last executing test programs: 14m26.656101252s ago: executing program 1 (id=824): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mmap$auto(0x235, 0x40000a, 0x20000000000d, 0x208018, 0xffffffffffffffff, 0x200000001) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x1, 0x80000, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40800, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0xa, 0x40000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x781a82, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) futex$auto(&(0x7f0000000080)=0x1, 0x6, 0x1, 0x0, 0x0, 0x1) futex$auto(&(0x7f0000000080)=0x4, 0x1, 0xffffcfe4, 0x0, 0x0, 0x440a48d3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x200ffd8) 14m24.920485158s ago: executing program 1 (id=829): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x3, 0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040801}, 0x8040840) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf00", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x48200003, 0xa7be}, 0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 14m23.711391005s ago: executing program 1 (id=834): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) socket(0x2, 0x3, 0x100) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r2, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000060}, 0x20040014) read$auto(r1, 0x0, 0x3) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) 14m23.055006964s ago: executing program 1 (id=837): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/card0/list\x00', 0x81a82, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x19, 0x401, 0x8000) writev$auto(0x8, &(0x7f0000000040)={&(0x7f0000000000), 0x2000000000001}, 0xabc) write$auto(0xffffffffffffffff, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) setresuid$auto(0x0, 0x7, 0x8080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, 0x401, 0x8000) io_uring_register$auto(0x100000001, 0x14, 0x0, 0x5) setfsuid$auto(0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/tunl0/queues/rx-0/rps_flow_cnt\x00', 0x2462, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x16, &(0x7f0000000200)="c12f0ffba9724d2bf282b50ea0128d4cece058be20b997a401d334264bd086fa99139628b9236c6b2a7dd53803d06a895719d1ecf94aaedb776ea32536212b42dd2f88560bb252cf7f16f5fd175f8e44e994372e5698bad4cc61e7b55325d6eb79790241d59fe648946cec24b21086eaf4d003178d0c38724086a4a59c37e5f3000000000000000000000000000064ddf5dea4b6c5d9d46c496a7090d476fa8f6947a8f4659f19d868fae9839b3276f871548f3e3a4b3b60e606f1d96422", 0x1) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xa500, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/hwdep\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000280)=""/65, 0x41) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) readv$auto(r3, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/status\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x6d}, 0x2, 0x0, 0x0, 0x8) 14m22.866679448s ago: executing program 1 (id=841): mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r0 = socket(0x2a, 0x2, 0xb) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0xc00, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r0, 0x5, 0x6) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) connect$auto(0x3, &(0x7f00000000c0)=@nfc={0x27, r3, 0x0, 0x5}, 0x54) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) getsockopt$auto(r2, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) 14m22.618747621s ago: executing program 1 (id=844): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000001f40), 0x2040, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r3, 0x2, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r5) sendmsg$auto_HWSIM_CMD_REGISTER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) recvmmsg$auto(r0, 0x0, 0x1100007, 0x6586, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r7 = socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'pim6reg0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8}, 0x6a) sendto$auto(r7, 0x0, 0x2, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r8}, 0x36) recvmmsg$auto(0x3, 0x0, 0x6, 0x0, 0x0) 14m7.382501155s ago: executing program 32 (id=844): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000001f40), 0x2040, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r3, 0x2, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r5) sendmsg$auto_HWSIM_CMD_REGISTER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) recvmmsg$auto(r0, 0x0, 0x1100007, 0x6586, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r7 = socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'pim6reg0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8}, 0x6a) sendto$auto(r7, 0x0, 0x2, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r8}, 0x36) recvmmsg$auto(0x3, 0x0, 0x6, 0x0, 0x0) 9.552820258s ago: executing program 4 (id=3354): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) ioctl$auto_MEMSETBADBLOCK(r0, 0x40084d0c, &(0x7f0000000000)=0x7) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) setuid$auto(r3) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) getsockopt$auto(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 8.814125498s ago: executing program 4 (id=3355): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x107, 0x9, 0x97, 0xffffffffffffffff, 0x401, 0x7fffffffffffffff) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c38303231310008000a00000000001aa5165c10677178ad9f12ba6447e8afac31ec97aea6dc67b453228cfb5c0b85f3718d6fba64404eed662af0724a45656c4a1f1609d1f2d4b9e850fb9862ac44cc86f4f707188f47ed1123b3d7f266f63dba4c6e31336b331876b70ba5ecdf459848215fef55d166729d0a5a2d0bf0810578225fd433a431cf6ae2a593f2627ff7d8b04561b3bf752661af1772adf897275092bbf6646be2c2c4"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0xefa, 0x3ff, 0x4, 0xfff) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pwrite64$auto(r0, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x97\xe8X\xa3,a\xd5\x14\xb9\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\xd5\xfc\xc5\xaf\xcd:1\xef\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4p\xff\x8c\x17YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\"\xe5A\xcfi\xd1\xf6\xa9\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xfeM\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6', 0x8001, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) 5.427887359s ago: executing program 0 (id=3366): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_register$auto_IORING_REGISTER_CLOCK(r0, 0x1d, 0x0, 0x2) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x20000000) semget$auto(0x0, 0x13c, 0x1ff) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) semctl$auto(0x3428, 0x3, 0x2, 0xf) connect$auto(0x3, 0x0, 0x55) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 5.238576198s ago: executing program 3 (id=3367): r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r0, &(0x7f0000000680)='d\n\x1e\x9f\xd0\x92l\x98\x92!Fc\x9c?\xado^\x9b\xf4\x9c\xa8\xd2gn\x1a\xd7\x1c\xe8)\xefA\x7f\xc2x\xd0\x18gS\x1c\xca\xb9\x84\x1ec\xd4>\xc2\xfej\t\x89u\xcb(\x95_3\xdfo\xdc\xa5;t\x05q$zmM\xae\xdb\x1f\xeb\xffe\x91\xd5\xd2[\xa5_F\xc4X\xec\xdb\xdc\x01\xc2d\xa1\x8b\xed=\xb0\x88\xa8tl2\x0e\x13mjH,\xcda\xcab.\x03\xe7\xa4z\xcaA\xe2\x99\xd5n\xa0\x8a\x91K_\xf0~\b\v\xd1W\x97\xd9\x8c}\xff4\xff\tAK\xc4\x16\x13,9}-_\x00\x80\xd2\xfc\x98?\'\xaf\xccyRou\xa1\x12\x9fwZ\x1c\f\xcck\xdb-\xd7;\xbf\xbf\xbe\x04*L\x1e\x9c\x8fVb\xc2\xb4\xa2|\x88\x1e\bX\xba_O\x87f.\xc2\xfa\x01R\xefB\xe9\xf4Xc\x98\xe7', 0x5) syslog$auto(0x3, &(0x7f0000000000)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1eC\xb81\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e<\x13\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\x10e\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = gettid() r3 = syz_open_procfs$namespace(r2, &(0x7f0000000080)) getdents64$auto(r3, 0x0, 0x7e) 4.965053912s ago: executing program 2 (id=3368): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, 0x0, 0x4d) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80001, 0x0) write$auto(r1, 0x0, 0x9) 4.927163063s ago: executing program 4 (id=3369): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(0x0, 0x1e7d43, 0xa6) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_fd=r1, 0xe5fd}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) 4.193431406s ago: executing program 4 (id=3370): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$auto(0xb, 0x9, 0x5, 0x15, r0, 0xdd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy15/misc\x00', 0x80040, 0x0) fcntl$auto_F_SETSIG(r1, 0xa, 0x7) (async, rerun: 64) read$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) (rerun: 64) r4 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r4, 0xe5a, 0x5) ptrace$auto(0x10, r2, 0x4, 0x8000040006) (async, rerun: 32) ptrace$auto_PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x84, 0x4) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r6, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) (async) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) 4.192464808s ago: executing program 2 (id=3371): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x2, 0x3, 0x0, 0x100000000, 0x1) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c4, 0xffffffffffffffff) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = socket(0x22, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x20040}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffbd7000ffdbdf250100000008000900", @ANYRES32=r4, @ANYBLOB="0800050006000000110001006f76735f00000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) read$auto(r2, &(0x7f0000000040)='\x00', 0x10001) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x35f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0x10b, 0x100, 0x18]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x101082, 0x0) mmap$auto(0x2, 0x5, 0xfffffffffffffffe, 0x92, 0xffffffffffffffff, 0xbc) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) ioctl$auto(r7, 0xc0045543, r8) write$auto(r6, &(0x7f0000000180)='1\x00\\\xa0N?F`\x12\xfa\b\x1c\xc7k\x9eC\xbf^\xce\x14\x10\x99\xfa<\xf5\xe2GPc\xc6\x80.\xa9\xf3\x92\xac\x96>Fi-\xd81R\xfc\xde\x0f\xf9\x02p\x9f\x80\x86S\x9b\xd6\x81\xbd-\xaaWy\x19\xe2\x96\xc3\xe1\xad)Aa\xd2\xe6.\xfdZ\f\xdeG\xcb\x81\xaeH\xf2p\f\xc9\xb2\xf6\x91\xfb\r\xe8\xe0(\x94F7\xf5L\xf0\x14\xc3\x9a\xac0\x8e\x91\x01\x1bc\x1d-^r\xcc\xc6\"*Y\x18|\xf2\x87', 0x281) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x2, 0x400005, 0xdf, 0x89b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0xd, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0) 4.145102154s ago: executing program 3 (id=3372): mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x40000df, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x4}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) landlock_add_rule$auto(r0, 0x1, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_wake$auto(0x0, 0x5, 0x4, 0xa) init_module$auto(0x0, 0xfffff, 0x0) mkdir$auto(0x0, 0x8001) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x1010, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1fe, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8040, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101142, 0x0) 3.770851063s ago: executing program 4 (id=3373): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x24340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r1 = socket(0x15, 0x5, 0x0) r2 = getsockopt$auto(r0, 0x136, 0x800271c, 0xfffffffffffffffc, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea06, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_UI_SET_LEDBIT(r2, 0x40045569, 0x0) socket(0x28, 0x801, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub5/xrun_injection\x00', 0x109880, 0x0) write$auto(r5, &(0x7f0000000180)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) ioctl$auto_PPPIOCSFLAGS(r7, 0x40047459, &(0x7f0000000040)=0x1) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getpriority$auto_PRIO_USER(0x2, 0x0) 3.372187608s ago: executing program 0 (id=3374): mmap$auto(0x1, 0x8, 0xdf, 0x9b71, 0x2, 0x8000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) statmount$auto(&(0x7f0000000000)={0xa, @raw=0x8, 0x8, 0x6, 0x6}, &(0x7f0000000180)={0x3, 0x4, 0x4, 0x374, 0x7, 0x2, 0x8, 0x9, 0x6, 0x1, 0x9, 0x361, 0x7, 0x101, 0x9, 0x3, 0x3, 0x800, 0x2, 0x6, 0x4, 0x6, 0xe, 0x5, 0x0, 0x8, 0x7fffffff, 0x4, 0x8, 0x4, 0x7, [0x1, 0x1000, 0x3f, 0x17c5, 0x10000, 0x10000, 0x6, 0x1, 0x18, 0x8, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x5, 0x16aa, 0x7, 0x8, 0x7, 0xffff, 0x9ef7, 0x8, 0xa08, 0x8, 0x7, 0x7, 0xfe, 0x4, 0x3, 0x3, 0xfffffffffffffffc, 0x81, 0x6, 0x9, 0x3ff, 0x81, 0x2, 0x3, 0x9991, 0x4, 0x9, 0x6, 0x9, 0x53, 0x3], "bf0b283242ed64eb18fb0c895686a08ed9f450710f0d497ff98a3f559ac51d46ae3f7918b9b1dd36336757a923fea30ca9d854cf02a9156aac4b66b03a52e34701a51cadbe1905a0ee4a1b15630c32a539a01c2a7eee3524629cba785a8e1369ea3a427dd533c2de83bcd43cf8a081ac62da8084bd8fab94b59683a9a431246293172b920af7d61eacb9cc6b6f6ed9dd09e627884860bd44ac5ddd8e92d9dd8a58f3e8c594571442c8f1530645b3d874e00f3e8b271322b59c380ed047aa92d51c5aa8c1bd5eb996f9caf708adc339dd"}, 0x9, 0xf) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x80200, 0x0) ioctl$auto(r0, 0x545c, 0xffffffffffffffff) 3.056274168s ago: executing program 2 (id=3375): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r0 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x7}, 0x3, 0x0) bind$auto(r0, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x14) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r3, 0x402, 0x2) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r4, 0x402, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x3}, 0x3d55, 0x0) 2.823943343s ago: executing program 2 (id=3376): syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x10000040eb2, 0xffffffffffffffff, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyq1\x00', 0x600100, 0x0) io_uring_setup$auto(0x7, 0x0) socket(0x25, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x7e1b, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv6\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x20000d, 0x7, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') 2.653593875s ago: executing program 3 (id=3377): unshare$auto(0x8000000) semtimedop$auto(0x1da, &(0x7f0000000040)={0x3, 0x2, 0x8}, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 2.562668723s ago: executing program 4 (id=3378): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x107, 0x9, 0x97, 0xffffffffffffffff, 0x401, 0x7fffffffffffffff) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c38303231310008000a00000000001aa5165c10677178ad9f12ba6447e8afac31ec97aea6dc67b453228cfb5c0b85f3718d6fba64404eed662af0724a45656c4a1f1609d1f2d4b9e850fb9862ac44cc86f4f707188f47ed1123b3d7f266f63dba4c6e31336b331876b70ba5ecdf459848215fef55d166729d0a5a2d0bf0810578225fd433a431cf6ae2a593f2627ff7d8b04561b3bf752661af1772adf897275092bbf6646be2c2c4"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0xefa, 0x3ff, 0x4, 0xfff) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pwrite64$auto(r0, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x97\xe8X\xa3,a\xd5\x14\xb9\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\xd5\xfc\xc5\xaf\xcd:1\xef\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4p\xff\x8c\x17YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\"\xe5A\xcfi\xd1\xf6\xa9\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xfeM\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6', 0x8001, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) 2.293966217s ago: executing program 0 (id=3379): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(0x0, 0x1e7d43, 0xa6) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_fd=r1, 0xe5fd}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) 2.028855269s ago: executing program 0 (id=3380): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, 0x0, 0x4d) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80001, 0x0) write$auto(r1, 0x0, 0x9) 1.912331486s ago: executing program 2 (id=3381): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffe00004, 0x2b6e, 0x2) fsopen$auto(0x0, 0x1) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x2, 0xffffffffffff0005, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) r0 = timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x4008ae61, 0x38) 1.734960125s ago: executing program 0 (id=3382): select$auto(0x3, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0x80400, 0x0) read$auto(r1, 0x0, 0x3) ioctl$auto(0x3, 0xae60, 0x10000000000402) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x3, 0x40000b, 0xdf, 0x10010, 0xffffffffffffffff, 0x80) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone3(&(0x7f0000001280)={0x358824080, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = socket(0xa, 0x1, 0x100) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c80f7f8a70100000087b5a6efe7339d424c80", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf250100000008000200935500000c000300ffffffffffffffff0c000300090000000000000008000200060000000800020002000000"], 0x44}, 0x1, 0x0, 0x0, 0x1004}, 0x8880) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e21c2, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r5, 0x0, 0x3, 0x6) write$auto(r5, 0x0, 0xa3d9) sendfile$auto(r4, r4, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) 1.521912016s ago: executing program 3 (id=3383): openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x200, 0x0) read$auto(r0, 0x0, 0x20) r1 = socket$auto(0xe, 0x0, 0xd) writev$auto(r1, &(0x7f0000000080)={0x0, 0x20000000000007}, 0x3) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/20t\x00', 0x0, 0x0) r2 = clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r2, 0x80) ptrace$auto_PTRACE_SYSCALL(0x18, r2, 0x5, 0x9) r3 = getpgid(0x0) process_vm_writev$auto(r3, &(0x7f0000000180)={&(0x7f0000000000), 0x20000007}, 0x200000000017, &(0x7f0000000040)={&(0x7f0000000080), 0x1}, 0x7, 0x0) r4 = prctl$auto(0x5, 0xafa6, r3, 0xffff, 0x5) writev$auto(r4, &(0x7f0000000280)={0x0, 0x45}, 0xb) 924.964296ms ago: executing program 3 (id=3384): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x601, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r1, 0x540b, 0x0) 216.764921ms ago: executing program 3 (id=3385): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffe00004, 0x2b6e, 0x2) fsopen$auto(0x0, 0x1) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x2, 0xffffffffffff0005, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) r0 = timerfd_create$auto(0x9, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x4008ae61, 