last executing test programs: 5m41.595022152s ago: executing program 0 (id=1486): setresgid$auto(0x81, 0x800000a0, 0x8) unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) mmap$auto(0x1, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0xe4ad) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC0\x00', 0x1c100, 0x0) r1 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r1, &(0x7f0000000580)="b7a53caf1b305860206af11a0ec35e7e5c46caffe279de8e9945d6e37dfaf9058103dbe387321e23d5f21c271069baa482db442a5748c1fec17e92c29d2df967f9c1ce0bd79ec3d67c9f0aff55674e238d4b83e2372ae3a03950aaa641f736e6f9065e5b9af9e2de49f8a01693aa28b5e53dd7d970575e42c6720cff2f6f9bf902791bf83abd9acf9dc3968a36b1851ffc6497e410d51f340b92b74f972cd68de180f42bcfc5ac64a8977e242b9ca63c58d603fea4fad558f0071db6e24de9bda2b835957f69a06c0d0000000000000000d4b8db86be62388110e03ef34b1fadaffc761c3fa220dac9bf9e94d03a0fe70ca30710a7b237632954060b9ebd2707", 0x4e00) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={"0fb58e6598c12c54f33345e7ab1330e6da01d8fa602c2e7693dbe0654316409c", 0x3, 0x8eb, 0x9, 0xfffffffffffffffb, 0x400, 0xffffffffffffffff}) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000140)={@sival_ptr=&(0x7f00000004c0)="dccb3bd5f443b4fc794015f7090d6b378fd638d4560ab8ace0c43ffc316df80d93b59033db0714970bc7b54c8d74325932209a44e1b1a29ce556a965955dcb1ced8654380173a4aa18b72c6589ffc8d4c6850b1b6b00c5f293673e29203b087b502b1522ac121ad16b3213bb21778963b39bad2043ac351d14e3fc831f4ce5ec55b9d07601619ca55908c775785560f1de2caee2f477788579abe49b0e0073d9d283c69493813ef464df374858a834ffb49feb8ed8e8d80837f602537f3776286114723151d21e961680ee7c6175f777591ac5112c2c34bfe0736778319e75f951f299aadcb399", @raw=0x5, 0xf066, @_tid=r2}, &(0x7f00000001c0)=0x2) r3 = socketpair$auto(0xe7, 0x5, 0x7, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000680)="d85db58add455520923d0b61ff63e0c16649c9110a6f401964458b684635b6c6d757aca8a13edcdbf25fd9abe4fcc10d0ec0c96a0296ff804ae24ea4f6d07b647a1e224c65abbe8e05fad0976923129c5be4363abea03a0dd4c41b51ffda568bc3a631977f7e1e596ed49907f20db27033ee9e57a310b37f31bac991aa7d43eb70672d814f970e0ad952ac7299918d04176c19a9ad5d00a9559229163cc7757db8fafec46a459bc591bcda2b1b2d5638b852854d6990da7729363c6a0d8dda133116d4b8accdc4a17e450bf48e788c303fd0061e", 0x10000}, 0xa, 0x0) prctl$auto(0x400, 0x8, r4, 0x7, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB="01"], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x20058894) socket$nl_generic(0x11, 0x3, 0x10) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r5 = socket(0x10, 0x2, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f00000003c0)=""/231, 0xe7) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) 5m37.429846498s ago: executing program 0 (id=1500): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd37, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x8000, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x22800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8800, 0x0) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) socket(0x10, 0x2, 0xc) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 5m35.749527732s ago: executing program 0 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xe, &(0x7f0000000180)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', 0x7) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x2, 0x6, 0x3f) unshare$auto(0x40000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000d00), r5) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) creat$auto(&(0x7f0000000040)='./file0\x00', 0x7) socket(0x1d, 0x2, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) setgroups$auto(0xe32, 0x0) 5m31.88058005s ago: executing program 0 (id=1509): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x22181, 0x0) close_range$auto(0x2, 0xa, 0x0) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) 5m24.878733849s ago: executing program 0 (id=1529): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800c0002001d000000000000040c00060009000000000000008536"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) capset$auto(&(0x7f0000000040)={0x4}, &(0x7f0000000080)={0xaa, 0x2, 0x7}) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.weight\x00', 0x321401, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x5, 0x0) setsockopt$auto(r3, 0x0, 0x2a, 0x0, 0x108) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), r0) close_range$auto(r2, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_CREATE_VM(r4, 0xc048aeca, 0x0) 5m21.37843416s ago: executing program 0 (id=1540): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x7) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/dbroot\x00', 0x410100, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x3, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x67a8c3, 0x0) statx$auto(r1, 0x0, 0x6d7, 0x31f, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x529e00, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0xaeb7, 0x0) 5m6.003397491s ago: executing program 32 (id=1540): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x7) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/dbroot\x00', 0x410100, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x3, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x67a8c3, 0x0) statx$auto(r1, 0x0, 0x6d7, 0x31f, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x529e00, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0xaeb7, 0x0) 3m54.50309725s ago: executing program 1 (id=1836): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0xffffffffffffffff, 0x12, &(0x7f00000003c0)={@_si_pad}) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xffffffffffff7ffd, 0xd4, 0x1, 0x6, 0x0, 0xd906, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0xfffffffffffff842, 0x6, 0x7ccb, 0x6, 0x804}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3d, 0x1, 0x4, 0x2000006, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x15, 0x3, 0x40000) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@raw_tracepoint={0xfffffffffffffffb, r3, 0x0, 0x1}, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2, 0x400008, 0x4, 0x9b72, r2, 0x8000) socket(0x2, 0x1, 0x84) 3m53.834057313s ago: executing program 1 (id=1840): mmap$auto(0xfffffffffffffffe, 0x2020009, 0x1, 0xeb5, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0x4) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x55) write$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = pidfd_open$auto(0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto_ftrace_enable_fops_trace_events(r1, &(0x7f0000000440)="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", 0x1000) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8e, r2) 3m53.457314565s ago: executing program 1 (id=1842): kexec_load$auto(0x8134a6c, 0x1, &(0x7f0000000000)={@kbuf=0x0, 0x10000, 0x81, 0x7}, 0xff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x183e02, 0x0) (async) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x183e02, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000500)={0x40000000008, 0x6, 0x5, 0x0, 0x401, 0x80000000, "00f0ffffff00", 0x8, 0x2, 0x82, 0x5, 0x4, 0x2, 0x3}) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r1, 0x0, 0x2) getrlimit$auto(0x3, 0x0) (async) getrlimit$auto(0x3, 0x0) fdatasync$auto(r1) (async) fdatasync$auto(r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) (async) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) (async) r3 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) getsockopt$auto_SO_PEEK_OFF(r3, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xe0, 0x9b72, r5, 0x8000) (async) mmap$auto(0x0, 0x400004, 0xe0, 0x9b72, r5, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="13002ebd7000dddb6f3469dd000008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioctl$auto(r4, 0x9, r6) ioctl$auto_FS_IOC_GETFSUUID(r5, 0x80111500, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) 3m52.57593271s ago: executing program 1 (id=1848): mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/video42/power/control\x00', 0xc2902, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x90481, 0x0) write$auto(0x3, 0x0, 0xffd8) 3m52.396061835s ago: executing program 1 (id=1849): r0 = socket(0x29, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x24004001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="72010000", @ANYRES64=r0], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x6}, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, r1, 0xfffffffc) r2 = socket(0x11, 0x2, 0x2) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11ACKFailureCount\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_FLUSH(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14180962a04933eacee51c000000", @ANYRES16=r4, @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @private=0xa010100}, 0x6a) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400, 0x0) epoll_create$auto(0x20003f) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r5 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101580, 0x15e) ioctl$sock_SIOCGIFINDEX(r5, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) mmap$auto(0x3, 0x202020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) 3m52.210503787s ago: executing program 1 (id=1851): mmap$auto(0x0, 0x200, 0x0, 0xeb1, 0x401, 0x7ffd) r0 = socket(0xa, 0x2, 0x73) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(r0, 0x0, 0x9, 0xb7a) mmap$auto(0x0, 0x200, 0x0, 0xeb1, 0x401, 0x7ffd) (async) socket(0xa, 0x2, 0x73) (async) clock_gettime$auto(0x1, 0x0) (async) sendmmsg$auto(r0, 0x0, 0x9, 0xb7a) (async) 3m37.065266855s ago: executing program 33 (id=1851): mmap$auto(0x0, 0x200, 0x0, 0xeb1, 0x401, 0x7ffd) r0 = socket(0xa, 0x2, 0x73) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(r0, 0x0, 0x9, 0xb7a) mmap$auto(0x0, 0x200, 0x0, 0xeb1, 0x401, 0x7ffd) (async) socket(0xa, 0x2, 0x73) (async) clock_gettime$auto(0x1, 0x0) (async) sendmmsg$auto(r0, 0x0, 0x9, 0xb7a) (async) 2m2.977474569s ago: executing program 4 (id=2256): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r0 = socket(0x10, 0x2, 0xf) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x4, 0x5, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd=r0, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) 2m2.580037271s ago: executing program 4 (id=2257): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r2 = socket(0x10, 0x2, 0x4) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r6, 0x7fd, 0x6) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x20000, 0x0) ioctl$auto(r7, 0x802064b6, r7) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0xa000, &(0x7f0000000780)=@bpf_attr_3={0xc9, 0x3, 0x3, 0x7, 0x89b, 0x5, 0x5004cf07, 0x1, 0x7, "dbaa956885c13cc72f2bcd63803c562b", r1, 0x6, r5, 0x9, 0x1, 0x3, 0xfffffff4, 0x2, 0x7, 0x5, @attach_prog_fd=r5, 0x4, 0x802, 0x10, 0xa, 0xe, 0xffffffffffffffff, r3}, 0x9f) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r8 = pidfd_open$auto(0x1, 0x0) setns(r8, 0x0) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setfsuid$auto(0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r10 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r10, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2c, 0x1, 0x0) 2m0.791951602s ago: executing program 4 (id=2260): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1ac}}, 0x40000) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff004}}) (async, rerun: 64) mmap$auto(0x0, 0x2024009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 64) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/dma\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x100000001, 0x3) ioctl$auto_BCH_IOCTL_READ_SUPER(0xffffffffffffffff, 0x4020bc0c, &(0x7f0000000000)={0x3, 0x0, 0x3ff, 0x8, 0xc54}) 2m0.416867068s ago: executing program 4 (id=2261): r0 = io_uring_setup$auto(0x6, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, r0, 0x8010) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x4, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x8, 0x6, 0x50b3019, 0x2c, 0x2c, 0x0, 0x2}) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netstat\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0xffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r3 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) setsockopt$auto_SO_SNDBUFFORCE(r3, 0xb350, 0x20, &(0x7f0000000100)='ns/mnt\x00', 0x8001) socket(0x9, 0x1, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0xce1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0xbb7f, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0x2, 0x80001, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(r4, 0x6, 0xd, 0x0, 0xeff) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 2m0.14205749s ago: executing program 4 (id=2262): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) epoll_create$auto(0x20003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8643, 0x14e) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000280)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x19, 0x4, 0x4, 0x809, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) pipe$auto(0x0) madvise$auto(0x0, 0x200007, 0x17) madvise$auto(0x100000000, 0x454, 0x9) madvise$auto(0x0, 0x200007, 0x19) 1m58.767547501s ago: executing program 4 (id=2264): membarrier$auto(0x2, 0x8000000000000000, 0x800) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x63c1, 0x7ff) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) read$auto(r0, 0x0, 0x800) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x202041, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x1a, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) ioctl$auto(r2, 0xc0285629, r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x80b01, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\xf4\x97\xff*\x8a\xeb+8A\x99\x17\xfc\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x4c0200, 0x0) r5 = getpid() ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f00000000c0)={0x5, 0x6, 0x1, @inferred=r5, &(0x7f0000000080)={@inferred, 0x4, 0x6, 0x4, "fab1a714d4e8023bb46a64b835b51af88afdeafaffd491b52c156fe3d4021d4e94c2ff81bd8da39aa44fac17", @raw=0xe0000100}, "c659491445a51b365f4e27e0b5d5f45157b60c95830c727cfc4f3d31beb5e1eec43735fd1b3784bbc591a7f61ea489070095"}) write$auto(r4, &(0x7f0000000000)='\x00', 0x5) 1m43.69615027s ago: executing program 34 (id=2264): membarrier$auto(0x2, 0x8000000000000000, 0x800) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x63c1, 0x7ff) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) read$auto(r0, 0x0, 0x800) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x202041, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x1a, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) ioctl$auto(r2, 0xc0285629, r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x80b01, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\xf4\x97\xff*\x8a\xeb+8A\x99\x17\xfc\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x4c0200, 0x0) r5 = getpid() ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f00000000c0)={0x5, 0x6, 0x1, @inferred=r5, &(0x7f0000000080)={@inferred, 0x4, 0x6, 0x4, "fab1a714d4e8023bb46a64b835b51af88afdeafaffd491b52c156fe3d4021d4e94c2ff81bd8da39aa44fac17", @raw=0xe0000100}, "c659491445a51b365f4e27e0b5d5f45157b60c95830c727cfc4f3d31beb5e1eec43735fd1b3784bbc591a7f61ea489070095"}) write$auto(r4, &(0x7f0000000000)='\x00', 0x5) 6.36842798s ago: executing program 6 (id=2641): r0 = waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x4, 0x2020009, 0x5, 0xeb2, r3, 0x8000) ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r4 = io_uring_setup$auto(0x6, 0x0) set_mempolicy$auto(0x401, &(0x7f0000000040)=0x8, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1000) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r6) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000001240)=ANY=[@ANYRES16=0x0, @ANYRES16=r7, @ANYBLOB="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", @ANYRES8=r1, @ANYRESDEC=r0], 0x134}, 0x1, 0x0, 0x0, 0x5}, 0x1) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="b5f70000", @ANYRES16=r9, @ANYBLOB="1b0026bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000002c0), 0x440, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@buf=&(0x7f0000000d80)="b623d2751b00fbfad2a6d1a6d09b5de74ab60bd7666cde9499615eb7a03982dfecd08c02032d", 0x2, 0x8000, 0x3000}, 0x4) 5.772587803s ago: executing program 5 (id=2645): ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={"37d3a2acd6cd6bfa28f8dbd4c85d8fe2d42866536d7e88307e827ce31725b9c7", 0x4, 0x800, 0x8000000, 0x6, 0x4, 0xffffffffffffffff}) r1 = prctl$auto_PR_SYS_DISPATCH_ON(0xc, 0x1, r0, 0x1, 0x80000001) fcntl$auto_F_GET_RW_HINT(r1, 0x40b, 0x9) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x100, 0x8) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x1, 0xe4) io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r1, 0x5, &(0x7f0000000080)="f1881d01dde60cb5164eda6976783ee6b0768bc7e2dc7d4d63355a8c08aadecffec7e04183bc7314099a35b02873238f5d1c6ee53ab4ac131739fb1a59829b0dd17ae4c623d3225efca2717d40e75a74e941dc5dafca0ef6899bde918c27171d02507ee880950fe9a9be302838407d8b562cc2efdf7d45e2286e1e7f0dcf42b48dff1dd0d495b2263c6031983b", 0x4) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x3, 0x4) read$auto(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1) ioctl$auto_FIBMAP(r1, 0x1, 0x3) waitid$auto_P_PGID(0x2, r0, &(0x7f0000000180)={@_si_pad}, 0x1, &(0x7f0000000200)={{0xbc2, 0x3}, {0x44, 0xb54c}, 0x7f, 0x7fff, 0xfffffffffffffffa, 0x1000, 0x7fffffff, 0x3, 0x8000000000000000, 0x7fff, 0x7, 0x5, 0x9, 0x0, 0x35b8, 0x8}) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000300), r1) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4008800) ioctl$auto_BLKTRACESTART2(r1, 0x1274, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000400)={0x4, 0x80000001}) ioctl$auto_SG_SET_TIMEOUT2(r1, 0x2201, &(0x7f0000000440)="c32c24873a644e33d0134f659f63dd40ae9adc4e198a64f735ff790e61c682842d2a56") r3 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000480), 0x200002, 0x0) close_range$auto(r1, r3, 0x1) r4 = ioctl$auto_TUNSETSNDBUF2(r1, 0x400454d4, &(0x7f00000004c0)=0x6) ioctl$auto_SG_GET_COMMAND_Q2(r4, 0x2270, &(0x7f0000000500)="1f7866d60aabf9c3a34f41f0bba4706dddc4ebc25d436631a0d517a760452ee803eb3758a4522e3d672105efd1b6c670a652e0f61b771f93e051221e44865d0c7b5a1c7a22483858b5b75c8232249ead8c7bc9133118c710b1b4b1d4298b08c23fce007dc924355ee5a8609984577a4d584e4d73dbb7f37dac583ad9de71be30e636abe24b39e9") r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snd/pcmC1D0p\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x1, 0xb9) fcntl$auto_F_OFD_SETLK(r5, 0x25, 0x800) close_range$auto(r3, r5, 0x2) membarrier$auto_MEMBARRIER_CMD_PRIVATE_EXPEDITED(0x8, 0x1dd3, 0xffff) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000640), r3) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x39}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000740), 0x101100, 0x0) pselect6$auto(0xfffffffd, &(0x7f0000000780)={[0x5, 0x401, 0x0, 0x6322, 0x10001, 0x3, 0x3, 0xfffffffffffffffa, 0x4, 0x4, 0x9, 0x4, 0x80, 0x9, 0x3, 0x3]}, &(0x7f0000000800)={[0xffffffff80000000, 0x1, 0xa1, 0x6a370486, 0xc, 0x4, 0x642, 0x80, 0x6, 0x1459a8cf, 0x7, 0xd, 0x2, 0x1, 0xffff, 0x5]}, &(0x7f0000000880)={[0xcd79, 0xffffffffffff35ce, 0xffff, 0x101, 0x2, 0x4, 0xa, 0x0, 0x2, 0x2, 0x8001, 0x9, 0x7ff, 0x9, 0x3, 0x3]}, &(0x7f0000000900)={0x0, 0x4}, &(0x7f0000000940)="d0a6d2d6b119770bbd754a75cdb90f7d064cd13aa78cba048806d25d17755c1a46ade5dcecb70007ab1fca1b521c67e400d13b52380362c4820e40cc5ff54f71d76e1ef07884fe64008b5f1c0f986f6a11576b01cb81482adb1be59539b912ab2198c05a5c668905530cd64279a4e88da617576cd9d7e9d1f45427cc08e3136202794cfc1febbac758666684e0a8b06721de15d8f072000e7c310e90ba6234024333c73a766aa6beea8808fcd96aac8145d8b707e0d1404e9270c8") setsockopt$auto_SO_RCVPRIORITY(r5, 0xffffff81, 0x52, &(0x7f0000000a00)='/proc/self/timens_offsets\x00', 0x10000) 5.658913924s ago: executing program 3 (id=2646): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000180)={@raw=0x6, "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"}) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x80805, 0x0) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x8000, 0x0, 0x7, 0x2, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0xfe}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x2e142, 0x4b) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f00000000c0), 0x410000, 0x0) 5.496988065s ago: executing program 5 (id=2647): socket(0x2, 0x2, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) pwritev2$auto(r0, &(0x7f0000001fc0)={0x0, 0x7}, 0x9, 0x2, 0x1aa1, 0x8) ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d5", 0x5}) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x108000, 0x800032, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getresgid$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) landlock_add_rule$auto(0xffffffffffffffff, 0x2, 0x0, 0xffff03a3) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000040), 0x329180, 0x0) r2 = socket(0x2, 0xa, 0x106) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, 0x0, 0x20008810) r3 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, 0x0, 0x28000, 0x0) read$auto_fops_atomic_t_ro_(r3, 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x900, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r1, 0x0, 0xc000) 5.199726235s ago: executing program 2 (id=2648): socket(0x2, 0x2, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) pwritev2$auto(r0, &(0x7f0000001fc0)={0x0, 0x7}, 0x9, 0x2, 0x1aa1, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0xffffffffffffffff, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="18000000", @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d5", 0x5}) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000040), 