last executing test programs: 1m45.152201224s ago: executing program 2 (id=4837): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_FITRIM3(r2, 0xc0185879, &(0x7f0000000200)={0xfff, 0x6c0, 0x9}) r3 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14) futimesat$auto(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x7, 0xfffffffffffeffff}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1m43.451949001s ago: executing program 2 (id=4840): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x7ffff000}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x3, 0xf, 0x0, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event2\x00', 0x40002, 0x0) ioctl$auto_EVIOCREVOKE(r2, 0x40044591, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='P^\x00', 0x1) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, r0, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, 0x0) 1m42.209920234s ago: executing program 2 (id=4844): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) madvise$auto(0xfffffffffffffffd, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x101800, 0xf9) sysfs$auto(0x2, 0x17, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) open(&(0x7f0000000800)='./file0\x00', 0x1a3342, 0x24) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80e42, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKGETSIZE(r4, 0x1260, 0x0) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x5) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m41.284669793s ago: executing program 2 (id=4845): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{@raw=0x81, 0x6, 0x8001, 0x8, "b132ce14b9fa7a699c29a892e255dab2591457de9c4db5868db157e9cc1910aa07e336ede9b387eac3eae00a", @raw=0x8ef}, 0x2, 0x8, 0x1895, @raw=0x4, @integer={0x0, 0xf, 0x9}, "f82d0516c633863c5281ae962fd8c811792ad96298c95d5a9da1400adb4ee0bc170d51ef637d9927912407406936d9cbf46ddadb7820b40766245026a272cd3a"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) write$auto(0x3, 0x0, 0xfffffdef) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4, 0x6, 0x0, 0x9b72, r0, 0xa8000) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x7ffffffb, 0x0, 0x0, 0x3) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) 1m39.692805753s ago: executing program 2 (id=4850): unshare$auto(0x40000080) r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) r1 = open(0x0, 0x80a40, 0x9e) read$auto(r1, 0x0, 0x8004000000) write$auto(r0, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) shmctl$auto_SHM_INFO(0x1, 0xe, 0x0) newfstatat$auto(r1, 0x0, 0x0, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x28c83, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x45bd, 0x43b6, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) memfd_create$auto(&(0x7f00000000c0)='IPVS\x00\x84\x94\xbf\x7f\xe0(\xc7^M\xbe\x92\x98?I\xa5\x95V\xf2{\xd6\xc1\xc4.\xc3ja\xe8\xa1o\xb5-Z\x9dc\x152\xaew`0M\x1b3\r\x8afQ\xc2\x82W?r$\xf0\xce\x7f\x15\xa1\x13\xb2\x84\x04\xad<\x91\x85\xb22G\xf6\x8b\xba<\xe9&\x17%\x1a\xa5c\xe8\x06\xd4ok\x8a\xb2\xbaz\xf1\v\xf4\xaa\xda\x91\xfb\xea\x17~C\xb3\xc4S\xce\x83\x13\xd9\xbd{d\xfdB]\xb0R\x05b\x1b\xa5\xb8\x85\xa9\xbc5-9\x94\xa4QG\x06Z3#\x1cK\xbe\x16\xebaE~\x00\x00\x00\x00\x00', 0xa) fchmod$auto(0x0, 0x4) syz_clone(0x10084480, 0x0, 0x0, 0x0, 0x0, 0x0) 1m37.632909841s ago: executing program 2 (id=4853): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 1m22.535744269s ago: executing program 32 (id=4853): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 23.812152116s ago: executing program 4 (id=5075): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r1, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x48, 0x400, 0x1f}]}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) writev$auto(r4, &(0x7f0000000340)={0x0, 0x500000}, 0x9) socket(0xa, 0x1, 0x84) 19.620852229s ago: executing program 4 (id=5088): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/004/001\x00', 0x1102, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="f307340002008100"]) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0x7, 0x7, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r1 = io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0x2, 0x13, r1, 0x0) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) r2 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) io_uring_setup$auto(0x1, 0x0) write$auto_userio_fops_userio(r2, &(0x7f0000000100)="a89371465d2af347ce7253edeee27b5e9f4c6f8e0682ecb7df82c9f22ae3911ee6dd7b9b5f9781796cf578a9637085ef6ca649e526c18241b183928fd146c74757cb82f7dd1984f515af17ed748a0b8f67b908ecabdf77c63c8a855537b61656f6d5ca52dad6fa689f636f85c71137d105dfcf85", 0x74) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) 17.796251708s ago: executing program 4 (id=5094): syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc050) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x4001a2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) name_to_handle_at$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1003) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000001f40)='/sys/kernel/tracing/tracing_cpumask\x00', 0x2002, 0x0) write$auto(r0, 0x0, 0xe) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) set_mempolicy$auto(0x1, 0x0, 0x803) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) capset$auto(0x0, 0x0) r3 = epoll_create$auto(0x8800001) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='\f\xc3+j\xc0\x8b\x01f\xea9\xc4\xd5\xa1\x00\x17', 0x6) epoll_ctl$auto(r3, 0x1, r2, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9) 16.654075518s ago: executing program 4 (id=5099): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x8) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000180)="db2772921aa358aded9b3974770660ec15cd95241101508eeff6319db26ef8f802eeadaf93f2a33908791371668d75a9f92b712dbfa8754bd6e8dc158f63d2c469153de9a5b0862002979238c7cb05b04366bfeeca285fb15466e7e4fb4257c7a88f7bc6b0e74dd3aac889f9ca4fb4188aefb6d8afbb8e7dd933c772deeefb5abb34c717cfc93003ec058e29819bcc2fec66d577a583c095153236c1adc83680428f7b26f253abe61345775fb635bdbf1c298d398e4cc6139956c43518641941d2c9cd03c90ab6c757644aea61c7029a38fdd46d52600f8a6656", 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x228000, 0x0) mmap$auto(0xd69, 0x68a, 0x0, 0x17, r2, 0xffffffff80000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f00000006c0)="39198cef1767bca1be9490a4f06fcce87acaeb8f3914f768048b3b3ac82bbf289a87b0a673974522d41fca7e34be8fc03e4acbc8c1fbc02a7d6d04edc508dca7911eb76ce8b6dda2064daf5bc834aff359f6e84b4e8790088d3d085dcd9bd632ca1c5d2879aaed8511d7ba520f73dd18363ecb6ce5b80abfd2728c8179a0409bca8cd22056793124498eddfafcff41ff1bafbfed6ee5d0f70a6da2a91977c2c51a13b240b1b53592edb74b787631279f63eec284c94860530093a84ffd43c2d954fa49749e15d90a14b277601bed73d5c061dedbf44852c072be020924f7ff8c8730d60900000000000000872d63ae9af288ab66db3c73ea16db9be9b12f7d4164f7812f7108940600000037ebe7587a1da36c850cab06cbd6e4d930af0b1fd0d98f6d967439aa4e001bcb76ace7c667bbdbc1", 0x200084c, 0x0, 0x3, 0x0, 0x3, 0x10b}}, 0xffffffff, 0xc5c) getsockopt$auto_SO_TYPE(r4, 0x2, 0x3, &(0x7f0000000080)='}]\x00', &(0x7f00000000c0)=0x7fffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x1, 0x0, 0xffffffffffffff39, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x8587) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001c00)=""/4111, 0x100f) getgroups$auto(0xffffffff, 0x0) shutdown$auto(0x200000003, 0x2) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0x9, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, 0x0) 16.011696095s ago: executing program 4 (id=5103): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x80, 0x3ff, 0xdd, 0x15, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8008563f, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x8, 0x586) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x8000000eb5, 0xfffffffffffffffa, 0x812) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f00000004c0)=0xff) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000002200)=ANY=[@ANYBLOB="181c0000", @ANYRES16=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04002a808996637477b258025a3448ae90e25b603c7041299f0ce827e4b0a9346f97cb86919b3deb5406589751a55ae280ac778670044ae473257e539ce0ee8e10220360e21345203f506cfe27849f795117c99539223cae348ce0ccc4deac6f379d2c42b15732bc35ce00ce333e66aeced958fa9034c198bcb3e8c6ecfb1f18c80bbc4c2760e4a6c17f292c5c062747fdbeef1d2de779c3cd974f6d1f1bb5debfd8318f5f82be2d45bd579ef241030a1e0f77f180c47b60c9ee8655b44f43eda3ec5c7684fee3aec0e536f2a3ff0f28d607f1b57996aaac6655ec821b80c6df40091e2677948ade08006600", @ANYRES32, @ANYBLOB="0c00700007000000000000005c303b4ce2a066feda22066414f124682c7965c7df2f3b6f9689709efb6f7b13bca6120289cb335e935f0fb7906a3138125582bcd2d85d1cc92eaee6a6bafb58e8f300000800060003000000080005000000000008000600ff0f0000f4010380ed012680f1a2cfe6b49c915d67ad5d271104292f7dea0919f3a42daa45c5d6afcad19241abd8be52a1c64ba27936b5bcfe0e488b323cee59ad16344a73f11883d8706b53da4a85a4f76d0be553be2549ab95395776b1fa9a3caa98b9df408aea042c03f5ec3d60881a2e94b41b53b548561b48e5e58c7589eaa3572cc5294b4decf231fce95f1de1bbb31b487500fc3d981a4999950b44f3d4056154650f9ea3c4b698f9dd794dd2f4747156b2c1abe35d9016fac6a9bc742d1c3b1ad3991b303e2676cc0e2567c6712c74f5ac68cd15a04772717e71931129bc0177c64f35c98312bd50224976543c718917a1aa094258ceb486d46dadbc3584a696b3a90800f600", @ANYRES32=r0, @ANYBLOB="04008b8042dbd3dc7baee418bd8e0c0d79d6b773cb841542adf15532bafcf088e7dae88750aec39589c3ecf5fb69d91b9b5e6d6707a9bf18510baed102a824de9f87a2cd7e10720d109891586f3fbdb7e6640b7d60a0bfb41761332a3deafc50a647150d77e8ea04b67537fdc3a564a7184a26155a0be6a2ebdf333406076f94d33b7896a93fee82934d698d8738f8a16a5904450325f5d49568b6a822b3813f886e0b1b03191698667810ddd906b3db9ba5b1c5f8b1cfa9dd98ff258095ffdb84c18e27bb62c766a12aa608524cf93f0a255adb8404dc9a9553dcd96db98b08000000", @ANYRES32=0x0, @ANYBLOB="000000200002800800f400", @ANYRES32=0x0, @ANYBLOB="14005b8004006c800800e9006401010004004480de11018040c4e47d99645ce22a9e829afe12a59aee994d81dca91f03bb5815dc42ffb4e5012ae6a6a063e388d18273d565b2cc1b12fd0f9f2a120f35619c7b3c317f53ba9c6dcbe6b3e6edb5941eee26ee95ae16fc508eb45c898138a2ee5cf974448049704b824446d5d252a85f651ad4e44d76ebda7d82f1612de4659ee2e703a0400699d5f4667064a489ff97f0cd03f7cf945c73689ba6ed9602d4679faf2b3cabf407b08de31b122234fe98262b70ab20580574342c3da4ff0800be00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="8b666ef8ddaa683cca18e0f9c349eb99832f36e273cfa416885c18654fa72f0b8bc667cbe3594d934623ad5fc29514f0cddfc6d41d7dd5c056947e2ca34b06151bb04a240d4097fca3fe0afb6867b4e904630c1b526a6c2bc0cee717ef94f9a430ea002513f9651860d57cd46a6ecf54530d32b2cb3e3716247bd966cfd9f12a6a3ec26c9b0efa752c78ca195da8c0a224f53f203b9c884f80629b6ac415fd9da69cb8afdd8b906a89392284af106f300b0ad927e2ef369f79a79b0fbd45b6924f282b50cd4334470998ddd9e90400e08004002d800400588004001c000400070008007b000200000000000030005880080051009b0500001cf813dcbef5123349a9ea825d462f360400598004000f800400678005000a000000000008001100", @ANYRES32=r1, @ANYBLOB="30019c8008000900", @ANYRES16=r3, @ANYRES16=r0], 0x1c18}}, 0x4000080) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x90001, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x7) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x905400, 0x0) ioctl$auto_PPPIOCSFLAGS(r6, 0x40047459, &(0x7f0000000100)=0xc) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x80006, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @private=0x8010100}, 0x6a) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) 15.178127899s ago: executing program 4 (id=5106): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = dup$auto(r2) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x81004523, r3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'}) r6 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) setns(r1, 0x40000000) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) fcntl$auto_F_GETSIG(r6, 0xb, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) 6.168671246s ago: executing program 3 (id=5142): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x7ffff000}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7, 0x68, 0x5, 0x7c002fa6, [0x2, 0x3, 0x7, 0x6, 0x5, 0x8]}) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$auto_EVIOCREVOKE(r2, 0x40044591, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='P^\x00', 0x1) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, r0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) 5.649053692s ago: executing program 3 (id=5144): waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r1, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x272) msgctl$auto_IPC_STAT(0x0, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev$auto(r2, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) mmap$auto(0xfffffffffffffffe, 0xe983, 0xc, 0xebe, r0, 0x54f5cfc0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r3, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4610, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r6) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r6, 0x0, 0x80014) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2a, 0xa, 0x83) mmap$auto(0x2, 0x810004, 0x5, 0x8000000008011, r5, 0x8000) 4.664115176s ago: executing program 3 (id=5146): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x6, 0x0, 0x0, 0x0, 0x1001, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6}) r0 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, 0x0, 0x55) write$auto(r0, &(0x7f0000000080)='<&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r1, 0x9205, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter$auto(0x3, 0x80a84, 0x80000001, 0xa, 0x0, 0x21b15ab0) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) fcntl$auto(0xff80000000000000, 0x409, 0x3f) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x50) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) write$auto(0x1, 0x0, 0x80000000) 4.350300211s ago: executing program 1 (id=5147): r0 = socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x7fff, 0x2) clone$auto(0x2, 0x20aa2890, 0x0, 0x0, 0xfffffffffffffe00) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vbi5\x00', 0x220400, 0x0) ioctl$auto(r1, 0xc0845657, r1) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r2 = socket(0x2, 0x2, 0x100) r3 = socket(0x2, 0x3, 0xa) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) r4 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, 0x0, 0x104c0, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, r2) sendfile$auto(r4, r3, &(0x7f00000005c0)=0x7fffffffffffffff, 0x1) r5 = geteuid() keyctl$auto(0x1f, r5, r5, 0x5, 0x8) r6 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=@enable_stats={0x6}, 0xfffffffd) sendmsg$auto_TIPC_NL_LINK_GET(r2, &(0x7f0000000fc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)={0x68c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3e3, 0x3, 0x0, 0x1, [@nested={0x1b5, 0x98, 0x0, 0x1, [@typed={0x8, 0x137, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x151, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="43c0235e9117b09bd15c3cdcf933803bc57f435ce78937b5a81aa749b74196d385bd270cabe7fe2727c5aa40e3ee7265c5602ebf48d74eee87cf862f492c282bc085eb4b8706944e31da00d16af30d14d596f5a7686c4b334d9d44633b82a098ee43e6b5def5bdcae002e280155b3679c38850db63ccff2a2e2064a64134017e2e2d91b25ceb0a7cd583ee14ce417c476f6c38396d7a513f93776595dbdee6666b5f60", @nested={0x4, 0x2b}, @generic="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"]}, @nested={0x20, 0xc3, 0x0, 0x1, [@typed={0x14, 0x48, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x12a}, @generic, @nested={0x4, 0x35}]}, @generic="9e09d7682d3ea443585fe6680a467b9ffcd7722852fab7b4ce9435b88969a56ad9e7b68efbccdaf2036ed859b31adbd1c6827de570461f0b8edf264f03178a02319ae057a844f5b5ed3b211d3b9fad852d88be23bc13530a248f13ad42754f7042509909bc618aece4d40d0afef611da3a0e41b5a85149aa146f31eb0770bdfe9e92119e3f7662faa0aca70019255419df90e1444b5985dc6276d6d94468da13da0b7e7246a3902a0a0d1f7dce39bf9ea4fdcac4dde5af3f2443682c1d29c539352ca06bd3c3aaa6148b29309a13c44ba2ea1928d23b6e367e25b90332b0763ff49647b4fc", @generic="a2d80a75fe3c1cf2583918499b0e2fa2a9343bd89e60711a5def66c23816b519b486ea5dffd8d87b7ae7becf999e05c4ab2b1c7ca2766877525ae4e81cf4979b46", @nested={0xc, 0x3c, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @u32=0x4}]}, @typed={0x14, 0x155, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0xe0, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="bb49daff375ff6a570c97c6759b72386647e1dc78ecc313b013f3f8416d13510b4b2a20351992a5a39e7c953349d925379", @generic="b1f97799bc02d84d649b8d5860af078ddfeb5e175330514e8b0770c4deefa66a0ba99deb5062edf0879239255842fa199c4a9ecef47626e4f8287ab970828af98d73f0ba8e0a5e429d75ca903a772c271101221e781cdd7b73a63973fd1b4c11633e867004b435e91f61e5ca0a14fb90d817f754f6d57512098233a3a59176f3b21e94631324bda4"]}, @TIPC_NLA_NET={0x179, 0x7, 0x0, 0x1, [@generic="a4a939942a4ac94e4bfe8341188dcb03b3a3f4891afe25589c178482acac8fc575d0ba7447d40a13bc1ec4c2dd1cd68c2aabb5cc2e86c8b4695384c61915fcf5db09267922553ac286644602adb482355190fdcb1c59e8847accbf7132d1ed42b1d6c7b2185da3dda63fc2216726fb683841f4b7acaab63c669c6577eeeedd299a8c3485db72aa2a970faffd8a4bb7784add8af128f16fc7b185a81d6bdf08cbbe24892dcd94ae477664f4b0fc328763", @typed={0x14, 0x106, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xd}}, @generic="f9669455ec4a364ebee3f0a0261a", @generic="2db55fd5afe1708a2c87705756df0b830e47ab07180c8d9babd252c87bc4d57bb007752fce11ed9c2b6d59b21ee96a01960ebf1016c49684910d0264001838c703eacbdb8b1e6e70d9cebef7a1dc2fadc828313bde480ccf2cbc260854b90a67b517a80b89a70f1cf2d61f28ee7d5e1fed36a1a0c04af679c62459ffbce4b56350f43e8bd1d394c23650bcaf9d9203f5b0cb1e014eab726a31620d", @typed={0x8, 0x60, 0x0, 0x0, @uid}]}, @TIPC_NLA_MON={0x116, 0x9, 0x0, 0x1, [@generic="343cb3610c81a99e74165313144e0961fc2322a6c2ed1fdc6ce744a858014933323fe2443fc6a93bf75f9cdea8c9c7a0ecba", @nested={0x8, 0x6b, 0x0, 0x1, [@nested={0x4, 0x12b}]}, @nested={0x98, 0x34, 0x0, 0x1, [@nested={0x4, 0x112}, @nested={0x4, 0xc7}, @typed={0xc, 0x130, 0x0, 0x0, @u64}, @typed={0xc, 0x124, 0x0, 0x0, @u64=0x5}, @generic="28bd44c9fedd64d6424735e519ecf0535858c82ebd5193302b9b971fb8748d22a72a1f946557549a091270705964a90aaf8ff2044434108ef1b4a1479988385b8f7dbf4576793e51cb3c8a7befd7e40150b44978bc0e56e593a068c581bf9473f741786bd5e11c93", @typed={0x8, 0x148, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x95}]}, @nested={0x3d, 0x130, 0x0, 0x1, [@generic="05d6cde9c4e98c54068a5be67b001529db4ba3895f9ee91053e16458d1f761720e8c54286f048a0e00b8cf05a46d0edfa6", @typed={0x8, 0x14, 0x0, 0x0, @fd=r6}]}]}]}, 0x68c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000180), r2) r8 = socket(0x2a, 0x2, 0x9) sendto$auto(r8, 0x0, 0x402, 0x0, &(0x7f0000000700)=@generic={0x2a, "e2e1000000000000000400f100"}, 0x9) sendmsg$auto_KSMBD_EVENT_STARTING_UP(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42281401}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x20040004) r9 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), r0) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x198, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x17b, 0x2, 0x0, 0x1, [@generic="73531ae7dc49fe898d9edb4c314153c03327ce8a2b3fc74f0494e848", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@empty}, @generic="7ce989454b313d2ef7b2a84558b0fb02e83c599df3defc3a4a5d91571ca473636c7b8ddf3baeb7d04e88db29dce7a9898da013c39d346e2d6ae2c8891be986c972b99038c7d963210ef17eaf8d742de343dca356e4eac1ba723de340789854b76ecb9f94f71727db66c1ed89faff1fa78200f0f8449e7604b6dd6ea54c990a2f121c62a8", @generic="85627b72caadd5f4992dc0683456bfc7496430190d502539a9b408382436388a7b9fa3dc485b3ad813df6634319ed5492c03bd318318e0000087016de009f42da2ffa4bf0ba871d9c27505bd95004b1a1e201fde2a4b3105e8e79b67c2041c6ddbb3a5911b602fa1547596e62947949d8b7a9f691818c14c8feea5809ccdee031386734923ac2c95bb0c1980d77cc6210982c23b7f077589805a05939f9bde19387b893d896e65abef6e217cd2b925d5eba0b79523349e", @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xa2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc697}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000}, 0x44050) r10 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000540), r8) sendmsg$auto_KSMBD_EVENT_TREE_DISCONNECT_REQUEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) close_range$auto(0x2, 0x8, 0x0) 3.748554738s ago: executing program 1 (id=5148): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = pidfd_open$auto(0x1, 0x0) r3 = socket(0x18, 0x3, 0x2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) bind$auto(r3, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x2a, 