last executing test programs: 2m45.991729498s ago: executing program 1 (id=623): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, 0x0) 2m45.208800007s ago: executing program 1 (id=624): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r0, 0x7, &(0x7f00000001c0)="25c6349deace79f8977e58fad8ff1954dd1820bbe1ecc9e3badfa9588c518f31d8dd2405db44ab66115ea1b814f5e7335c74945d20f7b2f1bab12e5e1e265d75f3fb2e32c54d53a7e749") mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0xf, 0xa, 0xf) setsockopt$auto(r2, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(0x0, r3) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') 2m43.60763964s ago: executing program 1 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) 2m43.415315988s ago: executing program 1 (id=632): mmap$auto(0xffffffffffffffff, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) (async) mmap$auto(0x0, 0xfffffffffffffe00, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) (async, rerun: 32) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async, rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) (async) io_setup$auto(0x7ffe, &(0x7f0000000000)) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) (async) mlockall$auto(0x7) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b67, r2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto(0x3, 0x89e0, 0x91) (async) ioctl$auto(0x3, 0x89e1, 0x91) socket(0x11, 0x4, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x0, 0x6, 0x73) (async, rerun: 64) shutdown$auto(0x200000003, 0x2) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 2m43.10375003s ago: executing program 1 (id=634): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x20000, 0x0) capset$auto(&(0x7f0000000040)={0x5, 0xffffffffffffffff}, &(0x7f00000000c0)={0x0, 0x4, 0x8}) fcntl$auto_F_SETOWN(r0, 0x8, r1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m41.807233282s ago: executing program 1 (id=638): mmap$auto(0x0, 0x10000000000003, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r1, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f389da21c9b7335def9a1e06c7211bc1d5406f760fb6ec2c40e12cc75b4cc40a4", 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) r3 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x30040053) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10010, r1, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mount$auto(0x0, &(0x7f00000002c0)='./cgroup/../file0\x00', &(0x7f0000000440)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0z\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xba\\\xd0x\x841\xe7d\xbfK?m_}\xd3\xf7\xb4U\xbe\x19\xab\x8f%\xe0;\x83\xfe#,\xd7\x8f\xa8\x8dN_\xadfHJ\xdd&\xcf\xc1\xc5\x0eH\x84\xd2\x87*\x84\xc3Ouh\xe9q\xc9\xb2D\xcb\x04\xa4s\x9b\x93\x86\xe4x\xbe\xf3\xc2>\x1c\x19\xc8', 0x4, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x105101, 0x0) fcntl$auto(0x0, 0x407, 0x100000) 2m26.726680839s ago: executing program 32 (id=638): mmap$auto(0x0, 0x10000000000003, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r1, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f389da21c9b7335def9a1e06c7211bc1d5406f760fb6ec2c40e12cc75b4cc40a4", 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) r3 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x30040053) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10010, r1, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mount$auto(0x0, &(0x7f00000002c0)='./cgroup/../file0\x00', &(0x7f0000000440)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0z\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xba\\\xd0x\x841\xe7d\xbfK?m_}\xd3\xf7\xb4U\xbe\x19\xab\x8f%\xe0;\x83\xfe#,\xd7\x8f\xa8\x8dN_\xadfHJ\xdd&\xcf\xc1\xc5\x0eH\x84\xd2\x87*\x84\xc3Ouh\xe9q\xc9\xb2D\xcb\x04\xa4s\x9b\x93\x86\xe4x\xbe\xf3\xc2>\x1c\x19\xc8', 0x4, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x105101, 0x0) fcntl$auto(0x0, 0x407, 0x100000) 8.558823478s ago: executing program 0 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x8000000000) r2 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r3, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000007584e6503090e8e2b5345e9cfa0488f164657bdaf133aa4d7b077ba1ef5b8363cdf15c32d776d70c37fb947a373d39b4b398c60a30cb4220b77d78a224eccfe5f9139e82a44281e7f788c99891cf49fa1b2380ab80cd79cf342a3b905512943361100d75bc2e483ca3ca496b33e9996c6fee13b68bc901361cdc0c0cd298dd13f50a00233aa3fc4c1b156e9e90874f09ebcf719ce5e1d9f413aefcd288c40620579d97fb92bcecc60d7641a0d988b839fceabc568e02f2dd121a9e600194462cd48f42024cc98b2e5fc7cdc4b0e510adbabb11b8ab20", @ANYRES16=r1, @ANYBLOB="020026bd7000ff9a7d001c000000000014001f00fe88000000000000000000000000010100"/46], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x6) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0x7, 0xf, 0x40000000008fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x4, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/admmidi2\x00', 0x341001, 0x0) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) finit_module$auto(0xffffffffffffffff, 0x0, 0x6) r7 = socket(0x2, 0x801, 0x100) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r5) sendfile$auto(r7, 0xffffffffffffffff, 0x0, 0xffff) unshare$auto(0x40000080) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x81, 0xdf, 0x9b72, 0x2, 0x8000) 5.926954863s ago: executing program 0 (id=1174): r0 = socket(0x11, 0x3, 0x9) (async) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000140)="666d661a1316660bcfa11a3e79eedda5ad5560b56be84b3d65c9361d1dc27ad8f5c9b3fcb1500bc6dd822191aefbcbd921d430c7c615d70e824ef1197270481e61647722c5e3d4fa8bfd143b36764cf448f254fac46f974d54c46b745530dbb2b471a1e11495a0719fe0b310633d1591acfc00d6378ed65b5dc4b130ab512bd6d767", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) 5.422407766s ago: executing program 2 (id=1177): read$auto_qrtr_tun_ops_tun(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000003b00)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x600, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xad41, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r2, 0x8, 0x1) fcntl$auto(r2, 0x10, 0x2) r3 = socket(0xa, 0x5, 0x0) setsockopt$auto(r3, 0x10000000084, 0x7d, 0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x0) readv$auto(r2, &(0x7f0000000240)={0x0, 0xffffffffffffffff}, 0x5) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r4, &(0x7f00000035c0)={0x0, 0x4}, 0x4000000000006) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) rename$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x6, 0xffffffffffffffff, @relative_id=0x2, 0x9}, 0xa3) sendto$auto(r0, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) getxattrat$auto(r1, &(0x7f0000000140)='./file0/file0\x00', 0x400, &(0x7f00000001c0)='/sys/kernel/tracing/buffer_percent\x00', &(0x7f0000000200)={0xb, 0x3, 0x2}, 0x6) 5.420369414s ago: executing program 0 (id=1178): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffd, 0x8000000008011, 0x3, 0x8001) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) r1 = io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x2, 0x5, 0x0) (async) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (async) write$auto(0x6, 0x0, 0x100000001) (async) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) (async) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) (async) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000240), 0x400) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$auto(r0, &(0x7f0000000040)=@phonet={0x23, 0x6, 0xaa, 0x8}, 0xffff) (async) socket(0x10, 0x2, 0x4) 5.141485391s ago: executing program 3 (id=1179): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/194, 0xc2) (async) write$auto(0xffffffffffffffff, 0x0, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async, rerun: 64) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) (async, rerun: 64) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) (async) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, r0, 0xfff) (async, rerun: 32) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) (async) r3 = socket(0x2, 0x2, 0x1) fcntl$auto_F_OFD_SETLKW(r3, 0x26, 0x81) (async) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) (async) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x9, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x2, 0x8, 0x5, 0xfffc, 0x1a99, @raw=0x7647b386, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f0000000180), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r2}}, 0x58) (async) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f00000007c0)={{0x3, 0xee00, 0x0, 0x8, 0x4, 0x3858, 0x1ff}, &(0x7f0000000740)=0x6, &(0x7f0000000780)=0x1, 0x2, 0x6, 0x7, 0xa, 0x4, 0x3ff, 0x1, 0x3, @raw=0x5, @raw=0x52}) 4.774762241s ago: executing program 2 (id=1180): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/vpd_pg0\x00', 0x1c1002, 0x0) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_GET(r1, 0x0, 0x4000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr4\x00', 0x80240, 0x0) mmap$auto(0x1, 0x400004, 0xdf, 0x9b72, r0, 0x5) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r2, 0x900064cd, 0xc35) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/stats\x00', 0x1cb541, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) unshare$auto(0x40000080) socket(0x2a, 0x1, 0x804) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x40, 0xa2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x8, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x44100, 0x0) mmap$auto(0x1, 0x40000b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) pread64$auto(r5, 0x0, 0x40000000f42c, 0x585) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0xfffffffffffffffd, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x0) r6 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) signalfd4$auto(r3, 0x0, 0x8, 0xff) read$auto(r4, 0x0, 0x1fc) tkill$auto(r6, 0x9) unshare$auto(0x40000080) socket(0x25, 0x3, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) 3.659908254s ago: executing program 2 (id=1183): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x80) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x4a0c80, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000140), r3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0xc, 0x0, 0x1, 0x7, 0x1ff, 0x6, 0x5c, 0x101, 0x7, 0x2000000000007, 0x42ff, 0x6, 0x100000000, 0x1ff, 0xffff]}, 0x0, 0x0, &(0x7f0000000180)={0x6, 0xcb}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 3.619780887s ago: executing program 3 (id=1184): keyctl$auto(0x58e4, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x8) mmap$auto(0x0, 0x400005, 0xdf, 0x16, 0xffffffffffffffff, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb4, 0xffffffffffffffff, 0x300000000000) r0 = socket(0xa, 0xa, 0x84) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7fff000000000002, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) fsopen$auto(0x0, 0x3) semctl$auto(0x402af7, 0x2, 0x4, 0x10002) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a801, 0x0) pwrite64$auto(r0, 0x0, 0x7, 0x1800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r3, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) ioctl$auto(r1, 0x4b72, r2) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x29, 0x4, 0xfffffffb) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) 3.555560147s ago: executing program 4 (id=1185): r0 = eventfd2$auto(0x3, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000015) (async) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r0, 0xc, 0x44, &(0x7f0000000100)='^+@\\-\xbf\x00', 0x7f) (async) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000140)=""/147, 0x93) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x424, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x3fe, 0x19, 0x0, 0x1, [@typed={0x4, 0xe}, @nested={0x178, 0x4f, 0x0, 0x1, [@typed={0xc, 0x9d, 0x0, 0x0, @u64=0xe}, @typed={0xc, 0xa2, 0x0, 0x0, @u64=0xa}, @typed={0x8, 0x21, 0x0, 0x0, @fd=r0}, @generic="49403d53e47de08971ccdf7d58ca238b67b63e4bd1fa2100df2f3a39426e00ca7212d2f6cb6064e5603fdeafd39732bf0a638948e749b46637eabc8419d3bebb15b12ad1f46f605a2b87a9314a3d497b83699e5f918f684b40f645bddb", @generic="7793abb54f10dae997e260258d21a231b1498c0c6597dd961a74a5171dc587fe006cd7d2ef894fb610e25fb2a3534aa714196fd65e2054a64d290da1d69b819aeea468256cf01cde06377bcd733383b9db4811c12654f875c37a784a2fa02bff04aff1c3842549730418ec0c5ccab7b769b1559ab53c3db458618be37fca5afcbe23c1c3a1ee944691eb0a65e5814898d664fd306a72aac7f771422c5c38a1a4fef354f858e733a54c576ac2c021bc6e7206cc591c0af9802f494e5ed190e4e9c30ac50db5cc8bbb69e4f72b76461e305a7fca8fce7c10d66b3d6ea5737133969e0d72d1d2e813e09393e58b27c80a2dab050c", @nested={0x4, 0xa2}]}, @generic="2c209ad0c6f7f2e77724bb2cba919ba99d82445d7a1ce72f49ed218aee81ca681aec67775761e682e0b89139edee0fecb87a87fbc6c365f4ec82c9ee92827f6570c78a7b473cfcfe6fbab03d397ce9eead8deaa9de9e52054d59a7d26ee1a46bb381768bff35776e9ac12a26a8aad18e3a38a52f2907328d4cc40e44911d41e80a98aa", @generic="154b0e0c2ba9ad14f5080e757259ddea18863f9cafbd2e98b80d82a29be3af7ebf37b40f7c236b577875d2ee22f218b56c18b858b1acb6325b15e5be2bdcfcb9099ef8d2cdb100ae156176d4df4caec442b5f78d29341eaf82c42fb2b913e9833cf850d2e2b2effb053b7f038380443eed864eba4925536de859f18eef291e70bb0a4fe9030ccdacb7ed5527419ab0f5312c29e625859fcd639275fee72abebafb9703e11fe195520a135064a1cdaf411d6b9bb3774d4e9f18e0e127dbe1274e6d973f29cc4572fc21def60030d5bb3e81b9da9938a4b5cc289f3dbd68d341c0ff78936e", @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x8}, @generic="271581a47ec3875b3f0c66e4319f0fb658ab8c17472bec50a3eef1b622a98dc698517c1a74ff92515f", @generic="f97220689877a97934d79b10a729f70967553b7b281a493bfaf83896f630a17974830f68156787f5ca22fbe0355d44ed1dc22cc970236fd803646826dd9acea89a78d5c20b82adb32ea15d800b5ac66854897486b1e24ffd94663628cc9ca9af466f77b897593a4176fc87705867be19dcdfcdedd0d872c5a322b3fd0395ec5ca26f0455e01e97f360f20fbe95fb28a00a7515b580a2c5dce5387881614327a89363bda5f853ab29ef80d47fbdb4458c77c08fc1be14804dfe90d1f6cdae25f9de95c5f3355176c522821ae3f028f04865b4f8ea594f20889d38c2b56d8cf6bb471d98361836"]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x4}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x4}]}, 0x424}, 0x1, 0x0, 0x0, 0xa1}, 0x44885) r2 = fsopen$auto(&(0x7f0000000740)=']}\x00', 0xfbca) read$auto_regulator_summary_fops_(r2, &(0x7f0000000780)=""/218, 0xda) (async) read$auto_buffer_percent_fops_trace(r0, &(0x7f0000000880)=""/16, 0x10) (async) ioctl$auto_TIOCSTI(r0, 0x5412, &(0x7f00000008c0)="902f55c9850cffca927a78d1acdfdd295722ebb6594fdd39b46207f71c2deaf26e1fffa1d884296106b7ebaa91cd9be539e899826e61c1464be4eacba4220562e2c7a61a05f842d1f37973ec2704b185de44e068b8bdc04ec97663dc891113e1ac9db8dfa9f2f078be94757acd5c6e7501d675402a81ebfeda4edf031b64c099e3ebc409acd89debbff32a85968e3d646270ec3e0672f78af7926fbe6be6d53116e361fae6e79d8c3c407c333f019d5ab606fd0fa762720e59c7faa9779d936b217de7") getsockopt$auto_SO_DEBUG(r0, 0x5, 0x1, &(0x7f00000009c0)=']}\x00', &(0x7f0000000a00)=0xd2) (async) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x6, &(0x7f0000000a40)='^+@\\-\xbf\x00', &(0x7f0000000a80)="040def8e4c39214c126f97bd7ac41cafb601cbfc8610052b5a80a07ee1c71d5a75dc1a7f65b2cf7b043dc407f1da2c36f6d4f9cfb34cd4f92664521a244d50807fb229e61660329572e83842fb810ee16e4e237a187302f10bbe3d4d02a84cfc90eee55dbf8db0a5b215106803", 0x0) r3 = open(&(0x7f0000000b00)='./file0\x00', 0x424800, 0x82) epoll_ctl$auto(r2, 0x2, r3, &(0x7f0000000b40)={0xf1, 0x6}) sendmmsg$auto(r3, &(0x7f0000000d80)={{&(0x7f0000000b80)="3f3b1630024148a864c067b51f338bf52d64643a815a0663367aa49be318b3000bf5fd151ea7b597ce0574119708385cc09cadef0931430002f3221321388f611a26d31866408aeb6a0f249605ddf4428949d3d9fbe0bc2d064a1a0d6e5774ea1ced72f95c104e69", 0x10001, &(0x7f0000000c80)={&(0x7f0000000c00)="53876c8428ff2751b7cf74281cbbc4f4fc0b5d61396f6a8b204bcf889e8b4b9772cea2a9d8f14286ea793e6defacaeb7e589e50476adbabc46598bc0476ce6f252671c890cb30b48b8421d9d33", 0xff}, 0x9, &(0x7f0000000cc0)="b319afc64f023e226e2a04656ebd0ecc040702087f13d96d23c472c47a6260667d45061004836ec9d428678aff7562bd454863065e5e651e325ee2cb0a13c73fffb69044ec9c0f4621b1602180b67f9597677f3e7745e71e13e50d296a1c5a778d2ecd68637317f41df5c250f173ebe6e73c78255c46d2f5f54dacdb900ed2146215f8", 0x9, 0x100}, 0xfffffff9}, 0xe, 0x3d) (async) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x134, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0xff, 0x129, "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"}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xffffffff}]}, 0x134}}, 0x4004800) (async) semctl$auto_GETPID(0x90000000, 0xffff4291, 0xb, 0x3) write$auto_nvmf_dev_fops_fabrics(r0, &(0x7f0000000fc0)="3f817f1962cd245b5fe462d24dbe83f672bf6adb8cda31a8f8f0c7880b701e", 0x1f) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001000)='/sys/devices/virtual/net/rose11/carrier_changes\x00', 0x280000, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000001040)={0x5, r4}) read$auto_tracing_total_entries_fops_trace(r3, &(0x7f0000001080)=""/185, 0xb9) (async) io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000001140)="17b071e4802b3af3e19aee0b0d83e454cf3266ca8613b008d2f3d20dd30575b6941f01779699520de63c", 0xffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001180)='/dev/audio\x00', 0x604c80, 0x0) (async) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000011c0)=@bpf_attr_7={@link_id=0x400, 0xf, 0xb631, r2}, 0x5) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000001280)="df0be506af001119a34236b62679c317a3f7eec223a96c27e80d21fc8e1d749e4aed40c2d8f238a1942970c79468af577d90c783175d0993ffb28d90") (async) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xf9}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x8001}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) (async) connect$auto(r3, &(0x7f00000013c0)=@in={0x2, 0x4e22, @private=0xa010100}, 0x3ff) (async) r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001440), r6) sendmsg$auto_KSMBD_EVENT_STARTING_UP(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) (async) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000001600)={0x134, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xa2e}, @NLBL_CIPSOV4_A_MLSCAT={0x102, 0xb, 0x0, 0x1, [@nested={0x4e, 0x34, 0x0, 0x1, [@generic="3024d9f6a23fc94e87676ac7d10d117acd3a8617a7fb72a5cda64d719c6622544c87a285ef411a592849ff6b02437e16447a3efff9ef618a50e245a360f725d4d0800176b7c8", @nested={0x4, 0x39}]}, @generic="7d39b368fb60e3854c6ca1dec2cf0a35ae1322005cd6f051ceebe0a7c11361a3dbdd4ded147fad9de1cf69426f8671ab95e744cb2b36d1f35758d464e258f88b5932d49d434db079f389fe57ac995114be283e404105b4ff2d3a7b2259768c1bdb8366f1b7dbd4c86344f55736a45d1ff91a3715f47438dfab399a1ecad6685da3e8230916ee0d8928c731ec3827e181b1f4ada67c4b75fa66a2dccfc7177ebdc7ea8c27dfcc45a688b386103fe4"]}, @NLBL_CIPSOV4_A_MLSLVL={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x70f}]}, 0x134}}, 0x0) 3.303686419s ago: executing program 0 (id=1186): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r2, 0x57, r1) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0) close_range$auto(0x2, 0x8000, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) io_uring_setup$auto(0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r5 = socket(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x401, r5, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) r8 = socketpair$auto(0xfffffff9, 0x1, 0x4, &(0x7f0000000080)=0x8) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x7ff, 0x1, 0x7, 0x5, 0xf870e9f, 0x5, 0x7d9, r8}, 0x9) 3.217453371s ago: executing program 2 (id=1187): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001880)='/sys/fs/tmpfs/features/casefold\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000018c0)=""/189, 0xbd) process_madvise$auto_MADV_NORMAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)="6a4a33be3ca54e3993795ace06fe69faee49a0618616d536b956f8488e89bd96cb22a99e397637658ff2cc08af164a88c93fe25b73c84030c1bab3b529082ccc52a1284edece0c018201ce9a930fe31ddee2b1238f00c7e6ec45544f9373280896a83e88f8ec18ca7a246d4ab1d1f3dfd630d74dc62b1a9883ca6ce9cdf35f1ad6283e94", 0xd}, 0x8, 0x0, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xdc93f75efa074bf9}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080000040000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0xd0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/statistics/rx_bytes\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/82, 