0x329180, 0x0) r6 = socket(0x2, 0xa, 0x106) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r6, 0x0, 0x20008810) r7 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, 0x0, 0x28000, 0x0) read$auto_fops_atomic_t_ro_(r7, 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x900, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r5, 0x0, 0xc000) 4.905688585s ago: executing program 3 (id=2649): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r0 = socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x13, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYRES8=r2], 0x24}, 0x1, 0x0, 0x0, 0x40448a4}, 0x20000851) ioctl$auto_FS_IOC_SETFLAGS(r1, 0x40086602, 0xec) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000001a80)={0x124c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x1004, 0xbd, "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"}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x6}, @NL80211_ATTR_NAN_FUNC={0x22b, 0xf0, 0x0, 0x1, [@typed={0x4, 0x122}, @nested={0xbc, 0xf, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @u32=0x80000000}, @nested={0x4, 0x50}, @nested={0x4, 0x2f}, @generic="3266977060c8e5e75b308774575a4817928660d2f9156eeec3f8f19dd8da9701c71a8b38590bb888b972064a50986f775cfe22b53da6eb173faecccb3652b0fbfb05420532ce8248969d314b324892de35ac94eab5df6210e3c726c58718f916e3a8738805846c887b1ba5be013376fa9cbe143f745382341958dd7a96fccfd0877450af5c6e808f9adf882c0025e4ac0941b889bfa46728c5078f89", @nested={0x4, 0x64}, @nested={0x4, 0x76}, @nested={0x4, 0x124}]}, @nested={0x18, 0x86, 0x0, 0x1, [@typed={0x13, 0x36, 0x0, 0x0, @str='/dev/vhost-net\x00'}]}, @generic="983dff4b7b6881d56cfdbf4ac474402e31eefbba5bdb402b8762e39939eccc91840af11e479f536ff4e56fdb9cb434601ddb5ee692f21b3ebe2eb3cc2d3548178389451d687269265ed87075bcca546ce44d68213ab4d5fd7214f78b513e7697938a30c7dd9a44a47207582d6b05f26b18b638d03a8334a2464f4da983f3fe7e3304ab54f78c785f4af29ea0b9bfd942e2c591b0f9354d1ab7aa2fbff9610276e86235a2ae7ac1e6ad39900790a53e5b575d242c6a10a7d00872", @generic="68d1c3f332d61667aa2ce84f7f5be21c5890811921fb2875a7bd793e644d15ad86f794dcccc5030d96da2794679fc64058721d58317e6f17f40b52fb1b62835bd7c45825b81dd4c6637f8256b9d604d8d5ff4498e428833bb9a5d212af2e11670307f02f2ab1312b1b3939620617c875600012a6c07011b95faa9831a91c6c385e60211065053d471cee49bde3668ace03fbd04460"]}]}, 0x124c}}, 0x40005) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) bind$auto(0x3, 0x0, 0x2) memfd_secret$auto(0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x84) 4.780352862s ago: executing program 2 (id=2650): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x8f}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000440)="13a550", 0x40000000001243}, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) 3.799936731s ago: executing program 6 (id=2651): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/modules\x00', 0x88880, 0x0) (async) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/modules\x00', 0x88880, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) (async) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000140)={[0xe, 0x91e3, 0xb, 0x510c, 0x0, 0x44d4486, 0x3, 0x1, 0x8, 0x0, 0x1, 0xb, 0x8000000000000, 0x84c, 0x3, 0x1008]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x1, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa240, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0x2a, 0x3, 0x3a) (async) socket(0x2a, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xce, 0x0, 0x567) (async) setsockopt$auto(0x400000000000003, 0x29, 0xce, 0x0, 0x567) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0x10, 0x9b72, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_SELECT_ERR_QUEUE(r0, 0x23, 0x2d, &(0x7f0000000040)='/dev/dsp\x00', 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0xc82, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xfce8, 0x200, 0x3, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x8000005, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x15, 0x0, 0x0) 3.698048408s ago: executing program 5 (id=2652): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2, 0x1, 0x0) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = open(&(0x7f0000000380)='./file0/file0\x00', 0x70bcc0, 0x0) r3 = fcntl$auto(r2, 0x8400, 0x9ec0000000000000) socket(0x2, 0x3, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/index\x00', 0x600, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/235, 0xeb) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x6, 0x20000000) (async) socketpair$auto(0x21e, 0x5, 0xffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0x2, 0x1, 0x106) (async) mq_notify$auto(0x4, &(0x7f00000003c0)={@sival_ptr=&(0x7f0000000400), @inferred, 0x2, @_sigev_thread={&(0x7f0000000440)=&(0x7f0000000400)=0x3, &(0x7f0000000480)="c3148aad37e37a091ddd15b79697ebd115bc9b1e7369287896985beef0736f84c1e32a05ed4233b1de04e2d48caa3416642b803ea4557f540eced2add40dea1ce803bd09d2da11e41fc83efaf240cd7bbe38afb41d7675e8c18961b4a7e62826ebdaa59f1f6bddec86621a600310c3549386a999db83eb6471ec31a6f31faa6d7a37cb4d83cceb78f544c16c76d28034cc12958b08c4ed27e777eb97c7f8b7bf6f51bc57f55bc382097036767b34010ddf43e7c1ef424bacecabe7ad0d80e409f7313ea622f656bae48741dd8fa959d8a219e7f961891821e5e9deb2439744eaaf07e20dbddfde2f516459fa3a"}}) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB='(\x00\x00\x00', @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016", @ANYRESHEX=r3, @ANYRES64], 0x28}}, 0x4c810) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/status.8\x00', 0x103000, 0x0) readv$auto(r5, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0xa) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x9597d3fd503c15c4, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write$auto(r1, &(0x7f0000000000)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 3.581512448s ago: executing program 3 (id=2653): socket(0x23, 0x2, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0xfd}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r4, 0x4d00, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1fc00000", @ANYRES16=r0, @ANYBLOB="00012bbd7000fcdbdf25650000007b00bb004945abcd2f60bac267c9ea8ee0f73c3ede6dc34e499d6aba77911a4946e2feec9a3b012db0628de02bc95d01228d2cfbb17897d51ea7477aa44ddab24c76d087c94bb4ada3af184cc7b410cada7d7f1d6b97355c5ef1934a9e62824cbeef3c58b75d7d35cae8ac48ce321021ca98c152ad1a0f65c39ca500"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3.523535649s ago: executing program 2 (id=2654): r0 = mq_open$auto(&(0x7f0000000000)='nl80211\x00', 0x6, 0x5, &(0x7f0000000080)={0x6, 0x1d7, 0x9, 0x1ff}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) 3.385025562s ago: executing program 5 (id=2655): socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/udp_hash_entries\x00', 0x8000, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x40080, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000001c0)=""/191, 0x1f8) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto(0x80001ff, 0x804, 0x3, 0x4) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.360857065s ago: executing program 3 (id=2656): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="2101000000d42c"], 0x122c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 3.231338994s ago: executing program 5 (id=2657): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x7, 0xff, 0x0, &(0x7f0000000180)=0x5b, 0x71a8dce0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x3, 0x8000) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_UI_SET_FFBIT(r2, 0x4004556b, &(0x7f0000000040)=0x10800) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth1_to_bond\x00', 0x100, 0x0) pread64$auto(r3, 0x0, 0x6, 0x1ff) readv$auto(r3, 0x0, 0x377) unshare$auto(0x40000080) open(0x0, 0x161342, 0x130) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x20000007}, 0x3ff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x886500, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz8\x00', 0x105000, 0x0) read$auto(0x3, 0x0, 0x7fffffff) readv$auto(0x3, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0x3, 0x0, 0xfffffdef) 3.211634586s ago: executing program 2 (id=2658): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r1, 0x40104d01, r1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000003480)=ANY=[@ANYBLOB="d5e33e45cfe18a851979af2d18110000efa803d5d200140ea5b4b19183a2029d4b2167badc6324d6eb626aadd960585f8ebeca9cf85797da8da7134c5d6ef66c6eb4b41fc9ab85695fed9fbb8fa1714d98f2502cf122f88f038d", @ANYRES16=0x0, @ANYBLOB="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"], 0x1118}, 0x1, 0x0, 0x0, 0x408c0}, 0x40000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000005840), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25010000002000018008000400ce000000140002006d6163766c616e310000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) r4 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r4, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@hci={0x1f, 0x1, 0x4}, 0x22) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0xae80, 0x0) 2.894971095s ago: executing program 3 (id=2659): r0 = io_uring_setup$auto(0x6, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, r0, 0x8010) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0xbb7f, 0x6]}, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0x2, 0x80001, 0x106) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0xeff) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 2.464394482s ago: executing program 6 (id=2660): mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) (async, rerun: 64) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 64) r2 = prctl$auto(0x16, 0x1, 0x0, 0xfffffffffffffffe, 0x4) pread64$auto(r1, 0x0, 0x81, 0x200) (async, rerun: 32) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00032abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d00000030001a8008000100870300002400048020000180050007000900000004000a0004000400040002000800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, 0x0, 0x20004000) (async) unshare$auto(0x2) (async) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x0, 0xc) (async, rerun: 64) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x18, 0x3, 0x0, 0x0, 0xffffffffffffffff) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2a4001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r6, &(0x7f0000000340)='/Ee\x06\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\xb1;\x9dJ\xc6\xc0\'\xdbV\xde\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5X\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x8ch\xe2\x0e\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(V\xcb\x13{\xb1\xef\xa4\xab@\xfe\xcc\xdd\a', 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) (async, rerun: 64) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) (rerun: 64) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x1e0042, 0x0) (async) fcntl$auto(r0, 0x400, 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60742, 0x0) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 2.148822965s ago: executing program 3 (id=2661): r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/ns/cgroup\x00', 0x80, 0x0) ioctl$auto_NS_GET_USERNS(r0, 0xb701, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x3, 0x8) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xffffffdffffffffe, 0x793, 0x4000000000df, 0xeb1, 0x401, 0x8003) unshare$auto(0x40000080) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) mmap$auto(0x0, 0x1, 0xfffffffffffffff4, 0xeb1, 0xfffffffffffffffa, 0x4) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30988099a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r5, 0x5420, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x404201, 0x0) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x1, 0xa0d6, 0x3, 0x8c8010, r6, 0x7ffe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/pcm0c/sub7/info\x00', 0xc3aef140993a1550, 0x0) 1.394123258s ago: executing program 5 (id=2662): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram12\x00', 0xbc042, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0xb02, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x7fff, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r0, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) close_range$auto(0x0, 0x2000000003, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x1d, 0x0, 0x1ff) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x2, 0x9) ioctl$auto(r2, 0x400c4d06, r2) r3 = userfaultfd$auto(0x1) socket(0xa, 0x3, 0x3b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2e, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) statx$auto(r3, 0x0, 0x1000, 0x8, 0x0) 1.334880265s ago: executing program 2 (id=2663): r0 = open(0x0, 0x161342, 0x100) socket(0xa, 0x801, 0x84) (async) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x8) (async) getsockopt$auto(r1, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x8) mmap$auto(0x0, 0x40007, 0x7, 0x10, 0x7, 0x28000) r2 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x141241, 0x0) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r2, 0x7b9, 0x700000000000000) (async) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r2, 0x7b9, 0x700000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) (async) getsockopt$auto(r3, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x82, 0x0) socket(0x15, 0x5, 0x0) (async) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) (async) getsockopt$auto(r4, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi23\x00', 0xb01, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r5, 0x80085617, 0x0) (async) ioctl$auto_v4l2_fops_v4l2_dev(r5, 0x80085617, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7f0) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') process_madvise$auto_MADV_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000100)="d4d9867e8131642f9adbaa410013794db979a1bc3268a9016f9490ba57e97ab04ee481224a295ea346be4e6880cb8ff6c548209b427f943fd19ac46468c3ce1025124be2", 0xfffffffffffffff8}, 0x7, 0x9, 0x2) (async) process_madvise$auto_MADV_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000100)="d4d9867e8131642f9adbaa410013794db979a1bc3268a9016f9490ba57e97ab04ee481224a295ea346be4e6880cb8ff6c548209b427f943fd19ac46468c3ce1025124be2", 0xfffffffffffffff8}, 0x7, 0x9, 0x2) ioctl$auto(r6, 0x560a, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.200537191s ago: executing program 6 (id=2664): mmap$auto(0x0, 0x9, 0xfffffffffffffffe, 0x20000eb1, 0xffffffffffffffff, 0x8020000004) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r1 = socket(0xa, 0x1, 0x84) r2 = io_uring_setup$auto(0x2, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00'}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040041) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x64c3, 0x1e2) r6 = socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r1) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x7}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x810) r8 = socket(0x10, 0x2, 0xf) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_0={0x7, 0xfe, 0xfff, 0x62, 0x7, r6, 0x2, "87eb0ecb8aecff0b39b1c2f71bb64c49", 0x0, 0xffffffffffffffff, 0x393, 0x7, 0x2, 0x7ffffffe, r5, r0}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x4, 0x5, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x3, @attach_prog_fd=r8, 0x7e, 0x4, 0x100001, 0x5, 0x3}, 0x5) 1.046995209s ago: executing program 2 (id=2665): unshare$auto(0x40000080) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000001c0)="eb329ac07164be1ce7b13d78eed9785e528978404cce879f2807b346e4e68f71bb2113e3c73a06b6fcb210148671bca87fd49d051aee2c02a4722a04183f2f8b42874a7801e0c19fa929667b1f274eb60a15d1174a00d29d8d552d2547f7593d25d91eec028ae07450abadb040f88d5ccfd0f054235ca090db4dfd98db49980604cc7b90e58db4e0fe63712095428a99cc1c7c7e147c97c38fae73001a1dee") write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) listen$auto(0x3, 0x81) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) (async) ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) (async) r5 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0xfffffffffffffffb, 0x5, 0x20000000009, 0xfb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0xfffffdf2) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), r1) (async) mmap$auto(0x0, 0xa, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffd) getsockopt$auto_SO_SNDBUF(r5, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x40b046db, 0x10001, 0x2, 0x0, 0x3, 0xe) (async) mbind$auto(0xd4, 0x1, 0x7f, &(0x7f0000000080)=0x8001, 0x0, 0x1e03) (async) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 869.594645ms ago: executing program 6 (id=2666): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x6) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) capset$auto(0x0, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r5, 0x4008af25, 0x0) r6 = openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/bpf_offloaded_id\x00', 0x20082, 0x0) writev$auto(r6, 0x0, 0x7) r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r8 = dup$auto(r7) ioctl$auto_SCSI_IOCTL_DOORLOCK(r8, 0x5380, &(0x7f00000000c0)="33ca7089746618741c87ea79940a4243b98519a4b10cb3dc6438e684d3f8d726b013887e3581765d0d9919985a43f562f5f6b865333efb08fb4f5ed16c768f07ba9fd68be404ff55d20b69ab47271f62ea469ba032d3daadc6d540ddd0eb0e2a2dc661e8ce7bf6a11c064af53cc5f1a0b85a976f9e64c735be31fa5f37a5fc631694a7d84ee34e89cf5265a69cfe8d94bf8a5feaf619db22d8ab56298b685046b9a622d9") sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(0xffffffffffffffff, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000280)=""/222, 0xde) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r9, 0x401070cd, 0x5) 0s ago: executing program 6 (id=2667): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) write$auto(r0, 0x0, 0x6) mmap$auto(0x0, 0x4000000009, 0xdf, 0x400000eb1, r0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r2, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto(0x3, 0xc08c5336, 0x38) kernel console output (not intermixed with test programs): yz.1.1748 Tainted: G U L syzkaller #0 PREEMPT(full) [ 721.631521][T14683] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 721.631533][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 721.631550][T14683] Call Trace: [ 721.631560][T14683] [ 721.631571][T14683] dump_stack_lvl+0x16c/0x1f0 [ 721.631625][T14683] should_fail_ex+0x512/0x640 [ 721.631667][T14683] _copy_to_user+0x32/0xd0 [ 721.631705][T14683] simple_read_from_buffer+0xcb/0x170 [ 721.631753][T14683] proc_fail_nth_read+0x197/0x240 [ 721.631807][T14683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.631861][T14683] ? rw_verify_area+0xcf/0x6c0 [ 721.631901][T14683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.631952][T14683] vfs_read+0x1e4/0xcf0 [ 721.631999][T14683] ? __pfx_get_signal+0x10/0x10 [ 721.632040][T14683] ? __tipc_shutdown+0x729/0xee0 [ 721.632082][T14683] ? __pfx_vfs_read+0x10/0x10 [ 721.632131][T14683] ? arch_do_signal_or_restart+0x211/0x7a0 [ 721.632178][T14683] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 721.632238][T14683] ksys_read+0x12a/0x250 [ 721.632290][T14683] ? __pfx_ksys_read+0x10/0x10 [ 721.632344][T14683] do_syscall_64+0xcd/0xf80 [ 721.632377][T14683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.632409][T14683] RIP: 0033:0x7f95f6d8e1dc [ 721.632433][T14683] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 721.632467][T14683] RSP: 002b:00007f95f7b71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 721.632495][T14683] RAX: ffffffffffffffda RBX: 00007f95f6fe5fa0 RCX: 00007f95f6d8e1dc [ 721.632516][T14683] RDX: 000000000000000f RSI: 00007f95f7b710a0 RDI: 0000000000000004 [ 721.632533][T14683] RBP: 00007f95f7b71090 R08: 0000000000000000 R09: 0000000000000000 [ 721.632550][T14683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.632567][T14683] R13: 00007f95f6fe6038 R14: 00007f95f6fe5fa0 R15: 00007ffd8b6e67b8 [ 721.632607][T14683] [ 722.187385][T10571] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 931 with max blocks 2 with error 117 [ 722.223049][T10571] EXT4-fs (sda1): This should not happen!! Data will be lost [ 722.223049][T10571] [ 722.253908][T10571] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 722.292764][T10571] EXT4-fs (sda1): This should not happen!! Data will be lost [ 722.292764][T10571] [ 722.336088][T10571] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 933 with max blocks 3 with error 117 [ 722.380944][T10571] EXT4-fs (sda1): This should not happen!! Data will be lost [ 722.380944][T10571] [ 722.753462][T14691] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.2.1751: Error -117 reading block bitmap for 4 [ 722.989322][ T5960] smpboot: CPU 1 is now offline [ 723.170064][T14709] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 723.194019][T14703] NFSD: Failed to start, no listeners configured. [ 723.966812][T14729] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1758: bg 5: bad block bitmap checksum [ 724.053590][T14729] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 724.108676][T14729] EXT4-fs (sda1): This should not happen!! Data will be lost [ 724.108676][T14729] [ 725.992086][T14759] Invalid ELF header magic: != ELF [ 727.210559][ T30] audit: type=1804 audit(4294967550.310:27): pid=14770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1769" name="file0" dev="tmpfs" ino=2838 res=1 errno=0 [ 727.613174][ T30] audit: type=1804 audit(4294967550.712:28): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1769" name="file0" dev="tmpfs" ino=2838 res=1 errno=0 [ 728.204601][T14797] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a [ 755.492672][T15336] dump_stack_lvl+0x16c/0x1f0 [ 755.492730][T15336] should_fail_ex+0x512/0x640 [ 755.492778][T15336] ? __kmalloc_cache_noprof+0x5f/0x800 [ 