last executing test programs: 12m13.676770297s ago: executing program 3 (id=7224): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x100) listen$auto(0x3, 0x83) ioctl$auto(0x3, 0x541b, 0x10000000000402) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x23, 0x80805, 0x0) bind$auto(r1, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/247, 0xf7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="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", 0x617) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) io_uring_setup$auto(0x7ff, &(0x7f0000000080)={0x7efffffc, 0x8, 0x3002, 0x7, 0x7, 0x4006, 0xffffffffffffffff, [0x0, 0x0, 0x4000000], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x69cb, 0x6, 0x3}, {0x5, 0x8001, 0x2052, 0x85, 0x2, 0x1a7b874a, 0x76c5, 0x8, 0x100000000}}) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) close_range$auto(0x2, 0xa, 0x0) 12m10.555599713s ago: executing program 3 (id=7230): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) r2 = socket(0xa, 0x1, 0x100) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r2) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x8000) mmap$auto(0x0, 0x400404, 0x9, 0x9b72, 0x2, 0x4000000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) write$auto(0x3, 0x0, 0x100082) 12m5.289395481s ago: executing program 3 (id=7238): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x1000000) prctl$auto(0xfd, 0x80000001, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0xf, 0x7, 0x8, 0x0) r0 = socket(0x10, 0x1, 0xb) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f0000000280)="453e648de9f35148807f2dd7c111b73ffc680f48741c6ca60339eeb9b67b609703e5d73891bcf04a15c098660f72ff69687543319ee93aaa2eb4de39489f6b2a680fbb75eda73205bcc2d9a789e128ded7e78acb494591a740326676f3dffbbe72de44cf67446296201b96860a7a9436dfa5e44fe3000822cad41f9364ec53dc44bc75630100003d29a159cf6d85d42d4d9e5550ee2101688c74615a2104456c5639f0f5b11b021f181cb4b1718395b59ca9d56a9ea0df81fae5d5d65ce6ced4db0bc6b8fbff5b4062aa108b4342d15a", 0xca3b, 0x0, 0x9, 0x0, 0x3, 0x3}, 0x800008}, 0x1, 0x20020000) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r1, 0x80044dfe, &(0x7f0000000040)) (async) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) (async, rerun: 64) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (rerun: 64) mmap$auto(0x0, 0x40006, 0xe2, 0x20009b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async, rerun: 64) r2 = socket(0x10, 0x2, 0x0) (rerun: 64) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) getsockopt$auto_SO_PREFER_BUSY_POLL(0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000080)='/dev/sg0\x00', &(0x7f00000000c0)=0x2) (async) recvfrom$auto(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) (async) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 12m3.526558615s ago: executing program 3 (id=7241): pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) r0 = fanotify_init$auto(0x602, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) getpgid$auto(0x0) r4 = fsmount$auto(r1, 0xc, 0xe5a6dab6) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/122, 0x7a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r4) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="583b0f223d353d91b867e401920000000000000000", @ANYRES16=r4, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x400000c4}, 0x8d0) 12m3.074407812s ago: executing program 3 (id=7243): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x81, 0x0, 0x0, 0x6) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioperm$auto(0x2, 0x3, 0x1) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x109b80, 0x0) r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, 0x0, 0x5) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 12m1.210510182s ago: executing program 3 (id=7246): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x8000) (async) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0x6, 0x4020009, 0x11000000df, 0xebe, r1, 0x8000) (async) unshare$auto(0x60000080) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="9e0839d502484f8af75c1000226ca59d1a2eb71caa281e1647d76bfa482b37c7e16e7536a55d10cf54d5e382c7514c70f31f5ca964180c28ca2a2827836d03e1a9e73cc343d7e9ad821727e0064bebdcf62d3b8173cc4ab3745c16c484d5bb9289c508000000f46d4369202ad194cae093fb4f086091e895c13b5c3c00000000495ee97f0d934c05e9a6c0a5b36c0783348f4bc1dfc48fbc73e97cc523b6c10a88454525699e49c5e742c2ea8b62344dc4c89bec882f52e08b3cccd3597bf4b324876476f787a4551e0e3822098e67e6c88d3b2795a3c0c6e35c1136feb6c65d7e27b52ac38897d8f27b1a03f8ab85ac24053fcd76fef86d1cb0055bb0c39564f8a6c000868a71ca6f065317273ae322c30dedf182dd796a645f8e70cb6cb687f8daa319bd8c9d2610d11d8c513fe9357cac430025cc8e82d3dc7e50") move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) (async) r3 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) rt_tgsigqueueinfo$auto(r3, r3, 0x208, &(0x7f0000000100)={@siginfo_0_0={0x3, 0xffff, 0x0, @_sigsys={&(0x7f0000000340)="ec74806b2476647892201c4d01266dbe7daeea4c50216dfa9bb7ac7a1af0699d5b33b0cd904da5b38dafd565d72e0a15979c507e71d5e19a9ee807300c87e310e68416d0126632feb19d5a63e6a57331396f8357c2ec0140ebeab267845b10feabcc4685663da350872a518b27d0f6eba650c6107877b146d81cb5d8fc137619e587d556043e06b0c5a0a2695a6e6010bc03eaeb5d9c089fa9b6165f7c0d2b37b834c484aa6357dafc6d5f8b59e8d04dd54f4faf8ffe2b8d90ec55662168368fa518f79c41558df8f5a192521261c118fb7f3c4fcadf1e5846cc6e4038ecce8da8aff0a7e925be3536e15bb928e25d6e7a47f8dfe35f37", 0x9}}}) (async) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) (async) open(0x0, 0x6a4c0, 0x40) (async) socket(0x6, 0x1, 0x4) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) 11m46.127608609s ago: executing program 32 (id=7246): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x8000) (async) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0x6, 0x4020009, 0x11000000df, 0xebe, r1, 0x8000) (async) unshare$auto(0x60000080) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="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") move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) (async) r3 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) rt_tgsigqueueinfo$auto(r3, r3, 0x208, &(0x7f0000000100)={@siginfo_0_0={0x3, 0xffff, 0x0, @_sigsys={&(0x7f0000000340)="ec74806b2476647892201c4d01266dbe7daeea4c50216dfa9bb7ac7a1af0699d5b33b0cd904da5b38dafd565d72e0a15979c507e71d5e19a9ee807300c87e310e68416d0126632feb19d5a63e6a57331396f8357c2ec0140ebeab267845b10feabcc4685663da350872a518b27d0f6eba650c6107877b146d81cb5d8fc137619e587d556043e06b0c5a0a2695a6e6010bc03eaeb5d9c089fa9b6165f7c0d2b37b834c484aa6357dafc6d5f8b59e8d04dd54f4faf8ffe2b8d90ec55662168368fa518f79c41558df8f5a192521261c118fb7f3c4fcadf1e5846cc6e4038ecce8da8aff0a7e925be3536e15bb928e25d6e7a47f8dfe35f37", 0x9}}}) (async) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) (async) open(0x0, 0x6a4c0, 0x40) (async) socket(0x6, 0x1, 0x4) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) 5m42.805963719s ago: executing program 1 (id=8014): pipe$auto(0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0xfffffffffffffffa, 0xff, 0x4001, 0x9b71, 0x2, 0x517) close_range$auto(0x0, 0x5, 0x0) r0 = pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, r0, 0x3ff, 0xadf) r1 = socket(0x11, 0x6, 0x797) sendfile$auto(0x1, r1, 0x0, 0x8fb5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, r1, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20048000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x5429, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc081) socket(0x15, 0x1, 0x8) socket(0xa, 0x1, 0x84) 5m42.501940557s ago: executing program 1 (id=8016): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/modalias\x00', 0x40000, 0x0) socket(0x26, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0xa, 0x3, 0x5) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) socket(0xf, 0x800, 0x7ffc) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x10001, 0x1d0, 0x4, 0x3, 0x4, "289102b368e09778a50d28390c751e73c03d4de84c2eba32b5786d616138e461e8026845acec9180aad8c25a8142ae55c2f1a8b3555e56c0f3543108"}) 5m41.939268135s ago: executing program 1 (id=8021): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x14, r4, 0x301, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) 5m41.657237176s ago: executing program 1 (id=8023): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) r2 = socket(0xa, 0x1, 0x100) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r2) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8000) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400404, 0x9, 0x9b72, 0x2, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) socket(0xa, 0x1, 0x100) modify_ldt$auto(0xc, 0x0, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) socket(0xa, 0x2, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) 5m38.487600049s ago: executing program 1 (id=8030): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 5m37.600641393s ago: executing program 1 (id=8033): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7fffffff, &(0x7f00000001c0)={0x4, 0x138a, 0x4, 0x6ad, 0x800, 0x8001, r0, [0x10, 0x7, 0x3], {0x2, 0x7, 0x10001, 0xfffffff8, 0x6, 0xfffffffe, 0x2, 0x2, 0x2}, {0xb8, 0x4, 0x4, 0xfffffffc, 0x5ae, 0xa, 0x0, 0x7, 0xfffffffffffffffa}}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000001b40)={0x17ec, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1004, 0x7d, 0x0, 0x1, [@generic="dec448e8e5e1fda619e7441a14e06b957c9409fdd791fc7ff459dd490d6fb7425a82bb5181aaa567215cbd5eb8d5577ab73d47985bd354be1a42ca362c6cfd689463a5403f17f30d9f7c22dfcb2726ef1053bc864b51b5c1267f7d8fb903d28d228977ebecabdea8179b00ad0c339d03b4509bfdeaf444c128807dd89b7343e3c69171f317f7da4c4a11dbb9727eb4fe2ba683bd04af7c83eb7a565a04c75221958b70ba6e5fa0fc9032c40991c3017a6416037d89f0766cbac6365d0062d6823bc4c72620d556bb5b945407405421af209d0854c61249fb8d837587aca19d4a5cc04d393b294f697c9ffd5d03d63199b215bc449feef7a742f34bfbf4f3d61db6f313a727372db94cb9a065401a4e075dd3689605491ac635a12b46b7d7847d86cdd102283958b33f2080e553c822101adfd61a1d70ec782effba75c5af2cf99c5180b4562d050061d6a3c6bbf317ddf2e607e19df91816334b06557b74e6df424f7ea8f5c59721480b92ff07e20dab45aad5d3bd7ea629516452329a28735e2563a33e9c45a264f0cb90fd70f34155cd0b7dd0d41b05d11355436b4fd5ac7518ea62dd3cd24b56f34da72fab443618d6f60cf51d026b0889c879ad352e90669ecee2661599bcc2c9c19c214ec0ce584c0a4ac709c424288a737af6e865513fe8979d5c0ffb78197acf38f480233c2e52bfebb6760821cb9b5b94c4424f40d96b535c4b8ced4512ace9cf9c15f292cdea3ab0e3a8c3c1add13dcb5910cb37fd596f029e202c4635fa8c41ad0e1be317d06b2aaedb10be0a0a91fcd968336c852844f28182099a9552b496ac7c8bccdf82d2a6e8e5c56de5555be55a45b5fff6a13bcfecc39b9f32fe78651a35e70a63734c4c5539f2448b7a25559f6fbf25672e01fc577e63e5c8850fc30a08f2a32a9c6dfcff11f103bca7ba02bd696d5cd6b8734bbde8c728a44e36340e9375c5bcc8d571ae2ef19372d571dc60327dd258a14ee2f9a0fcab82a48a7685e1d33144b739cbcd5b5a5ae5434799389492a495e9befd62bee3116e3a652cec759d647de56c55a10c8b7f6494d12a3dbbd344d1bac37a5a151705b1fe6065268743caa4f06fd1e53b035900d9e247cffeeb75ce91b261d0b9ff7e1d4125450bad327a589a61c3c8b16a28d4b86f13ee4fac663fd81da565d72a7a3baa08ee00b099cd1e9ae589916f79b0dc899daf8b9f52a882d29679ce20137fba9ef6c0267593bd5cca0ad2d436de61d4d329be1df2b9649031454e758f91a584acfb0ba86892cf4046051b1ac76adc13c7408488b934ec3f7c1c22522d16f164934a81beb1814a4fbdbf55e8b600de5cef548bb0837a54080b467d6773c513db7e6871e4423f2918037721a0774725fde7f6bd10ae543157a85a776812febe4bb1d444092cd6e772a0678fd27dc4b525c47dd17cc222127c674749917358e272b13b01d581f2ec1bc8c6b8985c811f8e7a770d9a5418aa6973d2d6e67ef8c622c176039690cc44c1d8dc796b94dd270991bc1c2e71fe7163ef37bed3c42984a2a4f16494128bdab8ffc3d31b6df9f615963ecd3150f0733972f630167eb58b5cc65839c57d312093bd827a2291e2c050f76a4fd1f1ac9016cbcca8f2017d135c6115d7cd38d5d134fc5bf329864e9cb015a8d573dcd417f88439869d2361002ec85eec011386136e12230508189afc46c079a5c673b078ec8b8cac18835532ddd4546fc1978ddec854589cb759b7508e01d308e0a368a7581900cea0035c0fab0caa00c503527fcdc4a45a895915ba6506b491ad7788aca0e5eb257899a568035bf88c65f187dedb51d9f6778207cbb7e48e9c3452544a8d6aaabf58940804c319f0fdee6d865d61a23e9f3140d9dd0a6a5aae982834622d80d53e384ea64b626fbea892cbd57b56cf44d9cb5f438e1874ce2e1f67575d957b791de93272aaf476fc6455751b9563a843db6c1ad8b5653f0e2837b0f300b2451e52332110ff02763d76fc036c042b788f95595c2951cccb750326799e15a952a2c1ca54018946b904a9860da9f3b1dd0ecbf617d43e89cc77e98b54bc08e6058bf1261b97549a3d819f1a59310c42f65d60e3f7e52a06069372617bfc1e0f0da3ce2b49ff3cfc890c7c707273a8ee5d341a950ae06fd7ec9032bafaef91fbeae7f787a04a7a4eb08772432fc1d86a603ad3db7978015857e6a90fe0468fea21cf40693c96e34a205672df747c6c4e048b4a36a0ba05ebbad601ac439fde05bc1aa6b130ff248fdeae64da6e10a6029510a7bcfc03cb10df403a6ab4de51e39e18d54d2441b6405476a3b0125473265b33117a6a5201256c8396b96d1f8408357f2a5a64e1fb76db43a4b904f4b5d88ebf89e710491990be926be7fb74cff46236635983e1ccf5be2f0915b25457146d25bd2fc44a1720858635fa7680e366a70d2549aba33104e2053d67bd7450c6697fad8308dce74c058c5290c6ea47d80e9f4f62600b418c1bde60aa364c311a6b01cd557ae5b051a55f8059458a6b2d27e3d23ef60b0f3735d89246400e5ea31fefef0f229c913ac7554de6f3a7ad63f60d535731ac55d6adc7a8419dbe0fe442be869a218c24e51e283615471bd4854ed32b4e92af651195ba9b04fec26da3aa16a4ffc7eb652b43705cdb631bb18cedba894161650726096ba62bf293b9a3bc948f5854eff99bcef1aaf6045ce1ddd11b8ca6826f161a1669720440ca802747d5b06b3341eb65d189dbcdee662235aecdf8d88d5cab884f672537bc76ca9f383c01c39d12f941c4ed4f716c10e9d38e8a0ff0a16e3e8d1ce9dbaa150ce38ba9837a4022600871120a3ded5abd2796e4bcb3cf9308de5d8a7b8955fccb16bf67a4f9ac8bb1d70d011f05da484bf683bc2ccc2156032c69554ee58d03383b493bf2d9ea123494dbaf1f64e60349f4632f11160ba67737cebb6670a717ffe9a4c057f04a3c5cb25c691f28233dbbce1c8710e9d0995d88adf19b98a989ef0a32ba6868362e028751a2c77595f490be578aa19e444a413916b2b5b38b9d3b8511c7c19602ba63be5f0cb27b8672817ddb73fdfdccee383a19f141d01e7371aae6691c512d60875ad0f11716b6a31ecf3c42ee87e16b58d0ca1435644ade9569b8465689f4dc586c8bc989d1d9150e5a68b70e89260553524eb7679d61c5e0374507a0057a43a394aa11b3a249c99915190ad4ddde211dd6e3b4b7c342e20f96b6556ea4c419ac999df0f66285c9ccbf79f6cbfd7d8d57a7963c0a34b72ea06063a87a5c906b6d24b1f08b495c0ee69fe357613c858d443976e1ec87215b530f5ee3dd941ee78ec43c5b0ef736925fd7f84310ba50557ee9ce3ac9c95e706ed6391e546664b549af2e0d72f4de33f41c32168da75f423e3abc2a340eb5a35234dd477ab0c0e1db7c016bff9ba6324b9e7c1e1b19c8ae0f3a6b26b4f318458166c099fa971e58131d58422857173a47f7f9b9946ae4dcc699ef8b8d1c157811c17a52e6ed4eccd083133b7010c7658f215772cf98eb5ae47f75f76fb5c46dcfb117fc4766de16feef213f625ea2bea7bd0860934687e959beaa1484b7e2134ac15defbb3f10200d82a76d9084b1a9054545844d473121c434e804152d1efc946bf8b5f88e9b8f87986c838c7ca1c81873eeeeb86bfeffaafb409bcc365e68f2724866d1a15fe595b54c811edae1df82e9f41a96ad2727c6ec4eb7e463f402a81f3f9c3cbc45022d8beaed3fa412aa66f19366ea76bc67e2b2057cf200f7176f3d5825ef77ba94d619e9dc8e1b11fe98b663ee5d85573718a93867dba7b2a61cef5fd40f665624616ca38b4fd831d4139eedd183ca317ce1c10ff3dad1e007447ab16122cb99e663173cb6002311a536684b1bf12b389005e635c9eefbae03eaa1e91909d1534f18438c2872f62745eaaa2514fa1455165018e0630f80d114698e2624b2c0a70f432ab0c22b3a5b01e386034b769daa69f1d897ddd2da624612bd8b9c0d42238a8e50fe71d6ef432c56fd23063e1e93efe2d650d421ee4181ff5e7a8ff332aea193550cf43e1500f87e0c7d1c43afc37cbc7969034560bdf176393f63be5bc6d4c063dc44196a2dc0c121150a9ab94a9daac3c7f522f7d3b30aca9a0ec27ae12a8c94a390c64e0edeb65294ba627404fecd4dfad663b076640ef69a41837c6ce5fb5504465f1239127e14336f8e5fbbd40d2fa66d54ad489fab4dbc4237e7807a2b0fce81e7b905d42477903f09810dd720204270c4b6c764d914b0c5ccb10c130c07523564952ef9a267c00432d18063898469401c8b3ba8acab431fac196d6834a85a08ba27bb190b6248bb8f969d6da832b63ddf40b26cc25dd9e939c4697bec051307ee9940f16869305b34f99d080a04476d269a5c12de6dfa6b6c1c3492de0415b232c4ade93f08be0ed67b1b08603e6990ab20284ab9dbfb395c54cfd1ff64e6fa87f709c236bbbd8daaf07c8b09a867f2713866c22cb9d60d993549d23616475471c3c0ec26f9b85279c0798c25cd2f6fc724b70150ffb8655cc15a9ab31ace19b04590f84e021031eeaaa332d14a0ce9a95315e131bdb06f2cd361e95ff81ce6116758ae913eb4a6b8f34f622d308cc081dfd074127d9c80b6c315e4f00afdd18bd6b55f1a3d020d4b23e925bc446f2edd173b4ae9013bcf6b88f6e1cf2d0fb9194d604e46997cc7e9dd954e29439c35da9b2f0093bcc46a86287c0185e4e9b760f0e5e9d50e79ca1471556f6222ce01039c9d2b935282392c8749b64b962cba644de047bd0382f47fc23385abbe67253304d81677652c71cf7d8a5e33100094ca07210bd1bc2671d606bdc1a99641b9d5e93d1c80c257cbd0ce7b0adb071a3ee2b565bcbf50c0152c2c242ba886ea6842b345bf4aa189ac8428620de131c16e84c71d350dce1bfc151f3e16131c1e13796e3606318d65cf8cb47f6495ae8e2653d713d70346c84a2977710bad27ed3fdde51a62792b4c77219a1ddbf7d0c1520e90bd86c6a737fef5bbc1e331ebe06082023ac356b47f858ab708e57ac18ace411629b95e1c71c92e265c0410759b646761ec0b9c02dcb3ae6958c15ef7c584eedf70547723fbcdec94009d22c855ae6d2755bffd85d4457c21846176b458329632963f925357b50bacead23ab5d648469ff58cf201232e0eec2a672d05c6224dee1ee379bf20bc076ceb3390ea4de0d57d74e469aaa660364081aac6bc9e2f5215dba685b01d8cc46dd6850e227441d83ec8432ababb2c3160bf022fbe391c2cef9c84c809af5f279f31c34b4ac26d8eac12d61108077850e5f03d7bfa17a50a83306dc2ef1b10bf083f880dfda1005fba994091d954627f724aa721f47b5f029dd1415c317ec6389b2642a8273f8877c6910e857f0d93bf4f5674feff0491a512fa89c667e56d302ee9da2f87ab342156f85a770f8c9e9d9010bcfc2d5cadccbf0f7d4a50a995a7fdcc85f2ebb74763bf5382d113a3b2910278f1a71f99e18422866ffd00931f69664641a6e5e3354ad27c7f40ce23c23e018eba00496ef095a6ee3b266ec80c0ca43b54abca3ba0bd7defb2a03e2aa7e4846e70177aa1aed1ba6649f2e275bad18bafe4cd94bea1ccf0416ff908ea4a140d23221b3bddd88eb9868647acae3bee65e66ac097e46c21050614eaf47a7eddb2fe65d34bdf8c74b0b8e392387ade7f0ea69ad4bcb3ec8f489fb12f1abaebdf3b131a8f273c83b5c476599051ee808ea49df22d0c5dbe13485d1be2e5de02ef9aa808746995c35094fc9fdda17b"]}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_IE_ASSOC_RESP={0x5d4, 0x80, "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"}, @NL80211_ATTR_FRAME={0x1f0, 0x33, "8ca2afd916c221d5d9e1ba9d24150212aff1fa5c254d74c6df27b5eaf44016184fb10f110b96af224efcfe08b83932c4ad6e110f013cac54b89db3fc7c262d63d83d6f342bd491a8c07932fe7c1ff686e15295c69a6b54c4683d8c1958859827dd072c3fdbdcbf4af5c846a248cd75391bec62f4a4f7cfbea4b85fd4abb9c2ca0c008b9b534c4ce91abbdf31205e1959349f8289b63293a8d7c744a1ab0476a38c00db92d8919f16247fabd48ce11506b24a321ca8614379da9de0d252d987fdb1002955cf4e53b9483b3d067526a4a6e00f3735a45e69173d8c8aebfd305583bc113adcbf5449efa9b9e256006aa14054dd0abf400e6cee73984457670000000000000000b7fcf6caa675130938daa6a61d05fb1856bc8ee28f7ab537ac9f4f37620f434ed5710e17947c4c8cc028c65491abaf4799611ff5d289377bb21911a2b07b1bcd562a3766243449f47dcb76f8d9ac081873e9981e561033d927f8770decb7c7ea6d880df2e5f3837558a9bbe712d9c87f0c0a2f83a60fab953c03baf76baf67fa0dc155760000000000000000000000000000d941914ad4bfcf513c81e8522eca671b9603dfbde127e60b8ac62ed36fdb16e580cf6d28071b122856cc8a0687f2a3bbd98a791e71f659927cdd9ef5e541e232ec14ab5ff37eacdc3a93dab3dcb8dea3fe571fda02"}]}, 0x17ec}, 0x1, 0x0, 0x0, 0x4085}, 0x4000800) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000380), r2) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x64}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfeec}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x1) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) write$auto(0x3, 0x0, 0xfdf3) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 5m21.679823136s ago: executing program 33 (id=8033): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7fffffff, &(0x7f00000001c0)={0x4, 0x138a, 0x4, 0x6ad, 0x800, 0x8001, r0, [0x10, 0x7, 0x3], {0x2, 0x7, 0x10001, 0xfffffff8, 0x6, 0xfffffffe, 0x2, 0x2, 0x2}, {0xb8, 0x4, 0x4, 0xfffffffc, 0x5ae, 0xa, 0x0, 0x7, 0xfffffffffffffffa}}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000001b40)={0x17ec, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1004, 0x7d, 0x0, 