last executing test programs: 10m34.81478585s ago: executing program 2 (id=426): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) r0 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4c) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1892, 0x0, 0x2, 0x0, 0xb, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='%\x00', 0x38f) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cec24\x00', 0x400, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0x40) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x9, 0x2, 0x0, 0x9, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) socket(0xa, 0x3, 0x3a) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/veth0_virt_wifi/base_reachable_time\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x454, 0x9) syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000022fc0), r2) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000023280)={0x0, 0x0, &(0x7f0000023240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000fa0390d67ecc0b11d079c99f0e09d528a0edb9add8ce73ba4ceea76ce8de83cfeea6d46a55fd038bdaba3cfb63f23481bd4e4230f8cf268d4eb73e553cdc2c603abfa04fbd100bc5b9e546729a7adb5e8446f8cf215ffd18a65af5d9ff0e932d260b59d749d528bc4da4d989cbe503173f5732d59a5dcb395f2e2cb737af3ea1a4c6b6d4091818de24aaea35797e28e76229c16b66e549b84aa6159afd8ddfc5e96b18d477a4a7cd9034", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf2562000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) read$auto_hsr_node_table_fops_(r0, &(0x7f0000000380)=""/222, 0xde) 10m34.61607832s ago: executing program 2 (id=427): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioperm$auto(0x3428, 0x80, 0x4) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, 0x0, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x103, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r0, &(0x7f0000000100)='\x0291\xa6\x8b\xbe2|J\xac\xbb~~T\xf9nI )\x18D.\xa2}\x01\xbb\xe0\xeaH;:\xf0\xba\xa1', 0x4) 10m33.520994369s ago: executing program 2 (id=430): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) write$auto(r0, 0x0, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x6a) r1 = io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(r1, &(0x7f0000000480)={{&(0x7f0000000100)="1eea62d21191b2148bc906924906e5d647d1a29a2fbb92539a791ffa17df20cb0401570627c680d39334fa47151bc1eca716855970ca5d5125986b020d9bc81b723c4d18faa5ca003ff3926348e76257a5d99ef3fadaff6cccf59ec2bf36076e0c7c91453215eb86b423570c29a64968334dd3f21fcfaa819f56d426963dfc9b65d50642846d210c4a7e7f82583ff263d9ab", 0x0, &(0x7f0000000380)={&(0x7f0000000280)="012ec35d0c602192dc77bc86882d2ebfdb26c399642f07e91951228a36e65197eaa7ba39d7b412fa950324d2f37fd97e70ea5981277ff90c16f04a6d7ab32bf96fd68ef5abe0328976a9392011979f379fac1948584c2e20a76e994758375545b1be0c73ed70a112ddd528d7378b606dc27c4b2a424e385bc000050f846594c64a461620f96f511bf27f1b7ddf05f2f00457ecb387ddfeea5346ce7f703b7bb7bbff75f355fd982b6d9fd39c101057"}, 0xffffffffffffff01, &(0x7f00000003c0)="3216be32e4020b9c310510b713c8ead1f3fc63e89d4c5ba8cefc180b9be5cb5481facad7124459be979af80fbd7a3c2e38aeefa5ef623c4fd4a9297d3f04abc380ba925d202f86fafe46fc47c40f2c0af1178e068ce5f4b34dd19d957cd306d53f342d8c57d1deae39c56d0a25640c2251139f7b72ce071dec6a9141e17298c4de1e7106aa76eadefe94464142d02f81081eabbb0c7af0795b092a25c0c29d897b4487a3a1ea", 0x4, 0x8}, 0x349}, 0x95eb, 0x8, &(0x7f00000004c0)={0x1, 0x3e1d2b21}) ioctl$auto_TUNSETPERSIST(r1, 0x400454cb, &(0x7f0000000140)=0x7f) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) bind$auto(r1, &(0x7f0000000240)=@generic={0x0, "19287f203e4449b27ada48b02123"}, 0x3) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/209, 0xd1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r3, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x3}, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2000b, 0x7fffffff, 0xeb1, 0x401, 0x81) write$auto_configfs_file_operations_configfs_internal(0xffffffffffffffff, &(0x7f0000000140)='Y', 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto(0xffffffffffffffff, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000001c0)={0x0, 0x7}, 0x1000000000000003) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) 10m33.281304177s ago: executing program 2 (id=432): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) fdatasync$auto(r0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000100)={0x0, 0x1, 0xfffffffeffffffff, 0x7fffffffffffffff, 0x200, 0xffffffffffffffff}) tkill$auto(r1, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose5/speed\x00', 0x181142, 0x0) write$auto(r2, &(0x7f0000000040)='\x016V\xacz(t\x83\x15\xe6\xf3\xc4\xbf\xb6k?*\xea\xc8\x97\xdb\b\x0fs\\\x9f\xbakk7\xe9V\x03\xd7hU\xf8\xb83\xab\xbd\xcc?V\xec\xab\x9e\xac\xa9+\xd9( \xc0\x1c@\xba', 0xf1a) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)="a0a30ec38164fa95c0a085c39950677ce2339132a39cacbdafd872597a0eae8544a5ce30025a755f9807dfe8490295ddb4ae584508e7d61bf4dd796a636d345672485880e988fb9957eaa37a50afe7600608bbf0c17a487adc3a30160b471c4fa649956f87902f8b5ef4563b4c46d22766816d3e47e13680b8741a3180d4e33b5d49304f9d6bf95ac0265881fc74365c30ae0006ec48ddf1499a7bd9", 0x1}, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) (async) fdatasync$auto(r0) (async) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000100)={0x0, 0x1, 0xfffffffeffffffff, 0x7fffffffffffffff, 0x200, 0xffffffffffffffff}) (async) tkill$auto(r1, 0x9) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose5/speed\x00', 0x181142, 0x0) (async) write$auto(r2, &(0x7f0000000040)='\x016V\xacz(t\x83\x15\xe6\xf3\xc4\xbf\xb6k?