last executing test programs: 6m16.05417201s ago: executing program 2 (id=1674): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi26\x00', 0xc0000, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) setsockopt$auto(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x401) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x43a081, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x174, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x400}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x30, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xc}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x9}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x38, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0xffff8000}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8b0f}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x100}]}, @NFSD_A_SERVER_PROTO_VERSION={0x38, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xf45a}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xfffffff7}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xfffffff9}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}]}, @NFSD_A_SERVER_PROTO_VERSION={0x34, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6e18}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x1}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xff}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x8000}]}, @NFSD_A_SERVER_PROTO_VERSION={0xc, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xeaf}]}, @NFSD_A_SERVER_PROTO_VERSION={0x30, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x7}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x5}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6fb}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xfffffffd}]}, @NFSD_A_SERVER_PROTO_VERSION={0x28, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7ff}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x9}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7f}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4081}, 0x200000c0) clock_nanosleep$auto(0x7, 0x7fff, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000300)={0xfffffffffffff001, 0x9}) r3 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0xaa080, 0x0) pread64$auto(r3, 0x0, 0x3c02, 0x100007) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)=@task_fd_query={0x0, 0xffffffffffffffff, 0x3, 0x4, 0x23, 0x1, 0xffffffffffffffff, 0x0, 0x2}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 6m15.023861286s ago: executing program 2 (id=1677): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x82002, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x8000000002000, 0x128009, 0x8000000000000001, 0x200000eb1, r0, 0x20000018000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) mmap$auto(0x1000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7fffffff, 0x7f, 0x2eb1, 0x401, 0x2000000000008000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) readv$auto(r2, &(0x7f0000000140)={&(0x7f0000000200), 0x7}, 0x1000000000000008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r6, &(0x7f0000000200)='ev_\x00\x00\x00\x00\x00`F\xfa\x89\x1a?\xba\x98\xba\xda\x93\xd7\x87\x88\rR\a\x94\a\xc5pd[\xdc\x05c!\xa6\xcc\xb5\xbeoTx\xf1\x96\xc0\x80\xbb\"\x00\xc2\'s\xdd\'\xd0\xc1i\a\xca\x0e\xf8\xc55C_\xfd\xe1\xa3\xeb\xc3\xdd0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r1}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4001a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xec, r3, 0x720, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xd99a}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x21b}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x95}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x8}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x6}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x200000d4}, 0x20810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpu0/topology/core_cpus\x00', 0x40280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001080)=""/4076, 0xfec) 6m12.760943598s ago: executing program 2 (id=1686): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x3, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x3, 0x2, 0x5}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xfffffffffffffffe, 0x1d2c, 0x9, 0x4, 0x15f4da0e, 0x1000000000000006, 0x9, 0x100000000000000e, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0F\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x34) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="4bffffff", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf250120000004000180040001800000558000004000", @ANYRES32=r2, @ANYBLOB="0000068000000c8000000d00ff01000000000000000000000000000100003e80668998363dc6db74202dd952294f684d151e25ad9142f40b34420083a3df3d1088a501723f0cf367b346c30097eab25c6edec31b9cdde298472c1fa886ea73a14912293f3568945e783077f42e27f54914cef2fa9db0d5f078900e1ad7f88eaf13865abd5ed120570d5babb1999a4609de4a50031506cfcacc3c411f1117010befa6d9f12bf3865b07381ae4c36f36711e834fd377519c08eed07cd5f94680a3bc74b8357d09f15bb8aff8faadebf167e552903575e6f0dcd12796b2ea1ddaafd72af9bc3d226259c7b07e793059ab378602dcb42297a5f6d704630b5a48275f4860c985fcd8dc86af0d1d15740098caccfa3702b1f9edd1a8e4d47994e4b0521703111d4d1a5f52b1b03c8aab104d7e80713027f3fa3c3c60b8a67d6069e78eb997a2b196fb0bc4f3cc37282872c38049ebe52410d669e7d56220f4d90fd2743856d1a8f2a8f3fc2c0c345e8f5cb7c4c21ce2203e16d70c4f58483be92c903b9d863e4f2c4934747c9122fe6fbcff64b8b09d4e14578a52a5421598c049ea04c75f8d5749531ebc540deedccf265c335984e3b929d9e8841c05a1ce6caeee5fcf9760796a55e5ec5be759d8bbff87761aed895eb83a073ab96952e5c1840aca0090cf1ce3222890018ae45788c7289fd54e91ef5bd4ba81dea3fdf6555fc65a5b140ae215ac12fbd95220e2f40538b74e4d3553d97c48a71b351bc45f2a635d4ecf073ba42215d982e3e1f1d7776d76d851efa91518be0a7a282b480d720ebb60662e6788c1001ba1ab5c79167ceef4d5cf5dae7e4ab16d6792617a14183a849310e0df9d9de0539b4e4e13d2cefbf99dabfe6f2dbbeb494990580c5e62b11d4d5b5320e61a8af83a28aa728a527aa559c334d092205469b67d14c6ddaccd8709b922dc5b08bf3e986942ac8272a659e28a7a2a342cec65e973b674c742c8a54582c31822be3760b494fad0f562f8032dc192fd293f455e7d690230d149ae9bfc75abe730d8921596641aec7f078de8145194e422b2edf5cd42aaf66e89d31846af40bce3e130c1b9f987c0658bd0e5ddabe78234b2b501cb55281a2875a8f52b0783b25dcbd800571330c9b0519248afde047d2295ffe7001995cb0fb12745a1d20d2dcb787185baf8a25ba2b9aa94be3c1b51fe2db8d71f05b6b6c13ddc37559f555a865bd1617a84a7d67bace2077fca1391d98a6f893870c7e3f7832013fdafc94c8a8d0d9df9851a041dace0318f7e82471a2357ebb1e0a50adb72e1333dfc75cacb9ee54835eea63d38a02d1772eedd32b2c4ef94a0b95d1cbb54e7deafb4326dd2282918721dd245d17f068ac228a3022ffacb86b8fdcfe4fd869e95896b10be465db3c2efa06771edd0ae664b9ac4c03ebb2b3757abfcda36690c5548a2a9de38406f4103bb1f791dcabc2d9c29686a95cb664dc75bc7f46e54eba07c3e2451d7199f10e8242ee31ab0ebc3e3b4653bec65069169aaf8f14dba1b92d97efae7a04a250071e5701e933851fc9332c2680285f94f29b7eef8ba691306a8c81f31fd1128912940e7aabcfaf42a848af32ed6cf03ec9796490700de0a30d68606b8b4ef64f26c19619f5b64faf965ed58df64489887c524ce27762b684098bee60b081a3ef8960d5abc87ca66b7039aaaf3157d0c4dda9669ba557325c02753ce7ad093188be2efcc30eab74e858aae246028be7172a9ca2a31a8829d54e616488a1cbaf205ae62705a37772cf859bd3ba2df9bc66a400466441eba58b7206d761fc8fdf9c4a09a587e4ddcc2eedfc2ccde0b24a558b5b930e6bbe57002b060428a28cd2c1ae1c12bbc57675718610f3b4e901c771c79eb55002dc84be8398f9b96137f7a9cf5849777f9dba330e46d621d9a8d40f3421cdcdfa7665097abd4efa54a3346b249b17854848b4ef0b28f4a53e3b312f4e7525b102065f02031073c50faaecf5bffc760fa589226b90fda04284eb3d6650b02e5715182a99bcb721a2457d5cd5380678070e021c0267db40fe439c1f25efd4cc41cf96401bb5659f5304fe6de87d1826ce467377aa48a3be4a8053f1c50fbaad3c3b30bca4b3454faaeee365b6bf8c3ce47de88b32cd3685e63ad73a6a3e6546d4bcc18aa69f4ce880741c5e4fb59e6419fe54bd1cba6fe9f29e4b8929a7dfeb613d334bb72a3122f9f07343d177687ff0166c270332a53627284f453e418b1a62843f6fce18472ce82ac44df67bde05d42d1db2f9683fd4fda513fb7d147f25fcde10530ebd28e4b9b5e09ce43ae6295f9aa6494ecc1143e8571b0800e0e10a5e7a86f2bcb2ed7e1216d83c3fb18153575c00c28d3d4974229b5003f3906f7b9aeb57425ff3809c2a47373b3484a7b2078a9a37f3dce8ddb1daa5125f60b6f5f3adaf42768ef9ce50df562521c9fe4f78017ee8e85464a87cbff52d2751d1b896cc27168502b91f399976a31896a5d492e28ad042f398d335ef686bd218fc6eb457346c94cebb973677eec6c3cb04010f51632d0ae049fc29e844d12be92c2a196120a0cf91e757970bcfc43748a492ea0cb22ba4620c772585e78a6e6e2a0b8a7830316564a73dd7e2d77fa0247880bdda06fee569fc015ae1e72af1f6b23257bfd29924f03f91d18d84a03586b9f70acaaa3f410ae9f6c56c0036184fcde4950de1a67444c049f67529dcb62cf39cdfd4eff878dda6a25723ee5a03ce66d16623d0bf46263702d56a82f9c35be9d6fb38958a4096d9b275c31b367f664265ac8dff93b2b12bd332650f1046ea883c3e3c628e5d9f839f0c9c00856396efaf517e6070ec08d829a8279cfaed13d7d15e2fee92b772b2fb9414d6dcf3d8c50ce9bb0d149d0a253b18b34c4da3e880f37cc67336d4700fa9dad28704a6989745d0a5917ee2707f9cf118463d4e440fea709ce8daf9734031d7fb0d84d3f1e5d0de2ac966eee9a1b76618eb9e39faab1e8962f3730e9bfa8d68bf2d31ae056b4d4d7f64bd9e32427c75673026e0806acc30ac7cef4384ea32201d16ae5805622b344e166169822de3e738bfd1bd80bfce0af134e4e9298ae77245ca582e313756210f34be00cffa8edd1b61d4c5d1d43afe73d6da1775fb34b7f955f01e4271d6b50b9ba447797b836856500f61559f920042d74e5fc3f5042a5d7d0ff127f4d6a6b53f2f314b1da5b5d4c83036e4fa36fb5240fdbe357cfac5082b909b4c9f72cca5623e86381edd42cb500b519b8acc9773e2f0f175d7e705bdc5abbe5ade84a11c08e9c5ce4e608930f7a8cea4e80f574f8e89d34718fc4cf6356d9f100ca6b697a37ddda28289cb5e9e261b89c688b358fb0c5a77bce7a6ce84bda736696f75bddf9831ba2330f54775e0fca2167aaea0ac6f9dd82e6c64ca386c100caa742d515d3c813adc714dffe14de6fca84c27e669bac365f95369dec32e4fe79c4a363b229a59805762da49b56a7c96c1e530380e1a17fcc15570c44653cb78142bfac11d0bda5717ccb23c998b76d8498ca16f4aecaf216040ff689c784f3f4a24afe1f94b93201dfb89542a232cf4c4c4ab86bdb7fce7ed64c9a42edc0eadb6506adc018713e548525557f1eeec75139aab523fb2d55fea84906e01cf719401375a970795b21d590a4c04ce0c8636971cc103aa6689596d4afc89b65b3fae44398dc7b07a82bb70c113e9f1128166f15ac6a52a6ae090ae169e922b81fed086a043c07d88068fb2d59af31c28a63839d635e8f4a40841640e037c4c2c8993f7e720302f8ee00d752f84ab0776b02ff71b01162c46bfd16cb46c4b74c54fdccd7666f14d58a4752d6f6c456d0d18eb0615bd39be3136441db012078b537fe7e40f5494e59c5c5a7946bca0eb36e4263444d867b05090b49947e9c8daf190e8f37ddac7c0a46ecd155779af4a59f90efd4515d4d6e2652e17803143bc5864544ae5d3d034ce77f776ca802b78e4ade2e8b4d441a6290d0f29f04bab5810316e5bd8964706772c50e352daf06d63150136017a21d56769a7217367b914cf248b1d3dc1f032dba196ff231fc4c9ed3029e53f9bceb57ea00fa645c93f7a8c6f20e9ce0028e3b0930f6de0e1eead8d2d79ad2e1426c16f0dee66c893509eda8374ccdaf24ed2ba7246a1ed3efb150ac171a35f26beb9f2d60909b225ca089696bcc6bdb2b48409f9325b28030a61904f066580df620da7c0615cd43de1031433725a7bd39cc1ffeb597502f797e88805866282b0010473747ac6de00f51d0b439eaa61a625a4418b7d35d737cb16c1ee39352b643482941a68107f263ccd8a3185592380487f2072bc80f1d9e6be28ff36498b2de1fa4ccb394ce78ed68f445cb20ed385e14d807024dbdc2ce536dee87aeafd37e123a5a89c91e2cb7778bca26f25d5f3736d78877792bad781ec31b3e94fb8c48fb82fc39f0bb8c73e90d88af68a401b9d55c953e8620b9dcb2e670182bb85103febc9108d840e4ef3be2f213ea107b52bcc737c56f8b2dd516d25011a819dee9ca56c03ef81ae76e54654b905bb2116e7294cae56ca1dac16ec9a0d98178d62ed1f749a9758e9ca3e8c5070d5b6a9414cfa04378336e7c74a19a95c7d488054c840ca314f57788f43b4721c0d7d82c2df9ff480e9aa4b89087bdd2b4ab9bb87d26c5412f831a212bc8066aeabbf9c1cb19d270947c78cb49339e67537ab166d4e79a564807ca2f9554a2e10d345ae10037e46a7448ff9987a0d636a9106d74b4641ee35197cc5a507d6c7b7dbe8b5b508858272bdf41b9205c161cb9fa44baaca55d296af07d3fe83ea50960edf2398f94e20273a598bd430234ebb63bb5e81c1c662c87dd8adb6e5eb5fc55d5b51cc16b7181a03e06f0ebc66c33057402b299a83262aadda507be22081a02e48539e117847030302917330d2767e9e4546ffcc55d94c549c935d26a34bbae75617b646adb27408784ad877cbb9da1df3dad012ac07f2ae4bca4856149d2e29584acf3782c310e32c9673a45e85e3bf6ca4417cd265fd8aabc00591af1289f1f86c600bdc55966e2034ac744cdf6d142c8f0e1a696d98661bf56dc7b77d58dfa38ea32f3e550ee993743ae1dd5fb48365f5af2476f2c17e2280fea57540f214f2ad0cff87dd5b7ae0a480cbc9b500ed075cfa47ac9ffa933d2a486f9ff2f724c3348429eac89f2790d1babcbcd986df89fd05934609696411e85263847000ca47313fdf424697a45a0592edb4c3cab04a9332efcc6fb4bbe6abd677690932662d339e97031a9dcd58a1e26823d47aefe71ce346413bd60ebbd9d014096d7d08de50e45595b9b1ae602a6e7b8da4ce667c7657a20fbe400816c73e8696ece87b25b8f69c86285efb61192ba57b25a7bfb746d7649396a29291937bb9f9079baee0839b6ac980bcc79857e6f22bacba918f5b598f8076fcff57ea7338d4cda513cd7ddc082e90e0cf4dd34f876103faa1500846e3f97fa4666222b7ff53f95d220628d53f1907ec6bc9ab996a72908bbbc07a7f6953aac58d1cf36111227860c089140e877eb5d7b21ff1bd8246053aa23b20730dcf4f590bca8a2704dacdbccc7da9f083e9fd5de96daa526fd6ef0107a1928781cd7750046a0f0d79b57cafb3660fabc8724f2da8c778b197e93498d6a1d7fdf479a9b995915725dcb8c9d34a037016216668663f9a9019f352c4d128576022aac86e379a5c171049db530229c8389d1eba29b230671573a559c74428a64f5389c2b0c6294bdcfb4c372b43f01345684fbb9699b53404d45e307795d0e5e05ff14405e5595ae57e8a3de69410b945a1f741f47f60000a8804149f2d42ec1f3fd9a70a62c0fcd5c7167547a8c9d657a5a7a50682982bdf3d387d0c92841830865bceea08e5c1b977adf09f8c9d5f873e67e5071bf3b78db9750f9ed4ee20de5fa162ce38ec70057c04548f4122b22cce7776ab7b707a5c5fc7a0d90403b4ae820f5f28e230a8fadad72eb659a710604748686cd25ac30fe8419ad0596c0b35f1e8cd08c15a775c03e2a63f995d400001700020000000000050005000000000000e6ed5a8dc4d8cdcae8c3d616c44e666a4507e2edb3e352f20a21b2b1cf68ba98b8195558f0418edbbad707431da35e5aaf5b44573b9610c3efc4d008700e7b1b5920c962c78b6f92bdb29f151e53a16a05f1ca035b53bb489cc4ee489c383c370599cf464789fb01e10e6994d61b26f3851de2ae012c168e537ae11ef71c006d2bbd960c044e25c6b95b34"], 0x24}, 0x1, 0x0, 0x0, 0x50040}, 0x810) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00012dbd7000ffdbdf4000001100c80922e56c5828"], 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x40) setsockopt$auto(r1, 0x6, 0xd, &(0x7f0000000040)='$%#\x00', 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysinfo$auto(0x0) r5 = socket(0xa, 0x801, 0x100) setsockopt$auto(r5, 0x6, 0x2, 0x0, 0xfb3) prctl$auto(0x800004, 0x200, 0x0, 0x6, 0x8) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r2, 0x7) sendmmsg$auto(r3, 0x0, 0x3, 0x3ff) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x5, 0x2, 0x5, 0xeb1, 0xffffffffffffffff, 0x0) 6m11.021914952s ago: executing program 2 (id=1693): mmap$auto(0x1, 0x20009, 0x4000008000e3, 0x1f, 0xffffffffffffffff, 0xe845) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async) tkill$auto(0x1, 0x7) r0 = socket(0x2, 0x3, 0x1) (async) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x20) getsockopt$auto_SO_DEBUG(r0, 0xff, 0x1, 0x0, 0x0) socket(0x3, 0x80003, 0x10000300) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) (async, rerun: 64) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0xc80) (async, rerun: 64) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(r2, 0x0, 0x9a6, 0x80008) (async, rerun: 64) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async, rerun: 64) unshare$auto(0x40000085) (async, rerun: 32) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) (async, rerun: 32) socketpair$auto(0x1, 0xfffffffd, 0x6, 0x0) getresgid$auto(&(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0x22, 0x2, 0x1) connect$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0x6, 0x5, 0x4, 0x5}, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 6m9.696954042s ago: executing program 2 (id=1696): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x7, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000100)={0x3}, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x1, 0xc5f4, r0, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x5c, 0xdf, 0xeb1, 0x401, 0x100000800008000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x8000d, 0xffffffffffffffff, 0x130, r2, 0x80000000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000040), 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r3 = socketpair$auto(0x1, 0x2, 0x7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) read$auto(r3, 0x0, 0x201) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00') setgroups$auto(0xe32, 0x0) 6m9.176173721s ago: executing program 32 (id=1696): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x7, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000100)={0x3}, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x1, 0xc5f4, r0, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x5c, 0xdf, 0xeb1, 0x401, 0x100000800008000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x8000d, 0xffffffffffffffff, 0x130, r2, 0x80000000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000040), 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r3 = socketpair$auto(0x1, 0x2, 0x7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) read$auto(r3, 0x0, 0x201) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00') setgroups$auto(0xe32, 0x0) 2m24.1852043s ago: executing program 3 (id=2366): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x1, 0xe2, 0xfffffffffffffbff, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x7, &(0x7f00000000c0)={0x0, 0x8000000001fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x313) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x100073) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose3/carrier\x00', 0x502, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x1, 0x0) read$auto(r2, 0x0, 0x7fff) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x70a100, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x38, 0x65f, 0x1ffde, 0x7, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0x4, 0xfffffffc, 0x7, 0x2000, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff7cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x80000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fallocate$auto(r1, 0x1bf2c128, 0x4, 0x1ff) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) bpf$auto(0x5, 0x0, 0x7) 2m23.155743846s ago: executing program 3 (id=2369): futex_wake$auto(0x0, 0x200000009, 0xfffffffb, 0x2) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf2503000000da70bcfc203ae4747d4df4439d8d27c7ab07e10fa4ae9dd58b80024b97cb06e7868b0103ebd2ee37191f657ab4055d68295486322e8bfd9b246241837feb0fb904e7c78cde0e664d3a5e99cf774d2477c455a4960f8a303736d25382ecee3d806fd868568692fe56d4fc70b6ceb077c3548c4468dcd1"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 2m22.581266739s ago: executing program 3 (id=2371): sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x400}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x30, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xc}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x9}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x8, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x200000c0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 2m22.279662363s ago: executing program 3 (id=2373): r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89b1, &(0x7f0000000900)={'macvlan1\x00', 0x0}) shutdown$auto(r0, 0x8) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r1) sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1c020010}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x7}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xbe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x396c}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000280), r1) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec7\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000080)={0x400, 0x8, 0x379, @lost_msgs={0x4}}) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) 2m22.052346952s ago: executing program 3 (id=2375): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd0/pm_only\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x6c, 0xfc) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async, rerun: 64) r1 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) r2 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000000)=0x95) (async) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0xd5, "36a210d97d4c9f6bd4aafa4ed15fdb9c571daf044ae6ff089930def80ce28999", @raw=0x5}) ioctl$auto_SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0x8) (async) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x61a24280}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x174, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MLD_ADDR={0x154, 0x13a, "efe745781e2ffd6946f85001000000000000006b8bb9a370e6c2cb11ff0cfa9d89cac302642d4ed0a365ab87dfd0a10b3a00d4b886d0e022587a018410f10f1595175cb74f00b4ab91ed8932c43799b6a22f3e0ec60d20de92d14d00114b0bb6c77746be5740285a3d24ae9d5fb340d456848eeb558251ef2b80cffe16bbdf84c11c68ee0f52770938e3163490f064c7e281a30a058b361ce63e4689ee9dede450b9007cce6a4f3680b5622716689709abd136cb6d052d6f5eaf112b3754b76eef4c72d1a39f14bac0f795e774c8c5f0a9bc7c07039743dc8823fb2a4711e7ff770878c1cf5e972e6469525085f42b193dfc8d009d0459af1a074c1129d5cbd6bf9d50ec84dcc85856757dd29f56c143de38f839c267c755f2d90531aafa98f80e01b50a3bceddf53ff36379869c0aab6dbf3a50b959a502570d575314ade831bac9d68d2c686108b8bb27ff6d080000"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xaa}, @NL80211_ATTR_EPCS={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x14}, 0x20000811) (async) ptrace$auto(0x4206, r1, 0x0, 0xa) 2m20.15277621s ago: executing program 3 (id=2380): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x3, 0x6) getdents$auto(r1, &(0x7f0000000340)={0x4, 0x3ff, 0x5, "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"}, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_NAME={0x47, 0x2, '/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/shmem_enabled\x00'}, @NFC_ATTR_VENDOR_DATA={0xe1, 