last executing test programs: 10.991646465s ago: executing program 2 (id=4952): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000012c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc8\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r\x8b\x12\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\nu\x99eC\x90^\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\x00\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xb6\xc7\x15\xbd\xed\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-Ag\xdbRq\x1b\xff\x8a2t;.\n\xccWw\xe2\x9cK\fE\a\xca\xd96\xe8\xcb?(\xfaI\xe2\xae,\x95kp\xeaB-A\x9c\t\x00\x02\xcb\x97\xdb_\xefQ\xe3]\x9e\x99;qf\xb2\xf57_^\xa0\'Ne\x01.\x99\xa1\xb4\xc8\xb3\x93\x99\xf6k\xfe\xb0\xaa;\xc99\xb9\xddt\x90\x8a\t\x87\xb7b{\xac\xdb\x83#\x06\xb4\x86\xcf\x03y&\x15|T?\x81\xb2\x88\xf1\x1e\xed\x16\xc9\xf4pg\xe5\x02\xb2\x90g\xe5\xaa%\xc7B\xa4z\x8a\x04\x1a\xc1=\'#PB\xa2~Y\xda\xb5\xfb\xac\xcc\x9c\x7f\xfbZ\x90\x91q\x14\x04\x05\xfa^\xcd\xb4\x18\a\xb0E^\xd1TV\x9cQc\xb1=o\x03\xf4~\x80\x1c\xcb\xee_b$>\x15\xbe$\xb7\xf1\x82\x8e\xc2\xeaL\x9aK\xca\xf9%\rU\xeff\xbdf\x89\x9cg\xf6\xb8\x0en\x83\x87\x7f\x16\xc3q\xf6p\xd5C\xc9/\xcf\xd6_\xee\x1b\xc4\x80n*\xcd\xbd\x04\xa02\x83\x9a\xbd\x8b\xbf\x99\xab\xfe\xd2$\v<\xc5\'\xa2\xe5\xfd\x10\xce\xc1\x9b@J>\xba\xd4v\xdcE\xa1\b\x15\xb2\xfa\xda\xb6\xc6\xd1d\x92\x06k\x18!V\x98.b7\xe2&`\xe4\x11\xc9(\x85\xe1\xdf=Gy\xe3\xd6\xc4R\xfa]\x81\x91\x06l\xd0$`c\x05\xde\x8fiW\x8e\xdd\xc2\x14\x02t\xb4\x05\xceS\xca\x83\xc3\x15\xee[\xcfX\xf6\x8f\x1c{\xde%\x1e\xcb4+\xe5=\x05\x19c!\xc3\xcd\b\xedf\xd2\x90t\x1b\x89\xdfk\xcei\x81\x1f\x1a\xdf\xe6\xff\"U\xc5\x98\xff\t\xd0\x14\xdcG', 0x100000a3d9) waitid$auto_P_ALL(0x0, 0x4, &(0x7f0000000300)={@_si_pad}, 0x0, &(0x7f0000000380)={{0x6, 0x5}, {0xfff, 0xffff}, 0x8000, 0x9d, 0x1, 0x6, 0x1, 0x4a7a, 0xffffffff, 0x3, 0x8, 0x0, 0x1, 0xd, 0xff, 0x9}) r2 = getsockopt$auto(0xffffffffffffffff, 0xa, 0x10000023, 0x0, &(0x7f0000000100)=0x800003b) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000180)={0xfffffffffffff8a8, 0x401}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc02000080288e6361b7cf36f4668e282ceb284564037689291903af3f836a33eadbaa5083a895b65ccd83d3dfd4c7824e5f855af4cd7ec46f30", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf2566000000b6029c00fc249a3d1983089419ac78b69b94682099722346c59fad3cdc9da3f35f0935fd49f5a27676cc078edd7ee670c4046c1e48367b6a0b2d890ada0964c3c3e948f4d5de26534ae49006dadcd647aa8a892d444731813733e9273c81993530c9c8a304b4db9b563a4440f22f1c24f64f5210ee4a004a266fe34f498b3c10dd487312f7cf2d3949b2972a5df8edc3d049b1987a968b01ac3ae39449a0e164909f086d7336a2d15c3b010e20d8fd2c8b2e36bcb2ef56c0c321e101109fb275d0830dc6bc1ddd23138670bcf87a1947dbbe754a4baeea1247d2ff73fd137d4fd5412b5859488e896c39a7c5346fd6ce05e533f75ca962105e728e459c2f0f4f1fd514107cfabff58e4fe4865669a18699c92a8c8a929f79d6c2e23cedcf112966d6ec658a693bbd089312ac7acf2b23999413c68708bf9a378dd5e5d4185a11e46073b2ee9d32fff6aa3c4d3d740f836efa310f9b28bec9a35d8c066105837c893279086e4b9f32e906424f9925e5c5a9edc8b7e9f23d24d387a616d84f1bf8e6fb854c9a32c4ccd7d883493bdfa1e65001891eca1c8093363400e382b9a4fc55c66e546eee1bd98529e76615e0817a39613b11d4f6a1f60a3463bcb221a35a8d2f7e3dd9bd65140bdc42a3c51a0aa790dd12125a9b73bff95bb7e0fdb23978189f91db596fe5adaf1485941e3767a22c937825aafbeb5b541966dd9e530410107e0c5ce78da6ffcd255ed8748cfbb4b30b90717c139814c7c7b0b3826bf8d866279452578da9396725ffb301d80aff89b581bbc71e64de25c5fbf71fee75e1d9af08759a2691e858761985c0abb94fdd9ed70d8d32a64db88480673d14d6af0f2b322e333566d74cacf2a6b2dabc1f11f253127b929164d297431fed3c1845cfdeeb11ad8b68b3f0db168494bfbfdffd521ace82169dcffa60e35e539fa365cf99f65ffcf170cb78c73adac059014e87dff3b39ca00000"], 0x2cc}, 0x1, 0x0, 0x0, 0x48845}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="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", 0x415) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2020009, 0x3c, 0xf9, 0xfffffffffffffffa, 0x407ffe) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) remap_file_pages$auto(0x5, 0x200000003, 0x0, 0x3, 0xc) unshare$auto(0x40000080) r4 = io_uring_setup$auto(0x8, 0x0) madvise$auto(0x300000000000000, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="31c3e0b6f6a5df7e136f924901ebbeb5d61dd21de7c091062c92aecb893a9255be885a5ae4d33bf899306e1a102179659094117f28ef3c8a535f1fe2ee2a7704911d88f056b6e5a011007495a812d3609d41d852937600268a5a65287e05b1cf593b6b7123653361c455dc213e83f7e31891a2aeda14bf8ddd55190f6ceb5483bd8fe76f82da87c6b4825046cc"], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x4008884) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x8}) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) kexec_load$auto(0x0, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000240)="0d721d4b61d9115ee41c47e03ffc435a824ed82b98d2c37ac02db6f70032c2015152d713d3928acbd410f70dc56621c63ed95f3babcafa85cbc20fb8ec705bff08570d0e116a60e63aa6234d846bcda54ff89ee9c21d9f49ca34a558320d7882dbc69c43e22c6e59aec5ba7365803c212b0ef08b5de0eb8aa8d64c6fbfc848a6813f11e4b011df851b9c67342e9a07a159257d4fcc567ddfd7", 0x1000, 0x1c76e6d2, 0x100000001}, 0x5) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYRES32=r4, @ANYRES8=r7, @ANYBLOB="1c002700000000e9df25702c0000"], 0x14}, 0x1, 0x1000000}, 0x400c080) pwrite64$auto(r5, 0x0, 0x1, 0x27) 10.174992607s ago: executing program 1 (id=4954): socket(0x3, 0x3, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x2000000, 0x0, 0x1}, 0x4040080) 9.854658594s ago: executing program 2 (id=4956): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x68) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) write$auto(0x3, 0x0, 0x81) r2 = getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000001000)={0x2cc, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_DATA={0x2b6, 0x9c, "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"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x48845}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="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", 0x415) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2020009, 0x3c, 0xf9, 0xfffffffffffffffa, 0x407ffe) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x300000000000000, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x8}) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x1000000}, 0x400c080) pselect6$auto(0x4, &(0x7f0000000180)={[0x6, 0x1, 0x9, 0x7ff, 0x0, 0x7, 0x2e, 0x6, 0x1ff, 0xfff, 0x81, 0x3, 0x5, 0x9, 0x8]}, &(0x7f0000000240)={[0x6, 0xfffffffffffffffe, 0x7, 0x71, 0x3, 0x3, 0xffff, 0xd0, 0x3, 0x9, 0x1, 0x2, 0x29f, 0x80000000, 0x8001, 0x5d]}, &(0x7f00000002c0)={[0xe, 0x9, 0x0, 0xd, 0xe, 0x10, 0x5, 0x9, 0x0, 0x6, 0x0, 0x8000000000000001, 0x8, 0x4, 0x8, 0x6]}, &(0x7f0000000340)={0xbf84, 0x4}, &(0x7f0000000380)="4c275bdecc58ba15a374d794c00a") pwrite64$auto(r4, 0x0, 0x1, 0x27) 9.83999892s ago: executing program 1 (id=4957): openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8a141, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x440, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121c42, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20b40, 0x0) mmap$auto(0x0, 0x4020009, 0xffff, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @local}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) io_uring_register$auto(r0, 0x0, &(0x7f0000000040), 0x3) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x2, 0x2) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x7, 0x10000, 0x2000008002, 0xeb1, r1, 0x7ffd) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x40, 0x0) 7.069549204s ago: executing program 1 (id=4969): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, 0x0, 0x8) lseek$auto(0x3, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0xa) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1a5981, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000d, 0x8000008000000003, 0xeb1, r2, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)) sendfile$auto(r4, r3, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r5 = open(&(0x7f0000000040)='./file0/file0\x00', 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x12, 0x0, 0x26) write$auto(0x3, 0x0, 0x100082) lseek$auto(r5, 0x0, 0x3) unshare$auto(0x40000080) 5.903565422s ago: executing program 2 (id=4971): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="6235f37627ffa0e4e6f3ba2efe4bacb8139aa956b28c8e44b2f8fa68da7fdbad59d2a917130883252010740be62e831183da2185f35e83aff1e54506a2860c8c5fff948a38849b0455d6cd389d7b2f349ad25637"], 0x1ac}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket(0x10, 0x3, 0x6) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) tee$auto(r1, r0, 0x23, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000480), 0xffffffffffffffff) geteuid() ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000500)={"03658c410ea2340aed8aa28f8c5ee6eb02118ee5e1a2653210ce088fa7b9eef1", 0xf8e2, 0xdc1, 0x101, 0x8, 0x4, 0xffffffffffffffff}) shmctl$auto_SHM_INFO(0xffffffff, 0xe, &(0x7f0000001640)={{0xfffffffa, 0x0, 0xee01, 0x4, 0x7, 0xd0}, 0x7, 0xffffffffffffffff, 0x8, 0x100, @inferred, @raw=0x200, 0xa2e1, 0x0, &(0x7f0000000580)="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", &(0x7f0000001580)="a7b17c3c7eae118a0facb9a5447e91cf6ce292af43514cf253849b663f359505bb344ca5ec47c5fa800cc7dc3f4da7ff4836f86a1fab98ab5726ae4dcffd293354c56665d6716e8f5b5de98b99de4bed8217f6f1825b0ff402430ee218dd56aade87ebc96aad9c93e69079465d6b3a5dd98e25d0478728c2e2c80657c06988696e17e316c593d965096199e27392a4192fa8801efa"}) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) r2 = socket(0x10, 0x2, 0x4) socket(0x25, 0x1, 0x3) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r2, @ANYBLOB="0800fb00", @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 5.567073768s ago: executing program 2 (id=4972): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) 5.385593835s ago: executing program 2 (id=4973): openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0x1ca142, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000028, 0x0) r0 = fsopen$auto(0x0, 0x1) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_GET_KEY(r0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000200)={0x40c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_RIC={0x3f7, 0xb2, "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"}]}, 0x40c}, 0x1, 0x0, 0x0, 0x2004c840}, 0x20000010) r2 = socket(0x2, 0x1, 0x106) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x17c, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x35, 0xe8, "facde0066e5bd609aead23a7ff88429055dcc700e3779c5e614d415c080a1ed62967ed4fca08b0ab5a4bd29d877b21c5c6"}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x4}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x60, 0xbb, "cedf25c990c169b73e037ae3c51f73e1de0c7cc294e48094f0dfb6882ac5012cfc87f48472e4dd3354aac8d32d0623a05b1b0b37cdb46b59d16d00e5643e440dcdb8826c17ff360d46a4501fbe117c00f1488007bc95f0bf9d83d5fe"}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_MAC_HINT={0xc0, 0xc8, "63b8159fea31dee45e41e7c1aaf7ab86b962dbfbe79205210ed891fcd9561848dd25dba40db661de089a4af8f75ec40a94ef09621f6d8d6f3c9af8fe240dedec3f936fac28a91256237457908be542b308c6afb69708d2bb5de570351ca1d2356431bde118e4f5e75fa736a00b4043f9ad7dc0551771fed738b7cf034fb39cbd11b33a3b74c1bad6d9a9b0c668b61d033df0d232360900674371ebbb072599a44a3460388d4192dacabe1c1614895c0e2114d326dce913def9f24703"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040054) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) ioctl$auto(r3, 0x2203, r3) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) 4.498413719s ago: executing program 2 (id=4975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x600000000000000, 0x0, 0x40014}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xfffffffffffffffd, 0x40000000000a5, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r2, 0x80184132, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x9) r4 = epoll_create$auto(0x2) epoll_pwait2$auto(r4, 0x0, 0x8, 0x0, 0x0, 0x8) epoll_pwait$auto(r4, 0x0, 0x9, 0x1, 0x0, 0x8) msync$auto(0x1ffff000, 0x180000000000600, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x10000073) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r5 = socket(0xa, 0x2, 0x88) setsockopt$auto(r5, 0x11, 0xb, 0x0, 0x8) read$auto(0xffffffffffffffff, 0x0, 0x1f40) socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x202, 0xd) 4.133690329s ago: executing program 3 (id=4976): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto(r0, &(0x7f0000000040)='!\xe4-/}\\h\xd7:-@[}.\x00', 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000440)={0x14, r2, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) msgctl$auto_IPC_INFO(0xffffffff, 0x3, &(0x7f0000001b40)={{0x7, 0xee00, 0xffffffffffffffff, 0x6, 0x8, 0xffff, 0x4}, &(0x7f0000001ac0)=0x5, &(0x7f0000001b00)=0xe5, 0x8, 0x0, 0x1, 0x2, 0x1, 0x81, 0x1}) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000001bc0), 0x30880, 0x0) (async) r5 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000001bc0), 0x30880, 0x0) fcntl$getown(r1, 0x9) (async) r6 = fcntl$getown(r1, 0x9) r7 = getuid() setreuid$auto(r7, r7) (async) setreuid$auto(r7, r7) r8 = gettid() kill$auto(r8, 0x11) r9 = geteuid() keyctl$auto(0x1e, r9, r9, 0x5, 0x8) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000002700)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000001c00)={0xa84, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x1bc, 0x5, 0x0, 0x1, [@nested={0x1b5, 0xdf, 0x0, 0x1, [@generic="0bea271caa00ec0d1b5a40d28fb157513013f6b64419bf88f2919e6d45cb47511b8e629214db7754793008ac14ef67bfe8d967863ca819d9bb24ecbd8e055fa49d28108db5b28bbdd2224001f170653c071b2d2e61849d95735f94c18d", @nested={0x4, 0x43}, @generic="04536ef19229cd4579377a8e9894fb41b92dbf102fc0fd5a7e75b85f089a8dd7496cfcd179601459b34c5bbd49b9ef02c58819532c026ee8336e5ce3a89076341e145af2ef7b082e70669cb068dd3d4db778ebc76ea8fd62e4880b6a42f2b4425453b6390086651da6ae675c52ab24087cfc9630c3ba376d6b55f49cd567f80bc7051ff6b0fcf195dc5f9bd997c24191e0abfd4f103e26c3070bdf8fba1fa1b33fe534a1554ccab0192443a660c930eb127be7e463c135cca5085ab559dc3ad6d737a03e", @generic="88caa66f87a8b8ada5646c505a11b95462035400b0beebe57e35ee68eaa8eb6877d5fc18b54cbec3476197f8e9aa39d65859a0e8f35c0965d5cee27460971fcfcfa4d944dca5c481cfc4f264df16ff65ca77bfb84b0acf8439d76807af8787e4ea5172e3a338a2e204cade478544837ab2880c2991932fb7166a017c26b72610cded014b", @typed={0x8, 0x109, 0x0, 0x0, @u32=0x5}]}]}, @TIPC_NLA_NET={0x75, 0x7, 0x0, 0x1, [@typed={0x23, 0x148, 0x0, 0x0, @str='/sys/kernel/debug/kfence/stats\x00'}, @generic="d9c3fb64ca07c6be2baf95e6db90a95db49ad5f72530e899fbc10f68354bcf071af162f3dedb3cc7f84fbcf74da77ab0ac4ad571e0588fa3e244740829", @typed={0x8, 0x126, 0x0, 0x0, @u32=0x5}, @nested={0x8, 0xb9, 0x0, 0x1, [@nested={0x4, 0xe7}]}]}, @TIPC_NLA_PUBL={0x10, 0x3, 0x0, 0x1, [@generic="33bbcba7c003177967c37d28"]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@typed={0x4, 0x10e}, @nested={0x4, 0x45}, @nested={0x65, 0x67, 0x0, 0x1, [@generic="d9703683db3d469c3b0ee4517adc38c75e8a987b0630bf143d97760e4405e43993536a06e563b373e4fe501d7f882654bdac4807c7a618d9f2c5c5013485d34814cff9707084b5213fd9bc2e3e5e36f312", @nested={0x4, 