*\xea\xc8\x97\xdb\b\x0fs\\\x9f\xbakk7\xe9V\x03\xd7hU\xf8\xb83\xab\xbd\xcc?V\xec\xab\x9e\xac\xa9+\xd9( \xc0\x1c@\xba', 0xf1a) (async) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)="a0a30ec38164fa95c0a085c39950677ce2339132a39cacbdafd872597a0eae8544a5ce30025a755f9807dfe8490295ddb4ae584508e7d61bf4dd796a636d345672485880e988fb9957eaa37a50afe7600608bbf0c17a487adc3a30160b471c4fa649956f87902f8b5ef4563b4c46d22766816d3e47e13680b8741a3180d4e33b5d49304f9d6bf95ac0265881fc74365c30ae0006ec48ddf1499a7bd9", 0x1}, 0x0) (async) 10m32.949378901s ago: executing program 2 (id=435): openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/usb/usbmon/28s\x00', 0xc000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x4, 0x0, 0x100082) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x8) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xb}}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) bpf$auto(0x0, 0x0, 0x6f3) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) 10m31.687155734s ago: executing program 2 (id=438): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x102, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) connect$auto(0x3, 0x0, 0x55) r1 = socket(0xa, 0x3, 0x3b) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x30b142, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4040aea0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') setns(r4, 0x20000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) read$auto(r5, 0x0, 0x800) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(r1, &(0x7f0000000040)=@generic={0x28, "bfbd6ff37898cc5d12a00179097d"}, 0xb) 10m31.093189331s ago: executing program 32 (id=438): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x102, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) connect$auto(0x3, 0x0, 0x55) r1 = socket(0xa, 0x3, 0x3b) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x30b142, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4040aea0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') setns(r4, 0x20000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) read$auto(r5, 0x0, 0x800) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(r1, &(0x7f0000000040)=@generic={0x28, "bfbd6ff37898cc5d12a00179097d"}, 0xb) 48.147743919s ago: executing program 1 (id=2324): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x62240, 0x0) socket(0xa, 0x5, 0x63) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)={0x88, 0x9, 0x0}) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVLOWAT(r1, 0x1, 0x12, &(0x7f0000000ac0)='\'!\x00', &(0x7f0000000b00)=0x80) socket(0x21, 0x1, 0x23) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x80102, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000001ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0xc, 0x1, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfb, 0x2000c, 0x4000000000df, 0xeb1, r2, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x18380, 0x0) unshare$auto(0x40000080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x5, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x40000202, 0xd6, 0x2]}, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a") close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1b, 0x5, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2000040080000003, 0x80000001) 47.13289502s ago: executing program 1 (id=2329): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 46.6145332s ago: executing program 1 (id=2330): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1, 0x1, 0x4, 0x0) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/49, 0x31) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000000)={0x8000008, [0x2, 0xffffffff, 0x80000004], [{0x80, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x9, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x6, 0xffffbffe, 0x1, 0x1}, {0x4, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0xfffff87e, 0x0, 0x1, 0x1}, {0xc14, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x800, 0x3, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x2, 0x7f69, 0x100000001, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000000)=0x3) timer_delete$auto(0x1) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x9, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x100000000, 0x40, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) close_range$auto(0x0, 0x5, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) ioctl$auto(r3, 0x900064b7, r3) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) 45.392017006s ago: executing program 1 (id=2332): openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) (async) r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) r1 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000180)="e9fa", 