867][T24995] CPU: 0 UID: 0 PID: 24995 Comm: syz.0.3425 Tainted: G U syzkaller #0 PREEMPT(full) [ 1058.081891][T24995] Tainted: [U]=USER [ 1058.081896][T24995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1058.081905][T24995] Call Trace: [ 1058.081911][T24995] [ 1058.081917][T24995] dump_stack_lvl+0x16c/0x1f0 [ 1058.081942][T24995] should_fail_ex+0x512/0x640 [ 1058.081965][T24995] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1058.081982][T24995] should_failslab+0xc2/0x120 [ 1058.081999][T24995] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1058.082014][T24995] ? __kernfs_new_node+0xd2/0x8e0 [ 1058.082034][T24995] __kernfs_new_node+0xd2/0x8e0 [ 1058.082051][T24995] ? check_path.constprop.0+0x24/0x50 [ 1058.082070][T24995] ? __pfx___kernfs_new_node+0x10/0x10 [ 1058.082092][T24995] ? find_held_lock+0x2b/0x80 [ 1058.082109][T24995] ? kernfs_root+0xee/0x2a0 [ 1058.082129][T24995] kernfs_new_node+0x13c/0x1e0 [ 1058.082148][T24995] ? net_ns_get_ownership+0xf8/0x1b0 [ 1058.082174][T24995] kernfs_create_dir_ns+0x4c/0x1a0 [ 1058.082195][T24995] sysfs_create_dir_ns+0x13a/0x2b0 [ 1058.082212][T24995] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1058.082228][T24995] ? find_held_lock+0x2b/0x80 [ 1058.082246][T24995] ? net_namespace+0x12/0x50 [ 1058.082261][T24995] ? device_namespace+0x76/0xa0 [ 1058.082277][T24995] kobject_add_internal+0x2c4/0x9b0 [ 1058.082297][T24995] kobject_add+0x16e/0x240 [ 1058.082312][T24995] ? __pfx_kobject_add+0x10/0x10 [ 1058.082329][T24995] ? get_device_parent+0x1c5/0x4e0 [ 1058.082344][T24995] ? kobject_put+0xab/0x5a0 [ 1058.082364][T24995] device_add+0x288/0x1aa0 [ 1058.082380][T24995] ? __pfx_dev_set_name+0x10/0x10 [ 1058.082397][T24995] ? __pfx_device_add+0x10/0x10 [ 1058.082413][T24995] ? lockdep_init_map_type+0x5c/0x280 [ 1058.082435][T24995] ? __init_waitqueue_head+0xca/0x150 [ 1058.082454][T24995] netdev_register_kobject+0x1a9/0x3d0 [ 1058.082473][T24995] register_netdevice+0x13dc/0x2270 [ 1058.082492][T24995] ? __pfx_register_netdevice+0x10/0x10 [ 1058.082513][T24995] internal_dev_create+0x2d3/0x520 [ 1058.082531][T24995] ovs_vport_add+0x147/0x4d0 [ 1058.082547][T24995] new_vport+0x16/0x1d0 [ 1058.082567][T24995] ovs_dp_cmd_new+0x6ba/0xe60 [ 1058.082593][T24995] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1058.082618][T24995] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1058.082636][T24995] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1058.082658][T24995] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1058.082680][T24995] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1058.082719][T24995] ? bpf_lsm_capable+0x9/0x10 [ 1058.082741][T24995] ? security_capable+0x7e/0x260 [ 1058.082764][T24995] ? ns_capable+0xd7/0x110 [ 1058.082784][T24995] genl_rcv_msg+0x55c/0x800 [ 1058.082803][T24995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1058.082820][T24995] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1058.082854][T24995] netlink_rcv_skb+0x158/0x420 [ 1058.082868][T24995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1058.082886][T24995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1058.082908][T24995] ? netlink_deliver_tap+0x1ae/0xd30 [ 1058.082935][T24995] genl_rcv+0x28/0x40 [ 1058.082950][T24995] netlink_unicast+0x5a7/0x870 [ 1058.082967][T24995] ? __pfx_netlink_unicast+0x10/0x10 [ 1058.082981][T24995] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1058.083003][T24995] ? __lock_acquire+0xb97/0x1ce0 [ 1058.083029][T24995] netlink_sendmsg+0x8d1/0xdd0 [ 1058.083047][T24995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.083064][T24995] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1058.083091][T24995] ____sys_sendmsg+0xa98/0xc70 [ 1058.083109][T24995] ? copy_msghdr_from_user+0x10a/0x160 [ 1058.083132][T24995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1058.083158][T24995] ___sys_sendmsg+0x134/0x1d0 [ 1058.083182][T24995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.083229][T24995] __sys_sendmsg+0x16d/0x220 [ 1058.083252][T24995] ? __pfx___sys_sendmsg+0x10/0x10 [ 1058.083274][T24995] ? __x64_sys_futex+0x1e0/0x4c0 [ 1058.083307][T24995] do_syscall_64+0xcd/0x4b0 [ 1058.083322][T24995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.083337][T24995] RIP: 0033:0x7fdd36b8eec9 [ 1058.083349][T24995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.083363][T24995] RSP: 002b:00007fdd3795d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.083376][T24995] RAX: ffffffffffffffda RBX: 00007fdd36de5fa0 RCX: 00007fdd36b8eec9 [ 1058.083386][T24995] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 000000000000000c [ 1058.083395][T24995] RBP: 00007fdd36c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1058.083404][T24995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.083413][T24995] R13: 00007fdd36de6038 R14: 00007fdd36de5fa0 R15: 00007ffe1a81e8f8 [ 1058.083434][T24995] [ 1059.165295][T25011] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1059.230193][T25012] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 1059.599481][T24995] kobject: kobject_add_internal failed for HfR (error: -12 parent: net) [ 1059.941222][T25023] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3428'. [ 1060.479623][T25047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3437'. [ 1061.932329][T25086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1062.028348][T25084] random: crng reseeded on system resumption [ 1062.823227][T15575] Bluetooth: hci1: unexpected event 0x3e length: 509 > 260 [ 1062.823252][T15575] Bluetooth: hci1: unexpected subevent 0x02 length: 508 > 260 [ 1062.838275][T15575] Bluetooth: hci1: Dropping invalid advertising data [ 1063.304631][T25109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1064.062432][T25123] ima: policy update failed [ 1064.111908][ T30] audit: type=1802 audit(4294967314.740:68): pid=25123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3455" res=0 errno=0 [ 1064.202528][T23199] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1064.247560][T25124] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3455'. [ 1064.267318][T23199] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1064.267318][T23199] [ 1064.627149][T25126] cgroup: fork rejected by pids controller in /syz3 [ 1065.599668][T25262] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1068.062829][T25309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1070.163164][T25342] zram: Removed device: zram0 [ 1071.459564][T25309] team0: Port device team_slave_0 removed [ 1073.155126][T15400] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1073.227329][T15400] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1073.227329][T15400] [ 1074.131130][T25396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3479'. [ 1074.633552][T25396] bridge0: entered allmulticast mode [ 1075.159846][T23217] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1075.215430][T23217] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1075.215430][T23217] [ 1078.900227][T25145] syz.3.3456 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1079.524061][T25145] CPU: 0 UID: 0 PID: 25145 Comm: syz.3.3456 Tainted: G U syzkaller #0 PREEMPT(full) [ 1079.524086][T25145] Tainted: [U]=USER [ 1079.524091][T25145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1079.524101][T25145] Call Trace: [ 1079.524107][T25145] [ 1079.524114][T25145] dump_stack_lvl+0x16c/0x1f0 [ 1079.524141][T25145] dump_header+0x101/0x930 [ 1079.524160][T25145] oom_kill_process+0x272/0xa40 [ 1079.524177][T25145] out_of_memory+0x350/0x1700 [ 1079.524202][T25145] ? __pfx_out_of_memory+0x10/0x10 [ 1079.524222][T25145] mem_cgroup_out_of_memory+0x118/0x130 [ 1079.524242][T25145] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1079.524266][T25145] ? do_raw_spin_unlock+0x172/0x230 [ 1079.524285][T25145] try_charge_memcg+0x72b/0xd50 [ 1079.524303][T25145] ? __pfx_try_charge_memcg+0x10/0x10 [ 1079.524318][T25145] ? __print_lock_name+0x71/0xe0 [ 1079.524336][T25145] ? rcu_read_unlock+0x17/0x60 [ 1079.524357][T25145] charge_memcg+0x8a/0x230 [ 1079.524372][T25145] __mem_cgroup_charge+0x2b/0x1e0 [ 1079.524391][T25145] shmem_alloc_and_add_folio+0x514/0xc20 [ 1079.524419][T25145] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1079.524444][T25145] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1079.524471][T25145] shmem_get_folio_gfp+0x67f/0x1600 [ 1079.524499][T25145] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1079.524528][T25145] shmem_write_begin+0x160/0x300 [ 1079.524544][T25145] ? __pfx_shmem_write_begin+0x10/0x10 [ 1079.524556][T25145] ? timestamp_truncate+0x21e/0x2d0 [ 1079.524572][T25145] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1079.524596][T25145] generic_perform_write+0x3c4/0x900 [ 1079.524625][T25145] ? __pfx_generic_perform_write+0x10/0x10 [ 1079.524648][T25145] ? inode_needs_update_time.part.0+0x191/0x270 [ 1079.524668][T25145] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1079.524684][T25145] shmem_file_write_iter+0x10e/0x140 [ 1079.524702][T25145] __kernel_write_iter+0x317/0xb10 [ 1079.524718][T25145] ? __pfx___kernel_write_iter+0x10/0x10 [ 1079.524732][T25145] ? __up_read+0x1f8/0x750 [ 1079.524748][T25145] ? dump_user_range+0x756/0xb70 [ 1079.524774][T25145] dump_user_range+0x413/0xb70 [ 1079.524800][T25145] ? __pfx_dump_user_range+0x10/0x10 [ 1079.524823][T25145] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 1079.524842][T25145] ? __pfx_writenote+0x10/0x10 [ 1079.524860][T25145] elf_core_dump+0x29be/0x3c00 [ 1079.524884][T25145] ? __pfx_elf_core_dump+0x10/0x10 [ 1079.524900][T25145] ? check_preempt_wakeup_fair+0x6a6/0x980 [ 1079.524920][T25145] ? find_held_lock+0x2b/0x80 [ 1079.524935][T25145] ? 0xffffffffff600000 [ 1079.524948][T25145] ? rcu_is_watching+0x12/0xc0 [ 1079.524964][T25145] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1079.524985][T25145] ? lockdep_hardirqs_on+0x7c/0x110 [ 1079.525035][T25145] ? vfs_coredump+0x2b94/0x5670 [ 1079.525055][T25145] vfs_coredump+0x2b94/0x5670 [ 1079.525084][T25145] ? __pfx_vfs_coredump+0x10/0x10 [ 1079.525106][T25145] ? __lock_acquire+0x62e/0x1ce0 [ 1079.525131][T25145] ? __lock_acquire+0x62e/0x1ce0 [ 1079.525154][T25145] ? lock_acquire+0x179/0x350 [ 1079.525183][T25145] ? is_bpf_text_address+0x8a/0x1a0 [ 1079.525209][T25145] ? bpf_ksym_find+0x124/0x1c0 [ 1079.525230][T25145] ? __kernel_text_address+0xd/0x40 [ 1079.525245][T25145] ? unwind_get_return_address+0x59/0xa0 [ 1079.525263][T25145] ? arch_stack_walk+0xa6/0x100 [ 1079.525289][T25145] ? stack_trace_save+0x8e/0xc0 [ 1079.525307][T25145] ? __pfx_stack_trace_save+0x10/0x10 [ 1079.525326][T25145] ? stack_depot_save_flags+0x29/0x9c0 [ 1079.525349][T25145] ? __lock_acquire+0xb97/0x1ce0 [ 1079.525403][T25145] ? proc_coredump_connector+0x2d1/0x4f0 [ 1079.525423][T25145] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1079.525446][T25145] ? rcu_is_watching+0x12/0xc0 [ 1079.525465][T25145] get_signal+0x22e1/0x26d0 [ 1079.525491][T25145] ? __pfx_get_signal+0x10/0x10 [ 1079.525513][T25145] ? rcu_is_watching+0x12/0xc0 [ 1079.525529][T25145] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1079.525548][T25145] arch_do_signal_or_restart+0x8f/0x790 [ 1079.525569][T25145] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1079.525601][T25145] irqentry_exit_to_user_mode+0x138/0x290 [ 1079.525624][T25145] asm_exc_page_fault+0x26/0x30 [ 1079.525638][T25145] RIP: 0033:0xf000 [ 1079.525650][T25145] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.525664][T25145] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 1079.525675][T25145] RAX: 0000000000000000 RBX: 00007f2c73be5fa0 RCX: 00007f2c7398eec9 [ 1079.525685][T25145] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b4a [ 1079.525694][T25145] RBP: 00007f2c73a11f91 R08: 0000000000000002 R09: 0000000000000000 [ 1079.525703][T25145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.525711][T25145] R13: 00007f2c73be6038 R14: 00007f2c73be5fa0 R15: 00007ffef9106f58 [ 1079.525731][T25145] [ 1080.008818][T25145] memory: usage 307200kB, limit 307200kB, failcnt 204629 [ 1080.015895][T25145] memory+swap: usage 430048kB, limit 9007199254740988kB, failcnt 0 [ 1080.024623][T25145] kmem: usage 3888kB, limit 9007199254740988kB, failcnt 0 [ 1080.031713][T25145] Memory cgroup stats for /syz3: [ 1080.031905][T25145] cache 305909760 [ 1080.040463][T25145] rss 4501504 [ 1080.043744][T25145] rss_huge 4194304 [ 1080.047440][T25145] shmem 305893376 [ 1080.051044][T25145] mapped_file 12034048 [ 1080.055107][T25145] dirty 0 [ 1080.058018][T25145] writeback 0 [ 1080.061283][T25145] workingset_refault_anon 26860 [ 1080.068396][T25145] workingset_refault_file 60786 [ 1080.073693][T25145] swap 125796352 [ 1080.077221][T25145] swapcached 102400 [ 1080.081002][T25145] pgpgin 816642 [ 1080.084477][T25145] pgpgout 756915 [ 1080.087997][T25145] pgfault 830282 [ 1080.091517][T25145] pgmajfault 9002 [ 1080.095151][T25145] inactive_anon 241397760 [ 1080.099455][T25145] active_anon 69005312 [ 1080.103533][T25145] inactive_file 0 [ 1080.107142][T25145] active_file 0 [ 1080.110576][T25145] unevictable 16384 [ 1080.114393][T25145] hierarchical_memory_limit 314572800 [ 1080.119741][T25145] hierarchical_memsw_limit 9223372036854771712 [ 1080.126753][T25145] total_cache 305909760 [ 1080.130893][T25145] total_rss 4501504 [ 1080.134724][T25145] total_rss_huge 4194304 [ 1080.138938][T25145] total_shmem 305893376 [ 1080.143186][T25145] total_mapped_file 12034048 [ 1080.147749][T25145] total_dirty 0 [ 1080.151183][T25145] total_writeback 0 [ 1080.155005][T25145] total_workingset_refault_anon 26860 [ 1080.160347][T25145] total_workingset_refault_file 60786 [ 1080.166161][T25145] total_swap 125796352 [ 1080.170211][T25145] total_swapcached 102400 [ 1080.175025][T25145] total_pgpgin 816642 [ 1080.178996][T25145] total_pgpgout 756915 [ 1080.183045][T25145] total_pgfault 830282 [ 1080.187138][T25145] total_pgmajfault 9002 [ 1080.191269][T25145] total_inactive_anon 241397760 [ 1080.196153][T25145] total_active_anon 69005312 [ 1080.200730][T25145] total_inactive_file 0 [ 