755.492819][T15336] should_failslab+0xc2/0x120 [ 755.492866][T15336] __kmalloc_cache_noprof+0x80/0x800 [ 755.492900][T15336] ? rcu_is_watching+0x12/0xc0 [ 755.492949][T15336] ? call_usermodehelper_setup+0xaf/0x360 [ 755.492990][T15336] ? __pfx_free_modprobe_argv+0x10/0x10 [ 755.493033][T15336] ? call_usermodehelper_setup+0xaf/0x360 [ 755.493071][T15336] call_usermodehelper_setup+0xaf/0x360 [ 755.493117][T15336] __request_module+0x3bd/0x660 [ 755.493160][T15336] ? __pfx___request_module+0x10/0x10 [ 755.493218][T15336] ? rcu_is_watching+0x12/0xc0 [ 755.493262][T15336] ? lockdep_hardirqs_on+0x7c/0x110 [ 755.493299][T15336] netlink_create+0x226/0x620 [ 755.493351][T15336] __sock_create+0x339/0x8a0 [ 755.493393][T15336] __sys_socket+0x14d/0x260 [ 755.493424][T15336] ? fput+0x70/0xf0 [ 755.493453][T15336] ? __pfx___sys_socket+0x10/0x10 [ 755.493485][T15336] ? xfd_validate_state+0x61/0x180 [ 755.493512][T15336] ? __pfx_ksys_write+0x10/0x10 [ 755.493564][T15336] __x64_sys_socket+0x72/0xb0 [ 755.493594][T15336] ? lockdep_hardirqs_on+0x7c/0x110 [ 755.493622][T15336] do_syscall_64+0xcd/0xf80 [ 755.493654][T15336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.493685][T15336] RIP: 0033:0x7f699838f7c9 [ 755.493729][T15336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.493767][T15336] RSP: 002b:00007f69991d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 755.493798][T15336] RAX: ffffffffffffffda RBX: 00007f69985e6180 RCX: 00007f699838f7c9 [ 755.493818][T15336] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010 [ 755.493836][T15336] RBP: 00007f6998413f91 R08: 0000000000000000 R09: 0000000000000000 [ 755.493853][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.493871][T15336] R13: 00007f69985e6218 R14: 00007f69985e6180 R15: 00007ffceeba3308 [ 755.493912][T15336] [ 756.056975][T15350] kAFS: unparsable volume name [ 756.526412][T15358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 756.532611][T15358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 756.557247][T15358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 756.779106][T15358] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 757.402836][T15380] FAULT_INJECTION: forcing a failure. [ 757.402836][T15380] name failslab, interval 1, probability 0, space 0, times 0 [ 757.565413][T15380] CPU: 0 UID: 0 PID: 15380 Comm: syz.3.1907 Tainted: G U L syzkaller #0 PREEMPT(full) [ 757.565469][T15380] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 757.565482][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 757.565502][T15380] Call Trace: [ 757.565522][T15380] [ 757.565534][T15380] dump_stack_lvl+0x16c/0x1f0 [ 757.565595][T15380] should_fail_ex+0x512/0x640 [ 757.565634][T15380] ? fs_reclaim_acquire+0xae/0x150 [ 757.565689][T15380] should_failslab+0xc2/0x120 [ 757.565741][T15380] __kmalloc_noprof+0xeb/0x910 [ 757.565778][T15380] ? tomoyo_encode2+0x100/0x3e0 [ 757.565829][T15380] ? tomoyo_encode2+0x100/0x3e0 [ 757.565874][T15380] tomoyo_encode2+0x100/0x3e0 [ 757.565926][T15380] tomoyo_encode+0x29/0x50 [ 757.565971][T15380] tomoyo_realpath_from_path+0x18f/0x6e0 [ 757.566032][T15380] tomoyo_check_open_permission+0x2ab/0x3c0 [ 757.566075][T15380] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 757.566157][T15380] ? lock_acquire+0x179/0x330 [ 757.566187][T15380] ? find_held_lock+0x2b/0x80 [ 757.566230][T15380] ? mnt_get_write_access+0x52/0x2f0 [ 757.566272][T15380] tomoyo_file_open+0x6b/0x90 [ 757.566305][T15380] security_file_open+0x84/0x1e0 [ 757.566348][T15380] do_dentry_open+0x597/0x1590 [ 757.566400][T15380] ? security_inode_permission+0xbf/0x260 [ 757.566448][T15380] vfs_open+0x82/0x3f0 [ 757.566488][T15380] path_openat+0x2078/0x3140 [ 757.566561][T15380] ? __pfx_path_openat+0x10/0x10 [ 757.566628][T15380] do_filp_open+0x20b/0x470 [ 757.566675][T15380] ? __pfx_do_filp_open+0x10/0x10 [ 757.566757][T15380] ? alloc_fd+0x471/0x7d0 [ 757.566817][T15380] do_sys_openat2+0x121/0x290 [ 757.566853][T15380] ? __pfx_do_sys_openat2+0x10/0x10 [ 757.566904][T15380] __x64_sys_openat+0x174/0x210 [ 757.566942][T15380] ? __pfx___x64_sys_openat+0x10/0x10 [ 757.566995][T15380] do_syscall_64+0xcd/0xf80 [ 757.567029][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.567060][T15380] RIP: 0033:0x7f699838f7c9 [ 757.567087][T15380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.567119][T15380] RSP: 002b:00007f6999213038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 757.567148][T15380] RAX: ffffffffffffffda RBX: 00007f69985e5fa0 RCX: 00007f699838f7c9 [ 757.567169][T15380] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 757.567188][T15380] RBP: 00007f6998413f91 R08: 0000000000000000 R09: 0000000000000000 [ 757.567208][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.567226][T15380] R13: 00007f69985e6038 R14: 00007f69985e5fa0 R15: 00007ffceeba3308 [ 757.567269][T15380] [ 757.567298][T15380] ERROR: Out of memory at tomoyo_realpath_from_path. [ 758.022973][T15383] sp0: Synchronizing with TNC [ 758.534594][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 758.542036][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 758.614846][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 758.852138][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 759.879632][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 759.893089][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 759.903957][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 759.913172][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 759.930091][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 760.436419][T15442] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 760.545039][T10585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.760261][T10585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.826249][ T5894] smpboot: CPU 1 is now offline [ 761.025150][T15453] Invalid ELF header magic: != ELF [ 761.044002][T10585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.113158][T15429] chnl_net:caif_netlink_parms(): no params data found [ 761.297631][T15461] futex_wake_op: syz.2.1928 tries to shift op by -2048; fix this program [ 761.372033][T10585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.780551][T15429] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.816268][T15429] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.840727][T15429] bridge_slave_0: entered allmulticast mode [ 761.866977][T15429] bridge_slave_0: entered promiscuous mode [ 761.927881][T15429] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.950527][T15429] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.960541][ T5850] Bluetooth: hci0: command tx timeout [ 761.998489][T15429] bridge_slave_1: entered allmulticast mode [ 762.042391][T15429] bridge_slave_1: entered promiscuous mode [ 762.331535][T15429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.379796][T10585] bridge_slave_1: left allmulticast mode [ 762.402951][T10585] bridge_slave_1: left promiscuous mode [ 762.440535][T10585] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.515470][T10585] bridge_slave_0: left allmulticast mode [ 762.550603][T10585] bridge_slave_0: left promiscuous mode [ 762.570005][T10585] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.655171][T15485] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1934'. [ 763.197121][T15493] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 763.377027][T15495] misc userio: Invalid payload size [ 763.560884][T15499] ucma_write: process 310 (syz.4.1939) changed security contexts after opening file descriptor, this is not allowed. [ 763.662514][T10585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.675172][T10585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.689967][T10585] bond0 (unregistering): Released all slaves [ 763.716115][T15429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.787552][T10585] tipc: Left network mode [ 763.874411][T15429] team0: Port device team_slave_0 added [ 763.920639][T15429] team0: Port device team_slave_1 added [ 764.025887][ T5850] Bluetooth: hci0: command tx timeout [ 764.040057][T15429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.055040][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.094920][T15429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.161810][T15429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.174450][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.284823][T15429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.706694][T15429] hsr_slave_0: entered promiscuous mode [ 764.724523][T15429] hsr_slave_1: entered promiscuous mode [ 764.742359][T15429] debugfs: 'hsr0' already exists in 'hsr' [ 764.762211][T15429] Cannot create hsr debugfs directory [ 764.848230][T15528] futex_wake_op: syz.2.1946 tries to shift op by -2048; fix this program [ 764.880916][T15528] futex_wake_op: syz.2.1946 tries to shift op by -2048; fix this program [ 766.095261][ T5850] Bluetooth: hci0: command tx timeout [ 767.292467][T15429] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 767.575511][T15429] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 767.631876][T15561] FAULT_INJECTION: forcing a failure. [ 767.631876][T15561] name failslab, interval 1, probability 0, space 0, times 0 [ 767.638455][T15429] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 767.679933][T15429] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 767.704300][T15561] CPU: 0 UID: 0 PID: 15561 Comm: syz.3.1949 Tainted: G U L syzkaller #0 PREEMPT(full) [ 767.704354][T15561] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 767.704367][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 767.704386][T15561] Call Trace: [ 767.704397][T15561] [ 767.704410][T15561] dump_stack_lvl+0x16c/0x1f0 [ 767.704469][T15561] should_fail_ex+0x512/0x640 [ 767.704521][T15561] ? kmem_cache_alloc_noprof+0x62/0x770 [ 767.704566][T15561] should_failslab+0xc2/0x120 [ 767.704620][T15561] kmem_cache_alloc_noprof+0x83/0x770 [ 767.704661][T15561] ? vm_area_alloc+0x1f/0x160 [ 767.704702][T15561] ? vm_area_alloc+0x1f/0x160 [ 767.704733][T15561] vm_area_alloc+0x1f/0x160 [ 767.704764][T15561] __mmap_region+0x1080/0x2a00 [ 767.704806][T15561] ? __pfx___mmap_region+0x10/0x10 [ 767.704841][T15561] ? __lock_acquire+0x436/0x2890 [ 767.704902][T15561] ? finish_task_switch.isra.0+0x207/0xbd0 [ 767.704947][T15561] ? lockdep_hardirqs_on+0x7c/0x110 [ 767.704977][T15561] ? finish_task_switch.isra.0+0x207/0xbd0 [ 767.705104][T15561] ? rcu_is_watching+0x12/0xc0 [ 767.705161][T15561] mmap_region+0x1ab/0x3f0 [ 767.705200][T15561] ? __get_unmapped_area+0x267/0x3f0 [ 767.705252][T15561] do_mmap+0xa3e/0x1210 [ 767.705309][T15561] ? __pfx_do_mmap+0x10/0x10 [ 767.705358][T15561] ? __pfx_down_write_killable+0x10/0x10 [ 767.705403][T15561] vm_mmap_pgoff+0x29e/0x470 [ 767.705456][T15561] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 767.705521][T15561] ? __x64_sys_futex+0x1e0/0x4c0 [ 767.705557][T15561] ? __x64_sys_futex+0x1e9/0x4c0 [ 767.705601][T15561] ksys_mmap_pgoff+0x7d/0x5c0 [ 767.705647][T15561] ? xfd_validate_state+0x61/0x180 [ 767.705684][T15561] __x64_sys_mmap+0x125/0x190 [ 767.705721][T15561] do_syscall_64+0xcd/0xf80 [ 767.705756][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.705789][T15561] RIP: 0033:0x7f699838f7c9 [ 767.705816][T15561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.705849][T15561] RSP: 002b:00007f6999213038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 767.705881][T15561] RAX: ffffffffffffffda RBX: 00007f69985e5fa0 RCX: 00007f699838f7c9 [ 767.705901][T15561] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 767.705920][T15561] RBP: 00007f6998413f91 R08: fffffffffffffffa R09: 0000000000008000 [ 767.705939][T15561] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 767.705956][T15561] R13: 00007f69985e6038 R14: 00007f69985e5fa0 R15: 00007ffceeba3308 [ 767.705996][T15561] [ 768.164069][ T5850] Bluetooth: hci0: command tx timeout [ 768.584148][T15583] ima: policy update failed [ 768.621937][ T30] audit: type=1802 audit(4294967591.925:29): pid=15583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1953" res=0 errno=0 [ 768.835458][T10585] hsr_slave_0: left promiscuous mode [ 768.851023][T10585] hsr_slave_1: left promiscuous mode [ 769.638892][T10585] team0 (unregistering): Port device team_slave_0 removed [ 770.932148][T15429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.045288][T15429] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.083199][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.090469][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.136006][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.143300][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.069388][T15429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.889909][T15656] serio: Serial port pty6 [ 773.533036][T15429] veth0_vlan: entered promiscuous mode [ 773.592331][T15429] veth1_vlan: entered promiscuous mode [ 773.756329][T15429] veth0_macvtap: entered promiscuous mode [ 773.798829][T15429] veth1_macvtap: entered promiscuous mode [ 773.817813][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 773.871694][T15429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.918320][T15429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.022017][ T8592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.056315][ T8592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.089613][ T8592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.112983][ T8592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.481768][T10582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.509740][T10582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.660628][T10582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.701571][T10582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.569514][T15709] netlink: 'syz.4.1968': attribute type 2 has an invalid length. [ 776.336633][T15724] bond0: option mode: unable to set because the bond device is up [ 776.602621][T15731] syz.3.1974 (15731): /proc/15731/oom_adj is deprecated, please use /proc/15731/oom_score_adj instead. [ 777.621398][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 778.248256][T15773] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 778.716243][T15785] FAULT_INJECTION: forcing a failure. [ 778.716243][T15785] name failslab, interval 1, probability 0, space 0, times 0 [ 778.739009][T15785] CPU: 1 UID: 0 PID: 15785 Comm: syz.4.1989 Tainted: G U L syzkaller #0 PREEMPT(full) [ 778.739065][T15785] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 778.739077][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 778.739096][T15785] Call Trace: [ 778.739107][T15785] [ 778.739120][T15785] dump_stack_lvl+0x16c/0x1f0 [ 778.739180][T15785] should_fail_ex+0x512/0x640 [ 778.739219][T15785] ? __kmalloc_cache_noprof+0x5f/0x800 [ 778.739261][T15785] should_failslab+0xc2/0x120 [ 778.739311][T15785] __kmalloc_cache_noprof+0x80/0x800 [ 778.739349][T15785] ? vkms_plane_duplicate_state+0x87/0x130 [ 778.739400][T15785] ? vkms_plane_duplicate_state+0x87/0x130 [ 778.739443][T15785] vkms_plane_duplicate_state+0x87/0x130 [ 778.739487][T15785] drm_atomic_get_plane_state+0x279/0x760 [ 778.739530][T15785] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 778.739575][T15785] ? rcu_is_watching+0x12/0xc0 [ 778.739630][T15785] ? __mutex_lock+0x27b/0x1ca0 [ 778.739664][T15785] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 778.739709][T15785] ? trace_contention_end+0xdd/0x110 [ 778.739795][T15785] drm_client_modeset_commit_locked+0x14d/0x580 [ 778.739852][T15785] drm_client_modeset_commit+0x4f/0x80 [ 778.739899][T15785] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 778.739950][T15785] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 778.739999][T15785] drm_fbdev_client_restore+0x1b/0x30 [ 778.740033][T15785] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 778.740068][T15785] drm_client_dev_restore+0x200/0x2a0 [ 778.740120][T15785] drm_release+0x2c6/0x360 [ 778.740164][T15785] ? __pfx_drm_release+0x10/0x10 [ 778.740200][T15785] __fput+0x402/0xb70 [ 778.740244][T15785] task_work_run+0x150/0x240 [ 778.740283][T15785] ? __pfx_task_work_run+0x10/0x10 [ 778.740317][T15785] ? __do_sys_close_range+0x278/0x730 [ 778.740382][T15785] exit_to_user_mode_loop+0xfb/0x540 [ 778.740428][T15785] do_syscall_64+0x4ee/0xf80 [ 778.740463][T15785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.740496][T15785] RIP: 0033:0x7fbe9818f7c9 [ 778.740523][T15785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.740557][T15785] RSP: 002b:00007fbe9902b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 778.740588][T15785] RAX: 0000000000000000 RBX: 00007fbe983e5fa0 RCX: 00007fbe9818f7c9 [ 778.740609][T15785] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 778.740629][T15785] RBP: 00007fbe98213f91 R08: 0000000000000000 R09: 0000000000000000 [ 778.740649][T15785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.740669][T15785] R13: 00007fbe983e6038 R14: 00007fbe983e5fa0 R15: 00007ffd4e1fdd48 [ 778.740715][T15785] [ 779.424302][ T5850] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9 [ 779.822244][T15809] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 925 with max blocks 8 with error 117 [ 779.941282][T15809] EXT4-fs (sda1): This should not happen!! Data will be lost [ 779.941282][T15809] [ 780.841074][T15828] FAULT_INJECTION: forcing a failure. [ 780.841074][T15828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.916816][T15828] CPU: 1 UID: 0 PID: 15828 Comm: syz.4.1999 Tainted: G U L syzkaller #0 PREEMPT(full) [ 780.916869][T15828] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 780.916881][T15828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.916901][T15828] Call Trace: [ 780.916911][T15828] [ 780.916923][T15828] dump_stack_lvl+0x16c/0x1f0 [ 780.916979][T15828] should_fail_ex+0x512/0x640 [ 780.917022][T15828] _copy_to_user+0x32/0xd0 [ 780.917063][T15828] simple_read_from_buffer+0xcb/0x170 [ 780.917110][T15828] proc_fail_nth_read+0x197/0x240 [ 780.917163][T15828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.917225][T15828] ? rw_verify_area+0xcf/0x6c0 [ 780.917263][T15828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.917314][T15828] vfs_read+0x1e4/0xcf0 [ 780.917360][T15828] ? __pfx___mutex_lock+0x10/0x10 [ 780.917397][T15828] ? __pfx_vfs_read+0x10/0x10 [ 780.917451][T15828] ? __fget_files+0x20e/0x3c0 [ 780.917507][T15828] ksys_read+0x12a/0x250 [ 780.917550][T15828] ? __pfx_ksys_read+0x10/0x10 [ 780.917612][T15828] do_syscall_64+0xcd/0xf80 [ 780.917645][T15828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.917677][T15828] RIP: 0033:0x7fbe9818e1dc [ 780.917702][T15828] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 780.917733][T15828] RSP: 002b:00007fbe9902b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.917762][T15828] RAX: ffffffffffffffda RBX: 00007fbe983e5fa0 RCX: 00007fbe9818e1dc [ 780.917782][T15828] RDX: 000000000000000f RSI: 00007fbe9902b0a0 RDI: 0000000000000004 [ 780.917800][T15828] RBP: 00007fbe9902b090 R08: 0000000000000000 R09: 0000000000000000 [ 780.917818][T15828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.917835][T15828] R13: 00007fbe983e6038 R14: 00007fbe983e5fa0 R15: 00007ffd4e1fdd48 [ 780.917878][T15828] [ 781.666586][T15836] netlink: 'syz.4.2001': attribute type 21 has an invalid length. [ 781.674606][T15836] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2001'. [ 782.549449][T15854] FAULT_INJECTION: forcing a failure. [ 782.549449][T15854] name failslab, interval 1, probability 0, space 0, times 0 [ 782.634222][T15854] CPU: 0 UID: 0 PID: 15854 Comm: syz.3.2006 Tainted: G U L syzkaller #0 PREEMPT(full) [ 782.634277][T15854] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 782.634290][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.634310][T15854] Call Trace: [ 782.634320][T15854] [ 782.634332][T15854] dump_stack_lvl+0x16c/0x1f0 [ 782.634389][T15854] should_fail_ex+0x512/0x640 [ 782.634426][T15854] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 782.634473][T15854] should_failslab+0xc2/0x120 [ 782.634522][T15854] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 782.634565][T15854] ? __d_alloc+0x35/0xa80 [ 782.634602][T15854] ? __d_alloc+0x35/0xa80 [ 782.634628][T15854] __d_alloc+0x35/0xa80 [ 782.634662][T15854] d_alloc_pseudo+0x1c/0xc0 [ 782.634702][T15854] alloc_file_pseudo+0xcf/0x230 [ 782.634740][T15854] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 782.634777][T15854] ? alloc_fd+0x471/0x7d0 [ 782.634832][T15854] sock_alloc_file+0x50/0x210 [ 782.634884][T15854] __sys_socket+0x1c0/0x260 [ 782.634917][T15854] ? __pfx___sys_socket+0x10/0x10 [ 782.634954][T15854] ? do_user_addr_fault+0x843/0x1370 [ 782.635001][T15854] __x64_sys_socket+0x72/0xb0 [ 782.635032][T15854] ? lockdep_hardirqs_on+0x7c/0x110 [ 782.635063][T15854] do_syscall_64+0xcd/0xf80 [ 782.635096][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.635129][T15854] RIP: 0033:0x7f69983916e7 [ 782.635154][T15854] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.635186][T15854] RSP: 002b:00007f69991f0fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 782.635228][T15854] RAX: ffffffffffffffda RBX: 00007f69985e6090 RCX: 00007f69983916e7 [ 782.635250][T15854] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 782.635269][T15854] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 782.635287][T15854] R10: 0000200000000680 R11: 0000000000000286 R12: 0000000000000000 [ 782.635306][T15854] R13: 00007f69985e6128 R14: 00007f69985e6090 R15: 00007ffceeba3308 [ 782.635348][T15854] [ 785.543877][T15896] Invalid ELF header magic: != ELF [ 785.738763][ T5894] smpboot: CPU 1 is now offline [ 