last executing test programs: 9.867901199s ago: executing program 3 (id=2236): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r1, 0x0, 0xfffffffffffffdef, 0x8, 0x0, 0x20) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r2, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) 8.857175727s ago: executing program 3 (id=2240): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000001340)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_/file0\x00', 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000180)="c811eb815714809378d642683b713f38dfc8f11bd9dc1aaf3ce175e477d63b2c154b34ce64b79278f7d2a3337951d1e14e40e40807db5e565f89a12647e1594e5efacb2f", 0x12, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x28}, 0x7, 0x20020003) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) mmap$auto(0x0, 0x400008, 0xdf, 0x1000009b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) read$auto(r3, 0x0, 0x57) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, r0) write$auto(0x3, 0x0, 0xfffffdef) 8.675079705s ago: executing program 1 (id=2242): semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1, 0x0) openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/clk/clk_summary\x00', 0x701, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xf, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) getsockopt$auto(0xffffffffffffffff, 0x4, 0x3, 0xfffffffffffffffe, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x6, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) 7.814400414s ago: executing program 3 (id=2244): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x83, 0x2020009, 0x8, 0xebf, 0xfffffffffffffffa, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) 6.835282721s ago: executing program 1 (id=2247): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) inotify_init1$auto(0x3000000000000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8b40, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$auto(0x1e, 0x9, 0x7, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 6.73523476s ago: executing program 3 (id=2248): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 6.69822268s ago: executing program 1 (id=2249): ioctl$auto_X86_IOC_WRMSR_REGS(0xffffffffffffffff, 0xc02063a1, &(0x7f0000000100)=[0x7acb, 0x6, 0x9, 0xf7e6, 0x4, 0x7f, 0x3, 0x10000001]) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/thread-self/uid_map\x00', 0x20000, 0x0) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="99cb9d0ac5e7ca3d"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer2\x00', 0x40000, 0x0) socket(0x2, 0x1, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) ftruncate$auto(0x3, 0x400180200000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/scsi/sg/version\x00', 0x101000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r3, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) r4 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) writev$auto(r4, &(0x7f0000000480)={0x0, 0x5}, 0x3) 5.721338412s ago: executing program 0 (id=2251): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x4, 0x400008, 0x3, 0x9b72, r1, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) madvise$auto(0x110c230000, 0x8031ca, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r2, &(0x7f000000be80)='batadv0\x00', 0xf) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) 5.203704329s ago: executing program 3 (id=2252): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$auto_WG_CMD_SET_DEVICE(r0, 0x0, 0x810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) writev$auto(0x3, 0x0, 0x8) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000140), 0x101, 0x0) dup2$auto(r0, r2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x40c80, 0x0) socket(0x29, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) pread64$auto(r3, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1) 4.826298338s ago: executing program 2 (id=2253): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) shmget$auto(0x9, 0x1020000, 0xfffffc00) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, 0x0, 0x0, 0x8) sysfs$auto(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1fe) ioctl$auto(0xffffffffffffffff, 0x8004550f, 0xf15) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1f, 0x2, 0x200000) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x4008080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.499984204s ago: executing program 1 (id=2254): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x90e80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r3 = fsopen$auto(0x0, 0x1) close_range$auto(r0, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r5, 0x0, 0x40) sendmmsg$auto(0x3, 0x0, 0x0, 0x0) 4.410907887s ago: executing program 0 (id=2255): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0280, 0x0) socket(0x1a, 0x1, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4008050) close_range$auto(0x2, 0x8, 0x0) 3.833052315s ago: executing program 1 (id=2256): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0xa, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) io_uring_setup$auto(0x59, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) socket(0xa, 0x802, 0x3a) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 3.784642932s ago: executing program 2 (id=2257): socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e736608700000000000000818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b710f89cb8e96cfabaead96bc484c33fffb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f668ced3906e2af971d833a8a1d53e32a133a5b4c89ec915deff549042f4d94e13d7855e68b736ec90d98b3cc7629a"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) prctl$auto(0x3e, 0xffdfffffffffffff, 0x0, 0x4, 0x4) keyctl$auto(0x4, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r3) mmap$auto(0x6, 0x4, 0xdb, 0x400000016, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x7ff) unshare$auto(0x40000080) 3.365472374s ago: executing program 1 (id=2258): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x2, "75a9ab35978808a8"}, 0x2) sendmsg$auto_WG_CMD_SET_DEVICE(r0, 0x0, 0x810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) writev$auto(0x3, 0x0, 0x8) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000140), 0x101, 0x0) dup2$auto(r0, r3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x40c80, 0x0) socket(0x29, 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) 3.059542001s ago: executing program 0 (id=2259): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty36\x00', 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) r2 = clone3$auto(0x0, 0x1fe000) rt_sigqueueinfo$auto(r2, 0x0, &(0x7f00000002c0)={@_si_pad}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) 2.819261691s ago: executing program 2 (id=2260): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap$auto(0xfffffffffffff34b, 0x8592) socket(0x25, 0x805, 0x3) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0x7, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xe0, 0x968b, 0x100, 0x15f4da07, 0x3, 0x3, 0x200000000fff, 0x8002001f, 0x1, 0x80080000002, 0x7, 0x2, 0x8]}, 0x0) sendmsg$auto_TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, 0x0, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) mmap$auto(0x773d, 0x3ff, 0x1, 0x19, 