1080.204892][T25145] total_active_file 0 [ 1080.208847][T25145] total_unevictable 16384 [ 1080.213192][T25145] anon_cost 11791 [ 1080.216806][T25145] file_cost 0 [ 1080.220071][T25145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3456,pid=25162,uid=0 [ 1080.237259][T25145] Memory cgroup out of memory: Killed process 25162 (syz.3.3456) total-vm:131476kB, anon-rss:3300kB, file-rss:21532kB, shmem-rss:11648kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1082.991104][T25451] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1083.215132][T21528] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1083.228541][T21528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1083.238360][T21528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1083.255402][T21528] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1083.270177][T21528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1083.551189][T25461] program syz.1.3489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1084.099716][T25476] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1084.309582][T25476] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1084.399777][T25476] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.3491: iget: checksum invalid [ 1084.399948][T25476] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1084.400076][T25476] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.3491: iget: checksum invalid [ 1084.400204][T25476] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1084.400316][T25476] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.3491: iget: checksum invalid [ 1084.400446][T25476] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1084.400558][T25476] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.3491: iget: checksum invalid [ 1084.400680][T25476] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1084.400720][T25476] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1084.400735][T25476] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1084.559322][T25455] chnl_net:caif_netlink_parms(): no params data found [ 1084.938129][T25455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.938191][T25455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.938287][T25455] bridge_slave_0: entered allmulticast mode [ 1084.939305][T25455] bridge_slave_0: entered promiscuous mode [ 1084.940755][T25455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.940819][T25455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.940913][T25455] bridge_slave_1: entered allmulticast mode [ 1084.958692][T25455] bridge_slave_1: entered promiscuous mode [ 1085.059229][T25455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.061195][T25455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.188717][T25455] team0: Port device team_slave_0 added [ 1085.190436][T25455] team0: Port device team_slave_1 added [ 1085.306904][T25455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.306919][T25455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.306938][T25455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.308104][T25455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.308116][T25455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.308133][T25455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.322731][T25479] kexec: Could not allocate control_code_buffer [ 1085.352396][T21528] Bluetooth: hci4: command tx timeout [ 1085.486489][T25455] hsr_slave_0: entered promiscuous mode [ 1085.487061][T25455] hsr_slave_1: entered promiscuous mode [ 1085.487438][T25455] debugfs: 'hsr0' already exists in 'hsr' [ 1085.487453][T25455] Cannot create hsr debugfs directory [ 1085.694510][T23206] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.821619][T23206] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.883043][T23206] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.005106][T23206] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.317298][T23206] bridge_slave_1: left allmulticast mode [ 1086.317319][T23206] bridge_slave_1: left promiscuous mode [ 1086.318097][T23206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.337107][T23206] bridge_slave_0: left allmulticast mode [ 1086.337124][T23206] bridge_slave_0: left promiscuous mode [ 1086.337254][T23206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.480876][T25480] tty tty46: ldisc open failed (-12), clearing slot 45 [ 1086.529068][T25492] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 1087.167191][T25523] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1087.272491][T21528] Bluetooth: hci0: ACL packet too small [ 1087.423777][T21528] Bluetooth: hci4: command tx timeout [ 1087.621131][T23206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.666492][T23206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.708654][T23206] bond0 (unregistering): Released all slaves [ 1087.842260][T25455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1088.226962][T25455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1088.271571][T25455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1088.336833][T25455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1088.682218][T23206] hsr_slave_0: left promiscuous mode [ 1088.717359][T23206] hsr_slave_1: left promiscuous mode [ 1088.751398][T23206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.792182][T23206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.831828][T23206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.863003][T23206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.934137][T23206] veth1_macvtap: left promiscuous mode [ 1088.967846][T23206] veth0_macvtap: left promiscuous mode [ 1088.996323][T23206] veth1_vlan: left promiscuous mode [ 1089.038120][T23206] veth0_vlan: left promiscuous mode [ 1089.128585][ T1103] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1089.205650][ T1103] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1089.205650][ T1103] [ 1089.509358][T21528] Bluetooth: hci4: command tx timeout [ 1090.762981][T23206] team0 (unregistering): Port device team_slave_1 removed [ 1090.914106][T23206] team0 (unregistering): Port device team_slave_0 removed [ 1091.499688][T23196] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1091.545168][T23196] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1091.545168][T23196] [ 1091.587154][T21528] Bluetooth: hci4: command tx timeout [ 1091.662713][ T1103] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1091.686985][ T1103] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1091.686985][ T1103] [ 1092.886798][T25455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.167098][T25455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.269911][T23196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.277053][T23196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.423027][T23217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.430180][T23217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.545223][T25631] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1093.591169][T25631] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1093.718500][T25455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1094.450847][T25455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.645188][T25455] veth0_vlan: entered promiscuous mode [ 1095.751839][T25455] veth1_vlan: entered promiscuous mode [ 1095.928163][ T30] audit: type=1800 audit(4294967346.540:69): pid=25688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3526" name="dbroot" dev="configfs" ino=101858 res=0 errno=0 [ 1095.985059][T25455] veth0_macvtap: entered promiscuous mode [ 1095.998416][T25688] db_root: cannot open: [ 1096.010490][T25649] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1096.034645][T25455] veth1_macvtap: entered promiscuous mode [ 1096.051579][T25688] FAULT_INJECTION: forcing a failure. [ 1096.051579][T25688] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.122848][T25455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.156082][T23206] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1096.169462][T25688] CPU: 0 UID: 0 PID: 25688 Comm: syz.0.3526 Tainted: G U syzkaller #0 PREEMPT(full) [ 1096.169487][T25688] Tainted: [U]=USER [ 1096.169493][T25688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1096.169501][T25688] Call Trace: [ 1096.169507][T25688] [ 1096.169513][T25688] dump_stack_lvl+0x16c/0x1f0 [ 1096.169542][T25688] should_fail_ex+0x512/0x640 [ 1096.169566][T25688] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1096.169582][T25688] should_failslab+0xc2/0x120 [ 1096.169600][T25688] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1096.169614][T25688] ? alloc_vfsmnt+0x23/0x6b0 [ 1096.169634][T25688] alloc_vfsmnt+0x23/0x6b0 [ 1096.169655][T25688] clone_mnt+0x6d/0xbf0 [ 1096.169672][T25688] ? copy_mnt_ns+0x1a9/0xa90 [ 1096.169690][T25688] copy_tree+0x31d/0xbd0 [ 1096.169708][T25688] copy_mnt_ns+0x1a9/0xa90 [ 1096.169722][T25688] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1096.169740][T25688] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1096.169754][T25688] ? create_new_namespaces+0x30/0xa90 [ 1096.169775][T25688] create_new_namespaces+0xd3/0xa90 [ 1096.169792][T25688] ? bpf_lsm_capable+0x9/0x10 [ 1096.169811][T25688] ? security_capable+0x7e/0x260 [ 1096.169836][T25688] copy_namespaces+0x468/0x560 [ 1096.169855][T25688] copy_process+0x2820/0x76a0 [ 1096.169884][T25688] ? __pfx_copy_process+0x10/0x10 [ 1096.169903][T25688] ? futex_private_hash_put+0x176/0x300 [ 1096.169926][T25688] ? futex_private_hash_put+0x18a/0x300 [ 1096.169956][T25688] kernel_clone+0xfc/0x930 [ 1096.169976][T25688] ? __pfx_futex_wake+0x10/0x10 [ 1096.169990][T25688] ? __pfx_kernel_clone+0x10/0x10 [ 1096.170022][T25688] __do_sys_clone+0xce/0x120 [ 1096.170043][T25688] ? __pfx___do_sys_clone+0x10/0x10 [ 1096.170075][T25688] ? xfd_validate_state+0x61/0x180 [ 1096.170097][T25688] ? __pfx_do_writev+0x10/0x10 [ 1096.170126][T25688] do_syscall_64+0xcd/0x4b0 [ 1096.170141][T25688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.170156][T25688] RIP: 0033:0x7fdd36b8eec9 [ 1096.170169][T25688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.170184][T25688] RSP: 002b:00007fdd34df5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1096.170200][T25688] RAX: ffffffffffffffda RBX: 00007fdd36de6090 RCX: 00007fdd36b8eec9 [ 1096.170210][T25688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1096.170220][T25688] RBP: 00007fdd36c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1096.170228][T25688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1096.170236][T25688] R13: 00007fdd36de6128 R14: 00007fdd36de6090 R15: 00007ffe1a81e8f8 [ 1096.170255][T25688] [ 1096.436007][T25455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.452437][T23206] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1096.452437][T23206] [ 1096.638969][T25703] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1096.758347][T23206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.793913][T23206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.862351][T23206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.862392][T23206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.982105][T15400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.982132][T15400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.101766][T15400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.101784][T15400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.293400][T25716] vivid-003: ================= START STATUS ================= [ 1097.293416][T25716] vivid-003: Radio HW Seek Mode: Bounded [ 1097.293435][T25716] vivid-003: Radio Programmable HW Seek: false [ 1097.293452][T25716] vivid-003: RDS Rx I/O Mode: Block I/O [ 1097.293467][T25716] vivid-003: Generate RBDS Instead of RDS: false [ 1097.293484][T25716] vivid-003: RDS Reception: true [ 1097.293499][T25716] vivid-003: RDS Program Type: 0 inactive [ 1097.293520][T25716] vivid-003: RDS PS Name: inactive [ 1097.293539][T25716] vivid-003: RDS Radio Text: inactive [ 1097.293556][T25716] vivid-003: RDS Traffic Announcement: false inactive [ 1097.293575][T25716] vivid-003: RDS Traffic Program: false inactive [ 1097.293594][T25716] vivid-003: RDS Music: false inactive [ 1097.293612][T25716] vivid-003: ================== END STATUS ================== [ 1099.785310][T25761] Invalid ELF header magic: != ELF [ 1100.020976][T25771] random: crng reseeded on system resumption [ 1100.329442][T25784] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1101.660616][T23217] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1101.749089][T23217] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1101.749089][T23217] [ 1103.153423][T15400] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1103.237069][T15400] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1103.237069][T15400] [ 1103.794595][T25867] bond0: invalid ARP target specified [ 1104.161448][T23196] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1104.226936][T23196] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1104.226936][T23196] [ 1104.435465][T25861] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1104.911895][T25883] random: crng reseeded on system resumption [ 1105.990010][T21528] Bluetooth: hci1: unexpected event 0x3e length: 509 > 260 [ 1105.990036][T21528] Bluetooth: hci1: unexpected subevent 0x02 length: 508 > 260 [ 1106.006041][T21528] Bluetooth: hci1: Dropping invalid advertising data [ 1106.012717][T21528] Bluetooth: hci1: Dropping invalid advertising data [ 1106.020135][T21528] Bluetooth: hci1: unknown advertising packet type: 0x99 [ 1106.020151][T21528] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1106.214045][T25895] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input25 [ 1106.332762][T25897] netlink: 93 bytes leftover after parsing attributes in process `syz.0.3565'. [ 1106.402826][T23196] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1106.450233][T23196] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1106.450233][T23196] [ 