0x2, 0x6) connect$auto(r4, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$auto(r4, 0x0, 0x2d) close_range$auto(0x2, 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(r2, 0x0, 0xffffffffffffffff, 0x0, 0x104) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)="fc06c1f730b9d2867a8ba29f242cf38f59f712fcd917fee796") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x124, 0x0, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x100, 0x3, 0x0, 0x1, [@nested={0xfc, 0xd8, 0x0, 0x1, [@typed={0xf6, 0x8, 0x0, 0x0, @binary="748abb8a17ac5656b7a7f21fd3a81414ea17d4365c66abef15909896d82803d47669acfe36e65c89e790d65441c3afde9e4f2b2335fe9649a0829dcf8d96c20bd6b274058524240b3438e6bb7b96092c32d37d4504678b3bcca7f5a59c6abc3950577fd3f4b1e55596bea50f40555059144b67bfdbeb0192499dbc8b62d89d7ac52e1152eb21434d6a087e9ddb26abed546cfdb00cd2d3fcd2ab30eca9e45fa39cc69ff570df8821b07ce3fa653916f0aa6b0d55b3232433879d9a85672729ea77ef88bcdff3472af14a6eba51bae46fe4d47933ace649680efeab65c43fc763a2d9de2f1f37700ea938c70feec943495a85"}]}]}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0xca7}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x14004040}, 0x400c884) 3.74724107s ago: executing program 0 (id=5149): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r5 = socket(0xa, 0x5, 0x84) sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x34, 0x28, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r5, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1040}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) r8 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r4, 0x8004b709, &(0x7f0000000140)=0x7) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="0813000084aede8bbbef5643203c3522d8248dea1634eed133afe495449b68e7aea9946b1edd96d479193bd3002deefdcf8df551a1e742a8b65c007a05cd8c50e347260bf32695bd7348fce0313cd8b42067572c1cc0f804a3f0b68f5b4506bbb8f13fe34a50983f54f4b494f83562ff73a4325c961a8b06d60fd0a5429075b426f060a78b5bea6f16835cb6d90c6f2788487eefea57b72b2438e8d77909af93a161b9c467a9a0ba4ee97f8a854de161d9ae6b1ed03e29a098e9d45e0c82eb10adb6e4ef39fa4ecd5c11dad3c10212692efb5a27f9f439a48fb311ab9be9885b77bf5bc76b11b1151b6d1da8eec6", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x1308}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r4, r5, 0x0, 0xc) acct$auto(&(0x7f0000000080)='/dev/dri/card0\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) socket(0x18, 0x80003, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) 3.262399565s ago: executing program 1 (id=5150): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @rand_addr=0x64010101}, 0x54) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) read$auto_sco_debugfs_fops_(r2, &(0x7f0000000140)=""/211, 0xd3) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000029, 0xf3) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='7', 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb5, 0x2, 0x7ffc) open(0x0, 0x161342, 0x130) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 2.636768216s ago: executing program 0 (id=5151): open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) close_range$auto(0x0, 0xfffffffffffff001, 0x2) mmap$auto(0x3dd, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r1) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r1, 0x0, 0x881) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, r0, 0x108000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyqe\x00', 0x401, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f00000000c0)="d78b50ccde") mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x1, 0xfffffffe, 0x3, 0x5) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r3, 0x0, 0xc3) socket(0x2, 0x2, 0x0) r4 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a2) bind$auto(r1, &(0x7f0000000040)=@generic={0x10, "6b12fcd15a2d9d95bf381fbe152a"}, 0x6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="008d94dd", @ANYRES8, @ANYBLOB="010026bd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24048014) socket(0x2, 0x1, 0x106) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xd}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) 2.12299656s ago: executing program 1 (id=5152): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.3/numa_node\x00', 0x63102, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r1, 0x540f, 0xffffffffffffffff) sendfile$auto(r0, r0, 0x0, 0x1) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ns/cgroup\x00', 0x2080, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r2, 0x205, 0xa, 0x4, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103041, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$auto_PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) mmap$auto(0x200000000000, 0x400009, 0x1000, 0x9b72, 0x8000000000000003, 0x7fff) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/eps\x00', 0x121000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000e80)=""/215, 0xd7) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1) write$auto(r6, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x0, 0x1ffe4, 0x3, 0x6, 0x200000000000004, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x2, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x401, 0x0, 0xfffffffd, [0x0, 0x0, 0x0, 0x204, 0x9, 0x0, 0x5, 0x4, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x400, 0x0, 0x0, 0x2, 0x9, 0x10, 0x14, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2], "26d7607ebe43556db89efb9f01c701ca0c814766a94acd1937ba0000485b623ad189fe6d4e9959e723e39e9cd16e2988601b"}, 0x2001fb, 0x7f) 1.815834719s ago: executing program 3 (id=5153): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x7ffff000}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7, 0x68, 0x5, 0x7c002fa6, [0x2, 0x3, 0x7, 0x6, 0x5, 0x8]}) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$auto_EVIOCREVOKE(r2, 0x40044591, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='P^\x00', 0x1) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, r0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) 1.745723651s ago: executing program 0 (id=5155): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000010c0)="7f07d3") r1 = socket(0xa, 0x2, 0x0) r2 = socket(0x11, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x805, 0x4, 0x0, 0x12) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) r5 = socket(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) bpf$auto(0x7, &(0x7f0000000000)=@batch={0x8000000000000000, 0x8, 0x6, 0x1ff, 0x9, r3, 0x7, 0xc9}, 0xa3) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) setsockopt$auto(r1, 0x4, 0x30, 0x0, 0x9) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop1/queue/discard_max_bytes\x00', 0x808882, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(r6, 0x0, 0xfdef) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"4ce5785d58db56db87f7928c0157821daabcdcda0122f8d64d6dbb5076cc4ddc", 0x4, 0x5, 0x80000001, 0xfffffffffffffe00, 0x100000001}) 1.695580303s ago: executing program 1 (id=5156): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, 0x0, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x3, 0xf, 0x0, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event2\x00', 0x40002, 0x0) ioctl$auto_EVIOCREVOKE(r2, 0x40044591, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='P^\x00', 0x1) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, r0, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, 0x0) 1.353885121s ago: executing program 3 (id=5157): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x26c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA={0x15, 0x7, "f6ff64389b62872b26f97bc80d052696ab"}, @NL80211_ATTR_MESH_ID={0x22, 0x18, "3eed9b1465d94ee937d70efbcdd93f95cb35b0d61936ae811703d63b6d71"}, @NL80211_ATTR_SAR_SPEC={0x208, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x124, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x48}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x200}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffd}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff1e6d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x452}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbb02}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb19}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x20}]}]}, @NL80211_SAR_ATTR_SPECS={0xe0, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x497819ce}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc59b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x18}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc6000000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x20000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}]}]}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24040081}, 0x40094) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r3 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r3, 0x125d, 0x0) mmap$auto(0xfffffffffffffffc, 0x40009, 0xdf, 0x9b72, r2, 0xfffffffffffffc01) madvise$auto(0x6, 0x1, 0x7fffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) 1.348825507s ago: executing program 0 (id=5165): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x7ffff000}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0x3, 0x0, 0xffd8) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event2\x00', 0x40002, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, r0, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0) 1.066736834s ago: executing program 0 (id=5158): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r1 = socket(0x2b, 0x80000, 0x2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0x24084005) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000180)) unshare$auto(0x8000000) shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2) r2 = socket(0xa, 0x1, 0x100) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) setns$auto(r4, 0x80000000) ioctl$auto(r4, 0x541c, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, &(0x7f0000000300)="2b7956fa8a2881e7e40a2bbd5923d08ecba68e0cc973513066e1f12c849d8a5a8d98e05b2da6ff33e182e61373f62e5249730c597c1d30b390d27ef401c297923ffcafde40c1a6904abe8e66e74ee1918062b00defc2ad9aea0d59e9c0d4f866b1fb125deada7cd6268074e08359d171cb1954b6b53012445e70ce9f3fc1c0c96b526b517b6cd909e6b825a5fac48603b066673d4d90fd7bd7ae9de4cb25623ce2967f94cd415dd4c70566068c848546359dd205c010dfe0ca8751bc3924195105ab5d9f6b86232b1e7cf5da7e9d6db9468ea21cddfe80e645d3ba55ac5ab117") syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) ioctl$auto(r3, 0xab00, r2) unshare$auto(0xd) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x9, 0x2020009, 0x3, 0x7fffffff, 0xfffffffffffffffa, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) acct$auto(&(0x7f00000000c0)='/dev/vhost-vsock\x00') ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000002c0)="174c8bb6c072729f03df8840b4c076d067f5aaeb966aa8a92a384754af18bb886776d7fc041df70974dc3ee9dc9175a5867b94e6e799d584d831e32b7a6adf381bd38cd9540cf7578673bad4cd43320cf62447165389e3b44d8a044f09416207998b11de7fd4ecdb08bc5953bca342a3c7b1c4ba73c77e03c604b8807ee0bd5ac504e345bf671a14da852037048484561477b39785d66bef6751eae5403062295f502fb626c958cddb6a88cb09f3378c7186dedd6323ceb93eda6a0d705ac0be7d9ae27c04795e82ea5baae338da210eef8c64855d42bcd39a986fa3eab556bf009d2d9fb813126735c530559fe239251a45919e0a8f96677a3e7cbaddd17fb4c6d512dc88ddd3b0fb847d23bc61ff577727e0d6a249e32bbf7be902b9ec976af16b2653fffbc2464dda4114879a28bef18880c9ddd17f7c8d408c95dd4842c323169d9810acbc8a3490e4bf7dd62159be09e896170de1de") socket(0xa, 0x3, 0x3a) 555.398936ms ago: executing program 1 (id=5159): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x323340, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pidfd_open$auto(0x1, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x1f, 0x0, 0x3d) setsockopt$auto(0x4, 0x0, 0x484, 0xfffffffffffffffe, 0x20) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x0, 0x0) socket(0xa, 0x3, 0xff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 268.876274ms ago: executing program 3 (id=5160): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0) mmap$auto(0x401ff, 0xfffffefffffffffe, 0x3, 0x10000000eb4, r0, 0x4020000000c37) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = eventfd$auto(0x4) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r1) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="040029bd7000ffdbdf2504000000080001009be4fd4b340003002f7379732f6b65726e656c2f74726163696e672f7065725f6370752f637075302f74726163655f706970655f72617700"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r5 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto_I2C_TENBIT(r5, 0x704, 0xfffffffffffffffd) ioctl$auto(r3, 0x4008af21, r2) close_range$auto(0x0, r2, 0x2) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/README\x00', 0x8481, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r2, 0x0, 0x725f, 0x9, 0xcac) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r6 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r7 = prctl$auto(0x44, 0x5, 0x0, 0x8, 0x863) open_by_handle_at$auto(r6, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) recvmmsg$auto(r7, &(0x7f0000000380)={{&(0x7f0000000280)="c7ebdf86c45e2307af161a37423f351d879954a3fbe840155a0bd5bacd9f79914015f30ba7ed2de7de0595e65e59b40fbf2e67acc6afa1d1cd1c55fffb15409daa2e0b2d738e0ab95a463a0dfe3aa1caf13c54491398a81e31cad045db57a1f70ba877f42859cac29fcbefcf682e1e8ce487065b8be0e70f40", 0x8, &(0x7f0000000300)={&(0x7f0000000200)="4c7521c6cf2abcc0d3c45fc9ec6741503434b968e4cef25b9029be2a", 0x3}, 0xd, &(0x7f0000000340)="bd30b02f3804a297854f512b488e32b8603298aceddbfaa53e", 0x27d2, 0x8}, 0x7}, 0x3, 0x56d7, &(0x7f00000003c0)={0x5, 0x80000000}) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/queue/read_ahead_kb\x00', 0x1629c3, 0x0) sendfile$auto(r8, r8, 0x0, 0x2) 87.519986ms ago: executing program 0 (id=5161): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x18800) read$auto(r2, 0x0, 0x3) socket(0x23, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x2, 0x8a) process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0x3, 0x44b, 0x7, 0x5, 0x8, 0xff, 0x7, 0x2, 0x7ff, 0x800c, 0x7, 0x4, 0x80200000000001, 0x800000000fbf, 0xde3, 0x9809588, 0xfffffffd, 0x2, 0x7fffffff, 0x0, 0x6, 0x22000, 0x40200, 0xfffffffe, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x1003, 0x0, 0x7ffffffb, 0x2, 0x47, 0x0, 0x100, 0xfffffffffffffffa, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400, 0xfffffffffffffffd, 0x20, 0x0, 0x8000000000000, 0x0, 0x2, 0x6, 0x80000000, 0x0, 0x3ff, 0x10001, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x6, 0x2, 0x3, 0xffffffffffffff72, 0x5, 0x0, 0x2000000000002]}, 0xa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd02, &(0x7f00000001c0)) wait4$auto(0x0, 0x0, 0x80000001, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x24040080) 0s ago: executing program 33 (id=5106): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = dup$auto(r2) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x81004523, r3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'}) r6 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) setns(r1, 0x40000000) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) fcntl$auto_F_GETSIG(r6, 0xb, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) kernel console output (not intermixed with test programs): syz.2.3230 tries to shift op by -2048; fix this program [ 1122.876212][T19022] : Can't lookup blockdev [ 1127.157957][T19069] FAULT_INJECTION: forcing a failure. [ 1127.157957][T19069] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.306000][T19069] CPU: 1 UID: 0 PID: 19069 Comm: syz.0.3240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1127.306057][T19069] Tainted: [L]=SOFTLOCKUP [ 1127.306070][T19069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1127.306092][T19069] Call Trace: [ 1127.306103][T19069] [ 1127.306117][T19069] dump_stack_lvl+0x100/0x190 [ 1127.306193][T19069] should_fail_ex.cold+0x5/0xa [ 1127.306236][T19069] should_failslab+0xc2/0x120 [ 1127.306275][T19069] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1127.306335][T19069] ? __proc_create+0x2cb/0x8c0 [ 1127.306401][T19069] __proc_create+0x2cb/0x8c0 [ 1127.306461][T19069] ? __pfx___proc_create+0x10/0x10 [ 1127.306521][T19069] ? _raw_write_unlock+0x28/0x50 [ 1127.306584][T19069] proc_create_reg+0x75/0x170 [ 1127.306620][T19069] ? __pfx_kcm_stats_seq_show+0x10/0x10 [ 1127.306671][T19069] proc_create_net_single+0x86/0x180 [ 1127.306718][T19069] ? __pfx_proc_create_net_single+0x10/0x10 [ 1127.306764][T19069] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 1127.306813][T19069] kcm_proc_init_net+0x52/0x120 [ 1127.306862][T19069] ops_init+0x1e2/0x5f0 [ 1127.306924][T19069] setup_net+0x118/0x3a0 [ 1127.306982][T19069] ? __pfx_setup_net+0x10/0x10 [ 1127.307035][T19069] ? lockdep_init_map_type+0x5c/0x250 [ 1127.307084][T19069] ? mutex_init_lockep+0x110/0x150 [ 1127.307141][T19069] copy_net_ns+0x46f/0x7c0 [ 1127.307180][T19069] create_new_namespaces+0x3ea/0xac0 [ 1127.307228][T19069] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1127.307272][T19069] ksys_unshare+0x473/0xad0 [ 1127.307322][T19069] ? __pfx_ksys_unshare+0x10/0x10 [ 1127.307385][T19069] __x64_sys_unshare+0x31/0x40 [ 1127.307431][T19069] do_syscall_64+0x106/0xf80 [ 1127.307482][T19069] ? clear_bhb_loop+0x40/0x90 [ 1127.307527][T19069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.307563][T19069] RIP: 0033:0x7f2ba939c799 [ 1127.307602][T19069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.307638][T19069] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1127.307677][T19069] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1127.307709][T19069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1127.307732][T19069] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1127.307754][T19069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.307777][T19069] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1127.307823][T19069] [ 1150.718102][ T30] audit: type=1804 audit(1774083071.869:30): pid=19226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3277" name=22050820 dev="tmpfs" ino=4476 res=1 errno=0 [ 1150.808631][ T30] audit: type=1800 audit(1774083071.869:31): pid=19226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3277" name=22050820 dev="tmpfs" ino=4476 res=0 errno=0 [ 1156.879268][T15612] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1163.288358][ T30] audit: type=1804 audit(1774083084.439:32): pid=19345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3302" name=22050820 dev="tmpfs" ino=4462 res=1 errno=0 [ 1163.371684][ T30] audit: type=1800 audit(1774083084.439:33): pid=19345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3302" name=22050820 dev="tmpfs" ino=4462 res=0 errno=0 [ 1163.869454][T19359] futex_wake_op: syz.0.3304 tries to shift op by -2048; fix this program [ 1163.939252][T19359] futex_wake_op: syz.0.3304 tries to shift op by -2048; fix this program [ 1163.991243][T19359] 0x000000000001-0x000000020000 : "" [ 1164.089692][T19359] ftl_cs: FTL header corrupt! [ 1165.222721][T19379] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3310'. [ 1171.652396][T19415] kexec: Could not allocate control_code_buffer [ 1177.348565][T19481] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3332'. [ 1177.564649][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.571273][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.028796][T19501] kvm: kvm [19500]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 1181.212157][T19522] ubi0: attaching mtd0 [ 1181.247258][T19522] FAULT_INJECTION: forcing a failure. [ 1181.247258][T19522] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.321693][T19522] CPU: 1 UID: 0 PID: 19522 Comm: syz.0.3340 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.321753][T19522] Tainted: [L]=SOFTLOCKUP [ 1181.321767][T19522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1181.321791][T19522] Call Trace: [ 1181.321804][T19522] [ 1181.321818][T19522] dump_stack_lvl+0x100/0x190 [ 1181.321881][T19522] should_fail_ex.cold+0x5/0xa [ 1181.321926][T19522] should_failslab+0xc2/0x120 [ 1181.321966][T19522] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1181.322015][T19522] ? ubi_alloc_vid_buf.constprop.0+0x45/0x1e0 [ 1181.322075][T19522] ? __kasan_kmalloc+0xaa/0xb0 [ 1181.322139][T19522] ubi_alloc_vid_buf.constprop.0+0x45/0x1e0 [ 1181.322209][T19522] ubi_attach+0x403/0x4d30 [ 1181.322291][T19522] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1181.322340][T19522] ? ubi_msg+0x114/0x159 [ 