last executing test programs: 46.218562091s ago: executing program 0 (id=2793): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/9/chip_name\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/48, 0x30) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x8, 0x4000000000db, 0x12, 0x400, 0x8001) setsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x4, 0x40, &(0x7f0000000480)='/Eev\n\x0e\xcf^+\xf3\xc4Y\x84\xf4\xe4\x98/audio1\x00VI\xa3\xaa\xb1;\x9d\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9abN\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953\x01\x9f.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4re\x90\xc0\xbf\xcem\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\x12w\xd7\x99\x8c\xbe\x8f\x1dI\xe2\xae8\x83\xcf\xc5D\xcc\x00', 0x4) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001bc0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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"], 0x2bc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000080) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) mmap$auto(0x0, 0x80000001, 0x7, 0x17, r2, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x0, 0x0) r3 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000200)={{@raw=0x4, 0x0, 0x1000004, 0x480808, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @inferred=0xffffffffffffffff}, 0x2, 0xc, 0x4, @inferred, @reserved="196c056a347704def6f5c5636ed52c07609cee4319588cd9a11ad396065c1267314ab73ce54c205a43297cf5b6310383212fdbb93e51da48edd9350aa935db0d5d6e32e39d8f68ee55f32c5de7b40a4ceb3840920880cbb9fc246ea65af96a74482a52e660cfc6828ba8c9404d70b947a06c9927ba7f1beed137c48265c74c8d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000180)="ae3486e00c85035cfc41a8b5", 0xffff, 0x0, 0xff, &(0x7f0000000340)="3b211a07009f1827acabe4dc1c898c108dfa9aeda8ea46274bab8838623fe29a8f4147c197ac95df838d74c9de6d1064", 0x5, 0xe}, 0x9}, 0x0, 0x100) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/caches\x00', 0x102, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x8000000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001d, 0x7, 0x806d3e, 0x9, 0x2, 0x6]}, 0x0) unshare$auto(0x40000080) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x80) 44.070038821s ago: executing program 0 (id=2802): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x0, 0x0) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a801, 0x0) pwrite64$auto(r0, 0x0, 0x7b05, 0x1800) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/input/mouse0\x00', 0x88082, 0x0) poll$auto(&(0x7f0000000100)={r1, 0x1, 0xff}, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fbdbdf250200006714000180100001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/net/teql0/statistics/rx_compressed\x00', 0xc2700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/4096, 0x1000) 43.642705313s ago: executing program 0 (id=2803): mmap$auto(0x6, 0xe456, 0x0, 0xebe, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x11e, 0x20, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) r3 = socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) eventfd$auto(0x8e) mlock$auto(0xfbe8, 0x4) r4 = socket(0x10, 0x2, 0xf) r5 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r4, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r5, 0x98}, 0xa8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000080), r2) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xfffffff9}]}, 0x24}}, 0x14000) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r7, 0x0, 0x80000000) socket(0xa, 0x801, 0x84) 42.510193282s ago: executing program 0 (id=2807): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f44, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b50505392eb6f5257ddfb9c39e676195716e9e2fded4b583cb24290f32039d9a6e4f88938774eabce6cffc9540b362291fdf8eab3b94bf5805723268a3262b200cb8dbf7db2e60d11e081b9b533987f0301771467cc77c4266ebbafdc89e0183af72930ddd6d9984315d28973cc5"], 0x14}, 0x1, 0xffff0000}, 0x84) 42.240534824s ago: executing program 0 (id=2808): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x0, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000de, 0x40eb1, r0, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime$auto(0xd289, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x1, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3fe, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x5, 0x90, 0xfffffff5}) munmap$auto(0x20000000008000, 0xfffff7ff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0xd, 0x0) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x9b2, 0x1}, 0x2, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) tkill$auto(0x1, 0x7) 40.649584194s ago: executing program 0 (id=2814): mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 40.366674286s ago: executing program 32 (id=2814): mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 6.798255461s ago: executing program 4 (id=2956): r0 = socket(0x25, 0x3, 0xefa) mmap$auto(0x4000000000000, 0x2020009, 0x3, 0xe7f, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0xf, 0x400000000000006, 0xeb1, 0xffffffffffffffff, 0x10000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) madvise$auto(0x0, 0x2000040080000003, 0xe) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/numa_maps\x00', 0x210400, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x408, 0x8000) socket(0xa, 0x5, 0x0) r2 = socketpair$auto(0xffffffff, 0x5, 0xf0000000, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000100)=0x10001) setsockopt$auto(0x3, 0x0, 0x1b, 0x0, 0x401) socket(0x2, 0x3, 0xa) mmap$auto(0x1, 0x20009, 0x2df, 0xeb1, r0, 0x8000) r3 = pipe2$auto(0x0, 0x5) socket(0x2a, 0x0, 0x1) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_rfkill_fops_core(r3, &(0x7f0000000540)="6c0adb1616e91c6a969b65a746dff695ee6cef328fd3b2c9af2bcd283ccf4334d7752543993d6040d7debc17e21778cd35dcddacf006ec13470cd31164bb91505cfcc17a7a31633ebdab704a7cbc27a7ebfa4f9c6d42a409a86278059afa048aa2b7fc6a5873cab6da55c9a1bdd9fccba36f0ebe41397f5cc5a004ef9cb5deb926b7930d21604e637c29d9e237ad06161379fd3cb578c56354ab075b26017d818aaeb963d25877b12ae5182fbc6be09546c6553a156a9a51e45049c4c4ee5bef2686878be579932c7b90a70e8f714782e3ebdc8ec972bba36e92d1df7d6b865c384cce9cffbba28eae3adaf61548d725092af206c5b543b1563c21524bd565f64a7c46d02c8bec17315cecdc3d8785ff6999039afe281c841c3649fa586a0126e58fcaf4eca79cbe432d451fc48a033b6db924e1f4a215aa765e22113e6fa214b3f8ff8ec5ae1237a165aee90a0b5f5f7507e53ac174b815c75d0fc88f908db22dd89b8b2ee6ad682384500ea25f4f0f83826409261bf945c07ae809006fe85846431495aabaadd1bbac46bce8641d15e573f4f25ecdc01176e8f9a992780126dc4c18d3e15a3db31a8baad35edfe82cd8ab17c58ac4211de2c358818da5f359c73f77c78c60251ad1bb0cfed2c86ee3043162e51033d6970d0245720d49a4b134b88827ee3f0a38c353c8ba06d2fd1f31101d2ee4cf90e5c1694f87a6d5d072b331144e11efe11ca8444cad0f7c1379a9b6795d45ae15b075021106c08e35ee8031dd66a215df2dd545c0e03bb6cb0642609787ebd4beaf992844cbf0b6cf8aba50f64617fddf01c7378e5abba1613fca8d515b1266350c978ea35fd8ad05cb69511efb24dede4fb12c0455a785257c1f1c0b2b5ee0af5c93f0ac8cdde6932685a9c6fe47865bd1237c92ca20793c1e3423ef049b97cef5de8ebdab777ab57a12a6ed6f24c10b7ebce7327666ba1fec202be885168564e616939045ce62698be3d4167039557afb72ab65165b8a7096c9d6feb9010bbcebbbd6aaa9b3b081949a973e84455e9652c1e7e47d1f135fb82a31f53ea0b3a35fe4cbaeefbb845488ceea73ef865c81bacad9980cf3876a1738086b2ab9ac40c56cf208119c6b6b39ff31425ed6d9db90401d11a077071018d95dc0a6d85db94dc0a6243d4cc113035211fc96428d636ce9731f5913c7dcd8b5ad56bcfc5aaf353ee98ada302197abbc115d7de6fe7e6769846ae0e75dac6f656deb1d244062fa85fb265cc0a9ac0b0cea11f7d2fb9ff38ad9107117e12101dfaa8bbaa05c30d130468ed039c38df01734b2b4b2aecf6f5a8c77c8b6d6d92a82f8e1afe3dcd7d3dbccb0c207f46c4dc5bcb7176cc3ed876a66a132a41d72ed0d48dd3c8b329a3b765bb5658544e2b7d9dd6ba973aedd77970192930ed1c667088f899d51066f0d3bbb9177f521393c044305d699dd67bdea8f9e0ccea3b02c33e6affeb4a879647e235b25b1e6e03256afd0f78bdec7128078f1dbd90a4e6f6b61165291ad71e993868f1eea1cb844d16284aee5e3957ca089602b1049e14414703fe066d37325d639fbc52fe4398f0ac9fc68acdd7757798b969a56439b4162356fa32bfbaff46a7a8b2b6f1c4c2ca142d38d32036e374045db62138bafef6ba371fccc90ab381ccea50027e76bdc51d6f1a2b87f5ef809bea14a729b02587d688fc51be8ba66fdfdec4f75bca2437ba0f3068dc22b88ffe02258482d708b69d1e715f71c20817717f37f193843f896d44625c2e604beb80826d6dec26217dbc9e1074041a4bc0655ad0a0dc34cd90df6fead5f5c842cf46e31f731150e5967edc81b5bfdc47d507ad46c6f382e94004956e8532fa4eb10e339b6af227ca9085569d10348c982e82b22a48c5b9fe906aae55cb0270032d07703af3249d4e376c6a1246188437a484e781baf64d2b02e8760c63ce78d3dfe6e45ee4c99fb729776f4b514eca2e34a829c3205c27d9b72a494457c068cf0117b1b02328035268961e8aceaec502ede64832723278f02006839b4892ffd95ab3b28b8c804bf218aa892edfd67b59de19498d16b0946be6adbe575c3995024eb68ded4ad222b08b067be1747f0bdb083263de201f4387c767ac8ba11960faa5a88880a603a3922a2218fe682f3b8340546d9609a6bb37a4b8d7e94b50fb1fe497d1d63e0e7eeced1efa5e28a362f60f8a53039eb9d62d3151e0435df48842ee4f2ad7889e1253cddde85e11bee6a1b47c548bffa92d9568674fedc80e1c061847bbe307652c2a7789047376220343bed61eef9d06b86d9267b9d3a02c8462d09e65b47bf60900596de85146eb64b0c615a94f6d52ccc5222686d7f94dcff235c3b5d763c5431e8fc89f725f3eeef1f76a19a051febc507890e0fce908069f0b83e8f9371056ba3733f49a087fc54d3cea701579d0293caea86103eca74bf2f28772eef15064aa8f4d97e1171728eba9f76934ef0fa4fcc4a84f5f11bb527fdf65e88506eb1e3a420e776944bbcce2c79ff88b0f2cc178bf994c44766e0ecc2f2a6904bfb9dc431e2da52997c7076aefc35cd9320832b6a6fc5f633a5b5be2f401afd78665c29cca5fd34fc51ffc9fc45d772c6b0ccdabc10230348c81fad22236d9c26815da9b420687c3e1e259dc6b63185ccf3c22cd09d773da794e64d29a91f58200edec5eec6ef96f837c64696a8de52ca80eef4914fecc6d94313a25bef9a10441952d6d4a78b3a71c75d5ee84e7ee0e9d2db3d3893e2e5a84df320c0977a50cc4ff4ce3bce2a337157d3fbb13f315a3ff743b59a2ad3058688153a534213964ef199742b40df3b252b6d5709b1c5a934b192a2bd4d881ffb18fe639f36ba79c5ce2620d82d3330e0dd6be405627986ac77fdb4e40d599b00c448517a68a2b850b4b1eda1338b81c1ae1b7ecd568b78fc54415c2e0cc8501633cd946216db097bb54b8cdcd12ddd3d23626642557dfdff6d9ed99f466db7459261aa2484cee2d201eaef7ddd9f0a863c8153b268fccd379235d8f4429efc314ecf24e643d49466b4e291fec04259c7ddc44745cfda5844be71b2db0ccb247541bcf52a895656dcaca52bd16fd5cee1c8ae2ee921375a0bd6f3a85d49a568bb5287bfe2630dae563c9482b6c9db1947c8822e0e2186732037d5cdf4b76b65363a9d0104989a791a9f88494c78b0e8743cd3219cadd60a6b7bbdeb9693ad5ecf012b91b4440f3be588e37b9e4644ae12e9081dd941d0c099b1932da9e73d02c060475b9c44f20df7b1e3a0272356fa23fd191c1f2269f95553487bd82744ca4c356d4aa645857a8d039fea50078bdac289c18734d8a92afa750418d660c71ef8f34a605ca0dece6bb15143f987bd020302618d24240d7fd49f1875e811a1e7716628444659f948c8d45766bacf943779a2c57e201c1168b4eadf4c01c3b675fe7d9cf38760cc53bea0e73e57d941c775750ab93b01fb1d07a987613cf5731e970175d05157be5edc6980a8c9c5c5e486e0ef4d7513e8daa2196965202d0682ae2e16abd82d7aa682fefdc394e34e639cfd8034a9e2eb65f909941a99393e8a2b87df2f1137be1b23bd51929321ce1f262d6013e03224f90ec1c61c0e812bedfb050ac8b553919c108d7fcffbd41bae59935bf99bce9f31053b677dcbfb29dd8238386d5e33b8b8eaefc773bcb7636af6ba8d76fc6beeb92c20a55d37d92787f2c0ec61beee526ff82095dd460a90a7fc63d750c3d6268a46686635505323bec74b54dcf5c6dc5e33868db9a8749363958ce4f59ad1d2f59d0a3085728320ab6b46372794fc268c1e0076bb1e2ea1f39961e3de49055eccc15d798785c590875ad6202f3e0ae4ce1ef198043fdb00f95a195428394e24f5f1114174ea67c2f7335604d6914aa84e8f84ab67256386ce6072755c7ab386be64f4b1d9d05f08c4a459f2aabe0039c7129e3465896e082052d9b5c8514891caf21666aedb39898971aeec4276eee17b35a3447ce5ea9b72b67e3419ea3bc6b1d4e65b7487663951e8f79460913647b9d08d84b3f57ce39d1a565ad41a353d2333a8da5d076916336c214b41bb0ba7d4420f9b43a37c873971fbdec5a28eafeb208c4e3fc5830d510843bf7495b5e31e3c29098d59a74d46bbe06874fe5fbf32b17c0265e1ec3fdf9803d78b3b204c60f83cf4808dfe5de2342cce6b003e26200122184d1ce54d99e7e3c2407f28d3c97e12a1720f42c89489bb6444534b89b86e37678116e1c27260825d9a823397edc94877fc447f9f3c99f8d425f2a2b25d386ed0ac2adcd9854cfc65fdbc4707455f4c3208b212277d3aaf122eacb91e41709900705bfd8c9f21c8aa071f0fa76d3472bf2f74a01e106961fc62565fc884959e0864aaec6c49a1cc290d4765e249b0d1aaef58d6cad64e682b3e437c9b40c364a81dec34060f25f9856b0bd95061e1853a6e7fd5893d61cc352b74e004b596082caac5ce69833f7cc49319332bbf79a05c4914e03167e5643d5b4234e6e859a3a7d5888285cf7ff34ec7a7b718aa2178efbe1d4457359a2579d3f72ad979809d992c59b58550a3208d8d5a53ad1f4197005e57ad8c49fdbe348516a6b21932e448f2c532018fdfde985a0a30aabd3efbf00ff6a94458fe4578f76c552834f7f9ceea80652a0a83d11f6921182fd05daf2aefdbcbd072e62fdaaf031b14c8a2d8d4b7cd439981545ade503890883c33099e3f4c5cf7e7b875f1e4564405997e76e7a997369751666e378dacfeae570841062dc730bbccbb1728a4c0cd23463d61ab7a4f609a6f304113e93f7d44addef7ca318cf55459e8dbc2d7b49ca44378473316a8095efaeb4e0fac1a565c3a58da85119560411f017495aecee0e5ffa5d415e4b04e31195e79c4ce9189eeb776dd579d516b20a025dac869fce5db4b53fcd6f6283478c357e56735df9eff1c891ce13da9e1eff64b81e6301c0a3eceac8fd6c6e264fe958dbd33ca3afac4ee433c71a19a1378bc70485297baca625b394061d2fc3589dd5bd6d0b318b9b52071ec7a5ce8dd485f37513c20a7483830f376fc46d42865b756a97059d7d6e492db444be3fa96d7233db89e329cc149f6749a8bb4200fce576a15107417ed31cee2f6722b29377231493b9329305e5be7c6d9ed310aa0b607c92114e5ecc71283936f6a5d8c76ded41f436fbfa35dbfb547df68262f1994762293e2e2e75c09d8b53777a8b6c619c85ce7b0650be2daf2d9613e2ffd01aae3eb2b81dc13b02996d150c36dba7b2580828ab8084b2ccab11c1efb44d1587b459aab45d3424d46bcd08e6b56ccb171d98f8c11db15e4549524b5c7a60c13642e720f14ff6447cab76f09d9eaa613cce3f9ca1876ff21e31d92ea11fa241fe2f8b0be0ffa4fd27584d428fe7e16536b2302d5aac7def23335be0b19d3116e2eeb7fc5df977355687ac7f3d553f4617162768a2e87008af0177623361115fb25b701d612a962467e87f165aa815d6567cd9de30d7dc93f2229c8b0e0f3915442f60269a4b541602fb896f1c9c8fcda129d37a3d017000190b55b672638a026f8322ffe94a8502b9af2bee51eb48326004dec13773926ecf5884e9ce00ede4d17803793755d63ba3ae333df8f0660b8ce65fa14d042aa37f766f87cca13cd55ea55c19574f8868fdaa9a9e750873926b264205c82fa6fe690be0404a4135f2bac5d279e382b32721ead6fa9c65c074e3265a208bee3df49476f8c84ed8a39d82d2a5dbe99a900edd959fbea87636644c008d278270bdf2a1dc881ab1f26b3", 0x1000) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) setsockopt$auto(r1, 0x3, 0x40, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 4.752595402s ago: executing program 2 (id=2961): mmap$auto(0x5ced, 0x8001, 0x4200000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(0x3, 0x5424, 0x10000000000402) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x8802, 0x0) write$auto(r1, &(0x7f0000000140)='\x91[', 0x6) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setreuid$auto(0x15, 0x5) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x9}, @GTPA_LINK={0x8, 0x1, 0xffffffff}, @GTPA_TID={0xc, 0x3, 0x7}, @GTPA_VERSION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4048040) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 4.661791408s ago: executing program 3 (id=2962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r2 = pipe$auto(&(0x7f0000000040)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x120, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setresuid$auto(0x0, 0x7, 0x8080) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto_RTC_UIE_ON(r2, 0x7003, 0x0) 4.144962884s ago: executing program 2 (id=2963): socket(0x2, 0x801, 0x106) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1cd602, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000) pwritev2$auto(r0, 0x0, 0x1, 0x2, 0x4, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX2(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)="3c6cf14bf72084d718") 4.068733966s ago: executing program 2 (id=2966): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x40000007) unshare$auto(0x40000080) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) epoll_ctl$auto(0x5, 0x3, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) connect$auto(r0, &(0x7f0000000080)=@can={0x1d, r3}, 0x0) 4.025044898s ago: executing program 3 (id=2967): ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc058560f, r1) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socket(0xa, 0x1, 0x100) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x2301, 0x0) r2 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r2, 0x209, 0xa, r2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000c80)="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", 0x159) socket(0x1b, 0x3, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 4.021357272s ago: executing program 4 (id=2968): r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = socket(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={"56e9afa68c0e483b03813d5d3bf57e42ad68145830f191e787e964ff10d0b996", 0x643, 0x9, 0x5, 0x6705cd82, 0x7, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x0}) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netpci0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r3}, @OVS_DP_ATTR_NAME={0x9, 0x1, '[[)/\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r7}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) socket(0x18, 0x5, 0x1) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socket(0xa, 0x1, 0x100) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1fc, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x1000000000003, 0x3, 0x62, 0x80000001, 0x3, 0x3, 0x9, 0x1]}, 0x0) 3.910013895s ago: executing program 1 (id=2969): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x8080, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1ff, 0x1, 0x80000000948b, 0x3, 0xa, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0xb, 0x6d3c, 0x7, 0x7, 0x104af46a]}, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1ff, 0x1, 0x80000000948b, 0x3, 0xa, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0xb, 0x6d3c, 0x7, 0x7, 0x104af46a]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x2e, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x3, 0xd, 0x1, 0x948b, 0x3ff, 0x15f49a0a, 0x41000000003, 0x9, 0x62, 0x8000101b, 0x7, 0x6d3e, 0x9, 0x2, 0x200]}, 0x0) (async) select$auto(0x2e, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x3, 0xd, 0x1, 0x948b, 0x3ff, 0x15f49a0a, 0x41000000003, 0x9, 0x62, 0x8000101b, 0x7, 0x6d3e, 0x9, 0x2, 0x200]}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x771341, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x82) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x82) mmap$auto(0x0, 0x810004, 0x4, 0x8000000008011, 0x3, 0x81000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4b, r2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe0, 0x9910, 0x2, 0x4) getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) (async) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) 3.377615193s ago: executing program 1 (id=2970): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) pipe$auto(0x0) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x109102, 0x0) fdatasync$auto(0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) acct$auto(&(0x7f0000000140)='/dev/ptmx\x00') mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r1, 0x0, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000880)={{0x1, 0xee00, 0xee01, 0x6, 0x69, 0x0, 0xb34}, 0xf145, 0x5, 0xd45, 0x0, @inferred, @inferred, 0x6, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram15\x00', 0x15fe02, 0x0) mlockall$auto(0x5) mmap$auto(0x80000000000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) 3.291194625s ago: executing program 3 (id=2971): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r2, 0x0, 0x0) connect$auto(0x3, 0x0, 0x9) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) bind$auto(r5, &(0x7f0000000040)=@generic={0x26, "3e3284c31ab939b1082f015635ba"}, 0xfffffffb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20001, 0x0) 3.033917852s ago: executing program 2 (id=2972): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3c, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x1, 0x106) r2 = accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) mmap$auto(0x1, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x5, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x3, 0x8) r3 = epoll_create$auto(0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r4, 0x0) r5 = bpf$auto(0x2000, &(0x7f00000001c0)=@info={r2, 0x0, 0x7}, 0x6f6) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r4, 0x0) epoll_wait$auto(r3, 0x0, 0xe007, 0x1) r6 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a801, 0x0) pwrite64$auto(r6, &(0x7f0000000040)='/dev/vcsa\x00', 0x7b05, 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x11, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa24511691d42a9", 0x1000}, 0x3) close_range$auto(r5, r6, 0x0) 2.48421282s ago: executing program 1 (id=2973): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r1, 0x1, 0x2, 0x6653) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) msync$auto(0x7fffffff, 0x80, 0x800) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x0, 0x7, 0x8ec5) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x800, 0x9) mmap$auto(0x3, 0x2020009, 0x8, 0xe72, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) 2.48252077s ago: executing program 4 (id=2981): r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = socket(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)={0x85c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_PMK={0x13, 0xfe, "4705b9b7229c9f1e755b85963d06d0"}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_FRAME={0x81c, 0x33, "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"}]}, 0x85c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) socket(0x18, 0x5, 0x1) r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socket(0xa, 0x1, 0x100) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000000400)={0x4, 0x8, 0xe382, @raw=[0xe6, 0xfffff801, 0x0, 0xa1, 0x200, 0x800, 0x0, 0xfffffff6, 0x9, 0x6, 0xfffffff7, 0xfffffff9, 0xf, 0x5, 0x40, 0x8000]}) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000480), r0) sendmsg$auto_IEEE802154_START_REQ(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "6d64b708cf48c27cdff90a0e9531c2501ab71b59ea1e8115f7484efdbf6046f5"}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40850}, 0x20044880) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000140)="3290e2405714c2aa2516c53615939701a5757f927db38f60ff734b16d9a1e0047fb31ad3894b543569234cc0968f5fbc356fbd", 0x3e) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event2\x00', 0x40402, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x80, 0x2bb, 0xffeffffe, 0x7, 0x1ffd, 0x203, 0x0, 0x8, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffefffffe, 0x0, 0x20000000000007, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x7, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x109, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x5, 0x40000d) write$auto(r5, &(0x7f0000000040)='/dev/input/event1\x00', 0x4000000000010001) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1fc, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x1000000000003, 0x3, 0x62, 0x80000001, 0x3, 0x3, 0x9, 0x1]}, 0x0) 2.117743669s ago: executing program 3 (id=2974): mkdir$auto(0x0, 0x8001) mount$auto(0x0, 0x0, &(0x7f0000000440)='Kfw\xed\xe0\xc9C\xaa8\v\xaf\xc2\x1a\x00\x00\x00\x00\x00\x00\x00\xee6L\xf9\xc1\xf8\x0e\xb6\xf9\"\x17\x81f\x919\xd9\xdc\xe72\t|Z\xda\x17*Ui!