0x1f, "ec95bb61bb2efe1ab8629c73b1b30703e63c98acbf28dd6a04e966ffa6925dbc4cdc1cb819534ce99cee6bcb6aecca029619a1ef87d0e7289f36451bdb67bdb8d25a688108f8e4b9659e9f8352a239b69771f88e50efbe1d5151cc9ca6e8c581bb5e2701bfbd80a9db7ca9a686bc369e5750cf7530db56c9f3986addd4aa1f92377f6bbae253db905a87b9ffe74f7c12b1419f92a7aba7645b21e4c30204ac08cdbfe30675b397e481be56f6d53d6406ff9cf150b914e3e2ab9695a982d85042daa95a5527919415dde636ca67f4184c3dc5232cd2f4170c1b0039eb76"}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '\'\'*,[^'}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x8000) prctl$auto(0x4e, 0x1, 0x0, 0x3, 0x0) futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x4) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd703900dbdf25598c00000800030020"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010006bd7000fbdbdf250b0000008c99c9976060d9299c8c4f851a11ef5d79a39bd61dc43119896a97a438b4f4d9f52190c5c75a1932e2a74b9c66fdb89e9e77e6a825d4db12f07fcaa61dffe9b635f07b488c022c5c5d35666449b1107a3c50"], 0x14}}, 0x400c880) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/shmem_enabled\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/44, 0x2c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000000100)=0x100) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) 2m4.397061248s ago: executing program 33 (id=2380): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x3, 0x6) getdents$auto(r1, &(0x7f0000000340)={0x4, 0x3ff, 0x5, "f79b25421209e8dad3999a35141d65c54f345debc71e190c9aabe334fb75392367af1cdc1b9fdfed60160e9ff21d246b50a02ffb1f0133438d491e6fbcf22c212b74b4cb5912cc2f379fe78245a869b83e513adb404116649f185f218a2483f3b89107ebfc0e278cfa8b39de590bbd945d3936738aa8a0fa31bf8a97f763fb3641b9ae38ca7a2c22761de66f92fb5770306f978c9f39dd176030bb7db28a52c276721f43adfe0f039222c6a07118088e7403e7500bec0ad680157a36375d49d25053d85cfc8cae7edf56b15377c1137689dc74631d0f346b670efa745d39faba780a55f859022a2063104e0f6238c65fc1b2239b2d1c52858d040faef6"}, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_NAME={0x47, 0x2, '/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/shmem_enabled\x00'}, @NFC_ATTR_VENDOR_DATA={0xe1, 0x1f, "ec95bb61bb2efe1ab8629c73b1b30703e63c98acbf28dd6a04e966ffa6925dbc4cdc1cb819534ce99cee6bcb6aecca029619a1ef87d0e7289f36451bdb67bdb8d25a688108f8e4b9659e9f8352a239b69771f88e50efbe1d5151cc9ca6e8c581bb5e2701bfbd80a9db7ca9a686bc369e5750cf7530db56c9f3986addd4aa1f92377f6bbae253db905a87b9ffe74f7c12b1419f92a7aba7645b21e4c30204ac08cdbfe30675b397e481be56f6d53d6406ff9cf150b914e3e2ab9695a982d85042daa95a5527919415dde636ca67f4184c3dc5232cd2f4170c1b0039eb76"}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '\'\'*,[^'}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x8000) prctl$auto(0x4e, 0x1, 0x0, 0x3, 0x0) futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x4) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd703900dbdf25598c00000800030020"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010006bd7000fbdbdf250b0000008c99c9976060d9299c8c4f851a11ef5d79a39bd61dc43119896a97a438b4f4d9f52190c5c75a1932e2a74b9c66fdb89e9e77e6a825d4db12f07fcaa61dffe9b635f07b488c022c5c5d35666449b1107a3c50"], 0x14}}, 0x400c880) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/shmem_enabled\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/44, 0x2c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000000100)=0x100) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) 5.94093074s ago: executing program 4 (id=2716): socket(0x18, 0x80000, 0x4) connect$auto(0x3, &(0x7f0000000100)=@ax25={0x3, @bcast, 0x7}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/misc/userio/power/runtime_active_time\x00', 0x4262, 0x0) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbd2822c1d25040000000804170004002e000000000077cc6cdca59348c072443fbc6657d400b80da38b9f6240f958c79ca78a348fccbc43fe8e0c4bdcd21690726a7f371ebc1528fc9ca92a193272657ab0b08bede41180bcd473ae236311b1699d3b5e76ba1f415fcaa53cfe2ebf1a1940dafb22079636c7e72c52339b690663907ff4b68efef1ef6dc96b7dbf5ee89637cf345790a11a2031621e1b5cb7e3ba8c7e83bdf3209c1a7296ec389e0907308f44126e1a"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r3 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r3, 0x11) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000200) 4.291807127s ago: executing program 4 (id=2721): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x960, 0x1000, 0x2001, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xe9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xb453, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0xd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8040) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x400100000001, 0x4) (async) readv$auto(0x3, 0x0, 0x4) (async) unshare$auto(0x40000080) (async) futex$auto(0x0, 0x10d, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x0, 0x5) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) (async) mmap$auto(0xf22, 0x6, 0xfd5, 0x14, r2, 0xffffffffffffffff) (async) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy7/ht40allow_map\x00', 0x20000, 0x0) socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x67, 0x1000, 0x0, 0x5) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="248a3e4516821aac7c66c6a7fd9dc40bb874d4822b65002627af6ade9a575b079eb4d0b0e99be471963863aab343a88f4d9027689d90d4f1aaabfc16588fadb0921c1c8bd702d352d733bf630322914d01ff29ad", 0xffffffff}, 0x1, 0x8) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) (async) close_range$auto(0xffffffffffffffff, r1, 0x4) (async) io_uring_setup$auto(0x8, 0x0) (async) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) 3.597842697s ago: executing program 0 (id=2722): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = fsopen$auto(0x0, 0x1) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x10, 0x5, 0x1c40000000000, 0x6254, r1, 0xa) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000080)="a7af4dbe511aa6123a13675e514fadd38b6789852833e285abe593164a3de57800f3e268f07a3a7476", 0x29) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x10000002, 0x200000000400009, 0x7, 0x9b7f, r0, 0xc000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) 3.045051432s ago: executing program 4 (id=2725): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf2503000000040007800c0003000500000000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 2.789307894s ago: executing program 1 (id=2727): mmap$auto(0x0, 0x1, 0x4000000000e1, 0xeb1, 0xffffffffffffffff, 0x5) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x15, 0x3, 0x100) (async, rerun: 32) r0 = socket(0x10, 0x2, 0x0) (async, rerun: 32) socketpair$auto(0x8002, 0x5, 0x8000000000000000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1b, 0x800005, 0x20, 0x0) socket(0x10, 0x2, 0x0) (async) open(0x0, 0x261c2, 0x22) (async) io_uring_setup$auto(0xf, 0x0) socket(0x11, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (async, rerun: 32) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa042, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x5, 0x0) r2 = socketpair$auto(0x1, 0x3, 0x0, 0x0) (async, rerun: 64) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) (rerun: 64) syslog$auto(0x9, &(0x7f0000000000)='+]-\x00', 0x1) (async) write$auto(r3, 0x0, 0xc3) (async) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000225bd7000df25050000000500000093d9f60000003ec30f383027d15a902275ff68a9c6720b8cbfc3394600f22bbc5e4a9ab14a271736631cbf9eac29fe6b15d97185bfe54e989be3c1ef68a4760ee39ec9aee9037012dd8085ca13e2848016693d33"], 0x1c}, 0x1, 0x0, 0x0, 0x200cc811}, 0x4) (async) ioctl$auto_FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000001c0)="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") (async) keyctl$auto_KEYCTL_SEARCH(0xa, 0x3bb, 0x7, 0x5, 0x7) 2.504260968s ago: executing program 0 (id=2728): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r1, 0x110, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) (async) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) setsockopt$auto(r1, 0x110, 0x1, 0x0, 0x8) (async) 2.432922095s ago: executing program 1 (id=2729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)={0x48, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 2.388451772s ago: executing program 4 (id=2730): syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) mmap$auto(0x0, 0x26d, 0x2, 0x40eb2, r0, 0x300000000000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) syz_clone3(&(0x7f0000001340)={0x6000000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x110c230000, 0x8031ca, 0x9) 2.167622128s ago: executing program 1 (id=2731): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) mlock2$auto(0x1, 0x8001, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0x4) socket(0xa, 0x2, 0x0) socket(0xa, 0x8000b, 0xfffff800) connect$auto(0x3, &(0x7f0000000140), 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) madvise$auto(0x6, 0x365d, 0xf5) 1.968891496s ago: executing program 0 (id=2732): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0xb, 0x0) r1 = socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="020029bd7000fcdbdf259200000004000501240023800c005c0001000100000000001400a100ff0100000000000000000000000000010400830008000d00030000000800c40001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x800) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0x6, 0x10000}) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x9, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0x6}, 0x9}, 0x5, 0x311) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0) sendfile$auto(r4, r4, 0x0, 0x7ffff000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) readv$auto(r4, &(0x7f0000000000)={&(0x7f0000000140)="1e7ea2556075addb9d09a90323da205b7f7f30b8ae38509a94b2f4fc3d82d0a7dbef5885ae5c90472605ab4151ad73655497ed0f57ecff652f2761c82fddfb6dbf6d940a3998f45d9f4f64a0fae0c7fd22ac47bd8c420980f873b07e85d6a7ab32b6c1ce02785dd4f7be56fbeff3c86a23559087e2bb0a71f5c5bd5e424f3458a66dea", 0x5}, 0x4) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.928865804s ago: executing program 1 (id=2733): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffffd) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000240)='/dev/audio1\x00', 0x100000a3d9) io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r1, 0xc, &(0x7f0000000080)="39d5e3018cfb90a5ba4e4cb81eb46d25c3783626acf0421362b7f5923a6c254d01e69823ea34045513114d6e9f722bccd27a305a241750eb509098eea3c9ec813cf38ebf57447c109a17144bd51b3e6387a1685e5222ec9a1ef0ff45db46ee5c1129ef26837bc7c6f6cac5f0e0018a23589c3ce8add8b8e69fb40fb0bd7d97016fbc80028de235d18bdedb6ef5f4636a5f04add679a2cc7506e131978c3968ab47d703dd2f4bd04191d82e44a46d654b53150eb57c77fa985a75139da006f615b9153a7c67ef08f6ad", 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x1000000000010, r2, 0x0, 0x7ff) ptrace$auto_PTRACE_DETACH(0x11, r2, 0x8000000000000000, 0x4000000000008) mmap$auto(0x6, 0x5, 0x1, 0xfffffffffffffff4, 0x7, 0x4000000a8000) ioctl$auto_MEMSETBADBLOCK(r1, 0x40084d0c, &(0x7f0000000200)=0x8259) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x200007fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xfbffffffffffffff) 1.406424719s ago: executing program 5 (id=2735): msgctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000600)={{0x81, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x16}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x9, 0x7, 0x101, 0x3, 0xe, 0x8, @raw=0x2, @raw=0x2}) open(0x0, 0x161342, 0x100) (async) r0 = open(0x0, 0x161342, 0x100) cachestat$auto(0x1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r2, 0xc008aec1, &(0x7f0000005400)) (async) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r2, 0xc008aec1, &(0x7f0000005400)) epoll_ctl$auto(r0, 0xd4, r0, &(0x7f0000000440)={0x9, 0x1}) (async) epoll_ctl$auto(r0, 0xd4, r0, &(0x7f0000000440)={0x9, 0x1}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) (async) ioctl$auto(0x3, 0x4020565a, 0x38) socket(0x10, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x1d, 0x2, 0x6) pwritev2$auto(r5, &(0x7f00000003c0)={0x0, 0x80000000200}, 0x8000000000000004, 0xffffffffffffffff, 0x8, 0xb) (async) pwritev2$auto(r5, &(0x7f00000003c0)={0x0, 0x80000000200}, 0x8000000000000004, 0xffffffffffffffff, 0x8, 0xb) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000002c00010004000000000000000c00010040000000000000000a00"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x7}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0xdb}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x1ff}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0xfffffffb}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x181018aa}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0xfffffffb}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x4000004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3d2abd7000fcdbdf25020000000a000900bbbbbbbbbbbb0000eaaeb87306be9a3cd848b9595c95826c1f515d1e64b2ee9478f79440cf06d3189ceff6367d95eabec9787847055f46ff046a8b0edbcd2c635c16de58400cdcdc30040c809b316f5a9fc08e2af2d49f254688d3c1ef1a3700eedb6dccb41126b36a65d033a4507c3a3a0130e2f351bafd7c94003f0ad2a1a6db5b2678976ae58cd093a7deb08d5f349ac57336717c02"], 0x20}}, 0x80) 1.399561676s ago: executing program 0 (id=2736): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x23, 0x80805, 0x0) bind$auto(r0, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = socket(0x29, 0x5, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040854) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) (async) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x80010001000) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, 0x0, 0xf, 0x8) (async, rerun: 64) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) (async) close_range$auto(0x2, 0x8, 0x0) 1.377074814s ago: executing program 4 (id=2737): socket(0xa, 0x801, 0x84) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) setsockopt$auto(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmmsg$auto(r1, &(0x7f00000003c0)={{&(0x7f0000000080)="1c2c5749b62255681d9278cabebdf8c16038fd847dc73ac3467424dc486399b5a865fe31eca34be8cc39bebd197f32a32548408121faed961a4bea46ecc0984b8b74e8dc077d9769e1ad0eddc49812ad639962c511041a983a14dab80046564be4bac904a9b188c8d1238684f42d9ae79b7ebadfde93504c83a547ad6e19a99c0c8683acdb7619b9801d40d552697cc07d1b31571abadb89e4853c4d1cdc8ad9e5301e3231b15be0c8e8fc09b8f6780dbb5628d5d39f8159a5e0c539a3ac834ba6a77f531955e1326288c1e16214b034205fb2", 0x63f966c3, &(0x7f0000000280)={&(0x7f0000000180)="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", 0x9}, 0x400, &(0x7f00000002c0)="6cfe077a0aa8b8d586cfed9385f7d866de693ee6d7e2b3775a5390fa0cd7ad2285d4176c4fbdc5ce00f03a7e299f1eb76e070cdc026a45f42de3f24e89316c4c037865c7d6d56c3eaa77c9181170d6d4590e0a0d449c209595733ae72058b300d5178d97cc769f525698878a0ea708b15e07040d54c61625e8d41b3340ebb8e35c826a81d0fecf8262a5d3af1df1e531a8b8ad120560c35d332abc81e0c5591441e51e0c47d1ae7aeda5807d7fda6ad412acea17af5a436efb75723eb2474183ed25374bb7b98927d8", 0xc00c, 0xf}, 0x4}, 0x1, 0xff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setns$auto(0x0, 0xb) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) 932.30594ms ago: executing program 5 (id=2738): close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00') 924.774519ms ago: executing program 1 (id=2739): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) (rerun: 32) read$auto(r0, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) fanotify_init$auto(0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) (async) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x11, 0x2, 0x14) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyx6\x00', 0x101e81, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff001) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r3) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) (async, rerun: 32) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) (async, rerun: 32) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 736.928873ms ago: executing program 5 (id=2740): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x1, 0x84) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = eventfd$auto(0x80) readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x8) read$auto(r0, 0x0, 0xcc9c) write$auto(r0, &(0x7f0000000400)='\'\x00', 0x8) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x9, 0x3ff}) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0xfffffff9) 506.386573ms ago: executing program 5 (id=2741): mmap$auto(0xfffffffffffffffc, 0x61ce25d0, 0x7fffffff, 0x18, 0x401, 0x200000008000) r0 = socket(0x2, 0x801, 0x106) memfd_secret$auto(0x8) getsockopt$auto(r0, 0x6, 0xd, 0x0, 0x0) 368.40979ms ago: executing program 5 (id=2742): sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xd0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa8, 0x2, "c14b23155c03eb0f9ff4bb5ff4a838bba074933e83640f9d278bef8b0ca52800c0ddee1ff593a9326bbec2d380659a19fdee56b47979617dca9a349acf87ccc1f20273ab04d97e20cde4529445a3992a87634270ef2bb20365b6ee431031d34210de93e30485ef6b29cf24973774ac7018083b2f24677fbb494188bfd7beaf6c5daaf3426da1d28dfc353cea62f92a4f6cfb757327247c1a5335611bcb6820dc81b2945b"}, @NL80211_FTM_RESP_ATTR_LCI={0x1f, 0x2, "7f1be2d2a0c12a1d5f8cf39bf8bb4a8a433935c00e2ea632fae312"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x44001) madvise$auto(0x8808, 0x68, 0x4) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0x8000, &(0x7f0000000200)="0268cc985684065f241a523c5ea9cee29202061c991590ddf2d175e6819e2f5eecd3d37cfab36a4d9548b8883730") ioctl$auto_TCSBRK2(r1, 0x5409, &(0x7f0000000240)="e98d5d48dc6064599884a4b2506135ea122446a528c5e32c2dd11fd9f3ad810ced1296750c1dbf501752b24c2813c332052b913c05b716f5f3abf1e83bc3b2ba669dd777aec7aa9ca0529b3fe1392419cf8e0d8c97772f9698b552ed9b5fc8d86bbef50cd21e448399f8d1b5cd8e8926fdeaf0095d5386f33c1258ab47564126e6a61ce4acf0283c89e39993e113f009b8b45f") madvise$auto(0x7, 0x2, 0xf) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/fail-nth\x00', 0xe401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r4 = seccomp$auto(0x0, 0x9, &(0x7f0000000380)="439c7b26e4ac6f695c6f1b2fbfd3e1b17794c71dc8c6518057577cf38f90861027445739e7164d9dfb706850f0653eada5722e4f54e0a5cd7811e688b6ac93") ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000003c0)={{0x2, 0x4, 0x400, 0x7, 0x56}, 0x7, 0x0, "edacd225dd50bfcd071e547e79b5669bc7ce0c62c305a39bf8fdd33db15513a6045b58a73d137882cc939fbc7d0592907155363ca81843ccb44d0b233638e251", "03761594a74c7f33f0915cf914e553139a27c69751f704bd5bef64946910b90c6f19aa4d7a325a8d1be51e41df282d3ca8aa34e990900cee7028a850aaeee0e23b63506748778de4cccd0b988182caa1", 0x3, 0x1000, 0x9, 0x9, 0xffffffff, "e99ce0c4f5e74120dcd27c7dfa11bfb8997520ee990ff688d73603e707be834a"}) madvise$auto(0x2da, 0x81, 0x9809) r5 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/tracing/free_buffer\x00', 0x1032c0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000500), 0x10301, 0x0) clone$auto(0x4, 0x7, &(0x7f0000000540)=0x5, &(0x7f0000000580)=0x6, 0x3) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) socket(0x2a, 0x4, 0x2f77) getsockopt$auto_SO_BROADCAST(r3, 0x5, 0x6, &(0x7f00000005c0)='/sys/kernel/tracing/free_buffer\x00', &(0x7f0000000600)=0x3) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000640)='/proc/swaps\x00', 0x80, 0x0) sendmsg$auto_IPVS_CMD_GET_INFO(r4, &(0x7f0000001fc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f80)={&(0x7f00000006c0)={0x18a4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x149c, 0x2, 0x0, 0x1, [@nested={0x1210, 0xe2, 0x0, 0x1, [@generic="46e07152e7573a1a7c5e9ede705903cd4142b53e1ef089fc4849757841e52d3eb2b414aa255628141e2afd36cfd2b5b446aa90eab121a1b6e80d221386c389f23504f9d11f5192b34d76c49da991f66b07628bba5b2685d6efaedcc9156d92cd7e80faff483d4e024a938b32238c1ff6f7a48eda8a85f9dd0b8dc7503f5c0327be3876bc35f17fa789f0216e835c7481e3fad946e168a1d6e5ab3ec6c21961638e1772eea7c4a0ff5f35b3d02bc3bb8181a37d41cccc590775eea4535e", @generic="07d822876d90f4ab1e41b4ad725bb0c8d5b42b000717d8c89b0bca168a52772eff33cd295e825a5f0c0069149525d5f08ab11f8df0341c7f11acdb5724c5e47a6dd47db93fb0bfc7ead68c67738bb40a67945aa3ad74722038bd3ec70cad01ad022bd2464a0d61b2a5", @nested={0x4, 0x124}, @nested={0x4, 0xc3}, @generic="08d535cb8e19e53f21b5b9fac762222c127027c92aa7662c3612a5619e79388be33408375538448e8824fcb7ae7d895656b6fde74ffcd24dd78f0925f19765f1edd83d53847c03b4c643319aeef68cfaabaa58e58ccfd93d67c6d2b376cf0fefd58eae4a6000d3bf1f31264868538a24a74a62a0af9ecc3ba1f302427c4831c0074d5d6d30c600460f806eeb4c9f53db8e88ab9201d93e7b33a5720380007f1aab5fb3f72cf39bfeb7934d33d270f09aca30007b83042c5dee7e5baa3857b9a1c45f96687df4a4889d3c87f2cac71901fc453a6f3a7aedd594ed8f70fe4d", @generic="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"]}, @generic="31ba68bc08822b864824b0471e5c8dc416a1034fad1381daf8393792e6b31d906668972d9639e99c7ca507485ca522a7cffd413760b7edf52c1a6f285c0506f272bbe3840b64f065ba0891c9502c7f53b2fd5668d99d0f1c08152390a5da484f6c01b1e57c9722ae19fee59f175661d81c72c93118de72a3daf0538e9702654a0af6820e25e6155da3d5dd3ec455c261346f3088fe296ec5a2dafc750947b7ab6e4db7d58b97255550b48e43fe08979897f5f7fc93c2a3", @generic="8797b9c1b79f45b4c06351488a5b081f97b9ba885b741b725f6c", @nested={0xc1, 0xb7, 0x0, 0x1, [@nested={0x4, 0xa5}, @generic="aa36c0bbd9bf7d27e84cb6b67e2979325c7f713d242b0eee2e490fe1131bcb8de9f8682e087ec75e27d2a5215b", @nested={0x4, 0xf9}, @typed={0x87, 0xac, 0x0, 