0x52) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x100000, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r5, 0x560c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x20002, 0x0) write$auto_tomoyo_operations_securityfs_if(r7, &(0x7f00000012c0), 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 3.158006622s ago: executing program 3 (id=1188): r0 = syz_clone3(&(0x7f0000000240)={0xa4846800, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x2d}, &(0x7f00000000c0)=""/16, 0x10, &(0x7f0000000100)=""/253, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r3 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) rt_tgsigqueueinfo$auto_SIGCONT(0xffffffffffffffff, r2, 0x12, &(0x7f0000000300)={@siginfo_0_0={0x8, 0xffffffff, 0x80, @_sigpoll={0x7, r3}}}) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000003c0), r4) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x5}, @OVS_DP_ATTR_NAME={0x15, 0x1, '/dev/dlm-control\x00'}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xffffffff}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xe}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000540), r4) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40009400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x130, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SAE_PASSWORD={0x6e, 0x115, "66c5ce8be3493fcadd4d2b042d54fd655dbc76a86140250e4313cd0ec16fdf4f2a9fa4e026f627f2f3045eb77f056b25c9cc56ebaefbbf70cae5b2018c1972c115ea087a0c767045f0cc91cce495b8fb4cc8ac7c6579818f59fdf68106912cdf10c60792ac0a65136c88"}, @NL80211_ATTR_SAR_SPEC={0x78, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5f}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS={0x54, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x200}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}]}]}, @NL80211_SAR_ATTR_TYPE={0x8}]}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x15, 0xfa, "ff7398226108de3c0b4297c6121b9b7cfb"}, @NL80211_ATTR_FRAME_MATCH={0x14, 0x5b, "0d808fc5a633c57b4014932e2e427f0a"}]}, 0x130}, 0x1, 0x0, 0x0, 0x4001}, 0x20004080) (async) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40009400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x130, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SAE_PASSWORD={0x6e, 0x115, "66c5ce8be3493fcadd4d2b042d54fd655dbc76a86140250e4313cd0ec16fdf4f2a9fa4e026f627f2f3045eb77f056b25c9cc56ebaefbbf70cae5b2018c1972c115ea087a0c767045f0cc91cce495b8fb4cc8ac7c6579818f59fdf68106912cdf10c60792ac0a65136c88"}, @NL80211_ATTR_SAR_SPEC={0x78, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5f}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS={0x54, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x200}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}]}]}, @NL80211_SAR_ATTR_TYPE={0x8}]}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x15, 0xfa, "ff7398226108de3c0b4297c6121b9b7cfb"}, @NL80211_ATTR_FRAME_MATCH={0x14, 0x5b, "0d808fc5a633c57b4014932e2e427f0a"}]}, 0x130}, 0x1, 0x0, 0x0, 0x4001}, 0x20004080) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000740), 0x880, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'vlan1\x00', 0x0}) msgctl$auto(0x4784, 0x8, &(0x7f0000000980)={{0x8, 0x0, 0xffffffffffffffff, 0x9905, 0xfffffffd, 0x1, 0x4}, &(0x7f0000000900)=0x9e, &(0x7f0000000940)=0x81, 0x55a, 0x9, 0x7, 0x5, 0x25, 0x4, 0x6, 0x9, @raw=0x6984, @inferred=r0}) fsconfig$auto(r4, 0x0, &(0x7f00000007c0)='nl80211\x00', &(0x7f0000000800)="8afe1040d6c28f89a367aaa4238102ce27d56d7cda5c5bcec400084f657f651d8c1d23a825089f448a9aca85b4303772f03122681d853d18f860ac5150cf2a42a39d27ba94360059ab550717f9c1e0c20a6cfec0589f38d141b7c003bc9bfab02d06a766233093a8f0bb72d8a2a82a6fe9d2d9632b32304ed8d976971a5d8b399dbb8b6b8a027f314462afd9b0e56e4d916e4d966964399d8a0fab9d3b84fceb0c8f126d6e56e0c09c38fc53ffae2ef5ea60e539f8e1c3546e1430ee43a842b8e7d29015e352d8cd7f27f20b9400dcd2ba52632c466447b0fcaf966bbe7296b283bcde", r9) r10 = getsid$auto(r2) process_vm_readv$auto(r10, &(0x7f0000000a80)={&(0x7f0000000a00)="d502c298727f8e29db4bb878f3c9fd9ab3c6eca98cebcdaf023c78cedfca69e9135aa96aef0883d65a7b5adf034e10e4169cabd924614943ecf8411273c9e9356a2da20d89e95ece8e88d621389d82c1b51e68d40410499fefe7675373310df00568e3bc51d89275fd53138cc626fd7551db23", 0x100000000}, 0x800, &(0x7f0000000bc0)={&(0x7f0000000ac0)="15df488eda0ff990e51163961f1bc2260203631cbc3c8da57a763f638975b5e6640494e8d47639dea6168d895e6407bb3e7282114708689a2f612878e4687f11f42f1faff1188cabe73b3f7c3aeb5532f33af1dccbe5cd17bc00705734b89fd97c303f356d90b8e66757f5c09b1e428b461acd83d266498e930e39e8a06582fd741b75e7854327896805198d8f1772297d2da97fe8d53053cf72b4aabfa51fc5ad022c249ef1b9fc7b8b7ac519161a020f8e1f9b2cc615ee3381ab7980cde9750e055791971bc66ed92cd15523d225b90d978b699013f137b0d11e0ccf52246cfe3e6849e629ff93058ef72df9fd947a512b", 0x7}, 0x772d79ad, 0x7ff) (async) process_vm_readv$auto(r10, &(0x7f0000000a80)={&(0x7f0000000a00)="d502c298727f8e29db4bb878f3c9fd9ab3c6eca98cebcdaf023c78cedfca69e9135aa96aef0883d65a7b5adf034e10e4169cabd924614943ecf8411273c9e9356a2da20d89e95ece8e88d621389d82c1b51e68d40410499fefe7675373310df00568e3bc51d89275fd53138cc626fd7551db23", 0x100000000}, 0x800, &(0x7f0000000bc0)={&(0x7f0000000ac0)="15df488eda0ff990e51163961f1bc2260203631cbc3c8da57a763f638975b5e6640494e8d47639dea6168d895e6407bb3e7282114708689a2f612878e4687f11f42f1faff1188cabe73b3f7c3aeb5532f33af1dccbe5cd17bc00705734b89fd97c303f356d90b8e66757f5c09b1e428b461acd83d266498e930e39e8a06582fd741b75e7854327896805198d8f1772297d2da97fe8d53053cf72b4aabfa51fc5ad022c249ef1b9fc7b8b7ac519161a020f8e1f9b2cc615ee3381ab7980cde9750e055791971bc66ed92cd15523d225b90d978b699013f137b0d11e0ccf52246cfe3e6849e629ff93058ef72df9fd947a512b", 0x7}, 0x772d79ad, 0x7ff) r11 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/mtd0ro\x00', 0x660401, 0x0) ioctl$auto_ECCGETLAYOUT(r11, 0x81484d11, &(0x7f0000000c40)={0x200, [0x3, 0x5, 0x4, 0x80000001, 0x7, 0x10001, 0xff, 0x4, 0x0, 0x0, 0xa, 0x0, 0x4, 0x7fffffff, 0x80000001, 0xfffffff7, 0xfffffff8, 0x7fffffff, 0x2, 0xa3b, 0xfd7, 0x400, 0x7e56, 0x7, 0xf5, 0x8, 0x2, 0x7, 0x10, 0x4, 0xffff, 0x6, 0x0, 0x4, 0xffffffae, 0x2, 0x7, 0x8, 0x401, 0x5, 0x4, 0x4, 0x2, 0x85, 0x7, 0x5, 0x88, 0x1a000000, 0x7, 0x87a, 0x200, 0x48e2b861, 0x3, 0xb, 0xffff6c0b, 0x3, 0x12, 0x7, 0x4, 0x2, 0x5, 0x4, 0x6, 0xffff], 0x4, [{0x2, 0x101}, {0x8, 0x800}, {0xadf6, 0x9}, {0x5e5, 0x3}, {0x5, 0x2fe}, {0xff, 0x16ca}, {0xf8, 0x7}, {0x7, 0x7}]}) unshare$auto(0x3a1) getsockopt$auto_SO_PREFER_BUSY_POLL(r1, 0x8, 0x45, &(0x7f0000000dc0)='\x00', &(0x7f0000000e00)=0x7) (async) getsockopt$auto_SO_PREFER_BUSY_POLL(r1, 0x8, 0x45, &(0x7f0000000dc0)='\x00', &(0x7f0000000e00)=0x7) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000e40), r4) r12 = fcntl$auto_F_DUPFD(r4, 0x0, 0xffffffffffffffff) mmap$auto(0x7, 0x7fff, 0x2, 0x1b, r4, 0x6) (async) mmap$auto(0x7, 0x7fff, 0x2, 0x1b, r4, 0x6) open_tree_attr$auto(r4, &(0x7f0000000e80)='./file0\x00', 0xa9, &(0x7f0000000ec0)={0x6, 0x8000000000000001, 0x8bd5, @raw=0x2}, 0x0) (async) r13 = open_tree_attr$auto(r4, &(0x7f0000000e80)='./file0\x00', 0xa9, &(0x7f0000000ec0)={0x6, 0x8000000000000001, 0x8bd5, @raw=0x2}, 0x0) setsockopt$auto_SO_RCVTIMEO_OLD(r13, 0x9646, 0x14, &(0x7f0000000f00)='/[]!\x00', 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000f80), r12) (async) r14 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000f80), r12) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r13, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x58, r14, 0x205, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x15, 0x1f, '/dev/dlm-control\x00'}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4008000) r15 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000010c0), 0x600100, 0x0) listen$auto(r1, 0x1) getsockopt$auto_SO_REUSEADDR(r3, 0x8, 0x2, &(0x7f0000001100)='\x00', &(0x7f0000001140)=0x5) (async) getsockopt$auto_SO_REUSEADDR(r3, 0x8, 0x2, &(0x7f0000001100)='\x00', &(0x7f0000001140)=0x5) bind$auto(r15, &(0x7f0000001180)=@xdp={0x2c, 0x6, r7, 0x1}, 0x9) waitid$auto_P_PIDFD(0x3, r12, &(0x7f00000011c0)={@_si_pad}, 0x0, &(0x7f0000001240)={{0x7, 0x5}, {0x1, 0x2}, 0x9, 0x0, 0x10, 0x7, 0x80000001, 0x7ff, 0x4, 0xb, 0x8000, 0x80000001, 0x3, 0x3, 0xb54, 0x7}) (async) waitid$auto_P_PIDFD(0x3, r12, &(0x7f00000011c0)={@_si_pad}, 0x0, &(0x7f0000001240)={{0x7, 0x5}, {0x1, 0x2}, 0x9, 0x0, 0x10, 0x7, 0x80000001, 0x7ff, 0x4, 0xb, 0x8000, 0x80000001, 0x3, 0x3, 0xb54, 0x7}) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000001300)={0x4, @raw=0xfffffffffffffffd, @inferred=r4, 0x0, 0xc4, '\x00', {0x4, 0x1, 0x81, r8, r9, 0x6, 0xa789, 0x4, {0x2, 0x80}, {0x34, 0x5}, {0x9, 0x7fff}, 0xf6, 0x5, 0xefc0, 0x101, 0x8, 0x8, 0xf26c, 0x7, 0xa, 0x1ff, '\x00', 0x8, 0x3, 0x3, 0x1}}) 2.939759495s ago: executing program 3 (id=1189): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x181040, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = fcntl$auto(r0, 0x20007, 0xa553) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{@inferred=0x0, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) mmap$auto(0x80000000000, 0xa00000000000000, 0x3, 0x19, r1, 0x8000) r4 = prctl$auto(0x2000003b, 0x3, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x20019) madvise$auto(0x0, 0x2003f0, 0x15) select$auto(0xe, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x7}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r6 = socket(0xa, 0x3, 0x73) setsockopt$auto(r6, 0x3a, 0x9, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nilfs2/features/README\x00', 0x40, 0x0) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="04040000ab300f6bb2b269391bc3ab44c825252a19d681d520b5ef82dddd8022f9b52889a0c8818e51c5f6ceff746bb7cac83897abc1a6d452a03997a34f", @ANYRES32=r7, @ANYRESDEC=r3], 0x30}}, 0x8000) mmap$auto(0x0, 0x4000a, 0x7, 0x9b72, 0x7, 0x28000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) setns(0xffffffffffffffff, 0x60020000) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r8 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000000)=0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x480200, 0x0) r9 = pipe$auto(0x0) dup2$auto(r4, r9) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) ioctl$auto(0x1, 0x541b, 0x8) 2.594772854s ago: executing program 4 (id=1190): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) memfd_create$auto(0x0, 0x9) (async) socket(0x1a, 0x6, 0x968c) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51) mmap$auto(0x7c, 0x20009, 0xffffffffffffffc0, 0xeb1, 0x401, 0x10001) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0xf3, 0xfff, 0x11, 0xb0, 0x1, 0x5, 0x4, 0x9, 0x6, 0x0, 0x0, 0x0, 0x200, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000003, 0x6, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3043, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0xffffffffffff0000, 0x11, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x10081) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x0, 0xa503}, 0x800}, 0x7, 0x4008) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xce*+#\x00', 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x187643, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) (async, rerun: 32) socket(0x1d, 0x2, 0x6) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) (async) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r3, 0x800064be, 0x1e6) capset$auto(0x0, 0x0) socket(0x6, 0x5, 0x88) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async, rerun: 64) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 64) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcbaL\x8d\x12\x18I', 0x81) (async) unshare$auto(0x20000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32) bpf$auto(0xf, 0x0, 0xf) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2.146475445s ago: executing program 0 (id=1191): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r0, &(0x7f0000000040)='{{:\\%)\x00', 0x4) (async) read$auto(r0, &(0x7f0000000040)='{{:\\%)\x00', 0x4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendto$auto(0x3, 0x0, 0x34000, 0x13f, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 1.899722664s ago: executing program 2 (id=1192): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x3) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/printk_formats\x00', 0xc0002, 0x0) (async) r2 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/printk_formats\x00', 0xc0002, 0x0) pread64$auto(r2, 0x0, 0x1, 0xb29e) mmap$auto(0x4, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) (async) io_uring_setup$auto(0x9, 0x0) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) socket(0x29, 0x2, 0x0) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x100, &(0x7f00000000c0)={0x3, 0x0, 0x7fff, @raw=0x5}, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0x3, 0x5411, 0x38) r3 = socket(0x10, 0x2, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x40000, 0x0) (async) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x40000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, r1, 0x10000) (async) close_range$auto(0x2, r1, 0x10000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bpq3/statistics/rx_length_errors\x00', 0x200000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bpq3/statistics/rx_length_errors\x00', 0x200000, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) mmap$auto(0x10000000000000, 0x400005, 0xdf, 0x11, 0x2, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x1) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) (async) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) 1.526240588s ago: executing program 3 (id=1193): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x2002, 0x0) socket(0x2c, 0x80003, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x80c01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x10f642, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0xc) 1.315871995s ago: executing program 4 (id=1194): r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x40}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048010}, 0x30004051) 1.198296909s ago: executing program 3 (id=1195): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14395e15682f083cd7a3161a", @ANYRES16=r2, @ANYBLOB="9bff29bd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) syz_clone3(&(0x7f00000004c0)={0x82000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) io_uring_setup$auto(0x4, 0x0) open(0x0, 0xa240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto(0x3, 0x80286f4e, r4) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f0000000040)={{&(0x7f0000000000), 0x200005ac, 0x0, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x4, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 1.177035183s ago: executing program 0 (id=1196): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r0, 0x7, &(0x7f00000001c0)="25c6349deace79f8977e58fad8ff1954dd1820bbe1ecc9e3badfa9588c518f31d8dd2405db44ab66115ea1b814f5e7335c74945d20f7b2f1bab12e5e1e265d75f3fb2e32c54d53a7e749") mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0xf, 0xa, 0xf) setsockopt$auto(r2, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r3) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, 0x0, 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') 1.074947659s ago: executing program 4 (id=1197): setxattr$auto(0x0, 0x0, 0x0, 0x800000, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x12b441, 0x0) ioctl$auto(r0, 0x7, r0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129e00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14001000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty44\x00', 0x20000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x10}, 0x3) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c840) write$auto(r0, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdb\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C\x02\x00D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4F\x953.O\xab\"4\x8a|\x04z\xd4\b5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd46\xe8\xcb?(\xfaI\xe2\xae,\x95k\xf9_\xd4?\xda\r\xb86\xec\xcb\x81`50HSnR\'\x10\x82\xce\xfb\xf9\x1d\xa9X\v\x00\x00\x00\x1c\x7f\xe4\xe2\xb8\xdaM\r\xdb\xf1\xbdk\xf8\xe0\xcf\x821r\xfd4\xe0tv\xa2i\xf8e\xf2\x00\x00\x00\x00\x00\x00', 0x7f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, r1) lseek$auto(0xffffffffffffffff, 0x8a05, 0x1) prctl$auto(0x3c, 0x1, 0x0, 0x5, 0x8000b) madvise$auto(0x3, 0x7, 0x3a) getsockopt$auto_SO_GET_FILTER(r1, 0x6, 0x1a, &(0x7f0000000080)=']/^^%%\x00', &(0x7f0000000180)=0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) 187.761321ms ago: executing program 2 (id=1198): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x4000, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1) r1 = fsopen$auto(0x0, 0x1) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) r2 = socket(0xa, 0x1, 0x84) r3 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r5, 0x0, 0xc3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r6, 0x0, 0x81) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) r8 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop13/hctx0/sched_tags\x00', 0x40100, 0x0) lseek$auto(r8, 0x7fffffffff7fffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x7, 0x1ffe1, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x3f2c, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0x0, 0x3, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x4, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8e]}, 0x2, 0xc) ioctl$auto_EVIOCGRAB(r7, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r7, 0x0, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000380)={0x4, 0xd, 0x4, 0xc2b, 0x8001, 0x1000, 0x0, 0x7}) madvise$auto(0x0, 0x4, 0x15) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd8f20f8dbdf250100000008000100aa7e0bd395f93a30", @ANYRESDEC=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x557bedafa2a74d4f) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x52) 153.941079ms ago: executing program 4 (id=1199): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/radioshark2/bind\x00', 0x183442, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) 0s ago: executing program 4 (id=1200): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001880)='/sys/fs/tmpfs/features/casefold\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000018c0)=""/189, 0xbd) process_madvise$auto_MADV_NORMAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)="6a4a33be3ca54e3993795ace06fe69faee49a0618616d536b956f8488e89bd96cb22a99e397637658ff2cc08af164a88c93fe25b73c84030c1bab3b529082ccc52a1284edece0c018201ce9a930fe31ddee2b1238f00c7e6ec45544f9373280896a83e88f8ec18ca7a246d4ab1d1f3dfd630d74dc62b1a9883ca6ce9cdf35f1ad6283e94", 0xd}, 0x8, 0x0, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xdc93f75efa074bf9}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080000040000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0xd0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/statistics/rx_bytes\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/82, 0x52) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x100000, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r5, 0x560c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x20002, 0x0) write$auto_tomoyo_operations_securityfs_if(r7, &(0x7f00000012c0), 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) kernel console output (not intermixed with test programs): name failslab, interval 1, probability 0, space 0, times 0 [ 256.781812][ T8704] CPU: 0 UID: 0 PID: 8704 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) [ 256.781848][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.781864][ T8704] Call Trace: [ 256.781874][ T8704] [ 256.781884][ T8704] dump_stack_lvl+0x16c/0x1f0 [ 256.781919][ T8704] should_fail_ex+0x512/0x640 [ 256.781950][ T8704] ? __kmalloc_cache_noprof+0x5f/0x780 [ 256.781995][ T8704] should_failslab+0xc2/0x120 [ 256.782028][ T8704] __kmalloc_cache_noprof+0x72/0x780 [ 256.782070][ T8704] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 256.782123][ T8704] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 256.782162][ T8704] kvm_dev_ioctl+0xa8a/0x1a80 [ 256.782206][ T8704] ? find_held_lock+0x2b/0x80 [ 256.782234][ T8704] ? hook_file_ioctl_common+0x145/0x410 [ 256.782275][ T8704] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 256.782316][ T8704] ? __fget_files+0x20e/0x3c0 [ 256.782347][ T8704] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 256.782385][ T8704] __x64_sys_ioctl+0x18b/0x210 [ 256.782423][ T8704] do_syscall_64+0xcd/0xfa0 [ 256.782454][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.782480][ T8704] RIP: 0033:0x7f259118eec9 [ 256.782501][ T8704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.782525][ T8704] RSP: 002b:00007f25920a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.782550][ T8704] RAX: ffffffffffffffda RBX: 00007f25913e5fa0 RCX: 00007f259118eec9 [ 256.782568][ T8704] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 256.782583][ T8704] RBP: 00007f2591211f91 R08: 0000000000000000 R09: 0000000000000000 [ 256.782599][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.782614][ T8704] R13: 00007f25913e6038 R14: 00007f25913e5fa0 R15: 00007ffc357a10a8 [ 256.782650][ T8704] [ 257.069802][ T8711] Console: switching to colour VGA+ 80x25 [ 257.151296][ T5827] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 257.615840][ T8720] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 258.041485][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 258.905111][ T8742] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 258.947528][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 259.590103][ T8760] FAULT_INJECTION: forcing a failure. [ 259.590103][ T8760] name fail_futex, interval 1, probability 0, space 0, times 1 [ 259.607999][ T8760] CPU: 1 UID: 0 PID: 8760 Comm: syz.1.544 Not tainted syzkaller #0 PREEMPT(full) [ 259.608023][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.608031][ T8760] Call Trace: [ 259.608036][ T8760] [ 259.608042][ T8760] dump_stack_lvl+0x16c/0x1f0 [ 259.608062][ T8760] should_fail_ex+0x512/0x640 [ 259.608082][ T8760] get_futex_key+0x1d0/0x1560 [ 259.608101][ T8760] ? __lock_acquire+0xb97/0x1ce0 [ 259.608120][ T8760] ? __pfx_get_futex_key+0x10/0x10 [ 259.608138][ T8760] ? __pfx___schedule+0x10/0x10 [ 259.608151][ T8760] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 259.608170][ T8760] futex_wait_setup+0x9d/0x550 [ 259.608197][ T8760] __futex_wait+0x193/0x2f0 [ 259.608218][ T8760] ? __pfx___futex_wait+0x10/0x10 [ 259.608242][ T8760] ? __pfx_futex_wake_mark+0x10/0x10 [ 259.608265][ T8760] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 259.608285][ T8760] ? __hrtimer_setup+0x176/0x280 [ 259.608307][ T8760] ? ktime_add_safe+0x60/0x70 [ 259.608329][ T8760] futex_wait+0xe8/0x380 [ 259.608350][ T8760] ? __pfx_futex_wait+0x10/0x10 [ 259.608369][ T8760] ? __lock_acquire+0xb97/0x1ce0 [ 259.608388][ T8760] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 259.608415][ T8760] do_futex+0x229/0x350 [ 259.608433][ T8760] ? __pfx_do_futex+0x10/0x10 [ 259.608449][ T8760] ? rcu_is_watching+0x12/0xc0 [ 259.608464][ T8760] ? ktime_get+0x200/0x310 [ 259.608479][ T8760] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.608494][ T8760] ? read_tsc+0x9/0x20 [ 259.608512][ T8760] __x64_sys_futex+0x1e0/0x4c0 [ 259.608533][ T8760] ? __pfx___x64_sys_futex+0x10/0x10 [ 259.608551][ T8760] ? xfd_validate_state+0x61/0x180 [ 259.608576][ T8760] do_syscall_64+0xcd/0xfa0 [ 259.608592][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.608606][ T8760] RIP: 0033:0x7ff619f8eec9 [ 259.608617][ T8760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.608631][ T8760] RSP: 002b:00007ffd0fc80cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 259.608645][ T8760] RAX: ffffffffffffffda RBX: 000000000003f5e4 RCX: 00007ff619f8eec9 [ 259.608654][ T8760] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff61a1e5fac [ 259.608662][ T8760] RBP: 0000000000000032 R08: 00007ff61ae4d000 R09: 000000040fc80fbf [ 259.608670][ T8760] R10: 00007ffd0fc80dc0 R11: 0000000000000246 R12: 00007ff61a1e5fac [ 259.608679][ T8760] R13: 00007ffd0fc80dc0 R14: 000000000003f616 R15: 00007ffd0fc80de0 [ 259.608698][ T8760] [ 261.847416][ T8787] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(424206980.290643515.64131978), cmd(3) [ 261.927312][ T1553] Process accounting resumed [ 262.139291][ T8789] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(424206980.290643515.64131978), cmd(3) [ 262.155413][ T116] Process accounting resumed [ 262.423506][ T8798] netlink: 146 bytes leftover after parsing attributes in process `syz.0.557'. [ 263.853873][ T8826] FAULT_INJECTION: forcing a failure. [ 263.853873][ T8826] name failslab, interval 1, probability 0, space 0, times 0 [ 263.877163][ T8826] CPU: 0 UID: 0 PID: 8826 Comm: syz.2.561 Not tainted syzkaller #0 PREEMPT(full) [ 263.877187][ T8826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.877196][ T8826] Call Trace: [ 263.877201][ T8826] [ 263.877208][ T8826] dump_stack_lvl+0x16c/0x1f0 [ 263.877229][ T8826] should_fail_ex+0x512/0x640 [ 263.877248][ T8826] ? __kmalloc_cache_noprof+0x5f/0x780 [ 263.877278][ T8826] should_failslab+0xc2/0x120 [ 263.877298][ T8826] __kmalloc_cache_noprof+0x72/0x780 [ 263.877321][ T8826] ? key_user_lookup+0x195/0x560 [ 263.877337][ T8826] ? key_user_lookup+0x195/0x560 [ 263.877349][ T8826] key_user_lookup+0x195/0x560 [ 263.877362][ T8826] ? __pfx_key_user_lookup+0x10/0x10 [ 263.877376][ T8826] ? key_alloc+0xbd4/0x1330 [ 263.877399][ T8826] key_alloc+0x18b/0x1330 [ 263.877420][ T8826] ? __pfx_key_alloc+0x10/0x10 [ 263.877438][ T8826] keyring_alloc+0x44/0xc0 [ 263.877456][ T8826] keyctl_get_persistent+0x6a8/0x8c0 [ 263.877474][ T8826] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 263.877492][ T8826] ? __x64_sys_futex+0x1e0/0x4c0 [ 263.877511][ T8826] ? __x64_sys_futex+0x1e9/0x4c0 [ 263.877532][ T8826] ? xfd_validate_state+0x61/0x180 [ 263.877551][ T8826] ? __pfx_do_writev+0x10/0x10 [ 263.877568][ T8826] __do_sys_keyctl+0x1a9/0x590 [ 263.877588][ T8826] do_syscall_64+0xcd/0xfa0 [ 263.877605][ T8826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.877619][ T8826] RIP: 0033:0x7ff4fd98eec9 [ 263.877631][ T8826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.877645][ T8826] RSP: 002b:00007ff4fe794038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 263.877659][ T8826] RAX: ffffffffffffffda RBX: 00007ff4fdbe5fa0 RCX: 00007ff4fd98eec9 [ 263.877668][ T8826] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000016 [ 263.877677][ T8826] RBP: 00007ff4fda11f91 R08: 0000000000000001 R09: 0000000000000000 [ 263.877685][ T8826] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 263.877693][ T8826] R13: 00007ff4fdbe6038 R14: 00007ff4fdbe5fa0 R15: 00007fff08d7fa68 [ 263.877713][ T8826] [ 265.083693][ T8839] zswap: compressor not available [ 265.496779][ T8860] CIFS mount error: No usable UNC path provided in device string! [ 265.496779][ T8860] [ 265.534182][ T8860] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 265.669738][ T8860] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 267.148516][ T8900] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 268.116553][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 268.400495][ T8933] FAULT_INJECTION: forcing a failure. [ 268.400495][ T8933] name fail_futex, interval 1, probability 0, space 0, times 0 [ 268.413708][ T8933] CPU: 0 UID: 0 PID: 8933 Comm: syz.3.576 Not tainted syzkaller #0 PREEMPT(full) [ 268.413729][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.413737][ T8933] Call Trace: [ 268.413742][ T8933] [ 268.413747][ T8933] dump_stack_lvl+0x16c/0x1f0 [ 268.413767][ T8933] should_fail_ex+0x512/0x640 [ 268.413788][ T8933] get_futex_key+0x1d0/0x1560 [ 268.413808][ T8933] ? __pfx_get_futex_key+0x10/0x10 [ 268.413827][ T8933] ? __pfx___schedule+0x10/0x10 [ 268.413840][ T8933] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 268.413858][ T8933] futex_wait_setup+0x9d/0x550 [ 268.413884][ T8933] __futex_wait+0x193/0x2f0 [ 268.413905][ T8933] ? __pfx___futex_wait+0x10/0x10 [ 268.413929][ T8933] ? __pfx_futex_wake_mark+0x10/0x10 [ 268.413953][ T8933] ? futex_private_hash_put+0x176/0x300 [ 268.413972][ T8933] ? futex_private_hash_put+0x18a/0x300 [ 268.414002][ T8933] futex_wait+0xe8/0x380 [ 268.414034][ T8933] ? __pfx_futex_wait+0x10/0x10 [ 268.414082][ T8933] do_futex+0x229/0x350 [ 268.414114][ T8933] ? __pfx_do_futex+0x10/0x10 [ 268.414142][ T8933] ? iput+0x35/0x40 [ 268.414167][ T8933] ? __sock_release+0x20b/0x270 [ 268.414194][ T8933] ? import_ubuf+0x1b6/0x220 [ 268.414241][ T8933] __x64_sys_futex+0x1e0/0x4c0 [ 268.414276][ T8933] ? __pfx___x64_sys_futex+0x10/0x10 [ 268.414307][ T8933] ? xfd_validate_state+0x61/0x180 [ 268.414348][ T8933] do_syscall_64+0xcd/0xfa0 [ 268.414376][ T8933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.414401][ T8933] RIP: 0033:0x7f259118eec9 [ 268.414419][ T8933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.414439][ T8933] RSP: 002b:00007f25920610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 268.414461][ T8933] RAX: ffffffffffffffda RBX: 00007f25913e6188 RCX: 00007f259118eec9 [ 268.414474][ T8933] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f25913e6188 [ 268.414482][ T8933] RBP: 00007f25913e6180 R08: 0000000000000000 R09: 0000000000000000 [ 268.414490][ T8933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.414498][ T8933] R13: 00007f25913e6218 R14: 00007ffc357a0fc0 R15: 00007ffc357a10a8 [ 268.414517][ T8933] [ 271.469335][ T9004] netlink: 186 bytes leftover after parsing attributes in process `syz.1.582'. [ 272.313883][ T9002] bond0: option arp_interval: invalid value () [ 272.380933][ T9002] bond0: option arp_interval: allowed values 0 - 2147483647 [ 272.777545][ T9036] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 273.257119][ T9045] netlink: 268 bytes leftover after parsing attributes in process `syz.3.589'. [ 273.266743][ T9045] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.589: iget: checksum invalid [ 273.287975][ T9045] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 273.326739][ T9045] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.589: iget: checksum invalid [ 273.340031][ T9045] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 273.352600][ T9045] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.589: iget: checksum invalid [ 273.385935][ T9045] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 273.480794][ T9045] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.589: iget: checksum invalid [ 273.492247][ T9045] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 273.517636][ T9027] openvswitch: netlink: IP tunnel dst address not specified [ 273.560065][ T9045] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 273.602162][ T9045] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 274.103645][ T9043] Process accounting resumed [ 275.920970][ T9092] blktrace: Concurrent blktraces are not allowed on ram7 [ 277.729469][ T9108] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 277.805587][ T9114] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 278.050829][ T9118] FAULT_INJECTION: forcing a failure. [ 278.050829][ T9118] name fail_futex, interval 1, probability 0, space 0, times 0 [ 278.084085][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.1.601 Not tainted syzkaller #0 PREEMPT(full) [ 278.084120][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.084135][ T9118] Call Trace: [ 278.084142][ T9118] [ 278.084152][ T9118] dump_stack_lvl+0x16c/0x1f0 [ 278.084183][ T9118] should_fail_ex+0x512/0x640 [ 278.084216][ T9118] get_futex_key+0x1d0/0x1560 [ 278.084251][ T9118] ? __pfx_get_futex_key+0x10/0x10 [ 278.084283][ T9118] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.084314][ T9118] futex_wake+0xea/0x530 [ 278.084348][ T9118] ? __pfx_futex_wake+0x10/0x10 [ 278.084447][ T9118] do_futex+0x1e3/0x350 [ 278.084479][ T9118] ? __pfx_do_futex+0x10/0x10 [ 278.084509][ T9118] ? fput+0x9b/0xd0 [ 278.084537][ T9118] ? __sys_sendmsg+0x18c/0x220 [ 278.084565][ T9118] __x64_sys_futex+0x1e0/0x4c0 [ 278.084602][ T9118] ? __pfx___x64_sys_futex+0x10/0x10 [ 278.084645][ T9118] do_syscall_64+0xcd/0xfa0 [ 278.084679][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.084706][ T9118] RIP: 0033:0x7ff619f8eec9 [ 278.084729][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.084753][ T9118] RSP: 002b:00007ff61ae4c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.084779][ T9118] RAX: ffffffffffffffda RBX: 00007ff61a1e5fa8 RCX: 00007ff619f8eec9 [ 278.084796][ T9118] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff61a1e5fac [ 278.084813][ T9118] RBP: 00007ff61a1e5fa0 R08: 00007ff61ae4d000 R09: 0000000000000000 [ 278.084828][ T9118] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 278.084844][ T9118] R13: 00007ff61a1e6038 R14: 00007ffd0fc80a80 R15: 00007ffd0fc80b68 [ 278.084877][ T9118] [ 278.360748][ T9122] FAULT_INJECTION: forcing a failure. [ 278.360748][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 278.445664][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.0.603 Not tainted syzkaller #0 PREEMPT(full) [ 278.445697][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.445712][ T9122] Call Trace: [ 278.445721][ T9122] [ 278.445730][ T9122] dump_stack_lvl+0x16c/0x1f0 [ 278.445764][ T9122] should_fail_ex+0x512/0x640 [ 278.445795][ T9122] ? fs_reclaim_acquire+0xae/0x150 [ 278.445830][ T9122] should_failslab+0xc2/0x120 [ 278.445863][ T9122] __kmalloc_noprof+0xdd/0x880 [ 278.445900][ T9122] ? kfree+0x252/0x6d0 [ 278.445932][ T9122] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 278.445968][ T9122] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 278.445993][ T9122] tomoyo_realpath_from_path+0xc2/0x6e0 [ 278.446030][ T9122] tomoyo_check_open_permission+0x2ab/0x3c0 [ 278.446069][ T9122] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 278.446143][ T9122] ? do_raw_spin_lock+0x12c/0x2b0 [ 278.446200][ T9122] tomoyo_file_open+0x6b/0x90 [ 278.446231][ T9122] security_file_open+0x84/0x1e0 [ 278.446257][ T9122] do_dentry_open+0x596/0x1530 [ 278.446294][ T9122] vfs_open+0x82/0x3f0 [ 278.446329][ T9122] path_openat+0x1de4/0x2cb0 [ 278.446364][ T9122] ? __pfx_path_openat+0x10/0x10 [ 278.446401][ T9122] do_filp_open+0x20b/0x470 [ 278.446423][ T9122] ? __pfx_do_filp_open+0x10/0x10 [ 278.446474][ T9122] ? alloc_fd+0x471/0x7d0 [ 278.446509][ T9122] do_sys_openat2+0x11b/0x1d0 [ 278.446541][ T9122] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.446589][ T9122] __x64_sys_openat+0x174/0x210 [ 278.446625][ T9122] ? __pfx___x64_sys_openat+0x10/0x10 [ 278.446674][ T9122] do_syscall_64+0xcd/0xfa0 [ 278.446705][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.446730][ T9122] RIP: 0033:0x7f55da58eec9 [ 278.446752][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.446775][ T9122] RSP: 002b:00007f55db497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.446800][ T9122] RAX: ffffffffffffffda RBX: 00007f55da7e5fa0 RCX: 00007f55da58eec9 [ 278.446816][ T9122] RDX: 000000000014f602 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 278.446833][ T9122] RBP: 00007f55da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.446848][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.446863][ T9122] R13: 00007f55da7e6038 R14: 00007f55da7e5fa0 R15: 00007ffd81bd8698 [ 278.446899][ T9122] [ 278.446910][ T9122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.053289][ T9126] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 279.592017][ T9140] FAULT_INJECTION: forcing a failure. [ 279.592017][ T9140] name failslab, interval 1, probability 0, space 0, times 0 [ 279.664844][ T9140] CPU: 0 UID: 0 PID: 9140 Comm: syz.0.607 Not tainted syzkaller #0 PREEMPT(full) [ 279.664868][ T9140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.664878][ T9140] Call Trace: [ 279.664884][ T9140] [ 279.664891][ T9140] dump_stack_lvl+0x16c/0x1f0 [ 279.664913][ T9140] should_fail_ex+0x512/0x640 [ 279.664932][ T9140] ? __kmalloc_cache_noprof+0x5f/0x780 [ 279.664958][ T9140] should_failslab+0xc2/0x120 [ 279.664977][ T9140] __kmalloc_cache_noprof+0x72/0x780 [ 279.664999][ T9140] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 279.665023][ T9140] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 279.665043][ T9140] kvm_dev_ioctl+0xa8a/0x1a80 [ 279.665066][ T9140] ? find_held_lock+0x2b/0x80 [ 279.665081][ T9140] ? hook_file_ioctl_common+0x145/0x410 [ 279.665103][ T9140] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 279.665125][ T9140] ? __fget_files+0x20e/0x3c0 [ 279.665142][ T9140] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 279.665164][ T9140] __x64_sys_ioctl+0x18b/0x210 [ 279.665185][ T9140] do_syscall_64+0xcd/0xfa0 [ 279.665202][ T9140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.665217][ T9140] RIP: 0033:0x7f55da58eec9 [ 279.665229][ T9140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.665244][ T9140] RSP: 002b:00007f55db497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.665258][ T9140] RAX: ffffffffffffffda RBX: 00007f55da7e5fa0 RCX: 00007f55da58eec9 [ 279.665269][ T9140] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 279.665278][ T9140] RBP: 00007f55da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 279.665287][ T9140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.665296][ T9140] R13: 00007f55da7e6038 R14: 00007f55da7e5fa0 R15: 00007ffd81bd8698 [ 279.665316][ T9140] [ 279.673337][ T5838] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 279.997431][ T9141] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 280.408403][ T9145] FAULT_INJECTION: forcing a failure. [ 280.408403][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 280.523131][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.1.609 Not tainted syzkaller #0 PREEMPT(full) [ 280.523155][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.523164][ T9145] Call Trace: [ 280.523170][ T9145] [ 280.523177][ T9145] dump_stack_lvl+0x16c/0x1f0 [ 280.523200][ T9145] should_fail_ex+0x512/0x640 [ 280.523218][ T9145] ? __kmalloc_cache_noprof+0x5f/0x780 [ 280.523242][ T9145] should_failslab+0xc2/0x120 [ 280.523261][ T9145] __kmalloc_cache_noprof+0x72/0x780 [ 280.523283][ T9145] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 280.523307][ T9145] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 280.523326][ T9145] kvm_dev_ioctl+0xa8a/0x1a80 [ 280.523349][ T9145] ? find_held_lock+0x2b/0x80 [ 280.523364][ T9145] ? hook_file_ioctl_common+0x145/0x410 [ 280.523387][ T9145] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 280.523409][ T9145] ? __fget_files+0x20e/0x3c0 [ 280.523426][ T9145] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 280.523448][ T9145] __x64_sys_ioctl+0x18b/0x210 [ 280.523469][ T9145] do_syscall_64+0xcd/0xfa0 [ 280.523486][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.523500][ T9145] RIP: 0033:0x7ff619f8eec9 [ 280.523512][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.523525][ T9145] RSP: 002b:00007ff61ae4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.523539][ T9145] RAX: ffffffffffffffda RBX: 00007ff61a1e5fa0 RCX: 00007ff619f8eec9 [ 280.523549][ T9145] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 280.523557][ T9145] RBP: 00007ff61a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 280.523565][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.523573][ T9145] R13: 00007ff61a1e6038 R14: 00007ff61a1e5fa0 R15: 00007ffd0fc80b68 [ 280.523592][ T9145] [ 280.852353][ T5838] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 281.018619][ T9154] CIFS mount error: No usable UNC path provided in device string! [ 281.018619][ T9154] [ 281.043926][ T9154] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 281.179849][ T9148] svc: failed to register nfsdv3 RPC service (errno 111). [ 281.199672][ T9148] svc: failed to register nfsaclv3 RPC service (errno 111). [ 281.927599][ T9175] FAULT_INJECTION: forcing a failure. [ 281.927599][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 281.943709][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.1.617 Not tainted syzkaller #0 PREEMPT(full) [ 281.943747][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.943763][ T9175] Call Trace: [ 281.943773][ T9175] [ 281.943783][ T9175] dump_stack_lvl+0x16c/0x1f0 [ 281.943816][ T9175] should_fail_ex+0x512/0x640 [ 281.943853][ T9175] should_failslab+0xc2/0x120 [ 281.943883][ T9175] kmem_cache_alloc_noprof+0x75/0x6e0 [ 281.943909][ T9175] ? skb_clone+0x190/0x3f0 [ 281.943945][ T9175] ? skb_clone+0x190/0x3f0 [ 281.943970][ T9175] skb_clone+0x190/0x3f0 [ 281.944002][ T9175] netlink_deliver_tap+0xabd/0xd30 [ 