0x1, [@generic="dec448e8e5e1fda619e7441a14e06b957c9409fdd791fc7ff459dd490d6fb7425a82bb5181aaa567215cbd5eb8d5577ab73d47985bd354be1a42ca362c6cfd689463a5403f17f30d9f7c22dfcb2726ef1053bc864b51b5c1267f7d8fb903d28d228977ebecabdea8179b00ad0c339d03b4509bfdeaf444c128807dd89b7343e3c69171f317f7da4c4a11dbb9727eb4fe2ba683bd04af7c83eb7a565a04c75221958b70ba6e5fa0fc9032c40991c3017a6416037d89f0766cbac6365d0062d6823bc4c72620d556bb5b945407405421af209d0854c61249fb8d837587aca19d4a5cc04d393b294f697c9ffd5d03d63199b215bc449feef7a742f34bfbf4f3d61db6f313a727372db94cb9a065401a4e075dd3689605491ac635a12b46b7d7847d86cdd102283958b33f2080e553c822101adfd61a1d70ec782effba75c5af2cf99c5180b4562d050061d6a3c6bbf317ddf2e607e19df91816334b06557b74e6df424f7ea8f5c59721480b92ff07e20dab45aad5d3bd7ea629516452329a28735e2563a33e9c45a264f0cb90fd70f34155cd0b7dd0d41b05d11355436b4fd5ac7518ea62dd3cd24b56f34da72fab443618d6f60cf51d026b0889c879ad352e90669ecee2661599bcc2c9c19c214ec0ce584c0a4ac709c424288a737af6e865513fe8979d5c0ffb78197acf38f480233c2e52bfebb6760821cb9b5b94c4424f40d96b535c4b8ced4512ace9cf9c15f292cdea3ab0e3a8c3c1add13dcb5910cb37fd596f029e202c4635fa8c41ad0e1be317d06b2aaedb10be0a0a91fcd968336c852844f28182099a9552b496ac7c8bccdf82d2a6e8e5c56de5555be55a45b5fff6a13bcfecc39b9f32fe78651a35e70a63734c4c5539f2448b7a25559f6fbf25672e01fc577e63e5c8850fc30a08f2a32a9c6dfcff11f103bca7ba02bd696d5cd6b8734bbde8c728a44e36340e9375c5bcc8d571ae2ef19372d571dc60327dd258a14ee2f9a0fcab82a48a7685e1d33144b739cbcd5b5a5ae5434799389492a495e9befd62bee3116e3a652cec759d647de56c55a10c8b7f6494d12a3dbbd344d1bac37a5a151705b1fe6065268743caa4f06fd1e53b035900d9e247cffeeb75ce91b261d0b9ff7e1d4125450bad327a589a61c3c8b16a28d4b86f13ee4fac663fd81da565d72a7a3baa08ee00b099cd1e9ae589916f79b0dc899daf8b9f52a882d29679ce20137fba9ef6c0267593bd5cca0ad2d436de61d4d329be1df2b9649031454e758f91a584acfb0ba86892cf4046051b1ac76adc13c7408488b934ec3f7c1c22522d16f164934a81beb1814a4fbdbf55e8b600de5cef548bb0837a54080b467d6773c513db7e6871e4423f2918037721a0774725fde7f6bd10ae543157a85a776812febe4bb1d444092cd6e772a0678fd27dc4b525c47dd17cc222127c674749917358e272b13b01d581f2ec1bc8c6b8985c811f8e7a770d9a5418aa6973d2d6e67ef8c622c176039690cc44c1d8dc796b94dd270991bc1c2e71fe7163ef37bed3c42984a2a4f16494128bdab8ffc3d31b6df9f615963ecd3150f0733972f630167eb58b5cc65839c57d312093bd827a2291e2c050f76a4fd1f1ac9016cbcca8f2017d135c6115d7cd38d5d134fc5bf329864e9cb015a8d573dcd417f88439869d2361002ec85eec011386136e12230508189afc46c079a5c673b078ec8b8cac18835532ddd4546fc1978ddec854589cb759b7508e01d308e0a368a7581900cea0035c0fab0caa00c503527fcdc4a45a895915ba6506b491ad7788aca0e5eb257899a568035bf88c65f187dedb51d9f6778207cbb7e48e9c3452544a8d6aaabf58940804c319f0fdee6d865d61a23e9f3140d9dd0a6a5aae982834622d80d53e384ea64b626fbea892cbd57b56cf44d9cb5f438e1874ce2e1f67575d957b791de93272aaf476fc6455751b9563a843db6c1ad8b5653f0e2837b0f300b2451e52332110ff02763d76fc036c042b788f95595c2951cccb750326799e15a952a2c1ca54018946b904a9860da9f3b1dd0ecbf617d43e89cc77e98b54bc08e6058bf1261b97549a3d819f1a59310c42f65d60e3f7e52a06069372617bfc1e0f0da3ce2b49ff3cfc890c7c707273a8ee5d341a950ae06fd7ec9032bafaef91fbeae7f787a04a7a4eb08772432fc1d86a603ad3db7978015857e6a90fe0468fea21cf40693c96e34a205672df747c6c4e048b4a36a0ba05ebbad601ac439fde05bc1aa6b130ff248fdeae64da6e10a6029510a7bcfc03cb10df403a6ab4de51e39e18d54d2441b6405476a3b0125473265b33117a6a5201256c8396b96d1f8408357f2a5a64e1fb76db43a4b904f4b5d88ebf89e710491990be926be7fb74cff46236635983e1ccf5be2f0915b25457146d25bd2fc44a1720858635fa7680e366a70d2549aba33104e2053d67bd7450c6697fad8308dce74c058c5290c6ea47d80e9f4f62600b418c1bde60aa364c311a6b01cd557ae5b051a55f8059458a6b2d27e3d23ef60b0f3735d89246400e5ea31fefef0f229c913ac7554de6f3a7ad63f60d535731ac55d6adc7a8419dbe0fe442be869a218c24e51e283615471bd4854ed32b4e92af651195ba9b04fec26da3aa16a4ffc7eb652b43705cdb631bb18cedba894161650726096ba62bf293b9a3bc948f5854eff99bcef1aaf6045ce1ddd11b8ca6826f161a1669720440ca802747d5b06b3341eb65d189dbcdee662235aecdf8d88d5cab884f672537bc76ca9f383c01c39d12f941c4ed4f716c10e9d38e8a0ff0a16e3e8d1ce9dbaa150ce38ba9837a4022600871120a3ded5abd2796e4bcb3cf9308de5d8a7b8955fccb16bf67a4f9ac8bb1d70d011f05da484bf683bc2ccc2156032c69554ee58d03383b493bf2d9ea123494dbaf1f64e60349f4632f11160ba67737cebb6670a717ffe9a4c057f04a3c5cb25c691f28233dbbce1c8710e9d0995d88adf19b98a989ef0a32ba6868362e028751a2c77595f490be578aa19e444a413916b2b5b38b9d3b8511c7c19602ba63be5f0cb27b8672817ddb73fdfdccee383a19f141d01e7371aae6691c512d60875ad0f11716b6a31ecf3c42ee87e16b58d0ca1435644ade9569b8465689f4dc586c8bc989d1d9150e5a68b70e89260553524eb7679d61c5e0374507a0057a43a394aa11b3a249c99915190ad4ddde211dd6e3b4b7c342e20f96b6556ea4c419ac999df0f66285c9ccbf79f6cbfd7d8d57a7963c0a34b72ea06063a87a5c906b6d24b1f08b495c0ee69fe357613c858d443976e1ec87215b530f5ee3dd941ee78ec43c5b0ef736925fd7f84310ba50557ee9ce3ac9c95e706ed6391e546664b549af2e0d72f4de33f41c32168da75f423e3abc2a340eb5a35234dd477ab0c0e1db7c016bff9ba6324b9e7c1e1b19c8ae0f3a6b26b4f318458166c099fa971e58131d58422857173a47f7f9b9946ae4dcc699ef8b8d1c157811c17a52e6ed4eccd083133b7010c7658f215772cf98eb5ae47f75f76fb5c46dcfb117fc4766de16feef213f625ea2bea7bd0860934687e959beaa1484b7e2134ac15defbb3f10200d82a76d9084b1a9054545844d473121c434e804152d1efc946bf8b5f88e9b8f87986c838c7ca1c81873eeeeb86bfeffaafb409bcc365e68f2724866d1a15fe595b54c811edae1df82e9f41a96ad2727c6ec4eb7e463f402a81f3f9c3cbc45022d8beaed3fa412aa66f19366ea76bc67e2b2057cf200f7176f3d5825ef77ba94d619e9dc8e1b11fe98b663ee5d85573718a93867dba7b2a61cef5fd40f665624616ca38b4fd831d4139eedd183ca317ce1c10ff3dad1e007447ab16122cb99e663173cb6002311a536684b1bf12b389005e635c9eefbae03eaa1e91909d1534f18438c2872f62745eaaa2514fa1455165018e0630f80d114698e2624b2c0a70f432ab0c22b3a5b01e386034b769daa69f1d897ddd2da624612bd8b9c0d42238a8e50fe71d6ef432c56fd23063e1e93efe2d650d421ee4181ff5e7a8ff332aea193550cf43e1500f87e0c7d1c43afc37cbc7969034560bdf176393f63be5bc6d4c063dc44196a2dc0c121150a9ab94a9daac3c7f522f7d3b30aca9a0ec27ae12a8c94a390c64e0edeb65294ba627404fecd4dfad663b076640ef69a41837c6ce5fb5504465f1239127e14336f8e5fbbd40d2fa66d54ad489fab4dbc4237e7807a2b0fce81e7b905d42477903f09810dd720204270c4b6c764d914b0c5ccb10c130c07523564952ef9a267c00432d18063898469401c8b3ba8acab431fac196d6834a85a08ba27bb190b6248bb8f969d6da832b63ddf40b26cc25dd9e939c4697bec051307ee9940f16869305b34f99d080a04476d269a5c12de6dfa6b6c1c3492de0415b232c4ade93f08be0ed67b1b08603e6990ab20284ab9dbfb395c54cfd1ff64e6fa87f709c236bbbd8daaf07c8b09a867f2713866c22cb9d60d993549d23616475471c3c0ec26f9b85279c0798c25cd2f6fc724b70150ffb8655cc15a9ab31ace19b04590f84e021031eeaaa332d14a0ce9a95315e131bdb06f2cd361e95ff81ce6116758ae913eb4a6b8f34f622d308cc081dfd074127d9c80b6c315e4f00afdd18bd6b55f1a3d020d4b23e925bc446f2edd173b4ae9013bcf6b88f6e1cf2d0fb9194d604e46997cc7e9dd954e29439c35da9b2f0093bcc46a86287c0185e4e9b760f0e5e9d50e79ca1471556f6222ce01039c9d2b935282392c8749b64b962cba644de047bd0382f47fc23385abbe67253304d81677652c71cf7d8a5e33100094ca07210bd1bc2671d606bdc1a99641b9d5e93d1c80c257cbd0ce7b0adb071a3ee2b565bcbf50c0152c2c242ba886ea6842b345bf4aa189ac8428620de131c16e84c71d350dce1bfc151f3e16131c1e13796e3606318d65cf8cb47f6495ae8e2653d713d70346c84a2977710bad27ed3fdde51a62792b4c77219a1ddbf7d0c1520e90bd86c6a737fef5bbc1e331ebe06082023ac356b47f858ab708e57ac18ace411629b95e1c71c92e265c0410759b646761ec0b9c02dcb3ae6958c15ef7c584eedf70547723fbcdec94009d22c855ae6d2755bffd85d4457c21846176b458329632963f925357b50bacead23ab5d648469ff58cf201232e0eec2a672d05c6224dee1ee379bf20bc076ceb3390ea4de0d57d74e469aaa660364081aac6bc9e2f5215dba685b01d8cc46dd6850e227441d83ec8432ababb2c3160bf022fbe391c2cef9c84c809af5f279f31c34b4ac26d8eac12d61108077850e5f03d7bfa17a50a83306dc2ef1b10bf083f880dfda1005fba994091d954627f724aa721f47b5f029dd1415c317ec6389b2642a8273f8877c6910e857f0d93bf4f5674feff0491a512fa89c667e56d302ee9da2f87ab342156f85a770f8c9e9d9010bcfc2d5cadccbf0f7d4a50a995a7fdcc85f2ebb74763bf5382d113a3b2910278f1a71f99e18422866ffd00931f69664641a6e5e3354ad27c7f40ce23c23e018eba00496ef095a6ee3b266ec80c0ca43b54abca3ba0bd7defb2a03e2aa7e4846e70177aa1aed1ba6649f2e275bad18bafe4cd94bea1ccf0416ff908ea4a140d23221b3bddd88eb9868647acae3bee65e66ac097e46c21050614eaf47a7eddb2fe65d34bdf8c74b0b8e392387ade7f0ea69ad4bcb3ec8f489fb12f1abaebdf3b131a8f273c83b5c476599051ee808ea49df22d0c5dbe13485d1be2e5de02ef9aa808746995c35094fc9fdda17b"]}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_IE_ASSOC_RESP={0x5d4, 0x80, "ff0b352dfba14059b5160e9cbde3ea6c3992e62288a997c7ca30c5d9c355b43ec6d721461a2a0912986e52e5aadc88801be3bfe5dd247c861dd6724bc10331b3244c738cdb9cb29852e99a059f309badd55182b28a3e0222777664659a4b704e2a802dd166d59c0c173ce42190396d280ed5267a63cec628f2db56ed269825c754d3622fd3c250bef5f7ffe05ed7f2832378844578876bdbbd2819cd136f87b9315b3fe880d40ab081ebc8e58f4f212cb409e995218e3898b01e01b96c5672ec06026bef25614da77e59b5c0213d046815c27e08a0134c7d20e14da6cdb167298aaeb0cd2525924506a2205ef35336d72470626b0da7e51acc07a43be164a9c11d013049dc1b323cf67a61389f7d29be0db9a575bed5f5a2d92760b6beb25f4a6fd763287eba275eff65570881ea953db68d6930cb99379cd1e8c4c7e4a9e11a262ede48ab440ae9b74bc04c7a48ae65d57b44ce03eb285035e3f95701cd8c497a9461fffddbe798c97542ea588603b7b1e9d4b0a27a794e9d19b4d6c9b0d24eac305c96776461e691582297930b7c5b112750e270a2e612fcf785b9e1a745e219c967c06ce75077e861646d78deab2876ae4af188beffb295055939fd09f0cffd6f7032870403f36a3bcee586011414b9f743dae82e4c97bc8c7dd7db5d1addf7ce4804504dc2876c86c7b7676495d34a8fb5c4b81a9f1022b8a186313f32c34cd42845fe4621c399daae3e0f9e18955166a1e179f6d61e1b318e7cc7c7b9ac73d130ff0510c476317ec553e4ca0f1d5db8357f0b64992a4d9a0e5f7ceb7f598d4a89080d6d155950cf4e2e5800bd5f1a02470b5fd77a7c0b67de3fd538f6ae710aa9406f4445de67447fb73aec39c5db61b7eaa995a2b2c98f4e05400cc5ca8fd32feedaab8d12bcf0ff5fb25230ed326b1639baf3ea7fbc03a3e39ac5bfa1a885b32c7f223a38fc97fc24e97c551b339b7cf2fe6e0ac7ee4dc7ffb9e82cd5a8a480b1c724ca16ee7a27ea726a32ffa423e9d3014e2cf5cfc029f47eacc869e81c26179d38ec428ebb6cdbafcee13d557b14c18bbb297fb08653db27ef1dc72f8a773599c3cb21fceb9e30d5536be7cc356a4ad337dfd2e29a931a95828b1f98bd55c643c69e5477d0f1b0bacb30ce6ef2d9d112518de4587f2492044bf39acc0e865ba49da99fcc6ef801b2b3c2a3c9f0b597b0f387e161f40b309301c2da604b4c2327911370f76d9f7dbcfff603671780681565e61f05c7fa3e699936a99d3f8935a5d0f3a2172097d0efd5497b57f803fb8811485ffb81b7e309936c561b10b3c27dc5dda1ca7c501e2c492a951ced53b717a873701bf5eefef175c6cfb0949b79cde507d43d30371f85bda0ddbf7d54222c4173682fa350f19a45b9de2f01b961386334bd4ef158bcfffa08da9138fe96b9834be83914754d83f4b0fa07bd3b80a8dc3311e015f4cbb9d3179476797b00f49875612755249b39c62269573c68f14ed72a490eb07f1a1ba9974416db973df4905d5ae0f4a8cd0dd5a8279cb7f62a1ed4d9fa6b20378cf69a1e3e2981d23e7643aecb586df52a41e5760e78f236b4ddd2b720bb0f321bceac971341022dc51afdaf2fa185ea664575ac6ad597168678d9dc189dca1ade0879b79462d3be949a3efa413c267f13bb6e2fd7c6e00111699d6b982e4aaf10e3c6f28759631c1399f842e808a8bc255622f79c9fc52dc3fc5c86dab49bac29ea2b3ba230677f440f7097d0638b35772b4b882fb1ef6b2eceb95430582e020343cb33ec4a463a745422e2f1c1f1d5f381bf9bb05f45657eb9f3bc478035395fcad810e49684af3aefb2a4215ea714adb4e6a9c038f62b4325bfae64db4e4097066cc5c78c411069407bcdfa0a37a5fdc6e4137f603df23576e1d2ec154dd0579bee12fea3b07882e547538a80befc5f7b14614dc8a1b76b014165aab6f69eca7dadcd4343e23d0aebbca49aba4f2ac79d59cc2fd096c8718bb85127009335a43276441b5caf6828d806be3597c15d1f2afc1384a2e82e623243dec7af342732c77d12f8c77c78b105f07ecc8c397a4312a5a153d2a58743a4ad683956a82678244d265f"}, @NL80211_ATTR_FRAME={0x1f0, 0x33, "8ca2afd916c221d5d9e1ba9d24150212aff1fa5c254d74c6df27b5eaf44016184fb10f110b96af224efcfe08b83932c4ad6e110f013cac54b89db3fc7c262d63d83d6f342bd491a8c07932fe7c1ff686e15295c69a6b54c4683d8c1958859827dd072c3fdbdcbf4af5c846a248cd75391bec62f4a4f7cfbea4b85fd4abb9c2ca0c008b9b534c4ce91abbdf31205e1959349f8289b63293a8d7c744a1ab0476a38c00db92d8919f16247fabd48ce11506b24a321ca8614379da9de0d252d987fdb1002955cf4e53b9483b3d067526a4a6e00f3735a45e69173d8c8aebfd305583bc113adcbf5449efa9b9e256006aa14054dd0abf400e6cee73984457670000000000000000b7fcf6caa675130938daa6a61d05fb1856bc8ee28f7ab537ac9f4f37620f434ed5710e17947c4c8cc028c65491abaf4799611ff5d289377bb21911a2b07b1bcd562a3766243449f47dcb76f8d9ac081873e9981e561033d927f8770decb7c7ea6d880df2e5f3837558a9bbe712d9c87f0c0a2f83a60fab953c03baf76baf67fa0dc155760000000000000000000000000000d941914ad4bfcf513c81e8522eca671b9603dfbde127e60b8ac62ed36fdb16e580cf6d28071b122856cc8a0687f2a3bbd98a791e71f659927cdd9ef5e541e232ec14ab5ff37eacdc3a93dab3dcb8dea3fe571fda02"}]}, 0x17ec}, 0x1, 0x0, 0x0, 0x4085}, 0x4000800) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000380), r2) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x64}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfeec}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_FD={0x8, 0x17, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x1) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) write$auto(0x3, 0x0, 0xfdf3) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 21.154915561s ago: executing program 5 (id=9479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xa4}, @L2TP_ATTR_FD={0x8}]}, 0x3c}}, 0x4000000) 20.962348933s ago: executing program 5 (id=9480): syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="99e7da", 0x1000}, 0x3) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x200802, 0x0) ioctl$auto_BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000006c0)={0xfffffffffffff53e, 0x1}) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x200800, 0x0) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$auto_BLKTRACESETUP2(r3, 0xc0481273, &(0x7f0000000280)={"b3efc16b86b24b821e90a2e1a74c38c88843237b4095eea24d4d39023c954a56", 0x5, 0x4000, 0xfffff7dc, 0x6, 0x3, 0xffffffffffffffff}) read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0x1, 0x0) write$auto(r4, 0x0, 0x3) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r5, 0x8100451b, r5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x8d) 19.585400766s ago: executing program 5 (id=9483): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x14000000000000, 0xe983, 0x100000001, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204282, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r1, 0xdb, 0x50, 0x0, 0x9) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x25, 0xd, 0x0, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000580)="445cc19989fb9c017005441c9085b524c0cc9b1a9f4edddfe162b01f9fe8f5adae095ec393caa008004c6a64", 0x2c) 18.665956019s ago: executing program 5 (id=9486): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sg0\x00', 0x200, 0x0) ioctl$auto_SCSI_IOCTL_SYNC(r0, 0x4, &(0x7f0000000240)="bf15d2f045edeb7b7f33a44cd52773dee1d78fcb3727c3a38ce7") r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x4) keyctl$auto(0x9, 0xffffffffffffffff, 0x0, 0x0, 0x9) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$auto(r3, 0x11, 0x67, 0x0, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x40140, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r4, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)=@task_fd_query={0x0, r1, 0x2, 0x80000001, 0x7fffffff, 0x3fbfc, 0xffffffffffffffff, 0x6, 0x3}, 0x122) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r6, 0x0, 0x1f40) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd060a000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008801}, 0x4048014) unshare$auto(0x20070dc) unshare$auto(0x40000080) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) 17.686660107s ago: executing program 5 (id=9491): pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) mmap$auto(0x1000000, 0x9, 0xffb, 0x8000000008011, r0, 0x80000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) r1 = socket(0x22, 0x2, 0x24) getsockopt$auto(r1, 0x3, 0x1, 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/sockstat6\x00', 0x141100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000200)=""/92, 0x5c) r3 = socket(0x1e, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r4) sendmsg$auto_TIPC_NL_NET_SET(r4, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) setsockopt$auto(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3880, 0x70) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r5, 0x0, 0x29, &(0x7f0000000080)='\xef', 0x8000) socket(0x10, 0x80802, 0x5) socket(0x3a, 0x1, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2010000efb, 0x8000000008011, r6, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0xd8643, 0x0) write$auto(r7, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 16.984503881s ago: executing program 5 (id=9493): mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x94) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r1) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_PEERNAME(r1, 0x8, 0x1c, &(0x7f0000000180)='nbd\x00', &(0x7f00000001c0)=0xc) read$auto_proc_fail_nth_operations_base(r2, &(0x7f0000000040)=""/221, 0xdd) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xebe, 0x401, 0x8000) unshare$auto(0x60000080) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="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") move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo$auto(r3, r3, 0x208, &(0x7f0000000100)={@siginfo_0_0={0x3, 0xffff, 0x8, @_sigsys={&(0x7f0000000340)="ec74806b2476647892201c4d01266dbe7daeea4c50216dfa9bb7ac7a1af0699d5b33b0cd904da5b38dafd565d72e0a15979c507e71d5e19a9ee807300c87e310e68416d0126632feb19d5a63e6a57331396f8357c2ec0140ebeab267845b10feabcc4685663da350872a518b27d0f6eba650c6107877b146d81cb5d8fc137619e587d556043e06b0c5a0a2695a6e6010bc03eaeb5d9c089fa9b6165f7c0d2b37b834c484aa6357dafc6d5f8b59e8d04dd54f4faf8ffe2b8d90ec55662168368fa518f79c41558df8f5a192521261c118fb7f3c4fcadf1e5846cc6e4038ecce8da8aff0a7e925be3536e15bb928e25d6e7a47f8dfe35f37", 0x9}}}) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) open(0x0, 0x2a4c0, 0x40) socket(0x6, 0x1, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 10.908257799s ago: executing program 4 (id=9516): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcd) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000008c0)=""/61, 0x3d) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/add_random\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x1206c2, 0x0) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r1, 0x8000) msgsnd$auto(0x4, &(0x7f0000000280)={0x7, 0x1e}, 0x200, 0x8943) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) readv$auto(r2, &(0x7f0000000200)={&(0x7f0000000180)="26e09a79a2606dd6c68d5d13c2727bd4693163e5e51182e7978be066d4efe2c44211c350b4b2cd65707835cbab27ee9e7cb928ee2ed1c826c0665a1689d893ed32dbee37e8d7a037bdba2c882d74b52b5db1a1a9e320baa49e7dee3c46e7d1b259a36fbe5521a89c972e2f112d4fe42f4b6a380d7615b1237736da48", 0x2}, 0x800) preadv2$auto(r6, &(0x7f00000000c0)={0x0, 0x80000000}, 0xd, 0xffffffffffffffff, 0x4, 0x40) r7 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x6, 0x1, 0x0) r8 = prctl$auto_PR_SET_MM_START_DATA(0x1fffe0, 0x3, 0xffffffffffffffff, 0x10000, 0x100000001) ioctl$auto_VHOST_SET_VRING_KICK2(r8, 0x4008af20, &(0x7f0000000240)={0x11e, r7}) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r9, 0x5425, 0x0) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r10, 0x5408, 0x0) 9.714311478s ago: executing program 4 (id=9518): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() (async) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) (async) mmap$auto(0x1, 0x40000000, 0xdb, 0xeb1, r1, 0x1002) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3b, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x80010001, 0x2000000000003, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x80000000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon11\x00', 0x2, 0x0) ioctl$auto_MON_IOCX_GET(r2, 0x40189206, 0x0) (async) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) lsm_set_self_attr$auto(0x7, &(0x7f0000000040)={0x20009, 0x6454, 0x2, 0xa5, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb6f9f33d5342ed76cc5453f8e8634458e6bf54825f7be456def0174640630a658450b159e0d65748bb3538e"}, 0x6, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rB\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) 9.062084251s ago: executing program 4 (id=9520): ioctl$auto_USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7e1b, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) write$auto(r0, &(0x7f0000000000)='{(\x00', 0x10) read$auto(r0, 0x0, 0x2) 8.774138043s ago: executing program 4 (id=9521): socket(0x2, 0x3, 0x1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x40048) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x60040c0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket(0x11, 0x3, 0x9) setitimer$auto(0x100, &(0x7f0000000080)={{0x2, 0x7}, {0x0, 0x8000000018}}, 0x0) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x0, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0x6) socket(0x29, 0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x505842, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0xffffff89) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0xffffffffffffffff, 0xda) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/228, 0xe4) openat$dir(0xffffffffffffff9c, 0x0, 0x5e9900, 0x182) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r4, &(0x7f0000000ec0)='9', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x47fffffff, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa2", 0x1000}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8942, 0x0) 7.198016324s ago: executing program 4 (id=9525): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) gettid() open(0x0, 0x22240, 0x19) r0 = socket(0x11, 0x80003, 0x300) socket(0xa, 0x1, 0x84) socket(0x2, 0xa, 0x100073) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/cmdline\x00', 0x40000, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x34, 0xeffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x888, r1, 0x10}, 0x22) 7.018384331s ago: executing program 4 (id=9526): move_mount$auto(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x67) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2e6e42, 0x31) write$auto_cpu_latency_qos_fops_qos(r0, &(0x7f00000000c0)="093e8a114421df686fc8d31eddd64b21d515bf3bb43f5b990b9351688a0ed8731af229d3a6612d19176d924982c56f594546b98cbc4380c0ecb338f900e85915d0aed6093023cdb5ab0606b493c4c757b0414e9aa06c3c39976251262748cca3757944943e41221f00d37af047c5a8471112c33adb87a266a78362fdcd2a7be493842d77b7dc276c07acae36fe3eb46f23ac7942e9796b3b3cfffe9e98395204aeaf3ec7db5719d81c511e7775ac217ba6d449419d2667aa547ec7ffc07a48019732de670e4eb7ec38d75130a003a83e76447ffba83f884eb967a8c9", 0xdc) seccomp$auto(0xffff, 0x3, &(0x7f00000001c0)="5cc1abc1a89789f192b3e9aaa33c9dc686cdae2419ae04cff0636ac2817e278d077e715b684ec06f9ce489a346ab2f173ce9f9ccd237a3d9a294d1967e1594b94a1811d9de2a17f8533cef76ef8d191a78872df52eb8e12a02bcdbeaa023a0cad44ff0fc15c4c889b429aa30273d9ab892339be04aa9870fa3241e9ae650311ac22cc8") close_range$auto(0x0, 0xfffffffffffff000, 0x0) 6.464267892s ago: executing program 0 (id=9530): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)="54db169278b043fce3818704f3b93c37059aa034be7df2658a1420de6de07ace7d39fcd84cdf8da4dd7bbff92fe235c85e9f52576fb4241c4f89520a9de08a7bf2ce4df76e7828db15f12b33fa634339d954377fc46838dd7e992a5e78f7bf63c21598004a493853ae520ee4a438988d80f710fc") unshare$auto(0x40000080) ioctl$auto_rfkill_fops_core(r1, 0x3, &(0x7f00000000c0)="93eaa52e758a9cb03312b024e2fc695fda0d19eea411735852b6ff28b1fb44e1125b8c95599be549526b") socketcall$auto_SYS_SETSOCKOPT(0xe, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) 5.537141263s ago: executing program 0 (id=9532): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram10\x00', 0x749202, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008013, r0, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x133d01, 0x0) getpid() r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x10000005, 0x7fff) mlockall$auto(0x5) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x1b6, 0x15) madvise$auto(0x0, 0x3, 0x67) rt_sigprocmask$auto(0x7fffffff, &(0x7f0000000040)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2c, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x7f, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0xffffffffffffffff, 0x8, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) epoll_create$auto(0x4) io_uring_enter$auto(r3, 0xa84, 0x80000001, 0xa, 0x0, 0xd8e) 4.44103962s ago: executing program 0 (id=9534): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x101) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x1fe, 0x8, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000000)={r0, 0x40}) setsockopt$auto(r2, 0x125, 0x9, 0x0, 0x5c9) 3.488492129s ago: executing program 0 (id=9536): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x3) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0xe1, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = socket(0xa, 0x80000, 0x0) (async) socket(0xa, 0x800, 0x19b5) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) (async) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) (async) socket(0xa, 0x2, 0x73) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x2f) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0dcf9705de5bb0c483772e4ab79caf7ce6580caff606c63942f11c5451b0445e9ac24e5b5fab9cc13e2bee", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES64=r0, @ANYRES16=r2, @ANYRES64=r3], 0x1ac}}, 0x40000) r4 = socket(0x30, 0x2, 0x3) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000180), 0x501200, 0x0) read$auto(r6, &(0x7f00000001c0)='/dev/cpu_dma_latency\x00', 0x86c1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x488c0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x20602, 0x0) (async) close_range$auto(r0, 0xfffffffffffff001, 0x6) 1.690530774s ago: executing program 0 (id=9541): syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x200800, 0x0) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x2, 0x4, 0x3, 0x2) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f00000001c0)={"b3efc16b86b24b821e90a2e1a74c38c88843237b4095eea24d4d39023c954a56", 0x3, 0x4000, 0xfffff7dc, 0x39, 0x3, 0xffffffffffffffff}) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0xd) read$auto(r2, 0x0, 0x1ff) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/netdevsim1/arp_accept\x00', 0x201, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x2c42, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) write$auto(r3, 0x0, 0x3) ioctl$auto(0xffffffffffffffff, 0x8100451b, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000011, 0x8d) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0xe) 1.64674242s ago: executing program 34 (id=9493): mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x94) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r1) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_PEERNAME(r1, 0x8, 0x1c, &(0x7f0000000180)='nbd\x00', &(0x7f00000001c0)=0xc) read$auto_proc_fail_nth_operations_base(r2, &(0x7f0000000040)=""/221, 0xdd) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xebe, 0x401, 0x8000) unshare$auto(0x60000080) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="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") move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo$auto(r3, r3, 0x208, &(0x7f0000000100)={@siginfo_0_0={0x3, 0xffff, 0x8, @_sigsys={&(0x7f0000000340)="ec74806b2476647892201c4d01266dbe7daeea4c50216dfa9bb7ac7a1af0699d5b33b0cd904da5b38dafd565d72e0a15979c507e71d5e19a9ee807300c87e310e68416d0126632feb19d5a63e6a57331396f8357c2ec0140ebeab267845b10feabcc4685663da350872a518b27d0f6eba650c6107877b146d81cb5d8fc137619e587d556043e06b0c5a0a2695a6e6010bc03eaeb5d9c089fa9b6165f7c0d2b37b834c484aa6357dafc6d5f8b59e8d04dd54f4faf8ffe2b8d90ec55662168368fa518f79c41558df8f5a192521261c118fb7f3c4fcadf1e5846cc6e4038ecce8da8aff0a7e925be3536e15bb928e25d6e7a47f8dfe35f37", 0x9}}}) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) open(0x0, 0x2a4c0, 0x40) socket(0x6, 0x1, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 1.495694804s ago: executing program 2 (id=9543): symlink$auto(&(0x7f0000000140)='./file0/file0\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r0, 0x4138ae84, &(0x7f0000000040)={0x2, 0x179}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000140)='\t', 0x1) umount2$auto(&(0x7f0000000240)='/proc/\x00\x18s/fs/bin\xe6mt[\xe9\xdf\xe2%\f\x16#9\x00\x00\x00\x00\x00\x00\xbe\xe6]\x01\x05\xac\xb4\x896\xd3\xe1|\x82\xa1\x7fB\x18|T\x9ev\x03\x00EM*\t\x91\xbbb\xc9X\xee<\xc4T\xf5dRw\xb6*A\x97\xf6\xf8\xeb\a\x95>B\xfb\xd3\x12YAm\x15\xad\x80n\xbe\x01.