&QCu\xd2\x04\xa7\t\x91\xfec\x1e\xe1\x8b\x83\x1f\xcc\xe2#\xb2\x86\xa7\x81x\xea>4\x12(\x95\xe5l$\xf6\'\x90*\x87\x1a9\x9f\x81\xc7\x1d\xcb\x882Y\xe8\xed<\xbc\xc8\xdd\x8a\xbc\xedv\xeb\x91\xc9x\xf1}\x85|Rf\xf3 \xb3s\xfe\xb4\xdc\n\xa8O\xf0\x80\x9bR\x8ca8\x02!:\xf0\xbb\xab\x18\xc7\xecGNt\xe2\xd3t\r\x11\xa4\xa0\xe9\xf0\xdb\xcb\xfa\x1a7\xdb{\xd2\x9a\x82\xc8Z\x1c\xbc\xda\xb5l\x9aBN\xd3\xcd\xa3K\xa9L\x0f\xa3*\xd1\x87\xa55\xd5\xf3\x96\xa0(\x16\xef\xd4i\xf9\xce\xdb,\xd8\xc0\xceL\xb5\xe1\x95\x9f \x81\xd81\x9f\xd7uQ\xfd\x00\x00\x00\x00\x00', 0x7, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/total_ps_buffered\x00', 0x141482, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x10000, 0x0, 0x0, 0x0, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r1, 0x2, r3, 0x0) write$auto(r2, &(0x7f00000001c0)='/\x02\xf1\xff\x00\x00\xac\x1bq\x05V\x00\x00\x00\x00\x00\x00', 0x100000a3d9) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/swaps\x00', 0x40000, 0x0) pread64$auto(r4, 0x0, 0x7, 0x100007) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x80) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) socket(0x11, 0xa, 0x300) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) r6 = gettid() process_vm_writev$auto(r6, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x400, 0x0) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000140)='/7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10B\x1f\x8b\xcaD\x94iE\xdbF\x8d\xd7\x92\xb6\x848\x16/\xf1%:\'\xf6\\\x7f62J\xa8kO\xb4\"g\xf2\xab\xe4h\x00\x95\xe9\xc3m\xae\xcaq\x10\x10d\x1b\x16j\x01\xaatP\xff\xa7', &(0x7f0000000540)={0xec, 0x200, "36e5114e27380a1b3fc3650cefb0bc1dc5cfd96689f55ffccbfb31c830e1f5400c400e3397c12dc12d5a1806ca963f53b630038663c9141d5a2c89e48389a2d30c1e0d349b7a79312eeb8c68fd06a25a8a1ab9ea811a1ea9ba62b23c55ccbdeec1f9ca83fa16e2f28758e7836016d47bf314daf0338ed87e383bc8ab568308ced0e8183fb20ce0d1b33a1615fd2d60899be8cdc5c704993101756598da7919f85679c72eafaf3b12247b933bf6d69f673d4b1f6d2c72d20dc364cbbde1233b2abb3c04e64ac54aa7d32b89dfbb68e45f8536f8382afc0420a86e49e14add34a25523e6b7afbd816bac74d0fa"}, 0x0, 0x2) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x5ac, &(0x7f00000000c0)={&(0x7f0000000240)="6c0c5833b1dcff", 0xfa7}, 0x1, 0x0, 0x4, 0xc}, 0x5}, 0xbd, 0xb) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) 1.922701976s ago: executing program 2 (id=2975): r0 = bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0xa, 0x400004, 0x4, 0x9b75, r0, 0x7ffd) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000500)="356b277d84915fd3349f4980132e24598f57206627bab5af71f905c72a02b2cea5013f4eb8f4a109a107390718b3666cbdbafdd482ed0fddae9ddee804607e61ec7d9ac9f00eb9c248f1c6009e8feaeb7ee82150bd23c826f9ac8c198c62a3331c61711dc8e3972cf262fe0d98c0889de566d224fde60fb059d69b49ee860854135cf9d958860bc289145152e588a8e8ba8aae5a7491bb43d89c129e13c8cfe125d08efb431e7e8aed90abfc4183307cdd1ead5f014ad7933709804803f705d992c42f59fe4667de9e92d2ee1114a6f36d58d8fadfaddce6777cc3e8990b88f6ba9fb146437dd25a69a9f38e834b7f09735dbf3a") connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r2 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x1d7) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="c00000003cf5c1ad8d053e4a8fa3193d04e4e4bf2547bc", @ANYRES16=r3, @ANYBLOB="00022abd7000ffdbdf255f0000006800c8002cc63c58a5b98fa7d6eca4e325a871c9238b1227015c8ff1128759b6240baa3220e665cce23cabccaec79442d2d13f81ea41d5fa902b641033041ec5fe134ff839900c46bbb2b2611ed8b1e82058680778641f42bde1b309108bbf7bc04afefe8c58df5708000b01ffffffff050020010e00000008000d00060000001c001b8004000300040002000400030005000100080000000400030004006c000600f7000706000004004100"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0xc804) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x400280, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000000001, 0x2000007, 0xd, 0xfffffffffffffffd, 0x948b, 0xff, 0x15f4da07, 0x3, 0xa21, 0x6, 0x80000022, 0x1000, 0x6d3b, 0x9, 0x2000000002, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0xb, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x1, 0x42ff, 0x2, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x7, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@phonet={0x23, 0x3, 0xfd, 0x4}, 0x6a) 1.457047811s ago: executing program 4 (id=2976): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x16, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fcntl$auto_F_CREATED_QUERY(r0, 0x404, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x4, 0xfffffffffffffe, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) readv$auto(0x3, 0x0, 0x10) 1.207572359s ago: executing program 3 (id=2977): socket(0xa, 0x5, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video43\x00', 0x169000, 0x0) ioctl$auto(r0, 0xc0905664, r0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010040000000ffdbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket(0x10, 0x2, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) (async) r1 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) (async) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) r2 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x5, 0x80000001) ioctl$auto_FS_IOC_ENABLE_VERITY3(r2, 0x40806685, 0x0) (async) ioctl$auto_FS_IOC_ENABLE_VERITY3(r2, 0x40806685, 0x0) getsockopt$auto_SO_PEEK_OFF(r1, 0x8, 0x2a, &(0x7f0000000040)='/sys\xbd\xf8/kern\x05\x00\x00\x00ebug/netdevsim\'netd\x04vsim2/healt9\xec.|\xa7\x84\xc5%\xb1\x88\x1c,\xf6', &(0x7f00000001c0)=0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x1400, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x28, 0x9, 0x44f, 0x7, 0x7fffffff, 0x1007181, 0xdde, 0x7, 0x6, 0x7ff, 0x89, 0x26, 0x2, 0x80200000000001, 0x384, 0xfffffffff7fffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x62000, 0x9, 0x80000000, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5ca, 0x0, 0x80000000, 0x2, 0x1, 0x0, 0x200000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x9, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) sendmsg$auto_NL80211_CMD_GET_WIPHY(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r7 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) (async) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000040)=0x8) 778.774918ms ago: executing program 2 (id=2978): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x8, 0x8000000008011, 0x3, 0xd) r0 = ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$auto_SCSI_IOCTL_SYNC(r0, 0x4, &(0x7f0000000040)="12d0e1e2ec00edbf2a935ae20b55e7f7b3ac2d7d90411d1a28831ad022315fc4d26c7603651f0b5a7d2be30aae234e73deb75e0fd6a06539c6b656456be8") r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/xfs/xqm\x00', 0x0, 0x0) read$auto(r1, &(0x7f0000000000)='/proc/driver/rtc\x00', 0x6) write$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) r4 = socket(0x9, 0x1, 0x8e75) getsockopt$auto(r4, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x83) 546.157965ms ago: executing program 3 (id=2979): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x2001, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x6}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xb, @raw=0xe26, @raw=0xffffffff}) r2 = prctl$auto(0x3c, 0xfffffffffffffffd, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x109c02, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card1/pcm0p/sub0/sw_params\x00', 0x2800, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x82d) write$auto(r4, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x1, 0x2a, 0x7fffeffffffff780, 0x80020009b73, r4, 0x8) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r2) getpgrp(0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x800) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x859, &(0x7f00000002c0)={0x5a, 0x1, 0x4, @raw=0xedbd}}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) 467.104908ms ago: executing program 1 (id=2980): ppoll$auto(0x0, 0x4, 0x0, 0x0, 0x8) r0 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) close_range$auto(0x2, 0x8, 0x0) r2 = setfsgid$auto(0xee01) setresgid$auto(r2, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000010c0)='\x00', &(0x7f0000001100), r2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) 257.220004ms ago: executing program 1 (id=2982): prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x6, 0xffffffffffffffff, 0x6, 0x7) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x9, 0x3ff, 0x5, 0x7) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7f, 0x2, 0x23, 0x3ff) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x80000001, 0x1, 0x8000000000000000, 0x32f) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x8, 0x86, 0x43, 0x401) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1, 0xfffffffffffffff8, 0x380000000000000, 0x3) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x8, 0x6, 0x1, 0x7) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xa, 0x0, 0x40, 0x200) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xfe, 0xfffffffffffffff6, 0x5419, 0xffffffffffffff01) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2, 0x1, 0x5, 0x0) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x81, 0x2, 0x9, 0x4) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4, 0x40, 0x423, 0xfffffffffffff800) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x3, 0xa, 0x6, 0x100000000) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xd5, 0x4, 0xff, 0x6) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0, 0x100000001, 0xdb48, 0x6ca7) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xffffffffffffff0f, 0x3, 0x4a7, 0x5) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xe838, 0x1, 0xb05, 0x473233bd) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4, 0x9, 0x9, 0x1) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xb8, 0x8, 0x7, 0x5) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x5, 0x0, 0xd, 0x400) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0, 0x8, 0x8, 0x2) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x10001, 0x7, 0x101, 0x7) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xd, 0x3ff, 0x6, 0x1) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xfffffffffffffffe, 0x1, 0x53, 0x4) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2, 0x6, 0x7, 0x7f) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x9, 0x9414, 0x4, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram4\x00', 0x80000, 0x0) ioctl$auto_BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x8, 0x8}) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0xfffffffffffffff7, 0x4c, 0x8000000000000001, 0x6) prctl$auto_PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0, 0x3, 0xbbc, 0x7) 218.993005ms ago: executing program 4 (id=2983): close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000280)={0xfffffff7, 0xffffff00, 0x2, 0x6, 0x7, 0x9, 0xffffffffffffffff, [], {0x6, 0x6, 0xb, 0x29f, 0x5, 0x83, 0x8, 0x17f, 0x2}, {0x5, 0x1, 0x51, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) write$auto(r1, &(0x7f0000000180)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kt\xdf\x1ao\x06\x89|%\'hfm\xfa\xf4\xa8g\ta{\xc4\xf6\xa3\'\x9d\xa0\xa9&', 0x9) pwrite64$auto(0xc8, 0x0, 0xfdf2, 0x3a) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000001c0)="3b5e5aa689c899a2627ea5406d4bf695c386e3e5cb119789e9babb1f9064cd7076a3165cdb96345993069975df668b4c0c1ea9ef473b4448910b226e60c69040686a5fd985b4cfc17b3d129bc8cb7be80558d45ec29eb4b96d5e81cde01cf242adc6fa7ea8c6eaf9be497548c51087972ee6ee555f1f8df7bd5db8ac1a15690e8e47f894348f5bc6cd21b0138dbb8307d3271f5046c4210ec2a7a35b78", 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) getsockopt$auto(r2, 0x7, 0x200, &(0x7f0000000040)='\x00', &(0x7f0000000100)=0x6) 141.772746ms ago: executing program 1 (id=2984): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x2, 0x0) write$auto(r1, 0x0, 0x5) pwrite64$auto(r0, 0x0, 0x2, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r3) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000044}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, r6, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_KEK={0x6, 0xf2, "d210"}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xb2, 0xbd, "6d8c5e3306011cb514f602e0a8e1e4fb7b567eca058d35ac89374a5c9b5831066921169cff7d412fefd4058a534f29d46f31758b50ea529fb8ba881a55fed17085e2df36cfa82a3af2252e1b81591df86061666308f5512dbab11b9412547307593b374194aef4059879d931c9040f03f82eed241ba04f7320b16a9f09a8420fae1ce25c3f6e18c28eb536df1b19380f3b115c0754e6391ea8d2c4e56b20978d90f0af82423defebae0ae74beece"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) r7 = prctl$auto_SECCOMP_MODE_FILTER(0x117a0, 0x2, 0xffffffffffffffff, 0x8, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) shmctl$auto_SHM_STAT_ANY(0x4, 0xf, &(0x7f0000000b00)={{0x6, 0xffffffffffffffff, 0xee01, 0xe, 0x9, 0x62, 0x400}, 0x8, 0x1, 0x7, 0x80000001, @raw=0x9d, @inferred=0xffffffffffffffff, 0xfffa, 0x0, &(0x7f0000000880)="f5de678c062a4188e56955481b4111b2f3aea7f7581b3052d8101b274971e0a61ffb4e7f33a5ab3d77119525ca1b381d9a672384943835877149c6c40d4fe7745f255b582506d83a99b607982cc0632e0f3aa438d503e0797c3456a7422ae4eca6c7572e8e2da8cc733a82336ae74b9ee2fc0667bd16f7eb27727c004e24277b7f24b0893e771dbb40748a9beb81431a2c46e580ef4cb96b5e0940a013ff2ab80153ae0768ae0cb67d7a0ee42be84baee43ebfb923095cc348ab5429e52ee1320dae774a2f2eacdd3acdf05aa4f6a5", &(0x7f00000009c0)="2c053f6bb2cd27b9cbaaef975560bc24140e78d4b29eeab8a08b7d2fe0a58615e75f6b637938de83ee4f9915bb7be608e6c177b2e8c663a301886c8b7867f810f4c57486cea6685f55026841794632331cf62e7b25aa7ed112a978eb501802c0467ff854eb97e29ee3bddfd3e59bb52ee1e4a6ed60a1c36ad5aed86a10850b00933fefec39cd7af323137b7abcbc1be0f37eecf890027ed471"}) r10 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r10, 0x0, 0x1f40) sendmsg$auto_IPVS_CMD_FLUSH(r8, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)={0x598, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xc6, 0x0, 0x0, @fd=r10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff7fff}, @IPVS_CMD_ATTR_DAEMON={0x570, 0x3, 0x0, 0x1, [@typed={0x14, 0x14d, 0x0, 0x0, @ipv6=@private1}, @nested={0x522, 0x3f, 0x0, 0x1, [@generic="911cd30cf8417d46affce53d0650c6dc57eef2a996139cc7734cc8c28837f7fddd5c5d1164d24b4a5dd497a7e7fcaa17124937e003048d0faa056aff76f685ec59daa17b48f2d4eec890bbfd23767e7ba2397dfdb591e492d3ed9ce6940f55bfc397d1b37518f4388015dde86071ae830676557a8f47f001cea6fb4fea7b0902825132a0973822b951b313b293fe0330cd46d0264ed4a60c9475f0338790c8c16d2c2613127cd9f7026306bcc314ecb03efe85a75bca5cba1cd1bee72bc12d4cfec7c302172538ffc88676", @typed={0x5, 0x6a, 0x0, 0x0, @str='\b'}, @nested={0x4, 0x51}, @generic="11e8e643f863a6c2c24b5958b098a4408c1c204b6f13f1cc42211763c63a38295587d5fe2b719371a09e3cef4cc28aa6d209ae99f1cc6f77d55c1280ced516fb9656dc85729ab38861d866d3e4ef46d3caf107829aae372aba13a2d7970525710ed5c3abff16079716056d5fcd7bfd31bbcb1dc21e890b0bf007dcf56228cb6e73f0a94ceae8daa411aa686cacadc8cdd1f2cc3f6405f589f3698f8ea648294a45b7fe37a550990c9976900703cf647416e53be2947b9d3db894ee43d8cbd62750f5fd17", @generic="56e7bbfed0249be3b641f6d4fd37920c9c435bae0ed3093017fbb76db162052658e6bbf2bd8a7dffb9d5495d9ea440b04904d42837fb6a2b61a8e715b24328bdf5015282ef0a59d3d875051b704081b9a5d425e59fcea64cd57c8088dd242818d090c64dbbfa8f678338897107e1456e84d1f8261c97f1d82102a9269f40b056f1f5d670030bcb7662363fc0e5c65beda746f95e7b10e44af0c9a6b71c6ea0f652aec549d79b6b826c637266792cbbe9a4b2fe7be249ddd63d3a5d123880659b1672f5da99e555f8a8f6e9ccbd1bfce3d79cf09492ec946f8a6dc1a1092e1179dfb67a99275a3b0e822a1e676a5d393c71a9", @nested={0x206, 0x114, 0x0, 0x1, [@typed={0x8, 0x35, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}, @generic="d6b5d5ccd36c6cd54ae8ccf47da8b5d87cf4bd1e7da0a0a0da087417c5d08f62aa389518dce447fb2578225a3a0d5c07f733d65567cbaead7f737f3dcc9025e310a7892251d2f7d3d48916d817bb829f1d046170a967ef9f519c4b5aaff57f24bbdac492e1a5c636fe97d50054c4a6d61625b9fc5249bf0f59747dfdc913fe5484d665fca35f7ca673d483d245f0877181c06cc56e80de9e82a2cf07fd124d1472852e4726f04a264c0f8196ffefacfccedbfbe0bbe1f6eaef62667cda31c5a92eaf8b267de491179a1d", @nested={0x111, 0x13e, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @fd=r0}, @generic="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", @typed={0x8, 0xd8, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x14, 0xb7, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="4b5c0e8c4b38b3097cd8f6955d2c88ca21c48c8f88dc278b3394bfc5f0b88e990fc898005408f3c74a39b53c424d6a75e93b5a8568fc206601c4c3d7e48faa91c97748f4f7b2a787e36f65f30a02d379e0fe94ad30224aec1d5b0db00eed4e5ac707e94ed3d10bea0d", @typed={0x17, 0xee, 0x0, 0x0, @str=']\\-%[{.