0x111}, @typed={0xc, 0x129, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0x62, 0x0, 0x0, @uid=r4}]}, @TIPC_NLA_BEARER={0x374, 0x1, 0x0, 0x1, [@nested={0x167, 0xe, 0x0, 0x1, [@typed={0x23, 0x40, 0x0, 0x0, @str='/sys/kernel/debug/kfence/stats\x00'}, @generic="b2fe51b580fb2d92f73ddd87ddedf79bff3f62e40138c81e4694780066ae1b278c12938fc490c4a780f5ea63f08f9c89cb3e9e3911db918b2a8c8ebd675ec5e7a8969f0adeda49", @typed={0xf0, 0x61, 0x0, 0x0, @binary="b6987479482dbb2ce9d74da72925607e088df287a041d0b440cad8bb3e96c01e51fd4fb04bdd3b0c34842fefa039edcc7e916e96d5ef804d1d3701a8565111d8b12747300b2c7031c211dff51ac2923f089dcaa8625275300b20cfe00478ee87bde7ae1b4d391da20c87da68b45b59741a4d62e5a427defd6226bb9db69c37ffd76790405013c98f09a73e3cb23ef5df40984867a74ddafd5f776b867c2ce5786099ae5bdbcdb21d0054dec71f3dda2af9fa634fa081a51ae99b84f05137c885799991f4d525382de8f9918dea20b266a6ff66fb7ba08b9b6f2771537874b191eff5ab02b9ae121c1fa7b36e"}, @nested={0x4, 0xd5}, @nested={0x4, 0xe6}]}, @typed={0x8, 0x9e, 0x0, 0x0, @u32=0x5a98}, @nested={0x1aa, 0x11a, 0x0, 0x1, [@generic="1f47af3c6eb27bbe6e6f7dd7d6a09ae7553b4bd6077a2cb39180c6f46a1d0350468da7", @typed={0x6a, 0x62, 0x0, 0x0, @binary="fe3fde77bab37d72af79ad4eec05699512c961c1411ae2266f41e0addca05c9f4403a055d570ed46b2edea971107029b4b43960d7e28134e0a9ab081657aecfd699c4801442ba431571a8b1396d7fc3ab41ed233592573372926d2c3b1e022ba522ba5118e78"}, @nested={0x4, 0x49}, @nested={0x4, 0x15}, @nested={0x4, 0x71}, @typed={0x4, 0x36}, @generic="54ea601f977e233fdfb8740ca53edf3ce51e3e7355b81d0870450824040a7361723bf7e5a40feead562360a3d7388b923122fe8bb4094b19d05720bdc5cb8c9a8eca748b84db62bd135ac90e82373fd8f87db95da780596962ca277513a2aa9cef22c2529c5fa03ebf36dc13a5dd2e08786347820959aed3212b29b5c561dca2d32d823b4174a5ab66c7092b9afd5979e78e92ddfd8ceb39da51372585c41127337f6c7c06a7dcf21c9861cd0e267e645fe24bd7c89585196e9b5e5ae0394666c3972328de3e3a4fb0e52af203392aec25b0e4ba72cd2d5bd7f4382debf72ced1c53d79ff79f13c973a083e128efbded5836f4", @nested={0x4, 0xc7}, @typed={0x8, 0x98, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xfd, 0x0, 0x0, @u32=0x8001}]}, @nested={0xc, 0x9f, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @u32=0x9}, @generic]}, @typed={0x4, 0x133}, @nested={0x43, 0xc8, 0x0, 0x1, [@generic="cc61858537b1407351c8a2334e955a0bbe5f67f08f9243c71b04cb229a0d3adf7f7f89", @nested={0x4, 0x96}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xa6}, @typed={0x8, 0x66, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x2d}]}]}, @TIPC_NLA_UNSPEC={0x5d, 0x0, "44c84d618690b9bbf9119fb856fbab0050f8033a9a36acc542cb91e3d116293a0146b1d82bd48f60fabf49dcc637401f4ebc32aad463054601577406339b0bd0875eddc7843e985f085664cb180fbef481f6a95c121dc4eb09"}, @TIPC_NLA_PUBL={0x3dc, 0x3, 0x0, 0x1, [@generic="7cb0e878cd916f3e14014c5b460df7f1ed10ae699e759c60232629d884a95332e773f638427d6ca87bb9cb336d0d1af0daccaa6477faa32c155ac477ad72e4ec66a46fe72e53a878407776378fcf0d9d1a706fd0ef3a4082382d294d22a5b54d2d5f0addca65f495b428258a8a179171d5d08d58a6bbfaeb5f4a530bc69a94ac71ad00fd5c0ec55900c084734ffbe11f3cc6c07782803fa71ae2a4adeadc57887cc865fc6fdfa4daa493decf09054799d73bbfe53912300b7870e2c7d27defb12b861fc6e4104d9e3b8a5d4f7332e3a2aa0fac624b", @typed={0x8, 0x13e, 0x0, 0x0, @pid=r8}, @generic="7f8fba34a508ee581d5b32b11e200cef6016fdbaa82f5af2ec02da7efc5a93439b33db493e34ce6d53a891ce155ca65c8348c732a7b579be34659af180", @generic="ff577435495e1584cb367aa8feda00c6c15f0d168f7d207c2ee0a3d50d33e7d733ba748061b5173fcc32de6b9a24446a3284e73842092d50d1db45a57be4b38ec51d75edc8c5282e2ac416aaf2c2ce15dd473ffd356b4183425adebed80e3a2dc53cc730785729bf395a8f5b179bbf83c64acb1cf4c50ed062e33efeb310ba6cfb8d9c4a47146868ce84c99773734d0d367086d04d41b4735ed8d26da3ebd84878109c7fc4138eabb1e721458701108e8fecd99931f0df54cb4c", @nested={0x61, 0x10, 0x0, 0x1, [@generic="e2c6b610d249fd48151e3f50ec1a419b62456bb6b452f13bbcd9e3d72fe01d9bfd994eb9fadf32dd1b197a547e017e6b84017efb83", @nested={0x4, 0x20}, @nested={0x4, 0x124}, @typed={0x8, 0x9a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @typed={0x8, 0x87, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x136}, @nested={0x4, 0x56}, @typed={0x8, 0x144, 0x0, 0x0, @ipv4=@local}]}, @nested={0xc, 0x13c, 0x0, 0x1, [@typed={0x8, 0x137, 0x0, 0x0, @uid=r9}]}, @nested={0x194, 0xf8, 0x0, 0x1, [@generic="ca0960f3313139da042a4e18b33a435a428b98ac66880249e7d236fae089a6ff16a2de9d4168262022403b44386ed7518aa01a625edc584656a9e3ed9c8ad7609d09a1b37fafddad3715d575b47419846c77393831e04e6709219942c718f8318b03056ada3c6cb992d875256221aaf40129fb01b0dd525c4a9086eb06ad593038751cb8b98090e6a56327d983395282b9455a173de6180f13f09f0d9f4454e7d82a90", @nested={0x4, 0x1}, @generic="5dc49e83fbe6f33ea1a55eda4216198751ec2b76913f859c15a26a85bb94f08379b248476f809077e294f1860b38ef968cf973db5432a9f53fc38ac933730d1993930387187cb486133c14794775682e94a6c99b654fc8fe017ac4c311c7fd015aca2eec8913a851ace322297e1f07195430d68178ec7a7086cfeb6760046ab433325a6c764662a8b5c9958188d82ee402118aa55d45cd2ae6cc49c3695fb6c045423304d9bf96602d8d1abd8477ac01c4a3bbcd82ed155f1f93b79d068701f61204a8e92b83df58c2f87dde2c88de797e169fe78ee527c09c74547f5ea4f001bbd61db2f9acd75f87"]}]}]}, 0xa84}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008810) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="00032bbd7000fddbdf255a0000000800a400000000800400ec00080023018300000005000800040000000400ff0022000700b5eca65802ca55d157f421506ad810546d21f1cae6424aa3a46404ecaa6700000800020028292d00"], 0x60}}, 0x0) (async) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="00032bbd7000fddbdf255a0000000800a400000000800400ec00080023018300000005000800040000000400ff0022000700b5eca65802ca55d157f421506ad810546d21f1cae6424aa3a46404ecaa6700000800020028292d00"], 0x60}}, 0x0) r11 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto_FIOQSIZE(r11, 0x5460, 0xff) (async) ioctl$auto_FIOQSIZE(r11, 0x5460, 0xff) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f00000001c0)={{0x6, 0xee01, 0xee01, 0xf133, 0x1000, 0x3, 0xfff8}, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x3, 0x401, 0x58, 0x5, 0x7, 0xc9, 0x401, 0x4, 0x800, @raw=0x4, @raw=0x10001}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x17f0, r10, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x128, 0x2c, 0x0, 0x1, [@generic="3c95ebf47137afd6d81d266155f5b4b8fcf38c89069399a974520f57b8727eda", @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xfb, 0x7f, 0x0, 0x1, [@generic="8eda53824094ca02cd7f58e693ca2105c12c7d28206d62569115cdeafad507e2372cc87a776729e9e4438d7f2372c7ad156b870f14a634805f752d57c50d9c4453e88ba5420bf0fe33bc61c86dd21e6c5c639991b8932b95a72e66731ad22f78f189e55946bfb92088cb3445763f4ff779c0be266eff7697697af232e9336c14c0375b21ce20b1c67997e0a73bc12bb3560f31b4f3f72cfd661cd5a625ef027c063705c250c71e1ca254591e419349be1f566c70fc2c6625ad442da1f24250449df2f275bf872b2dc0fe02bf21f89224d48dfb86e692fb56b128180f1c0d2d26ef1d92ddaa8d8a04311a4cb417fcd42fc0e2400b969c81"]}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x90c4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_BEACON_HEAD={0x52d, 0xe, "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"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "55b3ec722847fabdf7fe218a"}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x114f, 0x124, 0x0, 0x1, [@generic="87162d823fc59d7a80d2584cc2e417f9414c367b3614fc4b957018b7bd78deb0fb682fc6db6f1caeb1994cdfa79cef259d905268a66595cb290ec90db82fd679de025fc507b5bf879d7e0419ed80912e969020", @generic="543f90d16277859ac9142536cd130c0d182225669ddf5b94184e42178405129e46126a427a9dd86ea15ef72cc544eada34078948366ff141398305d2548264b71aa368668e13848927c27d9fa8ddffad78659303a26d9eb20bd04a6bf90020ce71ee94b18126213cb4aa4a988b44a7b5393613577d4a5b515b222b8c6ca3171872a5cc86a59392dec971d2aa8ea34d16b863216736dfcf63705189a289b756a0b9b94b94dc76188f76759f6a0627dbc51bc957a1e284dd2341db0ab7f7a023b55906b5149ee0b9a124a5753de80a8ecd95680d24684db867a14c9bb9c697badd9db6f699fa75f545", @nested={0x1010, 0xf9, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @uid=r12}, @typed={0x1004, 0x105, 0x0, 0x0, @binary="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"}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x17f0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0x4) r13 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r13, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async) sendmsg$auto(r13, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) 3.696794963s ago: executing program 1 (id=4977): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r0, 0x0, 0x400) 3.696071061s ago: executing program 3 (id=4978): madvise$auto(0x0, 0x2000040080000003, 0x200e) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4831, 0x40eb2, r2, 0x300000000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, 0x8, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x80000, 0x165) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x8000000000000004, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x8c, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x8000) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r4 = gettid() rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, &(0x7f0000001ac0)={0x80000000000003, 0x8}, 0x8) tkill$auto(r4, 0x7) 3.040571764s ago: executing program 0 (id=4980): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04\"\x00\x00\x00\x00\xa6\xb8\xd8\xc6\xb05>ha9\x89|d\x00\x00\x00\x00\x00\x00', 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x10000]}, 0x0, 0x0) 3.037563437s ago: executing program 1 (id=4981): prctl$auto_PR_GET_ENDIAN(0x13, 0xc4, 0x2, 0x0, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyrb/power/runtime_status\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram8\x00', 0x4a4c0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x6, 0x3, 0x0, 0x40000000e8b5, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x9, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x4000008, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0xa, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6ef) r4 = socket(0x1a, 0xb95d12291789b860, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=r0, 0x4, @old_map_fd=r3}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r4, 0x8003) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) 2.555609839s ago: executing program 3 (id=4982): r0 = socket(0x3, 0x3, 0x8000) connect$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x54) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x2000000, 0x0, 0x1}, 0x4040080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@ILA_ATTR_IFINDEX={0x8, 0x4, r5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x9}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7fff}, @ILA_ATTR_IFINDEX={0x8, 0x4, r6}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc41) getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) 2.28798339s ago: executing program 3 (id=4983): unshare$auto(0x40000080) mprotect$auto(0x200000000000, 0x806121, 0xc) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x0, 0x101, &(0x7f00000005c0)={0xfffffffffffffffb, 0x2}) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000, 0x0, 0x1, 0x6) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) 2.132798016s ago: executing program 0 (id=4984): mmap$auto(0x0, 0x402000b, 0xdc, 0x17, 0x401, 0x8008) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x60842, 0x0) epoll_ctl$auto_EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x9ea5, 0x80004}) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pread64$auto(r1, &(0x7f0000000380)='\x00', 0x8e1c, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r3, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828848"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0xfffffffffffffffe, 0xa00006, 0x87f, 0x40eb1, 0x602, 0x6) r4 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/swap/vma_ra_enabled\x00', 0xe3102, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r5, 0x2, 0x50, &(0x7f0000000080)='/dev/ptyb3\x00', 0x9) sendfile$auto(r5, r5, 0x0, 0x3) fchown$auto(r5, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyb3\x00', 0x101000, 0x0) ioctl$auto_TCFLSH2(r7, 0x540b, &(0x7f00000001c0)="1886d0247980e6477743afd285c280f0ce437fb068547436af58afbb6cfa7b92c964867d31ebdf4db49b168a8b1820803cef022e408eab732cef6fc4eb5d611b225fa3365a13b4ddb3de54474b76e5c6edf1f8b02c7796c422e34cfc045262c334b4fafb0e3f1b42dec2c2389594239966b4a70116de2b70b37345f2b06de45b2c01") write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)='5', 0x1) bpf$auto(0x9, &(0x7f00000002c0)=@raw_tracepoint={0xfffffffffffffff7, r4, 0x0, 0xc}, 0x2f9) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="009d000000ed71b469ea88efd5497c8880189ea61a3341383265c2c90f04655e7105d030e900a167e327c2f660a7ce172d8b7d85da91ed520bdd03c2db9e34524bffcd994b832bd35cc0b4fc609df5852208ff7842e9b6bf6372ff2b8ed76961bfcf2387e47d", @ANYRES16=r8, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4068040}, 0x40840) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40089, 0xdf, 0x9b72, r1, 0x28000) userfaultfd$auto(0xfffffffa) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r9, 0x0, 0x20) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cpu.weight\x00', 0x128082, 0x0) write$auto(r10, 0x0, 0x4) 1.739379403s ago: executing program 0 (id=4985): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r0 = socket(0x26, 0x3, 0x29) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x81300, 0x0) socket(0x2, 0x801, 0x106) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x783a06, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01012b067000fddbdf0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x80c00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) r3 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x7fffffffffffffff, r3, 0x6) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x3, 0x3, 0x0, 0x0, 0x4) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 1.411267102s ago: executing program 0 (id=4986): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0xe2242, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x8, 0x8, [0x80000001, 0x1200, 0x9, 0x7]}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd13\x00', 0x0, 0x0) 1.247442954s ago: executing program 0 (id=4987): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_getres$auto(0x10, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r3, 0x1b, 0x74bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908288a8"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x400a000}, 0xc800) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b71, 0x1) r5 = fcntl$auto_F_GETOWN(r1, 0x9, 0x80) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1c6c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1547, 0x6, 0x0, 0x1, [@generic="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", @nested={0x277, 0xa9, 0x0, 