\x86*\x9d\x1e\xbdBp\xe6C\x06i\xd5\xd7\"Z0V\xa4\x80SCzA\x81|\x1c\xec\xc8\xdb\xa0C3\xcf1S\'<\x1d\xee\xb4v\x8aB\xd6\x87d\x86\xda+\xd5C\x11\x01\x93\xc3\xc1h\xde\xb7\xb10f5\xa4\xeaCG\x8bR\\\x1bM\x94:\xa0\xb2\b]\x05\xe1$\xfaG\xe9~/\xde\xccA\x018\xbc\xd2\'FvN\xdf\xed\xa9*\x17n\x04R3', 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0xc0800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000004c0)=""/206, 0xce) 1.311347532s ago: executing program 2 (id=9544): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x48900, 0x0) ioctl$auto_MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 1.168999513s ago: executing program 2 (id=9545): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/amidi2\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x2, 0x1, 0x106) (async) r1 = socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async, rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) (rerun: 32) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r1) (async) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000340)={{0x6d8, 0x0, 0xffffffffffffffff, 0x83, 0x4, 0x1, 0x7}, 0x9, 0x40000, 0x7, 0x7f02, @raw=0x2, @raw=0x7, 0x4, 0x0, &(0x7f0000000180)="69882907473a877bf1d8562952519432108cc15ad5181552f56c82f1752d772990c67b8cf6aa3b0c92696c31da82257dd89271652b8e6fea6ce95bc71c25db58ffadddcc9d1597a47049bedefb3d86904311c50ae73fe78e0e90ff55be79503afc4a5cc306345e53f60f9084c2bb705c9868c62dc010b8d1a93177be7164673cec53c763caa38ea5f9d15e25a6e2bacbb0", &(0x7f0000000240)="a85625969d7839d2db5f6369879a2f1ac0cc9defd1889ccd39c6cdee1484c244c75a8b1fc5880aa78778d731b21b1c36a89584eeabc66d21b9d4f5e816c2ca328160d5274a0b3a2b1ab22edc361161ae52ef967ed7cd91db154c92c7f8cb905421a345e88d07100893e3939b435c09ca8bd6c5dc466ff7a2f15b1c41852ecc4dabfa47bc9df6b4c21d7aabca0d13f06f78303673f97e5cb1d8c1ccc83b23326950bec46ed4595dada909c77330eeda1bc791830d007c2438b47f59be3c47524f74cb831cffb474acaa"}) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)={0x1340, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x126e, 0x5, 0x0, 0x1, [@generic="1e46", @nested={0x1055, 0xa6, 0x0, 0x1, [@generic="c12bd37fab850f660a81296628e1b683586b9a9ea15c643e538dad680eeebb0a563e377df54752f3d5b53fb4f1c0bd8803ea21d79f02a1b7dafccb19f76a684006a65fb94195af719bc6d23b8e2542546e", @generic="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"]}, @nested={0xe3, 0x17, 0x0, 0x1, [@nested={0x4, 0x55}, @nested={0x4, 0x105}, @typed={0x8, 0x12c, 0x0, 0x0, @uid=r4}, @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="fd0fa9b3305c6844e8da18be350e0769060972366a4d5c3c0ddc4c07e202032a3d7bc8c14f7f66b51992097c36f3cd1eec6558d1b81e71bf136c1c31cdf54aa5571199b880bef28acc740318bb8680cf69ad8f88e8c0ad9fd5bd6ef714e03d9b6444c7b7603b490a6c9d872d96ea725435808e3cc99f61a582d06a71908d13717ad90a5683a961afa8903e6be17e1a9318ead870a0818da7afea4a22d5d72ca3c5e775e6dc817cc933a636d28ec05a24a31c873da75e3138659e3d"]}, @nested={0x12a, 0xa4, 0x0, 0x1, [@generic="c50782a141a7619cc5a4d88f10108adf08fc1e0bd4cdda7341714211ea27c5705a97ae53ff0dd80b9dfffc955d2dfe067d799cc2a1b9263072ecb22e38b649e75bdddb6c694d667cda8eb282e51c7a4b7eeac37df2d6ef643a539029b43cbbba19a5f799a89a8739a7bc8d05f7f82b57146476db5b2c7d65ae8f326fabbb5ec9e03702539e9b67a21e7b3b2f4e23353b30d8", @generic="789a244df94c28e98b2984d1c1b76ee29535a2ec5e43f514bb4d662f84bb8110cd6f536a9b2d09e83fb2ea2b3e2e7de4f917a6441c519775336bd506c56d9de01c23915fe877b240c3cc20f3b85ac5d76a", @generic="bad169928bfdd8b73363e8a530de47a2efd63b674ac74d8f602f5eed2943ee4d52e2957db9df50b3684d6a2e49b86a", @typed={0xc, 0x11f, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x6e}, @nested={0x4, 0xf5}]}]}, @TIPC_NLA_PUBL={0xbc, 0x3, 0x0, 0x1, [@nested={0xb6, 0xdc, 0x0, 0x1, [@generic="381aa14a41c3ab1326e45526b2d4f796120f6ed17e6efb2819b9ac4e66fc8f0a2ee42913995c0f34e4a9e8aa783b1ccfdbc0b23a950aaef4ea649f58f2178b45fa1194be51ae451bd27ae37f17293bf4703edf36455aead18f9b568936c6d83166d4c5e2ac5d5ef7f16cc4f90fa6c4ca9d2251da6e7625400c890cec1d555ce3b82089d3d5f693cf26020fdc64ea3683908c463d078dacab7920961688fd31c334d3f5f52a1b32ea6a6a04dcd52f132b6ea1"]}]}]}, 0x1340}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000044) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) ioctl$auto(r2, 0x541c, r5) 1.075866285s ago: executing program 0 (id=9546): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x6, 0xc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_hda_intel/parameters/bdl_pos_adj\x00', 0x80102, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c082) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 930.500463ms ago: executing program 2 (id=9547): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) readahead$auto(0xffffffffffffffff, 0x1000000004, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x0, 0x0) ioctl$auto(r0, 0xc0945662, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x10, 0x7, 0x28000) r1 = prctl$auto_SECCOMP_MODE_STRICT(0x800002, 0x1, 0x0, 0x0, 0x80000003) fcntl$auto_F_DUPFD(r1, 0x0, r1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/1:15/power/runtime_suspended_time\x00', 0x129c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event\x00', 0xb0301, 0x0) mmap$auto(0x10, 0x8, 0x8, 0x80000000ebb, 0x401, 0x45) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000840)="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", 0x8a7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) 219.621395ms ago: executing program 2 (id=9548): r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000, 0xffffffffffffffff}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r1, 0x8000) ioctl$auto_NS_GET_PID_FROM_PIDNS(r1, 0x8004b706, &(0x7f0000000400)=0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000480), r2) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010001000000ffdbdf2507"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x40) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r2, &(0x7f0000001c00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f00000017c0)={0x3e8, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x8}, @NL802154_ATTR_SEC_LEVEL={0x195, 0x2d, 0x0, 0x1, [@generic="787896a92887f059ea43ec5f0ec68a306a0052ef0f382e5d842ed343f5bd997ce3846f5edf63963d30ad7a4e5723283a54a502bf9bd2e6a607", @nested={0x14c, 0xb3, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x4, 0x105}, @generic="72f5458efbee1e508de9c232b4da14946cf489a53d21", @typed={0x8, 0x57, 0x0, 0x0, @u32=0x6}, @generic="59feeebefa845b6f6fe0dc739e01e79f50cea701a8f71d9ee0ae3f68c8dd9d2c8f0cffd7cda5e7799c61f0ab8d6181213bab475e4e4a6e58fc03ac2ae79d9d3a1c577da5862119666be844dcb68f5b1ce0c3505f0a09c52ca794986573bfea4cc34ecb7db57876a611b9e5c92f", @typed={0x8, 0x23, 0x0, 0x0, @fd}, @nested={0x4, 0x18}, @nested={0x4, 0x3c}, @typed={0xc, 0x104, 0x0, 0x0, @u64=0x62c6dbf8}, @generic="b602bd79d3afed19d7c8edbc67d980dcf58c1810494188f58beea5807f91486c66019f3f823d0b40144ab20f42dc63d9db6e3e51871e638d072d5c3618d8f4b0436be55c19db7386b3462ee8500f0042de2fba1a573d0fd2a9ba7078a73bc1ddc9c49a88c7faf38a903ba04c509b2789d5782aa05eeea201bfa737b91845281ad0bed2b32e0cebd13b8dd7fa8c1664f967c52cf0ee4935ba71"]}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x75}]}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3000000}, @NL802154_ATTR_SEC_DEVICE={0xc1, 0x2e, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @fd=r2}, @nested={0x97, 0x33, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@multicast1}, @generic="63dd1fdf661fccea3185dd91f9e22d525028c89e2783811aa3e6d790fd5ddb53da70a4b0fa608e5ea636076bc8b3be5483ed31b90ac003102a262fdb284f2c7459789a7247632cca7e7780e4a391604b2219d095bc791fa14b49f2570b2100029e51108a64a5449dcb8d00fe45ed0ae8c7f1dd7552b90aa34dfc49a142ba9ee8cbd39e", @typed={0x8, 0xc0, 0x0, 0x0, @u32=0xfffffb7e}]}, @generic="8515a26c66809f093788ca7ff05b0a5782e552a706865109ad1d1c3d26"]}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x8}, @NL802154_ATTR_WPAN_PHY_CAPS={0x140, 0x18, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @ipv4=@empty}, @generic="57b0d6ef6c2ce65d1f10ab9438bd9d3222aeac869980f4c7251d2e83d89a68f4a6f1a663d825028e6da24c87fab7325df06f295448aeab07c99f6eafe0694a49a8d3793cff016d2d400671fba21baef44eb2e9e70e80f0d105bbf14b166e8f14d1303eb542b6857b89fdfd1a7b64af5eb17c3f8946c57a68", @nested={0xba, 0x146, 0x0, 0x1, [@nested={0x4, 0x147}, @generic="15ce88f3d0dcb069478325e2b8bbaae2cf3a55e1560550f80eb0012e8f59780307ac0eb267b6f2e5582720bfce22fb1bf5feb49d8364b3fef37b67c27e39f1a222bd002eb411f35df9e2c7641bcd47a5e4371a413183f3183d7fc78b09ecc97c393bd659ca91bcf83a28b9fc31ff16bc00d3c0916648ed7631fbb276e40f40c766a1e6906116b517aa21e5d2d513d45c7b69f810938ce03a59e9b0f1ed14e5b4ad600c83a1511075d1ed35502804", @typed={0x4, 0x9f}]}]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xbc}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x9}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$auto_TIPC_NL_NODE_GET(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1c4, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x5a, 0x6, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private2}, @generic="f94c0e64769f8c35b6cc54737a457547a8c3e506629e621f4a5b2655036389d289e8cb9191bc6873aab195b2ce9df36ebe03b762d2e7da3135a3", @typed={0x8, 0x96, 0x0, 0x0, @u32=0x272}]}, @TIPC_NLA_SOCK={0x3a, 0x2, 0x0, 0x1, [@generic="94ef1480f40ec77aa3080d31b35fe31ddac3ab7fee4a42d084e3de22552dbb339cb8fd1f5051dfac6049b005a4221279529ab0d8efb0"]}, @TIPC_NLA_MEDIA={0x116, 0x5, 0x0, 0x1, [@typed={0xe0, 0xaf, 0x0, 0x0, @binary="366c4beaf59edd45c4bab13b6a52ea21a4c1e373a103e0707b10d6d1ca8457747e4cc18efa15bdcf189c020de3bd25c9e53dd9e967a52fc9d16f79ebb95200bf42f7c9943357f18b2997122549ac894f460b00bc4c80c7197ec4a348f61c977fffd71c6c30ffaef4740e8262f0fa6cf1dd044cfc91bc7fe5c827a6b210b6ff49d8d53b3b290d355401567cd2fa04edf5a1068228070e52299de62bfb7a0e470e14b78eec6e86348b62535a86622582771516f051ec7a06d237ded79fbcaf4e5e3238cf10ef13b13760259a1fb3ef41a5482f043cf87b49898b67ba76"}, @generic="3330f84303c57fdb12ff4df639377cb58e28002af63aaeec56c1d50e3141ffe7afc29f0a62df8e30939c4f53e4abae090449"]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x48801) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) readv$auto(r2, &(0x7f0000001740)={&(0x7f0000000740)="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"}, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r8 = pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r8, 0x5761, 0x4) mmap$auto(0x0, 0xfffffffffffffffd, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r9 = socket(0x22, 0x2, 0x3) mmap$auto(0x100000000000000, 0x2009, 0x9, 0x10000000eb1, r9, 0x3) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xffffffff, 0xa, 0x0) setuid$auto(0xe) mq_unlink$auto(0x0) getsockopt$auto_SO_PEERPIDFD(r5, 0x5, 0x4d, &(0x7f00000000c0)='\x00', &(0x7f0000000100)) 0s ago: executing program 2 (id=9549): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xd90, 0x400, 0x9}]}) (async) mmap$auto(0xb71f, 0x4, 0x4, 0x16, 0xffffffffffffffff, 0x6) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) (async) preadv$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xfffb, 0x6, 0x2, 0xffffff3b, 0x9, "ce7009002ce100", '\x00', "0201ccb7", "f29cf5b2", ["00000f0008b330ac007abfc1", "000059a7ffffffffffff00", "0800000000000000000000ec", "00deff1000"]}) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000300)='/d\x00'/12, 0x100000a3d9) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x28, 0x801, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) open(0x0, 0x14d27e, 0x72) kernel console output (not intermixed with test programs): acvtap: left promiscuous mode [ 1480.236375][T21109] veth1_vlan: left promiscuous mode [ 1480.241841][T21109] veth0_vlan: left promiscuous mode [ 1482.366445][ T30] audit: type=1800 audit(4294967370.970:51): pid=28019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7667" name="features" dev="configfs" ino=108216 res=0 errno=0 [ 1482.675903][T27888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1482.728513][T27888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1482.770841][T27888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1482.781714][ T30] audit: type=1800 audit(4294967371.390:52): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7669" name="features" dev="configfs" ino=109606 res=0 errno=0 [ 1482.819437][T27888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1483.197189][T27888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.297388][T27888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.327510][T21118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.334794][T21118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.471707][T21118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.479004][T21118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.073815][T27888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.455177][T27888] veth0_vlan: entered promiscuous mode [ 1485.634850][T27888] veth1_vlan: entered promiscuous mode [ 1485.978416][T27888] veth0_macvtap: entered promiscuous mode [ 1486.045966][T27888] veth1_macvtap: entered promiscuous mode [ 1486.121312][T27888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.163112][T27888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.255404][T21107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.292498][T21107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.311927][T21107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.396880][T21107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.572271][T21107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.608232][T21107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.666625][T21103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.684885][T21103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.244681][T28125] FAULT_INJECTION: forcing a failure. [ 1488.244681][T28125] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.244750][T28125] CPU: 0 UID: 0 PID: 28125 Comm: syz.2.7680 Tainted: G U syzkaller #0 PREEMPT(full) [ 1488.244795][T28125] Tainted: [U]=USER [ 1488.244804][T28125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1488.244822][T28125] Call Trace: [ 1488.244831][T28125] [ 1488.244839][T28125] dump_stack_lvl+0x16c/0x1f0 [ 1488.244879][T28125] should_fail_ex+0x512/0x640 [ 1488.244900][T28125] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1488.244927][T28125] should_failslab+0xc2/0x120 [ 1488.244954][T28125] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1488.244979][T28125] ? security_file_alloc+0x34/0x2b0 [ 1488.245013][T28125] security_file_alloc+0x34/0x2b0 [ 1488.245042][T28125] init_file+0x93/0x4c0 [ 1488.245071][T28125] alloc_empty_file+0x73/0x1e0 [ 1488.245103][T28125] dentry_open+0x46/0xd0 [ 1488.245134][T28125] pidfs_alloc_file+0x18f/0x290 [ 1488.245170][T28125] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1488.245209][T28125] ? _raw_spin_unlock_irq+0x23/0x50 [ 1488.245252][T28125] pidfd_prepare+0x129/0x200 [ 1488.245301][T28125] __x64_sys_pidfd_open+0x105/0x1a0 [ 1488.245325][T28125] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 1488.245351][T28125] ? rcu_is_watching+0x12/0xc0 [ 1488.245382][T28125] do_syscall_64+0xcd/0x4b0 [ 1488.245419][T28125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.245443][T28125] RIP: 0033:0x7fbd7d78eec9 [ 1488.245461][T28125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1488.245484][T28125] RSP: 002b:00007fbd7e59a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1488.245506][T28125] RAX: ffffffffffffffda RBX: 00007fbd7d9e6360 RCX: 00007fbd7d78eec9 [ 1488.245521][T28125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1488.245536][T28125] RBP: 00007fbd7d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1488.245551][T28125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.245566][T28125] R13: 00007fbd7d9e63f8 R14: 00007fbd7d9e6360 R15: 00007ffce4dbf898 [ 1488.245595][T28125] [ 1488.695792][T28133] netlink: 424 bytes leftover after parsing attributes in process `syz.0.7686'. [ 1488.943742][T28135] netlink: 338 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1489.394158][T28140] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1490.257712][T28153] size and base must be multiples of 4 kiB [ 1490.272121][T28153] CPU: 1 UID: 0 PID: 28153 Comm: syz.0.7690 Tainted: G U syzkaller #0 PREEMPT(full) [ 1490.272172][T28153] Tainted: [U]=USER [ 1490.272185][T28153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1490.272205][T28153] Call Trace: [ 1490.272216][T28153] [ 1490.272229][T28153] dump_stack_lvl+0x16c/0x1f0 [ 1490.272286][T28153] mtrr_add+0xdf/0x110 [ 1490.272341][T28153] mtrr_ioctl+0x7ef/0xcf0 [ 1490.272410][T28153] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1490.272471][T28153] ? find_held_lock+0x2b/0x80 [ 1490.272519][T28153] ? __fget_files+0x20e/0x3c0 [ 1490.272558][T28153] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1490.272607][T28153] proc_reg_unlocked_ioctl+0x229/0x320 [ 1490.272649][T28153] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1490.272694][T28153] __x64_sys_ioctl+0x18e/0x210 [ 1490.272744][T28153] do_syscall_64+0xcd/0x4b0 [ 1490.272798][T28153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.272832][T28153] RIP: 0033:0x7f4c6a58eec9 [ 1490.272859][T28153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.272893][T28153] RSP: 002b:00007f4c6b4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.272925][T28153] RAX: ffffffffffffffda RBX: 00007f4c6a7e5fa0 RCX: 00007f4c6a58eec9 [ 1490.272947][T28153] RDX: 0000000000000005 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 1490.272966][T28153] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1490.272986][T28153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.273006][T28153] R13: 00007f4c6a7e6038 R14: 00007f4c6a7e5fa0 R15: 00007ffe6dbb02c8 [ 1490.273049][T28153] [ 1490.279118][T28153] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1492.313487][T24516] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1492.340177][T24516] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1492.353571][T24516] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1492.361941][T24516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1492.380038][T24516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1493.410365][T28186] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1493.651914][T21109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.252680][T21109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.493475][ T5853] Bluetooth: hci3: command tx timeout [ 1494.566405][T21109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.642970][T28195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7706'. [ 1494.819885][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.826335][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.873027][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7706'. [ 1494.918924][T21109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.067365][T28195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7706'. [ 1495.564905][T28174] chnl_net:caif_netlink_parms(): no params data found [ 1495.721825][T28209] FAULT_INJECTION: forcing a failure. [ 1495.721825][T28209] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.754345][T28209] CPU: 1 UID: 0 PID: 28209 Comm: syz.0.7700 Tainted: G U syzkaller #0 PREEMPT(full) [ 1495.754399][T28209] Tainted: [U]=USER [ 1495.754411][T28209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1495.754432][T28209] Call Trace: [ 1495.754444][T28209] [ 1495.754457][T28209] dump_stack_lvl+0x16c/0x1f0 [ 1495.754514][T28209] should_fail_ex+0x512/0x640 [ 1495.754545][T28209] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1495.754586][T28209] should_failslab+0xc2/0x120 [ 1495.754627][T28209] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1495.754664][T28209] ? alloc_empty_file+0x55/0x1e0 [ 1495.754709][T28209] ? pidfs_stash_dentry+0xaf/0xe0 [ 1495.754766][T28209] alloc_empty_file+0x55/0x1e0 [ 1495.754812][T28209] dentry_open+0x46/0xd0 [ 1495.754858][T28209] pidfs_alloc_file+0x18f/0x290 [ 1495.754925][T28209] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1495.754984][T28209] ? _raw_spin_unlock_irq+0x23/0x50 [ 1495.755034][T28209] pidfd_prepare+0x129/0x200 [ 1495.755086][T28209] __x64_sys_pidfd_open+0x105/0x1a0 [ 1495.755124][T28209] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 