0x38) 51.322406ms ago: executing program 2 (id=3386): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\b\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0x4483becb, 0x9b72, 0x2, 0x7ffe) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r0, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x7, 0x0) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x80000, 0x0) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(0x0, 0x261c2, 0x84) socket(0x2b, 0x1, 0x1) memfd_create$auto(0x0, 0x12) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008090}, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 0 (id=3387): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x301, 0x0) r1 = epoll_create$auto(0x4) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio6\x00', 0x41, 0x0) epoll_ctl$auto(r1, 0x1, r2, 0x0) r3 = getuid() sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b5b9d1", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="583d9f16f4cce19bc33a8a3e73585cc70177a2f93413fe42c3c9aae6cad431b0c271ed5c5a1c8814842ce01f156aa905f371caf2cca039b6c3428d773538dd057e461b48dd1e6a744ec3a153de97f085512ffda0955c28c4458e1f797599705e5ddc9a9415c9bcd724acf31bf53298d5943a4e5c886fa212e32bed150a2238cc0149800800cd00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/368], 0xad4}, 0x1, 0x0, 0x0, 0x5}, 0x800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca06", 0x20) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) write$auto(0x3, 0x0, 0xfdef) kernel console output (not intermixed with test programs): o_syscall_64+0xcd/0x490 [ 1048.050811][T18916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.050835][T18916] RIP: 0033:0x7fbc25d8e9a9 [ 1048.050854][T18916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.050878][T18916] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1048.050900][T18916] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1048.050917][T18916] RDX: 000000000000fffe RSI: 0000000000000000 RDI: 0000000000000002 [ 1048.050933][T18916] RBP: 00007fbc26c98090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.050948][T18916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.050963][T18916] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1048.050993][T18916] [ 1049.217520][T18936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2723'. [ 1049.754301][T18929] ima: policy update failed [ 1049.829921][ T30] audit: type=1802 audit(4294967845.464:45): pid=18929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2721" res=0 errno=0 [ 1049.868194][T18936] team0 (unregistering): Port device team_slave_0 removed [ 1049.978004][T18936] team0 (unregistering): Port device team_slave_1 removed [ 1050.580436][T18950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2727'. [ 1050.622964][T18953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2729'. /[ 1051.040892][T18962] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1051.339753][ T30] audit: type=1800 audit(4294967846.974:46): pid=18966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2732" name="dbroot" dev="configfs" ino=68836 res=0 errno=0 [ 1051.460696][T18960] blktrace: Concurrent blktraces are not allowed on loop2 [ 1052.838273][T19004] random: crng reseeded on system resumption [ 1054.568070][T19039] FAULT_INJECTION: forcing a failure. [ 1054.568070][T19039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.966140][T19039] CPU: 0 UID: 0 PID: 19039 Comm: syz.0.2745 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1054.966181][T19039] Tainted: [U]=USER [ 1054.966189][T19039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1054.966203][T19039] Call Trace: [ 1054.966211][T19039] [ 1054.966220][T19039] dump_stack_lvl+0x16c/0x1f0 [ 1054.966248][T19039] should_fail_ex+0x512/0x640 [ 1054.966276][T19039] _copy_from_user+0x2e/0xd0 [ 1054.966304][T19039] copy_msghdr_from_user+0x98/0x160 [ 1054.966330][T19039] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1054.966361][T19039] ? __lock_acquire+0x622/0x1c90 [ 1054.966399][T19039] ___sys_recvmsg+0xdb/0x1a0 [ 1054.966424][T19039] ? __pfx____sys_recvmsg+0x10/0x10 [ 1054.966451][T19039] ? find_held_lock+0x2b/0x80 [ 1054.966493][T19039] do_recvmmsg+0x2fe/0x750 [ 1054.966529][T19039] ? __pfx_do_recvmmsg+0x10/0x10 [ 1054.966560][T19039] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1054.966594][T19039] ? __fget_files+0x20e/0x3c0 [ 1054.966639][T19039] __x64_sys_recvmmsg+0x22a/0x280 [ 1054.966668][T19039] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1054.966707][T19039] do_syscall_64+0xcd/0x490 [ 1054.966733][T19039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.966758][T19039] RIP: 0033:0x7f870578e9a9 [ 1054.966776][T19039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.966799][T19039] RSP: 002b:00007f8706531038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1054.966820][T19039] RAX: ffffffffffffffda RBX: 00007f87059b6160 RCX: 00007f870578e9a9 [ 1054.966836][T19039] RDX: 000000000000fffe RSI: 0000000000000000 RDI: 0000000000000002 [ 1054.966851][T19039] RBP: 00007f8706531090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.966865][T19039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.966879][T19039] R13: 0000000000000000 R14: 00007f87059b6160 R15: 00007ffdd6439058 [ 1054.966908][T19039] [ 1055.163389][ C0] vkms_vblank_simulate: vblank timer overrun [ 1056.957341][T19056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1059.478721][T19111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2761'. [ 1060.233545][T19121] zswap: compressor 000 not available [ 1060.507391][T19130] program syz.0.2764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1060.610664][T19123] zswap: compressor not available [ 1062.266069][T19143] ima: policy update failed [ 1062.299495][ T30] audit: type=1802 audit(4294967857.934:47): pid=19143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2768" res=0 errno=0 [ 1062.328439][T19162] binder: 19161:19162 ioctl c018620c 0 returned -14 [ 1062.366184][T19162] FAULT_INJECTION: forcing a failure. [ 1062.366184][T19162] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1062.410483][T19162] CPU: 0 UID: 0 PID: 19162 Comm: syz.0.2773 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1062.410525][T19162] Tainted: [U]=USER [ 1062.410533][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1062.410548][T19162] Call Trace: [ 1062.410556][T19162] [ 1062.410566][T19162] dump_stack_lvl+0x16c/0x1f0 [ 1062.410595][T19162] should_fail_ex+0x512/0x640 [ 1062.410624][T19162] get_futex_key+0x1d0/0x1540 [ 1062.410661][T19162] ? __pfx_get_futex_key+0x10/0x10 [ 1062.410705][T19162] futex_wake+0xe7/0x4e0 [ 1062.410742][T19162] ? __pfx_futex_wake+0x10/0x10 [ 1062.410780][T19162] ? kmem_cache_free+0x2d1/0x4d0 [ 1062.410803][T19162] ? fd_install+0x225/0x750 [ 1062.410839][T19162] ? putname+0x154/0x1a0 [ 1062.410872][T19162] do_futex+0x1e3/0x350 [ 1062.410901][T19162] ? __pfx_do_futex+0x10/0x10 [ 1062.410939][T19162] __x64_sys_futex+0x1e0/0x4c0 [ 1062.410971][T19162] ? __x64_sys_openat+0x174/0x210 [ 1062.411004][T19162] ? __pfx___x64_sys_futex+0x10/0x10 [ 1062.411046][T19162] do_syscall_64+0xcd/0x490 [ 1062.411073][T19162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.411098][T19162] RIP: 0033:0x7f870578e9a9 [ 1062.411117][T19162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.411141][T19162] RSP: 002b:00007f87065730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1062.411163][T19162] RAX: ffffffffffffffda RBX: 00007f87059b5fa8 RCX: 00007f870578e9a9 [ 1062.411180][T19162] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87059b5fac [ 1062.411195][T19162] RBP: 00007f87059b5fa0 R08: 00007f8706574000 R09: 0000000000000000 [ 1062.411210][T19162] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f87059b5fac [ 1062.411225][T19162] R13: 0000000000000000 R14: 00007ffdd6438f70 R15: 00007ffdd6439058 [ 1062.411254][T19162] [ 1062.604379][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.698168][T19151] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1062.704555][T19151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1062.710566][T19151] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1063.022163][T19151] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1063.315872][T19166] QAT: Device 250 not found [ 1063.388662][T19162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2773'. [ 1063.922187][T19177] vivid-009: ================= START STATUS ================= [ 1064.080782][T19177] vivid-009: Enable Output Cropping: true grabbed [ 1064.130186][T19177] vivid-009: Enable Output Composing: true grabbed [ 1064.219603][T16128] Bluetooth: hci1: command 0x0c1a tx timeout [ 1064.288222][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2777'. [ 1064.344508][T19177] vivid-009: Enable Output Scaler: true grabbed [ 1064.385679][T19177] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 1064.506191][T19183] nbd: must specify a device to reconfigure [ 1064.564878][T19177] vivid-009: Transmit Mode: HDMI grabbed [ 1064.609934][T19177] vivid-009: Hotplug Present: 0x00000000 [ 1064.668847][T19177] vivid-009: RxSense Present: 0x00000000 [ 1064.747334][T19194] binder: 19193:19194 ioctl c018620c 0 returned -14 [ 1064.755561][T19177] vivid-009: EDID Present: 0x00000000 [ 1064.785236][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.792074][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.828949][T19177] vivid-009: ================== END STATUS ================== [ 1064.939726][T16128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1065.365875][T19199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1065.651414][T19207] FAULT_INJECTION: forcing a failure. [ 1065.651414][T19207] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.710203][T19207] CPU: 0 UID: 0 PID: 19207 Comm: syz.3.2784 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1065.710241][T19207] Tainted: [U]=USER [ 1065.710249][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1065.710264][T19207] Call Trace: [ 1065.710272][T19207] [ 1065.710281][T19207] dump_stack_lvl+0x16c/0x1f0 [ 1065.710315][T19207] should_fail_ex+0x512/0x640 [ 1065.710339][T19207] ? __kvmalloc_node_noprof+0x124/0x620 [ 1065.710381][T19207] should_failslab+0xc2/0x120 [ 1065.710408][T19207] __kvmalloc_node_noprof+0x137/0x620 [ 1065.710447][T19207] ? __pfx_net_ctl_permissions+0x10/0x10 [ 1065.710474][T19207] ? proc_sys_call_handler+0x281/0x570 [ 1065.710499][T19207] ? ns_capable_noaudit+0xda/0x110 [ 1065.710529][T19207] ? proc_sys_call_handler+0x281/0x570 [ 1065.710553][T19207] proc_sys_call_handler+0x281/0x570 [ 1065.710581][T19207] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1065.710605][T19207] ? trace_kmalloc+0x2b/0xd0 [ 1065.710641][T19207] copy_splice_read+0x615/0xba0 [ 1065.710684][T19207] ? __pfx_copy_splice_read+0x10/0x10 [ 1065.710721][T19207] ? look_up_lock_class+0x59/0x150 [ 1065.710748][T19207] ? lockdep_init_map_type+0x5c/0x280 [ 1065.710783][T19207] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1065.710808][T19207] ? __pfx_copy_splice_read+0x10/0x10 [ 1065.710841][T19207] do_splice_read+0x285/0x370 [ 1065.710879][T19207] splice_direct_to_actor+0x2a1/0xa30 [ 1065.710917][T19207] ? __pfx_direct_splice_actor+0x10/0x10 [ 1065.710957][T19207] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1065.710991][T19207] ? get_pid_task+0xfc/0x250 [ 1065.711032][T19207] do_splice_direct+0x174/0x240 [ 1065.711068][T19207] ? __pfx_do_splice_direct+0x10/0x10 [ 1065.711103][T19207] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1065.711143][T19207] ? rw_verify_area+0xcf/0x680 [ 1065.711180][T19207] do_sendfile+0xb06/0xe50 [ 1065.711222][T19207] ? __pfx_do_sendfile+0x10/0x10 [ 1065.711259][T19207] ? __fget_files+0x20e/0x3c0 [ 1065.711307][T19207] __x64_sys_sendfile64+0x1d8/0x220 [ 1065.711334][T19207] ? ksys_write+0x1ac/0x250 [ 1065.711355][T19207] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1065.711391][T19207] do_syscall_64+0xcd/0x490 [ 1065.711418][T19207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.711445][T19207] RIP: 0033:0x7fbbc1d8e9a9 [ 1065.711463][T19207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.711485][T19207] RSP: 002b:00007fbbc2c9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1065.711507][T19207] RAX: ffffffffffffffda RBX: 00007fbbc1fb5fa0 RCX: 00007fbbc1d8e9a9 [ 1065.711523][T19207] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1065.711537][T19207] RBP: 00007fbbc2c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.711570][T19207] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1065.711585][T19207] R13: 0000000000000000 R14: 00007fbbc1fb5fa0 R15: 00007ffd9518b858 [ 1065.711615][T19207] [ 1066.008553][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.371991][T19204] ima: policy update failed [ 1066.455264][ T30] audit: type=1802 audit(4294967862.034:48): pid=19204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2783" res=0 errno=0 [ 1066.603892][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 1067.038747][T16128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1068.095735][T19222] warning: `syz.0.2788' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1069.099569][T16128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1070.426224][T19233] FAULT_INJECTION: forcing a failure. [ 1070.426224][T19233] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.751264][T19233] CPU: 0 UID: 0 PID: 19233 Comm: syz.3.2790 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1070.751310][T19233] Tainted: [U]=USER [ 1070.751320][T19233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1070.751337][T19233] Call Trace: [ 1070.751347][T19233] [ 1070.751358][T19233] dump_stack_lvl+0x16c/0x1f0 [ 1070.751392][T19233] should_fail_ex+0x512/0x640 [ 1070.751420][T19233] ? __kvmalloc_node_noprof+0x124/0x620 [ 1070.751468][T19233] should_failslab+0xc2/0x120 [ 1070.751501][T19233] __kvmalloc_node_noprof+0x137/0x620 [ 1070.751561][T19233] ? __pfx___debug_object_init+0x10/0x10 [ 1070.751594][T19233] ? bucket_table_alloc.isra.0+0x83/0x460 [ 1070.751641][T19233] ? bucket_table_alloc.isra.0+0x83/0x460 [ 1070.751682][T19233] bucket_table_alloc.isra.0+0x83/0x460 [ 1070.751735][T19233] rhashtable_init_noprof+0x41a/0x7e0 [ 1070.751758][T19233] ? __init_waitqueue_head+0xca/0x150 [ 1070.751784][T19233] rhltable_init_noprof+0x20/0x60 [ 1070.751807][T19233] sta_info_init+0x27/0x160 [ 1070.751834][T19233] ieee80211_alloc_hw_nm+0x840/0x2260 [ 1070.751863][T19233] ? __local_bh_enable_ip+0xa4/0x120 [ 1070.751895][T19233] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 1070.751934][T19233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1070.751974][T19233] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1070.752009][T19233] hwsim_new_radio_nl+0xb51/0x12c0 [ 1070.752037][T19233] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1070.752071][T19233] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1070.752108][T19233] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1070.752150][T19233] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1070.752186][T19233] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1070.752221][T19233] ? trace_cap_capable+0x18d/0x200 [ 1070.752257][T19233] ? bpf_lsm_capable+0x9/0x10 [ 1070.752292][T19233] ? security_capable+0x7e/0x260 [ 1070.752321][T19233] ? ns_capable+0xd7/0x110 [ 1070.752349][T19233] genl_rcv_msg+0x55c/0x800 [ 1070.752385][T19233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.752419][T19233] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1070.752455][T19233] netlink_rcv_skb+0x158/0x420 [ 1070.752484][T19233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.752519][T19233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1070.752561][T19233] ? netlink_deliver_tap+0x1ae/0xd30 [ 1070.752593][T19233] genl_rcv+0x28/0x40 [ 1070.752623][T19233] netlink_unicast+0x58a/0x850 [ 1070.752657][T19233] ? __pfx_netlink_unicast+0x10/0x10 [ 1070.752694][T19233] netlink_sendmsg+0x8d1/0xdd0 [ 1070.752747][T19233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.752787][T19233] ____sys_sendmsg+0xa98/0xc70 [ 1070.752822][T19233] ? copy_msghdr_from_user+0x10a/0x160 [ 1070.752847][T19233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.752893][T19233] ___sys_sendmsg+0x134/0x1d0 [ 1070.752919][T19233] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.752942][T19233] ? __lock_acquire+0x622/0x1c90 [ 1070.753010][T19233] __sys_sendmsg+0x16d/0x220 [ 1070.753036][T19233] ? __pfx___sys_sendmsg+0x10/0x10 [ 1070.753080][T19233] do_syscall_64+0xcd/0x490 [ 1070.753107][T19233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.753131][T19233] RIP: 0033:0x7fbbc1d8e9a9 [ 1070.753149][T19233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.753173][T19233] RSP: 002b:00007fbbc2c9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.753195][T19233] RAX: ffffffffffffffda RBX: 00007fbbc1fb5fa0 RCX: 00007fbbc1d8e9a9 [ 1070.753211][T19233] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1070.753227][T19233] RBP: 00007fbbc2c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.753241][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1070.753256][T19233] R13: 0000000000000000 R14: 00007fbbc1fb5fa0 R15: 00007ffd9518b858 [ 1070.753285][T19233] [ 1071.129880][ C0] vkms_vblank_simulate: vblank timer overrun [ 1072.591757][T19245] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.2.2794: 7 [ 1072.920788][T19250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2795'. [ 1073.699223][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2798'. [ 1075.672043][T19277] ima: policy update failed [ 1075.787514][ T30] audit: type=1802 audit(4294967871.424:49): pid=19277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2800" res=0 errno=0 [ 1076.071098][T19306] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1076.484243][ T30] audit: type=1326 audit(4294967872.124:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19308 comm="syz.4.2809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe383b8e9a9 code=0x0 [ 1076.505929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.071008][T19342] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input390 [ 1078.163046][T19342] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1078.243015][T19345] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1078.390610][T19334] zswap: compressor 000 not available [ 1078.674947][T19338] zswap: compressor /de©P¶v/tud)o1 not available [ 1079.488135][T19369] netlink: zone id is out of range [ 1079.530679][T19369] netlink: zone id