0x0, @binary="f9efae948a2011d688032b6f485fa3ffe008e8c8083101c90ca63f451306a89b66a566fc5770a5ace91d726270107629c8253bce84ad90e772c5dfc77975ca97e54109aa5e210b5e640e40604dd6abb930cf82267a2fdf40b92a9cee560a3121cee9fcc5f99e69bcf51d2d6da0742e202829e9c2e0a83c4ca5046feef52b86897cb775"}]}, @generic="c72744283a800774a2f0aefe7e5a89248cf01339d9eab862dc743fb37d96bc1ef97cf41f3f14eae87367ddfb58f331eefaf05b11d9dd915f3d669164f033f7cc433d8cbc5bedbef1e76a31c1be9f3ee4a91eafa6f0c489b4c0d4f3533111c80040ef8efc57a0bd47610dc4354e8a0984d17172a32530eaf8b39c424718059519b77fa5c617b8344580b687717774cc4aa5f4a979d4c88f12639f32c580f0ca20446ac5628ce45c98b7bf2dae2f15a4ba862057948655e9526f87fc3efbf39fd801b108b04b02d26f13f54fa1984daabc05541f085f53775224bb6640f8a7", @generic="c6328e27d4db6e81dd", @nested={0x4, 0x93}, @typed={0x8, 0xca, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_DEST={0x3f4, 0x2, 0x0, 0x1, [@generic="f6ca03dcacc65b7f9c5823e66b21c7ddf1fe6315e07eab3c3f35c2585e82649a92f460f4d7bab87501751f58a3efdc24c6b9d3c9f7666558918800acf53c1cfc15884781d1808bc5", @generic="e7df67c58362c7e1fe31b66868a864cf688037459cbc6cd01fd8a94885b215d8b9c07a56d9796adcb9841916569c3ab3f9af4ecb1ed2c0c2c3ed3f61a0d6355b2ecd6c3ef0a0edfea62465e69dffd67d41acaf13d89c", @nested={0xc4, 0xd4, 0x0, 0x1, [@generic="89644e09d3a1f4dbbb6e8691ccd5a660a8db8ee6862d2d4cab3402a0fa975d9025ccd8a5c4bdf21ba8530010481c8083268473e638ec32d0b26199348dd032df268a0d929348f3f8ec5b06a48876014a501e82dbc97c9aedceb0a16d6d6f65034ce8a5f9895618da8866f72b02c2d252c5acdbf17adf546d47014d9538052f61c21b7881c80094d522f7e2e25fc455c894f095e094b5afff5081e31cced1605b1ba61039e6f44f6ec5fabb0ccc66284795dee5200c8754d1126b9053200a4043"]}, @generic="654c14f7e95d6f9b884097bcd34a0a6865cd1495f3f4e8fc771a8a143ffe159e04ff50a99a4f5fc81dc6608e2bdd2e85971d56cb56ab27b397523500e124a09cfc4797392a9427510dc884bfb3d9135873654d5e94b77bc48942a2eff3947ba0e5acf2724cbad53f18131897434c710e62e7c52228c89f5b7f1fb6eb0563b058319d9514ee7e912587f20cd5b922364ecf144f81e15c8edae589478e1a767ba27d4cf67ffca440dd835b53ee80f3a4465c6cf990c54aa254e78eb905a4821043e81aa0d5282170a6860c85363c5f05b077c614a1448a5ffb838c", @typed={0x14, 0x151, 0x0, 0x0, @ipv6=@private0}, @nested={0x19d, 0x69, 0x0, 0x1, [@generic="9d3450bda8d088e2629fc60cce47d0b9cf3d07cc6dead28ef32c2f73e19a04dd315c3379ee857de8a86d56a71054875c1fd680db6e8dd5b5b0fd2d25128ea51083c9d3be34fe0ff61c17897a9c9d9171bcd4f1e0bedda9000bcd43db982d43f012f77f64b430f12fbd39916e0ec554", @generic="ec541223f0316ee57f5687e43970b5874cabbf289f1d9c2ccfc9c4a11f08616e6f897ff82a4ce511575bde8dc42a298b83d612ad32343a8e64d675a1a3a8ee2981f820f63b9d6da8272b9344b0966205c0faa10d6722d80d132cecdc6f43139a7c3a09b6f2a385ad9792c8cfa7f8a964221a45cc006146d3ab5b85a4c69cfa88795cea531888b45fd141ff795e1cc459622b4c7b1a37431240444e36b672dde4369e52e0d5b84424ba3f8e9748658ef134eaafccae2756881cc554754fb3dc81de1696bc56dd44c31467e0f648d7cbe5d03b", @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x2f, 0x80, 0x0, 0x0, @str='/sys/kernel/debug/page_tables/current_user\x00'}, @typed={0x8, 0xa0, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x142, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x92}]}]}]}, 0x18a4}}, 0x8000) mmap$auto(0x0, 0x7, 0x2, 0x1a, 0xffffffffffffffff, 0x4fa0) read$auto_proc_pid_maps_operations_internal(r6, &(0x7f0000002000)=""/66, 0x42) select$auto(0xaa, &(0x7f0000002080)={[0x9, 0x6, 0x782200000, 0x2, 0x0, 0x9, 0x4, 0x0, 0x1, 0xffffffff7fffffff, 0x2, 0x3e7de3e9, 0x4, 0x8000000000000000, 0x1, 0x10000000000000]}, &(0x7f0000002100)={[0x29a, 0x4, 0x3, 0xe4, 0x8, 0x6c, 0x0, 0x758, 0x7fffffff, 0x0, 0x5, 0x3, 0x9, 0x6, 0x3e, 0x4]}, &(0x7f0000002180)={[0x101, 0x7, 0x8, 0x6, 0x1, 0xfff, 0xfffffffffffffff7, 0x800, 0x5, 0xfa91, 0x100000001, 0x9, 0xa7f, 0x4947, 0x4, 0xffff]}, &(0x7f0000002200)={0x6}) fsconfig$auto_SHMEM_HUGE_FORCE(r3, 0x9aa, &(0x7f0000002240)='/proc/swaps\x00', &(0x7f0000002280)="f8b1aa07e2755064d86676a8346d6ae9286b3cc89e440b33e096e53a21c049b88b35dd10a80ed92905c135a28d3a08b8c315b2670c095c5c24c6468cf1244ebdd74575710f065f8bb79ad6f27d92f4f4e716d64322c99823c97cce00a573362b52c4ad847053d2a9f1cea0d66c9765d1a6bd09537b8fa93f5eb2cf8d3d3869af4c06733713f57a356ae000dd5b47e40737374eb4ca99ea08cf546ecc4b69fff97827087625e2e7373aa54fd3a883d0c4dbdba9b717bb9a37a4bfc57695cbbb1b1795f1fae7f6906e6c0bcc219f1fbb83", 0xfffffffffffffffe) r7 = fcntl$auto_F_RDLCK(r5, 0x2, 0x0) r8 = io_uring_setup$auto(0x48a, &(0x7f0000002380)={0xfffffff7, 0x101, 0xc, 0x1, 0x7, 0x5, r7, [0xffffffff, 0x1ff, 0x5], {0x9, 0x5, 0x4, 0xffff5039, 0x80, 0x2, 0x4, 0x1, 0xffffffffffffffff}, {0x7, 0xff, 0x4, 0xfff, 0x6, 0x3, 0x7, 0xfffffff5, 0xf56}}) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000002400), 0x40080, 0x0) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r9, &(0x7f0000002580)={&(0x7f0000002440), 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x84, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, "488cc55448078b847f219e340202dbd7aef8761314a6188bb5becc6e0caa5a68f5e027535e58570cfb1f968a922790c0367b0bc14ac0a767a1fdad3006482ae9c4dd50487abd42663416ea44a61e62de750d91abe5e5c6240a10c5f9f3b9386a1f63177e00205473c52e9a34bce0cb"}, 0x84}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x3}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004880}, 0x20044891) 292.964929ms ago: executing program 0 (id=2743): mmap$auto(0xfffffffffffffffd, 0x400005, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0xfffffffffffffffc, 0x200007, 0x8) mmap$auto(0x3, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf253f00000004005e8008000300", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto(0x3, 0x400454ca, 0x38) 292.568811ms ago: executing program 1 (id=2744): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xaf4, 0x4000000000df, 0x100127d, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) set_mempolicy$auto(0x8006, &(0x7f0000000040)=0x4800000075, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x4, 0x200204, 0x15) r0 = socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04c90027bd7000fbdbdf2514000200"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, @inferred, 0x2, @_sigev_thread={0x0, 0x0}}) socket(0xa, 0x801, 0x106) setsockopt$auto(0x4, 0x29, 0x1a, 0x0, 0x200577) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 173.691023ms ago: executing program 0 (id=2745): mmap$auto(0x3, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/index\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket(0x11, 0x3, 0x400) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x40000000000000, 0x400008, 0xdf, 0x18, 0x2, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) madvise$auto(0x0, 0x3, 0x66) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) execveat$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=&(0x7f0000000380)='\x00', &(0x7f0000000440)=&(0x7f0000000400)='\x00', 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc?\xfd\xe5`\xfa<\x03a\xdd\b\xbaj@bj\x1f\xad\xaf\r\xe1\xd1 \x96\x97\xbbk\"\x80\xf6\x9f\x99[t\xd9\xa3\xe2\xad\xa8\x1b\x1cg\b\xedf\xef\xb4\x81Q\xa5\xbdX\xdf&\xe0y\xeb8?\xf2\xe9g\x93\xe4\x81y\xfa&\xbdQ\nI\xa1Xt0\xdc\xf8\x9cn\x91\x1a\xc5N\xc7I\xb4yD\xd4\xcb\xb0\xdeVc\xd5\x8d\xca\xdd\xf9\x85\x9e\x9eF?\xb8x\xe4\xf9d\x9fx\x93&\x00\xcc\x0f\xae\x12\xc7\xc4\xd1\xd1hz\xae\xb1H\xcf\xd8\x11>T\x0e\x8f\x9b\xf0\x8d\xcb\xbc\xda\xfb\xfaUeA\x94!\xd8\xfc\xaf\n\xc1\xe2\n\xd0\x8d=x\x11\xc7\xac\xb2\xcd\xbc\xb5\x8b\xcf\xf1;\xb5\xe0\xcb\xba\xa8l\x12\x063\x06\x1aP\f\xa7\xf3\'+<\x84S\x8d\xdd\x16\xad\x1a\x84\x0f\x19\xf9\x15\x95B\xfb2/n\xef(\xd40J\xf2\xdf\x96mv\x9a\x94\xe3\n\x8e~\xa2N\x0f\xa7\x7f\xc0\x84%\\\xdaW1+\xc2L\xa50S:\xb3\xcb.\xfd\xc9=\x91gJ\xf8u\xa6', 0x100000a3d9) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0xffffffffffffffff, 0x0, 0x2) r4 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) mmap$auto(0x0, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x3, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 50.957611ms ago: executing program 5 (id=2746): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) read$auto_long_retry_limit_ops_(r0, &(0x7f0000000280)=""/140, 0x8c) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) read$auto_proc_page_owner_operations_page_owner(r2, &(0x7f00000000c0)=""/4085, 0xff5) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, r3, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 0s ago: executing program 4 (id=2747): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000440)={0x0, 0x7}, 0xc00000003) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x20004010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'gre0\x00'}) msgctl$auto_MSG_STAT(0xa1, 0xb, &(0x7f0000000280)={{0x4d6, 0x0, 0xffffffffffffffff, 0xd2, 0x1, 0xffff8085, 0x3}, 0x0, 0x0, 0x8000000000000000, 0x3, 0x8, 0x7f, 0xce3, 0x4, 0x2b5, 0x5715, @raw=0xd, @raw=0x101}) getpid() r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x5453, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x200) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r6 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x2, 0x0) write$auto(r6, 0x0, 0x5) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r7, 0x0, 0x800003, 0x270) mlockall$auto(0x7) kernel console output (not intermixed with test programs): : 0000000000000000 [ 822.165432][T17762] RAX: ffffffffffffffda RBX: 00007f0f243e6090 RCX: 00007f0f2418d8dc [ 822.165470][T17762] RDX: 000000000000000f RSI: 00007f0f250310a0 RDI: 0000000000000006 [ 822.165488][T17762] RBP: 00007f0f25031090 R08: 0000000000000000 R09: 0000000000000000 [ 822.165508][T17762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.165526][T17762] R13: 00007f0f243e6128 R14: 00007f0f243e6090 R15: 00007ffcee8615b8 [ 822.165573][T17762] [ 823.772520][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2184'. [ 825.044942][T17811] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2187'. [ 825.464051][T17818] FAULT_INJECTION: forcing a failure. [ 825.464051][T17818] name failslab, interval 1, probability 0, space 0, times 0 [ 825.487241][T17818] CPU: 0 UID: 7 PID: 17818 Comm: syz.1.2189 Tainted: G U syzkaller #0 PREEMPT(full) [ 825.487280][T17818] Tainted: [U]=USER [ 825.487287][T17818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 825.487301][T17818] Call Trace: [ 825.487309][T17818] [ 825.487318][T17818] dump_stack_lvl+0x16c/0x1f0 [ 825.487349][T17818] should_fail_ex+0x512/0x640 [ 825.487379][T17818] ? __kmalloc_cache_noprof+0x5f/0x780 [ 825.487422][T17818] should_failslab+0xc2/0x120 [ 825.487454][T17818] __kmalloc_cache_noprof+0x72/0x780 [ 825.487500][T17818] ? alloc_ucounts+0x13d/0x440 [ 825.487536][T17818] ? alloc_ucounts+0x13d/0x440 [ 825.487565][T17818] alloc_ucounts+0x13d/0x440 [ 825.487596][T17818] ? __pfx_alloc_ucounts+0x10/0x10 [ 825.487641][T17818] inc_ucount+0x81/0x370 [ 825.487673][T17818] ? lockdep_init_map_type+0x5c/0x280 [ 825.487710][T17818] ? __pfx_inc_ucount+0x10/0x10 [ 825.487739][T17818] ? lockdep_init_map_type+0x5c/0x280 [ 825.487775][T17818] ? debug_mutex_init+0x37/0x70 [ 825.487802][T17818] __do_sys_fanotify_init+0x317/0xc80 [ 825.487839][T17818] ? rcu_is_watching+0x12/0xc0 [ 825.487867][T17818] do_syscall_64+0xcd/0xfa0 [ 825.487897][T17818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.487921][T17818] RIP: 0033:0x7f0f2418eec9 [ 825.487939][T17818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.487962][T17818] RSP: 002b:00007f0f25031038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 825.487984][T17818] RAX: ffffffffffffffda RBX: 00007f0f243e6090 RCX: 00007f0f2418eec9 [ 825.488000][T17818] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000c00 [ 825.488014][T17818] RBP: 00007f0f24211f91 R08: 0000000000000000 R09: 0000000000000000 [ 825.488029][T17818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.488042][T17818] R13: 00007f0f243e6128 R14: 00007f0f243e6090 R15: 00007ffcee8615b8 [ 825.488074][T17818] [ 825.692761][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.355792][T17844] Unable to find swap-space signature [ 828.573803][T17850] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2197'. [ 829.045663][T17859] bond0: option all_slaves_active: invalid value () [ 829.384002][T17869] FAULT_INJECTION: forcing a failure. [ 829.384002][T17869] name failslab, interval 1, probability 0, space 0, times 0 [ 829.419681][T17865] netlink: set zone limit has 8 unknown bytes [ 829.449599][T17869] CPU: 0 UID: 0 PID: 17869 Comm: syz.1.2200 Tainted: G U syzkaller #0 PREEMPT(full) [ 829.449646][T17869] Tainted: [U]=USER [ 829.449657][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 829.449676][T17869] Call Trace: [ 829.449686][T17869] [ 829.449698][T17869] dump_stack_lvl+0x16c/0x1f0 [ 829.449739][T17869] should_fail_ex+0x512/0x640 [ 829.449779][T17869] ? __kmalloc_noprof+0xca/0x880 [ 829.449836][T17869] should_failslab+0xc2/0x120 [ 829.449879][T17869] __kmalloc_noprof+0xdd/0x880 [ 829.449948][T17869] ? sk_prot_alloc+0x1a8/0x2a0 [ 829.450002][T17869] ? sk_prot_alloc+0x1a8/0x2a0 [ 829.450047][T17869] sk_prot_alloc+0x1a8/0x2a0 [ 829.450099][T17869] sk_alloc+0x36/0xc20 [ 829.450160][T17869] mctp_pf_create+0xe8/0x360 [ 829.450202][T17869] __sock_create+0x338/0x8d0 [ 829.450262][T17869] __sys_socket+0x14d/0x260 [ 829.450315][T17869] ? __pfx___sys_socket+0x10/0x10 [ 829.450362][T17869] ? ksys_write+0x1ac/0x250 [ 829.450395][T17869] ? __pfx_ksys_write+0x10/0x10 [ 829.450439][T17869] __x64_sys_socket+0x72/0xb0 [ 829.450489][T17869] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.450528][T17869] do_syscall_64+0xcd/0xfa0 [ 829.450571][T17869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.450605][T17869] RIP: 0033:0x7f0f2418eec9 [ 829.450632][T17869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.450667][T17869] RSP: 002b:00007f0f24fef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 829.450699][T17869] RAX: ffffffffffffffda RBX: 00007f0f243e6270 RCX: 00007f0f2418eec9 [ 829.450722][T17869] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 829.450742][T17869] RBP: 00007f0f24211f91 R08: 0000000000000000 R09: 0000000000000000 [ 829.450762][T17869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.450783][T17869] R13: 00007f0f243e6308 R14: 00007f0f243e6270 R15: 00007ffcee8615b8 [ 829.450831][T17869] [ 831.529969][T17889] binder: 17887:17889 ioctl c0306201 2000000000c0 returned -14 [ 831.544124][T17891] binder: 17887:17891 ioctl c0306201 2000000000c0 returned -14 [ 833.868442][T17903] Process accounting paused [ 833.932810][T17910] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2208'. [ 834.685925][T17934] FAULT_INJECTION: forcing a failure. [ 834.685925][T17934] name failslab, interval 1, probability 0, space 0, times 0 [ 834.698737][T17934] CPU: 1 UID: 0 PID: 17934 Comm: syz.1.2211 Tainted: G U syzkaller #0 PREEMPT(full) [ 834.698776][T17934] Tainted: [U]=USER [ 834.698783][T17934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 834.698798][T17934] Call Trace: [ 834.698806][T17934] [ 834.698815][T17934] dump_stack_lvl+0x16c/0x1f0 [ 834.698847][T17934] should_fail_ex+0x512/0x640 [ 834.698877][T17934] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 834.698904][T17934] should_failslab+0xc2/0x120 [ 834.698937][T17934] kmem_cache_alloc_noprof+0x75/0x6e0 [ 834.698963][T17934] ? alloc_uid+0x13d/0x4c0 [ 834.698999][T17934] ? alloc_uid+0x13d/0x4c0 [ 834.699026][T17934] alloc_uid+0x13d/0x4c0 [ 834.699057][T17934] ? __pfx_alloc_uid+0x10/0x10 [ 834.699089][T17934] ? bpf_lsm_capable+0x9/0x10 [ 834.699120][T17934] ? security_capable+0x7e/0x260 [ 834.699155][T17934] __sys_setuid+0x1cc/0x440 [ 834.699183][T17934] do_syscall_64+0xcd/0xfa0 [ 834.699213][T17934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.699237][T17934] RIP: 0033:0x7f0f2418eec9 [ 834.699255][T17934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.699279][T17934] RSP: 002b:00007f0f24fef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 834.699301][T17934] RAX: ffffffffffffffda RBX: 00007f0f243e6270 RCX: 00007f0f2418eec9 [ 834.699317][T17934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 834.699331][T17934] RBP: 00007f0f24211f91 R08: 0000000000000000 R09: 0000000000000000 [ 834.699345][T17934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.699359][T17934] R13: 00007f0f243e6308 R14: 00007f0f243e6270 R15: 00007ffcee8615b8 [ 834.699391][T17934] [ 835.912751][T17944] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2214'. [ 836.062686][ T52] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 836.393123][T17953] FAULT_INJECTION: forcing a failure. [ 836.393123][T17953] name failslab, interval 1, probability 0, space 0, times 0 [ 836.467313][T17953] CPU: 0 UID: 0 PID: 17953 Comm: syz.4.2215 Tainted: G U syzkaller #0 PREEMPT(full) [ 836.467364][T17953] Tainted: [U]=USER [ 836.467375][T17953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 836.467393][T17953] Call Trace: [ 836.467404][T17953] [ 836.467415][T17953] dump_stack_lvl+0x16c/0x1f0 [ 836.467458][T17953] should_fail_ex+0x512/0x640 [ 836.467499][T17953] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 836.467535][T17953] should_failslab+0xc2/0x120 [ 836.467578][T17953] kmem_cache_alloc_noprof+0x75/0x6e0 [ 836.467609][T17953] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 836.467655][T17953] ? acpi_ut_create_thread_state+0x6d/0x170 [ 836.467707][T17953] ? acpi_ut_create_thread_state+0x6d/0x170 [ 836.467745][T17953] acpi_ut_create_thread_state+0x6d/0x170 [ 836.467791][T17953] acpi_ps_parse_aml+0x12e/0x1170 [ 836.467841][T17953] ? acpi_ut_ptr_exit+0xfe/0x180 [ 836.467895][T17953] acpi_ps_execute_method+0x5c4/0xe90 [ 836.467955][T17953] acpi_ns_evaluate+0x98c/0x16d0 [ 836.468016][T17953] acpi_evaluate_object+0x4ca/0xdf0 [ 836.468064][T17953] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 836.468105][T17953] ? __mutex_trylock_common+0xe9/0x250 [ 836.468162][T17953] acpi_evaluate_integer+0xdd/0x200 [ 836.468215][T17953] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 836.468289][T17953] ? __pfx_status_show+0x10/0x10 [ 836.468330][T17953] status_show+0xa0/0x120 [ 836.468366][T17953] ? __pfx_status_show+0x10/0x10 [ 836.468416][T17953] dev_attr_show+0x53/0xe0 [ 836.468458][T17953] ? __pfx_dev_attr_show+0x10/0x10 [ 836.468494][T17953] sysfs_kf_seq_show+0x216/0x3e0 [ 836.468540][T17953] seq_read_iter+0x50b/0x12d0 [ 836.468612][T17953] kernfs_fop_read_iter+0x46c/0x610 [ 836.468643][T17953] ? rw_verify_area+0xcf/0x6c0 [ 836.468678][T17953] vfs_read+0x8bc/0xcf0 [ 836.468717][T17953] ? __pfx___mutex_lock+0x10/0x10 [ 836.468758][T17953] ? __pfx_vfs_read+0x10/0x10 [ 836.468830][T17953] ksys_read+0x12a/0x250 [ 836.468863][T17953] ? __pfx_ksys_read+0x10/0x10 [ 836.468910][T17953] do_syscall_64+0xcd/0xfa0 [ 836.468948][T17953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.468981][T17953] RIP: 0033:0x7f4882d8eec9 [ 836.469008][T17953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.469043][T17953] RSP: 002b:00007f4883b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 836.469073][T17953] RAX: ffffffffffffffda RBX: 00007f4882fe6090 RCX: 00007f4882d8eec9 [ 836.469096][T17953] RDX: 000000000000007a RSI: 0000200000000140 RDI: 000000000000000a [ 836.469117][T17953] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 836.469135][T17953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.469154][T17953] R13: 00007f4882fe6128 R14: 00007f4882fe6090 R15: 00007ffe03d3e178 [ 836.469202][T17953] [ 836.783102][T17953] ACPI Error: ffff888031b06000 walk still has a scope list (20250807/dswstate-694) [ 839.958423][T17984] netlink: 'syz.0.2223': attribute type 1 has an invalid length. getty: ttyS0: read error: Resource temporarily unavailable [ 842.297393][T18024] kAFS: Invalid Command on /proc/fs/afs/cells file [ 847.009031][T18067] random: crng reseeded on system resumption [ 847.092938][T18068] vhci_hcd: invalid port number 23 [ 847.119012][T18068] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 847.270244][T18070] binder: 18069:18070 ioctl c00c6211 0 returned -14 [ 847.509123][T17666] syz.4.2159 (17666) used greatest stack depth: 18472 bytes left [ 848.345802][T18092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 848.464464][T18092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 848.470622][T18092] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 848.676432][T18092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 848.686872][T18092] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 850.376095][T13782] Bluetooth: hci1: command 0x0c1a tx timeout [ 850.525175][T18140] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2255'. [ 850.534718][T13782] Bluetooth: hci2: command 0x0c1a tx timeout [ 850.693904][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 850.700146][T13782] Bluetooth: hci0: command 0x0c1a tx timeout [ 850.771325][T18144] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 850.802935][T18144] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 852.054189][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 852.065469][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 852.074531][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 852.142813][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 852.150722][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 852.615150][T13782] Bluetooth: hci2: command 0x0c1a tx timeout syzkaller syzkaller login: [ 853.582336][T18194] FAULT_INJECTION: forcing a failure. [ 853.582336][T18194] name failslab, interval 1, probability 0, space 0, times 0 [ 853.595059][T18194] CPU: 1 UID: 0 PID: 18194 Comm: syz.0.2264 Tainted: G U syzkaller #0 PREEMPT(full) [ 853.595101][T18194] Tainted: [U]=USER [ 853.595109][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 853.595123][T18194] Call Trace: [ 853.595132][T18194] [ 853.595141][T18194] dump_stack_lvl+0x16c/0x1f0 [ 853.595174][T18194] should_fail_ex+0x512/0x640 [ 853.595205][T18194] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 853.595233][T18194] should_failslab+0xc2/0x120 [ 853.595264][T18194] kmem_cache_alloc_noprof+0x75/0x6e0 [ 853.595288][T18194] ? security_file_alloc+0x34/0x2b0 [ 853.595318][T18194] ? security_file_alloc+0x34/0x2b0 [ 853.595341][T18194] security_file_alloc+0x34/0x2b0 [ 853.595365][T18194] init_file+0x93/0x4c0 [ 853.595397][T18194] alloc_empty_file+0x73/0x1e0 [ 853.595431][T18194] alloc_file_pseudo+0x13a/0x230 [ 853.595467][T18194] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 853.595501][T18194] ? alloc_fd+0x471/0x7d0 [ 853.595529][T18194] sock_alloc_file+0x50/0x210 [ 853.595562][T18194] __sys_socket+0x1c0/0x260 [ 853.595598][T18194] ? __pfx___sys_socket+0x10/0x10 [ 853.595635][T18194] ? xfd_validate_state+0x61/0x180 [ 853.595677][T18194] __x64_sys_socket+0x72/0xb0 [ 853.595712][T18194] ? lockdep_hardirqs_on+0x7c/0x110 [ 853.595739][T18194] do_syscall_64+0xcd/0xfa0 [ 853.595769][T18194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.595793][T18194] RIP: 0033:0x7f4a6458eec9 [ 853.595812][T18194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.595835][T18194] RSP: 002b:00007f4a653eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 853.595858][T18194] RAX: ffffffffffffffda RBX: 00007f4a647e5fa0 RCX: 00007f4a6458eec9 [ 853.595873][T18194] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 853.595888][T18194] RBP: 00007f4a64611f91 R08: 0000000000000000 R09: 0000000000000000 [ 853.595902][T18194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.595916][T18194] R13: 00007f4a647e6038 R14: 00007f4a647e5fa0 R15: 00007fff5cd2bd58 [ 853.595948][T18194] [ 854.205691][T13782] Bluetooth: hci4: command tx timeout [ 854.326780][T18166] chnl_net:caif_netlink_parms(): no params data found [ 854.702368][T18202] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 855.130996][T18166] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.181215][T18166] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.188664][T18166] bridge_slave_0: entered allmulticast mode [ 855.207072][T18166] bridge_slave_0: entered promiscuous mode [ 855.233125][T18166] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.262113][T18166] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.269444][T18166] bridge_slave_1: entered allmulticast mode [ 855.294029][T18166] bridge_slave_1: entered promiscuous mode [ 855.398144][T18214] FAULT_INJECTION: forcing a failure. [ 855.398144][T18214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 855.411679][T18214] CPU: 0 UID: 0 PID: 18214 Comm: syz.0.2269 Tainted: G U syzkaller #0 PREEMPT(full) [ 855.411727][T18214] Tainted: [U]=USER [ 855.411737][T18214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 855.411756][T18214] Call Trace: [ 855.411767][T18214] [ 855.411777][T18214] dump_stack_lvl+0x16c/0x1f0 [ 855.411807][T18214] should_fail_ex+0x512/0x640 [ 855.411841][T18214] should_fail_alloc_page+0xe7/0x130 [ 855.411874][T18214] prepare_alloc_pages+0x3c2/0x610 [ 855.411905][T18214] ? arch_stack_walk+0xa6/0x100 [ 855.411931][T18214] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 855.411962][T18214] ? stack_trace_save+0x8e/0xc0 [ 855.411990][T18214] ? __pfx_stack_trace_save+0x10/0x10 [ 855.412018][T18214] ? stack_depot_save_flags+0x29/0x9c0 [ 855.412047][T18214] ? find_held_lock+0x2b/0x80 [ 855.412071][T18214] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 855.412096][T18214] ? kasan_save_stack+0x42/0x60 [ 855.412121][T18214] ? kasan_save_stack+0x33/0x60 [ 855.412145][T18214] ? kasan_save_track+0x14/0x30 [ 855.412169][T18214] ? __kasan_slab_alloc+0x89/0x90 [ 855.412195][T18214] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 855.412216][T18214] ? security_inode_alloc+0x3b/0x2b0 [ 855.412256][T18214] ? inode_init_always_gfp+0xce4/0x1030 [ 855.412281][T18214] ? do_syscall_64+0xcd/0xfa0 [ 855.412306][T18214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.412336][T18214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 855.412377][T18214] ? policy_nodemask+0xea/0x4e0 [ 855.412410][T18214] alloc_pages_mpol+0x1fb/0x550 [ 855.412442][T18214] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 855.412481][T18214] ___kmalloc_large_node+0xed/0x160 [ 855.412517][T18214] __kmalloc_large_node_noprof+0x1c/0x70 [ 855.412553][T18214] __kmalloc_noprof.cold+0xc/0x62 [ 855.412588][T18214] ? sk_prot_alloc+0x1a8/0x2a0 [ 855.412625][T18214] ? sk_prot_alloc+0x1a8/0x2a0 [ 855.412656][T18214] sk_prot_alloc+0x1a8/0x2a0 [ 855.412690][T18214] sk_alloc+0x36/0xc20 [ 855.412715][T18214] can_create+0x1e5/0x630 [ 855.412746][T18214] __sock_create+0x338/0x8d0 [ 855.412786][T18214] __sys_socket+0x14d/0x260 [ 855.412821][T18214] ? __pfx___sys_socket+0x10/0x10 [ 855.412858][T18214] ? xfd_validate_state+0x61/0x180 [ 855.412891][T18214] ? __pfx_ksys_write+0x10/0x10 [ 855.412922][T18214] __x64_sys_socket+0x72/0xb0 [ 855.412956][T18214] ? lockdep_hardirqs_on+0x7c/0x110 [ 855.412984][T18214] do_syscall_64+0xcd/0xfa0 [ 855.413012][T18214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.413035][T18214] RIP: 0033:0x7f4a6458eec9 [ 855.413053][T18214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.413075][T18214] RSP: 002b:00007f4a653a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 855.413096][T18214] RAX: ffffffffffffffda RBX: 00007f4a647e6180 RCX: 00007f4a6458eec9 [ 855.413111][T18214] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 855.413124][T18214] RBP: 00007f4a64611f91 R08: 0000000000000000 R09: 0000000000000000 [ 855.413138][T18214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.413151][T18214] R13: 00007f4a647e6218 R14: 00007f4a647e6180 R15: 00007fff5cd2bd58 [ 855.413182][T18214] [ 855.915850][T18199] FAULT_INJECTION: forcing a failure. [ 855.915850][T18199] name failslab, interval 1, probability 0, space 0, times 0 [ 855.928658][T18199] CPU: 0 UID: 0 PID: 18199 Comm: syz.3.2266 Tainted: G U syzkaller #0 PREEMPT(full) [ 855.928709][T18199] Tainted: [U]=USER [ 855.928721][T18199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 855.928735][T18199] Call Trace: [ 855.928743][T18199] [ 855.928753][T18199] dump_stack_lvl+0x16c/0x1f0 [ 855.928784][T18199] should_fail_ex+0x512/0x640 [ 855.928815][T18199] ? __kmalloc_noprof+0xca/0x880 [ 855.928857][T18199] should_failslab+0xc2/0x120 [ 855.928889][T18199] __kmalloc_noprof+0xdd/0x880 [ 855.928925][T18199] ? lockdep_init_map_type+0x5c/0x280 [ 855.928966][T18199] ? ops_init+0x77/0x5f0 [ 855.928999][T18199] ? ops_init+0x77/0x5f0 [ 855.929026][T18199] ? __pfx_vlan_init_net+0x10/0x10 [ 855.929061][T18199] ops_init+0x77/0x5f0 [ 855.929093][T18199] setup_net+0x100/0x390 [ 855.929122][T18199] ? __pfx_setup_net+0x10/0x10 [ 855.929152][T18199] ? debug_mutex_init+0x37/0x70 [ 855.929192][T18199] copy_net_ns+0x2f8/0x690 [ 855.929226][T18199] create_new_namespaces+0x3ea/0xa90 [ 855.929260][T18199] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 855.929289][T18199] ksys_unshare+0x45b/0xa40 [ 855.929320][T18199] ? __pfx_ksys_unshare+0x10/0x10 [ 855.929354][T18199] ? syscall_user_dispatch+0x78/0x140 [ 855.929399][T18199] __x64_sys_unshare+0x31/0x40 [ 855.929429][T18199] do_syscall_64+0xcd/0xfa0 [ 855.929458][T18199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.929481][T18199] RIP: 0033:0x7f3e9418eec9 [ 855.929500][T18199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.929521][T18199] RSP: 002b:00007f3e94f7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 855.929543][T18199] RAX: ffffffffffffffda RBX: 00007f3e943e5fa0 RCX: 00007f3e9418eec9 [ 855.929558][T18199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 855.929572][T18199] RBP: 00007f3e94211f91 R08: 0000000000000000 R09: 0000000000000000 [ 855.929586][T18199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.929599][T18199] R13: 00007f3e943e6038 R14: 00007f3e943e5fa0 R15: 00007ffca1271ce8 [ 855.929632][T18199] [ 856.115735][T18214] IPVS: length: 7562853 != 24 [ 856.325790][T13782] Bluetooth: hci4: command tx timeout [ 856.419288][T18166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.916660][T16740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.011004][T18166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.564934][T16740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.774323][T18166] team0: Port device team_slave_0 added [ 858.125531][T16740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.188592][T18166] team0: Port device team_slave_1 added [ 858.356369][T13782] Bluetooth: hci4: command tx timeout [ 858.374518][T18230] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2272'. [ 858.494311][T16740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.581548][T18166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.596696][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.926596][T18166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.207990][T18166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.225383][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.276019][T18166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.219126][T18166] hsr_slave_0: entered promiscuous mode [ 860.226573][T18166] hsr_slave_1: entered promiscuous mode [ 860.340619][T18166] debugfs: 'hsr0' already exists in 'hsr' [ 860.346546][T18166] Cannot create hsr debugfs directory [ 860.420224][T13782] Bluetooth: hci4: command tx timeout [ 862.646462][T16740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.667187][T16740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.682804][T16740] bond0 (unregistering): Released all slaves [ 863.711182][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 864.369687][T16740] hsr_slave_0: left promiscuous mode [ 864.399582][T16740] hsr_slave_1: left promiscuous mode [ 864.453705][T16740] veth1_vlan: left promiscuous mode [ 864.513775][T16740] veth0_vlan: left promiscuous mode [ 864.807460][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2282'. [ 865.037440][T18310] could not allocate digest TFM handle [ 865.076774][T18291] random: crng reseeded on system resumption [ 865.359355][T16740] team0 (unregistering): Port device team_slave_0 removed [ 866.033401][T18166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 866.088647][T18166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 866.120622][T18166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 866.130046][T13782] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 866.144240][T18166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 866.565704][T18275] Process accounting resumed [ 866.585459][T18320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.632722][T18166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.777693][T18166] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.821531][T16737] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.828700][T16737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.921914][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.929216][T16740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.210061][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 868.982590][T18166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.468942][T18166] veth0_vlan: entered promiscuous mode [ 869.802731][T18166] veth1_vlan: entered promiscuous mode [ 870.054438][T18166] veth0_macvtap: entered promiscuous mode [ 870.093602][T18166] veth1_macvtap: entered promiscuous mode [ 870.336186][T18166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.395664][T18166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.501209][T12471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.548509][T12471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.588229][T12471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.597652][T12471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.706536][T18403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 870.929534][T16737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.947290][T18403] ipvlan0: entered promiscuous mode [ 870.952584][T18403] ipvlan0: entered allmulticast mode [ 870.967370][T16737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.985043][T18403] veth0_vlan: entered allmulticast mode [ 871.182967][T12471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.191123][T12471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.627871][T18439] bond0: option arp_interval: invalid value () [ 872.636090][T18439] bond0: option arp_interval: allowed values 0 - 2147483647 [ 873.191026][T18445] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 873.206254][T18434] bond0: option arp_interval: invalid value () [ 873.261094][T18434] bond0: option arp_interval: allowed values 0 - 2147483647 [ 873.578617][T18451] warning: `syz.1.2304' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 874.994840][T18476] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[18476] [ 875.459201][ T30] audit: type=1800 audit(4294970525.707:22): pid=18483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2307" name="dbroot" dev="configfs" ino=71088 res=0 errno=0 [ 878.024128][T18511] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 878.900362][T18527] tipc: Started in network mode [ 878.905930][T18527] tipc: Node identity ee00, cluster identity 4711 [ 878.913230][T18527] tipc: Node number set to 60928 [ 879.088391][T18527] Process accounting resumed [ 880.063183][T18560] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2323'. [ 880.719957][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.726601][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.855843][T18573] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 881.471587][T18576] zswap: compressor not available [ 882.286966][T18598] zswap: compressor not available [ 882.714271][T18617] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2332'. [ 883.716409][T18624] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2333'. [ 886.333875][T18661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2341'. [ 888.601600][T18696] FAULT_INJECTION: forcing a failure. [ 888.601600][T18696] name failslab, interval 1, probability 0, space 0, times 0 [ 888.637740][T18696] CPU: 0 UID: 0 PID: 18696 Comm: syz.4.2350 Tainted: G U syzkaller #0 PREEMPT(full) [ 888.637796][T18696] Tainted: [U]=USER [ 888.637808][T18696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 888.637831][T18696] Call Trace: [ 888.637843][T18696] [ 888.637857][T18696] dump_stack_lvl+0x16c/0x1f0 [ 888.637904][T18696] should_fail_ex+0x512/0x640 [ 888.637946][T18696] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 888.637984][T18696] ? __pfx_sc_fop_open+0x10/0x10 [ 888.638024][T18696] should_failslab+0xc2/0x120 [ 888.638070][T18696] kmem_cache_alloc_noprof+0x75/0x6e0 [ 888.638106][T18696] ? seq_open+0x55/0x170 [ 888.638155][T18696] ? __pfx_sc_fop_open+0x10/0x10 [ 888.638194][T18696] ? seq_open+0x55/0x170 [ 888.638237][T18696] seq_open+0x55/0x170 [ 888.638283][T18696] __seq_open_private+0x3e/0xd0 [ 888.638334][T18696] sc_common_open+0x6b/0x200 [ 888.638377][T18696] full_proxy_open_regular+0x1b6/0x360 [ 888.638431][T18696] do_dentry_open+0x982/0x1530 [ 888.638480][T18696] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 888.638539][T18696] vfs_open+0x82/0x3f0 [ 888.638593][T18696] path_openat+0x1de4/0x2cb0 [ 888.638645][T18696] ? __pfx_path_openat+0x10/0x10 [ 888.638695][T18696] do_filp_open+0x20b/0x470 [ 888.638747][T18696] ? __pfx_do_filp_open+0x10/0x10 [ 888.638814][T18696] ? alloc_fd+0x471/0x7d0 [ 888.638878][T18696] do_sys_openat2+0x11b/0x1d0 [ 888.638927][T18696] ? __pfx_do_sys_openat2+0x10/0x10 [ 888.638993][T18696] __x64_sys_openat+0x174/0x210 [ 888.639043][T18696] ? __pfx___x64_sys_openat+0x10/0x10 [ 888.639112][T18696] do_syscall_64+0xcd/0xfa0 [ 888.639154][T18696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.639187][T18696] RIP: 0033:0x7f4882d8eec9 [ 888.639215][T18696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.639250][T18696] RSP: 002b:00007f4883baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.639283][T18696] RAX: ffffffffffffffda RBX: 00007f4882fe5fa0 RCX: 00007f4882d8eec9 [ 888.639306][T18696] RDX: 0000000000088080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 888.639328][T18696] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 888.639350][T18696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.639371][T18696] R13: 00007f4882fe6038 R14: 00007f4882fe5fa0 R15: 00007ffe03d3e178 [ 888.639419][T18696] [ 890.189734][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 6 with max blocks 12 with error 117 [ 890.221916][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 890.221916][ T36] [ 890.609063][T18721] random: crng reseeded on system resumption [ 891.521738][T18727] FAULT_INJECTION: forcing a failure. [ 891.521738][T18727] name failslab, interval 1, probability 0, space 0, times 0 [ 891.564095][T18727] CPU: 1 UID: 0 PID: 18727 Comm: syz.4.2357 Tainted: G U syzkaller #0 PREEMPT(full) [ 891.564143][T18727] Tainted: [U]=USER [ 891.564153][T18727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 891.564173][T18727] Call Trace: [ 891.564184][T18727] [ 891.564197][T18727] dump_stack_lvl+0x16c/0x1f0 [ 891.564247][T18727] should_fail_ex+0x512/0x640 [ 891.564287][T18727] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 891.564327][T18727] should_failslab+0xc2/0x120 [ 891.564370][T18727] kmem_cache_alloc_noprof+0x75/0x6e0 [ 891.564401][T18727] ? __kernfs_new_node+0xd2/0x8e0 [ 891.564449][T18727] ? __kernfs_new_node+0xd2/0x8e0 [ 891.564486][T18727] __kernfs_new_node+0xd2/0x8e0 [ 891.564531][T18727] ? __pfx___kernfs_new_node+0x10/0x10 [ 891.564582][T18727] ? find_held_lock+0x2b/0x80 [ 891.564616][T18727] ? kernfs_root+0xee/0x2a0 [ 891.564664][T18727] kernfs_new_node+0x13c/0x1e0 [ 891.564717][T18727] __kernfs_create_file+0x53/0x350 [ 891.564756][T18727] sysfs_add_file_mode_ns+0x207/0x3c0 [ 891.564804][T18727] internal_create_group+0x578/0xf30 [ 891.564858][T18727] ? __pfx_internal_create_group+0x10/0x10 [ 891.564911][T18727] ? kernfs_create_link+0x1bd/0x240 [ 891.564952][T18727] internal_create_groups+0x9d/0x150 [ 891.564996][T18727] device_add+0x6d1/0x1aa0 [ 891.565039][T18727] ? __pfx_device_add+0x10/0x10 [ 891.565078][T18727] ? lockdep_init_map_type+0x5c/0x280 [ 891.565125][T18727] ? __init_waitqueue_head+0xca/0x150 [ 891.565200][T18727] rfkill_register+0x1ad/0xb40 [ 891.565264][T18727] nfc_register_device+0x11f/0x3c0 [ 891.565306][T18727] nci_register_device+0x7f1/0xb80 [ 891.565358][T18727] ? __pfx_nci_register_device+0x10/0x10 [ 891.565413][T18727] ? lockdep_init_map_type+0x5c/0x280 [ 891.565467][T18727] virtual_ncidev_open+0x141/0x220 [ 891.565515][T18727] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 891.565560][T18727] misc_open+0x26a/0x450 [ 891.565600][T18727] ? __pfx_misc_open+0x10/0x10 [ 891.565638][T18727] chrdev_open+0x234/0x6a0 [ 891.565676][T18727] ? __pfx_apparmor_file_open+0x10/0x10 [ 891.565722][T18727] ? __pfx_chrdev_open+0x10/0x10 [ 891.565761][T18727] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 891.565806][T18727] do_dentry_open+0x982/0x1530 [ 891.565845][T18727] ? __pfx_chrdev_open+0x10/0x10 [ 891.565891][T18727] vfs_open+0x82/0x3f0 [ 891.565940][T18727] path_openat+0x1de4/0x2cb0 [ 891.565987][T18727] ? __pfx_path_openat+0x10/0x10 [ 891.566034][T18727] do_filp_open+0x20b/0x470 [ 891.566070][T18727] ? __pfx_do_filp_open+0x10/0x10 [ 891.566137][T18727] ? alloc_fd+0x471/0x7d0 [ 891.566181][T18727] do_sys_openat2+0x11b/0x1d0 [ 891.566228][T18727] ? __pfx_do_sys_openat2+0x10/0x10 [ 891.566279][T18727] ? fput+0x9b/0xd0 [ 891.566320][T18727] ? __sys_sendmsg+0x18c/0x220 [ 891.566370][T18727] __x64_sys_openat+0x174/0x210 [ 891.566417][T18727] ? __pfx___x64_sys_openat+0x10/0x10 [ 891.566482][T18727] do_syscall_64+0xcd/0xfa0 [ 891.566542][T18727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.566575][T18727] RIP: 0033:0x7f4882d8eec9 [ 891.566602][T18727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.566635][T18727] RSP: 002b:00007f4883baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.566666][T18727] RAX: ffffffffffffffda RBX: 00007f4882fe5fa0 RCX: 00007f4882d8eec9 [ 891.566689][T18727] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 891.566710][T18727] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 891.566731][T18727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.566751][T18727] R13: 00007f4882fe6038 R14: 00007f4882fe5fa0 R15: 00007ffe03d3e178 [ 891.566798][T18727] [ 892.410559][T18736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2359'. [ 893.244460][T18751] FAULT_INJECTION: forcing a failure. [ 893.244460][T18751] name failslab, interval 1, probability 0, space 0, times 0 [ 893.292188][T18751] CPU: 0 UID: 0 PID: 18751 Comm: syz.3.2363 Tainted: G U syzkaller #0 PREEMPT(full) [ 893.292239][T18751] Tainted: [U]=USER [ 893.292251][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 893.292271][T18751] Call Trace: [ 893.292282][T18751] [ 893.292295][T18751] dump_stack_lvl+0x16c/0x1f0 [ 893.292339][T18751] should_fail_ex+0x512/0x640 [ 893.292380][T18751] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 893.292419][T18751] should_failslab+0xc2/0x120 [ 893.292464][T18751] kmem_cache_alloc_noprof+0x75/0x6e0 [ 893.292498][T18751] ? security_file_alloc+0x34/0x2b0 [ 893.292539][T18751] ? security_file_alloc+0x34/0x2b0 [ 893.292570][T18751] security_file_alloc+0x34/0x2b0 [ 893.292604][T18751] init_file+0x93/0x4c0 [ 