1495.755164][T28209] ? rcu_is_watching+0x12/0xc0 [ 1495.755209][T28209] do_syscall_64+0xcd/0x4b0 [ 1495.755261][T28209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.755297][T28209] RIP: 0033:0x7f4c6a58eec9 [ 1495.755323][T28209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.755357][T28209] RSP: 002b:00007f4c6b457038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1495.755389][T28209] RAX: ffffffffffffffda RBX: 00007f4c6a7e6270 RCX: 00007f4c6a58eec9 [ 1495.755411][T28209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1495.755431][T28209] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1495.755452][T28209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1495.755472][T28209] R13: 00007f4c6a7e6308 R14: 00007f4c6a7e6270 R15: 00007ffe6dbb02c8 [ 1495.755516][T28209] [ 1496.582686][ T5853] Bluetooth: hci3: command tx timeout [ 1496.856468][T28174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.867683][T28174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.893590][T28174] bridge_slave_0: entered allmulticast mode [ 1496.913220][T28174] bridge_slave_0: entered promiscuous mode [ 1496.962581][T21109] bridge_slave_1: left allmulticast mode [ 1496.968895][T21109] bridge_slave_1: left promiscuous mode [ 1496.994445][T21109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.016738][T21109] bridge_slave_0: left allmulticast mode [ 1497.032864][T21109] bridge_slave_0: left promiscuous mode [ 1497.038715][T21109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.659694][ T5853] Bluetooth: hci3: command tx timeout [ 1498.705924][T21109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.752980][T21109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.787142][T21109] bond0 (unregistering): Released all slaves [ 1498.876650][T28174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.892414][T28174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.899724][T28174] bridge_slave_1: entered allmulticast mode [ 1498.924731][T28174] bridge_slave_1: entered promiscuous mode [ 1499.206571][T21109] tipc: Left network mode [ 1499.230785][T28174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.249713][T28174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.711622][T28174] team0: Port device team_slave_0 added [ 1499.754270][T28174] team0: Port device team_slave_1 added [ 1500.071775][T28242] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1500.157194][T28174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.182333][T28174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.242845][T28174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.301568][T28174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.308681][T28174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.358745][T28174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.718676][T28174] hsr_slave_0: entered promiscuous mode [ 1500.736864][ T5853] Bluetooth: hci3: command tx timeout [ 1500.743376][T28174] hsr_slave_1: entered promiscuous mode [ 1500.749893][T28174] debugfs: 'hsr0' already exists in 'hsr' [ 1500.772078][T28174] Cannot create hsr debugfs directory [ 1501.560841][T21109] hsr_slave_0: left promiscuous mode [ 1501.576839][T21109] hsr_slave_1: left promiscuous mode [ 1501.615644][T21109] veth1_macvtap: left promiscuous mode [ 1501.621203][T21109] veth0_macvtap: left promiscuous mode [ 1501.652506][T21109] veth1_vlan: left promiscuous mode [ 1501.663825][T21109] veth0_vlan: left promiscuous mode [ 1503.527154][T21109] team0 (unregistering): Port device team_slave_1 removed [ 1505.037744][T28174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1505.262707][T28174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1505.352733][T28174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1505.587369][T28174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1507.504924][T28174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.568904][T28174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.684140][T26550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.691345][T26550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.715014][T26550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.722262][T26550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.816667][T28369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7724'. [ 1508.923481][T28174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.421691][T28174] veth0_vlan: entered promiscuous mode [ 1509.471015][T28174] veth1_vlan: entered promiscuous mode [ 1509.527403][ T5853] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1510.227021][T28174] veth0_macvtap: entered promiscuous mode [ 1510.508649][T28174] veth1_macvtap: entered promiscuous mode [ 1510.718746][T28174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.798722][T28174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.853272][T21109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.884186][T21109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.936436][T21109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.974450][T21109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.222549][T21103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.263733][T21103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.403498][T21103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.458413][T21103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.423881][ T30] audit: type=1800 audit(4294967402.020:53): pid=28457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=111547 res=0 errno=0 [ 1515.508444][T28483] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1515.758223][T24516] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1515.811700][T28483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7741'. [ 1515.919259][T28483] bond0: entered allmulticast mode [ 1515.924768][T28483] bond_slave_0: entered allmulticast mode [ 1515.939336][T28483] bond_slave_1: entered allmulticast mode [ 1516.892298][T28501] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1520.853131][ T30] audit: type=1800 audit(4294967409.460:54): pid=28542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7754" name="features" dev="configfs" ino=112740 res=0 errno=0 [ 1524.219835][ T5853] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1525.795213][T28582] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1526.664948][T28593] XFS: Clearing xfsstats [ 1527.384629][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7770'. [ 1529.135316][ T30] audit: type=1800 audit(4294967417.740:55): pid=28617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7774" name="features" dev="configfs" ino=112909 res=0 errno=0 [ 1529.669674][T28624] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1530.514400][T28626] XFS: Clearing xfsstats [ 1531.538686][T28658] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1532.223372][T28666] netlink: 'syz.1.7788': attribute type 2 has an invalid length. [ 1535.288552][T28757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7800'. [ 1537.910453][T28795] XFS: Clearing xfsstats [ 1538.467514][T28810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7812'. [ 1542.396524][T28866] can: request_module (can-proto-0) failed. [ 1543.266504][T28874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7826'. [ 1544.313073][T28879] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1545.515517][T28897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7831'. [ 1545.679214][T28896] netlink: 'syz.0.7832': attribute type 1 has an invalid length. [ 1548.048479][T28914] XFS: Clearing xfsstats [ 1548.313822][T28922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1548.426713][T28920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1549.694858][T28950] can: request_module (can-proto-0) failed. [ 1551.150300][T28968] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1551.960531][T28981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1551.982825][T28981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1555.351204][T29016] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1555.634330][T29031] XFS: Clearing xfsstats [ 1555.938171][T29048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7866'. [ 1556.017073][T29050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7866'. [ 1556.246061][T29052] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 1556.279152][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.285711][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.875044][T29069] syz.2.7871 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1558.210793][T29072] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1559.460223][ T30] audit: type=1800 audit(4294967448.040:56): pid=29099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7878" name="features" dev="configfs" ino=115095 res=0 errno=0 [ 1560.324440][T29104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1560.365288][T29104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1561.825553][T29121] vhci_hcd: invalid port number 21 [ 1562.750712][T29125] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1562.924251][T29137] vhci_hcd: invalid port number 16 [ 1562.931595][T29137] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1563.024760][ T30] audit: type=1800 audit(4294967451.620:57): pid=29140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7888" name="features" dev="configfs" ino=115177 res=0 errno=0 [ 1563.567706][T29149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7891'. [ 1563.614562][T29149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7891'. [ 1566.370343][ T30] audit: type=1800 audit(4294967454.970:58): pid=29177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7899" name="features" dev="configfs" ino=115282 res=0 errno=0 [ 1566.521542][T29181] FAULT_INJECTION: forcing a failure. [ 1566.521542][T29181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1566.539063][T29181] CPU: 1 UID: 0 PID: 29181 Comm: syz.0.7900 Tainted: G U syzkaller #0 PREEMPT(full) [ 1566.539121][T29181] Tainted: [U]=USER [ 1566.539133][T29181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1566.539153][T29181] Call Trace: [ 1566.539164][T29181] [ 1566.539177][T29181] dump_stack_lvl+0x16c/0x1f0 [ 1566.539245][T29181] should_fail_ex+0x512/0x640 [ 1566.539283][T29181] should_fail_alloc_page+0xe7/0x130 [ 1566.539324][T29181] prepare_alloc_pages+0x3c2/0x610 [ 1566.539375][T29181] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1566.539421][T29181] ? find_held_lock+0x2b/0x80 [ 1566.539462][T29181] ? is_bpf_text_address+0x8a/0x1a0 [ 1566.539511][T29181] ? bpf_ksym_find+0x124/0x1c0 [ 1566.539551][T29181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1566.539587][T29181] ? is_bpf_text_address+0x94/0x1a0 [ 1566.539638][T29181] ? kernel_text_address+0x8d/0x100 [ 1566.539673][T29181] ? __kernel_text_address+0xd/0x40 [ 1566.539707][T29181] ? unwind_get_return_address+0x59/0xa0 [ 1566.539767][T29181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1566.539808][T29181] ? policy_nodemask+0xea/0x4e0 [ 1566.539852][T29181] alloc_pages_mpol+0x1fb/0x550 [ 1566.539894][T29181] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1566.539933][T29181] ? kasan_save_stack+0x33/0x60 [ 1566.539965][T29181] ? kasan_save_track+0x14/0x30 [ 1566.539996][T29181] ? __kasan_kmalloc+0xaa/0xb0 [ 1566.540026][T29181] ? __get_vm_area_node+0x101/0x330 [ 1566.540080][T29181] alloc_pages_noprof+0x131/0x390 [ 1566.540121][T29181] get_free_pages_noprof+0x10/0xb0 [ 1566.540162][T29181] kasan_populate_vmalloc+0x9f/0x2d0 [ 1566.540248][T29181] ? alloc_vmap_area+0x8b5/0x29c0 [ 1566.540302][T29181] alloc_vmap_area+0x960/0x29c0 [ 1566.540366][T29181] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1566.540422][T29181] __get_vm_area_node+0x1ca/0x330 [ 1566.540479][T29181] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1566.540531][T29181] ? n_tty_open+0x1a/0x170 [ 1566.540568][T29181] ? look_up_lock_class+0x6b/0x150 [ 1566.540628][T29181] ? n_tty_open+0x1a/0x170 [ 1566.540676][T29181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1566.540726][T29181] ? console_unlock+0x184/0x210 [ 1566.540764][T29181] ? __pfx_console_unlock+0x10/0x10 [ 1566.540806][T29181] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1566.540851][T29181] ? n_tty_open+0x1a/0x170 [ 1566.540886][T29181] __vmalloc_node_noprof+0xad/0xf0 [ 1566.540935][T29181] ? n_tty_open+0x1a/0x170 [ 1566.540972][T29181] ? __pfx_n_tty_open+0x10/0x10 [ 1566.541011][T29181] n_tty_open+0x1a/0x170 [ 1566.541047][T29181] ? __pfx_n_tty_open+0x10/0x10 [ 1566.541083][T29181] tty_ldisc_open+0x9c/0x120 [ 1566.541132][T29181] tty_ldisc_setup+0x40/0x100 [ 1566.541183][T29181] tty_init_dev.part.0+0x1ec/0x500 [ 1566.541228][T29181] tty_open+0xa4f/0xf90 [ 1566.541270][T29181] ? __pfx_tty_open+0x10/0x10 [ 1566.541305][T29181] ? chrdev_open+0x10b/0x6a0 [ 1566.541350][T29181] ? __pfx_tty_open+0x10/0x10 [ 1566.541383][T29181] chrdev_open+0x231/0x6a0 [ 1566.541420][T29181] ? __pfx_apparmor_file_open+0x10/0x10 [ 1566.541454][T29181] ? __pfx_chrdev_open+0x10/0x10 [ 1566.541495][T29181] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1566.541539][T29181] do_dentry_open+0x97f/0x1530 [ 1566.541577][T29181] ? __pfx_chrdev_open+0x10/0x10 [ 1566.541625][T29181] vfs_open+0x82/0x3f0 [ 1566.541677][T29181] path_openat+0x1de4/0x2cb0 [ 1566.541727][T29181] ? __pfx_path_openat+0x10/0x10 [ 1566.541774][T29181] do_filp_open+0x20b/0x470 [ 1566.541809][T29181] ? __pfx_do_filp_open+0x10/0x10 [ 1566.541877][T29181] ? alloc_fd+0x471/0x7d0 [ 1566.541944][T29181] do_sys_openat2+0x11b/0x1d0 [ 1566.541995][T29181] ? __pfx_do_sys_openat2+0x10/0x10 [ 1566.542061][T29181] __x64_sys_openat+0x174/0x210 [ 1566.542110][T29181] ? __pfx___x64_sys_openat+0x10/0x10 [ 1566.542177][T29181] do_syscall_64+0xcd/0x4b0 [ 1566.542248][T29181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.542284][T29181] RIP: 0033:0x7f4c6a58eec9 [ 1566.542312][T29181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1566.542347][T29181] RSP: 002b:00007f4c6b4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1566.542380][T29181] RAX: ffffffffffffffda RBX: 00007f4c6a7e5fa0 RCX: 00007f4c6a58eec9 [ 1566.542403][T29181] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1566.542425][T29181] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1566.542446][T29181] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1566.542468][T29181] R13: 00007f4c6a7e6038 R14: 00007f4c6a7e5fa0 R15: 00007ffe6dbb02c8 [ 1566.542514][T29181] [ 1567.047500][T29181] syz.0.7900: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1567.063102][T29181] CPU: 1 UID: 0 PID: 29181 Comm: syz.0.7900 Tainted: G U syzkaller #0 PREEMPT(full) [ 1567.063154][T29181] Tainted: [U]=USER [ 1567.063167][T29181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1567.063199][T29181] Call Trace: [ 1567.063211][T29181] [ 1567.063224][T29181] dump_stack_lvl+0x16c/0x1f0 [ 1567.063282][T29181] warn_alloc+0x248/0x3a0 [ 1567.063320][T29181] ? __pfx_warn_alloc+0x10/0x10 [ 1567.063358][T29181] ? kfree+0x2b4/0x4d0 [ 1567.063417][T29181] ? __get_vm_area_node+0x208/0x330 [ 1567.063471][T29181] __vmalloc_node_range_noprof+0xb2c/0x14b0 [ 1567.063520][T29181] ? look_up_lock_class+0x6b/0x150 [ 1567.063580][T29181] ? n_tty_open+0x1a/0x170 [ 1567.063629][T29181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1567.063679][T29181] ? console_unlock+0x184/0x210 [ 1567.063718][T29181] ? __pfx_console_unlock+0x10/0x10 [ 1567.063761][T29181] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1567.063807][T29181] ? n_tty_open+0x1a/0x170 [ 1567.063842][T29181] __vmalloc_node_noprof+0xad/0xf0 [ 1567.063891][T29181] ? n_tty_open+0x1a/0x170 [ 1567.063925][T29181] ? __pfx_n_tty_open+0x10/0x10 [ 1567.063964][T29181] n_tty_open+0x1a/0x170 [ 1567.064000][T29181] ? __pfx_n_tty_open+0x10/0x10 [ 1567.064036][T29181] tty_ldisc_open+0x9c/0x120 [ 1567.064091][T29181] tty_ldisc_setup+0x40/0x100 [ 1567.064143][T29181] tty_init_dev.part.0+0x1ec/0x500 [ 1567.064187][T29181] tty_open+0xa4f/0xf90 [ 1567.064230][T29181] ? __pfx_tty_open+0x10/0x10 [ 1567.064265][T29181] ? chrdev_open+0x10b/0x6a0 [ 1567.064309][T29181] ? __pfx_tty_open+0x10/0x10 [ 1567.064343][T29181] chrdev_open+0x231/0x6a0 [ 1567.064379][T29181] ? __pfx_apparmor_file_open+0x10/0x10 [ 1567.064412][T29181] ? __pfx_chrdev_open+0x10/0x10 [ 1567.064453][T29181] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1567.064497][T29181] do_dentry_open+0x97f/0x1530 [ 1567.064534][T29181] ? __pfx_chrdev_open+0x10/0x10 [ 1567.064581][T29181] vfs_open+0x82/0x3f0 [ 1567.064631][T29181] path_openat+0x1de4/0x2cb0 [ 1567.064679][T29181] ? __pfx_path_openat+0x10/0x10 [ 1567.064725][T29181] do_filp_open+0x20b/0x470 [ 1567.064760][T29181] ? __pfx_do_filp_open+0x10/0x10 [ 1567.064826][T29181] ? alloc_fd+0x471/0x7d0 [ 1567.064892][T29181] do_sys_openat2+0x11b/0x1d0 [ 1567.064939][T29181] ? __pfx_do_sys_openat2+0x10/0x10 [ 1567.065004][T29181] __x64_sys_openat+0x174/0x210 [ 1567.065052][T29181] ? __pfx___x64_sys_openat+0x10/0x10 [ 1567.065118][T29181] do_syscall_64+0xcd/0x4b0 [ 1567.065172][T29181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.065213][T29181] RIP: 0033:0x7f4c6a58eec9 [ 1567.065241][T29181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1567.065277][T29181] RSP: 002b:00007f4c6b4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1567.065309][T29181] RAX: ffffffffffffffda RBX: 00007f4c6a7e5fa0 RCX: 00007f4c6a58eec9 [ 1567.065332][T29181] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1567.065353][T29181] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1567.065374][T29181] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1567.065395][T29181] R13: 00007f4c6a7e6038 R14: 00007f4c6a7e5fa0 R15: 00007ffe6dbb02c8 [ 1567.065440][T29181] [ 1567.065453][T29181] Mem-Info: [ 1567.402219][T29181] active_anon:32609 inactive_anon:21195 isolated_anon:0 [ 1567.402219][T29181] active_file:7110 inactive_file:94254 isolated_file:0 [ 1567.402219][T29181] unevictable:19185 dirty:561 writeback:0 [ 1567.402219][T29181] slab_reclaimable:12306 slab_unreclaimable:94383 [ 1567.402219][T29181] mapped:38814 shmem:40615 pagetables:1372 [ 1567.402219][T29181] sec_pagetables:0 bounce:0 [ 1567.402219][T29181] kernel_misc_reclaimable:0 [ 1567.402219][T29181] free:1199248 free_pcp:22354 free_cma:0 [ 1567.449502][T29181] Node 0 active_anon:130636kB inactive_anon:84180kB active_file:28440kB inactive_file:376880kB unevictable:75204kB isolated(anon):0kB isolated(file):0kB mapped:159656kB dirty:2240kB writeback:0kB shmem:160524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11584kB pagetables:5340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1567.485048][T29181] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1567.515813][T29181] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1567.546214][T29181] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 1567.552185][T29181] Node 0 DMA32 free:896344kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:129628kB inactive_anon:82980kB active_file:28440kB inactive_file:376800kB unevictable:75204kB writepending:2240kB present:3129332kB managed:2547908kB mlocked:0kB bounce:0kB free_pcp:59144kB local_pcp:22240kB free_cma:0kB [ 1567.586487][T29181] lowmem_reserve[]: 0 0 0 0 0 [ 1567.591299][T29181] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1567.699397][T29181] lowmem_reserve[]: 0 0 0 0 0 [ 1567.704424][T29181] Node 1 Normal free:3885288kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32720kB local_pcp:6412kB free_cma:0kB [ 1567.819963][T29181] lowmem_reserve[]: 0 0 0 0 0 [ 1567.883926][T29181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1567.982527][T29181] Node 0 DMA32: 9574*4kB (UME) 2937*8kB (UME) 1265*16kB (UME) 1024*32kB (ME) 1203*64kB (UME) 756*128kB (ME) 401*256kB (UM) 104*512kB (UME) 47*1024kB (UME) 9*2048kB (M) 95*4096kB (M) = 900144kB [ 1568.005594][T29197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7903'. [ 1568.040554][T29197] netlink: 25 bytes leftover after parsing attributes in process `syz.4.7903'. [ 1568.094039][T29181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1568.182362][T29181] Node 1 Normal: 189*4kB (UME) 48*8kB (UME) 47*16kB (UME) 216*32kB (UME) 96*64kB (UME) 35*128kB (UME) 16*256kB (UME) 11*512kB (UME) 2*1024kB (M) 6*2048kB (UME) 938*4096kB (UM) = 3885540kB [ 1568.279103][T29181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.333483][T29181] Node 0 hugepages_total=7 hugepages_free=7 hugepages_surp=0 hugepages_size=2048kB [ 1568.404500][T29181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.427774][T29181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.487351][T29181] 161726 total pagecache pages [ 1568.516852][T29181] 1 pages in swap cache [ 1568.521162][T29181] Free swap = 124992kB [ 1568.552875][T29181] Total swap = 124996kB [ 1568.562613][T29181] 2097051 pages RAM [ 1568.566463][T29181] 0 pages HighMem/MovableOnly [ 1568.580223][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 1568.597193][T29181] 428432 pages reserved [ 1568.627610][T29181] 0 pages cma reserved [ 1568.631742][T29181] tty tty26: ldisc open failed (-12), clearing slot 25 [ 1570.438272][ T30] audit: type=1800 audit(4294967459.040:59): pid=29230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7910" name="features" dev="configfs" ino=116097 res=0 errno=0 [ 1571.409524][T29251] __vm_enough_memory: pid: 29251, comm: syz.1.7915, bytes: 4398046511104 not enough memory for the allocation [ 1573.161073][ T30] audit: type=1800 audit(4294967461.760:60): pid=29280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7921" name="features" dev="configfs" ino=115551 res=0 errno=0 [ 1573.304227][T29239] kexec: Could not allocate control_code_buffer [ 1575.271611][T29311] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1575.707806][T29319] netlink: 342 bytes leftover after parsing attributes in process `syz.4.7933'. [ 1575.825551][ T30] audit: type=1800 audit(4294968487.433:61): pid=29327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7934" name="features" dev="configfs" ino=115638 res=0 errno=0 [ 1576.500054][T29338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1577.372497][T29349] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1577.695078][ T30] audit: type=1800 audit(4294968489.302:62): pid=29362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7946" name="features" dev="configfs" ino=116744 res=0 errno=0 [ 1579.053641][T29393] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 1579.314792][T29398] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1582.067570][T29439] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.745202][T29491] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1587.842116][T29520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7988'. [ 