1181.322395][T19522] ? __pfx_ubi_msg+0x10/0x10 [ 1181.322452][T19522] ? __pfx_ubi_attach+0x10/0x10 [ 1181.322509][T19522] ? lockdep_init_map_type+0x5c/0x250 [ 1181.322563][T19522] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1181.322599][T19522] ? __vmalloc_node_noprof+0xad/0xf0 [ 1181.322644][T19522] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1181.322685][T19522] ubi_attach_mtd_dev+0x139f/0x32a0 [ 1181.322742][T19522] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1181.322778][T19522] ? __pfx_get_mtd_device+0x10/0x10 [ 1181.322839][T19522] ctrl_cdev_ioctl+0x36a/0x400 [ 1181.322876][T19522] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1181.322925][T19522] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1181.322965][T19522] __x64_sys_ioctl+0x18e/0x210 [ 1181.323020][T19522] do_syscall_64+0x106/0xf80 [ 1181.323075][T19522] ? clear_bhb_loop+0x40/0x90 [ 1181.323120][T19522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.323158][T19522] RIP: 0033:0x7f2ba939c799 [ 1181.323188][T19522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.323225][T19522] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1181.323260][T19522] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1181.323290][T19522] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000009 [ 1181.323318][T19522] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1181.323341][T19522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.323363][T19522] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1181.323410][T19522] [ 1182.316313][T19522] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 1183.268818][T19537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1183.418382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1186.772085][T19566] random: crng reseeded on system resumption [ 1186.965511][T19566] FAULT_INJECTION: forcing a failure. [ 1186.965511][T19566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1187.182704][T19566] CPU: 1 UID: 0 PID: 19566 Comm: syz.0.3352 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.182760][T19566] Tainted: [L]=SOFTLOCKUP [ 1187.182773][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1187.182794][T19566] Call Trace: [ 1187.182807][T19566] [ 1187.182820][T19566] dump_stack_lvl+0x100/0x190 [ 1187.182877][T19566] should_fail_ex.cold+0x5/0xa [ 1187.182912][T19566] ? prepare_alloc_pages+0x16d/0x5f0 [ 1187.182957][T19566] should_fail_alloc_page+0xeb/0x140 [ 1187.182998][T19566] prepare_alloc_pages+0x1f0/0x5f0 [ 1187.183047][T19566] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1187.183104][T19566] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1187.183174][T19566] ? stack_trace_save+0x8e/0xc0 [ 1187.183210][T19566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1187.183266][T19566] ? stack_depot_save_flags+0x27/0x9d0 [ 1187.183318][T19566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1187.183380][T19566] ? kasan_save_stack+0x3f/0x50 [ 1187.183433][T19566] ? kasan_save_stack+0x30/0x50 [ 1187.183486][T19566] ? kasan_save_track+0x14/0x30 [ 1187.183551][T19566] ? do_sys_openat2+0x10d/0x1e0 [ 1187.183596][T19566] ? __x64_sys_openat+0x12d/0x210 [ 1187.183651][T19566] ? do_syscall_64+0x106/0xf80 [ 1187.183702][T19566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.183748][T19566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1187.183810][T19566] ? policy_nodemask+0xed/0x4f0 [ 1187.183850][T19566] alloc_pages_mpol+0x1fb/0x550 [ 1187.183889][T19566] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1187.183930][T19566] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1187.183977][T19566] alloc_pages_noprof+0x131/0x390 [ 1187.184019][T19566] get_zeroed_page_noprof+0x18/0xb0 [ 1187.184059][T19566] get_image_page+0x18/0x1a0 [ 1187.184124][T19566] alloc_rtree_node+0x3c/0xb0 [ 1187.184184][T19566] memory_bm_create+0x65e/0xba0 [ 1187.184263][T19566] create_basic_memory_bitmaps+0xbd/0x350 [ 1187.184308][T19566] snapshot_open+0x230/0x2a0 [ 1187.184349][T19566] ? __pfx_snapshot_open+0x10/0x10 [ 1187.184392][T19566] misc_open+0x26d/0x450 [ 1187.184435][T19566] ? __pfx_misc_open+0x10/0x10 [ 1187.184476][T19566] chrdev_open+0x234/0x6a0 [ 1187.184512][T19566] ? __pfx_apparmor_file_open+0x10/0x10 [ 1187.184548][T19566] ? __pfx_chrdev_open+0x10/0x10 [ 1187.184589][T19566] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1187.184649][T19566] do_dentry_open+0x6d8/0x1660 [ 1187.184686][T19566] ? __pfx_chrdev_open+0x10/0x10 [ 1187.184735][T19566] vfs_open+0x82/0x3f0 [ 1187.184787][T19566] path_openat+0x208c/0x31a0 [ 1187.184840][T19566] ? __pfx_path_openat+0x10/0x10 [ 1187.184894][T19566] do_file_open+0x20e/0x430 [ 1187.184935][T19566] ? __pfx_do_file_open+0x10/0x10 [ 1187.185003][T19566] ? alloc_fd+0x476/0x790 [ 1187.185042][T19566] ? do_getname+0x191/0x390 [ 1187.185093][T19566] do_sys_openat2+0x10d/0x1e0 [ 1187.185142][T19566] ? __pfx_do_sys_openat2+0x10/0x10 [ 1187.185190][T19566] ? find_held_lock+0x2b/0x80 [ 1187.185235][T19566] __x64_sys_openat+0x12d/0x210 [ 1187.185284][T19566] ? __pfx___x64_sys_openat+0x10/0x10 [ 1187.185349][T19566] do_syscall_64+0x106/0xf80 [ 1187.185401][T19566] ? clear_bhb_loop+0x40/0x90 [ 1187.185444][T19566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.185482][T19566] RIP: 0033:0x7f2ba939c799 [ 1187.185511][T19566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.185545][T19566] RSP: 002b:00007f2baa19a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1187.185579][T19566] RAX: ffffffffffffffda RBX: 00007f2ba9616090 RCX: 00007f2ba939c799 [ 1187.185604][T19566] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1187.185636][T19566] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1187.185658][T19566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.185680][T19566] R13: 00007f2ba9616128 R14: 00007f2ba9616090 R15: 00007ffc98e74898 [ 1187.185728][T19566] [ 1187.601454][T19570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3353'. [ 1190.007540][T19586] binder: 19579:19586 ioctl c018620c 200000000040 returned -22 [ 1197.005678][T19627] lo: entered allmulticast mode [ 1197.038026][T19627] lo: left allmulticast mode [ 1197.740498][T19630] netlink: 'syz.0.3363': attribute type 4 has an invalid length. [ 1197.910785][T19630] netlink: 'syz.0.3363': attribute type 1 has an invalid length. [ 1204.315115][T19700] FAULT_INJECTION: forcing a failure. [ 1204.315115][T19700] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.487509][T19700] CPU: 1 UID: 0 PID: 19700 Comm: syz.0.3386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1204.487564][T19700] Tainted: [L]=SOFTLOCKUP [ 1204.487576][T19700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1204.487598][T19700] Call Trace: [ 1204.487610][T19700] [ 1204.487625][T19700] dump_stack_lvl+0x100/0x190 [ 1204.487707][T19700] should_fail_ex.cold+0x5/0xa [ 1204.487749][T19700] should_failslab+0xc2/0x120 [ 1204.487787][T19700] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1204.487842][T19700] ? mas_alloc_nodes+0x280/0x390 [ 1204.487901][T19700] mas_alloc_nodes+0x280/0x390 [ 1204.487951][T19700] mas_preallocate+0x39c/0xf10 [ 1204.488013][T19700] ? __pfx_mas_preallocate+0x10/0x10 [ 1204.488077][T19700] ? vm_area_alloc+0x1f/0x160 [ 1204.488129][T19700] ? lockdep_init_map_type+0x5c/0x250 [ 1204.488181][T19700] __mmap_region+0x12b5/0x29e0 [ 1204.488238][T19700] ? __pfx___mmap_region+0x10/0x10 [ 1204.488281][T19700] ? process_measurement+0x1f4/0x2350 [ 1204.488359][T19700] ? __lock_acquire+0x4a5/0x2630 [ 1204.488402][T19700] ? update_cfs_rq_load_avg+0x51/0x550 [ 1204.488476][T19700] ? find_held_lock+0x2b/0x80 [ 1204.488508][T19700] ? finish_task_switch.isra.0+0x200/0xb80 [ 1204.488547][T19700] ? finish_task_switch.isra.0+0x200/0xb80 [ 1204.488603][T19700] ? trace_sched_exit_tp+0x13a/0x180 [ 1204.488646][T19700] ? __schedule+0x1000/0x6120 [ 1204.488756][T19700] ? rcu_is_watching+0x12/0xc0 [ 1204.488809][T19700] ? cap_capable+0x107/0x460 [ 1204.488872][T19700] mmap_region+0x180/0x3e0 [ 1204.488931][T19700] do_mmap+0xc63/0x12f0 [ 1204.488991][T19700] ? __pfx_do_mmap+0x10/0x10 [ 1204.489030][T19700] ? __pfx_down_write_killable+0x10/0x10 [ 1204.489075][T19700] vm_mmap_pgoff+0x29e/0x470 [ 1204.489122][T19700] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1204.489165][T19700] ? do_futex+0x192/0x350 [ 1204.489210][T19700] ? __pfx_do_futex+0x10/0x10 [ 1204.489263][T19700] ksys_mmap_pgoff+0xe1/0x650 [ 1204.489310][T19700] ? __x64_sys_futex+0x34f/0x4d0 [ 1204.489373][T19700] ? __x64_sys_futex+0x358/0x4d0 [ 1204.489421][T19700] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1204.489461][T19700] ? xfd_validate_state+0x129/0x190 [ 1204.489520][T19700] __x64_sys_mmap+0x125/0x190 [ 1204.489578][T19700] do_syscall_64+0x106/0xf80 [ 1204.489630][T19700] ? clear_bhb_loop+0x40/0x90 [ 1204.489681][T19700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.489718][T19700] RIP: 0033:0x7f2ba939c799 [ 1204.489747][T19700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.489781][T19700] RSP: 002b:00007f2baa19a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1204.489816][T19700] RAX: ffffffffffffffda RBX: 00007f2ba9616090 RCX: 00007f2ba939c799 [ 1204.489840][T19700] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1204.489863][T19700] RBP: 00007f2ba9432c99 R08: 0000000000000002 R09: 0000000000008000 [ 1204.489885][T19700] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1204.489907][T19700] R13: 00007f2ba9616128 R14: 00007f2ba9616090 R15: 00007ffc98e74898 [ 1204.489952][T19700] [ 1210.302154][T19743] netlink: 'syz.1.3392': attribute type 1 has an invalid length. [ 1211.951476][T19758] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1214.509922][T19790] random: crng reseeded on system resumption [ 1214.663451][T19790] FAULT_INJECTION: forcing a failure. [ 1214.663451][T19790] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.848644][T19790] CPU: 1 UID: 0 PID: 19790 Comm: syz.0.3401 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.848699][T19790] Tainted: [L]=SOFTLOCKUP [ 1214.848712][T19790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1214.848731][T19790] Call Trace: [ 1214.848742][T19790] [ 1214.848756][T19790] dump_stack_lvl+0x100/0x190 [ 1214.848814][T19790] should_fail_ex.cold+0x5/0xa [ 1214.848855][T19790] should_failslab+0xc2/0x120 [ 1214.848893][T19790] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1214.848939][T19790] ? create_basic_memory_bitmaps+0xeb/0x350 [ 1214.848987][T19790] create_basic_memory_bitmaps+0xeb/0x350 [ 1214.849040][T19790] snapshot_open+0x230/0x2a0 [ 1214.849081][T19790] ? __pfx_snapshot_open+0x10/0x10 [ 1214.849124][T19790] misc_open+0x26d/0x450 [ 1214.849167][T19790] ? __pfx_misc_open+0x10/0x10 [ 1214.849207][T19790] chrdev_open+0x234/0x6a0 [ 1214.849244][T19790] ? __pfx_apparmor_file_open+0x10/0x10 [ 1214.849281][T19790] ? __pfx_chrdev_open+0x10/0x10 [ 1214.849322][T19790] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1214.849370][T19790] do_dentry_open+0x6d8/0x1660 [ 1214.849411][T19790] ? __pfx_chrdev_open+0x10/0x10 [ 1214.849459][T19790] vfs_open+0x82/0x3f0 [ 1214.849512][T19790] path_openat+0x208c/0x31a0 [ 1214.849565][T19790] ? __pfx_path_openat+0x10/0x10 [ 1214.849618][T19790] do_file_open+0x20e/0x430 [ 1214.849659][T19790] ? __pfx_do_file_open+0x10/0x10 [ 1214.849729][T19790] ? alloc_fd+0x476/0x790 [ 1214.849770][T19790] ? do_getname+0x191/0x390 [ 1214.849820][T19790] do_sys_openat2+0x10d/0x1e0 [ 1214.849869][T19790] ? __pfx_do_sys_openat2+0x10/0x10 [ 1214.849919][T19790] ? find_held_lock+0x2b/0x80 [ 1214.849965][T19790] __x64_sys_openat+0x12d/0x210 [ 1214.850022][T19790] ? __pfx___x64_sys_openat+0x10/0x10 [ 1214.850088][T19790] do_syscall_64+0x106/0xf80 [ 1214.850141][T19790] ? clear_bhb_loop+0x40/0x90 [ 1214.850187][T19790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.850225][T19790] RIP: 0033:0x7f2ba939c799 [ 1214.850255][T19790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.850291][T19790] RSP: 002b:00007f2baa19a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1214.850324][T19790] RAX: ffffffffffffffda RBX: 00007f2ba9616090 RCX: 00007f2ba939c799 [ 1214.850348][T19790] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1214.850372][T19790] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1214.850394][T19790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.850416][T19790] R13: 00007f2ba9616128 R14: 00007f2ba9616090 R15: 00007ffc98e74898 [ 1214.850463][T19790] [ 1217.650400][T19822] FAULT_INJECTION: forcing a failure. [ 1217.650400][T19822] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.857558][T19822] CPU: 1 UID: 0 PID: 19822 Comm: syz.0.3406 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.857619][T19822] Tainted: [L]=SOFTLOCKUP [ 1217.857632][T19822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.857652][T19822] Call Trace: [ 1217.857663][T19822] [ 1217.857676][T19822] dump_stack_lvl+0x100/0x190 [ 1217.857749][T19822] should_fail_ex.cold+0x5/0xa [ 1217.857790][T19822] should_failslab+0xc2/0x120 [ 1217.857828][T19822] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1217.857882][T19822] ? __proc_create+0x2cb/0x8c0 [ 1217.857954][T19822] __proc_create+0x2cb/0x8c0 [ 1217.858030][T19822] ? __pfx___proc_create+0x10/0x10 [ 1217.858087][T19822] ? __register_sysctl_table+0x889/0x1650 [ 1217.858152][T19822] ? do_raw_spin_unlock+0x145/0x1e0 [ 1217.858209][T19822] ? _raw_spin_unlock+0x28/0x50 [ 1217.858269][T19822] proc_create_reg+0x75/0x170 [ 1217.858307][T19822] proc_create_net_data+0x8e/0x1c0 [ 1217.858343][T19822] ? __pfx_proc_create_net_data+0x10/0x10 [ 1217.858378][T19822] ? lockdep_init_map_type+0x5c/0x250 [ 1217.858427][T19822] ? lockdep_init_map_type+0x5c/0x250 [ 1217.858478][T19822] ? __pfx_packet_net_init+0x10/0x10 [ 1217.858533][T19822] packet_net_init+0x93/0xc0 [ 1217.858592][T19822] ops_init+0x1e2/0x5f0 [ 1217.858653][T19822] setup_net+0x118/0x3a0 [ 1217.858711][T19822] ? __pfx_setup_net+0x10/0x10 [ 1217.858763][T19822] ? lockdep_init_map_type+0x5c/0x250 [ 1217.858812][T19822] ? mutex_init_lockep+0x110/0x150 [ 1217.858867][T19822] copy_net_ns+0x46f/0x7c0 [ 1217.858905][T19822] create_new_namespaces+0x3ea/0xac0 [ 1217.858951][T19822] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1217.858992][T19822] ksys_unshare+0x473/0xad0 [ 1217.859040][T19822] ? __pfx_ksys_unshare+0x10/0x10 [ 1217.859100][T19822] __x64_sys_unshare+0x31/0x40 [ 1217.859146][T19822] do_syscall_64+0x106/0xf80 [ 1217.859196][T19822] ? clear_bhb_loop+0x40/0x90 [ 1217.859240][T19822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.859276][T19822] RIP: 0033:0x7f2ba939c799 [ 1217.859305][T19822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.859339][T19822] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1217.859372][T19822] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1217.859396][T19822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1217.859418][T19822] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1217.859439][T19822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.859460][T19822] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1217.859506][T19822] [ 1218.707041][T19840] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 1219.820050][T19858] FAULT_INJECTION: forcing a failure. [ 1219.820050][T19858] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.959964][T19858] CPU: 1 UID: 0 PID: 19858 Comm: syz.0.3415 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.960022][T19858] Tainted: [L]=SOFTLOCKUP [ 1219.960036][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1219.960056][T19858] Call Trace: [ 1219.960069][T19858] [ 1219.960082][T19858] dump_stack_lvl+0x100/0x190 [ 1219.960158][T19858] should_fail_ex.cold+0x5/0xa [ 1219.960206][T19858] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1219.960251][T19858] should_failslab+0xc2/0x120 [ 1219.960286][T19858] __kmalloc_noprof+0xe0/0x850 [ 1219.960343][T19858] tomoyo_realpath_from_path+0xb6/0x690 [ 1219.960397][T19858] tomoyo_check_open_permission+0x2af/0x3c0 [ 1219.960445][T19858] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1219.960543][T19858] ? do_raw_spin_lock+0x128/0x260 [ 1219.960599][T19858] ? path_get+0x61/0x80 [ 1219.960652][T19858] tomoyo_file_open+0x6b/0x90 [ 1219.960703][T19858] security_file_open+0xb5/0x1e0 [ 1219.960744][T19858] do_dentry_open+0x5aa/0x1660 [ 1219.960780][T19858] ? security_inode_permission+0xbf/0x250 [ 1219.960824][T19858] vfs_open+0x82/0x3f0 [ 1219.960871][T19858] path_openat+0x208c/0x31a0 [ 1219.960918][T19858] ? __pfx_path_openat+0x10/0x10 [ 1219.960966][T19858] do_file_open+0x20e/0x430 [ 1219.961008][T19858] ? __pfx_do_file_open+0x10/0x10 [ 1219.961071][T19858] ? alloc_fd+0x476/0x790 [ 1219.961106][T19858] ? do_getname+0x191/0x390 [ 1219.961168][T19858] do_sys_openat2+0x10d/0x1e0 [ 1219.961213][T19858] ? __pfx_do_sys_openat2+0x10/0x10 [ 1219.961275][T19858] __x64_sys_openat+0x12d/0x210 [ 1219.961323][T19858] ? __pfx___x64_sys_openat+0x10/0x10 [ 1219.961387][T19858] do_syscall_64+0x106/0xf80 [ 1219.961444][T19858] ? clear_bhb_loop+0x40/0x90 [ 1219.961488][T19858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.961524][T19858] RIP: 0033:0x7f2ba939c799 [ 1219.961551][T19858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.961585][T19858] RSP: 002b:00007f2ba71f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1219.961617][T19858] RAX: ffffffffffffffda RBX: 00007f2ba9616270 RCX: 00007f2ba939c799 [ 1219.961641][T19858] RDX: 0000000000000401 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1219.961663][T19858] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1219.961703][T19858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.961724][T19858] R13: 00007f2ba9616308 R14: 00007f2ba9616270 R15: 00007ffc98e74898 [ 1219.961770][T19858] [ 1220.318729][T19858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1220.325624][T19858] random: crng reseeded on system resumption [ 1221.647945][T19879] FAULT_INJECTION: forcing a failure. [ 1221.647945][T19879] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.717516][T19879] CPU: 1 UID: 0 PID: 19879 Comm: syz.0.3422 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.717573][T19879] Tainted: [L]=SOFTLOCKUP [ 1221.717585][T19879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.717606][T19879] Call Trace: [ 1221.717618][T19879] [ 1221.717632][T19879] dump_stack_lvl+0x100/0x190 [ 1221.717692][T19879] should_fail_ex.cold+0x5/0xa [ 1221.717734][T19879] should_failslab+0xc2/0x120 [ 1221.717774][T19879] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1221.717831][T19879] ? __d_alloc+0x34/0xa80 [ 1221.717881][T19879] __d_alloc+0x34/0xa80 [ 1221.717925][T19879] d_alloc+0x4a/0x1e0 [ 1221.717967][T19879] lookup_one_qstr_excl+0x175/0x250 [ 1221.718018][T19879] start_dirop+0x59/0xb0 [ 1221.718077][T19879] simple_start_creating+0xf9/0x110 [ 1221.718133][T19879] ? __pfx_simple_start_creating+0x10/0x10 [ 1221.718201][T19879] nfsd_mkdir+0xf6/0x460 [ 1221.718245][T19879] ? dput.part.0+0xdd/0x570 [ 1221.718302][T19879] nfsd_fill_super+0x3f9/0x560 [ 1221.718344][T19879] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1221.718383][T19879] get_tree_keyed+0x10e/0x1d0 [ 1221.718438][T19879] vfs_get_tree+0x92/0x320 [ 1221.718487][T19879] path_mount+0x7d0/0x23d0 [ 1221.718536][T19879] ? __pfx_path_mount+0x10/0x10 [ 1221.718574][T19879] ? lockdep_hardirqs_on+0x78/0x100 [ 1221.718632][T19879] ? putname+0xb1/0x110 [ 1221.718668][T19879] ? kmem_cache_free+0x124/0x6a0 [ 1221.718732][T19879] ? __x64_sys_mount+0x293/0x310 [ 1221.718772][T19879] __x64_sys_mount+0x293/0x310 [ 1221.718815][T19879] ? __pfx___x64_sys_mount+0x10/0x10 [ 1221.718870][T19879] do_syscall_64+0x106/0xf80 [ 1221.718922][T19879] ? clear_bhb_loop+0x40/0x90 [ 1221.718966][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.719003][T19879] RIP: 0033:0x7f2ba939c799 [ 1221.719032][T19879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.719066][T19879] RSP: 002b:00007f2baa19a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1221.719100][T19879] RAX: ffffffffffffffda RBX: 00007f2ba9616090 RCX: 00007f2ba939c799 [ 1221.719123][T19879] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1221.719147][T19879] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1221.719169][T19879] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1221.719191][T19879] R13: 00007f2ba9616128 R14: 00007f2ba9616090 R15: 00007ffc98e74898 [ 1221.719237][T19879] [ 1224.314292][T19902] NFSD: Failed to start, no