is out of range [ 1079.551171][T19369] netlink: zone id is out of range [ 1079.566739][T19369] netlink: zone id is out of range [ 1079.590524][T19369] netlink: zone id is out of range [ 1079.606001][T19369] netlink: zone id is out of range [ 1079.623354][T19369] netlink: zone id is out of range [ 1079.642086][T19369] netlink: zone id is out of range [ 1079.658553][T19369] netlink: zone id is out of range [ 1079.679595][T19369] netlink: zone id is out of range [ 1082.138149][T19445] ovs_: entered promiscuous mode [ 1082.412865][T19445] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input391 [ 1082.632843][T19453] openvswitch: ovs_: Dropping previously announced user features [ 1082.862472][T19450] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input392 [ 1083.700112][T19463] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2834'. [ 1083.780267][T19463] FAULT_INJECTION: forcing a failure. [ 1083.780267][T19463] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.832249][T19463] CPU: 0 UID: 0 PID: 19463 Comm: syz.2.2834 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1083.832297][T19463] Tainted: [U]=USER [ 1083.832306][T19463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1083.832321][T19463] Call Trace: [ 1083.832329][T19463] [ 1083.832340][T19463] dump_stack_lvl+0x16c/0x1f0 [ 1083.832370][T19463] should_fail_ex+0x512/0x640 [ 1083.832396][T19463] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1083.832439][T19463] should_failslab+0xc2/0x120 [ 1083.832469][T19463] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1083.832508][T19463] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1083.832546][T19463] ? kvm_set_irq_routing+0x24f/0x980 [ 1083.832585][T19463] kvm_set_irq_routing+0x24f/0x980 [ 1083.832628][T19463] kvm_arch_vm_ioctl+0x941/0x1cf0 [ 1083.832659][T19463] ? ima_match_policy+0x7f9/0x22e0 [ 1083.832705][T19463] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1083.832737][T19463] ? __lock_acquire+0x622/0x1c90 [ 1083.832776][T19463] ? __lock_acquire+0x622/0x1c90 [ 1083.832815][T19463] ? __lock_acquire+0x622/0x1c90 [ 1083.832854][T19463] ? __lock_acquire+0x622/0x1c90 [ 1083.832909][T19463] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1083.832940][T19463] ? is_bpf_text_address+0x94/0x1a0 [ 1083.832974][T19463] ? kernel_text_address+0x8d/0x100 [ 1083.833013][T19463] ? __kernel_text_address+0xd/0x40 [ 1083.833052][T19463] ? unwind_get_return_address+0x59/0xa0 [ 1083.833091][T19463] ? arch_stack_walk+0xa6/0x100 [ 1083.833125][T19463] ? stack_trace_save+0x8e/0xc0 [ 1083.833152][T19463] ? __pfx_stack_trace_save+0x10/0x10 [ 1083.833180][T19463] ? stack_depot_save_flags+0x28/0xa40 [ 1083.833207][T19463] ? __lock_acquire+0xb8a/0x1c90 [ 1083.833242][T19463] ? kasan_save_stack+0x42/0x60 [ 1083.833268][T19463] ? kasan_save_stack+0x33/0x60 [ 1083.833294][T19463] ? kasan_save_track+0x14/0x30 [ 1083.833316][T19463] ? kasan_save_free_info+0x3b/0x60 [ 1083.833350][T19463] ? __kasan_slab_free+0x51/0x70 [ 1083.833374][T19463] ? kfree+0x2b4/0x4d0 [ 1083.833408][T19463] ? tomoyo_path_number_perm+0x470/0x580 [ 1083.833443][T19463] ? security_file_ioctl+0x9b/0x240 [ 1083.833477][T19463] ? __x64_sys_ioctl+0xb7/0x210 [ 1083.833509][T19463] ? do_syscall_64+0xcd/0x490 [ 1083.833538][T19463] kvm_vm_ioctl+0x19d3/0x3dd0 [ 1083.833607][T19463] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1083.833661][T19463] ? kasan_quarantine_put+0x10a/0x240 [ 1083.833683][T19463] ? lockdep_hardirqs_on+0x7c/0x110 [ 1083.833709][T19463] ? find_held_lock+0x2b/0x80 [ 1083.833734][T19463] ? tomoyo_path_number_perm+0x295/0x580 [ 1083.833773][T19463] ? tomoyo_path_number_perm+0x18d/0x580 [ 1083.833807][T19463] ? do_raw_spin_unlock+0xb4/0x230 [ 1083.833846][T19463] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1083.833880][T19463] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1083.833917][T19463] ? do_vfs_ioctl+0x523/0x1a60 [ 1083.833950][T19463] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1083.834002][T19463] ? find_held_lock+0x2b/0x80 [ 1083.834026][T19463] ? hook_file_ioctl_common+0x145/0x410 [ 1083.834063][T19463] ? __fget_files+0x20e/0x3c0 [ 1083.834106][T19463] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1083.834145][T19463] __x64_sys_ioctl+0x18e/0x210 [ 1083.834180][T19463] do_syscall_64+0xcd/0x490 [ 1083.834207][T19463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.834230][T19463] RIP: 0033:0x7fbc25d8e9a9 [ 1083.834250][T19463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.834276][T19463] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.834306][T19463] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1083.834324][T19463] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 1083.834340][T19463] RBP: 00007fbc25e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1083.834355][T19463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.834371][T19463] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1083.834402][T19463] [ 1084.224603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.350865][ T30] audit: type=1800 audit(4294967882.994:51): pid=19502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2845" name="lu_gp_id" dev="configfs" ino=71310 res=0 errno=0 [ 1087.921088][T19511] FAULT_INJECTION: forcing a failure. [ 1087.921088][T19511] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.982806][T19511] CPU: 0 UID: 0 PID: 19511 Comm: syz.2.2847 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1087.982855][T19511] Tainted: [U]=USER [ 1087.982864][T19511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1087.982879][T19511] Call Trace: [ 1087.982888][T19511] [ 1087.982898][T19511] dump_stack_lvl+0x16c/0x1f0 [ 1087.982929][T19511] should_fail_ex+0x512/0x640 [ 1087.982954][T19511] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1087.982997][T19511] ? __pfx_mon_text_open+0x10/0x10 [ 1087.983024][T19511] should_failslab+0xc2/0x120 [ 1087.983054][T19511] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1087.983094][T19511] ? mon_text_open+0x1cb/0x4f0 [ 1087.983124][T19511] ? __pfx_mon_text_open+0x10/0x10 [ 1087.983151][T19511] mon_text_open+0x1cb/0x4f0 [ 1087.983179][T19511] ? __pfx_mon_text_open+0x10/0x10 [ 1087.983205][T19511] ? __debugfs_file_get+0x1fe/0x840 [ 1087.983235][T19511] ? __pfx___debugfs_file_get+0x10/0x10 [ 1087.983266][T19511] ? __pfx_apparmor_file_open+0x10/0x10 [ 1087.983304][T19511] ? lockdown_is_locked_down+0x3f/0x130 [ 1087.983327][T19511] ? bpf_lsm_locked_down+0x9/0x10 [ 1087.983368][T19511] ? __pfx_mon_text_open+0x10/0x10 [ 1087.983394][T19511] full_proxy_open_regular+0x1b6/0x360 [ 1087.983431][T19511] do_dentry_open+0x744/0x1c10 [ 1087.983457][T19511] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1087.983497][T19511] vfs_open+0x82/0x3f0 [ 1087.983533][T19511] path_openat+0x1de4/0x2cb0 [ 1087.983567][T19511] ? __pfx_path_openat+0x10/0x10 [ 1087.983597][T19511] ? __lock_acquire+0xb8a/0x1c90 [ 1087.983635][T19511] do_filp_open+0x20b/0x470 [ 1087.983659][T19511] ? __pfx_do_filp_open+0x10/0x10 [ 1087.983705][T19511] ? alloc_fd+0x471/0x7d0 [ 1087.983752][T19511] do_sys_openat2+0x11b/0x1d0 [ 1087.983785][T19511] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.983849][T19511] __x64_sys_openat+0x174/0x210 [ 1087.983884][T19511] ? __pfx___x64_sys_openat+0x10/0x10 [ 1087.983931][T19511] do_syscall_64+0xcd/0x490 [ 1087.983960][T19511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.983986][T19511] RIP: 0033:0x7fbc25d8e9a9 [ 1087.984005][T19511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.984030][T19511] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1087.984053][T19511] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1087.984071][T19511] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1087.984087][T19511] RBP: 00007fbc25e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1087.984103][T19511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.984118][T19511] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1087.984149][T19511] [ 1088.258856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.334917][T19514] futex_wake_op: syz.3.2848 tries to shift op by -2048; fix this program [ 1088.343941][T19514] futex_wake_op: syz.3.2848 tries to shift op by -2048; fix this program [ 1094.826795][T19593] FAULT_INJECTION: forcing a failure. [ 1094.826795][T19593] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.899418][T19593] CPU: 0 UID: 0 PID: 19593 Comm: syz.0.2864 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1094.899461][T19593] Tainted: [U]=USER [ 1094.899469][T19593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1094.899490][T19593] Call Trace: [ 1094.899498][T19593] [ 1094.899509][T19593] dump_stack_lvl+0x16c/0x1f0 [ 1094.899540][T19593] should_fail_ex+0x512/0x640 [ 1094.899566][T19593] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1094.899596][T19593] should_failslab+0xc2/0x120 [ 1094.899625][T19593] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1094.899652][T19593] ? copy_process+0x4b6/0x7650 [ 1094.899685][T19593] ? _raw_spin_unlock_irq+0x23/0x50 [ 1094.899727][T19593] copy_process+0x4b6/0x7650 [ 1094.899759][T19593] ? __pfx___futex_wait+0x10/0x10 [ 1094.899807][T19593] ? __pfx_copy_process+0x10/0x10 [ 1094.899846][T19593] ? __futex_hash.constprop.0+0x1e9/0x440 [ 1094.899880][T19593] kernel_clone+0xfc/0x960 [ 1094.899915][T19593] ? __pfx_kernel_clone+0x10/0x10 [ 1094.899954][T19593] ? do_sys_openat2+0x1b0/0x1d0 [ 1094.899995][T19593] ? 0xffffffff81000000 [ 1094.900012][T19593] __do_sys_clone+0xce/0x120 [ 1094.900045][T19593] ? __pfx___do_sys_clone+0x10/0x10 [ 1094.900088][T19593] ? 0xffffffff81000000 [ 1094.900115][T19593] ? xfd_validate_state+0x61/0x180 [ 1094.900160][T19593] do_syscall_64+0xcd/0x490 [ 1094.900188][T19593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.900213][T19593] RIP: 0033:0x7f870578e9a9 [ 1094.900232][T19593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.900256][T19593] RSP: 002b:00007f8706573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1094.900279][T19593] RAX: ffffffffffffffda RBX: 00007f87059b5fa0 RCX: 00007f870578e9a9 [ 1094.900296][T19593] RDX: 9999999999999999 RSI: 0000000000000004 RDI: 0000000000000000 [ 1094.900312][T19593] RBP: 00007f8705810d69 R08: 0000000000000009 R09: 0000000000000000 [ 1094.900327][T19593] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.900342][T19593] R13: 0000000000000000 R14: 00007f87059b5fa0 R15: 00007ffdd6439058 [ 1094.900363][T19593] ? 0xffffffff81000000 [ 1094.900388][T19593] [ 1095.938502][T19615] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1098.509121][T19643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'. [ 1100.450168][T19673] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2892'. [ 1101.032981][T19687] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 1101.469379][ T30] audit: type=1326 audit(4294967897.094:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.0.2888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f870578e9a9 code=0x0 [ 1101.542225][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2890'. [ 1101.655172][T19687] random: crng reseeded on system resumption [ 1102.756034][T19722] size and base must be multiples of 4 kiB [ 1102.774718][T19722] CPU: 0 UID: 0 PID: 19722 Comm: syz.4.2895 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1102.774760][T19722] Tainted: [U]=USER [ 1102.774769][T19722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1102.774785][T19722] Call Trace: [ 1102.774793][T19722] [ 1102.774803][T19722] dump_stack_lvl+0x16c/0x1f0 [ 1102.774832][T19722] mtrr_add+0xdf/0x110 [ 1102.774864][T19722] mtrr_ioctl+0x7ef/0xcf0 [ 1102.774901][T19722] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1102.774938][T19722] ? find_held_lock+0x2b/0x80 [ 1102.774970][T19722] ? __fget_files+0x20e/0x3c0 [ 1102.775010][T19722] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1102.775041][T19722] proc_reg_unlocked_ioctl+0x229/0x320 [ 1102.775066][T19722] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1102.775093][T19722] __x64_sys_ioctl+0x18e/0x210 [ 1102.775129][T19722] do_syscall_64+0xcd/0x490 [ 1102.775156][T19722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.775180][T19722] RIP: 0033:0x7fe383b8e9a9 [ 1102.775205][T19722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.775230][T19722] RSP: 002b:00007fe384933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.775252][T19722] RAX: ffffffffffffffda RBX: 00007fe383db6080 RCX: 00007fe383b8e9a9 [ 1102.775269][T19722] RDX: 0000000000000009 RSI: 00000000400c4d01 RDI: 0000000000000009 [ 1102.775285][T19722] RBP: 00007fe383c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1102.775300][T19722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.775316][T19722] R13: 0000000000000000 R14: 00007fe383db6080 R15: 00007ffe7f4ac238 [ 1102.775346][T19722] [ 1102.947300][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.092370][T19716] ALSA: mixer_oss: invalid OSS volume '' [ 1104.472229][T19750] FAULT_INJECTION: forcing a failure. [ 1104.472229][T19750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.537804][T19750] CPU: 0 UID: 0 PID: 19750 Comm: syz.0.2902 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1104.537844][T19750] Tainted: [U]=USER [ 1104.537852][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1104.537865][T19750] Call Trace: [ 1104.537873][T19750] [ 1104.537882][T19750] dump_stack_lvl+0x16c/0x1f0 [ 1104.537910][T19750] should_fail_ex+0x512/0x640 [ 1104.537938][T19750] _copy_to_iter+0x29f/0x16f0 [ 1104.537980][T19750] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1104.538010][T19750] ? memory_stat_show+0x13b/0x1c0 [ 1104.538034][T19750] ? __pfx__copy_to_iter+0x10/0x10 [ 1104.538060][T19750] ? kernfs_seq_stop+0xcd/0x120 [ 1104.538092][T19750] ? kernfs_put_active+0x86/0xe0 [ 1104.538119][T19750] seq_read_iter+0xcf8/0x12c0 [ 1104.538166][T19750] kernfs_fop_read_iter+0x40f/0x5a0 [ 1104.538194][T19750] ? rw_verify_area+0xcf/0x680 [ 1104.538229][T19750] vfs_read+0x8bc/0xc60 [ 1104.538253][T19750] ? __pfx___mutex_lock+0x10/0x10 [ 1104.538276][T19750] ? __pfx_vfs_read+0x10/0x10 [ 1104.538313][T19750] ksys_read+0x12a/0x250 [ 1104.538333][T19750] ? __pfx_ksys_read+0x10/0x10 [ 1104.538361][T19750] do_syscall_64+0xcd/0x490 [ 1104.538387][T19750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.538409][T19750] RIP: 0033:0x7f870578e9a9 [ 1104.538426][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.538448][T19750] RSP: 002b:00007f8706531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1104.538468][T19750] RAX: ffffffffffffffda RBX: 00007f87059b6160 RCX: 00007f870578e9a9 [ 1104.538483][T19750] RDX: 0000000000000076 RSI: 0000200000000240 RDI: 0000000000000002 [ 1104.538496][T19750] RBP: 00007f8706531090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.538510][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.538523][T19750] R13: 0000000000000000 R14: 00007f87059b6160 R15: 00007ffdd6439058 [ 1104.538550][T19750] [ 1104.735568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.959998][T19752] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1105.448329][ T30] audit: type=1800 audit(4294967901.084:53): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2908" name="dbroot" dev="configfs" ino=72567 res=0 errno=0 [ 1107.770393][T19807] FAULT_INJECTION: forcing a failure. [ 1107.770393][T19807] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.937371][T19807] CPU: 0 UID: 0 PID: 19807 Comm: syz.2.2919 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1107.937413][T19807] Tainted: [U]=USER [ 1107.937420][T19807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1107.937434][T19807] Call Trace: [ 1107.937442][T19807] [ 1107.937451][T19807] dump_stack_lvl+0x16c/0x1f0 [ 1107.937481][T19807] should_fail_ex+0x512/0x640 [ 1107.937505][T19807] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1107.937533][T19807] should_failslab+0xc2/0x120 [ 1107.937561][T19807] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1107.937590][T19807] ? __alloc_skb+0x2b2/0x380 [ 1107.937618][T19807] __alloc_skb+0x2b2/0x380 [ 1107.937640][T19807] ? __pfx___alloc_skb+0x10/0x10 [ 1107.937666][T19807] ? __lock_acquire+0xb8a/0x1c90 [ 1107.937703][T19807] netlink_alloc_large_skb+0x69/0x130 [ 1107.937735][T19807] netlink_sendmsg+0x6a1/0xdd0 [ 1107.937769][T19807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.937808][T19807] ____sys_sendmsg+0xa98/0xc70 [ 1107.937841][T19807] ? copy_msghdr_from_user+0x10a/0x160 [ 1107.937866][T19807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.937902][T19807] ? kfree+0x24f/0x4d0 [ 1107.937935][T19807] ? __pfx__kstrtoull+0x10/0x10 [ 1107.937975][T19807] ___sys_sendmsg+0x134/0x1d0 [ 1107.938001][T19807] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.938051][T19807] ? __pfx___might_resched+0x10/0x10 [ 1107.938084][T19807] __sys_sendmmsg+0x200/0x420 [ 1107.938112][T19807] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1107.938147][T19807] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1107.938184][T19807] ? fput+0x70/0xf0 [ 1107.938211][T19807] ? ksys_write+0x1ac/0x250 [ 1107.938233][T19807] ? __pfx_ksys_write+0x10/0x10 [ 1107.938260][T19807] __x64_sys_sendmmsg+0x9c/0x100 [ 1107.938284][T19807] ? lockdep_hardirqs_on+0x7c/0x110 [ 1107.938307][T19807] do_syscall_64+0xcd/0x490 [ 1107.938334][T19807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.938357][T19807] RIP: 0033:0x7fbc25d8e9a9 [ 1107.938375][T19807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.938402][T19807] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1107.938424][T19807] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1107.938440][T19807] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 1107.938456][T19807] RBP: 00007fbc26c98090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.938471][T19807] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1107.938485][T19807] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1107.938514][T19807] [ 1108.197444][ C0] vkms_vblank_simulate: vblank timer overrun [ 1108.749131][T19814] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1112.727977][T19866] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.4.2934: bg 4: bad block bitmap checksum [ 1112.946197][T19866] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 1113.159783][T19866] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1113.159783][T19866] [ 1115.813383][T19897] random: crng reseeded on system resumption [ 1115.874496][T19927] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2946'. [ 