\'#A),{#/+$$\x00'}, @typed={0x8, 0x13d, 0x0, 0x0, @pid}]}, @typed={0x8, 0x127, 0x0, 0x0, @ipv4=@remote}, @typed={0x2a, 0x207f, 0x0, 0x0, @str='/sys/module/apparmor/parameters/audit\x00'}]}]}, 0x598}}, 0x4000000) sendmsg$auto_IPVS_CMD_DEL_DEST(r7, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x30214001}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x2b8, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@typed={0x10, 0x5b, 0x0, 0x0, @str='/dev/uinput\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x287, 0x3, 0x0, 0x1, [@generic="48cb22dc82227708137e51270b7d972865239d997b18aceed67ce77f1e662bf41cc6bbb5641fc670d655a4d043bbb13eb4fda02e8b62912ab6eb34ce3260", @generic="24d62050059f354f4723a1abb205959c7cc7bba9fba7c3d3861c6fd853f76ea8bbfbc9394ac804186400e1cd58bc7fcc75aa93a83b36afb8ae15432515cedc4b7ee7d38afcc6852995d9764bd9346a7a6fe1de3c9798e8ecec8d4ab8d493457e7b344cfc59eba57d0c898a4b56e7302fc8919b24a391a52638ece7fc90104b5b4155900c89e67d45eb0c2d65245bc1e9e724f0f8f259de56c902da93e9", @generic="094a79ea54692af9639c52920fcbf0f745dd6e6945bb54461fc5de483d9fb39e2cec6dba3f759c972d8406a9d5f11106169ca9a17bbb28c720eb3b85476d7d44638be9de202100bc81e34421ab41b57a46b01a8750c34a5f6a3d79021e119cd1cd9220c60d237e0c9f71e3f39777d66edf145ae09667ace54987aed1e830f9707130826e508b77704ecaea0b240c149784ec261c41374c99a6375a0c2b8cf26a29cde44d02e6149223bbef8ff3deda9e4cb010016b782d2f2cbb8b4614a4bc823d8a77d30da76b3a77e3aad8b6f228ba77bc8934337a", @generic="8d5651533cbb6c670f327ab34d7743a396dceead3181d201be60d71e171b6f8d894f0291efbb7fcaaa7e1a5b3bd068b799ad5bc5da57a42909c1849a04ac1b4ad98eb89d768443e05be54c7e01dfe4a9c9bdabae34252ea77ce82164ff8277a49301", @typed={0x66, 0x26, 0x0, 0x0, @binary="5a8dee1b43870facf46d17bd556b7c9b618a0bf4664fb01fed04135b3d71611959d68dcf7d0b38e8cc5580f5b726039024bc20ab55a5f038d6c0a191bc967c579e7b2b3770932b6811951d0d0aac9b1b3f61f457cee851371929da53395146e3b10e"}, @typed={0x8, 0xe8, 0x0, 0x0, @u32=0x4}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000000) r11 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x480440, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYRES8=r11, @ANYRES16=r4, @ANYBLOB="9bff29bd7000f9d3965ce24ba575fb429600c2b4d72c2ec5000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20048000) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000001) r12 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000580)={0x30, r12, 0x601, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@typed={0x15, 0x9, 0x0, 0x0, @binary="ef6735f5058af96b26651160dfbb140872"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$auto(r2, 0x0, 0x1f40) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x1c9380, 0x0) setsockopt$auto(r3, 0x7, 0x2, &(0x7f00000001c0)='tcp_metrics\x00', 0x3ab) 0s ago: executing program 4 (id=2985): socket(0xa, 0x3, 0x3b) (async) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) (async) socket(0x2, 0x2, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x7fffffff, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) (async) r0 = socket(0x2b, 0x0, 0x2) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xebd, 0x401, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r1 = socket(0xa, 0x3, 0x3b) dup$auto(r1) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) (async, rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) (rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) io_uring_setup$auto(0x6, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r3, 0x4020ae76, r4) madvise$auto(0x0, 0x200007, 0x19) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): bond0: option all_slaves_active: invalid value () [ 642.580348][T17147] FAULT_INJECTION: forcing a failure. [ 642.580348][T17147] name failslab, interval 1, probability 0, space 0, times 0 [ 642.627813][T17147] CPU: 0 UID: 0 PID: 17147 Comm: syz.3.2198 Not tainted syzkaller #0 PREEMPT(full) [ 642.627853][T17147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 642.627867][T17147] Call Trace: [ 642.627876][T17147] [ 642.627884][T17147] dump_stack_lvl+0x16c/0x1f0 [ 642.627920][T17147] should_fail_ex+0x512/0x640 [ 642.627958][T17147] should_failslab+0xc2/0x120 [ 642.627990][T17147] __kmalloc_cache_noprof+0x72/0x780 [ 642.628030][T17147] ? __pfx___might_resched+0x10/0x10 [ 642.628055][T17147] ? nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 642.628094][T17147] ? nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 642.628127][T17147] nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 642.628159][T17147] notifier_call_chain+0xbc/0x410 [ 642.628191][T17147] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 642.628234][T17147] blocking_notifier_call_chain+0x69/0xa0 [ 642.628267][T17147] netlink_release+0x16cf/0x2080 [ 642.628306][T17147] ? netlink_release+0x1e4/0x2080 [ 642.628337][T17147] ? __pfx_netlink_release+0x10/0x10 [ 642.628370][T17147] ? __pfx_locks_remove_file+0x10/0x10 [ 642.628400][T17147] __sock_release+0xb3/0x270 [ 642.628428][T17147] ? __pfx_sock_close+0x10/0x10 [ 642.628454][T17147] sock_close+0x1c/0x30 [ 642.628478][T17147] __fput+0x3ff/0xb70 [ 642.628518][T17147] fput_close_sync+0x118/0x210 [ 642.628552][T17147] ? __pfx_fput_close_sync+0x10/0x10 [ 642.628585][T17147] ? dnotify_flush+0x79/0x4c0 [ 642.628625][T17147] __x64_sys_close+0x8b/0x120 [ 642.628660][T17147] do_syscall_64+0xcd/0xfa0 [ 642.628692][T17147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.628717][T17147] RIP: 0033:0x7fcd2298db2a [ 642.628736][T17147] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 642.628774][T17147] RSP: 002b:00007fcd2385cf90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 642.628798][T17147] RAX: ffffffffffffffda RBX: 000000000000003f RCX: 00007fcd2298db2a [ 642.628812][T17147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 642.628826][T17147] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 642.628841][T17147] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 642.628855][T17147] R13: 00007fcd22be6038 R14: 00007fcd22be5fa0 R15: 00007ffd4edc5878 [ 642.628891][T17147] [ 643.131166][T17152] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2199: 7 [ 643.393960][T17162] __vm_enough_memory: pid: 17162, comm: syz.1.2203, bytes: 4398046511104 not enough memory for the allocation [ 643.498798][T17162] FAULT_INJECTION: forcing a failure. [ 643.498798][T17162] name failslab, interval 1, probability 0, space 0, times 0 [ 643.532098][T17162] CPU: 1 UID: 0 PID: 17162 Comm: syz.1.2203 Not tainted syzkaller #0 PREEMPT(full) [ 643.532135][T17162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 643.532151][T17162] Call Trace: [ 643.532160][T17162] [ 643.532170][T17162] dump_stack_lvl+0x16c/0x1f0 [ 643.532204][T17162] should_fail_ex+0x512/0x640 [ 643.532234][T17162] ? fs_reclaim_acquire+0xae/0x150 [ 643.532271][T17162] should_failslab+0xc2/0x120 [ 643.532305][T17162] kmem_cache_alloc_noprof+0x75/0x6e0 [ 643.532331][T17162] ? __pfx_map_id_range_down+0x10/0x10 [ 643.532365][T17162] ? security_inode_alloc+0x3b/0x2b0 [ 643.532408][T17162] ? security_inode_alloc+0x3b/0x2b0 [ 643.532441][T17162] security_inode_alloc+0x3b/0x2b0 [ 643.532477][T17162] inode_init_always_gfp+0xce4/0x1030 [ 643.532510][T17162] alloc_inode+0x86/0x240 [ 643.532542][T17162] new_inode+0x22/0x1c0 [ 643.532571][T17162] ? proc_lookup_de+0x201/0x360 [ 643.532611][T17162] proc_get_inode+0x1d/0x780 [ 643.532678][T17162] proc_lookup_de+0x236/0x360 [ 643.532721][T17162] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 643.532759][T17162] proc_tgid_net_lookup+0x75/0x120 [ 643.532799][T17162] lookup_open.isra.0+0x4d7/0x1580 [ 643.532848][T17162] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 643.532891][T17162] ? find_held_lock+0x2b/0x80 [ 643.532927][T17162] ? __pfx_down_write+0x10/0x10 [ 643.532968][T17162] path_openat+0x893/0x2cb0 [ 643.533008][T17162] ? __pfx_path_openat+0x10/0x10 [ 643.533045][T17162] do_filp_open+0x20b/0x470 [ 643.533074][T17162] ? __pfx_do_filp_open+0x10/0x10 [ 643.533115][T17162] ? __pfx_kfree_link+0x10/0x10 [ 643.533160][T17162] ? alloc_fd+0x471/0x7d0 [ 643.533196][T17162] do_sys_openat2+0x11b/0x1d0 [ 643.533230][T17162] ? __pfx_do_sys_openat2+0x10/0x10 [ 643.533280][T17162] __x64_sys_openat+0x174/0x210 [ 643.533315][T17162] ? __pfx___x64_sys_openat+0x10/0x10 [ 643.533366][T17162] do_syscall_64+0xcd/0xfa0 [ 643.533398][T17162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.533423][T17162] RIP: 0033:0x7fd87978eec9 [ 643.533445][T17162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.533470][T17162] RSP: 002b:00007fd87a620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 643.533495][T17162] RAX: ffffffffffffffda RBX: 00007fd8799e5fa0 RCX: 00007fd87978eec9 [ 643.533513][T17162] RDX: 0000000000000040 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 643.533528][T17162] RBP: 00007fd879811f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.533543][T17162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.533558][T17162] R13: 00007fd8799e6038 R14: 00007fd8799e5fa0 R15: 00007ffe660b6608 [ 643.533595][T17162] [ 643.849366][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2204'. [ 644.254684][T17172] FAULT_INJECTION: forcing a failure. [ 644.254684][T17172] name fail_futex, interval 1, probability 0, space 0, times 0 [ 644.512300][T17172] CPU: 1 UID: 0 PID: 17172 Comm: syz.1.2206 Not tainted syzkaller #0 PREEMPT(full) [ 644.512335][T17172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.512349][T17172] Call Trace: [ 644.512358][T17172] [ 644.512368][T17172] dump_stack_lvl+0x16c/0x1f0 [ 644.512406][T17172] should_fail_ex+0x512/0x640 [ 644.512441][T17172] get_futex_key+0x1d0/0x1560 [ 644.512477][T17172] ? __pfx_get_futex_key+0x10/0x10 [ 644.512520][T17172] futex_wake+0xea/0x530 [ 644.512559][T17172] ? __pfx_futex_wake+0x10/0x10 [ 644.512600][T17172] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 644.512639][T17172] ? lockdep_hardirqs_on+0x7c/0x110 [ 644.512679][T17172] do_futex+0x1e3/0x350 [ 644.512712][T17172] ? __pfx_do_futex+0x10/0x10 [ 644.512754][T17172] ? __fput+0x68d/0xb70 [ 644.512792][T17172] __x64_sys_futex+0x1e0/0x4c0 [ 644.512829][T17172] ? __pfx___x64_sys_futex+0x10/0x10 [ 644.512862][T17172] ? dnotify_flush+0x79/0x4c0 [ 644.512904][T17172] do_syscall_64+0xcd/0xfa0 [ 644.512935][T17172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.512960][T17172] RIP: 0033:0x7fd87978eec9 [ 644.512980][T17172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.513003][T17172] RSP: 002b:00007fd87a6200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 644.513028][T17172] RAX: ffffffffffffffda RBX: 00007fd8799e5fa8 RCX: 00007fd87978eec9 [ 644.513046][T17172] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8799e5fac [ 644.513062][T17172] RBP: 00007fd8799e5fa0 R08: 00007fd87a621000 R09: 0000000000000000 [ 644.513078][T17172] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 644.513091][T17172] R13: 00007fd8799e6038 R14: 00007ffe660b6520 R15: 00007ffe660b6608 [ 644.513122][T17172] [ 644.750856][T17179] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2208: 7 [ 644.796067][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 647.074454][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 647.119862][T17215] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2219'. [ 647.669604][ T30] audit: type=1326 audit(4294967334.507:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17225 comm="syz.1.2221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd87978eec9 code=0x0 [ 647.717423][T17232] ë4—fRd: entered promiscuous mode [ 648.019632][T17241] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.3.2225: 7 [ 648.192390][T17249] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2227'. [ 648.208979][T17249] : renamed from gre0 (while UP) [ 648.242038][T17249] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2227'. [ 648.361198][T17254] kAFS: Invalid Command on /proc/fs/afs/cells file [ 649.065650][T17264] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 650.365864][T17284] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 650.730642][T17288] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2236'. [ 652.301260][T17314] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2244: 7 [ 652.445345][T15231] Bluetooth: hci0: unexpected event 0x3e length: 509 > 260 [ 652.445393][T15231] Bluetooth: hci0: unexpected subevent 0x02 length: 508 > 260 [ 652.460292][T15231] Bluetooth: hci0: Dropping invalid advertising data [ 652.617992][ T30] audit: type=1326 audit(4294967339.447:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17321 comm="syz.3.2245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2298eec9 code=0x0 [ 653.226450][T17337] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 653.514304][T17360] Console: switching to colour VGA+ 32x100 [ 654.412331][T17376] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 654.485657][T17379] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 657.523567][T17435] FAULT_INJECTION: forcing a failure. [ 657.523567][T17435] name failslab, interval 1, probability 0, space 0, times 0 [ 657.559148][T17435] CPU: 1 UID: 0 PID: 17435 Comm: syz.3.2270 Not tainted syzkaller #0 PREEMPT(full) [ 657.559179][T17435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 657.559193][T17435] Call Trace: [ 657.559200][T17435] [ 657.559209][T17435] dump_stack_lvl+0x16c/0x1f0 [ 657.559240][T17435] should_fail_ex+0x512/0x640 [ 657.559266][T17435] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 657.559302][T17435] should_failslab+0xc2/0x120 [ 657.559332][T17435] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 657.559355][T17435] ? __pfx___might_resched+0x10/0x10 [ 657.559383][T17435] ? sock_alloc_inode+0x25/0x1c0 [ 657.559420][T17435] ? __pfx_sock_alloc_inode+0x10/0x10 [ 657.559449][T17435] ? sock_alloc_inode+0x25/0x1c0 [ 657.559477][T17435] sock_alloc_inode+0x25/0x1c0 [ 657.559506][T17435] alloc_inode+0x61/0x240 [ 657.559537][T17435] sock_alloc+0x40/0x280 [ 657.559567][T17435] __sock_create+0xc1/0x8d0 [ 657.559607][T17435] __sys_socket+0x14d/0x260 [ 657.559639][T17435] ? __pfx___sys_socket+0x10/0x10 [ 657.559674][T17435] ? xfd_validate_state+0x61/0x180 [ 657.559704][T17435] ? __pfx_ksys_write+0x10/0x10 [ 657.559737][T17435] __x64_sys_socket+0x72/0xb0 [ 657.559769][T17435] ? lockdep_hardirqs_on+0x7c/0x110 [ 657.559795][T17435] do_syscall_64+0xcd/0xfa0 [ 657.559824][T17435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.559848][T17435] RIP: 0033:0x7fcd2298eec9 [ 657.559867][T17435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.559890][T17435] RSP: 002b:00007fcd237fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 657.559913][T17435] RAX: ffffffffffffffda RBX: 00007fcd22be6270 RCX: 00007fcd2298eec9 [ 657.559927][T17435] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 657.559941][T17435] RBP: 00007fcd22a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 657.559957][T17435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.559971][T17435] R13: 00007fcd22be6308 R14: 00007fcd22be6270 R15: 00007ffd4edc5878 [ 657.560005][T17435] [ 657.560016][T17435] socket: no more sockets [ 658.524723][T17471] random: crng reseeded on system resumption [ 658.652102][T17478] FAULT_INJECTION: forcing a failure. [ 658.652102][T17478] name failslab, interval 1, probability 0, space 0, times 0 [ 658.682611][T17478] CPU: 1 UID: 0 PID: 17478 Comm: syz.1.2282 Not tainted syzkaller #0 PREEMPT(full) [ 658.682650][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 658.682666][T17478] Call Trace: [ 658.682675][T17478] [ 658.682685][T17478] dump_stack_lvl+0x16c/0x1f0 [ 658.682722][T17478] should_fail_ex+0x512/0x640 [ 658.682752][T17478] ? fs_reclaim_acquire+0xae/0x150 [ 658.682788][T17478] should_failslab+0xc2/0x120 [ 658.682821][T17478] __kmalloc_cache_noprof+0x72/0x780 [ 658.682861][T17478] ? usb_control_msg+0xbc/0x4a0 [ 658.682894][T17478] ? usb_control_msg+0xbc/0x4a0 [ 658.682919][T17478] usb_control_msg+0xbc/0x4a0 [ 658.682949][T17478] ? __pfx_usb_control_msg+0x10/0x10 [ 658.682980][T17478] ? __lock_acquire+0xb97/0x1ce0 [ 658.683017][T17478] hub_ext_port_status+0x14e/0x670 [ 658.683071][T17478] hub_activate+0x6e5/0x1d60 [ 658.683109][T17478] ? __pfx_hub_activate+0x10/0x10 [ 658.683134][T17478] ? find_held_lock+0x2b/0x80 [ 658.683160][T17478] ? usbdev_ioctl+0x2f70/0x4070 [ 658.683194][T17478] hub_resume+0xa8/0x3f0 [ 658.683221][T17478] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 658.683254][T17478] ? __pfx_hub_resume+0x10/0x10 [ 658.683281][T17478] ? __pfx_hcd_bus_resume+0x10/0x10 [ 658.683326][T17478] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 658.683367][T17478] usb_resume_both+0x237/0x960 [ 658.683409][T17478] ? __pfx_usb_resume_both+0x10/0x10 [ 658.683446][T17478] ? __pfx_usb_runtime_resume+0x10/0x10 [ 658.683488][T17478] ? __pfx_usb_runtime_resume+0x10/0x10 [ 658.683526][T17478] __rpm_callback+0xc8/0x610 [ 658.683557][T17478] ? __pfx_usb_runtime_resume+0x10/0x10 [ 658.683594][T17478] rpm_callback+0x1b7/0x200 [ 658.683618][T17478] ? __pfx_usb_runtime_resume+0x10/0x10 [ 658.683655][T17478] rpm_resume+0xd16/0x1320 [ 658.683690][T17478] ? __pfx_rpm_resume+0x10/0x10 [ 658.683714][T17478] ? do_raw_spin_lock+0x12c/0x2b0 [ 658.683752][T17478] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 658.683805][T17478] __pm_runtime_resume+0xb6/0x170 [ 658.683835][T17478] usb_autoresume_device+0x23/0xe0 [ 658.683874][T17478] usbdev_open+0x228/0x8b0 [ 658.683912][T17478] ? kobject_get_unless_zero+0x156/0x1e0 [ 658.683943][T17478] ? __pfx_usbdev_open+0x10/0x10 [ 658.683980][T17478] ? chrdev_open+0x10b/0x6a0 [ 658.684015][T17478] ? __pfx_usbdev_open+0x10/0x10 [ 658.684051][T17478] chrdev_open+0x234/0x6a0 [ 658.684079][T17478] ? __pfx_apparmor_file_open+0x10/0x10 [ 658.684114][T17478] ? __pfx_chrdev_open+0x10/0x10 [ 658.684144][T17478] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 658.684177][T17478] do_dentry_open+0x982/0x1530 [ 658.684209][T17478] ? __pfx_chrdev_open+0x10/0x10 [ 658.684247][T17478] vfs_open+0x82/0x3f0 [ 658.684288][T17478] path_openat+0x1de4/0x2cb0 [ 658.684328][T17478] ? __pfx_path_openat+0x10/0x10 [ 658.684367][T17478] do_filp_open+0x20b/0x470 [ 658.684396][T17478] ? __pfx_do_filp_open+0x10/0x10 [ 658.684460][T17478] ? alloc_fd+0x471/0x7d0 [ 658.684497][T17478] do_sys_openat2+0x11b/0x1d0 [ 658.684533][T17478] ? __pfx_do_sys_openat2+0x10/0x10 [ 658.684584][T17478] __x64_sys_openat+0x174/0x210 [ 658.684621][T17478] ? __pfx___x64_sys_openat+0x10/0x10 [ 658.684674][T17478] do_syscall_64+0xcd/0xfa0 [ 658.684705][T17478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.684731][T17478] RIP: 0033:0x7fd87978eec9 [ 658.684752][T17478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.684777][T17478] RSP: 002b:00007fd87a620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 658.684802][T17478] RAX: ffffffffffffffda RBX: 00007fd8799e5fa0 RCX: 00007fd87978eec9 [ 658.684818][T17478] RDX: 0000000000000802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 658.684834][T17478] RBP: 00007fd879811f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.684848][T17478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.684863][T17478] R13: 00007fd8799e6038 R14: 00007fd8799e5fa0 R15: 00007ffe660b6608 [ 658.684900][T17478] [ 658.684916][T17478] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 659.953653][T17502] FAULT_INJECTION: forcing a failure. [ 659.953653][T17502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.975740][T17502] CPU: 0 UID: 0 PID: 17502 Comm: syz.3.2289 Not tainted syzkaller #0 PREEMPT(full) [ 659.975774][T17502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 659.975786][T17502] Call Trace: [ 659.975794][T17502] [ 659.975802][T17502] dump_stack_lvl+0x16c/0x1f0 [ 659.975833][T17502] should_fail_ex+0x512/0x640 [ 659.975865][T17502] copy_fpstate_to_sigframe+0x854/0xaf0 [ 659.975900][T17502] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 659.975936][T17502] ? collect_signal+0x263/0x540 [ 659.975964][T17502] ? x86_task_fpu+0x5f/0x90 [ 659.975991][T17502] get_sigframe+0x4a8/0x9c0 [ 659.976023][T17502] ? __pfx_get_sigframe+0x10/0x10 [ 659.976050][T17502] ? _raw_spin_unlock_irq+0x23/0x50 [ 659.976072][T17502] ? siginfo_layout+0x177/0x290 [ 659.976101][T17502] x64_setup_rt_frame+0x12e/0xcf0 [ 659.976133][T17502] ? __pfx___sys_recvfrom+0x10/0x10 [ 659.976161][T17502] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 659.976199][T17502] arch_do_signal_or_restart+0x5b4/0x790 [ 659.976229][T17502] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 659.976266][T17502] ? ksys_write+0x1ac/0x250 [ 659.976291][T17502] ? __pfx_ksys_write+0x10/0x10 [ 659.976330][T17502] exit_to_user_mode_loop+0x85/0x130 [ 659.976366][T17502] do_syscall_64+0x426/0xfa0 [ 659.976395][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.976419][T17502] RIP: 0033:0x7fcd2298eec9 [ 659.976438][T17502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.976460][T17502] RSP: 002b:00007fcd2385e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 659.976483][T17502] RAX: fffffffffffffffc RBX: 00007fcd22be5fa0 RCX: 00007fcd2298eec9 [ 659.976499][T17502] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 659.976514][T17502] RBP: 00007fcd2385e090 R08: 0000000000000000 R09: ffffffff81000000 [ 659.976529][T17502] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 659.976543][T17502] R13: 00007fcd22be6038 R14: 00007fcd22be5fa0 R15: 00007ffd4edc5878 [ 659.976566][T17502] ? 