listeners configured. [ 1228.824322][T19965] random: crng reseeded on system resumption [ 1229.012159][T19965] FAULT_INJECTION: forcing a failure. [ 1229.012159][T19965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1229.488404][T19965] CPU: 1 UID: 0 PID: 19965 Comm: syz.0.3437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1229.488461][T19965] Tainted: [L]=SOFTLOCKUP [ 1229.488474][T19965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1229.488495][T19965] Call Trace: [ 1229.488507][T19965] [ 1229.488520][T19965] dump_stack_lvl+0x100/0x190 [ 1229.488580][T19965] should_fail_ex.cold+0x5/0xa [ 1229.488614][T19965] ? prepare_alloc_pages+0x16d/0x5f0 [ 1229.488660][T19965] should_fail_alloc_page+0xeb/0x140 [ 1229.488702][T19965] prepare_alloc_pages+0x1f0/0x5f0 [ 1229.488751][T19965] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1229.488820][T19965] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1229.488891][T19965] ? stack_trace_save+0x8e/0xc0 [ 1229.488930][T19965] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1229.488986][T19965] ? stack_depot_save_flags+0x27/0x9d0 [ 1229.489031][T19965] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1229.489092][T19965] ? kasan_save_stack+0x3f/0x50 [ 1229.489143][T19965] ? kasan_save_stack+0x30/0x50 [ 1229.489196][T19965] ? kasan_save_track+0x14/0x30 [ 1229.489261][T19965] ? do_sys_openat2+0x10d/0x1e0 [ 1229.489311][T19965] ? __x64_sys_openat+0x12d/0x210 [ 1229.489357][T19965] ? do_syscall_64+0x106/0xf80 [ 1229.489407][T19965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.489447][T19965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1229.489512][T19965] ? policy_nodemask+0xed/0x4f0 [ 1229.489553][T19965] alloc_pages_mpol+0x1fb/0x550 [ 1229.489594][T19965] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1229.489634][T19965] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1229.489680][T19965] alloc_pages_noprof+0x131/0x390 [ 1229.489721][T19965] get_zeroed_page_noprof+0x18/0xb0 [ 1229.489761][T19965] get_image_page+0x18/0x1a0 [ 1229.489826][T19965] alloc_rtree_node+0x3c/0xb0 [ 1229.489885][T19965] memory_bm_create+0x65e/0xba0 [ 1229.489963][T19965] create_basic_memory_bitmaps+0xbd/0x350 [ 1229.490009][T19965] snapshot_open+0x230/0x2a0 [ 1229.490050][T19965] ? __pfx_snapshot_open+0x10/0x10 [ 1229.490093][T19965] misc_open+0x26d/0x450 [ 1229.490135][T19965] ? __pfx_misc_open+0x10/0x10 [ 1229.490176][T19965] chrdev_open+0x234/0x6a0 [ 1229.490213][T19965] ? __pfx_apparmor_file_open+0x10/0x10 [ 1229.490248][T19965] ? __pfx_chrdev_open+0x10/0x10 [ 1229.490288][T19965] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1229.490338][T19965] do_dentry_open+0x6d8/0x1660 [ 1229.490373][T19965] ? __pfx_chrdev_open+0x10/0x10 [ 1229.490422][T19965] vfs_open+0x82/0x3f0 [ 1229.490473][T19965] path_openat+0x208c/0x31a0 [ 1229.490524][T19965] ? __pfx_path_openat+0x10/0x10 [ 1229.490578][T19965] do_file_open+0x20e/0x430 [ 1229.490619][T19965] ? __pfx_do_file_open+0x10/0x10 [ 1229.490689][T19965] ? alloc_fd+0x476/0x790 [ 1229.490729][T19965] ? do_getname+0x191/0x390 [ 1229.490777][T19965] do_sys_openat2+0x10d/0x1e0 [ 1229.490833][T19965] ? __pfx_do_sys_openat2+0x10/0x10 [ 1229.490883][T19965] ? find_held_lock+0x2b/0x80 [ 1229.490927][T19965] __x64_sys_openat+0x12d/0x210 [ 1229.490976][T19965] ? __pfx___x64_sys_openat+0x10/0x10 [ 1229.491039][T19965] do_syscall_64+0x106/0xf80 [ 1229.491092][T19965] ? clear_bhb_loop+0x40/0x90 [ 1229.491135][T19965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.491173][T19965] RIP: 0033:0x7f2ba939c799 [ 1229.491202][T19965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.491238][T19965] RSP: 002b:00007f2baa179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1229.491272][T19965] RAX: ffffffffffffffda RBX: 00007f2ba9616180 RCX: 00007f2ba939c799 [ 1229.491295][T19965] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1229.491318][T19965] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1229.491339][T19965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.491371][T19965] R13: 00007f2ba9616218 R14: 00007f2ba9616180 R15: 00007ffc98e74898 [ 1229.491414][T19965] [ 1230.712018][T19972] NFSD: Failed to start, no listeners configured. [ 1232.379541][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3444'. [ 1232.409543][T19996] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1232.584580][T19999] netlink: 'syz.0.3445': attribute type 11 has an invalid length. [ 1232.623715][T19999] netlink: 'syz.0.3445': attribute type 1 has an invalid length. [ 1232.662198][T19999] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3445'. [ 1232.871492][T20001] tipc: Started in network mode [ 1232.914581][T20001] tipc: Node identity ffffffff, cluster identity 4711 [ 1232.948598][T20001] tipc: Node number set to 4294967295 [ 1233.263898][ C1] process 5826 (syz-executor) no longer affine to cpu1 [ 1233.263960][ C1] process 5836 (syz-executor) no longer affine to cpu1 [ 1233.264030][ T22] process 5828 (syz-executor) no longer affine to cpu1 [ 1233.265293][ T22] process 5827 (syz-executor) no longer affine to cpu1 [ 1233.266473][ T22] process 19866 (syz.3.3418) no longer affine to cpu1 [ 1233.302664][ C1] process 20004 (syz.0.3447) no longer affine to cpu1 [ 1233.387291][ T21] process 20005 (syz.0.3447) no longer affine to cpu1 [ 1233.407211][T20005] smpboot: CPU 1 is now offline syzkaller syzkaller login: [ 1233.428403][ T5827] process 20009 (syz-executor) no longer affine to cpu0 [ 1234.291582][T20019] FAULT_INJECTION: forcing a failure. [ 1234.291582][T20019] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.459981][T20019] CPU: 0 UID: 0 PID: 20019 Comm: syz.0.3451 Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.460022][T20019] Tainted: [L]=SOFTLOCKUP [ 1234.460031][T20019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1234.460047][T20019] Call Trace: [ 1234.460056][T20019] [ 1234.460066][T20019] dump_stack_lvl+0x100/0x190 [ 1234.460109][T20019] should_fail_ex.cold+0x5/0xa [ 1234.460139][T20019] should_failslab+0xc2/0x120 [ 1234.460166][T20019] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1234.460205][T20019] ? __proc_create+0x2cb/0x8c0 [ 1234.460252][T20019] __proc_create+0x2cb/0x8c0 [ 1234.460294][T20019] ? __pfx___proc_create+0x10/0x10 [ 1234.460340][T20019] ? _raw_write_unlock+0x28/0x50 [ 1234.460376][T20019] ? proc_register+0x559/0x8a0 [ 1234.460403][T20019] proc_create_reg+0x75/0x170 [ 1234.460429][T20019] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 1234.460469][T20019] proc_create_net_single+0x86/0x180 [ 1234.460495][T20019] ? __pfx_proc_create_net_single+0x10/0x10 [ 1234.460523][T20019] ? round_jiffies+0x10a/0x160 [ 1234.460557][T20019] can_init_proc+0x2b3/0x4b0 [ 1234.460594][T20019] can_pernet_init+0x1e4/0x370 [ 1234.460630][T20019] ? __pfx_can_pernet_init+0x10/0x10 [ 1234.460664][T20019] ops_init+0x1e2/0x5f0 [ 1234.460706][T20019] setup_net+0x118/0x3a0 [ 1234.460755][T20019] ? __pfx_setup_net+0x10/0x10 [ 1234.460794][T20019] ? lockdep_init_map_type+0x5c/0x250 [ 1234.460830][T20019] ? mutex_init_lockep+0x110/0x150 [ 1234.460870][T20019] copy_net_ns+0x46f/0x7c0 [ 1234.460897][T20019] create_new_namespaces+0x3ea/0xac0 [ 1234.460931][T20019] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1234.460962][T20019] ksys_unshare+0x473/0xad0 [ 1234.460996][T20019] ? __pfx_ksys_unshare+0x10/0x10 [ 1234.461040][T20019] __x64_sys_unshare+0x31/0x40 [ 1234.461071][T20019] do_syscall_64+0x106/0xf80 [ 1234.461108][T20019] ? clear_bhb_loop+0x40/0x90 [ 1234.461139][T20019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.461166][T20019] RIP: 0033:0x7f2ba939c799 [ 1234.461186][T20019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.461211][T20019] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1234.461236][T20019] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1234.461253][T20019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1234.461269][T20019] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1234.461285][T20019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1234.461301][T20019] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1234.461333][T20019] [ 1237.043172][T20039] netlink: 'syz.2.3455': attribute type 1 has an invalid length. [ 1237.925677][T20049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3458'. [ 1238.242405][T20049] macvlan1: entered promiscuous mode [ 1238.272899][T20049] macvlan1: entered allmulticast mode [ 1238.305369][T20049] veth1_vlan: entered allmulticast mode [ 1238.732622][T20056] futex_wake_op: syz.0.3460 tries to shift op by -2048; fix this program [ 1238.908446][T20056] futex_wake_op: syz.0.3460 tries to shift op by -2048; fix this program [ 1239.030098][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.036734][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.048901][T20092] FAULT_INJECTION: forcing a failure. [ 1242.048901][T20092] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.266059][T20092] CPU: 0 UID: 0 PID: 20092 Comm: syz.0.3469 Tainted: G L syzkaller #0 PREEMPT(full) [ 1242.266101][T20092] Tainted: [L]=SOFTLOCKUP [ 1242.266111][T20092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1242.266127][T20092] Call Trace: [ 1242.266138][T20092] [ 1242.266149][T20092] dump_stack_lvl+0x100/0x190 [ 1242.266192][T20092] should_fail_ex.cold+0x5/0xa [ 1242.266221][T20092] should_failslab+0xc2/0x120 [ 1242.266249][T20092] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1242.266289][T20092] ? __proc_create+0x2cb/0x8c0 [ 1242.266337][T20092] __proc_create+0x2cb/0x8c0 [ 1242.266379][T20092] ? __pfx___proc_create+0x10/0x10 [ 1242.266427][T20092] ? _raw_write_unlock+0x28/0x50 [ 1242.266468][T20092] proc_create_reg+0x75/0x170 [ 1242.266495][T20092] proc_create_data+0x86/0x110 [ 1242.266521][T20092] ? __pfx_proc_create_data+0x10/0x10 [ 1242.266558][T20092] ? cache_register_net+0x137/0x5e0 [ 1242.266599][T20092] ? cache_register_net+0x137/0x5e0 [ 1242.266646][T20092] cache_register_net+0x1e0/0x5e0 [ 1242.266689][T20092] gss_svc_init_net+0x98/0x640 [ 1242.266723][T20092] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1242.266771][T20092] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1242.266809][T20092] ops_init+0x1e2/0x5f0 [ 1242.266852][T20092] setup_net+0x118/0x3a0 [ 1242.266903][T20092] ? __pfx_setup_net+0x10/0x10 [ 1242.266940][T20092] ? lockdep_init_map_type+0x5c/0x250 [ 1242.266975][T20092] ? mutex_init_lockep+0x110/0x150 [ 1242.267015][T20092] copy_net_ns+0x46f/0x7c0 [ 1242.267042][T20092] create_new_namespaces+0x3ea/0xac0 [ 1242.267076][T20092] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1242.267106][T20092] ksys_unshare+0x473/0xad0 [ 1242.267143][T20092] ? __pfx_ksys_unshare+0x10/0x10 [ 1242.267195][T20092] __x64_sys_unshare+0x31/0x40 [ 1242.267229][T20092] do_syscall_64+0x106/0xf80 [ 1242.267267][T20092] ? clear_bhb_loop+0x40/0x90 [ 1242.267299][T20092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.267326][T20092] RIP: 0033:0x7f2ba939c799 [ 1242.267346][T20092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.267372][T20092] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1242.267396][T20092] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1242.267413][T20092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1242.267429][T20092] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1242.267445][T20092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.267461][T20092] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1242.267494][T20092] [ 1244.275760][T20108] FAULT_INJECTION: forcing a failure. [ 1244.275760][T20108] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.372291][T20108] CPU: 0 UID: 0 PID: 20108 Comm: syz.0.3472 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.372330][T20108] Tainted: [L]=SOFTLOCKUP [ 1244.372339][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1244.372355][T20108] Call Trace: [ 1244.372363][T20108] [ 1244.372372][T20108] dump_stack_lvl+0x100/0x190 [ 1244.372414][T20108] should_fail_ex.cold+0x5/0xa [ 1244.372443][T20108] should_failslab+0xc2/0x120 [ 1244.372469][T20108] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1244.372506][T20108] ? alloc_vfsmnt+0x23/0x6a0 [ 1244.372536][T20108] ? file_open_name+0x1a0/0x3b0 [ 1244.372573][T20108] alloc_vfsmnt+0x23/0x6a0 [ 1244.372606][T20108] mnt_clone_internal+0x81/0x250 [ 1244.372634][T20108] acct_on+0xd7/0x9e0 [ 1244.372671][T20108] ? __pfx_acct_on+0x10/0x10 [ 1244.372708][T20108] ? bpf_lsm_capable+0x9/0x10 [ 1244.372734][T20108] ? security_capable+0x80/0x260 [ 1244.372776][T20108] __x64_sys_acct+0x81/0x1e0 [ 1244.372812][T20108] ? lockdep_hardirqs_on+0x78/0x100 [ 1244.372855][T20108] do_syscall_64+0x106/0xf80 [ 1244.372891][T20108] ? clear_bhb_loop+0x40/0x90 [ 1244.372921][T20108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.372947][T20108] RIP: 0033:0x7f2ba939c799 [ 1244.372966][T20108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.372990][T20108] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1244.373013][T20108] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1244.373030][T20108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1244.373045][T20108] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1244.373060][T20108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.373075][T20108] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1244.373106][T20108] [ 1249.885875][T20165] FAULT_INJECTION: forcing a failure. [ 1249.885875][T20165] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.046918][T20165] CPU: 0 UID: 0 PID: 20165 Comm: syz.0.3485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1250.046960][T20165] Tainted: [L]=SOFTLOCKUP [ 1250.046970][T20165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1250.046985][T20165] Call Trace: [ 1250.046994][T20165] [ 1250.047005][T20165] dump_stack_lvl+0x100/0x190 [ 1250.047047][T20165] should_fail_ex.cold+0x5/0xa [ 1250.047077][T20165] should_failslab+0xc2/0x120 [ 1250.047105][T20165] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1250.047144][T20165] ? __proc_create+0x2cb/0x8c0 [ 1250.047192][T20165] __proc_create+0x2cb/0x8c0 [ 1250.047234][T20165] ? __pfx___proc_create+0x10/0x10 [ 1250.047274][T20165] ? __lock_acquire+0x4a5/0x2630 [ 1250.047310][T20165] ? _raw_write_unlock+0x28/0x50 [ 1250.047346][T20165] ? proc_register+0x559/0x8a0 [ 1250.047373][T20165] proc_create_reg+0x75/0x170 [ 1250.047401][T20165] proc_create_data+0x86/0x110 [ 1250.047436][T20165] ? __pfx_proc_create_data+0x10/0x10 [ 1250.047461][T20165] ? net_generic+0xea/0x2a0 [ 1250.047500][T20165] gss_svc_init_net+0x2e7/0x640 [ 1250.047534][T20165] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1250.047575][T20165] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1250.047613][T20165] ops_init+0x1e2/0x5f0 [ 1250.047656][T20165] setup_net+0x118/0x3a0 [ 1250.047699][T20165] ? __pfx_setup_net+0x10/0x10 [ 1250.047737][T20165] ? lockdep_init_map_type+0x5c/0x250 [ 1250.047772][T20165] ? mutex_init_lockep+0x110/0x150 [ 1250.047811][T20165] copy_net_ns+0x46f/0x7c0 [ 1250.047839][T20165] create_new_namespaces+0x3ea/0xac0 [ 1250.047874][T20165] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1250.047904][T20165] ksys_unshare+0x473/0xad0 [ 1250.047939][T20165] ? __pfx_ksys_unshare+0x10/0x10 [ 1250.047982][T20165] __x64_sys_unshare+0x31/0x40 [ 1250.048014][T20165] do_syscall_64+0x106/0xf80 [ 1250.048051][T20165] ? clear_bhb_loop+0x40/0x90 [ 1250.048082][T20165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.048108][T20165] RIP: 0033:0x7f2ba939c799 [ 1250.048129][T20165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.048155][T20165] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1250.048179][T20165] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1250.048196][T20165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1250.048212][T20165] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1250.048228][T20165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.048244][T20165] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1250.048276][T20165] [ 1250.909296][T20170] NFSD: Failed to start, no listeners configured. [ 1256.369294][T20231] random: crng reseeded on system resumption [ 1257.257007][T20243] FAULT_INJECTION: forcing a failure. [ 1257.257007][T20243] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.313478][T20243] CPU: 0 UID: 0 PID: 20243 Comm: syz.0.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 1257.313520][T20243] Tainted: [L]=SOFTLOCKUP [ 1257.313529][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.313546][T20243] Call Trace: [ 1257.313554][T20243] [ 1257.313564][T20243] dump_stack_lvl+0x100/0x190 [ 1257.313607][T20243] should_fail_ex.cold+0x5/0xa [ 1257.313637][T20243] should_failslab+0xc2/0x120 [ 1257.313664][T20243] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1257.313702][T20243] ? seq_open+0x55/0x170 [ 1257.313742][T20243] seq_open+0x55/0x170 [ 1257.313777][T20243] blk_mq_debugfs_open+0x106/0x1b0 [ 1257.313816][T20243] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 1257.313852][T20243] full_proxy_open_regular+0x1b6/0x370 [ 1257.313902][T20243] do_dentry_open+0x6d8/0x1660 [ 1257.313928][T20243] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1257.313976][T20243] vfs_open+0x82/0x3f0 [ 1257.314012][T20243] path_openat+0x208c/0x31a0 [ 1257.314048][T20243] ? __pfx_path_openat+0x10/0x10 [ 1257.314086][T20243] do_file_open+0x20e/0x430 [ 1257.314122][T20243] ? __pfx_do_file_open+0x10/0x10 [ 1257.314175][T20243] ? alloc_fd+0x476/0x790 [ 1257.314203][T20243] ? do_getname+0x191/0x390 [ 1257.314238][T20243] do_sys_openat2+0x10d/0x1e0 [ 1257.314272][T20243] ? __pfx_do_sys_openat2+0x10/0x10 [ 1257.314315][T20243] ? __fget_files+0x21f/0x3d0 [ 1257.314344][T20243] __x64_sys_openat+0x12d/0x210 [ 1257.314381][T20243] ? __pfx___x64_sys_openat+0x10/0x10 [ 1257.314432][T20243] do_syscall_64+0x106/0xf80 [ 1257.314474][T20243] ? clear_bhb_loop+0x40/0x90 [ 1257.314505][T20243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.314532][T20243] RIP: 0033:0x7f2ba939c799 [ 1257.314552][T20243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.314577][T20243] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1257.314608][T20243] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1257.314625][T20243] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 1257.314642][T20243] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1257.314658][T20243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.314674][T20243] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1257.314707][T20243] [ 1257.674880][T20243] netlink: 122 bytes leftover after parsing attributes in process `syz.0.3501'. [ 1259.736803][T20268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3508'. [ 1259.807878][T20268] macvlan1: entered promiscuous mode [ 1259.856924][T20268] macvlan1: entered allmulticast mode [ 1259.883825][T20268] veth1_vlan: entered allmulticast mode [ 1262.550675][T20294] netlink: 'syz.3.3513': attribute type 1 has an invalid length. [ 1263.300828][T20300] NFSD: Failed to start, no listeners configured. [ 1268.282114][T20361] FAULT_INJECTION: forcing a failure. [ 1268.282114][T20361] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.398120][T20361] CPU: 0 UID: 0 PID: 20361 Comm: syz.0.3526 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.398169][T20361] Tainted: [L]=SOFTLOCKUP [ 1268.398178][T20361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1268.398194][T20361] Call Trace: [ 1268.398203][T20361] [ 1268.398212][T20361] dump_stack_lvl+0x100/0x190 [ 1268.398257][T20361] should_fail_ex.cold+0x5/0xa [ 1268.398286][T20361] should_failslab+0xc2/0x120 [ 1268.398313][T20361] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1268.398351][T20361] ? alloc_vfsmnt+0x23/0x6a0 [ 1268.398390][T20361] alloc_vfsmnt+0x23/0x6a0 [ 1268.398434][T20361] path_mount+0x1e6b/0x23d0 [ 1268.398469][T20361] ? __pfx_path_mount+0x10/0x10 [ 1268.398497][T20361] ? lockdep_hardirqs_on+0x78/0x100 [ 1268.398539][T20361] ? putname+0xb1/0x110 [ 1268.398565][T20361] ? kmem_cache_free+0x124/0x6a0 [ 1268.398611][T20361] ? __x64_sys_mount+0x293/0x310 [ 1268.398639][T20361] __x64_sys_mount+0x293/0x310 [ 1268.398670][T20361] ? __pfx___x64_sys_mount+0x10/0x10 [ 1268.398709][T20361] do_syscall_64+0x106/0xf80 [ 1268.398746][T20361] ? clear_bhb_loop+0x40/0x90 [ 1268.398777][T20361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.398803][T20361] RIP: 