1117.505423][T19948] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1117.580911][T19948] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1117.580911][T19948] [ 1118.745634][T19962] random: crng reseeded on system resumption [ 1119.763920][T19980] netlink: 'syz.0.2959': attribute type 1 has an invalid length. [ 1123.634214][T20036] FAULT_INJECTION: forcing a failure. [ 1123.634214][T20036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1123.786295][T20036] CPU: 0 UID: 0 PID: 20036 Comm: syz.3.2971 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1123.786335][T20036] Tainted: [U]=USER [ 1123.786343][T20036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1123.786358][T20036] Call Trace: [ 1123.786366][T20036] [ 1123.786375][T20036] dump_stack_lvl+0x16c/0x1f0 [ 1123.786404][T20036] should_fail_ex+0x512/0x640 [ 1123.786434][T20036] should_fail_alloc_page+0xe7/0x130 [ 1123.786464][T20036] prepare_alloc_pages+0x3c2/0x610 [ 1123.786503][T20036] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1123.786530][T20036] ? kasan_quarantine_put+0x10a/0x240 [ 1123.786553][T20036] ? lockdep_hardirqs_on+0x7c/0x110 [ 1123.786580][T20036] ? kmem_cache_free+0x2d1/0x4d0 [ 1123.786602][T20036] ? mt_destroy_walk+0xbd3/0x1020 [ 1123.786624][T20036] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1123.786652][T20036] ? mt_destroy_walk+0x1d4/0x1020 [ 1123.786680][T20036] ? __pfx_mt_destroy_walk+0x10/0x10 [ 1123.786704][T20036] ? inode_to_bdi+0x9e/0x160 [ 1123.786730][T20036] ? vma_wants_writenotify+0x10b/0x390 [ 1123.786755][T20036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1123.786793][T20036] ? policy_nodemask+0xea/0x4e0 [ 1123.786823][T20036] alloc_pages_mpol+0x1fb/0x550 [ 1123.786859][T20036] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1123.786889][T20036] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 1123.786926][T20036] alloc_pages_noprof+0x131/0x390 [ 1123.786955][T20036] pte_alloc_one+0x1c/0x3a0 [ 1123.786976][T20036] __handle_mm_fault+0x3a68/0x5490 [ 1123.787018][T20036] ? __pfx___handle_mm_fault+0x10/0x10 [ 1123.787077][T20036] handle_mm_fault+0x589/0xd10 [ 1123.787117][T20036] __get_user_pages+0x589/0x3b80 [ 1123.787155][T20036] ? __pfx_mt_find+0x10/0x10 [ 1123.787181][T20036] ? __pfx___get_user_pages+0x10/0x10 [ 1123.787222][T20036] populate_vma_page_range+0x278/0x3a0 [ 1123.787256][T20036] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1123.787287][T20036] ? __pfx_find_vma_intersection+0x10/0x10 [ 1123.787319][T20036] ? do_mmap+0x69c/0x1210 [ 1123.787351][T20036] __mm_populate+0x1d8/0x380 [ 1123.787383][T20036] ? __pfx___mm_populate+0x10/0x10 [ 1123.787417][T20036] ? up_write+0x1b2/0x520 [ 1123.787453][T20036] vm_mmap_pgoff+0x362/0x450 [ 1123.787483][T20036] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1123.787515][T20036] ? __fget_files+0x20e/0x3c0 [ 1123.787556][T20036] ksys_mmap_pgoff+0x32c/0x5c0 [ 1123.787584][T20036] ? __pfx_ksys_write+0x10/0x10 [ 1123.787608][T20036] __x64_sys_mmap+0x125/0x190 [ 1123.787643][T20036] do_syscall_64+0xcd/0x490 [ 1123.787668][T20036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.787691][T20036] RIP: 0033:0x7fbbc1d8e9a9 [ 1123.787722][T20036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.787743][T20036] RSP: 002b:00007fbbc2c7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1123.787783][T20036] RAX: ffffffffffffffda RBX: 00007fbbc1fb6080 RCX: 00007fbbc1d8e9a9 [ 1123.787798][T20036] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 1123.787812][T20036] RBP: 00007fbbc2c7c090 R08: 0000000000000003 R09: 0000000000008000 [ 1123.787826][T20036] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000002 [ 1123.787840][T20036] R13: 0000000000000001 R14: 00007fbbc1fb6080 R15: 00007ffd9518b858 [ 1123.787873][T20036] [ 1124.140886][T20025] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1124.153406][T20025] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1124.153406][T20025] [ 1126.090221][T20053] erspan0: entered allmulticast mode [ 1126.222777][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.229147][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1132.886467][ T30] audit: type=1326 audit(4294968057.514:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20142 comm="syz.0.2999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f870578e9a9 code=0x0 [ 1133.717072][T16122] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1133.773829][T16122] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1133.773829][T16122] [ 1134.658220][T16123] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1134.766892][T16123] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1134.766892][T16123] [ 1135.155465][T20175] serio: Serial port pty238 [ 1135.368226][T20177] blktrace: Concurrent blktraces are not allowed on loop2 [ 1140.349022][T20241] random: crng reseeded on system resumption [ 1140.657499][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880261cf400: rx timeout, send abort [ 1141.032545][T20258] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1141.165848][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880261cf400: abort rx timeout. Force session deactivation [ 1141.636333][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 1143.208855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bde1800: rx timeout, send abort [ 1143.717195][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bde1800: abort rx timeout. Force session deactivation [ 1143.807095][T20306] binder: 20303:20306 ioctl c018620c 0 returned -14 [ 1143.862693][T20306] FAULT_INJECTION: forcing a failure. [ 1143.862693][T20306] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1143.931395][T20306] CPU: 0 UID: 0 PID: 20306 Comm: syz.3.3040 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1143.931436][T20306] Tainted: [U]=USER [ 1143.931445][T20306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1143.931460][T20306] Call Trace: [ 1143.931468][T20306] [ 1143.931477][T20306] dump_stack_lvl+0x16c/0x1f0 [ 1143.931507][T20306] should_fail_ex+0x512/0x640 [ 1143.931542][T20306] get_futex_key+0x1d0/0x1540 [ 1143.931575][T20306] ? __pfx_get_futex_key+0x10/0x10 [ 1143.931646][T20306] futex_wake+0xe7/0x4e0 [ 1143.931684][T20306] ? __pfx_futex_wake+0x10/0x10 [ 1143.931721][T20306] ? kmem_cache_free+0x2d1/0x4d0 [ 1143.931744][T20306] ? fd_install+0x225/0x750 [ 1143.931779][T20306] ? putname+0x154/0x1a0 [ 1143.931831][T20306] do_futex+0x1e3/0x350 [ 1143.931860][T20306] ? __pfx_do_futex+0x10/0x10 [ 1143.931897][T20306] __x64_sys_futex+0x1e0/0x4c0 [ 1143.931928][T20306] ? __x64_sys_openat+0x174/0x210 [ 1143.931960][T20306] ? __pfx___x64_sys_futex+0x10/0x10 [ 1143.932001][T20306] do_syscall_64+0xcd/0x490 [ 1143.932028][T20306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.932052][T20306] RIP: 0033:0x7fbbc1d8e9a9 [ 1143.932071][T20306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.932096][T20306] RSP: 002b:00007fbbc2c9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1143.932119][T20306] RAX: ffffffffffffffda RBX: 00007fbbc1fb5fa8 RCX: 00007fbbc1d8e9a9 [ 1143.932136][T20306] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbbc1fb5fac [ 1143.932151][T20306] RBP: 00007fbbc1fb5fa0 R08: 00007fbbc2c9e000 R09: 0000000000000000 [ 1143.932167][T20306] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fbbc1fb5fac [ 1143.932183][T20306] R13: 0000000000000000 R14: 00007ffd9518b770 R15: 00007ffd9518b858 [ 1143.932213][T20306] [ 1144.124613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.136099][T20306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1145.547281][T20320] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1145.754431][T20320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1145.754431][T20320] [ 1147.208477][T20334] ima: policy update failed [ 1147.239519][ T30] audit: type=1802 audit(4294968071.884:55): pid=20334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3047" res=0 errno=0 [ 1148.858536][T20385] nvme_fabrics: missing parameter 'transport=%s' [ 1148.887807][T20375] 0x000000000001-0x000000020000 : "" [ 1148.962411][T20375] ftl_cs: FTL header corrupt! [ 1148.978820][T20385] nvme_fabrics: missing parameter 'nqn=%s' [ 1150.627957][T16301] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1150.672803][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 1150.712065][T16301] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1150.712065][T16301] [ 1150.820068][T20413] FAULT_INJECTION: forcing a failure. [ 1150.820068][T20413] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.952313][T20413] CPU: 0 UID: 0 PID: 20413 Comm: syz.3.3066 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1150.952356][T20413] Tainted: [U]=USER [ 1150.952364][T20413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1150.952380][T20413] Call Trace: [ 1150.952388][T20413] [ 1150.952399][T20413] dump_stack_lvl+0x16c/0x1f0 [ 1150.952428][T20413] should_fail_ex+0x512/0x640 [ 1150.952453][T20413] ? __kmalloc_noprof+0xbf/0x510 [ 1150.952480][T20413] ? ovs_vport_set_upcall_portids+0xfc/0x2f0 [ 1150.952511][T20413] should_failslab+0xc2/0x120 [ 1150.952540][T20413] __kmalloc_noprof+0xd2/0x510 [ 1150.952572][T20413] ovs_vport_set_upcall_portids+0xfc/0x2f0 [ 1150.952606][T20413] ovs_vport_alloc+0x28c/0x3d0 [ 1150.952638][T20413] internal_dev_create+0x25/0x520 [ 1150.952670][T20413] ovs_vport_add+0x144/0x4d0 [ 1150.952701][T20413] new_vport+0x16/0x1d0 [ 1150.952752][T20413] ovs_dp_cmd_new+0x6ba/0xe60 [ 1150.952796][T20413] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1150.952848][T20413] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1150.952887][T20413] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1150.952930][T20413] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1150.952968][T20413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1150.953004][T20413] ? trace_cap_capable+0x18d/0x200 [ 1150.953041][T20413] ? bpf_lsm_capable+0x9/0x10 [ 1150.953076][T20413] ? security_capable+0x7e/0x260 [ 1150.953106][T20413] ? ns_capable+0xd7/0x110 [ 1150.953134][T20413] genl_rcv_msg+0x55c/0x800 [ 1150.953171][T20413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1150.953206][T20413] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1150.953256][T20413] netlink_rcv_skb+0x158/0x420 [ 1150.953286][T20413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1150.953323][T20413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1150.953370][T20413] ? netlink_deliver_tap+0x1ae/0xd30 [ 1150.953402][T20413] genl_rcv+0x28/0x40 [ 1150.953432][T20413] netlink_unicast+0x58a/0x850 [ 1150.953466][T20413] ? __pfx_netlink_unicast+0x10/0x10 [ 1150.953524][T20413] netlink_sendmsg+0x8d1/0xdd0 [ 1150.953558][T20413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.953599][T20413] ____sys_sendmsg+0xa98/0xc70 [ 1150.953634][T20413] ? copy_msghdr_from_user+0x10a/0x160 [ 1150.953658][T20413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1150.953698][T20413] ? __pfx_futex_wake_mark+0x10/0x10 [ 1150.953738][T20413] ___sys_sendmsg+0x134/0x1d0 [ 1150.953765][T20413] ? __pfx____sys_sendmsg+0x10/0x10 [ 1150.953787][T20413] ? __lock_acquire+0x622/0x1c90 [ 1150.953861][T20413] __sys_sendmsg+0x16d/0x220 [ 1150.953888][T20413] ? __pfx___sys_sendmsg+0x10/0x10 [ 1150.953914][T20413] ? __x64_sys_futex+0x1e0/0x4c0 [ 1150.953963][T20413] do_syscall_64+0xcd/0x490 [ 1150.953993][T20413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.954019][T20413] RIP: 0033:0x7fbbc1d8e9a9 [ 1150.954039][T20413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.954064][T20413] RSP: 002b:00007fbbc2c7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.954087][T20413] RAX: ffffffffffffffda RBX: 00007fbbc1fb6080 RCX: 00007fbbc1d8e9a9 [ 1150.954103][T20413] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 1150.954119][T20413] RBP: 00007fbbc1e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1150.954134][T20413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.954149][T20413] R13: 0000000000000000 R14: 00007fbbc1fb6080 R15: 00007ffd9518b858 [ 1150.954180][T20413] [ 1151.297165][ C0] vkms_vblank_simulate: vblank timer overrun [ 1151.403298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1154.325127][T20455] netlink: 'syz.4.3078': attribute type 11 has an invalid length. [ 1154.371876][T20455] netlink: 'syz.4.3078': attribute type 11 has an invalid length. [ 1154.411931][T20455] netlink: 'syz.4.3078': attribute type 11 has an invalid length. [ 1154.445043][T20455] netlink: 'syz.4.3078': attribute type 11 has an invalid length. [ 1156.693580][T20488] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1157.076124][T20501] FAULT_INJECTION: forcing a failure. [ 1157.076124][T20501] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.140096][T20501] CPU: 0 UID: 0 PID: 20501 Comm: syz.2.3089 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1157.140147][T20501] Tainted: [U]=USER [ 1157.140155][T20501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1157.140169][T20501] Call Trace: [ 1157.140177][T20501] [ 1157.140186][T20501] dump_stack_lvl+0x16c/0x1f0 [ 1157.140215][T20501] should_fail_ex+0x512/0x640 [ 1157.140246][T20501] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1157.140287][T20501] should_failslab+0xc2/0x120 [ 1157.140315][T20501] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1157.140351][T20501] ? lockdep_init_map_type+0x5c/0x280 [ 1157.140385][T20501] ? jffs2_init_fs_context+0x3f/0xd0 [ 1157.140413][T20501] ? __pfx_jffs2_init_fs_context+0x10/0x10 [ 1157.140436][T20501] jffs2_init_fs_context+0x3f/0xd0 [ 1157.140459][T20501] ? __pfx_jffs2_init_fs_context+0x10/0x10 [ 1157.140481][T20501] alloc_fs_context+0x54d/0x9c0 [ 1157.140511][T20501] __x64_sys_fsopen+0xeb/0x240 [ 1157.140540][T20501] do_syscall_64+0xcd/0x490 [ 1157.140566][T20501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.140591][T20501] RIP: 0033:0x7fbc25d8e9a9 [ 1157.140609][T20501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.140633][T20501] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1157.140656][T20501] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1157.140672][T20501] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1157.140690][T20501] RBP: 00007fbc26c98090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.140705][T20501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.140719][T20501] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1157.140749][T20501] [ 1157.330419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.122144][T20515] nvme_fcloop: unknown parameter or missing value 'ELF' [ 1158.781795][T20513] ALSA: mixer_oss: invalid OSS volume '' [ 1161.590321][T20553] device-mapper: ioctl: Invalid ioctl structure: name ¢, dev 7f00010002 [ 1163.504101][T20585] aoe: can't write to that file. [ 1165.258227][ T30] audit: type=1800 audit(4294968089.894:56): pid=20606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3113" name="lu_gp_id" dev="configfs" ino=76093 res=0 errno=0 [ 1165.811962][T20614] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1165.939359][T20614] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1165.939359][T20614] [ 1166.947438][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ad5f400: rx timeout, send abort [ 1167.455792][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ad5f400: abort rx timeout. Force session deactivation [ 1167.790764][ T30] audit: type=1804 audit(4294968092.434:57): pid=20641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3121" name="/newroot/195/file0" dev="tmpfs" ino=1019 res=1 errno=0 [ 1167.963224][ T30] audit: type=1800 audit(4294968092.434:58): pid=20641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3121" name="file0" dev="tmpfs" ino=1019 res=0 errno=0 [ 1168.081990][ T30] audit: type=1800 audit(4294968092.474:59): pid=20641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3121" name="file0" dev="tmpfs" ino=1019 res=0 errno=0 [ 1169.783858][T20648] FAULT_INJECTION: forcing a failure. [ 1169.783858][T20648] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.859398][T20648] CPU: 0 UID: 0 PID: 20648 Comm: syz.0.3123 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1169.859440][T20648] Tainted: [U]=USER [ 1169.859448][T20648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1169.859463][T20648] Call Trace: [ 1169.859471][T20648] [ 1169.859481][T20648] dump_stack_lvl+0x16c/0x1f0 [ 1169.859510][T20648] should_fail_ex+0x512/0x640 [ 1169.859535][T20648] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1169.859563][T20648] should_failslab+0xc2/0x120 [ 1169.859592][T20648] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1169.859617][T20648] ? find_held_lock+0x2b/0x80 [ 1169.859641][T20648] ? vm_area_dup+0x27/0x8d0 [ 1169.859679][T20648] ? dup_mmap+0x5cb/0x21d0 [ 1169.859716][T20648] vm_area_dup+0x27/0x8d0 [ 1169.859763][T20648] dup_mmap+0x877/0x21d0 [ 1169.859809][T20648] ? __pfx_dup_mmap+0x10/0x10 [ 1169.859863][T20648] copy_process+0x4081/0x7650 [ 1169.859895][T20648] ? preempt_schedule_thunk+0x16/0x30 [ 1169.859938][T20648] ? __pfx_copy_process+0x10/0x10 [ 1169.859970][T20648] ? find_held_lock+0x2b/0x80 [ 1169.859998][T20648] ? wake_up_q+0xb0/0x160 [ 1169.860020][T20648] ? do_raw_spin_unlock+0x172/0x230 [ 1169.860064][T20648] kernel_clone+0xfc/0x960 [ 1169.860095][T20648] ? __pfx_futex_wake+0x10/0x10 [ 1169.860130][T20648] ? __pfx_kernel_clone+0x10/0x10 [ 1169.860178][T20648] __do_sys_clone+0xce/0x120 [ 1169.860209][T20648] ? __pfx___do_sys_clone+0x10/0x10 [ 1169.860240][T20648] ? ksys_unshare+0x687/0xa40 [ 1169.860285][T20648] ? xfd_validate_state+0x61/0x180 [ 1169.860328][T20648] do_syscall_64+0xcd/0x490 [ 1169.860376][T20648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.860401][T20648] RIP: 0033:0x7f870578e9a9 [ 1169.860421][T20648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.860446][T20648] RSP: 002b:00007f8706572fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1169.860469][T20648] RAX: ffffffffffffffda RBX: 00007f87059b5fa0 RCX: 00007f870578e9a9 [ 1169.860487][T20648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1169.860502][T20648] RBP: 00007f8705810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1169.860517][T20648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1169.860533][T20648] R13: 0000000000000000 R14: 00007f87059b5fa0 R15: 00007ffdd6439058 [ 1169.860564][T20648] [ 1170.351630][T20662] FAULT_INJECTION: forcing a failure. [ 1170.351630][T20662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.379429][T20662] CPU: 