281.944039][ T9175] netlink_unicast+0x71f/0x870 [ 281.944073][ T9175] ? __pfx_netlink_unicast+0x10/0x10 [ 281.944103][ T9175] ? genl_rcv_msg+0x4bb/0x800 [ 281.944147][ T9175] netlink_ack+0x696/0xb80 [ 281.944187][ T9175] netlink_rcv_skb+0x332/0x420 [ 281.944217][ T9175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.944252][ T9175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.944297][ T9175] ? netlink_deliver_tap+0x1ae/0xd30 [ 281.944332][ T9175] genl_rcv+0x28/0x40 [ 281.944361][ T9175] netlink_unicast+0x5aa/0x870 [ 281.944397][ T9175] ? __pfx_netlink_unicast+0x10/0x10 [ 281.944441][ T9175] netlink_sendmsg+0x8c8/0xdd0 [ 281.944479][ T9175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.944514][ T9175] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 281.944554][ T9175] __sys_sendto+0x4a0/0x520 [ 281.944590][ T9175] ? __pfx___sys_sendto+0x10/0x10 [ 281.944630][ T9175] ? fd_install+0x225/0x750 [ 281.944670][ T9175] ? __pfx___sys_socket+0x10/0x10 [ 281.944707][ T9175] ? xfd_validate_state+0x61/0x180 [ 281.944747][ T9175] __x64_sys_sendto+0xe0/0x1c0 [ 281.944772][ T9175] ? do_syscall_64+0x91/0xfa0 [ 281.944799][ T9175] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.944826][ T9175] do_syscall_64+0xcd/0xfa0 [ 281.944855][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.944880][ T9175] RIP: 0033:0x7ff619f90d5c [ 281.944901][ T9175] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 281.944924][ T9175] RSP: 002b:00007ff61ae4aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 281.944949][ T9175] RAX: ffffffffffffffda RBX: 00007ff61ae4afc0 RCX: 00007ff619f90d5c [ 281.944966][ T9175] RDX: 0000000000000028 RSI: 00007ff61ae4b010 RDI: 0000000000000008 [ 281.944982][ T9175] RBP: 0000000000000000 R08: 00007ff61ae4af14 R09: 000000000000000c [ 281.944999][ T9175] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 281.945014][ T9175] R13: 00007ff61ae4af68 R14: 00007ff61ae4b010 R15: 0000000000000000 [ 281.945051][ T9175] [ 282.911346][ T8991] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:18: bg 2: bad block bitmap checksum [ 282.948865][ T8991] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 915 with max blocks 9 with error 74 [ 282.979155][ T8991] EXT4-fs (sda1): This should not happen!! Data will be lost [ 282.979155][ T8991] [ 283.123220][ T8991] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 7 with max blocks 3 with error 117 [ 283.123315][ T8991] EXT4-fs (sda1): This should not happen!! Data will be lost [ 283.123315][ T8991] [ 286.290014][ T9302] netlink: 'syz.3.635': attribute type 11 has an invalid length. [ 287.732190][ T9329] FAULT_INJECTION: forcing a failure. [ 287.732190][ T9329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.754366][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.2.640 Not tainted syzkaller #0 PREEMPT(full) [ 287.754399][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.754415][ T9329] Call Trace: [ 287.754424][ T9329] [ 287.754435][ T9329] dump_stack_lvl+0x16c/0x1f0 [ 287.754469][ T9329] should_fail_ex+0x512/0x640 [ 287.754506][ T9329] should_fail_alloc_page+0xe7/0x130 [ 287.754542][ T9329] prepare_alloc_pages+0x3c2/0x610 [ 287.754580][ T9329] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 287.754609][ T9329] ? find_held_lock+0x2b/0x80 [ 287.754636][ T9329] ? mm_drop_all_locks+0x38e/0x4b0 [ 287.754668][ T9329] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 287.754700][ T9329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.754734][ T9329] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.754783][ T9329] ? mm_drop_all_locks+0x38e/0x4b0 [ 287.754810][ T9329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.754853][ T9329] ? policy_nodemask+0xea/0x4e0 [ 287.754888][ T9329] alloc_pages_mpol+0x1fb/0x550 [ 287.754922][ T9329] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 287.754971][ T9329] alloc_pages_noprof+0x131/0x390 [ 287.755006][ T9329] kvm_coalesced_mmio_init+0x1a/0x170 [ 287.755038][ T9329] kvm_dev_ioctl+0xe08/0x1a80 [ 287.755080][ T9329] ? find_held_lock+0x2b/0x80 [ 287.755105][ T9329] ? hook_file_ioctl_common+0x145/0x410 [ 287.755146][ T9329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 287.755185][ T9329] ? __fget_files+0x20e/0x3c0 [ 287.755214][ T9329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 287.755261][ T9329] __x64_sys_ioctl+0x18b/0x210 [ 287.755302][ T9329] do_syscall_64+0xcd/0xfa0 [ 287.755333][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.755367][ T9329] RIP: 0033:0x7ff4fd98eec9 [ 287.755388][ T9329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.755413][ T9329] RSP: 002b:00007ff4fe794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.755438][ T9329] RAX: ffffffffffffffda RBX: 00007ff4fdbe5fa0 RCX: 00007ff4fd98eec9 [ 287.755456][ T9329] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 287.755472][ T9329] RBP: 00007ff4fda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.755488][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.755502][ T9329] R13: 00007ff4fdbe6038 R14: 00007ff4fdbe5fa0 R15: 00007fff08d7fa68 [ 287.755532][ T9329] [ 288.066448][ T5838] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 289.800935][ T9353] bond0: invalid ARP target specified [ 289.991581][ T9366] netlink: 'syz.3.647': attribute type 11 has an invalid length. [ 290.008896][ T9366] netlink: 'syz.3.647': attribute type 11 has an invalid length. [ 290.958967][ T9380] FAULT_INJECTION: forcing a failure. [ 290.958967][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 291.025379][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.2.649 Not tainted syzkaller #0 PREEMPT(full) [ 291.025412][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.025428][ T9380] Call Trace: [ 291.025436][ T9380] [ 291.025447][ T9380] dump_stack_lvl+0x16c/0x1f0 [ 291.025483][ T9380] should_fail_ex+0x512/0x640 [ 291.025512][ T9380] ? __kmalloc_cache_noprof+0x5f/0x780 [ 291.025557][ T9380] should_failslab+0xc2/0x120 [ 291.025588][ T9380] __kmalloc_cache_noprof+0x72/0x780 [ 291.025627][ T9380] ? __mmu_notifier_register+0x4b2/0x770 [ 291.025663][ T9380] ? __mmu_notifier_register+0x4b2/0x770 [ 291.025700][ T9380] __mmu_notifier_register+0x4b2/0x770 [ 291.025734][ T9380] mmu_notifier_register+0x74/0x1c0 [ 291.025767][ T9380] kvm_dev_ioctl+0xde4/0x1a80 [ 291.025810][ T9380] ? find_held_lock+0x2b/0x80 [ 291.025835][ T9380] ? hook_file_ioctl_common+0x145/0x410 [ 291.025876][ T9380] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 291.025916][ T9380] ? __fget_files+0x20e/0x3c0 [ 291.025946][ T9380] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 291.025985][ T9380] __x64_sys_ioctl+0x18b/0x210 [ 291.026023][ T9380] do_syscall_64+0xcd/0xfa0 [ 291.026051][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.026077][ T9380] RIP: 0033:0x7ff4fd98eec9 [ 291.026097][ T9380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.026121][ T9380] RSP: 002b:00007ff4fe794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.026151][ T9380] RAX: ffffffffffffffda RBX: 00007ff4fdbe5fa0 RCX: 00007ff4fd98eec9 [ 291.026171][ T9380] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 291.026187][ T9380] RBP: 00007ff4fda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.026203][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.026219][ T9380] R13: 00007ff4fdbe6038 R14: 00007ff4fdbe5fa0 R15: 00007fff08d7fa68 [ 291.026257][ T9380] [ 291.250111][ T9383] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 291.324792][ T5838] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 291.916665][ T5838] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 292.301950][ T9412] openvswitch: netlink: IP tunnel dst address not specified [ 292.411051][ T9418] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 293.866179][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 293.885515][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 293.948728][ T9442] FAULT_INJECTION: forcing a failure. [ 293.948728][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 293.980200][ T9437] can: request_module (can-proto-5) failed. [ 294.009620][ T9442] CPU: 0 UID: 0 PID: 9442 Comm: syz.0.661 Not tainted syzkaller #0 PREEMPT(full) [ 294.009652][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.009666][ T9442] Call Trace: [ 294.009674][ T9442] [ 294.009682][ T9442] dump_stack_lvl+0x16c/0x1f0 [ 294.009714][ T9442] should_fail_ex+0x512/0x640 [ 294.009740][ T9442] ? __kmalloc_cache_noprof+0x5f/0x780 [ 294.009777][ T9442] should_failslab+0xc2/0x120 [ 294.009803][ T9442] __kmalloc_cache_noprof+0x72/0x780 [ 294.009835][ T9442] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 294.009871][ T9442] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 294.009899][ T9442] kvm_dev_ioctl+0xa8a/0x1a80 [ 294.009931][ T9442] ? find_held_lock+0x2b/0x80 [ 294.009954][ T9442] ? hook_file_ioctl_common+0x145/0x410 [ 294.009991][ T9442] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 294.010027][ T9442] ? __fget_files+0x20e/0x3c0 [ 294.010051][ T9442] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 294.010086][ T9442] __x64_sys_ioctl+0x18b/0x210 [ 294.010118][ T9442] do_syscall_64+0xcd/0xfa0 [ 294.010148][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.010173][ T9442] RIP: 0033:0x7f55da58eec9 [ 294.010192][ T9442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.010223][ T9442] RSP: 002b:00007f55db497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.010252][ T9442] RAX: ffffffffffffffda RBX: 00007f55da7e5fa0 RCX: 00007f55da58eec9 [ 294.010268][ T9442] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 294.010284][ T9442] RBP: 00007f55da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.010299][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.010315][ T9442] R13: 00007f55da7e6038 R14: 00007f55da7e5fa0 R15: 00007ffd81bd8698 [ 294.010349][ T9442] [ 296.501779][ T9506] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 296.551947][ T9507] sd 0:0:1:0: PR command failed: 1026 [ 296.557586][ T9507] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 296.565108][ T9507] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 296.904420][ T9511] vmstat_refresh: nr_hugetlb -2048 [ 297.847670][ T9525] CIFS mount error: No usable UNC path provided in device string! [ 297.847670][ T9525] [ 297.893697][ T9525] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 300.725620][ T9572] FAULT_INJECTION: forcing a failure. [ 300.725620][ T9572] name failslab, interval 1, probability 0, space 0, times 0 [ 300.753081][ T9572] CPU: 1 UID: 0 PID: 9572 Comm: syz.2.684 Not tainted syzkaller #0 PREEMPT(full) [ 300.753120][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.753136][ T9572] Call Trace: [ 300.753145][ T9572] [ 300.753155][ T9572] dump_stack_lvl+0x16c/0x1f0 [ 300.753192][ T9572] should_fail_ex+0x512/0x640 [ 300.753222][ T9572] ? __kmalloc_cache_noprof+0x5f/0x780 [ 300.753268][ T9572] should_failslab+0xc2/0x120 [ 300.753299][ T9572] __kmalloc_cache_noprof+0x72/0x780 [ 300.753341][ T9572] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 300.753387][ T9572] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 300.753434][ T9572] kvm_dev_ioctl+0xa8a/0x1a80 [ 300.753478][ T9572] ? find_held_lock+0x2b/0x80 [ 300.753505][ T9572] ? hook_file_ioctl_common+0x145/0x410 [ 300.753549][ T9572] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 300.753585][ T9572] ? __fget_files+0x20e/0x3c0 [ 300.753612][ T9572] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 300.753670][ T9572] __x64_sys_ioctl+0x18b/0x210 [ 300.753713][ T9572] do_syscall_64+0xcd/0xfa0 [ 300.753744][ T9572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.753768][ T9572] RIP: 0033:0x7ff4fd98eec9 [ 300.753790][ T9572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.753812][ T9572] RSP: 002b:00007ff4fe794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.753835][ T9572] RAX: ffffffffffffffda RBX: 00007ff4fdbe5fa0 RCX: 00007ff4fd98eec9 [ 300.753851][ T9572] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 300.753864][ T9572] RBP: 00007ff4fda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.753878][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.753891][ T9572] R13: 00007ff4fdbe6038 R14: 00007ff4fdbe5fa0 R15: 00007fff08d7fa68 [ 300.753927][ T9572] [ 301.044454][ T5838] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 301.389822][ T30] audit: type=1800 audit(4294967303.020:17): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.687" name="lu_gp_id" dev="configfs" ino=27191 res=0 errno=0 [ 302.490687][ T9596] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 302.556728][ T9596] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 302.774778][ T9600] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 303.023346][ T9606] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 303.041253][ T9600] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.692: iget: checksum invalid [ 303.053061][ T9600] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 303.074263][ T9600] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.692: iget: checksum invalid [ 303.090941][ T9600] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 303.104488][ T9600] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.692: iget: checksum invalid [ 303.126262][ T9600] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 303.145165][ T9600] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.692: iget: checksum invalid [ 303.253477][ T9600] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 303.264212][ T9600] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 303.277717][ T9600] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 303.576599][ T9621] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 303.752893][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.762985][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.781729][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.790150][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.798892][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.217610][ T9624] chnl_net:caif_netlink_parms(): no params data found [ 305.205322][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.237766][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.254600][ T9624] bridge_slave_0: entered allmulticast mode [ 305.284446][ T9624] bridge_slave_0: entered promiscuous mode [ 305.325269][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.359866][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.370598][ T9624] bridge_slave_1: entered allmulticast mode [ 305.378428][ T9624] bridge_slave_1: entered promiscuous mode [ 305.429153][ T9624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.442389][ T9624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.608545][ T9624] team0: Port device team_slave_0 added [ 305.675796][ T9624] team0: Port device team_slave_1 added [ 305.874114][ T5827] Bluetooth: hci4: command tx timeout [ 305.922075][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.951291][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.011491][ T9624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.084603][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.113253][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.150640][ T9624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.491624][ T9624] hsr_slave_0: entered promiscuous mode [ 306.507689][ T9624] hsr_slave_1: entered promiscuous mode [ 306.522774][ T9624] debugfs: 'hsr0' already exists in 'hsr' [ 306.559834][ T9624] Cannot create hsr debugfs directory [ 307.684721][ T9624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.766188][ T9624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.820886][ T9624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.891296][ T9624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.964319][ T5827] Bluetooth: hci4: command tx timeout [ 308.256888][ T9624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.340846][ T9624] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.445537][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.452780][ T8997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.463693][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.470929][ T8997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.033452][ T9624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.564341][ T9710] random: crng reseeded on system resumption [ 309.808114][ T9624] veth0_vlan: entered promiscuous mode [ 309.877218][ T9624] veth1_vlan: entered promiscuous mode [ 309.942308][ T9721] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 310.018695][ T9624] veth0_macvtap: entered promiscuous mode [ 310.028732][ T9624] veth1_macvtap: entered promiscuous mode [ 310.046818][ T5827] Bluetooth: hci4: command tx timeout [ 310.173935][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.237625][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.369467][ T8990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.425778][ T8990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.465495][ T8990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.549152][ T8990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.100377][ T8999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.159378][ T8999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.274852][ T8999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.283918][ T8999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.117453][ T5838] Bluetooth: hci4: command tx timeout [ 312.679242][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 314.914539][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 316.325118][ T9794] ICMPv6: process `syz.0.728' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 317.150141][ T8990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.240337][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.246688][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.276134][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.291469][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.309635][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.331719][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.337029][ T8990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.354541][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.509320][ T8990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.752707][ T8990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.353836][ T9810] chnl_net:caif_netlink_parms(): no params data found [ 318.691451][ T8990] bridge_slave_1: left allmulticast mode [ 318.774153][ T8990] bridge_slave_1: left promiscuous mode [ 318.781083][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.031426][ T8990] bridge_slave_0: left allmulticast mode [ 319.047790][ T8990] bridge_slave_0: left promiscuous mode [ 319.054651][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.240265][ T9840] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 319.396518][ T5827] Bluetooth: hci4: command tx timeout [ 320.772230][ T8990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.787166][ T8990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.801319][ T8990] bond0 (unregistering): Released all slaves [ 321.220938][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.242519][ T9862] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 321.272460][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.288152][ T9810] bridge_slave_0: entered allmulticast mode [ 321.307892][ T9810] bridge_slave_0: entered promiscuous mode [ 321.433497][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.484646][ T5827] Bluetooth: hci4: command tx timeout [ 321.494394][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.512771][ T9810] bridge_slave_1: entered allmulticast mode [ 321.535181][ T9810] bridge_slave_1: entered promiscuous mode [ 321.828335][ T9862] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 321.876161][ T8990] hsr_slave_0: left promiscuous mode [ 321.926805][ T8990] hsr_slave_1: left promiscuous mode [ 321.973900][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.004400][ T8990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.029093][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.045210][ T8990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.199737][ T8990] veth1_macvtap: left promiscuous mode [ 322.215749][ T8990] veth0_macvtap: left promiscuous mode [ 322.247258][ T8990] veth1_vlan: left promiscuous mode [ 322.261080][ T8990] veth0_vlan: left promiscuous mode [ 323.558786][ T5827] Bluetooth: hci4: command tx timeout [ 324.288421][ T8990] team0 (unregistering): Port device team_slave_1 removed [ 324.527936][ T8990] team0 (unregistering): Port device team_slave_0 removed [ 325.634842][ T5827] Bluetooth: hci4: command tx timeout [ 325.687510][ T9925] ICMPv6: process `syz.0.752' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 326.183344][ T9810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.218154][ T9810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.737680][ T9810] team0: Port device team_slave_0 added [ 326.920908][ T9810] team0: Port device team_slave_1 added [ 327.225959][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.244845][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.314338][ T9810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.389226][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.415778][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.504419][ T9810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.793014][ T9810] hsr_slave_0: entered promiscuous mode [ 327.831131][ T9810] hsr_slave_1: entered promiscuous mode [ 327.874863][ T9810] debugfs: 'hsr0' already exists in 'hsr' [ 327.880633][ T9810] Cannot create hsr debugfs directory [ 327.897239][ T5827] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 328.947860][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.758'. [ 329.324675][ T9976] hsr0: left allmulticast mode [ 329.329724][ T9976] hsr_slave_0: left allmulticast mode [ 329.336514][ T9976] hsr_slave_1: left allmulticast mode [ 329.685508][ T9983] Unable to find swap-space signature [ 330.747394][ T9810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.842903][ T9810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.007600][ T9991] netlink: 156 bytes leftover after parsing attributes in process `syz.0.761'. [ 331.026949][ T9810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.107227][ T9810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.251724][T10020] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 334.516939][T10114] dump_stack_lvl+0x16c/0x1f0 [ 334.516971][T10114] should_fail_ex+0x512/0x640 [ 334.516999][T10114] ? __kmalloc_cache_noprof+0x5f/0x780 [ 334.517038][T10114] should_failslab+0xc2/0x120 [ 334.517069][T10114] __kmalloc_cache_noprof+0x72/0x780 [ 334.517106][T10114] ? allocate_file_region_entries+0x1a0/0x620 [ 334.517142][T10114] ? allocate_file_region_entries+0x1a0/0x620 [ 334.517170][T10114] allocate_file_region_entries+0x1a0/0x620 [ 334.517207][T10114] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 334.517249][T10114] region_chg+0x85/0x140 [ 334.517285][T10114] __vma_reservation_common+0x43b/0x740 [ 334.517326][T10114] ? __pfx___vma_reservation_common+0x10/0x10 [ 334.517371][T10114] alloc_hugetlb_folio+0x946/0x1560 [ 334.517414][T10114] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 334.517448][T10114] ? _raw_spin_unlock+0x28/0x50 [ 334.517476][T10114] ? __filemap_get_folio+0x32b/0xc30 [ 334.517512][T10114] hugetlb_fault+0x1bce/0x2f40 [ 334.517543][T10114] ? __pfx_hugetlb_fault+0x10/0x10 [ 334.517583][T10114] ? find_vma+0xbf/0x140 [ 334.517609][T10114] ? __pfx_find_vma+0x10/0x10 [ 334.517641][T10114] handle_mm_fault+0xbfa/0xd10 [ 334.517678][T10114] ? __pkru_allows_pkey+0x11/0xb0 [ 334.517717][T10114] do_user_addr_fault+0x7a6/0x1370 [ 334.517744][T10114] ? rcu_is_watching+0x12/0xc0 [ 334.517775][T10114] exc_page_fault+0x64/0xc0 [ 334.517802][T10114] asm_exc_page_fault+0x26/0x30 [ 334.517825][T10114] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 334.517859][T10114] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 3e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 334.517882][T10114] RSP: 0018:ffffc9000e93fb98 EFLAGS: 00050206 [ 334.517902][T10114] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 334.517917][T10114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888078bb0000 [ 334.517932][T10114] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100f1761ff [ 334.517947][T10114] R10: ffff888078bb0fff R11: 0000000000000000 R12: ffffc9000e93fd90 [ 334.517963][T10114] R13: 0000000000001000 R14: ffff888078bb0000 R15: 00007ffffffff000 [ 334.518001][T10114] _copy_from_iter+0x383/0x1720 [ 334.518042][T10114] ? __pfx__copy_from_iter+0x10/0x10 [ 334.518073][T10114] ? rcu_is_watching+0x12/0xc0 [ 334.518098][T10114] ? trace_kmalloc+0x2b/0xd0 [ 334.518124][T10114] ? __kmalloc_noprof+0x34f/0x880 [ 334.518159][T10114] ? kernfs_fop_write_iter+0x237/0x570 [ 334.518203][T10114] kernfs_fop_write_iter+0x19a/0x570 [ 334.518243][T10114] vfs_write+0x7d3/0x11d0 [ 334.518270][T10114] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 334.518312][T10114] ? __pfx___mutex_lock+0x10/0x10 [ 334.518340][T10114] ? __pfx_vfs_write+0x10/0x10 [ 334.518393][T10114] ksys_write+0x12a/0x250 [ 334.518417][T10114] ? __pfx_ksys_write+0x10/0x10 [ 334.518455][T10114] do_syscall_64+0xcd/0xfa0 [ 334.518483][T10114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.518508][T10114] RIP: 0033:0x7ff4fd98eec9 [ 334.518527][T10114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.518549][T10114] RSP: 002b:00007ff4fe773038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.518571][T10114] RAX: ffffffffffffffda RBX: 00007ff4fdbe6090 RCX: 00007ff4fd98eec9 [ 334.518587][T10114] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 334.518602][T10114] RBP: 00007ff4fda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 334.518617][T10114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.518632][T10114] R13: 00007ff4fdbe6128 R14: 00007ff4fdbe6090 R15: 00007fff08d7fa68 [ 334.518670][T10114] [ 335.584736][ T9810] veth0_vlan: entered promiscuous mode [ 335.600203][ T9810] veth1_vlan: entered promiscuous mode [ 335.719039][ T9810] veth0_macvtap: entered promiscuous mode [ 335.761548][ T9810] veth1_macvtap: entered promiscuous mode [ 335.829960][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.848563][T10126] FAULT_INJECTION: forcing a failure. [ 335.848563][T10126] name failslab, interval 1, probability 0, space 0, times 0 [ 335.874189][T10126] CPU: 1 UID: 0 PID: 10126 Comm: syz.3.777 Not tainted syzkaller #0 PREEMPT(full) [ 335.874228][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.874243][T10126] Call Trace: [ 335.874252][T10126] [ 335.874262][T10126] dump_stack_lvl+0x16c/0x1f0 [ 335.874295][T10126] should_fail_ex+0x512/0x640 [ 335.874325][T10126] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 335.874353][T10126] should_failslab+0xc2/0x120 [ 335.874388][T10126] kmem_cache_alloc_noprof+0x75/0x6e0 [ 335.874412][T10126] ? __pmd_alloc+0xbf/0x8b0 [ 335.874455][T10126] ? __pmd_alloc+0xbf/0x8b0 [ 335.874483][T10126] __pmd_alloc+0xbf/0x8b0 [ 335.874508][T10126] ? __pud_alloc+0x51f/0x6b0 [ 335.874535][T10126] walk_to_pmd+0x3a6/0x4c0 [ 335.874564][T10126] __get_locked_pte+0x25/0xc0 [ 335.874593][T10126] map_ldt_struct+0x3b0/0xa60 [ 335.874630][T10126] ? __pfx_map_ldt_struct+0x10/0x10 [ 335.874651][T10126] ? alloc_pages_noprof+0x23c/0x390 [ 335.874686][T10126] write_ldt+0x8fa/0xd20 [ 335.874718][T10126] ? __pfx_write_ldt+0x10/0x10 [ 335.874742][T10126] ? fput+0x9b/0xd0 [ 335.874775][T10126] ? __pfx_ksys_write+0x10/0x10 [ 335.874806][T10126] __x64_sys_modify_ldt+0xb1/0x170 [ 335.874834][T10126] do_syscall_64+0xcd/0xfa0 [ 335.874864][T10126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.874889][T10126] RIP: 0033:0x7f259118eec9 [ 335.874911][T10126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.874936][T10126] RSP: 002b:00007f25920a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 335.874960][T10126] RAX: ffffffffffffffda RBX: 00007f25913e5fa0 RCX: 00007f259118eec9 [ 335.874978][T10126] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 335.874995][T10126] RBP: 00007f2591211f91 R08: 0000000000000000 R09: 0000000000000000 [ 335.875010][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.875043][T10126] R13: 00007f25913e6038 R14: 00007f25913e5fa0 R15: 00007ffc357a10a8 [ 335.875079][T10126] [ 335.939224][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.973494][ T8990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.973606][ T8990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.973667][ T8990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.973725][ T8990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.195287][T10133] netlink: 25 bytes leftover after parsing attributes in process `syz.3.778'. [ 336.295665][ T8990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.295684][ T8990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.399459][ T8999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.399485][ T8999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.430896][T10139] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 338.916573][T10193] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 339.533175][T10199] netlink: 'syz.2.787': attribute type 72 has an invalid length. [ 340.317193][ T5827] Bluetooth: hci4: unexpected event 0x3e length: 728 > 260 [ 340.317229][ T5827] Bluetooth: hci4: unexpected subevent 0x03 length: 727 > 9 [ 340.373581][ T5827] Bluetooth: hci4: unexpected event 0x3e length: 728 > 260 [ 340.373618][ T5827] Bluetooth: hci4: unexpected subevent 0x03 length: 727 > 9 [ 340.426524][T10212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.788'. [ 341.294295][T10244] netlink: zone id is out of range [ 341.342202][T10244] netlink: zone id is out of range [ 341.362256][T10244] netlink: zone id is out of range [ 341.395627][T10244] netlink: zone id is out of range [ 341.420840][T10244] netlink: zone id is out of range [ 341.441559][T10244] netlink: zone id is out of range [ 341.462442][T10244] netlink: zone id is out of range [ 341.481676][T10244] netlink: zone id is out of range [ 341.487206][T10244] netlink: zone id is out of range [ 341.494887][T10244] netlink: zone id is out of range [ 341.591780][T10255] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 341.607615][T10255] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 342.367532][T10270] writing to auto_msgmni has no effect [ 342.618348][T10277] ALSA: mixer_oss: invalid OSS volume '' [ 343.542189][T10298] FAULT_INJECTION: forcing a failure. [ 343.542189][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 343.616717][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.0.811 Not tainted syzkaller #0 PREEMPT(full) [ 343.616754][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.616770][T10298] Call Trace: [ 343.616778][T10298] [ 343.616788][T10298] dump_stack_lvl+0x16c/0x1f0 [ 343.616822][T10298] should_fail_ex+0x512/0x640 [ 343.616852][T10298] ? __kmalloc_noprof+0xca/0x880 [ 343.616894][T10298] should_failslab+0xc2/0x120 [ 343.616926][T10298] __kmalloc_noprof+0xdd/0x880 [ 343.616963][T10298] ? lsm_blob_alloc+0x68/0x90 [ 343.616997][T10298] ? lsm_blob_alloc+0x68/0x90 [ 343.617023][T10298] lsm_blob_alloc+0x68/0x90 [ 343.617051][T10298] security_sk_alloc+0x30/0x270 [ 343.617087][T10298] sk_prot_alloc+0xfb/0x2a0 [ 343.617124][T10298] sk_alloc+0x36/0xc20 [ 343.617151][T10298] inet_create+0x3a1/0x1040 [ 343.617177][T10298] ? inet_create+0x93/0x1040 [ 343.617207][T10298] __sock_create+0x335/0x8d0 [ 343.617249][T10298] smc_create+0x15d/0x2a0 [ 343.617300][T10298] __sock_create+0x335/0x8d0 [ 343.617343][T10298] __sys_socket+0x14d/0x260 [ 343.617380][T10298] ? __pfx___sys_socket+0x10/0x10 [ 343.617418][T10298] ? xfd_validate_state+0x61/0x180 [ 343.617450][T10298] ? __pfx_do_writev+0x10/0x10 [ 343.617488][T10298] __x64_sys_socket+0x72/0xb0 [ 343.617522][T10298] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.617551][T10298] do_syscall_64+0xcd/0xfa0 [ 343.617581][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.617606][T10298] RIP: 0033:0x7f55da58eec9 [ 343.617626][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.617656][T10298] RSP: 002b:00007f55db497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 343.617681][T10298] RAX: ffffffffffffffda RBX: 00007f55da7e5fa0 RCX: 00007f55da58eec9 [ 343.617699][T10298] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 343.617714][T10298] RBP: 00007f55da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.617730][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.617745][T10298] R13: 00007f55da7e6038 R14: 00007f55da7e5fa0 R15: 00007ffd81bd8698 [ 343.617781][T10298] [ 344.886168][ T30] audit: type=1804 audit(4294967346.530:18): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.814" name=2F6E6577726F6F742F3137322F22050820 dev="tmpfs" ino=909 res=1 errno=0 [ 344.964243][ T30] audit: type=1800 audit(4294967346.530:19): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.814" name=22050820 dev="tmpfs" ino=909 res=0 errno=0 [ 345.733116][T10335] FAULT_INJECTION: forcing a failure. [ 345.733116][T10335] name failslab, interval 1, probability 0, space 0, times 0 [ 345.776036][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.3.817 Not tainted syzkaller #0 PREEMPT(full) [ 345.776072][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.776089][T10335] Call Trace: [ 345.776097][T10335] [ 345.776107][T10335] dump_stack_lvl+0x16c/0x1f0 [ 345.776142][T10335] should_fail_ex+0x512/0x640 [ 345.776172][T10335] ? __kmalloc_cache_noprof+0x5f/0x780 [ 345.776219][T10335] should_failslab+0xc2/0x120 [ 345.776250][T10335] __kmalloc_cache_noprof+0x72/0x780 [ 345.776290][T10335] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 345.776329][T10335] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 345.776361][T10335] kvm_dev_ioctl+0xa8a/0x1a80 [ 345.776402][T10335] ? find_held_lock+0x2b/0x80 [ 345.776435][T10335] ? hook_file_ioctl_common+0x145/0x410 [ 345.776476][T10335] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 345.776516][T10335] ? __fget_files+0x20e/0x3c0 [ 345.776545][T10335] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 345.776586][T10335] __x64_sys_ioctl+0x18b/0x210 [ 345.776622][T10335] do_syscall_64+0xcd/0xfa0 [ 345.776651][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.776676][T10335] RIP: 0033:0x7f259118eec9 [ 345.776696][T10335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.776719][T10335] RSP: 002b:00007f25920a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.776744][T10335] RAX: ffffffffffffffda RBX: 00007f25913e5fa0 RCX: 00007f259118eec9 [ 345.776762][T10335] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 345.776777][T10335] RBP: 00007f2591211f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.776792][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.776807][T10335] R13: 00007f25913e6038 R14: 00007f25913e5fa0 R15: 00007ffc357a10a8 [ 345.776840][T10335] [ 345.971547][T10338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 346.110888][T10340] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 347.048666][T10372] FAULT_INJECTION: forcing a failure. [ 347.048666][T10372] name failslab, interval 1, probability 0, space 0, times 0 [ 347.074221][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.2.828 Not tainted syzkaller #0 PREEMPT(full) [ 347.074255][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.074270][T10372] Call Trace: [ 347.074277][T10372] [ 347.074286][T10372] dump_stack_lvl+0x16c/0x1f0 [ 347.074321][T10372] should_fail_ex+0x512/0x640 [ 347.074352][T10372] ? __kmalloc_cache_noprof+0x5f/0x780 [ 347.074397][T10372] should_failslab+0xc2/0x120 [ 347.074430][T10372] __kmalloc_cache_noprof+0x72/0x780 [ 347.074470][T10372] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 347.074514][T10372] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 347.074544][T10372] kvm_dev_ioctl+0xa8a/0x1a80 [ 347.074586][T10372] ? find_held_lock+0x2b/0x80 [ 347.074612][T10372] ? hook_file_ioctl_common+0x145/0x410 [ 347.074653][T10372] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 347.074693][T10372] ? __fget_files+0x20e/0x3c0 [ 347.074724][T10372] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 347.074762][T10372] __x64_sys_ioctl+0x18b/0x210 [ 347.074798][T10372] do_syscall_64+0xcd/0xfa0 [ 347.074829][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.074855][T10372] RIP: 0033:0x7ff4fd98eec9 [ 347.074876][T10372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.074899][T10372] RSP: 002b:00007ff4fe794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.074923][T10372] RAX: ffffffffffffffda RBX: 00007ff4fdbe5fa0 RCX: 00007ff4fd98eec9 [ 347.074939][T10372] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 347.074952][T10372] RBP: 00007ff4fda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 347.074966][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.074979][T10372] R13: 00007ff4fdbe6038 R14: 00007ff4fdbe5fa0 R15: 00007fff08d7fa68 [ 347.075014][T10372] [ 347.077256][ T5827] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 347.456026][T10376] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 347.815038][T10388] net_ratelimit: 332 callbacks suppressed [ 347.815054][T10388] netlink: zone id is out of range [ 347.826107][T10388] netlink: zone id is out of range [ 347.831219][T10388] netlink: zone id is out of range [ 347.836414][T10388] netlink: zone id is out of range [ 347.841515][T10388] netlink: zone id is out of range [ 347.849240][T10388] netlink: zone id is out of range [ 347.865188][T10388] netlink: zone id is out of range [ 347.904118][T10388] netlink: zone id is out of range [ 347.909348][T10388] netlink: zone id is out of range [ 347.915081][T10388] netlink: zone id is out of range [ 349.264933][T10410] FAULT_INJECTION: forcing a failure. [ 349.264933][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 349.304859][T10414] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 349.336861][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.3.838 Not tainted syzkaller #0 PREEMPT(full) [ 349.336905][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.336921][T10410] Call Trace: [ 349.336930][T10410] [ 349.336940][T10410] dump_stack_lvl+0x16c/0x1f0 [ 349.336975][T10410] should_fail_ex+0x512/0x640 [ 349.337006][T10410] ? __kmalloc_cache_noprof+0x5f/0x780 [ 349.337051][T10410] should_failslab+0xc2/0x120 [ 349.337084][T10410] __kmalloc_cache_noprof+0x72/0x780 [ 349.337126][T10410] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 349.337169][T10410] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 349.337205][T10410] kvm_dev_ioctl+0xa8a/0x1a80 [ 349.337247][T10410] ? find_held_lock+0x2b/0x80 [ 349.337278][T10410] ? hook_file_ioctl_common+0x145/0x410 [ 349.337322][T10410] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 349.337364][T10410] ? __fget_files+0x20e/0x3c0 [ 349.337394][T10410] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 349.337434][T10410] __x64_sys_ioctl+0x18b/0x210 [ 349.337473][T10410] do_syscall_64+0xcd/0xfa0 [ 349.337504][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.337531][T10410] RIP: 0033:0x7f259118eec9 [ 349.337552][T10410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.337576][T10410] RSP: 002b:00007f25920a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.337601][T10410] RAX: ffffffffffffffda RBX: 00007f25913e5fa0 RCX: 00007f259118eec9 [ 349.337619][T10410] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 349.337634][T10410] RBP: 00007f2591211f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.337651][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.337666][T10410] R13: 00007f25913e6038 R14: 00007f25913e5fa0 R15: 00007ffc357a10a8 [ 349.337704][T10410] [ 349.600038][ T5827] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 350.303220][T10431] FAULT_INJECTION: forcing a failure. [ 350.303220][T10431] name failslab, interval 1, probability 0, space 0, times 0 [ 350.327321][T10431] CPU: 0 UID: 0 PID: 10431 Comm: syz.3.842 Not tainted syzkaller #0 PREEMPT(full) [ 350.327353][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.327369][T10431] Call Trace: [ 350.327378][T10431] [ 350.327388][T10431] dump_stack_lvl+0x16c/0x1f0 [ 350.327423][T10431] should_fail_ex+0x512/0x640 [ 350.327456][T10431] ? fs_reclaim_acquire+0xae/0x150 [ 