0xffffffffffffffff, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setns(0xffffffffffffffff, 0x10000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.621461147s ago: executing program 2 (id=2261): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0xee01, 0xffffffffffffffff, 0x0, 0x8000000000000000) r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_options\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8400) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000180)='/sys/kernel/tracing/trace_options\x00', 0xa, 0x10000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip_vs_conn\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) 1.860515817s ago: executing program 0 (id=2262): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x100, 0x0) r0 = syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x2000021}, 0x0, 0x0, 0x0, 0x0}, 0x58) mq_open$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x3, 0x5, 0x100000001, 0x62}) mmap$auto(0x8001, 0xff, 0x80000001, 0x1010, 0xffffffffffffffff, 0x28004) mmap$auto(0xc1, 0x2000, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x20000004, 0x1, r0, 0x8000, 0x0) r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r3, &(0x7f0000000200)='\\*)A\x00', 0x2, 0x6, &(0x7f0000000240)={0x3, 0x101}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1d, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x110e40, 0x0) 1.415211622s ago: executing program 3 (id=2263): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0xc00000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0x10, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) 808.484723ms ago: executing program 2 (id=2264): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r7, 0x0, 0x594c, 0x9fffffffd) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendmmsg$auto(r6, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) ioctl$auto_SG_GET_TRANSFORM(r4, 0x2205, &(0x7f0000000240)="bd20ef940bae403060348abecb701bcc7c5c8d4a41f39e3d24b85ed4f75b9b9ad120963a581258cb5b8fb0b26939f3881260b2468f81b428f949") openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40200, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000280)="7acca5c32b31b18d8888f8bb3c5ff5a718ebe172e690dbcbd1f9149c6bc53030efcf2a9c93c7a88c7dd1c5b612180b3dcada0bd2b16f9315ac254b541b2b6f893067de452f20e9d5437b5708022a4bd6b1ccf77916e13b338dd6ab6e46bb86d9307259341c28c37e0c18b7b72cd2de3ea88446f52cb59ba0d2e476614e0f762d84c6c09d64624d") 743.049313ms ago: executing program 0 (id=2265): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r1, 0x0, 0xfffffffffffffdef, 0x8, 0x0, 0x20) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r2, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) 71.582103ms ago: executing program 2 (id=2266): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 0s ago: executing program 0 (id=2267): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) sendmsg$auto_SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r6, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)=',{\x00', &(0x7f0000000140)=&(0x7f0000000100)='}.\x00') move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              syzkaller syzkaller login: [ 636.713067][T14034] FAULT_INJECTION: forcing a failure. [ 636.713067][T14034] name failslab, interval 1, probability 0, space 0, times 0 [ 636.726730][T14034] CPU: 0 UID: 0 PID: 14034 Comm: syz.0.2018 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 636.726776][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 636.726796][T14034] Call Trace: [ 636.726806][T14034] [ 636.726818][T14034] dump_stack_lvl+0x16c/0x1f0 [ 636.726872][T14034] should_fail_ex+0x512/0x640 [ 636.726920][T14034] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 636.726969][T14034] should_failslab+0xc2/0x120 [ 636.727000][T14034] __kmalloc_cache_noprof+0x6a/0x3e0 [ 636.727045][T14034] ? percpu_ref_init+0xec/0x410 [ 636.727089][T14034] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 636.727126][T14034] percpu_ref_init+0xec/0x410 [ 636.727185][T14034] blk_alloc_queue+0x577/0x760 [ 636.727237][T14034] blk_mq_alloc_queue+0x175/0x290 [ 636.727290][T14034] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 636.727367][T14034] ? debug_mutex_init+0x37/0x70 [ 636.727425][T14034] ? blk_mq_alloc_tag_set+0xcfe/0x1260 [ 636.727476][T14034] __blk_mq_alloc_disk+0x29/0x120 [ 636.727543][T14034] loop_add+0x49e/0xb70 [ 636.727581][T14034] ? do_vfs_ioctl+0x523/0x1a60 [ 636.727620][T14034] ? __pfx_loop_add+0x10/0x10 [ 636.727654][T14034] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 636.727721][T14034] ? find_held_lock+0x2b/0x80 [ 636.727762][T14034] loop_control_ioctl+0x13e/0x630 [ 636.727803][T14034] ? __pfx_loop_control_ioctl+0x10/0x10 [ 636.727850][T14034] ? __pfx_loop_control_ioctl+0x10/0x10 [ 636.727893][T14034] __x64_sys_ioctl+0x18b/0x210 [ 636.727933][T14034] do_syscall_64+0xcd/0x490 [ 636.727988][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.728022][T14034] RIP: 0033:0x7f0b8558e929 [ 636.728048][T14034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.728082][T14034] RSP: 002b:00007f0b864d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.728114][T14034] RAX: ffffffffffffffda RBX: 00007f0b857b5fa0 RCX: 00007f0b8558e929 [ 636.728135][T14034] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 636.728156][T14034] RBP: 00007f0b85610b39 R08: 0000000000000000 R09: 0000000000000000 [ 636.728177][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.728197][T14034] R13: 0000000000000000 R14: 00007f0b857b5fa0 R15: 00007ffe3c389818 [ 636.728239][T14034] [ 637.145207][T14036] can: request_module (can-proto-0) failed. [ 638.286959][T14060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2025'. [ 638.380674][T14060] bond0: (slave bond_slave_1): Releasing backup interface [ 638.438336][T14057] FAULT_INJECTION: forcing a failure. [ 638.438336][T14057] name failslab, interval 1, probability 0, space 0, times 0 [ 638.455049][T14057] CPU: 0 UID: 0 PID: 14057 Comm: syz.3.2023 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 638.455078][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 638.455091][T14057] Call Trace: [ 638.455098][T14057] [ 638.455107][T14057] dump_stack_lvl+0x16c/0x1f0 [ 638.455162][T14057] should_fail_ex+0x512/0x640 [ 638.455198][T14057] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 638.455233][T14057] should_failslab+0xc2/0x120 [ 638.455255][T14057] __kmalloc_cache_noprof+0x6a/0x3e0 [ 638.455286][T14057] ? x509_cert_parse+0x9a/0x900 [ 638.455320][T14057] x509_cert_parse+0x9a/0x900 [ 638.455346][T14057] ? kasan_save_stack+0x42/0x60 [ 638.455391][T14057] ? kasan_save_stack+0x33/0x60 [ 638.455421][T14057] ? kasan_save_track+0x14/0x30 [ 638.455454][T14057] pkcs7_extract_cert+0xa4/0x320 [ 638.455489][T14057] asn1_ber_decoder+0xc5f/0x1df0 [ 638.455534][T14057] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 638.455591][T14057] pkcs7_parse_message+0x288/0x720 [ 638.455626][T14057] verify_pkcs7_signature+0x30/0xa0 [ 638.455652][T14057] valid_regdb+0x215/0x590 [ 638.455674][T14057] ? __pfx___mutex_lock+0x10/0x10 [ 638.455707][T14057] ? __pfx_valid_regdb+0x10/0x10 [ 638.455735][T14057] reg_reload_regdb+0x11e/0x460 [ 638.455760][T14057] ? __pfx_reg_reload_regdb+0x10/0x10 [ 