1107.275305][T25901] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1108.336259][T23196] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1108.414197][T23196] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1108.414197][T23196] [ 1109.814688][T23217] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1109.901806][T23217] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1109.901806][T23217] [ 1111.564816][T25971] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1113.383846][T21528] Bluetooth: hci4: unexpected event 0x3e length: 509 > 260 [ 1113.383870][T21528] Bluetooth: hci4: unexpected subevent 0x02 length: 508 > 260 [ 1113.398684][T21528] Bluetooth: hci4: Dropping invalid advertising data [ 1113.859499][T26029] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3587'. [ 1115.910239][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.916972][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.104814][T26076] binder: 26074:26076 ioctl c0046209 ffffffffffffffff returned -22 [ 1116.953509][T26099] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1117.169671][T26091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1117.780512][T26112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.3604: iget: checksum invalid [ 1117.824329][T26112] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1117.870039][T26112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.3604: iget: checksum invalid [ 1117.906568][T26112] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1117.947198][T26112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.3604: iget: checksum invalid [ 1117.975653][T26112] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1118.036267][T26112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.3604: iget: checksum invalid [ 1118.108304][T26112] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1118.162942][T26112] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1118.162964][T26112] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1120.047578][T26160] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1120.225824][T26155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3614'. [ 1120.375262][T26155] ipvlan0: entered promiscuous mode [ 1120.409679][T26155] ipvlan0: entered allmulticast mode [ 1120.468419][T26155] veth0_vlan: entered allmulticast mode [ 1120.522390][T26168] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1121.182741][T15400] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1121.279078][T15400] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1121.279078][T15400] [ 1121.523202][T26182] vhci_hcd: invalid port number 21 [ 1122.439247][T15400] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1122.544694][T15400] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1122.544694][T15400] [ 1123.056166][T26217] FAULT_INJECTION: forcing a failure. [ 1123.056166][T26217] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.137185][T26213] ptp ptp0: delete virtual clock ptp2 [ 1123.272142][T26217] CPU: 0 UID: 0 PID: 26217 Comm: syz.0.3627 Tainted: G U syzkaller #0 PREEMPT(full) [ 1123.272169][T26217] Tainted: [U]=USER [ 1123.272175][T26217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1123.272184][T26217] Call Trace: [ 1123.272190][T26217] [ 1123.272197][T26217] dump_stack_lvl+0x16c/0x1f0 [ 1123.272225][T26217] should_fail_ex+0x512/0x640 [ 1123.272248][T26217] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1123.272265][T26217] should_failslab+0xc2/0x120 [ 1123.272282][T26217] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1123.272297][T26217] ? getname_flags.part.0+0x4c/0x550 [ 1123.272318][T26217] getname_flags.part.0+0x4c/0x550 [ 1123.272340][T26217] getname_flags+0x93/0xf0 [ 1123.272362][T26217] do_sys_openat2+0xb8/0x1d0 [ 1123.272380][T26217] ? __pfx_do_sys_openat2+0x10/0x10 [ 1123.272406][T26217] __x64_sys_openat+0x174/0x210 [ 1123.272426][T26217] ? __pfx___x64_sys_openat+0x10/0x10 [ 1123.272453][T26217] do_syscall_64+0xcd/0x4b0 [ 1123.272468][T26217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.272482][T26217] RIP: 0033:0x7fdd36b8eec9 [ 1123.272495][T26217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.272510][T26217] RSP: 002b:00007fdd34dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1123.272524][T26217] RAX: ffffffffffffffda RBX: 00007fdd36de6180 RCX: 00007fdd36b8eec9 [ 1123.272534][T26217] RDX: 0000000000129882 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1123.272544][T26217] RBP: 00007fdd36c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1123.272554][T26217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.272563][T26217] R13: 00007fdd36de6218 R14: 00007fdd36de6180 R15: 00007ffe1a81e8f8 [ 1123.272582][T26217] [ 1124.261428][T23217] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1124.327609][T23217] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1124.327609][T23217] [ 1124.384081][T26213] ptp ptp0: delete virtual clock ptp1 [ 1124.677690][T26213] ptp ptp0: only physical clock in use now [ 1124.768357][T26246] Invalid ELF header magic: != ELF [ 1124.990377][T26249] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1125.138877][ T30] audit: type=1804 audit(4294967375.770:70): pid=26257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3639" name="/newroot/130/file0" dev="tmpfs" ino=695 res=1 errno=0 [ 1125.236761][T23217] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1125.277805][ T30] audit: type=1804 audit(4294967375.870:71): pid=26259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3639" name="/newroot/130/file0" dev="tmpfs" ino=695 res=1 errno=0 [ 1125.325207][T23217] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1125.325207][T23217] [ 1125.760954][T23217] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1125.808418][T23217] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1125.808418][T23217] [ 1125.877949][T26277] netlink: 'syz.2.3640': attribute type 11 has an invalid length. [ 1126.068761][T21528] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 1126.068784][T21528] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 1126.084097][T21528] Bluetooth: hci4: Dropping invalid advertising data [ 1126.090821][T21528] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 1126.090841][T21528] Bluetooth: hci4: Dropping invalid advertising data [ 1126.105681][T21528] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1126.202293][T26277] netlink: 'syz.2.3640': attribute type 11 has an invalid length. [ 1126.279812][T15400] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1126.346740][T15400] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1126.346740][T15400] [ 1126.763017][T23206] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1126.809201][T23206] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1126.809201][T23206] [ 1127.038502][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3647'. [ 1127.188777][T26305] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 1127.225693][T26304] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 1127.331339][T26307] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1127.535840][T26304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3646'. [ 1127.784532][T26318] netlink: 6136 bytes leftover after parsing attributes in process `syz.0.3649'. [ 1128.176698][ T30] audit: type=1800 audit(4294967378.810:72): pid=26326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3653" name="dbroot" dev="configfs" ino=105117 res=0 errno=0 [ 1129.749630][T23206] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1129.788224][T26353] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1129.830295][T23206] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1129.830295][T23206] [ 1129.983925][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3659'. [ 1130.659532][T26372] __vm_enough_memory: pid: 26372, comm: syz.0.3662, bytes: 4398046511104 not enough memory for the allocation [ 1133.421471][T26402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.462939][T26402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1133.504896][T26402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.520408][T26402] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1133.548313][T26402] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1133.615585][T26402] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1135.025784][T21528] Bluetooth: hci0: command 0x0c1a tx timeout [ 1135.503178][T21528] Bluetooth: hci3: command 0x0c1a tx timeout [ 1135.511198][T26484] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1135.583276][T21528] Bluetooth: hci4: command 0x0c1a tx timeout [ 1135.583320][T21528] Bluetooth: hci1: command 0x0c1a tx timeout [ 1136.240890][T20374] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1136.240915][T20374] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1136.240915][T20374] [ 1137.663224][T15575] Bluetooth: hci4: command 0x0c1a tx timeout [ 1139.743989][T15575] Bluetooth: hci4: command 0x0c1a tx timeout [ 1140.023591][T26574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3701'. [ 1140.079420][T26574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.157036][T26576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3701'. [ 1140.212508][T26581] WARNING! power/level is deprecated; use power/control instead [ 1140.481204][T26574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.226430][T26608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1142.226942][T26624] zswap: compressor not available [ 1142.353497][T26632] FAULT_INJECTION: forcing a failure. [ 1142.353497][T26632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1142.412301][T26632] CPU: 0 UID: 0 PID: 26632 Comm: syz.0.3712 Tainted: G U syzkaller #0 PREEMPT(full) [ 1142.412328][T26632] Tainted: [U]=USER [ 1142.412333][T26632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1142.412342][T26632] Call Trace: [ 1142.412348][T26632] [ 1142.412355][T26632] dump_stack_lvl+0x16c/0x1f0 [ 1142.412384][T26632] should_fail_ex+0x512/0x640 [ 1142.412411][T26632] should_fail_alloc_page+0xe7/0x130 [ 1142.412437][T26632] prepare_alloc_pages+0x3c2/0x610 [ 1142.412460][T26632] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1142.412479][T26632] ? stack_trace_save+0x8e/0xc0 [ 1142.412498][T26632] ? __pfx_stack_trace_save+0x10/0x10 [ 1142.412517][T26632] ? stack_depot_save_flags+0x29/0x9c0 [ 1142.412542][T26632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1142.412559][T26632] ? kernel_clone+0xfc/0x930 [ 1142.412578][T26632] ? __do_sys_clone+0xce/0x120 [ 1142.412596][T26632] ? do_syscall_64+0xcd/0x4b0 [ 1142.412612][T26632] ? __lock_acquire+0x62e/0x1ce0 [ 1142.412636][T26632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1142.412653][T26632] ? policy_nodemask+0xea/0x4e0 [ 1142.412671][T26632] alloc_pages_mpol+0x1fb/0x550 [ 1142.412688][T26632] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1142.412709][T26632] alloc_pages_noprof+0x131/0x390 [ 1142.412725][T26632] pgd_alloc+0x4b/0x650 [ 1142.412746][T26632] mm_init+0x71c/0x13a0 [ 1142.412762][T26632] ? copy_process+0x4027/0x76a0 [ 1142.412785][T26632] copy_process+0x407b/0x76a0 [ 1142.412804][T26632] ? __pfx___futex_wait+0x10/0x10 [ 1142.412825][T26632] ? __pfx_copy_process+0x10/0x10 [ 1142.412844][T26632] ? futex_private_hash_put+0x176/0x300 [ 1142.412865][T26632] ? futex_private_hash_put+0x18a/0x300 [ 1142.412888][T26632] kernel_clone+0xfc/0x930 [ 1142.412909][T26632] ? __pfx_kernel_clone+0x10/0x10 [ 1142.412939][T26632] __do_sys_clone+0xce/0x120 [ 1142.412959][T26632] ? __pfx___do_sys_clone+0x10/0x10 [ 1142.412987][T26632] ? xfd_validate_state+0x61/0x180 [ 1142.413009][T26632] ? __pfx_do_writev+0x10/0x10 [ 1142.413036][T26632] do_syscall_64+0xcd/0x4b0 [ 1142.413055][T26632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.413070][T26632] RIP: 0033:0x7fdd36b8eec9 [ 1142.413084][T26632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.413098][T26632] RSP: 002b:00007fdd3795d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1142.413112][T26632] RAX: ffffffffffffffda RBX: 00007fdd36de5fa0 RCX: 00007fdd36b8eec9 [ 1142.413122][T26632] RDX: 0000000000000000 RSI: 0000000100000000 RDI: 0000000000000007 [ 1142.413131][T26632] RBP: 00007fdd36c11f91 R08: 0000000000000006 R09: 0000000000000000 [ 1142.413140][T26632] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1142.413150][T26632] R13: 00007fdd36de6038 R14: 00007fdd36de5fa0 R15: 00007ffe1a81e8f8 [ 1142.413169][T26632] [ 1143.307035][T26644] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1143.335201][T26644] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1143.335201][T26644] [ 1143.737534][T26655] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.2.3718: Error -117 reading block bitmap for 4 [ 1143.784850][T26656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 1143.860143][T26659] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3719'. [ 1145.707599][T26709] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1147.561817][T26739] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1149.378120][T26756] kexec: Could not allocate control_code_buffer [ 1150.315728][T26800] FAULT_INJECTION: forcing a failure. [ 1150.315728][T26800] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1150.377505][T26800] CPU: 0 UID: 0 PID: 26800 Comm: syz.1.3755 Tainted: G U syzkaller #0 PREEMPT(full) [ 1150.377533][T26800] Tainted: [U]=USER [ 1150.377538][T26800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1150.377548][T26800] Call Trace: [ 1150.377553][T26800] [ 1150.377560][T26800] dump_stack_lvl+0x16c/0x1f0 [ 1150.377589][T26800] should_fail_ex+0x512/0x640 [ 1150.377615][T26800] get_futex_key+0x1d0/0x1560 [ 1150.377638][T26800] ? __pfx_get_futex_key+0x10/0x10 [ 1150.377656][T26800] ? do_raw_spin_lock+0x12c/0x2b0 [ 1150.377672][T26800] ? find_held_lock+0x2b/0x80 [ 1150.377693][T26800] futex_wait_setup+0x9d/0x550 [ 1150.377713][T26800] __futex_wait+0x193/0x2f0 [ 1150.377728][T26800] ? __pfx___futex_wait+0x10/0x10 [ 1150.377741][T26800] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1150.377761][T26800] ? lockdep_hardirqs_on+0x7c/0x110 [ 1150.377785][T26800] ? __pfx_futex_wake_mark+0x10/0x10 [ 1150.377802][T26800] ? futex_private_hash_put+0x176/0x300 [ 1150.377832][T26800] ? futex_private_hash_put+0x18a/0x300 [ 1150.377853][T26800] futex_wait+0xe8/0x380 [ 1150.377866][T26800] ? __pfx_futex_wait+0x10/0x10 [ 1150.377886][T26800] ? __lock_acquire+0x62e/0x1ce0 [ 1150.377912][T26800] do_futex+0x229/0x350 [ 1150.377933][T26800] ? __pfx_do_futex+0x10/0x10 [ 1150.377958][T26800] __x64_sys_futex+0x1e0/0x4c0 [ 1150.377979][T26800] ? __fget_files+0x20e/0x3c0 [ 1150.378002][T26800] ? __pfx___x64_sys_futex+0x10/0x10 [ 1150.378022][T26800] ? xfd_validate_state+0x61/0x180 [ 1150.378051][T26800] do_syscall_64+0xcd/0x4b0 [ 1150.378066][T26800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.378081][T26800] RIP: 0033:0x7f0c4b18eec9 [ 1150.378093][T26800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.378107][T26800] RSP: 002b:00007f0c4bf510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1150.378122][T26800] RAX: ffffffffffffffda RBX: 00007f0c4b3e5fa8 RCX: 00007f0c4b18eec9 [ 1150.378132][T26800] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c4b3e5fa8 [ 1150.378141][T26800] RBP: 00007f0c4b3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.378150][T26800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.378159][T26800] R13: 00007f0c4b3e6038 R14: 00007ffd7331bb90 R15: 00007ffd7331bc78 [ 1150.378178][T26800] [ 1152.240618][T26825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3752'. [ 1152.903333][T15575] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 1154.403717][T26870] random: crng reseeded on system resumption [ 1154.492661][T26876] openvswitch: netlink: Message has 4 unknown bytes. [ 1156.449285][T26924] random: crng reseeded on system resumption [ 1156.766815][T26931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1157.323461][ T30] audit: type=1800 audit(4294968430.954:73): pid=26944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3780" name="lu_gp_id" dev="configfs" ino=108185 res=0 errno=0 [ 1157.453535][T26947] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1159.029586][ T30] audit: type=1800 audit(4294968432.653:74): pid=26980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3784" name="lu_gp_id" dev="configfs" ino=108382 res=0 errno=0 [ 1161.500217][T27027] delete_channel: no stack [ 1161.891981][T27037] ICMPv6: process `syz.4.3795' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1162.389212][T27049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1163.171670][ T30] audit: type=1800 audit(4294968436.791:75): pid=27063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3807" name="lu_gp_id" dev="configfs" ino=108808 res=0 errno=0 [ 1163.314353][T27073] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1165.694486][T27119] FAULT_INJECTION: forcing a failure. [ 1165.694486][T27119] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.458284][T27123] Console: switching to colour frame buffer device 2x2 [ 1167.535055][T27119] CPU: 0 UID: 0 PID: 27119 Comm: syz.4.3810 Tainted: G U syzkaller #0 PREEMPT(full) [ 1167.535081][T27119] Tainted: [U]=USER [ 1167.535086][T27119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1167.535096][T27119] Call Trace: [ 1167.535102][T27119] [ 1167.535108][T27119] dump_stack_lvl+0x16c/0x1f0 [ 1167.535137][T27119] should_fail_ex+0x512/0x640 [ 1167.535159][T27119] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1167.535184][T27119] should_failslab+0xc2/0x120 [ 1167.535200][T27119] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1167.535223][T27119] ? fib_net_init+0x1a4/0x3f0 [ 1167.535241][T27119] fib_net_init+0x1a4/0x3f0 [ 1167.535258][T27119] ? __pfx___register_sysctl_table+0x10/0x10 [ 1167.535279][T27119] ? __pfx_fib_net_init+0x10/0x10 [ 1167.535293][T27119] ? lockdep_init_map_type+0x5c/0x280 [ 1167.535316][T27119] ? do_init_timer+0xc9/0x110 [ 1167.535336][T27119] ? devinet_init_net+0x5c2/0x910 [ 1167.535354][T27119] ? __pfx_fib_net_init+0x10/0x10 [ 1167.535367][T27119] ops_init+0x1df/0x5f0 [ 1167.535384][T27119] setup_net+0x100/0x390 [ 1167.535398][T27119] ? __pfx_setup_net+0x10/0x10 [ 1167.535412][T27119] ? debug_mutex_init+0x37/0x70 [ 1167.535431][T27119] copy_net_ns+0x2f8/0x690 [ 1167.535448][T27119] create_new_namespaces+0x3ea/0xa90 [ 1167.535471][T27119] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1167.535492][T27119] ksys_unshare+0x45b/0xa40 [ 1167.535518][T27119] ? __pfx_ksys_unshare+0x10/0x10 [ 1167.535540][T27119] ? xfd_validate_state+0x61/0x180 [ 1167.535570][T27119] __x64_sys_unshare+0x31/0x40 [ 1167.535591][T27119] do_syscall_64+0xcd/0x4b0 [ 1167.535606][T27119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.535621][T27119] RIP: 0033:0x7fbdab98eec9 [ 1167.535634][T27119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.535648][T27119] RSP: 002b:00007fbdac7d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1167.535663][T27119] RAX: ffffffffffffffda RBX: 00007fbdabbe5fa0 RCX: 00007fbdab98eec9 [ 1167.535673][T27119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1167.535682][T27119] RBP: 00007fbdaba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1167.535691][T27119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.535700][T27119] R13: 00007fbdabbe6038 R14: 00007fbdabbe5fa0 R15: 00007ffd4b9e59c8 [ 1167.535720][T27119] [ 1168.241003][T23196] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.354731][T27118] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1168.378263][T23196] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.522145][T23196] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.580302][T23196] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.181296][T23196] bridge_slave_1: left allmulticast mode [ 1169.219801][T23196] bridge_slave_1: left promiscuous mode [ 1169.245005][T23196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.304491][T23196] bridge_slave_0: left allmulticast mode [ 1169.358997][T23196] bridge_slave_0: left promiscuous mode [ 1169.384749][T23196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.688486][T21528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1169.701739][T21528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1169.709791][T21528] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1169.718445][T21528] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1169.726449][T21528] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1170.268814][T23196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.294529][T23196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.311296][T23196] bond0 (unregistering): Released all slaves [ 1171.168004][T23196] hsr_slave_0: left promiscuous mode [ 1171.189371][T23196] hsr_slave_1: left promiscuous mode [ 1171.214063][T23196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.239972][T23196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.299206][T23196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.337521][T23196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.451520][T23196] veth1_macvtap: left promiscuous mode [ 1171.483278][T23196] veth0_macvtap: left promiscuous mode [ 1171.506449][T23196] veth1_vlan: left promiscuous mode [ 1171.532173][T23196] veth0_vlan: left promiscuous mode [ 1171.760259][T21528] Bluetooth: hci2: command tx timeout [ 1172.640336][T27227] FAULT_INJECTION: forcing a failure. [ 1172.640336][T27227] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.702044][T27227] CPU: 0 UID: 0 PID: 27227 Comm: syz.2.3825 Tainted: G U syzkaller #0 PREEMPT(full) [ 1172.702071][T27227] Tainted: [U]=USER [ 1172.702077][T27227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1172.702087][T27227] Call Trace: [ 1172.702093][T27227] [ 1172.702100][T27227] dump_stack_lvl+0x16c/0x1f0 [ 1172.702128][T27227] should_fail_ex+0x512/0x640 [ 1172.702156][T27227] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1172.702174][T27227] should_failslab+0xc2/0x120 [ 1172.702192][T27227] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1172.702205][T27227] ? __lock_acquire+0x62e/0x1ce0 [ 1172.702227][T27227] ? __pmd_alloc+0xbf/0x930 [ 1172.702249][T27227] __pmd_alloc+0xbf/0x930 [ 1172.702270][T27227] walk_pgd_range+0x88b/0x1f50 [ 1172.702288][T27227] ? mt_find+0x757/0xa30 [ 1172.702303][T27227] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1172.702320][T27227] ? mt_find+0x3ef/0xa30 [ 1172.702335][T27227] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1172.702352][T27227] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1172.702369][T27227] ? __pfx_walk_pgd_range+0x10/0x10 [ 1172.702389][T27227] __walk_page_range+0x163/0x820 [ 1172.702406][T27227] ? find_vma+0xbf/0x140 [ 1172.702421][T27227] ? __pfx_find_vma+0x10/0x10 [ 1172.702439][T27227] ? walk_page_test+0x9b/0x180 [ 1172.702454][T27227] walk_page_range_mm+0x461/0xb40 [ 1172.702473][T27227] ? __pfx_walk_page_range_mm+0x10/0x10 [ 1172.702493][T27227] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1172.702517][T27227] madvise_vma_behavior+0xa62/0x2d60 [ 1172.702538][T27227] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 1172.702561][T27227] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1172.702581][T27227] ? __pfx_mas_prev+0x10/0x10 [ 1172.702599][T27227] ? find_vma_prev+0xda/0x160 [ 1172.702615][T27227] ? find_held_lock+0x2b/0x80 [ 1172.702630][T27227] ? __pfx_find_vma_prev+0x10/0x10 [ 1172.702647][T27227] ? futex_unqueue+0x133/0x2c0 [ 1172.702672][T27227] ? __futex_wait+0x24b/0x2f0 [ 1172.702689][T27227] madvise_walk_vmas+0x31f/0x9c0 [ 1172.702710][T27227] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1172.702733][T27227] madvise_do_behavior+0x1e2/0x530 [ 1172.702750][T27227] ? futex_private_hash_put+0x18a/0x300 [ 1172.702770][T27227] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1172.702789][T27227] ? down_read+0x13d/0x480 [ 1172.702813][T27227] do_madvise+0x176/0x240 [ 1172.702830][T27227] ? __pfx_do_madvise+0x10/0x10 [ 1172.702847][T27227] ? do_futex+0x122/0x350 [ 1172.702879][T27227] ? xfd_validate_state+0x61/0x180 [ 1172.702905][T27227] ? __pfx_ksys_write+0x10/0x10 [ 1172.702922][T27227] __x64_sys_madvise+0xa9/0x110 [ 1172.702940][T27227] ? lockdep_hardirqs_on+0x7c/0x110 [ 1172.702963][T27227] do_syscall_64+0xcd/0x4b0 [ 1172.702978][T27227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.702993][T27227] RIP: 0033:0x7f7264f8eec9 [ 1172.703006][T27227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.703021][T27227] RSP: 002b:00007f72631b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1172.703037][T27227] RAX: ffffffffffffffda RBX: 00007f72651e6180 RCX: 00007f7264f8eec9 [ 1172.703047][T27227] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 1172.703056][T27227] RBP: 00007f7265011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1172.703066][T27227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.703075][T27227] R13: 00007f72651e6218 R14: 00007f72651e6180 R15: 00007ffc12891618 [ 1172.703095][T27227] [ 1173.041184][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.690879][T23196] team0 (unregistering): Port device team_slave_1 removed [ 1173.792478][T23196] team0 (unregistering): Port device team_slave_0 removed [ 1173.844916][T21528] Bluetooth: hci2: command tx timeout [ 1175.073503][T27169] chnl_net:caif_netlink_parms(): no params data found                                                                               getty: ttyS0: read error: Resource temporarily unavailable [ 1177.242636][T27169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.242652][T27169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.242670][T27169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.243820][T27169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.243831][T27169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.243848][T27169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.381949][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.382018][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.529452][T27169] hsr_slave_0: entered promiscuous mode [ 1177.532310][T27169] hsr_slave_1: entered promiscuous mode [ 1177.532731][T27169] debugfs: 'hsr0' already exists in 'hsr' [ 1177.532747][T27169] Cannot create hsr debugfs directory [ 1177.657939][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.002728][T21528] Bluetooth: hci2: command tx timeout [ 1178.834799][T27169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1178.928305][T27169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1179.036408][T27330] FAULT_INJECTION: forcing a failure. [ 1179.036408][T27330] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.050536][T21528] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1179.069929][T27169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1179.105601][T27169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1179.218067][T27330] CPU: 0 UID: 0 PID: 27330 Comm: syz.0.3837 Tainted: G U syzkaller #0 PREEMPT(full) [ 1179.218094][T27330] Tainted: [U]=USER [ 1179.218099][T27330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1179.218108][T27330] Call Trace: [ 1179.218114][T27330] [ 1179.218121][T27330] dump_stack_lvl+0x16c/0x1f0 [ 1179.218149][T27330] should_fail_ex+0x512/0x640 [ 1179.218173][T27330] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1179.218193][T27330] should_failslab+0xc2/0x120 [ 1179.218210][T27330] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1179.218226][T27330] ? lockdep_hardirqs_on+0x7c/0x110 [ 1179.218247][T27330] ? fib_notifier_ops_register+0x32/0x270 [ 1179.218266][T27330] kmemdup_noprof+0x29/0x60 [ 1179.218282][T27330] fib_notifier_ops_register+0x32/0x270 [ 1179.218298][T27330] fib4_notifier_init+0x4f/0xd0 [ 1179.218313][T27330] fib_net_init+0xbf/0x3f0 [ 1179.218327][T27330] ? __pfx___register_sysctl_table+0x10/0x10 [ 1179.218347][T27330] ? __pfx_fib_net_init+0x10/0x10 [ 1179.218362][T27330] ? lockdep_init_map_type+0x5c/0x280 [ 1179.218385][T27330] ? do_init_timer+0xc9/0x110 [ 1179.218405][T27330] ? devinet_init_net+0x5c2/0x910 [ 1179.218423][T27330] ? __pfx_fib_net_init+0x10/0x10 [ 