350.327488][T10431] should_failslab+0xc2/0x120 [ 350.327517][T10431] kmem_cache_alloc_noprof+0x75/0x6e0 [ 350.327542][T10431] ? __kernfs_new_node+0xd2/0x8e0 [ 350.327575][T10431] ? __kernfs_new_node+0xd2/0x8e0 [ 350.327598][T10431] __kernfs_new_node+0xd2/0x8e0 [ 350.327629][T10431] ? __pfx___kernfs_new_node+0x10/0x10 [ 350.327665][T10431] ? find_held_lock+0x2b/0x80 [ 350.327689][T10431] ? kernfs_root+0xee/0x2a0 [ 350.327723][T10431] kernfs_new_node+0x13c/0x1e0 [ 350.327761][T10431] __kernfs_create_file+0x53/0x350 [ 350.327790][T10431] sysfs_add_file_mode_ns+0x207/0x3c0 [ 350.327829][T10431] internal_create_group+0x578/0xf30 [ 350.327864][T10431] ? __pfx_internal_create_group+0x10/0x10 [ 350.327897][T10431] ? kernfs_create_link+0x1bd/0x240 [ 350.327926][T10431] internal_create_groups+0x9d/0x150 [ 350.327958][T10431] device_add+0x731/0x1aa0 [ 350.327996][T10431] ? __pfx_device_add+0x10/0x10 [ 350.328024][T10431] ? __pfx___might_resched+0x10/0x10 [ 350.328050][T10431] ? is_dynamic_key+0xb4/0x160 [ 350.328092][T10431] __add_disk+0x457/0xf00 [ 350.328124][T10431] add_disk_fwnode+0x13f/0x5d0 [ 350.328155][T10431] nbd_dev_add+0x783/0xbb0 [ 350.328199][T10431] ? __pfx_nbd_dev_add+0x10/0x10 [ 350.328246][T10431] ? bpf_lsm_capable+0x9/0x10 [ 350.328276][T10431] ? __radix_tree_lookup+0x21f/0x2c0 [ 350.328324][T10431] nbd_genl_connect+0x8b0/0x1c60 [ 350.328359][T10431] ? __pfx_nbd_genl_connect+0x10/0x10 [ 350.328389][T10431] ? __nla_parse+0x40/0x60 [ 350.328426][T10431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 350.328463][T10431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 350.328503][T10431] genl_family_rcv_msg_doit+0x206/0x2f0 [ 350.328535][T10431] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 350.328566][T10431] ? genl_get_cmd+0x194/0x580 [ 350.328609][T10431] ? __radix_tree_lookup+0x21f/0x2c0 [ 350.328650][T10431] genl_rcv_msg+0x55c/0x800 [ 350.328691][T10431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.328725][T10431] ? __pfx_nbd_genl_connect+0x10/0x10 [ 350.328765][T10431] netlink_rcv_skb+0x155/0x420 [ 350.328792][T10431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.328828][T10431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.328875][T10431] ? netlink_deliver_tap+0x1ae/0xd30 [ 350.328910][T10431] genl_rcv+0x28/0x40 [ 350.328941][T10431] netlink_unicast+0x5aa/0x870 [ 350.328977][T10431] ? __pfx_netlink_unicast+0x10/0x10 [ 350.329031][T10431] netlink_sendmsg+0x8c8/0xdd0 [ 350.329070][T10431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.329108][T10431] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 350.329152][T10431] ____sys_sendmsg+0xa98/0xc70 [ 350.329189][T10431] ? copy_msghdr_from_user+0x10a/0x160 [ 350.329218][T10431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.329259][T10431] ? __pfx_futex_wake_mark+0x10/0x10 [ 350.329302][T10431] ___sys_sendmsg+0x134/0x1d0 [ 350.329332][T10431] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.329406][T10431] __sys_sendmsg+0x16d/0x220 [ 350.329436][T10431] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.329465][T10431] ? __x64_sys_futex+0x1e0/0x4c0 [ 350.329527][T10431] do_syscall_64+0xcd/0xfa0 [ 350.329559][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.329584][T10431] RIP: 0033:0x7f259118eec9 [ 350.329605][T10431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.329630][T10431] RSP: 002b:00007f2592082038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.329657][T10431] RAX: ffffffffffffffda RBX: 00007f25913e6090 RCX: 00007f259118eec9 [ 350.329674][T10431] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 350.329687][T10431] RBP: 00007f2591211f91 R08: 0000000000000000 R09: 0000000000000000 [ 350.329702][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.329714][T10431] R13: 00007f25913e6128 R14: 00007f25913e6090 R15: 00007ffc357a10a8 [ 350.329748][T10431] [ 351.188835][T10431] nbd: failed to add new device [ 351.819315][T10446] netlink: 334 bytes leftover after parsing attributes in process `syz.4.845'. [ 352.105823][T10451] random: crng reseeded on system resumption [ 354.182570][T10486] Unable to find swap-space signature [ 355.687921][T10521] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input14 [ 356.125672][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 356.371940][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.858'. [ 357.140709][T10562] FAULT_INJECTION: forcing a failure. [ 357.140709][T10562] name failslab, interval 1, probability 0, space 0, times 0 [ 357.155538][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.0.863 Not tainted syzkaller #0 PREEMPT(full) [ 357.155572][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.155587][T10562] Call Trace: [ 357.155595][T10562] [ 357.155605][T10562] dump_stack_lvl+0x16c/0x1f0 [ 357.155641][T10562] should_fail_ex+0x512/0x640 [ 357.155671][T10562] ? __kmalloc_cache_noprof+0x5f/0x780 [ 357.155712][T10562] should_failslab+0xc2/0x120 [ 357.155748][T10562] __kmalloc_cache_noprof+0x72/0x780 [ 357.155786][T10562] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 357.155828][T10562] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 357.155866][T10562] kvm_dev_ioctl+0xa8a/0x1a80 [ 357.155908][T10562] ? find_held_lock+0x2b/0x80 [ 357.155931][T10562] ? hook_file_ioctl_common+0x145/0x410 [ 357.155970][T10562] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 357.156006][T10562] ? __fget_files+0x20e/0x3c0 [ 357.156034][T10562] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 357.156069][T10562] __x64_sys_ioctl+0x18b/0x210 [ 357.156101][T10562] do_syscall_64+0xcd/0xfa0 [ 357.156131][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.156154][T10562] RIP: 0033:0x7f55da58eec9 [ 357.156172][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.156193][T10562] RSP: 002b:00007f55db497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.156218][T10562] RAX: ffffffffffffffda RBX: 00007f55da7e5fa0 RCX: 00007f55da58eec9 [ 357.156235][T10562] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 357.156249][T10562] RBP: 00007f55da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.156265][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.156280][T10562] R13: 00007f55da7e6038 R14: 00007f55da7e5fa0 R15: 00007ffd81bd8698 [ 357.156313][T10562] [ 357.161757][ T5827] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 357.411214][T10565] program syz.2.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.729480][T10577] netlink: 'syz.0.865': attribute type 27 has an invalid length. [ 357.784360][T10577] netlink: 334 bytes leftover after parsing attributes in process `syz.0.865'. [ 358.047186][T10581] FAULT_INJECTION: forcing a failure. [ 358.047186][T10581] name failslab, interval 1, probability 0, space 0, times 0 [ 358.068696][T10581] CPU: 1 UID: 0 PID: 10581 Comm: syz.0.866 Not tainted syzkaller #0 PREEMPT(full) [ 358.068732][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.068747][T10581] Call Trace: [ 358.068756][T10581] [ 358.068766][T10581] dump_stack_lvl+0x16c/0x1f0 [ 358.068801][T10581] should_fail_ex+0x512/0x640 [ 358.068832][T10581] ? __kmalloc_cache_noprof+0x5f/0x780 [ 358.068875][T10581] should_failslab+0xc2/0x120 [ 358.068909][T10581] __kmalloc_cache_noprof+0x72/0x780 [ 358.068946][T10581] ? lockdep_hardirqs_on+0x7c/0x110 [ 358.068973][T10581] ? nfs_netns_sysfs_setup+0x55/0x1f0 [ 358.069013][T10581] ? nfs_netns_sysfs_setup+0x55/0x1f0 [ 358.069046][T10581] nfs_netns_sysfs_setup+0x55/0x1f0 [ 358.069081][T10581] nfs_net_init+0x10a/0x340 [ 358.069115][T10581] ? __pfx_nfs_net_init+0x10/0x10 [ 358.069144][T10581] ops_init+0x1df/0x5f0 [ 358.069178][T10581] setup_net+0x100/0x390 [ 358.069209][T10581] ? __pfx_setup_net+0x10/0x10 [ 358.069248][T10581] ? debug_mutex_init+0x37/0x70 [ 358.069280][T10581] copy_net_ns+0x2f8/0x690 [ 358.069316][T10581] create_new_namespaces+0x3ea/0xa90 [ 358.069356][T10581] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 358.069388][T10581] ksys_unshare+0x45b/0xa40 [ 358.069421][T10581] ? native_tss_update_io_bitmap+0x3e1/0x770 [ 358.069460][T10581] ? __pfx_ksys_unshare+0x10/0x10 [ 358.069493][T10581] ? xfd_validate_state+0x61/0x180 [ 358.069538][T10581] __x64_sys_unshare+0x31/0x40 [ 358.069569][T10581] do_syscall_64+0xcd/0xfa0 [ 358.069600][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.069626][T10581] RIP: 0033:0x7f55da58eec9 [ 358.069647][T10581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.069673][T10581] RSP: 002b:00007f55db497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 358.069697][T10581] RAX: ffffffffffffffda RBX: 00007f55da7e5fa0 RCX: 00007f55da58eec9 [ 358.069715][T10581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 358.069730][T10581] RBP: 00007f55da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 358.069754][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.069770][T10581] R13: 00007f55da7e6038 R14: 00007f55da7e5fa0 R15: 00007ffd81bd8698 [ 358.069809][T10581] [ 358.558238][T10587] nbd: couldn't find device at index 33904 [ 359.330774][T10595] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 359.679953][T10602] bond0: option all_slaves_active: invalid value () [ 360.642852][T10623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.876'. [ 362.094584][T10651] FAULT_INJECTION: forcing a failure. [ 362.094584][T10651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.114573][T10651] CPU: 1 UID: 0 PID: 10651 Comm: syz.4.884 Not tainted syzkaller #0 PREEMPT(full) [ 362.114612][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.114627][T10651] Call Trace: [ 362.114637][T10651] [ 362.114647][T10651] dump_stack_lvl+0x16c/0x1f0 [ 362.114682][T10651] should_fail_ex+0x512/0x640 [ 362.114719][T10651] should_fail_alloc_page+0xe7/0x130 [ 362.114766][T10651] prepare_alloc_pages+0x3c2/0x610 [ 362.114808][T10651] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 362.114840][T10651] ? find_held_lock+0x2b/0x80 [ 362.114868][T10651] ? mm_drop_all_locks+0x38e/0x4b0 [ 362.114901][T10651] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 362.114933][T10651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.114960][T10651] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.115009][T10651] ? mm_drop_all_locks+0x38e/0x4b0 [ 362.115035][T10651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.115079][T10651] ? policy_nodemask+0xea/0x4e0 [ 362.115114][T10651] alloc_pages_mpol+0x1fb/0x550 [ 362.115149][T10651] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 362.115191][T10651] alloc_pages_noprof+0x131/0x390 [ 362.115225][T10651] kvm_coalesced_mmio_init+0x1a/0x170 [ 362.115255][T10651] kvm_dev_ioctl+0xe08/0x1a80 [ 362.115298][T10651] ? find_held_lock+0x2b/0x80 [ 362.115324][T10651] ? hook_file_ioctl_common+0x145/0x410 [ 362.115365][T10651] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 362.115417][T10651] ? __fget_files+0x20e/0x3c0 [ 362.115447][T10651] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 362.115489][T10651] __x64_sys_ioctl+0x18b/0x210 [ 362.115535][T10651] do_syscall_64+0xcd/0xfa0 [ 362.115567][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.115595][T10651] RIP: 0033:0x7f566a98eec9 [ 362.115616][T10651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.115642][T10651] RSP: 002b:00007f566b86b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.115668][T10651] RAX: ffffffffffffffda RBX: 00007f566abe5fa0 RCX: 00007f566a98eec9 [ 362.115685][T10651] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 362.115701][T10651] RBP: 00007f566aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 362.115717][T10651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.115733][T10651] R13: 00007f566abe6038 R14: 00007f566abe5fa0 R15: 00007fff0c33c5c8 [ 362.115777][T10651] [ 363.369914][T10695] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 363.857245][T10703] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 364.223798][T10709] random: crng reseeded on system resumption [ 364.532608][T10715] block nbd9: NBD_DISCONNECT [ 365.075252][T10719] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.163750][T10721] FAULT_INJECTION: forcing a failure. [ 365.163750][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 365.246360][T10721] CPU: 0 UID: 0 PID: 10721 Comm: syz.3.896 Not tainted syzkaller #0 PREEMPT(full) [ 365.246397][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.246412][T10721] Call Trace: [ 365.246422][T10721] [ 365.246432][T10721] dump_stack_lvl+0x16c/0x1f0 [ 365.246466][T10721] should_fail_ex+0x512/0x640 [ 365.246496][T10721] ? __kmalloc_cache_noprof+0x5f/0x780 [ 365.246539][T10721] should_failslab+0xc2/0x120 [ 365.246578][T10721] __kmalloc_cache_noprof+0x72/0x780 [ 365.246619][T10721] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 365.246663][T10721] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 365.246699][T10721] kvm_dev_ioctl+0xa8a/0x1a80 [ 365.246741][T10721] ? find_held_lock+0x2b/0x80 [ 365.246768][T10721] ? hook_file_ioctl_common+0x145/0x410 [ 365.246809][T10721] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 365.246851][T10721] ? __fget_files+0x20e/0x3c0 [ 365.246882][T10721] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 365.246922][T10721] __x64_sys_ioctl+0x18b/0x210 [ 365.246960][T10721] do_syscall_64+0xcd/0xfa0 [ 365.246991][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.247017][T10721] RIP: 0033:0x7f259118eec9 [ 365.247038][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.247062][T10721] RSP: 002b:00007f25920a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.247087][T10721] RAX: ffffffffffffffda RBX: 00007f25913e5fa0 RCX: 00007f259118eec9 [ 365.247105][T10721] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 365.247120][T10721] RBP: 00007f2591211f91 R08: 0000000000000000 R09: 0000000000000000 [ 365.247136][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.247151][T10721] R13: 00007f25913e6038 R14: 00007f25913e5fa0 R15: 00007ffc357a10a8 [ 365.247190][T10721] [ 365.250849][ T5827] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 365.466692][T10719] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.656617][T10719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.725377][T10726] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 365.843225][T10719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.959313][T10729] random: crng reseeded on system resumption [ 366.350197][T10730] block nbd7: not configured, cannot reconfigure [ 366.486080][T10734] FAULT_INJECTION: forcing a failure. [ 366.486080][T10734] name failslab, interval 1, probability 0, space 0, times 0 [ 366.545108][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.4.899 Not tainted syzkaller #0 PREEMPT(full) [ 366.545137][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.545146][T10734] Call Trace: [ 366.545151][T10734] [ 366.545157][T10734] dump_stack_lvl+0x16c/0x1f0 [ 366.545178][T10734] should_fail_ex+0x512/0x640 [ 366.545197][T10734] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 366.545214][T10734] should_failslab+0xc2/0x120 [ 366.545233][T10734] kmem_cache_alloc_noprof+0x75/0x6e0 [ 366.545247][T10734] ? security_file_alloc+0x34/0x2b0 [ 366.545264][T10734] ? security_file_alloc+0x34/0x2b0 [ 366.545276][T10734] security_file_alloc+0x34/0x2b0 [ 366.545289][T10734] init_file+0x93/0x4c0 [ 366.545307][T10734] alloc_empty_file+0x73/0x1e0 [ 366.545328][T10734] path_openat+0xda/0x2cb0 [ 366.545349][T10734] ? __pfx_path_openat+0x10/0x10 [ 366.545371][T10734] do_filp_open+0x20b/0x470 [ 366.545386][T10734] ? __pfx_do_filp_open+0x10/0x10 [ 366.545414][T10734] ? alloc_fd+0x471/0x7d0 [ 366.545432][T10734] do_sys_openat2+0x11b/0x1d0 [ 366.545451][T10734] ? __pfx_do_sys_openat2+0x10/0x10 [ 366.545477][T10734] __x64_sys_openat+0x174/0x210 [ 366.545498][T10734] ? __pfx___x64_sys_openat+0x10/0x10 [ 366.545525][T10734] do_syscall_64+0xcd/0xfa0 [ 366.545541][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.545556][T10734] RIP: 0033:0x7f566a98eec9 [ 366.545568][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.545582][T10734] RSP: 002b:00007f566b86b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 366.545596][T10734] RAX: ffffffffffffffda RBX: 00007f566abe5fa0 RCX: 00007f566a98eec9 [ 366.545605][T10734] RDX: 0000000000060100 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 366.545614][T10734] RBP: 00007f566aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 366.545622][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.545630][T10734] R13: 00007f566abe6038 R14: 00007f566abe5fa0 R15: 00007fff0c33c5c8 [ 366.545649][T10734] [ 367.638296][T10753] FAULT_INJECTION: forcing a failure. [ 367.638296][T10753] name failslab, interval 1, probability 0, space 0, times 0 [ 367.683039][T10753] CPU: 0 UID: 0 PID: 10753 Comm: syz.2.904 Not tainted syzkaller #0 PREEMPT(full) [ 367.683080][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.683096][T10753] Call Trace: [ 367.683105][T10753] [ 367.683115][T10753] dump_stack_lvl+0x16c/0x1f0 [ 367.683152][T10753] should_fail_ex+0x512/0x640 [ 367.683183][T10753] ? __kmalloc_cache_noprof+0x5f/0x780 [ 367.683226][T10753] should_failslab+0xc2/0x120 [ 367.683259][T10753] __kmalloc_cache_noprof+0x72/0x780 [ 367.683308][T10753] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 367.683378][T10753] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 367.683416][T10753] kvm_dev_ioctl+0xa8a/0x1a80 [ 367.683460][T10753] ? find_held_lock+0x2b/0x80 [ 367.683487][T10753] ? hook_file_ioctl_common+0x145/0x410 [ 367.683529][T10753] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 367.683569][T10753] ? __fget_files+0x20e/0x3c0 [ 367.683599][T10753] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 367.683638][T10753] __x64_sys_ioctl+0x18b/0x210 [ 367.683677][T10753] do_syscall_64+0xcd/0xfa0 [ 367.683707][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.683733][T10753] RIP: 0033:0x7ff4fd98eec9 [ 367.683755][T10753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.683780][T10753] RSP: 002b:00007ff4fe794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.683805][T10753] RAX: ffffffffffffffda RBX: 00007ff4fdbe5fa0 RCX: 00007ff4fd98eec9 [ 367.683823][T10753] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 367.683838][T10753] RBP: 00007ff4fda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 367.683855][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.683870][T10753] R13: 00007ff4fdbe6038 R14: 00007ff4fdbe5fa0 R15: 00007fff08d7fa68 [ 367.683909][T10753] [ 367.993901][ T5827] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 368.344446][T10758] zswap: compressor not available [ 370.247132][T10798] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 371.047731][T10806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.912'. [ 371.242531][T10806] netlink: 'syz.2.912': attribute type 4 has an invalid length. [ 371.250903][T10806] netlink: 242 bytes leftover after parsing attributes in process `syz.2.912'. [ 371.553160][T10816] netlink: 186 bytes leftover after parsing attributes in process `syz.2.915'. [ 372.456656][T10824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.918'. [ 372.692049][T10839] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 372.710946][T10839] netlink: 252 bytes leftover after parsing attributes in process `syz.3.922'. [ 372.916193][T10843] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 373.112964][T10853] netlink: 334 bytes leftover after parsing attributes in process `syz.2.925'. [ 373.667673][T10860] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 374.815340][T10860] kexec: Could not allocate control_code_buffer [ 375.846339][T10894] netlink: 93 bytes leftover after parsing attributes in process `syz.4.934'. [ 375.916540][T10899] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 378.047408][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 378.694312][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.700666][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.237565][ T30] audit: type=1800 audit(4294967313.000:20): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.946" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 379.668077][T10959] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 379.895736][T10962] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 380.071402][T10973] netlink: 334 bytes leftover