0x1, [@generic="56a923816ef363e0ae28830696d7e2e9fa8ff5df6e301f3d132d2972a7fd55bfca5e7d2a3993b42af3bf773b4c7ec9c2a4cbba8bccbd055e88f2ca6286ab172ff0a6ee21b69e12cb76022d823add2d6368af2da0713300f41a733be7081515723d3e6dd60cc10f58cf2af3577db9e231223bd5b3c9681960c376ee9dc08df1ce5e1f69591ab1d251268071684b9c2fb58d8e9663f2c39164c54381f618b1b9378b75e917a4e8605c42150ff7b3cca82eac369e96da91b44acd", @generic="4bad5f4a413b15027105562e374059be40b088840b1a27f1ec42a574bdc019a369edef388ee414dab7c87445c7ecaeb4b4c47568c7615a4816c4f56592c5dcc73d8a7e58eb2c8efda6178438c5aca9f776d58d640e25242cc5d9d70c452b6ff8b25ec7a0098abf3915763954e69ed6e7ef823ac7a24e1288204bc353c552a0114895fbbccaaabf9b8e744455942c6c3851126b345bf4dfd8fe95d70e72737fd5fa4c384ffb6d839e31de853501073b37fa4d6573765f350b2abf6d7ae33de9913c5bcacb8cae5056a498fcdc47bbc5b54780cbd9b67274700e0bc8fe2cd7af14293722aae55c959c7884450897e7de9f9ec7e2b3", @nested={0x4, 0x101}, @generic="931273bbdf2ea52f2b8f06eedd1cc2fb61a6f44717df9dcb072913b99924639ef2fd7edcacbe3ec54637f3a3888003e0bb41834d198dac1c2e489b5fa4f25c5b12f00da0fc1874db9079960204f841e0bb360eaa0478bb775801958710a2e7af3ac414980620a866a2093ed7d2e322f222a5207784cf7969dd7af20c58e6361b9e19c0eaf1e8446cf50e668145d1a2d260c85166b4ebafe231c7dca147078bcbc2de7e764ecc61758536f67915acdd3532def04cf1cf511c9963", @typed={0x4, 0x150}, @nested={0x4, 0x134}]}, @typed={0x4, 0xa}, @generic="3e015a59eaf1579a8a5a12fd06cf78795f7bd2cee7b4b33a1ff1d902b2e6316f17a4cf8047a760dfddcee72685474705f2a27da4af6b0d905a81104e61c9b2eef1889b7c053553192c8193e1ce6f4fa38a89b8eabb3a393a6c302b9bf202ee095f43579312719a8a08498fa37a8eccbea8349b8a4eb1588b21f74c111b0acfe9af985b54c8c12b6cba55ec058548c61d246223e241bfd35a8106bafa2f4c44be30c928a7c11d5c9fe200740800b5deaaffbaea2dbfcf4ffbbd8d574f0ccb6fe7a8de71d3181c94f0d9e703ab3b27a36dbbb1a6ee2c7473", @nested={0xff, 0x91, 0x0, 0x1, [@generic="69646f17af7ee47caabb6231b0b4d96cc1cb", @generic="1956e1c89158fe8cb13b4a6f5ecc920ab05f7c91bfe62f49b2802f543629a695f7ddb12ee555ae7a67b60ac8341a27b07e27e42c7254ab53548e61bca3712c6c8b1e3dca1e44244cad6733eb2f36e746ccf5805c6d92b01ac937b0a63c57fefe89162f5a52b5573a71685888821ceda697d651bd094a69e5870d4511c12c2d9c7b046fd21fbdf84daf2379a611adba32163e64f1b9d5d613c252f4782c5f1d69393198c3c30e0c541805ab6244a08e9c0554d488dc697207cc29cd9a1e796e8fefa1702174916e2396bdef2600af0b32cc375cc7c742c7e93e668176ffcccfb5ee8009cce48e4576fa"]}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xe5, 0xdb, 0x0, 0x1, [@generic="65ef28584016361f3d639e6c8a3b7f0acc77748ac668538251fb298e718926ae49f3356c65402b95db316b5c858644cf818001ef11a6e1983f18424afaa50897840b5cb6e5aecdc471c2c1e0c3b2c63b517415c9f35ecbb39449def268eb601f8e7d44d1b2742322a2fdd7e25811861dffd3cc14d20d404f0c3cbc3bdf7f998938ef78610db40854ed72a109fc84a18ab61924b09acb53d2e4b4a1073b4265a02da4a7c75eaf3f5829cc458c9ffc1bff08136799960d03c0e69c7f0cbfc8a046d677e5c8b65f5f3b3f34a881b71f931bffee323aa3", @generic="a07e8cd1027edd536696b1f1"]}]}, @TIPC_NLA_MEDIA={0x65f, 0x5, 0x0, 0x1, [@generic="05519201b3a899dcca37a5a9e79cdd5a636f3d9b02af499d06af553e620fa578688b439928132b43f5ef8d5e5bf9e28a8bd53b5f1c68373c6b9fe6ec0376743562d5ec60f01d0b2e57094fafaa1823b0a7388a2503264bb84afdaf2ff2c9de22b352e73d0c6abe1b8f907c84abfa19948ecda973a17b2ea93b1260dce9a3c868f2df74ac8e8332a37758cca36cda36c3b5025481467c8917098427646dba0663c6fc8d9acbb69c16c4f75f9f0d941bc26ca8fb3d715e02fe3f021b9be8d431c2c10ec055c290965fe59581ca4416b62c7552bd6aa10aff658c43028a25a396195e4f21e0cb50c3a571fd6b6245fcbc8e663abce6", @generic="38c71d4e38bee741e2cf0c3c6dc5b4b3380b5ba2c0d5c05539b8c9609f56ccad453f0fd73346edf0b1e23fd9b0a2ced916372429c4ce52b0169add1cb2bcbed11a6af69f989128313f52531803485bcfb9b36a6bb5a1f2f67e02466432d7eaa78400a670e5d30a4c46aa830a7045f96bdeb1ea7dbd616232b487a27b3f7d23a1de59f32ee90fe67a2461064134390aceb0fa373bee4e73ca76b1e515e012ceafc77fa8c32829f31f064435044393ec5d225722c6715e13c39ee8d15943807a84618786b94062c0", @typed={0xc, 0xf1, 0x0, 0x0, @u64=0x5}, @nested={0x150, 0xc7, 0x0, 0x1, [@nested={0x4, 0xa5}, @generic="72c8003e69a43d20524dc883ee7f581792e49e745fca9e47457f5f6d814b3d991d7bbf5674004ce21073b403cb74f30c62d7a12f5fd2db5541cb30f93663cf6e2cdb8ee4f30e8d37885925a16602", @generic="6bcdaa7cede6cb15891056557cdfddbae982709b0f0584a6e90509648ceefefb55d6f2da43e6fcd0954818da71c771bba54f5881b164b0b6e71e0c208f96728d0728e0cd06db9b3fcb3ba352a86796cde6528ae2f170", @generic="655e9c7146394fe1233f64c3a92c4c9e4605fe1dfd06d1ce586e404da3c63ece5b086adfa5a71f0651b83b3c3576f0cf0e66ae3e9513f2040b643a7c55e924bd535f405f7965c8f365cab1cc3c2630c5ebe01539da2a10cd86d93e591852d67fca654ec7c655d3992d6df87008031cdfe8943a8a961d0ef183ac097a8c0af040bdd0cb834a7c9c3817a82aa5c30ef0d0c8769362d4d8a1e3a2e54515", @typed={0x8, 0x45, 0x0, 0x0, @fd=r4}]}, @generic="48d95323c3443bc17ee2704e90f9a18ac0bcdc295c2dda75addb2ed0b6c568a7f334a35f38314723ebc859b0c813148ebf243968b6dc89c6f2044a696b365c15b78a871cb39dc2a67a76bbc91242937bae0d4adcd9757c31381424dfe63524aaf3931f39fe84226f312234aee83a29a169a44670723a2c80ea552f5d177545f4cac57340e8c2eedce2540eaffe3c3aa0bd459445adab9dfdc78cc371f6b90a3e40dfb50e8d9167dd3dcc39e0bae75ebd3c796005237190a1f7f22a6fc8bd6407869c6db003669973ebd5dc21ea863976", @typed={0xc, 0x118, 0x0, 0x0, @u64=0x2}, @nested={0x16c, 0x45, 0x0, 0x1, [@typed={0xc, 0x8b, 0x0, 0x0, @u64=0xffffffffffffff14}, @generic="2d6b41169754e107fdfb5213dac86ca5f37b6ac021c84bb7e167cee745bc409ea78e1daa432a640a3f757af6e86742a87abffa0617e83f42271911294f9e8959a61b7ca505db59d8b0117146bd66e5f7e41346ad8c3893fd071626d57fac1783b46b41471a2e296068697f23ee85aa1eedae83a89f7a6c8b82fafd6a8cb880f019b5ea357d6f58f2131be9af3c4c72e1203cd72080061bb5d066a7cb0437c67f19ab4bf8bb6b59262c17cbec7c8539eb2fc25f29412c3e9f716d33017662156f482aeb1648d3", @typed={0x8, 0x6f, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0xbf, 0x0, 0x0, @uid}, @generic="242d1310677b15a48d64fe3204736b255fe1d74ddd0786b7c72a0b3743d1fc37efb3e0159a8694cb04503fc4e49c0870cec6cb4e2cee19538b6acc650eeec53f04b5986cf3b35b8785b8999737748a6d4acbcc6d9bcb2035fa6f5b7c89fee45152ab90fc05320df30b6d4fd80b7580362ed038360af2c7fa11e07764b7cf2136d74091949d74"]}, @nested={0xf2, 0x9, 0x0, 0x1, [@generic="e69d5753dbaac67da0473f15531ea11107354bf75e8555e69962296ba7598bbd43ac962b8c2fba0d97b3748c6487246e389d923a51f7b122a12f2c7e4ffc5dad649b6fc2a51c1b3c9f047e148e9b5d50755448e5666a34ab60b0e3c0eefacc73f23a7fa58391dfe6ffd6130d5786b6874dc6e9fffc98920fad84c704e3219ef9e2f2e1599edeecebd22862d841dd714f9728afb9557aff013503bd8b209118001f08b6d92c61ae6ad57e12cc43fdcbc6a8bf37ee070539217a400e7f701fedc9a059d44d08a883195112928e7adf18763167c9de742d8eb9daab", @nested={0x4, 0x17}, @typed={0x8, 0xab, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x28}, @nested={0x4, 0x49}]}, @typed={0x8, 0xa9, 0x0, 0x0, @u32}]}, @TIPC_NLA_UNSPEC={0xaf, 0x0, "a252979906fbb974e537ccbf1ddb01f89bd719ef1e69c00fa8d4bc901d33fec418cca9676864ce16a6811d42d020970f7ad28fa80be64d4e9517ad7ff0be58504222e173f201cae915184999b489630d63ca3781634f8d9f544f0141718cc3572544ad275fbcd68a95bb1a307e776fd295779e717d98bad627e4c09e4054d420ad94e81af85e8b5ea97fa89f6e2190d89b026d2dbed2800c1cef3eb0f36adc58e69e2df991d415b8fe8af0"}]}, 0x1c6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x108002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x4000000000000000, 0x4000000}, 0x0) write$auto(0x3, 0x0, 0x80000003) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r8 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r8, 0x4008af00, 0x0) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x7fff, 0xd01f, 0x4) 1.170709309s ago: executing program 3 (id=4988): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r0, 0x0, 0x400) 951.599606ms ago: executing program 3 (id=4989): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r3 = socket(0x2, 0x2, 0x88) setsockopt$auto(r3, 0x0, 0x20, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r6) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdc03, {0x4, 0x0, 0x1f}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 813.770606ms ago: executing program 1 (id=4990): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r0, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) setsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x4, 0x14, &(0x7f0000000040)='\x00', 0x7f) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0x7491}, 0x800}, 0x4, 0x4008) r1 = socket(0xf, 0xa, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x20008000) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000500)={0x9, 0x0, 0x7f, 0x9, 0xdadc, 0x8000, &(0x7f00000004c0)="a658b7d6bbf9e4e64ed988c76dd257a4d0394c27fcc98451d546280fc251d98535fc49a4ac52178a82cd45"}) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0]\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) 0s ago: executing program 0 (id=4991): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r3 = socket(0x2, 0x2, 0x88) setsockopt$auto(r3, 0x0, 0x20, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r6) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdc03, {0x4, 0x0, 0x20}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                syzkaller syzkaller login: [ 1881.996741][ T8404] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1882.008937][ T7657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.473198][ T7657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.792676][ T7657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.620265][ T7657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.988930][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1884.250866][ T8439] random: crng reseeded on system resumption [ 1884.469494][ T31] audit: type=1800 audit(4294967307.310:21): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4661" name="features" dev="configfs" ino=253840 res=0 errno=0 [ 1884.690124][ T7657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1884.772862][ T7657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1885.226174][ T7657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1885.254299][ T7657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1885.307377][ T8459] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4663'. [ 1885.320286][ T8457] FAULT_INJECTION: forcing a failure. [ 1885.320286][ T8457] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.335730][ T8457] CPU: 1 UID: 0 PID: 8457 Comm: syz.0.4662 Tainted: G U syzkaller #0 PREEMPT(full) [ 1885.335782][ T8457] Tainted: [U]=USER [ 1885.335793][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1885.335812][ T8457] Call Trace: [ 1885.335824][ T8457] [ 1885.335846][ T8457] dump_stack_lvl+0x16c/0x1f0 [ 1885.335905][ T8457] should_fail_ex+0x512/0x640 [ 1885.335964][ T8457] should_failslab+0xc2/0x120 [ 1885.336002][ T8457] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1885.336038][ T8457] ? skb_clone+0x190/0x3f0 [ 1885.336096][ T8457] skb_clone+0x190/0x3f0 [ 1885.336165][ T8457] netlink_deliver_tap+0xabd/0xd30 [ 1885.336226][ T8457] netlink_unicast+0x64c/0x870 [ 1885.336285][ T8457] ? __pfx_netlink_unicast+0x10/0x10 [ 1885.336340][ T8457] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1885.336388][ T8457] ? __lock_acquire+0xb97/0x1ce0 [ 1885.336448][ T8457] netlink_sendmsg+0x8d1/0xdd0 [ 1885.336508][ T8457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1885.336566][ T8457] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1885.336627][ T8457] ____sys_sendmsg+0xa95/0xc70 [ 1885.336666][ T8457] ? copy_msghdr_from_user+0x10a/0x160 [ 1885.336717][ T8457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1885.336763][ T8457] ? __pfx__kstrtoull+0x10/0x10 [ 1885.336815][ T8457] ___sys_sendmsg+0x134/0x1d0 [ 1885.336884][ T8457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1885.336960][ T8457] ? find_held_lock+0x2b/0x80 [ 1885.337027][ T8457] __sys_sendmmsg+0x200/0x420 [ 1885.337084][ T8457] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1885.337152][ T8457] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1885.337224][ T8457] ? fput+0x9b/0xd0 [ 1885.337257][ T8457] ? ksys_write+0x1ac/0x250 [ 1885.337280][ T8457] ? __pfx_ksys_write+0x10/0x10 [ 1885.337308][ T8457] __x64_sys_sendmmsg+0x9c/0x100 [ 1885.337345][ T8457] ? lockdep_hardirqs_on+0x7c/0x110 [ 1885.337381][ T8457] do_syscall_64+0xcd/0x4b0 [ 1885.337421][ T8457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.337446][ T8457] RIP: 0033:0x7f442658eec9 [ 1885.337465][ T8457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1885.337490][ T8457] RSP: 002b:00007f4427390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1885.337514][ T8457] RAX: ffffffffffffffda RBX: 00007f44267e5fa0 RCX: 00007f442658eec9 [ 1885.337531][ T8457] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1885.337547][ T8457] RBP: 00007f4427390090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.337562][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1885.337577][ T8457] R13: 00007f44267e6038 R14: 00007f44267e5fa0 R15: 00007ffd8198b008 [ 1885.337609][ T8457] [ 1885.411828][ T8465] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4663'. [ 1886.098674][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4664'. [ 1888.114862][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'. [ 1888.147054][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1888.791154][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1889.040486][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.047706][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1889.161281][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.168548][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1890.282835][ T8550] nbd: must specify at least one socket [ 1890.349141][ T8550] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1890.522777][ T8578] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1890.639937][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.314830][ T8579] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4679'. [ 1891.451717][ T7657] veth0_vlan: entered promiscuous mode [ 1891.766608][ T7657] veth1_vlan: entered promiscuous mode [ 1891.871065][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4683'. [ 1892.244475][ T7657] veth0_macvtap: entered promiscuous mode [ 1892.301138][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4682'. [ 1892.794985][ T7657] veth1_macvtap: entered promiscuous mode [ 1893.557557][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1893.632527][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1893.652421][ T7770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.668234][ T7770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.677881][ T7770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.689195][T26756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.073980][ T8789] nfsd: Unknown parameter 'TšR‚Ð' [ 1895.195475][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.282751][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.532376][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.571070][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.741833][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4690'. [ 1895.768804][ T8816] HfR: left promiscuous mode [ 1896.464843][ T8838] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input285 [ 1897.233707][ T8846] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input286 [ 1898.297537][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4694'. [ 1898.734762][ T8972] kAFS: unparsable volume name [ 1901.167712][ T9072] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1902.428153][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4705'. [ 1903.085267][ T9181] FAULT_INJECTION: forcing a failure. [ 1903.085267][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.098206][ T9181] CPU: 0 UID: 0 PID: 9181 Comm: syz.2.4707 Tainted: G U syzkaller #0 PREEMPT(full) [ 1903.098243][ T9181] Tainted: [U]=USER [ 1903.098252][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1903.098266][ T9181] Call Trace: [ 1903.098274][ T9181] [ 1903.098283][ T9181] dump_stack_lvl+0x16c/0x1f0 [ 1903.098327][ T9181] should_fail_ex+0x512/0x640 [ 1903.098366][ T9181] ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0 [ 1903.098394][ T9181] should_failslab+0xc2/0x120 [ 1903.098421][ T9181] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 1903.098450][ T9181] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1903.098481][ T9181] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1903.098503][ T9181] ? register_lock_class+0x41/0x4c0 [ 1903.098540][ T9181] ? mas_dup_build.constprop.0+0x5f3/0x1740 [ 1903.098584][ T9181] ? mas_dup_build.constprop.0+0xc52/0x1740 [ 1903.098630][ T9181] mas_dup_build.constprop.0+0xc52/0x1740 [ 1903.098676][ T9181] ? __lock_acquire+0x62e/0x1ce0 [ 1903.098714][ T9181] __mt_dup+0xeb/0x1f0 [ 1903.098750][ T9181] ? __pfx___mt_dup+0x10/0x10 [ 1903.098812][ T9181] dup_mmap+0x373/0x21d0 [ 1903.098855][ T9181] ? __pfx_dup_mmap+0x10/0x10 [ 1903.098908][ T9181] copy_process+0x4099/0x76a0 [ 1903.098955][ T9181] ? __pfx_copy_process+0x10/0x10 [ 1903.098996][ T9181] ? _copy_from_user+0x59/0xd0 [ 1903.099039][ T9181] kernel_clone+0xfc/0x930 [ 1903.099074][ T9181] ? __pfx_kernel_clone+0x10/0x10 [ 1903.099106][ T9181] ? futex_private_hash_put+0x18a/0x300 [ 1903.099147][ T9181] ? __pfx_futex_wake+0x10/0x10 [ 1903.099187][ T9181] __do_sys_clone3+0x212/0x290 [ 1903.099235][ T9181] ? __pfx___do_sys_clone3+0x10/0x10 [ 1903.099320][ T9181] do_syscall_64+0xcd/0x4b0 [ 1903.099360][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.099387][ T9181] RIP: 0033:0x7f009bb8eec9 [ 1903.099406][ T9181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1903.099430][ T9181] RSP: 002b:00007f009cad6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1903.099452][ T9181] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f009bb8eec9 [ 1903.099468][ T9181] RDX: 00007f009cad6f20 RSI: 0000000000000058 RDI: 00007f009cad6f20 [ 1903.099484][ T9181] RBP: 00007f009bc11f91 R08: 0000000000000000 R09: 0000000000000058 [ 1903.099499][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1903.099514][ T9181] R13: 00007f009bde6038 R14: 00007f009bde5fa0 R15: 00007ffc2c2efce8 [ 1903.099546][ T9181] [ 1903.537742][ T9186] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1904.231336][ T9197] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1904.550452][ T9217] netlink: 'syz.0.4713': attribute type 1 has an invalid length. [ 1906.126527][ T9297] netlink: 'syz.2.4714': attribute type 1 has an invalid length. [ 1906.147559][ T9297] FAULT_INJECTION: forcing a failure. [ 1906.147559][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.180684][ T9297] CPU: 0 UID: 0 PID: 9297 Comm: syz.2.4714 Tainted: G U syzkaller #0 PREEMPT(full) [ 1906.180735][ T9297] Tainted: [U]=USER [ 1906.180746][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1906.180766][ T9297] Call Trace: [ 1906.180776][ T9297] [ 1906.180789][ T9297] dump_stack_lvl+0x16c/0x1f0 [ 1906.180845][ T9297] should_fail_ex+0x512/0x640 [ 1906.180893][ T9297] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1906.180927][ T9297] should_failslab+0xc2/0x120 [ 1906.180962][ T9297] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1906.180994][ T9297] ? __alloc_skb+0x2b2/0x380 [ 1906.181047][ T9297] __alloc_skb+0x2b2/0x380 [ 1906.181093][ T9297] ? __pfx___alloc_skb+0x10/0x10 [ 1906.181144][ T9297] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1906.181193][ T9297] ? __lock_acquire+0xb97/0x1ce0 [ 1906.181247][ T9297] netlink_alloc_large_skb+0x69/0x130 [ 1906.181302][ T9297] netlink_sendmsg+0x6a1/0xdd0 [ 1906.181370][ T9297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1906.181428][ T9297] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1906.181487][ T9297] ____sys_sendmsg+0xa95/0xc70 [ 1906.181527][ T9297] ? copy_msghdr_from_user+0x10a/0x160 [ 1906.181578][ T9297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1906.181636][ T9297] ___sys_sendmsg+0x134/0x1d0 [ 1906.181689][ T9297] ? __pfx____sys_sendmsg+0x10/0x10 [ 1906.181790][ T9297] __sys_sendmsg+0x16d/0x220 [ 1906.181842][ T9297] ? __pfx___sys_sendmsg+0x10/0x10 [ 1906.181919][ T9297] do_syscall_64+0xcd/0x4b0 [ 1906.181972][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.182005][ T9297] RIP: 0033:0x7f009bb8eec9 [ 1906.182031][ T9297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1906.182063][ T9297] RSP: 002b:00007f009ca95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.182093][ T9297] RAX: ffffffffffffffda RBX: 00007f009bde6180 RCX: 00007f009bb8eec9 [ 1906.182114][ T9297] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000008 [ 1906.182133][ T9297] RBP: 00007f009ca95090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.182153][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.182172][ T9297] R13: 00007f009bde6218 R14: 00007f009bde6180 R15: 00007ffc2c2efce8 [ 1906.182215][ T9297] [ 1906.523814][ T9302] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input287 [ 1906.554717][ T9303] Process accounting resumed [ 1907.075447][ T9311] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4716'. [ 1907.537623][ T9311] can: request_module (can-proto-0) failed. [ 1908.066362][ T9368] block2mtd: parameter too long [ 1908.505734][ T9362] FAULT_INJECTION: forcing a failure. [ 1908.505734][ T9362] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.675986][ T9362] CPU: 1 UID: 0 PID: 9362 Comm: syz.1.4720 Tainted: G U syzkaller #0 PREEMPT(full) [ 1908.676029][ T9362] Tainted: [U]=USER [ 1908.676038][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1908.676052][ T9362] Call Trace: [ 1908.676061][ T9362] [ 1908.676070][ T9362] dump_stack_lvl+0x16c/0x1f0 [ 1908.676112][ T9362] should_fail_ex+0x512/0x640 [ 1908.676150][ T9362] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1908.676180][ T9362] should_failslab+0xc2/0x120 [ 1908.676208][ T9362] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1908.676235][ T9362] ? __pfx_proc_create_data+0x10/0x10 [ 1908.676268][ T9362] ? cache_create_net+0x2b/0x220 [ 1908.676305][ T9362] kmemdup_noprof+0x29/0x60 [ 1908.676332][ T9362] cache_create_net+0x2b/0x220 [ 1908.676367][ T9362] nfsd_export_init+0x11f/0x250 [ 1908.676393][ T9362] ? __pfx_nfsd_net_init+0x10/0x10 [ 1908.676417][ T9362] nfsd_net_init+0x33/0x3d0 [ 1908.676442][ T9362] ? __pfx_nfsd_net_init+0x10/0x10 [ 1908.676466][ T9362] ops_init+0x1e2/0x5f0 [ 1908.676507][ T9362] setup_net+0x100/0x390 [ 1908.676529][ T9362] ? __pfx_setup_net+0x10/0x10 [ 1908.676567][ T9362] ? debug_mutex_init+0x37/0x70 [ 1908.676598][ T9362] copy_net_ns+0x2f8/0x690 [ 1908.676625][ T9362] create_new_namespaces+0x3ea/0xa90 [ 1908.676661][ T9362] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1908.676693][ T9362] ksys_unshare+0x45b/0xa40 [ 1908.676729][ T9362] ? __pfx_ksys_unshare+0x10/0x10 [ 1908.676815][ T9362] ? xfd_validate_state+0x61/0x180 [ 1908.676864][ T9362] __x64_sys_unshare+0x31/0x40 [ 1908.676900][ T9362] do_syscall_64+0xcd/0x4b0 [ 1908.676941][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.676966][ T9362] RIP: 0033:0x7f94a3f8eec9 [ 1908.676986][ T9362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1908.677010][ T9362] RSP: 002b:00007f94a4df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1908.677032][ T9362] RAX: ffffffffffffffda RBX: 00007f94a41e6180 RCX: 00007f94a3f8eec9 [ 1908.677049][ T9362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1908.677064][ T9362] RBP: 00007f94a4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1908.677079][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1908.677093][ T9362] R13: 00007f94a41e6218 R14: 00007f94a41e6180 R15: 00007fff21b3d568 [ 1908.677123][ T9362] [ 1910.067792][ T9478] netlink: 'syz.2.4727': attribute type 1 has an invalid length. [ 1910.763609][ T9473] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1910.835114][ T9473] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1910.860467][ T9473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1910.871920][ T9473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1910.879177][ T9473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1910.891849][ T9473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1910.913461][ T9471] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1912.427095][ T9520] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4729'. [ 1912.447529][T23352] Bluetooth: hci3: command 0x0c1a tx timeout [ 1912.590334][ T9582] i2c i2c-0: delete_device: Can't find device in list [ 1912.845734][T23352] Bluetooth: hci0: command 0x0c1a tx timeout [ 1912.925590][T23352] Bluetooth: hci2: command 0x0c1a tx timeout [ 1912.925725][ T7124] Bluetooth: hci1: command 0x0c1a tx timeout [ 1913.172138][ T9595] netlink: set zone limit has 8 unknown bytes [ 1914.109707][ T9609] 0x000200000001-0xa29656a63616329 : "" [ 1914.121868][ T9609] mtd: partition "" is out of reach -- disabled [ 1914.142690][ T9609] ftl_cs: FTL header not found. [ 1914.926342][ T9609] FAULT_INJECTION: forcing a failure. [ 1914.926342][ T9609] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1914.946482][ T9609] CPU: 1 UID: 0 PID: 9609 Comm: syz.2.4738 Tainted: G U syzkaller #0 PREEMPT(full) [ 1914.946532][ T9609] Tainted: [U]=USER [ 1914.946544][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1914.946564][ T9609] Call Trace: [ 1914.946576][ T9609] [ 1914.946588][ T9609] dump_stack_lvl+0x16c/0x1f0 [ 1914.946644][ T9609] should_fail_ex+0x512/0x640 [ 1914.946701][ T9609] get_futex_key+0x1d0/0x1560 [ 1914.946752][ T9609] ? __pfx_get_futex_key+0x10/0x10 [ 1914.946796][ T9609] ? __mutex_trylock_common+0xe9/0x250 [ 1914.946858][ T9609] futex_wake+0xea/0x530 [ 1914.946893][ T9609] ? __pfx_futex_wake+0x10/0x10 [ 1914.946943][ T9609] do_futex+0x1e3/0x350 [ 1914.946988][ T9609] ? __pfx_do_futex+0x10/0x10 [ 1914.947032][ T9609] ? __might_fault+0xe3/0x190 [ 1914.947074][ T9609] mm_release+0x24e/0x300 [ 1914.947114][ T9609] do_exit+0x68e/0x2bf0 [ 1914.947171][ T9609] ? __pfx_do_exit+0x10/0x10 [ 1914.947219][ T9609] ? do_raw_spin_lock+0x12c/0x2b0 [ 1914.947251][ T9609] ? find_held_lock+0x2b/0x80 [ 1914.947294][ T9609] do_group_exit+0xd3/0x2a0 [ 1914.947346][ T9609] get_signal+0x2671/0x26d0 [ 1914.947394][ T9609] ? do_vfs_ioctl+0x128/0x14f0 [ 1914.947441][ T9609] ? __pfx_get_signal+0x10/0x10 [ 1914.947487][ T9609] ? do_futex+0x122/0x350 [ 1914.947533][ T9609] ? __pfx_do_futex+0x10/0x10 [ 1914.947582][ T9609] arch_do_signal_or_restart+0x8f/0x790 [ 1914.947632][ T9609] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1914.947704][ T9609] exit_to_user_mode_loop+0x7a/0x100 [ 1914.947737][ T9609] do_syscall_64+0x419/0x4b0 [ 1914.947793][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.947826][ T9609] RIP: 0033:0x7f009bb8eec9 [ 1914.947851][ T9609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1914.947883][ T9609] RSP: 002b:00007f009cad70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1914.947914][ T9609] RAX: fffffffffffffe00 RBX: 00007f009bde5fa8 RCX: 00007f009bb8eec9 [ 1914.947936][ T9609] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f009bde5fa8 [ 1914.947955][ T9609] RBP: 00007f009bde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1914.947975][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1914.947994][ T9609] R13: 00007f009bde6038 R14: 00007ffc2c2efc00 R15: 00007ffc2c2efce8 [ 1914.948035][ T9609] [ 1915.188269][ T7124] Bluetooth: hci2: command 0x0c1a tx timeout [ 1915.721062][ T9596] HfR: entered promiscuous mode [ 1916.420693][ T9657] FAULT_INJECTION: forcing a failure. [ 1916.420693][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.434066][ T9657] CPU: 1 UID: 0 PID: 9657 Comm: syz.2.4746 Tainted: G U syzkaller #0 PREEMPT(full) [ 1916.434105][ T9657] Tainted: [U]=USER [ 1916.434113][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1916.434130][ T9657] Call Trace: [ 1916.434140][ T9657] [ 1916.434149][ T9657] dump_stack_lvl+0x16c/0x1f0 [ 1916.434191][ T9657] should_fail_ex+0x512/0x640 [ 1916.434228][ T9657] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1916.434268][ T9657] should_failslab+0xc2/0x120 [ 1916.434295][ T9657] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1916.434332][ T9657] ? fuse_dev_alloc+0x8e/0x280 [ 1916.434366][ T9657] ? kasan_save_track+0x14/0x30 [ 1916.434400][ T9657] fuse_dev_alloc+0x8e/0x280 [ 1916.434437][ T9657] fuse_dev_alloc_install+0x13/0x40 [ 1916.434474][ T9657] cuse_channel_open+0x100/0x7f0 [ 1916.434507][ T9657] ? __pfx_cuse_channel_open+0x10/0x10 [ 1916.434542][ T9657] misc_open+0x35d/0x420 [ 1916.434572][ T9657] ? __pfx_misc_open+0x10/0x10 [ 1916.434602][ T9657] chrdev_open+0x231/0x6a0 [ 1916.434627][ T9657] ? __pfx_apparmor_file_open+0x10/0x10 [ 1916.434668][ T9657] ? __pfx_chrdev_open+0x10/0x10 [ 1916.434696][ T9657] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1916.434743][ T9657] do_dentry_open+0x982/0x1530 [ 1916.434769][ T9657] ? __pfx_chrdev_open+0x10/0x10 [ 1916.434801][ T9657] vfs_open+0x82/0x3f0 [ 1916.434836][ T9657] path_openat+0x1de4/0x2cb0 [ 1916.434869][ T9657] ? __pfx_path_openat+0x10/0x10 [ 1916.434900][ T9657] do_filp_open+0x20b/0x470 [ 1916.434924][ T9657] ? __pfx_do_filp_open+0x10/0x10 [ 1916.434969][ T9657] ? alloc_fd+0x471/0x7d0 [ 1916.435015][ T9657] do_sys_openat2+0x11b/0x1d0 [ 1916.435047][ T9657] ? __pfx_do_sys_openat2+0x10/0x10 [ 1916.435081][ T9657] ? find_held_lock+0x2b/0x80 [ 1916.435116][ T9657] __x64_sys_openat+0x174/0x210 [ 1916.435151][ T9657] ? __pfx___x64_sys_openat+0x10/0x10 [ 1916.435195][ T9657] do_syscall_64+0xcd/0x4b0 [ 1916.435235][ T9657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1916.435260][ T9657] RIP: 0033:0x7f009bb8eec9 [ 1916.435278][ T9657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1916.435302][ T9657] RSP: 002b:00007f009cab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1916.435336][ T9657] RAX: ffffffffffffffda RBX: 00007f009bde6090 RCX: 00007f009bb8eec9 [ 1916.435358][ T9657] RDX: 0000000000141542 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1916.435386][ T9657] RBP: 00007f009bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1916.435406][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1916.435424][ T9657] R13: 00007f009bde6128 R14: 00007f009bde6090 R15: 00007ffc2c2efce8 [ 1916.435467][ T9657] [ 1917.089536][ T9654] can: request_module (can-proto-0) failed. [ 