1179.218437][T27330] ops_init+0x1df/0x5f0 [ 1179.218452][T27330] setup_net+0x100/0x390 [ 1179.218466][T27330] ? __pfx_setup_net+0x10/0x10 [ 1179.218481][T27330] ? debug_mutex_init+0x37/0x70 [ 1179.218500][T27330] copy_net_ns+0x2f8/0x690 [ 1179.218517][T27330] create_new_namespaces+0x3ea/0xa90 [ 1179.218540][T27330] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1179.218560][T27330] ksys_unshare+0x45b/0xa40 [ 1179.218581][T27330] ? __pfx_ksys_unshare+0x10/0x10 [ 1179.218603][T27330] ? xfd_validate_state+0x61/0x180 [ 1179.218638][T27330] __x64_sys_unshare+0x31/0x40 [ 1179.218659][T27330] do_syscall_64+0xcd/0x4b0 [ 1179.218674][T27330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.218689][T27330] RIP: 0033:0x7fdd36b8eec9 [ 1179.218702][T27330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.218716][T27330] RSP: 002b:00007fdd3795d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1179.218730][T27330] RAX: ffffffffffffffda RBX: 00007fdd36de5fa0 RCX: 00007fdd36b8eec9 [ 1179.218740][T27330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1179.218749][T27330] RBP: 00007fdd36c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1179.218758][T27330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.218767][T27330] R13: 00007fdd36de6038 R14: 00007fdd36de5fa0 R15: 00007ffe1a81e8f8 [ 1179.218786][T27330] [ 1179.477024][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.396568][T27169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.428862][T27169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.456715][T20374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.463838][T20374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.500745][T20374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.507866][T20374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.639750][T27169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1180.904900][T27366] zswap: compressor not available [ 1181.122571][T15575] Bluetooth: hci3: command 0x0c1a tx timeout [ 1181.414973][T27169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.919109][T27397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1182.252579][T27169] veth0_vlan: entered promiscuous mode [ 1182.295540][T27169] veth1_vlan: entered promiscuous mode [ 1182.381694][T27404] FAULT_INJECTION: forcing a failure. [ 1182.381694][T27404] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.449894][T27404] CPU: 0 UID: 0 PID: 27404 Comm: syz.1.3847 Tainted: G U syzkaller #0 PREEMPT(full) [ 1182.449919][T27404] Tainted: [U]=USER [ 1182.449925][T27404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1182.449934][T27404] Call Trace: [ 1182.449939][T27404] [ 1182.449946][T27404] dump_stack_lvl+0x16c/0x1f0 [ 1182.449973][T27404] should_fail_ex+0x512/0x640 [ 1182.449996][T27404] ? fs_reclaim_acquire+0xae/0x150 [ 1182.450017][T27404] ? tomoyo_open_control+0x51f/0xa30 [ 1182.450037][T27404] should_failslab+0xc2/0x120 [ 1182.450053][T27404] __kmalloc_noprof+0xd2/0x510 [ 1182.450072][T27404] tomoyo_open_control+0x51f/0xa30 [ 1182.450096][T27404] do_dentry_open+0x97f/0x1530 [ 1182.450111][T27404] ? __pfx_tomoyo_open+0x10/0x10 [ 1182.450134][T27404] vfs_open+0x82/0x3f0 [ 1182.450154][T27404] path_openat+0x1de4/0x2cb0 [ 1182.450174][T27404] ? __pfx_path_openat+0x10/0x10 [ 1182.450193][T27404] do_filp_open+0x20b/0x470 [ 1182.450207][T27404] ? __pfx_do_filp_open+0x10/0x10 [ 1182.450234][T27404] ? alloc_fd+0x471/0x7d0 [ 1182.450261][T27404] do_sys_openat2+0x11b/0x1d0 [ 1182.450280][T27404] ? __pfx_do_sys_openat2+0x10/0x10 [ 1182.450306][T27404] __x64_sys_openat+0x174/0x210 [ 1182.450325][T27404] ? __pfx___x64_sys_openat+0x10/0x10 [ 1182.450352][T27404] do_syscall_64+0xcd/0x4b0 [ 1182.450367][T27404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.450382][T27404] RIP: 0033:0x7f0c4b18eec9 [ 1182.450403][T27404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.450418][T27404] RSP: 002b:00007f0c493f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1182.450432][T27404] RAX: ffffffffffffffda RBX: 00007f0c4b3e6090 RCX: 00007f0c4b18eec9 [ 1182.450443][T27404] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1182.450452][T27404] RBP: 00007f0c4b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1182.450461][T27404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.450470][T27404] R13: 00007f0c4b3e6128 R14: 00007f0c4b3e6090 R15: 00007ffd7331bc78 [ 1182.450490][T27404] [ 1182.659527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.672372][T27409] < [ 1183.025559][T27169] veth0_macvtap: entered promiscuous mode [ 1183.051685][T27169] veth1_macvtap: entered promiscuous mode [ 1183.231238][T27169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.372828][T27169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.453132][T27422] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1183.511112][T23217] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.655541][T23217] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.705769][T23217] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.891255][T23217] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.915233][T15575] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1184.177605][T23196] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 909 with max blocks 2 with error 117 [ 1184.245006][T23196] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1184.245006][T23196] [ 1184.598370][T20374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.643968][T20374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.817873][T15400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.875758][T15400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.174654][T20374] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 909 with max blocks 1 with error 117 [ 1185.174680][T20374] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1185.174680][T20374] [ 1185.603465][T27457] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1185.649107][T27461] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1187.208473][T27507] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1187.325812][T27513] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1187.634976][T27517] random: crng reseeded on system resumption [ 1188.150060][T15575] Bluetooth: hci0: ACL packet too small syzkaller syzkaller login: [ 1188.773371][T27535] ptp ptp0: new virtual clock ptp1 [ 1188.916431][T27535] ptp ptp0: new virtual clock ptp2 [ 1189.038255][T27535] ptp ptp0: new virtual clock ptp3 [ 1189.139278][T27535] ptp ptp0: new virtual clock ptp4 [ 1189.200139][T27535] ptp ptp0: new virtual clock ptp5 [ 1189.273891][T27535] ptp ptp0: new virtual clock ptp6 [ 1189.355178][T27535] ptp ptp0: new virtual clock ptp7 [ 1189.422370][T27535] ptp ptp0: new virtual clock ptp8 [ 1189.474370][T27535] failed to create ptp aux_worker -4 [ 1192.124467][T15575] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1192.603882][T27627] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 1192.819354][T27627] ima: policy update failed [ 1193.022202][ T30] audit: type=1802 audit(4294969489.629:76): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3885" res=0 errno=0 [ 1193.207360][ T30] audit: type=1804 audit(4294969489.679:77): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3886" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1193.831183][T27656] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1194.172626][T27670] netlink: 86 bytes leftover after parsing attributes in process `syz.2.3892'. [ 1195.054110][T15575] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1195.066761][T15575] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1195.076705][T15575] CPU: 0 UID: 0 PID: 15575 Comm: kworker/u9:1 Tainted: G U syzkaller #0 PREEMPT(full) [ 1195.076731][T15575] Tainted: [U]=USER [ 1195.076737][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1195.076748][T15575] Workqueue: hci3 hci_rx_work [ 1195.076773][T15575] Call Trace: [ 1195.076779][T15575] [ 1195.076787][T15575] dump_stack_lvl+0x16c/0x1f0 [ 1195.076813][T15575] sysfs_warn_dup+0x7f/0xa0 [ 1195.076830][T15575] sysfs_create_dir_ns+0x24b/0x2b0 [ 1195.076846][T15575] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1195.076860][T15575] ? find_held_lock+0x2b/0x80 [ 1195.076881][T15575] ? do_raw_spin_unlock+0x172/0x230 [ 1195.076898][T15575] kobject_add_internal+0x2c4/0x9b0 [ 1195.076918][T15575] kobject_add+0x16e/0x240 [ 1195.076933][T15575] ? __pfx_kobject_add+0x10/0x10 [ 1195.076951][T15575] ? do_raw_spin_unlock+0x172/0x230 [ 1195.076965][T15575] ? kobject_put+0xab/0x5a0 [ 1195.076985][T15575] device_add+0x288/0x1aa0 [ 1195.077002][T15575] ? __pfx_dev_set_name+0x10/0x10 [ 1195.077019][T15575] ? __pfx_device_add+0x10/0x10 [ 1195.077035][T15575] ? mgmt_send_event_skb+0x2fb/0x460 [ 1195.077060][T15575] hci_conn_add_sysfs+0x17e/0x230 [ 1195.077084][T15575] le_conn_complete_evt+0x1260/0x2150 [ 1195.077109][T15575] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1195.077128][T15575] ? bt_warn+0xe4/0x120 [ 1195.077145][T15575] ? __pfx_bt_warn+0x10/0x10 [ 1195.077167][T15575] hci_le_conn_complete_evt+0x23c/0x370 [ 1195.077191][T15575] hci_le_meta_evt+0x354/0x5e0 [ 1195.077212][T15575] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1195.077234][T15575] hci_event_packet+0x685/0x11c0 [ 1195.077253][T15575] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1195.077276][T15575] ? __pfx_hci_event_packet+0x10/0x10 [ 1195.077297][T15575] ? kcov_remote_start+0x3c9/0x6d0 [ 1195.077312][T15575] ? lockdep_hardirqs_on+0x7c/0x110 [ 1195.077338][T15575] hci_rx_work+0x2c5/0x16b0 [ 1195.077359][T15575] ? rcu_is_watching+0x12/0xc0 [ 1195.077380][T15575] process_one_work+0x9cf/0x1b70 [ 1195.077412][T15575] ? __pfx_process_one_work+0x10/0x10 [ 1195.077433][T15575] ? assign_work+0x1a0/0x250 [ 1195.077459][T15575] worker_thread+0x6c8/0xf10 [ 1195.077481][T15575] ? __kthread_parkme+0x19e/0x250 [ 1195.077501][T15575] ? __pfx_worker_thread+0x10/0x10 [ 1195.077516][T15575] kthread+0x3c2/0x780 [ 1195.077539][T15575] ? __pfx_kthread+0x10/0x10 [ 1195.077563][T15575] ? rcu_is_watching+0x12/0xc0 [ 1195.077580][T15575] ? __pfx_kthread+0x10/0x10 [ 1195.077603][T15575] ret_from_fork+0x56d/0x730 [ 1195.077616][T15575] ? __pfx_kthread+0x10/0x10 [ 1195.077639][T15575] ret_from_fork_asm+0x1a/0x30 [ 1195.077668][T15575] [ 1195.077690][T15575] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1195.369214][T15575] Bluetooth: hci3: failed to register connection device [ 1196.844702][T27724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1196.870870][T27724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1196.898071][ T30] audit: type=1804 audit(4294969493.497:78): pid=27729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3899" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1196.939514][T27724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1197.007814][T27724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1197.039491][T27724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1197.068140][T27724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1197.106820][T27724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1197.151049][T27724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1197.412125][T27743] FAULT_INJECTION: forcing a failure. [ 1197.412125][T27743] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.510141][T27743] CPU: 0 UID: 0 PID: 27743 Comm: syz.2.3901 Tainted: G U syzkaller #0 PREEMPT(full) [ 1197.510167][T27743] Tainted: [U]=USER [ 1197.510173][T27743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1197.510182][T27743] Call Trace: [ 1197.510188][T27743] [ 1197.510194][T27743] dump_stack_lvl+0x16c/0x1f0 [ 1197.510222][T27743] should_fail_ex+0x512/0x640 [ 1197.510245][T27743] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1197.510268][T27743] should_failslab+0xc2/0x120 [ 1197.510286][T27743] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1197.510301][T27743] ? sk_prot_alloc+0x60/0x2a0 [ 1197.510321][T27743] sk_prot_alloc+0x60/0x2a0 [ 1197.510339][T27743] sk_alloc+0x36/0xc20 [ 1197.510361][T27743] __vsock_create.constprop.0+0x3c/0xbb0 [ 1197.510383][T27743] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1197.510400][T27743] vsock_create+0x139/0x500 [ 1197.510424][T27743] __sock_create+0x335/0x8d0 [ 1197.510445][T27743] __sys_socket+0x14d/0x260 [ 1197.510464][T27743] ? __pfx___sys_socket+0x10/0x10 [ 1197.510483][T27743] ? xfd_validate_state+0x61/0x180 [ 1197.510505][T27743] ? __task_pid_nr_ns+0x1f5/0x500 [ 1197.510529][T27743] __x64_sys_socket+0x72/0xb0 [ 1197.510546][T27743] ? lockdep_hardirqs_on+0x7c/0x110 [ 1197.510569][T27743] do_syscall_64+0xcd/0x4b0 [ 1197.510584][T27743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.510598][T27743] RIP: 0033:0x7f7264f8eec9 [ 1197.510611][T27743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.510625][T27743] RSP: 002b:00007f72631f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1197.510640][T27743] RAX: ffffffffffffffda RBX: 00007f72651e5fa0 RCX: 00007f7264f8eec9 [ 1197.510650][T27743] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 1197.510659][T27743] RBP: 00007f7265011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1197.510668][T27743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.510676][T27743] R13: 00007f72651e6038 R14: 00007f72651e5fa0 R15: 00007ffc12891618 [ 1197.510695][T27743] [ 1198.097331][T27742] FAULT_INJECTION: forcing a failure. [ 1198.097331][T27742] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.176426][T27742] CPU: 0 UID: 0 PID: 27742 Comm: syz.1.3900 Tainted: G U syzkaller #0 PREEMPT(full) [ 1198.176453][T27742] Tainted: [U]=USER [ 1198.176458][T27742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1198.176467][T27742] Call Trace: [ 1198.176473][T27742] [ 1198.176480][T27742] dump_stack_lvl+0x16c/0x1f0 [ 1198.176508][T27742] should_fail_ex+0x512/0x640 [ 1198.176531][T27742] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1198.176550][T27742] should_failslab+0xc2/0x120 [ 1198.176567][T27742] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1198.176583][T27742] ? __lock_acquire+0x62e/0x1ce0 [ 1198.176603][T27742] ? kstrdup_const+0x63/0x80 [ 1198.176621][T27742] kstrdup+0x53/0x100 [ 1198.176636][T27742] kstrdup_const+0x63/0x80 [ 1198.176651][T27742] kvasprintf_const+0x10f/0x1a0 [ 1198.176667][T27742] kobject_set_name_vargs+0x5a/0x140 [ 1198.176685][T27742] kobject_init_and_add+0xe7/0x190 [ 1198.176702][T27742] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1198.176722][T27742] ? up_write+0x1b2/0x520 [ 1198.176740][T27742] sysfs_slab_add+0x18e/0x1e0 [ 1198.176763][T27742] do_kmem_cache_create+0x529/0x720 [ 1198.176778][T27742] ? __kmem_cache_create_args+0x205/0x390 [ 1198.176803][T27742] __kmem_cache_create_args+0x225/0x390 [ 1198.176827][T27742] mon_text_open+0x313/0x4f0 [ 1198.176847][T27742] ? __pfx_mon_text_open+0x10/0x10 [ 1198.176864][T27742] ? __debugfs_file_get+0x1fe/0x840 [ 1198.176886][T27742] ? __pfx_mon_text_ctor+0x10/0x10 [ 1198.176904][T27742] ? __pfx_apparmor_file_open+0x10/0x10 [ 1198.176927][T27742] ? lockdown_is_locked_down+0x3f/0x130 [ 1198.176948][T27742] ? bpf_lsm_locked_down+0x9/0x10 [ 1198.176970][T27742] ? __pfx_mon_text_open+0x10/0x10 [ 1198.176987][T27742] full_proxy_open_regular+0x1b6/0x360 [ 1198.177012][T27742] do_dentry_open+0x97f/0x1530 [ 1198.177027][T27742] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1198.177054][T27742] vfs_open+0x82/0x3f0 [ 1198.177075][T27742] path_openat+0x1de4/0x2cb0 [ 1198.177096][T27742] ? __pfx_path_openat+0x10/0x10 [ 1198.177115][T27742] do_filp_open+0x20b/0x470 [ 1198.177130][T27742] ? __pfx_do_filp_open+0x10/0x10 [ 1198.177158][T27742] ? alloc_fd+0x471/0x7d0 [ 1198.177186][T27742] do_sys_openat2+0x11b/0x1d0 [ 1198.177212][T27742] ? __pfx_do_sys_openat2+0x10/0x10 [ 1198.177240][T27742] __x64_sys_openat+0x174/0x210 [ 1198.177261][T27742] ? __pfx___x64_sys_openat+0x10/0x10 [ 1198.177290][T27742] do_syscall_64+0xcd/0x4b0 [ 1198.177306][T27742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.177321][T27742] RIP: 0033:0x7f0c4b18eec9 [ 1198.177334][T27742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.177349][T27742] RSP: 002b:00007f0c4bf51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1198.177363][T27742] RAX: ffffffffffffffda RBX: 00007f0c4b3e5fa0 RCX: 00007f0c4b18eec9 [ 1198.177373][T27742] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1198.177383][T27742] RBP: 00007f0c4b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1198.177395][T27742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.177405][T27742] R13: 00007f0c4b3e6038 R14: 00007f0c4b3e5fa0 R15: 00007ffd7331bc78 [ 1198.177425][T27742] [ 1198.179376][T27742] kobject: can not set name properly! [ 1198.612915][T27761] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1198.662682][T27759] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1198.919649][T15575] Bluetooth: hci3: command 0x0c1a tx timeout [ 1198.940255][T15575] Bluetooth: hci0: command 0x0c1a tx timeout [ 1199.080472][T21528] Bluetooth: hci1: command 0x0c1a tx timeout [ 1199.174853][T15575] Bluetooth: hci2: command 0x0c1a tx timeout [ 1199.535348][T27742] SLUB: Unable to add cache mon_text_ffff88805c69e400 to sysfs [ 1200.972638][T21528] Bluetooth: hci3: command 0x0c1a tx timeout [ 1201.213929][T21528] Bluetooth: hci2: command 0x0c1a tx timeout [ 1202.194053][T15575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1202.215984][T15575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1202.224305][T15575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1202.241632][T15575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1202.249770][T15575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1202.840669][T27841] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1203.051799][T27832] chnl_net:caif_netlink_parms(): no params data found [ 1203.059066][T15575] Bluetooth: hci3: command 0x0c1a tx timeout [ 1203.186583][T27856] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 1203.293716][T15575] Bluetooth: hci2: command 0x0c1a tx timeout [ 1203.314641][T27856] ep_00: uevent: failed to send synthetic uevent: -22 [ 1203.509426][T27832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.552567][T27832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.592664][T27832] bridge_slave_0: entered allmulticast mode [ 1203.632400][T27832] bridge_slave_0: entered promiscuous mode [ 1203.676195][T27832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.712010][T27832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.756236][T27832] bridge_slave_1: entered allmulticast mode [ 1203.796173][T27832] bridge_slave_1: entered promiscuous mode [ 1204.163023][T27832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.268081][T27832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.280643][T27872] FAULT_INJECTION: forcing a failure. [ 1204.280643][T27872] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.333780][T15575] Bluetooth: hci4: command tx timeout [ 1204.369168][T27872] CPU: 0 UID: 0 PID: 27872 Comm: syz.5.3923 Tainted: G U syzkaller #0 PREEMPT(full) [ 1204.369193][T27872] Tainted: [U]=USER [ 1204.369199][T27872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1204.369208][T27872] Call Trace: [ 1204.369214][T27872] [ 1204.369220][T27872] dump_stack_lvl+0x16c/0x1f0 [ 1204.369248][T27872] should_fail_ex+0x512/0x640 [ 1204.369271][T27872] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1204.369288][T27872] should_failslab+0xc2/0x120 [ 1204.369306][T27872] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1204.369320][T27872] ? acpi_ex_resolve_to_value+0xfb/0x7e0 [ 1204.369335][T27872] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 1204.369357][T27872] acpi_ut_create_generic_state+0x5c/0xb0 [ 1204.369376][T27872] acpi_ds_result_push+0x195/0x380 [ 1204.369399][T27872] acpi_ds_evaluate_name_path+0x209/0x470 [ 1204.369420][T27872] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 1204.369442][T27872] ? acpi_ps_get_next_namepath+0x11c/0x730 [ 1204.369461][T27872] ? acpi_ps_get_next_namepath+0x1be/0x730 [ 1204.369485][T27872] acpi_ds_exec_end_op+0x3b0/0x1460 [ 1204.369507][T27872] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1204.369528][T27872] acpi_ps_parse_loop+0x425/0x1d00 [ 1204.369553][T27872] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1204.369572][T27872] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1204.369598][T27872] acpi_ps_parse_aml+0x3c1/0xcb0 [ 1204.369623][T27872] acpi_ps_execute_method+0x55a/0xb30 [ 1204.369651][T27872] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 1204.369668][T27872] acpi_ns_evaluate+0x76c/0xca0 [ 1204.369692][T27872] ? kasan_save_track+0x14/0x30 [ 1204.369715][T27872] acpi_evaluate_object+0x1fa/0xa90 [ 1204.369737][T27872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.369755][T27872] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1204.369775][T27872] ? __mutex_trylock_common+0xe9/0x250 [ 1204.369801][T27872] acpi_evaluate_integer+0xdd/0x200 [ 1204.369819][T27872] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1204.369845][T27872] ? __pfx_status_show+0x10/0x10 [ 1204.369864][T27872] status_show+0xa0/0x120 [ 1204.369885][T27872] ? __pfx_status_show+0x10/0x10 [ 1204.369910][T27872] dev_attr_show+0x56/0xe0 [ 1204.369927][T27872] ? __pfx_dev_attr_show+0x10/0x10 [ 1204.369940][T27872] sysfs_kf_seq_show+0x213/0x3e0 [ 1204.369959][T27872] seq_read_iter+0x509/0x12c0 [ 1204.369990][T27872] kernfs_fop_read_iter+0x46c/0x610 [ 1204.370012][T27872] ? rw_verify_area+0xcf/0x6c0 [ 1204.370036][T27872] vfs_read+0x8bf/0xcf0 [ 1204.370052][T27872] ? __pfx___mutex_lock+0x10/0x10 [ 1204.370066][T27872] ? __pfx_vfs_read+0x10/0x10 [ 1204.370093][T27872] ksys_read+0x12a/0x250 [ 1204.370106][T27872] ? __pfx_ksys_read+0x10/0x10 [ 1204.370125][T27872] do_syscall_64+0xcd/0x4b0 [ 1204.370141][T27872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.370156][T27872] RIP: 0033:0x7f93be58eec9 [ 1204.370169][T27872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.370183][T27872] RSP: 002b:00007f93bf368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1204.370197][T27872] RAX: ffffffffffffffda RBX: 00007f93be7e5fa0 RCX: 00007f93be58eec9 [ 1204.370208][T27872] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 1204.370217][T27872] RBP: 00007f93be611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1204.370226][T27872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.370235][T27872] R13: 00007f93be7e6038 R14: 00007f93be7e5fa0 R15: 00007fffd04c6898 [ 1204.370255][T27872] [ 1204.370264][T27872] ACPI Error: Failed to extend the result stack (20250404/dswstate-130) [ 1204.370337][T27872] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 1204.528363][T27832] team0: Port device team_slave_0 added [ 1204.530062][T27832] team0: Port device team_slave_1 added [ 1204.694841][T27832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.694856][T27832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.694874][T27832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.696780][T27832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.696793][T27832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.696811][T27832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.837554][T27832] hsr_slave_0: entered promiscuous mode [ 1204.838143][T27832] hsr_slave_1: entered promiscuous mode [ 1204.838535][T27832] debugfs: 'hsr0' already exists in 'hsr' [ 1204.838550][T27832] Cannot create hsr debugfs directory [ 1205.721686][T27832] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1205.736192][T27832] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1205.766612][T27897] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1205.784848][T27832] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1205.798664][T27832] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1206.227811][T27832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.278109][T27832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.314678][T23215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.314773][T23215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.368788][T23215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.368857][T23215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.418249][T15575] Bluetooth: hci4: command tx timeout [ 1206.456635][T27832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1206.456654][T27832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1206.739242][T27915] FAULT_INJECTION: forcing a failure. [ 1206.739242][T27915] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.739270][T27915] CPU: 0 UID: 0 PID: 27915 Comm: syz.5.3928 Tainted: G U syzkaller #0 PREEMPT(full) [ 1206.739291][T27915] Tainted: [U]=USER [ 1206.739296][T27915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1206.739305][T27915] Call Trace: [ 1206.739310][T27915] [ 1206.739317][T27915] dump_stack_lvl+0x16c/0x1f0 [ 1206.739344][T27915] should_fail_ex+0x512/0x640 [ 1206.739367][T27915] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1206.739384][T27915] should_failslab+0xc2/0x120 [ 1206.739400][T27915] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1206.739415][T27915] ? sk_prot_alloc+0x60/0x2a0 [ 1206.739434][T27915] sk_prot_alloc+0x60/0x2a0 [ 1206.739451][T27915] sk_alloc+0x36/0xc20 [ 1206.739472][T27915] __vsock_create.constprop.0+0x3c/0xbb0 [ 1206.739494][T27915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1206.739519][T27915] vsock_create+0x139/0x500 [ 1206.739544][T27915] __sock_create+0x335/0x8d0 [ 1206.739567][T27915] __sys_socket+0x14d/0x260 [ 1206.739586][T27915] ? __pfx___sys_socket+0x10/0x10 [ 1206.739604][T27915] ? xfd_validate_state+0x61/0x180 [ 1206.739626][T27915] ? __task_pid_nr_ns+0x1f5/0x500 [ 1206.739655][T27915] __x64_sys_socket+0x72/0xb0 [ 1206.739673][T27915] ? lockdep_hardirqs_on+0x7c/0x110 [ 1206.739694][T27915] do_syscall_64+0xcd/0x4b0 [ 1206.739709][T27915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.739724][T27915] RIP: 0033:0x7f93be58eec9 [ 1206.739736][T27915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.739751][T27915] RSP: 002b:00007f93bf368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1206.739765][T27915] RAX: ffffffffffffffda RBX: 00007f93be7e5fa0 RCX: 00007f93be58eec9 [ 1206.739775][T27915] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 1206.739784][T27915] RBP: 00007f93be611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1206.739792][T27915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.739801][T27915] R13: 00007f93be7e6038 R14: 00007f93be7e5fa0 R15: 00007fffd04c6898 [ 1206.739819][T27915] [ 1207.151787][T27832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.150378][T27832] veth0_vlan: entered promiscuous mode [ 1208.154303][T27832] veth1_vlan: entered promiscuous mode [ 1208.169655][T27940] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1208.270501][T27832] veth0_macvtap: entered promiscuous mode [ 1208.288238][T27832] veth1_macvtap: entered promiscuous mode [ 1208.350703][T27832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.361873][T27832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.382572][T23215] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.382978][T23215] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.383377][T23215] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.383418][T23215] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.497090][T15575] Bluetooth: hci4: command tx timeout [ 1208.633536][T23215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.633553][T23215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.743420][T23215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.743437][T23215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.576894][T15575] Bluetooth: hci4: command tx timeout [ 1210.592237][T27955] Console: switching to colour VGA+ 32x100 [ 1211.043939][ T30] audit: type=1800 audit(4294969507.640:79): pid=27988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3939" name="lu_gp_id" dev="configfs" ino=114234 res=0 errno=0 [ 1211.817917][T28001] HfR: entered promiscuous mode [ 1212.723983][T28000] zswap: compressor not available [ 1212.771625][T28018] netlink: 'syz.5.3946': attribute type 1 has an invalid length. [ 1214.601456][T28062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.615096][T15575] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1214.694829][T28062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.228085][T28075] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1216.980206][T28111] netlink: 294 bytes leftover after parsing attributes in process `syz.6.3963'. [ 1217.127696][T28116] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1219.817050][T28154] FAULT_INJECTION: forcing a failure. [ 1219.817050][T28154] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.893277][T28154] CPU: 0 UID: 0 PID: 28154 Comm: syz.5.3971 Tainted: G U syzkaller #0 PREEMPT(full) [ 1219.893305][T28154] Tainted: [U]=USER [ 1219.893311][T28154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1219.893320][T28154] Call Trace: [ 1219.893326][T28154] [ 1219.893332][T28154] dump_stack_lvl+0x16c/0x1f0 [ 1219.893361][T28154] should_fail_ex+0x512/0x640 [ 1219.893384][T28154] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1219.893402][T28154] should_failslab+0xc2/0x120 [ 1219.893418][T28154] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1219.893433][T28154] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 1219.893456][T28154] acpi_ut_create_generic_state+0x5c/0xb0 [ 1219.893475][T28154] acpi_ps_init_scope+0x1a/0x1c0 [ 1219.893496][T28154] acpi_ds_init_aml_walk+0x1d9/0x590 [ 1219.893530][T28154] acpi_ds_call_control_method+0x2e7/0x7c0 [ 1219.893555][T28154] acpi_ps_parse_aml+0x845/0xcb0 [ 1219.893579][T28154] acpi_ps_execute_method+0x55a/0xb30 [ 1219.893604][T28154] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 1219.893621][T28154] acpi_ns_evaluate+0x76c/0xca0 [ 1219.893646][T28154] ? kasan_save_track+0x14/0x30 [ 1219.893661][T28154] acpi_evaluate_object+0x1fa/0xa90 [ 1219.893682][T28154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.893700][T28154] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1219.893719][T28154] ? __mutex_trylock_common+0xe9/0x250 [ 1219.893745][T28154] acpi_evaluate_integer+0xdd/0x200 [ 1219.893764][T28154] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1219.893790][T28154] ? __pfx_status_show+0x10/0x10 [ 1219.893809][T28154] status_show+0xa0/0x120 [ 1219.893829][T28154] ? __pfx_status_show+0x10/0x10 [ 1219.893854][T28154] dev_attr_show+0x56/0xe0 [ 1219.893871][T28154] ? __pfx_dev_attr_show+0x10/0x10 [ 1219.893884][T28154] sysfs_kf_seq_show+0x213/0x3e0 [ 1219.893903][T28154] seq_read_iter+0x509/0x12c0 [ 1219.893933][T28154] kernfs_fop_read_iter+0x46c/0x610 [ 1219.893955][T28154] ? rw_verify_area+0xcf/0x6c0 [ 1219.893978][T28154] vfs_read+0x8bf/0xcf0 [ 1219.893994][T28154] ? __pfx___mutex_lock+0x10/0x10 [ 1219.894009][T28154] ? __pfx_vfs_read+0x10/0x10 [ 1219.894035][T28154] ksys_read+0x12a/0x250 [ 1219.894048][T28154] ? __pfx_ksys_read+0x10/0x10 [ 1219.894068][T28154] do_syscall_64+0xcd/0x4b0 [ 1219.894083][T28154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.894097][T28154] RIP: 0033:0x7f93be58eec9 [ 1219.894111][T28154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.894125][T28154] RSP: 002b:00007f93bf368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1219.894139][T28154] RAX: ffffffffffffffda RBX: 00007f93be7e5fa0 RCX: 00007f93be58eec9 [ 1219.894149][T28154] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 1219.894159][T28154] RBP: 00007f93be611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1219.894168][T28154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.894178][T28154] R13: 00007f93be7e6038 R14: 00007f93be7e5fa0 R15: 00007fffd04c6898 [ 1219.894199][T28154] [ 1219.894285][T28154] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 1223.033981][T28206] __vm_enough_memory: pid: 28206, comm: syz.5.3983, bytes: 4398046511104 not enough memory for the allocation [ 1223.158547][T28201] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1223.767108][T28223] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1224.046740][T28229] FAULT_INJECTION: forcing a failure. [ 1224.046740][T28229] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.128938][T28229] CPU: 0 UID: 0 PID: 28229 Comm: syz.5.3988 Tainted: G U syzkaller #0 PREEMPT(full) [ 1224.128965][T28229] Tainted: [U]=USER [ 1224.128971][T28229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1224.128980][T28229] Call Trace: [ 1224.128986][T28229] [ 1224.128992][T28229] dump_stack_lvl+0x16c/0x1f0 [ 1224.129021][T28229] should_fail_ex+0x512/0x640 [ 1224.129044][T28229] ? __kmalloc_noprof+0xbf/0x510 [ 1224.129060][T28229] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 1224.129075][T28229] should_failslab+0xc2/0x120 [ 1224.129092][T28229] __kmalloc_noprof+0xd2/0x510 [ 1224.129104][T28229] ? acpi_ds_is_result_used+0x158/0x430 [ 1224.129129][T28229] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 1224.129147][T28229] acpi_ex_start_trace_method+0x30/0x480 [ 1224.129166][T28229] acpi_ds_begin_method_execution+0x3c/0x980 [ 1224.129192][T28229] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1224.129216][T28229] acpi_ds_call_control_method+0xf9/0x7c0 [ 1224.129239][T28229] acpi_ps_parse_aml+0x845/0xcb0 [ 1224.129264][T28229] acpi_ps_execute_method+0x55a/0xb30 [ 1224.129288][T28229] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 1224.129306][T28229] acpi_ns_evaluate+0x76c/0xca0 [ 1224.129330][T28229] ? kasan_save_track+0x14/0x30 [ 1224.129346][T28229] acpi_evaluate_object+0x1fa/0xa90 [ 1224.129367][T28229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.129384][T28229] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1224.129404][T28229] ? __mutex_trylock_common+0xe9/0x250 [ 1224.129430][T28229] acpi_evaluate_integer+0xdd/0x200 [ 1224.129449][T28229] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1224.129475][T28229] ? __pfx_status_show+0x10/0x10 [ 1224.129495][T28229] status_show+0xa0/0x120 [ 1224.129515][T28229] ? __pfx_status_show+0x10/0x10 [ 1224.129540][T28229] dev_attr_show+0x56/0xe0 [ 1224.129557][T28229] ? __pfx_dev_attr_show+0x10/0x10 [ 1224.129570][T28229] sysfs_kf_seq_show+0x213/0x3e0 [ 1224.129589][T28229] seq_read_iter+0x509/0x12c0 [ 1224.129619][T28229] kernfs_fop_read_iter+0x46c/0x610 [ 1224.129645][T28229] ? rw_verify_area+0xcf/0x6c0 [ 1224.129668][T28229] vfs_read+0x8bf/0xcf0 [ 1224.129684][T28229] ? __pfx___mutex_lock+0x10/0x10 [ 1224.129699][T28229] ? __pfx_vfs_read+0x10/0x10 [ 1224.129728][T28229] ksys_read+0x12a/0x250 [ 1224.129742][T28229] ? __pfx_ksys_read+0x10/0x10 [ 1224.129762][T28229] do_syscall_64+0xcd/0x4b0 [ 1224.129778][T28229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.129792][T28229] RIP: 0033:0x7f93be58eec9 [ 1224.129805][T28229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.129819][T28229] RSP: 002b:00007f93bf368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1224.129833][T28229] RAX: ffffffffffffffda RBX: 00007f93be7e5fa0 RCX: 00007f93be58eec9 [ 1224.129844][T28229] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 1224.129853][T28229] RBP: 00007f93be611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1224.129862][T28229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.129871][T28229] R13: 00007f93be7e6038 R14: 00007f93be7e5fa0 R15: 00007fffd04c6898 [ 1224.129891][T28229] [ 1224.439965][T28229] ACPI Error: Could not allocate 10 bytes (20250404/nsnames-308) [ 1226.071849][T23215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.091404][T28264] ptrace attach of "./syz-executor exec"[19018] was attempted by "7|:8L\x0aY\x0br.%ǩm:Y:p9Qg?Uמcj23L*\x0b*h,Cn9ɲy@eY5\x1bE֐ΏVCg~_ݢ|]x]\x0b\x0d#$>6Y(ڤIRB\x07F::624˽7`7 ?VUՅl\x5c/qD&:hP\x0coC6 *>6\x0b_q_uH\x0cF1;›;~Q,}+stq\x1b>v;3}cNaOSA\x0aRw7˥Y\x07V>Z>Upo~S-=Up:˅v\x5cҸ7z& F_##Jgᶂoan_`4C-?TLٹEnL̔U&<=UuP\x22\x09(\x0cJ7jЎwle1I9=1op2\x1bh=pbh;c:6T3&q}1>O^`. f|}qU-4D\x5cm5@֔΋&_-‚oy\x1bS,0Rp\x0al'FskcU}^bA%\x0d^*[$FrY0y0* v\x09k\x1bQ^mdׂ~6\x0ay 3T\x0c90bYє?ONhXn;\x5c 1BC\x0bKH1A#jTZ:u%{vev߫^%ܐ'E\x5c\x0bvz3@&of큆 [ 1226.372020][T23215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.826723][T28275] FAULT_INJECTION: forcing a failure. [ 1226.826723][T28275] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.846207][T28275] CPU: 0 UID: 0 PID: 28275 Comm: syz.6.3998 Tainted: G U syzkaller #0 PREEMPT(full) [ 1226.846233][T28275] Tainted: [U]=USER [ 1226.846244][T28275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1226.846253][T28275] Call Trace: [ 1226.846259][T28275] [ 1226.846265][T28275] dump_stack_lvl+0x16c/0x1f0 [ 1226.846294][T28275] should_fail_ex+0x512/0x640 [ 1226.846316][T28275] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1226.846333][T28275] should_failslab+0xc2/0x120 [ 1226.846350][T28275] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1226.846365][T28275] ? ptlock_alloc+0x1f/0x70 [ 1226.846390][T28275] ptlock_alloc+0x1f/0x70 [ 1226.846411][T28275] pte_alloc_one+0x82/0x3a0 [ 1226.846430][T28275] copy_huge_pmd+0x18d/0x2f90 [ 1226.846451][T28275] ? do_raw_spin_lock+0x12c/0x2b0 [ 1226.846466][T28275] ? find_held_lock+0x2b/0x80 [ 1226.846483][T28275] ? __pmd_alloc+0x3f6/0x930 [ 1226.846501][T28275] ? __pfx_copy_huge_pmd+0x10/0x10 [ 1226.846519][T28275] ? do_raw_spin_unlock+0x172/0x230 [ 1226.846534][T28275] ? _raw_spin_unlock+0x28/0x50 [ 1226.846556][T28275] copy_page_range+0x20d6/0x5c80 [ 1226.846594][T28275] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.846613][T28275] ? mas_destroy+0x5de/0xa20 [ 1226.846628][T28275] ? __pfx_copy_page_range+0x10/0x10 [ 1226.846652][T28275] ? mas_store+0x7a9/0x1160 [ 1226.846668][T28275] ? find_held_lock+0x2b/0x80 [ 1226.846685][T28275] ? __pfx_mas_store+0x10/0x10 [ 1226.846699][T28275] ? __vma_enter_locked+0x163/0x3f0 [ 1226.846730][T28275] dup_mmap+0xe87/0x21d0 [ 1226.846757][T28275] ? __pfx_dup_mmap+0x10/0x10 [ 1226.846789][T28275] copy_process+0x4099/0x76a0 [ 1226.846818][T28275] ? __pfx_copy_process+0x10/0x10 [ 1226.846837][T28275] ? futex_private_hash_put+0x176/0x300 [ 1226.846859][T28275] ? futex_private_hash_put+0x18a/0x300 [ 1226.846882][T28275] kernel_clone+0xfc/0x930 [ 1226.846905][T28275] ? __pfx_futex_wake+0x10/0x10 [ 1226.846918][T28275] ? __pfx_kernel_clone+0x10/0x10 [ 1226.846950][T28275] __do_sys_clone+0xce/0x120 [ 1226.846969][T28275] ? __pfx___do_sys_clone+0x10/0x10 [ 1226.846989][T28275] ? ksys_unshare+0x687/0xa40 [ 1226.847018][T28275] ? xfd_validate_state+0x61/0x180 [ 1226.847048][T28275] do_syscall_64+0xcd/0x4b0 [ 1226.847063][T28275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.847078][T28275] RIP: 0033:0x7f7af498eec9 [ 1226.847091][T28275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.847105][T28275] RSP: 002b:00007f7af5775fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1226.847119][T28275] RAX: ffffffffffffffda RBX: 00007f7af4be5fa0 RCX: 00007f7af498eec9 [ 1226.847130][T28275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1226.847139][T28275] RBP: 00007f7af4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1226.847148][T28275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1226.847158][T28275] R13: 00007f7af4be6038 R14: 00007f7af4be5fa0 R15: 00007ffd459d3ab8 [ 1226.847178][T28275] [ 1227.168664][T23215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.242319][T28286] FAULT_INJECTION: forcing a failure. [ 1227.242319][T28286] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.242348][T28286] CPU: 0 UID: 0 PID: 28286 Comm: syz.1.3999 Tainted: G U syzkaller #0 PREEMPT(full) [ 1227.242370][T28286] Tainted: [U]=USER [ 1227.242375][T28286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1227.242385][T28286] Call Trace: [ 1227.242390][T28286] [ 1227.242396][T28286] dump_stack_lvl+0x16c/0x1f0 [ 1227.242424][T28286] should_fail_ex+0x512/0x640 [ 1227.242446][T28286] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1227.242464][T28286] should_failslab+0xc2/0x120 [ 1227.242481][T28286] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1227.242496][T28286] ? acpi_ex_resolve_to_value+0xfb/0x7e0 [ 1227.242511][T28286] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 1227.242533][T28286] acpi_ut_create_generic_state+0x5c/0xb0 [ 1227.242552][T28286] acpi_ds_result_push+0x195/0x380 [ 1227.242575][T28286] acpi_ds_evaluate_name_path+0x209/0x470 [ 1227.242596][T28286] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 1227.242621][T28286] ? acpi_ps_get_next_namepath+0x11c/0x730 [ 1227.242640][T28286] ? acpi_ps_get_next_namepath+0x1be/0x730 [ 1227.242664][T28286] acpi_ds_exec_end_op+0x3b0/0x1460 [ 1227.242686][T28286] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1227.242707][T28286] acpi_ps_parse_loop+0x425/0x1d00 [ 1227.242733][T28286] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1227.242753][T28286] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1227.242779][T28286] acpi_ps_parse_aml+0x3c1/0xcb0 [ 1227.242803][T28286] acpi_ps_execute_method+0x55a/0xb30 [ 1227.242827][T28286] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 1227.242845][T28286] acpi_ns_evaluate+0x76c/0xca0 [ 1227.242869][T28286] ? kasan_save_track+0x14/0x30 [ 1227.242885][T28286] acpi_evaluate_object+0x1fa/0xa90 [ 1227.242906][T28286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.242923][T28286] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1227.242942][T28286] ? __mutex_trylock_common+0xe9/0x250 [ 1227.242968][T28286] acpi_evaluate_integer+0xdd/0x200 [ 1227.242986][T28286] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1227.243012][T28286] ? __pfx_status_show+0x10/0x10 [ 1227.243032][T28286] status_show+0xa0/0x120 [ 1227.243051][T28286] ? __pfx_status_show+0x10/0x10 [ 1227.243076][T28286] dev_attr_show+0x56/0xe0 [ 1227.243093][T28286] ? __pfx_dev_attr_show+0x10/0x10 [ 1227.243106][T28286] sysfs_kf_seq_show+0x213/0x3e0 [ 1227.243124][T28286] seq_read_iter+0x509/0x12c0 [ 1227.243155][T28286] kernfs_fop_read_iter+0x46c/0x610 [ 1227.243177][T28286] ? rw_verify_area+0xcf/0x6c0 [ 1227.243201][T28286] vfs_read+0x8bf/0xcf0 [ 1227.243224][T28286] ? __pfx___mutex_lock+0x10/0x10 [ 1227.243239][T28286] ? __pfx_vfs_read+0x10/0x10 [ 1227.243266][T28286] ksys_read+0x12a/0x250 [ 1227.243280][T28286] ? __pfx_ksys_read+0x10/0x10 [ 1227.243299][T28286] do_syscall_64+0xcd/0x4b0 [ 1227.243315][T28286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.243330][T28286] RIP: 0033:0x7f0c4b18eec9 [ 1227.243343][T28286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1227.243357][T28286] RSP: 002b:00007f0c493f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1227.243371][T28286] RAX: ffffffffffffffda RBX: 00007f0c4b3e6090 RCX: 00007f0c4b18eec9 [ 1227.243382][T28286] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 1227.243391][T28286] RBP: 00007f0c4b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1227.243400][T28286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.243409][T28286] R13: 00007f0c4b3e6128 R14: 00007f0c4b3e6090 R15: 00007ffd7331bc78 [ 1227.243430][T28286] [ 1227.243451][T28286] ACPI Error: Failed to extend the result stack (20250404/dswstate-130) [ 1227.243522][T28286] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 1227.559147][T28290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4001'. [ 1227.600289][T23215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.268878][T23215] bridge_slave_1: left allmulticast mode [ 1228.268903][T23215] bridge_slave_1: left promiscuous mode [ 1228.269038][T23215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.270773][T23215] bridge_slave_0: left allmulticast mode [ 1228.270789][T23215] bridge_slave_0: left promiscuous mode [ 1228.270912][T23215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.702819][T28319] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4006'. [ 1229.829739][T28345] FAULT_INJECTION: forcing a failure. [ 1229.829739][T28345] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.829808][T28345] CPU: 0 UID: 0 PID: 28345 Comm: syz.1.4010 Tainted: G U syzkaller #0 PREEMPT(full) [ 1229.829833][T28345] Tainted: [U]=USER [ 1229.829838][T28345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1229.829847][T28345] Call Trace: [ 1229.829853][T28345] [ 1229.829858][T28345] dump_stack_lvl+0x16c/0x1f0 [ 1229.829886][T28345] should_fail_ex+0x512/0x640 [ 1229.829909][T28345] ? __build_skb_around+0x278/0x3b0 [ 1229.829929][T28345] should_failslab+0xc2/0x120 [ 1229.829947][T28345] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1229.829962][T28345] ? sctp_chunkify+0x51/0x2d0 [ 1229.829983][T28345] sctp_chunkify+0x51/0x2d0 [ 1229.830002][T28345] _sctp_make_chunk+0x148/0x270 [ 1229.830022][T28345] sctp_make_abort+0x41/0x410 [ 1229.830042][T28345] sctp_make_abort_user+0x7c/0x4b0 [ 1229.830062][T28345] ? lockdep_hardirqs_on+0x7c/0x110 [ 1229.830084][T28345] ? __pfx_sctp_make_abort_user+0x10/0x10 [ 1229.830105][T28345] ? skb_dequeue+0x126/0x180 [ 1229.830127][T28345] sctp_close+0x220/0x940 [ 1229.830152][T28345] ? __pfx_sctp_close+0x10/0x10 [ 1229.830173][T28345] ? __pfx___might_resched+0x10/0x10 [ 1229.830194][T28345] ? down_write+0x14d/0x200 [ 1229.830209][T28345] ? ip_mc_drop_socket+0x1f/0x280 [ 1229.830223][T28345] ? __pfx_down_write+0x10/0x10 [ 1229.830240][T28345] inet_release+0xed/0x200 [ 1229.830259][T28345] __sock_release+0xb3/0x270 [ 1229.830273][T28345] ? __pfx_sock_close+0x10/0x10 [ 1229.830286][T28345] sock_close+0x1c/0x30 [ 1229.830298][T28345] __fput+0x402/0xb70 [ 1229.830321][T28345] task_work_run+0x150/0x240 [ 1229.830336][T28345] ? __pfx_task_work_run+0x10/0x10 [ 1229.830350][T28345] ? __pfx___do_sys_close_range+0x10/0x10 [ 1229.830369][T28345] exit_to_user_mode_loop+0xdd/0x100 [ 1229.830384][T28345] do_syscall_64+0x419/0x4b0 [ 1229.830399][T28345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.830414][T28345] RIP: 0033:0x7f0c4b18eec9 [ 1229.830426][T28345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1229.830441][T28345] RSP: 002b:00007f0c4bf51038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1229.830455][T28345] RAX: 0000000000000000 RBX: 00007f0c4b3e5fa0 RCX: 00007f0c4b18eec9 [ 1229.830464][T28345] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 1229.830474][T28345] RBP: 00007f0c4b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1229.830483][T28345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.830492][T28345] R13: 00007f0c4b3e6038 R14: 00007f0c4b3e5fa0 R15: 00007ffd7331bc78 [ 1229.830512][T28345] [ 1230.032400][T28348] random: crng reseeded on system resumption [ 1230.143024][T23215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.150118][T23215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.154318][T23215] bond0 (unregistering): Released all slaves [ 1230.652189][T28359] netlink: 'syz.6.4013': attribute type 27 has an invalid length. [ 1230.652206][T28359] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4013'. [ 1230.670911][T28359] binder: 28355:28359 ioctl c00c620f 2000000000c0 returned -22 [ 1231.194104][T23215] hsr_slave_0: left promiscuous mode [ 1231.194504][T23215] hsr_slave_1: left promiscuous mode [ 1231.202686][T23215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.202704][T23215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.203187][T23215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.203201][T23215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.263936][T23215] veth1_macvtap: left promiscuous mode [ 1231.263990][T23215] veth0_macvtap: left promiscuous mode [ 1231.264100][T23215] veth1_vlan: left promiscuous mode [ 1231.264194][T23215] veth0_vlan: left promiscuous mode [ 1232.290356][T28393] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1233.021884][T28411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4023'. [ 1233.037676][T28411] netlink: 93 bytes leftover after parsing attributes in process `syz.5.4023'. [ 1234.202590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1234.384255][T23215] team0 (unregistering): Port device team_slave_1 removed [ 1235.661868][T28433] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1235.678408][T28433] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1235.687108][T28433] veth0_to_bridge: entered allmulticast mode [ 1235.696499][T28433] veth0_to_bridge: entered promiscuous mode [ 1235.714476][T28433] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1235.738607][T28433] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1235.745802][T28433] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1236.278121][T28409] ------------[ cut here ]------------ [ 1236.283721][T28409] ida_free called for id=949 which is not allocated. [ 1236.348481][T28463] random: crng reseeded on system resumption [ 1236.374228][T28409] WARNING: CPU: 0 PID: 28409 at lib/idr.c:592 ida_free+0x1f9/0x2e0 [ 1236.382257][T28409] Modules linked in: [ 1236.386400][T28409] CPU: 0 UID: 0 PID: 28409 Comm: syz.5.4023 Tainted: G U syzkaller #0 PREEMPT(full) [ 1236.397375][T28409] Tainted: [U]=USER [ 1236.401259][T28409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1236.411490][T28409] RIP: 0010:ida_free+0x1f9/0x2e0 [ 1236.416450][T28409] Code: 77 f6 41 83 fe 3e 76 72 e8 e4 ca 77 f6 48 8b 7c 24 28 4c 89 ee e8 07 39 0d 00 90 48 c7 c7 c0 c1 cf 8c 89 ee e8 a8 a5 36 f6 90 <0f> 0b 90 90 e8 be ca 77 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 1236.437079][T28409] RSP: 0018:ffffc900046ffa20 EFLAGS: 00010286 [ 1236.444076][T28409] RAX: 0000000000000000 RBX: 1ffff920008dff45 RCX: ffffc9000c47a000 [ 1236.452185][T28409] RDX: 0000000000080000 RSI: ffffffff81796535 RDI: 0000000000000001 [ 1236.460363][T28409] RBP: 00000000000003b5 R08: 0000000000000001 R09: 0000000000000000 [ 1236.468388][T28409] R10: 0000000000000001 R11: 000000000003a2e0 R12: ffff88814169c000 [ 1236.476411][T28409] R13: 0000000000000246 R14: 00000000000003b5 R15: ffff88814169c070 [ 1236.484389][T28409] FS: 00007f93bf3686c0(0000) GS:ffff888124e79000(0000) knlGS:0000000000000000 [ 1236.493358][T28409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1236.499977][T28409] CR2: 0000564a0be16e28 CR3: 000000006267e000 CR4: 00000000003526f0 [ 1236.507950][T28409] Call Trace: [ 1236.511398][T28409] [ 1236.514323][T28409] ? __pfx_ida_free+0x10/0x10 [ 1236.519058][T28409] ? __pfx_proc_entry_rundown+0x10/0x10 [ 1236.524628][T28409] ? xen_error_entry+0x30/0x60 [ 1236.529404][T28409] ? remove_proc_entry+0x293/0x530 [ 1236.534994][T28409] pde_put+0xa9/0x1d0 [ 1236.539804][T28409] remove_proc_entry+0x2d3/0x530 [ 1236.545082][T28409] ? __pfx_remove_proc_entry+0x10/0x10 [ 1236.550595][T28409] ? net_generic+0xea/0x2a0 [ 1236.555129][T28409] ? __pfx___might_resched+0x10/0x10 [ 1236.560450][T28409] ? idr_destroy+0x62/0x2e0 [ 1236.564971][T28409] ? __pfx_psched_net_exit+0x10/0x10 [ 1236.570307][T28409] ops_undo_list+0x2eb/0xab0 [ 1236.574901][T28409] ? __pfx_ops_undo_list+0x10/0x10 [ 1236.580046][T28409] ? ops_init+0x2fa/0x5f0 [ 1236.584369][T28409] setup_net+0x1e2/0x390 [ 1236.588609][T28409] ? __pfx_setup_net+0x10/0x10 [ 1236.593400][T28409] ? debug_mutex_init+0x37/0x70 [ 1236.598264][T28409] copy_net_ns+0x2f8/0x690 [ 1236.602694][T28409] create_new_namespaces+0x3ea/0xa90 [ 1236.607983][T28409] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1236.613664][T28409] ksys_unshare+0x45b/0xa40 [ 1236.618169][T28409] ? __pfx_ksys_unshare+0x10/0x10 [ 1236.623221][T28409] ? xfd_validate_state+0x61/0x180 [ 1236.628345][T28409] __x64_sys_unshare+0x31/0x40 [ 1236.633128][T28409] do_syscall_64+0xcd/0x4b0 [ 1236.638110][T28409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.644806][T28409] RIP: 0033:0x7f93be58eec9 [ 1236.649583][T28409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.669339][T28409] RSP: 002b:00007f93bf368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1236.677791][T28409] RAX: ffffffffffffffda RBX: 00007f93be7e5fa0 RCX: 00007f93be58eec9 [ 1236.685779][T28409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1236.693782][T28409] RBP: 00007f93be611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1236.701760][T28409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1236.709742][T28409] R13: 00007f93be7e6038 R14: 00007f93be7e5fa0 R15: 00007fffd04c6898 [ 1236.717719][T28409] [ 1236.720767][T28409] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1236.728027][T28409] CPU: 0 UID: 0 PID: 28409 Comm: syz.5.4023 Tainted: G U syzkaller #0 PREEMPT(full) [ 1236.738943][T28409] Tainted: [U]=USER [ 1236.742726][T28409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1236.752758][T28409] Call Trace: [ 1236.756020][T28409] [ 1236.758931][T28409] dump_stack_lvl+0x3d/0x1f0 [ 1236.763516][T28409] vpanic+0x6e8/0x7a0 [ 1236.767487][T28409] ? __pfx_vpanic+0x10/0x10 [ 1236.771982][T28409] ? ida_free+0x1f9/0x2e0 [ 1236.776299][T28409] panic+0xca/0xd0 [ 1236.780013][T28409] ? __pfx_panic+0x10/0x10 [ 1236.784425][T28409] check_panic_on_warn+0xab/0xb0 [ 1236.789352][T28409] __warn+0xf6/0x3c0 [ 1236.793228][T28409] ? preempt_schedule_notrace+0x62/0xe0 [ 1236.798762][T28409] ? ida_free+0x1f9/0x2e0 [ 1236.803080][T28409] report_bug+0x3c3/0x580 [ 1236.807398][T28409] ? ida_free+0x1f9/0x2e0 [ 1236.811715][T28409] handle_bug+0x184/0x210 [ 1236.816026][T28409] exc_invalid_op+0x17/0x50 [ 1236.820509][T28409] asm_exc_invalid_op+0x1a/0x20 [ 1236.825340][T28409] RIP: 0010:ida_free+0x1f9/0x2e0 [ 1236.830268][T28409] Code: 77 f6 41 83 fe 3e 76 72 e8 e4 ca 77 f6 48 8b 7c 24 28 4c 89 ee e8 07 39 0d 00 90 48 c7 c7 c0 c1 cf 8c 89 ee e8 a8 a5 36 f6 90 <0f> 0b 90 90 e8 be ca 77 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 1236.849870][T28409] RSP: 0018:ffffc900046ffa20 EFLAGS: 00010286 [ 1236.855917][T28409] RAX: 0000000000000000 RBX: 1ffff920008dff45 RCX: ffffc9000c47a000 [ 1236.863870][T28409] RDX: 0000000000080000 RSI: ffffffff81796535 RDI: 0000000000000001 [ 1236.871820][T28409] RBP: 00000000000003b5 R08: 0000000000000001 R09: 0000000000000000 [ 1236.879771][T28409] R10: 0000000000000001 R11: 000000000003a2e0 R12: ffff88814169c000 [ 1236.887723][T28409] R13: 0000000000000246 R14: 00000000000003b5 R15: ffff88814169c070 [ 1236.895680][T28409] ? __warn_printk+0x1a5/0x350 [ 1236.900438][T28409] ? __pfx_ida_free+0x10/0x10 [ 1236.905104][T28409] ? __pfx_proc_entry_rundown+0x10/0x10 [ 1236.910640][T28409] ? xen_error_entry+0x30/0x60 [ 1236.915384][T28409] ? remove_proc_entry+0x293/0x530 [ 1236.920485][T28409] pde_put+0xa9/0x1d0 [ 1236.924455][T28409] remove_proc_entry+0x2d3/0x530 [ 1236.929382][T28409] ? __pfx_remove_proc_entry+0x10/0x10 [ 1236.934829][T28409] ? net_generic+0xea/0x2a0 [ 1236.939325][T28409] ? __pfx___might_resched+0x10/0x10 [ 1236.944593][T28409] ? idr_destroy+0x62/0x2e0 [ 1236.949087][T28409] ? __pfx_psched_net_exit+0x10/0x10 [ 1236.954371][T28409] ops_undo_list+0x2eb/0xab0 [ 1236.958947][T28409] ? __pfx_ops_undo_list+0x10/0x10 [ 1236.964039][T28409] ? ops_init+0x2fa/0x5f0 [ 1236.968350][T28409] setup_net+0x1e2/0x390 [ 1236.972590][T28409] ? __pfx_setup_net+0x10/0x10 [ 1236.977335][T28409] ? debug_mutex_init+0x37/0x70 [ 1236.982172][T28409] copy_net_ns+0x2f8/0x690 [ 1236.986572][T28409] create_new_namespaces+0x3ea/0xa90 [ 1236.991848][T28409] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1236.997465][T28409] ksys_unshare+0x45b/0xa40 [ 1237.001959][T28409] ? __pfx_ksys_unshare+0x10/0x10 [ 1237.006971][T28409] ? xfd_validate_state+0x61/0x180 [ 1237.012078][T28409] __x64_sys_unshare+0x31/0x40 [ 1237.016829][T28409] do_syscall_64+0xcd/0x4b0 [ 1237.021316][T28409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.027191][T28409] RIP: 0033:0x7f93be58eec9 [ 1237.031589][T28409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1237.051175][T28409] RSP: 002b:00007f93bf368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1237.059567][T28409] RAX: ffffffffffffffda RBX: 00007f93be7e5fa0 RCX: 00007f93be58eec9 [ 1237.067519][T28409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1237.075470][T28409] RBP: 00007f93be611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1237.083424][T28409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1237.091389][T28409] R13: 00007f93be7e6038 R14: 00007f93be7e5fa0 R15: 00007fffd04c6898 [ 1237.099351][T28409] [ 1237.102406][T28409] Kernel Offset: disabled [ 1237.106718][T28409] Rebooting in 86400 seconds..