785.869842][T15900] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 790.119961][T15999] FAULT_INJECTION: forcing a failure. [ 790.119961][T15999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.218818][T15999] CPU: 1 UID: 0 PID: 15999 Comm: syz.4.2032 Tainted: G U L syzkaller #0 PREEMPT(full) [ 790.218869][T15999] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 790.218880][T15999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 790.218904][T15999] Call Trace: [ 790.218913][T15999] [ 790.218926][T15999] dump_stack_lvl+0x16c/0x1f0 [ 790.218983][T15999] should_fail_ex+0x512/0x640 [ 790.219024][T15999] _copy_to_user+0x32/0xd0 [ 790.219062][T15999] simple_read_from_buffer+0xcb/0x170 [ 790.219110][T15999] proc_fail_nth_read+0x197/0x240 [ 790.219165][T15999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 790.219220][T15999] ? rw_verify_area+0xcf/0x6c0 [ 790.219261][T15999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 790.219312][T15999] vfs_read+0x1e4/0xcf0 [ 790.219358][T15999] ? __pfx___mutex_lock+0x10/0x10 [ 790.219394][T15999] ? __pfx_vfs_read+0x10/0x10 [ 790.219449][T15999] ? __fget_files+0x20e/0x3c0 [ 790.219506][T15999] ksys_read+0x12a/0x250 [ 790.219551][T15999] ? __pfx_ksys_read+0x10/0x10 [ 790.219607][T15999] do_syscall_64+0xcd/0xf80 [ 790.219639][T15999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.219669][T15999] RIP: 0033:0x7fbe9818e1dc [ 790.219694][T15999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 790.219737][T15999] RSP: 002b:00007fbe9902b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 790.219766][T15999] RAX: ffffffffffffffda RBX: 00007fbe983e5fa0 RCX: 00007fbe9818e1dc [ 790.219786][T15999] RDX: 000000000000000f RSI: 00007fbe9902b0a0 RDI: 0000000000000004 [ 790.219804][T15999] RBP: 00007fbe9902b090 R08: 0000000000000000 R09: 0000000000000000 [ 790.219822][T15999] R10: 0000040000000c07 R11: 0000000000000246 R12: 0000000000000001 [ 790.219840][T15999] R13: 00007fbe983e6038 R14: 00007fbe983e5fa0 R15: 00007ffd4e1fdd48 [ 790.219881][T15999] [ 792.050290][ T30] audit: type=1800 audit(4294967615.477:30): pid=16030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2035" name="features" dev="configfs" ino=65118 res=0 errno=0 [ 793.375360][ T5850] Bluetooth: hci4: unexpected event 0x23 length: 127 > 13 [ 793.528812][T16063] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2040'. [ 793.620012][T16065] bridge0: port 3(ipvlan0) entered blocking state [ 793.685503][T16065] bridge0: port 3(ipvlan0) entered disabled state [ 793.693324][T16065] ipvlan0: entered allmulticast mode [ 793.698802][T16065] veth0_vlan: entered allmulticast mode [ 793.725399][T16065] ipvlan0: left allmulticast mode [ 793.730857][T16065] veth0_vlan: left allmulticast mode [ 794.051827][T16063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.637842][T16063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.794768][T16063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.906726][T16094] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2047'. [ 795.170797][ T8592] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 935 with max blocks 1 with error 117 [ 795.272752][ T8592] EXT4-fs (sda1): This should not happen!! Data will be lost [ 795.272752][ T8592] [ 795.483693][T16063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.791778][T16129] ACPI: button: Initial lid state set to 'ignore' [ 796.865557][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.881420][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.894659][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.934173][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.942831][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 798.066169][T16130] chnl_net:caif_netlink_parms(): no params data found [ 798.491674][T16171] Console: switching to colour VGA+ 80x25 [ 798.927547][ T311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.044078][ T5841] Bluetooth: hci1: command tx timeout [ 799.305530][ T311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.351101][T16191] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 799.443160][T16130] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.456302][T16130] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.494263][T16130] bridge_slave_0: entered allmulticast mode [ 799.522796][T16130] bridge_slave_0: entered promiscuous mode [ 799.568813][T16130] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.620239][T16130] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.627476][T16130] bridge_slave_1: entered allmulticast mode [ 799.659295][T16130] bridge_slave_1: entered promiscuous mode [ 800.049119][ T311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.138327][T16130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.162102][T16130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.400156][T16130] team0: Port device team_slave_0 added [ 800.478369][ T311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.522562][T16130] team0: Port device team_slave_1 added [ 800.851132][T16130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.869809][T16130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.898846][T16130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.962313][T16130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.974678][T16130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.002477][T16130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.114353][ T5841] Bluetooth: hci1: command tx timeout [ 801.187758][T16130] hsr_slave_0: entered promiscuous mode [ 801.195213][T16130] hsr_slave_1: entered promiscuous mode [ 801.218419][T16130] debugfs: 'hsr0' already exists in 'hsr' [ 801.234621][T16130] Cannot create hsr debugfs directory [ 801.449627][ T311] bond0: left allmulticast mode [ 801.456119][ T311] bond_slave_0: left allmulticast mode [ 801.467311][ T311] bond0: left promiscuous mode [ 801.476004][ T311] bond_slave_0: left promiscuous mode [ 801.486831][ T311] bridge0: port 4(bond0) entered disabled state [ 801.502400][ T311] dummy0: left allmulticast mode [ 801.510369][ T311] dummy0: left promiscuous mode [ 801.523899][ T311] bridge0: port 3(dummy0) entered disabled state [ 801.541770][ T311] bridge_slave_1: left allmulticast mode [ 801.551058][ T311] bridge_slave_1: left promiscuous mode [ 801.560743][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.574294][ T311] bridge_slave_0: left allmulticast mode [ 801.582155][ T311] bridge_slave_0: left promiscuous mode [ 801.591386][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.951803][T16221] binder: 16220:16221 ioctl c018620c 0 returned -22 [ 802.002503][T16222] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 802.078689][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2062'. [ 802.390810][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.406136][ T311] bond0 (unregistering): Released all slaves [ 802.598451][ T311] tipc: Left network mode [ 803.194129][ T5841] Bluetooth: hci1: command tx timeout [ 803.287231][ T5894] smpboot: CPU 1 is now offline [ 803.403698][T16242] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 804.440629][T16130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 804.457311][T16130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 804.497372][T16130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 804.558341][T16130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 804.641793][ T311] hsr_slave_0: left promiscuous mode [ 804.655342][ T311] hsr_slave_1: left promiscuous mode [ 804.787259][ T311] veth1_vlan: left promiscuous mode [ 804.824425][ T311] veth0_vlan: left promiscuous mode [ 805.216548][ T311] pim6reg (unregistering): left allmulticast mode [ 805.263169][ T5841] Bluetooth: hci1: command tx timeout [ 805.742019][ T311] team0 (unregistering): Port device team_slave_1 removed [ 805.801382][ T311] team0 (unregistering): Port device team_slave_0 removed [ 806.850992][T16130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.907309][T16130] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.930164][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.937423][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.195163][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.202450][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.241778][T16306] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 807.241778][T16306] [ 807.967828][T16328] FAULT_INJECTION: forcing a failure. [ 807.967828][T16328] name failslab, interval 1, probability 0, space 0, times 0 [ 808.012133][T16329] FAULT_INJECTION: forcing a failure. [ 808.012133][T16329] name failslab, interval 1, probability 0, space 0, times 0 [ 808.106061][T16328] CPU: 1 UID: 60929 PID: 16328 Comm: syz.5.2079 Tainted: G U L syzkaller #0 PREEMPT(full) [ 808.106117][T16328] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 808.106131][T16328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.106163][T16328] Call Trace: [ 808.106175][T16328] [ 808.106187][T16328] dump_stack_lvl+0x16c/0x1f0 [ 808.106246][T16328] should_fail_ex+0x512/0x640 [ 808.106283][T16328] ? kmem_cache_alloc_noprof+0x62/0x770 [ 808.106326][T16328] should_failslab+0xc2/0x120 [ 808.106377][T16328] kmem_cache_alloc_noprof+0x83/0x770 [ 808.106417][T16328] ? __proc_create+0x2c8/0x8d0 [ 808.106466][T16328] ? __proc_create+0x2c8/0x8d0 [ 808.106506][T16328] __proc_create+0x2c8/0x8d0 [ 808.106552][T16328] ? __pfx___proc_create+0x10/0x10 [ 808.106593][T16328] ? proc_register+0x554/0x8b0 [ 808.106642][T16328] ? _raw_write_unlock+0x28/0x50 [ 808.106699][T16328] proc_create_reg+0x7d/0x180 [ 808.106749][T16328] proc_create_net_data+0x8e/0x1c0 [ 808.106795][T16328] ? __pfx_proc_create_net_data+0x10/0x10 [ 808.106843][T16328] ? __pfx_uevent_net_rcv+0x10/0x10 [ 808.106885][T16328] ? __pfx_dev_proc_net_init+0x10/0x10 [ 808.106927][T16328] wext_proc_init+0x53/0x70 [ 808.106956][T16328] dev_proc_net_init+0x10b/0x220 [ 808.106998][T16328] ops_init+0x1e2/0x5f0 [ 808.107051][T16328] setup_net+0x11d/0x3a0 [ 808.107099][T16328] ? __pfx_setup_net+0x10/0x10 [ 808.107144][T16328] ? lockdep_init_map_type+0x5c/0x270 [ 808.107190][T16328] ? mutex_init_lockep+0x110/0x150 [ 808.107229][T16328] copy_net_ns+0x351/0x7c0 [ 808.107265][T16328] create_new_namespaces+0x3ea/0xab0 [ 808.107321][T16328] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 808.107370][T16328] ksys_unshare+0x45b/0xa40 [ 808.107401][T16328] ? __pfx_ksys_unshare+0x10/0x10 [ 808.107454][T16328] ? xfd_validate_state+0x61/0x180 [ 808.107496][T16328] __x64_sys_unshare+0x31/0x40 [ 808.107524][T16328] do_syscall_64+0xcd/0xf80 [ 808.107559][T16328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.107592][T16328] RIP: 0033:0x7fae70d8f7c9 [ 808.107619][T16328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.107651][T16328] RSP: 002b:00007fae6eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 808.107682][T16328] RAX: ffffffffffffffda RBX: 00007fae70fe5fa0 RCX: 00007fae70d8f7c9 [ 808.107703][T16328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 808.107722][T16328] RBP: 00007fae70e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 808.107741][T16328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.107760][T16328] R13: 00007fae70fe6038 R14: 00007fae70fe5fa0 R15: 00007ffd59edd488 [ 808.107803][T16328] [ 808.115356][T16329] CPU: 0 UID: 0 PID: 16329 Comm: syz.3.2078 Tainted: G U L syzkaller #0 PREEMPT(full) [ 808.115424][T16329] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 808.115437][T16329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.115456][T16329] Call Trace: [ 808.115467][T16329] [ 808.115480][T16329] dump_stack_lvl+0x16c/0x1f0 [ 808.115538][T16329] should_fail_ex+0x512/0x640 [ 808.115574][T16329] ? __kmalloc_cache_noprof+0x5f/0x800 [ 808.115616][T16329] should_failslab+0xc2/0x120 [ 808.115667][T16329] __kmalloc_cache_noprof+0x80/0x800 [ 808.115705][T16329] ? nvmf_dev_write+0x161/0xc70 [ 808.115750][T16329] ? nvmf_dev_write+0x161/0xc70 [ 808.115784][T16329] nvmf_dev_write+0x161/0xc70 [ 808.115913][T16329] ? rw_verify_area+0xcf/0x6c0 [ 808.116053][T16329] ? __pfx_nvmf_dev_write+0x10/0x10 [ 808.116160][T16329] vfs_write+0x2a0/0x11d0 [ 808.116300][T16329] ? __pfx_vfs_write+0x10/0x10 [ 808.116413][T16329] ? find_held_lock+0x2b/0x80 [ 808.116523][T16329] ? __fget_files+0x204/0x3c0 [ 808.116663][T16329] ? __fget_files+0x20e/0x3c0 [ 808.116816][T16329] ksys_write+0x12a/0x250 [ 808.116932][T16329] ? __pfx_ksys_write+0x10/0x10 [ 808.117079][T16329] do_syscall_64+0xcd/0xf80 [ 808.117177][T16329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.117262][T16329] RIP: 0033:0x7f699838f7c9 [ 808.117347][T16329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.117458][T16329] RSP: 002b:00007f69991f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 808.117533][T16329] RAX: ffffffffffffffda RBX: 00007f69985e6090 RCX: 00007f699838f7c9 [ 808.117593][T16329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 808.117647][T16329] RBP: 00007f6998413f91 R08: 0000000000000000 R09: 0000000000000000 [ 808.117692][T16329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.117744][T16329] R13: 00007f69985e6128 R14: 00007f69985e6090 R15: 00007ffceeba3308 [ 808.117858][T16329] [ 808.885032][T16130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.213815][T16130] veth0_vlan: entered promiscuous mode [ 809.248850][T16130] veth1_vlan: entered promiscuous mode [ 809.318082][T16130] veth0_macvtap: entered promiscuous mode [ 809.333088][T16339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2087'. [ 809.605876][T16130] veth1_macvtap: entered promiscuous mode [ 809.788227][T16130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.821172][T16130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.893094][ T1330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.915846][ T1330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.962090][ T1330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.050302][ T1330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.447001][ T8592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.465271][ T8592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.535775][T10582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.553532][T10582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.725797][T16350] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 811.055596][T16358] device-mapper: ioctl: device name cannot contain '/' [ 813.273029][T16409] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2097'. [ 813.625844][T16413] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[16413] [ 814.545122][T16433] FAULT_INJECTION: forcing a failure. [ 814.545122][T16433] name failslab, interval 1, probability 0, space 0, times 0 [ 814.554455][T16427] sp0: Synchronizing with TNC [ 814.598787][T16433] CPU: 0 UID: 0 PID: 16433 Comm: syz.3.2100 Tainted: G U L syzkaller #0 PREEMPT(full) [ 814.598839][T16433] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 814.598850][T16433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.598880][T16433] Call Trace: [ 814.598890][T16433] [ 814.598902][T16433] dump_stack_lvl+0x16c/0x1f0 [ 814.598959][T16433] should_fail_ex+0x512/0x640 [ 814.598995][T16433] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 814.599048][T16433] should_failslab+0xc2/0x120 [ 814.599097][T16433] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 814.599143][T16433] ? string+0x2c4/0x4f0 [ 814.599183][T16433] ? kstrdup_const+0x63/0x80 [ 814.599229][T16433] ? kstrdup+0x53/0x100 [ 814.599262][T16433] kstrdup+0x53/0x100 [ 814.599300][T16433] kstrdup_const+0x63/0x80 [ 814.599337][T16433] __kernfs_new_node+0x9b/0x9b0 [ 814.599379][T16433] ? __pfx___kernfs_new_node+0x10/0x10 [ 814.599426][T16433] ? find_held_lock+0x2b/0x80 [ 814.599468][T16433] ? kernfs_root+0xee/0x2a0 [ 814.599512][T16433] kernfs_new_node+0x13c/0x1e0 [ 814.599553][T16433] __kernfs_create_file+0x53/0x350 [ 814.599599][T16433] cgroup_addrm_files+0x546/0xc20 [ 814.599650][T16433] ? __xa_store+0x1dc/0x2e0 [ 814.599676][T16433] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 814.599714][T16433] ? __pfx___xa_store+0x10/0x10 [ 814.599752][T16433] ? do_raw_spin_unlock+0x172/0x230 [ 814.599790][T16433] css_populate_dir+0x169/0x570 [ 814.599827][T16433] cgroup_apply_control_enable+0x3f3/0xbb0 [ 814.599882][T16433] cgroup_mkdir+0x5d9/0x12d0 [ 814.599926][T16433] ? __pfx_cgroup_mkdir+0x10/0x10 [ 814.599964][T16433] kernfs_iop_mkdir+0x111/0x190 [ 814.599997][T16433] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 814.600026][T16433] vfs_mkdir+0x731/0xb60 [ 814.600062][T16433] do_mkdirat+0x442/0x5e0 [ 814.600105][T16433] ? __pfx_do_mkdirat+0x10/0x10 [ 814.600145][T16433] ? strncpy_from_user+0x203/0x2e0 [ 814.600177][T16433] ? getname_flags.part.0+0x1c5/0x550 [ 814.600210][T16433] __x64_sys_mkdir+0xef/0x140 [ 814.600251][T16433] do_syscall_64+0xcd/0xf80 [ 814.600278][T16433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.600304][T16433] RIP: 0033:0x7f699838f7c9 [ 814.600324][T16433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.600349][T16433] RSP: 002b:00007f69991f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 814.600373][T16433] RAX: ffffffffffffffda RBX: 00007f69985e6090 RCX: 00007f699838f7c9 [ 814.600390][T16433] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 814.600405][T16433] RBP: 00007f6998413f91 R08: 0000000000000000 R09: 0000000000000000 [ 814.600421][T16433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.600436][T16433] R13: 00007f69985e6128 R14: 00007f69985e6090 R15: 00007ffceeba3308 [ 814.600469][T16433] [ 814.600490][T16433] cgroup: cgroup_addrm_files: failed to add kmem.limit_in_bytes, err=-12 [ 815.583811][ T1148] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 923 with max blocks 13 with error 117 [ 815.583955][ T1148] EXT4-fs (sda1): This should not happen!! Data will be lost [ 815.583955][ T1148] [ 816.758865][T16472] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 816.981538][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2109'. [ 817.831119][T16501] FAULT_INJECTION: forcing a failure. [ 817.831119][T16501] name fail_futex, interval 1, probability 0, space 0, times 0 [ 817.934413][T16501] CPU: 1 UID: 0 PID: 16501 Comm: syz.5.2116 Tainted: G U L syzkaller #0 PREEMPT(full) [ 817.934464][T16501] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 817.934473][T16501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.934486][T16501] Call Trace: [ 817.934493][T16501] [ 817.934502][T16501] dump_stack_lvl+0x16c/0x1f0 [ 817.934544][T16501] should_fail_ex+0x512/0x640 [ 817.934575][T16501] get_futex_key+0x1d0/0x15f0 [ 817.934615][T16501] ? __pfx_get_futex_key+0x10/0x10 [ 817.934642][T16501] ? __lock_acquire+0x436/0x2890 [ 817.934668][T16501] futex_wake+0xea/0x530 [ 817.934724][T16501] ? futex_wait+0x120/0x380 [ 817.934771][T16501] ? __pfx_futex_wake+0x10/0x10 [ 817.934823][T16501] ? __fget_files+0x204/0x3c0 [ 817.934863][T16501] do_futex+0x1e3/0x350 [ 817.934890][T16501] ? __pfx_do_futex+0x10/0x10 [ 817.934915][T16501] ? fdget+0x187/0x210 [ 817.934946][T16501] ? __sys_sendmsg+0x18c/0x220 [ 817.934980][T16501] __x64_sys_futex+0x1e0/0x4c0 [ 817.935010][T16501] ? __pfx___x64_sys_futex+0x10/0x10 [ 817.935047][T16501] do_syscall_64+0xcd/0xf80 [ 817.935094][T16501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.935126][T16501] RIP: 0033:0x7fae70d8f7c9 [ 817.935150][T16501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.935180][T16501] RSP: 002b:00007fae6eff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 817.935209][T16501] RAX: ffffffffffffffda RBX: 00007fae70fe5fa8 RCX: 00007fae70d8f7c9 [ 817.935229][T16501] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fae70fe5fac [ 817.935248][T16501] RBP: 00007fae70fe5fa0 R08: 00007fae71b21000 R09: 0000000000000000 [ 817.935266][T16501] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 817.935285][T16501] R13: 00007fae70fe6038 R14: 00007ffd59edd3a0 R15: 00007ffd59edd488 [ 817.935326][T16501] [ 818.874937][T16530] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 818.941190][T16534] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 820.346403][T16533] kexec: Could not allocate control_code_buffer [ 820.778495][T16557] Invalid ELF header magic: != ELF [ 822.032362][ T5841] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 822.055601][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2135'. [ 822.055601][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2135'. [ 822.720224][T16588] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 824.773549][T16611] random: crng reseeded on system resumption [ 827.325267][T16637] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 929 with max blocks 4 with error 117 [ 827.541393][T16637] EXT4-fs (sda1): This should not happen!! Data will be lost [ 827.541393][T16637] [ 828.052224][T16660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 828.093545][T16660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 828.114589][T16660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 828.125678][T16660] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 828.375378][T16660] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 828.523745][T16660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 828.579421][T16660] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 828.692824][T16660] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 828.768266][T16660] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 830.085160][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 830.091261][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 830.164644][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 