0xffffffff81000000 [ 659.976594][T17502] [ 660.185353][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.613872][T17527] FAULT_INJECTION: forcing a failure. [ 660.613872][T17527] name failslab, interval 1, probability 0, space 0, times 0 [ 660.631089][T17527] CPU: 1 UID: 0 PID: 17527 Comm: syz.1.2295 Not tainted syzkaller #0 PREEMPT(full) [ 660.631124][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 660.631140][T17527] Call Trace: [ 660.631149][T17527] [ 660.631159][T17527] dump_stack_lvl+0x16c/0x1f0 [ 660.631194][T17527] should_fail_ex+0x512/0x640 [ 660.631224][T17527] ? __kmalloc_noprof+0xca/0x880 [ 660.631268][T17527] should_failslab+0xc2/0x120 [ 660.631302][T17527] __kmalloc_noprof+0xdd/0x880 [ 660.631342][T17527] ? usb_hcd_submit_urb+0x5cf/0x1c60 [ 660.631386][T17527] ? usb_hcd_submit_urb+0x5cf/0x1c60 [ 660.631422][T17527] usb_hcd_submit_urb+0x5cf/0x1c60 [ 660.631471][T17527] usb_submit_urb+0x89f/0x1990 [ 660.631504][T17527] ? __init_swait_queue_head+0xca/0x150 [ 660.631548][T17527] usb_start_wait_urb+0x104/0x4b0 [ 660.631579][T17527] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 660.631620][T17527] ? __asan_memset+0x23/0x50 [ 660.631652][T17527] usb_control_msg+0x326/0x4a0 [ 660.631681][T17527] ? __pfx_usb_control_msg+0x10/0x10 [ 660.631712][T17527] ? __lock_acquire+0xb97/0x1ce0 [ 660.631748][T17527] hub_ext_port_status+0x14e/0x670 [ 660.631798][T17527] hub_activate+0x6e5/0x1d60 [ 660.631836][T17527] ? __pfx_hub_activate+0x10/0x10 [ 660.631860][T17527] ? find_held_lock+0x2b/0x80 [ 660.631887][T17527] ? usbdev_ioctl+0x2f70/0x4070 [ 660.631921][T17527] hub_resume+0xa8/0x3f0 [ 660.631948][T17527] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 660.631980][T17527] ? __pfx_hub_resume+0x10/0x10 [ 660.632014][T17527] ? __pfx_hcd_bus_resume+0x10/0x10 [ 660.632063][T17527] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 660.632105][T17527] usb_resume_both+0x237/0x960 [ 660.632142][T17527] ? __pfx_usb_resume_both+0x10/0x10 [ 660.632177][T17527] ? __pfx_usb_runtime_resume+0x10/0x10 [ 660.632217][T17527] ? __pfx_usb_runtime_resume+0x10/0x10 [ 660.632254][T17527] __rpm_callback+0xc8/0x610 [ 660.632284][T17527] ? __pfx_usb_runtime_resume+0x10/0x10 [ 660.632323][T17527] rpm_callback+0x1b7/0x200 [ 660.632347][T17527] ? __pfx_usb_runtime_resume+0x10/0x10 [ 660.632383][T17527] rpm_resume+0xd16/0x1320 [ 660.632418][T17527] ? __pfx_rpm_resume+0x10/0x10 [ 660.632442][T17527] ? do_raw_spin_lock+0x12c/0x2b0 [ 660.632480][T17527] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 660.632533][T17527] __pm_runtime_resume+0xb6/0x170 [ 660.632561][T17527] usb_autoresume_device+0x23/0xe0 [ 660.632598][T17527] usbdev_open+0x228/0x8b0 [ 660.632637][T17527] ? kobject_get_unless_zero+0x156/0x1e0 [ 660.632668][T17527] ? __pfx_usbdev_open+0x10/0x10 [ 660.632701][T17527] ? chrdev_open+0x10b/0x6a0 [ 660.632733][T17527] ? __pfx_usbdev_open+0x10/0x10 [ 660.632768][T17527] chrdev_open+0x234/0x6a0 [ 660.632796][T17527] ? __pfx_apparmor_file_open+0x10/0x10 [ 660.632831][T17527] ? __pfx_chrdev_open+0x10/0x10 [ 660.632863][T17527] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 660.632898][T17527] do_dentry_open+0x982/0x1530 [ 660.632930][T17527] ? __pfx_chrdev_open+0x10/0x10 [ 660.632968][T17527] vfs_open+0x82/0x3f0 [ 660.633014][T17527] path_openat+0x1de4/0x2cb0 [ 660.633057][T17527] ? __pfx_path_openat+0x10/0x10 [ 660.633096][T17527] do_filp_open+0x20b/0x470 [ 660.633123][T17527] ? __pfx_do_filp_open+0x10/0x10 [ 660.633177][T17527] ? alloc_fd+0x471/0x7d0 [ 660.633212][T17527] do_sys_openat2+0x11b/0x1d0 [ 660.633247][T17527] ? __pfx_do_sys_openat2+0x10/0x10 [ 660.633296][T17527] __x64_sys_openat+0x174/0x210 [ 660.633330][T17527] ? __pfx___x64_sys_openat+0x10/0x10 [ 660.633381][T17527] do_syscall_64+0xcd/0xfa0 [ 660.633412][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.633437][T17527] RIP: 0033:0x7fd87978eec9 [ 660.633456][T17527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.633480][T17527] RSP: 002b:00007fd87a620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 660.633507][T17527] RAX: ffffffffffffffda RBX: 00007fd8799e5fa0 RCX: 00007fd87978eec9 [ 660.633526][T17527] RDX: 0000000000000802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 660.633543][T17527] RBP: 00007fd879811f91 R08: 0000000000000000 R09: 0000000000000000 [ 660.633559][T17527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.633574][T17527] R13: 00007fd8799e6038 R14: 00007fd8799e5fa0 R15: 00007ffe660b6608 [ 660.633612][T17527] [ 660.697927][T17527] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 660.700896][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.068094][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.074091][ C1] hrtimer: interrupt took 433254670 ns [ 661.174108][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.617428][T17575] random: crng reseeded on system resumption [ 664.027179][T17592] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 665.108303][T17610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2316'. [ 668.198980][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2333'. [ 668.479024][T17692] vivid-003: ================= START STATUS ================= [ 668.490556][T17692] vivid-003: Radio HW Seek Mode: Bounded [ 668.496471][T17692] vivid-003: Radio Programmable HW Seek: false [ 668.523325][T17692] vivid-003: RDS Rx I/O Mode: Block I/O [ 668.531449][T17692] vivid-003: Generate RBDS Instead of RDS: false [ 668.673718][T17692] vivid-003: RDS Reception: true [ 668.693436][T17692] vivid-003: RDS Program Type: 0 inactive [ 668.701073][T17692] vivid-003: RDS PS Name: inactive [ 668.716601][T17692] vivid-003: RDS Radio Text: inactive [ 668.726745][T17692] vivid-003: RDS Traffic Announcement: false inactive [ 668.736368][T17692] vivid-003: RDS Traffic Program: false inactive [ 668.743219][T17692] vivid-003: RDS Music: false inactive [ 668.748902][T17692] vivid-003: ================== END STATUS ================== [ 669.461496][T17702] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 669.519880][T17702] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 669.597673][T17702] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 670.752916][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 670.774370][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 670.791193][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 670.801448][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 670.809974][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 671.021700][T17710] kexec: Could not allocate control_code_buffer [ 671.069120][ T8366] gretap0: left allmulticast mode [ 671.089595][ T8366] gretap0: left promiscuous mode [ 671.098168][ T8366] bridge0: port 3(gretap0) entered disabled state [ 671.125182][ T8366] bridge_slave_1: left allmulticast mode [ 671.138313][ T8366] bridge_slave_1: left promiscuous mode [ 671.144449][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.155227][ T8366] bridge_slave_0: left allmulticast mode [ 671.161107][ T8366] bridge_slave_0: left promiscuous mode [ 671.166866][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.171581][T17726] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2344: 7 [ 672.451440][ T8366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.480748][ T8366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.502363][ T8366] bond0 (unregistering): Released all slaves [ 672.604787][ T8366] ovs_ÿþ: left promiscuous mode [ 672.707273][ T8366] ë4—fRd: left promiscuous mode [ 672.867719][T15231] Bluetooth: hci3: command tx timeout [ 673.163449][T17718] chnl_net:caif_netlink_parms(): no params data found [ 674.493350][T17718] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.501012][T17718] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.509593][T17718] bridge_slave_0: entered allmulticast mode [ 674.520840][T17718] bridge_slave_0: entered promiscuous mode [ 674.531674][T17718] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.597753][T17718] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.605225][T17718] bridge_slave_1: entered allmulticast mode [ 674.635207][T17718] bridge_slave_1: entered promiscuous mode [ 674.950393][T15231] Bluetooth: hci3: command tx timeout [ 675.120553][ T8366] hsr_slave_0: left promiscuous mode [ 675.219860][ T8366] hsr_slave_1: left promiscuous mode [ 675.463457][ T8366] veth0_macvtap: left promiscuous mode [ 675.469316][ T8366] veth1_vlan: left promiscuous mode [ 675.474600][ T8366] veth0_vlan: left promiscuous mode [ 676.442809][T17718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.459084][T17718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.563510][T17718] team0: Port device team_slave_0 added [ 676.574920][T17718] team0: Port device team_slave_1 added [ 676.713410][T17718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.721055][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.748266][T17718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.765319][T17718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.772737][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.801281][T17718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.870859][T17718] hsr_slave_0: entered promiscuous mode [ 676.880441][T17718] hsr_slave_1: entered promiscuous mode [ 676.886533][T17718] debugfs: 'hsr0' already exists in 'hsr' [ 676.892913][T17718] Cannot create hsr debugfs directory [ 677.030155][T15231] Bluetooth: hci3: command tx timeout [ 677.105285][T17828] FAULT_INJECTION: forcing a failure. [ 677.105285][T17828] name failslab, interval 1, probability 0, space 0, times 0 [ 677.139772][T17828] CPU: 0 UID: 0 PID: 17828 Comm: syz.1.2363 Not tainted syzkaller #0 PREEMPT(full) [ 677.139806][T17828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 677.139820][T17828] Call Trace: [ 677.139829][T17828] [ 677.139839][T17828] dump_stack_lvl+0x16c/0x1f0 [ 677.139874][T17828] should_fail_ex+0x512/0x640 [ 677.139905][T17828] ? fs_reclaim_acquire+0xae/0x150 [ 677.139940][T17828] should_failslab+0xc2/0x120 [ 677.139973][T17828] __kmalloc_noprof+0xdd/0x880 [ 677.140010][T17828] ? kfree+0x252/0x6d0 [ 677.140045][T17828] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 677.140080][T17828] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 677.140107][T17828] tomoyo_realpath_from_path+0xc2/0x6e0 [ 677.140144][T17828] tomoyo_check_open_permission+0x2ab/0x3c0 [ 677.140185][T17828] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 677.140258][T17828] ? lock_acquire+0x179/0x350 [ 677.140293][T17828] ? find_held_lock+0x2b/0x80 [ 677.140319][T17828] ? mnt_get_write_access+0x52/0x2f0 [ 677.140357][T17828] tomoyo_file_open+0x6b/0x90 [ 677.140389][T17828] security_file_open+0x84/0x1e0 [ 677.140415][T17828] do_dentry_open+0x596/0x1530 [ 677.140465][T17828] vfs_open+0x82/0x3f0 [ 677.140505][T17828] path_openat+0x1de4/0x2cb0 [ 677.140546][T17828] ? __pfx_path_openat+0x10/0x10 [ 677.140583][T17828] do_filp_open+0x20b/0x470 [ 677.140610][T17828] ? __pfx_do_filp_open+0x10/0x10 [ 677.140648][T17828] ? alloc_fd+0x471/0x7d0 [ 677.140667][T17828] do_sys_openat2+0x11b/0x1d0 [ 677.140687][T17828] ? __pfx_do_sys_openat2+0x10/0x10 [ 677.140707][T17828] ? __pfx_do_sys_openat2+0x10/0x10 [ 677.140734][T17828] __x64_sys_openat+0x174/0x210 [ 677.140754][T17828] ? __pfx___x64_sys_openat+0x10/0x10 [ 677.140782][T17828] do_syscall_64+0xcd/0xfa0 [ 677.140800][T17828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.140815][T17828] RIP: 0033:0x7fd87978eec9 [ 677.140827][T17828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.140841][T17828] RSP: 002b:00007fd87a620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 677.140855][T17828] RAX: ffffffffffffffda RBX: 00007fd8799e5fa0 RCX: 00007fd87978eec9 [ 677.140865][T17828] RDX: 0000000000040482 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 677.140874][T17828] RBP: 00007fd879811f91 R08: 0000000000000000 R09: 0000000000000000 [ 677.140883][T17828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.140892][T17828] R13: 00007fd8799e6038 R14: 00007fd8799e5fa0 R15: 00007ffe660b6608 [ 677.140912][T17828] [ 677.140963][T17828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 678.675858][T17718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 678.713381][T17718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 678.731703][T17718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 678.777766][T17718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 678.984864][T17718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.013258][T17718] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.035332][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.042539][ T8366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.112471][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.119692][ T8366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.126474][T15231] Bluetooth: hci3: command tx timeout [ 679.307633][T17877] FAULT_INJECTION: forcing a failure. [ 679.307633][T17877] name failslab, interval 1, probability 0, space 0, times 0 [ 679.342280][T17877] CPU: 0 UID: 0 PID: 17877 Comm: syz.1.2371 Not tainted syzkaller #0 PREEMPT(full) [ 679.342302][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 679.342311][T17877] Call Trace: [ 679.342317][T17877] [ 679.342322][T17877] dump_stack_lvl+0x16c/0x1f0 [ 679.342344][T17877] should_fail_ex+0x512/0x640 [ 679.342362][T17877] ? __kmalloc_noprof+0xca/0x880 [ 679.342385][T17877] should_failslab+0xc2/0x120 [ 679.342404][T17877] __kmalloc_noprof+0xdd/0x880 [ 679.342426][T17877] ? lsm_blob_alloc+0x68/0x90 [ 679.342446][T17877] ? lsm_blob_alloc+0x68/0x90 [ 679.342460][T17877] lsm_blob_alloc+0x68/0x90 [ 679.342476][T17877] security_sk_alloc+0x30/0x270 [ 679.342497][T17877] sk_prot_alloc+0x1c7/0x2a0 [ 679.342518][T17877] sk_alloc+0x36/0xc20 [ 679.342533][T17877] pptp_create+0x32/0x340 [ 679.342549][T17877] pppox_create+0x159/0x2c0 [ 679.342571][T17877] __sock_create+0x338/0x8d0 [ 679.342596][T17877] __sys_socket+0x14d/0x260 [ 679.342616][T17877] ? __pfx___sys_socket+0x10/0x10 [ 679.342636][T17877] ? xfd_validate_state+0x61/0x180 [ 679.342655][T17877] ? __pfx_ksys_write+0x10/0x10 [ 679.342674][T17877] __x64_sys_socket+0x72/0xb0 [ 679.342693][T17877] ? lockdep_hardirqs_on+0x7c/0x110 [ 679.342708][T17877] do_syscall_64+0xcd/0xfa0 [ 679.342726][T17877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.342740][T17877] RIP: 0033:0x7fd87978eec9 [ 679.342752][T17877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.342765][T17877] RSP: 002b:00007fd87a5de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 679.342779][T17877] RAX: ffffffffffffffda RBX: 00007fd8799e6180 RCX: 00007fd87978eec9 [ 679.342789][T17877] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 679.342796][T17877] RBP: 00007fd879811f91 R08: 0000000000000000 R09: 0000000000000000 [ 679.342805][T17877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.342813][T17877] R13: 00007fd8799e6218 R14: 00007fd8799e6180 R15: 00007ffe660b6608 [ 679.342832][T17877] [ 680.135544][T17718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.210358][T17718] veth0_vlan: entered promiscuous mode [ 680.369565][T17718] veth1_vlan: entered promiscuous mode [ 680.396842][T17718] veth0_macvtap: entered promiscuous mode [ 680.440447][T17718] veth1_macvtap: entered promiscuous mode [ 680.518404][T17718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.614792][T17718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.762116][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.800761][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.859139][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.891391][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.238105][ T8366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.245970][ T8366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.394833][T11910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.427716][T11910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.615096][T17935] nbd: illegal input index -560326505 [ 681.882431][T17943] FAULT_INJECTION: forcing a failure. [ 681.882431][T17943] name failslab, interval 1, probability 0, space 0, times 0 [ 681.950153][T17943] CPU: 0 UID: 0 PID: 17943 Comm: syz.3.2389 Not tainted syzkaller #0 PREEMPT(full) [ 681.950187][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 681.950202][T17943] Call Trace: [ 681.950210][T17943] [ 681.950219][T17943] dump_stack_lvl+0x16c/0x1f0 [ 681.950256][T17943] should_fail_ex+0x512/0x640 [ 681.950287][T17943] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 681.950318][T17943] should_failslab+0xc2/0x120 [ 681.950351][T17943] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 681.950380][T17943] ? __d_alloc+0x32/0xae0 [ 681.950414][T17943] ? __d_alloc+0x32/0xae0 [ 681.950439][T17943] __d_alloc+0x32/0xae0 [ 681.950465][T17943] ? stack_trace_save+0x8e/0xc0 [ 681.950498][T17943] d_alloc_parallel+0x111/0x1480 [ 681.950541][T17943] ? kasan_save_stack+0x42/0x60 [ 681.950573][T17943] ? __lock_acquire+0xb97/0x1ce0 [ 681.950606][T17943] ? __pfx_d_alloc_parallel+0x10/0x10 [ 681.950645][T17943] ? lockdep_init_map_type+0x5c/0x280 [ 681.950679][T17943] ? lockdep_init_map_type+0x5c/0x280 [ 681.950721][T17943] __lookup_slow+0x193/0x460 [ 681.950757][T17943] ? __pfx___lookup_slow+0x10/0x10 [ 681.950817][T17943] ? lookup_fast+0x156/0x610 [ 681.950860][T17943] walk_component+0x353/0x5b0 [ 681.950888][T17943] link_path_walk+0x627/0xe20 [ 681.950926][T17943] path_openat+0x1b0/0x2cb0 [ 681.950963][T17943] ? __pfx_path_openat+0x10/0x10 [ 681.951006][T17943] do_filp_open+0x20b/0x470 [ 681.951035][T17943] ? __pfx_do_filp_open+0x10/0x10 [ 681.951089][T17943] ? alloc_fd+0x471/0x7d0 [ 681.951128][T17943] do_sys_openat2+0x11b/0x1d0 [ 681.951166][T17943] ? __pfx_do_sys_openat2+0x10/0x10 [ 681.951219][T17943] __x64_sys_openat+0x174/0x210 [ 681.951254][T17943] ? __pfx___x64_sys_openat+0x10/0x10 [ 681.951306][T17943] do_syscall_64+0xcd/0xfa0 [ 681.951339][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.951365][T17943] RIP: 0033:0x7fcd2298eec9 [ 681.951386][T17943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.951410][T17943] RSP: 002b:00007fcd2385e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 681.951435][T17943] RAX: ffffffffffffffda RBX: 00007fcd22be5fa0 RCX: 00007fcd2298eec9 [ 681.951453][T17943] RDX: 000000000018b000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 681.951470][T17943] RBP: 00007fcd22a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 681.951486][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.951502][T17943] R13: 00007fcd22be6038 R14: 00007fcd22be5fa0 R15: 00007ffd4edc5878 [ 681.951541][T17943] [ 685.832517][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.842169][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.245422][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 686.270361][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 686.279368][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 686.292512][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 686.307357][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 686.557754][T17991] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.0.2400: 7 [ 687.102084][T17999] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 687.471956][T12360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.520634][T17986] chnl_net:caif_netlink_parms(): no params data found [ 687.586431][T12360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.637131][T18005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 687.728488][T18005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 687.783968][T12360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.028439][T12360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.179263][T17986] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.194600][T17986] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.212171][T17986] bridge_slave_0: entered allmulticast mode [ 688.222381][T17986] bridge_slave_0: entered promiscuous mode [ 688.234232][T17986] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.243232][T17986] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.259713][T17986] bridge_slave_1: entered allmulticast mode [ 688.308360][T17986] bridge_slave_1: entered promiscuous mode [ 688.388230][T15231] Bluetooth: hci4: command tx timeout [ 688.493016][T17986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.560110][T17986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.769805][T18034] nbd: illegal input index -560326505 [ 688.829422][T17986] team0: Port device team_slave_0 added [ 688.848824][T12360] hsr0: left allmulticast mode [ 688.858149][T12360] hsr_slave_0: left allmulticast mode [ 688.880840][T12360] hsr_slave_1: left allmulticast mode [ 688.908506][T12360] hsr0: left promiscuous mode [ 688.913551][T12360] bridge0: port 3(hsr0) entered disabled state [ 688.935001][T12360] bridge_slave_1: left allmulticast mode [ 688.947856][T12360] bridge_slave_1: left promiscuous mode [ 688.971502][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.008804][T18036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2413'. [ 689.024045][T12360] bridge_slave_0: left allmulticast mode [ 689.049500][T12360] bridge_slave_0: left promiscuous mode [ 689.055647][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.815287][T12360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.830070][T12360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.842070][T12360] bond0 (unregistering): Released all slaves [ 689.863584][T17986] team0: Port device team_slave_1 added [ 690.024812][T12360] HfR: left promiscuous mode [ 690.088924][T17986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.095985][T17986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.124132][T17986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.162289][T17986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.174109][T17986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.214678][T17986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.283172][T12360] tipc: Left network mode [ 690.467793][T15231] Bluetooth: hci4: command tx timeout [ 690.489100][T17986] hsr_slave_0: entered promiscuous mode [ 690.496187][T17986] hsr_slave_1: entered promiscuous mode [ 690.541080][T17986] debugfs: 'hsr0' already exists in 'hsr' [ 690.562255][T17986] Cannot create hsr debugfs directory [ 691.211617][T12360] hsr_slave_0: left promiscuous mode [ 691.234144][T12360] hsr_slave_1: left promiscuous mode [ 691.305459][T12360] veth0_macvtap: left promiscuous mode [ 691.311948][T12360] veth1_vlan: left promiscuous mode [ 691.317492][T12360] veth0_vlan: left promiscuous mode [ 691.971623][T12360] team0 (unregistering): Port device team_slave_1 removed [ 692.031181][T12360] team0 (unregistering): Port device team_slave_0 removed [ 692.552554][T15231] Bluetooth: hci4: command tx timeout [ 692.765742][T18130] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.0.2434: 7 [ 692.981474][T18135] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 693.662008][T17986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 693.712432][T17986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 693.727313][T17986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 693.755876][T17986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 694.054226][T17986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.244053][T17986] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.288870][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.296005][T12360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.323150][T18175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 694.360673][ T8367] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.367911][ T8367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.648775][T17986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 694.666263][T17986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.677143][T15231] Bluetooth: hci4: command tx timeout [ 694.834041][T18180] ptrace attach of "./syz-executor exec"[18188] was attempted by "./syz-executor exec"[18180] [ 695.349211][T17986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.496180][T17986] veth0_vlan: entered promiscuous mode [ 695.513538][T17986] veth1_vlan: entered promiscuous mode [ 695.631229][T17986] veth0_macvtap: entered promiscuous mode [ 695.682533][T17986] veth1_macvtap: entered promiscuous mode [ 695.721836][T17986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.759234][T17986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.913456][ T1139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.943004][ T1139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.015001][T18215] overlayfs: missing 'lowerdir' [ 696.030682][ T1139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.056971][ T1139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.297263][ T8367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.325993][ T8367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.495720][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.513726][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.801550][T18234] phram: not enough arguments [ 696.847333][T18234] Line length is too long: Should be less than 4094 [ 696.889323][T18240] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 696.937897][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2453'. [ 696.961558][T18242] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 696.963275][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2453'. [ 698.077453][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2456'. [ 698.604335][T18279] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 699.413137][T18289] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2459'. [ 699.785700][T18295] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2460'. [ 699.830511][T18294] delete_channel: no stack [ 700.043710][T18309] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2463: 7 [ 700.201764][T18312] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 700.223352][T18312] deleting an unspecified loop device is not supported. [ 701.510622][T18338] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 702.243223][T18346] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2474'. [ 702.863740][T18356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2478'. [ 703.285623][T18358] random: crng reseeded on system resumption [ 704.890646][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2487'. [ 705.535881][T18402] FAULT_INJECTION: forcing a failure. [ 705.535881][T18402] name failslab, interval 1, probability 0, space 0, times 0 [ 705.552532][T18402] CPU: 0 UID: 0 PID: 18402 Comm: syz.1.2490 Not tainted syzkaller #0 PREEMPT(full) [ 705.552568][T18402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 705.552583][T18402] Call Trace: [ 705.552592][T18402] [ 705.552601][T18402] dump_stack_lvl+0x16c/0x1f0 [ 705.552636][T18402] should_fail_ex+0x512/0x640 [ 705.552665][T18402] ? __kmalloc_cache_noprof+0x5f/0x780 [ 705.552708][T18402] should_failslab+0xc2/0x120 [ 705.552741][T18402] __kmalloc_cache_noprof+0x72/0x780 [ 705.552777][T18402] ? net_alloc_generic+0x1e/0x70 [ 705.552806][T18402] ? copy_net_ns+0xe9/0x690 [ 705.552837][T18402] ? copy_net_ns+0x136/0x690 [ 705.552875][T18402] ? copy_net_ns+0x136/0x690 [ 705.552906][T18402] copy_net_ns+0x136/0x690 [ 705.552936][T18402] ? copy_cgroup_ns+0x71/0x6b0 [ 705.552967][T18402] create_new_namespaces+0x3ea/0xa90 [ 705.553011][T18402] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 705.553044][T18402] ksys_unshare+0x45b/0xa40 [ 705.553076][T18402] ? __pfx_ksys_unshare+0x10/0x10 [ 705.553112][T18402] ? syscall_user_dispatch+0x78/0x140 [ 705.553160][T18402] __x64_sys_unshare+0x31/0x40 [ 705.553192][T18402] do_syscall_64+0xcd/0xfa0 [ 705.553223][T18402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.553249][T18402] RIP: 0033:0x7f351c18eec9 [ 705.553269][T18402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.553296][T18402] RSP: 002b:00007f351a3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 705.553322][T18402] RAX: ffffffffffffffda RBX: 00007f351c3e6180 RCX: 00007f351c18eec9 [ 705.553340][T18402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 705.553355][T18402] RBP: 00007f351c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.553371][T18402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.553387][T18402] R13: 00007f351c3e6218 R14: 00007f351c3e6180 R15: 00007ffe55342108 [ 705.553423][T18402] [ 706.391646][T18404] FAULT_INJECTION: forcing a failure. [ 706.391646][T18404] name fail_futex, interval 1, probability 0, space 0, times 0 [ 706.419788][T18404] CPU: 0 UID: 0 PID: 18404 Comm: syz.0.2492 Not tainted syzkaller #0 PREEMPT(full) [ 706.419810][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 706.419819][T18404] Call Trace: [ 706.419824][T18404] [ 706.419831][T18404] dump_stack_lvl+0x16c/0x1f0 [ 706.419860][T18404] should_fail_ex+0x512/0x640 [ 706.419881][T18404] get_futex_key+0x1d0/0x1560 [ 706.419903][T18404] ? __pfx_get_futex_key+0x10/0x10 [ 706.419923][T18404] ? __pick_eevdf+0x30a/0x670 [ 706.419943][T18404] futex_wait_setup+0x9d/0x550 [ 706.419971][T18404] __futex_wait+0x193/0x2f0 [ 706.419993][T18404] ? __pfx___futex_wait+0x10/0x10 [ 706.420013][T18404] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 706.420027][T18404] ? lockdep_hardirqs_on+0x7c/0x110 [ 706.420044][T18404] ? __pfx_futex_wake_mark+0x10/0x10 [ 706.420069][T18404] ? futex_private_hash_put+0x176/0x300 [ 706.420088][T18404] ? futex_private_hash_put+0x18a/0x300 [ 706.420107][T18404] futex_wait+0xe8/0x380 [ 706.420128][T18404] ? __pfx_futex_wait+0x10/0x10 [ 706.420153][T18404] ? kmem_cache_free+0x2d4/0x6c0 [ 706.420167][T18404] ? putname+0x154/0x1a0 [ 706.420189][T18404] do_futex+0x229/0x350 [ 706.420207][T18404] ? __pfx_do_futex+0x10/0x10 [ 706.420231][T18404] __x64_sys_futex+0x1e0/0x4c0 [ 706.420251][T18404] ? __x64_sys_openat+0x174/0x210 [ 706.420271][T18404] ? __pfx___x64_sys_futex+0x10/0x10 [ 706.420297][T18404] do_syscall_64+0xcd/0xfa0 [ 706.420314][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.420329][T18404] RIP: 0033:0x7f3352b8eec9 [ 706.420341][T18404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.420355][T18404] RSP: 002b:00007f3353adf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 706.420369][T18404] RAX: ffffffffffffffda RBX: 00007f3352de5fa8 RCX: 00007f3352b8eec9 [ 706.420378][T18404] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3352de5fa8 [ 706.420386][T18404] RBP: 00007f3352de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 706.420395][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.420403][T18404] R13: 00007f3352de6038 R14: 00007ffd1d45da70 R15: 00007ffd1d45db58 [ 706.420423][T18404] [ 707.170265][T18412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2496'. [ 707.237714][T18412] hsr_slave_0: left promiscuous mode [ 707.248208][T18412] hsr_slave_1: left promiscuous mode [ 709.602430][T18463] sctp: [Deprecated]: syz.2.2509 (pid 18463) Use of int in maxseg socket option. [ 709.602430][T18463] Use struct sctp_assoc_value instead [ 709.755548][T18468] netlink: 'syz.2.2509': attribute type 1 has an invalid length. [ 713.591244][T15231] Bluetooth: hci2: unexpected subevent 0x01 length: 125 > 18 [ 713.991323][T18545] zswap: compressor not available [ 714.580404][T18561] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2530'. getty: ttyS0: read error: Resource temporarily unavailable [ 715.668490][ T5846] Bluetooth: hci2: command 0x0419 tx timeout [ 716.067207][T15231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 716.079256][T15231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 716.088048][T15231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 716.096165][T15231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.105914][T15231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 717.025299][T12360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.105025][T18615] delete_channel: no stack [ 717.251088][T12360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.365061][T12360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.491183][T18591] chnl_net:caif_netlink_parms(): no params data found [ 717.528102][T18624] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 717.591806][T12360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.683094][T18626] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.0.2545: 7 [ 717.800661][T18630] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.0.2546: 7 [ 718.014038][T18591] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.041194][T18591] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.055145][T18591] bridge_slave_0: entered allmulticast mode [ 718.064631][T18591] bridge_slave_0: entered promiscuous mode [ 718.094089][T18591] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.117787][T18591] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.125046][T18591] bridge_slave_1: entered allmulticast mode [ 718.142295][T18591] bridge_slave_1: entered promiscuous mode [ 718.148341][ T5846] Bluetooth: hci1: command tx timeout [ 718.296640][T18591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.332782][T18591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.454557][T12360] gretap0: left allmulticast mode [ 718.466134][T12360] gretap0: left promiscuous mode [ 718.476582][T12360] bridge0: port 3(gretap0) entered disabled state [ 718.489112][T12360] bridge_slave_1: left allmulticast mode [ 718.495338][T12360] bridge_slave_1: left promiscuous mode [ 718.504704][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.525753][T12360] bridge_slave_0: left allmulticast mode [ 718.534005][T12360] bridge_slave_0: left promiscuous mode [ 718.547173][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.782850][T12360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.795042][T12360] bond0 (unregistering): Released all slaves [ 719.872382][T18591] team0: Port device team_slave_0 added [ 719.925505][T18591] team0: Port device team_slave_1 added [ 720.049278][T12360] .^: left promiscuous mode [ 720.089705][T18591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.127686][T18591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.163430][T18591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.182547][T18591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.190108][T18591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.238092][ T5846] Bluetooth: hci1: command tx timeout [ 720.267652][T18591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.331165][T12360] tipc: Left network mode [ 720.445046][T18591] hsr_slave_0: entered promiscuous mode [ 720.460661][T18591] hsr_slave_1: entered promiscuous mode [ 720.889716][T18680] delete_channel: no stack [ 721.287246][T18690] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2553'. [ 721.663184][ T8366] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:13: bg 5: bad block bitmap checksum [ 721.750910][T12360] hsr_slave_0: left promiscuous mode [ 721.758174][ T8366] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 920 with max blocks 8 with error 74 [ 721.775071][ T8366] EXT4-fs (sda1): This should not happen!! Data will be lost [ 721.775071][ T8366] [ 721.875279][T12360] hsr_slave_1: left promiscuous mode [ 721.893974][T12360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.931973][T12360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.983638][T12360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.039864][T12360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.145138][T12360] veth0_macvtap: left promiscuous mode [ 722.162920][T12360] veth1_vlan: left promiscuous mode [ 722.177384][T12360] veth0_vlan: left promiscuous mode [ 722.309274][ T5846] Bluetooth: hci1: command tx timeout [ 723.065663][T12360] team0 (unregistering): Port device team_slave_0 removed [ 724.049904][T18726] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 724.387668][ T5846] Bluetooth: hci1: command tx timeout [ 725.048853][T18741] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 725.063227][T18591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 725.112874][T18591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 725.171211][T18591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 725.228896][T18591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 725.497292][T18743] nbd: socks must be embedded in a SOCK_ITEM attr [ 725.642917][T18591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.712655][T18591] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.753302][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.760543][T12360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.802919][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.810175][T12360] bridge0: port 2(bridge_slave_1) entered forwarding state syzkaller syzkaller login: [ 726.384990][T18591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.536831][T18591] veth0_vlan: entered promiscuous mode [ 726.572031][T18591] veth1_vlan: entered promiscuous mode [ 726.724492][T18792] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 726.745080][T18591] veth0_macvtap: entered promiscuous mode [ 726.813224][T18591] veth1_macvtap: entered promiscuous mode [ 726.967399][T18591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.013918][T18591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.072397][ T3446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.107418][ T3446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.164106][ T3446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.274955][ T8367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.347235][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.365703][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.515549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.585694][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.016926][T18845] kAFS: Invalid Command on /proc/fs/afs/cells file [ 731.229247][T18893] FAULT_INJECTION: forcing a failure. [ 731.229247][T18893] name failslab, interval 1, probability 0, space 0, times 0 [ 731.344913][T18893] CPU: 1 UID: 0 PID: 18893 Comm: syz.1.2589 Not tainted syzkaller #0 PREEMPT(full) [ 731.344950][T18893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 731.344967][T18893] Call Trace: [ 731.344976][T18893] [ 731.344986][T18893] dump_stack_lvl+0x16c/0x1f0 [ 731.345023][T18893] should_fail_ex+0x512/0x640 [ 731.345053][T18893] ? fs_reclaim_acquire+0xae/0x150 [ 731.345088][T18893] should_failslab+0xc2/0x120 [ 731.345123][T18893] __kmalloc_noprof+0xdd/0x880 [ 731.345160][T18893] ? kfree+0x252/0x6d0 [ 731.345194][T18893] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 731.345229][T18893] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 731.345264][T18893] tomoyo_realpath_from_path+0xc2/0x6e0 [ 731.345304][T18893] tomoyo_check_open_permission+0x2ab/0x3c0 [ 731.345345][T18893] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 731.345422][T18893] ? do_raw_spin_lock+0x12c/0x2b0 [ 731.345471][T18893] tomoyo_file_open+0x6b/0x90 [ 731.345503][T18893] security_file_open+0x84/0x1e0 [ 731.345529][T18893] do_dentry_open+0x596/0x1530 [ 731.345569][T18893] vfs_open+0x82/0x3f0 [ 731.345608][T18893] path_openat+0x1de4/0x2cb0 [ 731.345649][T18893] ? __pfx_path_openat+0x10/0x10 [ 731.345684][T18893] do_filp_open+0x20b/0x470 [ 731.345712][T18893] ? __pfx_do_filp_open+0x10/0x10 [ 731.345762][T18893] ? alloc_fd+0x471/0x7d0 [ 731.345798][T18893] do_sys_openat2+0x11b/0x1d0 [ 731.345834][T18893] ? __pfx_do_sys_openat2+0x10/0x10 [ 731.345867][T18893] ? find_held_lock+0x2b/0x80 [ 731.345894][T18893] ? handle_mm_fault+0x2ab/0xd10 [ 731.345943][T18893] __x64_sys_openat+0x174/0x210 [ 731.345982][T18893] ? __pfx___x64_sys_openat+0x10/0x10 [ 731.346031][T18893] do_syscall_64+0xcd/0xfa0 [ 731.346062][T18893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.346087][T18893] RIP: 0033:0x7f351c18d710 [ 731.346107][T18893] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 731.346130][T18893] RSP: 002b:00007f351cf59f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 731.346155][T18893] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f351c18d710 [ 731.346169][T18893] RDX: 0000000000000000 RSI: 00007f351cf59fa0 RDI: 00000000ffffff9c [ 731.346184][T18893] RBP: 00007f351cf59fa0 R08: 0000000000000000 R09: 0000000000000000 [ 731.346199][T18893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 731.346214][T18893] R13: 00007f351c3e6038 