1589.279034][ T30] audit: type=1800 audit(4294968500.866:63): pid=29544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7993" name="features" dev="configfs" ino=116718 res=0 errno=0 [ 1589.493925][T29541] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1593.181517][T29613] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1594.182127][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 1595.781440][T29651] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1597.544651][T29692] FAULT_INJECTION: forcing a failure. [ 1597.544651][T29692] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.780872][T29692] CPU: 1 UID: 0 PID: 29692 Comm: syz.0.8026 Tainted: G U syzkaller #0 PREEMPT(full) [ 1597.780928][T29692] Tainted: [U]=USER [ 1597.780941][T29692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1597.780962][T29692] Call Trace: [ 1597.780975][T29692] [ 1597.780988][T29692] dump_stack_lvl+0x16c/0x1f0 [ 1597.781046][T29692] should_fail_ex+0x512/0x640 [ 1597.781079][T29692] ? __kmalloc_noprof+0xbf/0x510 [ 1597.781119][T29692] ? ovs_vport_alloc+0x30/0x3d0 [ 1597.781174][T29692] should_failslab+0xc2/0x120 [ 1597.781216][T29692] __kmalloc_noprof+0xd2/0x510 [ 1597.781249][T29692] ? lockdep_hardirqs_on+0x7c/0x110 [ 1597.781310][T29692] ovs_vport_alloc+0x30/0x3d0 [ 1597.781371][T29692] internal_dev_create+0x25/0x520 [ 1597.781413][T29692] ovs_vport_add+0x144/0x4d0 [ 1597.781472][T29692] new_vport+0x16/0x1d0 [ 1597.781517][T29692] ovs_dp_cmd_new+0x6ba/0xe60 [ 1597.781577][T29692] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1597.781637][T29692] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1597.781680][T29692] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1597.781730][T29692] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1597.781781][T29692] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1597.781835][T29692] ? bpf_lsm_capable+0x9/0x10 [ 1597.781884][T29692] ? security_capable+0x7e/0x260 [ 1597.781940][T29692] ? ns_capable+0xd7/0x110 [ 1597.781987][T29692] genl_rcv_msg+0x55c/0x800 [ 1597.782029][T29692] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1597.782067][T29692] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1597.782132][T29692] netlink_rcv_skb+0x158/0x420 [ 1597.782187][T29692] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1597.782225][T29692] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1597.782300][T29692] ? netlink_deliver_tap+0x1ae/0xd30 [ 1597.782359][T29692] genl_rcv+0x28/0x40 [ 1597.782389][T29692] netlink_unicast+0x5a7/0x870 [ 1597.782450][T29692] ? __pfx_netlink_unicast+0x10/0x10 [ 1597.782505][T29692] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1597.782556][T29692] ? __lock_acquire+0xb97/0x1ce0 [ 1597.782622][T29692] netlink_sendmsg+0x8d1/0xdd0 [ 1597.782684][T29692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1597.782745][T29692] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1597.782806][T29692] ____sys_sendmsg+0xa95/0xc70 [ 1597.782833][T29692] ? copy_msghdr_from_user+0x10a/0x160 [ 1597.782869][T29692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1597.782902][T29692] ? __pfx_futex_wake_mark+0x10/0x10 [ 1597.782931][T29692] ___sys_sendmsg+0x134/0x1d0 [ 1597.782968][T29692] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.783055][T29692] __sys_sendmsg+0x16d/0x220 [ 1597.783098][T29692] ? __pfx___sys_sendmsg+0x10/0x10 [ 1597.783133][T29692] ? __x64_sys_futex+0x1e0/0x4c0 [ 1597.783187][T29692] do_syscall_64+0xcd/0x4b0 [ 1597.783226][T29692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.783251][T29692] RIP: 0033:0x7f4c6a58eec9 [ 1597.783271][T29692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.783296][T29692] RSP: 002b:00007f4c6b499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1597.783318][T29692] RAX: ffffffffffffffda RBX: 00007f4c6a7e6090 RCX: 00007f4c6a58eec9 [ 1597.783335][T29692] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 1597.783351][T29692] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1597.783367][T29692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.783382][T29692] R13: 00007f4c6a7e6128 R14: 00007f4c6a7e6090 R15: 00007ffe6dbb02c8 [ 1597.783413][T29692] [ 1598.804245][ T30] audit: type=1800 audit(4294968510.391:64): pid=29703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8028" name="features" dev="configfs" ino=117318 res=0 errno=0 [ 1599.384243][T29718] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1600.852973][T29742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8035'. [ 1601.737425][ T30] audit: type=1800 audit(4294968513.320:65): pid=29754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8038" name="features" dev="configfs" ino=118184 res=0 errno=0 [ 1602.197664][T29764] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1602.561423][T29774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8043'. [ 1604.096299][ T30] audit: type=1800 audit(4294968515.678:66): pid=29802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8049" name="features" dev="configfs" ino=117520 res=0 errno=0 [ 1604.505063][T29804] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1605.732441][T29824] netlink: 86 bytes leftover after parsing attributes in process `syz.4.8055'. [ 1606.874251][ T30] audit: type=1800 audit(4294968518.467:67): pid=29838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8059" name="features" dev="configfs" ino=117629 res=0 errno=0 [ 1607.260727][T29841] bond0: invalid ARP target specified [ 1608.995972][ T30] audit: type=1800 audit(4294968520.576:68): pid=29874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8068" name="features" dev="configfs" ino=118396 res=0 errno=0 [ 1609.862285][T29891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8070'. [ 1610.197615][T29894] binder: 29892:29894 ioctl c018620c 0 returned -22 [ 1610.791215][T29901] mkiss: ax0: crc mode is auto. [ 1611.727689][T24516] Bluetooth: hci2: Malformed Event: 0x02 [ 1614.682438][T24516] Bluetooth: hci3: command 0x0406 tx timeout [ 1616.387354][ T30] audit: type=1800 audit(4294968527.962:69): pid=29985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8088" name="features" dev="configfs" ino=118633 res=0 errno=0 [ 1617.675623][T24516] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1617.693230][T24516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1617.708398][T24516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1617.724957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.731359][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.742607][T24516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1617.754150][T24516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1618.989312][T29996] chnl_net:caif_netlink_parms(): no params data found [ 1619.794380][T24516] Bluetooth: hci0: command tx timeout [ 1619.820563][T29996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.856338][T29996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.881780][T29996] bridge_slave_0: entered allmulticast mode [ 1619.898802][T29996] bridge_slave_0: entered promiscuous mode [ 1619.912410][T29996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.920897][T29996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.930022][T29996] bridge_slave_1: entered allmulticast mode [ 1619.938221][T29996] bridge_slave_1: entered promiscuous mode [ 1620.493733][T29996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.588450][T29996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.349149][T29996] team0: Port device team_slave_0 added [ 1621.390105][T29996] team0: Port device team_slave_1 added [ 1621.875221][T24516] Bluetooth: hci0: command tx timeout [ 1621.891925][T29996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.915787][T29996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1621.995197][T29996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.016922][T30037] netlink: 334 bytes leftover after parsing attributes in process `syz.2.8098'. [ 1622.050885][T29996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.095226][T29996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.185297][T29996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1623.181134][T29996] hsr_slave_0: entered promiscuous mode [ 1623.217025][T29996] hsr_slave_1: entered promiscuous mode [ 1623.513640][T30044] ptrace attach of "./syz-executor exec"[30049] was attempted by "./syz-executor exec"[30044] [ 1623.956325][T24516] Bluetooth: hci0: command tx timeout [ 1624.239430][T30043] delete_channel: no stack [ 1625.619403][T29996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1625.735185][T29996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1625.850241][T29996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1625.941741][T29996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1626.037805][T24516] Bluetooth: hci0: command tx timeout [ 1626.366488][T29996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.423783][T29996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.492753][T28395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.499998][T28395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.535814][T28395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.543098][T28395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.914499][T29996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.640345][T24516] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1629.668556][T29996] veth0_vlan: entered promiscuous mode [ 1629.744299][T30121] block nbd0: not configured, cannot reconfigure [ 1629.840803][T29996] veth1_vlan: entered promiscuous mode [ 1630.002469][T29996] veth0_macvtap: entered promiscuous mode [ 1630.025448][T29996] veth1_macvtap: entered promiscuous mode [ 1630.108970][T29996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.245161][T29996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1630.309487][T21118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.350360][T21118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.421366][T21118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.462715][T21118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.579507][T30128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8118'. [ 1630.837305][T30139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.865728][T30139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.967003][ T30] audit: type=1800 audit(4294968542.545:70): pid=30146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8120" name="features" dev="configfs" ino=120245 res=0 errno=0 [ 1631.163005][T30142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.174685][T30142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.109373][ T30] audit: type=1800 audit(4294968544.684:71): pid=30190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8130" name="features" dev="configfs" ino=120363 res=0 errno=0 [ 1633.821716][T30202] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8134'. [ 1635.337327][ T30] audit: type=1800 audit(4294968546.913:72): pid=30230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8141" name="features" dev="configfs" ino=121211 res=0 errno=0 [ 1636.276216][T30254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8145'. [ 1637.419917][ T30] audit: type=1800 audit(4294968548.992:73): pid=30299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8153" name="features" dev="configfs" ino=121360 res=0 errno=0 [ 1638.054010][T30303] zswap: compressor not available [ 1642.050914][T30327] ptp ptp0: only physical clock in use now [ 1642.395931][T30134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.634850][T30360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8163'. [ 1642.668836][ T30] audit: type=1800 audit(4294968554.239:74): pid=30364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8162" name="features" dev="configfs" ino=121560 res=0 errno=0 [ 1642.842411][T30134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.307964][T30134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.949826][T30134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.992754][T30396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8170'. [ 1646.311044][T30134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.399373][T30134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1646.419661][T30134] bond0 (unregistering): Released all slaves [ 1647.246877][T30423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8176'. [ 1647.329477][T30423] netlink: 354 bytes leftover after parsing attributes in process `syz.5.8176'. [ 1647.660762][T30431] FAULT_INJECTION: forcing a failure. [ 1647.660762][T30431] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1647.758087][T30431] CPU: 0 UID: 0 PID: 30431 Comm: syz.5.8177 Tainted: G U syzkaller #0 PREEMPT(full) [ 1647.758138][T30431] Tainted: [U]=USER [ 1647.758150][T30431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1647.758170][T30431] Call Trace: [ 1647.758182][T30431] [ 1647.758195][T30431] dump_stack_lvl+0x16c/0x1f0 [ 1647.758251][T30431] should_fail_ex+0x512/0x640 [ 1647.758290][T30431] get_futex_key+0x1d0/0x1560 [ 1647.758344][T30431] ? __pfx_get_futex_key+0x10/0x10 [ 1647.758391][T30431] ? __mutex_trylock_common+0xe9/0x250 [ 1647.758455][T30431] futex_wake+0xea/0x530 [ 1647.758491][T30431] ? __pfx_futex_wake+0x10/0x10 [ 1647.758541][T30431] do_futex+0x1e3/0x350 [ 1647.758588][T30431] ? __pfx_do_futex+0x10/0x10 [ 1647.758641][T30431] ? __might_fault+0xe3/0x190 [ 1647.758684][T30431] mm_release+0x24e/0x300 [ 1647.758728][T30431] do_exit+0x68e/0x2bf0 [ 1647.758787][T30431] ? __pfx_do_exit+0x10/0x10 [ 1647.758836][T30431] ? do_raw_spin_lock+0x12c/0x2b0 [ 1647.758863][T30431] ? find_held_lock+0x2b/0x80 [ 1647.758899][T30431] do_group_exit+0xd3/0x2a0 [ 1647.758942][T30431] get_signal+0x2671/0x26d0 [ 1647.758988][T30431] ? __pfx_get_signal+0x10/0x10 [ 1647.759030][T30431] ? do_futex+0x122/0x350 [ 1647.759078][T30431] ? __pfx_do_futex+0x10/0x10 [ 1647.759129][T30431] arch_do_signal_or_restart+0x8f/0x790 [ 1647.759181][T30431] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1647.759242][T30431] ? xfd_validate_state+0x61/0x180 [ 1647.759272][T30431] ? __pfx_do_writev+0x10/0x10 [ 1647.759311][T30431] exit_to_user_mode_loop+0x7a/0x100 [ 1647.759347][T30431] do_syscall_64+0x419/0x4b0 [ 1647.759401][T30431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.759434][T30431] RIP: 0033:0x7fed15f8eec9 [ 1647.759462][T30431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1647.759497][T30431] RSP: 002b:00007fed16e650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1647.759529][T30431] RAX: fffffffffffffe00 RBX: 00007fed161e5fa8 RCX: 00007fed15f8eec9 [ 1647.759552][T30431] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fed161e5fa8 [ 1647.759574][T30431] RBP: 00007fed161e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.759596][T30431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.759624][T30431] R13: 00007fed161e6038 R14: 00007fffc2524ef0 R15: 00007fffc2524fd8 [ 1647.759669][T30431] [ 1648.655524][T30446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8179'. [ 1648.665445][T30444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8179'. [ 1648.692443][T30446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1648.719766][T30446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.758982][T30446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.766437][T30446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.618661][T30134] hsr_slave_0: left promiscuous mode [ 1649.669060][T30134] hsr_slave_1: left promiscuous mode [ 1649.682408][T30134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.710180][T30134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.800018][T30134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.808184][T30134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.892857][T30134] veth1_macvtap: left promiscuous mode [ 1649.898480][T30134] veth0_macvtap: left promiscuous mode [ 1649.924114][T30134] veth1_vlan: left promiscuous mode [ 1649.939296][T30134] veth0_vlan: left promiscuous mode [ 1650.056964][T30454] kexec: Could not allocate control_code_buffer [ 1651.563343][T30134] team0 (unregistering): Port device team_slave_1 removed [ 1651.694572][T30134] team0 (unregistering): Port device team_slave_0 removed [ 1653.822739][ T30] audit: type=1800 audit(4294969588.385:75): pid=30472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8184" name="features" dev="configfs" ino=122002 res=0 errno=0 [ 1655.406060][T30490] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 1656.259895][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8193'. [ 1656.336773][T30519] netlink: 354 bytes leftover after parsing attributes in process `syz.2.8193'. [ 1656.371960][ T30] audit: type=1800 audit(4294969590.934:76): pid=30525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8195" name="features" dev="configfs" ino=122104 res=0 errno=0 [ 1657.513780][T30270] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:16: bg 2: bad block bitmap checksum [ 1657.555432][T30270] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 916 with max blocks 3 with error 74 [ 1657.675654][T30270] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1657.675654][T30270] [ 1659.232913][T30579] nbd: must specify an index to disconnect [ 1659.535439][T30589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8204'. [ 1660.745523][T30604] FAULT_INJECTION: forcing a failure. [ 1660.745523][T30604] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.785298][T30604] CPU: 1 UID: 0 PID: 30604 Comm: syz.2.8208 Tainted: G U syzkaller #0 PREEMPT(full) [ 1660.785350][T30604] Tainted: [U]=USER [ 1660.785362][T30604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1660.785380][T30604] Call Trace: [ 1660.785391][T30604] [ 1660.785403][T30604] dump_stack_lvl+0x16c/0x1f0 [ 1660.785460][T30604] should_fail_ex+0x512/0x640 [ 1660.785510][T30604] ? __kmalloc_noprof+0xbf/0x510 [ 1660.785561][T30604] ? lsm_blob_alloc+0x68/0x90 [ 1660.785606][T30604] should_failslab+0xc2/0x120 [ 1660.785646][T30604] __kmalloc_noprof+0xd2/0x510 [ 1660.785689][T30604] lsm_blob_alloc+0x68/0x90 [ 1660.785738][T30604] security_prepare_creds+0x30/0x270 [ 1660.785786][T30604] prepare_creds+0x56f/0x7d0 [ 1660.785823][T30604] __sys_setreuid+0x101/0xaf0 [ 1660.785865][T30604] ? rcu_is_watching+0x12/0xc0 [ 1660.785910][T30604] do_syscall_64+0xcd/0x4b0 [ 1660.785973][T30604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.786007][T30604] RIP: 0033:0x7fbb4a38eec9 [ 1660.786035][T30604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1660.786068][T30604] RSP: 002b:00007fbb4b176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1660.786101][T30604] RAX: ffffffffffffffda RBX: 00007fbb4a5e5fa0 RCX: 00007fbb4a38eec9 [ 1660.786124][T30604] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 1660.786145][T30604] RBP: 00007fbb4a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1660.786170][T30604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1660.786191][T30604] R13: 00007fbb4a5e6038 R14: 00007fbb4a5e5fa0 R15: 00007ffe5d6253b8 [ 1660.786236][T30604] [ 1662.185817][T30635] netlink: 'syz.5.8216': attribute type 22 has an invalid length. [ 1662.640068][T30649] vhci_hcd: invalid port number 0 [ 1663.132503][T30654] XFS: Clearing xfsstats [ 1663.906243][ T30] audit: type=1326 audit(4294969598.460:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.2.8222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb4a38eec9 code=0x0 [ 1663.976591][ T30] audit: type=1326 audit(4294969598.540:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.2.8222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb4a38eec9 code=0x0 [ 1665.398248][T30692] netlink: 'syz.4.8231': attribute type 1 has an invalid length. [ 1665.495848][T30693] netlink: 'syz.4.8231': attribute type 1 has an invalid length. [ 1670.032490][T30768] FAULT_INJECTION: forcing a failure. [ 1670.032490][T30768] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.086579][T30768] CPU: 1 UID: 0 PID: 30768 Comm: syz.0.8247 Tainted: G U syzkaller #0 PREEMPT(full) [ 1670.086636][T30768] Tainted: [U]=USER [ 1670.086649][T30768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1670.086670][T30768] Call Trace: [ 1670.086682][T30768] [ 1670.086696][T30768] dump_stack_lvl+0x16c/0x1f0 [ 1670.086754][T30768] should_fail_ex+0x512/0x640 [ 1670.086786][T30768] ? __kmalloc_noprof+0xbf/0x510 [ 1670.086826][T30768] ? cgroup_mkdir+0x2b0/0x12e0 [ 1670.086862][T30768] should_failslab+0xc2/0x120 [ 1670.086911][T30768] __kmalloc_noprof+0xd2/0x510 [ 1670.086945][T30768] ? cgroup_kn_lock_live+0x116/0x520 [ 1670.086988][T30768] cgroup_mkdir+0x2b0/0x12e0 [ 1670.087029][T30768] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1670.087072][T30768] kernfs_iop_mkdir+0x10e/0x190 [ 1670.087118][T30768] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1670.087160][T30768] vfs_mkdir+0x593/0x8c0 [ 1670.087216][T30768] do_mkdirat+0x304/0x3e0 [ 1670.087254][T30768] ? __pfx_do_mkdirat+0x10/0x10 [ 1670.087295][T30768] ? getname_flags.part.0+0x1c5/0x550 [ 1670.087348][T30768] __x64_sys_mkdir+0xef/0x140 [ 1670.087387][T30768] do_syscall_64+0xcd/0x4b0 [ 1670.087442][T30768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.087477][T30768] RIP: 0033:0x7f4c6a58eec9 [ 1670.087505][T30768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1670.087541][T30768] RSP: 002b:00007f4c6b4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1670.087573][T30768] RAX: ffffffffffffffda RBX: 00007f4c6a7e5fa0 RCX: 00007f4c6a58eec9 [ 1670.087595][T30768] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000080 [ 1670.087627][T30768] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1670.087648][T30768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.087669][T30768] R13: 00007f4c6a7e6038 R14: 00007f4c6a7e5fa0 R15: 00007ffe6dbb02c8 [ 1670.087715][T30768] [ 1670.454707][T30773] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1670.545176][T30773] CIFS mount error: No usable UNC path provided in device string! [ 1670.545176][T30773] [ 1670.565816][T30773] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1670.980011][T30789] device-mapper: ioctl: Invalid ioctl structure: name ¢, dev 7f00010002 [ 1674.649218][T30874] FAULT_INJECTION: forcing a failure. [ 1674.649218][T30874] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.680276][T30874] CPU: 0 UID: 0 PID: 30874 Comm: syz.0.8267 Tainted: G U syzkaller #0 PREEMPT(full) [ 1674.680334][T30874] Tainted: [U]=USER [ 1674.680347][T30874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1674.680369][T30874] Call Trace: [ 1674.680397][T30874] [ 