830.564293][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 831.706866][T16707] Invalid ELF header magic: != ELF [ 832.235313][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 832.634336][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 834.233809][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2175'. [ 834.323603][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 834.703357][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 836.244048][T16784] Invalid ELF header magic: != ELF [ 836.773890][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 837.567134][T16821] block nbd1: Unsupported socket: should be TCP or UNIX. [ 839.094170][T16864] cgroup: fork rejected by pids controller in /syz3 [ 842.833380][T16959] loop6: detected capacity change from 0 to 8 [ 844.660455][T16988] NFSD: Failed to start, no listeners configured. [ 845.710241][T10568] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1349 with max blocks 19 with error 117 [ 845.767778][T10568] EXT4-fs (sda1): This should not happen!! Data will be lost [ 845.767778][T10568] [ 845.934192][T10568] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 935 with max blocks 1 with error 117 [ 845.965134][T10568] EXT4-fs (sda1): This should not happen!! Data will be lost [ 845.965134][T10568] [ 847.762387][T17045] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2230'. [ 848.013906][ T5850] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 848.746107][T17061] netlink: 'syz.3.2234': attribute type 11 has an invalid length. [ 849.230336][T17069] futex_wake_op: syz.3.2236 tries to shift op by -2048; fix this program [ 849.267559][T17069] futex_wake_op: syz.3.2236 tries to shift op by -2048; fix this program [ 849.297459][T17069] 0x000000000001-0x000000020000 : "" [ 849.324869][T17069] ftl_cs: FTL header corrupt! [ 851.390683][T17122] netlink: 'syz.2.2247': attribute type 19 has an invalid length. [ 851.398934][T17122] netlink: 226 bytes leftover after parsing attributes in process `syz.2.2247'. [ 851.432184][T17119] Invalid ELF header magic: != ELF [ 851.716018][T17131] zram0: detected capacity change from 0 to 8 [ 854.533035][T17174] random: crng reseeded on system resumption [ 855.830507][T17189] can: request_module (can-proto-0) failed. [ 856.045912][T10582] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 926 with max blocks 5 with error 117 [ 856.122738][T10582] EXT4-fs (sda1): This should not happen!! Data will be lost [ 856.122738][T10582] [ 856.608714][T17199] CIFS mount error: No usable UNC path provided in device string! [ 856.608714][T17199] [ 856.673543][T17199] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 859.135265][ T9] smpboot: CPU 1 is now offline [ 859.289079][T17222] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 861.992908][T17255] futex_wake_op: syz.2.2279 tries to shift op by -2048; fix this program [ 862.021198][T17255] futex_wake_op: syz.2.2279 tries to shift op by -2048; fix this program [ 862.070342][T17255] 0x000000000001-0x000000020000 : "" [ 862.106735][T17255] ftl_cs: FTL header corrupt! [ 862.431707][T17259] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1350 with max blocks 18 with error 117 [ 862.557640][T17259] EXT4-fs (sda1): This should not happen!! Data will be lost [ 862.557640][T17259] [ 863.612389][T17277] netlink: 'syz.5.2284': attribute type 33 has an invalid length. [ 866.156794][T17488] zswap: compressor not available [ 866.457561][T17488] FAULT_INJECTION: forcing a failure. [ 866.457561][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 866.532682][T17488] CPU: 1 UID: 0 PID: 17488 Comm: syz.2.2289 Tainted: G U L syzkaller #0 PREEMPT(full) [ 866.532736][T17488] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 866.532749][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.532769][T17488] Call Trace: [ 866.532778][T17488] [ 866.532791][T17488] dump_stack_lvl+0x16c/0x1f0 [ 866.532851][T17488] should_fail_ex+0x512/0x640 [ 866.532889][T17488] ? __kmalloc_noprof+0xca/0x910 [ 866.532929][T17488] should_failslab+0xc2/0x120 [ 866.532980][T17488] __kmalloc_noprof+0xeb/0x910 [ 866.533017][T17488] ? __netlink_kernel_create+0x17f/0x750 [ 866.533074][T17488] ? __netlink_kernel_create+0x17f/0x750 [ 866.533121][T17488] __netlink_kernel_create+0x17f/0x750 [ 866.533176][T17488] ? __pfx___netlink_kernel_create+0x10/0x10 [ 866.533240][T17488] rtnetlink_net_init+0xb9/0x140 [ 866.533283][T17488] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 866.533323][T17488] ? lockdep_init_map_type+0x5c/0x270 [ 866.533355][T17488] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 866.533394][T17488] ? __pfx_rtnetlink_bind+0x10/0x10 [ 866.533438][T17488] ? mutex_init_lockep+0x110/0x150 [ 866.533476][T17488] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 866.533516][T17488] ops_init+0x1e2/0x5f0 [ 866.533568][T17488] setup_net+0x11d/0x3a0 [ 866.533626][T17488] ? __pfx_setup_net+0x10/0x10 [ 866.533670][T17488] ? lockdep_init_map_type+0x5c/0x270 [ 866.533705][T17488] ? mutex_init_lockep+0x110/0x150 [ 866.533744][T17488] copy_net_ns+0x351/0x7c0 [ 866.533778][T17488] create_new_namespaces+0x3ea/0xab0 [ 866.533832][T17488] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 866.533879][T17488] ksys_unshare+0x45b/0xa40 [ 866.533908][T17488] ? __pfx_ksys_unshare+0x10/0x10 [ 866.533959][T17488] ? xfd_validate_state+0x61/0x180 [ 866.533989][T17488] __x64_sys_unshare+0x31/0x40 [ 866.534009][T17488] do_syscall_64+0xcd/0xf80 [ 866.534033][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.534056][T17488] RIP: 0033:0x7f18de78f7c9 [ 866.534074][T17488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.534096][T17488] RSP: 002b:00007f18dc9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 866.534117][T17488] RAX: ffffffffffffffda RBX: 00007f18de9e5fa0 RCX: 00007f18de78f7c9 [ 866.534132][T17488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 866.534147][T17488] RBP: 00007f18de813f91 R08: 0000000000000000 R09: 0000000000000000 [ 866.534160][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.534174][T17488] R13: 00007f18de9e6038 R14: 00007f18de9e5fa0 R15: 00007fff52d5a898 [ 866.534204][T17488] [ 868.305533][ T5850] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 868.957078][T17521] random: crng reseeded on system resumption [ 869.332517][T17521] can: request_module (can-proto-0) failed. [ 870.270111][T15483] smpboot: CPU 1 is now offline [ 870.376257][T17533] FAULT_INJECTION: forcing a failure. [ 870.376257][T17533] name failslab, interval 1, probability 0, space 0, times 0 [ 870.453641][T17533] CPU: 0 UID: 0 PID: 17533 Comm: syz.2.2294 Tainted: G U L syzkaller #0 PREEMPT(full) [ 870.453681][T17533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 870.453690][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 870.453703][T17533] Call Trace: [ 870.453710][T17533] [ 870.453719][T17533] dump_stack_lvl+0x16c/0x1f0 [ 870.453760][T17533] should_fail_ex+0x512/0x640 [ 870.453787][T17533] ? __kmalloc_noprof+0xca/0x910 [ 870.453815][T17533] should_failslab+0xc2/0x120 [ 870.453850][T17533] __kmalloc_noprof+0xeb/0x910 [ 870.453874][T17533] ? __pfx_aa_file_perm+0x10/0x10 [ 870.453906][T17533] ? kernfs_fop_write_iter+0x237/0x570 [ 870.453944][T17533] ? kernfs_fop_write_iter+0x237/0x570 [ 870.453976][T17533] ? __lock_acquire+0x436/0x2890 [ 870.453995][T17533] kernfs_fop_write_iter+0x237/0x570 [ 870.454037][T17533] do_iter_readv_writev+0x662/0x9e0 [ 870.454071][T17533] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 870.454116][T17533] vfs_writev+0x35f/0xde0 [ 870.454153][T17533] ? __mutex_lock+0x1291/0x1ca0 [ 870.454179][T17533] ? __mutex_lock+0x1291/0x1ca0 [ 870.454204][T17533] ? __pfx_vfs_writev+0x10/0x10 [ 870.454233][T17533] ? fdget_pos+0x2a2/0x370 [ 870.454287][T17533] ? __fget_files+0x20e/0x3c0 [ 870.454317][T17533] ? __fget_files+0x170/0x3c0 [ 870.454356][T17533] ? do_writev+0x132/0x340 [ 870.454384][T17533] do_writev+0x132/0x340 [ 870.454414][T17533] ? __pfx_do_writev+0x10/0x10 [ 870.454453][T17533] do_syscall_64+0xcd/0xf80 [ 870.454476][T17533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.454499][T17533] RIP: 0033:0x7f18de78f7c9 [ 870.454516][T17533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.454538][T17533] RSP: 002b:00007f18dc9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 870.454559][T17533] RAX: ffffffffffffffda RBX: 00007f18de9e6090 RCX: 00007f18de78f7c9 [ 870.454574][T17533] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 870.454588][T17533] RBP: 00007f18dc9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 870.454601][T17533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.454615][T17533] R13: 00007f18de9e6128 R14: 00007f18de9e6090 R15: 00007fff52d5a898 [ 870.454650][T17533] [ 872.148396][T17552] ovs_: entered promiscuous mode [ 873.167103][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 873.178311][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 873.188716][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 873.196750][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 873.208193][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 874.128461][T17579] vhci_hcd vhci_hcd.0: invalid port number 16 [ 874.589355][T15961] bridge_slave_1: left allmulticast mode [ 874.616654][T15961] bridge_slave_1: left promiscuous mode [ 874.622471][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.862215][T15961] bridge_slave_0: left allmulticast mode [ 874.897349][T15961] bridge_slave_0: left promiscuous mode [ 874.952316][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.252998][ T5850] Bluetooth: hci2: command tx timeout [ 876.171914][T17604] netlink: zone id is out of range [ 877.107391][T15961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.164405][T15961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.215505][T15961] bond0 (unregistering): Released all slaves [ 877.303822][ T5841] Bluetooth: hci2: command tx timeout [ 877.845816][T17566] chnl_net:caif_netlink_parms(): no params data found [ 878.427907][T15961] hsr_slave_0: left promiscuous mode [ 878.477701][T15961] hsr_slave_1: left promiscuous mode [ 878.494933][T15961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.518274][T15961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.546047][T15961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.574179][T15961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.656325][T15961] veth1_macvtap: left promiscuous mode [ 878.677539][T15961] veth1_vlan: left promiscuous mode [ 878.696630][T15961] veth0_vlan: left promiscuous mode [ 879.376781][ T5841] Bluetooth: hci2: command tx timeout [ 880.651242][T17629] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 880.859662][ T30] audit: type=1800 audit(4294987071.717:31): pid=17632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2316" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 881.019205][T15961] team0 (unregistering): Port device team_slave_1 removed [ 881.155837][T15961] team0 (unregistering): Port device team_slave_0 removed [ 881.444193][ T5841] Bluetooth: hci2: command tx timeout [ 882.225552][T17566] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.237784][T17566] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.264464][T17566] bridge_slave_0: entered allmulticast mode [ 882.282737][T17566] bridge_slave_0: entered promiscuous mode [ 882.322852][T17566] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.349999][T17566] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.357330][T17566] bridge_slave_1: entered allmulticast mode [ 882.392069][T17566] bridge_slave_1: entered promiscuous mode [ 882.436868][T17566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.465784][T17566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.620630][T17566] team0: Port device team_slave_0 added [ 882.647271][T17566] team0: Port device team_slave_1 added [ 882.838542][T17566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.860177][T17566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.940024][T17566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.961389][T17566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.994638][T17566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.071521][T17566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.364341][T17566] hsr_slave_0: entered promiscuous mode [ 883.401476][T17566] hsr_slave_1: entered promiscuous mode [ 883.474945][T17566] debugfs: 'hsr0' already exists in 'hsr' [ 883.480728][T17566] Cannot create hsr debugfs directory [ 883.901189][T17654] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2320'. [ 884.085948][T17566] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 884.124576][T17566] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 884.156563][T17566] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 884.208311][T17566] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 884.349211][T17657] ima: policy update failed [ 884.389034][ T30] audit: type=1802 audit(4294987075.274:32): pid=17657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2323" res=0 errno=0 [ 884.546662][T17566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.590579][T17566] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.630496][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.637751][T10568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.726189][T10585] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.733548][T10585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.033354][T17566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.204602][T17697] random: crng reseeded on system resumption [ 887.216742][T17566] veth0_vlan: entered promiscuous mode [ 887.233696][T17566] veth1_vlan: entered promiscuous mode [ 887.437682][T17566] veth0_macvtap: entered promiscuous mode [ 887.486561][T17566] veth1_macvtap: entered promiscuous mode [ 887.547244][T17566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.641905][T17566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.752526][ T1330] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.771930][ T1330] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.806354][ T1330] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.815826][ T1330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.060444][T10572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.091646][T10572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.181736][T10572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.200888][T10572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.878700][ T5894] smpboot: CPU 1 is now offline [ 888.982563][T17755] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 889.138382][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 889.151092][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 889.161482][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 889.172511][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 889.181228][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 889.628830][T17772] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2344'. [ 889.656457][T17772] nbd: must specify at least one socket [ 890.281404][T17759] chnl_net:caif_netlink_parms(): no params data found [ 890.535718][T17786] netlink: Unknown conntrack attr (type=257, max=9) [ 890.580845][T17788] netlink: 346 bytes leftover after parsing attributes in process `syz.6.2346'. [ 890.646467][T17791] netlink: 346 bytes leftover after parsing attributes in process `syz.6.2346'. [ 890.815141][T17759] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.836881][T17759] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.868894][T17759] bridge_slave_0: entered allmulticast mode [ 890.887689][T17759] bridge_slave_0: entered promiscuous mode [ 890.939232][T17759] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.956029][T17759] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.971977][T17759] bridge_slave_1: entered allmulticast mode [ 890.988946][T17759] bridge_slave_1: entered promiscuous mode [ 891.182332][T17759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.238630][ T5850] Bluetooth: hci4: command tx timeout [ 891.258668][T17759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.269351][T17799] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.4294967293), cmd(0) [ 891.344597][T17759] team0: Port device team_slave_0 added [ 891.586902][ T5894] smpboot: CPU 1 is now offline [ 891.657162][T17759] team0: Port device team_slave_1 added [ 892.055640][T17759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.089437][T17759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.195922][T17759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.357446][T17759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.391756][T17759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.531473][T17759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.778746][T17759] hsr_slave_0: entered promiscuous mode [ 892.811213][T17759] hsr_slave_1: entered promiscuous mode [ 892.838916][T17759] debugfs: 'hsr0' already exists in 'hsr' [ 892.868003][T17759] Cannot create hsr debugfs directory [ 893.308519][ T5850] Bluetooth: hci4: command tx timeout [ 893.566165][T17834] netlink: 368 bytes leftover after parsing attributes in process `syz.5.2357'. [ 893.940514][T17759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.096858][T17839] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2358'. [ 894.192377][T17839] macsec0: entered allmulticast mode [ 894.213109][T17839] veth1_macvtap: entered allmulticast mode [ 894.277019][T17759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.415416][T17759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.532976][T17759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.125625][T17853] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 895.378126][ T5850] Bluetooth: hci4: command tx timeout [ 895.410058][T17759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 895.479252][T17759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 895.552348][T17759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 895.640725][T17759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 896.421246][T17875] hub 1-0:1.0: USB hub found [ 896.468583][T17875] hub 1-0:1.0: 1 port detected [ 896.529802][T17759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.685089][T17759] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.757168][T15961] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.764389][T15961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.783379][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2368'. [ 896.898928][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.906153][T15961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.451747][ T5850] Bluetooth: hci4: command tx timeout [ 897.917712][T17892] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 898.208919][T17759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.229569][T17895] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 898.419565][T17759] veth0_vlan: entered promiscuous mode [ 898.484457][T17759] veth1_vlan: entered promiscuous mode [ 898.638735][T17759] veth0_macvtap: entered promiscuous mode [ 898.697324][T17759] veth1_macvtap: entered promiscuous mode [ 898.812115][T17759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.885922][T17759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.979758][T15963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.045809][T15963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.098118][T15963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.167771][T15963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.468668][T15958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.501922][T17904] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2373'. [ 899.521740][T15958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.565716][T17904] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.574065][T17904] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.664095][T10572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.695382][T10572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.594251][T17920] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 900.719267][T17922] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 903.971674][T18001] FAULT_INJECTION: forcing a failure. [ 903.971674][T18001] name failslab, interval 1, probability 0, space 0, times 0 [ 904.011454][T18001] CPU: 1 UID: 0 PID: 18001 Comm: syz.5.2394 Tainted: G U L syzkaller #0 PREEMPT(full) [ 904.011511][T18001] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 904.011525][T18001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 904.011545][T18001] Call Trace: [ 904.011566][T18001] [ 904.011580][T18001] dump_stack_lvl+0x16c/0x1f0 [ 904.011642][T18001] should_fail_ex+0x512/0x640 [ 904.011682][T18001] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 904.011729][T18001] should_failslab+0xc2/0x120 [ 904.011780][T18001] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 904.011819][T18001] ? __lock_acquire+0x436/0x2890 [ 904.011851][T18001] ? __d_alloc+0x35/0xa80 [ 904.011886][T18001] ? __d_alloc+0x35/0xa80 [ 904.011913][T18001] __d_alloc+0x35/0xa80 [ 904.011946][T18001] d_alloc_pseudo+0x1c/0xc0 [ 904.011986][T18001] alloc_file_pseudo+0xcf/0x230 [ 904.012026][T18001] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 904.012065][T18001] ? _raw_spin_unlock+0x28/0x50 [ 904.012112][T18001] ? alloc_fd+0x471/0x7d0 [ 904.012164][T18001] __anon_inode_getfile+0xe8/0x280 [ 904.012204][T18001] __anon_inode_getfd+0x5c/0x160 [ 904.012242][T18001] do_inotify_init+0x497/0x5f0 [ 904.012279][T18001] ? rcu_is_watching+0x12/0xc0 [ 904.012326][T18001] __x64_sys_inotify_init1+0x30/0x40 [ 904.012368][T18001] do_syscall_64+0xcd/0xf80 [ 904.012402][T18001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.012435][T18001] RIP: 0033:0x7fae70d8f7c9 [ 904.012462][T18001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.012495][T18001] RSP: 002b:00007fae6eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 904.012527][T18001] RAX: ffffffffffffffda RBX: 00007fae70fe5fa0 RCX: 00007fae70d8f7c9 [ 904.012549][T18001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 904.012576][T18001] RBP: 00007fae70e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 904.012596][T18001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.012615][T18001] R13: 00007fae70fe6038 R14: 00007fae70fe5fa0 R15: 00007ffd59edd488 [ 904.012658][T18001] [ 905.572040][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 906.066824][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2402'. [ 906.078945][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2402'. [ 906.159165][T18040] binder: 18034:18040 ioctl 5380 2000000000c0 returned -22 [ 906.234179][T18039] sd 0:0:1:0: PR command failed: 1026 [ 906.259371][T18035] sd 0:0:1:0: PR command failed: 1026 [ 906.302807][T18039] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 906.317102][T18035] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 906.349543][T18039] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 906.367650][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2402'. [ 906.389940][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2402'. [ 906.406894][T18035] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 906.649619][T18047] mkiss: ax0: crc mode is auto. [ 906.798668][T15963] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 922 with max blocks 14 with error 117 [ 906.848706][T15963] EXT4-fs (sda1): This should not happen!! Data will be lost [ 906.848706][T15963] [ 906.940440][T18055] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2406'. [ 906.949940][T18057] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2406'. [ 907.018917][ T5850] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 907.353917][ T30] audit: type=1807 audit(4294987098.331:33): UNKNOWN=òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ [ 907.363788][ T30] audit: type=1802 audit(4294987098.362:34): pid=18050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2404" res=0 errno=0 [ 907.556635][T18061] random: crng reseeded on system resumption [ 907.700727][ T5841] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 907.885142][T18065] FAULT_INJECTION: forcing a failure. [ 907.885142][T18065] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 907.899843][T18065] CPU: 0 UID: 0 PID: 18065 Comm: syz.5.2410 Tainted: G U L syzkaller #0 PREEMPT(full) [ 907.899897][T18065] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 907.899915][T18065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 907.899929][T18065] Call Trace: [ 907.899937][T18065] [ 907.899946][T18065] dump_stack_lvl+0x16c/0x1f0 [ 907.899989][T18065] should_fail_ex+0x512/0x640 [ 907.900022][T18065] should_fail_alloc_page+0xe7/0x130 [ 907.900061][T18065] prepare_alloc_pages+0x401/0x670 [ 907.900102][T18065] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 907.900132][T18065] ? rcu_is_watching+0x12/0xc0 [ 907.900165][T18065] ? stack_depot_save_flags+0x29/0x9b0 [ 907.900198][T18065] ? kasan_save_stack+0x42/0x60 [ 907.900229][T18065] ? kasan_save_stack+0x33/0x60 [ 907.900264][T18065] ? kasan_save_track+0x14/0x30 [ 907.900294][T18065] ? __kasan_slab_alloc+0x89/0x90 [ 907.900326][T18065] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 907.900352][T18065] ? __pmd_alloc+0xbf/0x9c0 [ 907.900386][T18065] ? __handle_mm_fault+0xbeb/0x2bb0 [ 907.900409][T18065] ? handle_mm_fault+0x3fe/0xad0 [ 907.900432][T18065] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 907.900460][T18065] ? do_mlock+0x441/0x800 [ 907.900484][T18065] ? do_syscall_64+0xcd/0xf80 [ 907.900521][T18065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 907.900558][T18065] ? policy_nodemask+0xea/0x4e0 [ 907.900596][T18065] alloc_pages_mpol+0x1fb/0x550 [ 907.900633][T18065] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 907.900677][T18065] alloc_pages_noprof+0x131/0x390 [ 907.900713][T18065] pte_alloc_one+0x1e/0x3d0 [ 907.900746][T18065] do_fault+0x8b8/0x1ad0 [ 907.900779][T18065] ? __pfx_filemap_map_pages+0x10/0x10 [ 907.900805][T18065] ? __pmd_alloc+0x6aa/0x9c0 [ 907.900877][T18065] __handle_mm_fault+0x1919/0x2bb0 [ 907.900923][T18065] ? __pfx___handle_mm_fault+0x10/0x10 [ 907.900994][T18065] handle_mm_fault+0x3fe/0xad0 [ 907.901025][T18065] __get_user_pages+0x54e/0x3590 [ 907.901073][T18065] ? __pfx___get_user_pages+0x10/0x10 [ 907.901117][T18065] populate_vma_page_range+0x267/0x3f0 [ 907.901156][T18065] ? __pfx_populate_vma_page_range+0x10/0x10 [ 907.901192][T18065] ? __pfx_find_vma_intersection+0x10/0x10 [ 907.901228][T18065] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 907.901266][T18065] __mm_populate+0x1d8/0x380 [ 907.901304][T18065] ? __pfx___mm_populate+0x10/0x10 [ 907.901343][T18065] ? up_write+0x282/0x4e0 [ 907.901373][T18065] do_mlock+0x441/0x800 [ 907.901402][T18065] ? __pfx_do_mlock+0x10/0x10 [ 907.901427][T18065] ? __x64_sys_futex+0x1e0/0x4c0 [ 907.901452][T18065] ? __x64_sys_futex+0x1e9/0x4c0 [ 907.901479][T18065] ? fput+0x70/0xf0 [ 907.901502][T18065] ? xfd_validate_state+0x61/0x180 [ 907.901522][T18065] ? __pfx_ksys_write+0x10/0x10 [ 907.901561][T18065] __x64_sys_mlock+0x59/0x80 [ 907.901589][T18065] do_syscall_64+0xcd/0xf80 [ 907.901613][T18065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.901636][T18065] RIP: 0033:0x7fae70d8f7c9 [ 907.901655][T18065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.901677][T18065] RSP: 002b:00007fae6eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 907.901698][T18065] RAX: ffffffffffffffda RBX: 00007fae70fe5fa0 RCX: 00007fae70d8f7c9 [ 907.901714][T18065] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 907.901728][T18065] RBP: 00007fae70e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 907.901742][T18065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.901756][T18065] R13: 00007fae70fe6038 R14: 00007fae70fe5fa0 R15: 00007ffd59edd488 [ 907.901786][T18065] [ 908.293853][T18048] ima: policy update failed [ 908.453340][ T30] audit: type=1802 audit(4294987099.296:35): pid=18048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2404" res=0 errno=0 [ 910.166986][T18092] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2416'. [ 910.257018][T18092] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2416'. [ 911.462550][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 913.523924][T18133] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2424'. [ 914.351438][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2431'. [ 914.479931][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2429'. [ 914.566393][T18161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2431'. [ 915.532421][T18171] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2433'. [ 915.572895][T18170] KVM: debugfs: duplicate directory 18170-3 [ 915.979823][T18178] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 916.905767][T18186] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2438'. [ 917.064612][T18190] __vm_enough_memory: pid: 18190, comm: syz.6.2438, bytes: 4398046511104 not enough memory for the allocation [ 917.820057][T18215] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 918.125064][ T5841] Bluetooth: hci4: Malformed LE Event: 0x0b [ 918.671722][T18230] FAULT_INJECTION: forcing a failure. [ 918.671722][T18230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.684933][T18230] CPU: 0 UID: 0 PID: 18230 Comm: syz.2.2449 Tainted: G U L syzkaller #0 PREEMPT(full) [ 918.684971][T18230] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 918.684979][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 918.684992][T18230] Call Trace: [ 918.685000][T18230] [ 918.685009][T18230] dump_stack_lvl+0x16c/0x1f0 [ 918.685051][T18230] should_fail_ex+0x512/0x640 [ 918.685081][T18230] _copy_from_user+0x2e/0xd0 [ 918.685109][T18230] map_update_elem+0x57d/0x930 [ 918.685144][T18230] ? __pfx_map_update_elem+0x10/0x10 [ 918.685182][T18230] __sys_bpf+0x1573/0x4980 [ 918.685208][T18230] ? __pfx___sys_bpf+0x10/0x10 [ 918.685233][T18230] ? find_held_lock+0x2b/0x80 [ 918.685270][T18230] ? vfs_write+0x15d/0x11d0 [ 918.685310][T18230] ? __pfx_vfs_write+0x10/0x10 [ 918.685359][T18230] ? ksys_write+0x1ac/0x250 [ 918.685391][T18230] ? __pfx_ksys_write+0x10/0x10 [ 918.685428][T18230] __x64_sys_bpf+0x78/0xc0 [ 918.685449][T18230] ? lockdep_hardirqs_on+0x7c/0x110 [ 918.685470][T18230] do_syscall_64+0xcd/0xf80 [ 918.685493][T18230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.685515][T18230] RIP: 0033:0x7f18de78f7c9 [ 918.685533][T18230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.685555][T18230] RSP: 002b:00007f18dc9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 918.685576][T18230] RAX: ffffffffffffffda RBX: 00007f18de9e5fa0 RCX: 00007f18de78f7c9 [ 918.685591][T18230] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000002 [ 918.685605][T18230] RBP: 00007f18dc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 918.685619][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.685632][T18230] R13: 00007f18de9e6038 R14: 00007f18de9e5fa0 R15: 00007fff52d5a898 [ 918.685662][T18230] [ 918.897931][T18231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2448'. [ 918.912444][ T30] audit: type=1107 audit(1257.288:36): pid=18227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 918.958321][T18231] veth1_macvtap: left promiscuous mode [ 919.015442][ T30] audit: type=1107 audit(1257.288:37): pid=18227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 919.134699][T18233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2450'. [ 920.042679][T18234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 920.062731][T18234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 920.075187][T18234] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 920.168150][T18234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 920.191633][T18234] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 920.221499][T18234] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 920.288117][T18234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 920.305830][T18234] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 920.340891][T18234] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 920.566932][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2453'. [ 921.346335][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 921.521178][T18272] FAULT_INJECTION: forcing a failure. [ 921.521178][T18272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.555157][T18272] CPU: 0 UID: 0 PID: 18272 Comm: syz.3.2459 Tainted: G U L syzkaller #0 PREEMPT(full) [ 921.555209][T18272] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 921.555221][T18272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 921.555240][T18272] Call Trace: [ 921.555250][T18272] [ 921.555262][T18272] dump_stack_lvl+0x16c/0x1f0 [ 921.555320][T18272] should_fail_ex+0x512/0x640 [ 921.555363][T18272] _copy_to_user+0x32/0xd0 [ 921.555403][T18272] simple_read_from_buffer+0xcb/0x170 [ 921.555451][T18272] proc_fail_nth_read+0x197/0x240 [ 921.555505][T18272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 921.555561][T18272] ? rw_verify_area+0xcf/0x6c0 [ 921.555601][T18272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 921.555654][T18272] vfs_read+0x1e4/0xcf0 [ 921.555706][T18272] ? __pfx_vfs_read+0x10/0x10 [ 921.555777][T18272] ksys_read+0x12a/0x250 [ 921.555821][T18272] ? __pfx_ksys_read+0x10/0x10 [ 921.555877][T18272] do_syscall_64+0xcd/0xf80 [ 921.555910][T18272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.555943][T18272] RIP: 0033:0x7f475b58e1dc [ 921.555967][T18272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 921.555999][T18272] RSP: 002b:00007f475c42b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 921.556027][T18272] RAX: ffffffffffffffda RBX: 00007f475b7e5fa0 RCX: 00007f475b58e1dc [ 921.556046][T18272] RDX: 000000000000000f RSI: 00007f475c42b0a0 RDI: 0000000000000006 [ 921.556065][T18272] RBP: 00007f475c42b090 R08: 0000000000000000 R09: 0000000000000000 [ 921.556083][T18272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.556100][T18272] R13: 00007f475b7e6038 R14: 00007f475b7e5fa0 R15: 00007ffdf7e83288 [ 921.556139][T18272] [ 921.764068][ T30] audit: type=1800 audit(1260.152:38): pid=18274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2460" name="dbroot" dev="configfs" ino=78827 res=0 errno=0 [ 922.000870][ T8620] smpboot: CPU 1 is now offline [ 922.067620][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 922.162210][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 922.230023][T10585] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 24 with max blocks 32 with error 117 [ 922.282543][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 922.328988][T10585] EXT4-fs (sda1): This should not happen!! Data will be lost [ 922.328988][T10585] [ 923.823980][T18295] zswap: compressor not available [ 924.123186][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 924.203027][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 924.290148][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 926.273372][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 926.352753][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 926.605702][T18347] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 927.198139][T18356] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 929.333455][T18383] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 929.786483][T18384] program syz.5.2486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.908399][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'. [ 931.009241][T18411] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 932.223575][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2500'. [ 932.305728][T18429] bridge_slave_1: left allmulticast mode [ 932.340633][T18429] bridge_slave_1: left promiscuous mode [ 932.394590][T18429] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.448372][T18430] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 932.499276][T18429] bridge_slave_0: left allmulticast mode [ 932.566262][T18429] bridge_slave_0: left promiscuous mode [ 932.572060][T18429] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.212084][T18438] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 933.278909][T18433] FAULT_INJECTION: forcing a failure. [ 933.278909][T18433] name failslab, interval 1, probability 0, space 0, times 0 [ 933.374826][T18433] CPU: 0 UID: 0 PID: 18433 Comm: syz.6.2501 Tainted: G U L syzkaller #0 PREEMPT(full) [ 933.374871][T18433] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 933.374880][T18433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 933.374894][T18433] Call Trace: [ 933.374901][T18433] [ 933.374909][T18433] dump_stack_lvl+0x16c/0x1f0 [ 933.374958][T18433] should_fail_ex+0x512/0x640 [ 933.374986][T18433] ? __kmalloc_cache_noprof+0x5f/0x800 [ 933.375024][T18433] should_failslab+0xc2/0x120 [ 933.375061][T18433] __kmalloc_cache_noprof+0x80/0x800 [ 933.375087][T18433] ? rcu_is_watching+0x12/0xc0 [ 933.375120][T18433] ? call_usermodehelper_setup+0xaf/0x360 [ 933.375151][T18433] ? __pfx_free_modprobe_argv+0x10/0x10 [ 933.375181][T18433] ? call_usermodehelper_setup+0xaf/0x360 [ 933.375208][T18433] call_usermodehelper_setup+0xaf/0x360 [ 933.375240][T18433] __request_module+0x3bd/0x660 [ 933.375271][T18433] ? __pfx___request_module+0x10/0x10 [ 933.375313][T18433] ? find_held_lock+0x2b/0x80 [ 933.375350][T18433] inet6_create+0xbef/0x12b0 [ 933.375374][T18433] ? inet6_create+0x7f/0x12b0 [ 933.375397][T18433] __sock_create+0x339/0x8a0 [ 933.375426][T18433] __sys_socket+0x14d/0x260 [ 933.375452][T18433] ? __pfx___sys_socket+0x10/0x10 [ 933.375476][T18433] ? xfd_validate_state+0x61/0x180 [ 933.375496][T18433] ? __pfx_do_writev+0x10/0x10 [ 933.375533][T18433] __x64_sys_socket+0x72/0xb0 [ 933.375556][T18433] ? lockdep_hardirqs_on+0x7c/0x110 [ 933.375578][T18433] do_syscall_64+0xcd/0xf80 [ 933.375601][T18433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.375624][T18433] RIP: 0033:0x7fd02558f7c9 [ 933.375641][T18433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.375664][T18433] RSP: 002b:00007fd026409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 933.375685][T18433] RAX: ffffffffffffffda RBX: 00007fd0257e5fa0 RCX: 00007fd02558f7c9 [ 933.375700][T18433] RDX: 0000000000000007 RSI: 0000000000000005 RDI: 000000000000000a [ 933.375713][T18433] RBP: 00007fd025613f91 R08: 0000000000000000 R09: 0000000000000000 [ 933.375726][T18433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.375740][T18433] R13: 00007fd0257e6038 R14: 00007fd0257e5fa0 R15: 00007ffe260c7f78 [ 933.375769][T18433] [ 934.046588][T18446] vhci_hcd vhci_hcd.0: invalid port number 16 [ 934.239353][T18453] random: crng reseeded on system resumption [ 935.902200][T18481] Process accounting resumed [ 935.922500][T18490] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2513'. [ 937.654142][T18526] ima: policy update failed [ 937.740450][ T30] audit: type=1802 audit(1276.217:39): pid=18526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2515" res=0 errno=0 [ 937.800266][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2518'. [ 938.203290][T18508] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 938.554851][ T30] audit: type=1800 audit(1277.031:40): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2521" name="dbroot" dev="configfs" ino=81436 res=0 errno=0 [ 938.786244][T18565] binder: 18558:18565 ioctl 400c620e 0 returned -22 [ 939.461876][T18574] can: request_module (can-proto-5) failed. [ 940.020390][T18584] FAULT_INJECTION: forcing a failure. [ 940.020390][T18584] name failslab, interval 1, probability 0, space 0, times 0 [ 940.154466][T18584] CPU: 0 UID: 0 PID: 18584 Comm: syz.5.2525 Tainted: G U L syzkaller #0 PREEMPT(full) [ 940.154507][T18584] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 940.154516][T18584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 940.154530][T18584] Call Trace: [ 940.154538][T18584] [ 940.154547][T18584] dump_stack_lvl+0x16c/0x1f0 [ 940.154589][T18584] should_fail_ex+0x512/0x640 [ 940.154617][T18584] ? fs_reclaim_acquire+0xae/0x150 [ 940.154657][T18584] should_failslab+0xc2/0x120 [ 940.154694][T18584] kmem_cache_alloc_noprof+0x83/0x770 [ 940.154722][T18584] ? __pfx_map_id_range_down+0x10/0x10 [ 940.154755][T18584] ? security_inode_alloc+0x3b/0x2b0 [ 940.154786][T18584] ? security_inode_alloc+0x3b/0x2b0 [ 940.154810][T18584] security_inode_alloc+0x3b/0x2b0 [ 940.154837][T18584] inode_init_always_gfp+0xced/0x1040 [ 940.154877][T18584] alloc_inode+0x86/0x240 [ 940.154902][T18584] iget_locked+0x1d9/0x6d0 [ 940.154928][T18584] ? __pfx_iget_locked+0x10/0x10 [ 940.154955][T18584] ? kernfs_root+0xee/0x2a0 [ 940.154987][T18584] kernfs_get_inode+0x46/0x470 [ 940.155014][T18584] kernfs_iop_lookup+0x1a7/0x2d0 [ 940.155044][T18584] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 940.155072][T18584] lookup_open.isra.0+0x4e2/0x1780 [ 940.155108][T18584] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 940.155155][T18584] ? mnt_get_write_access+0x1e9/0x2f0 [ 940.155186][T18584] path_openat+0x12bb/0x3140 [ 940.155230][T18584] ? __pfx_path_openat+0x10/0x10 [ 940.155276][T18584] do_filp_open+0x20b/0x470 [ 940.155311][T18584] ? __pfx_do_filp_open+0x10/0x10 [ 940.155368][T18584] ? alloc_fd+0x471/0x7d0 [ 940.155418][T18584] do_sys_openat2+0x121/0x290 [ 940.155445][T18584] ? __pfx_do_sys_openat2+0x10/0x10 [ 940.155470][T18584] ? map_id_range_up+0x2ce/0x3b0 [ 940.155534][T18584] __x64_sys_openat+0x174/0x210 [ 940.155561][T18584] ? __pfx___x64_sys_openat+0x10/0x10 [ 940.155599][T18584] do_syscall_64+0xcd/0xf80 [ 940.155623][T18584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.155646][T18584] RIP: 0033:0x7fae70d8f7c9 [ 940.155665][T18584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.155688][T18584] RSP: 002b:00007fae6efd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 940.155709][T18584] RAX: ffffffffffffffda RBX: 00007fae70fe6090 RCX: 00007fae70d8f7c9 [ 940.155748][T18584] RDX: 000000000000a001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 940.155763][T18584] RBP: 00007fae70e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 940.155778][T18584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.155791][T18584] R13: 00007fae70fe6128 R14: 00007fae70fe6090 R15: 00007ffd59edd488 [ 940.155823][T18584] [ 942.362997][T18609] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 942.930871][T18627] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 943.349544][T18638] FAULT_INJECTION: forcing a failure. [ 943.349544][T18638] name failslab, interval 1, probability 0, space 0, times 0 [ 943.362277][T18638] CPU: 1 UID: 0 PID: 18638 Comm: syz.6.2540 Tainted: G U L syzkaller #0 PREEMPT(full) [ 943.362316][T18638] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 943.362325][T18638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 943.362339][T18638] Call Trace: [ 943.362347][T18638] [ 943.362356][T18638] dump_stack_lvl+0x16c/0x1f0 [ 943.362406][T18638] should_fail_ex+0x512/0x640 [ 943.362438][T18638] ? __kmalloc_cache_noprof+0x5f/0x800 [ 943.362469][T18638] should_failslab+0xc2/0x120 [ 943.362541][T18638] __kmalloc_cache_noprof+0x80/0x800 [ 943.362578][T18638] ? percpu_ref_init+0xec/0x410 [ 943.362632][T18638] ? percpu_ref_init+0xec/0x410 [ 943.362678][T18638] ? __pfx_swap_users_ref_free+0x10/0x10 [ 943.362724][T18638] percpu_ref_init+0xec/0x410 [ 943.362763][T18638] __do_sys_swapon+0x11c/0x3b30 [ 943.362798][T18638] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 943.362832][T18638] ? count_memcg_events+0x122/0x290 [ 943.362867][T18638] ? __x64_sys_futex+0x1e0/0x4c0 [ 943.362893][T18638] ? __x64_sys_futex+0x1e9/0x4c0 [ 943.362919][T18638] ? exc_page_fault+0x64/0xc0 [ 943.362955][T18638] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 943.362995][T18638] ? __pfx___do_sys_swapon+0x10/0x10 [ 943.363025][T18638] ? syscall_user_dispatch+0x78/0x140 [ 943.363062][T18638] do_syscall_64+0xcd/0xf80 [ 943.363086][T18638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.363109][T18638] RIP: 0033:0x7fd02558f7c9 [ 943.363128][T18638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.363151][T18638] RSP: 002b:00007fd026409038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 943.363173][T18638] RAX: ffffffffffffffda RBX: 00007fd0257e5fa0 RCX: 00007fd02558f7c9 [ 943.363188][T18638] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 943.363202][T18638] RBP: 00007fd025613f91 R08: 0000000000000000 R09: 0000000000000000 [ 943.363216][T18638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.363229][T18638] R13: 00007fd0257e6038 R14: 00007fd0257e5fa0 R15: 00007ffe260c7f78 [ 943.363259][T18638] [ 943.684705][T18642] futex_wake_op: syz.3.2541 tries to shift op by -2048; fix this program [ 943.694251][T18642] futex_wake_op: syz.3.2541 tries to shift op by -2048; fix this program [ 947.057068][T18687] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 947.333872][T18690] zswap: compressor not available [ 948.002585][T18716] CIFS: VFS: Invalid SecurityFlags: [ 948.457461][T18721] zswap: compressor not available [ 948.551862][T18731] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 948.922002][ T30] audit: type=1807 audit(1287.449:41): UNKNOWN=cover res=0 [ 948.949672][ T30] audit: type=1802 audit(1287.469:42): pid=18742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2564" res=0 errno=0 [ 949.020061][ T30] audit: type=1807 audit(1287.469:43): UNKNOWN=(errno res=0 [ 949.053765][ T30] audit: type=1802 audit(1287.469:44): pid=18742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2564" res=0 errno=0 [ 949.188597][ T5917] smpboot: CPU 1 is now offline [ 949.403903][T18741] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 949.829868][T18754] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 950.015172][T18756] random: crng reseeded on system resumption [ 950.461540][ T5933] smpboot: CPU 1 is now offline [ 951.542764][T18740] ima: policy update failed [ 951.654307][ T30] audit: type=1802 audit(1290.202:45): pid=18740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2564" res=0 errno=0 [ 952.174658][T18780] input: ¶š9ã%v”ûJ,6Ö‘ as /devices/virtual/input/input36 [ 952.257799][T18781] i2c i2c-0: new_device: Invalid device name [ 952.577813][T18785] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 952.669951][ T1330] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 933 with max blocks 3 with error 117 [ 952.737954][ T1330] EXT4-fs (sda1): This should not happen!! Data will be lost [ 952.737954][ T1330] [ 952.998521][T18794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2579'. [ 953.007827][T18794] bond0: entered promiscuous mode [ 953.012910][T18794] bond_slave_0: entered promiscuous mode [ 953.034611][T18794] bond_slave_1: entered promiscuous mode [ 953.040701][T18794] bond0: entered allmulticast mode [ 953.045874][T18794] bond_slave_0: entered allmulticast mode [ 953.074348][T18794] bond_slave_1: entered allmulticast mode [ 953.137894][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2579'. [ 953.148061][T18799] FAULT_INJECTION: forcing a failure. [ 953.148061][T18799] name fail_futex, interval 1, probability 0, space 0, times 0 [ 953.199742][T18799] CPU: 1 UID: 0 PID: 18799 Comm: syz.2.2580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 953.199798][T18799] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 953.199811][T18799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.199831][T18799] Call Trace: [ 953.199841][T18799] [ 953.199853][T18799] dump_stack_lvl+0x16c/0x1f0 [ 953.199913][T18799] should_fail_ex+0x512/0x640 [ 953.199960][T18799] get_futex_key+0x1d0/0x15f0 [ 953.200001][T18799] ? __pfx_get_futex_key+0x10/0x10 [ 953.200051][T18799] futex_wake+0xea/0x530 [ 953.200095][T18799] ? kasan_quarantine_put+0x10a/0x240 [ 953.200140][T18799] ? __pfx_futex_wake+0x10/0x10 [ 953.200191][T18799] ? putname+0xf5/0x1a0 [ 953.200229][T18799] do_futex+0x1e3/0x350 [ 953.200267][T18799] ? __pfx_do_futex+0x10/0x10 [ 953.200316][T18799] __x64_sys_futex+0x1e0/0x4c0 [ 953.200357][T18799] ? __x64_sys_openat+0x174/0x210 [ 953.200394][T18799] ? __pfx___x64_sys_futex+0x10/0x10 [ 953.200449][T18799] do_syscall_64+0xcd/0xf80 [ 953.200483][T18799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.200517][T18799] RIP: 0033:0x7f18de78f7c9 [ 953.200542][T18799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.200574][T18799] RSP: 002b:00007f18dc9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 953.200605][T18799] RAX: ffffffffffffffda RBX: 00007f18de9e5fa8 RCX: 00007f18de78f7c9 [ 953.200635][T18799] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18de9e5fac [ 953.200655][T18799] RBP: 00007f18de9e5fa0 R08: 00007f18df536000 R09: 0000000000000000 [ 953.200676][T18799] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 953.200695][T18799] R13: 00007f18de9e6038 R14: 00007fff52d5a7b0 R15: 00007fff52d5a898 [ 953.200739][T18799] [ 953.824762][ T5841] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 954.092618][T18809] FAULT_INJECTION: forcing a failure. [ 954.092618][T18809] name fail_futex, interval 1, probability 0, space 0, times 0 [ 954.122265][T18809] CPU: 0 UID: 0 PID: 18809 Comm: syz.5.2583 Tainted: G U L syzkaller #0 PREEMPT(full) [ 954.122321][T18809] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 954.122334][T18809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 954.122354][T18809] Call Trace: [ 954.122364][T18809] [ 954.122377][T18809] dump_stack_lvl+0x16c/0x1f0 [ 954.122436][T18809] should_fail_ex+0x512/0x640 [ 954.122483][T18809] get_futex_key+0x1d0/0x15f0 [ 954.122524][T18809] ? __pfx_get_futex_key+0x10/0x10 [ 954.122571][T18809] futex_wake+0xea/0x530 [ 954.122617][T18809] ? __pfx_futex_wake+0x10/0x10 [ 954.122671][T18809] ? kmem_cache_free+0x171/0x770 [ 954.122720][T18809] do_futex+0x1e3/0x350 [ 954.122759][T18809] ? __pfx_do_futex+0x10/0x10 [ 954.122795][T18809] ? __pfx___might_resched+0x10/0x10 [ 954.122841][T18809] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 954.122883][T18809] ? _raw_spin_unlock_irq+0x23/0x50 [ 954.122937][T18809] __x64_sys_futex+0x1e0/0x4c0 [ 954.122977][T18809] ? __do_sys_close_range+0x278/0x730 [ 954.123037][T18809] ? __pfx___x64_sys_futex+0x10/0x10 [ 954.123076][T18809] ? rcu_is_watching+0x12/0xc0 [ 954.123132][T18809] do_syscall_64+0xcd/0xf80 [ 954.123165][T18809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.123198][T18809] RIP: 0033:0x7fae70d8f7c9 [ 954.123232][T18809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.123265][T18809] RSP: 002b:00007fae6eff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 954.123297][T18809] RAX: ffffffffffffffda RBX: 00007fae70fe5fa8 RCX: 00007fae70d8f7c9 [ 954.123319][T18809] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fae70fe5fac [ 954.123340][T18809] RBP: 00007fae70fe5fa0 R08: 00007fae71b21000 R09: 0000000000000000 [ 954.123360][T18809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.123379][T18809] R13: 00007fae70fe6038 R14: 00007ffd59edd3a0 R15: 00007ffd59edd488 [ 954.123424][T18809] [ 954.907288][T18821] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2585'. [ 954.987500][T18815] NFSD: Failed to start, no listeners configured. [ 955.781249][T18837] openvswitch: netlink: IPv6 tunnel dst address is zero [ 957.519224][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 960.508550][T18911] usb usb24: usbfs: process 18911 (syz.3.2606) did not claim interface 0 before use [ 960.677993][T18911] NFSD: Failed to start, no listeners configured. [ 960.695855][T18912] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 960.721656][T18918] FAULT_INJECTION: forcing a failure. [ 960.721656][T18918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.750970][T18918] CPU: 1 UID: 0 PID: 18918 Comm: syz.2.2607 Tainted: G U L syzkaller #0 PREEMPT(full) [ 960.751019][T18918] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 960.751031][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 960.751049][T18918] Call Trace: [ 960.751059][T18918] [ 960.751070][T18918] dump_stack_lvl+0x16c/0x1f0 [ 960.751124][T18918] should_fail_ex+0x512/0x640 [ 960.751168][T18918] _copy_to_user+0x32/0xd0 [ 960.751207][T18918] simple_read_from_buffer+0xcb/0x170 [ 960.751255][T18918] proc_fail_nth_read+0x197/0x240 [ 960.751309][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 960.751362][T18918] ? rw_verify_area+0xcf/0x6c0 [ 960.751400][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 960.751445][T18918] vfs_read+0x1e4/0xcf0 [ 960.751483][T18918] ? __pfx___mutex_lock+0x10/0x10 [ 960.751512][T18918] ? __pfx_vfs_read+0x10/0x10 [ 960.751557][T18918] ? __fget_files+0x20e/0x3c0 [ 960.751603][T18918] ksys_read+0x12a/0x250 [ 960.751639][T18918] ? __pfx_ksys_read+0x10/0x10 [ 960.751706][T18918] ? fput+0x70/0xf0 [ 960.751736][T18918] do_syscall_64+0xcd/0xf80 [ 960.751763][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.751789][T18918] RIP: 0033:0x7f18de78e1dc [ 960.751810][T18918] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 960.751836][T18918] RSP: 002b:00007f18dc9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 960.751860][T18918] RAX: ffffffffffffffda RBX: 00007f18de9e6090 RCX: 00007f18de78e1dc [ 960.751876][T18918] RDX: 000000000000000f RSI: 00007f18dc9d50a0 RDI: 0000000000000005 [ 960.751891][T18918] RBP: 00007f18dc9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 960.751906][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.751921][T18918] R13: 00007f18de9e6128 R14: 00007f18de9e6090 R15: 00007fff52d5a898 [ 960.751956][T18918] [ 963.171948][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 964.951359][T18977] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 916 with max blocks 20 with error 117 [ 964.984501][T18977] EXT4-fs (sda1): This should not happen!! Data will be lost [ 964.984501][T18977] [ 965.047529][T19004] bridge_slave_1: left allmulticast mode [ 965.060241][T19004] bridge_slave_1: left promiscuous mode [ 965.067000][T19004] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.744912][ T5841] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 965.756932][ T5841] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 965.774363][T19009] FAULT_INJECTION: forcing a failure. [ 965.774363][T19009] name failslab, interval 1, probability 0, space 0, times 0 [ 965.835745][T19009] CPU: 1 UID: 0 PID: 19009 Comm: syz.6.2626 Tainted: G U L syzkaller #0 PREEMPT(full) [ 965.835796][T19009] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 965.835808][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 965.835826][T19009] Call Trace: [ 965.835836][T19009] [ 965.835847][T19009] dump_stack_lvl+0x16c/0x1f0 [ 965.835905][T19009] should_fail_ex+0x512/0x640 [ 965.835940][T19009] ? fs_reclaim_acquire+0xae/0x150 [ 965.835992][T19009] should_failslab+0xc2/0x120 [ 965.836041][T19009] __kmalloc_noprof+0xeb/0x910 [ 965.836076][T19009] ? security_inode_init_security+0x113/0x370 [ 965.836136][T19009] ? security_inode_init_security+0x113/0x370 [ 965.836184][T19009] security_inode_init_security+0x113/0x370 [ 965.836237][T19009] ? __pfx_shmem_initxattrs+0x10/0x10 [ 965.836283][T19009] ? __pfx_security_inode_init_security+0x10/0x10 [ 965.836334][T19009] ? shmem_get_inode+0x73b/0xfb0 [ 965.836392][T19009] shmem_tmpfile+0x93/0x180 [ 965.836442][T19009] vfs_tmpfile+0x2be/0x9b0 [ 965.836501][T19009] path_openat+0x1936/0x3140 [ 965.836557][T19009] ? do_syscall_64+0xcd/0xf80 [ 965.836585][T19009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.836632][T19009] ? __pfx_path_openat+0x10/0x10 [ 965.836688][T19009] ? __lock_acquire+0x436/0x2890 [ 965.836728][T19009] do_filp_open+0x20b/0x470 [ 965.836777][T19009] ? __pfx_do_filp_open+0x10/0x10 [ 965.836854][T19009] ? _raw_spin_unlock+0x28/0x50 [ 965.836897][T19009] ? alloc_fd+0x471/0x7d0 [ 965.836953][T19009] do_sys_openat2+0x121/0x290 [ 965.836990][T19009] ? __pfx_do_sys_openat2+0x10/0x10 [ 965.837042][T19009] __x64_sys_open+0x153/0x1e0 [ 965.837078][T19009] ? __pfx___x64_sys_open+0x10/0x10 [ 965.837123][T19009] ? rcu_is_watching+0x12/0xc0 [ 965.837172][T19009] do_syscall_64+0xcd/0xf80 [ 965.837204][T19009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.837236][T19009] RIP: 0033:0x7fd02558f7c9 [ 965.837262][T19009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.837294][T19009] RSP: 002b:00007fd026409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 965.837324][T19009] RAX: ffffffffffffffda RBX: 00007fd0257e5fa0 RCX: 00007fd02558f7c9 [ 965.837346][T19009] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 965.837367][T19009] RBP: 00007fd025613f91 R08: 0000000000000000 R09: 0000000000000000 [ 965.837388][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.837408][T19009] R13: 00007fd0257e6038 R14: 00007fd0257e5fa0 R15: 00007ffe260c7f78 [ 965.837450][T19009] [ 966.118741][T19011] vivid-007: ================= START STATUS ================= [ 966.186186][T19011] vivid-007: Enable Output Cropping: true [ 966.268630][T19011] vivid-007: Enable Output Composing: true [ 966.295718][T19011] vivid-007: Enable Output Scaler: true [ 966.337253][T19011] vivid-007: Tx RGB Quantization Range: Automatic [ 966.345305][T19011] vivid-007: Transmit Mode: HDMI [ 966.350357][T19011] vivid-007: Hotplug Present: 0x00000000 [ 966.365782][T19003] Process accounting paused [ 966.372340][T19011] vivid-007: RxSense Present: 0x00000000 [ 966.407055][T19011] vivid-007: EDID Present: 0x00000000 [ 966.412551][T19011] vivid-007: ================== END STATUS ================== [ 967.099904][T19039] sctp: [Deprecated]: syz.2.2635 (pid 19039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 967.099904][T19039] Use struct sctp_sack_info instead [ 968.993219][T19067] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 969.488695][T19067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 969.533370][T19067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 969.563311][T19067] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 969.642890][T19067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 969.696242][T19067] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 970.703172][T19095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 971.301385][T19106] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2648'. [ 971.507510][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 971.579983][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 971.660194][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 971.666326][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 972.818592][T19125] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 973.255104][T19136] zero sized request [ 973.666196][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 974.157238][ T30] audit: type=1326 audit(4294967336.745:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.6.2660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd02558f7c9 code=0x0 [ 974.976764][T19158] zswap: compressor not available [ 975.454871][T19175] futex_wake_op: syz.2.2665 tries to shift op by -2048; fix this program [ 975.455071][T19175] futex_wake_op: syz.2.2665 tries to shift op by -2048; fix this program [ 975.455573][T19175] 0x000000000001-0x000000020000 : "" [ 975.471894][T19175] ftl_cs: FTL header corrupt! [ 975.558747][T19158] FAULT_INJECTION: forcing a failure. [ 975.558747][T19158] name failslab, interval 1, probability 0, space 0, times 0 [ 975.558832][T19158] CPU: 1 UID: 0 PID: 19158 Comm: syz.3.2661 Tainted: G U L syzkaller #0 PREEMPT(full) [ 975.558884][T19158] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 975.558898][T19158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 975.558918][T19158] Call Trace: [ 975.558929][T19158] [ 975.558943][T19158] dump_stack_lvl+0x16c/0x1f0 [ 975.559004][T19158] should_fail_ex+0x512/0x640 [ 975.559042][T19158] ? __kmalloc_noprof+0xca/0x910 [ 975.559083][T19158] should_failslab+0xc2/0x120 [ 975.559134][T19158] __kmalloc_noprof+0xeb/0x910 [ 975.559168][T19158] ? __init_waitqueue_head+0xca/0x150 [ 975.559209][T19158] ? __netlink_kernel_create+0x17f/0x750 [ 975.559268][T19158] ? __netlink_kernel_create+0x17f/0x750 [ 975.559315][T19158] __netlink_kernel_create+0x17f/0x750 [ 975.559370][T19158] ? __pfx___netlink_kernel_create+0x10/0x10 [ 975.559417][T19158] ? find_held_lock+0x2b/0x80 [ 975.559461][T19158] ? audit_net_init+0x190/0x440 [ 975.559506][T19158] audit_net_init+0x1ae/0x440 [ 975.559546][T19158] ? __pfx_audit_net_init+0x10/0x10 [ 975.559590][T19158] ? rcu_is_watching+0x12/0xc0 [ 975.559634][T19158] ? __pfx_audit_receive+0x10/0x10 [ 975.559676][T19158] ? __pfx_audit_multicast_bind+0x10/0x10 [ 975.559719][T19158] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 975.559773][T19158] ? __pfx_genl_unbind+0x10/0x10 [ 975.559803][T19158] ? ops_init+0x77/0x5f0 [ 975.559856][T19158] ? __pfx_audit_net_init+0x10/0x10 [ 975.559892][T19158] ops_init+0x1e2/0x5f0 [ 975.559942][T19158] setup_net+0x11d/0x3a0 [ 975.559991][T19158] ? __pfx_setup_net+0x10/0x10 [ 975.560037][T19158] ? lockdep_init_map_type+0x5c/0x270 [ 975.560071][T19158] ? mutex_init_lockep+0x110/0x150 [ 975.560111][T19158] copy_net_ns+0x351/0x7c0 [ 975.560145][T19158] create_new_namespaces+0x3ea/0xab0 [ 975.560200][T19158] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 975.560249][T19158] ksys_unshare+0x45b/0xa40 [ 975.560280][T19158] ? __pfx_ksys_unshare+0x10/0x10 [ 975.560338][T19158] ? do_user_addr_fault+0x843/0x1370 [ 975.560388][T19158] __x64_sys_unshare+0x31/0x40 [ 975.560417][T19158] do_syscall_64+0xcd/0xf80 [ 975.560452][T19158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.560485][T19158] RIP: 0033:0x7f475b58f7c9 [ 975.560521][T19158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.560555][T19158] RSP: 002b:00007f475c42b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 975.560587][T19158] RAX: ffffffffffffffda RBX: 00007f475b7e5fa0 RCX: 00007f475b58f7c9 [ 975.560610][T19158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 975.560629][T19158] RBP: 00007f475b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 975.560649][T19158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.560668][T19158] R13: 00007f475b7e6038 R14: 00007f475b7e5fa0 R15: 00007ffdf7e83288 [ 975.560711][T19158] [ 975.651340][T19158] audit: cannot initialize netlink socket in namespace [ 975.992869][T19181] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 975.997693][T19181] binder: 19180:19181 ioctl 5380 2000000000c0 returned -22 [ 975.998796][T19181] sd 0:0:1:0: PR command failed: 1026 [ 975.998850][T19181] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 975.998910][T19181] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 976.472890][ T22] numa_remove_cpu cpu 1 node 0: mask now 0 [ 976.472976][ T22] numa_remove_cpu cpu 1 node 1: mask now 0 [ 976.475674][ T5933] smpboot: CPU 1 is now offline [ 976.651956][T19188] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 976.653578][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 976.653612][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 976.653782][T19165] ------------[ cut here ]------------ [ 976.655716][T19165] WARNING: kernel/sched/sched.h:1549 at update_rq_clock+0x34a/0xc70, CPU#0: syz.5.2662/19165 [ 976.655784][T19165] Modules linked in: [ 976.656766][T19165] CPU: 0 UID: 0 PID: 19165 Comm: syz.5.2662 Tainted: G U L syzkaller #0 PREEMPT(full) [ 976.656815][T19165] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 976.656828][T19165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 976.656847][T19165] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 976.656893][T19165] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 976.656925][T19165] RSP: 0000:ffffc9000bd7f648 EFLAGS: 00010046 [ 976.656951][T19165] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 976.656971][T19165] RDX: 0000000000000000 RSI: ffffffff8daa5ccc RDI: ffffffff8bf2b780 [ 976.656992][T19165] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211203a [ 976.657013][T19165] R10: ffffffff908901d7 R11: 0000000000000001 R12: ffffffff90893254 [ 976.657043][T19165] R13: ffffffff8dd66560 R14: ffff88801dab3d00 R15: ffff8880b853adc0 [ 976.657064][T19165] FS: 000055557b027500(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000 [ 976.657093][T19165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.657115][T19165] CR2: 0000001b30bd1ff8 CR3: 000000006ef86000 CR4: 00000000003526f0 [ 976.657136][T19165] Call Trace: [ 976.657146][T19165] [ 976.657167][T19165] __schedule+0x212d/0x6150 [ 976.657236][T19165] ? __pfx___schedule+0x10/0x10 [ 976.657279][T19165] ? irqentry_exit+0x1dd/0x8c0 [ 976.657313][T19165] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 976.657348][T19165] preempt_schedule_notrace+0x62/0xe0 [ 976.657397][T19165] preempt_schedule_notrace_thunk+0x16/0x30 [ 976.657446][T19165] rcu_is_watching+0x8e/0xc0 [ 976.657488][T19165] kmem_cache_free+0x22e/0x770 [ 976.657530][T19165] ? stop_this_handle+0x25e/0x4d0 [ 