R14: 00007f351c3e5fa0 R15: 00007ffe55342108 [ 731.346258][T18893] [ 731.613391][T18893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 732.032828][T18914] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 syzkaller syzkaller login: [ 733.483877][T18957] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 733.674098][T18964] WARNING! power/level is deprecated; use power/control instead [ 733.833518][T18972] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2608: 7 [ 733.849791][T18974] nbd: illegal input index -560326505 [ 734.611628][T18989] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 734.648486][T18990] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 734.671383][T18990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 734.687716][T18990] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 734.808737][T18990] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 734.835042][T18990] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 734.846976][T18990] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 734.863623][T18990] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 734.880632][T18990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 734.889552][T18990] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 734.929036][T18990] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 735.162490][T18996] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2614'. [ 735.556166][T19007] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 736.374258][T19038] nbd: illegal input index -560326505 [ 736.517255][T19044] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 736.569933][T19044] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 736.707740][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 736.756147][T19051] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 736.789811][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 736.868124][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 736.926254][T19055] FAULT_INJECTION: forcing a failure. [ 736.926254][T19055] name failslab, interval 1, probability 0, space 0, times 0 [ 736.947674][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 736.963608][T19055] CPU: 0 UID: 0 PID: 19055 Comm: syz.1.2630 Not tainted syzkaller #0 PREEMPT(full) [ 736.963639][T19055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 736.963653][T19055] Call Trace: [ 736.963661][T19055] [ 736.963670][T19055] dump_stack_lvl+0x16c/0x1f0 [ 736.963703][T19055] should_fail_ex+0x512/0x640 [ 736.963731][T19055] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 736.963760][T19055] should_failslab+0xc2/0x120 [ 736.963790][T19055] kmem_cache_alloc_node_noprof+0x78/0x770 [ 736.963815][T19055] ? __alloc_skb+0x2b2/0x380 [ 736.963847][T19055] ? __alloc_skb+0x2b2/0x380 [ 736.963869][T19055] ? __pfx_netlink_insert+0x10/0x10 [ 736.963895][T19055] __alloc_skb+0x2b2/0x380 [ 736.963927][T19055] ? __pfx___alloc_skb+0x10/0x10 [ 736.963954][T19055] ? netlink_autobind.isra.0+0x158/0x370 [ 736.963987][T19055] netlink_alloc_large_skb+0x69/0x140 [ 736.964017][T19055] netlink_sendmsg+0x698/0xdd0 [ 736.964051][T19055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.964085][T19055] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 736.964123][T19055] ____sys_sendmsg+0xa98/0xc70 [ 736.964159][T19055] ? copy_msghdr_from_user+0x10a/0x160 [ 736.964185][T19055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.964234][T19055] ___sys_sendmsg+0x134/0x1d0 [ 736.964265][T19055] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.964336][T19055] __sys_sendmsg+0x16d/0x220 [ 736.964365][T19055] ? __pfx___sys_sendmsg+0x10/0x10 [ 736.964416][T19055] do_syscall_64+0xcd/0xfa0 [ 736.964446][T19055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.964471][T19055] RIP: 0033:0x7f351c18eec9 [ 736.964490][T19055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.964513][T19055] RSP: 002b:00007f351cf5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.964534][T19055] RAX: ffffffffffffffda RBX: 00007f351c3e5fa0 RCX: 00007f351c18eec9 [ 736.964550][T19055] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000003 [ 736.964564][T19055] RBP: 00007f351cf5a090 R08: 0000000000000000 R09: 0000000000000000 [ 736.964577][T19055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.964591][T19055] R13: 00007f351c3e6038 R14: 00007f351c3e5fa0 R15: 00007ffe55342108 [ 736.964626][T19055] [ 737.476256][T19060] netlink: 36332 bytes leftover after parsing attributes in process `syz.3.2631'. [ 737.662374][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2637'. [ 738.368978][T19088] bond0: invalid ARP target specified [ 738.414763][T19091] bond0: invalid ARP target specified [ 738.516232][T19095] FAULT_INJECTION: forcing a failure. [ 738.516232][T19095] name failslab, interval 1, probability 0, space 0, times 0 [ 738.599928][T19095] CPU: 1 UID: 0 PID: 19095 Comm: syz.0.2642 Not tainted syzkaller #0 PREEMPT(full) [ 738.599950][T19095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 738.599958][T19095] Call Trace: [ 738.599963][T19095] [ 738.599969][T19095] dump_stack_lvl+0x16c/0x1f0 [ 738.599990][T19095] should_fail_ex+0x512/0x640 [ 738.600007][T19095] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 738.600024][T19095] should_failslab+0xc2/0x120 [ 738.600042][T19095] kmem_cache_alloc_noprof+0x75/0x6e0 [ 738.600055][T19095] ? security_file_alloc+0x34/0x2b0 [ 738.600073][T19095] ? security_file_alloc+0x34/0x2b0 [ 738.600085][T19095] security_file_alloc+0x34/0x2b0 [ 738.600098][T19095] init_file+0x93/0x4c0 [ 738.600117][T19095] alloc_empty_file+0x73/0x1e0 [ 738.600137][T19095] path_openat+0xda/0x2cb0 [ 738.600158][T19095] ? __pfx_path_openat+0x10/0x10 [ 738.600178][T19095] do_filp_open+0x20b/0x470 [ 738.600193][T19095] ? __pfx_do_filp_open+0x10/0x10 [ 738.600222][T19095] ? alloc_fd+0x471/0x7d0 [ 738.600240][T19095] do_sys_openat2+0x11b/0x1d0 [ 738.600260][T19095] ? __pfx_do_sys_openat2+0x10/0x10 [ 738.600280][T19095] ? __pfx___might_resched+0x10/0x10 [ 738.600300][T19095] __x64_sys_openat+0x174/0x210 [ 738.600320][T19095] ? __pfx___x64_sys_openat+0x10/0x10 [ 738.600347][T19095] do_syscall_64+0xcd/0xfa0 [ 738.600364][T19095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.600378][T19095] RIP: 0033:0x7f3352b8eec9 [ 738.600390][T19095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.600403][T19095] RSP: 002b:00007f3353adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 738.600417][T19095] RAX: ffffffffffffffda RBX: 00007f3352de5fa0 RCX: 00007f3352b8eec9 [ 738.600426][T19095] RDX: 0000000000101041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 738.600434][T19095] RBP: 00007f3352c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 738.600442][T19095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.600450][T19095] R13: 00007f3352de6038 R14: 00007f3352de5fa0 R15: 00007ffd1d45db58 [ 738.600470][T19095] [ 738.869714][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 738.955915][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 739.027830][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 740.950085][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 741.027691][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 741.117669][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 742.970952][T19173] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 744.279250][T19190] random: crng reseeded on system resumption [ 744.282307][T19189] nbd: illegal input index -560326505 [ 744.729958][T19205] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2667'. [ 745.352231][T19225] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 745.411867][T19224] FAULT_INJECTION: forcing a failure. [ 745.411867][T19224] name failslab, interval 1, probability 0, space 0, times 0 [ 745.465147][T19225] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.2669: iget: checksum invalid [ 745.483603][T19225] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 745.494977][T19225] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.2669: iget: checksum invalid [ 745.506143][T19225] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 745.517778][T19225] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.2669: iget: checksum invalid [ 745.529361][T19225] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 745.541208][T19225] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.2669: iget: checksum invalid [ 745.605880][T19225] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 745.617446][T19225] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 745.627227][T19225] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 745.647650][T19224] CPU: 1 UID: 0 PID: 19224 Comm: syz.0.2670 Not tainted syzkaller #0 PREEMPT(full) [ 745.647670][T19224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 745.647679][T19224] Call Trace: [ 745.647684][T19224] [ 745.647690][T19224] dump_stack_lvl+0x16c/0x1f0 [ 745.647711][T19224] should_fail_ex+0x512/0x640 [ 745.647728][T19224] ? fs_reclaim_acquire+0xae/0x150 [ 745.647748][T19224] should_failslab+0xc2/0x120 [ 745.647767][T19224] __kmalloc_noprof+0xdd/0x880 [ 745.647789][T19224] ? tomoyo_encode2+0x100/0x3e0 [ 745.647807][T19224] ? tomoyo_encode2+0x100/0x3e0 [ 745.647819][T19224] tomoyo_encode2+0x100/0x3e0 [ 745.647842][T19224] tomoyo_encode+0x29/0x50 [ 745.647855][T19224] tomoyo_realpath_from_path+0x18f/0x6e0 [ 745.647876][T19224] tomoyo_check_open_permission+0x2ab/0x3c0 [ 745.647897][T19224] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 745.647942][T19224] ? do_raw_spin_lock+0x12c/0x2b0 [ 745.647969][T19224] tomoyo_file_open+0x6b/0x90 [ 745.647987][T19224] security_file_open+0x84/0x1e0 [ 745.648001][T19224] do_dentry_open+0x596/0x1530 [ 745.648023][T19224] vfs_open+0x82/0x3f0 [ 745.648045][T19224] path_openat+0x1de4/0x2cb0 [ 745.648067][T19224] ? __pfx_path_openat+0x10/0x10 [ 745.648087][T19224] do_filp_open+0x20b/0x470 [ 745.648102][T19224] ? __pfx_do_filp_open+0x10/0x10 [ 745.648132][T19224] ? alloc_fd+0x471/0x7d0 [ 745.648152][T19224] do_sys_openat2+0x11b/0x1d0 [ 745.648170][T19224] ? __pfx_do_sys_openat2+0x10/0x10 [ 745.648192][T19224] ? find_held_lock+0x2b/0x80 [ 745.648206][T19224] ? handle_mm_fault+0x2ab/0xd10 [ 745.648231][T19224] __x64_sys_openat+0x174/0x210 [ 745.648252][T19224] ? __pfx___x64_sys_openat+0x10/0x10 [ 745.648279][T19224] do_syscall_64+0xcd/0xfa0 [ 745.648297][T19224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.648311][T19224] RIP: 0033:0x7f3352b8eec9 [ 745.648323][T19224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.648337][T19224] RSP: 002b:00007f3353a9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 745.648351][T19224] RAX: ffffffffffffffda RBX: 00007f3352de6180 RCX: 00007f3352b8eec9 [ 745.648360][T19224] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 745.648369][T19224] RBP: 00007f3352c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 745.648377][T19224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.648386][T19224] R13: 00007f3352de6218 R14: 00007f3352de6180 R15: 00007ffd1d45db58 [ 745.648405][T19224] [ 745.648442][T19224] ERROR: Out of memory at tomoyo_realpath_from_path. [ 746.057204][T19236] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 746.834391][T19258] nbd: illegal input index -560326505 [ 746.997848][T19262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2685'. [ 747.023344][T19264] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 747.272679][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.279309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.616274][T19275] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2679'. [ 747.737087][T19275] IPv6: NLM_F_CREATE should be specified when creating new route [ 747.965384][T19275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.973123][T19275] IPv6: NLM_F_CREATE should be set when creating new route [ 747.980392][T19275] IPv6: NLM_F_CREATE should be set when creating new route [ 749.410731][T19304] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.0.2687: 7 [ 749.504741][T15231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 749.510136][T19309] nbd: illegal input index -560326505 [ 749.520525][T15231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 749.530411][T15231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 749.539428][T15231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 749.550360][T15231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 749.722692][T19313] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.0.2696: 7 [ 749.785614][T19314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2689'. [ 750.025626][T19322] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 750.316886][ T8372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.345797][T19330] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2694'. [ 750.500698][ T8372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.544520][T19306] chnl_net:caif_netlink_parms(): no params data found [ 750.701724][ T8372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.100850][ T8372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.293904][T19306] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.312151][T19306] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.325663][T19306] bridge_slave_0: entered allmulticast mode [ 751.364774][T19306] bridge_slave_0: entered promiscuous mode [ 751.389667][T19306] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.425897][T19306] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.433393][T19306] bridge_slave_1: entered allmulticast mode [ 751.444367][T19306] bridge_slave_1: entered promiscuous mode [ 751.510406][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 751.524513][T19306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.588123][ T5846] Bluetooth: hci2: command tx timeout [ 751.609671][T19306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.033840][T19374] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2703'. [ 752.483320][T19380] random: crng reseeded on system resumption [ 752.506974][T19380] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 752.506974][T19380] program syz.0.2706 not setting count and/or reply_len properly [ 752.542570][T19306] team0: Port device team_slave_0 added [ 752.582855][T19306] team0: Port device team_slave_1 added [ 752.652110][ T8372] gretap0: left allmulticast mode [ 752.657200][ T8372] gretap0: left promiscuous mode [ 752.692907][ T8372] bridge0: port 3(gretap0) entered disabled state [ 752.743468][ T8372] bridge_slave_1: left allmulticast mode [ 752.753621][ T8372] bridge_slave_1: left promiscuous mode [ 752.765311][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.784149][ T8372] bridge_slave_0: left allmulticast mode [ 752.793866][ T8372] bridge_slave_0: left promiscuous mode [ 752.810591][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.982529][T19395] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2708'. [ 753.668495][ T5846] Bluetooth: hci2: command tx timeout [ 754.306948][ T8372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.340781][ T8372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.509660][ T8372] bond0 (unregistering): Released all slaves [ 754.660787][T19306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.681286][T19306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.716222][T19306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.730972][ T8372] HšK¸Þ&S: left promiscuous mode [ 754.765318][T19428] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2714: 7 [ 754.805765][T19306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.823160][T19306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.849133][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.878654][T19306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.908223][ T8372] tipc: Left network mode [ 755.136655][T19306] hsr_slave_0: entered promiscuous mode [ 755.153862][T19306] hsr_slave_1: entered promiscuous mode [ 755.167240][T19306] debugfs: 'hsr0' already exists in 'hsr' [ 755.178119][T19306] Cannot create hsr debugfs directory [ 755.179149][T19434] FAULT_INJECTION: forcing a failure. [ 755.179149][T19434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 755.221937][T19434] CPU: 0 UID: 0 PID: 19434 Comm: syz.0.2716 Not tainted syzkaller #0 PREEMPT(full) [ 755.221971][T19434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 755.221987][T19434] Call Trace: [ 755.221996][T19434] [ 755.222006][T19434] dump_stack_lvl+0x16c/0x1f0 [ 755.222042][T19434] should_fail_ex+0x512/0x640 [ 755.222078][T19434] should_fail_alloc_page+0xe7/0x130 [ 755.222113][T19434] prepare_alloc_pages+0x3c2/0x610 [ 755.222144][T19434] ? rcu_is_watching+0x12/0xc0 [ 755.222174][T19434] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 755.222203][T19434] ? __lock_acquire+0xb97/0x1ce0 [ 755.222259][T19434] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 755.222285][T19434] ? do_raw_spin_lock+0x12c/0x2b0 [ 755.222321][T19434] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 755.222355][T19434] ? find_held_lock+0x2b/0x80 [ 755.222388][T19434] ? __lock_acquire+0xb97/0x1ce0 [ 755.222417][T19434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 755.222462][T19434] ? policy_nodemask+0xea/0x4e0 [ 755.222506][T19434] alloc_pages_mpol+0x1fb/0x550 [ 755.222539][T19434] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 755.222584][T19434] folio_alloc_mpol_noprof+0x36/0x2f0 [ 755.222626][T19434] shmem_alloc_folio+0x135/0x160 [ 755.222664][T19434] shmem_alloc_and_add_folio+0x499/0xc20 [ 755.222712][T19434] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 755.222754][T19434] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 755.222787][T19434] shmem_get_folio_gfp+0x67f/0x1610 [ 755.222820][T19434] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 755.222846][T19434] ? __pfx_timestamp_truncate+0x10/0x10 [ 755.222882][T19434] shmem_fault+0x1fe/0xa30 [ 755.222910][T19434] ? __pfx_shmem_fault+0x10/0x10 [ 755.222933][T19434] ? __lock_acquire+0x62e/0x1ce0 [ 755.222971][T19434] ? __pfx___up_read+0x10/0x10 [ 755.223010][T19434] ? inode_to_bdi+0x9e/0x160 [ 755.223046][T19434] ? __pfx_filemap_map_pages+0x10/0x10 [ 755.223070][T19434] __do_fault+0x10a/0x490 [ 755.223099][T19434] ? __pfx_filemap_map_pages+0x10/0x10 [ 755.223121][T19434] do_pte_missing+0x1a6/0x3ba0 [ 755.223161][T19434] ? find_held_lock+0x2b/0x80 [ 755.223188][T19434] ? __handle_mm_fault+0x1529/0x2aa0 [ 755.223238][T19434] __handle_mm_fault+0x1556/0x2aa0 [ 755.223286][T19434] ? __pfx___handle_mm_fault+0x10/0x10 [ 755.223328][T19434] ? __pte_offset_map_lock+0x174/0x310 [ 755.223361][T19434] ? find_held_lock+0x2b/0x80 [ 755.223398][T19434] ? follow_page_pte+0x5cf/0x1390 [ 755.223440][T19434] handle_mm_fault+0x589/0xd10 [ 755.223487][T19434] __get_user_pages+0x54e/0x3530 [ 755.223532][T19434] ? down_read_killable+0x220/0x4b0 [ 755.223571][T19434] ? __pfx___get_user_pages+0x10/0x10 [ 755.223616][T19434] faultin_page_range+0x338/0x940 [ 755.223660][T19434] madvise_do_behavior+0x34c/0x530 [ 755.223703][T19434] ? __pfx_madvise_do_behavior+0x10/0x10 [ 755.223741][T19434] ? down_read+0x13d/0x480 [ 755.223789][T19434] do_madvise+0x176/0x240 [ 755.223820][T19434] ? __pfx_do_madvise+0x10/0x10 [ 755.223849][T19434] ? do_futex+0x122/0x350 [ 755.223908][T19434] ? xfd_validate_state+0x61/0x180 [ 755.223943][T19434] ? __pfx_do_writev+0x10/0x10 [ 755.223976][T19434] __x64_sys_madvise+0xa9/0x110 [ 755.224012][T19434] ? lockdep_hardirqs_on+0x7c/0x110 [ 755.224042][T19434] do_syscall_64+0xcd/0xfa0 [ 755.224075][T19434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.224102][T19434] RIP: 0033:0x7f3352b8eec9 [ 755.224125][T19434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.224152][T19434] RSP: 002b:00007f3353adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 755.224178][T19434] RAX: ffffffffffffffda RBX: 00007f3352de5fa0 RCX: 00007f3352b8eec9 [ 755.224195][T19434] RDX: 0000000000000017 RSI: 0000000000100000 RDI: 0000000000000000 [ 755.224211][T19434] RBP: 00007f3352c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 755.224234][T19434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.224249][T19434] R13: 00007f3352de6038 R14: 00007f3352de5fa0 R15: 00007ffd1d45db58 [ 755.224287][T19434] [ 