0033:0x7f2ba939c799 [ 1268.398824][T20361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.398849][T20361] RSP: 002b:00007f2baa19a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1268.398873][T20361] RAX: ffffffffffffffda RBX: 00007f2ba9616090 RCX: 00007f2ba939c799 [ 1268.398890][T20361] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1268.398906][T20361] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1268.398922][T20361] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1268.398937][T20361] R13: 00007f2ba9616128 R14: 00007f2ba9616090 R15: 00007ffc98e74898 [ 1268.398969][T20361] [ 1269.690842][T20379] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3532'. [ 1269.732205][T20380] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3532'. [ 1270.648317][T18190] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1271.345679][T20399] FAULT_INJECTION: forcing a failure. [ 1271.345679][T20399] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.499826][T20399] CPU: 0 UID: 0 PID: 20399 Comm: syz.0.3536 Tainted: G L syzkaller #0 PREEMPT(full) [ 1271.499867][T20399] Tainted: [L]=SOFTLOCKUP [ 1271.499877][T20399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1271.499893][T20399] Call Trace: [ 1271.499902][T20399] [ 1271.499912][T20399] dump_stack_lvl+0x100/0x190 [ 1271.499955][T20399] should_fail_ex.cold+0x5/0xa [ 1271.499984][T20399] ? cache_create_net+0xa2/0x1f0 [ 1271.500020][T20399] should_failslab+0xc2/0x120 [ 1271.500047][T20399] __kmalloc_noprof+0xe0/0x850 [ 1271.500093][T20399] cache_create_net+0xa2/0x1f0 [ 1271.500132][T20399] gss_svc_init_net+0x11f/0x640 [ 1271.500166][T20399] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1271.500207][T20399] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1271.500250][T20399] ops_init+0x1e2/0x5f0 [ 1271.500293][T20399] setup_net+0x118/0x3a0 [ 1271.500333][T20399] ? __pfx_setup_net+0x10/0x10 [ 1271.500370][T20399] ? lockdep_init_map_type+0x5c/0x250 [ 1271.500406][T20399] ? mutex_init_lockep+0x110/0x150 [ 1271.500445][T20399] copy_net_ns+0x46f/0x7c0 [ 1271.500473][T20399] create_new_namespaces+0x3ea/0xac0 [ 1271.500507][T20399] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1271.500552][T20399] ksys_unshare+0x473/0xad0 [ 1271.500587][T20399] ? __pfx_ksys_unshare+0x10/0x10 [ 1271.500630][T20399] __x64_sys_unshare+0x31/0x40 [ 1271.500662][T20399] do_syscall_64+0x106/0xf80 [ 1271.500700][T20399] ? clear_bhb_loop+0x40/0x90 [ 1271.500731][T20399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.500758][T20399] RIP: 0033:0x7f2ba939c799 [ 1271.500778][T20399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.500804][T20399] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1271.500828][T20399] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1271.500846][T20399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1271.500862][T20399] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1271.500878][T20399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1271.500893][T20399] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1271.500925][T20399] [ 1277.577502][T20448] futex_wake_op: syz.3.3543 tries to shift op by -2048; fix this program [ 1277.787398][T20448] futex_wake_op: syz.3.3543 tries to shift op by -2048; fix this program [ 1279.863656][T20467] FAULT_INJECTION: forcing a failure. [ 1279.863656][T20467] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.194528][T20467] CPU: 0 UID: 0 PID: 20467 Comm: syz.0.3550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1280.194569][T20467] Tainted: [L]=SOFTLOCKUP [ 1280.194579][T20467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1280.194595][T20467] Call Trace: [ 1280.194603][T20467] [ 1280.194613][T20467] dump_stack_lvl+0x100/0x190 [ 1280.194655][T20467] should_fail_ex.cold+0x5/0xa [ 1280.194686][T20467] should_failslab+0xc2/0x120 [ 1280.194713][T20467] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1280.194752][T20467] ? __proc_create+0x2cb/0x8c0 [ 1280.194799][T20467] __proc_create+0x2cb/0x8c0 [ 1280.194842][T20467] ? __pfx___proc_create+0x10/0x10 [ 1280.194885][T20467] ? _raw_write_unlock+0x28/0x50 [ 1280.194930][T20467] proc_create_reg+0x75/0x170 [ 1280.194956][T20467] ? __pfx_kcm_stats_seq_show+0x10/0x10 [ 1280.194991][T20467] proc_create_net_single+0x86/0x180 [ 1280.195017][T20467] ? __pfx_proc_create_net_single+0x10/0x10 [ 1280.195050][T20467] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 1280.195084][T20467] kcm_proc_init_net+0x52/0x120 [ 1280.195118][T20467] ops_init+0x1e2/0x5f0 [ 1280.195161][T20467] setup_net+0x118/0x3a0 [ 1280.195201][T20467] ? __pfx_setup_net+0x10/0x10 [ 1280.195240][T20467] ? lockdep_init_map_type+0x5c/0x250 [ 1280.195275][T20467] ? mutex_init_lockep+0x110/0x150 [ 1280.195314][T20467] copy_net_ns+0x46f/0x7c0 [ 1280.195349][T20467] create_new_namespaces+0x3ea/0xac0 [ 1280.195384][T20467] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1280.195414][T20467] ksys_unshare+0x473/0xad0 [ 1280.195449][T20467] ? __pfx_ksys_unshare+0x10/0x10 [ 1280.195493][T20467] __x64_sys_unshare+0x31/0x40 [ 1280.195525][T20467] do_syscall_64+0x106/0xf80 [ 1280.195562][T20467] ? clear_bhb_loop+0x40/0x90 [ 1280.195593][T20467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.195620][T20467] RIP: 0033:0x7f2ba939c799 [ 1280.195640][T20467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.195666][T20467] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1280.195692][T20467] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1280.195709][T20467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1280.195725][T20467] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1280.195742][T20467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.195758][T20467] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1280.195795][T20467] [ 1283.643151][T20506] FAULT_INJECTION: forcing a failure. [ 1283.643151][T20506] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.874564][T20506] CPU: 0 UID: 0 PID: 20506 Comm: syz.0.3558 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.874605][T20506] Tainted: [L]=SOFTLOCKUP [ 1283.874615][T20506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1283.874631][T20506] Call Trace: [ 1283.874640][T20506] [ 1283.874650][T20506] dump_stack_lvl+0x100/0x190 [ 1283.874692][T20506] should_fail_ex.cold+0x5/0xa [ 1283.874722][T20506] should_failslab+0xc2/0x120 [ 1283.874749][T20506] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1283.874788][T20506] ? __proc_create+0x2cb/0x8c0 [ 1283.874836][T20506] __proc_create+0x2cb/0x8c0 [ 1283.874878][T20506] ? __pfx___proc_create+0x10/0x10 [ 1283.874917][T20506] ? __lock_acquire+0x4a5/0x2630 [ 1283.874953][T20506] ? _raw_write_unlock+0x28/0x50 [ 1283.874989][T20506] ? proc_register+0x559/0x8a0 [ 1283.875016][T20506] proc_create_reg+0x75/0x170 [ 1283.875044][T20506] proc_create_data+0x86/0x110 [ 1283.875069][T20506] ? __pfx_proc_create_data+0x10/0x10 [ 1283.875093][T20506] ? net_generic+0xea/0x2a0 [ 1283.875132][T20506] gss_svc_init_net+0x2e7/0x640 [ 1283.875176][T20506] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1283.875219][T20506] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1283.875257][T20506] ops_init+0x1e2/0x5f0 [ 1283.875299][T20506] setup_net+0x118/0x3a0 [ 1283.875339][T20506] ? __pfx_setup_net+0x10/0x10 [ 1283.875378][T20506] ? lockdep_init_map_type+0x5c/0x250 [ 1283.875413][T20506] ? mutex_init_lockep+0x110/0x150 [ 1283.875454][T20506] copy_net_ns+0x46f/0x7c0 [ 1283.875481][T20506] create_new_namespaces+0x3ea/0xac0 [ 1283.875516][T20506] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1283.875546][T20506] ksys_unshare+0x473/0xad0 [ 1283.875581][T20506] ? __pfx_ksys_unshare+0x10/0x10 [ 1283.875624][T20506] __x64_sys_unshare+0x31/0x40 [ 1283.875657][T20506] do_syscall_64+0x106/0xf80 [ 1283.875694][T20506] ? clear_bhb_loop+0x40/0x90 [ 1283.875725][T20506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.875752][T20506] RIP: 0033:0x7f2ba939c799 [ 1283.875773][T20506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.875798][T20506] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1283.875822][T20506] RAX: ffffffffffffffda RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1283.875840][T20506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1283.875855][T20506] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1283.875871][T20506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.875887][T20506] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1283.875919][T20506] [ 1286.822141][T20521] can: request_module (can-proto-3) failed. [ 1287.722961][T20547] random: crng reseeded on system resumption [ 1289.500765][T20563] random: crng reseeded on system resumption [ 1290.475451][ T30] audit: type=1326 audit(1774084234.612:34): auid=4294967295 uid=8 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.2.3574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5735b9c799 code=0x0 [ 1290.560544][T18190] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 1290.723530][T18190] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1294.370924][T20624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3582'. [ 1294.611406][T20624] macvlan1: entered promiscuous mode [ 1294.611611][T20624] macvlan1: entered allmulticast mode [ 1294.611629][T20624] veth1_vlan: entered allmulticast mode [ 1300.460237][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.466924][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.441636][T20700] netlink: 'syz.0.3597': attribute type 1 has an invalid length. [ 1301.502479][T20700] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3597'. [ 1312.427920][T20809] __vm_enough_memory: pid: 20809, comm: syz.0.3624, bytes: 4398046457856 not enough memory for the allocation [ 1312.897680][T20811] bridge_slave_1: left allmulticast mode [ 1313.015614][T20811] bridge_slave_1: left promiscuous mode [ 1313.021478][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.322929][T20827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3627'. [ 1319.549050][T20868] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3636'. [ 1320.349339][T20881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3639'. [ 1323.249682][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3644'. [ 1326.376687][T20934] futex_wake_op: syz.1.3653 tries to shift op by -2048; fix this program [ 1326.481769][T20934] futex_wake_op: syz.1.3653 tries to shift op by -2048; fix this program [ 1329.673147][T20964] FAULT_INJECTION: forcing a failure. [ 1329.673147][T20964] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.839134][T20964] CPU: 0 UID: 0 PID: 20964 Comm: syz.0.3658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1329.839175][T20964] Tainted: [L]=SOFTLOCKUP [ 1329.839184][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1329.839201][T20964] Call Trace: [ 1329.839209][T20964] [ 1329.839220][T20964] dump_stack_lvl+0x100/0x190 [ 1329.839263][T20964] should_fail_ex.cold+0x5/0xa [ 1329.839292][T20964] should_failslab+0xc2/0x120 [ 1329.839320][T20964] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1329.839358][T20964] ? vm_area_alloc+0x1f/0x160 [ 1329.839392][T20964] ? vma_merge_new_range+0x38b/0xa30 [ 1329.839434][T20964] vm_area_alloc+0x1f/0x160 [ 1329.839467][T20964] __mmap_region+0x10cc/0x29e0 [ 1329.839520][T20964] ? __pfx___mmap_region+0x10/0x10 [ 1329.839563][T20964] ? set_next_entity+0x11e/0x9c0 [ 1329.839624][T20964] ? __lock_acquire+0x4a5/0x2630 [ 1329.839670][T20964] ? find_held_lock+0x2b/0x80 [ 1329.839693][T20964] ? finish_task_switch.isra.0+0x200/0xb80 [ 1329.839721][T20964] ? finish_task_switch.isra.0+0x200/0xb80 [ 1329.839760][T20964] ? trace_sched_exit_tp+0x13a/0x180 [ 1329.839790][T20964] ? __schedule+0x1000/0x6120 [ 1329.839862][T20964] ? rcu_is_watching+0x12/0xc0 [ 1329.839901][T20964] ? cap_capable+0x107/0x460 [ 1329.839947][T20964] mmap_region+0x180/0x3e0 [ 1329.839991][T20964] do_mmap+0xc63/0x12f0 [ 1329.840033][T20964] ? __pfx_do_mmap+0x10/0x10 [ 1329.840062][T20964] ? __pfx_down_write_killable+0x10/0x10 [ 1329.840093][T20964] vm_mmap_pgoff+0x29e/0x470 [ 1329.840128][T20964] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1329.840158][T20964] ? do_futex+0x192/0x350 [ 1329.840192][T20964] ? __pfx_do_futex+0x10/0x10 [ 1329.840230][T20964] ksys_mmap_pgoff+0xe1/0x650 [ 1329.840257][T20964] ? __x64_sys_futex+0x34f/0x4d0 [ 1329.840289][T20964] ? __x64_sys_futex+0x358/0x4d0 [ 1329.840324][T20964] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1329.840351][T20964] ? xfd_validate_state+0x129/0x190 [ 1329.840394][T20964] __x64_sys_mmap+0x125/0x190 [ 1329.840435][T20964] do_syscall_64+0x106/0xf80 [ 1329.840472][T20964] ? clear_bhb_loop+0x40/0x90 [ 1329.840504][T20964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.840530][T20964] RIP: 0033:0x7f2ba939c799 [ 1329.840552][T20964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.840580][T20964] RSP: 002b:00007f2baa179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1329.840606][T20964] RAX: ffffffffffffffda RBX: 00007f2ba9616180 RCX: 00007f2ba939c799 [ 1329.840623][T20964] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1329.840640][T20964] RBP: 00007f2ba9432c99 R08: 0000000000000002 R09: 0000000000008000 [ 1329.840656][T20964] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1329.840673][T20964] R13: 00007f2ba9616218 R14: 00007f2ba9616180 R15: 00007ffc98e74898 [ 1329.840706][T20964] [ 1334.346929][T21016] random: crng reseeded on system resumption [ 1334.470405][T21016] FAULT_INJECTION: forcing a failure. [ 1334.470405][T21016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1334.698565][T21016] CPU: 0 UID: 0 PID: 21016 Comm: syz.0.3669 Tainted: G L syzkaller #0 PREEMPT(full) [ 1334.698607][T21016] Tainted: [L]=SOFTLOCKUP [ 1334.698617][T21016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1334.698632][T21016] Call Trace: [ 1334.698640][T21016] [ 1334.698649][T21016] dump_stack_lvl+0x100/0x190 [ 1334.698693][T21016] should_fail_ex.cold+0x5/0xa [ 1334.698725][T21016] ? prepare_alloc_pages+0x16d/0x5f0 [ 1334.698757][T21016] should_fail_alloc_page+0xeb/0x140 [ 1334.698787][T21016] prepare_alloc_pages+0x1f0/0x5f0 [ 1334.698821][T21016] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1334.698864][T21016] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1334.698914][T21016] ? stack_trace_save+0x8e/0xc0 [ 1334.698940][T21016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1334.698980][T21016] ? stack_depot_save_flags+0x27/0x9d0 [ 1334.699013][T21016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1334.699056][T21016] ? kasan_save_stack+0x3f/0x50 [ 1334.699095][T21016] ? kasan_save_stack+0x30/0x50 [ 1334.699134][T21016] ? kasan_save_track+0x14/0x30 [ 1334.699179][T21016] ? do_sys_openat2+0x10d/0x1e0 [ 1334.699212][T21016] ? __x64_sys_openat+0x12d/0x210 [ 1334.699244][T21016] ? do_syscall_64+0x106/0xf80 [ 1334.699281][T21016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.699309][T21016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1334.699355][T21016] ? policy_nodemask+0xed/0x4f0 [ 1334.699384][T21016] alloc_pages_mpol+0x1fb/0x550 [ 1334.699413][T21016] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1334.699441][T21016] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1334.699473][T21016] alloc_pages_noprof+0x131/0x390 [ 1334.699502][T21016] get_zeroed_page_noprof+0x18/0xb0 [ 1334.699530][T21016] get_image_page+0x18/0x1a0 [ 1334.699572][T21016] alloc_rtree_node+0x3c/0xb0 [ 1334.699618][T21016] memory_bm_create+0x65e/0xba0 [ 1334.699673][T21016] create_basic_memory_bitmaps+0xbd/0x350 [ 1334.699710][T21016] snapshot_open+0x230/0x2a0 [ 1334.699739][T21016] ? __pfx_snapshot_open+0x10/0x10 [ 1334.699770][T21016] misc_open+0x26d/0x450 [ 1334.699800][T21016] ? __pfx_misc_open+0x10/0x10 [ 1334.699829][T21016] chrdev_open+0x234/0x6a0 [ 1334.699855][T21016] ? __pfx_apparmor_file_open+0x10/0x10 [ 1334.699881][T21016] ? __pfx_chrdev_open+0x10/0x10 [ 1334.699909][T21016] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1334.699943][T21016] do_dentry_open+0x6d8/0x1660 [ 1334.699968][T21016] ? __pfx_chrdev_open+0x10/0x10 [ 1334.700001][T21016] vfs_open+0x82/0x3f0 [ 1334.700038][T21016] path_openat+0x208c/0x31a0 [ 1334.700074][T21016] ? __pfx_path_openat+0x10/0x10 [ 1334.700112][T21016] do_file_open+0x20e/0x430 [ 1334.700141][T21016] ? __pfx_do_file_open+0x10/0x10 [ 1334.700189][T21016] ? alloc_fd+0x476/0x790 [ 1334.700217][T21016] ? do_getname+0x191/0x390 [ 1334.700252][T21016] do_sys_openat2+0x10d/0x1e0 [ 1334.700286][T21016] ? __pfx_do_sys_openat2+0x10/0x10 [ 1334.700322][T21016] ? find_held_lock+0x2b/0x80 [ 1334.700353][T21016] __x64_sys_openat+0x12d/0x210 [ 1334.700388][T21016] ? __pfx___x64_sys_openat+0x10/0x10 [ 1334.700435][T21016] do_syscall_64+0x106/0xf80 [ 1334.700472][T21016] ? clear_bhb_loop+0x40/0x90 [ 1334.700503][T21016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.700530][T21016] RIP: 0033:0x7f2ba939c799 [ 1334.700551][T21016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.700577][T21016] RSP: 002b:00007f2baa179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1334.700602][T21016] RAX: ffffffffffffffda RBX: 00007f2ba9616180 RCX: 00007f2ba939c799 [ 1334.700620][T21016] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1334.700637][T21016] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1334.700653][T21016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1334.700669][T21016] R13: 00007f2ba9616218 R14: 00007f2ba9616180 R15: 00007ffc98e74898 [ 1334.700700][T21016] [ 1335.829183][T21035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3677'. [ 1335.941177][T21024] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3672'. [ 1336.302725][T21044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1337.137404][T21057] random: crng reseeded on system resumption [ 1337.260828][T21057] FAULT_INJECTION: forcing a failure. [ 1337.260828][T21057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1337.603012][T21057] CPU: 0 UID: 0 PID: 21057 Comm: syz.0.3680 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.603060][T21057] Tainted: [L]=SOFTLOCKUP [ 1337.603070][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1337.603086][T21057] Call Trace: [ 1337.603095][T21057] [ 1337.603110][T21057] dump_stack_lvl+0x100/0x190 [ 1337.603154][T21057] should_fail_ex.cold+0x5/0xa [ 1337.603180][T21057] ? prepare_alloc_pages+0x16d/0x5f0 [ 1337.603213][T21057] should_fail_alloc_page+0xeb/0x140 [ 1337.603242][T21057] prepare_alloc_pages+0x1f0/0x5f0 [ 1337.603277][T21057] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1337.603326][T21057] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1337.603385][T21057] ? stack_trace_save+0x8e/0xc0 [ 1337.603412][T21057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1337.603452][T21057] ? stack_depot_save_flags+0x27/0x9d0 [ 1337.603506][T21057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1337.603550][T21057] ? kasan_save_stack+0x3f/0x50 [ 1337.603589][T21057] ? kasan_save_stack+0x30/0x50 [ 1337.603628][T21057] ? kasan_save_track+0x14/0x30 [ 1337.603674][T21057] ? do_sys_openat2+0x10d/0x1e0 [ 1337.603706][T21057] ? __x64_sys_openat+0x12d/0x210 [ 1337.603745][T21057] ? do_syscall_64+0x106/0xf80 [ 1337.603787][T21057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.603816][T21057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1337.603861][T21057] ? policy_nodemask+0xed/0x4f0 [ 1337.603890][T21057] alloc_pages_mpol+0x1fb/0x550 [ 1337.603919][T21057] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1337.603947][T21057] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1337.603980][T21057] alloc_pages_noprof+0x131/0x390 [ 1337.604008][T21057] get_zeroed_page_noprof+0x18/0xb0 [ 1337.604037][T21057] get_image_page+0x18/0x1a0 [ 1337.604079][T21057] alloc_rtree_node+0x3c/0xb0 [ 1337.604120][T21057] memory_bm_create+0x65e/0xba0 [ 1337.604175][T21057] create_basic_memory_bitmaps+0xbd/0x350 [ 1337.604207][T21057] snapshot_open+0x230/0x2a0 [ 1337.604236][T21057] ? __pfx_snapshot_open+0x10/0x10 [ 1337.604266][T21057] misc_open+0x26d/0x450 [ 1337.604297][T21057] ? __pfx_misc_open+0x10/0x10 [ 1337.604326][T21057] chrdev_open+0x234/0x6a0 [ 1337.604352][T21057] ? __pfx_apparmor_file_open+0x10/0x10 [ 1337.604378][T21057] ? __pfx_chrdev_open+0x10/0x10 [ 1337.604406][T21057] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1337.604440][T21057] do_dentry_open+0x6d8/0x1660 [ 