1917.245676][ T7124] Bluetooth: hci2: command 0x0c1a tx timeout [ 1917.338329][ T9646] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1919.098435][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1919.994794][ T9722] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1922.252264][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1922.480149][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1922.700002][ T9819] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1922.901915][ T9827] netlink: 'syz.1.4759': attribute type 1 has an invalid length. [ 1923.543883][ T9851] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1924.704644][ T9911] netlink: 725 bytes leftover after parsing attributes in process `syz.2.4763'. [ 1925.145146][ T9930] FAULT_INJECTION: forcing a failure. [ 1925.145146][ T9930] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.237763][ T9930] CPU: 0 UID: 0 PID: 9930 Comm: syz.1.4766 Tainted: G U syzkaller #0 PREEMPT(full) [ 1925.237821][ T9930] Tainted: [U]=USER [ 1925.237833][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1925.237854][ T9930] Call Trace: [ 1925.237866][ T9930] [ 1925.237880][ T9930] dump_stack_lvl+0x16c/0x1f0 [ 1925.237939][ T9930] should_fail_ex+0x512/0x640 [ 1925.237990][ T9930] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1925.238045][ T9930] should_failslab+0xc2/0x120 [ 1925.238082][ T9930] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1925.238132][ T9930] ? snd_seq_pool_new+0x44/0x230 [ 1925.238175][ T9930] ? __pfx_snd_seq_open+0x10/0x10 [ 1925.238208][ T9930] snd_seq_pool_new+0x44/0x230 [ 1925.238251][ T9930] snd_seq_fifo_new+0x5a/0x260 [ 1925.238296][ T9930] snd_seq_open+0x15c/0x550 [ 1925.238351][ T9930] ? __pfx_snd_seq_open+0x10/0x10 [ 1925.238388][ T9930] snd_open+0x22d/0x4c0 [ 1925.238422][ T9930] ? __pfx_snd_open+0x10/0x10 [ 1925.238453][ T9930] chrdev_open+0x231/0x6a0 [ 1925.238488][ T9930] ? __pfx_apparmor_file_open+0x10/0x10 [ 1925.238541][ T9930] ? __pfx_chrdev_open+0x10/0x10 [ 1925.238579][ T9930] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1925.238645][ T9930] do_dentry_open+0x982/0x1530 [ 1925.238679][ T9930] ? __pfx_chrdev_open+0x10/0x10 [ 1925.238727][ T9930] vfs_open+0x82/0x3f0 [ 1925.238774][ T9930] path_openat+0x1de4/0x2cb0 [ 1925.238821][ T9930] ? __pfx_path_openat+0x10/0x10 [ 1925.238865][ T9930] do_filp_open+0x20b/0x470 [ 1925.238898][ T9930] ? __pfx_do_filp_open+0x10/0x10 [ 1925.238963][ T9930] ? alloc_fd+0x471/0x7d0 [ 1925.239025][ T9930] do_sys_openat2+0x11b/0x1d0 [ 1925.239068][ T9930] ? __pfx_do_sys_openat2+0x10/0x10 [ 1925.239129][ T9930] __x64_sys_openat+0x174/0x210 [ 1925.239175][ T9930] ? __pfx___x64_sys_openat+0x10/0x10 [ 1925.239238][ T9930] do_syscall_64+0xcd/0x4b0 [ 1925.239293][ T9930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.239328][ T9930] RIP: 0033:0x7f94a3f8eec9 [ 1925.239356][ T9930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1925.239397][ T9930] RSP: 002b:00007f94a4e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1925.239429][ T9930] RAX: ffffffffffffffda RBX: 00007f94a41e5fa0 RCX: 00007f94a3f8eec9 [ 1925.239452][ T9930] RDX: 0000000000000180 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1925.239474][ T9930] RBP: 00007f94a4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1925.239498][ T9930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1925.239517][ T9930] R13: 00007f94a41e6038 R14: 00007f94a41e5fa0 R15: 00007fff21b3d568 [ 1925.239562][ T9930] [ 1925.511659][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1925.528430][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1925.858589][ T9959] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4768'. [ 1927.440861][T10045] netlink: 'syz.3.4773': attribute type 1 has an invalid length. [ 1928.369639][T10096] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1928.397943][T10095] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1929.106454][T10124] __vm_enough_memory: pid: 10124, comm: syz.1.4781, bytes: 9223372036854775808 not enough memory for the allocation [ 1930.239805][T10146] HfR: entered promiscuous mode [ 1930.262812][T10142] netlink: set zone limit has 8 unknown bytes [ 1931.471430][T10214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4787'. [ 1932.055366][T10285] FAULT_INJECTION: forcing a failure. [ 1932.055366][T10285] name failslab, interval 1, probability 0, space 0, times 0 [ 1932.070466][T10285] CPU: 1 UID: 0 PID: 10285 Comm: syz.0.4792 Tainted: G U syzkaller #0 PREEMPT(full) [ 1932.070520][T10285] Tainted: [U]=USER [ 1932.070533][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1932.070553][T10285] Call Trace: [ 1932.070566][T10285] [ 1932.070579][T10285] dump_stack_lvl+0x16c/0x1f0 [ 1932.070636][T10285] should_fail_ex+0x512/0x640 [ 1932.070688][T10285] ? __kmalloc_noprof+0xbf/0x510 [ 1932.070723][T10285] ? snd_pcm_plugin_build+0x64/0x650 [ 1932.070766][T10285] should_failslab+0xc2/0x120 [ 1932.070805][T10285] __kmalloc_noprof+0xd2/0x510 [ 1932.070836][T10285] ? __mutex_unlock_slowpath+0xf1/0x7b0 [ 1932.070897][T10285] snd_pcm_plugin_build+0x64/0x650 [ 1932.070948][T10285] snd_pcm_plugin_build_rate+0x27c/0x760 [ 1932.071001][T10285] ? __pfx_snd_pcm_plugin_build_rate+0x10/0x10 [ 1932.071054][T10285] ? snd_pcm_hw_params+0xcd/0x1ba0 [ 1932.071113][T10285] snd_pcm_plug_format_plugins+0x866/0x1430 [ 1932.071163][T10285] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 1932.071213][T10285] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1932.071267][T10285] snd_pcm_oss_change_params_locked+0x2dec/0x3a30 [ 1932.071325][T10285] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1932.071399][T10285] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1932.071447][T10285] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1932.071487][T10285] ? hook_file_ioctl_common+0x145/0x410 [ 1932.071517][T10285] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1932.071549][T10285] ? __fget_files+0x20e/0x3c0 [ 1932.071592][T10285] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1932.071623][T10285] __x64_sys_ioctl+0x18b/0x210 [ 1932.071659][T10285] do_syscall_64+0xcd/0x4b0 [ 1932.071699][T10285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.071725][T10285] RIP: 0033:0x7f442658eec9 [ 1932.071743][T10285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1932.071767][T10285] RSP: 002b:00007f442736f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1932.071789][T10285] RAX: ffffffffffffffda RBX: 00007f44267e6090 RCX: 00007f442658eec9 [ 1932.071805][T10285] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000006 [ 1932.071820][T10285] RBP: 00007f4426611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1932.071837][T10285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1932.071851][T10285] R13: 00007f44267e6128 R14: 00007f44267e6090 R15: 00007ffd8198b008 [ 1932.071881][T10285] [ 1932.383754][T10293] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1933.201594][T10327] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1933.802282][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4799'. [ 1934.521234][T10353] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1934.815222][T10387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4805'. [ 1935.591768][T10401] Console: switching to colour frame buffer device 4x6 [ 1936.185140][T10407] openvswitch: HfR: Dropping previously announced user features [ 1936.328617][T10405] netlink: set zone limit has 8 unknown bytes [ 1936.759615][T10456] openvswitch: HfR: Dropping previously announced user features [ 1936.798809][T10454] netlink: set zone limit has 8 unknown bytes [ 1937.601704][T10455] Process accounting paused [ 1937.640185][T10471] FAULT_INJECTION: forcing a failure. [ 1937.640185][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1937.656987][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.2.4814 Tainted: G U syzkaller #0 PREEMPT(full) [ 1937.657041][T10471] Tainted: [U]=USER [ 1937.657053][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1937.657073][T10471] Call Trace: [ 1937.657084][T10471] [ 1937.657096][T10471] dump_stack_lvl+0x16c/0x1f0 [ 1937.657158][T10471] should_fail_ex+0x512/0x640 [ 1937.657244][T10471] _copy_from_user+0x2e/0xd0 [ 1937.657302][T10471] memdup_user_nul+0x6c/0x120 [ 1937.657350][T10471] nsim_dev_health_break_write+0xbd/0x210 [ 1937.657402][T10471] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1937.657468][T10471] full_proxy_write+0x12e/0x1a0 [ 1937.657521][T10471] ? __pfx_full_proxy_write+0x10/0x10 [ 1937.657569][T10471] vfs_write+0x2a0/0x11d0 [ 1937.657614][T10471] ? __pfx___mutex_lock+0x10/0x10 [ 1937.657666][T10471] ? __pfx_vfs_write+0x10/0x10 [ 1937.657710][T10471] ? __fget_files+0x20e/0x3c0 [ 1937.657775][T10471] ksys_write+0x12a/0x250 [ 1937.657807][T10471] ? __pfx_ksys_write+0x10/0x10 [ 1937.657852][T10471] do_syscall_64+0xcd/0x4b0 [ 1937.657907][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.657942][T10471] RIP: 0033:0x7f009bb8eec9 [ 1937.657971][T10471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1937.658005][T10471] RSP: 002b:00007f009cad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1937.658036][T10471] RAX: ffffffffffffffda RBX: 00007f009bde5fa0 RCX: 00007f009bb8eec9 [ 1937.658059][T10471] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 1937.658078][T10471] RBP: 00007f009bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1937.658098][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1937.658118][T10471] R13: 00007f009bde6038 R14: 00007f009bde5fa0 R15: 00007ffc2c2efce8 [ 1937.658159][T10471] [ 1937.851168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1938.097598][T10486] HfR: entered promiscuous mode [ 1938.230837][T10499] FAULT_INJECTION: forcing a failure. [ 1938.230837][T10499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1938.256824][T10499] CPU: 1 UID: 0 PID: 10499 Comm: syz.1.4820 Tainted: G U syzkaller #0 PREEMPT(full) [ 1938.256877][T10499] Tainted: [U]=USER [ 1938.256889][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1938.256908][T10499] Call Trace: [ 1938.256919][T10499] [ 1938.256932][T10499] dump_stack_lvl+0x16c/0x1f0 [ 1938.256990][T10499] should_fail_ex+0x512/0x640 [ 1938.257047][T10499] should_fail_alloc_page+0xe7/0x130 [ 1938.257086][T10499] prepare_alloc_pages+0x3c2/0x610 [ 1938.257135][T10499] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1938.257182][T10499] ? copy_splice_read+0x1a8/0xc20 [ 1938.257229][T10499] ? stack_trace_save+0x8e/0xc0 [ 1938.257272][T10499] ? __pfx_stack_trace_save+0x10/0x10 [ 1938.257315][T10499] ? stack_depot_save_flags+0x29/0x9c0 [ 1938.257365][T10499] ? bpf_ksym_find+0x124/0x1c0 [ 1938.257407][T10499] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1938.257438][T10499] ? kasan_save_stack+0x33/0x60 [ 1938.257468][T10499] ? __kasan_kmalloc+0xaa/0xb0 [ 1938.257495][T10499] ? copy_splice_read+0x1a8/0xc20 [ 1938.257546][T10499] ? do_splice_read+0x285/0x370 [ 1938.257591][T10499] ? splice_direct_to_actor+0x2a1/0xa30 [ 1938.257638][T10499] ? do_splice_direct+0x174/0x240 [ 1938.257684][T10499] ? do_sendfile+0xb06/0xe50 [ 1938.257732][T10499] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1938.257767][T10499] ? do_syscall_64+0xcd/0x4b0 [ 1938.257850][T10499] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1938.257898][T10499] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1938.257940][T10499] ? trace_kmalloc+0x2b/0xd0 [ 1938.257968][T10499] ? __kmalloc_noprof+0x242/0x510 [ 1938.257998][T10499] copy_splice_read+0x1e1/0xc20 [ 1938.258040][T10499] ? __pfx_copy_splice_read+0x10/0x10 [ 1938.258078][T10499] ? look_up_lock_class+0x59/0x150 [ 1938.258118][T10499] ? lockdep_init_map_type+0x5c/0x280 [ 1938.258156][T10499] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1938.258180][T10499] ? __pfx_copy_splice_read+0x10/0x10 [ 1938.258215][T10499] do_splice_read+0x285/0x370 [ 1938.258254][T10499] splice_direct_to_actor+0x2a1/0xa30 [ 1938.258294][T10499] ? __pfx_direct_splice_actor+0x10/0x10 [ 1938.258337][T10499] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1938.258372][T10499] ? get_pid_task+0xfc/0x250 [ 1938.258415][T10499] do_splice_direct+0x174/0x240 [ 1938.258452][T10499] ? __pfx_do_splice_direct+0x10/0x10 [ 1938.258489][T10499] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1938.258535][T10499] ? rw_verify_area+0xcf/0x6c0 [ 1938.258573][T10499] do_sendfile+0xb06/0xe50 [ 1938.258615][T10499] ? __pfx_do_sendfile+0x10/0x10 [ 1938.258654][T10499] ? __fget_files+0x20e/0x3c0 [ 1938.258698][T10499] __x64_sys_sendfile64+0x1d8/0x220 [ 1938.258725][T10499] ? ksys_write+0x1ac/0x250 [ 1938.258747][T10499] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1938.258785][T10499] do_syscall_64+0xcd/0x4b0 [ 1938.258824][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1938.258848][T10499] RIP: 0033:0x7f94a3f8eec9 [ 1938.258868][T10499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1938.258891][T10499] RSP: 002b:00007f94a4e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1938.258914][T10499] RAX: ffffffffffffffda RBX: 00007f94a41e6090 RCX: 00007f94a3f8eec9 [ 1938.258930][T10499] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1938.258944][T10499] RBP: 00007f94a4e14090 R08: 0000000000000000 R09: 0000000000000000 [ 1938.258959][T10499] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1938.258974][T10499] R13: 00007f94a41e6128 R14: 00007f94a41e6090 R15: 00007fff21b3d568 [ 1938.259004][T10499] [ 1939.135742][T10509] FAULT_INJECTION: forcing a failure. [ 1939.135742][T10509] name failslab, interval 1, probability 0, space 0, times 0 [ 1939.150994][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.2.4824 Tainted: G U syzkaller #0 PREEMPT(full) [ 1939.151047][T10509] Tainted: [U]=USER [ 1939.151056][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1939.151070][T10509] Call Trace: [ 1939.151077][T10509] [ 1939.151086][T10509] dump_stack_lvl+0x16c/0x1f0 [ 1939.151127][T10509] should_fail_ex+0x512/0x640 [ 1939.151164][T10509] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1939.151190][T10509] should_failslab+0xc2/0x120 [ 1939.151223][T10509] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1939.151247][T10509] ? rcu_is_watching+0x12/0xc0 [ 1939.151274][T10509] ? key_alloc+0x3e0/0x1330 [ 1939.151306][T10509] key_alloc+0x3e0/0x1330 [ 1939.151339][T10509] ? trace_kmalloc+0x2b/0xd0 [ 1939.151369][T10509] ? __kmalloc_noprof+0x242/0x510 [ 1939.151401][T10509] ? __pfx_key_alloc+0x10/0x10 [ 1939.151440][T10509] ? aa_get_newest_label+0xd2/0x250 [ 1939.151485][T10509] keyring_alloc+0x44/0xc0 [ 1939.151519][T10509] lookup_user_key+0xc51/0x1300 [ 1939.151550][T10509] ? __pfx_lookup_user_key+0x10/0x10 [ 1939.151583][T10509] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1939.151622][T10509] keyctl_setperm_key+0x9d/0x3a0 [ 1939.151661][T10509] ? __pfx_keyctl_setperm_key+0x10/0x10 [ 1939.151701][T10509] ? xfd_validate_state+0x61/0x180 [ 1939.151738][T10509] ? __pfx_ksys_write+0x10/0x10 [ 1939.151766][T10509] __do_sys_keyctl+0x29a/0x590 [ 1939.151790][T10509] do_syscall_64+0xcd/0x4b0 [ 1939.151830][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.151854][T10509] RIP: 0033:0x7f009bb8eec9 [ 1939.151873][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1939.151903][T10509] RSP: 002b:00007f009cad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1939.151926][T10509] RAX: ffffffffffffffda RBX: 00007f009bde5fa0 RCX: 00007f009bb8eec9 [ 1939.151942][T10509] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0000000000000005 [ 1939.151956][T10509] RBP: 00007f009bc11f91 R08: 0000000000000008 R09: 0000000000000000 [ 1939.151971][T10509] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1939.151985][T10509] R13: 00007f009bde6038 R14: 00007f009bde5fa0 R15: 00007ffc2c2efce8 [ 1939.152016][T10509] [ 1939.452608][T10510] FAULT_INJECTION: forcing a failure. [ 1939.452608][T10510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1939.480006][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.1.4821 Tainted: G U syzkaller #0 PREEMPT(full) [ 1939.480065][T10510] Tainted: [U]=USER [ 1939.480078][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1939.480100][T10510] Call Trace: [ 1939.480113][T10510] [ 1939.480128][T10510] dump_stack_lvl+0x16c/0x1f0 [ 1939.480192][T10510] should_fail_ex+0x512/0x640 [ 1939.480256][T10510] _copy_from_iter+0x29f/0x1720 [ 1939.480320][T10510] ? __alloc_skb+0x200/0x380 [ 1939.480393][T10510] ? __pfx__copy_from_iter+0x10/0x10 [ 1939.480462][T10510] ? __pfx___might_resched+0x10/0x10 [ 1939.480503][T10510] ? __lock_acquire+0xb97/0x1ce0 [ 1939.480566][T10510] netlink_sendmsg+0x829/0xdd0 [ 1939.480631][T10510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1939.480693][T10510] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1939.480756][T10510] ____sys_sendmsg+0xa95/0xc70 [ 1939.480798][T10510] ? copy_msghdr_from_user+0x10a/0x160 [ 1939.480852][T10510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1939.480896][T10510] ? kfree+0x24f/0x4d0 [ 1939.480945][T10510] ? futex_unqueue+0x133/0x2c0 [ 1939.481000][T10510] ___sys_sendmsg+0x134/0x1d0 [ 1939.481055][T10510] ? __pfx____sys_sendmsg+0x10/0x10 [ 1939.481151][T10510] ? __pfx___might_resched+0x10/0x10 [ 1939.481201][T10510] __sys_sendmmsg+0x200/0x420 [ 1939.481261][T10510] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1939.481327][T10510] ? __pfx_do_futex+0x10/0x10 [ 1939.481399][T10510] ? xfd_validate_state+0x61/0x180 [ 1939.481478][T10510] __x64_sys_sendmmsg+0x9c/0x100 [ 1939.481531][T10510] ? lockdep_hardirqs_on+0x7c/0x110 [ 1939.481582][T10510] do_syscall_64+0xcd/0x4b0 [ 1939.481641][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.481677][T10510] RIP: 0033:0x7f94a3f8eec9 [ 1939.481707][T10510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1939.481744][T10510] RSP: 002b:00007f94a4e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1939.481778][T10510] RAX: ffffffffffffffda RBX: 00007f94a41e5fa0 RCX: 00007f94a3f8eec9 [ 1939.481802][T10510] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000008 [ 1939.481823][T10510] RBP: 00007f94a4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1939.481843][T10510] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1939.481863][T10510] R13: 00007f94a41e6038 R14: 00007f94a41e5fa0 R15: 00007fff21b3d568 [ 1939.481909][T10510] [ 1939.496936][T10513] netlink: 'syz.0.4825': attribute type 1 has an invalid length. [ 1939.920276][ T31] audit: type=1800 audit(4294967302.450:22): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4824" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1940.379399][T10541] hub 1-0:1.0: USB hub found [ 1940.395498][T10541] hub 1-0:1.0: 1 port detected [ 1940.490659][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4827'. [ 1941.031084][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4828'. [ 1941.128815][T10591] HfR: left promiscuous mode [ 1942.442808][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4832'. [ 1942.510292][T10659] FAULT_INJECTION: forcing a failure. [ 1942.510292][T10659] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.528828][T10659] CPU: 0 UID: 0 PID: 10659 Comm: syz.2.4834 Tainted: G U syzkaller #0 PREEMPT(full) [ 1942.528883][T10659] Tainted: [U]=USER [ 1942.528895][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1942.529004][T10659] Call Trace: [ 1942.529029][T10659] [ 1942.529042][T10659] dump_stack_lvl+0x16c/0x1f0 [ 1942.529099][T10659] should_fail_ex+0x512/0x640 [ 1942.529148][T10659] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1942.529200][T10659] should_failslab+0xc2/0x120 [ 1942.529237][T10659] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1942.529284][T10659] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1942.529329][T10659] ? __request_module+0x2ad/0x690 [ 1942.529361][T10659] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1942.529411][T10659] __request_module+0x2ad/0x690 [ 1942.529443][T10659] ? __pfx___request_module+0x10/0x10 [ 1942.529495][T10659] ? find_held_lock+0x2b/0x80 [ 1942.529535][T10659] ? nfnetlink_rcv_msg+0x6b9/0x1200 [ 1942.529576][T10659] nfnetlink_rcv_msg+0x6db/0x1200 [ 1942.529620][T10659] ? kmem_cache_free+0x2d1/0x4d0 [ 1942.529675][T10659] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1942.529718][T10659] ? kfree_skbmem+0x1a4/0x1f0 [ 1942.529755][T10659] ? consume_skb+0xcc/0x100 [ 1942.529787][T10659] ? find_held_lock+0x2b/0x80 [ 1942.529821][T10659] ? __dev_queue_xmit+0xaf1/0x4490 [ 1942.529863][T10659] ? __local_bh_enable_ip+0xa4/0x120 [ 1942.529913][T10659] ? lockdep_hardirqs_on+0x7c/0x110 [ 1942.529960][T10659] ? __dev_queue_xmit+0xaf1/0x4490 [ 1942.529998][T10659] ? __local_bh_enable_ip+0xa4/0x120 [ 1942.530035][T10659] ? __dev_queue_xmit+0xaf1/0x4490 [ 1942.530076][T10659] ? __dev_queue_xmit+0xb12/0x4490 [ 1942.530133][T10659] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1942.530184][T10659] netlink_rcv_skb+0x155/0x420 [ 1942.530214][T10659] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1942.530257][T10659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1942.530327][T10659] ? ns_capable+0xd7/0x110 [ 1942.530368][T10659] nfnetlink_rcv+0x1b3/0x430 [ 1942.530407][T10659] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1942.530444][T10659] ? netlink_deliver_tap+0x1ae/0xd30 [ 1942.530501][T10659] netlink_unicast+0x5aa/0x870 [ 1942.530558][T10659] ? __pfx_netlink_unicast+0x10/0x10 [ 1942.530608][T10659] ? __pfx___might_resched+0x10/0x10 [ 1942.530644][T10659] ? __lock_acquire+0xb97/0x1ce0 [ 1942.530701][T10659] netlink_sendmsg+0x8d1/0xdd0 [ 1942.530758][T10659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1942.530815][T10659] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1942.530872][T10659] ____sys_sendmsg+0xa95/0xc70 [ 1942.530917][T10659] ? copy_msghdr_from_user+0x10a/0x160 [ 1942.530966][T10659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1942.531008][T10659] ? kfree+0x24f/0x4d0 [ 1942.531050][T10659] ? __pfx__kstrtoull+0x10/0x10 [ 1942.531097][T10659] ___sys_sendmsg+0x134/0x1d0 [ 1942.531146][T10659] ? __pfx____sys_sendmsg+0x10/0x10 [ 1942.531235][T10659] ? __pfx___might_resched+0x10/0x10 [ 1942.531280][T10659] __sys_sendmmsg+0x200/0x420 [ 1942.531333][T10659] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1942.531391][T10659] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1942.531453][T10659] ? fput+0x9b/0xd0 [ 1942.531491][T10659] ? ksys_write+0x1ac/0x250 [ 1942.531520][T10659] ? __pfx_ksys_write+0x10/0x10 [ 1942.531558][T10659] __x64_sys_sendmmsg+0x9c/0x100 [ 1942.531608][T10659] ? lockdep_hardirqs_on+0x7c/0x110 [ 1942.531656][T10659] do_syscall_64+0xcd/0x4b0 [ 1942.531708][T10659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.531742][T10659] RIP: 0033:0x7f009bb8eec9 [ 1942.531767][T10659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1942.531800][T10659] RSP: 002b:00007f009cad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1942.531830][T10659] RAX: ffffffffffffffda RBX: 00007f009bde5fa0 RCX: 00007f009bb8eec9 [ 1942.531847][T10659] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1942.531864][T10659] RBP: 00007f009cad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1942.531882][T10659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1942.531910][T10659] R13: 00007f009bde6038 R14: 00007f009bde5fa0 R15: 00007ffc2c2efce8 [ 1942.531952][T10659] [ 1942.535180][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1943.370333][T10672] openvswitch: HfR: Dropping previously announced user features [ 1943.431717][T10671] netlink: set zone limit has 8 unknown bytes [ 1943.643107][T10677] netlink: 'syz.3.4841': attribute type 1 has an invalid length. [ 1943.884830][T10691] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1945.789312][T10724] mkiss: ax0: crc mode is auto. [ 1946.217745][T10746] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4849'. [ 1946.292636][T10731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4847'. [ 1946.330535][T10746] netlink: 194 bytes leftover after parsing attributes in process `syz.2.4849'. [ 1946.345733][T10746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1946.864493][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4852'. [ 1949.463664][T10896] netlink: 'syz.1.4857': attribute type 1 has an invalid length. [ 1950.296686][T10951] netlink: 'syz.2.4860': attribute type 1 has an invalid length. [ 1951.360418][T10979] netlink: set zone limit has 8 unknown bytes [ 1951.904813][T10983] HfR: entered promiscuous mode [ 1951.932520][T10998] openvswitch: HfR: Dropping previously announced user features [ 1952.731447][T11073] Console: switching to colour VGA+ 80x25 [ 1954.414416][T11138] netlink: 'syz.2.4873': attribute type 1 has an invalid length. [ 1956.260870][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4878'. [ 1956.459484][T11174] random: crng reseeded on system resumption [ 1956.774186][T23352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1956.786481][T23352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1956.801584][T23352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1956.853628][T11235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4880'. [ 1956.877669][T23352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1956.887897][T23352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1957.367387][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4882'. [ 1957.590637][T11297] hsr_slave_0 (unregistering): left promiscuous mode [ 1957.608376][T11303] netlink: 396 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1957.721413][T11303] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1959.015995][T23352] Bluetooth: hci0: command tx timeout [ 1959.255481][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1959.826398][T11341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1959.833244][T11341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1959.876716][T11341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1959.922722][T11353] netlink: 'syz.1.4888': attribute type 1 has an invalid length. [ 1959.965591][T11341] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1959.985472][T11341] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1960.317858][T11341] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1960.566190][T11343] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1961.886326][ T7124] Bluetooth: hci2: command 0x0c1a tx timeout [ 1961.892430][ T7124] Bluetooth: hci1: command 0x0c1a tx timeout [ 1961.898738][T23352] Bluetooth: hci3: command 0x0c1a tx timeout [ 1962.045462][ T7124] Bluetooth: hci0: command 0x040f tx timeout [ 1962.560970][T11516] netlink: 'syz.2.4893': attribute type 1 has an invalid length. [ 1963.458560][T11214] chnl_net:caif_netlink_parms(): no params data found [ 1964.125589][ T7124] Bluetooth: hci0: command 0x040f tx timeout [ 1964.829735][T11693] netlink: 'syz.2.4895': attribute type 1 has an invalid length. [ 1965.185746][T11214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1965.208610][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.259904][T11214] bridge_slave_0: entered allmulticast mode [ 1965.295994][T11214] bridge_slave_0: entered promiscuous mode [ 1965.307691][T11214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1965.315904][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.323331][T11214] bridge_slave_1: entered allmulticast mode [ 1965.426441][T11214] bridge_slave_1: entered promiscuous mode [ 1965.615832][T11744] FAULT_INJECTION: forcing a failure. [ 1965.615832][T11744] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.630758][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.3.4897 Tainted: G U syzkaller #0 PREEMPT(full) [ 1965.630814][T11744] Tainted: [U]=USER [ 1965.630826][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1965.630863][T11744] Call Trace: [ 1965.630875][T11744] [ 1965.630888][T11744] dump_stack_lvl+0x16c/0x1f0 [ 1965.630949][T11744] should_fail_ex+0x512/0x640 [ 1965.631000][T11744] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1965.631039][T11744] should_failslab+0xc2/0x120 [ 1965.631085][T11744] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1965.631121][T11744] ? getname_flags.part.0+0x4c/0x550 [ 1965.631173][T11744] getname_flags.part.0+0x4c/0x550 [ 1965.631222][T11744] getname_flags+0x93/0xf0 [ 1965.631273][T11744] do_sys_openat2+0xb8/0x1d0 [ 1965.631317][T11744] ? __pfx_do_sys_openat2+0x10/0x10 [ 1965.631359][T11744] ? __sock_release+0x20b/0x270 [ 1965.631403][T11744] __x64_sys_openat+0x174/0x210 [ 1965.631441][T11744] ? __pfx___x64_sys_openat+0x10/0x10 [ 1965.631499][T11744] do_syscall_64+0xcd/0x4b0 [ 1965.631554][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.631589][T11744] RIP: 0033:0x7fcb5af8eec9 [ 1965.631616][T11744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1965.631649][T11744] RSP: 002b:00007fcb5be1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1965.631680][T11744] RAX: ffffffffffffffda RBX: 00007fcb5b1e5fa0 RCX: 00007fcb5af8eec9 [ 1965.631701][T11744] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1965.631722][T11744] RBP: 00007fcb5b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1965.631741][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1965.631759][T11744] R13: 00007fcb5b1e6038 R14: 00007fcb5b1e5fa0 R15: 00007fff188edea8 [ 1965.631799][T11744] [ 1965.874689][T11214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1965.914216][T11214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1966.205749][ T7124] Bluetooth: hci0: command 0x040f tx timeout [ 1966.606602][T11214] team0: Port device team_slave_0 added [ 1966.690028][T11820] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1966.709951][T11820] netlink: 194 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1966.727523][T11820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1966.740967][T11214] team0: Port device team_slave_1 added [ 