976.657583][T19165] ? jbd2_journal_stop+0x77b/0xe20 [ 976.657609][T19165] jbd2_journal_stop+0x77b/0xe20 [ 976.657639][T19165] ? rcu_watching_snap_stopped_since+0x70/0x110 [ 976.657690][T19165] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 976.657731][T19165] __ext4_journal_stop+0xdd/0x210 [ 976.657769][T19165] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 976.657808][T19165] ext4_dirty_inode+0xed/0x130 [ 976.657845][T19165] ? rcu_is_watching+0x12/0xc0 [ 976.657887][T19165] __mark_inode_dirty+0x1f7/0x1670 [ 976.657933][T19165] generic_update_time+0xcf/0xf0 [ 976.657966][T19165] file_update_time_flags+0x410/0x520 [ 976.658005][T19165] ext4_page_mkwrite+0x33d/0x1880 [ 976.658054][T19165] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 976.658107][T19165] do_page_mkwrite+0x174/0x380 [ 976.658148][T19165] do_fault+0x3fc/0x1ad0 [ 976.658202][T19165] __handle_mm_fault+0x1919/0x2bb0 [ 976.658242][T19165] ? reacquire_held_locks+0xcd/0x1f0 [ 976.658272][T19165] ? __pfx___handle_mm_fault+0x10/0x10 [ 976.658310][T19165] ? lock_vma_under_rcu+0x176/0x580 [ 976.658368][T19165] handle_mm_fault+0x3fe/0xad0 [ 976.658407][T19165] do_user_addr_fault+0x60c/0x1370 [ 976.658455][T19165] ? rcu_is_watching+0x12/0xc0 [ 976.658502][T19165] exc_page_fault+0x64/0xc0 [ 976.658551][T19165] asm_exc_page_fault+0x26/0x30 [ 976.658580][T19165] RIP: 0033:0x7fae70c6f922 [ 976.658605][T19165] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 93 95 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b [ 976.658634][T19165] RSP: 002b:00007ffd59edd530 EFLAGS: 00010202 [ 976.658658][T19165] RAX: 0000000000052008 RBX: 00007fae71b15720 RCX: 0000000000000000 [ 976.658678][T19165] RDX: 0000001b30bd2000 RSI: 0000000000000008 RDI: 00007fae71b15720 [ 976.658698][T19165] RBP: 00000000000001d9 R08: 00007fae707ff0c0 R09: 00007fae70fd2000 [ 976.658718][T19165] R10: 00007fae707ff008 R11: 0000000000000002 R12: ffffffff819d4de1 [ 976.658739][T19165] R13: 00007fae70fe6038 R14: 0000000000000175 R15: fffffffffffae000 [ 976.658762][T19165] ? _prb_read_valid+0x161/0x890 [ 976.658810][T19165] [ 976.658825][T19165] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 976.658847][T19165] CPU: 0 UID: 0 PID: 19165 Comm: syz.5.2662 Tainted: G U L syzkaller #0 PREEMPT(full) [ 976.658891][T19165] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 976.658903][T19165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 976.658922][T19165] Call Trace: [ 976.658933][T19165] [ 976.658944][T19165] dump_stack_lvl+0x3d/0x1f0 [ 976.658993][T19165] vpanic+0x640/0x6f0 [ 976.659025][T19165] ? update_rq_clock+0x34a/0xc70 [ 976.659064][T19165] panic+0xca/0xd0 [ 976.659093][T19165] ? __pfx_panic+0x10/0x10 [ 976.659135][T19165] ? check_panic_on_warn+0x1f/0xb0 [ 976.659170][T19165] check_panic_on_warn+0xab/0xb0 [ 976.659204][T19165] __warn+0x108/0x3c0 [ 976.659240][T19165] __report_bug+0x2a0/0x520 [ 976.659281][T19165] ? update_rq_clock+0x34a/0xc70 [ 976.659324][T19165] ? __pfx___report_bug+0x10/0x10 [ 976.659371][T19165] ? rcu_is_watching+0x12/0xc0 [ 976.659422][T19165] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 976.659459][T19165] ? update_rq_clock+0x34a/0xc70 [ 976.659501][T19165] report_bug+0xb2/0x220 [ 976.659542][T19165] ? update_rq_clock+0x34a/0xc70 [ 976.659583][T19165] handle_bug+0x127/0x260 [ 976.659616][T19165] exc_invalid_op+0x17/0x50 [ 976.659651][T19165] asm_exc_invalid_op+0x1a/0x20 [ 976.659680][T19165] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 976.659722][T19165] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 976.659752][T19165] RSP: 0000:ffffc9000bd7f648 EFLAGS: 00010046 [ 976.659774][T19165] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 976.659795][T19165] RDX: 0000000000000000 RSI: ffffffff8daa5ccc RDI: ffffffff8bf2b780 [ 976.659815][T19165] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211203a [ 976.659836][T19165] R10: ffffffff908901d7 R11: 0000000000000001 R12: ffffffff90893254 [ 976.659857][T19165] R13: ffffffff8dd66560 R14: ffff88801dab3d00 R15: ffff8880b853adc0 [ 976.659897][T19165] ? update_rq_clock+0x99/0xc70 [ 976.659944][T19165] __schedule+0x212d/0x6150 [ 976.660010][T19165] ? __pfx___schedule+0x10/0x10 [ 976.660053][T19165] ? irqentry_exit+0x1dd/0x8c0 [ 976.660087][T19165] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 976.660121][T19165] preempt_schedule_notrace+0x62/0xe0 [ 976.660171][T19165] preempt_schedule_notrace_thunk+0x16/0x30 [ 976.660210][T19165] rcu_is_watching+0x8e/0xc0 [ 976.660252][T19165] kmem_cache_free+0x22e/0x770 [ 976.660293][T19165] ? stop_this_handle+0x25e/0x4d0 [ 976.660344][T19165] ? jbd2_journal_stop+0x77b/0xe20 [ 976.660370][T19165] jbd2_journal_stop+0x77b/0xe20 [ 976.660400][T19165] ? rcu_watching_snap_stopped_since+0x70/0x110 [ 976.660458][T19165] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 976.660498][T19165] __ext4_journal_stop+0xdd/0x210 [ 976.660535][T19165] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 976.660573][T19165] ext4_dirty_inode+0xed/0x130 [ 976.660610][T19165] ? rcu_is_watching+0x12/0xc0 [ 976.660652][T19165] __mark_inode_dirty+0x1f7/0x1670 [ 976.660696][T19165] generic_update_time+0xcf/0xf0 [ 976.660728][T19165] file_update_time_flags+0x410/0x520 [ 976.660767][T19165] ext4_page_mkwrite+0x33d/0x1880 [ 976.660817][T19165] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 976.660869][T19165] do_page_mkwrite+0x174/0x380 [ 976.660909][T19165] do_fault+0x3fc/0x1ad0 [ 976.660961][T19165] __handle_mm_fault+0x1919/0x2bb0 [ 976.661001][T19165] ? reacquire_held_locks+0xcd/0x1f0 [ 976.661031][T19165] ? __pfx___handle_mm_fault+0x10/0x10 [ 976.661070][T19165] ? lock_vma_under_rcu+0x176/0x580 [ 976.661126][T19165] handle_mm_fault+0x3fe/0xad0 [ 976.661165][T19165] do_user_addr_fault+0x60c/0x1370 [ 976.661205][T19165] ? rcu_is_watching+0x12/0xc0 [ 976.661251][T19165] exc_page_fault+0x64/0xc0 [ 976.661299][T19165] asm_exc_page_fault+0x26/0x30 [ 976.661328][T19165] RIP: 0033:0x7fae70c6f922 [ 976.661351][T19165] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 93 95 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b [ 976.661381][T19165] RSP: 002b:00007ffd59edd530 EFLAGS: 00010202 [ 976.661404][T19165] RAX: 0000000000052008 RBX: 00007fae71b15720 RCX: 0000000000000000 [ 976.661431][T19165] RDX: 0000001b30bd2000 RSI: 0000000000000008 RDI: 00007fae71b15720 [ 976.661451][T19165] RBP: 00000000000001d9 R08: 00007fae707ff0c0 R09: 00007fae70fd2000 [ 976.661472][T19165] R10: 00007fae707ff008 R11: 0000000000000002 R12: ffffffff819d4de1 [ 976.661492][T19165] R13: 00007fae70fe6038 R14: 0000000000000175 R15: fffffffffffae000 [ 976.661516][T19165] ? _prb_read_valid+0x161/0x890 [ 976.661563][T19165] [ 976.661648][T19165] Kernel Offset: disabled [ 976.661661][T19165] Timer List Version: v0.10 [ 976.661671][T19165] HRTIMER_MAX_CLOCK_BASES: 8 [ 976.661683][T19165] now at 977975752463 nsecs [ 976.661695][T19165] [ 976.661702][T19165] cpu: 0 [ 976.661713][T19165] clock 0: [ 976.661723][T19165] .base: ffff8880b84284c0 [ 976.661737][T19165] .index: 0 [ 976.661747][T19165] .resolution: 1 nsecs [ 976.661759][T19165] .offset: 0 nsecs [ 976.661770][T19165] active timers: [ 976.661784][T19165] #0: , hrtimer_wakeup [ 976.661816][T19165] , S:01 [ 976.661825][T19165] [ 976.661834][T19165] # expires at 977967911619-977967961619 nsecs [in -7840844 to -7790844 nsecs] [ 976.661857][T19165] #1: , hrtimer_wakeup [ 976.661888][T19165] , S:01 [ 976.661898][T19165] [ 976.661906][T19165] # expires at 977969156209-977969206209 nsecs [in -6596254 to -6546254 nsecs] [ 976.661929][T19165] #2: , tick_nohz_handler [ 976.661972][T19165] , S:01 [ 976.661981][T19165] [ 976.661989][T19165] # expires at 977970000000-977970000000 nsecs [in -5752463 to -5752463 nsecs] [ 976.662012][T19165] #3: , drm_vblank_timer_function [ 976.662039][T19165] , S:01 [ 976.662048][T19165] [ 976.662057][T19165] # expires at 977973254251-977973254251 nsecs [in -2498212 to -2498212 nsecs] [ 976.662080][T19165] #4: , hrtimer_wakeup [ 976.662111][T19165] , S:01 [ 976.662121][T19165] [ 976.662129][T19165] # expires at 977975759395-977975809395 nsecs [in 6932 to 56932 nsecs] [ 976.662152][T19165] #5: , hrtimer_wakeup [ 976.662183][T19165] , S:01 [ 976.662192][T19165] [ 976.662201][T19165] # expires at 977976402618-977976452618 nsecs [in 650155 to 700155 nsecs] [ 976.662224][T19165] #6: , hrtimer_wakeup [ 976.662255][T19165] , S:01 [ 976.662264][T19165] [ 976.662273][T19165] # expires at 977976951385-977977001385 nsecs [in 1198922 to 1248922 nsecs] [ 976.662296][T19165] #7: , sched_cfs_period_timer [ 976.662326][T19165] , S:01 [ 976.662336][T19165] [ 976.662344][T19165] # expires at 978057437523-978057437523 nsecs [in 81685060 to 81685060 nsecs] [ 976.662367][T19165] #8: , inactive_task_timer [ 976.662399][T19165] , S:01 [ 976.662414][T19165] [ 976.662423][T19165] # expires at 978357075345-978357075345 nsecs [in 381322882 to 381322882 nsecs] [ 976.662447][T19165] #9: , dl_task_timer [ 976.662483][T19165] , S:01 [ 976.662493][T19165] [ 976.662501][T19165] # expires at 978860047347-978860047347 nsecs [in 884294884 to 884294884 nsecs] [ 976.662525][T19165] #10: , hrtimer_wakeup [ 976.662557][T19165] , S:01 [ 976.662566][T19165] [ 976.662575][T19165] # expires at 978943165262-978944165257 nsecs [in 967412799 to 968412794 nsecs] [ 976.662599][T19165] #11: , hrtimer_wakeup [ 976.662630][T19165] , S:01 [ 976.662639][T19165] [ 976.662648][T19165] # expires at 980955767019-980958767017 nsecs [in 2980014556 to 2983014554 nsecs] [ 976.662672][T19165] #12: , hrtimer_wakeup [ 976.662704][T19165] , S:01 [ 976.662713][T19165] [ 976.662721][T19165] # expires at 982715952743-982716002743 nsecs [in 4740200280 to 4740250280 nsecs] [ 976.662746][T19165] #13: , watchdog_timer_fn [ 976.662787][T19165] , S:01 [ 976.662797][T19165] [ 976.662806][T19165] # expires at 992813100217-992813100217 nsecs [in 14837347754 to 14837347754 nsecs] [ 976.662829][T19165] #14: , hrtimer_wakeup [ 976.662861][T19165] , S:01 [ 976.662870][T19165] [ 976.662878][T19165] # expires at 1007668101119-1007704950663 nsecs [in 29692348656 to 29729198200 nsecs] [ 976.662903][T19165] #15: , hrtimer_wakeup [ 976.662935][T19165] , S:01 [ 976.662944][T19165] [ 976.662952][T19165] # expires at 1118237823485-1118337823485 nsecs [in 140262071022 to 140362071022 nsecs] [ 976.662977][T19165] clock 1: [ 976.662987][T19165] .base: ffff8880b8428540 [ 976.663000][T19165] .index: 1 [ 976.663010][T19165] .resolution: 1 nsecs [ 976.663025][T19165] .offset: 4294966361304220159 nsecs [ 976.663037][T19165] active timers: [ 976.663045][T19165] clock 2: [ 976.663055][T19165] .base: ffff8880b84285c0 [ 976.663068][T19165] .index: 2 [ 976.663078][T19165] .resolution: 1 nsecs [ 976.663089][T19165] .offset: 0 nsecs [ 976.663100][T19165] active timers: [ 976.663108][T19165] clock 3: [ 976.663118][T19165] .base: ffff8880b8428640 [ 976.663130][T19165] .index: 3 [ 976.663141][T19165] .resolution: 1 nsecs [ 976.663151][T19165] .offset: 4294966368304220159 nsecs [ 976.663163][T19165] active timers: [ 976.663172][T19165] clock 4: [ 976.663182][T19165] .base: ffff8880b84286c0 [ 976.663194][T19165] .index: 4 [ 976.663205][T19165] .resolution: 1 nsecs [ 976.663215][T19165] .offset: 0 nsecs [ 976.663226][T19165] active timers: [ 976.663235][T19165] #0: , mac80211_hwsim_beacon [ 976.663278][T19165] , S:01 [ 976.663287][T19165] [ 976.663296][T19165] # expires at 978021674061-978021674061 nsecs [in 45921598 to 45921598 nsecs] [ 976.663319][T19165] #1: , mac80211_hwsim_beacon [ 976.663361][T19165] , S:01 [ 976.663370][T19165] [ 976.663379][T19165] # expires at 978021674422-978021674422 nsecs [in 45921959 to 45921959 nsecs] [ 976.663402][T19165] #2: , mac80211_hwsim_beacon [ 976.663450][T19165] , S:01 [ 976.663459][T19165] [ 976.663469][T19165] # expires at 978021674439-978021674439 nsecs [in 45921976 to 45921976 nsecs] [ 976.663492][T19165] #3: , mac80211_hwsim_beacon [ 976.663535][T19165] , S:01 [ 976.663544][T19165] [ 976.663552][T19165] # expires at 978021675001-978021675001 nsecs [in 45922538 to 45922538 nsecs] [ 976.663576][T19165] #4: , mac80211_hwsim_beacon [ 976.663618][T19165] , S:01 [ 976.663627][T19165] [ 976.663636][T19165] # expires at 978031581766-978031581766 nsecs [in 55829303 to 55829303 nsecs] [ 976.663660][T19165] #5: , mac80211_hwsim_beacon [ 976.663703][T19165] , S:01 [ 976.663712][T19165] [ 976.663721][T19165] # expires at 978031922328-978031922328 nsecs [in 56169865 to 56169865 nsecs] [ 976.663745][T19165] #6: , mac80211_hwsim_beacon [ 976.663787][T19165] , S:01 [ 976.663796][T19165] [ 976.663804][T19165] # expires at 978036060225-978036060225 nsecs [in 60307762 to 60307762 nsecs] [ 976.663829][T19165] #7: , mac80211_hwsim_beacon [ 976.663871][T19165] , S:01 [ 976.663880][T19165] [ 976.663889][T19165] # expires at 978036060294-978036060294 nsecs [in 60307831 to 60307831 nsecs] [ 976.663913][T19165] #8: , mac80211_hwsim_beacon [ 976.663955][T19165] , S:01 [ 976.663964][T19165] [ 976.663972][T19165] # expires at 978036060798-978036060798 nsecs [in 60308335 to 60308335 nsecs] [ 976.663996][T19165] #9: , mac80211_hwsim_beacon [ 976.664039][T19165] , S:01 [ 976.664048][T19165] [ 976.664057][T19165] # expires at 978036061049-978036061049 nsecs [in 60308586 to 60308586 nsecs] [ 976.664080][T19165] clock 5: [ 976.664090][T19165] .base: ffff8880b8428740 [ 976.664103][T19165] .index: 5 [ 976.664114][T19165] .resolution: 1 nsecs [ 976.664124][T19165] .offset: 4294966361304220159 nsecs [ 976.664137][T19165] active timers: [ 976.664146][T19165] clock 6: [ 976.664156][T19165] .base: ffff8880b84287c0 [ 976.664169][T19165] .index: 6 [ 976.664179][T19165] .resolution: 1 nsecs [ 976.664190][T19165] .offset: 0 nsecs [ 976.664201][T19165] active timers: [ 976.664209][T19165] clock 7: [ 976.664219][T19165] .base: ffff8880b8428840 [ 976.664232][T19165] .index: 7 [ 976.664243][T19165] .resolution: 1 nsecs [ 976.664253][T19165] .offset: 4294966368304220159 nsecs [ 976.664266][T19165] active timers: [ 976.664275][T19165] .expires_next : 977967961619 nsecs [ 976.664289][T19165] .hres_active : 1 [ 976.664303][T19165] .nr_events : 409319 [ 976.664316][T19165] .nr_retries : 1093 [ 976.664330][T19165] .nr_hangs : 0 [ 976.664342][T19165] .max_hang_time : 0 [ 976.664355][T19165] .nohz : 1 [ 976.664368][T19165] .highres : 1 [ 976.664381][T19165] .last_tick : 977450000000 nsecs [ 976.664395][T19165] .tick_stopped : 0 [ 976.664413][T19165] .idle_jiffies : 4295034841 [ 976.664426][T19165] .idle_calls : 82934 [ 976.664439][T19165] .idle_sleeps : 2265 [ 976.664453][T19165] .idle_entrytime : 977782441845 nsecs [ 976.664467][T19165] .idle_waketime : 969637381631 nsecs [ 976.664481][T19165] .idle_exittime : 977440424358 nsecs [ 976.664496][T19165] .idle_sleeptime : 100311707400 nsecs [ 976.664509][T19165] .iowait_sleeptime: 2457083904 nsecs [ 976.664524][T19165] .last_jiffies : 4295034872 [ 976.664537][T19165] .next_timer : 977760000000 [ 976.664551][T19165] .idle_expires : 1244070000000 nsecs [ 976.664565][T19165] jiffies: 4295034893 [ 976.664576][T19165] [ 976.664583][T19165] Tick Device: mode: 1 [ 976.664594][T19165] Broadcast device [ 976.664603][T19165] Clock Event Device: [ 976.664609][T19165] pit [ 976.664620][T19165] max_delta_ns: 27461861 [ 976.664631][T19165] min_delta_ns: 12572 [ 976.664641][T19165] mult: 5124678 [ 976.664653][T19165] shift: 32 [ 976.664663][T19165] mode: 1 [ 976.664674][T19165] next_event: 9223372036854775807 nsecs [ 976.664686][T19165] set_next_event: pit_next_event [ 976.664715][T19165] shutdown: pit_shutdown [ 976.664742][T19165] periodic: pit_set_periodic [ 976.664771][T19165] oneshot: pit_set_oneshot [ 976.664799][T19165] event_handler: tick_handle_oneshot_broadcast [ 976.664834][T19165] [ 976.664841][T19165] retries: 0 [ 976.664851][T19165] [ 976.664858][T19165] tick_broadcast_mask: 0 [ 976.664871][T19165] tick_broadcast_oneshot_mask: 0 [ 976.664884][T19165] [ 976.664892][T19165] Tick Device: mode: 1 [ 976.664903][T19165] Per CPU device: 0 [ 976.664913][T19165] Clock Event Device: [ 976.664920][T19165] lapic [ 976.664930][T19165] max_delta_ns: 34356879966 [ 976.664942][T19165] min_delta_ns: 1000 [ 976.664953][T19165] mult: 268457789 [ 976.664964][T19165] shift: 32 [ 976.664976][T19165] mode: 3 [ 976.664986][T19165] next_event: 977967961619 nsecs [ 976.664998][T19165] set_next_event: lapic_next_event [ 976.665020][T19165] shutdown: lapic_timer_shutdown [ 976.665046][T19165] periodic: lapic_timer_set_periodic [ 976.665072][T19165] oneshot: lapic_timer_set_oneshot [ 976.665097][T19165] oneshot stopped: lapic_timer_shutdown [ 976.665122][T19165] event_handler: hrtimer_interrupt [ 976.665155][T19165] [ 976.665162][T19165] retries: 5107 [ 976.665173][T19165] Wakeup Device: [ 976.665183][T19165] [ 976.665199][T19165] Dumping ftrace buffer: [ 976.666101][T19165] (ftrace buffer empty) [ 976.666115][T19165] NMI backtrace for cpu 0 [ 976.666136][T19165] CPU: 0 UID: 0 PID: 19165 Comm: syz.5.2662 Tainted: G U L syzkaller #0 PREEMPT(full) [ 976.666180][T19165] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 976.666192][T19165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 976.666209][T19165] Call Trace: [ 976.666220][T19165] [ 976.666231][T19165] dump_stack_lvl+0x3d/0x1f0 [ 976.666281][T19165] nmi_cpu_backtrace+0x27b/0x390 [ 976.666317][T19165] ? tracer_tracing_enable+0x3e/0x60 [ 976.666365][T19165] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 976.666404][T19165] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 976.666456][T19165] sys_info+0x133/0x180 [ 976.666489][T19165] vpanic+0x234/0x6f0 [ 976.666520][T19165] ? update_rq_clock+0x34a/0xc70 [ 976.666559][T19165] panic+0xca/0xd0 [ 976.666587][T19165] ? __pfx_panic+0x10/0x10 [ 976.666628][T19165] ? check_panic_on_warn+0x1f/0xb0 [ 976.666662][T19165] check_panic_on_warn+0xab/0xb0 [ 976.666696][T19165] __warn+0x108/0x3c0 [ 976.666731][T19165] __report_bug+0x2a0/0x520 [ 976.666770][T19165] ? update_rq_clock+0x34a/0xc70 [ 976.666814][T19165] ? __pfx___report_bug+0x10/0x10 [ 976.666861][T19165] ? rcu_is_watching+0x12/0xc0 [ 976.666905][T19165] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 976.666943][T19165] ? update_rq_clock+0x34a/0xc70 [ 976.666984][T19165] report_bug+0xb2/0x220 [ 976.667025][T19165] ? update_rq_clock+0x34a/0xc70 [ 976.667065][T19165] handle_bug+0x127/0x260 [ 976.667099][T19165] exc_invalid_op+0x17/0x50 [ 976.667133][T19165] asm_exc_invalid_op+0x1a/0x20 [ 976.667161][T19165] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 976.667203][T19165] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 976.667233][T19165] RSP: 0000:ffffc9000bd7f648 EFLAGS: 00010046 [ 976.667256][T19165] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 976.667275][T19165] RDX: 0000000000000000 RSI: ffffffff8daa5ccc RDI: ffffffff8bf2b780 [ 976.667295][T19165] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211203a [ 976.667315][T19165] R10: ffffffff908901d7 R11: 0000000000000001 R12: ffffffff90893254 [ 976.667334][T19165] R13: ffffffff8dd66560 R14: ffff88801dab3d00 R15: ffff8880b853adc0 [ 976.667372][T19165] ? update_rq_clock+0x99/0xc70 [ 976.667427][T19165] __schedule+0x212d/0x6150 [ 976.667493][T19165] ? __pfx___schedule+0x10/0x10 [ 976.667534][T19165] ? irqentry_exit+0x1dd/0x8c0 [ 976.667568][T19165] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 976.667602][T19165] preempt_schedule_notrace+0x62/0xe0 [ 976.667650][T19165] preempt_schedule_notrace_thunk+0x16/0x30 [ 976.667690][T19165] rcu_is_watching+0x8e/0xc0 [ 976.667730][T19165] kmem_cache_free+0x22e/0x770 [ 976.667771][T19165] ? stop_this_handle+0x25e/0x4d0 [ 976.667822][T19165] ? jbd2_journal_stop+0x77b/0xe20 [ 976.667848][T19165] jbd2_journal_stop+0x77b/0xe20 [ 976.667878][T19165] ? rcu_watching_snap_stopped_since+0x70/0x110 [ 976.667927][T19165] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 976.667967][T19165] __ext4_journal_stop+0xdd/0x210 [ 976.668002][T19165] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 976.668041][T19165] ext4_dirty_inode+0xed/0x130 [ 976.668077][T19165] ? rcu_is_watching+0x12/0xc0 [ 976.668118][T19165] __mark_inode_dirty+0x1f7/0x1670 [ 976.668163][T19165] generic_update_time+0xcf/0xf0 [ 976.668195][T19165] file_update_time_flags+0x410/0x520 [ 976.668233][T19165] ext4_page_mkwrite+0x33d/0x1880 [ 976.668283][T19165] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 976.668333][T19165] do_page_mkwrite+0x174/0x380 [ 976.668375][T19165] do_fault+0x3fc/0x1ad0 [ 976.668433][T19165] __handle_mm_fault+0x1919/0x2bb0 [ 976.668473][T19165] ? reacquire_held_locks+0xcd/0x1f0 [ 976.668503][T19165] ? __pfx___handle_mm_fault+0x10/0x10 [ 976.668540][T19165] ? lock_vma_under_rcu+0x176/0x580 [ 976.668597][T19165] handle_mm_fault+0x3fe/0xad0 [ 976.668636][T19165] do_user_addr_fault+0x60c/0x1370 [ 976.668677][T19165] ? rcu_is_watching+0x12/0xc0 [ 976.668723][T19165] exc_page_fault+0x64/0xc0 [ 976.668771][T19165] asm_exc_page_fault+0x26/0x30 [ 976.668799][T19165] RIP: 0033:0x7fae70c6f922 [ 976.668821][T19165] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 93 95 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b [ 976.668852][T19165] RSP: 002b:00007ffd59edd530 EFLAGS: 00010202 [ 976.668873][T19165] RAX: 0000000000052008 RBX: 00007fae71b15720 RCX: 0000000000000000 [ 976.668893][T19165] RDX: 0000001b30bd2000 RSI: 0000000000000008 RDI: 00007fae71b15720 [ 976.668912][T19165] RBP: 00000000000001d9 R08: 00007fae707ff0c0 R09: 00007fae70fd2000 [ 976.668931][T19165] R10: 00007fae707ff008 R11: 0000000000000002 R12: ffffffff819d4de1 [ 976.668950][T19165] R13: 00007fae70fe6038 R14: 0000000000000175 R15: fffffffffffae000 [ 976.668972][T19165] ? _prb_read_valid+0x161/0x890 [ 976.669019][T19165]