1337.604472][T21057] ? __pfx_chrdev_open+0x10/0x10 [ 1337.604507][T21057] vfs_open+0x82/0x3f0 [ 1337.604543][T21057] path_openat+0x208c/0x31a0 [ 1337.604580][T21057] ? __pfx_path_openat+0x10/0x10 [ 1337.604619][T21057] do_file_open+0x20e/0x430 [ 1337.604648][T21057] ? __pfx_do_file_open+0x10/0x10 [ 1337.604702][T21057] ? alloc_fd+0x476/0x790 [ 1337.604731][T21057] ? do_getname+0x191/0x390 [ 1337.604766][T21057] do_sys_openat2+0x10d/0x1e0 [ 1337.604801][T21057] ? __pfx_do_sys_openat2+0x10/0x10 [ 1337.604837][T21057] ? find_held_lock+0x2b/0x80 [ 1337.604869][T21057] __x64_sys_openat+0x12d/0x210 [ 1337.604904][T21057] ? __pfx___x64_sys_openat+0x10/0x10 [ 1337.604951][T21057] do_syscall_64+0x106/0xf80 [ 1337.604988][T21057] ? clear_bhb_loop+0x40/0x90 [ 1337.605019][T21057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.605047][T21057] RIP: 0033:0x7f2ba939c799 [ 1337.605068][T21057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.605095][T21057] RSP: 002b:00007f2baa179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1337.605119][T21057] RAX: ffffffffffffffda RBX: 00007f2ba9616180 RCX: 00007f2ba939c799 [ 1337.605137][T21057] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1337.605154][T21057] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1337.605171][T21057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1337.605188][T21057] R13: 00007f2ba9616218 R14: 00007f2ba9616180 R15: 00007ffc98e74898 [ 1337.605221][T21057] [ 1352.460862][T21191] FAULT_INJECTION: forcing a failure. [ 1352.460862][T21191] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.562176][T21191] CPU: 0 UID: 0 PID: 21191 Comm: syz.0.3709 Tainted: G L syzkaller #0 PREEMPT(full) [ 1352.562217][T21191] Tainted: [L]=SOFTLOCKUP [ 1352.562227][T21191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1352.562243][T21191] Call Trace: [ 1352.562252][T21191] [ 1352.562262][T21191] dump_stack_lvl+0x100/0x190 [ 1352.562305][T21191] should_fail_ex.cold+0x5/0xa [ 1352.562333][T21191] ? inotify_handle_inode_event+0x1a5/0x6a0 [ 1352.562368][T21191] should_failslab+0xc2/0x120 [ 1352.562402][T21191] __kmalloc_noprof+0xe0/0x850 [ 1352.562440][T21191] ? stack_trace_save+0x8e/0xc0 [ 1352.562476][T21191] inotify_handle_inode_event+0x1a5/0x6a0 [ 1352.562521][T21191] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 1352.562557][T21191] fsnotify_handle_inode_event.isra.0+0x1e3/0x410 [ 1352.562589][T21191] fsnotify+0x187d/0x3550 [ 1352.562621][T21191] ? __pfx_fsnotify+0x10/0x10 [ 1352.562657][T21191] __fsnotify_parent+0x704/0xca0 [ 1352.562690][T21191] ? __pfx___fsnotify_parent+0x10/0x10 [ 1352.562722][T21191] ? __pfx___might_resched+0x10/0x10 [ 1352.562774][T21191] ? __fput+0x30d/0xb40 [ 1352.562802][T21191] __fput+0x30d/0xb40 [ 1352.562838][T21191] task_work_run+0x150/0x240 [ 1352.562878][T21191] ? __pfx_task_work_run+0x10/0x10 [ 1352.562924][T21191] exit_to_user_mode_loop+0x100/0x4a0 [ 1352.562960][T21191] do_syscall_64+0x668/0xf80 [ 1352.562998][T21191] ? clear_bhb_loop+0x40/0x90 [ 1352.563030][T21191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.563056][T21191] RIP: 0033:0x7f2ba939c799 [ 1352.563078][T21191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.563103][T21191] RSP: 002b:00007f2baa1bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1352.563128][T21191] RAX: 0000000000000000 RBX: 00007f2ba9615fa0 RCX: 00007f2ba939c799 [ 1352.563145][T21191] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1352.563160][T21191] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1352.563177][T21191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.563192][T21191] R13: 00007f2ba9616038 R14: 00007f2ba9615fa0 R15: 00007ffc98e74898 [ 1352.563225][T21191] [ 1353.284428][T18190] block nbd2: Receive control failed (result -32) [ 1356.997008][T21260] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3721'. [ 1358.800065][T21282] FAULT_INJECTION: forcing a failure. [ 1358.800065][T21282] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.105387][T21282] CPU: 0 UID: 0 PID: 21282 Comm: syz.0.3727 Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.105427][T21282] Tainted: [L]=SOFTLOCKUP [ 1359.105436][T21282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1359.105452][T21282] Call Trace: [ 1359.105460][T21282] [ 1359.105471][T21282] dump_stack_lvl+0x100/0x190 [ 1359.105514][T21282] should_fail_ex.cold+0x5/0xa [ 1359.105543][T21282] should_failslab+0xc2/0x120 [ 1359.105570][T21282] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1359.105609][T21282] ? security_inode_alloc+0x3b/0x2c0 [ 1359.105635][T21282] ? lockdep_init_map_type+0x5c/0x250 [ 1359.105673][T21282] security_inode_alloc+0x3b/0x2c0 [ 1359.105701][T21282] inode_init_always_gfp+0xced/0x1040 [ 1359.105732][T21282] alloc_inode+0x8e/0x250 [ 1359.105765][T21282] new_inode+0x22/0x1c0 [ 1359.105802][T21282] nfsd_mkdir+0x78/0x460 [ 1359.105829][T21282] ? dput.part.0+0xdd/0x570 [ 1359.105865][T21282] nfsd_fill_super+0x3f9/0x560 [ 1359.105895][T21282] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1359.105923][T21282] get_tree_keyed+0x10e/0x1d0 [ 1359.105966][T21282] vfs_get_tree+0x92/0x320 [ 1359.106002][T21282] path_mount+0x7d0/0x23d0 [ 1359.106036][T21282] ? __pfx_path_mount+0x10/0x10 [ 1359.106081][T21282] ? lockdep_hardirqs_on+0x78/0x100 [ 1359.106123][T21282] ? putname+0xb1/0x110 [ 1359.106149][T21282] ? kmem_cache_free+0x124/0x6a0 [ 1359.106195][T21282] ? __x64_sys_mount+0x293/0x310 [ 1359.106223][T21282] __x64_sys_mount+0x293/0x310 [ 1359.106255][T21282] ? __pfx___x64_sys_mount+0x10/0x10 [ 1359.106294][T21282] do_syscall_64+0x106/0xf80 [ 1359.106332][T21282] ? clear_bhb_loop+0x40/0x90 [ 1359.106363][T21282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.106390][T21282] RIP: 0033:0x7f2ba939c799 [ 1359.106414][T21282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.106440][T21282] RSP: 002b:00007f2baa19a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1359.106464][T21282] RAX: ffffffffffffffda RBX: 00007f2ba9616090 RCX: 00007f2ba939c799 [ 1359.106483][T21282] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1359.106499][T21282] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1359.106516][T21282] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1359.106532][T21282] R13: 00007f2ba9616128 R14: 00007f2ba9616090 R15: 00007ffc98e74898 [ 1359.106564][T21282] [ 1361.938997][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.950370][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.154105][T18190] Bluetooth: hci1: unexpected event 0x04 length: 64 > 10 [ 1365.154383][T18190] Bluetooth: hci1: connection err: -111 [ 1366.241321][T21364] NFSD: Failed to start, no listeners configured. [ 1372.868501][T21419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1375.101133][T21441] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1377.950596][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1378.071245][T21480] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjEj`# r҄y*"l-y [ 1378.837086][T21489] Invalid ELF header magic: != ELF [ 1380.143219][T21512] futex_wake_op: syz.1.3781 tries to shift op by -2048; fix this program [ 1381.969282][T21527] openvswitch: netlink: Missing valid actions attribute. [ 1386.051146][T21575] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3796'. [ 1386.396727][T21575] mac80211_hwsim hwsim11 : renamed from wlan0 [ 1388.131599][T18190] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1388.193136][T21599] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1391.613236][T21638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3807'. [ 1393.571254][T21665] NFSD: Failed to start, no listeners configured. [ 1394.610326][T21677] netlink: zone id is out of range [ 1394.658052][T21677] netlink: zone id is out of range [ 1396.478597][T21677] HfR: entered promiscuous mode [ 1400.637817][T18190] Bluetooth: hci0: unexpected event 0x04 length: 64 > 10 [ 1400.637884][T18190] Bluetooth: hci0: connection err: -111 [ 1404.666873][T21776] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[21776] [ 1406.610366][T21792] random: crng reseeded on system resumption [ 1406.901884][T21792] FAULT_INJECTION: forcing a failure. [ 1406.901884][T21792] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.219611][T21792] CPU: 0 UID: 0 PID: 21792 Comm: syz.0.3838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.219652][T21792] Tainted: [L]=SOFTLOCKUP [ 1407.219662][T21792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1407.219677][T21792] Call Trace: [ 1407.219685][T21792] [ 1407.219696][T21792] dump_stack_lvl+0x100/0x190 [ 1407.219739][T21792] should_fail_ex.cold+0x5/0xa [ 1407.219768][T21792] should_failslab+0xc2/0x120 [ 1407.219795][T21792] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1407.219829][T21792] ? memory_bm_create+0x14d/0xba0 [ 1407.219876][T21792] memory_bm_create+0x14d/0xba0 [ 1407.219932][T21792] create_basic_memory_bitmaps+0x10b/0x350 [ 1407.219964][T21792] snapshot_open+0x230/0x2a0 [ 1407.219992][T21792] ? __pfx_snapshot_open+0x10/0x10 [ 1407.220023][T21792] misc_open+0x26d/0x450 [ 1407.220060][T21792] ? __pfx_misc_open+0x10/0x10 [ 1407.220089][T21792] chrdev_open+0x234/0x6a0 [ 1407.220116][T21792] ? __pfx_apparmor_file_open+0x10/0x10 [ 1407.220141][T21792] ? __pfx_chrdev_open+0x10/0x10 [ 1407.220170][T21792] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1407.220203][T21792] do_dentry_open+0x6d8/0x1660 [ 1407.220228][T21792] ? __pfx_chrdev_open+0x10/0x10 [ 1407.220262][T21792] vfs_open+0x82/0x3f0 [ 1407.220298][T21792] path_openat+0x208c/0x31a0 [ 1407.220334][T21792] ? __pfx_path_openat+0x10/0x10 [ 1407.220372][T21792] do_file_open+0x20e/0x430 [ 1407.220401][T21792] ? __pfx_do_file_open+0x10/0x10 [ 1407.220449][T21792] ? alloc_fd+0x476/0x790 [ 1407.220476][T21792] ? do_getname+0x191/0x390 [ 1407.220511][T21792] do_sys_openat2+0x10d/0x1e0 [ 1407.220545][T21792] ? __pfx_do_sys_openat2+0x10/0x10 [ 1407.220581][T21792] ? find_held_lock+0x2b/0x80 [ 1407.220612][T21792] __x64_sys_openat+0x12d/0x210 [ 1407.220653][T21792] ? __pfx___x64_sys_openat+0x10/0x10 [ 1407.220700][T21792] do_syscall_64+0x106/0xf80 [ 1407.220738][T21792] ? clear_bhb_loop+0x40/0x90 [ 1407.220769][T21792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.220796][T21792] RIP: 0033:0x7f2ba939c799 [ 1407.220816][T21792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.220842][T21792] RSP: 002b:00007f2baa179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1407.220868][T21792] RAX: ffffffffffffffda RBX: 00007f2ba9616180 RCX: 00007f2ba939c799 [ 1407.220885][T21792] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1407.220902][T21792] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1407.220919][T21792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.220935][T21792] R13: 00007f2ba9616218 R14: 00007f2ba9616180 R15: 00007ffc98e74898 [ 1407.220967][T21792] [ 1408.029462][T21802] netlink: 354 bytes leftover after parsing attributes in process `syz.0.3840'. [ 1412.794751][T21845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3847'. [ 1413.453532][T21854] ptrace attach of "./syz-executor exec"[5828] was attempted by ""[21854] [ 1414.228449][T21867] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3851'. [ 1414.539189][T21869] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3851'. [ 1414.706844][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3851'. [ 1415.305618][T21860] kexec: Could not allocate control_code_buffer [ 1416.085095][T21878] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1416.219768][T21878] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1417.735345][T21892] futex_wake_op: syz.3.3857 tries to shift op by -2048; fix this program [ 1417.830045][T21892] futex_wake_op: syz.3.3857 tries to shift op by -2048; fix this program [ 1420.450172][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3860'. [ 1420.949292][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1421.142486][T21923] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1421.368821][T18190] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1423.403699][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.410826][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.295748][T21951] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 1430.963614][T22002] random: crng reseeded on system resumption [ 1431.051682][T22002] FAULT_INJECTION: forcing a failure. [ 1431.051682][T22002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1431.411293][T22002] CPU: 0 UID: 0 PID: 22002 Comm: syz.0.3880 Tainted: G L syzkaller #0 PREEMPT(full) [ 1431.411333][T22002] Tainted: [L]=SOFTLOCKUP [ 1431.411342][T22002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1431.411358][T22002] Call Trace: [ 1431.411367][T22002] [ 1431.411377][T22002] dump_stack_lvl+0x100/0x190 [ 1431.411420][T22002] should_fail_ex.cold+0x5/0xa [ 1431.411445][T22002] ? prepare_alloc_pages+0x16d/0x5f0 [ 1431.411484][T22002] should_fail_alloc_page+0xeb/0x140 [ 1431.411513][T22002] prepare_alloc_pages+0x1f0/0x5f0 [ 1431.411548][T22002] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1431.411590][T22002] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1431.411640][T22002] ? stack_trace_save+0x8e/0xc0 [ 1431.411666][T22002] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1431.411707][T22002] ? stack_depot_save_flags+0x27/0x9d0 [ 1431.411740][T22002] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1431.411784][T22002] ? kasan_save_stack+0x3f/0x50 [ 1431.411823][T22002] ? kasan_save_stack+0x30/0x50 [ 1431.411862][T22002] ? kasan_save_track+0x14/0x30 [ 1431.411907][T22002] ? do_sys_openat2+0x10d/0x1e0 [ 1431.411939][T22002] ? __x64_sys_openat+0x12d/0x210 [ 1431.411973][T22002] ? do_syscall_64+0x106/0xf80 [ 1431.412010][T22002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.412039][T22002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1431.412085][T22002] ? policy_nodemask+0xed/0x4f0 [ 1431.412114][T22002] alloc_pages_mpol+0x1fb/0x550 [ 1431.412143][T22002] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1431.412171][T22002] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1431.412203][T22002] alloc_pages_noprof+0x131/0x390 [ 1431.412233][T22002] get_zeroed_page_noprof+0x18/0xb0 [ 1431.412261][T22002] get_image_page+0x18/0x1a0 [ 1431.412307][T22002] alloc_rtree_node+0x3c/0xb0 [ 1431.412349][T22002] memory_bm_create+0x65e/0xba0 [ 1431.412404][T22002] create_basic_memory_bitmaps+0xbd/0x350 [ 1431.412436][T22002] snapshot_open+0x230/0x2a0 [ 1431.412470][T22002] ? __pfx_snapshot_open+0x10/0x10 [ 1431.412501][T22002] misc_open+0x26d/0x450 [ 1431.412531][T22002] ? __pfx_misc_open+0x10/0x10 [ 1431.412560][T22002] chrdev_open+0x234/0x6a0 [ 1431.412586][T22002] ? __pfx_apparmor_file_open+0x10/0x10 [ 1431.412613][T22002] ? __pfx_chrdev_open+0x10/0x10 [ 1431.412641][T22002] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1431.412674][T22002] do_dentry_open+0x6d8/0x1660 [ 1431.412699][T22002] ? __pfx_chrdev_open+0x10/0x10 [ 1431.412733][T22002] vfs_open+0x82/0x3f0 [ 1431.412768][T22002] path_openat+0x208c/0x31a0 [ 1431.412805][T22002] ? __pfx_path_openat+0x10/0x10 [ 1431.412843][T22002] do_file_open+0x20e/0x430 [ 1431.412872][T22002] ? __pfx_do_file_open+0x10/0x10 [ 1431.412920][T22002] ? alloc_fd+0x476/0x790 [ 1431.412948][T22002] ? do_getname+0x191/0x390 [ 1431.412984][T22002] do_sys_openat2+0x10d/0x1e0 [ 1431.413018][T22002] ? __pfx_do_sys_openat2+0x10/0x10 [ 1431.413054][T22002] ? find_held_lock+0x2b/0x80 [ 1431.413085][T22002] __x64_sys_openat+0x12d/0x210 [ 1431.413121][T22002] ? __pfx___x64_sys_openat+0x10/0x10 [ 1431.413168][T22002] do_syscall_64+0x106/0xf80 [ 1431.413205][T22002] ? clear_bhb_loop+0x40/0x90 [ 1431.413236][T22002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.413263][T22002] RIP: 0033:0x7f2ba939c799 [ 1431.413285][T22002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.413311][T22002] RSP: 002b:00007f2baa19a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1431.413335][T22002] RAX: ffffffffffffffda RBX: 00007f2ba9616090 RCX: 00007f2ba939c799 [ 1431.413353][T22002] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1431.413370][T22002] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1431.413387][T22002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1431.413403][T22002] R13: 00007f2ba9616128 R14: 00007f2ba9616090 R15: 00007ffc98e74898 [ 1431.413441][T22002] [ 1432.842172][T22012] [U] /Eev/audio1 [ 1432.845850][T22012] [U] F츱Z|GP)\nC:LubΧtUwUU3.O"4Y8@Z5`mb4* [ 1432.854825][T22012] [U] WwK E6?(I,k8D [ 1432.860176][T22012] [U] [ 1432.862891][T22012] [U] [ 1432.967702][T22012] [U] [ 1432.970463][T22012] [U] [ 1432.973177][T22012] [U] [ 1432.975890][T22012] [U] [ 1433.009516][T22012] [U] [ 1433.012299][T22012] [U] [ 1433.015033][T22012] [U] [ 1433.017747][T22012] [U] [ 1433.122690][T22012] [U] [ 1433.125454][T22012] [U] [ 1433.128206][T22012] [U] [ 1433.130931][T22012] [U] [ 1433.204516][T22012] [U] [ 1433.610224][T22028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1444.196343][T22081] kexec: Could not allocate control_code_buffer [ 1445.493381][T22139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1445.632911][T22127] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[22127] [ 1446.470045][T22146] FAULT_INJECTION: forcing a failure. [ 1446.470045][T22146] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.578953][T22146] CPU: 0 UID: 0 PID: 22146 Comm: syz.0.3911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1446.578994][T22146] Tainted: [L]=SOFTLOCKUP [ 1446.579004][T22146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1446.579020][T22146] Call Trace: [ 1446.579028][T22146] [ 1446.579039][T22146] dump_stack_lvl+0x100/0x190 [ 1446.579080][T22146] should_fail_ex.cold+0x5/0xa [ 1446.579110][T22146] should_failslab+0xc2/0x120 [ 1446.579137][T22146] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1446.579178][T22146] ? __d_alloc+0x34/0xa80 [ 1446.579213][T22146] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 1446.579242][T22146] ? lockdep_hardirqs_on+0x78/0x100 [ 1446.579284][T22146] __d_alloc+0x34/0xa80 [ 1446.579315][T22146] d_alloc+0x4a/0x1e0 [ 1446.579346][T22146] d_alloc_name+0x83/0xb0 [ 1446.579374][T22146] ? __pfx_d_alloc_name+0x10/0x10 [ 1446.579406][T22146] ? dput.part.0+0xdd/0x570 [ 1446.579441][T22146] simple_fill_super+0x4c3/0x680 [ 1446.579471][T22146] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1446.579501][T22146] nfsd_fill_super+0x98/0x560 [ 1446.579528][T22146] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1446.579566][T22146] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1446.579594][T22146] get_tree_keyed+0x10e/0x1d0 [ 1446.579636][T22146] vfs_get_tree+0x92/0x320 [ 1446.579672][T22146] path_mount+0x7d0/0x23d0 [ 1446.579706][T22146] ? __pfx_path_mount+0x10/0x10 [ 1446.579734][T22146] ? lockdep_hardirqs_on+0x78/0x100 [ 1446.579775][T22146] ? putname+0xb1/0x110 [ 1446.579800][T22146] ? kmem_cache_free+0x124/0x6a0 [ 1446.579844][T22146] ? __x64_sys_mount+0x293/0x310 [ 1446.579873][T22146] __x64_sys_mount+0x293/0x310 [ 1446.579905][T22146] ? __pfx___x64_sys_mount+0x10/0x10 [ 1446.579944][T22146] do_syscall_64+0x106/0xf80 [ 1446.579981][T22146] ? clear_bhb_loop+0x40/0x90 [ 1446.580012][T22146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.580039][T22146] RIP: 0033:0x7f2ba939c799 [ 1446.580060][T22146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.580086][T22146] RSP: 002b:00007f2baa19a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1446.580110][T22146] RAX: ffffffffffffffda RBX: 00007f2ba9616090 RCX: 00007f2ba939c799 [ 1446.580128][T22146] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1446.580145][T22146] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1446.580161][T22146] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1446.580177][T22146] R13: 00007f2ba9616128 R14: 00007f2ba9616090 R15: 00007ffc98e74898 [ 1446.580215][T22146] [ 1454.152729][T22195] Invalid ELF header magic: != ELF [ 1456.599622][T22209] ptrace attach of "./syz-executor exec"[5828] was attempted by ""[22209] [ 1460.369001][T22244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3932'. [ 1460.645503][T22244] ipvlan0: entered promiscuous mode [ 1460.653728][T22244] ipvlan0: entered allmulticast mode [ 1461.320493][T18190] Bluetooth: Frame is too long (len 122, expected len 4) [ 1464.061135][T22276] random: crng reseeded on system resumption [ 1464.416291][T22276] FAULT_INJECTION: forcing a failure. [ 1464.416291][T22276] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.729991][T22276] CPU: 0 UID: 0 PID: 22276 Comm: syz.0.3939 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.730033][T22276] Tainted: [L]=SOFTLOCKUP [ 1464.730043][T22276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.730059][T22276] Call Trace: [ 1464.730068][T22276] [ 1464.730079][T22276] dump_stack_lvl+0x100/0x190 [ 1464.730123][T22276] should_fail_ex.cold+0x5/0xa [ 1464.730153][T22276] should_failslab+0xc2/0x120 [ 1464.730181][T22276] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1464.730216][T22276] ? memory_bm_create+0x14d/0xba0 [ 1464.730263][T22276] memory_bm_create+0x14d/0xba0 [ 1464.730319][T22276] create_basic_memory_bitmaps+0x10b/0x350 [ 1464.730351][T22276] snapshot_open+0x230/0x2a0 [ 1464.730380][T22276] ? __pfx_snapshot_open+0x10/0x10 [ 1464.730411][T22276] misc_open+0x26d/0x450 [ 1464.730440][T22276] ? __pfx_misc_open+0x10/0x10 [ 1464.730469][T22276] chrdev_open+0x234/0x6a0 [ 1464.730495][T22276] ? __pfx_apparmor_file_open+0x10/0x10 [ 1464.730520][T22276] ? __pfx_chrdev_open+0x10/0x10 [ 1464.730548][T22276] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1464.730582][T22276] do_dentry_open+0x6d8/0x1660 [ 1464.730608][T22276] ? __pfx_chrdev_open+0x10/0x10 [ 1464.730642][T22276] vfs_open+0x82/0x3f0 [ 1464.730678][T22276] path_openat+0x208c/0x31a0 [ 1464.730715][T22276] ? __pfx_path_openat+0x10/0x10 [ 1464.730752][T22276] do_file_open+0x20e/0x430 [ 1464.730781][T22276] ? __pfx_do_file_open+0x10/0x10 [ 1464.730829][T22276] ? alloc_fd+0x476/0x790 [ 1464.730858][T22276] ? do_getname+0x191/0x390 [ 1464.730893][T22276] do_sys_openat2+0x10d/0x1e0 [ 1464.730926][T22276] ? __pfx_do_sys_openat2+0x10/0x10 [ 1464.730974][T22276] ? find_held_lock+0x2b/0x80 [ 1464.731006][T22276] __x64_sys_openat+0x12d/0x210 [ 1464.731041][T22276] ? __pfx___x64_sys_openat+0x10/0x10 [ 1464.731089][T22276] do_syscall_64+0x106/0xf80 [ 1464.731127][T22276] ? clear_bhb_loop+0x40/0x90 [ 1464.731158][T22276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.731186][T22276] RIP: 0033:0x7f2ba939c799 [ 1464.731206][T22276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.731231][T22276] RSP: 002b:00007f2baa179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1464.731257][T22276] RAX: ffffffffffffffda RBX: 00007f2ba9616180 RCX: 00007f2ba939c799 [ 1464.731274][T22276] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1464.731291][T22276] RBP: 00007f2ba9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1464.731307][T22276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1464.731323][T22276] R13: 00007f2ba9616218 R14: 00007f2ba9616180 R15: 00007ffc98e74898 [ 1464.731355][T22276] [ 1466.655780][T22289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1466.852181][T22287] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1467.046086][T22288] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1472.997483][T22339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1473.081032][T22347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3955'. [ 1473.138932][T22339] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1473.484824][T22339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1473.510048][T22347] ipvlan0: entered promiscuous mode [ 1473.515403][T22347] ipvlan0: entered allmulticast mode [ 1473.542275][T22347] veth0_vlan: entered allmulticast mode [ 1473.613359][T22339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1473.738888][T22339] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1474.026460][T22339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1474.732567][T22362] netlink: 346 bytes leftover after parsing attributes in process `syz.2.3957'. [ 1475.048816][T21916] Bluetooth: hci1: command 0x0c1a tx timeout [ 1475.537835][T21916] Bluetooth: hci0: command 0x0c1a tx timeout [ 1475.694644][T21916] Bluetooth: hci2: command 0x0c1a tx timeout [ 1476.090385][T21916] Bluetooth: hci3: command 0x0c1a tx timeout [ 1477.130239][T21916] Bluetooth: hci1: command 0x0c1a tx timeout [ 1477.769220][T21916] Bluetooth: hci2: command 0x0c1a tx timeout [ 1478.452106][T22391] netlink: 980 bytes leftover after parsing attributes in process `syz.0.3964'. [ 1481.649720][T22421] netlink: 'syz.2.3972': attribute type 1 has an invalid length. [ 1483.631973][T22439] aoe: could not set interface list: too many interfaces [ 1484.819208][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.851043][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.649932][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1494.395984][T21916] Bluetooth: hci2: unexpected event 0x3e length: 505 > 260 [ 1494.396017][T21916] Bluetooth: hci2: unexpected subevent 0x02 length: 504 > 260 [ 1494.413667][T21916] Bluetooth: hci2: Dropping invalid advertising data [ 1494.422063][T21916] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 1514.038227][T22830] netlink: 'syz.1.4103': attribute type 11 has an invalid length. [ 1514.122038][T22830] netlink: 'syz.1.4103': attribute type 11 has an invalid length. [ 1514.173679][T22830] netlink: 'syz.1.4103': attribute type 11 has an invalid length. [ 1514.262546][T22830] netlink: 'syz.1.4103': attribute type 11 has an invalid length. [ 1514.360228][T22829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.519009][T23131] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1535.258454][T23143] netlink: 294 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1542.978271][T23273] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1542.985313][T23273] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1546.253085][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.260985][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.137041][T23406] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4317'. [ 1557.267116][T23449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4331'. [ 1557.939514][T23460] Invalid ELF header magic: != ELF [ 1558.893699][T23448] kexec: Could not allocate control_code_buffer [ 1559.404832][T23476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4340'. [ 1559.488956][T23476] veth1_macvtap: entered allmulticast mode [ 1560.509704][T23487] bridge0: port 4(batadv0) entered blocking state [ 1560.659966][T23487] bridge0: port 4(batadv0) entered disabled state [ 1560.718969][T23487] batadv0: entered allmulticast mode [ 1560.842749][T23487] batadv0: entered promiscuous mode [ 1560.930836][T23487] bridge0: port 4(batadv0) entered blocking state [ 1560.937406][T23487] bridge0: port 4(batadv0) entered forwarding state [ 1561.118951][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1561.129243][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1563.457455][T23503] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1569.429416][T23559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1570.270552][T23572] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4370'. [ 1570.381911][T23572] bridge0: port 4(batadv0) entered disabled state [ 1571.987728][T23596] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4380'. [ 1572.073480][T23596] netlink: 274 bytes leftover after parsing attributes in process `syz.2.4380'. [ 1574.885637][T23626] Invalid ELF header magic: != ELF [ 1576.885388][T23659] netlink: 318 bytes leftover after parsing attributes in process `syz.0.4404'. [ 1578.208826][T23681] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4414'. [ 1583.700905][ T30] audit: type=1326 audit(4294967382.440:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23748 comm="syz.3.4438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f165339c799 code=0x0 [ 1584.806450][ T30] audit: type=1800 audit(4294967383.540:36): pid=23755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4441" name="nullb0" dev="tmpfs" ino=2547 res=0 errno=0 [ 1587.634346][T23794] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4451'. [ 1587.754752][T23794] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4451'. [ 1587.873102][T23798] netlink: 290 bytes leftover after parsing attributes in process `syz.1.4451'. [ 1597.050694][T23865] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1597.439899][ T30] audit: type=1800 audit(4294967396.170:37): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4473" name="discovery_nqn" dev="configfs" ino=775555 res=0 errno=0 [ 1597.626482][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 1597.789802][T23878] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4473'. [ 1598.904094][T23890] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4478'. [ 1607.501083][T23961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 1607.694744][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.701149][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.394140][T21916] block nbd3: Receive control failed (result -32) [ 1622.242201][T24052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4521'. [ 1622.304522][T24053] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4521'. [ 1622.467742][T24049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4518'. [ 1624.960267][T24049] veth1_vlan (unregistering): left allmulticast mode [ 1637.726902][T24169] random: crng reseeded on system resumption [ 1641.925929][T24210] netlink: 306 bytes leftover after parsing attributes in process `syz.2.4556'. [ 1652.338761][T24299] futex_wake_op: syz.1.4579 tries to shift op by -2048; fix this program [ 1652.429917][T24299] futex_wake_op: syz.1.4579 tries to shift op by -2048; fix this program [ 1657.411659][T24339] netlink: 306 bytes leftover after parsing attributes in process `syz.0.4591'. [ 1667.629862][ T30] audit: type=1804 audit(4294968489.361:38): pid=24428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4614" name="/newroot/1040/file0" dev="tmpfs" ino=5561 res=1 errno=0 [ 1667.875945][ T30] audit: type=1804 audit(4294968489.391:39): pid=24437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4614" name="/newroot/1040/file0" dev="tmpfs" ino=5561 res=1 errno=0 [ 1669.157258][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.175117][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1677.403575][T24508] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1677.498467][T24508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1677.623015][T24508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1683.052203][T24555] Invalid ELF header magic: != ELF [ 1685.172432][T24567] futex_wake_op: syz.0.4639 tries to shift op by -2048; fix this program [ 1685.264736][T24567] futex_wake_op: syz.0.4639 tries to shift op by -2048; fix this program [ 1685.344744][T24568] 0x000000000001-0x000000020000 : "" [ 1685.456363][T24568] ftl_cs: FTL header corrupt! [ 1687.967863][ T30] audit: type=1804 audit(4294968509.691:40): pid=24585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4642" name="/newroot/1046/file0" dev="tmpfs" ino=5593 res=1 errno=0 [ 1688.206203][ T30] audit: type=1804 audit(4294968509.721:41): pid=24579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4642" name="/newroot/1046/file0" dev="tmpfs" ino=5593 res=1 errno=0 [ 1696.427519][T24657] futex_wake_op: syz.3.4656 tries to shift op by -2048; fix this program [ 1696.725853][T24657] futex_wake_op: syz.3.4656 tries to shift op by -2048; fix this program [ 1703.496044][T24710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1703.614773][T24710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1703.841648][T24710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1704.014099][T24710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1704.357975][T24718] Invalid ELF header magic: != ELF [ 1705.558856][T21916] Bluetooth: hci0: command 0x0c1a tx timeout [ 1705.564956][T18190] Bluetooth: hci1: command 0x0c1a tx timeout [ 1705.876171][T21916] Bluetooth: hci2: command 0x0c1a tx timeout [ 1706.035142][T21916] Bluetooth: hci3: command 0x0c1a tx timeout [ 1709.339948][T21916] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1709.837427][T24741] vivid-007: ================= START STATUS ================= [ 1709.845854][T24741] vivid-007: Generate PTS: true [ 1709.866351][T24747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4676'. [ 1710.034693][T24741] vivid-007: Generate SCR: true [ 1710.179790][T24741] tpg source WxH: 320x240 (Y'CbCr) [ 1710.295658][T24741] tpg field: 1 [ 1710.349209][T24741] tpg crop: (0,0)/320x240 [ 1710.408969][T24741] tpg compose: (0,0)/320x240 [ 1710.474191][T24741] tpg colorspace: 8 [ 1710.527544][T24741] tpg transfer function: 0/0 [ 1710.567538][T24741] tpg Y'CbCr encoding: 0/0 [ 1710.637741][T24741] tpg quantization: 0/0 [ 1710.641950][T24741] tpg RGB range: 0/2 [ 1710.645862][T24741] vivid-007: ================== END STATUS ================== [ 1711.397703][T18190] Bluetooth: hci2: command 0x0c1a tx timeout Ijn9_UVQ8j@:Un M%Ux[ 1713.480792][T18190] Bluetooth: hci2: command 0x0c1a tx timeout [ 1715.862648][T24797] serio: Serial port pty6 [ 1717.503501][ T30] audit: type=1804 audit(4294968539.206:42): pid=24812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4691" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1719.528667][T24828] Invalid ELF header magic: != ELF [ 1725.279012][T24873] can: request_module (can-proto-0) failed. [ 1727.717902][T24895] bridge_slave_1: left allmulticast mode [ 1727.792268][T24895] bridge_slave_1: left promiscuous mode [ 1727.857735][T24895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.749122][T24909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4713'. [ 1728.823192][T24906] Invalid ELF header magic: != ELF [ 1730.604139][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4717'. [ 1730.617579][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.623895][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.690616][T21916] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1740.349893][T25009] futex_wake_op: syz.0.4732 tries to shift op by -2048; fix this program [ 1740.452502][T25009] futex_wake_op: syz.0.4732 tries to shift op by -2048; fix this program [ 1740.538778][T25009] 0x000000000001-0x000000020000 : "" [ 1740.629597][T25009] ftl_cs: FTL header corrupt! [ 1743.583674][T25034] futex_wake_op: syz.2.4737 tries to shift op by -2048; fix this program [ 1743.599279][T25032] futex_wake_op: syz.1.4736 tries to shift op by -2048; fix this program [ 1743.675726][T25034] futex_wake_op: syz.2.4737 tries to shift op by -2048; fix this program [ 1743.781353][T25032] futex_wake_op: syz.1.4736 tries to shift op by -2048; fix this program [ 1744.592938][T25047] Invalid ELF header magic: != ELF [ 1745.707993][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4744'. [ 1745.807547][T25064] netlink: 354 bytes leftover after parsing attributes in process `syz.2.4744'. [ 1746.863127][T25076] can: request_module (can-proto-4) failed. [ 1758.250312][T25189] Invalid ELF header magic: != ELF [ 1771.699679][T25288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1773.810791][T25296] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 1779.899811][T25378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4815'. [ 1780.005359][T25378] netlink: 354 bytes leftover after parsing attributes in process `syz.3.4815'. [ 1781.989067][T25394] netlink: 354 bytes leftover after parsing attributes in process `syz.3.4821'. [ 1788.226210][T25469] Invalid ELF header magic: != ELF [ 1792.083056][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.089471][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.279614][T25559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4851'. [ 1802.199003][T25630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4865'. [ 1806.787458][T25691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1807.020086][T25697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4878'. [ 1807.112998][T25692] zswap: compressor not available [ 1812.787493][T25778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1812.800606][T25778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1812.808840][T25778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1812.816616][T25778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1812.831096][T25778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1814.153573][T25774] chnl_net:caif_netlink_parms(): no params data found [ 1814.423049][T25774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.459440][T25774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.478000][T25774] bridge_slave_0: entered allmulticast mode [ 1814.496059][T25774] bridge_slave_0: entered promiscuous mode [ 1814.528916][T25774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.545119][T25774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.560081][T25774] bridge_slave_1: entered allmulticast mode [ 1814.599398][T25774] bridge_slave_1: entered promiscuous mode [ 1814.738033][T25774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1814.812543][T25774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.891995][T25778] Bluetooth: hci4: command tx timeout [ 1814.963599][T25774] team0: Port device team_slave_0 added [ 1815.000427][T25774] team0: Port device team_slave_1 added [ 1815.182343][T25774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1815.195691][T25774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.251755][T25774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.306002][T25774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.322759][T25774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.380875][T25774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.631250][T25774] hsr_slave_0: entered promiscuous mode [ 1815.667048][T25774] hsr_slave_1: entered promiscuous mode [ 1815.701618][T25774] debugfs: 'hsr0' already exists in 'hsr' [ 1815.733100][T25774] Cannot create hsr debugfs directory [ 1816.231388][T25816] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1816.951288][T25825] Unable to find swap-space signature [ 1816.970567][T25778] Bluetooth: hci4: command tx timeout [ 1817.290088][T25774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1817.361935][T25774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1817.409093][T25774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1817.445600][T25774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1817.893067][T25774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.977219][T25774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.025671][T25588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.033070][T25588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.102662][T25588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.109852][T25588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.269228][T25774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1818.998269][T25774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.051500][T25778] Bluetooth: hci4: command tx timeout [ 1819.985483][T25774] veth0_vlan: entered promiscuous mode [ 1820.038866][T25774] veth1_vlan: entered promiscuous mode [ 1820.201851][T25774] veth0_macvtap: entered promiscuous mode [ 1820.237717][T25774] veth1_macvtap: entered promiscuous mode [ 1820.319627][T25774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1820.380560][T25774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1820.457437][T25588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.479112][T25588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.537018][T25588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.567627][T25588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.914866][T25894] netlink: 504 bytes leftover after parsing attributes in process `syz.1.4917'. [ 1820.950938][T25672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.979553][T25894] netlink: 350 bytes leftover after parsing attributes in process `syz.1.4917'. [ 1821.013411][T25672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.136537][T25778] Bluetooth: hci4: command tx timeout [ 1821.156789][T25588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.192257][T25588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.483606][T25900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4918'. [ 1821.560921][T25900] ipvlan1: entered promiscuous mode [ 1821.573123][T25900] ipvlan1: entered allmulticast mode [ 1821.970060][T25914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1822.139429][T25908] zswap: compressor not available [ 1823.492186][T25937] netlink: 