0 UID: 0 PID: 20662 Comm: syz.4.3125 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1170.379471][T20662] Tainted: [U]=USER [ 1170.379479][T20662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1170.379494][T20662] Call Trace: [ 1170.379502][T20662] [ 1170.379512][T20662] dump_stack_lvl+0x16c/0x1f0 [ 1170.379542][T20662] should_fail_ex+0x512/0x640 [ 1170.379571][T20662] _copy_to_user+0x32/0xd0 [ 1170.379600][T20662] simple_read_from_buffer+0xcb/0x170 [ 1170.379652][T20662] proc_fail_nth_read+0x197/0x270 [ 1170.379693][T20662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1170.379745][T20662] ? rw_verify_area+0xcf/0x680 [ 1170.379782][T20662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1170.379817][T20662] vfs_read+0x1e4/0xc60 [ 1170.379843][T20662] ? __pfx___mutex_lock+0x10/0x10 [ 1170.379869][T20662] ? __pfx_vfs_read+0x10/0x10 [ 1170.379899][T20662] ? __fget_files+0x20e/0x3c0 [ 1170.379946][T20662] ksys_read+0x12a/0x250 [ 1170.379968][T20662] ? __pfx_ksys_read+0x10/0x10 [ 1170.379993][T20662] ? fput+0x70/0xf0 [ 1170.380025][T20662] do_syscall_64+0xcd/0x490 [ 1170.380054][T20662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.380078][T20662] RIP: 0033:0x7fe383b8d3bc [ 1170.380097][T20662] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1170.380121][T20662] RSP: 002b:00007fe384954030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1170.380144][T20662] RAX: ffffffffffffffda RBX: 00007fe383db5fa0 RCX: 00007fe383b8d3bc [ 1170.380161][T20662] RDX: 000000000000000f RSI: 00007fe3849540a0 RDI: 0000000000000006 [ 1170.380176][T20662] RBP: 00007fe384954090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.380191][T20662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.380206][T20662] R13: 0000000000000000 R14: 00007fe383db5fa0 R15: 00007ffe7f4ac238 [ 1170.380236][T20662] [ 1174.214137][T20706] FAULT_INJECTION: forcing a failure. [ 1174.214137][T20706] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1174.302702][T20706] CPU: 0 UID: 0 PID: 20706 Comm: syz.0.3140 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1174.302745][T20706] Tainted: [U]=USER [ 1174.302754][T20706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1174.302769][T20706] Call Trace: [ 1174.302777][T20706] [ 1174.302788][T20706] dump_stack_lvl+0x16c/0x1f0 [ 1174.302818][T20706] should_fail_ex+0x512/0x640 [ 1174.302847][T20706] get_futex_key+0x1d0/0x1540 [ 1174.302882][T20706] ? __pfx_get_futex_key+0x10/0x10 [ 1174.302914][T20706] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1174.302958][T20706] futex_wake+0xe7/0x4e0 [ 1174.302994][T20706] ? __pfx_scsi_ioctl+0x10/0x10 [ 1174.303032][T20706] ? __pfx_futex_wake+0x10/0x10 [ 1174.303080][T20706] do_futex+0x1e3/0x350 [ 1174.303111][T20706] ? __pfx_do_futex+0x10/0x10 [ 1174.303144][T20706] ? sd_ioctl+0x1b8/0x2c0 [ 1174.303181][T20706] __x64_sys_futex+0x1e0/0x4c0 [ 1174.303222][T20706] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1174.303258][T20706] ? __pfx___x64_sys_futex+0x10/0x10 [ 1174.303294][T20706] ? fput+0x70/0xf0 [ 1174.303327][T20706] do_syscall_64+0xcd/0x490 [ 1174.303355][T20706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.303381][T20706] RIP: 0033:0x7f870578e9a9 [ 1174.303399][T20706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.303424][T20706] RSP: 002b:00007f87065730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1174.303447][T20706] RAX: ffffffffffffffda RBX: 00007f87059b5fa8 RCX: 00007f870578e9a9 [ 1174.303464][T20706] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87059b5fac [ 1174.303480][T20706] RBP: 00007f87059b5fa0 R08: 00007f8706574000 R09: 0000000000000000 [ 1174.303495][T20706] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f87059b5fac [ 1174.303511][T20706] R13: 0000000000000000 R14: 00007ffdd6438f70 R15: 00007ffdd6439058 [ 1174.303542][T20706] [ 1175.778350][T20708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3141'. [ 1175.857417][T20719] Invalid ELF header magic: != ELF [ 1176.432041][T20733] FAULT_INJECTION: forcing a failure. [ 1176.432041][T20733] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.495605][T20737] random: crng reseeded on system resumption [ 1176.651649][T20733] CPU: 0 UID: 0 PID: 20733 Comm: syz.2.3145 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1176.651689][T20733] Tainted: [U]=USER [ 1176.651698][T20733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1176.651712][T20733] Call Trace: [ 1176.651720][T20733] [ 1176.651730][T20733] dump_stack_lvl+0x16c/0x1f0 [ 1176.651760][T20733] should_fail_ex+0x512/0x640 [ 1176.651784][T20733] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1176.651826][T20733] should_failslab+0xc2/0x120 [ 1176.651855][T20733] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1176.651893][T20733] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 1176.651928][T20733] ? kasan_save_track+0x14/0x30 [ 1176.651955][T20733] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 1176.651999][T20733] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 1176.652029][T20733] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 1176.652062][T20733] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x345/0x510 [ 1176.652103][T20733] snd_mixer_oss_ioctl1+0xb94/0x1cf0 [ 1176.652128][T20733] ? lockdep_hardirqs_on+0x7c/0x110 [ 1176.652154][T20733] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 1176.652186][T20733] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 1176.652212][T20733] ? tomoyo_path_number_perm+0x295/0x580 [ 1176.652253][T20733] ? tomoyo_path_number_perm+0x18d/0x580 [ 1176.652292][T20733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1176.652326][T20733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1176.652367][T20733] ? do_vfs_ioctl+0x523/0x1a60 [ 1176.652401][T20733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1176.652440][T20733] snd_mixer_oss_ioctl_card+0x102/0x170 [ 1176.652468][T20733] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 1176.652505][T20733] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 1176.652539][T20733] ? find_held_lock+0x2b/0x80 [ 1176.652564][T20733] ? hook_file_ioctl_common+0x145/0x410 [ 1176.652598][T20733] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1176.652635][T20733] ? __fget_files+0x20e/0x3c0 [ 1176.652683][T20733] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1176.652730][T20733] __x64_sys_ioctl+0x18e/0x210 [ 1176.652777][T20733] do_syscall_64+0xcd/0x490 [ 1176.652802][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.652823][T20733] RIP: 0033:0x7fbc25d8e9a9 [ 1176.652840][T20733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1176.652862][T20733] RSP: 002b:00007fbc26c35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.652882][T20733] RAX: ffffffffffffffda RBX: 00007fbc25fb6240 RCX: 00007fbc25d8e9a9 [ 1176.652897][T20733] RDX: 0000200000000040 RSI: 00000000c0044dff RDI: 0000000000000008 [ 1176.652911][T20733] RBP: 00007fbc26c35090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.652924][T20733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1176.652938][T20733] R13: 0000000000000001 R14: 00007fbc25fb6240 R15: 00007ffd825b1248 [ 1176.652965][T20733] [ 1176.959602][T20742] netlink: 'syz.3.3150': attribute type 11 has an invalid length. [ 1176.967485][T20742] netlink: 'syz.3.3150': attribute type 11 has an invalid length. [ 1177.980522][T20750] FAULT_INJECTION: forcing a failure. [ 1177.980522][T20750] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.225214][T20750] CPU: 0 UID: 0 PID: 20750 Comm: syz.4.3149 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1178.225257][T20750] Tainted: [U]=USER [ 1178.225265][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1178.225280][T20750] Call Trace: [ 1178.225289][T20750] [ 1178.225298][T20750] dump_stack_lvl+0x16c/0x1f0 [ 1178.225327][T20750] should_fail_ex+0x512/0x640 [ 1178.225352][T20750] ? fs_reclaim_acquire+0xae/0x150 [ 1178.225389][T20750] should_failslab+0xc2/0x120 [ 1178.225418][T20750] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1178.225445][T20750] ? security_inode_alloc+0x3b/0x2b0 [ 1178.225483][T20750] security_inode_alloc+0x3b/0x2b0 [ 1178.225517][T20750] inode_init_always_gfp+0xce4/0x1030 [ 1178.225562][T20750] alloc_inode+0x86/0x240 [ 1178.225592][T20750] new_inode+0x22/0x1c0 [ 1178.225625][T20750] shmem_get_inode+0x19a/0xfb0 [ 1178.225664][T20750] shmem_mknod+0x1a8/0x450 [ 1178.225700][T20750] ? __pfx_shmem_create+0x10/0x10 [ 1178.225730][T20750] lookup_open.isra.0+0x11d0/0x1580 [ 1178.225774][T20750] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1178.225826][T20750] ? __pfx_down_write+0x10/0x10 [ 1178.225862][T20750] ? mnt_get_write_access+0x20c/0x300 [ 1178.225898][T20750] path_openat+0x893/0x2cb0 [ 1178.225931][T20750] ? __pfx_path_openat+0x10/0x10 [ 1178.225963][T20750] do_filp_open+0x20b/0x470 [ 1178.225987][T20750] ? __pfx_do_filp_open+0x10/0x10 [ 1178.226031][T20750] ? _raw_spin_unlock+0x28/0x50 [ 1178.226067][T20750] ? alloc_fd+0x471/0x7d0 [ 1178.226113][T20750] do_sys_openat2+0x11b/0x1d0 [ 1178.226146][T20750] ? __pfx_do_sys_openat2+0x10/0x10 [ 1178.226181][T20750] ? __fget_files+0x20e/0x3c0 [ 1178.226227][T20750] __x64_sys_open+0x153/0x1e0 [ 1178.226260][T20750] ? __pfx___x64_sys_open+0x10/0x10 [ 1178.226298][T20750] ? rcu_is_watching+0x12/0xc0 [ 1178.226328][T20750] do_syscall_64+0xcd/0x490 [ 1178.226355][T20750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.226379][T20750] RIP: 0033:0x7fe383b8e9a9 [ 1178.226399][T20750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.226423][T20750] RSP: 002b:00007fe384912038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1178.226446][T20750] RAX: ffffffffffffffda RBX: 00007fe383db6160 RCX: 00007fe383b8e9a9 [ 1178.226463][T20750] RDX: 00000000000000aa RSI: 0000000000000040 RDI: 0000200000000140 [ 1178.226479][T20750] RBP: 00007fe384912090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.226494][T20750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.226509][T20750] R13: 0000000000000000 R14: 00007fe383db6160 R15: 00007ffe7f4ac238 [ 1178.226540][T20750] [ 1179.354387][T16125] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1179.390283][T20766] FAULT_INJECTION: forcing a failure. [ 1179.390283][T20766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.412802][T16125] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1179.412802][T16125] [ 1179.431078][T20766] CPU: 0 UID: 0 PID: 20766 Comm: syz.0.3158 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1179.431120][T20766] Tainted: [U]=USER [ 1179.431129][T20766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1179.431145][T20766] Call Trace: [ 1179.431153][T20766] [ 1179.431163][T20766] dump_stack_lvl+0x16c/0x1f0 [ 1179.431193][T20766] should_fail_ex+0x512/0x640 [ 1179.431223][T20766] _copy_from_iter+0x463/0x16f0 [ 1179.431258][T20766] ? __pfx__copy_from_iter+0x10/0x10 [ 1179.431293][T20766] ? alloc_pages_noprof+0x23c/0x390 [ 1179.431327][T20766] copy_page_from_iter+0xde/0x180 [ 1179.431359][T20766] rds_message_copy_from_user+0x37a/0xd90 [ 1179.431403][T20766] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 1179.431434][T20766] ? lockdep_init_map_type+0x5c/0x280 [ 1179.431472][T20766] ? __asan_memset+0x23/0x50 [ 1179.431511][T20766] ? sg_init_table+0x20/0x60 [ 1179.431556][T20766] rds_sendmsg+0x206a/0x31f0 [ 1179.431604][T20766] ? __pfx_rds_sendmsg+0x10/0x10 [ 1179.431642][T20766] ? aa_sk_perm+0x2f4/0xb10 [ 1179.431685][T20766] ? __pfx_aa_sk_perm+0x10/0x10 [ 1179.431730][T20766] ? ____sys_sendmsg+0xa98/0xc70 [ 1179.431764][T20766] ____sys_sendmsg+0xa98/0xc70 [ 1179.431801][T20766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1179.431842][T20766] ? __pfx_futex_wake_mark+0x10/0x10 [ 1179.431884][T20766] ___sys_sendmsg+0x134/0x1d0 [ 1179.431912][T20766] ? __pfx____sys_sendmsg+0x10/0x10 [ 1179.431936][T20766] ? __lock_acquire+0x622/0x1c90 [ 1179.432005][T20766] __sys_sendmsg+0x16d/0x220 [ 1179.432032][T20766] ? __pfx___sys_sendmsg+0x10/0x10 [ 1179.432057][T20766] ? __x64_sys_futex+0x1e0/0x4c0 [ 1179.432106][T20766] do_syscall_64+0xcd/0x490 [ 1179.432134][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.432160][T20766] RIP: 0033:0x7f870578e9a9 [ 1179.432179][T20766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.432205][T20766] RSP: 002b:00007f8706573038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1179.432228][T20766] RAX: ffffffffffffffda RBX: 00007f87059b5fa0 RCX: 00007f870578e9a9 [ 1179.432244][T20766] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 1179.432260][T20766] RBP: 00007f8705810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1179.432276][T20766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.432290][T20766] R13: 0000000000000000 R14: 00007f87059b5fa0 R15: 00007ffdd6439058 [ 1179.432320][T20766] [ 1180.094381][T16125] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1180.130219][T16125] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1180.130219][T16125] [ 1181.163606][T20798] FAULT_INJECTION: forcing a failure. [ 1181.163606][T20798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.243226][T20798] CPU: 0 UID: 0 PID: 20798 Comm: syz.4.3168 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1181.243267][T20798] Tainted: [U]=USER [ 1181.243275][T20798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1181.243289][T20798] Call Trace: [ 1181.243296][T20798] [ 1181.243306][T20798] dump_stack_lvl+0x16c/0x1f0 [ 1181.243334][T20798] should_fail_ex+0x512/0x640 [ 1181.243363][T20798] _copy_to_user+0x32/0xd0 [ 1181.243392][T20798] simple_read_from_buffer+0xcb/0x170 [ 1181.243429][T20798] proc_fail_nth_read+0x197/0x270 [ 1181.243469][T20798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1181.243504][T20798] ? rw_verify_area+0xcf/0x680 [ 1181.243540][T20798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1181.243573][T20798] vfs_read+0x1e4/0xc60 [ 1181.243598][T20798] ? __pfx___mutex_lock+0x10/0x10 [ 1181.243623][T20798] ? __pfx_vfs_read+0x10/0x10 [ 1181.243652][T20798] ? __fget_files+0x20e/0x3c0 [ 1181.243698][T20798] ksys_read+0x12a/0x250 [ 1181.243719][T20798] ? __pfx_ksys_read+0x10/0x10 [ 1181.243749][T20798] do_syscall_64+0xcd/0x490 [ 1181.243776][T20798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.243800][T20798] RIP: 0033:0x7fe383b8d3bc [ 1181.243818][T20798] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1181.243842][T20798] RSP: 002b:00007fe384954030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1181.243864][T20798] RAX: ffffffffffffffda RBX: 00007fe383db5fa0 RCX: 00007fe383b8d3bc [ 1181.243880][T20798] RDX: 000000000000000f RSI: 00007fe3849540a0 RDI: 0000000000000004 [ 1181.243895][T20798] RBP: 00007fe384954090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.243910][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.243923][T20798] R13: 0000000000000000 R14: 00007fe383db5fa0 R15: 00007ffe7f4ac238 [ 1181.243952][T20798] [ 1183.674715][T20834] FAULT_INJECTION: forcing a failure. [ 1183.674715][T20834] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.764514][T20834] CPU: 0 UID: 0 PID: 20834 Comm: syz.3.3177 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1183.764552][T20834] Tainted: [U]=USER [ 1183.764559][T20834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1183.764590][T20834] Call Trace: [ 1183.764598][T20834] [ 1183.764607][T20834] dump_stack_lvl+0x16c/0x1f0 [ 1183.764636][T20834] should_fail_ex+0x512/0x640 [ 1183.764659][T20834] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1183.764688][T20834] should_failslab+0xc2/0x120 [ 1183.764715][T20834] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1183.764740][T20834] ? __alloc_skb+0x2b2/0x380 [ 1183.764767][T20834] __alloc_skb+0x2b2/0x380 [ 1183.764789][T20834] ? __pfx___alloc_skb+0x10/0x10 [ 1183.764816][T20834] ? __lock_acquire+0xb8a/0x1c90 [ 1183.764853][T20834] netlink_alloc_large_skb+0x69/0x130 [ 1183.764885][T20834] netlink_sendmsg+0x6a1/0xdd0 [ 1183.764919][T20834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.764959][T20834] ____sys_sendmsg+0xa98/0xc70 [ 1183.764993][T20834] ? copy_msghdr_from_user+0x10a/0x160 [ 1183.765018][T20834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1183.765064][T20834] ___sys_sendmsg+0x134/0x1d0 [ 1183.765090][T20834] ? __pfx____sys_sendmsg+0x10/0x10 [ 1183.765113][T20834] ? __lock_acquire+0x622/0x1c90 [ 1183.765205][T20834] __sys_sendmsg+0x16d/0x220 [ 1183.765231][T20834] ? __pfx___sys_sendmsg+0x10/0x10 [ 1183.765274][T20834] do_syscall_64+0xcd/0x490 [ 1183.765301][T20834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.765326][T20834] RIP: 0033:0x7fbbc1d8e9a9 [ 1183.765344][T20834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.765367][T20834] RSP: 002b:00007fbbc2c9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.765389][T20834] RAX: ffffffffffffffda RBX: 00007fbbc1fb5fa0 RCX: 00007fbbc1d8e9a9 [ 1183.765406][T20834] RDX: 0000000000000040 RSI: 0000200000000cc0 RDI: 0000000000000007 [ 1183.765420][T20834] RBP: 00007fbbc2c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.765435][T20834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.765450][T20834] R13: 0000000000000000 R14: 00007fbbc1fb5fa0 R15: 00007ffd9518b858 [ 1183.765479][T20834] [ 1184.659371][T20848] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1184.749401][T20848] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1184.749401][T20848] [ 1185.943098][T20864] FAULT_INJECTION: forcing a failure. [ 1185.943098][T20864] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1186.010611][T20864] CPU: 0 UID: 14 PID: 20864 Comm: syz.0.3183 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1186.010654][T20864] Tainted: [U]=USER [ 1186.010662][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1186.010677][T20864] Call Trace: [ 1186.010686][T20864] [ 1186.010695][T20864] dump_stack_lvl+0x16c/0x1f0 [ 1186.010724][T20864] should_fail_ex+0x512/0x640 [ 1186.010753][T20864] get_futex_key+0x1d0/0x1540 [ 1186.010786][T20864] ? __pfx_get_futex_key+0x10/0x10 [ 1186.010815][T20864] ? __lock_acquire+0x622/0x1c90 [ 1186.010855][T20864] futex_wake+0xe7/0x4e0 [ 1186.010900][T20864] ? __pfx_futex_wake+0x10/0x10 [ 1186.010947][T20864] do_futex+0x1e3/0x350 [ 1186.010977][T20864] ? __pfx_do_futex+0x10/0x10 [ 1186.011017][T20864] __x64_sys_futex+0x1e0/0x4c0 [ 1186.011051][T20864] ? __pfx___x64_sys_futex+0x10/0x10 [ 1186.011091][T20864] do_syscall_64+0xcd/0x490 [ 1186.011119][T20864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.011143][T20864] RIP: 0033:0x7f870578e9a9 [ 1186.011162][T20864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1186.011185][T20864] RSP: 002b:00007f87065520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1186.011208][T20864] RAX: ffffffffffffffda RBX: 00007f87059b6088 RCX: 00007f870578e9a9 [ 1186.011224][T20864] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87059b608c [ 1186.011239][T20864] RBP: 00007f87059b6080 R08: 00007f8706574000 R09: 0000000000000000 [ 1186.011254][T20864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f87059b608c [ 1186.011269][T20864] R13: 0000000000000000 R14: 00007ffdd6438f70 R15: 00007ffdd6439058 [ 1186.011299][T20864] [ 1187.578973][T20880] FAULT_INJECTION: forcing a failure. [ 1187.578973][T20880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1187.646759][T20880] CPU: 0 UID: 0 PID: 20880 Comm: syz.0.3187 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1187.646812][T20880] Tainted: [U]=USER [ 1187.646821][T20880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1187.646836][T20880] Call Trace: [ 1187.646845][T20880] [ 1187.646854][T20880] dump_stack_lvl+0x16c/0x1f0 [ 1187.646884][T20880] should_fail_ex+0x512/0x640 [ 1187.646913][T20880] get_futex_key+0x1d0/0x1540 [ 1187.646946][T20880] ? __pfx_get_futex_key+0x10/0x10 [ 1187.646985][T20880] futex_wake+0xe7/0x4e0 [ 1187.647022][T20880] ? __pfx_futex_wake+0x10/0x10 [ 1187.647060][T20880] ? kmem_cache_free+0x2d1/0x4d0 [ 1187.647082][T20880] ? fd_install+0x225/0x750 [ 1187.647119][T20880] ? putname+0x154/0x1a0 [ 1187.647151][T20880] do_futex+0x1e3/0x350 [ 1187.647181][T20880] ? __pfx_do_futex+0x10/0x10 [ 1187.647218][T20880] __x64_sys_futex+0x1e0/0x4c0 [ 1187.647251][T20880] ? __x64_sys_openat+0x174/0x210 [ 1187.647284][T20880] ? __pfx___x64_sys_futex+0x10/0x10 [ 1187.647325][T20880] do_syscall_64+0xcd/0x490 [ 1187.647353][T20880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.647377][T20880] RIP: 0033:0x7f870578e9a9 [ 1187.647396][T20880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.647420][T20880] RSP: 002b:00007f87065730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1187.647443][T20880] RAX: ffffffffffffffda RBX: 00007f87059b5fa8 RCX: 00007f870578e9a9 [ 1187.647459][T20880] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87059b5fac [ 1187.647475][T20880] RBP: 00007f87059b5fa0 R08: 00007f8706574000 R09: 0000000000000000 [ 1187.647490][T20880] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f87059b5fac [ 1187.647505][T20880] R13: 0000000000000000 R14: 00007ffdd6438f70 R15: 00007ffdd6439058 [ 1187.647535][T20880] [ 1187.848785][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.856838][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.115396][T20884] FAULT_INJECTION: forcing a failure. [ 1188.115396][T20884] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.750631][T20886] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.0.3188: Error -117 reading block bitmap for 4 [ 1188.781954][T20884] CPU: 0 UID: 0 PID: 20884 Comm: syz.2.3186 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1188.781994][T20884] Tainted: [U]=USER [ 1188.782002][T20884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1188.782017][T20884] Call Trace: [ 1188.782025][T20884] [ 1188.782034][T20884] dump_stack_lvl+0x16c/0x1f0 [ 1188.782063][T20884] should_fail_ex+0x512/0x640 [ 1188.782086][T20884] ? __kvmalloc_node_noprof+0x124/0x620 [ 1188.782126][T20884] should_failslab+0xc2/0x120 [ 1188.782152][T20884] __kvmalloc_node_noprof+0x137/0x620 [ 1188.782187][T20884] ? lockdep_init_map_type+0x5c/0x280 [ 1188.782220][T20884] ? open_substream+0x30c/0x9b0 [ 1188.782256][T20884] ? open_substream+0x30c/0x9b0 [ 1188.782283][T20884] ? open_substream+0x19a/0x9b0 [ 1188.782310][T20884] open_substream+0x30c/0x9b0 [ 1188.782338][T20884] ? lockdep_hardirqs_on+0x7c/0x110 [ 1188.782363][T20884] rawmidi_open_priv+0x543/0x6e0 [ 1188.782400][T20884] snd_rawmidi_open+0x4cc/0xbf0 [ 1188.782439][T20884] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1188.782474][T20884] ? __pfx_default_wake_function+0x10/0x10 [ 1188.782501][T20884] ? kobject_get_unless_zero+0x156/0x1e0 [ 1188.782530][T20884] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1188.782563][T20884] snd_open+0x201/0x450 [ 1188.782598][T20884] ? __pfx_snd_open+0x10/0x10 [ 1188.782624][T20884] chrdev_open+0x231/0x6a0 [ 1188.782649][T20884] ? __pfx_apparmor_file_open+0x10/0x10 [ 1188.782687][T20884] ? __pfx_chrdev_open+0x10/0x10 [ 1188.782715][T20884] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1188.782759][T20884] do_dentry_open+0x744/0x1c10 [ 1188.782795][T20884] ? __pfx_chrdev_open+0x10/0x10 [ 1188.782824][T20884] vfs_open+0x82/0x3f0 [ 1188.782855][T20884] path_openat+0x1de4/0x2cb0 [ 1188.782886][T20884] ? __pfx_path_openat+0x10/0x10 [ 1188.782909][T20884] ? __lock_acquire+0xb8a/0x1c90 [ 1188.782942][T20884] do_filp_open+0x20b/0x470 [ 1188.782964][T20884] ? __pfx_do_filp_open+0x10/0x10 [ 1188.783008][T20884] ? alloc_fd+0x471/0x7d0 [ 1188.783050][T20884] do_sys_openat2+0x11b/0x1d0 [ 1188.783079][T20884] ? __pfx_do_sys_openat2+0x10/0x10 [ 1188.783112][T20884] ? __fget_files+0x20e/0x3c0 [ 1188.783152][T20884] __x64_sys_openat+0x174/0x210 [ 1188.783183][T20884] ? __pfx___x64_sys_openat+0x10/0x10 [ 1188.783212][T20884] ? ksys_write+0x1ac/0x250 [ 1188.783242][T20884] do_syscall_64+0xcd/0x490 [ 1188.783267][T20884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.783290][T20884] RIP: 0033:0x7fbc25d8e9a9 [ 1188.783307][T20884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.783328][T20884] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1188.783349][T20884] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1188.783364][T20884] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1188.783378][T20884] RBP: 00007fbc26c98090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.783391][T20884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.783405][T20884] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1188.783432][T20884] [ 1192.349482][T20913] FAULT_INJECTION: forcing a failure. [ 1192.349482][T20913] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.367991][T20919] FAULT_INJECTION: forcing a failure. [ 1192.367991][T20919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.453840][T20919] CPU: 0 UID: 0 PID: 20919 Comm: syz.0.3196 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1192.453888][T20919] Tainted: [U]=USER [ 1192.453898][T20919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1192.453914][T20919] Call Trace: [ 1192.453924][T20919] [ 1192.453935][T20919] dump_stack_lvl+0x16c/0x1f0 [ 1192.453969][T20919] should_fail_ex+0x512/0x640 [ 1192.454004][T20919] _copy_to_user+0x32/0xd0 [ 1192.454039][T20919] cpuid_read+0x1d7/0x360 [ 1192.454079][T20919] ? __pfx_cpuid_read+0x10/0x10 [ 1192.454111][T20919] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 1192.454153][T20919] ? apparmor_file_permission+0x251/0x400 [ 1192.454189][T20919] ? bpf_lsm_file_permission+0x9/0x10 [ 1192.454228][T20919] ? security_file_permission+0x71/0x210 [ 1192.454269][T20919] ? rw_verify_area+0xcf/0x680 [ 1192.454305][T20919] ? __pfx_cpuid_read+0x10/0x10 [ 1192.454331][T20919] vfs_readv+0x5c1/0x8b0 [ 1192.454374][T20919] ? __pfx_vfs_readv+0x10/0x10 [ 1192.454432][T20919] ? __fget_files+0x20e/0x3c0 [ 1192.454468][T20919] ? __fget_files+0x1b0/0x3c0 [ 1192.454510][T20919] ? do_readv+0x132/0x340 [ 1192.454542][T20919] do_readv+0x132/0x340 [ 1192.454576][T20919] ? __pfx_do_readv+0x10/0x10 [ 1192.454619][T20919] do_syscall_64+0xcd/0x490 [ 1192.454645][T20919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.454669][T20919] RIP: 0033:0x7f870578e9a9 [ 1192.454687][T20919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.454711][T20919] RSP: 002b:00007f8706552038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1192.454733][T20919] RAX: ffffffffffffffda RBX: 00007f87059b6080 RCX: 00007f870578e9a9 [ 1192.454750][T20919] RDX: 0000000000000003 RSI: 0000200000000680 RDI: 0000000000000004 [ 1192.454764][T20919] RBP: 00007f8706552090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.454780][T20919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1192.454794][T20919] R13: 0000000000000001 R14: 00007f87059b6080 R15: 00007ffdd6439058 [ 1192.454824][T20919] [ 1192.939288][T20913] CPU: 0 UID: 0 PID: 20913 Comm: syz.2.3192 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1192.939329][T20913] Tainted: [U]=USER [ 1192.939337][T20913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1192.939352][T20913] Call Trace: [ 1192.939360][T20913] [ 1192.939370][T20913] dump_stack_lvl+0x16c/0x1f0 [ 1192.939399][T20913] should_fail_ex+0x512/0x640 [ 1192.939423][T20913] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1192.939455][T20913] should_failslab+0xc2/0x120 [ 1192.939483][T20913] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1192.939511][T20913] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1192.939541][T20913] ? key_alloc+0x43e/0x1330 [ 1192.939581][T20913] ? mark_held_locks+0x49/0x80 [ 1192.939616][T20913] kmemdup_noprof+0x29/0x60 [ 1192.939641][T20913] key_alloc+0x43e/0x1330 [ 1192.939687][T20913] ? __pfx_key_alloc+0x10/0x10 [ 1192.939723][T20913] ? __pfx_key_default_cmp+0x10/0x10 [ 1192.939747][T20913] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1192.939775][T20913] keyring_alloc+0x44/0xc0 [ 1192.939801][T20913] look_up_user_keyrings+0x510/0x760 [ 1192.939839][T20913] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 1192.939883][T20913] lookup_user_key+0x1a3/0x1300 [ 1192.939920][T20913] ? __pfx_lookup_user_key+0x10/0x10 [ 1192.939956][T20913] ? __pfx_do_futex+0x10/0x10 [ 1192.939989][T20913] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1192.940037][T20913] keyctl_keyring_move+0x48/0x150 [ 1192.940068][T20913] __do_sys_keyctl+0x171/0x590 [ 1192.940101][T20913] do_syscall_64+0xcd/0x490 [ 1192.940134][T20913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.940158][T20913] RIP: 0033:0x7fbc25d8e9a9 [ 1192.940177][T20913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.940200][T20913] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1192.940222][T20913] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1192.940238][T20913] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 000000000000001e [ 1192.940272][T20913] RBP: 00007fbc25e10d69 R08: 0000000000000001 R09: 0000000000000000 [ 1192.940287][T20913] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 1192.940303][T20913] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1192.940333][T20913] [ 1193.849714][T20927] nvme_fcloop: unknown parameter or missing value 'ELF' [ 1196.636422][T20954] Setting dangerous option i915.mitigations - tainting kernel [ 1196.738921][T20954] Bad "i915.mitigations=!hóì@ÛSÌf", 'hóì@ÛSÌf' is unknown [ 1198.944218][T20973] FAULT_INJECTION: forcing a failure. [ 1198.944218][T20973] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.062340][T20973] CPU: 0 UID: 0 PID: 20973 Comm: syz.2.3208 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1199.062382][T20973] Tainted: [U]=USER [ 1199.062390][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1199.062405][T20973] Call Trace: [ 1199.062413][T20973] [ 1199.062423][T20973] dump_stack_lvl+0x16c/0x1f0 [ 1199.062451][T20973] should_fail_ex+0x512/0x640 [ 1199.062482][T20973] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1199.062510][T20973] should_failslab+0xc2/0x120 [ 1199.062539][T20973] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1199.062561][T20973] ? rcu_is_watching+0x12/0xc0 [ 1199.062587][T20973] ? get_random_u64+0x57c/0x7d0 [ 1199.062621][T20973] ? prepare_creds+0x2c/0x7d0 [ 1199.062661][T20973] prepare_creds+0x2c/0x7d0 [ 1199.062711][T20973] copy_creds+0xa7/0xa50 [ 1199.062747][T20973] copy_process+0xff6/0x7650 [ 1199.062788][T20973] ? __pfx_copy_process+0x10/0x10 [ 1199.062824][T20973] ? _copy_from_user+0x59/0xd0 [ 1199.062852][T20973] kernel_clone+0xfc/0x960 [ 1199.062879][T20973] ? get_pid_task+0xfc/0x250 [ 1199.062910][T20973] ? __pfx_kernel_clone+0x10/0x10 [ 1199.062954][T20973] __do_sys_clone3+0x212/0x290 [ 1199.062983][T20973] ? __pfx___do_sys_clone3+0x10/0x10 [ 1199.063026][T20973] ? __fget_files+0x20e/0x3c0 [ 1199.063081][T20973] do_syscall_64+0xcd/0x490 [ 1199.063106][T20973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.063129][T20973] RIP: 0033:0x7fbc25d8e9a9 [ 1199.063146][T20973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.063170][T20973] RSP: 002b:00007fbc26c97f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1199.063192][T20973] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbc25d8e9a9 [ 1199.063208][T20973] RDX: 00007fbc26c97f20 RSI: 0000000000000058 RDI: 00007fbc26c97f20 [ 1199.063223][T20973] RBP: 00007fbc26c98090 R08: 0000000000000000 R09: 0000000000000058 [ 1199.063238][T20973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.063253][T20973] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1199.063281][T20973] [ 1199.888040][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 1202.209471][T20999] Setting dangerous option i915.mitigations - tainting kernel [ 1202.321571][T20998] netlink: 'syz.0.3216': attribute type 33 has an invalid length. [ 1202.332266][T20999] Bad "i915.mitigations=!hóì@ÛSÌf", 'hóì@ÛSÌf' is unknown [ 1202.384613][T20998] netlink: 322 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1203.272512][T21007] Setting dangerous option i915.mitigations - tainting kernel [ 1203.395819][T21007] Bad "i915.mitigations=!hóì@ÛSÌf", 'hóì@ÛSÌf' is unknown [ 1204.890110][T21016] random: crng reseeded on system resumption [ 1205.810689][T21014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.927738][T21014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.413177][T21066] FAULT_INJECTION: forcing a failure. [ 1209.413177][T21066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1209.570061][T21066] CPU: 0 UID: 0 PID: 21066 Comm: syz.2.3231 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1209.570100][T21066] Tainted: [U]=USER [ 1209.570108][T21066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1209.570122][T21066] Call Trace: [ 1209.570129][T21066] [ 1209.570138][T21066] dump_stack_lvl+0x16c/0x1f0 [ 1209.570168][T21066] should_fail_ex+0x512/0x640 [ 1209.570196][T21066] should_fail_alloc_page+0xe7/0x130 [ 1209.570226][T21066] prepare_alloc_pages+0x3c2/0x610 [ 1209.570283][T21066] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1209.570312][T21066] ? __lock_acquire+0x622/0x1c90 [ 1209.570355][T21066] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1209.570398][T21066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1209.570437][T21066] ? policy_nodemask+0xea/0x4e0 [ 1209.570466][T21066] alloc_pages_mpol+0x1fb/0x550 [ 1209.570495][T21066] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1209.570531][T21066] alloc_pages_noprof+0x131/0x390 [ 1209.570559][T21066] __pmd_alloc+0x3b/0x930 [ 1209.570589][T21066] ? find_held_lock+0x2b/0x80 [ 1209.570616][T21066] __handle_mm_fault+0xaac/0x5490 [ 1209.570660][T21066] ? __pfx___handle_mm_fault+0x10/0x10 [ 1209.570695][T21066] ? __pfx_mt_find+0x10/0x10 [ 1209.570738][T21066] ? find_vma+0xbf/0x140 [ 1209.570766][T21066] ? __pfx_find_vma+0x10/0x10 [ 1209.570799][T21066] handle_mm_fault+0x589/0xd10 [ 1209.570836][T21066] ? __pkru_allows_pkey+0x51/0xb0 [ 1209.570871][T21066] do_user_addr_fault+0x7a6/0x1370 [ 1209.570909][T21066] ? rcu_is_watching+0x12/0xc0 [ 1209.570937][T21066] exc_page_fault+0x5c/0xb0 [ 1209.570978][T21066] asm_exc_page_fault+0x26/0x30 [ 1209.571001][T21066] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1209.571037][T21066] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1209.571061][T21066] RSP: 0018:ffffc9000480f7d0 EFLAGS: 00050206 [ 1209.571084][T21066] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 1209.571100][T21066] RDX: ffffed100683ca21 RSI: 0000000000000000 RDI: ffff8880341e5040 [ 1209.571116][T21066] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100683ca20 [ 1209.571131][T21066] R10: ffff8880341e5103 R11: 0000000000000000 R12: ffffc9000480fd60 [ 1209.571147][T21066] R13: 00000000000000c4 R14: ffff8880341e5040 R15: 00007ffffffff000 [ 1209.571178][T21066] _copy_from_iter+0x383/0x16f0 [ 1209.571210][T21066] ? __alloc_skb+0x200/0x380 [ 1209.571235][T21066] ? __pfx__copy_from_iter+0x10/0x10 [ 1209.571269][T21066] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1209.571309][T21066] netlink_sendmsg+0x829/0xdd0 [ 1209.571345][T21066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.571387][T21066] ____sys_sendmsg+0xa98/0xc70 [ 1209.571423][T21066] ? copy_msghdr_from_user+0x10a/0x160 [ 1209.571449][T21066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.571488][T21066] ? __pfx__kstrtoull+0x10/0x10 [ 1209.571529][T21066] ___sys_sendmsg+0x134/0x1d0 [ 1209.571557][T21066] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.571597][T21066] ? find_held_lock+0x2b/0x80 [ 1209.571640][T21066] __sys_sendmmsg+0x200/0x420 [ 1209.571670][T21066] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1209.571707][T21066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1209.571746][T21066] ? fput+0x70/0xf0 [ 1209.571774][T21066] ? ksys_write+0x1ac/0x250 [ 1209.571796][T21066] ? __pfx_ksys_write+0x10/0x10 [ 1209.571824][T21066] __x64_sys_sendmmsg+0x9c/0x100 [ 1209.571850][T21066] ? lockdep_hardirqs_on+0x7c/0x110 [ 1209.571873][T21066] do_syscall_64+0xcd/0x490 [ 1209.571900][T21066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.571924][T21066] RIP: 0033:0x7fbc25d8e9a9 [ 1209.571943][T21066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.571966][T21066] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1209.571987][T21066] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1209.572004][T21066] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1209.572019][T21066] RBP: 00007fbc26c98090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.572034][T21066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.572049][T21066] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1209.572079][T21066] [ 1213.780445][T21100] random: crng reseeded on system resumption [ 1214.102537][T21103] FAULT_INJECTION: forcing a failure. [ 1214.102537][T21103] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.167455][T21103] CPU: 0 UID: 0 PID: 21103 Comm: syz.3.3241 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1214.167497][T21103] Tainted: [U]=USER [ 1214.167506][T21103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1214.167521][T21103] Call Trace: [ 1214.167529][T21103] [ 