893.292649][T18751] alloc_empty_file+0x73/0x1e0 [ 893.292699][T18751] path_openat+0xda/0x2cb0 [ 893.292749][T18751] ? __pfx_path_openat+0x10/0x10 [ 893.292797][T18751] do_filp_open+0x20b/0x470 [ 893.292835][T18751] ? __pfx_do_filp_open+0x10/0x10 [ 893.292920][T18751] ? alloc_fd+0x471/0x7d0 [ 893.292964][T18751] do_sys_openat2+0x11b/0x1d0 [ 893.293012][T18751] ? __pfx_do_sys_openat2+0x10/0x10 [ 893.293078][T18751] __x64_sys_openat+0x174/0x210 [ 893.293128][T18751] ? __pfx___x64_sys_openat+0x10/0x10 [ 893.293200][T18751] do_syscall_64+0xcd/0xfa0 [ 893.293243][T18751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.293277][T18751] RIP: 0033:0x7f3e9418eec9 [ 893.293303][T18751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.293335][T18751] RSP: 002b:00007f3e94f7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 893.293366][T18751] RAX: ffffffffffffffda RBX: 00007f3e943e5fa0 RCX: 00007f3e9418eec9 [ 893.293389][T18751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 893.293410][T18751] RBP: 00007f3e94211f91 R08: 0000000000000000 R09: 0000000000000000 [ 893.293430][T18751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.293451][T18751] R13: 00007f3e943e6038 R14: 00007f3e943e5fa0 R15: 00007ffca1271ce8 [ 893.293497][T18751] [ 893.982628][T18761] nbd: socks must be embedded in a SOCK_ITEM attr [ 894.017718][T18758] nbd: nbd4128 already in use [ 894.041687][T18760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2366'. [ 894.128542][T18758] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 894.158108][T18763] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 894.186676][T18758] FAULT_INJECTION: forcing a failure. [ 894.186676][T18758] name fail_futex, interval 1, probability 0, space 0, times 0 [ 894.277678][T18758] CPU: 1 UID: 0 PID: 18758 Comm: syz.1.2365 Tainted: G U syzkaller #0 PREEMPT(full) [ 894.277728][T18758] Tainted: [U]=USER [ 894.277739][T18758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 894.277766][T18758] Call Trace: [ 894.277777][T18758] [ 894.277789][T18758] dump_stack_lvl+0x16c/0x1f0 [ 894.277832][T18758] should_fail_ex+0x512/0x640 [ 894.277878][T18758] get_futex_key+0x1d0/0x1560 [ 894.277925][T18758] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 894.277961][T18758] ? __pfx_get_futex_key+0x10/0x10 [ 894.278003][T18758] ? trace_sched_exit_tp+0xd1/0x120 [ 894.278057][T18758] ? __schedule+0x11a3/0x5de0 [ 894.278100][T18758] futex_wake+0xea/0x530 [ 894.278153][T18758] ? __pfx_futex_wait+0x10/0x10 [ 894.278205][T18758] ? __pfx_futex_wake+0x10/0x10 [ 894.278259][T18758] ? __lock_acquire+0x62e/0x1ce0 [ 894.278316][T18758] do_futex+0x1e3/0x350 [ 894.278360][T18758] ? __pfx_do_futex+0x10/0x10 [ 894.278407][T18758] ? find_held_lock+0x2b/0x80 [ 894.278447][T18758] __x64_sys_futex+0x1e0/0x4c0 [ 894.278496][T18758] ? __fget_files+0x20e/0x3c0 [ 894.278528][T18758] ? __pfx___x64_sys_futex+0x10/0x10 [ 894.278575][T18758] ? xfd_validate_state+0x61/0x180 [ 894.278638][T18758] do_syscall_64+0xcd/0xfa0 [ 894.278681][T18758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.278715][T18758] RIP: 0033:0x7f5c0178eec9 [ 894.278740][T18758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.278780][T18758] RSP: 002b:00007f5c026440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 894.278810][T18758] RAX: ffffffffffffffda RBX: 00007f5c019e5fa8 RCX: 00007f5c0178eec9 [ 894.278832][T18758] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c019e5fac [ 894.278853][T18758] RBP: 00007f5c019e5fa0 R08: 00007f5c02645000 R09: 0000000000000000 [ 894.278873][T18758] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 894.278894][T18758] R13: 00007f5c019e6038 R14: 00007ffc349bd660 R15: 00007ffc349bd748 [ 894.278939][T18758] [ 895.879487][T18792] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 896.905645][T18800] cgroup: fork rejected by pids controller in /syz3 [ 897.068567][T18844] FAULT_INJECTION: forcing a failure. [ 897.068567][T18844] name failslab, interval 1, probability 0, space 0, times 0 [ 897.092298][T18844] CPU: 0 UID: 0 PID: 18844 Comm: syz.1.2377 Tainted: G U syzkaller #0 PREEMPT(full) [ 897.092346][T18844] Tainted: [U]=USER [ 897.092358][T18844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 897.092376][T18844] Call Trace: [ 897.092387][T18844] [ 897.092399][T18844] dump_stack_lvl+0x16c/0x1f0 [ 897.092446][T18844] should_fail_ex+0x512/0x640 [ 897.092485][T18844] ? __kmalloc_noprof+0xca/0x880 [ 897.092539][T18844] should_failslab+0xc2/0x120 [ 897.092583][T18844] __kmalloc_noprof+0xdd/0x880 [ 897.092635][T18844] ? snd_midi_event_new+0xa1/0x210 [ 897.092696][T18844] ? snd_midi_event_new+0xa1/0x210 [ 897.092735][T18844] snd_midi_event_new+0xa1/0x210 [ 897.092779][T18844] snd_virmidi_output_open+0x106/0x670 [ 897.092841][T18844] open_substream+0x480/0x990 [ 897.092879][T18844] rawmidi_open_priv+0x543/0x6e0 [ 897.092918][T18844] snd_rawmidi_open+0x4cb/0xbf0 [ 897.092952][T18844] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 897.092982][T18844] ? __pfx_default_wake_function+0x10/0x10 [ 897.093014][T18844] ? kobject_get_unless_zero+0x156/0x1e0 [ 897.093051][T18844] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 897.093079][T18844] snd_open+0x22a/0x4c0 [ 897.093117][T18844] ? __pfx_snd_open+0x10/0x10 [ 897.093154][T18844] chrdev_open+0x234/0x6a0 [ 897.093185][T18844] ? __pfx_apparmor_file_open+0x10/0x10 [ 897.093223][T18844] ? __pfx_chrdev_open+0x10/0x10 [ 897.093256][T18844] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 897.093293][T18844] do_dentry_open+0x982/0x1530 [ 897.093324][T18844] ? __pfx_chrdev_open+0x10/0x10 [ 897.093363][T18844] vfs_open+0x82/0x3f0 [ 897.093404][T18844] path_openat+0x1de4/0x2cb0 [ 897.093443][T18844] ? __pfx_path_openat+0x10/0x10 [ 897.093481][T18844] do_filp_open+0x20b/0x470 [ 897.093510][T18844] ? __pfx_do_filp_open+0x10/0x10 [ 897.093566][T18844] ? alloc_fd+0x471/0x7d0 [ 897.093601][T18844] do_sys_openat2+0x11b/0x1d0 [ 897.093639][T18844] ? __pfx_do_sys_openat2+0x10/0x10 [ 897.093690][T18844] __x64_sys_openat+0x174/0x210 [ 897.093730][T18844] ? __pfx___x64_sys_openat+0x10/0x10 [ 897.093808][T18844] do_syscall_64+0xcd/0xfa0 [ 897.093842][T18844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.093869][T18844] RIP: 0033:0x7f5c0178eec9 [ 897.093890][T18844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.093920][T18844] RSP: 002b:00007f5c02623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 897.093949][T18844] RAX: ffffffffffffffda RBX: 00007f5c019e6090 RCX: 00007f5c0178eec9 [ 897.093971][T18844] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 897.093991][T18844] RBP: 00007f5c01811f91 R08: 0000000000000000 R09: 0000000000000000 [ 897.094010][T18844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.094030][T18844] R13: 00007f5c019e6128 R14: 00007f5c019e6090 R15: 00007ffc349bd748 [ 897.094078][T18844] [ 897.670704][T18865] random: crng reseeded on system resumption [ 898.579011][T18872] usb usb15: usbfs: process 18872 (syz.4.2382) did not claim interface 0 before use [ 898.659118][T18871] usb usb15: usbfs: process 18871 (syz.4.2382) did not claim interface 0 before use [ 898.760508][T18874] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 898.874799][ T52] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 899.112910][T18883] netlink: 'syz.4.2384': attribute type 5 has an invalid length. [ 901.890208][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 902.141481][T18905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 902.161943][T18905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 902.184138][T18905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 902.217916][T18905] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 902.611811][T18905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 902.618099][T18905] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 903.664096][T18905] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 904.129135][T18905] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 904.200780][T13782] Bluetooth: hci0: command 0x0c1a tx timeout [ 904.200807][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 904.206868][T13782] Bluetooth: hci2: command 0x0c1a tx timeout [ 904.678463][T13782] Bluetooth: hci4: command 0x0c1a tx timeout [ 906.175132][T18924] FAULT_INJECTION: forcing a failure. [ 906.175132][T18924] name failslab, interval 1, probability 0, space 0, times 0 [ 906.190147][T18924] CPU: 1 UID: 0 PID: 18924 Comm: syz.4.2392 Tainted: G U syzkaller #0 PREEMPT(full) [ 906.190199][T18924] Tainted: [U]=USER [ 906.190211][T18924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 906.190231][T18924] Call Trace: [ 906.190242][T18924] [ 906.190255][T18924] dump_stack_lvl+0x16c/0x1f0 [ 906.190300][T18924] should_fail_ex+0x512/0x640 [ 906.190341][T18924] ? __kmalloc_noprof+0xca/0x880 [ 906.190397][T18924] should_failslab+0xc2/0x120 [ 906.190439][T18924] __kmalloc_noprof+0xdd/0x880 [ 906.190492][T18924] ? __register_sysctl_table+0xb3/0x1900 [ 906.190548][T18924] ? __register_sysctl_table+0xb3/0x1900 [ 906.190597][T18924] __register_sysctl_table+0xb3/0x1900 [ 906.190664][T18924] ? is_module_address+0x5f/0xf0 [ 906.190738][T18924] ? __pfx___register_sysctl_table+0x10/0x10 [ 906.190788][T18924] ? is_module_address+0x69/0xf0 [ 906.190837][T18924] ? register_net_sysctl_sz+0x228/0x3e0 [ 906.190889][T18924] ? __asan_memcpy+0x3c/0x60 [ 906.190930][T18924] sysctl_route_net_init+0x15e/0x2c0 [ 906.190985][T18924] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 906.191038][T18924] ops_init+0x1e2/0x5f0 [ 906.191085][T18924] setup_net+0x100/0x390 [ 906.191138][T18924] ? __pfx_setup_net+0x10/0x10 [ 906.191187][T18924] ? debug_mutex_init+0x37/0x70 [ 906.191226][T18924] copy_net_ns+0x2f8/0x690 [ 906.191275][T18924] create_new_namespaces+0x3ea/0xa90 [ 906.191324][T18924] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 906.191369][T18924] ksys_unshare+0x45b/0xa40 [ 906.191416][T18924] ? __pfx_ksys_unshare+0x10/0x10 [ 906.191460][T18924] ? xfd_validate_state+0x61/0x180 [ 906.191521][T18924] __x64_sys_unshare+0x31/0x40 [ 906.191566][T18924] do_syscall_64+0xcd/0xfa0 [ 906.191609][T18924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.191644][T18924] RIP: 0033:0x7f4882d8eec9 [ 906.191673][T18924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.191708][T18924] RSP: 002b:00007f4883baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 906.191739][T18924] RAX: ffffffffffffffda RBX: 00007f4882fe5fa0 RCX: 00007f4882d8eec9 [ 906.191760][T18924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 906.191781][T18924] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 906.191802][T18924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.191821][T18924] R13: 00007f4882fe6038 R14: 00007f4882fe5fa0 R15: 00007ffe03d3e178 [ 906.191878][T18924] [ 906.305315][T13782] Bluetooth: hci0: command 0x0c1a tx timeout [ 906.748672][T13782] Bluetooth: hci4: command 0x0c1a tx timeout [ 906.988730][T18925] Falling back ldisc for ptm1. [ 907.622858][T18935] overlayfs: missing 'lowerdir' [ 908.828929][T13782] Bluetooth: hci4: command 0x0c1a tx timeout [ 909.951729][T18967] random: crng reseeded on system resumption [ 910.440226][T18806] syz.3.2375 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 910.602889][T18806] CPU: 0 UID: 0 PID: 18806 Comm: syz.3.2375 Tainted: G U syzkaller #0 PREEMPT(full) [ 910.602938][T18806] Tainted: [U]=USER [ 910.602949][T18806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 910.602967][T18806] Call Trace: [ 910.602978][T18806] [ 910.602991][T18806] dump_stack_lvl+0x16c/0x1f0 [ 910.603034][T18806] dump_header+0x101/0x930 [ 910.603094][T18806] oom_kill_process+0x272/0xa40 [ 910.603130][T18806] out_of_memory+0x350/0x1700 [ 910.603170][T18806] ? __pfx_out_of_memory+0x10/0x10 [ 910.603213][T18806] mem_cgroup_out_of_memory+0x118/0x130 [ 910.603261][T18806] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 910.603319][T18806] ? do_raw_spin_unlock+0x172/0x230 [ 910.603376][T18806] try_charge_memcg+0x687/0xd40 [ 910.603425][T18806] ? __pfx_try_charge_memcg+0x10/0x10 [ 910.603463][T18806] ? __print_lock_name+0x81/0xe0 [ 910.603495][T18806] ? rcu_read_unlock+0x17/0x60 [ 910.603546][T18806] charge_memcg+0x8a/0x230 [ 910.603587][T18806] __mem_cgroup_charge+0x2b/0x1e0 [ 910.603630][T18806] shmem_alloc_and_add_folio+0x514/0xc20 [ 910.603704][T18806] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 910.603760][T18806] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 910.603804][T18806] shmem_get_folio_gfp+0x67f/0x1610 [ 910.603847][T18806] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 910.603911][T18806] shmem_write_begin+0x160/0x300 [ 910.603947][T18806] ? __pfx_shmem_write_begin+0x10/0x10 [ 910.603978][T18806] ? timestamp_truncate+0x21e/0x2d0 [ 910.604016][T18806] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 910.604069][T18806] generic_perform_write+0x3c4/0x900 [ 910.604131][T18806] ? __pfx_generic_perform_write+0x10/0x10 [ 910.604184][T18806] ? inode_needs_update_time.part.0+0x191/0x270 [ 910.604229][T18806] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 910.604264][T18806] shmem_file_write_iter+0x10e/0x140 [ 910.604303][T18806] __kernel_write_iter+0x31a/0xb10 [ 910.604343][T18806] ? __pfx___kernel_write_iter+0x10/0x10 [ 910.604377][T18806] ? __up_read+0x1f8/0x750 [ 910.604433][T18806] ? dump_user_range+0x756/0xb70 [ 910.604472][T18806] dump_user_range+0x413/0xb70 [ 910.604532][T18806] ? __pfx_dump_user_range+0x10/0x10 [ 910.604567][T18806] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 910.604630][T18806] ? __pfx_writenote+0x10/0x10 [ 910.604682][T18806] elf_core_dump+0x29c3/0x3c00 [ 910.604743][T18806] ? __pfx_elf_core_dump+0x10/0x10 [ 910.604785][T18806] ? trace_sched_exit_tp+0xd1/0x120 [ 910.604841][T18806] ? __pfx_event_filter_pid_sched_wakeup_probe_post+0x10/0x10 [ 910.604900][T18806] ? 0xffffffffff600000 [ 910.604947][T18806] ? __pfx___schedule+0x10/0x10 [ 910.605036][T18806] ? vfs_coredump+0x2b9c/0x5670 [ 910.605064][T18806] vfs_coredump+0x2b9c/0x5670 [ 910.605114][T18806] ? __pfx_vfs_coredump+0x10/0x10 [ 910.605147][T18806] ? __lock_acquire+0x62e/0x1ce0 [ 910.605210][T18806] ? lock_acquire+0x179/0x350 [ 910.605276][T18806] ? is_bpf_text_address+0x8a/0x1a0 [ 910.605323][T18806] ? bpf_ksym_find+0x124/0x1c0 [ 910.605374][T18806] ? unwind_get_return_address+0x59/0xa0 [ 910.605409][T18806] ? arch_stack_walk+0xa6/0x100 [ 910.605462][T18806] ? stack_trace_save+0x8e/0xc0 [ 910.605501][T18806] ? __pfx_stack_trace_save+0x10/0x10 [ 910.605542][T18806] ? stack_depot_save_flags+0x29/0x9c0 [ 910.605586][T18806] ? __lock_acquire+0xb97/0x1ce0 [ 910.605728][T18806] ? proc_coredump_connector+0x2d1/0x4f0 [ 910.605794][T18806] ? __pfx_proc_coredump_connector+0x10/0x10 [ 910.605865][T18806] ? rcu_is_watching+0x12/0xc0 [ 910.605907][T18806] get_signal+0x22e1/0x26d0 [ 910.605962][T18806] ? __pfx_get_signal+0x10/0x10 [ 910.606011][T18806] arch_do_signal_or_restart+0x8f/0x790 [ 910.606055][T18806] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 910.606107][T18806] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 910.606142][T18806] ? do_error_trap+0x214/0x240 [ 910.606191][T18806] irqentry_exit_to_user_mode+0x176/0x310 [ 910.606233][T18806] asm_exc_invalid_op+0x1a/0x20 [ 910.606263][T18806] RIP: 0033:0x0 [ 910.606289][T18806] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 910.606306][T18806] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 910.606331][T18806] RAX: 0000000000000000 RBX: 00007f3e943e6090 RCX: 00007f3e9418eec9 [ 910.606351][T18806] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 910.606371][T18806] RBP: 00007f3e94211f91 R08: 0000000000000002 R09: 0000000000000000 [ 910.606391][T18806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.606410][T18806] R13: 00007f3e943e6128 R14: 00007f3e943e6090 R15: 00007ffca1271ce8 [ 910.606458][T18806] [ 911.064972][T13782] Bluetooth: hci4: command 0x0c1a tx timeout [ 911.576658][T18806] memory: usage 307200kB, limit 307200kB, failcnt 24115 [ 911.711002][T18806] memory+swap: usage 432028kB, limit 9007199254740988kB, failcnt 0 [ 911.804855][T18806] kmem: usage 4292kB, limit 9007199254740988kB, failcnt 0 [ 911.812044][T18806] Memory cgroup stats for /syz3: [ 911.812306][T18806] cache 309989376 [ 912.143398][T18806] rss 147456 [ 912.147122][T18806] rss_huge 0 [ 912.170926][T18806] shmem 309989376 [ 912.220013][T18806] mapped_file 2576384 [ 912.247029][T18806] dirty 0 [ 912.263663][T18806] writeback 0 [ 912.284232][T18806] workingset_refault_anon 2958 [ 912.320623][T18806] workingset_refault_file 971 [ 912.352278][T18806] swap 127823872 [ 912.441323][T18806] swapcached 20480 [ 912.460616][T18806] pgpgin 709057 [ 912.500666][T18806] pgpgout 654286 [ 912.561436][T18806] pgfault 758042 [ 912.614730][T18806] pgmajfault 903 [ 912.644390][T18806] inactive_anon 167534592 [ 912.650669][T18806] active_anon 142622720 [ 912.660280][T18806] inactive_file 0 [ 912.668966][T18806] active_file 0 [ 912.675680][T18806] unevictable 0 [ 912.687117][T18806] hierarchical_memory_limit 314572800 [ 912.717402][T18806] hierarchical_memsw_limit 9223372036854771712 [ 912.724142][T18806] total_cache 309989376 [ 912.729731][T18806] total_rss 147456 [ 912.741931][T18806] total_rss_huge 0 [ 912.746551][T18806] total_shmem 309989376 [ 912.752606][T18806] total_mapped_file 2576384 [ 912.757530][T18806] total_dirty 0 [ 912.762447][T18806] total_writeback 0 [ 912.766450][T18806] total_workingset_refault_anon 2958 [ 912.782569][T18806] total_workingset_refault_file 971 [ 912.787858][T18806] total_swap 127823872 [ 912.830208][T18806] total_swapcached 20480 [ 912.834701][T18806] total_pgpgin 709057 [ 912.838911][T18806] total_pgpgout 654286 [ 912.843245][T18806] total_pgfault 758042 [ 912.847542][T18806] total_pgmajfault 903 [ 912.852494][T18806] total_inactive_anon 167534592 [ 912.859010][T18806] total_active_anon 142622720 [ 912.864289][T18806] total_inactive_file 0 [ 912.868559][T18806] total_active_file 0 [ 912.873324][T18806] total_unevictable 0 [ 912.877456][T18806] anon_cost 0 [ 912.881361][T18806] file_cost 0 [ 912.884829][T18806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2375,pid=18836,uid=0 [ 912.904952][T18806] Memory cgroup out of memory: Killed process 18836 (syz.3.2375) total-vm:102808kB, anon-rss:1288kB, file-rss:38808kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 912.935194][T18821] Process accounting paused [ 914.798962][T15926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 914.811957][T15926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 914.819856][T15926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 914.831818][T15926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 914.839645][T15926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 914.966739][ T32] oom_reaper: reaped process 18836 (syz.3.2375), now anon-rss:56kB, file-rss:16588kB, shmem-rss:0kB [ 915.203965][T18993] FAULT_INJECTION: forcing a failure. [ 915.203965][T18993] name failslab, interval 1, probability 0, space 0, times 0 [ 915.248851][T18993] CPU: 0 UID: 0 PID: 18993 Comm: syz.0.2405 Tainted: G U syzkaller #0 PREEMPT(full) [ 915.248906][T18993] Tainted: [U]=USER [ 915.248918][T18993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 915.248939][T18993] Call Trace: [ 915.248951][T18993] [ 915.248965][T18993] dump_stack_lvl+0x16c/0x1f0 [ 915.249010][T18993] should_fail_ex+0x512/0x640 [ 915.249061][T18993] should_failslab+0xc2/0x120 [ 915.249108][T18993] __kmalloc_cache_noprof+0x72/0x780 [ 915.249167][T18993] ? sctp_add_bind_addr+0xae/0x3f0 [ 915.249210][T18993] ? sctp_add_bind_addr+0xae/0x3f0 [ 915.249245][T18993] sctp_add_bind_addr+0xae/0x3f0 [ 915.249286][T18993] sctp_copy_local_addr_list+0x349/0x550 [ 915.249344][T18993] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 915.249392][T18993] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 915.249441][T18993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 915.249504][T18993] sctp_bind_addr_copy+0xe0/0x530 [ 915.249553][T18993] sctp_connect_new_asoc+0x1c9/0x770 [ 915.249608][T18993] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 915.249664][T18993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 915.249734][T18993] __sctp_connect+0x3f3/0xc60 [ 915.249790][T18993] ? do_raw_spin_lock+0x12c/0x2b0 [ 915.249849][T18993] ? __pfx___sctp_connect+0x10/0x10 [ 915.249926][T18993] ? __pfx_sctp_inet_connect+0x10/0x10 [ 915.249979][T18993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 915.250041][T18993] ? __pfx_sctp_inet_connect+0x10/0x10 [ 915.250088][T18993] sctp_inet_connect+0x15f/0x200 [ 915.250234][T18993] __sys_connect_file+0x13e/0x1a0 [ 915.250277][T18993] __sys_connect+0x13b/0x160 [ 915.250313][T18993] ? __pfx___sys_connect+0x10/0x10 [ 915.250376][T18993] ? xfd_validate_state+0x61/0x180 [ 915.250438][T18993] __x64_sys_connect+0x72/0xb0 [ 915.250471][T18993] ? lockdep_hardirqs_on+0x7c/0x110 [ 915.250509][T18993] do_syscall_64+0xcd/0xfa0 [ 915.250554][T18993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.250590][T18993] RIP: 0033:0x7f4a6458eec9 [ 915.250618][T18993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.250654][T18993] RSP: 002b:00007f4a653eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 915.250688][T18993] RAX: ffffffffffffffda RBX: 00007f4a647e5fa0 RCX: 00007f4a6458eec9 [ 915.250713][T18993] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000004 [ 915.250735][T18993] RBP: 00007f4a64611f91 R08: 0000000000000000 R09: 0000000000000000 [ 915.250757][T18993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.250780][T18993] R13: 00007f4a647e6038 R14: 00007f4a647e5fa0 R15: 00007fff5cd2bd58 [ 915.250831][T18993] [ 916.111466][T18996] chnl_net:caif_netlink_parms(): no params data found [ 916.861270][T13782] Bluetooth: hci1: command tx timeout [ 918.294180][T18996] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.309546][T18996] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.332809][T18996] bridge_slave_0: entered allmulticast mode [ 918.400114][T18996] bridge_slave_0: entered promiscuous mode [ 918.493072][T18996] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.586693][T18996] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.675614][T18996] bridge_slave_1: entered allmulticast mode [ 918.741170][T18996] bridge_slave_1: entered promiscuous mode [ 918.941453][T13782] Bluetooth: hci1: command tx timeout [ 919.088833][T18996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.137911][T18996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.292126][T18996] team0: Port device team_slave_0 added [ 919.308616][T18996] team0: Port device team_slave_1 added [ 919.394803][T18996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.404224][T18996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.551739][T18996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.981922][T16737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.022207][T19038] zswap: compressor not available [ 920.066942][T18996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.074238][T18996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.142619][T18996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.221100][T16737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.392414][T16737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.477813][T18996] hsr_slave_0: entered promiscuous mode [ 920.509233][T18996] hsr_slave_1: entered promiscuous mode [ 920.515944][T18996] debugfs: 'hsr0' already exists in 'hsr' [ 920.522267][T18996] Cannot create hsr debugfs directory [ 920.785960][T16737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.001933][T13782] Bluetooth: hci1: command tx timeout [ 921.826858][T16737] bridge_slave_0: left allmulticast mode [ 921.845843][T19066] ksmbd: Unknown IPC event: 14, ignore. [ 921.852112][T16737] bridge_slave_0: left promiscuous mode [ 921.861452][T16737] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.861805][T16737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.873330][T16737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.883808][T16737] bond0 (unregistering): Released all slaves [ 923.072792][T13782] Bluetooth: hci1: command tx timeout [ 923.145453][T16737] HfR: left promiscuous mode [ 923.249964][T16737] tipc: Left network mode [ 923.329316][T18996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 923.379134][T18996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 923.545253][T19085] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2422'. [ 923.563561][T18996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 923.614764][T18996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 924.210995][T16737] hsr_slave_0: left promiscuous mode [ 924.264247][T16737] hsr_slave_1: left promiscuous mode [ 924.388512][T16737] veth1_macvtap: left promiscuous mode [ 924.405458][T16737] veth0_macvtap: left promiscuous mode [ 924.516893][T19107] [U]  [ 924.585676][T19112] [U] [ 924.633764][T16737] veth1_vlan: left promiscuous mode [ 924.658104][T16737] veth0_vlan: left promiscuous mode [ 924.760709][T19104] FAULT_INJECTION: forcing a failure. [ 924.760709][T19104] name fail_futex, interval 1, probability 0, space 0, times 0 [ 924.805861][T19104] CPU: 1 UID: 0 PID: 19104 Comm: syz.1.2425 Tainted: G U syzkaller #0 PREEMPT(full) [ 924.805915][T19104] Tainted: [U]=USER [ 924.805928][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 924.805949][T19104] Call Trace: [ 924.805961][T19104] [ 924.805975][T19104] dump_stack_lvl+0x16c/0x1f0 [ 924.806020][T19104] should_fail_ex+0x512/0x640 [ 924.806070][T19104] get_futex_key+0x1d0/0x1560 [ 924.806122][T19104] ? __pfx_get_futex_key+0x10/0x10 [ 924.806182][T19104] futex_wake+0xea/0x530 [ 924.806236][T19104] ? rcu_is_watching+0x12/0xc0 [ 924.806267][T19104] ? __pfx_futex_wake+0x10/0x10 [ 924.806323][T19104] ? kmem_cache_free+0x2d4/0x6c0 [ 924.806358][T19104] ? putname+0x154/0x1a0 [ 924.806412][T19104] do_futex+0x1e3/0x350 [ 924.806459][T19104] ? __pfx_do_futex+0x10/0x10 [ 924.806531][T19104] __x64_sys_futex+0x1e0/0x4c0 [ 924.806580][T19104] ? __x64_sys_openat+0x174/0x210 [ 924.806615][T19104] ? __pfx___x64_sys_futex+0x10/0x10 [ 924.806660][T19104] do_syscall_64+0xcd/0xfa0 [ 924.806689][T19104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.806738][T19104] RIP: 0033:0x7f5c0178eec9 [ 924.806758][T19104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.806781][T19104] RSP: 002b:00007f5c026440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 924.806803][T19104] RAX: ffffffffffffffda RBX: 00007f5c019e5fa8 RCX: 00007f5c0178eec9 [ 924.806818][T19104] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c019e5fac [ 924.806833][T19104] RBP: 00007f5c019e5fa0 R08: 00007f5c02645000 R09: 0000000000000000 [ 924.806848][T19104] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 924.806863][T19104] R13: 00007f5c019e6038 R14: 00007ffc349bd660 R15: 00007ffc349bd748 [ 924.806894][T19104] [ 925.498247][ T30] audit: type=1800 audit(4294970575.973:23): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2426" name="features" dev="configfs" ino=74559 res=0 errno=0 [ 925.518647][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.380482][T16737] team0 (unregistering): Port device team_slave_0 removed [ 927.236790][T18996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.304668][T19131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 927.317886][T19131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 927.324362][T19131] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 927.335586][T18996] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.365209][T19131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 927.369589][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.375735][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.409519][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.416897][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.450032][T19131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 927.516100][T19131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 927.658163][T18996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 927.967696][T19148] device-mapper: ioctl: Invalid ioctl structure: name , dev 400007f00010006 [ 929.213350][T13782] Bluetooth: hci2: command 0x0c1a tx timeout [ 929.328711][T18996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.380282][T13782] Bluetooth: hci4: command 0x0c1a tx timeout [ 929.380306][T15926] Bluetooth: hci0: command 0x0c1a tx timeout [ 929.380362][T15926] Bluetooth: hci1: command 0x0c1a tx timeout [ 929.674783][T19173] ovs_: entered promiscuous mode [ 929.699276][T19165] Process accounting resumed [ 930.332661][T18996] veth0_vlan: entered promiscuous mode [ 930.405663][T18996] veth1_vlan: entered promiscuous mode [ 930.592954][T18996] veth0_macvtap: entered promiscuous mode [ 930.678011][T18996] veth1_macvtap: entered promiscuous mode [ 930.764251][T18996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.812720][T18996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.983718][T12471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.993794][T12471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.014187][T12471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.433850][T15926] Bluetooth: hci1: command 0x0c1a tx timeout [ 931.456354][T12471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.319013][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.355914][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.365598][ T30] audit: type=1800 audit(4294970582.865:24): pid=19224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=75021 res=0 errno=0 [ 932.778167][T16740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.786027][T16740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.144399][T19236] ubi0: attaching mtd0 [ 933.200073][T19236] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 933.289409][T19236] ubi0: scanning is finished [ 933.424393][T19255] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2401'. [ 933.519128][T15926] Bluetooth: hci1: command 0x0c1a tx timeout [ 933.948831][T19236] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 934.259904][T19236] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 934.360568][T19236] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 934.367930][T19236] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 934.418811][T19236] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 934.520281][T19236] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 934.638253][T19236] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1290724036 [ 934.677502][T19236] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 934.725996][T19237] ubi0: detaching mtd0 [ 934.764860][T19237] ubi0: mtd0 is detached [ 936.370694][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 936.385423][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 936.399501][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 936.439315][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 936.448389][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 938.289955][T19302] chnl_net:caif_netlink_parms(): no params data found [ 938.316704][T19306] kexec: Could not allocate control_code_buffer [ 938.528060][T15926] Bluetooth: hci3: command tx timeout [ 938.566473][T19324] openvswitch: netlink: IP tunnel dst address not specified [ 938.774374][T15926] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 938.795958][T16737] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.094471][T16737] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.120151][T19302] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.127790][T19302] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.135065][T19302] bridge_slave_0: entered allmulticast mode [ 939.146082][T19302] bridge_slave_0: entered promiscuous mode [ 939.188070][T19302] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.219736][T19302] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.236205][T19302] bridge_slave_1: entered allmulticast mode [ 939.244613][T19302] bridge_slave_1: entered promiscuous mode [ 939.303795][T16737] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.449109][T19302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.504058][T19302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.561678][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 939.692530][T16737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.856813][T19302] team0: Port device team_slave_0 added [ 940.054336][T19302] team0: Port device team_slave_1 added [ 940.230062][T19302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.237973][T19302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.292703][T19302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.329833][T19302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.339115][T19302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.365909][T19302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.593195][T15926] Bluetooth: hci3: command tx timeout [ 940.876063][T19302] hsr_slave_0: entered promiscuous mode [ 940.884980][T19302] hsr_slave_1: entered promiscuous mode [ 940.903557][T16737] bond0: left allmulticast mode [ 940.917934][T16737] bond_slave_0: left allmulticast mode [ 940.925666][T16737] bond_slave_1: left allmulticast mode [ 940.936468][T16737] bond0: left promiscuous mode [ 940.949980][T16737] bond_slave_0: left promiscuous mode [ 941.064234][T16737] bond_slave_1: left promiscuous mode [ 941.080040][T16737] bridge0: port 3(bond0) entered disabled state [ 941.095637][T16737] bridge_slave_1: left allmulticast mode [ 941.114186][T16737] bridge_slave_1: left promiscuous mode [ 941.120507][T16737] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.145993][T16737] bridge_slave_0: left allmulticast mode [ 941.152437][T16737] bridge_slave_0: left promiscuous mode [ 941.159107][T16737] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.566855][T16737] erspan0 (unregistering): left allmulticast mode [ 941.870538][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.877509][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.983553][T16737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.996867][T16737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.009467][T16737] bond0 (unregistering): Released all slaves [ 942.106989][T16737] HfR: left promiscuous mode [ 942.216600][T16737] HSR: left promiscuous mode [ 942.666956][T15926] Bluetooth: hci3: command tx timeout [ 942.728359][T19382] zram: Removed device: zram0 [ 943.550378][T19398] random: crng reseeded on system resumption [ 943.793899][T19404] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 944.080019][T16737] hsr_slave_0: left promiscuous mode [ 944.124782][T16737] hsr_slave_1: left promiscuous mode [ 944.202355][T16737] veth1_macvtap: left promiscuous mode [ 944.220459][T16737] veth0_macvtap: left promiscuous mode [ 944.302398][T16737] veth1_vlan: left promiscuous mode [ 944.310738][T16737] veth0_vlan: left promiscuous mode [ 944.730554][T15926] Bluetooth: hci3: command tx timeout [ 945.415662][T16737] team0 (unregistering): Port device team_slave_1 removed [ 945.470931][T16737] team0 (unregistering): Port device team_slave_0 removed [ 945.965508][T19407] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 946.025374][T19407] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 946.052133][T19407] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 947.076919][T19302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 947.114990][T19302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 947.263002][T19302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 947.641030][T19302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 947.942870][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2472'. [ 948.617133][T19456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2473'. [ 949.119335][T19302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.194574][T19302] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.221273][T16737] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.228493][T16737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.244055][T16737] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.251272][T16737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.941942][T19302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.234059][T19302] veth0_vlan: entered promiscuous mode [ 950.353838][T19302] veth1_vlan: entered promiscuous mode [ 950.470902][T19302] veth0_macvtap: entered promiscuous mode [ 950.511648][T19302] veth1_macvtap: entered promiscuous mode [ 950.607217][T19302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.649819][T19302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.666581][T16737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.721692][T16737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.754444][T16737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.777538][T16737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.854569][T19488] binder: 19487:19488 ioctl 541b 10000000000402 returned -22 [ 950.871524][T19488] binder: 19487:19488 ioctl ae41 5 returned -22 [ 950.884379][T19488] binder: 19487:19488 ioctl ae80 0 returned -22 [ 951.029085][T12471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.033479][T19491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2479'. [ 951.054128][T12471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.084325][T19491] caif0: entered promiscuous mode [ 951.145530][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.161623][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.446751][T19505] bond0: invalid ARP target specified [ 955.019108][T19569] random: crng reseeded on system resumption [ 957.972240][T19630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2500'. [ 958.164120][T19634] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2500'. [ 960.560905][T19661] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2908669451 out of range (51000000..2150000000) [ 961.113907][T19664] [U]  [ 961.116802][T19664] [U] [ 961.119561][T19664] [U] [ 961.122311][T19664] [U] [ 961.153224][T19664] [U] [ 961.155988][T19664] [U] [ 961.158699][T19664] [U] [ 961.161427][T19664] [U] [ 961.198929][T19664] [U] [ 961.201728][T19664] [U] [ 961.204486][T19664] [U] [ 961.207247][T19664] [U] [ 961.267018][T19664] [U] [ 961.269827][T19664] [U] [ 961.272594][T19664] [U] [ 961.275351][T19664] [U] [ 961.303714][T19664] [U] [ 961.306525][T19664] [U] [ 961.309282][T19664] [U] [ 961.312036][T19664] [U] [ 961.325260][T19664] [U] [ 961.328060][T19664] [U] [ 961.330818][T19664] [U] [ 961.333575][T19664] [U] [ 961.382087][T19664] [U] [ 961.384850][T19664] [U] [ 961.387567][T19664] [U] [ 961.390275][T19664] [U] [ 961.431820][T19664] [U] [ 961.434611][T19664] [U] [ 961.437347][T19664] [U] [ 961.440074][T19664] [U] [ 961.476910][T19664] [U] [ 961.479718][T19664] [U] [ 961.482484][T19664] [U] [ 961.485250][T19664] [U] [ 961.522664][T19664] [U] [ 961.525461][T19664] [U] [ 961.528196][T19664] [U] [ 961.530927][T19664] [U] [ 961.534742][T19664] [U] [ 961.537519][T19664] [U] [ 961.540273][T19664] [U] [ 961.543037][T19664] [U] [ 961.551352][T19664] [U] [ 961.554111][T19664] [U] [ 961.556842][T19664] [U] [ 961.559567][T19664] [U] [ 961.564388][T19664] [U] [ 961.567163][T19664] [U] [ 961.569914][T19664] [U] [ 961.572677][T19664] [U] [ 961.635033][T19664] [U] [ 961.637837][T19664] [U] [ 961.640590][T19664] [U] [ 961.643344][T19664] [U] [ 961.648433][T19664] [U] [ 961.651210][T19664] [U] [ 961.653940][T19664] [U] [ 961.656662][T19664] [U] [ 961.660165][T19664] [U] [ 961.662937][T19664] [U] [ 961.665678][T19664] [U] [ 961.668407][T19664] [U] [ 961.672714][T19664] [U] [ 961.675485][T19664] [U] [ 961.678226][T19664] [U] [ 961.680973][T19664] [U] [ 961.684053][T19664] [U] [ 961.686820][T19664] [U] [ 961.689578][T19664] [U] [ 961.692331][T19664] [U] [ 961.730357][T19664] [U] [ 961.733160][T19664] [U] [ 961.735929][T19664] [U] [ 961.738681][T19664] [U] [ 961.761439][T19664] [U] [ 961.764243][T19664] [U] [ 961.766978][T19664] [U] [ 961.769689][T19664] [U] [ 961.812195][T19624] Process accounting paused [ 961.831707][T19664] [U] [ 961.834500][T19664] [U] [ 961.837268][T19664] [U] [ 961.840022][T19664] [U] [ 962.045507][T19664] [U] [ 962.048323][T19664] [U] [ 962.051091][T19664] [U] [ 962.053843][T19664] [U] [ 962.169327][T19664] [U] [ 962.172155][T19664] [U] [ 962.174965][T19664] [U] [ 962.177717][T19664] [U] [ 962.241281][T19664] [U] [ 962.244087][T19664] [U] [ 962.246849][T19664] [U] [ 962.249601][T19664] [U] [ 962.278021][T19664] [U] [ 962.280828][T19664] [U] [ 962.283608][T19664] [U] [ 962.286364][T19664] [U] [ 962.364352][T19664] [U] [ 962.367158][T19664] [U] [ 962.369919][T19664] [U] [ 962.372667][T19664] [U] [ 962.471392][T19664] [U] [ 962.474202][T19664] [U] [ 962.476922][T19664] [U] [ 962.479635][T19664] [U] [ 962.576664][T19664] [U] [ 962.579475][T19664] [U] [ 962.582230][T19664] [U] [ 962.584976][T19664] [U] [ 962.757473][T19664] [U] [ 962.760284][T19664] [U] [ 962.763045][T19664] [U] [ 962.765799][T19664] [U] [ 962.785308][T19664] [U] [ 964.667027][T19726] FAULT_INJECTION: forcing a failure. [ 964.667027][T19726] name failslab, interval 1, probability 0, space 0, times 0 [ 964.713076][T19726] CPU: 1 UID: 0 PID: 19726 Comm: syz.4.2514 Tainted: G U syzkaller #0 PREEMPT(full) [ 964.713130][T19726] Tainted: [U]=USER [ 964.713142][T19726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 964.713163][T19726] Call Trace: [ 964.713174][T19726] [ 964.713188][T19726] dump_stack_lvl+0x16c/0x1f0 [ 964.713234][T19726] should_fail_ex+0x512/0x640 [ 964.713275][T19726] ? __kmalloc_cache_noprof+0x5f/0x780 [ 964.713336][T19726] should_failslab+0xc2/0x120 [ 964.713381][T19726] __kmalloc_cache_noprof+0x72/0x780 [ 964.713436][T19726] ? __pfx_trace_seq_printf+0x10/0x10 [ 964.713478][T19726] ? tracing_log_err+0x4bc/0x6d0 [ 964.713536][T19726] ? tracing_log_err+0x4bc/0x6d0 [ 964.713587][T19726] tracing_log_err+0x4bc/0x6d0 [ 964.713650][T19726] append_filter_err+0x399/0x610 [ 964.713705][T19726] apply_subsystem_event_filter+0x75a/0x17e0 [ 964.713772][T19726] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 964.713833][T19726] ? _copy_from_user+0x59/0xd0 [ 964.713884][T19726] subsystem_filter_write+0x95/0x120 [ 964.713937][T19726] ? __pfx_subsystem_filter_write+0x10/0x10 [ 964.713996][T19726] vfs_write+0x2a0/0x11d0 [ 964.714041][T19726] ? __pfx___mutex_lock+0x10/0x10 [ 964.714086][T19726] ? __pfx_vfs_write+0x10/0x10 [ 964.714137][T19726] ? __fget_files+0x20e/0x3c0 [ 964.714186][T19726] ksys_write+0x12a/0x250 [ 964.714224][T19726] ? __pfx_ksys_write+0x10/0x10 [ 964.714277][T19726] do_syscall_64+0xcd/0xfa0 [ 964.714321][T19726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.714354][T19726] RIP: 0033:0x7f4882d8eec9 [ 964.714382][T19726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.714416][T19726] RSP: 