'syz.1.4924': attribute type 1 has an invalid length. [ 1824.002824][T25946] NFSD: Failed to start, no listeners configured. [ 1825.389694][T25971] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 1825.490200][T25974] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 1826.998978][T26004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1829.210147][T26039] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1830.532763][T26063] random: crng reseeded on system resumption [ 1831.027964][T26069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4948'. [ 1832.912752][T26094] block nbd7: not configured, cannot reconfigure [ 1841.615113][T26228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1841.631631][T26228] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1841.669412][T26228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1841.748868][T26228] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1841.779336][T26228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1841.817019][T26228] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1841.878879][T26228] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1842.050812][T26229] usb usb37: usbfs: process 26229 (syz.0.4988) did not claim interface 0 before use [ 1842.349347][T26245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4983'. [ 1842.403117][T26245] ipvlan1: entered promiscuous mode [ 1842.420699][T26245] ipvlan1: entered allmulticast mode [ 1842.452874][T26245] veth0_vlan: entered allmulticast mode [ 1843.623725][T25778] Bluetooth: hci1: command 0x0c1a tx timeout [ 1843.710782][T25778] Bluetooth: hci2: command 0x0c1a tx timeout [ 1843.717937][T25584] Bluetooth: hci0: command 0x0c1a tx timeout [ 1843.784456][T25778] Bluetooth: hci4: command 0x0c1a tx timeout [ 1843.792245][T25584] Bluetooth: hci3: command 0x0c1a tx timeout [ 1844.590362][T26286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4993'. [ 1845.866204][T25778] Bluetooth: hci4: command 0x0c1a tx timeout [ 1847.267699][T26341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5001'. [ 1847.327464][T26341] openvswitch: HfR: Dropping previously announced user features [ 1847.408415][T26335] input: jJǸ-9%vJ86 as /devices/virtual/input/input36 [ 1847.946546][T25778] Bluetooth: hci4: command 0x0c1a tx timeout [ 1850.383599][T26375] Invalid ELF header magic: != ELF [ 1853.603658][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.618710][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.856138][T26510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1861.189015][T26521] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 1861.556517][T26536] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 1862.008789][T26543] openvswitch: netlink: IP tunnel dst address not specified [ 1862.352134][T26543] Invalid ELF header magic: != ELF [ 1862.488907][T26554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5051'. [ 1863.974845][T26585] netlink: 326 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1864.190712][T26585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.830429][T26628] random: crng reseeded on system resumption [ 1865.845441][T26629] netlink: 'syz.1.5058': attribute type 11 has an invalid length. [ 1866.032297][T25778] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1866.107853][T26633] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1868.572500][T26680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5070'. [ 1868.615318][T26680] netlink: 354 bytes leftover after parsing attributes in process `syz.1.5070'. [ 1868.662222][T26678] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1868.785729][T26678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1868.885796][T26678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1869.032170][T26678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1869.188216][T26678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1870.677189][T25778] Bluetooth: hci1: command 0x0c1a tx timeout [ 1870.838013][T25778] Bluetooth: hci0: command 0x0c1a tx timeout [ 1870.920926][T25584] Bluetooth: hci2: command 0x0c1a tx timeout [ 1871.077660][T25584] Bluetooth: hci3: command 0x0c1a tx timeout [ 1871.237553][T25584] Bluetooth: hci4: command 0x0c1a tx timeout [ 1871.748358][T26728] input: jJǸ-9%vJ86 as /devices/virtual/input/input38 [ 1873.931454][T26773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5082'. [ 1873.982442][T26773] ipvlan1: entered promiscuous mode [ 1873.987705][T26773] ipvlan1: entered allmulticast mode [ 1876.965935][T26840] random: crng reseeded on system resumption [ 1877.450757][T26849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1877.584079][T26843] hub 1-0:1.0: USB hub found [ 1877.656229][T26843] hub 1-0:1.0: 1 port detected [ 1878.236550][T26870] input: f as /devices/virtual/input/input39 [ 1878.827768][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5102'. [ 1879.225088][T26882] block nbd7: not configured, cannot reconfigure [ 1879.261006][T25587] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.863097][T26914] netlink: 186 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1880.367032][T26924] random: crng reseeded on system resumption [ 1880.650184][T26924] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 1880.773821][T26924] pci 0000:00:01.3: PCI INT A: no GSI [ 1882.567278][ T30] audit: type=1800 audit(4294968704.184:43): pid=26973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5119" name="nullb0" dev="tmpfs" ino=2547 res=0 errno=0 [ 1883.826708][T27001] zswap: compressor ^`#ߗ(2NAV1`Wnf\'J돆#If&ͦ5j)٥Kp$'\&9r y*paۄH,T{Kf_SQAW not available [ 1884.613285][T27014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1884.833416][T27021] can: request_module (can-proto-0) failed. [ 1886.726009][T27046] process 'syz.3.5136' launched './file0' with NULL argv: empty string added [ 1894.399574][T27146] block nbd8: shutting down sockets [ 1895.018246][T25778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1895.030847][T25778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1895.039112][T25778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1895.050223][T25778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1895.059899][T25778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1896.074341][T27166] chnl_net:caif_netlink_parms(): no params data found [ 1896.255045][T27166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.280140][T27166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.287564][T27166] bridge_slave_0: entered allmulticast mode [ 1896.310226][T27166] bridge_slave_0: entered promiscuous mode [ 1896.321710][T27166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.332380][T27166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.339716][T27166] bridge_slave_1: entered allmulticast mode [ 1896.371707][T27166] bridge_slave_1: entered promiscuous mode [ 1896.443697][T27166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1896.474043][T27166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1896.542024][T27166] team0: Port device team_slave_0 added [ 1896.563463][T27166] team0: Port device team_slave_1 added [ 1896.625659][T27166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1896.640394][T27166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.700459][T27166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1896.732119][T27166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1896.739093][T27166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.806840][T27166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1896.913463][T27166] hsr_slave_0: entered promiscuous mode [ 1896.931622][T27166] hsr_slave_1: entered promiscuous mode [ 1896.940768][T27166] debugfs: 'hsr0' already exists in 'hsr' [ 1896.946614][T27166] Cannot create hsr debugfs directory [ 1897.171955][T25584] Bluetooth: hci5: command tx timeout [ 1897.205720][T27166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1897.217733][T27166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1897.229396][T27166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1897.246455][T27166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1897.353973][T27166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1897.378976][T27166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.395862][T25580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.403054][T25580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1897.433818][T25580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.441037][T25580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.687432][T27166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1897.964821][T27166] veth0_vlan: entered promiscuous mode [ 1897.978460][T27166] veth1_vlan: entered promiscuous mode [ 1898.024499][T27166] veth0_macvtap: entered promiscuous mode [ 1898.038545][T27166] veth1_macvtap: entered promiscuous mode [ 1898.068749][T27166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1898.085077][T27166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.105401][T25587] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.138893][T25587] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.178122][T25587] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.218563][T25587] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.287376][T25587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.312351][T25587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1898.365969][T25588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.379594][T25588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1898.417839][T27166] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1898.574597][T27195] netlink: 186 bytes leftover after parsing attributes in process `syz.5.5162'. [ 1898.733452][T27198] Zero length message leads to an empty skb [ 1899.252409][T25584] Bluetooth: hci5: command tx timeout [ 1901.333315][T25584] Bluetooth: hci5: command tx timeout [ 1903.414692][T25584] Bluetooth: hci5: command tx timeout [ 1915.023990][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.032233][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1955.360958][ T31] INFO: task kworker/u8:9:24041 blocked for more than 143 seconds. [ 1955.368910][ T31] Tainted: G L syzkaller #0 [ 1955.385372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1955.394192][ T31] task:kworker/u8:9 state:D stack:25272 pid:24041 tgid:24041 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1955.410701][ T31] Workqueue: netns cleanup_net [ 1955.415533][ T31] Call Trace: [ 1955.422952][ T31] [ 1955.425934][ T31] __schedule+0xfee/0x6120 [ 1955.438937][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1955.449503][ T31] ? __pfx___schedule+0x10/0x10 [ 1955.454409][ T31] ? find_held_lock+0x2b/0x80 [ 1955.459104][ T31] ? schedule+0x2bf/0x390 [ 1955.475921][ T31] schedule+0xdd/0x390 [ 1955.485576][ T31] schedule_timeout+0x1b2/0x280 [ 1955.495982][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1955.504149][ T31] ? mark_held_locks+0x40/0x70 [ 1955.508988][ T31] __wait_for_common+0x2e7/0x4c0 [ 1955.528199][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1955.533798][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1955.545798][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1955.555845][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1955.567223][ T31] __flush_workqueue+0x3f7/0x1200 [ 1955.572434][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1955.577414][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1955.594118][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1955.606083][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 1955.617336][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1955.629092][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1955.637162][ T31] rds_tcp_listen_stop+0x104/0x160 [ 1955.648552][ T31] rds_tcp_exit_net+0xe0/0x870 [ 1955.653509][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1955.658927][ T31] ? __pfx___might_resched+0x10/0x10 [ 1955.674238][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1955.681203][ T31] ops_undo_list+0x2ee/0xab0 [ 1955.685857][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1955.704546][ T31] ? cleanup_net+0x332/0x920 [ 1955.709199][ T31] ? idr_destroy+0x62/0x2e0 [ 1955.716264][ T31] cleanup_net+0x499/0x920 [ 1955.729158][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1955.737320][ T31] ? rcu_is_watching+0x12/0xc0 [ 1955.748216][ T31] process_one_work+0xa23/0x19a0 [ 1955.762964][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1955.768419][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1955.783488][ T31] worker_thread+0x5ef/0xe50 [ 1955.788159][ T31] ? kthread+0x13a/0x450 [ 1955.799750][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1955.804927][ T31] kthread+0x370/0x450 [ 1955.809028][ T31] ? __pfx_kthread+0x10/0x10 [ 1955.834992][ T31] ret_from_fork+0x754/0xd80 [ 1955.842500][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1955.847690][ T31] ? rcu_is_watching+0x12/0xc0 [ 1955.853423][ T31] ? __switch_to+0x7b4/0x1120 [ 1955.858183][ T31] ? __pfx_kthread+0x10/0x10 [ 1955.863216][ T31] ret_from_fork_asm+0x1a/0x30 [ 1955.868046][ T31] [ 1955.871495][ T31] INFO: task syz.2.4853:25562 blocked for more than 143 seconds. [ 1955.879238][ T31] Tainted: G L syzkaller #0 [ 1955.887078][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1955.896650][ T31] task:syz.2.4853 state:D stack:27272 pid:25562 tgid:25561 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 1955.908901][ T31] Call Trace: [ 1955.912390][ T31] [ 1955.915339][ T31] __schedule+0xfee/0x6120 [ 1955.925084][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1955.931586][ T31] ? __pfx___schedule+0x10/0x10 [ 1955.936484][ T31] ? find_held_lock+0x2b/0x80 [ 1955.944354][ T31] ? schedule+0x2bf/0x390 [ 1955.948735][ T31] schedule+0xdd/0x390 [ 1955.953179][ T31] schedule_timeout+0x1b2/0x280 [ 1955.958068][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1955.964445][ T31] ? mark_held_locks+0x40/0x70 [ 1955.969250][ T31] __wait_for_common+0x2e7/0x4c0 [ 1955.974534][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1955.980343][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1955.985856][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1955.991375][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1955.997211][ T31] __flush_workqueue+0x3f7/0x1200 [ 1956.007604][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1956.013567][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 1956.018912][ T31] ? release_sock+0x21/0x220 [ 1956.024813][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1956.034951][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 1956.040537][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1956.046112][ T31] rds_tcp_listen_stop+0x104/0x160 [ 1956.054235][ T31] rds_tcp_exit_net+0xe0/0x870 [ 1956.059037][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1956.064744][ T31] ? __pfx___might_resched+0x10/0x10 [ 1956.070688][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1956.076086][ T31] ops_undo_list+0x2ee/0xab0 [ 1956.086287][ T31] ? kfree+0x1c0/0x6b0 [ 1956.090738][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1956.095890][ T31] ? ops_init+0x2fa/0x5f0 [ 1956.100606][ T31] setup_net+0x1fa/0x3a0 [ 1956.104896][ T31] ? __pfx_setup_net+0x10/0x10 [ 1956.110173][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 1956.115595][ T31] ? mutex_init_lockep+0x110/0x150 [ 1956.121068][ T31] copy_net_ns+0x46f/0x7c0 [ 1956.126475][ T31] create_new_namespaces+0x3ea/0xac0 [ 1956.132177][ T31] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1956.139170][ T31] ksys_unshare+0x473/0xad0 [ 1956.146983][ T31] ? kfree+0x2ec/0x6b0 [ 1956.151314][ T31] ? rcu_is_watching+0x12/0xc0 [ 1956.156374][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1956.165681][ T31] ? kcov_ioctl+0x16a/0x720 [ 1956.170555][ T31] __x64_sys_unshare+0x31/0x40 [ 1956.175461][ T31] do_syscall_64+0x106/0xf80 [ 1956.181010][ T31] ? clear_bhb_loop+0x40/0x90 [ 1956.185737][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.192200][ T31] RIP: 0033:0x7f5735b9c799 [ 1956.196744][ T31] RSP: 002b:00007f5736a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1956.205656][ T31] RAX: ffffffffffffffda RBX: 00007f5735e15fa0 RCX: 00007f5735b9c799 [ 1956.213949][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1956.222159][ T31] RBP: 00007f5735c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1956.231268][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1956.240948][ T31] R13: 00007f5735e16038 R14: 00007f5735e15fa0 R15: 00007ffcf122df98 [ 1956.248962][ T31] [ 1956.255362][ T31] [ 1956.255362][ T31] Showing all locks held in the system: [ 1956.264388][ T31] 1 lock held by khungtaskd/31: [ 1956.269266][ T31] #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1956.280946][ T31] 2 locks held by getty/20007: [ 1956.285968][ T31] #0: ffff888034a900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1956.297841][ T31] #1: ffffc900030e62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1956.308424][ T31] 3 locks held by kworker/u8:9/24041: [ 1956.314240][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1956.326182][ T31] #1: ffffc90003b27d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1956.337481][ T31] #2: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1956.348356][ T31] 1 lock held by syz.2.4853/25562: [ 1956.353768][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1956.366509][ T31] 1 lock held by syz.4.5106/26908: [ 1956.371871][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1956.381593][ T31] [ 1956.383935][ T31] ============================================= [ 1956.383935][ T31] [ 1956.394258][ T31] NMI backtrace for cpu 0 [ 1956.394278][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.394311][ T31] Tainted: [L]=SOFTLOCKUP [ 1956.394319][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1956.394334][ T31] Call Trace: [ 1956.394342][ T31] [ 1956.394351][ T31] dump_stack_lvl+0x100/0x190 [ 1956.394397][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1956.394437][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1956.394473][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1956.394505][ T31] sys_info+0x141/0x190 [ 1956.394529][ T31] watchdog+0xd25/0x1050 [ 1956.394560][ T31] ? __pfx_watchdog+0x10/0x10 [ 1956.394584][ T31] ? __kthread_parkme+0x18c/0x230 [ 1956.394615][ T31] ? kthread+0x13a/0x450 [ 1956.394644][ T31] ? __pfx_watchdog+0x10/0x10 [ 1956.394665][ T31] kthread+0x370/0x450 [ 1956.394695][ T31] ? __pfx_kthread+0x10/0x10 [ 1956.394728][ T31] ret_from_fork+0x754/0xd80 [ 1956.394764][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1956.394808][ T31] ? __switch_to+0x7b4/0x1120 [ 1956.394835][ T31] ? __pfx_kthread+0x10/0x10 [ 1956.394868][ T31] ret_from_fork_asm+0x1a/0x30 [ 1956.394907][ T31] [ 1956.530113][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1956.537114][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.547822][ T31] Tainted: [L]=SOFTLOCKUP [ 1956.552157][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1956.562222][ T31] Call Trace: [ 1956.565508][ T31] [ 1956.568446][ T31] dump_stack_lvl+0x100/0x190 [ 1956.573150][ T31] vpanic+0x552/0x970 [ 1956.577197][ T31] ? __pfx_vpanic+0x10/0x10 [ 1956.581723][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1956.587901][ T31] panic+0xd1/0xe0 [ 1956.591636][ T31] ? __pfx_panic+0x10/0x10 [ 1956.596090][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1956.602265][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1956.608436][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1956.614601][ T31] ? watchdog.cold+0x198/0x1ca [ 1956.619379][ T31] ? watchdog+0xd35/0x1050 [ 1956.623893][ T31] watchdog.cold+0x1a9/0x1ca [ 1956.628506][ T31] ? __pfx_watchdog+0x10/0x10 [ 1956.633199][ T31] ? __kthread_parkme+0x18c/0x230 [ 1956.638247][ T31] ? kthread+0x13a/0x450 [ 1956.642513][ T31] ? __pfx_watchdog+0x10/0x10 [ 1956.647223][ T31] kthread+0x370/0x450 [ 1956.651318][ T31] ? __pfx_kthread+0x10/0x10 [ 1956.655945][ T31] ret_from_fork+0x754/0xd80 [ 1956.660569][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1956.665728][ T31] ? __switch_to+0x7b4/0x1120 [ 1956.670430][ T31] ? __pfx_kthread+0x10/0x10 [ 1956.675132][ T31] ret_from_fork_asm+0x1a/0x30 [ 1956.679928][ T31] [ 1956.683028][ T31] Kernel Offset: disabled [ 1956.687365][ T31] Rebooting in 86400 seconds..