638.455787][T14057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 638.455818][T14057] ? nl80211_pre_doit+0x1b0/0xb10 [ 638.455853][T14057] genl_family_rcv_msg_doit+0x209/0x2f0 [ 638.455883][T14057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 638.455909][T14057] ? rcu_is_watching+0x12/0xc0 [ 638.455948][T14057] ? bpf_lsm_capable+0x9/0x10 [ 638.455975][T14057] ? security_capable+0x7e/0x260 [ 638.456001][T14057] genl_rcv_msg+0x55c/0x800 [ 638.456030][T14057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.456056][T14057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 638.456087][T14057] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 638.456109][T14057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 638.456150][T14057] netlink_rcv_skb+0x158/0x420 [ 638.456171][T14057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.456200][T14057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.456231][T14057] ? netlink_deliver_tap+0x1ae/0xd30 [ 638.456271][T14057] genl_rcv+0x28/0x40 [ 638.456293][T14057] netlink_unicast+0x58a/0x850 [ 638.456319][T14057] ? __pfx_netlink_unicast+0x10/0x10 [ 638.456348][T14057] netlink_sendmsg+0x8d1/0xdd0 [ 638.456375][T14057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.456407][T14057] ____sys_sendmsg+0xa98/0xc70 [ 638.456433][T14057] ? copy_msghdr_from_user+0x10a/0x160 [ 638.456465][T14057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.456496][T14057] ? __pfx_futex_wake_mark+0x10/0x10 [ 638.456532][T14057] ___sys_sendmsg+0x134/0x1d0 [ 638.456565][T14057] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.456596][T14057] ? __lock_acquire+0x622/0x1c90 [ 638.456658][T14057] __sys_sendmsg+0x16d/0x220 [ 638.456691][T14057] ? __pfx___sys_sendmsg+0x10/0x10 [ 638.456724][T14057] ? __x64_sys_futex+0x1e0/0x4c0 [ 638.456766][T14057] do_syscall_64+0xcd/0x490 [ 638.456802][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.456824][T14057] RIP: 0033:0x7f219778e929 [ 638.456841][T14057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.456862][T14057] RSP: 002b:00007f219869c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.456883][T14057] RAX: ffffffffffffffda RBX: 00007f21979b5fa0 RCX: 00007f219778e929 [ 638.456897][T14057] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 638.456911][T14057] RBP: 00007f2197810b39 R08: 0000000000000000 R09: 0000000000000000 [ 638.456924][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.456944][T14057] R13: 0000000000000000 R14: 00007f21979b5fa0 R15: 00007ffc7eb445d8 [ 638.456971][T14057] [ 639.458897][T14072] FAULT_INJECTION: forcing a failure. [ 639.458897][T14072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 639.488424][T14072] CPU: 1 UID: 0 PID: 14072 Comm: syz.1.2029 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 639.488466][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.488485][T14072] Call Trace: [ 639.488495][T14072] [ 639.488506][T14072] dump_stack_lvl+0x16c/0x1f0 [ 639.488558][T14072] should_fail_ex+0x512/0x640 [ 639.488609][T14072] should_fail_alloc_page+0xe7/0x130 [ 639.488642][T14072] prepare_alloc_pages+0x3c2/0x610 [ 639.488685][T14072] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 639.488733][T14072] ? __pfx_stack_trace_save+0x10/0x10 [ 639.488768][T14072] ? stack_depot_save_flags+0x28/0xa40 [ 639.488814][T14072] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 639.488874][T14072] ? kasan_save_stack+0x42/0x60 [ 639.488916][T14072] ? kasan_save_stack+0x33/0x60 [ 639.488960][T14072] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 639.489005][T14072] ? __pmd_alloc+0xbf/0x930 [ 639.489037][T14072] ? handle_mm_fault+0x589/0xd10 [ 639.489074][T14072] ? get_user_pages_remote+0x258/0xb20 [ 639.489108][T14072] ? get_arg_page+0xf4/0x310 [ 639.489144][T14072] ? copy_string_kernel+0x180/0x510 [ 639.489182][T14072] ? do_execveat_common.isra.0+0x2ed/0x610 [ 639.489224][T14072] ? __x64_sys_execve+0x8e/0xb0 [ 639.489261][T14072] ? do_syscall_64+0xcd/0x490 [ 639.489305][T14072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.489357][T14072] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 639.489406][T14072] ? policy_nodemask+0xea/0x4e0 [ 639.489438][T14072] alloc_pages_mpol+0x1fb/0x550 [ 639.489468][T14072] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 639.489495][T14072] ? css_rstat_updated+0x9d/0xd30 [ 639.489537][T14072] alloc_pages_noprof+0x131/0x390 [ 639.489568][T14072] pte_alloc_one+0x1c/0x3a0 [ 639.489596][T14072] __pte_alloc+0x6d/0x3c0 [ 639.489625][T14072] ? __pfx___pte_alloc+0x10/0x10 [ 639.489656][T14072] ? _raw_spin_unlock+0x28/0x50 [ 639.489694][T14072] ? __pmd_alloc+0x3fb/0x930 [ 639.489731][T14072] __handle_mm_fault+0x4358/0x5490 [ 639.489783][T14072] ? __pfx___handle_mm_fault+0x10/0x10 [ 639.489855][T14072] handle_mm_fault+0x589/0xd10 [ 639.489909][T14072] __get_user_pages+0x589/0x3b80 [ 639.489959][T14072] ? __pfx___get_user_pages+0x10/0x10 [ 639.490008][T14072] get_user_pages_remote+0x258/0xb20 [ 639.490053][T14072] ? __pfx_get_user_pages_remote+0x10/0x10 [ 639.490085][T14072] ? __pfx_vma_link+0x10/0x10 [ 639.490141][T14072] get_arg_page+0xf4/0x310 [ 639.490174][T14072] ? __pfx_get_arg_page+0x10/0x10 [ 639.490206][T14072] ? up_write+0x1b2/0x520 [ 639.490250][T14072] copy_string_kernel+0x180/0x510 [ 639.490291][T14072] do_execveat_common.isra.0+0x2ed/0x610 [ 639.490333][T14072] __x64_sys_execve+0x8e/0xb0 [ 639.490369][T14072] do_syscall_64+0xcd/0x490 [ 639.490428][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.490455][T14072] RIP: 0033:0x7f554898e929 [ 639.490477][T14072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.490505][T14072] RSP: 002b:00007f55497f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 639.490531][T14072] RAX: ffffffffffffffda RBX: 00007f5548bb6080 RCX: 00007f554898e929 [ 639.490549][T14072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 639.490566][T14072] RBP: 00007f5548a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 639.490583][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.490599][T14072] R13: 0000000000000000 R14: 00007f5548bb6080 R15: 00007ffcc96e36a8 [ 639.490634][T14072] [ 641.002060][T14091] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2034'. [ 641.780103][T14099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.814693][T14099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.765701][T14124] ubi0: attaching mtd0 [ 642.772586][T14124] ubi0: scanning is finished [ 642.777265][T14124] ubi0: empty MTD device detected [ 642.853634][T14114] Invalid ELF header magic: != ELF [ 643.498559][T14124] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 643.527840][T14129] netlink: 'syz.1.2041': attribute type 11 has an invalid length. [ 645.388162][T14153] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2045'. [ 645.583654][T14150] ima: policy update failed [ 645.590786][ T30] audit: type=1802 audit(4294967322.763:34): pid=14150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2045" res=0 errno=0 [ 646.969731][T14181] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 646.983449][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 646.993632][T14183] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 647.001508][T14183] netlink: 'syz.2.2055': attribute