002b:00007f4883baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 964.714449][T19726] RAX: ffffffffffffffda RBX: 00007f4882fe5fa0 RCX: 00007f4882d8eec9 [ 964.714473][T19726] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 964.714495][T19726] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 964.714516][T19726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.714537][T19726] R13: 00007f4882fe6038 R14: 00007f4882fe5fa0 R15: 00007ffe03d3e178 [ 964.714587][T19726] [ 965.381125][T19733] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 965.416373][T19740] FAULT_INJECTION: forcing a failure. [ 965.416373][T19740] name failslab, interval 1, probability 0, space 0, times 0 [ 965.462249][T19724] binder: 19721:19724 ioctl c0046209 ffffffffffffffff returned -22 [ 965.472661][T19740] CPU: 1 UID: 0 PID: 19740 Comm: syz.4.2516 Tainted: G U syzkaller #0 PREEMPT(full) [ 965.472711][T19740] Tainted: [U]=USER [ 965.472733][T19740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 965.472754][T19740] Call Trace: [ 965.472767][T19740] [ 965.472781][T19740] dump_stack_lvl+0x16c/0x1f0 [ 965.472829][T19740] should_fail_ex+0x512/0x640 [ 965.472880][T19740] ? __kmalloc_cache_noprof+0x5f/0x780 [ 965.472945][T19740] should_failslab+0xc2/0x120 [ 965.472992][T19740] __kmalloc_cache_noprof+0x72/0x780 [ 965.473051][T19740] ? apply_subsystem_event_filter+0x460/0x17e0 [ 965.473113][T19740] ? apply_subsystem_event_filter+0x460/0x17e0 [ 965.473165][T19740] apply_subsystem_event_filter+0x460/0x17e0 [ 965.473241][T19740] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 965.473304][T19740] ? _copy_from_user+0x59/0xd0 [ 965.473354][T19740] subsystem_filter_write+0x95/0x120 [ 965.473432][T19740] ? __pfx_subsystem_filter_write+0x10/0x10 [ 965.473484][T19740] vfs_write+0x2a0/0x11d0 [ 965.473529][T19740] ? __pfx___mutex_lock+0x10/0x10 [ 965.473573][T19740] ? __pfx_vfs_write+0x10/0x10 [ 965.473624][T19740] ? __fget_files+0x20e/0x3c0 [ 965.473673][T19740] ksys_write+0x12a/0x250 [ 965.473710][T19740] ? __pfx_ksys_write+0x10/0x10 [ 965.473762][T19740] do_syscall_64+0xcd/0xfa0 [ 965.473805][T19740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.473845][T19740] RIP: 0033:0x7f4882d8eec9 [ 965.473873][T19740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.473908][T19740] RSP: 002b:00007f4883baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 965.473941][T19740] RAX: ffffffffffffffda RBX: 00007f4882fe5fa0 RCX: 00007f4882d8eec9 [ 965.473965][T19740] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 965.473987][T19740] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 965.474009][T19740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.474030][T19740] R13: 00007f4882fe6038 R14: 00007f4882fe5fa0 R15: 00007ffe03d3e178 [ 965.474078][T19740] [ 965.720704][T19724] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2513'. [ 966.409145][T19751] netlink: 'syz.5.2518': attribute type 21 has an invalid length. [ 966.437570][T19751] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2518'. [ 966.787038][T19751] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 967.547332][T19775] ptp ptp0: new virtual clock ptp1 [ 967.563839][T19775] ptp ptp0: new virtual clock ptp2 [ 967.597920][T19775] ptp ptp0: new virtual clock ptp3 [ 967.606706][T19775] ptp ptp0: guarantee physical clock free running [ 967.659551][T19772] mkiss: ax0: crc mode is auto. [ 967.942518][T19785] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 968.498659][T19788] bond0: option packets_per_slave: invalid value ( Xnp) [ 968.515316][T19789] sctp: [Deprecated]: syz.4.2527 (pid 19789) Use of int in max_burst socket option deprecated. [ 968.515316][T19789] Use struct sctp_assoc_value instead [ 968.600984][T19788] bond0: option packets_per_slave: allowed values 0 - 65535 syzkaller syzkaller login: [ 973.489297][T19859] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 973.489297][T19859] [ 973.739116][T19864] FAULT_INJECTION: forcing a failure. [ 973.739116][T19864] name failslab, interval 1, probability 0, space 0, times 0 [ 973.824622][T19864] CPU: 0 UID: 0 PID: 19864 Comm: syz.1.2541 Tainted: G U syzkaller #0 PREEMPT(full) [ 973.824676][T19864] Tainted: [U]=USER [ 973.824687][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 973.824707][T19864] Call Trace: [ 973.824719][T19864] [ 973.824732][T19864] dump_stack_lvl+0x16c/0x1f0 [ 973.824778][T19864] should_fail_ex+0x512/0x640 [ 973.824839][T19864] ? __kmalloc_cache_noprof+0x5f/0x780 [ 973.824901][T19864] should_failslab+0xc2/0x120 [ 973.824949][T19864] __kmalloc_cache_noprof+0x72/0x780 [ 973.825006][T19864] ? kernfs_fop_open+0x244/0xda0 [ 973.825046][T19864] ? kernfs_fop_open+0x244/0xda0 [ 973.825108][T19864] kernfs_fop_open+0x244/0xda0 [ 973.825172][T19864] do_dentry_open+0x982/0x1530 [ 973.825213][T19864] ? __pfx_kernfs_fop_open+0x10/0x10 [ 973.825256][T19864] vfs_open+0x82/0x3f0 [ 973.825311][T19864] path_openat+0x1de4/0x2cb0 [ 973.825364][T19864] ? __pfx_path_openat+0x10/0x10 [ 973.825413][T19864] do_filp_open+0x20b/0x470 [ 973.825452][T19864] ? __pfx_do_filp_open+0x10/0x10 [ 973.825529][T19864] ? alloc_fd+0x471/0x7d0 [ 973.825576][T19864] do_sys_openat2+0x11b/0x1d0 [ 973.825628][T19864] ? __pfx_do_sys_openat2+0x10/0x10 [ 973.825698][T19864] __x64_sys_openat+0x174/0x210 [ 973.825749][T19864] ? __pfx___x64_sys_openat+0x10/0x10 [ 973.825816][T19864] do_syscall_64+0xcd/0xfa0 [ 973.825858][T19864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.825892][T19864] RIP: 0033:0x7f5c0178eec9 [ 973.825920][T19864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.825956][T19864] RSP: 002b:00007f5c02644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 973.825989][T19864] RAX: ffffffffffffffda RBX: 00007f5c019e5fa0 RCX: 00007f5c0178eec9 [ 973.826013][T19864] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 973.826037][T19864] RBP: 00007f5c01811f91 R08: 0000000000000000 R09: 0000000000000000 [ 973.826059][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.826081][T19864] R13: 00007f5c019e6038 R14: 00007f5c019e5fa0 R15: 00007ffc349bd748 [ 973.826131][T19864] [ 974.047094][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.108950][T19864] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2541'. [ 978.633565][T19929] usb usb16: usbfs: process 19929 (syz.4.2555) did not claim interface 0 before use [ 979.885125][T19936] FAULT_INJECTION: forcing a failure. [ 979.885125][T19936] name failslab, interval 1, probability 0, space 0, times 0 [ 979.941961][T19936] CPU: 0 UID: 0 PID: 19936 Comm: syz.5.2556 Tainted: G U syzkaller #0 PREEMPT(full) [ 979.942126][T19936] Tainted: [U]=USER [ 979.942141][T19936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 979.942163][T19936] Call Trace: [ 979.942177][T19936] [ 979.942192][T19936] dump_stack_lvl+0x16c/0x1f0 [ 979.942242][T19936] should_fail_ex+0x512/0x640 [ 979.942284][T19936] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 979.942326][T19936] should_failslab+0xc2/0x120 [ 979.942371][T19936] kmem_cache_alloc_noprof+0x75/0x6e0 [ 979.942408][T19936] ? __proc_create+0x2ce/0x8e0 [ 979.942465][T19936] ? __proc_create+0x2ce/0x8e0 [ 979.942513][T19936] __proc_create+0x2ce/0x8e0 [ 979.942564][T19936] ? __pfx___proc_create+0x10/0x10 [ 979.942618][T19936] ? _raw_write_unlock+0x28/0x50 [ 979.942670][T19936] proc_create_reg+0x7d/0x180 [ 979.942724][T19936] proc_create_net_data+0x8e/0x1c0 [ 979.942770][T19936] ? __pfx_proc_create_net_data+0x10/0x10 [ 979.942819][T19936] ? __pfx_uevent_net_rcv+0x10/0x10 [ 979.942874][T19936] ? __pfx_dev_mc_net_init+0x10/0x10 [ 979.942909][T19936] dev_mc_net_init+0x50/0x70 [ 979.942943][T19936] ops_init+0x1e2/0x5f0 [ 979.943015][T19936] setup_net+0x100/0x390 [ 979.943061][T19936] ? __pfx_setup_net+0x10/0x10 [ 979.943105][T19936] ? debug_mutex_init+0x37/0x70 [ 979.943148][T19936] copy_net_ns+0x2f8/0x690 [ 979.943199][T19936] create_new_namespaces+0x3ea/0xa90 [ 979.943252][T19936] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 979.943298][T19936] ksys_unshare+0x45b/0xa40 [ 979.943345][T19936] ? __pfx_ksys_unshare+0x10/0x10 [ 979.943394][T19936] ? xfd_validate_state+0x61/0x180 [ 979.943457][T19936] __x64_sys_unshare+0x31/0x40 [ 979.943505][T19936] do_syscall_64+0xcd/0xfa0 [ 979.943548][T19936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.943584][T19936] RIP: 0033:0x7fb03938eec9 [ 979.943613][T19936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.943649][T19936] RSP: 002b:00007fb03a18b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 979.943682][T19936] RAX: ffffffffffffffda RBX: 00007fb0395e5fa0 RCX: 00007fb03938eec9 [ 979.943706][T19936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 979.943727][T19936] RBP: 00007fb039411f91 R08: 0000000000000000 R09: 0000000000000000 [ 979.943750][T19936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.943771][T19936] R13: 00007fb0395e6038 R14: 00007fb0395e5fa0 R15: 00007fff3df879d8 [ 979.943821][T19936] [ 980.245850][T19937] hub 1-0:1.0: USB hub found [ 980.353795][T19937] hub 1-0:1.0: 1 port detected [ 980.670411][T19941] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 985.198126][T20012] binder: 20010:20012 ioctl 541b 10000000000402 returned -22 [ 985.375692][T20015] netlink: 'syz.4.2572': attribute type 23 has an invalid length. [ 986.448719][T20032] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2575'. [ 986.561458][T20032] gretap0: refused to change device tx_queue_len [ 986.795526][T20033] nbd: illegal input index 65536 [ 987.087894][T20038] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 987.191021][T20038] CPU: 0 UID: 0 PID: 20038 Comm: syz.5.2576 Tainted: G U syzkaller #0 PREEMPT(full) [ 987.191071][T20038] Tainted: [U]=USER [ 987.191083][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 987.191102][T20038] Call Trace: [ 987.191113][T20038] [ 987.191126][T20038] dump_stack_lvl+0x16c/0x1f0 [ 987.191169][T20038] sysfs_warn_dup+0x7f/0xa0 [ 987.191209][T20038] sysfs_do_create_link_sd+0x124/0x140 [ 987.191253][T20038] sysfs_create_link+0x61/0xc0 [ 987.191295][T20038] device_add+0x62c/0x1aa0 [ 987.191342][T20038] ? __pfx_device_add+0x10/0x10 [ 987.191382][T20038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 987.191440][T20038] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 987.191499][T20038] wiphy_register+0x1eb0/0x2b20 [ 987.191544][T20038] ? netdev_run_todo+0x864/0x1320 [ 987.191602][T20038] ? __pfx_wiphy_register+0x10/0x10 [ 987.191672][T20038] ieee80211_register_hw+0x253d/0x4120 [ 987.191737][T20038] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 987.191783][T20038] ? __pfx___debug_object_init+0x10/0x10 [ 987.191824][T20038] ? find_held_lock+0x2b/0x80 [ 987.191860][T20038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 987.191918][T20038] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 987.191954][T20038] ? __hrtimer_setup+0x176/0x280 [ 987.192011][T20038] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 987.192088][T20038] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 987.192169][T20038] hwsim_new_radio_nl+0xba2/0x1330 [ 987.192224][T20038] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 987.192289][T20038] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 987.192343][T20038] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 987.192405][T20038] genl_family_rcv_msg_doit+0x206/0x2f0 [ 987.192478][T20038] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 987.192544][T20038] ? bpf_lsm_capable+0x9/0x10 [ 987.192588][T20038] ? security_capable+0x7e/0x260 [ 987.192634][T20038] ? ns_capable+0xd7/0x110 [ 987.192692][T20038] genl_rcv_msg+0x55c/0x800 [ 987.192747][T20038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 987.192799][T20038] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 987.192866][T20038] netlink_rcv_skb+0x158/0x420 [ 987.192909][T20038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 987.192961][T20038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 987.193026][T20038] ? netlink_deliver_tap+0x1ae/0xd30 [ 987.193075][T20038] genl_rcv+0x28/0x40 [ 987.193119][T20038] netlink_unicast+0x5a7/0x870 [ 987.193170][T20038] ? __pfx_netlink_unicast+0x10/0x10 [ 987.193213][T20038] ? __pfx___might_resched+0x10/0x10 [ 987.193249][T20038] ? __lock_acquire+0xb97/0x1ce0 [ 987.193308][T20038] netlink_sendmsg+0x8c8/0xdd0 [ 987.193361][T20038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.193411][T20038] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 987.193476][T20038] ____sys_sendmsg+0xa95/0xc70 [ 987.193530][T20038] ? copy_msghdr_from_user+0x10a/0x160 [ 987.193572][T20038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.193635][T20038] ? __pfx_futex_wake_mark+0x10/0x10 [ 987.193695][T20038] ___sys_sendmsg+0x134/0x1d0 [ 987.193740][T20038] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.193838][T20038] __sys_sendmsg+0x16d/0x220 [ 987.193880][T20038] ? __pfx___sys_sendmsg+0x10/0x10 [ 987.193921][T20038] ? __x64_sys_futex+0x1e0/0x4c0 [ 987.193997][T20038] do_syscall_64+0xcd/0xfa0 [ 987.194040][T20038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.194075][T20038] RIP: 0033:0x7fb03938eec9 [ 987.194103][T20038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.194137][T20038] RSP: 002b:00007fb03a18b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.194170][T20038] RAX: ffffffffffffffda RBX: 00007fb0395e5fa0 RCX: 00007fb03938eec9 [ 987.194194][T20038] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 987.194216][T20038] RBP: 00007fb039411f91 R08: 0000000000000000 R09: 0000000000000000 [ 987.194238][T20038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.194259][T20038] R13: 00007fb0395e6038 R14: 00007fb0395e5fa0 R15: 00007fff3df879d8 [ 987.194309][T20038] [ 987.595510][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.960026][ T9071] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 896 with max blocks 24 with error 117 [ 989.023042][ T9071] EXT4-fs (sda1): This should not happen!! Data will be lost [ 989.023042][ T9071] [ 989.553174][T20056] block nbd9: NBD_DISCONNECT [ 989.775024][T16740] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 896 with max blocks 1 with error 117 [ 989.848043][T16740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 989.848043][T16740] [ 991.319428][T20073] random: crng reseeded on system resumption [ 991.903963][T20054] kexec: Could not allocate control_code_buffer [ 992.034994][T20079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2583'. [ 992.529952][ T30] audit: type=1800 audit(4294988987.123:25): pid=20085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2585" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 992.778051][T20048] Process accounting resumed [ 992.925436][T20099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2587'. [ 993.108315][T20092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2587'. [ 993.714379][T20114] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input29 [ 999.134739][T20184] binder: 20180:20184 ioctl c0046209 ffffffffffffffff returned -22 [ 999.320942][T15926] Bluetooth: hci1: Malformed LE Event: 0x1b [ 999.647865][T20198] FAULT_INJECTION: forcing a failure. [ 999.647865][T20198] name failslab, interval 1, probability 0, space 0, times 0 [ 999.681062][T20198] CPU: 0 UID: 0 PID: 20198 Comm: syz.4.2603 Tainted: G U syzkaller #0 PREEMPT(full) [ 999.681130][T20198] Tainted: [U]=USER [ 999.681142][T20198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 999.681163][T20198] Call Trace: [ 999.681175][T20198] [ 999.681188][T20198] dump_stack_lvl+0x16c/0x1f0 [ 999.681235][T20198] should_fail_ex+0x512/0x640 [ 999.681290][T20198] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 999.681330][T20198] should_failslab+0xc2/0x120 [ 999.681375][T20198] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 999.681418][T20198] ? shmem_alloc_inode+0x25/0x50 [ 999.681468][T20198] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 999.681509][T20198] ? shmem_alloc_inode+0x25/0x50 [ 999.681550][T20198] shmem_alloc_inode+0x25/0x50 [ 999.681591][T20198] alloc_inode+0x61/0x240 [ 999.681637][T20198] new_inode+0x22/0x1c0 [ 999.681686][T20198] shmem_get_inode+0x19a/0xfb0 [ 999.681744][T20198] shmem_mknod+0x1a8/0x450 [ 999.681796][T20198] vfs_mknod+0x5da/0x8e0 [ 999.681853][T20198] do_mknodat+0x30f/0x5d0 [ 999.681894][T20198] ? __pfx_do_mknodat+0x10/0x10 [ 999.681927][T20198] ? getname_flags.part.0+0x1c5/0x550 [ 999.681985][T20198] __x64_sys_mknod+0x87/0xb0 [ 999.682023][T20198] do_syscall_64+0xcd/0xfa0 [ 999.682064][T20198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.682098][T20198] RIP: 0033:0x7f4882d8eec9 [ 999.682126][T20198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.682159][T20198] RSP: 002b:00007f4883baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 999.682190][T20198] RAX: ffffffffffffffda RBX: 00007f4882fe5fa0 RCX: 00007f4882d8eec9 [ 999.682213][T20198] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 999.682234][T20198] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 999.682255][T20198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.682276][T20198] R13: 00007f4882fe6038 R14: 00007f4882fe5fa0 R15: 00007ffe03d3e178 [ 999.682322][T20198] [ 1000.534817][T20200] binder: 20199:20200 ioctl 541b 10000000000402 returned -22 [ 1000.977801][T20219] random: crng reseeded on system resumption [ 1001.586435][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2611'. [ 1002.189747][T20231] usb usb36: usbfs: process 20231 (syz.1.2610) did not claim interface 0 before use [ 1002.847605][T20258] input: 00 [ 1002.847605][T20258] as /devices/virtual/input/input30 [ 1002.927098][T20258] FAULT_INJECTION: forcing a failure. [ 1002.927098][T20258] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.025838][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.032641][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.078282][T20258] CPU: 0 UID: 0 PID: 20258 Comm: syz.4.2614 Tainted: G U syzkaller #0 PREEMPT(full) [ 1003.078337][T20258] Tainted: [U]=USER [ 1003.078350][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1003.078371][T20258] Call Trace: [ 1003.078382][T20258] [ 1003.078401][T20258] dump_stack_lvl+0x16c/0x1f0 [ 1003.078447][T20258] should_fail_ex+0x512/0x640 [ 1003.078490][T20258] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1003.078532][T20258] should_failslab+0xc2/0x120 [ 1003.078579][T20258] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1003.078615][T20258] ? __kernfs_new_node+0xd2/0x8e0 [ 1003.078668][T20258] ? __kernfs_new_node+0xd2/0x8e0 [ 1003.078708][T20258] __kernfs_new_node+0xd2/0x8e0 [ 1003.078758][T20258] ? __pfx___kernfs_new_node+0x10/0x10 [ 1003.078815][T20258] ? find_held_lock+0x2b/0x80 [ 1003.078853][T20258] ? kernfs_root+0xee/0x2a0 [ 1003.078906][T20258] kernfs_new_node+0x13c/0x1e0 [ 1003.078965][T20258] __kernfs_create_file+0x53/0x350 [ 1003.079007][T20258] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1003.079060][T20258] sysfs_create_file_ns+0x13d/0x1d0 [ 1003.079108][T20258] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1003.079153][T20258] ? mark_held_locks+0x49/0x80 [ 1003.079204][T20258] device_create_file+0xf2/0x1e0 [ 1003.079255][T20258] device_add+0xa2b/0x1aa0 [ 1003.079301][T20258] ? __pfx_device_add+0x10/0x10 [ 1003.079344][T20258] ? __pfx_exact_lock+0x10/0x10 [ 1003.079390][T20258] ? kobject_get+0xbb/0x150 [ 1003.079434][T20258] cdev_device_add+0xc2/0x1e0 [ 1003.079478][T20258] evdev_connect+0x3a4/0x4c0 [ 1003.079531][T20258] input_attach_handler.isra.0+0x173/0x250 [ 1003.079581][T20258] input_register_device+0xab9/0x1180 [ 1003.079638][T20258] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 1003.079676][T20258] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1003.079725][T20258] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1003.079774][T20258] ? find_held_lock+0x2b/0x80 [ 1003.079832][T20258] ? __pfx_uinput_ioctl+0x10/0x10 [ 1003.079868][T20258] __x64_sys_ioctl+0x18b/0x210 [ 1003.079922][T20258] do_syscall_64+0xcd/0xfa0 [ 1003.079965][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.080002][T20258] RIP: 0033:0x7f4882d8eec9 [ 1003.080030][T20258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.080078][T20258] RSP: 002b:00007f4883baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.080118][T20258] RAX: ffffffffffffffda RBX: 00007f4882fe5fa0 RCX: 00007f4882d8eec9 [ 1003.080141][T20258] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 1003.080163][T20258] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1003.080185][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.080206][T20258] R13: 00007f4882fe6038 R14: 00007f4882fe5fa0 R15: 00007ffe03d3e178 [ 1003.080256][T20258] [ 1003.419009][T20258] input: failed to attach handler evdev to device input30, error: -12 [ 1004.330195][T20281] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2620'. [ 1005.978175][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 1006.079703][T20326] HfR: entered promiscuous mode [ 1006.376953][T20342] FAULT_INJECTION: forcing a failure. [ 1006.376953][T20342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1006.391523][T20342] CPU: 0 UID: 0 PID: 20342 Comm: syz.0.2630 Tainted: G U syzkaller #0 PREEMPT(full) [ 1006.391575][T20342] Tainted: [U]=USER [ 1006.391587][T20342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1006.391614][T20342] Call Trace: [ 1006.391623][T20342] [ 1006.391632][T20342] dump_stack_lvl+0x16c/0x1f0 [ 1006.391665][T20342] should_fail_ex+0x512/0x640 [ 