755.618436][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.747969][ T5846] Bluetooth: hci2: command tx timeout [ 755.954859][T19452] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.106908][ T5846] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 756.106946][ T5846] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 756.122468][ T5846] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 756.122506][ T5846] Bluetooth: hci1: Unknown advertising packet type: 0x7c [ 756.129721][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0d [ 756.209634][T19464] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.236221][T19448] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.2717: iget: checksum invalid [ 756.255562][T19448] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 756.268809][T19448] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.2717: iget: checksum invalid [ 756.442881][T19448] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 756.460943][T19448] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.2717: iget: checksum invalid [ 756.472687][T19448] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 756.530664][T19448] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.2717: iget: checksum invalid [ 756.573251][T19448] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 756.582835][T19448] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 756.592759][T19448] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 757.180219][T19475] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 757.444610][T19479] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 757.483877][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.499194][ T8372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.536855][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.587701][ T8372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.644394][T19482] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 757.757328][ T8372] veth0_macvtap: left promiscuous mode [ 757.780354][ T8372] veth1_vlan: left promiscuous mode [ 757.800499][ T8372] veth0_vlan: left promiscuous mode [ 757.827967][ T5846] Bluetooth: hci2: command tx timeout [ 758.636305][ T8372] team0 (unregistering): Port device team_slave_1 removed [ 758.706471][ T8372] team0 (unregistering): Port device team_slave_0 removed [ 758.904665][T19505] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 759.841726][T19306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 760.189998][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2734'. [ 760.278283][T19306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 760.392590][T19306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 760.469761][T19306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 760.649307][T19546] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 760.765760][T19306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.916543][T19306] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.954762][T19549] Invalid ELF header magic: != ELF [ 760.997090][T19547] delete_channel: no stack [ 761.017361][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.017502][T12363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.053815][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.053925][ T8382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.908189][T19306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.924700][T19578] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 762.206374][T19306] veth0_vlan: entered promiscuous mode [ 762.269743][T19306] veth1_vlan: entered promiscuous mode [ 762.542149][T19306] veth0_macvtap: entered promiscuous mode [ 762.580777][T19306] veth1_macvtap: entered promiscuous mode [ 762.683714][T19306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.726313][T19306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.737313][T19591] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2742'. [ 762.771612][T11908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.852855][T11908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.883295][T11908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.073782][T11908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.248236][T19596] mkiss: ax0: crc mode is auto. [ 763.350283][T19607] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 763.888594][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.918415][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.102828][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.127640][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.972892][T19626] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 764.979226][T19626] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 765.012980][T19626] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 765.027435][T19626] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 765.084997][T19626] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 765.105441][T19626] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 765.412365][T19655] nbd: must specify at least one socket [ 765.952502][T19663] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2753: 7 [ 766.350960][T19670] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 767.027744][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 767.028150][T15231] Bluetooth: hci1: command 0x0c1a tx timeout [ 767.033801][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 767.080776][T19671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 767.086978][T19671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 767.093575][T19671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 767.103740][T19671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 767.559724][T19694] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 767.624925][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 767.996483][T19698] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 768.033671][T19698] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2763'. [ 768.557696][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 769.042485][T19722] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.3.2768: 7 [ 769.121726][T17721] Bluetooth: hci1: command 0x0c1a tx timeout [ 769.121740][T15231] Bluetooth: hci4: command 0x0c1a tx timeout [ 769.134069][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 769.166655][T19725] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.3.2769: 7 [ 769.641204][T19704] kexec: Could not allocate control_code_buffer [ 769.695075][T19737] vivid-004: ================= START STATUS ================= [ 769.777016][T19747] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 769.820305][T19737] vivid-004: Generate PTS: true [ 769.868952][T19737] vivid-004: Generate SCR: true [ 769.910878][T19737] tpg source WxH: 320x240 (Y'CbCr) [ 769.967937][T19737] tpg field: 1 [ 769.975980][T19737] tpg crop: (0,0)/320x240 [ 770.012442][T19737] tpg compose: (0,0)/320x240 [ 770.048821][T19737] tpg colorspace: 8 [ 770.068089][T19737] tpg transfer function: 0/0 [ 770.087853][T19737] tpg Y'CbCr encoding: 0/0 [ 770.097925][T19737] tpg quantization: 0/0 [ 770.102124][T19737] tpg RGB range: 0/2 [ 770.106083][T19737] vivid-004: ================== END STATUS ================== [ 770.412647][T19748] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 770.532015][T19762] FAULT_INJECTION: forcing a failure. [ 770.532015][T19762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.550098][T19762] CPU: 1 UID: 0 PID: 19762 Comm: syz.3.2777 Not tainted syzkaller #0 PREEMPT(full) [ 770.550131][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 770.550145][T19762] Call Trace: [ 770.550153][T19762] [ 770.550163][T19762] dump_stack_lvl+0x16c/0x1f0 [ 770.550196][T19762] should_fail_ex+0x512/0x640 [ 770.550230][T19762] _copy_from_user+0x2e/0xd0 [ 770.550261][T19762] core_sys_select+0x35b/0xc20 [ 770.550295][T19762] ? __pfx_core_sys_select+0x10/0x10 [ 770.550326][T19762] ? proc_fail_nth_write+0x9f/0x220 [ 770.550380][T19762] ? do_sys_openat2+0x157/0x1d0 [ 770.550413][T19762] ? __pfx_do_sys_openat2+0x10/0x10 [ 770.550454][T19762] kern_select+0x15d/0x1e0 [ 770.550478][T19762] ? __pfx_kern_select+0x10/0x10 [ 770.550506][T19762] ? __pfx_ksys_write+0x10/0x10 [ 770.550538][T19762] __x64_sys_select+0xbd/0x160 [ 770.550560][T19762] ? do_syscall_64+0x91/0xfa0 [ 770.550586][T19762] ? lockdep_hardirqs_on+0x7c/0x110 [ 770.550613][T19762] do_syscall_64+0xcd/0xfa0 [ 770.550643][T19762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.550668][T19762] RIP: 0033:0x7feea698eec9 [ 770.550688][T19762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.550717][T19762] RSP: 002b:00007feea78ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 770.550741][T19762] RAX: ffffffffffffffda RBX: 00007feea6be5fa0 RCX: 00007feea698eec9 [ 770.550758][T19762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 770.550772][T19762] RBP: 00007feea78ed090 R08: 0000000000000000 R09: 0000000000000000 [ 770.550787][T19762] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 770.550803][T19762] R13: 00007feea6be6038 R14: 00007feea6be5fa0 R15: 00007fff56db0458 [ 770.550839][T19762] [ 770.863065][T19765] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 770.890356][T19765] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2776'. [ 771.038009][T19768] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.0.2778: 7 [ 771.188213][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 771.508574][T19771] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3877809889.3495757300.1015113928), cmd(3) [ 771.549492][T19781] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 771.602740][T19776] Invalid ELF header magic: != ELF [ 771.609164][T19774] delete_channel: no stack [ 773.695879][T19817] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2789: 7 [ 774.108002][T19824] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.0.2799: 7 [ 774.400058][T19826] Invalid ELF header magic: != ELF [ 774.460085][T19825] delete_channel: no stack [ 775.184301][T19848] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3877809889.3495757300.1015113928), cmd(3) [ 775.939684][T19869] sd 0:0:1:0: PR command failed: 1026 [ 775.945293][T19869] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 775.957232][T19869] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 776.584640][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2802'. [ 776.594191][T19882] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2802'. [ 776.635055][T19882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2802'. [ 777.302634][T19892] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 778.506132][T19911] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.2.2809: 7 [ 780.340229][T19944] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 780.398985][T19944] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 780.440590][T19944] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 780.850379][T19957] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 780.913591][T19955] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2820'. [ 780.940395][ T8373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.976182][T19955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.2820: iget: checksum invalid [ 780.994372][T19955] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 781.007412][T19955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.2820: iget: checksum invalid [ 781.019116][T19955] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 781.046476][ T8373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.056650][T19955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.2820: iget: checksum invalid [ 781.070812][T19955] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 781.082391][T19955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.2820: iget: checksum invalid [ 781.096233][T19955] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 781.106988][T19955] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 781.125752][T19955] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 781.233069][ T8373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.434533][T17721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 781.447821][T17721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 781.457266][T17721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 781.467464][T17721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 781.476963][T17721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 781.541064][ T8373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.029179][ T8373] bridge_slave_1: left allmulticast mode [ 782.035599][ T8373] bridge_slave_1: left promiscuous mode [ 782.049009][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.143788][ T8373] bridge_slave_0: left allmulticast mode [ 782.167187][ T8373] bridge_slave_0: left promiscuous mode [ 782.217185][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.516102][T17721] Bluetooth: hci0: command tx timeout [ 783.532705][ T8373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.552772][ T8373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.564887][ T8373] bond0 (unregistering): Released all slaves [ 784.303166][ T8373] hsr_slave_0: left promiscuous mode [ 784.337124][ T30] audit: type=1800 audit(4294967302.029:25): pid=20014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2829" name="dbroot" dev="configfs" ino=83466 res=0 errno=0 [ 784.340905][ T8373] hsr_slave_1: left promiscuous mode [ 784.411315][ T8373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.430026][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.438468][ T8373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.447000][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.478173][ T8373] veth1_macvtap: left promiscuous mode [ 784.488478][ T8373] veth0_macvtap: left promiscuous mode [ 784.494166][ T8373] veth1_vlan: left promiscuous mode [ 784.521785][ T8373] veth0_vlan: left promiscuous mode [ 785.498138][ T8373] team0 (unregistering): Port device team_slave_1 removed [ 785.543837][ T8373] team0 (unregistering): Port device team_slave_0 removed [ 785.590418][T17721] Bluetooth: hci0: command tx timeout [ 786.158657][T19960] chnl_net:caif_netlink_parms(): no params data found [ 786.582062][T20051] blktrace: Concurrent blktraces are not allowed on loop2 [ 786.631093][T19960] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.648385][T19960] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.655649][T19960] bridge_slave_0: entered allmulticast mode [ 786.664007][T19960] bridge_slave_0: entered promiscuous mode [ 786.686705][T19960] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.711882][T19960] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.720823][T19960] bridge_slave_1: entered allmulticast mode [ 786.731854][T19960] bridge_slave_1: entered promiscuous mode [ 786.899620][T19960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.948972][T19960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.074744][T19960] team0: Port device team_slave_0 added [ 787.113574][T19960] team0: Port device team_slave_1 added [ 787.251962][T19960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.266275][T19960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.309534][T20071] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 787.328909][T19960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.341892][T20071] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 787.362844][T19960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.455474][T19960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.553207][T19960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.669724][T17721] Bluetooth: hci0: command tx timeout [ 788.158933][T19960] hsr_slave_0: entered promiscuous mode [ 788.165323][T19960] hsr_slave_1: entered promiscuous mode [ 788.218980][T19960] debugfs: 'hsr0' already exists in 'hsr' [ 788.267702][T19960] Cannot create hsr debugfs directory [ 788.751527][T20099] bond0: option all_slaves_active: invalid value () [ 788.902473][T20099] bond0: option all_slaves_active: invalid value () [ 789.330417][T17721] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 789.500219][T19960] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 789.548703][T19960] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 789.574782][T19960] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 789.621348][T19960] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 789.748533][ T5846] Bluetooth: hci0: command tx timeout [ 790.124536][T19960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.205382][T19960] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.240082][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.247325][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.290652][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.297916][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.920950][T20145] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 791.170980][T19960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.687406][T20172] Console: switching to colour frame buffer device 128x48 [ 791.704471][T20173] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 791.781913][T19960] veth0_vlan: entered promiscuous mode [ 791.802792][T19960] veth1_vlan: entered promiscuous mode [ 791.856484][T19960] veth0_macvtap: entered promiscuous mode [ 791.883364][T19960] veth1_macvtap: entered promiscuous mode [ 791.935421][T19960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.965611][T20177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.978470][T20177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.001432][T19960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.120276][ T8372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.157800][ T8372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.157886][ T8372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.157929][ T8372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.427953][ T8373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.447896][ T8373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.515950][ T8372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.537889][ T8372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.737833][T20204] netlink: 'syz.4.2815': attribute type 11 has an invalid length. [ 792.754649][T20204] netlink: 'syz.4.2815': attribute type 11 has an invalid length. [ 792.764827][T20204] netlink: 372 bytes leftover after parsing attributes in process `syz.4.2815'. [ 792.810103][T20204] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2815'. [ 792.899525][T20204] netlink: 5500 bytes leftover after parsing attributes in process `syz.4.2815'. [ 792.922579][T20211] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 793.082748][T20211] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2858'. [ 793.197678][T20211] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.2858: iget: checksum invalid [ 793.213709][T20211] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 793.266336][T20211] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.2858: iget: checksum invalid [ 793.314526][T20211] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 793.372089][T20211] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.2858: iget: checksum invalid [ 793.413431][T20211] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 793.433606][T20211] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.2858: iget: checksum invalid [ 793.547742][T20211] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 793.574972][T20211] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 793.587186][T20211] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 793.915877][T20233] i2c i2c-0: new_device: Extra parameters [ 794.038623][T20233] i2c i2c-0: new_device: Missing parameters [ 794.242112][T20244] FAULT_INJECTION: forcing a failure. [ 794.242112][T20244] name failslab, interval 1, probability 0, space 0, times 0 [ 794.283033][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 794.557632][T20249] nbd: must specify at least one socket [ 794.557685][T20244] CPU: 1 UID: 0 PID: 20244 Comm: syz.1.2865 Not tainted syzkaller #0 PREEMPT(full) [ 794.557715][T20244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 