1214.167539][T21103] dump_stack_lvl+0x16c/0x1f0 [ 1214.167569][T21103] should_fail_ex+0x512/0x640 [ 1214.167594][T21103] ? __kmalloc_noprof+0xbf/0x510 [ 1214.167620][T21103] ? kstrdup_quotable+0xc2/0x190 [ 1214.167651][T21103] should_failslab+0xc2/0x120 [ 1214.167680][T21103] __kmalloc_noprof+0xd2/0x510 [ 1214.167710][T21103] kstrdup_quotable+0xc2/0x190 [ 1214.167742][T21103] ? __pfx_kstrdup_quotable+0x10/0x10 [ 1214.167775][T21103] ? get_cmdline+0x86/0x380 [ 1214.167809][T21103] kstrdup_quotable_cmdline+0x127/0x210 [ 1214.167865][T21103] __report_access+0x77/0x3c0 [ 1214.167900][T21103] ? _raw_spin_unlock_irq+0x23/0x50 [ 1214.167940][T21103] task_work_run+0x150/0x240 [ 1214.167981][T21103] ? __pfx_task_work_run+0x10/0x10 [ 1214.168027][T21103] exit_to_user_mode_loop+0xeb/0x110 [ 1214.168069][T21103] do_syscall_64+0x3f6/0x490 [ 1214.168095][T21103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.168120][T21103] RIP: 0033:0x7fbbc1d8e9a9 [ 1214.168139][T21103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1214.168163][T21103] RSP: 002b:00007fbbc2c9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1214.168186][T21103] RAX: ffffffffffffffff RBX: 00007fbbc1fb5fa0 RCX: 00007fbbc1d8e9a9 [ 1214.168203][T21103] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 1214.168217][T21103] RBP: 00007fbbc1e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1214.168233][T21103] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 1214.168248][T21103] R13: 0000000000000000 R14: 00007fbbc1fb5fa0 R15: 00007ffd9518b858 [ 1214.168277][T21103] [ 1214.168299][T21103] ptrace attach of "./syz-executor exec"[17731] was attempted by "(null)"[21103] [ 1214.701296][T21110] Setting dangerous option i915.mitigations - tainting kernel [ 1214.722874][T21110] Bad "i915.mitigations=!hóì@ÛSÌf", 'hóì@ÛSÌf' is unknown [ 1215.172965][T21111] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1215.316649][T21111] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1215.413571][T21111] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1215.655638][T21117] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 1215.903724][T21120] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 1216.400711][T21127] Setting dangerous option i915.mitigations - tainting kernel [ 1216.509471][T21127] Bad "i915.mitigations=!hóì@ÛSÌf", 'hóì@ÛSÌf' is unknown [ 1216.524975][T16117] team0: left allmulticast mode [ 1216.550862][T16117] team_slave_1: left allmulticast mode [ 1216.556658][T16117] team0: left promiscuous mode [ 1216.603459][T16117] team_slave_0: left promiscuous mode [ 1216.636280][T16117] team_slave_1: left promiscuous mode [ 1216.656603][T16117] bridge0: port 3(team0) entered disabled state [ 1216.714500][T16117] bridge_slave_1: left allmulticast mode [ 1216.744006][T16117] bridge_slave_1: left promiscuous mode [ 1216.771799][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.833703][T16117] bridge_slave_0: left allmulticast mode [ 1216.858287][T16117] bridge_slave_0: left promiscuous mode [ 1216.901768][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.308126][T21139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1217.318218][T21139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1217.326146][T21139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1217.335175][T21139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1217.343519][T21139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1218.534695][T16117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.586141][T16117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.628823][T16117] bond0 (unregistering): Released all slaves [ 1218.847246][T16117] ovs_: left promiscuous mode [ 1219.000862][T16117] tipc: Left network mode [ 1219.422339][T21139] Bluetooth: hci3: command tx timeout [ 1220.084823][T21137] chnl_net:caif_netlink_parms(): no params data found [ 1220.867270][T21171] mkiss: ax0: crc mode is auto. [ 1221.466812][T21137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.495886][T21137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.509346][T21139] Bluetooth: hci3: command tx timeout [ 1221.534137][T21137] bridge_slave_0: entered allmulticast mode [ 1221.578016][T21137] bridge_slave_0: entered promiscuous mode [ 1221.616896][T21137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.681211][T21137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.704664][T21137] bridge_slave_1: entered allmulticast mode [ 1221.736832][T21137] bridge_slave_1: entered promiscuous mode [ 1221.994249][T21137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.096729][T21186] ubi0: attaching mtd0 [ 1222.106152][T21137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.118821][T21186] ubi0: scanning is finished [ 1222.127744][T21186] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1222.228294][T21137] team0: Port device team_slave_0 added [ 1222.262616][T21137] team0: Port device team_slave_1 added [ 1222.404768][T21186] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1222.500413][T21137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.733114][T21137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.082706][T21137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.247885][T21137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.279807][T21137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.580327][T21139] Bluetooth: hci3: command tx timeout [ 1223.970375][T21137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.064873][T21200] Setting dangerous option i915.mitigations - tainting kernel [ 1224.134145][T21200] Bad "i915.mitigations=!hóì@ÛSÌf", 'hóì@ÛSÌf' is unknown [ 1224.447591][T21137] hsr_slave_0: entered promiscuous mode [ 1224.492376][T21137] hsr_slave_1: entered promiscuous mode [ 1224.595979][T16117] hsr_slave_0: left promiscuous mode [ 1224.678245][T16117] hsr_slave_1: left promiscuous mode [ 1224.695234][T16117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.731670][T16117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.785134][T16117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.832647][T16117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.917695][T16117] veth1_macvtap: left promiscuous mode [ 1224.946016][T16117] veth1_vlan: left promiscuous mode [ 1224.968176][T16117] veth0_vlan: left promiscuous mode [ 1225.659511][T21139] Bluetooth: hci3: command tx timeout [ 1226.043475][T16117] team0 (unregistering): Port device team_slave_1 removed [ 1226.093428][T16117] team0 (unregistering): Port device team_slave_0 removed [ 1226.587277][T21214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1226.609657][T21214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1226.639585][T21214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1226.678048][T21214] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1226.735444][T21214] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1227.546708][T21137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1227.642970][T21137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1227.685538][T21137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1227.738362][T21137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1227.777252][T21243] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1228.490856][T21137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.514882][T21261] bridge0: port 3(team0) entered blocking state [ 1228.522598][T21261] bridge0: port 3(team0) entered disabled state [ 1228.535090][T21261] team0: entered allmulticast mode [ 1228.568779][T21261] team_slave_0: entered allmulticast mode [ 1228.598326][T21261] team_slave_1: entered allmulticast mode [ 1228.615907][T21261] team0: entered promiscuous mode [ 1228.625042][T21139] Bluetooth: hci3: command 0x0c1a tx timeout [ 1228.631796][T16128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1228.646572][T21261] team_slave_0: entered promiscuous mode [ 1228.671353][T21261] team_slave_1: entered promiscuous mode [ 1228.949074][T21261] bridge0: port 3(team0) entered blocking state [ 1228.955524][T21261] bridge0: port 3(team0) entered forwarding state [ 1229.135975][T21137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.165965][T21258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1229.187906][T21258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1229.209044][T21258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1229.354284][T16125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.361495][T16125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.398595][T16125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.405819][T16125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.546102][T21137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1229.877590][T21280] FAULT_INJECTION: forcing a failure. [ 1229.877590][T21280] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.955338][T21280] CPU: 0 UID: 0 PID: 21280 Comm: syz.3.3277 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1229.955378][T21280] Tainted: [U]=USER [ 1229.955386][T21280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1229.955400][T21280] Call Trace: [ 1229.955408][T21280] [ 1229.955417][T21280] dump_stack_lvl+0x16c/0x1f0 [ 1229.955446][T21280] should_fail_ex+0x512/0x640 [ 1229.955469][T21280] ? __kmalloc_noprof+0xbf/0x510 [ 1229.955495][T21280] ? ethnl_default_doit+0x1c2/0xed0 [ 1229.955521][T21280] should_failslab+0xc2/0x120 [ 1229.955549][T21280] __kmalloc_noprof+0xd2/0x510 [ 1229.955578][T21280] ethnl_default_doit+0x1c2/0xed0 [ 1229.955604][T21280] ? __nla_parse+0x40/0x60 [ 1229.955634][T21280] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1229.955661][T21280] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1229.955697][T21280] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1229.955739][T21280] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1229.955775][T21280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1229.955810][T21280] ? genl_get_cmd+0x194/0x580 [ 1229.955849][T21280] ? __radix_tree_lookup+0x21f/0x2c0 [ 1229.955891][T21280] genl_rcv_msg+0x55c/0x800 [ 1229.955927][T21280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1229.955961][T21280] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1229.955998][T21280] netlink_rcv_skb+0x158/0x420 [ 1229.956032][T21280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1229.956067][T21280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1229.956108][T21280] ? netlink_deliver_tap+0x1ae/0xd30 [ 1229.956141][T21280] genl_rcv+0x28/0x40 [ 1229.956169][T21280] netlink_unicast+0x58a/0x850 [ 1229.956203][T21280] ? __pfx_netlink_unicast+0x10/0x10 [ 1229.956240][T21280] netlink_sendmsg+0x8d1/0xdd0 [ 1229.956274][T21280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1229.956314][T21280] ____sys_sendmsg+0xa98/0xc70 [ 1229.956353][T21280] ? copy_msghdr_from_user+0x10a/0x160 [ 1229.956378][T21280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1229.956424][T21280] ___sys_sendmsg+0x134/0x1d0 [ 1229.956450][T21280] ? __pfx____sys_sendmsg+0x10/0x10 [ 1229.956473][T21280] ? __lock_acquire+0x622/0x1c90 [ 1229.956540][T21280] __sys_sendmsg+0x16d/0x220 [ 1229.956566][T21280] ? __pfx___sys_sendmsg+0x10/0x10 [ 1229.956609][T21280] do_syscall_64+0xcd/0x490 [ 1229.956656][T21280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.956679][T21280] RIP: 0033:0x7fbbc1d8e9a9 [ 1229.956698][T21280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1229.956723][T21280] RSP: 002b:00007fbbc2c9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1229.956746][T21280] RAX: ffffffffffffffda RBX: 00007fbbc1fb5fa0 RCX: 00007fbbc1d8e9a9 [ 1229.956763][T21280] RDX: 00000000000040d8 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1229.956779][T21280] RBP: 00007fbbc2c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.956794][T21280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.956809][T21280] R13: 0000000000000000 R14: 00007fbbc1fb5fa0 R15: 00007ffd9518b858 [ 1229.956839][T21280] [ 1230.703812][T21139] Bluetooth: hci1: command 0x0c1a tx timeout [ 1230.954526][T21137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.260066][T21139] Bluetooth: hci3: command 0x0c1a tx timeout [ 1231.266133][T21139] Bluetooth: hci2: command 0x0c1a tx timeout [ 1232.068380][T21137] veth0_vlan: entered promiscuous mode [ 1232.130701][T21137] veth1_vlan: entered promiscuous mode [ 1232.260772][T21137] veth0_macvtap: entered promiscuous mode [ 1232.318887][T21137] veth1_macvtap: entered promiscuous mode [ 1232.417089][T21137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.480637][T21137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.530414][T21137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.570358][T21137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.609409][T21137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.657991][T21137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.948245][T16125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.965501][T16125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.091889][T16301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.124764][T16301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.340340][T16128] Bluetooth: hci3: command 0x0c1a tx timeout [ 1237.818938][T21392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input393 [ 1238.735931][T21394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input394 [ 1239.657499][T21408] binder: 21407:21408 ioctl c018620c 0 returned -1 [ 1239.708112][T21408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3301'. [ 1240.591832][T21419] Setting dangerous option i915.mitigations - tainting kernel [ 1240.694700][T21419] Bad "i915.mitigations=!hóì@ÛSÌf", 'hóì@ÛSÌf' is unknown [ 1246.880791][T21475] FAULT_INJECTION: forcing a failure. [ 1246.880791][T21475] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1246.940013][T21475] CPU: 0 UID: 0 PID: 21475 Comm: syz.3.3318 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1246.940052][T21475] Tainted: [U]=USER [ 1246.940059][T21475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1246.940078][T21475] Call Trace: [ 1246.940085][T21475] [ 1246.940095][T21475] dump_stack_lvl+0x16c/0x1f0 [ 1246.940132][T21475] should_fail_ex+0x512/0x640 [ 1246.940160][T21475] get_futex_key+0x293/0x1540 [ 1246.940192][T21475] ? __pfx_get_futex_key+0x10/0x10 [ 1246.940220][T21475] ? __mutex_trylock_common+0xe9/0x250 [ 1246.940261][T21475] futex_wake+0xe7/0x4e0 [ 1246.940297][T21475] ? __pfx_futex_wake+0x10/0x10 [ 1246.940335][T21475] ? __lock_acquire+0xb8a/0x1c90 [ 1246.940380][T21475] do_futex+0x1e3/0x350 [ 1246.940409][T21475] ? __pfx_do_futex+0x10/0x10 [ 1246.940435][T21475] ? __might_fault+0xe3/0x190 [ 1246.940467][T21475] mm_release+0x24e/0x300 [ 1246.940495][T21475] do_exit+0x68b/0x2bd0 [ 1246.940533][T21475] ? __pfx_do_exit+0x10/0x10 [ 1246.940565][T21475] ? do_raw_spin_lock+0x12c/0x2b0 [ 1246.940602][T21475] ? find_held_lock+0x2b/0x80 [ 1246.940631][T21475] do_group_exit+0xd3/0x2a0 [ 1246.940666][T21475] get_signal+0x2673/0x26d0 [ 1246.940704][T21475] ? __pfx_get_signal+0x10/0x10 [ 1246.940730][T21475] ? do_futex+0x122/0x350 [ 1246.940759][T21475] ? __pfx_do_futex+0x10/0x10 [ 1246.940790][T21475] arch_do_signal_or_restart+0x8f/0x790 [ 1246.940820][T21475] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1246.940857][T21475] ? __pfx___do_sys_close_range+0x10/0x10 [ 1246.940888][T21475] exit_to_user_mode_loop+0x84/0x110 [ 1246.940928][T21475] do_syscall_64+0x3f6/0x490 [ 1246.940955][T21475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.940979][T21475] RIP: 0033:0x7fbbc1d8e9a9 [ 1246.941016][T21475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.941040][T21475] RSP: 002b:00007fbbc2c7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1246.941062][T21475] RAX: fffffffffffffe00 RBX: 00007fbbc1fb6088 RCX: 00007fbbc1d8e9a9 [ 1246.941079][T21475] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbc1fb6088 [ 1246.941094][T21475] RBP: 00007fbbc1fb6080 R08: 0000000000000000 R09: 0000000000000000 [ 1246.941113][T21475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbbc1fb608c [ 1246.941129][T21475] R13: 0000000000000000 R14: 00007ffd9518b770 R15: 00007ffd9518b858 [ 1246.941159][T21475] [ 1247.188965][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.301729][T21492] nvme_fcloop: unknown parameter or missing value 'ELF' [ 1248.755233][T21505] binder: 21504:21505 ioctl c018620c 0 returned -14 [ 1249.108425][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.115089][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.861855][T21524] FAULT_INJECTION: forcing a failure. [ 1249.861855][T21524] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.941821][T21524] CPU: 0 UID: 0 PID: 21524 Comm: syz.4.3332 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1249.941863][T21524] Tainted: [U]=USER [ 1249.941871][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1249.941886][T21524] Call Trace: [ 1249.941894][T21524] [ 1249.941903][T21524] dump_stack_lvl+0x16c/0x1f0 [ 1249.941934][T21524] should_fail_ex+0x512/0x640 [ 1249.941958][T21524] ? __kvmalloc_node_noprof+0x124/0x620 [ 1249.942002][T21524] should_failslab+0xc2/0x120 [ 1249.942030][T21524] __kvmalloc_node_noprof+0x137/0x620 [ 1249.942072][T21524] ? bucket_table_alloc.isra.0+0x83/0x460 [ 1249.942118][T21524] ? bucket_table_alloc.isra.0+0x83/0x460 [ 1249.942158][T21524] bucket_table_alloc.isra.0+0x83/0x460 [ 1249.942203][T21524] rhashtable_init_noprof+0x41a/0x7e0 [ 1249.942225][T21524] ? __init_waitqueue_head+0xca/0x150 [ 1249.942252][T21524] rhltable_init_noprof+0x20/0x60 [ 1249.942277][T21524] sta_info_init+0x5f/0x160 [ 1249.942304][T21524] ieee80211_alloc_hw_nm+0x840/0x2260 [ 1249.942335][T21524] ? __local_bh_enable_ip+0xa4/0x120 [ 1249.942367][T21524] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 1249.942408][T21524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1249.942449][T21524] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1249.942485][T21524] hwsim_new_radio_nl+0xb51/0x12c0 [ 1249.942514][T21524] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1249.942549][T21524] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1249.942588][T21524] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1249.942632][T21524] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1249.942670][T21524] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1249.942705][T21524] ? trace_cap_capable+0x18d/0x200 [ 1249.942742][T21524] ? bpf_lsm_capable+0x9/0x10 [ 1249.942783][T21524] ? security_capable+0x7e/0x260 [ 1249.942814][T21524] ? ns_capable+0xd7/0x110 [ 1249.942842][T21524] genl_rcv_msg+0x55c/0x800 [ 1249.942880][T21524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1249.942915][T21524] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1249.942952][T21524] netlink_rcv_skb+0x158/0x420 [ 1249.942982][T21524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1249.943018][T21524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1249.943073][T21524] ? netlink_deliver_tap+0x1ae/0xd30 [ 1249.943104][T21524] genl_rcv+0x28/0x40 [ 1249.943134][T21524] netlink_unicast+0x58a/0x850 [ 1249.943167][T21524] ? __pfx_netlink_unicast+0x10/0x10 [ 1249.943205][T21524] netlink_sendmsg+0x8d1/0xdd0 [ 1249.943240][T21524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.943280][T21524] ____sys_sendmsg+0xa98/0xc70 [ 1249.943314][T21524] ? copy_msghdr_from_user+0x10a/0x160 [ 1249.943339][T21524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.943385][T21524] ___sys_sendmsg+0x134/0x1d0 [ 1249.943412][T21524] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.943434][T21524] ? __lock_acquire+0x622/0x1c90 [ 1249.943506][T21524] __sys_sendmsg+0x16d/0x220 [ 1249.943531][T21524] ? __pfx___sys_sendmsg+0x10/0x10 [ 1249.943575][T21524] do_syscall_64+0xcd/0x490 [ 1249.943602][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.943626][T21524] RIP: 0033:0x7fef9d58e9a9 [ 1249.943644][T21524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.943667][T21524] RSP: 002b:00007fef9e360038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.943689][T21524] RAX: ffffffffffffffda RBX: 00007fef9d7b5fa0 RCX: 00007fef9d58e9a9 [ 1249.943705][T21524] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1249.943720][T21524] RBP: 00007fef9e360090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.943734][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1249.943749][T21524] R13: 0000000000000000 R14: 00007fef9d7b5fa0 R15: 00007ffd84df03e8 [ 1249.943782][T21524] [ 1250.677531][T21535] nvme_fcloop: unknown parameter or missing value 'ELF' [ 1251.328410][T21531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1251.335221][T21531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1251.386694][T21531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1252.047778][T21562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 1253.025551][T16128] Bluetooth: hci1: command 0x0c1a tx timeout [ 1253.339298][T16128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1253.419277][T16128] Bluetooth: hci3: command 0x0c1a tx timeout [ 1255.598861][T21593] FAULT_INJECTION: forcing a failure. [ 1255.598861][T21593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.696364][T21593] CPU: 0 UID: 0 PID: 21593 Comm: syz.3.3352 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1255.696405][T21593] Tainted: [U]=USER [ 1255.696413][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1255.696428][T21593] Call Trace: [ 1255.696436][T21593] [ 1255.696445][T21593] dump_stack_lvl+0x16c/0x1f0 [ 1255.696474][T21593] should_fail_ex+0x512/0x640 [ 1255.696503][T21593] _copy_from_user+0x2e/0xd0 [ 1255.696531][T21593] get_timespec64+0x8b/0x1b0 [ 1255.696561][T21593] ? __pfx_get_timespec64+0x10/0x10 [ 1255.696590][T21593] ? ktime_get+0x200/0x310 [ 1255.696626][T21593] __x64_sys_futex+0x288/0x4c0 [ 1255.696662][T21593] ? __pfx___x64_sys_futex+0x10/0x10 [ 1255.696692][T21593] ? xfd_validate_state+0x61/0x180 [ 1255.696734][T21593] do_syscall_64+0xcd/0x490 [ 1255.696761][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.696785][T21593] RIP: 0033:0x7fbbc1d8e9a9 [ 1255.696803][T21593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.696826][T21593] RSP: 002b:00007ffd9518b9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1255.696848][T21593] RAX: ffffffffffffffda RBX: 0000000000132887 RCX: 00007fbbc1d8e9a9 [ 1255.696864][T21593] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbc1fb616c [ 1255.696878][T21593] RBP: 0000000000000032 R08: 00007fbbc2c9e000 R09: 000000169518bcaf [ 1255.696894][T21593] R10: 00007ffd9518bab0 R11: 0000000000000246 R12: 00007fbbc1fb616c [ 1255.696909][T21593] R13: 00007ffd9518bab0 R14: 00000000001328b9 R15: 00007ffd9518bad0 [ 1255.696938][T21593] [ 1257.522647][T21632] nvme_fcloop: unknown parameter or missing value 'ELF' [ 1260.273036][T21660] FAULT_INJECTION: forcing a failure. [ 1260.273036][T21660] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.338132][T21660] CPU: 0 UID: 0 PID: 21660 Comm: syz.0.3366 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1260.338172][T21660] Tainted: [U]=USER [ 1260.338179][T21660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1260.338192][T21660] Call Trace: [ 1260.338200][T21660] [ 1260.338209][T21660] dump_stack_lvl+0x16c/0x1f0 [ 1260.338237][T21660] should_fail_ex+0x512/0x640 [ 1260.338261][T21660] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1260.338288][T21660] should_failslab+0xc2/0x120 [ 1260.338316][T21660] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1260.338338][T21660] ? __pfx_acct_collect+0x10/0x10 [ 1260.338373][T21660] ? taskstats_exit+0x654/0xbe0 [ 1260.338411][T21660] taskstats_exit+0x654/0xbe0 [ 1260.338447][T21660] ? __pfx_taskstats_exit+0x10/0x10 [ 1260.338488][T21660] do_exit+0x5d9/0x2bd0 [ 1260.338527][T21660] ? __pfx_do_exit+0x10/0x10 [ 1260.338558][T21660] ? do_raw_spin_lock+0x12c/0x2b0 [ 1260.338596][T21660] ? find_held_lock+0x2b/0x80 [ 1260.338650][T21660] do_group_exit+0xd3/0x2a0 [ 1260.338701][T21660] get_signal+0x2673/0x26d0 [ 1260.338738][T21660] ? __pfx_get_signal+0x10/0x10 [ 1260.338764][T21660] ? do_futex+0x122/0x350 [ 1260.338812][T21660] ? __pfx_do_futex+0x10/0x10 [ 1260.338845][T21660] arch_do_signal_or_restart+0x8f/0x790 [ 1260.338877][T21660] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1260.338914][T21660] ? xfd_validate_state+0x61/0x180 [ 1260.338949][T21660] ? __pfx___do_sys_close_range+0x10/0x10 [ 1260.338980][T21660] exit_to_user_mode_loop+0x84/0x110 [ 1260.339021][T21660] do_syscall_64+0x3f6/0x490 [ 1260.339049][T21660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.339074][T21660] RIP: 0033:0x7f870578e9a9 [ 1260.339093][T21660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1260.339118][T21660] RSP: 002b:00007f87065520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1260.339146][T21660] RAX: fffffffffffffe00 RBX: 00007f87059b6088 RCX: 00007f870578e9a9 [ 1260.339163][T21660] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87059b6088 [ 1260.339182][T21660] RBP: 00007f87059b6080 R08: 0000000000000000 R09: 0000000000000000 [ 1260.339197][T21660] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f87059b608c [ 1260.339212][T21660] R13: 0000000000000000 R14: 00007ffdd6438f70 R15: 00007ffdd6439058 [ 1260.339241][T21660] [ 1260.572407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.133565][T21679] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input395 [ 1261.257873][T21672] Invalid ELF header magic: != ELF [ 1261.572160][T21680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input396 [ 1262.070966][T21691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3375'. [ 1262.096686][T21691] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3375'. [ 1265.142288][T21732] ptp ptp0: delete virtual clock ptp3 [ 1265.216576][T21732] [ 1265.218953][T21732] ====================================================== [ 1265.225975][T21732] WARNING: possible circular locking dependency detected [ 1265.233005][T21732] 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 Tainted: G U [ 1265.241701][T21732] ------------------------------------------------------ [ 1265.248724][T21732] syz.2.3386/21732 is trying to acquire lock: [ 1265.254787][T21732] ffff888056958130 (&clk->rwsem){++++}-{4:4}, at: posix_clock_unregister+0x4d/0xd0 [ 1265.264141][T21732] [ 1265.264141][T21732] but task is already holding lock: [ 1265.271507][T21732] ffff8880309ba868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 1265.281051][T21732] [ 1265.281051][T21732] which lock already depends on the new lock. [ 1265.281051][T21732] [ 1265.291463][T21732] [ 1265.291463][T21732] the existing dependency chain (in reverse order) is: [ 1265.300480][T21732] [ 1265.300480][T21732] -> #1 (&ptp->n_vclocks_mux){+.+.}-{4:4}: [ 1265.308511][T21732] __mutex_lock+0x199/0xb90 [ 1265.313567][T21732] ptp_clock_adjtime+0x527/0x760 [ 1265.319049][T21732] pc_clock_adjtime+0x118/0x1e0 [ 1265.324444][T21732] __do_sys_clock_adjtime+0x175/0x290 [ 1265.330362][T21732] do_syscall_64+0xcd/0x490 [ 1265.335402][T21732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.341827][T21732] [ 1265.341827][T21732] -> #0 (&clk->rwsem){++++}-{4:4}: [ 1265.349160][T21732] __lock_acquire+0x126f/0x1c90 [ 1265.354553][T21732] lock_acquire+0x179/0x350 [ 1265.359601][T21732] down_write+0x92/0x200 [ 1265.364385][T21732] posix_clock_unregister+0x4d/0xd0 [ 1265.370121][T21732] ptp_clock_unregister+0x14f/0x250 [ 1265.375864][T21732] ptp_vclock_unregister+0x11a/0x160 [ 1265.381683][T21732] unregister_vclock+0x108/0x1a0 [ 1265.387168][T21732] device_for_each_child_reverse+0x133/0x1a0 [ 1265.393693][T21732] n_vclocks_store+0x4b6/0x6d0 [ 1265.399003][T21732] dev_attr_store+0x58/0x80 [ 1265.404054][T21732] sysfs_kf_write+0xf2/0x150 [ 1265.409197][T21732] kernfs_fop_write_iter+0x354/0x510 [ 1265.415018][T21732] vfs_write+0x6c4/0x1150 [ 1265.419896][T21732] ksys_write+0x12a/0x250 [ 1265.424758][T21732] do_syscall_64+0xcd/0x490 [ 1265.429801][T21732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.436231][T21732] [ 1265.436231][T21732] other info that might help us debug this: [ 1265.436231][T21732] [ 1265.446476][T21732] Possible unsafe locking scenario: [ 1265.446476][T21732] [ 1265.453939][T21732] CPU0 CPU1 [ 1265.459314][T21732] ---- ---- [ 1265.464687][T21732] lock(&ptp->n_vclocks_mux); [ 1265.469567][T21732] lock(&clk->rwsem); [ 1265.476175][T21732] lock(&ptp->n_vclocks_mux); [ 1265.483470][T21732] lock(&clk->rwsem); [ 1265.487552][T21732] [ 1265.487552][T21732] *** DEADLOCK *** [ 1265.487552][T21732] [ 1265.495701][T21732] 4 locks held by syz.2.3386/21732: [ 1265.500905][T21732] #0: ffff888025312428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1265.509910][T21732] #1: ffff8880519bb888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1265.519729][T21732] #2: ffff8880308c1698 (kn->active#198){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1265.529865][T21732] #3: ffff8880309ba868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 1265.539835][T21732] [ 1265.539835][T21732] stack backtrace: [ 1265.545732][T21732] CPU: 0 UID: 0 PID: 21732 Comm: syz.2.3386 Tainted: G U 6.16.0-rc7-syzkaller-00020-gf9af7b5d9349 #0 PREEMPT(full) [ 1265.545769][T21732] Tainted: [U]=USER [ 1265.545777][T21732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1265.545792][T21732] Call Trace: [ 1265.545802][T21732] [ 1265.545812][T21732] dump_stack_lvl+0x116/0x1f0 [ 1265.545837][T21732] print_circular_bug+0x275/0x350 [ 1265.545872][T21732] check_noncircular+0x14c/0x170 [ 1265.545907][T21732] __lock_acquire+0x126f/0x1c90 [ 1265.545944][T21732] lock_acquire+0x179/0x350 [ 1265.545976][T21732] ? posix_clock_unregister+0x4d/0xd0 [ 1265.546007][T21732] ? __pfx___might_resched+0x10/0x10 [ 1265.546033][T21732] ? cdev_default_release+0x35/0x50 [ 1265.546060][T21732] down_write+0x92/0x200 [ 1265.546091][T21732] ? posix_clock_unregister+0x4d/0xd0 [ 1265.546119][T21732] ? __pfx_down_write+0x10/0x10 [ 1265.546146][T21732] ? kobject_put+0x210/0x5a0 [ 1265.546173][T21732] posix_clock_unregister+0x4d/0xd0 [ 1265.546202][T21732] ptp_clock_unregister+0x14f/0x250 [ 1265.546238][T21732] ptp_vclock_unregister+0x11a/0x160 [ 1265.546263][T21732] unregister_vclock+0x108/0x1a0 [ 1265.546302][T21732] ? __pfx_unregister_vclock+0x10/0x10 [ 1265.546340][T21732] device_for_each_child_reverse+0x133/0x1a0 [ 1265.546380][T21732] ? __pfx_device_for_each_child_reverse+0x10/0x10 [ 1265.546419][T21732] ? __pfx_kstrtouint+0x10/0x10 [ 1265.546457][T21732] n_vclocks_store+0x4b6/0x6d0 [ 1265.546497][T21732] ? __pfx_n_vclocks_store+0x10/0x10 [ 1265.546537][T21732] ? find_held_lock+0x2b/0x80 [ 1265.546563][T21732] ? __pfx_n_vclocks_store+0x10/0x10 [ 1265.546600][T21732] dev_attr_store+0x58/0x80 [ 1265.546630][T21732] ? __pfx_dev_attr_store+0x10/0x10 [ 1265.546658][T21732] sysfs_kf_write+0xf2/0x150 [ 1265.546693][T21732] kernfs_fop_write_iter+0x354/0x510 [ 1265.546724][T21732] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1265.546759][T21732] vfs_write+0x6c4/0x1150 [ 1265.546781][T21732] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1265.546814][T21732] ? __pfx_vfs_write+0x10/0x10 [ 1265.546834][T21732] ? do_futex+0x122/0x350 [ 1265.546868][T21732] ? __x64_sys_futex+0x1e0/0x4c0 [ 1265.546896][T21732] ? __x64_sys_futex+0x1e9/0x4c0 [ 1265.546927][T21732] ksys_write+0x12a/0x250 [ 1265.546948][T21732] ? __pfx_ksys_write+0x10/0x10 [ 1265.546974][T21732] do_syscall_64+0xcd/0x490 [ 1265.547000][T21732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.547024][T21732] RIP: 0033:0x7fbc25d8e9a9 [ 1265.547043][T21732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.547071][T21732] RSP: 002b:00007fbc26c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.547092][T21732] RAX: ffffffffffffffda RBX: 00007fbc25fb5fa0 RCX: 00007fbc25d8e9a9 [ 1265.547109][T21732] RDX: 0000000000080001 RSI: 00002000000003c0 RDI: 0000000000000001 [ 1265.547124][T21732] RBP: 00007fbc25e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1265.547139][T21732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.547153][T21732] R13: 0000000000000000 R14: 00007fbc25fb5fa0 R15: 00007ffd825b1248 [ 1265.547176][T21732] [ 1265.852314][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1267.155984][T17374] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz-executor: Error -117 reading block bitmap for 2 [ 1267.179569][T21122] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1267.222046][T21122] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1267.268017][T17374] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1267.279121][T17374] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz-executor: Error -117 reading block bitmap for 2 [ 1267.329082][T17374] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1267.524466][T16125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.553858][T16125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.593441][T16125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.632839][T16125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.645931][T21732] ptp ptp0: delete virtual clock ptp2 [ 1267.655900][T21732] ptp ptp0: delete virtual clock ptp1 [ 1267.684790][T21725] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1267.775188][T21725] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.3.3383: Error -117 reading block bitmap for 2 [ 1267.791559][T21732] ptp ptp0: only physical clock in use now [ 1267.853551][T16125] bridge_slave_1: left allmulticast mode [ 1267.862205][T16125] bridge_slave_1: left promiscuous mode [ 1267.889541][T16125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.902689][T16125] bridge_slave_0: left allmulticast mode [ 1267.908536][T16125] bridge_slave_0: left promiscuous mode [ 1267.929538][T21725] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1267.958690][T21732] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1267.967406][T16125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.350530][T16125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.409605][T16125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.450194][T16125] bond0 (unregistering): Released all slaves [ 1268.814446][T16125] hsr_slave_0: left promiscuous mode [ 1268.839985][T16125] hsr_slave_1: left promiscuous mode [ 1268.845708][T16125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.870457][T16125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.902363][T16125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.919625][T16125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.942336][T16125] veth1_macvtap: left promiscuous mode [ 1268.947891][T16125] veth0_macvtap: left promiscuous mode [ 1268.959799][T16125] veth1_vlan: left promiscuous mode [ 1268.965088][T16125] veth0_vlan: left promiscuous mode [ 1269.146668][T16125] team0 (unregistering): Port device team_slave_1 removed [ 1269.158924][T16125] team0 (unregistering): Port device team_slave_0 removed [ 1269.414512][T16125] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.493628][T16125] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.543905][T16125] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.595936][T16125] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.703601][T16125] team0: left allmulticast mode [ 1269.708505][T16125] team_slave_0: left allmulticast mode [ 1269.724372][T16125] team_slave_1: left allmulticast mode [ 1269.740905][T16125] team0: left promiscuous mode [ 1269.745814][T16125] team_slave_0: left promiscuous mode [ 1269.760791][T16125] team_slave_1: left promiscuous mode [ 1269.766405][T16125] bridge0: port 3(team0) entered disabled state [ 1269.790880][T16125] bridge_slave_1: left allmulticast mode [ 1269.796572][T16125] bridge_slave_1: left promiscuous mode [ 1269.820686][T16125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.828905][T16125] bridge_slave_0: left allmulticast mode [ 1269.839819][T16125] bridge_slave_0: left promiscuous mode [ 1269.845508][T16125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.976038][T16125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.987868][T16125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.998500][T16125] bond0 (unregistering): Released all slaves [ 1270.052260][T16125] ovs_: left promiscuous mode [ 1270.209435][T16125] hsr_slave_0: left promiscuous mode [ 1270.217148][T16125] hsr_slave_1: left promiscuous mode [ 1270.230090][T16125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.237532][T16125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.258046][T16125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.279338][T16125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.303008][T16125] veth1_macvtap: left promiscuous mode [ 1270.308550][T16125] veth0_macvtap: left promiscuous mode [ 1270.326628][T16125] veth1_vlan: left promiscuous mode [ 1270.338618][T16125] veth0_vlan: left promiscuous mode [ 1270.564666][T16125] team0 (unregistering): Port device team_slave_1 removed [ 1270.601872][T16125] team0 (unregistering): Port device team_slave_0 removed