1006.391700][T20342] should_fail_alloc_page+0xe7/0x130 [ 1006.391733][T20342] prepare_alloc_pages+0x3c2/0x610 [ 1006.391765][T20342] ? arch_stack_walk+0xa6/0x100 [ 1006.391791][T20342] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1006.391822][T20342] ? stack_trace_save+0x8e/0xc0 [ 1006.391849][T20342] ? __pfx_stack_trace_save+0x10/0x10 [ 1006.391878][T20342] ? stack_depot_save_flags+0x29/0x9c0 [ 1006.391907][T20342] ? find_held_lock+0x2b/0x80 [ 1006.391932][T20342] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1006.391958][T20342] ? kasan_save_stack+0x42/0x60 [ 1006.391983][T20342] ? kasan_save_stack+0x33/0x60 [ 1006.392008][T20342] ? kasan_save_track+0x14/0x30 [ 1006.392033][T20342] ? __kasan_slab_alloc+0x89/0x90 [ 1006.392060][T20342] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1006.392081][T20342] ? security_inode_alloc+0x3b/0x2b0 [ 1006.392113][T20342] ? inode_init_always_gfp+0xce4/0x1030 [ 1006.392139][T20342] ? do_syscall_64+0xcd/0xfa0 [ 1006.392165][T20342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.392213][T20342] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1006.392270][T20342] ? policy_nodemask+0xea/0x4e0 [ 1006.392303][T20342] alloc_pages_mpol+0x1fb/0x550 [ 1006.392335][T20342] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1006.392375][T20342] ___kmalloc_large_node+0xed/0x160 [ 1006.392412][T20342] __kmalloc_large_node_noprof+0x1c/0x70 [ 1006.392448][T20342] __kmalloc_noprof.cold+0xc/0x62 [ 1006.392483][T20342] ? sk_prot_alloc+0x1a8/0x2a0 [ 1006.392521][T20342] ? sk_prot_alloc+0x1a8/0x2a0 [ 1006.392552][T20342] sk_prot_alloc+0x1a8/0x2a0 [ 1006.392587][T20342] sk_alloc+0x36/0xc20 [ 1006.392619][T20342] can_create+0x1e5/0x630 [ 1006.392650][T20342] __sock_create+0x338/0x8d0 [ 1006.392691][T20342] __sys_socket+0x14d/0x260 [ 1006.392727][T20342] ? __pfx___sys_socket+0x10/0x10 [ 1006.392764][T20342] ? xfd_validate_state+0x61/0x180 [ 1006.392796][T20342] ? __pfx_ksys_write+0x10/0x10 [ 1006.392827][T20342] __x64_sys_socket+0x72/0xb0 [ 1006.392862][T20342] ? lockdep_hardirqs_on+0x7c/0x110 [ 1006.392888][T20342] do_syscall_64+0xcd/0xfa0 [ 1006.392917][T20342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.392940][T20342] RIP: 0033:0x7f7105b8eec9 [ 1006.392960][T20342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.392983][T20342] RSP: 002b:00007f7106a52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1006.393005][T20342] RAX: ffffffffffffffda RBX: 00007f7105de6270 RCX: 00007f7105b8eec9 [ 1006.393020][T20342] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 1006.393035][T20342] RBP: 00007f7105c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.393049][T20342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.393064][T20342] R13: 00007f7105de6308 R14: 00007f7105de6270 R15: 00007ffc6476a308 [ 1006.393095][T20342] [ 1007.358512][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 1007.434419][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 1007.841196][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 1008.205905][T20358] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1009.620854][T20386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 1010.033993][T20398] sctp: [Deprecated]: syz.5.2649 (pid 20398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1010.033993][T20398] Use struct sctp_sack_info instead [ 1010.167490][T20400] ptrace attach of "./syz-executor exec"[19302] was attempted by " [meܿ+65ʹԱ\x0c'jmc^V;\x1bD3=_!k^ʀ<{|U\x0a' ֤\x0d\x0d=*\x0c씝N'7\x22\x09\x0a7S҃ܤh,ey'Ϙq@qAp\x22<؇⼲K/F6 (-*BK-e:w`h\x1b+4}CZ*&\x07%O/H ݄2$^SӌˍHBIT@Tzk\x0b\x1b\x0cٔ7آ-X4\x07KA0@N(..\x0bJ!X=tmT5g8?B`:T]Re\x0a-a\x0b'PyuOw\x0br9f\x1bp\x090\x5cV;:̳_Oe|ַ_wgFW|ȗC;vLbyG^|Ju(8|EnthLGx'TqNWKVKCB [ 1024.513862][T20637] dump_stack_lvl+0x16c/0x1f0 [ 1024.513905][T20637] should_fail_ex+0x512/0x640 [ 1024.513946][T20637] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1024.513985][T20637] should_failslab+0xc2/0x120 [ 1024.514030][T20637] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1024.514065][T20637] ? __kernfs_new_node+0xd2/0x8e0 [ 1024.514116][T20637] ? __kernfs_new_node+0xd2/0x8e0 [ 1024.514164][T20637] __kernfs_new_node+0xd2/0x8e0 [ 1024.514213][T20637] ? __pfx___kernfs_new_node+0x10/0x10 [ 1024.514268][T20637] ? find_held_lock+0x2b/0x80 [ 1024.514304][T20637] ? kernfs_root+0xee/0x2a0 [ 1024.514356][T20637] kernfs_new_node+0x13c/0x1e0 [ 1024.514414][T20637] __kernfs_create_file+0x53/0x350 [ 1024.514453][T20637] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1024.514505][T20637] internal_create_group+0x578/0xf30 [ 1024.514561][T20637] ? __pfx_internal_create_group+0x10/0x10 [ 1024.514613][T20637] ? kernfs_create_link+0x1bd/0x240 [ 1024.514654][T20637] internal_create_groups+0x9d/0x150 [ 1024.514704][T20637] device_add+0xf30/0x1aa0 [ 1024.514752][T20637] ? __pfx_device_add+0x10/0x10 [ 1024.514796][T20637] ? lockdep_init_map_type+0x5c/0x280 [ 1024.514846][T20637] ? __init_waitqueue_head+0xca/0x150 [ 1024.514910][T20637] netdev_register_kobject+0x1a9/0x3d0 [ 1024.514970][T20637] register_netdevice+0x13dc/0x2270 [ 1024.515024][T20637] ? __pfx_register_netdevice+0x10/0x10 [ 1024.515068][T20637] ? dev_addr_mod+0x316/0x540 [ 1024.515104][T20637] __tun_chr_ioctl+0x1eb6/0x4880 [ 1024.515176][T20637] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1024.515234][T20637] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1024.515288][T20637] ? hook_file_ioctl_common+0x145/0x410 [ 1024.515356][T20637] ? __fget_files+0x20e/0x3c0 [ 1024.515397][T20637] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1024.515447][T20637] __x64_sys_ioctl+0x18b/0x210 [ 1024.515500][T20637] do_syscall_64+0xcd/0xfa0 [ 1024.515543][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.515578][T20637] RIP: 0033:0x7f7105b8eec9 [ 1024.515606][T20637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.515641][T20637] RSP: 002b:00007f7106ab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.515674][T20637] RAX: ffffffffffffffda RBX: 00007f7105de5fa0 RCX: 00007f7105b8eec9 [ 1024.515698][T20637] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 1024.515720][T20637] RBP: 00007f7105c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1024.515742][T20637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.515764][T20637] R13: 00007f7105de6038 R14: 00007f7105de5fa0 R15: 00007ffc6476a308 [ 1024.515812][T20637] [ 1024.913670][T20644] random: crng reseeded on system resumption [ 1025.536845][T20609] Process accounting paused [ 1026.303037][T20669] sp0: Synchronizing with TNC [ 1027.133600][T20669] size and base must be multiples of 4 kiB [ 1027.182014][T20669] CPU: 1 UID: 0 PID: 20669 Comm: syz.0.2694 Tainted: G U syzkaller #0 PREEMPT(full) [ 1027.182053][T20669] Tainted: [U]=USER [ 1027.182061][T20669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1027.182075][T20669] Call Trace: [ 1027.182083][T20669] [ 1027.182093][T20669] dump_stack_lvl+0x16c/0x1f0 [ 1027.182125][T20669] mtrr_add+0xdf/0x110 [ 1027.182162][T20669] mtrr_ioctl+0x7ef/0xcf0 [ 1027.182197][T20669] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1027.182238][T20669] ? find_held_lock+0x2b/0x80 [ 1027.182271][T20669] ? __fget_files+0x20e/0x3c0 [ 1027.182297][T20669] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1027.182331][T20669] proc_reg_unlocked_ioctl+0x226/0x320 [ 1027.182364][T20669] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1027.182400][T20669] __x64_sys_ioctl+0x18b/0x210 [ 1027.182443][T20669] do_syscall_64+0xcd/0xfa0 [ 1027.182478][T20669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.182511][T20669] RIP: 0033:0x7f7105b8eec9 [ 1027.182536][T20669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.182568][T20669] RSP: 002b:00007f7106ab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.182597][T20669] RAX: ffffffffffffffda RBX: 00007f7105de5fa0 RCX: 00007f7105b8eec9 [ 1027.182619][T20669] RDX: 0000000000000005 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 1027.182641][T20669] RBP: 00007f7105c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1027.182675][T20669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.182689][T20669] R13: 00007f7105de6038 R14: 00007f7105de5fa0 R15: 00007ffc6476a308 [ 1027.182721][T20669] [ 1027.685204][T20679] netlink: 2468 bytes leftover after parsing attributes in process `syz.5.2696'. [ 1027.856468][T20684] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1029.778052][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 1030.752415][T20741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1030.763740][T20746] FAULT_INJECTION: forcing a failure. [ 1030.763740][T20746] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.844938][T20741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1030.851570][T20746] CPU: 1 UID: 0 PID: 20746 Comm: syz.4.2711 Tainted: G U syzkaller #0 PREEMPT(full) [ 1030.851610][T20746] Tainted: [U]=USER [ 1030.851618][T20746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1030.851632][T20746] Call Trace: [ 1030.851640][T20746] [ 1030.851649][T20746] dump_stack_lvl+0x16c/0x1f0 [ 1030.851681][T20746] should_fail_ex+0x512/0x640 [ 1030.851710][T20746] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1030.851753][T20746] should_failslab+0xc2/0x120 [ 1030.851785][T20746] __kmalloc_cache_noprof+0x72/0x780 [ 1030.851830][T20746] ? cec_open+0xdb/0x690 [ 1030.851892][T20746] ? cec_open+0xdb/0x690 [ 1030.851937][T20746] cec_open+0xdb/0x690 [ 1030.851985][T20746] ? __pfx_cec_open+0x10/0x10 [ 1030.852037][T20746] ? kobject_get_unless_zero+0x156/0x1e0 [ 1030.852080][T20746] ? find_held_lock+0x2b/0x80 [ 1030.852117][T20746] ? chrdev_open+0x10b/0x6a0 [ 1030.852163][T20746] ? __pfx_cec_open+0x10/0x10 [ 1030.852212][T20746] chrdev_open+0x234/0x6a0 [ 1030.852251][T20746] ? __pfx_apparmor_file_open+0x10/0x10 [ 1030.852300][T20746] ? __pfx_chrdev_open+0x10/0x10 [ 1030.852343][T20746] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1030.852387][T20746] do_dentry_open+0x982/0x1530 [ 1030.852426][T20746] ? __pfx_chrdev_open+0x10/0x10 [ 1030.852475][T20746] vfs_open+0x82/0x3f0 [ 1030.852532][T20746] path_openat+0x1de4/0x2cb0 [ 1030.852583][T20746] ? __pfx_path_openat+0x10/0x10 [ 1030.852632][T20746] do_filp_open+0x20b/0x470 [ 1030.852669][T20746] ? __pfx_do_filp_open+0x10/0x10 [ 1030.852736][T20746] ? alloc_fd+0x471/0x7d0 [ 1030.852781][T20746] do_sys_openat2+0x11b/0x1d0 [ 1030.852830][T20746] ? __pfx_do_sys_openat2+0x10/0x10 [ 1030.852924][T20746] __x64_sys_openat+0x174/0x210 [ 1030.852978][T20746] ? __pfx___x64_sys_openat+0x10/0x10 [ 1030.853049][T20746] do_syscall_64+0xcd/0xfa0 [ 1030.853093][T20746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.853129][T20746] RIP: 0033:0x7f4882d8eec9 [ 1030.853158][T20746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.853194][T20746] RSP: 002b:00007f4883baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1030.853228][T20746] RAX: ffffffffffffffda RBX: 00007f4882fe5fa0 RCX: 00007f4882d8eec9 [ 1030.853252][T20746] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 1030.853276][T20746] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1030.853298][T20746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.853320][T20746] R13: 00007f4882fe6038 R14: 00007f4882fe5fa0 R15: 00007ffe03d3e178 [ 1030.853367][T20746] [ 1031.224318][T20741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1031.230594][T20741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1031.277394][T20741] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1031.631467][T20741] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1032.810354][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1032.876140][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1033.334051][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1033.334527][T15926] Bluetooth: hci1: command 0x0c1a tx timeout [ 1034.354211][T20797] binder: 20791:20797 ioctl 541b 10000000000402 returned -22 [ 1035.347895][T15926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1035.536435][T20828] block nbd0: not configured, cannot reconfigure [ 1036.753371][T20858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2735'. [ 1037.281620][T20874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1037.375319][T20874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.425532][T15926] Bluetooth: hci3: command 0x0c1a tx timeout [ 1037.448747][T20874] bridge_slave_1 (unregistering): left allmulticast mode [ 1037.459421][T20874] bridge_slave_1 (unregistering): left promiscuous mode [ 1037.478016][T20874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.084042][T20899] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1038.136745][T20900] FAULT_INJECTION: forcing a failure. [ 1038.136745][T20900] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.173958][T20900] CPU: 0 UID: 0 PID: 20900 Comm: syz.4.2747 Tainted: G U syzkaller #0 PREEMPT(full) [ 1038.173996][T20900] Tainted: [U]=USER [ 1038.174004][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1038.174018][T20900] Call Trace: [ 1038.174026][T20900] [ 1038.174035][T20900] dump_stack_lvl+0x16c/0x1f0 [ 1038.174067][T20900] should_fail_ex+0x512/0x640 [ 1038.174096][T20900] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1038.174138][T20900] should_failslab+0xc2/0x120 [ 1038.174169][T20900] __kmalloc_cache_noprof+0x72/0x780 [ 1038.174216][T20900] ? __lock_acquire+0xb97/0x1ce0 [ 1038.174247][T20900] ? univ8250_setup_irq+0x34e/0x760 [ 1038.174299][T20900] ? univ8250_setup_irq+0x34e/0x760 [ 1038.174324][T20900] univ8250_setup_irq+0x34e/0x760 [ 1038.174348][T20900] ? io_serial_out+0x65/0xb0 [ 1038.174377][T20900] ? io_serial_in+0x60/0xb0 [ 1038.174410][T20900] serial8250_do_startup+0x723/0x3440 [ 1038.174441][T20900] ? mark_held_locks+0x49/0x80 [ 1038.174473][T20900] serial8250_startup+0x62/0x80 [ 1038.174497][T20900] uart_startup+0x507/0x1300 [ 1038.174539][T20900] uart_ioctl+0xfe5/0x3080 [ 1038.174565][T20900] ? __pfx_uart_ioctl+0x10/0x10 [ 1038.174602][T20900] ? tomoyo_path_number_perm+0x18d/0x580 [ 1038.174641][T20900] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1038.174677][T20900] ? futex_wake+0x1ad/0x530 [ 1038.174717][T20900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1038.174759][T20900] ? __pfx_uart_ioctl+0x10/0x10 [ 1038.174781][T20900] tty_ioctl+0x65e/0x1680 [ 1038.174818][T20900] ? __pfx_tty_ioctl+0x10/0x10 [ 1038.174862][T20900] ? find_held_lock+0x2b/0x80 [ 1038.174885][T20900] ? hook_file_ioctl_common+0x145/0x410 [ 1038.174931][T20900] ? __fget_files+0x20e/0x3c0 [ 1038.174959][T20900] ? __pfx_tty_ioctl+0x10/0x10 [ 1038.174995][T20900] __x64_sys_ioctl+0x18b/0x210 [ 1038.175032][T20900] do_syscall_64+0xcd/0xfa0 [ 1038.175061][T20900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.175086][T20900] RIP: 0033:0x7f4882d8eec9 [ 1038.175104][T20900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.175128][T20900] RSP: 002b:00007f4883b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.175150][T20900] RAX: ffffffffffffffda RBX: 00007f4882fe6090 RCX: 00007f4882d8eec9 [ 1038.175166][T20900] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 000000000000000a [ 1038.175180][T20900] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1038.175194][T20900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.175208][T20900] R13: 00007f4882fe6128 R14: 00007f4882fe6090 R15: 00007ffe03d3e178 [ 1038.175240][T20900] [ 1038.780943][T20900] ------------[ cut here ]------------ [ 1038.786765][T20900] memcpy: detected field-spanning write (size 5) of single field "&entry->id" at kernel/trace/trace.c:7458 (size 4) [ 1038.799805][T20900] WARNING: CPU: 1 PID: 20900 at kernel/trace/trace.c:7458 write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 1038.811310][T20900] Modules linked in: [ 1038.815636][T20900] CPU: 1 UID: 0 PID: 20900 Comm: syz.4.2747 Tainted: G U syzkaller #0 PREEMPT(full) [ 1038.827530][T20900] Tainted: [U]=USER [ 1038.832218][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1038.842417][T20900] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 1038.849662][T20900] Code: ff e8 30 74 fa ff c6 05 74 82 aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 1038.869368][T20900] RSP: 0018:ffffc90003367c40 EFLAGS: 00010282 [ 1038.875496][T20900] RAX: 0000000000000000 RBX: ffff88801de84014 RCX: ffffc90019497000 [ 1038.883641][T20900] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 1038.891759][T20900] RBP: ffff88801de84010 R08: 0000000000000001 R09: 0000000000000000 [ 1038.900053][T20900] R10: 0000000000000000 R11: fffffffffffdb410 R12: 0000000000000005 [ 1038.908312][T20900] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 1038.916341][T20900] FS: 00007f4883b8e6c0(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 [ 1038.926312][T20900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1038.933713][T20900] CR2: 0000000000000000 CR3: 000000002fac4000 CR4: 00000000003526f0 [ 1038.941854][T20900] Call Trace: [ 1038.945190][T20900] [ 1038.948296][T20900] tracing_mark_raw_write+0x2da/0x4a0 [ 1038.953727][T20900] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 1038.959737][T20900] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 1038.965834][T20900] vfs_write+0x2a0/0x11d0 [ 1038.970283][T20900] ? __pfx_vfs_write+0x10/0x10 [ 1038.975186][T20900] ? find_held_lock+0x2b/0x80 [ 1038.979995][T20900] ? __fget_files+0x204/0x3c0 [ 1038.984751][T20900] ? __fget_files+0x20e/0x3c0 [ 1038.989520][T20900] ksys_write+0x1f8/0x250 [ 1038.993900][T20900] ? __pfx_ksys_write+0x10/0x10 [ 1038.999085][T20900] do_syscall_64+0xcd/0xfa0 [ 1039.003645][T20900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.009933][T20900] RIP: 0033:0x7f4882d8eec9 [ 1039.014393][T20900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.034953][T20900] RSP: 002b:00007f4883b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1039.044112][T20900] RAX: ffffffffffffffda RBX: 00007f4882fe6090 RCX: 00007f4882d8eec9 [ 1039.052321][T20900] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000000000c [ 1039.060386][T20900] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1039.068448][T20900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.076625][T20900] R13: 00007f4882fe6128 R14: 00007f4882fe6090 R15: 00007ffe03d3e178 [ 1039.084672][T20900] [ 1039.087878][T20900] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1039.095191][T20900] CPU: 1 UID: 0 PID: 20900 Comm: syz.4.2747 Tainted: G U syzkaller #0 PREEMPT(full) [ 1039.106160][T20900] Tainted: [U]=USER [ 1039.109991][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1039.120077][T20900] Call Trace: [ 1039.123370][T20900] [ 1039.126329][T20900] dump_stack_lvl+0x3d/0x1f0 [ 1039.130971][T20900] vpanic+0x640/0x6f0 [ 1039.134982][T20900] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 1039.141520][T20900] panic+0xca/0xd0 [ 1039.145272][T20900] ? __pfx_panic+0x10/0x10 [ 1039.149734][T20900] check_panic_on_warn+0xab/0xb0 [ 1039.154719][T20900] __warn+0xf6/0x3c0 [ 1039.158664][T20900] ? __pfx_vprintk_emit+0x10/0x10 [ 1039.163713][T20900] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 1039.170241][T20900] report_bug+0x3c3/0x580 [ 1039.174594][T20900] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 1039.181133][T20900] handle_bug+0x184/0x210 [ 1039.185516][T20900] exc_invalid_op+0x17/0x50 [ 1039.190047][T20900] asm_exc_invalid_op+0x1a/0x20 [ 1039.194913][T20900] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 1039.202045][T20900] Code: ff e8 30 74 fa ff c6 05 74 82 aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 1039.221668][T20900] RSP: 0018:ffffc90003367c40 EFLAGS: 00010282 [ 1039.227755][T20900] RAX: 0000000000000000 RBX: ffff88801de84014 RCX: ffffc90019497000 [ 1039.235750][T20900] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 1039.243758][T20900] RBP: ffff88801de84010 R08: 0000000000000001 R09: 0000000000000000 [ 1039.251931][T20900] R10: 0000000000000000 R11: fffffffffffdb410 R12: 0000000000000005 [ 1039.259914][T20900] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 1039.267910][T20900] ? __warn_printk+0x1a5/0x350 [ 1039.272718][T20900] tracing_mark_raw_write+0x2da/0x4a0 [ 1039.278112][T20900] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 1039.284042][T20900] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 1039.289950][T20900] vfs_write+0x2a0/0x11d0 [ 1039.294296][T20900] ? __pfx_vfs_write+0x10/0x10 [ 1039.299070][T20900] ? find_held_lock+0x2b/0x80 [ 1039.303779][T20900] ? __fget_files+0x204/0x3c0 [ 1039.308475][T20900] ? __fget_files+0x20e/0x3c0 [ 1039.313186][T20900] ksys_write+0x1f8/0x250 [ 1039.317560][T20900] ? __pfx_ksys_write+0x10/0x10 [ 1039.322443][T20900] do_syscall_64+0xcd/0xfa0 [ 1039.326970][T20900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.332880][T20900] RIP: 0033:0x7f4882d8eec9 [ 1039.337327][T20900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.356950][T20900] RSP: 002b:00007f4883b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1039.365380][T20900] RAX: ffffffffffffffda RBX: 00007f4882fe6090 RCX: 00007f4882d8eec9 [ 1039.373366][T20900] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000000000c [ 1039.381345][T20900] RBP: 00007f4882e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1039.389327][T20900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.397322][T20900] R13: 00007f4882fe6128 R14: 00007f4882fe6090 R15: 00007ffe03d3e178 [ 1039.405330][T20900] [ 1039.408683][T20900] Kernel Offset: disabled [ 1039.413023][T20900] Rebooting in 86400 seconds..