1966.873023][T11214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1966.880611][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1966.910157][T11214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1966.928195][T11214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1966.943833][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1966.977495][T11214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1967.123074][T11854] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1968.286965][ T7124] Bluetooth: hci0: command 0x040f tx timeout [ 1969.077078][T11214] hsr_slave_0: entered promiscuous mode [ 1969.158112][T11214] hsr_slave_1: entered promiscuous mode [ 1969.212787][T11922] netlink: 'syz.1.4906': attribute type 1 has an invalid length. [ 1969.236458][T11214] debugfs: 'hsr0' already exists in 'hsr' [ 1969.330829][T11214] Cannot create hsr debugfs directory [ 1970.375545][ T7124] Bluetooth: hci0: command 0x040f tx timeout [ 1970.693771][T11988] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1973.282988][T12055] netlink: 'syz.3.4911': attribute type 1 has an invalid length. [ 1973.459862][T12057] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1974.257394][T11214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.351913][T12064] openvswitch: HfR: Dropping previously announced user features [ 1974.498454][T12061] netlink: set zone limit has 8 unknown bytes [ 1974.764910][T12070] random: crng reseeded on system resumption [ 1974.968072][T11214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.315878][T12103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4915'. [ 1975.968393][T11214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.759371][T11214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.713486][T12244] vivid-003: ================= START STATUS ================= [ 1977.725624][T12244] vivid-003: Radio HW Seek Mode: Bounded [ 1977.733961][T12244] vivid-003: Radio Programmable HW Seek: false [ 1977.741301][T12244] vivid-003: RDS Rx I/O Mode: Block I/O [ 1977.748105][T12244] vivid-003: Generate RBDS Instead of RDS: false [ 1977.756000][T12244] vivid-003: RDS Reception: true [ 1977.761668][T12244] vivid-003: RDS Program Type: 0 inactive [ 1977.805543][T12244] vivid-003: RDS PS Name: inactive [ 1977.811684][T12244] vivid-003: RDS Radio Text: inactive [ 1977.867464][T12244] vivid-003: RDS Traffic Announcement: false inactive [ 1977.874384][T12244] vivid-003: RDS Traffic Program: false inactive [ 1977.902922][T12244] vivid-003: RDS Music: false inactive [ 1977.902976][T12244] vivid-003: ================== END STATUS ================== [ 1978.442748][T11214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1978.468178][T11214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1978.673389][T11214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1978.793752][T11214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1980.277789][T12358] binder: 12357:12358 ioctl c0046209 9 returned -22 [ 1980.427246][T12362] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1980.433201][T11214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1980.526218][T11214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1981.066844][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.074063][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1981.372491][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.379832][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1982.903970][T11214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1983.042107][T11214] veth0_vlan: entered promiscuous mode [ 1983.069161][T11214] veth1_vlan: entered promiscuous mode [ 1983.118501][T12467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1983.134698][T12467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1983.154117][T12467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1983.182766][T12467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1983.338395][T11214] veth0_macvtap: entered promiscuous mode [ 1983.352590][T11214] veth1_macvtap: entered promiscuous mode [ 1983.374436][T12477] openvswitch: HfR: Dropping previously announced user features [ 1983.418527][T11214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1983.476868][T11214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1983.577650][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1983.601034][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1983.641246][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.049171][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.445745][ T7124] Bluetooth: hci3: command 0x0c1a tx timeout [ 1985.085818][ T7664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.095457][ T7664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.166845][ T7124] Bluetooth: hci2: command 0x0c1a tx timeout [ 1985.175059][ T3939] Bluetooth: hci1: command 0x0c1a tx timeout [ 1985.248237][ T7124] Bluetooth: hci0: command 0x040f tx timeout [ 1986.168738][T12541] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1986.184391][T12541] netlink: 194 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1986.214939][T12541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1986.264400][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1986.355860][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1986.689491][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.697619][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.926172][T12557] netlink: 'syz.2.4947': attribute type 1 has an invalid length. [ 1987.837658][T12589] [U] [ 1987.840615][T12589] [U] [ 1987.843345][T12589] [U] [ 1987.846056][T12589] [U] [ 1987.849302][T12589] [U] [ 1987.852020][T12589] [U] [ 1987.854730][T12589] [U] [ 1987.857440][T12589] [U] [ 1987.861126][T12589] [U] [ 1987.863867][T12589] [U] [ 1987.866578][T12589] [U] [ 1987.869292][T12589] [U] [ 1987.873532][T12589] [U] [ 1987.876264][T12589] [U] [ 1987.879033][T12589] [U] [ 1987.881769][T12589] [U] [ 1987.885590][T12589] [U] [ 1987.888335][T12589] [U] [ 1987.891118][T12589] [U] [ 1987.893835][T12589] [U] [ 1987.905722][T12589] [U] [ 1987.908530][T12589] [U] [ 1987.911291][T12589] [U] [ 1987.914508][T12589] [U] [ 1987.925826][T12589] [U] [ 1987.928610][T12589] [U] [ 1987.931336][T12589] [U] [ 1987.934048][T12589] [U] [ 1988.026442][T12589] [U] [ 1988.029300][T12589] [U] [ 1988.032041][T12589] [U] [ 1988.034799][T12589] [U] [ 1988.077025][T12589] [U] [ 1988.079833][T12589] [U] [ 1988.082596][T12589] [U] [ 1988.085347][T12589] [U] [ 1988.105604][T12589] [U] [ 1988.108482][T12589] [U] [ 1988.111197][T12589] [U] [ 1988.113912][T12589] [U] [ 1988.224564][T12597] netlink: 'syz.3.4951': attribute type 1 has an invalid length. [ 1988.235837][T12589] [U] [ 1988.238587][T12589] [U] [ 1988.241299][T12589] [U] [ 1988.244100][T12589] [U] [ 1988.328400][T12589] [U] [ 1988.331195][T12589] [U] [ 1988.333916][T12589] [U] [ 1988.336629][T12589] [U] [ 1988.454020][T12589] [U] [ 1988.456927][T12589] [U] [ 1988.459687][T12589] [U] [ 1988.462445][T12589] [U] [ 1988.495817][T12589] [U] [ 1988.498628][T12589] [U] [ 1988.501408][T12589] [U] [ 1988.504177][T12589] [U] [ 1988.526979][T12589] [U] [ 1988.529775][T12589] [U] [ 1988.532513][T12589] [U] [ 1988.535232][T12589] [U] [ 1988.575627][T12589] [U] [ 1988.578416][T12589] [U] [ 1988.581134][T12589] [U] [ 1988.583875][T12589] [U] [ 1988.671608][T12589] [U] [ 1988.674412][T12589] [U] [ 1988.677170][T12589] [U] [ 1988.679933][T12589] [U] [ 1988.766592][T12589] [U] [ 1988.769399][T12589] [U] [ 1988.772150][T12589] [U] [ 1988.774936][T12589] [U] [ 1988.786245][T12589] [U] [ 1988.789037][T12589] [U] [ 1988.791787][T12589] [U] [ 1988.794531][T12589] [U] [ 1988.798465][T12589] [U] [ 1988.801245][T12589] [U] [ 1988.804004][T12589] [U] [ 1988.806773][T12589] [U] [ 1988.814650][T12596] [U] [ 1989.559431][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4953'. [ 1989.628864][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4953'. [ 1990.867722][T12717] nbd7: detected capacity change from 0 to 1024 [ 1991.094427][ T9859] block nbd7: Send control failed (result -22) [ 1991.142321][ T9859] block nbd7: Request send failed, requeueing [ 1991.212878][ T7124] block nbd7: Receive control failed (result -32) [ 1991.230442][ T1134] block nbd7: Dead connection, failed to find a fallback [ 1991.240354][ T1134] block nbd7: shutting down sockets [ 1991.250789][ T1134] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.262022][ T1134] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.275189][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.287292][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.296153][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.305705][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.356253][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.365510][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.373546][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.454481][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.470638][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.489710][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.504568][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.525426][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.568665][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.598903][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.916497][ T9859] ldm_validate_partition_table(): Disk read failed. [ 1991.931338][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1991.940678][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1991.950455][ T9859] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1992.044484][ T9859] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1992.152769][ T9859] Dev nbd7: unable to read RDB block 0 [ 1992.199374][ T9859] nbd7: unable to read partition table [ 1992.220899][ T9859] ldm_validate_partition_table(): Disk read failed. [ 1992.316140][ T9859] Dev nbd7: unable to read RDB block 0 [ 1992.406670][ T9859] nbd7: unable to read partition table [ 1993.796104][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4970'. [ 1994.442790][T12964] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1994.457510][T12964] netlink: 194 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1994.466830][T12964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1994.582904][T12975] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1995.089310][T12980] netlink: 'syz.0.4974': attribute type 1 has an invalid length. [ 1997.237095][T13052] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input289 [ 1997.689716][T13055] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input290 [ 1999.406238][T13142] netlink: 'syz.3.4989': attribute type 1 has an invalid length. [ 1999.580663][T13130] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1999.588211][T13130] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1999.627924][T13130] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1999.870160][ T3939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1999.936415][ T3939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1999.988088][ T3939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2000.024085][ T3939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2000.033296][ T3939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2000.115961][ T3939] [ 2000.118360][ T3939] ====================================================== [ 2000.125409][ T3939] WARNING: possible circular locking dependency detected [ 2000.132435][ T3939] syzkaller #0 Tainted: G U [ 2000.138413][ T3939] ------------------------------------------------------ [ 2000.145445][ T3939] kworker/u9:9/3939 is trying to acquire lock: [ 2000.151599][ T3939] ffff88801bef7a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4b6/0x770 [ 2000.162086][ T3939] [ 2000.162086][ T3939] but task is already holding lock: [ 2000.169717][ T3939] ffff88801bef7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0x840 [ 2000.179151][ T3939] [ 2000.179151][ T3939] which lock already depends on the new lock. [ 2000.179151][ T3939] [ 2000.189642][ T3939] [ 2000.189642][ T3939] the existing dependency chain (in reverse order) is: [ 2000.198658][ T3939] [ 2000.198658][ T3939] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 2000.206769][ T3939] down_write+0x92/0x200 [ 2000.211550][ T3939] kernfs_add_one+0x38/0x840 [ 2000.216690][ T3939] kernfs_create_dir_ns+0xfc/0x1a0 [ 2000.222395][ T3939] internal_create_group+0x34d/0xf30 [ 2000.228229][ T3939] cpuhp_invoke_callback+0x3d2/0xa10 [ 2000.234133][ T3939] cpuhp_issue_call+0x1c0/0x980 [ 2000.239534][ T3939] __cpuhp_setup_state_cpuslocked+0x3a1/0x7b0 [ 2000.246149][ T3939] __cpuhp_setup_state+0xf4/0x300 [ 2000.251741][ T3939] do_one_initcall+0x120/0x6e0 [ 2000.257114][ T3939] kernel_init_freeable+0x5c2/0x910 [ 2000.262983][ T3939] kernel_init+0x1c/0x2b0 [ 2000.267902][ T3939] ret_from_fork+0x56d/0x730 [ 2000.273129][ T3939] ret_from_fork_asm+0x1a/0x30 [ 2000.278456][ T3939] [ 2000.278456][ T3939] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 2000.286643][ T3939] [ 2000.286643][ T3939] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 2000.294481][ T3939] cpus_read_lock+0x42/0x160 [ 2000.299633][ T3939] static_key_slow_inc+0x12/0x30 [ 2000.305236][ T3939] udp_lib_setsockopt+0xb18/0xcf0 [ 2000.310911][ T3939] udpv6_setsockopt+0xbc/0xd0 [ 2000.316178][ T3939] do_sock_setsockopt+0xf3/0x1d0 [ 2000.321692][ T3939] __sys_setsockopt+0x120/0x1a0 [ 2000.327143][ T3939] __x64_sys_setsockopt+0xbd/0x160 [ 2000.332807][ T3939] do_syscall_64+0xcd/0x4b0 [ 2000.337859][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.344307][ T3939] [ 2000.344307][ T3939] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 2000.352151][ T3939] lock_sock_nested+0x41/0xf0 [ 2000.357386][ T3939] inet_autobind+0x1a/0x1a0 [ 2000.362441][ T3939] inet_send_prepare+0x31b/0x530 [ 2000.367927][ T3939] inet_sendmsg+0x43/0x140 [ 2000.372884][ T3939] sock_sendmsg+0x37f/0x470 [ 2000.377924][ T3939] __sock_xmit+0x1e7/0x4f0 [ 2000.382914][ T3939] nbd_send_cmd+0x8e4/0x1c90 [ 2000.388035][ T3939] nbd_queue_rq+0x940/0x12d0 [ 2000.393188][ T3939] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 2000.399271][ T3939] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 2000.406133][ T3939] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 2000.412653][ T3939] blk_mq_run_hw_queue+0x239/0x670 [ 2000.418313][ T3939] blk_mq_dispatch_list+0x514/0x1310 [ 2000.424147][ T3939] blk_mq_flush_plug_list+0x130/0x600 [ 2000.430149][ T3939] __blk_flush_plug+0x2c4/0x4b0 [ 2000.435621][ T3939] __submit_bio+0x545/0x690 [ 2000.440657][ T3939] submit_bio_noacct_nocheck+0x660/0xd30 [ 2000.446825][ T3939] submit_bio_noacct+0xb49/0x1ed0 [ 2000.452395][ T3939] block_read_full_folio+0x4db/0x850 [ 2000.458226][ T3939] filemap_read_folio+0xc8/0x2a0 [ 2000.463837][ T3939] do_read_cache_folio+0x263/0x5c0 [ 2000.469489][ T3939] read_part_sector+0xd4/0x370 [ 2000.474793][ T3939] adfspart_check_ICS+0x93/0x940 [ 2000.480261][ T3939] bdev_disk_changed+0x720/0x1520 [ 2000.485859][ T3939] blkdev_get_whole+0x187/0x290 [ 2000.491277][ T3939] bdev_open+0x2c7/0xe40 [ 2000.496098][ T3939] blkdev_open+0x34e/0x4f0 [ 2000.501201][ T3939] do_dentry_open+0x982/0x1530 [ 2000.506590][ T3939] vfs_open+0x82/0x3f0 [ 2000.511259][ T3939] path_openat+0x1de4/0x2cb0 [ 2000.516426][ T3939] do_filp_open+0x20b/0x470 [ 2000.521602][ T3939] do_sys_openat2+0x11b/0x1d0 [ 2000.526884][ T3939] __x64_sys_openat+0x174/0x210 [ 2000.532365][ T3939] do_syscall_64+0xcd/0x4b0 [ 2000.537487][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.543961][ T3939] [ 2000.543961][ T3939] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 2000.551708][ T3939] __mutex_lock+0x193/0x1060 [ 2000.556957][ T3939] nbd_queue_rq+0x423/0x12d0 [ 2000.562146][ T3939] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 2000.568293][ T3939] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 2000.575332][ T3939] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 2000.582049][ T3939] blk_mq_run_hw_queue+0x239/0x670 [ 2000.587764][ T3939] blk_mq_dispatch_list+0x514/0x1310 [ 2000.593638][ T3939] blk_mq_flush_plug_list+0x130/0x600 [ 2000.599600][ T3939] __blk_flush_plug+0x2c4/0x4b0 [ 2000.605042][ T3939] __submit_bio+0x545/0x690 [ 2000.610120][ T3939] submit_bio_noacct_nocheck+0x660/0xd30 [ 2000.616370][ T3939] submit_bio_noacct+0xb49/0x1ed0 [ 2000.621991][ T3939] block_read_full_folio+0x4db/0x850 [ 2000.627864][ T3939] filemap_read_folio+0xc8/0x2a0 [ 2000.633339][ T3939] do_read_cache_folio+0x263/0x5c0 [ 2000.639005][ T3939] read_part_sector+0xd4/0x370 [ 2000.644299][ T3939] adfspart_check_ICS+0x93/0x940 [ 2000.649797][ T3939] bdev_disk_changed+0x720/0x1520 [ 2000.655364][ T3939] blkdev_get_whole+0x187/0x290 [ 2000.660768][ T3939] bdev_open+0x2c7/0xe40 [ 2000.665723][ T3939] blkdev_open+0x34e/0x4f0 [ 2000.670686][ T3939] do_dentry_open+0x982/0x1530 [ 2000.676015][ T3939] vfs_open+0x82/0x3f0 [ 2000.680637][ T3939] path_openat+0x1de4/0x2cb0 [ 2000.685777][ T3939] do_filp_open+0x20b/0x470 [ 2000.690807][ T3939] do_sys_openat2+0x11b/0x1d0 [ 2000.696040][ T3939] __x64_sys_openat+0x174/0x210 [ 2000.701430][ T3939] do_syscall_64+0xcd/0x4b0 [ 2000.706480][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.712992][ T3939] [ 2000.712992][ T3939] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 2000.720228][ T3939] __mutex_lock+0x193/0x1060 [ 2000.725370][ T3939] nbd_queue_rq+0xbd/0x12d0 [ 2000.730443][ T3939] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 2000.736531][ T3939] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 2000.743496][ T3939] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 2000.750007][ T3939] blk_mq_run_hw_queue+0x239/0x670 [ 2000.755646][ T3939] blk_mq_dispatch_list+0x514/0x1310 [ 2000.761463][ T3939] blk_mq_flush_plug_list+0x130/0x600 [ 2000.767482][ T3939] __blk_flush_plug+0x2c4/0x4b0 [ 2000.772868][ T3939] __submit_bio+0x545/0x690 [ 2000.777926][ T3939] submit_bio_noacct_nocheck+0x660/0xd30 [ 2000.784089][ T3939] submit_bio_noacct+0xb49/0x1ed0 [ 2000.789646][ T3939] block_read_full_folio+0x4db/0x850 [ 2000.795464][ T3939] filemap_read_folio+0xc8/0x2a0 [ 2000.801027][ T3939] do_read_cache_folio+0x263/0x5c0 [ 2000.806708][ T3939] read_part_sector+0xd4/0x370 [ 2000.812007][ T3939] adfspart_check_ICS+0x93/0x940 [ 2000.817493][ T3939] bdev_disk_changed+0x720/0x1520 [ 2000.823071][ T3939] blkdev_get_whole+0x187/0x290 [ 2000.828448][ T3939] bdev_open+0x2c7/0xe40 [ 2000.833221][ T3939] blkdev_open+0x34e/0x4f0 [ 2000.838277][ T3939] do_dentry_open+0x982/0x1530 [ 2000.843578][ T3939] vfs_open+0x82/0x3f0 [ 2000.848222][ T3939] path_openat+0x1de4/0x2cb0 [ 2000.853347][ T3939] do_filp_open+0x20b/0x470 [ 2000.858385][ T3939] do_sys_openat2+0x11b/0x1d0 [ 2000.863640][ T3939] __x64_sys_openat+0x174/0x210 [ 2000.869079][ T3939] do_syscall_64+0xcd/0x4b0 [ 2000.874136][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.880560][ T3939] [ 2000.880560][ T3939] -> #4 (set->srcu){.+.+}-{0:0}: [ 2000.887701][ T3939] __synchronize_srcu+0xa1/0x290 [ 2000.893214][ T3939] blk_mq_quiesce_queue+0x149/0x1b0 [ 2000.898982][ T3939] elevator_switch+0x17d/0x810 [ 2000.904278][ T3939] elevator_change+0x391/0x580 [ 2000.909579][ T3939] elevator_set_default+0x2e9/0x380 [ 2000.915312][ T3939] blk_register_queue+0x384/0x4e0 [ 2000.920902][ T3939] __add_disk+0x74a/0xf00 [ 2000.925768][ T3939] add_disk_fwnode+0x13f/0x5d0 [ 2000.931080][ T3939] nbd_dev_add+0x783/0xbb0 [ 2000.936039][ T3939] nbd_init+0x181/0x320 [ 2000.940808][ T3939] do_one_initcall+0x120/0x6e0 [ 2000.946107][ T3939] kernel_init_freeable+0x5c2/0x910 [ 2000.951863][ T3939] kernel_init+0x1c/0x2b0 [ 2000.956729][ T3939] ret_from_fork+0x56d/0x730 [ 2000.961934][ T3939] ret_from_fork_asm+0x1a/0x30 [ 2000.967241][ T3939] [ 2000.967241][ T3939] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 2000.975082][ T3939] __mutex_lock+0x193/0x1060 [ 2000.980232][ T3939] elevator_change+0x17d/0x580 [ 2000.985525][ T3939] elv_iosched_store+0x315/0x3c0 [ 2000.990993][ T3939] queue_attr_store+0x26b/0x310 [ 2000.996379][ T3939] sysfs_kf_write+0xf2/0x150 [ 2001.001532][ T3939] kernfs_fop_write_iter+0x3af/0x570 [ 2001.007444][ T3939] vfs_write+0x7d0/0x11d0 [ 2001.012303][ T3939] ksys_write+0x12a/0x250 [ 2001.017157][ T3939] do_syscall_64+0xcd/0x4b0 [ 2001.022204][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.028635][ T3939] [ 2001.028635][ T3939] -> #2 (&q->q_usage_counter(io)#62){++++}-{0:0}: [ 2001.037270][ T3939] blk_alloc_queue+0x619/0x760 [ 2001.042568][ T3939] blk_mq_alloc_queue+0x172/0x280 [ 2001.048129][ T3939] __blk_mq_alloc_disk+0x29/0x120 [ 2001.053711][ T3939] nbd_dev_add+0x492/0xbb0 [ 2001.058689][ T3939] nbd_init+0x181/0x320 [ 2001.063436][ T3939] do_one_initcall+0x120/0x6e0 [ 2001.068740][ T3939] kernel_init_freeable+0x5c2/0x910 [ 2001.074523][ T3939] kernel_init+0x1c/0x2b0 [ 2001.079398][ T3939] ret_from_fork+0x56d/0x730 [ 2001.084519][ T3939] ret_from_fork_asm+0x1a/0x30 [ 2001.089823][ T3939] [ 2001.089823][ T3939] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 2001.097047][ T3939] fs_reclaim_acquire+0x102/0x150 [ 2001.102608][ T3939] kmem_cache_alloc_noprof+0x53/0x3b0 [ 2001.108592][ T3939] __kernfs_iattrs+0x124/0x3e0 [ 2001.113898][ T3939] __kernfs_setattr+0x4d/0x3c0 [ 2001.119187][ T3939] kernfs_iop_setattr+0xda/0x120 [ 2001.124654][ T3939] notify_change+0x6a9/0x1230 [ 2001.129878][ T3939] do_truncate+0x1d7/0x230 [ 2001.134822][ T3939] path_openat+0x2678/0x2cb0 [ 2001.139937][ T3939] do_filp_open+0x20b/0x470 [ 2001.144966][ T3939] do_sys_openat2+0x11b/0x1d0 [ 2001.150178][ T3939] __x64_sys_openat+0x174/0x210 [ 2001.155565][ T3939] do_syscall_64+0xcd/0x4b0 [ 2001.160612][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.167057][ T3939] [ 2001.167057][ T3939] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 2001.175585][ T3939] __lock_acquire+0x12a6/0x1ce0 [ 2001.180981][ T3939] lock_acquire+0x179/0x350 [ 2001.186031][ T3939] down_write+0x92/0x200 [ 2001.190815][ T3939] kernfs_link_sibling+0x4b6/0x770 [ 2001.196470][ T3939] kernfs_add_one+0x20a/0x840 [ 2001.201698][ T3939] kernfs_create_dir_ns+0xfc/0x1a0 [ 2001.207352][ T3939] sysfs_create_dir_ns+0x13a/0x2b0 [ 2001.212991][ T3939] kobject_add_internal+0x2c4/0x9b0 [ 2001.218805][ T3939] kobject_add+0x16e/0x240 [ 2001.223755][ T3939] device_add+0x288/0x1aa0 [ 2001.228701][ T3939] hci_conn_add_sysfs+0x17e/0x230 [ 2001.234358][ T3939] hci_conn_complete_evt+0x58e/0x13c0 [ 2001.240262][ T3939] hci_event_packet+0xa0d/0x11c0 [ 2001.245744][ T3939] hci_rx_work+0x2c5/0x16b0 [ 2001.250792][ T3939] process_one_work+0x9cf/0x1b70 [ 2001.256267][ T3939] worker_thread+0x6c8/0xf10 [ 2001.261382][ T3939] kthread+0x3c2/0x780 [ 2001.265991][ T3939] ret_from_fork+0x56d/0x730 [ 2001.271178][ T3939] ret_from_fork_asm+0x1a/0x30 [ 2001.276685][ T3939] [ 2001.276685][ T3939] other info that might help us debug this: [ 2001.276685][ T3939] [ 2001.286937][ T3939] Chain exists of: [ 2001.286937][ T3939] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 2001.286937][ T3939] [ 2001.301387][ T3939] Possible unsafe locking scenario: [ 2001.301387][ T3939] [ 2001.308944][ T3939] CPU0 CPU1 [ 2001.314317][ T3939] ---- ---- [ 2001.319693][ T3939] lock(&root->kernfs_rwsem); [ 2001.324480][ T3939] lock(cpuhp_state_mutex); [ 2001.331624][ T3939] lock(&root->kernfs_rwsem); [ 2001.338949][ T3939] lock(&root->kernfs_iattr_rwsem); [ 2001.344249][ T3939] [ 2001.344249][ T3939] *** DEADLOCK *** [ 2001.344249][ T3939] [ 2001.352407][ T3939] 4 locks held by kworker/u9:9/3939: [ 2001.357734][ T3939] #0: ffff888056eae148 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2001.368402][ T3939] #1: ffffc9000bff7d10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2001.379845][ T3939] #2: ffff888047c480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xb9/0x13c0 [ 2001.389740][ T3939] #3: ffff88801bef7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0x840 [ 2001.399612][ T3939] [ 2001.399612][ T3939] stack backtrace: [ 2001.405519][ T3939] CPU: 1 UID: 0 PID: 3939 Comm: kworker/u9:9 Tainted: G U syzkaller #0 PREEMPT(full) [ 2001.405564][ T3939] Tainted: [U]=USER [ 2001.405575][ T3939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2001.405596][ T3939] Workqueue: hci1 hci_rx_work [ 2001.405640][ T3939] Call Trace: [ 2001.405649][ T3939] [ 2001.405659][ T3939] dump_stack_lvl+0x116/0x1f0 [ 2001.405707][ T3939] print_circular_bug+0x275/0x350 [ 2001.405764][ T3939] check_noncircular+0x14c/0x170 [ 2001.405813][ T3939] __lock_acquire+0x12a6/0x1ce0 [ 2001.405861][ T3939] lock_acquire+0x179/0x350 [ 2001.405902][ T3939] ? kernfs_link_sibling+0x4b6/0x770 [ 2001.405942][ T3939] ? __pfx___might_resched+0x10/0x10 [ 2001.405987][ T3939] down_write+0x92/0x200 [ 2001.406016][ T3939] ? kernfs_link_sibling+0x4b6/0x770 [ 2001.406049][ T3939] ? __pfx_down_write+0x10/0x10 [ 2001.406074][ T3939] kernfs_link_sibling+0x4b6/0x770 [ 2001.406106][ T3939] kernfs_add_one+0x20a/0x840 [ 2001.406139][ T3939] kernfs_create_dir_ns+0xfc/0x1a0 [ 2001.406172][ T3939] sysfs_create_dir_ns+0x13a/0x2b0 [ 2001.406198][ T3939] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2001.406226][ T3939] ? find_held_lock+0x2b/0x80 [ 2001.406254][ T3939] ? do_raw_spin_unlock+0x172/0x230 [ 2001.406279][ T3939] kobject_add_internal+0x2c4/0x9b0 [ 2001.406306][ T3939] kobject_add+0x16e/0x240 [ 2001.406330][ T3939] ? __pfx_kobject_add+0x10/0x10 [ 2001.406355][ T3939] ? do_raw_spin_unlock+0x172/0x230 [ 2001.406378][ T3939] ? kobject_put+0xab/0x5a0 [ 2001.406404][ T3939] device_add+0x288/0x1aa0 [ 2001.406431][ T3939] ? __pfx_dev_set_name+0x10/0x10 [ 2001.406461][ T3939] ? __pfx_device_add+0x10/0x10 [ 2001.406485][ T3939] ? find_held_lock+0x2b/0x80 [ 2001.406511][ T3939] ? hci_find_link_key+0x1fe/0x3c0 [ 2001.406552][ T3939] hci_conn_add_sysfs+0x17e/0x230 [ 2001.406588][ T3939] hci_conn_complete_evt+0x58e/0x13c0 [ 2001.406618][ T3939] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 2001.406649][ T3939] ? skb_pull_data+0x166/0x210 [ 2001.406685][ T3939] hci_event_packet+0xa0d/0x11c0 [ 2001.406716][ T3939] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 2001.406753][ T3939] ? __pfx_hci_event_packet+0x10/0x10 [ 2001.406787][ T3939] ? kcov_remote_start+0x3c9/0x6d0 [ 2001.406811][ T3939] ? lockdep_hardirqs_on+0x7c/0x110 [ 2001.406849][ T3939] hci_rx_work+0x2c5/0x16b0 [ 2001.406883][ T3939] ? rcu_is_watching+0x12/0xc0 [ 2001.406912][ T3939] process_one_work+0x9cf/0x1b70 [ 2001.406940][ T3939] ? __pfx_process_one_work+0x10/0x10 [ 2001.406967][ T3939] ? assign_work+0x1a0/0x250 [ 2001.407008][ T3939] worker_thread+0x6c8/0xf10 [ 2001.407034][ T3939] ? __kthread_parkme+0x19e/0x250 [ 2001.407067][ T3939] ? __pfx_worker_thread+0x10/0x10 [ 2001.407089][ T3939] kthread+0x3c2/0x780 [ 2001.407126][ T3939] ? __pfx_kthread+0x10/0x10 [ 2001.407164][ T3939] ? rcu_is_watching+0x12/0xc0 [ 2001.407190][ T3939] ? __pfx_kthread+0x10/0x10 [ 2001.407227][ T3939] ret_from_fork+0x56d/0x730 [ 2001.407249][ T3939] ? __pfx_kthread+0x10/0x10 [ 2001.407286][ T3939] ret_from_fork_asm+0x1a/0x30 [ 2001.407324][ T3939] [ 2001.702168][ T7124] Bluetooth: hci3: command 0x0c1a tx timeout [ 2001.708958][ T7124] Bluetooth: hci0: command 0x040f tx timeout [ 2001.715516][ T7124] Bluetooth: hci2: command 0x0c1a tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2001.978931][T13136] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 2002.106150][T13211] netlink: 'syz.0.4991': attribute type 1 has an invalid length. [ 2002.199740][T13212] ieee80211 phy472: Selected rate control algorithm 'minstrel_ht' [ 2002.395836][T14967] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.2792: bg 1: bad block bitmap checksum [ 2002.415570][T14967] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6657: Filesystem failed CRC [ 2002.439157][T14967] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.2792: bg 2: bad block bitmap checksum [ 2002.535450][T14967] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.1.2792: Error -74 reading block bitmap for 2 [ 2003.240198][ T9623] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.3.4740: Error -117 reading block bitmap for 2 [ 2003.355229][T13136] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz-executor: Error -117 reading block bitmap for 2 [ 2003.738050][T13201] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.0.4991: Error -117 reading block bitmap for 2 [ 2003.798488][T13201] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.0.4991: Error -117 reading block bitmap for 2 [ 2003.843702][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.022487][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.090613][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.145113][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.238031][ T59] bridge_slave_1: left allmulticast mode [ 2004.243782][ T59] bridge_slave_1: left promiscuous mode [ 2004.250672][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.260715][ T59] bridge_slave_0: left allmulticast mode [ 2004.266870][ T59] bridge_slave_0: left promiscuous mode [ 2004.272902][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.383163][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2004.394383][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2004.404331][ T59] bond0 (unregistering): Released all slaves [ 2004.713644][ T59] hsr_slave_0: left promiscuous mode [ 2004.719773][ T59] hsr_slave_1: left promiscuous mode [ 2004.727089][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2004.734522][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2004.742791][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2004.753187][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2004.766910][ T59] veth1_macvtap: left promiscuous mode [ 2004.772508][ T59] veth0_macvtap: left promiscuous mode [ 2004.778261][ T59] veth1_vlan: left promiscuous mode [ 2004.783593][ T59] veth0_vlan: left promiscuous mode [ 2004.973096][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2005.009556][ T59] team0 (unregistering): Port device team_slave_0 removed