1674.680411][T30874] dump_stack_lvl+0x16c/0x1f0 [ 1674.680471][T30874] should_fail_ex+0x512/0x640 [ 1674.680503][T30874] ? __kmalloc_noprof+0xbf/0x510 [ 1674.680541][T30874] ? ops_init+0x77/0x5f0 [ 1674.680590][T30874] should_failslab+0xc2/0x120 [ 1674.680631][T30874] __kmalloc_noprof+0xd2/0x510 [ 1674.680676][T30874] ops_init+0x77/0x5f0 [ 1674.680742][T30874] setup_net+0x100/0x390 [ 1674.680796][T30874] ? __pfx_setup_net+0x10/0x10 [ 1674.680849][T30874] ? debug_mutex_init+0x37/0x70 [ 1674.680895][T30874] copy_net_ns+0x2f8/0x690 [ 1674.680931][T30874] create_new_namespaces+0x3ea/0xa90 [ 1674.680984][T30874] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1674.681031][T30874] ksys_unshare+0x45b/0xa40 [ 1674.681083][T30874] ? __pfx_ksys_unshare+0x10/0x10 [ 1674.681134][T30874] ? xfd_validate_state+0x61/0x180 [ 1674.681179][T30874] __x64_sys_unshare+0x31/0x40 [ 1674.681229][T30874] do_syscall_64+0xcd/0x4b0 [ 1674.681284][T30874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.681318][T30874] RIP: 0033:0x7f4c6a58eec9 [ 1674.681347][T30874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1674.681383][T30874] RSP: 002b:00007f4c6b4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1674.681421][T30874] RAX: ffffffffffffffda RBX: 00007f4c6a7e5fa0 RCX: 00007f4c6a58eec9 [ 1674.681444][T30874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1674.681466][T30874] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1674.681487][T30874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1674.681508][T30874] R13: 00007f4c6a7e6038 R14: 00007f4c6a7e5fa0 R15: 00007ffe6dbb02c8 [ 1674.681551][T30874] [ 1674.878942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.897497][T30879] futex_wake_op: syz.5.8268 tries to shift op by -9; fix this program [ 1675.871554][T30899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8271'. [ 1675.972635][T30899] netlink: 13 bytes leftover after parsing attributes in process `syz.2.8271'. [ 1677.014943][T30916] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1677.769239][T30929] Invalid ELF header magic: != ELF [ 1679.191667][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.198110][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1682.873072][ T30] audit: type=1800 audit(4294969617.420:79): pid=31012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8290" name="features" dev="configfs" ino=124291 res=0 errno=0 [ 1683.796427][T31024] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1684.864037][T31044] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1685.056561][ T30] audit: type=1800 audit(4294969619.599:80): pid=31054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8300" name="features" dev="configfs" ino=125414 res=0 errno=0 [ 1685.519870][T31067] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1686.129422][T31072] block2mtd: Using custom MTD label '' for dev [ 1686.135794][T31072] block2mtd: error: cannot open device [ 1688.365933][ T30] audit: type=1800 audit(4294969622.918:81): pid=31109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8312" name="features" dev="configfs" ino=125569 res=0 errno=0 [ 1688.988531][T31113] FAULT_INJECTION: forcing a failure. [ 1688.988531][T31113] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1689.005633][T31113] CPU: 0 UID: 0 PID: 31113 Comm: syz.5.8313 Tainted: G U syzkaller #0 PREEMPT(full) [ 1689.005669][T31113] Tainted: [U]=USER [ 1689.005677][T31113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1689.005691][T31113] Call Trace: [ 1689.005699][T31113] [ 1689.005709][T31113] dump_stack_lvl+0x16c/0x1f0 [ 1689.005748][T31113] should_fail_ex+0x512/0x640 [ 1689.005773][T31113] get_futex_key+0x1d0/0x1560 [ 1689.005808][T31113] ? __pfx_get_futex_key+0x10/0x10 [ 1689.005850][T31113] futex_wait_setup+0x9d/0x550 [ 1689.005882][T31113] __futex_wait+0x193/0x2f0 [ 1689.005905][T31113] ? __pfx___futex_wait+0x10/0x10 [ 1689.005932][T31113] ? __pfx_futex_wake_mark+0x10/0x10 [ 1689.005959][T31113] ? futex_private_hash_put+0x176/0x300 [ 1689.005993][T31113] ? futex_private_hash_put+0x18a/0x300 [ 1689.006026][T31113] futex_wait+0xe8/0x380 [ 1689.006048][T31113] ? __pfx_futex_wait+0x10/0x10 [ 1689.006084][T31113] ? __lock_acquire+0x62e/0x1ce0 [ 1689.006126][T31113] do_futex+0x229/0x350 [ 1689.006159][T31113] ? __pfx_do_futex+0x10/0x10 [ 1689.006195][T31113] ? find_held_lock+0x2b/0x80 [ 1689.006224][T31113] __x64_sys_futex+0x1e0/0x4c0 [ 1689.006260][T31113] ? __fget_files+0x20e/0x3c0 [ 1689.006281][T31113] ? __pfx___x64_sys_futex+0x10/0x10 [ 1689.006319][T31113] ? fdget+0x187/0x210 [ 1689.006343][T31113] do_syscall_64+0xcd/0x4b0 [ 1689.006380][T31113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.006403][T31113] RIP: 0033:0x7fed15f8eec9 [ 1689.006420][T31113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1689.006442][T31113] RSP: 002b:00007fed16e440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1689.006464][T31113] RAX: ffffffffffffffda RBX: 00007fed161e6098 RCX: 00007fed15f8eec9 [ 1689.006479][T31113] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fed161e6098 [ 1689.006493][T31113] RBP: 00007fed161e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.006507][T31113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1689.006520][T31113] R13: 00007fed161e6128 R14: 00007fffc2524ef0 R15: 00007fffc2524fd8 [ 1689.006549][T31113] [ 1692.094216][T31161] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1693.395906][ T30] audit: type=1800 audit(4294969627.945:82): pid=31183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8333" name="features" dev="configfs" ino=125730 res=0 errno=0 [ 1695.785806][T31203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.596333][T31203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.882843][T31203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.414209][T31203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.529179][ T30] audit: type=1800 audit(4294969633.073:83): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8343" name="features" dev="configfs" ino=125891 res=0 errno=0 [ 1698.996580][T31242] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8347'. [ 1699.390907][T31248] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1700.604659][ T30] audit: type=1800 audit(4294969635.141:84): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8356" name="features" dev="configfs" ino=126006 res=0 errno=0 [ 1700.935795][T31280] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input37 [ 1701.455949][T31294] FAULT_INJECTION: forcing a failure. [ 1701.455949][T31294] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.472272][T31294] CPU: 0 UID: 0 PID: 31294 Comm: syz.0.8360 Tainted: G U syzkaller #0 PREEMPT(full) [ 1701.472320][T31294] Tainted: [U]=USER [ 1701.472330][T31294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1701.472349][T31294] Call Trace: [ 1701.472360][T31294] [ 1701.472372][T31294] dump_stack_lvl+0x16c/0x1f0 [ 1701.472423][T31294] should_fail_ex+0x512/0x640 [ 1701.472450][T31294] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1701.472507][T31294] should_failslab+0xc2/0x120 [ 1701.472547][T31294] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1701.472600][T31294] ? _request_firmware+0x2a4/0x1470 [ 1701.472641][T31294] _request_firmware+0x2a4/0x1470 [ 1701.472686][T31294] ? assign_fw+0x1cb/0x640 [ 1701.472722][T31294] ? _request_firmware+0x957/0x1470 [ 1701.472754][T31294] ? __pfx__request_firmware+0x10/0x10 [ 1701.472801][T31294] request_firmware+0x35/0x50 [ 1701.472832][T31294] valid_regdb+0x184/0x590 [ 1701.472875][T31294] ? __pfx___mutex_lock+0x10/0x10 [ 1701.472922][T31294] ? __pfx_valid_regdb+0x10/0x10 [ 1701.472973][T31294] reg_reload_regdb+0x11a/0x460 [ 1701.473003][T31294] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1701.473033][T31294] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1701.473069][T31294] ? nl80211_pre_doit+0x1b0/0xb10 [ 1701.473110][T31294] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1701.473145][T31294] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1701.473175][T31294] ? rcu_is_watching+0x12/0xc0 [ 1701.473223][T31294] ? bpf_lsm_capable+0x9/0x10 [ 1701.473265][T31294] ? security_capable+0x7e/0x260 [ 1701.473319][T31294] genl_rcv_msg+0x55c/0x800 [ 1701.473354][T31294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1701.473384][T31294] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1701.473419][T31294] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1701.473464][T31294] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1701.473537][T31294] netlink_rcv_skb+0x158/0x420 [ 1701.473588][T31294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1701.473625][T31294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1701.473693][T31294] ? netlink_deliver_tap+0x1ae/0xd30 [ 1701.473752][T31294] genl_rcv+0x28/0x40 [ 1701.473777][T31294] netlink_unicast+0x5a7/0x870 [ 1701.473828][T31294] ? __pfx_netlink_unicast+0x10/0x10 [ 1701.473873][T31294] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1701.473917][T31294] ? __lock_acquire+0xb97/0x1ce0 [ 1701.473972][T31294] netlink_sendmsg+0x8d1/0xdd0 [ 1701.474022][T31294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1701.474073][T31294] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1701.474127][T31294] ____sys_sendmsg+0xa95/0xc70 [ 1701.474160][T31294] ? copy_msghdr_from_user+0x10a/0x160 [ 1701.474204][T31294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1701.474245][T31294] ? __pfx_futex_wake_mark+0x10/0x10 [ 1701.474281][T31294] ___sys_sendmsg+0x134/0x1d0 [ 1701.474327][T31294] ? __pfx____sys_sendmsg+0x10/0x10 [ 1701.474416][T31294] __sys_sendmsg+0x16d/0x220 [ 1701.474460][T31294] ? __pfx___sys_sendmsg+0x10/0x10 [ 1701.474510][T31294] ? __x64_sys_futex+0x1e0/0x4c0 [ 1701.474587][T31294] do_syscall_64+0xcd/0x4b0 [ 1701.474639][T31294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.474674][T31294] RIP: 0033:0x7f4c6a58eec9 [ 1701.474701][T31294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1701.474745][T31294] RSP: 002b:00007f4c6b4ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1701.474778][T31294] RAX: ffffffffffffffda RBX: 00007f4c6a7e5fa0 RCX: 00007f4c6a58eec9 [ 1701.474801][T31294] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000a [ 1701.474821][T31294] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1701.474843][T31294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.474864][T31294] R13: 00007f4c6a7e6038 R14: 00007f4c6a7e5fa0 R15: 00007ffe6dbb02c8 [ 1701.474909][T31294] [ 1701.905166][T31294] faux_driver regulatory: _request_firmware_prepare: kmalloc(struct firmware) failed [ 1703.696017][ T30] audit: type=1800 audit(4294969638.230:85): pid=31327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8366" name="features" dev="configfs" ino=127085 res=0 errno=0 [ 1704.564959][T31346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8370'. [ 1704.582328][T31346] bridge_slave_1: left allmulticast mode [ 1704.621820][T31346] bridge_slave_1: left promiscuous mode [ 1704.827394][T31346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.974338][T31346] bridge_slave_0: left allmulticast mode [ 1704.982253][T31346] bridge_slave_0: left promiscuous mode [ 1704.999394][T31346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.189180][T31349] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1705.644786][T31353] random: crng reseeded on system resumption [ 1707.790707][ T30] audit: type=1800 audit(4294969642.318:86): pid=31386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8379" name="features" dev="configfs" ino=126299 res=0 errno=0 [ 1708.142767][T31382] HfR: entered promiscuous mode [ 1708.354180][T31394] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1709.044196][ T30] audit: type=1326 audit(4294969643.567:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31405 comm="syz.5.8385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed15f8eec9 code=0x0 [ 1709.164398][T31415] netlink: 13 bytes leftover after parsing attributes in process `syz.4.8387'. [ 1709.811070][T31425] netlink: 330 bytes leftover after parsing attributes in process `syz.0.8390'. [ 1709.983109][T31425] : renamed from bond_slave_1 (while UP) [ 1710.153983][ T30] audit: type=1800 audit(4294969644.697:88): pid=31431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8391" name="features" dev="configfs" ino=127258 res=0 errno=0 [ 1710.565603][T31436] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1712.962884][ T30] audit: type=1800 audit(4294969647.485:89): pid=31498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8403" name="features" dev="configfs" ino=126600 res=0 errno=0 [ 1713.817378][T31515] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1714.361795][T31526] mtrr: base(0x203e6c65000) is not aligned on a size(0x464f5250000) boundary [ 1715.568405][T31550] netlink: 26 bytes leftover after parsing attributes in process `syz.4.8413'. [ 1715.578348][T31550] openvswitch: netlink: IP tunnel dst address not specified [ 1715.699656][ T30] audit: type=1800 audit(4294969650.234:90): pid=31552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8414" name="features" dev="configfs" ino=127344 res=0 errno=0 [ 1717.221696][T31572] XFS: Clearing xfsstats [ 1717.734325][ T30] audit: type=1326 audit(4294969652.273:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.5.8423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed15f8eec9 code=0x0 [ 1718.737477][T31590] netlink: 350 bytes leftover after parsing attributes in process `syz.2.8424'. [ 1718.825728][T31603] FAULT_INJECTION: forcing a failure. [ 1718.825728][T31603] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.887549][T31603] CPU: 1 UID: 0 PID: 31603 Comm: syz.0.8426 Tainted: G U syzkaller #0 PREEMPT(full) [ 1718.887612][T31603] Tainted: [U]=USER [ 1718.887626][T31603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1718.887646][T31603] Call Trace: [ 1718.887657][T31603] [ 1718.887671][T31603] dump_stack_lvl+0x16c/0x1f0 [ 1718.887730][T31603] should_fail_ex+0x512/0x640 [ 1718.887761][T31603] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1718.887802][T31603] should_failslab+0xc2/0x120 [ 1718.887841][T31603] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1718.887875][T31603] ? ksys_unshare+0x45b/0xa40 [ 1718.887923][T31603] ? __x64_sys_unshare+0x31/0x40 [ 1718.887991][T31603] ? sock_alloc_inode+0x25/0x1c0 [ 1718.888030][T31603] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1718.888062][T31603] sock_alloc_inode+0x25/0x1c0 [ 1718.888099][T31603] alloc_inode+0x64/0x240 [ 1718.888144][T31603] sock_alloc+0x40/0x280 [ 1718.888200][T31603] sock_create_lite+0x82/0x120 [ 1718.888261][T31603] __netlink_kernel_create+0xbd/0x750 [ 1718.888318][T31603] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1718.888370][T31603] ? find_held_lock+0x2b/0x80 [ 1718.888412][T31603] ? audit_net_init+0x190/0x440 [ 1718.888470][T31603] audit_net_init+0x1ae/0x440 [ 1718.888520][T31603] ? __pfx_audit_net_init+0x10/0x10 [ 1718.888574][T31603] ? __pfx_audit_receive+0x10/0x10 [ 1718.888612][T31603] ? __pfx_audit_multicast_bind+0x10/0x10 [ 1718.888644][T31603] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 1718.888678][T31603] ? __kmalloc_noprof+0x242/0x510 [ 1718.888723][T31603] ? __pfx_audit_net_init+0x10/0x10 [ 1718.888773][T31603] ops_init+0x1df/0x5f0 [ 1718.888831][T31603] setup_net+0x100/0x390 [ 1718.888884][T31603] ? __pfx_setup_net+0x10/0x10 [ 1718.888939][T31603] ? debug_mutex_init+0x37/0x70 [ 1718.888985][T31603] copy_net_ns+0x2f8/0x690 [ 1718.889035][T31603] create_new_namespaces+0x3ea/0xa90 [ 1718.889088][T31603] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1718.889137][T31603] ksys_unshare+0x45b/0xa40 [ 1718.889188][T31603] ? __pfx_ksys_unshare+0x10/0x10 [ 1718.889238][T31603] ? ksys_write+0x1ac/0x250 [ 1718.889285][T31603] __x64_sys_unshare+0x31/0x40 [ 1718.889336][T31603] do_syscall_64+0xcd/0x4b0 [ 1718.889391][T31603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.889425][T31603] RIP: 0033:0x7f4c6a58eec9 [ 1718.889452][T31603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.889487][T31603] RSP: 002b:00007f4c6b4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1718.889519][T31603] RAX: ffffffffffffffda RBX: 00007f4c6a7e5fa0 RCX: 00007f4c6a58eec9 [ 1718.889541][T31603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1718.889562][T31603] RBP: 00007f4c6a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1718.889584][T31603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.889613][T31603] R13: 00007f4c6a7e6038 R14: 00007f4c6a7e5fa0 R15: 00007ffe6dbb02c8 [ 1718.889658][T31603] [ 1718.892241][T31603] audit: cannot initialize netlink socket in namespace [ 1719.506566][T31613] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1720.683322][T31618] netlink: 342 bytes leftover after parsing attributes in process `syz.2.8430'. [ 1720.726485][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8433'. [ 1721.897098][T31632] XFS: Clearing xfsstats [ 1722.466515][ T30] audit: type=1800 audit(4294969657.001:92): pid=31656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8441" name="features" dev="configfs" ino=127613 res=0 errno=0 [ 1722.849091][T31665] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1722.876981][T31665] FAULT_INJECTION: forcing a failure. [ 1722.876981][T31665] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.999737][T31665] CPU: 0 UID: 0 PID: 31665 Comm: syz.5.8443 Tainted: G U syzkaller #0 PREEMPT(full) [ 1722.999786][T31665] Tainted: [U]=USER [ 1722.999796][T31665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1722.999814][T31665] Call Trace: [ 1722.999825][T31665] [ 1722.999837][T31665] dump_stack_lvl+0x16c/0x1f0 [ 1722.999889][T31665] should_fail_ex+0x512/0x640 [ 1722.999918][T31665] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1722.999956][T31665] should_failslab+0xc2/0x120 [ 1722.999993][T31665] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1723.000027][T31665] ? alloc_inode+0xc3/0x240 [ 1723.000071][T31665] alloc_inode+0xc3/0x240 [ 1723.000109][T31665] path_from_stashed+0x25b/0x750 [ 1723.000157][T31665] ? alloc_fd+0x471/0x7d0 [ 1723.000227][T31665] pidfs_alloc_file+0xf8/0x290 [ 1723.000276][T31665] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1723.000327][T31665] ? _raw_spin_unlock_irq+0x23/0x50 [ 1723.000377][T31665] pidfd_prepare+0x129/0x200 [ 1723.000419][T31665] fanotify_read+0x110c/0x27d0 [ 1723.000477][T31665] ? __pfx_fanotify_read+0x10/0x10 [ 1723.000519][T31665] ? __pfx_aa_file_perm+0x10/0x10 [ 1723.000560][T31665] ? __lock_acquire+0x62e/0x1ce0 [ 1723.000603][T31665] ? copy_iovec_from_user+0x131/0x170 [ 1723.000636][T31665] ? iovec_from_user+0xbb/0x140 [ 1723.000678][T31665] ? __pfx_woken_wake_function+0x10/0x10 [ 1723.000734][T31665] ? bpf_lsm_file_permission+0x9/0x10 [ 1723.000775][T31665] ? security_file_permission+0x71/0x210 [ 1723.000817][T31665] ? rw_verify_area+0xcf/0x6c0 [ 1723.000867][T31665] ? __pfx_fanotify_read+0x10/0x10 [ 1723.000912][T31665] vfs_readv+0x5be/0x8b0 [ 1723.000970][T31665] ? __pfx_vfs_readv+0x10/0x10 [ 1723.001021][T31665] ? vfs_write+0x15d/0x11d0 [ 1723.001090][T31665] ? do_readv+0x132/0x340 [ 1723.001136][T31665] do_readv+0x132/0x340 [ 1723.001188][T31665] ? __pfx_do_readv+0x10/0x10 [ 1723.001251][T31665] do_syscall_64+0xcd/0x4b0 [ 1723.001303][T31665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.001335][T31665] RIP: 0033:0x7fed15f8eec9 [ 1723.001366][T31665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1723.001396][T31665] RSP: 002b:00007fed16e65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1723.001423][T31665] RAX: ffffffffffffffda RBX: 00007fed161e5fa0 RCX: 00007fed15f8eec9 [ 1723.001444][T31665] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000000 [ 1723.001462][T31665] RBP: 00007fed16e65090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.001480][T31665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.001497][T31665] R13: 00007fed161e6038 R14: 00007fed161e5fa0 R15: 00007fffc2524fd8 [ 1723.001534][T31665] [ 1723.866294][T31677] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1725.859053][T31712] XFS: Clearing xfsstats [ 1726.098245][T31714] netlink: 'syz.2.8454': attribute type 11 has an invalid length. [ 1726.755933][T31730] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1727.464654][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8461'. [ 1727.531050][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8461'. [ 1728.616352][T31761] XFS: Clearing xfsstats [ 1730.708938][ T30] audit: type=1800 audit(4294969665.236:93): pid=31810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8477" name="features" dev="configfs" ino=127904 res=0 errno=0 [ 1732.635742][T31829] XFS: Clearing xfsstats [ 1736.338321][ T30] audit: type=1800 audit(4294969670.844:94): pid=31868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8490" name="features" dev="configfs" ino=129043 res=0 errno=0 [ 1737.070999][T31879] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1737.513075][T31888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8495'. [ 1737.543422][T31888] bridge_slave_1: left allmulticast mode [ 1737.568136][T31888] bridge_slave_1: left promiscuous mode [ 1737.600705][T31888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.693193][T31888] bridge_slave_0: left allmulticast mode [ 1737.699987][T31888] bridge_slave_0: left promiscuous mode [ 1737.741735][T31888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.358302][T31899] XFS: Clearing xfsstats [ 1740.665174][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.671566][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.740377][T31951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8509'. [ 1741.824220][T31951] bridge_slave_1: left allmulticast mode [ 1741.832274][T31951] bridge_slave_1: left promiscuous mode [ 1741.871503][T31951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.908861][T31951] bridge_slave_0: left allmulticast mode [ 1741.914742][T31951] bridge_slave_0: left promiscuous mode [ 1741.946131][T31951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.739511][T31946] Bluetooth: hci0: command 0x0406 tx timeout [ 1742.868195][T31966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8513'. [ 1742.955832][T31966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8513'. [ 1743.291631][T31983] netlink: 252 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1743.357820][T31984] netlink: 252 bytes leftover after parsing attributes in process `syz.0.8518'. [ 1745.037292][T32029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8529'. [ 1745.048126][T32029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8529'. [ 1745.399329][T30150] Bluetooth: hci0: ACL packet too small [ 1745.840655][T32041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8532'. [ 1746.607082][T32060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8537'. [ 1746.878408][T32069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8539'. [ 1746.899526][T32069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8539'. [ 1748.988927][T32111] __nla_validate_parse: 1 callbacks suppressed [ 1748.988957][T32111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8552'. [ 1749.078035][T32115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8552'. [ 1751.591337][T32173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8565'. [ 1751.699864][T32174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8564'. [ 1751.790880][T32174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8564'. [ 1753.527962][T32207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8575'. [ 1755.038540][T32225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8578'. [ 1755.053278][T32225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8578'. [ 1757.328527][T32254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8586'. [ 1761.191528][T32311] netlink: 'syz.5.8598': attribute type 2 has an invalid length. [ 1768.963703][T32422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8625'. [ 1769.057024][T32422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8625'. [ 1769.957437][T32436] __vm_enough_memory: pid: 32436, comm: syz.4.8628, bytes: 4398046511104 not enough memory for the allocation [ 1771.183974][T32463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8635'. [ 1771.205376][T32463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8635'. [ 1772.310381][T30150] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1772.310431][T30150] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1772.326218][T30150] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1772.326286][T30150] Bluetooth: hci3: adv larger than maximum supported [ 1772.335252][T30150] Bluetooth: hci3: adv larger than maximum supported [ 1772.342073][T30150] Bluetooth: hci3: adv larger than maximum supported [ 1772.348800][T30150] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1773.287539][T32507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8645'. [ 1773.332156][T32507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8645'. [ 1775.124984][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8657'. [ 1775.137028][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8657'. [ 1777.239701][T32600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8668'. [ 1777.294880][T32600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8668'. [ 1779.357375][T32647] netlink: 'syz.2.8683': attribute type 1 has an invalid length. [ 1779.372551][T32652] netlink: zone id is out of range [ 1779.410854][T32652] netlink: zone id is out of range [ 1779.417557][T32647] netlink: 230 bytes leftover after parsing attributes in process `syz.2.8683'. [ 1779.449955][T32652] netlink: zone id is out of range [ 1779.457551][T32652] netlink: zone id is out of range [ 1779.464760][T32652] netlink: zone id is out of range [ 1779.471902][T32652] netlink: zone id is out of range [ 1779.622661][T32652] netlink: zone id is out of range [ 1779.634040][T32652] netlink: zone id is out of range [ 1779.668561][T32652] netlink: zone id is out of range [ 1779.675286][T32652] netlink: zone id is out of range [ 1779.906526][T30150] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1779.906590][T30150] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 1779.923278][T30150] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1779.923353][T30150] Bluetooth: hci0: adv larger than maximum supported [ 1779.933748][T30150] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1781.728738][T32700] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1782.591377][T32712] netlink: 334 bytes leftover after parsing attributes in process `syz.4.8699'. [ 1783.250297][T32718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8700'. [ 1787.150959][T30150] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1789.577762][T30150] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1789.585220][T30150] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 1789.600315][T30150] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1789.600383][T30150] Bluetooth: hci4: adv larger than maximum supported [ 1789.611389][T30150] Bluetooth: hci4: adv larger than maximum supported [ 1789.621197][T30150] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1796.636850][ T541] delete_channel: no stack [ 1799.412908][ T617] net_ratelimit: 118 callbacks suppressed [ 1799.412936][ T617] netlink: set zone limit has 8 unknown bytes [ 1802.119016][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1802.125526][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1803.887666][ T30] audit: type=1804 audit(4294969738.396:95): pid=731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8828" name="file0" dev="tmpfs" ino=1443 res=1 errno=0 [ 1803.923340][ T30] audit: type=1804 audit(4294969738.396:96): pid=735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8828" name="file0" dev="tmpfs" ino=1443 res=1 errno=0 [ 1814.058722][ T990] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1819.896895][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806b073c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 1820.119023][ T1140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1820.961398][ T1143] netlink: 19 bytes leftover after parsing attributes in process `syz.5.8916'. [ 1822.489070][ T1185] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8926'. [ 1826.323425][ T1299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8949'. [ 1826.596030][ T1309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8952'. [ 1828.536673][ T1366] __vm_enough_memory: pid: 1366, comm: syz.5.8965, bytes: 4398046511104 not enough memory for the allocation [ 1828.581218][ T1362] __vm_enough_memory: pid: 1362, comm: syz.5.8965, bytes: 4398046511104 not enough memory for the allocation [ 1831.281758][ T1430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8979'. [ 1831.331122][ T1430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8979'. [ 1831.648207][ T1430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8979'. [ 1834.852476][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8994'. [ 1835.126127][ T1505] Invalid ELF header magic: != ELF [ 1838.739201][ T1566] netlink: 'syz.4.9012': attribute type 1 has an invalid length. [ 1842.049638][ T1627] openvswitch: HfR: Dropping previously announced user features [ 1842.891415][ T1644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9033'. [ 1843.103311][ T1655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9036'. [ 1845.239828][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9043'. [ 1847.206404][ T1711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9049'. [ 1848.842464][ T1737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9054'. [ 1850.789869][ T1782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9065'. [ 1852.794100][ T1831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9075'. [ 1854.344909][ T1872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9086'. [ 1855.532753][ T1908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9098'. [ 1856.701324][ T1941] netlink: 'syz.0.9105': attribute type 1 has an invalid length. [ 1856.711506][ T1946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9107'. [ 1857.541219][ T1973] block nbd0: not configured, cannot reconfigure [ 1858.384849][ T1994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1858.496926][ T1992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1858.547450][ T1999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1858.746324][ T2003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1858.842504][ T2008] openvswitch: netlink: IP tunnel dst address not specified [ 1859.825718][T30150] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1859.825760][T30150] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 1859.841591][T30150] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1859.843035][T30150] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1860.311522][ T2049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1861.243990][ T2059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9134'. [ 1862.003521][ T2090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9141'. [ 1862.293480][ T2099] netlink: 346 bytes leftover after parsing attributes in process `syz.5.9145'. [ 1863.554271][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.560718][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1865.031346][ T2144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9154'. [ 1866.053521][ T2166] Invalid ELF header magic: != ELF [ 1866.741918][ T2189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9164'. [ 1867.712471][ T2225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9174'. [ 1869.440292][ T2275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9185'. [ 1869.979500][ T2305] netlink: 330 bytes leftover after parsing attributes in process `syz.2.9194'. [ 1870.557152][ T2320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9197'. [ 1870.677800][ T2321] can: request_module (can-proto-0) failed. [ 1872.941476][ T2375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9209'. [ 1873.919255][ T2416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9219'. [ 1875.785344][ T2470] netlink: zone id is out of range [ 1875.792253][ T2470] netlink: del zone limit has 4 unknown bytes [ 1876.179398][ T2486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9231'. [ 1876.367496][ T2497] netlink: 342 bytes leftover after parsing attributes in process `syz.4.9232'. [ 1878.034520][ T2544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9242'. [ 1879.384515][ T2594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9252'. [ 1880.502194][ T2639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9264'. [ 1880.537588][ T2632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9262'. [ 1880.548235][ T2632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9262'. [ 1880.833717][ T2647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9267'. [ 1881.106409][ T30] audit: type=1804 audit(4294969815.616:97): pid=2657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9269" name="file0" dev="tmpfs" ino=2808 res=1 errno=0 [ 1882.122674][ T2691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9275'. [ 1882.203620][ T2692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9275'. [ 1882.424808][ T2701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9277'. [ 1883.113956][ T2726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9287'. [ 1883.161331][ T2726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9287'. [ 1883.346523][ T2739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9290'. [ 1883.378177][ T2739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9290'. [ 1883.406054][ T2735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9289'. [ 1884.308281][ T30] audit: type=1804 audit(4294969818.816:98): pid=2777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9297" name="file0" dev="tmpfs" ino=2850 res=1 errno=0 [ 1884.308596][ T2776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9299'. [ 1884.441385][ T2779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9300'. [ 1885.523722][ T2827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9312'. [ 1885.563979][ T2827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9312'. [ 1885.594513][ T2830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9313'. [ 1887.520551][ T2893] ovs_: entered promiscuous mode [ 1890.659582][ T2964] __nla_validate_parse: 3 callbacks suppressed [ 1890.659608][ T2964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9345'. [ 1892.440764][ T2998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1892.470117][ T2998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1892.502809][ T2998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1895.681461][ T3058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9366'. [ 1895.981621][ T3062] netlink: 338 bytes leftover after parsing attributes in process `syz.2.9365'. [ 1895.981621][ T3057] netlink: 338 bytes leftover after parsing attributes in process `syz.2.9365'. [ 1896.008493][ T3062] macsec0: entered allmulticast mode [ 1896.014758][ T3062] veth1_macvtap: entered allmulticast mode [ 1896.237749][ T3043] delete_channel: no stack [ 1897.719791][ T3099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9376'. [ 1897.755605][ T3099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9376'. [ 1899.518129][ T3137] netlink: 'syz.2.9385': attribute type 1 has an invalid length. [ 1899.647525][ T30] audit: type=1800 audit(4294967305.480:99): pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9385" name="ram7" dev="tmpfs" ino=961 res=0 errno=0 [ 1900.784075][ T3156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9391'. [ 1900.928536][ T3158] netlink: 'syz.2.9392': attribute type 1 has an invalid length. [ 1901.842194][ T3181] netlink: 330 bytes leftover after parsing attributes in process `syz.5.9397'. [ 1901.882253][ T3181] : renamed from vcan0 (while UP) [ 1903.063411][ T3226] openvswitch: netlink: Message has 8 unknown bytes. [ 1903.788567][ T3246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 1903.802530][ T3246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 1905.434460][ T3291] netlink: 18 bytes leftover after parsing attributes in process `syz.4.9419'. [ 1905.482070][ T3290] netlink: 18 bytes leftover after parsing attributes in process `syz.4.9419'. [ 1905.486488][ T3293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9420'. [ 1905.525093][ T3293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9420'. [ 1906.022051][ T3318] netlink: 252 bytes leftover after parsing attributes in process `syz.0.9426'. [ 1906.072535][ T3318] netlink: 252 bytes leftover after parsing attributes in process `syz.0.9426'. [ 1906.122499][ T3318] netlink: 294 bytes leftover after parsing attributes in process `syz.0.9426'. [ 1907.502014][ T3342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9432'. [ 1907.534872][ T3342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9432'. [ 1909.001315][ T3382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9441'. [ 1909.037870][ T3385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9441'. [ 1912.647654][ T3448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1912.662720][ T3448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1917.684377][T30150] Bluetooth: hci0: ACL packet too small [ 1920.349758][ T3605] delete_channel: no stack [ 1922.332543][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9499'. [ 1922.383647][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9499'. [ 1923.320385][ T3666] svc: failed to register nfsdv3 RPC service (errno 101). [ 1923.328719][ T3666] svc: failed to register nfsaclv3 RPC service (errno 101). [ 1923.486238][ T3654] Invalid ELF header magic: != ELF [ 1924.999003][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1925.005466][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1925.536442][ T3675] kexec: Could not allocate control_code_buffer [ 1925.642095][ T3696] netlink: 29 bytes leftover after parsing attributes in process `syz.4.9508'. [ 1925.890473][ T3702] netlink: zone id is out of range [ 1925.915136][ T3702] netlink: del zone limit has 4 unknown bytes [ 1926.012137][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9510'. [ 1926.735336][ T3719] openvswitch: netlink: Message has 224 unknown bytes. [ 1927.137680][T30150] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1927.146413][T30150] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1927.156049][T30150] CPU: 0 UID: 0 PID: 30150 Comm: kworker/u11:1 Tainted: G U syzkaller #0 PREEMPT(full) [ 1927.156103][T30150] Tainted: [U]=USER [ 1927.156116][T30150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1927.156140][T30150] Workqueue: hci2 hci_rx_work [ 1927.156200][T30150] Call Trace: [ 1927.156212][T30150] [ 1927.156228][T30150] dump_stack_lvl+0x16c/0x1f0 [ 1927.156286][T30150] sysfs_warn_dup+0x7f/0xa0 [ 1927.156326][T30150] sysfs_create_dir_ns+0x24b/0x2b0 [ 1927.156366][T30150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1927.156405][T30150] ? find_held_lock+0x2b/0x80 [ 1927.156456][T30150] ? do_raw_spin_unlock+0x172/0x230 [ 1927.156496][T30150] kobject_add_internal+0x2c4/0x9b0 [ 1927.156539][T30150] kobject_add+0x16e/0x240 [ 1927.156572][T30150] ? __pfx_kobject_add+0x10/0x10 [ 1927.156609][T30150] ? do_raw_spin_unlock+0x172/0x230 [ 1927.156647][T30150] ? kobject_put+0xab/0x5a0 [ 1927.156717][T30150] device_add+0x288/0x1aa0 [ 1927.156767][T30150] ? __pfx_dev_set_name+0x10/0x10 [ 1927.156822][T30150] ? __pfx_device_add+0x10/0x10 [ 1927.156873][T30150] ? mgmt_send_event_skb+0x2fb/0x460 [ 1927.156929][T30150] hci_conn_add_sysfs+0x17e/0x230 [ 1927.156983][T30150] le_conn_complete_evt+0x1260/0x2150 [ 1927.157038][T30150] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1927.157082][T30150] ? bt_warn+0xe4/0x120 [ 1927.157119][T30150] ? __pfx_bt_warn+0x10/0x10 [ 1927.157177][T30150] hci_le_conn_complete_evt+0x23c/0x370 [ 1927.157233][T30150] hci_le_meta_evt+0x354/0x5e0 [ 1927.157281][T30150] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1927.157333][T30150] hci_event_packet+0x685/0x11c0 [ 1927.157378][T30150] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1927.157429][T30150] ? __pfx_hci_event_packet+0x10/0x10 [ 1927.157479][T30150] ? kcov_remote_start+0x3c9/0x6d0 [ 1927.157516][T30150] ? lockdep_hardirqs_on+0x7c/0x110 [ 1927.157577][T30150] hci_rx_work+0x2c5/0x16b0 [ 1927.157627][T30150] ? rcu_is_watching+0x12/0xc0 [ 1927.157677][T30150] process_one_work+0x9cf/0x1b70 [ 1927.157731][T30150] ? __pfx_process_one_work+0x10/0x10 [ 1927.157781][T30150] ? assign_work+0x1a0/0x250 [ 1927.157843][T30150] worker_thread+0x6c8/0xf10 [ 1927.157893][T30150] ? __kthread_parkme+0x19e/0x250 [ 1927.157944][T30150] ? __pfx_worker_thread+0x10/0x10 [ 1927.157980][T30150] kthread+0x3c2/0x780 [ 1927.158012][T30150] ? __pfx_kthread+0x10/0x10 [ 1927.158048][T30150] ? rcu_is_watching+0x12/0xc0 [ 1927.158089][T30150] ? __pfx_kthread+0x10/0x10 [ 1927.158124][T30150] ret_from_fork+0x56d/0x730 [ 1927.158157][T30150] ? __pfx_kthread+0x10/0x10 [ 1927.158198][T30150] ret_from_fork_asm+0x1a/0x30 [ 1927.158266][T30150] [ 1927.158305][T30150] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1927.441145][T30150] Bluetooth: hci2: failed to register connection device [ 1929.471697][T31946] Bluetooth: hci2: command 0x0406 tx timeout [ 1930.519370][T30262] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 910 with max blocks 9 with error 117 [ 1930.551432][T30262] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1930.551432][T30262] [ 1931.269113][ T3773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9522'. [ 1932.023020][T30150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1932.035167][T30150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1932.043468][T30150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1932.052807][T30150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1932.061870][T30150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1933.007169][ T3795] chnl_net:caif_netlink_parms(): no params data found [ 1933.495004][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.507757][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.531495][ T3795] bridge_slave_0: entered allmulticast mode [ 1933.539291][ T3795] bridge_slave_0: entered promiscuous mode [ 1933.568001][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.589999][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.611277][ T3795] bridge_slave_1: entered allmulticast mode [ 1933.630282][ T3795] bridge_slave_1: entered promiscuous mode [ 1933.743139][ T3795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1933.768224][ T3795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.114043][T30150] Bluetooth: hci1: command tx timeout [ 1934.815544][T30139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1934.828514][T30139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1934.846058][T30139] bond0 (unregistering): Released all slaves [ 1934.946084][ T3795] team0: Port device team_slave_0 added [ 1934.963018][T30139] HfR: left promiscuous mode [ 1935.003187][ T3795] team0: Port device team_slave_1 added [ 1935.166383][ T3795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1935.179513][ T3795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.209208][ T3795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.263763][ T3795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1935.289359][ T3795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.351029][ T3795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.826851][ T3795] hsr_slave_0: entered promiscuous mode [ 1935.852274][ T3795] hsr_slave_1: entered promiscuous mode [ 1935.873424][ T3795] debugfs: 'hsr0' already exists in 'hsr' [ 1935.901135][ T3795] Cannot create hsr debugfs directory [ 1936.191119][T30150] Bluetooth: hci1: command tx timeout [ 1936.859702][T30139] hsr_slave_0: left promiscuous mode [ 1936.927943][T30139] hsr_slave_1: left promiscuous mode [ 1936.935031][T30139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1936.945158][T30139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1936.984163][T30139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1936.992760][T30139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.046549][T30139] veth1_macvtap: left promiscuous mode [ 1937.063673][T30139] veth1_vlan: left promiscuous mode [ 1937.084661][T31946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1937.097464][T31946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1937.106164][T31946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1937.115598][T31946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1937.124239][T30139] veth0_vlan: left promiscuous mode [ 1937.134427][T31946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1937.385059][ T3872] Invalid ELF header magic: != ELF [ 1938.271429][T31946] Bluetooth: hci1: command tx timeout [ 1938.350420][T30139] team0 (unregistering): Port device team_slave_1 removed [ 1938.407082][T30139] team0 (unregistering): Port device team_slave_0 removed [ 1939.232289][T31946] Bluetooth: hci4: command tx timeout [ 1939.606732][ T3795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1939.672912][ T3795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1939.739330][ T3795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1939.781427][ T3889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9550'. [ 1939.786296][ T3795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1940.352276][T31946] Bluetooth: hci1: command tx timeout [ 1940.537428][ T3795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1940.547741][ T3873] chnl_net:caif_netlink_parms(): no params data found [ 1940.628196][ T3795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1940.723105][T30137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1940.730315][T30137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1940.771751][T30137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1940.778957][T30137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1941.069799][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1941.114592][ T3873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1941.136506][ T3873] bridge_slave_0: entered allmulticast mode [ 1941.148534][ T3873] bridge_slave_0: entered promiscuous mode [ 1941.163196][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1941.175060][ T3873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.183738][ T3873] bridge_slave_1: entered allmulticast mode [ 1941.194703][ T3873] bridge_slave_1: entered promiscuous mode [ 1941.311963][T31946] Bluetooth: hci4: command tx timeout [ 1941.324951][ T3873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1941.345462][ T3873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1941.534936][ T3873] team0: Port device team_slave_0 added [ 1941.558116][ T3873] team0: Port device team_slave_1 added [ 1941.785009][ T3873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1941.792216][ T3873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1941.909357][ T3873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1942.023756][ T3873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1942.030746][ T3873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1942.137994][ T3873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1942.329251][ T3873] hsr_slave_0: entered promiscuous mode [ 1942.346292][ T3873] hsr_slave_1: entered promiscuous mode [ 1942.361935][ T3873] debugfs: 'hsr0' already exists in 'hsr' [ 1942.381054][ T3873] Cannot create hsr debugfs directory [ 1942.724267][ T3795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1943.014434][ T3873] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1943.040028][ T3873] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1943.069553][ T3873] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1943.101659][ T3873] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1943.369223][ T3873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1943.395696][T31946] Bluetooth: hci4: command tx timeout [ 1943.425758][ T3873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1943.483982][T30270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.491248][T30270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1943.545827][T30270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.553070][T30270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1943.594714][ T3795] veth0_vlan: entered promiscuous mode [ 1943.644843][ T3795] veth1_vlan: entered promiscuous mode [ 1943.774721][ T3795] veth0_macvtap: entered promiscuous mode [ 1943.797666][ T3795] veth1_macvtap: entered promiscuous mode [ 1943.846946][ T3795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1943.879951][ T3795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1943.916450][T30267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.932331][T30267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.963678][T30267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.984835][T30267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.225143][T30262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.252708][T30262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1944.334169][T30267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.348144][T30267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1944.388087][ T3873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1944.603289][ T3947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9528'. [ 1945.205452][ T3873] veth0_vlan: entered promiscuous mode [ 1945.220453][ T3873] veth1_vlan: entered promiscuous mode [ 1945.293101][ T3873] veth0_macvtap: entered promiscuous mode [ 1945.306010][ T3873] veth1_macvtap: entered promiscuous mode [ 1945.339391][ T3873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1945.365013][ T3873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1945.399873][T30275] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.424121][T30275] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.445933][T30275] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.456968][T30275] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.472574][T31946] Bluetooth: hci4: command tx timeout [ 1945.586960][T30262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1945.605670][T30262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1945.650907][T30262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1945.663037][T30262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.605650][T30262] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.720137][T30262] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.778055][T30262] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.867120][T30262] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.319570][T30262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1952.334769][T30262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1952.344968][T30262] bond0 (unregistering): Released all slaves [ 1952.729205][T30262] hsr_slave_0: left promiscuous mode [ 1952.735734][T30262] hsr_slave_1: left promiscuous mode [ 1952.744483][T30262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1952.754346][T30262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1952.763812][T30262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1952.774716][T30262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1952.800661][T30262] veth1_macvtap: left promiscuous mode [ 1952.811552][T30262] veth0_macvtap: left promiscuous mode [ 1952.817279][T30262] veth1_vlan: left promiscuous mode [ 1952.825128][T30262] veth0_vlan: left promiscuous mode [ 1953.367644][T30262] team0 (unregistering): Port device team_slave_1 removed [ 1953.407761][T30262] team0 (unregistering): Port device team_slave_0 removed [ 1986.436042][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.442523][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2047.876373][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.882826][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2055.077342][T30150] Bluetooth: hci1: command 0x0406 tx timeout [ 2060.193749][T30150] Bluetooth: hci4: command 0x0406 tx timeout [ 2089.942035][T28155] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz-executor: Error -117 reading block bitmap for 2 [ 2090.300552][T28155] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 2090.303025][ T3855] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 2090.328433][ T3855] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz-executor: Error -117 reading block bitmap for 2 [ 2090.373020][T28155] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz-executor: Error -117 reading block bitmap for 2 [ 2090.512271][ T3855] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 2090.514052][T28155] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 2090.604657][ T2020] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 2090.620489][ T2020] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.0.9123: Error -117 reading block bitmap for 2 [ 2090.637197][T30267] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2090.686746][ T2020] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 2090.801816][T30267] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2090.934795][T30267] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2091.049088][T30267] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2091.186080][T30267] bridge_slave_1: left allmulticast mode [ 2091.191968][T30267] bridge_slave_1: left promiscuous mode [ 2091.197715][T30267] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.212073][T30267] bridge_slave_0: left allmulticast mode [ 2091.217745][T30267] bridge_slave_0: left promiscuous mode [ 2091.224816][T30267] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.611965][T30267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2091.623746][T30267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2091.634144][T30267] bond0 (unregistering): Released all slaves [ 2091.909997][T30267] hsr_slave_0: left promiscuous mode [ 2091.919703][T30267] hsr_slave_1: left promiscuous mode [ 2091.927266][T30267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2091.936333][T30267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.951874][T30267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2091.959320][T30267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2091.997325][T30267] veth1_macvtap: left promiscuous mode [ 2092.004391][T30267] veth0_macvtap: left promiscuous mode [ 2092.010111][T30267] veth1_vlan: left promiscuous mode [ 2092.015729][T30267] veth0_vlan: left promiscuous mode [ 2092.582791][T30267] team0 (unregistering): Port device team_slave_1 removed [ 2092.622344][T30267] team0 (unregistering): Port device team_slave_0 removed [ 2093.400324][T30267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.505437][T30267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.638494][T30267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.735146][T30267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.986943][T30267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.075898][T30267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.154699][T30267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.253513][T30267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.514222][T30267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.647866][T30267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.737027][T30267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.838033][T30267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.006542][T30267] bridge_slave_1: left allmulticast mode [ 2095.013187][T30267] bridge_slave_1: left promiscuous mode [ 2095.019029][T30267] bridge0: port 2(bridge_slave_1) entered disabled state [ 2095.030604][T30267] bridge_slave_0: left allmulticast mode [ 2095.036923][T30267] bridge_slave_0: left promiscuous mode [ 2095.043534][T30267] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.698126][T30267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2095.709615][T30267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2095.720764][T30267] bond0 (unregistering): Released all slaves [ 2096.000722][T30267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2096.013018][T30267] bond0 (unregistering): (slave ): Releasing backup interface [ 2096.022418][T30267] bond0 (unregistering): Released all slaves [ 2096.277465][T30267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2096.287516][T30267] bond_slave_0: left allmulticast mode [ 2096.295621][T30267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2096.308444][T30267] bond_slave_1: left allmulticast mode [ 2096.315443][T30267] bond0 (unregistering): Released all slaves [ 2096.427085][T30267] ovs_: left promiscuous mode [ 2097.520311][T30267] hsr_slave_0: left promiscuous mode [ 2097.528695][T30267] hsr_slave_1: left promiscuous mode [ 2097.536096][T30267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2097.544692][T30267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2097.553146][T30267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2097.560572][T30267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2097.576158][T30267] hsr_slave_0: left promiscuous mode [ 2097.582415][T30267] hsr_slave_1: left promiscuous mode [ 2097.594274][T30267] hsr_slave_0: left promiscuous mode [ 2097.600443][T30267] hsr_slave_1: left promiscuous mode [ 2097.607059][T30267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2097.615694][T30267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2097.626554][T30267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2097.636682][T30267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2097.707396][T30267] veth1_macvtap: left promiscuous mode [ 2097.713189][T30267] veth0_macvtap: left promiscuous mode [ 2097.718910][T30267] veth1_vlan: left promiscuous mode [ 2097.724978][T30267] veth0_vlan: left promiscuous mode [ 2097.733947][T30267] veth1_macvtap: left promiscuous mode [ 2097.739540][T30267] veth0_macvtap: left promiscuous mode [ 2097.748020][T30267] veth1_vlan: left promiscuous mode [ 2097.754687][T30267] veth0_vlan: left promiscuous mode [ 2097.764741][T30267] veth1_macvtap: left allmulticast mode [ 2097.770545][T30267] veth1_macvtap: left promiscuous mode [ 2097.776677][T30267] veth0_macvtap: left promiscuous mode [ 2097.782608][T30267] veth1_vlan: left promiscuous mode [ 2097.788005][T30267] veth0_vlan: left promiscuous mode [ 2098.263061][T30267] ------------[ cut here ]------------ [ 2098.268561][T30267] ida_free called for id=949 which is not allocated. [ 2098.278023][T30267] WARNING: CPU: 0 PID: 30267 at lib/idr.c:592 ida_free+0x1f9/0x2e0 [ 2098.286573][T30267] Modules linked in: [ 2098.290735][T30267] CPU: 0 UID: 0 PID: 30267 Comm: kworker/u10:13 Tainted: G U syzkaller #0 PREEMPT(full) [ 2098.302674][T30267] Tainted: [U]=USER [ 2098.306510][T30267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2098.317026][T30267] Workqueue: netns cleanup_net [ 2098.322179][T30267] RIP: 0010:ida_free+0x1f9/0x2e0 [ 2098.327180][T30267] Code: 76 f6 41 83 fe 3e 76 72 e8 24 78 76 f6 48 8b 7c 24 28 4c 89 ee e8 07 39 0d 00 90 48 c7 c7 00 ba cf 8c 89 ee e8 e8 52 35 f6 90 <0f> 0b 90 90 e8 fe 77 76 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 2098.347207][T30267] RSP: 0018:ffffc90015b97460 EFLAGS: 00010286 [ 2098.353674][T30267] RAX: 0000000000000000 RBX: 1ffff92002b72e8d RCX: ffffffff81796528 [ 2098.362110][T30267] RDX: ffff88802dba1e40 RSI: ffffffff81796535 RDI: 0000000000000001 [ 2098.370103][T30267] RBP: 00000000000003b5 R08: 0000000000000001 R09: 0000000000000000 [ 2098.378503][T30267] R10: 0000000000000001 R11: ffffffffffff5bb8 R12: ffff88801f68d000 [ 2098.386602][T30267] R13: 0000000000000293 R14: 00000000000003b5 R15: ffff88801f68d070 [ 2098.394630][T30267] FS: 0000000000000000(0000) GS:ffff888124e5d000(0000) knlGS:0000000000000000 [ 2098.403745][T30267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2098.410348][T30267] CR2: 00007f86ba553368 CR3: 000000006bac4000 CR4: 00000000003526f0 [ 2098.418379][T30267] Call Trace: [ 2098.421730][T30267] [ 2098.424673][T30267] ? __pfx_ida_free+0x10/0x10 [ 2098.429371][T30267] ? __pfx_proc_entry_rundown+0x10/0x10 [ 2098.434990][T30267] ? xen_error_entry+0x30/0x60 [ 2098.439792][T30267] ? remove_proc_subtree+0x331/0x5e0 [ 2098.445166][T30267] pde_put+0xa9/0x1d0 [ 2098.449209][T30267] remove_proc_subtree+0x487/0x5e0 [ 2098.454400][T30267] ? __pfx_remove_proc_subtree+0x10/0x10 [ 2098.460097][T30267] ? __pfx_rt6_disable_ip+0x10/0x10 [ 2098.465384][T30267] proc_remove+0x6a/0x90 [ 2098.469678][T30267] snmp6_unregister_dev+0xc4/0x140 [ 2098.474882][T30267] addrconf_ifdown.isra.0+0x44d/0x1aa0 [ 2098.480397][T30267] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2098.486139][T30267] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 2098.492120][T30267] ? tls_dev_event+0xfd/0x10b0 [ 2098.496909][T30267] addrconf_notify+0x220/0x19e0 [ 2098.501836][T30267] ? ip6mr_device_event+0x1bc/0x230 [ 2098.507095][T30267] notifier_call_chain+0xbc/0x410 [ 2098.512260][T30267] ? __pfx_addrconf_notify+0x10/0x10 [ 2098.517617][T30267] call_netdevice_notifiers_info+0xbe/0x140 [ 2098.523597][T30267] unregister_netdevice_many_notify+0xf76/0x24c0 [ 2098.529999][T30267] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2098.536865][T30267] ? unregister_netdevice_queue+0x22e/0x3f0 [ 2098.542894][T30267] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2098.549170][T30267] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 2098.555061][T30267] default_device_exit_batch+0x853/0xaf0 [ 2098.560783][T30267] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2098.567044][T30267] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2098.572597][T30267] ? __pfx___might_resched+0x10/0x10 [ 2098.577906][T30267] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2098.584167][T30267] ops_undo_list+0x363/0xab0 [ 2098.588818][T30267] ? __pfx_ops_undo_list+0x10/0x10 [ 2098.594037][T30267] ? cleanup_net+0x347/0x8b0 [ 2098.598675][T30267] ? idr_destroy+0x62/0x2e0 [ 2098.603279][T30267] cleanup_net+0x41b/0x8b0 [ 2098.607729][T30267] ? __pfx_cleanup_net+0x10/0x10 [ 2098.612724][T30267] ? rcu_is_watching+0x12/0xc0 [ 2098.617535][T30267] process_one_work+0x9cf/0x1b70 [ 2098.622561][T30267] ? __pfx_cleanup_net+0x10/0x10 [ 2098.627617][T30267] ? __pfx_process_one_work+0x10/0x10 [ 2098.633125][T30267] ? assign_work+0x1a0/0x250 [ 2098.637788][T30267] worker_thread+0x6c8/0xf10 [ 2098.642473][T30267] ? __pfx_worker_thread+0x10/0x10 [ 2098.647626][T30267] kthread+0x3c2/0x780 [ 2098.651759][T30267] ? __pfx_kthread+0x10/0x10 [ 2098.656469][T30267] ? rcu_is_watching+0x12/0xc0 [ 2098.661328][T30267] ? __pfx_kthread+0x10/0x10 [ 2098.665955][T30267] ret_from_fork+0x56d/0x730 [ 2098.670558][T30267] ? __pfx_kthread+0x10/0x10 [ 2098.675269][T30267] ret_from_fork_asm+0x1a/0x30 [ 2098.680097][T30267] [ 2098.683184][T30267] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2098.690517][T30267] CPU: 0 UID: 0 PID: 30267 Comm: kworker/u10:13 Tainted: G U syzkaller #0 PREEMPT(full) [ 2098.701812][T30267] Tainted: [U]=USER [ 2098.705618][T30267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2098.715675][T30267] Workqueue: netns cleanup_net [ 2098.720450][T30267] Call Trace: [ 2098.723730][T30267] [ 2098.726668][T30267] dump_stack_lvl+0x3d/0x1f0 [ 2098.731279][T30267] vpanic+0x6e8/0x7a0 [ 2098.735272][T30267] ? __pfx_vpanic+0x10/0x10 [ 2098.739787][T30267] ? ida_free+0x1f9/0x2e0 [ 2098.744130][T30267] panic+0xca/0xd0 [ 2098.747850][T30267] ? __pfx_panic+0x10/0x10 [ 2098.752299][T30267] ? check_panic_on_warn+0x1f/0xb0 [ 2098.757417][T30267] check_panic_on_warn+0xab/0xb0 [ 2098.762368][T30267] __warn+0xf6/0x3c0 [ 2098.766265][T30267] ? preempt_schedule_notrace+0x62/0xe0 [ 2098.771827][T30267] ? ida_free+0x1f9/0x2e0 [ 2098.776174][T30267] report_bug+0x3c3/0x580 [ 2098.780525][T30267] ? ida_free+0x1f9/0x2e0 [ 2098.784880][T30267] handle_bug+0x184/0x210 [ 2098.789230][T30267] exc_invalid_op+0x17/0x50 [ 2098.793739][T30267] asm_exc_invalid_op+0x1a/0x20 [ 2098.798597][T30267] RIP: 0010:ida_free+0x1f9/0x2e0 [ 2098.803552][T30267] Code: 76 f6 41 83 fe 3e 76 72 e8 24 78 76 f6 48 8b 7c 24 28 4c 89 ee e8 07 39 0d 00 90 48 c7 c7 00 ba cf 8c 89 ee e8 e8 52 35 f6 90 <0f> 0b 90 90 e8 fe 77 76 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 2098.823167][T30267] RSP: 0018:ffffc90015b97460 EFLAGS: 00010286 [ 2098.829242][T30267] RAX: 0000000000000000 RBX: 1ffff92002b72e8d RCX: ffffffff81796528 [ 2098.837224][T30267] RDX: ffff88802dba1e40 RSI: ffffffff81796535 RDI: 0000000000000001 [ 2098.845202][T30267] RBP: 00000000000003b5 R08: 0000000000000001 R09: 0000000000000000 [ 2098.853179][T30267] R10: 0000000000000001 R11: ffffffffffff5bb8 R12: ffff88801f68d000 [ 2098.861167][T30267] R13: 0000000000000293 R14: 00000000000003b5 R15: ffff88801f68d070 [ 2098.869182][T30267] ? __warn_printk+0x198/0x350 [ 2098.873974][T30267] ? __warn_printk+0x1a5/0x350 [ 2098.878761][T30267] ? __pfx_ida_free+0x10/0x10 [ 2098.883486][T30267] ? __pfx_proc_entry_rundown+0x10/0x10 [ 2098.889053][T30267] ? xen_error_entry+0x30/0x60 [ 2098.893825][T30267] ? remove_proc_subtree+0x331/0x5e0 [ 2098.899134][T30267] pde_put+0xa9/0x1d0 [ 2098.903138][T30267] remove_proc_subtree+0x487/0x5e0 [ 2098.908273][T30267] ? __pfx_remove_proc_subtree+0x10/0x10 [ 2098.913932][T30267] ? __pfx_rt6_disable_ip+0x10/0x10 [ 2098.919157][T30267] proc_remove+0x6a/0x90 [ 2098.923423][T30267] snmp6_unregister_dev+0xc4/0x140 [ 2098.928575][T30267] addrconf_ifdown.isra.0+0x44d/0x1aa0 [ 2098.934054][T30267] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2098.939712][T30267] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 2098.945628][T30267] ? tls_dev_event+0xfd/0x10b0 [ 2098.950424][T30267] addrconf_notify+0x220/0x19e0 [ 2098.955293][T30267] ? ip6mr_device_event+0x1bc/0x230 [ 2098.960523][T30267] notifier_call_chain+0xbc/0x410 [ 2098.965577][T30267] ? __pfx_addrconf_notify+0x10/0x10 [ 2098.970922][T30267] call_netdevice_notifiers_info+0xbe/0x140 [ 2098.976832][T30267] unregister_netdevice_many_notify+0xf76/0x24c0 [ 2098.983216][T30267] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2098.989998][T30267] ? unregister_netdevice_queue+0x22e/0x3f0 [ 2098.995925][T30267] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2099.002206][T30267] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 2099.008038][T30267] default_device_exit_batch+0x853/0xaf0 [ 2099.013705][T30267] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2099.019880][T30267] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2099.025366][T30267] ? __pfx___might_resched+0x10/0x10 [ 2099.030663][T30267] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2099.036841][T30267] ops_undo_list+0x363/0xab0 [ 2099.041463][T30267] ? __pfx_ops_undo_list+0x10/0x10 [ 2099.046602][T30267] ? cleanup_net+0x347/0x8b0 [ 2099.051201][T30267] ? idr_destroy+0x62/0x2e0 [ 2099.055722][T30267] cleanup_net+0x41b/0x8b0 [ 2099.060144][T30267] ? __pfx_cleanup_net+0x10/0x10 [ 2099.065097][T30267] ? rcu_is_watching+0x12/0xc0 [ 2099.069877][T30267] process_one_work+0x9cf/0x1b70 [ 2099.074832][T30267] ? __pfx_cleanup_net+0x10/0x10 [ 2099.079791][T30267] ? __pfx_process_one_work+0x10/0x10 [ 2099.085185][T30267] ? assign_work+0x1a0/0x250 [ 2099.089818][T30267] worker_thread+0x6c8/0xf10 [ 2099.094434][T30267] ? __pfx_worker_thread+0x10/0x10 [ 2099.099555][T30267] kthread+0x3c2/0x780 [ 2099.103629][T30267] ? __pfx_kthread+0x10/0x10 [ 2099.108244][T30267] ? rcu_is_watching+0x12/0xc0 [ 2099.113021][T30267] ? __pfx_kthread+0x10/0x10 [ 2099.117622][T30267] ret_from_fork+0x56d/0x730 [ 2099.122238][T30267] ? __pfx_kthread+0x10/0x10 [ 2099.126836][T30267] ret_from_fork_asm+0x1a/0x30 [ 2099.131654][T30267] [ 2099.135059][T30267] Kernel Offset: disabled [ 2099.139401][T30267] Rebooting in 86400 seconds..