type 6 has an invalid length. [ 647.030518][T14184] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 647.064491][T14184] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2053'. [ 647.079903][ T5201] ERROR: Out of memory at tomoyo_memory_ok. [ 650.787032][T14238] kexec: Could not allocate control_code_buffer [ 650.863997][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2069'. [ 651.101611][T14257] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2072'. [ 652.004709][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2078'. [ 654.802061][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2085'. [ 654.811967][T14317] hub 8-0:1.0: USB hub found [ 654.817239][T14317] hub 8-0:1.0: 1 port detected [ 655.014129][T14330] ubi0: attaching mtd0 [ 655.203268][T14330] ubi0: scanning is finished [ 655.363992][T13800] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 655.510186][T14330] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 655.517789][T14330] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 655.525333][T14330] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 655.532591][T14330] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 655.540154][T14330] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 655.547043][T14330] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 655.555510][T14330] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3253776085 [ 655.565934][T14330] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 655.577340][T14340] ubi0: background thread "ubi_bgt0d" started, PID 14340 [ 655.585676][T14332] ubi0: detaching mtd0 [ 655.795099][T14332] ubi0: mtd0 is detached [ 658.431151][T14389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'. [ 658.599986][T14339] Bluetooth: hci0: unexpected event 0x17 length: 11 > 6 [ 658.776467][T14396] netlink: 13832 bytes leftover after parsing attributes in process `syz.2.2101'. [ 659.589287][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'. [ 659.968272][T14417] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 660.232940][T14413] loop6: detected capacity change from 0 to 8192 [ 660.627819][T14425] syz.3.2103 (14425): attempted to duplicate a private mapping with mremap. This is not supported. [ 661.075688][T14402] Process accounting paused [ 661.588780][T14430] ERROR: Out of memory at tomoyo_memory_ok. [ 661.772290][T14443] random: crng reseeded on system resumption [ 661.780553][T13808] ERROR: Out of memory at tomoyo_memory_ok. [ 661.802703][T13793] ERROR: Out of memory at tomoyo_memory_ok. [ 662.406563][T14458] ERROR: Out of memory at tomoyo_memory_ok. [ 662.752511][T14463] netlink: 'syz.0.2117': attribute type 11 has an invalid length. [ 662.951023][T14467] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 663.856962][T14475] ERROR: Out of memory at tomoyo_memory_ok. [ 663.879068][T14475] FAULT_INJECTION: forcing a failure. [ 663.879068][T14475] name failslab, interval 1, probability 0, space 0, times 0 [ 663.905103][T14475] CPU: 1 UID: 0 PID: 14475 Comm: syz.0.2120 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 663.905146][T14475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.905164][T14475] Call Trace: [ 663.905173][T14475] [ 663.905184][T14475] dump_stack_lvl+0x16c/0x1f0 [ 663.905231][T14475] should_fail_ex+0x512/0x640 [ 663.905271][T14475] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 663.905320][T14475] should_failslab+0xc2/0x120 [ 663.905348][T14475] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 663.905390][T14475] ? d_instantiate+0x77/0x90 [ 663.905415][T14475] ? alloc_empty_file+0x55/0x1e0 [ 663.905450][T14475] alloc_empty_file+0x55/0x1e0 [ 663.905482][T14475] alloc_file_pseudo+0x13a/0x230 [ 663.905514][T14475] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 663.905546][T14475] ? alloc_fd+0x471/0x7d0 [ 663.905590][T14475] sock_alloc_file+0x50/0x210 [ 663.905637][T14475] __sys_socket+0x1c0/0x260 [ 663.905669][T14475] ? __pfx___sys_socket+0x10/0x10 [ 663.905701][T14475] ? xfd_validate_state+0x61/0x180 [ 663.905749][T14475] __x64_sys_socket+0x72/0xb0 [ 663.905780][T14475] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.905826][T14475] do_syscall_64+0xcd/0x490 [ 663.905870][T14475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.905897][T14475] RIP: 0033:0x7f0b8558e929 [ 663.905918][T14475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.905947][T14475] RSP: 002b:00007f0b864d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 663.905973][T14475] RAX: ffffffffffffffda RBX: 00007f0b857b5fa0 RCX: 00007f0b8558e929 [ 663.905991][T14475] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 663.906008][T14475] RBP: 00007f0b85610b39 R08: 0000000000000000 R09: 0000000000000000 [ 663.906033][T14475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.906050][T14475] R13: 0000000000000000 R14: 00007f0b857b5fa0 R15: 00007ffe3c389818 [ 663.906087][T14475] [ 664.162976][T14479] FAULT_INJECTION: forcing a failure. [ 664.162976][T14479] name failslab, interval 1, probability 0, space 0, times 0 [ 664.223231][T14479] CPU: 0 UID: 0 PID: 14479 Comm: syz.1.2122 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 664.223282][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 664.223301][T14479] Call Trace: [ 664.223311][T14479] [ 664.223323][T14479] dump_stack_lvl+0x16c/0x1f0 [ 664.223379][T14479] should_fail_ex+0x512/0x640 [ 664.223428][T14479] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 664.223475][T14479] should_failslab+0xc2/0x120 [ 664.223505][T14479] __kmalloc_cache_noprof+0x6a/0x3e0 [ 664.223550][T14479] ? cec_open+0xdb/0x690 [ 664.223610][T14479] cec_open+0xdb/0x690 [ 664.223681][T14479] ? __pfx_cec_open+0x10/0x10 [ 664.223736][T14479] ? do_raw_spin_lock+0x12c/0x2b0 [ 664.223793][T14479] ? find_held_lock+0x2b/0x80 [ 664.223830][T14479] ? chrdev_open+0x58c/0x6a0 [ 664.223892][T14479] ? __pfx_cec_open+0x10/0x10 [ 664.223939][T14479] chrdev_open+0x231/0x6a0 [ 664.224003][T14479] ? __pfx_chrdev_open+0x10/0x10 [ 664.224063][T14479] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 664.224121][T14479] do_dentry_open+0x744/0x1c10 [ 664.224175][T14479] ? __pfx_chrdev_open+0x10/0x10 [ 664.224241][T14479] vfs_open+0x82/0x3f0 [ 664.224282][T14479] path_openat+0x1de4/0x2cb0 [ 664.224350][T14479] ? __pfx_path_openat+0x10/0x10 [ 664.224407][T14479] ? __lock_acquire+0xb8a/0x1c90 [ 664.224459][T14479] do_filp_open+0x20b/0x470 [ 664.224512][T14479] ? __pfx_do_filp_open+0x10/0x10 [ 664.224597][T14479] ? alloc_fd+0x471/0x7d0 [ 664.224659][T14479] do_sys_openat2+0x11b/0x1d0 [ 664.224698][T14479] ? __pfx_do_sys_openat2+0x10/0x10 [ 664.224764][T14479] __x64_sys_openat+0x174/0x210 [ 664.224805][T14479] ? __pfx___x64_sys_openat+0x10/0x10 [ 664.224867][T14479] do_syscall_64+0xcd/0x490 [ 664.224917][T14479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.224946][T14479] RIP: 0033:0x7f554898e929 [ 664.224971][T14479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.225006][T14479] RSP: 002b:00007f554981a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 664.225035][T14479] RAX: ffffffffffffffda RBX: 00007f5548bb5fa0 RCX: 00007f554898e929 [ 664.225059][T14479] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 664.225078][T14479] RBP: 