794.557730][T20244] Call Trace: [ 794.557738][T20244] [ 794.557749][T20244] dump_stack_lvl+0x16c/0x1f0 [ 794.557782][T20244] should_fail_ex+0x512/0x640 [ 794.557812][T20244] ? __kmalloc_noprof+0xca/0x880 [ 794.557854][T20244] should_failslab+0xc2/0x120 [ 794.557885][T20244] __kmalloc_noprof+0xdd/0x880 [ 794.557924][T20244] ? ptp_open+0x104/0x550 [ 794.557959][T20244] ? ptp_open+0x104/0x550 [ 794.557984][T20244] ptp_open+0x104/0x550 [ 794.558017][T20244] ? __pfx_ptp_open+0x10/0x10 [ 794.558056][T20244] ? __pfx_ptp_open+0x10/0x10 [ 794.558083][T20244] posix_clock_open+0x178/0x290 [ 794.558114][T20244] ? __pfx_posix_clock_open+0x10/0x10 [ 794.558143][T20244] chrdev_open+0x234/0x6a0 [ 794.558170][T20244] ? __pfx_apparmor_file_open+0x10/0x10 [ 794.558204][T20244] ? __pfx_chrdev_open+0x10/0x10 [ 794.558235][T20244] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 794.558277][T20244] do_dentry_open+0x982/0x1530 [ 794.558306][T20244] ? __pfx_chrdev_open+0x10/0x10 [ 794.558344][T20244] vfs_open+0x82/0x3f0 [ 794.558382][T20244] path_openat+0x1de4/0x2cb0 [ 794.558421][T20244] ? __pfx_path_openat+0x10/0x10 [ 794.558457][T20244] do_filp_open+0x20b/0x470 [ 794.558484][T20244] ? __pfx_do_filp_open+0x10/0x10 [ 794.558536][T20244] ? alloc_fd+0x471/0x7d0 [ 794.558570][T20244] do_sys_openat2+0x11b/0x1d0 [ 794.558604][T20244] ? __pfx_do_sys_openat2+0x10/0x10 [ 794.558652][T20244] __x64_sys_openat+0x174/0x210 [ 794.558686][T20244] ? __pfx___x64_sys_openat+0x10/0x10 [ 794.558736][T20244] do_syscall_64+0xcd/0xfa0 [ 794.558766][T20244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.558791][T20244] RIP: 0033:0x7f351c18eec9 [ 794.558811][T20244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.558836][T20244] RSP: 002b:00007f351a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 794.558860][T20244] RAX: ffffffffffffffda RBX: 00007f351c3e6090 RCX: 00007f351c18eec9 [ 794.558876][T20244] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 794.558892][T20244] RBP: 00007f351c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.558908][T20244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.558924][T20244] R13: 00007f351c3e6128 R14: 00007f351c3e6090 R15: 00007ffe55342108 [ 794.558959][T20244] [ 795.590420][T20262] ptp ptp0: new virtual clock ptp1 [ 795.661652][T20262] ptp ptp0: new virtual clock ptp2 [ 795.680029][T20276] warning: `syz.3.2871' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 795.738950][T20262] ptp ptp0: new virtual clock ptp3 [ 795.747785][T20262] ptp ptp0: guarantee physical clock free running [ 796.716320][T20305] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 796.748594][T20305] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 797.576674][T20328] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.4.2881: 7 [ 797.899625][T20332] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2890: 7 [ 798.530132][T20354] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 799.461342][T20372] FAULT_INJECTION: forcing a failure. [ 799.461342][T20372] name failslab, interval 1, probability 0, space 0, times 0 [ 799.500572][T20372] CPU: 1 UID: 0 PID: 20372 Comm: syz.1.2888 Not tainted syzkaller #0 PREEMPT(full) [ 799.500608][T20372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 799.500624][T20372] Call Trace: [ 799.500634][T20372] [ 799.500645][T20372] dump_stack_lvl+0x16c/0x1f0 [ 799.500680][T20372] should_fail_ex+0x512/0x640 [ 799.500710][T20372] ? fs_reclaim_acquire+0xae/0x150 [ 799.500744][T20372] should_failslab+0xc2/0x120 [ 799.500778][T20372] kmem_cache_alloc_noprof+0x75/0x6e0 [ 799.500803][T20372] ? jbd2__journal_start+0x193/0x6a0 [ 799.500846][T20372] ? jbd2__journal_start+0x193/0x6a0 [ 799.500881][T20372] jbd2__journal_start+0x193/0x6a0 [ 799.500923][T20372] __ext4_journal_start_sb+0x195/0x690 [ 799.500966][T20372] ? ext4_dirty_inode+0xa1/0x130 [ 799.501001][T20372] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 799.501035][T20372] ext4_dirty_inode+0xa1/0x130 [ 799.501066][T20372] ? rcu_is_watching+0x12/0xc0 [ 799.501094][T20372] __mark_inode_dirty+0x1eb/0xe40 [ 799.501134][T20372] generic_update_time+0xcf/0xf0 [ 799.501168][T20372] file_modified+0x207/0x240 [ 799.501200][T20372] ext4_fallocate+0x24a/0x37a0 [ 799.501251][T20372] ? __pfx_ext4_fallocate+0x10/0x10 [ 799.501287][T20372] vfs_fallocate+0x5b1/0x10e0 [ 799.501332][T20372] ? __pfx_vfs_fallocate+0x10/0x10 [ 799.501363][T20372] ? madvise_vma_behavior+0x2b12/0x2d50 [ 799.501411][T20372] madvise_vma_behavior+0x2ac9/0x2d50 [ 799.501453][T20372] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 799.501484][T20372] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 799.501521][T20372] ? mas_prev+0x9b/0xf0 [ 799.501551][T20372] ? __pfx_mas_prev+0x10/0x10 [ 799.501593][T20372] ? find_vma_prev+0xd3/0x150 [ 799.501623][T20372] ? find_held_lock+0x2b/0x80 [ 799.501649][T20372] ? __pfx_find_vma_prev+0x10/0x10 [ 799.501694][T20372] ? __futex_wait+0x24b/0x2f0 [ 799.501734][T20372] madvise_walk_vmas+0x31f/0x9c0 [ 799.501776][T20372] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 799.501819][T20372] madvise_do_behavior+0x1e2/0x530 [ 799.501853][T20372] ? futex_private_hash_put+0x18a/0x300 [ 799.501887][T20372] ? __pfx_madvise_do_behavior+0x10/0x10 [ 799.501924][T20372] ? down_read+0x13d/0x480 [ 799.501990][T20372] do_madvise+0x176/0x240 [ 799.502026][T20372] ? __pfx_do_madvise+0x10/0x10 [ 799.502059][T20372] ? do_futex+0x122/0x350 [ 799.502119][T20372] ? xfd_validate_state+0x61/0x180 [ 799.502153][T20372] ? __pfx_ksys_write+0x10/0x10 [ 799.502188][T20372] __x64_sys_madvise+0xa9/0x110 [ 799.502222][T20372] ? lockdep_hardirqs_on+0x7c/0x110 [ 799.502252][T20372] do_syscall_64+0xcd/0xfa0 [ 799.502284][T20372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.502310][T20372] RIP: 0033:0x7f351c18eec9 [ 799.502332][T20372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.502357][T20372] RSP: 002b:00007f351a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 799.502383][T20372] RAX: ffffffffffffffda RBX: 00007f351c3e6090 RCX: 00007f351c18eec9 [ 799.502401][T20372] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 799.502418][T20372] RBP: 00007f351c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 799.502435][T20372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.502451][T20372] R13: 00007f351c3e6128 R14: 00007f351c3e6090 R15: 00007ffe55342108 [ 799.502490][T20372] [ 799.832260][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.813163][T20391] random: crng reseeded on system resumption [ 800.829830][T20392] FAULT_INJECTION: forcing a failure. [ 800.829830][T20392] name failslab, interval 1, probability 0, space 0, times 0 [ 800.907589][T20392] CPU: 1 UID: 0 PID: 20392 Comm: syz.2.2886 Not tainted syzkaller #0 PREEMPT(full) [ 800.907624][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 800.907641][T20392] Call Trace: [ 800.907649][T20392] [ 800.907659][T20392] dump_stack_lvl+0x16c/0x1f0 [ 800.907694][T20392] should_fail_ex+0x512/0x640 [ 800.907724][T20392] ? __kmalloc_noprof+0xca/0x880 [ 800.907765][T20392] should_failslab+0xc2/0x120 [ 800.907794][T20392] __kmalloc_noprof+0xdd/0x880 [ 800.907831][T20392] ? sk_prot_alloc+0x1a8/0x2a0 [ 800.907878][T20392] ? sk_prot_alloc+0x1a8/0x2a0 [ 800.907910][T20392] sk_prot_alloc+0x1a8/0x2a0 [ 800.907945][T20392] sk_alloc+0x36/0xc20 [ 800.907970][T20392] __netlink_create+0x5e/0x2c0 [ 800.907992][T20392] ? __wake_up+0x3f/0x60 [ 800.908024][T20392] netlink_create+0x39e/0x620 [ 800.908050][T20392] ? __pfx_rtnetlink_bind+0x10/0x10 [ 800.908081][T20392] __sock_create+0x338/0x8d0 [ 800.908126][T20392] __sys_socket+0x14d/0x260 [ 800.908163][T20392] ? __pfx___sys_socket+0x10/0x10 [ 800.908198][T20392] ? xfd_validate_state+0x61/0x180 [ 800.908231][T20392] ? __pfx___do_sys_prctl+0x10/0x10 [ 800.908275][T20392] __x64_sys_socket+0x72/0xb0 [ 800.908308][T20392] ? lockdep_hardirqs_on+0x7c/0x110 [ 800.908334][T20392] do_syscall_64+0xcd/0xfa0 [ 800.908364][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.908389][T20392] RIP: 0033:0x7eff4518eec9 [ 800.908409][T20392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.908434][T20392] RSP: 002b:00007eff45fd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 800.908459][T20392] RAX: ffffffffffffffda RBX: 00007eff453e5fa0 RCX: 00007eff4518eec9 [ 800.908477][T20392] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 800.908493][T20392] RBP: 00007eff45211f91 R08: 0000000000000000 R09: 0000000000000000 [ 800.908507][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.908521][T20392] R13: 00007eff453e6038 R14: 00007eff453e5fa0 R15: 00007ffcbd2b4df8 [ 800.908556][T20392] [ 801.123330][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.203456][T20427] ptp ptp0: guarantee physical clock free running [ 803.166259][T20444] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.4.2901: 7 [ 803.176570][T20446] random: crng reseeded on system resumption [ 803.446802][T20459] : Can't lookup blockdev [ 803.509444][T20459] tipc: Started in network mode [ 803.514813][T20459] tipc: Node identity fe820562, cluster identity 4711 [ 803.521823][T20459] tipc: Node number set to 4269933922 [ 803.602131][ T30] audit: type=1800 audit(4294967314.990:26): pid=20461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2904" name="features" dev="configfs" ino=85978 res=0 errno=0 [ 803.933745][T20467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2909'. [ 803.943586][T20467] bridge_slave_1: left allmulticast mode [ 803.953280][T20467] bridge_slave_1: left promiscuous mode [ 803.964150][T20467] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.978074][T20467] bridge_slave_0: left allmulticast mode [ 804.030219][T20467] bridge_slave_0: left promiscuous mode [ 804.056973][T20467] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.326860][T20472] futex_wake_op: syz.1.2910 tries to shift op by -9; fix this program [ 804.433415][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 805.020485][T20491] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.2915: 7 [ 808.094791][T20583] __vm_enough_memory: pid: 20583, comm: syz.2.2928, bytes: 4398046511104 not enough memory for the allocation [ 808.224562][T20588] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 808.292247][T20589] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 808.714230][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.720624][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.236524][T20680] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.4.2945: 7 [ 812.473196][T20688] FAULT_INJECTION: forcing a failure. [ 812.473196][T20688] name failslab, interval 1, probability 0, space 0, times 0 [ 812.518804][T20688] CPU: 1 UID: 0 PID: 20688 Comm: syz.1.2948 Not tainted syzkaller #0 PREEMPT(full) [ 812.518839][T20688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 812.518854][T20688] Call Trace: [ 812.518863][T20688] [ 812.518873][T20688] dump_stack_lvl+0x16c/0x1f0 [ 812.518908][T20688] should_fail_ex+0x512/0x640 [ 812.518939][T20688] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 812.518970][T20688] should_failslab+0xc2/0x120 [ 812.519002][T20688] kmem_cache_alloc_noprof+0x75/0x6e0 [ 812.519027][T20688] ? alloc_empty_file+0x55/0x1e0 [ 812.519066][T20688] ? alloc_empty_file+0x55/0x1e0 [ 812.519095][T20688] alloc_empty_file+0x55/0x1e0 [ 812.519126][T20688] alloc_file_pseudo+0x13a/0x230 [ 812.519159][T20688] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 812.519193][T20688] ? alloc_fd+0x471/0x7d0 [ 812.519222][T20688] sock_alloc_file+0x50/0x210 [ 812.519255][T20688] __sys_socket+0x1c0/0x260 [ 812.519293][T20688] ? __pfx___sys_socket+0x10/0x10 [ 812.519329][T20688] ? xfd_validate_state+0x61/0x180 [ 812.519362][T20688] ? __pfx_ksys_write+0x10/0x10 [ 812.519397][T20688] __x64_sys_socket+0x72/0xb0 [ 812.519431][T20688] ? lockdep_hardirqs_on+0x7c/0x110 [ 812.519470][T20688] do_syscall_64+0xcd/0xfa0 [ 812.519501][T20688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.519527][T20688] RIP: 0033:0x7f351c18eec9 [ 812.519549][T20688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.519573][T20688] RSP: 002b:00007f351cf5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 812.519598][T20688] RAX: ffffffffffffffda RBX: 00007f351c3e5fa0 RCX: 00007f351c18eec9 [ 812.519615][T20688] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000023 [ 812.519630][T20688] RBP: 00007f351c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 812.519645][T20688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.519659][T20688] R13: 00007f351c3e6038 R14: 00007f351c3e5fa0 R15: 00007ffe55342108 [ 812.519696][T20688] [ 815.888667][T20752] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 815.983150][T20752] ACPI: Can not change Invalid GPE/Fixed Event status [ 816.026738][T20752] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 817.219566][T20791] FAULT_INJECTION: forcing a failure. [ 817.219566][T20791] name fail_futex, interval 1, probability 0, space 0, times 0 [ 817.233485][T20791] CPU: 0 UID: 0 PID: 20791 Comm: syz.1.2970 Not tainted syzkaller #0 PREEMPT(full) [ 817.233518][T20791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 817.233533][T20791] Call Trace: [ 817.233541][T20791] [ 817.233550][T20791] dump_stack_lvl+0x16c/0x1f0 [ 817.233583][T20791] should_fail_ex+0x512/0x640 [ 817.233617][T20791] should_fail_futex+0x4c/0x60 [ 817.233648][T20791] __x64_sys_futex+0x25e/0x4c0 [ 817.233684][T20791] ? __pfx___x64_sys_futex+0x10/0x10 [ 817.233717][T20791] ? xfd_validate_state+0x61/0x180 [ 817.233764][T20791] do_syscall_64+0xcd/0xfa0 [ 817.233791][T20791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.233814][T20791] RIP: 0033:0x7f351c18eec9 [ 817.233834][T20791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.233855][T20791] RSP: 002b:00007ffe55342268 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 817.233878][T20791] RAX: ffffffffffffffda RBX: 00000000000c780a RCX: 00007f351c18eec9 [ 817.233894][T20791] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f351c3e5fac [ 817.233908][T20791] RBP: 0000000000000032 R08: 00007f351cf5b000 R09: 000000175534255f [ 817.233922][T20791] R10: 00007ffe55342360 R11: 0000000000000246 R12: 00007f351c3e5fac [ 817.233936][T20791] R13: 00007ffe55342360 R14: 00000000000c783c R15: 00007ffe55342380 [ 817.233971][T20791] [ 819.363749][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 820.530538][T20866] ------------[ cut here ]------------ [ 820.536241][T20866] memcpy: detected field-spanning write (size 5) of single field "&entry->id" at kernel/trace/trace.c:7458 (size 4) [ 820.548985][T20866] WARNING: CPU: 1 PID: 20866 at kernel/trace/trace.c:7458 write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 820.560361][T20866] Modules linked in: [ 820.564644][T20866] CPU: 1 UID: 0 PID: 20866 Comm: syz.1.2984 Not tainted syzkaller #0 PREEMPT(full) [ 820.574217][T20866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 820.584335][T20866] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 820.591584][T20866] Code: ff e8 30 74 fa ff c6 05 b4 7e aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 820.611290][T20866] RSP: 0018:ffffc9000481fc40 EFLAGS: 00010282 [ 820.618150][T20866] RAX: 0000000000000000 RBX: ffff888079b2b014 RCX: ffffc9001b402000 [ 820.626744][T20866] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 820.634889][T20866] RBP: ffff888079b2b010 R08: 0000000000000001 R09: 0000000000000000 [ 820.642956][T20866] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000005 [ 820.651116][T20866] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 820.659284][T20866] FS: 00007f351a3f66c0(0000) GS:ffff888124ae6000(0000) knlGS:0000000000000000 [ 820.668306][T20866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.674922][T20866] CR2: 0000000000000000 CR3: 000000005d6ba000 CR4: 00000000003526f0 [ 820.682948][T20866] Call Trace: [ 820.686223][T20866] [ 820.689192][T20866] tracing_mark_raw_write+0x2da/0x4a0 [ 820.694567][T20866] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 820.700509][T20866] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 820.706400][T20866] vfs_write+0x2a0/0x11d0 [ 820.710835][T20866] ? __pfx_vfs_write+0x10/0x10 [ 820.716071][T20866] ? find_held_lock+0x2b/0x80 [ 820.721077][T20866] ? __fget_files+0x204/0x3c0 [ 820.725762][T20866] ? __fget_files+0x20e/0x3c0 [ 820.730540][T20866] ksys_write+0x1f8/0x250 [ 820.734869][T20866] ? __pfx_ksys_write+0x10/0x10 [ 820.739755][T20866] do_syscall_64+0xcd/0xfa0 [ 820.744256][T20866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.750300][T20866] RIP: 0033:0x7f351c18eec9 [ 820.754709][T20866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.774498][T20866] RSP: 002b:00007f351a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 820.782934][T20866] RAX: ffffffffffffffda RBX: 00007f351c3e6090 RCX: 00007f351c18eec9 [ 820.790964][T20866] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 820.798949][T20866] RBP: 00007f351c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 820.806913][T20866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.814915][T20866] R13: 00007f351c3e6128 R14: 00007f351c3e6090 R15: 00007ffe55342108 [ 820.823674][T20866] [ 820.826711][T20866] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 820.833985][T20866] CPU: 1 UID: 0 PID: 20866 Comm: syz.1.2984 Not tainted syzkaller #0 PREEMPT(full) [ 820.843343][T20866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 820.853392][T20866] Call Trace: [ 820.856677][T20866] [ 820.859598][T20866] dump_stack_lvl+0x3d/0x1f0 [ 820.864206][T20866] vpanic+0x640/0x6f0 [ 820.868193][T20866] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 820.874708][T20866] panic+0xca/0xd0 [ 820.878430][T20866] ? __pfx_panic+0x10/0x10 [ 820.882850][T20866] check_panic_on_warn+0xab/0xb0 [ 820.887781][T20866] __warn+0xf6/0x3c0 [ 820.891673][T20866] ? __pfx_vprintk_emit+0x10/0x10 [ 820.896698][T20866] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 820.903203][T20866] report_bug+0x3c3/0x580 [ 820.907548][T20866] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 820.914064][T20866] handle_bug+0x184/0x210 [ 820.918389][T20866] exc_invalid_op+0x17/0x50 [ 820.922887][T20866] asm_exc_invalid_op+0x1a/0x20 [ 820.927732][T20866] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 820.934861][T20866] Code: ff e8 30 74 fa ff c6 05 b4 7e aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 820.954481][T20866] RSP: 0018:ffffc9000481fc40 EFLAGS: 00010282 [ 820.960558][T20866] RAX: 0000000000000000 RBX: ffff888079b2b014 RCX: ffffc9001b402000 [ 820.968540][T20866] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 820.976507][T20866] RBP: ffff888079b2b010 R08: 0000000000000001 R09: 0000000000000000 [ 820.984469][T20866] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000005 [ 820.992433][T20866] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 821.000408][T20866] ? __warn_printk+0x1a5/0x350 [ 821.005189][T20866] tracing_mark_raw_write+0x2da/0x4a0 [ 821.010560][T20866] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 821.016459][T20866] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 821.022464][T20866] vfs_write+0x2a0/0x11d0 [ 821.026842][T20866] ? __pfx_vfs_write+0x10/0x10 [ 821.031612][T20866] ? find_held_lock+0x2b/0x80 [ 821.036300][T20866] ? __fget_files+0x204/0x3c0 [ 821.040979][T20866] ? __fget_files+0x20e/0x3c0 [ 821.045661][T20866] ksys_write+0x1f8/0x250 [ 821.049990][T20866] ? __pfx_ksys_write+0x10/0x10 [ 821.054937][T20866] do_syscall_64+0xcd/0xfa0 [ 821.059446][T20866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.065860][T20866] RIP: 0033:0x7f351c18eec9 [ 821.070272][T20866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.089880][T20866] RSP: 002b:00007f351a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 821.098299][T20866] RAX: ffffffffffffffda RBX: 00007f351c3e6090 RCX: 00007f351c18eec9 [ 821.106271][T20866] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 821.114236][T20866] RBP: 00007f351c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 821.122199][T20866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.130162][T20866] R13: 00007f351c3e6128 R14: 00007f351c3e6090 R15: 00007ffe55342108 [ 821.138147][T20866] [ 821.141407][T20866] Kernel Offset: disabled [ 821.145725][T20866] Rebooting in 86400 seconds..