after parsing attributes in process `syz.3.953'. [ 380.832990][T10967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.839851][T10967] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.864281][T10967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.891047][T10967] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 380.909938][T10967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 381.104145][T10967] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 381.145276][T10967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 381.214184][T10967] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 381.239465][T10967] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 381.284253][T10967] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 381.345040][T10967] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 381.624463][T10990] random: crng reseeded on system resumption [ 382.114156][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 382.349316][T11005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 382.366567][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 382.779961][T11016] netlink: 334 bytes leftover after parsing attributes in process `syz.4.965'. [ 382.914066][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 382.920208][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 383.087368][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.966'. [ 383.155405][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 383.314179][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 384.194209][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 384.762425][ T30] audit: type=1800 audit(4294967318.510:21): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.974" name="dummy_udc" dev="gadgetfs" ino=7571 res=0 errno=0 [ 384.996612][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 385.002675][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 385.235563][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 385.394413][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 385.531208][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 386.548807][T11066] svc: failed to register nfsdv3 RPC service (errno 101). [ 386.618001][T11066] svc: failed to register nfsaclv3 RPC service (errno 101). [ 387.484951][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 389.471423][T11095] random: crng reseeded on system resumption [ 390.521408][ T5827] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 390.609116][T11157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 391.366036][T11167] random: crng reseeded on system resumption [ 392.628777][T11182] sd 0:0:1:0: PR command failed: 1026 [ 392.648289][T11182] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 392.674020][T11182] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 393.151269][T11186] bond0: option arp_interval: invalid value () [ 393.208266][T11186] bond0: option arp_interval: allowed values 0 - 2147483647 [ 395.428309][T11241] futex_wake_op: syz.3.1012 tries to shift op by -9; fix this program [ 395.450747][T11243] futex_wake_op: syz.3.1012 tries to shift op by -9; fix this program [ 395.540145][ T5827] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 395.843070][T11255] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 395.918148][T11255] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 397.684847][T11284] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 397.775635][T11281] Unable to find swap-space signature [ 398.334947][T11297] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 400.292536][T11332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 400.315431][T11332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 400.321769][T11332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 400.364933][T11332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 400.400234][T11332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 400.567481][T11355] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 400.711468][T11360] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 401.600947][T11363] random: crng reseeded on system resumption [ 402.196741][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 402.359869][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 402.364548][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 402.434652][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 402.434665][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 403.054482][T11391] random: crng reseeded on system resumption [ 403.122603][T11390] FAULT_INJECTION: forcing a failure. [ 403.122603][T11390] name failslab, interval 1, probability 0, space 0, times 0 [ 403.159066][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.0.1042 Not tainted syzkaller #0 PREEMPT(full) [ 403.159103][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.159119][T11390] Call Trace: [ 403.159127][T11390] [ 403.159137][T11390] dump_stack_lvl+0x16c/0x1f0 [ 403.159170][T11390] should_fail_ex+0x512/0x640 [ 403.159202][T11390] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 403.159230][T11390] should_failslab+0xc2/0x120 [ 403.159264][T11390] kmem_cache_alloc_noprof+0x75/0x6e0 [ 403.159284][T11390] ? __lock_acquire+0x62e/0x1ce0 [ 403.159317][T11390] ? sk_prot_alloc+0x60/0x2a0 [ 403.159356][T11390] ? sk_prot_alloc+0x60/0x2a0 [ 403.159387][T11390] sk_prot_alloc+0x60/0x2a0 [ 403.159420][T11390] sk_alloc+0x36/0xc20 [ 403.159450][T11390] unix_create1+0xa6/0x700 [ 403.159492][T11390] unix_create+0x110/0x270 [ 403.159529][T11390] __sock_create+0x335/0x8d0 [ 403.159571][T11390] __sys_socketpair+0x25c/0x5a0 [ 403.159608][T11390] ? __pfx___sys_socketpair+0x10/0x10 [ 403.159649][T11390] ? xfd_validate_state+0x61/0x180 [ 403.159693][T11390] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 403.159730][T11390] __x64_sys_socketpair+0x96/0x100 [ 403.159767][T11390] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.159796][T11390] do_syscall_64+0xcd/0xfa0 [ 403.159828][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.159854][T11390] RIP: 0033:0x7f55da58eec9 [ 403.159877][T11390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.159903][T11390] RSP: 002b:00007f55db497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 403.159928][T11390] RAX: ffffffffffffffda RBX: 00007f55da7e5fa0 RCX: 00007f55da58eec9 [ 403.159946][T11390] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 403.159962][T11390] RBP: 00007f55da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.159978][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.159994][T11390] R13: 00007f55da7e6038 R14: 00007f55da7e5fa0 R15: 00007ffd81bd8698 [ 403.160029][T11390] [ 403.463602][T11392] Unrecognized hibernate image header format! [ 403.484856][T11392] PM: hibernation: Image mismatch: architecture specific data [ 403.810392][T11392] Unrecognized hibernate image header format! [ 403.834229][T11392] PM: hibernation: Image mismatch: architecture specific data [ 404.586767][T11419] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 405.191621][T11436] FAULT_INJECTION: forcing a failure. [ 405.191621][T11436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 405.262939][T11436] CPU: 0 UID: 0 PID: 11436 Comm: syz.0.1050 Not tainted syzkaller #0 PREEMPT(full) [ 405.262961][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.262969][T11436] Call Trace: [ 405.262974][T11436] [ 405.262980][T11436] dump_stack_lvl+0x16c/0x1f0 [ 405.263003][T11436] should_fail_ex+0x512/0x640 [ 405.263024][T11436] should_fail_alloc_page+0xe7/0x130 [ 405.263045][T11436] prepare_alloc_pages+0x3c2/0x610 [ 405.263063][T11436] ? stack_depot_save_flags+0x29/0x9c0 [ 405.263082][T11436] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 405.263100][T11436] ? kasan_save_stack+0x33/0x60 [ 405.263115][T11436] ? kasan_save_track+0x14/0x30 [ 405.263128][T11436] ? __kasan_slab_alloc+0x89/0x90 [ 405.263143][T11436] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 405.263155][T11436] ? ptlock_alloc+0x1f/0x70 [ 405.263174][T11436] ? pte_alloc_one+0x84/0x350 [ 405.263188][T11436] ? __pte_alloc+0x6d/0x380 [ 405.263202][T11436] ? copy_page_range+0x44a1/0x6930 [ 405.263220][T11436] ? dup_mmap+0xe80/0x2280 [ 405.263238][T11436] ? copy_process+0x3f0c/0x76a0 [ 405.263254][T11436] ? kernel_clone+0xfc/0x930 [ 405.263268][T11436] ? __do_sys_clone+0xce/0x120 [ 405.263283][T11436] ? do_syscall_64+0xcd/0xfa0 [ 405.263296][T11436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.263313][T11436] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 405.263336][T11436] ? __lock_acquire+0x62e/0x1ce0 [ 405.263357][T11436] ? __lock_acquire+0xb97/0x1ce0 [ 405.263373][T11436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.263397][T11436] ? policy_nodemask+0xea/0x4e0 [ 405.263416][T11436] alloc_pages_mpol+0x1fb/0x550 [ 405.263435][T11436] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 405.263458][T11436] alloc_pages_noprof+0x131/0x390 [ 405.263483][T11436] pte_alloc_one+0x1e/0x350 [ 405.263499][T11436] __pte_alloc+0x6d/0x380 [ 405.263514][T11436] ? __pfx___pte_alloc+0x10/0x10 [ 405.263529][T11436] ? __pfx___might_resched+0x10/0x10 [ 405.263543][T11436] ? copy_page_range+0x1c69/0x6930 [ 405.263565][T11436] copy_page_range+0x44a1/0x6930 [ 405.263608][T11436] ? __pfx_copy_page_range+0x10/0x10 [ 405.263635][T11436] ? __pfx___might_resched+0x10/0x10 [ 405.263648][T11436] ? __pfx_mas_store+0x10/0x10 [ 405.263664][T11436] ? __vma_enter_locked+0x163/0x3f0 [ 405.263685][T11436] ? dup_mmap+0xe30/0x2280 [ 405.263702][T11436] ? down_write+0x14d/0x200 [ 405.263721][T11436] ? up_write+0x1b2/0x520 [ 405.263743][T11436] dup_mmap+0xe80/0x2280 [ 405.263769][T11436] ? __pfx_dup_mmap+0x10/0x10 [ 405.263800][T11436] copy_process+0x3f0c/0x76a0 [ 405.263826][T11436] ? __pfx_copy_process+0x10/0x10 [ 405.263842][T11436] ? futex_private_hash_put+0x176/0x300 [ 405.263863][T11436] ? futex_private_hash_put+0x18a/0x300 [ 405.263884][T11436] kernel_clone+0xfc/0x930 [ 405.263901][T11436] ? __pfx_futex_wake+0x10/0x10 [ 405.263932][T11436] ? __pfx_kernel_clone+0x10/0x10 [ 405.263974][T11436] __do_sys_clone+0xce/0x120 [ 405.263999][T11436] ? __pfx___do_sys_clone+0x10/0x10 [ 405.264042][T11436] ? xfd_validate_state+0x61/0x180 [ 405.264073][T11436] ? __pfx_do_writev+0x10/0x10 [ 405.264099][T11436] do_syscall_64+0xcd/0xfa0 [ 405.264115][T11436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.264129][T11436] RIP: 0033:0x7f55da58eec9 [ 405.264141][T11436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.264154][T11436] RSP: 002b:00007f55db496fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 405.264168][T11436] RAX: ffffffffffffffda RBX: 00007f55da7e5fa0 RCX: 00007f55da58eec9 [ 405.264177][T11436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 405.264185][T11436] RBP: 00007f55da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 405.264193][T11436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 405.264201][T11436] R13: 00007f55da7e6038 R14: 00007f55da7e5fa0 R15: 00007ffd81bd8698 [ 405.264221][T11436] [ 405.643483][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.607149][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 407.729242][T11464] vivid-007: ================= START STATUS ================= [ 407.837972][T11464] vivid-007: Enable Output Cropping: true [ 407.883649][T11464] vivid-007: Enable Output Composing: true [ 407.898926][T11464] vivid-007: Enable Output Scaler: true [ 407.910080][T11464] vivid-007: Tx RGB Quantization Range: Automatic [ 407.921538][T11472] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 407.931539][T11464] vivid-007: Transmit Mode: HDMI [ 407.936592][T11464] vivid-007: Hotplug Present: 0x00000000 [ 407.942253][T11464] vivid-007: RxSense Present: 0x00000000 [ 407.952496][T11464] vivid-007: EDID Present: 0x00000000 [ 407.966364][T11464] vivid-007: ================== END STATUS ================== [ 408.016485][T11472] input: f as /devices/virtual/input/input17 [ 412.425497][T11541] random: crng reseeded on system resumption [ 414.015781][T11577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1073'. [ 414.509272][T11577] team0: Port device team_slave_1 removed [ 414.694979][T11589] Console: switching to colour frame buffer device 128x48 [ 417.847720][T11655] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1084'. [ 417.922570][T11655] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 418.020933][T11656] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 418.095091][T11655] ptrace attach of "./syz-executor exec"[6703] was attempted by ""[11655] [ 418.164355][T11656] ptrace attach of "./syz-executor exec"[6703] was attempted by ""[11656] [ 419.827581][T11687] FAULT_INJECTION: forcing a failure. [ 419.827581][T11687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 419.827621][T11687] CPU: 1 UID: 0 PID: 11687 Comm: syz.2.1089 Not tainted syzkaller #0 PREEMPT(full) [ 419.827638][T11687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.827647][T11687] Call Trace: [ 419.827652][T11687] [ 419.827658][T11687] dump_stack_lvl+0x16c/0x1f0 [ 419.827678][T11687] should_fail_ex+0x512/0x640 [ 419.827699][T11687] should_fail_alloc_page+0xe7/0x130 [ 419.827720][T11687] prepare_alloc_pages+0x3c2/0x610 [ 419.827742][T11687] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 419.827758][T11687] ? unwind_get_return_address+0x59/0xa0 [ 419.827782][T11687] ? arch_stack_walk+0xa6/0x100 [ 419.827804][T11687] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 419.827819][T11687] ? stack_trace_save+0x8e/0xc0 [ 419.827846][T11687] ? __lock_acquire+0xb97/0x1ce0 [ 419.827868][T11687] ? fb_var_to_videomode+0x4c9/0x690 [ 419.827885][T11687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.827910][T11687] ? policy_nodemask+0xea/0x4e0 [ 419.827930][T11687] alloc_pages_mpol+0x1fb/0x550 [ 419.827949][T11687] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 419.827966][T11687] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 419.827981][T11687] ? lockdep_hardirqs_on+0x7c/0x110 [ 419.827999][T11687] ___kmalloc_large_node+0xed/0x160 [ 419.828021][T11687] __kmalloc_large_node_noprof+0x1c/0x70 [ 419.828041][T11687] __kmalloc_noprof.cold+0xc/0x62 [ 419.828063][T11687] ? vc_allocate+0x489/0x880 [ 419.828085][T11687] ? vc_allocate+0x489/0x880 [ 419.828103][T11687] vc_allocate+0x489/0x880 [ 419.828122][T11687] ? __pfx_vc_allocate+0x10/0x10 [ 419.828146][T11687] con_install+0xa1/0x600 [ 419.828166][T11687] ? __pfx_con_install+0x10/0x10 [ 419.828189][T11687] ? __pfx_con_install+0x10/0x10 [ 419.828209][T11687] tty_init_dev.part.0+0x9c/0x500 [ 419.828231][T11687] tty_open+0xa4f/0xf90 [ 419.828256][T11687] ? __pfx_tty_open+0x10/0x10 [ 419.828276][T11687] ? chrdev_open+0x58c/0x6a0 [ 419.828295][T11687] ? __pfx_tty_open+0x10/0x10 [ 419.828315][T11687] chrdev_open+0x234/0x6a0 [ 419.828331][T11687] ? __pfx_chrdev_open+0x10/0x10 [ 419.828349][T11687] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 419.828367][T11687] do_dentry_open+0x982/0x1530 [ 419.828384][T11687] ? __pfx_chrdev_open+0x10/0x10 [ 419.828403][T11687] vfs_open+0x82/0x3f0 [ 419.828424][T11687] path_openat+0x1de4/0x2cb0 [ 419.828446][T11687] ? __pfx_path_openat+0x10/0x10 [ 419.828466][T11687] do_filp_open+0x20b/0x470 [ 419.828481][T11687] ? __pfx_do_filp_open+0x10/0x10 [ 419.828510][T11687] ? alloc_fd+0x471/0x7d0 [ 419.828529][T11687] do_sys_openat2+0x11b/0x1d0 [ 419.828548][T11687] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.828575][T11687] __x64_sys_openat+0x174/0x210 [ 419.828594][T11687] ? __pfx___x64_sys_openat+0x10/0x10 [ 419.828622][T11687] do_syscall_64+0xcd/0xfa0 [ 419.828639][T11687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.828653][T11687] RIP: 0033:0x7ff4fd98eec9 [ 419.828665][T11687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.828679][T11687] RSP: 002b:00007ff4fe773038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.828694][T11687] RAX: ffffffffffffffda RBX: 00007ff4fdbe6090 RCX: 00007ff4fd98eec9 [ 419.828703][T11687] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 419.828712][T11687] RBP: 00007ff4fda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.828721][T11687] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 419.828730][T11687] R13: 00007ff4fdbe6128 R14: 00007ff4fdbe6090 R15: 00007fff08d7fa68 [ 419.828750][T11687] [ 419.954024][T11690] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 4 with max blocks 50 with error 117 [ 419.954155][T11690] EXT4-fs (sda1): This should not happen!! Data will be lost [ 419.954155][T11690] [ 420.728527][T11700] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 422.665572][T11723] svc: failed to register nfsdv3 RPC service (errno 512). [ 422.755255][T11723] svc: failed to register nfsaclv3 RPC service (errno 111). [ 423.181832][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 424.700229][T11761] FAULT_INJECTION: forcing a failure. [ 424.700229][T11761] name failslab, interval 1, probability 0, space 0, times 0 [ 424.717052][T11761] CPU: 1 UID: 0 PID: 11761 Comm: syz.2.1107 Not tainted syzkaller #0 PREEMPT(full) [ 424.717075][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.717084][T11761] Call Trace: [ 424.717090][T11761] [ 424.717096][T11761] dump_stack_lvl+0x16c/0x1f0 [ 424.717118][T11761] should_fail_ex+0x512/0x640 [ 424.717137][T11761] ? __kmalloc_noprof+0xca/0x880 [ 424.717161][T11761] should_failslab+0xc2/0x120 [ 424.717181][T11761] __kmalloc_noprof+0xdd/0x880 [ 424.717202][T11761] ? drm_atomic_state_init+0x17b/0x320 [ 424.717223][T11761] ? drm_atomic_state_init+0x17b/0x320 [ 424.717237][T11761] drm_atomic_state_init+0x17b/0x320 [ 424.717252][T11761] ? __kasan_kmalloc+0xaa/0xb0 [ 424.717351][T11761] drm_atomic_state_alloc+0xd3/0x120 [ 424.717369][T11761] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 424.717387][T11761] ? __pfx___might_resched+0x10/0x10 [ 424.717408][T11761] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 424.717425][T11761] ? __mutex_lock+0x1c5/0x1060 [ 424.717440][T11761] ? rcu_is_watching+0x12/0xc0 [ 424.717475][T11761] drm_client_modeset_commit_locked+0x14d/0x580 [ 424.717496][T11761] drm_client_modeset_commit+0x4f/0x80 [ 424.717512][T11761] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 424.717531][T11761] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 424.717553][T11761] drm_fbdev_client_restore+0x2c/0x40 [ 424.717574][T11761] drm_client_dev_restore+0x1f6/0x2a0 [ 424.717594][T11761] drm_release+0x2c4/0x360 [ 424.717610][T11761] ? __pfx_drm_release+0x10/0x10 [ 424.717624][T11761] __fput+0x3ff/0xb70 [ 424.717647][T11761] task_work_run+0x150/0x240 [ 424.717670][T11761] ? __pfx_task_work_run+0x10/0x10 [ 424.717691][T11761] ? __pfx___do_sys_close_range+0x10/0x10 [ 424.717711][T11761] exit_to_user_mode_loop+0xec/0x130 [ 424.717732][T11761] do_syscall_64+0x426/0xfa0 [ 424.717750][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.717764][T11761] RIP: 0033:0x7ff4fd98eec9 [ 424.717777][T11761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.717792][T11761] RSP: 002b:00007ff4fe794038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 424.717807][T11761] RAX: 0000000000000000 RBX: 00007ff4fdbe5fa0 RCX: 00007ff4fd98eec9 [ 424.717816][T11761] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 424.717824][T11761] RBP: 00007ff4fda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 424.717833][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.717841][T11761] R13: 00007ff4fdbe6038 R14: 00007ff4fdbe5fa0 R15: 00007fff08d7fa68 [ 424.717863][T11761] [ 425.641811][T11770] netlink: 'syz.2.1109': attribute type 11 has an invalid length. [ 425.662746][T11767] FAULT_INJECTION: forcing a failure. [ 425.662746][T11767] name failslab, interval 1, probability 0, space 0, times 0 [ 425.681281][T11770] netlink: 'syz.2.1109': attribute type 11 has an invalid length. [ 425.713838][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 425.723152][T11767] CPU: 1 UID: 0 PID: 11767 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(full) [ 425.723189][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.723206][T11767] Call Trace: [ 425.723215][T11767] [ 425.723226][T11767] dump_stack_lvl+0x16c/0x1f0 [ 425.723262][T11767] should_fail_ex+0x512/0x640 [ 425.723293][T11767] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 