00007f5548a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 664.225096][T14479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.225118][T14479] R13: 0000000000000000 R14: 00007f5548bb5fa0 R15: 00007ffcc96e36a8 [ 664.225155][T14479] [ 664.476173][T14477] ERROR: Out of memory at tomoyo_memory_ok. [ 664.714282][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 664.724326][T14487] openvswitch: HfR: Dropping previously announced user features [ 665.423258][T14508] ERROR: Out of memory at tomoyo_memory_ok. [ 666.666813][T14533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2133'. [ 666.745966][T14534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2133'. [ 667.736047][T14546] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 3 [ 671.423842][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2148'. [ 671.456593][T14601] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2148'. [ 672.260263][T14616] vhci_hcd: invalid port number 16 [ 672.265553][T14616] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 674.367206][T14647] random: crng reseeded on system resumption [ 674.426090][T13856] ERROR: Out of memory at tomoyo_memory_ok. [ 674.442059][T13803] ERROR: Out of memory at tomoyo_memory_ok. [ 676.162392][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.179859][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 676.203774][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.210132][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 676.228320][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.240663][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 676.252532][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.261819][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 676.316237][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2168'. [ 676.659534][T14691] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 678.977584][T14725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.175166][T14761] FAULT_INJECTION: forcing a failure. [ 680.175166][T14761] name failslab, interval 1, probability 0, space 0, times 0 [ 680.216247][T14339] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 680.224205][T14339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 680.237405][T14339] CPU: 0 UID: 0 PID: 14339 Comm: kworker/u11:2 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 680.237445][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 680.237463][T14339] Workqueue: hci3 hci_rx_work [ 680.237514][T14339] Call Trace: [ 680.237524][T14339] [ 680.237536][T14339] dump_stack_lvl+0x16c/0x1f0 [ 680.237583][T14339] sysfs_warn_dup+0x7f/0xa0 [ 680.237626][T14339] sysfs_create_dir_ns+0x24b/0x2b0 [ 680.237671][T14339] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 680.237709][T14339] ? find_held_lock+0x2b/0x80 [ 680.237747][T14339] ? do_raw_spin_unlock+0x172/0x230 [ 680.237776][T14339] kobject_add_internal+0x2c4/0x9b0 [ 680.237810][T14339] kobject_add+0x16e/0x240 [ 680.237837][T14339] ? __pfx_kobject_add+0x10/0x10 [ 680.237869][T14339] ? do_raw_spin_unlock+0x172/0x230 [ 680.237897][T14339] ? kobject_put+0xab/0x5a0 [ 680.237951][T14339] device_add+0x288/0x1a70 [ 680.238060][T14339] ? __pfx_dev_set_name+0x10/0x10 [ 680.238159][T14339] ? __pfx_device_add+0x10/0x10 [ 680.238239][T14339] ? mgmt_send_event_skb+0x2fb/0x460 [ 680.238396][T14339] hci_conn_add_sysfs+0x17e/0x230 [ 680.238487][T14339] le_conn_complete_evt+0x1075/0x1d70 [ 680.238615][T14339] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 680.238719][T14339] ? bt_warn+0xe4/0x120 [ 680.238807][T14339] ? __pfx_bt_warn+0x10/0x10 [ 680.238911][T14339] hci_le_conn_complete_evt+0x23c/0x370 [ 680.239018][T14339] hci_le_meta_evt+0x357/0x5e0 [ 680.239151][T14339] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 680.239274][T14339] hci_event_packet+0x685/0x11c0 [ 680.239494][T14339] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 680.239655][T14339] ? __pfx_hci_event_packet+0x10/0x10 [ 680.239778][T14339] ? kcov_remote_start+0x3c9/0x6d0 [ 680.239897][T14339] ? lockdep_hardirqs_on+0x7c/0x110 [ 680.240008][T14339] hci_rx_work+0x2c5/0x16b0 [ 680.240122][T14339] ? rcu_is_watching+0x12/0xc0 [ 680.240192][T14339] process_one_work+0x9cf/0x1b70 [ 680.240314][T14339] ? __pfx_process_one_work+0x10/0x10 [ 680.240567][T14339] ? assign_work+0x1a0/0x250 [ 680.240677][T14339] worker_thread+0x6c8/0xf10 [ 680.240822][T14339] ? __kthread_parkme+0x19e/0x250 [ 680.240927][T14339] ? __pfx_worker_thread+0x10/0x10 [ 680.241046][T14339] kthread+0x3c2/0x780 [ 680.241153][T14339] ? __pfx_kthread+0x10/0x10 [ 680.241254][T14339] ? rcu_is_watching+0x12/0xc0 [ 680.241319][T14339] ? __pfx_kthread+0x10/0x10 [ 680.241482][T14339] ret_from_fork+0x5d7/0x6f0 [ 680.241613][T14339] ? __pfx_kthread+0x10/0x10 [ 680.241742][T14339] ret_from_fork_asm+0x1a/0x30 [ 680.241847][T14339] [ 680.242027][T14339] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 680.257903][T14761] CPU: 1 UID: 0 PID: 14761 Comm: syz.1.2185 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 680.257954][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 680.257974][T14761] Call Trace: [ 680.257987][T14761] [ 680.257999][T14761] dump_stack_lvl+0x16c/0x1f0 [ 680.258058][T14761] should_fail_ex+0x512/0x640 [ 680.258106][T14761] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 680.258164][T14761] should_failslab+0xc2/0x120 [ 680.258200][T14761] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 680.258256][T14761] ? __alloc_skb+0x2b2/0x380 [ 680.258310][T14761] __alloc_skb+0x2b2/0x380 [ 680.258357][T14761] ? __pfx___alloc_skb+0x10/0x10 [ 680.258403][T14761] ? rcu_is_watching+0x12/0xc0 [ 680.258441][T14761] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 680.258492][T14761] ? audit_log_start+0x2c5/0x7f0 [ 680.258542][T14761] audit_log_start+0x2ea/0x7f0 [ 680.258602][T14761] ? __pfx_audit_log_start+0x10/0x10 [ 680.258663][T14761] ? integrity_audit_msg+0x41/0x60 [ 680.258716][T14761] integrity_audit_message+0x10c/0x580 [ 680.258767][T14761] ? __pfx_integrity_audit_message+0x10/0x10 [ 680.258816][T14761] ? __pfx_ima_add_template_entry+0x10/0x10 [ 680.258873][T14761] integrity_audit_msg+0x41/0x60 [ 680.258923][T14761] ima_add_violation+0x1b4/0x3d0 [ 680.258961][T14761] ? __pfx_ima_add_violation+0x10/0x10 [ 680.258992][T14761] ? ima_d_path+0x12b/0x2a0 [ 680.259025][T14761] ? __pfx_ima_d_path+0x10/0x10 [ 680.259066][T14761] ? lockdep_init_map_type+0x5c/0x280 [ 680.259117][T14761] ? ima_inode_get+0x39e/0x580 [ 680.259172][T14761] process_measurement+0x1783/0x23e0 [ 680.259236][T14761] ? __pfx_process_measurement+0x10/0x10 [ 680.259295][T14761] ? futex_unqueue+0x133/0x2c0 [ 680.259381][T14761] ? __futex_hash.constprop.0+0x1e9/0x440 [ 680.259429][T14761] ima_file_mmap+0x1b1/0x1d0 [ 680.259481][T14761] ? __pfx_ima_file_mmap+0x10/0x10 [ 680.259528][T14761] ? __lock_acquire+0x622/0x1c90 [ 680.259595][T14761] security_mmap_file+0x88c/0x990 [ 680.259643][T14761] vm_mmap_pgoff+0xec/0x450 [ 680.259683][T14761] ? find_held_lock+0x2b/0x80 [ 680.259717][T14761] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 680.259760][T14761] ? __fget_files+0x20e/0x3c0 [ 680.259835][T14761] ksys_mmap_pgoff+0x32c/0x5c0 [ 680.259883][T14761] __x64_sys_mmap+0x125/0x190 [ 680.259942][T14761] do_syscall_64+0xcd/0x490 [ 680.260002][T14761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.260038][T14761] RIP: 0033:0x7f554898e929 [ 680.260067][T14761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.260103][T14761] RSP: 002b:00007f554981a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 680.260136][T14761] RAX: ffffffffffffffda RBX: 00007f5548bb5fa0 RCX: 00007f554898e929 [ 680.260161][T14761] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 680.260182][T14761] RBP: 00007f5548a10b39 R08: 0000000000000003 R09: 0000000000000000 [ 680.260205][T14761] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 680.260226][T14761] R13: 0000000000000000 R14: 00007f5548bb5fa0 R15: 00007ffcc96e36a8 [ 680.260273][T14761] [ 680.303278][T14761] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 680.307001][T14339] Bluetooth: hci3: failed to register connection device [ 680.884092][T14761] audit: out of memory in audit_log_start [ 680.891423][ T30] audit: type=1800 audit(4294967358.091:35): pid=14761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2185" name="file0" dev="tmpfs" ino=2737 res=0 errno=0 [ 681.514733][T14772] QAT: Invalid ioctl 21531 [ 681.927372][T14783] ERROR: Out of memory at tomoyo_memory_ok. [ 682.317535][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 682.455062][T14799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2196'. [ 682.860183][T14796] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma? [ 683.139552][T14812] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 683.972394][T14830] random: crng reseeded on system resumption [ 684.948527][T14854] Invalid ELF header magic: != ELF [ 685.191551][T14856] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2207'. [ 685.894135][T14872] random: crng reseeded on system resumption [ 686.330736][T14885] ALSA: mixer_oss: invalid OSS volume '' [ 687.472679][T14902] FAULT_INJECTION: forcing a failure. [ 687.472679][T14902] name failslab, interval 1, probability 0, space 0, times 0 [ 687.557462][T14902] CPU: 0 UID: 2054 PID: 14902 Comm: syz.0.2215 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 687.557506][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 687.557523][T14902] Call Trace: [ 687.557532][T14902] [ 687.557543][T14902] dump_stack_lvl+0x16c/0x1f0 [ 687.557593][T14902] should_fail_ex+0x512/0x640 [ 687.557634][T14902] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 687.557688][T14902] should_failslab+0xc2/0x120 [ 687.557717][T14902] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 687.557776][T14902] ? trace_kmem_cache_alloc+0x28/0xc0 [ 687.557806][T14902] ? key_alloc+0x43e/0x1330 [ 687.557846][T14902] kmemdup_noprof+0x29/0x60 [ 687.557890][T14902] key_alloc+0x43e/0x1330 [ 687.557941][T14902] ? __pfx_key_alloc+0x10/0x10 [ 687.557976][T14902] ? __pfx_key_default_cmp+0x10/0x10 [ 687.558018][T14902] ? __pfx_keyring_search_iterator+0x10/0x10 [ 687.558065][T14902] keyring_alloc+0x44/0xc0 [ 687.558109][T14902] look_up_user_keyrings+0x46d/0x760 [ 687.558147][T14902] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 687.558182][T14902] ? __pfx_futex_wake+0x10/0x10 [ 687.558235][T14902] lookup_user_key+0x1a3/0x1300 [ 687.558286][T14902] ? __pfx_lookup_user_key+0x10/0x10 [ 687.558317][T14902] ? do_futex+0x122/0x350 [ 687.558361][T14902] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 687.558403][T14902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 687.558445][T14902] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 687.558489][T14902] keyctl_keyring_clear+0x24/0x1a0 [ 687.558518][T14902] __do_sys_keyctl+0x355/0x590 [ 687.558550][T14902] do_syscall_64+0xcd/0x490 [ 687.558596][T14902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.558624][T14902] RIP: 0033:0x7f0b8558e929 [ 687.558646][T14902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.558672][T14902] RSP: 002b:00007f0b864d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 687.558698][T14902] RAX: ffffffffffffffda RBX: 00007f0b857b5fa0 RCX: 00007f0b8558e929 [ 687.558716][T14902] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 687.558741][T14902] RBP: 00007f0b85610b39 R08: 0000000000000008 R09: 0000000000000000 [ 687.558758][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.558776][T14902] R13: 0000000000000000 R14: 00007f0b857b5fa0 R15: 00007ffe3c389818 [ 687.558811][T14902] [ 688.720958][T14931] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2222'. [ 688.730503][T14931] FAULT_INJECTION: forcing a failure. [ 688.730503][T14931] name failslab, interval 1, probability 0, space 0, times 0 [ 688.743191][T14931] CPU: 0 UID: 0 PID: 14931 Comm: syz.1.2222 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 688.743220][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.743233][T14931] Call Trace: [ 688.743241][T14931] [ 688.743248][T14931] dump_stack_lvl+0x16c/0x1f0 [ 688.743286][T14931] should_fail_ex+0x512/0x640 [ 688.743318][T14931] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 688.743355][T14931] should_failslab+0xc2/0x120 [ 688.743376][T14931] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 688.743423][T14931] ? lockdep_rtnl_is_held+0x26/0x40 [ 688.743458][T14931] ? fib_trie_unmerge+0x281/0xcb0 [ 688.743493][T14931] fib_trie_unmerge+0x281/0xcb0 [ 688.743526][T14931] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 688.743550][T14931] ? __pfx___mutex_lock+0x10/0x10 [ 688.743588][T14931] fib_unmerge+0xf8/0x520 [ 688.743611][T14931] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 688.743659][T14931] fib4_rule_configure+0x383/0x10c0 [ 688.743695][T14931] fib_newrule+0x35c/0x1e60 [ 688.743737][T14931] ? __pfx_fib_newrule+0x10/0x10 [ 688.743796][T14931] ? find_held_lock+0x2b/0x80 [ 688.743818][T14931] ? __pfx_fib_nl_newrule+0x10/0x10 [ 688.743850][T14931] ? __pfx_fib_nl_newrule+0x10/0x10 [ 688.743883][T14931] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 688.743918][T14931] ? __pfx_fib_nl_newrule+0x10/0x10 [ 688.743953][T14931] rtnetlink_rcv_msg+0x95b/0xe90 [ 688.743989][T14931] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 688.744029][T14931] ? __lock_acquire+0x622/0x1c90 [ 688.744063][T14931] netlink_rcv_skb+0x158/0x420 [ 688.744085][T14931] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 688.744121][T14931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 688.744153][T14931] ? netlink_deliver_tap+0x1ae/0xd30 [ 688.744187][T14931] ? is_vmalloc_addr+0x86/0xa0 [ 688.744223][T14931] netlink_unicast+0x58a/0x850 [ 688.744248][T14931] ? __pfx_netlink_unicast+0x10/0x10 [ 688.744277][T14931] netlink_sendmsg+0x8d1/0xdd0 [ 688.744303][T14931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.744335][T14931] ____sys_sendmsg+0xa98/0xc70 [ 688.744359][T14931] ? copy_msghdr_from_user+0x10a/0x160 [ 688.744391][T14931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.744412][T14931] ? __pfx___schedule+0x10/0x10 [ 688.744443][T14931] ? kfree+0x24f/0x4d0 [ 688.744476][T14931] ___sys_sendmsg+0x134/0x1d0 [ 688.744509][T14931] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.744565][T14931] ? __pfx___might_resched+0x10/0x10 [ 688.744594][T14931] __sys_sendmmsg+0x200/0x420 [ 688.744635][T14931] ? __pfx___sys_sendmmsg+0x10/0x10 [ 688.744675][T14931] ? __pfx_do_futex+0x10/0x10 [ 688.744717][T14931] ? xfd_validate_state+0x61/0x180 [ 688.744753][T14931] __x64_sys_sendmmsg+0x9c/0x100 [ 688.744785][T14931] ? lockdep_hardirqs_on+0x7c/0x110 [ 688.744815][T14931] do_syscall_64+0xcd/0x490 [ 688.744849][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.744872][T14931] RIP: 0033:0x7f554898e929 [ 688.744889][T14931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.744909][T14931] RSP: 002b:00007f554981a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 688.744929][T14931] RAX: ffffffffffffffda RBX: 00007f5548bb5fa0 RCX: 00007f554898e929 [ 688.744943][T14931] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005 [ 688.744956][T14931] RBP: 00007f5548a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 688.744969][T14931] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 688.744982][T14931] R13: 0000000000000000 R14: 00007f5548bb5fa0 R15: 00007ffcc96e36a8 [ 688.745008][T14931] [ 689.484063][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 690.708409][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.720811][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.750756][T14953] Process accounting resumed [ 694.191803][T15018] ima: policy update failed [ 694.199809][T15018] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2238'. [ 694.210311][ T30] audit: type=1802 audit(4294967371.397:36): pid=15018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2238" res=0 errno=0 [ 695.319145][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2243'. [ 695.362567][T15039] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2243'. [ 695.518843][T15043] random: crng reseeded on system resumption [ 696.755080][T15063] openvswitch: netlink: IP tunnel dst address not specified [ 697.997118][T15080] can: request_module (can-proto-3) failed. [ 698.886064][T15089] FAULT_INJECTION: forcing a failure. [ 698.886064][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 698.902624][T15089] CPU: 0 UID: 0 PID: 15089 Comm: syz.1.2254 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 698.902665][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.902683][T15089] Call Trace: [ 698.902692][T15089] [ 698.902704][T15089] dump_stack_lvl+0x16c/0x1f0 [ 698.902760][T15089] should_fail_ex+0x512/0x640 [ 698.902802][T15089] ? __kmalloc_noprof+0xbf/0x510 [ 698.902847][T15089] ? kvm_dev_ioctl+0x12c4/0x1ad0 [ 698.902873][T15089] should_failslab+0xc2/0x120 [ 698.902900][T15089] __kmalloc_noprof+0xd2/0x510 [ 698.902950][T15089] kvm_dev_ioctl+0x12c4/0x1ad0 [ 698.902982][T15089] ? find_held_lock+0x2b/0x80 [ 698.903013][T15089] ? hook_file_ioctl_common+0x145/0x410 [ 698.903045][T15089] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 698.903084][T15089] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 698.903113][T15089] __x64_sys_ioctl+0x18b/0x210 [ 698.903150][T15089] do_syscall_64+0xcd/0x490 [ 698.903195][T15089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.903222][T15089] RIP: 0033:0x7f554898e929 [ 698.903244][T15089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.903272][T15089] RSP: 002b:00007f554981a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.903299][T15089] RAX: ffffffffffffffda RBX: 00007f5548bb5fa0 RCX: 00007f554898e929 [ 698.903317][T15089] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 698.903334][T15089] RBP: 00007f5548a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 698.903351][T15089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.903368][T15089] R13: 0000000000000000 R14: 00007f5548bb5fa0 R15: 00007ffcc96e36a8 [ 698.903404][T15089] [ 699.550267][T15099] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2256'. [ 701.716702][T15133] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.2261: bg 1: bad block bitmap checksum [ 701.787364][T15133] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 5496 with max blocks 1 with error 74 [ 702.087090][T15133] EXT4-fs (sda1): This should not happen!! Data will be lost [ 702.087090][T15133] [ 702.658507][T15146] openvswitch: netlink: IPv4 tunnel dst address is zero [ 702.900317][T15146] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 703.327713][T15154] [ 703.330101][T15154] ====================================================== [ 703.337115][T15154] WARNING: possible circular locking dependency detected [ 703.344128][T15154] 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 Not tainted [ 703.351248][T15154] ------------------------------------------------------ [ 703.358296][T15154] syz.0.2267/15154 is trying to acquire lock: [ 703.364378][T15154] ffff8881433836c8 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 703.374222][T15154] [ 703.374222][T15154] but task is already holding lock: [ 703.381591][T15154] ffff888143383190 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 703.392867][T15154] [ 703.392867][T15154] which lock already depends on the new lock. [ 703.392867][T15154] [ 703.403285][T15154] [ 703.403285][T15154] the existing dependency chain (in reverse order) is: [ 703.412300][T15154] [ 703.412300][T15154] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 703.420921][T15154] blk_alloc_queue+0x619/0x760 [ 703.426233][T15154] blk_mq_alloc_queue+0x175/0x290 [ 703.431818][T15154] __blk_mq_alloc_disk+0x29/0x120 [ 703.437384][T15154] nbd_dev_add+0x4a0/0xbc0 [ 703.442341][T15154] nbd_init+0x181/0x320 [ 703.447024][T15154] do_one_initcall+0x120/0x6e0 [ 703.452313][T15154] kernel_init_freeable+0x5c2/0x900 [ 703.458046][T15154] kernel_init+0x1c/0x2b0 [ 703.462898][T15154] ret_from_fork+0x5d7/0x6f0 [ 703.468022][T15154] ret_from_fork_asm+0x1a/0x30 [ 703.473320][T15154] [ 703.473320][T15154] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 703.480545][T15154] fs_reclaim_acquire+0x102/0x150 [ 703.486113][T15154] prepare_alloc_pages+0x162/0x610 [ 703.491757][T15154] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 703.498187][T15154] __alloc_pages_noprof+0xb/0x1b0 [ 703.503743][T15154] pcpu_populate_chunk+0x110/0xb00 [ 703.509392][T15154] pcpu_alloc_noprof+0x86a/0x1470 [ 703.515033][T15154] xt_percpu_counter_alloc+0x13e/0x1b0 [ 703.521023][T15154] find_check_entry.constprop.0+0xbf/0xa20 [ 703.527366][T15154] translate_table+0xd0b/0x17b0 [ 703.532747][T15154] ip6t_register_table+0x102/0x430 [ 703.538394][T15154] ip6table_raw_table_init+0x63/0x90 [ 703.544210][T15154] xt_find_table_lock+0x2e4/0x520 [ 703.549760][T15154] xt_request_find_table_lock+0x28/0xf0 [ 703.555835][T15154] get_info+0x190/0x620 [ 703.560525][T15154] do_ip6t_get_ctl+0x169/0xa50 [ 703.565825][T15154] nf_getsockopt+0x79/0xe0 [ 703.570791][T15154] ipv6_getsockopt+0x1f7/0x280 [ 703.576096][T15154] tcp_getsockopt+0xa1/0x100 [ 703.581266][T15154] do_sock_getsockopt+0x3ff/0x800 [ 703.586927][T15154] __sys_getsockopt+0x123/0x1b0 [ 703.592328][T15154] __x64_sys_getsockopt+0xbd/0x160 [ 703.597990][T15154] do_syscall_64+0xcd/0x490 [ 703.603045][T15154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.609736][T15154] [ 703.609736][T15154] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 703.617484][T15154] __mutex_lock+0x199/0xb90 [ 703.622521][T15154] pcpu_alloc_noprof+0xb4c/0x1470 [ 703.628081][T15154] sbitmap_init_node+0x2fd/0x770 [ 703.633547][T15154] sbitmap_queue_init_node+0x41/0x560 [ 