425.723324][T11767] should_failslab+0xc2/0x120 [ 425.723352][T11767] kmem_cache_alloc_noprof+0x75/0x6e0 [ 425.723373][T11767] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 425.723403][T11767] ? acpi_ps_alloc_op+0x29d/0x360 [ 425.723446][T11767] ? acpi_ps_alloc_op+0x29d/0x360 [ 425.723475][T11767] acpi_ps_alloc_op+0x29d/0x360 [ 425.723503][T11767] ? acpi_ut_status_exit+0x103/0x1c0 [ 425.723538][T11767] acpi_ps_create_op+0x4bd/0xd30 [ 425.723569][T11767] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 425.723597][T11767] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 425.723636][T11767] acpi_ps_parse_loop+0xf06/0x2470 [ 425.723671][T11767] ? acpi_ut_trace+0x1d7/0x2a0 [ 425.723701][T11767] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 425.723729][T11767] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 425.723752][T11767] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 425.723782][T11767] ? acpi_ut_create_thread_state+0x6d/0x170 [ 425.723825][T11767] acpi_ps_parse_aml+0x817/0x1170 [ 425.723860][T11767] acpi_ps_execute_method+0x5c4/0xe90 [ 425.723902][T11767] acpi_ns_evaluate+0x98c/0x16d0 [ 425.723945][T11767] acpi_evaluate_object+0x4ca/0xdf0 [ 425.723979][T11767] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 425.724007][T11767] ? __mutex_trylock_common+0xe9/0x250 [ 425.724045][T11767] acpi_evaluate_integer+0xdd/0x200 [ 425.724080][T11767] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 425.724130][T11767] ? __pfx_status_show+0x10/0x10 [ 425.724155][T11767] status_show+0xa0/0x120 [ 425.724181][T11767] ? __pfx_status_show+0x10/0x10 [ 425.724218][T11767] dev_attr_show+0x53/0xe0 [ 425.724250][T11767] ? __pfx_dev_attr_show+0x10/0x10 [ 425.724277][T11767] sysfs_kf_seq_show+0x216/0x3e0 [ 425.724313][T11767] seq_read_iter+0x50b/0x12d0 [ 425.724369][T11767] kernfs_fop_read_iter+0x46c/0x610 [ 425.724396][T11767] ? rw_verify_area+0xcf/0x6c0 [ 425.724447][T11767] vfs_read+0x8bc/0xcf0 [ 425.724480][T11767] ? __pfx___mutex_lock+0x10/0x10 [ 425.724512][T11767] ? __pfx_vfs_read+0x10/0x10 [ 425.724565][T11767] ksys_read+0x12a/0x250 [ 425.724592][T11767] ? __pfx_ksys_read+0x10/0x10 [ 425.724631][T11767] do_syscall_64+0xcd/0xfa0 [ 425.724662][T11767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.724689][T11767] RIP: 0033:0x7f259118eec9 [ 425.724710][T11767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.724736][T11767] RSP: 002b:00007f25920a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.724762][T11767] RAX: ffffffffffffffda RBX: 00007f25913e5fa0 RCX: 00007f259118eec9 [ 425.724781][T11767] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000008 [ 425.724797][T11767] RBP: 00007f2591211f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.724813][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.724828][T11767] R13: 00007f25913e6038 R14: 00007f25913e5fa0 R15: 00007ffc357a10a8 [ 425.724868][T11767] [ 426.051395][T11770] netlink: 'syz.2.1109': attribute type 11 has an invalid length. [ 426.059565][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1109'. [ 426.068642][T11770] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1109'. [ 426.116852][T11767] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 426.243365][T11770] netlink: 'syz.2.1109': attribute type 11 has an invalid length. [ 426.394202][T11770] netlink: 'syz.2.1109': attribute type 11 has an invalid length. [ 426.402060][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 426.454000][T11770] netlink: 'syz.2.1109': attribute type 11 has an invalid length. [ 426.461855][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1109'. [ 426.529882][T11770] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1109'. [ 427.166487][T11780] __vm_enough_memory: pid: 11780, comm: syz.3.1112, bytes: 4398046511104 not enough memory for the allocation [ 427.268708][T11792] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 427.479088][T11788] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 427.969251][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 432.636994][T11871] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 437.704326][T11959] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 440.090218][T12002] FAULT_INJECTION: forcing a failure. [ 440.090218][T12002] name failslab, interval 1, probability 0, space 0, times 0 [ 440.120529][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.127571][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.148612][T12002] CPU: 0 UID: 0 PID: 12002 Comm: syz.3.1164 Not tainted syzkaller #0 PREEMPT(full) [ 440.148648][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.148663][T12002] Call Trace: [ 440.148672][T12002] [ 440.148682][T12002] dump_stack_lvl+0x16c/0x1f0 [ 440.148718][T12002] should_fail_ex+0x512/0x640 [ 440.148749][T12002] ? __kmalloc_noprof+0xca/0x880 [ 440.148793][T12002] should_failslab+0xc2/0x120 [ 440.148824][T12002] __kmalloc_noprof+0xdd/0x880 [ 440.148862][T12002] ? drm_atomic_state_init+0x17b/0x320 [ 440.148900][T12002] ? drm_atomic_state_init+0x17b/0x320 [ 440.148927][T12002] drm_atomic_state_init+0x17b/0x320 [ 440.148957][T12002] ? __kasan_kmalloc+0xaa/0xb0 [ 440.148987][T12002] drm_atomic_state_alloc+0xd3/0x120 [ 440.149027][T12002] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 440.149060][T12002] ? __pfx___might_resched+0x10/0x10 [ 440.149098][T12002] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 440.149127][T12002] ? __mutex_lock+0x1c5/0x1060 [ 440.149149][T12002] ? rcu_is_watching+0x12/0xc0 [ 440.149200][T12002] drm_client_modeset_commit_locked+0x14d/0x580 [ 440.149233][T12002] drm_client_modeset_commit+0x4f/0x80 [ 440.149265][T12002] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 440.149299][T12002] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 440.149340][T12002] drm_fbdev_client_restore+0x2c/0x40 [ 440.149378][T12002] drm_client_dev_restore+0x1f6/0x2a0 [ 440.149416][T12002] drm_release+0x2c4/0x360 [ 440.149447][T12002] ? __pfx_drm_release+0x10/0x10 [ 440.149473][T12002] __fput+0x3ff/0xb70 [ 440.149517][T12002] task_work_run+0x150/0x240 [ 440.149558][T12002] ? __pfx_task_work_run+0x10/0x10 [ 440.149598][T12002] ? __pfx___do_sys_close_range+0x10/0x10 [ 440.149635][T12002] exit_to_user_mode_loop+0xec/0x130 [ 440.149672][T12002] do_syscall_64+0x426/0xfa0 [ 440.149703][T12002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.149731][T12002] RIP: 0033:0x7f259118eec9 [ 440.149754][T12002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.149781][T12002] RSP: 002b:00007f25920a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 440.149807][T12002] RAX: 0000000000000000 RBX: 00007f25913e5fa0 RCX: 00007f259118eec9 [ 440.149824][T12002] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 440.149842][T12002] RBP: 00007f2591211f91 R08: 0000000000000000 R09: 0000000000000000 [ 440.149858][T12002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.149873][T12002] R13: 00007f25913e6038 R14: 00007f25913e5fa0 R15: 00007ffc357a10a8 [ 440.149913][T12002] [ 440.667931][T12007] net_ratelimit: 497 callbacks suppressed [ 440.667954][T12007] netlink: zone id is out of range [ 440.748073][T12007] netlink: zone id is out of range [ 440.763217][T12007] netlink: zone id is out of range [ 440.773560][T12007] netlink: zone id is out of range [ 440.806412][T12007] netlink: zone id is out of range [ 440.812416][T12011] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 440.822909][T12007] netlink: zone id is out of range [ 440.839856][T12007] netlink: zone id is out of range [ 441.030125][T12007] netlink: zone id is out of range [ 441.038558][T12022] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 441.064638][T12007] netlink: zone id is out of range [ 441.069804][T12007] netlink: zone id is out of range [ 441.331573][T12016] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1167'. [ 441.547863][T12016] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1167: iget: checksum invalid [ 441.584400][T12016] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 441.596924][T12016] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1167: iget: checksum invalid [ 441.710253][T12016] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 441.744409][T12016] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1167: iget: checksum invalid [ 441.778360][T12016] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 441.982141][T12016] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1167: iget: checksum invalid [ 442.024583][T12016] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 442.060121][T12016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 442.109873][T12016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 443.114420][T12055] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1172'. [ 443.137100][T12055] netlink: 134 bytes leftover after parsing attributes in process `syz.4.1172'. [ 443.166677][T12055] random: crng reseeded on system resumption [ 443.247400][T12055] vhci_hcd: invalid port number 23 [ 443.274009][T12055] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 443.765624][T12072] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 444.612635][T12096] random: crng reseeded on system resumption [ 446.262640][T12143] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 448.187659][T12172] dump_stack_lvl+0x16c/0x1f0 [ 448.187682][T12172] should_fail_ex+0x512/0x640 [ 448.187700][T12172] ? __kmalloc_noprof+0xca/0x880 [ 448.187723][T12172] should_failslab+0xc2/0x120 [ 448.187742][T12172] __kmalloc_noprof+0xdd/0x880 [ 448.187765][T12172] ? drm_atomic_state_init+0x17b/0x320 [ 448.187785][T12172] ? drm_atomic_state_init+0x17b/0x320 [ 448.187800][T12172] drm_atomic_state_init+0x17b/0x320 [ 448.187815][T12172] ? __kasan_kmalloc+0xaa/0xb0 [ 448.187833][T12172] drm_atomic_state_alloc+0xd3/0x120 [ 448.187850][T12172] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 448.187868][T12172] ? __pfx___might_resched+0x10/0x10 [ 448.187889][T12172] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 448.187906][T12172] ? __mutex_lock+0x1c5/0x1060 [ 448.187921][T12172] ? rcu_is_watching+0x12/0xc0 [ 448.187955][T12172] drm_client_modeset_commit_locked+0x14d/0x580 [ 448.187976][T12172] drm_client_modeset_commit+0x4f/0x80 [ 448.187993][T12172] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 448.188017][T12172] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 448.188041][T12172] drm_fbdev_client_restore+0x2c/0x40 [ 448.188063][T12172] drm_client_dev_restore+0x1f6/0x2a0 [ 448.188084][T12172] drm_release+0x2c4/0x360 [ 448.188102][T12172] ? __pfx_drm_release+0x10/0x10 [ 448.188116][T12172] __fput+0x3ff/0xb70 [ 448.188140][T12172] task_work_run+0x150/0x240 [ 448.188163][T12172] ? __pfx_task_work_run+0x10/0x10 [ 448.188184][T12172] ? __pfx___do_sys_close_range+0x10/0x10 [ 448.188204][T12172] exit_to_user_mode_loop+0xec/0x130 [ 448.188226][T12172] do_syscall_64+0x426/0xfa0 [ 448.188243][T12172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.188257][T12172] RIP: 0033:0x7f566a98eec9 [ 448.188270][T12172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.188285][T12172] RSP: 002b:00007f566b86b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 448.188300][T12172] RAX: 0000000000000000 RBX: 00007f566abe5fa0 RCX: 00007f566a98eec9 [ 448.188309][T12172] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 448.188317][T12172] RBP: 00007f566aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 448.188325][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.188334][T12172] R13: 00007f566abe6038 R14: 00007f566abe5fa0 R15: 00007fff0c33c5c8 [ 448.188356][T12172] [ 449.084195][ T31] INFO: task syz.1.638:9325 blocked for more than 143 seconds. [ 449.093441][ T31] Not tainted syzkaller #0 [ 449.121648][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.197338][ T31] task:syz.1.638 state:D stack:27880 pid:9325 tgid:9318 ppid:5825 task_flags:0x400640 flags:0x00080002 [ 449.214736][ T31] Call Trace: [ 449.221631][ T31] [ 449.225967][ T31] __schedule+0x1190/0x5de0 [ 449.275181][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 449.281235][ T31] ? __pfx___schedule+0x10/0x10 [ 449.286750][ T31] ? find_held_lock+0x2b/0x80 [ 449.291463][ T31] ? schedule+0x2d7/0x3a0 [ 449.295819][ T31] schedule+0xe7/0x3a0 [ 449.299889][ T31] schedule_timeout+0x257/0x290 [ 449.304789][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 449.310170][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.315139][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.320359][ T31] __wait_for_common+0x2f9/0x4e0 [ 449.325486][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 449.330893][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 449.336426][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 449.341819][ T31] wait_for_completion_state+0x1c/0x40 [ 449.347368][ T31] vfs_coredump+0x979/0x5670 [ 449.351973][ T31] ? xas_load+0x49/0x5b0 [ 449.356277][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 449.362275][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 449.367336][ T31] ? lock_acquire+0x179/0x350 [ 449.372054][ T31] ? lock_acquire+0x179/0x350 [ 449.376949][ T31] ? find_held_lock+0x2b/0x80 [ 449.381649][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 449.387499][ T31] ? bpf_ksym_find+0x124/0x1c0 [ 449.392304][ T31] ? unwind_get_return_address+0x59/0xa0 [ 449.398107][ T31] ? arch_stack_walk+0xa6/0x100 [ 449.403000][ T31] ? stack_trace_save+0x8e/0xc0 [ 449.407964][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 449.415238][ T31] ? stack_depot_save_flags+0x29/0x9c0 [ 449.423027][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 449.429759][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 449.495578][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 449.505470][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.513958][ T31] get_signal+0x22e1/0x26d0 [ 449.519091][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.524410][ T31] ? __pfx_get_signal+0x10/0x10 [ 449.529263][ T31] ? force_sig_info_to_task+0x39f/0x660 [ 449.534890][ T31] arch_do_signal_or_restart+0x8f/0x790 [ 449.540437][ T31] ? __pfx_force_exit_sig+0x10/0x10 [ 449.545867][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 449.552037][ T31] ? syscall_user_dispatch+0x120/0x140 [ 449.557684][ T31] exit_to_user_mode_loop+0x85/0x130 [ 449.564018][ T31] do_syscall_64+0x426/0xfa0 [ 449.568758][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.574822][ T31] RIP: 0033:0x7ff619f8eec9 [ 449.579285][ T31] RSP: 002b:00007ff61ade90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 449.588210][ T31] RAX: ffffffffffffffda RBX: 00007ff61a1e6278 RCX: 00007ff619f8eec9 [ 449.596689][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff61a1e627c [ 449.604710][ T31] RBP: 00007ff61a1e6270 R08: 00007ff61ae4d000 R09: 0000000000000000 [ 449.612742][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.620776][ T31] R13: 00007ff61a1e6308 R14: 00007ffd0fc80a80 R15: 00007ffd0fc80b68 [ 449.629219][ T31] [ 449.632601][ T31] [ 449.632601][ T31] Showing all locks held in the system: [ 449.641950][ T31] 1 lock held by khungtaskd/31: [ 449.667282][ T31] #0: ffffffff8e3c4320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 449.683583][ T31] 3 locks held by kworker/1:2H/5993: [ 449.690850][ T31] 2 locks held by getty/6056: [ 449.698162][ T31] #0: ffff88814d0940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 449.710546][ T31] #1: ffffc90003e252f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 449.720863][ T31] 4 locks held by kworker/u8:24/8999: [ 449.730184][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 449.814429][ T31] #1: ffffc9000ad2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 449.844247][ T31] #2: ffffffff900e7b30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 449.853657][ T31] #3: ffffffff900fdf48 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 449.983099][ T31] 1 lock held by syz.1.638/9319: [ 449.988433][ T31] 1 lock held by syz.0.1121/11815: [ 449.993578][ T31] [ 450.001476][ T31] ============================================= [ 450.001476][ T31] [ 450.010353][ T31] NMI backtrace for cpu 0 [ 450.010371][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 450.010399][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.010413][ T31] Call Trace: [ 450.010421][ T31] [ 450.010430][ T31] dump_stack_lvl+0x116/0x1f0 [ 450.010461][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 450.010499][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.010533][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 450.010572][ T31] watchdog+0xf3f/0x1170 [ 450.010601][ T31] ? rcu_is_watching+0x12/0xc0 [ 450.010627][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.010652][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.010681][ T31] ? __kthread_parkme+0x19e/0x250 [ 450.010712][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.010734][ T31] kthread+0x3c2/0x780 [ 450.010767][ T31] ? __pfx_kthread+0x10/0x10 [ 450.010802][ T31] ? rcu_is_watching+0x12/0xc0 [ 450.010827][ T31] ? __pfx_kthread+0x10/0x10 [ 450.010861][ T31] ret_from_fork+0x675/0x7d0 [ 450.010893][ T31] ? __pfx_kthread+0x10/0x10 [ 450.010926][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.010970][ T31] [ 450.010979][ T31] Sending NMI from CPU 0 to CPUs 1: [ 450.136083][ C1] NMI backtrace for cpu 1 [ 450.136101][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 450.136129][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.136143][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 450.136173][ C1] Code: a7 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 25 28 00 fb f4 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 450.136197][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c2 [ 450.136216][ C1] RAX: 000000000038719d RBX: 0000000000000001 RCX: ffffffff8b61f2d9 [ 450.136231][ C1] RDX: 0000000000000000 RSI: ffffffff8daff4f5 RDI: ffffffff8bf1d540 [ 450.136247][ C1] RBP: ffffed1003a5ab58 R08: 0000000000000001 R09: ffffed10170a6655 [ 450.136262][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 450.136277][ C1] R13: ffff88801d2d5ac0 R14: ffffffff908358d0 R15: 0000000000000000 [ 450.136292][ C1] FS: 0000000000000000(0000) GS:ffff888124ae7000(0000) knlGS:0000000000000000 [ 450.136314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.136329][ C1] CR2: 0000001b31df5ff8 CR3: 0000000075068000 CR4: 00000000003526f0 [ 450.136344][ C1] Call Trace: [ 450.136351][ C1] [ 450.136358][ C1] default_idle+0x13/0x20 [ 450.136387][ C1] default_idle_call+0x6c/0xb0 [ 450.136415][ C1] do_idle+0x38d/0x500 [ 450.136441][ C1] ? __pfx_do_idle+0x10/0x10 [ 450.136464][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 450.136503][ C1] cpu_startup_entry+0x4f/0x60 [ 450.136527][ C1] start_secondary+0x21d/0x2b0 [ 450.136561][ C1] ? __pfx_start_secondary+0x10/0x10 [ 450.136595][ C1] common_startup_64+0x13e/0x148 [ 450.136628][ C1] [ 450.467156][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 450.474057][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 450.483184][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.493252][ T31] Call Trace: [ 450.496545][ T31] [ 450.499488][ T31] dump_stack_lvl+0x3d/0x1f0 [ 450.504105][ T31] vpanic+0x640/0x6f0 [ 450.508115][ T31] panic+0xca/0xd0 [ 450.511863][ T31] ? __pfx_panic+0x10/0x10 [ 450.516316][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 450.521716][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 450.527898][ T31] ? watchdog+0xe48/0x1170 [ 450.532330][ T31] ? watchdog+0xe3b/0x1170 [ 450.536762][ T31] watchdog+0xe59/0x1170 [ 450.541027][ T31] ? rcu_is_watching+0x12/0xc0 [ 450.545810][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.550501][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.555742][ T31] ? __kthread_parkme+0x19e/0x250 [ 450.560787][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.565475][ T31] kthread+0x3c2/0x780 [ 450.569569][ T31] ? __pfx_kthread+0x10/0x10 [ 450.574198][ T31] ? rcu_is_watching+0x12/0xc0 [ 450.578980][ T31] ? __pfx_kthread+0x10/0x10 [ 450.583590][ T31] ret_from_fork+0x675/0x7d0 [ 450.588201][ T31] ? __pfx_kthread+0x10/0x10 [ 450.592816][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.597612][ T31] [ 450.600903][ T31] Kernel Offset: disabled [ 450.605230][ T31] Rebooting in 86400 seconds..