703.639439][T15154] blk_mq_init_tags+0x12d/0x2b0 [ 703.644823][T15154] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 703.650903][T15154] blk_mq_init_sched+0x30c/0x610 [ 703.656400][T15154] elevator_switch+0x1e1/0x7f0 [ 703.661709][T15154] elevator_change+0x2ac/0x400 [ 703.666998][T15154] elevator_set_default+0x292/0x320 [ 703.672723][T15154] blk_register_queue+0x393/0x4f0 [ 703.678273][T15154] __add_disk+0x74a/0xf00 [ 703.683224][T15154] add_disk_fwnode+0x13f/0x5d0 [ 703.688527][T15154] nbd_dev_add+0x791/0xbc0 [ 703.693480][T15154] nbd_init+0x181/0x320 [ 703.698165][T15154] do_one_initcall+0x120/0x6e0 [ 703.703458][T15154] kernel_init_freeable+0x5c2/0x900 [ 703.709187][T15154] kernel_init+0x1c/0x2b0 [ 703.714044][T15154] ret_from_fork+0x5d7/0x6f0 [ 703.719171][T15154] ret_from_fork_asm+0x1a/0x30 [ 703.724463][T15154] [ 703.724463][T15154] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 703.732290][T15154] __lock_acquire+0x126f/0x1c90 [ 703.737675][T15154] lock_acquire+0x179/0x350 [ 703.742716][T15154] __mutex_lock+0x199/0xb90 [ 703.747862][T15154] queue_requests_store+0x1c7/0x310 [ 703.753685][T15154] queue_attr_store+0x279/0x320 [ 703.759078][T15154] sysfs_kf_write+0xef/0x150 [ 703.764207][T15154] kernfs_fop_write_iter+0x351/0x510 [ 703.770026][T15154] iter_file_splice_write+0x91c/0x1150 [ 703.776027][T15154] direct_splice_actor+0x18f/0x6c0 [ 703.781691][T15154] splice_direct_to_actor+0x345/0xa30 [ 703.787593][T15154] do_splice_direct+0x174/0x240 [ 703.792972][T15154] do_sendfile+0xb06/0xe50 [ 703.797920][T15154] __x64_sys_sendfile64+0x1d8/0x220 [ 703.803649][T15154] do_syscall_64+0xcd/0x490 [ 703.808696][T15154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.815107][T15154] [ 703.815107][T15154] other info that might help us debug this: [ 703.815107][T15154] [ 703.825331][T15154] Chain exists of: [ 703.825331][T15154] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 703.825331][T15154] [ 703.839091][T15154] Possible unsafe locking scenario: [ 703.839091][T15154] [ 703.846548][T15154] CPU0 CPU1 [ 703.851916][T15154] ---- ---- [ 703.857283][T15154] lock(&q->q_usage_counter(io)#59); [ 703.862678][T15154] lock(fs_reclaim); [ 703.869182][T15154] lock(&q->q_usage_counter(io)#59); [ 703.877087][T15154] lock(&q->elevator_lock); [ 703.881686][T15154] [ 703.881686][T15154] *** DEADLOCK *** [ 703.881686][T15154] [ 703.889839][T15154] 5 locks held by syz.0.2267/15154: [ 703.895046][T15154] #0: ffff888036778428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 703.905103][T15154] #1: ffff8880352ad088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 703.914871][T15154] #2: ffff888026daeb48 (kn->active#185){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 703.924992][T15154] #3: ffff888143383190 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 703.936697][T15154] #4: ffff8881433831c8 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 703.948654][T15154] [ 703.948654][T15154] stack backtrace: [ 703.954543][T15154] CPU: 0 UID: 0 PID: 15154 Comm: syz.0.2267 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 703.954574][T15154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 703.954586][T15154] Call Trace: [ 703.954594][T15154] [ 703.954616][T15154] dump_stack_lvl+0x116/0x1f0 [ 703.954649][T15154] print_circular_bug+0x275/0x350 [ 703.954679][T15154] check_noncircular+0x14c/0x170 [ 703.954711][T15154] __lock_acquire+0x126f/0x1c90 [ 703.954741][T15154] ? __lock_acquire+0xb8a/0x1c90 [ 703.954771][T15154] lock_acquire+0x179/0x350 [ 703.954799][T15154] ? queue_requests_store+0x1c7/0x310 [ 703.954820][T15154] ? __pfx___might_resched+0x10/0x10 [ 703.954861][T15154] ? do_raw_spin_lock+0x12c/0x2b0 [ 703.954896][T15154] __mutex_lock+0x199/0xb90 [ 703.954928][T15154] ? queue_requests_store+0x1c7/0x310 [ 703.954948][T15154] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 703.954977][T15154] ? queue_requests_store+0x1c7/0x310 [ 703.954995][T15154] ? lockdep_hardirqs_on+0x7c/0x110 [ 703.955037][T15154] ? __pfx___mutex_lock+0x10/0x10 [ 703.955071][T15154] ? __pfx_autoremove_wake_function+0x10/0x10 [ 703.955102][T15154] ? queue_requests_store+0x1c7/0x310 [ 703.955120][T15154] queue_requests_store+0x1c7/0x310 [ 703.955139][T15154] ? __pfx_queue_requests_store+0x10/0x10 [ 703.955160][T15154] ? __mutex_trylock_common+0xe9/0x250 [ 703.955191][T15154] ? __pfx_queue_requests_store+0x10/0x10 [ 703.955210][T15154] queue_attr_store+0x279/0x320 [ 703.955244][T15154] ? __pfx_queue_attr_store+0x10/0x10 [ 703.955275][T15154] ? __lock_acquire+0x622/0x1c90 [ 703.955310][T15154] ? find_held_lock+0x2b/0x80 [ 703.955331][T15154] ? sysfs_file_kobj+0xe4/0x290 [ 703.955358][T15154] ? __pfx_queue_attr_store+0x10/0x10 [ 703.955390][T15154] sysfs_kf_write+0xef/0x150 [ 703.955415][T15154] kernfs_fop_write_iter+0x351/0x510 [ 703.955438][T15154] ? __pfx_sysfs_kf_write+0x10/0x10 [ 703.955464][T15154] iter_file_splice_write+0x91c/0x1150 [ 703.955500][T15154] ? __pfx_iter_file_splice_write+0x10/0x10 [ 703.955531][T15154] ? __pfx_copy_splice_read+0x10/0x10 [ 703.955569][T15154] ? __pfx_iter_file_splice_write+0x10/0x10 [ 703.955598][T15154] direct_splice_actor+0x18f/0x6c0 [ 703.955628][T15154] splice_direct_to_actor+0x345/0xa30 [ 703.955656][T15154] ? __pfx_direct_splice_actor+0x10/0x10 [ 703.955686][T15154] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 703.955718][T15154] do_splice_direct+0x174/0x240 [ 703.955744][T15154] ? __pfx_do_splice_direct+0x10/0x10 [ 703.955772][T15154] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 703.955808][T15154] ? rw_verify_area+0xcf/0x680 [ 703.955846][T15154] do_sendfile+0xb06/0xe50 [ 703.955877][T15154] ? __pfx_do_sendfile+0x10/0x10 [ 703.955904][T15154] ? handle_mm_fault+0x2ab/0xd10 [ 703.955934][T15154] ? __x64_sys_futex+0x1e0/0x4c0 [ 703.955960][T15154] ? __x64_sys_futex+0x1e9/0x4c0 [ 703.955988][T15154] __x64_sys_sendfile64+0x1d8/0x220 [ 703.956026][T15154] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 703.956052][T15154] do_syscall_64+0xcd/0x490 [ 703.956088][T15154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.956111][T15154] RIP: 0033:0x7f0b8558e929 [ 703.956129][T15154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.956152][T15154] RSP: 002b:00007f0b864d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 703.956173][T15154] RAX: ffffffffffffffda RBX: 00007f0b857b5fa0 RCX: 00007f0b8558e929 [ 703.956188][T15154] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 703.956201][T15154] RBP: 00007f0b85610b39 R08: 0000000000000000 R09: 0000000000000000 [ 703.956215][T15154] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 703.956229][T15154] R13: 0000000000000000 R14: 00007f0b857b5fa0 R15: 00007ffe3c389818 [ 703.956250][T15154] [ 713.013563][T13793] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:2: bg 2: bad block bitmap checksum [ 713.025869][T13793] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 5498 with max blocks 1 with error 74 [ 713.038737][T13793] EXT4-fs (sda1): This should not happen!! Data will be lost [ 713.038737][T13793] [ 713.048790][T13793] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 1 with error 117 [ 713.062057][T13793] EXT4-fs (sda1): This should not happen!! Data will be lost [ 713.062057][T13793]