0x36}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x140) write$auto_proc_timens_offsets_operations_base(r0, &(0x7f0000000300)="38675fd347658c23ffecd0d8bc1d982487a3ad5094ae47160fda3b2630d3370ca8b975057089c083c9bd2814031c19ae951929c98655d8f55cbc42208ee9cb966bf6eb2e555b9301df7e72e7d7f53dbef536f56921ce229e1c5344e237d9b7f62a6b66e774fffd83a8e0711677f72efdaa79cc9854619d920d7454de5411cc09e0af56d8d004f5031b601d8c3159ca47129002f5afde5d3f116c5d58712583b7077b170a", 0xa4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getrandom$auto(0x0, 0xa7, 0x5) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/uprobe/perf_event_mux_interval_ms\x00', 0x121102, 0x0) write$auto(r2, &(0x7f0000000000)='\x00', 0x9) (async) write$auto(r2, &(0x7f0000000000)='\x00', 0x9) recvfrom$auto(r2, 0x0, 0x2, 0xf7fff4ad, 0x0, 0xfffffffffffffffd) 45.133106662s ago: executing program 1 (id=2333): ioctl$auto(0xc8, 0x800454d3, 0x5c8d) (fail_nth: 3) 24.862989058s ago: executing program 1 (id=2334): mmap$auto(0x5, 0xfffffffffffffffc, 0x5, 0x13, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto_UI_SET_LEDBIT(r0, 0x40045569, &(0x7f00000003c0)=0x698d) socket(0x28, 0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x1e, 0x1, 0x0) socket(0x6, 0x2, 0x2) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xffff, 0x0, 0x0, &(0x7f0000000100)={[0x8, 0x6, 0x1, 0xfffff7fffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8001, 0x26, 0x1, 0x20000000007fff, 0x2, 0x6]}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x429f, 0x8}, &(0x7f00000001c0)={0x7, 0x6}) madvise$auto(0x110c230000, 0x8031ca, 0x9) r2 = socket(0x1d, 0x3, 0x1) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x800) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x11, 0x80000, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8006, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000440)=@query={@target_ifindex, 0x7, 0x7fff, 0xe, 0x4c, @count=0x8, 0x0, 0x6, 0x1, 0x9, 0xe}, 0x5ccc3f5d) 10.215882621s ago: executing program 0 (id=2409): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c3}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000200)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xb25}, 0x7}, 0x3, 0x1) sendfile$auto(r1, r1, 0x0, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x202002, 0x0) read$auto(r2, &(0x7f0000000e80)='\x00', 0x7) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) ioctl$auto_OSS_GETVERSION2(0xffffffffffffffff, 0x80044d76, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) capget$auto(&(0x7f0000000c40)={0xb6, 0x0}, &(0x7f0000000c80)={0xff, 0x2, 0x1000}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000d40)={{0x4, 0xffffffffffffffff, 0xee00, 0x2, 0x1, 0x89d, 0x40}, &(0x7f0000000cc0)=0x7, &(0x7f0000000d00)=0xd, 0x0, 0x3, 0x3, 0x4f68ec7b, 0x8, 0x7, 0x80, 0x9, @inferred=0xffffffffffffffff, @raw=0x400}) r7 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0x9, 0x1, 0x9, @_kill={r5, r6}}}, 0x7fff, &(0x7f0000000b80)={{0x7fffffffffffffff, 0x200000093}, {0x6, 0xb7}, 0x0, 0x0, 0x273, 0x1, 0x80000000, 0x8001, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x7, 0x7, 0x8, 0x6}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="a3a83f4f97591127823159afef15486b9c3e40e8f52c8305343b294ab5a42a6e5b4c71c3e87ac9999018967f5a4fbe3032f6a12013768273fc01eb07449fc5025f78c1a207a2a96f8541c8e55cdc7d60c196ec9ca74b462d96920b88d2a17367c15bc49b4b0a7847ae85039b6456bfeb4f0a940f1d09265fbe0b0dfc5b16e2fda848ab8f083ce5a50c002660ae58b90cae8d09445146b0ab375fe1f8c71b96d23583ce8ae63455411d8f65b4b5ee0098992de5ac84e1281a75b7a60600a3003a0000000000"], 0x198}, 0x1, 0x0, 0x0, 0x440c5}, 0x8800) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001100)={0x91c, r4, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xd5}, @NL80211_ATTR_MLO_TTLM_ULINK={0x63, 0x149, "5dc132370d91a80fcea30c6ce6802a9d2afdbc84752c2d473ab3ed65224172f55b21dc0c75f1379e22bb1cdb16c3fa42e33611cc57292c495ac56f769d678170d7853c9dd9a41bdb490dd1a0dc21a3136d79ba01a758d5cbb36bd09895a172"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_PROBE_RESP={0x893, 0x91, "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"}]}, 0x91c}}, 0x404c081) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x8800) read$auto(0x3, 0x0, 0x7ffffffff000) 10.211224832s ago: executing program 3 (id=2411): statmount$auto(0x0, &(0x7f0000000500)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x6, 0x5, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0x50a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) r0 = socket(0xa, 0x801, 0x84) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2ec}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x17c, r2, 0x100, 0x8, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x168, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x56, 0x1, "f80e39539ee2008983f1973ff1d0b3f7b3796fbb20e14e93cb3417dca9c4e79f026be071e6ed85b2c52b3624256769519524cc8bb79c8c4cf892e9171c0a3bb39d8fcf41c5c2a7603e6f444a2e4072bf1052"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x8, 0x2, 'HSR\x00'}, @NFSD_A_SOCK_ADDR={0x88, 0x1, "32972493f9b53f6f781e811272ef1a54af0ce2125b63c5ccf8e82897cdec9f132574eedc4b8c20909d212cb40ef3238bfc2326d5246d1bac74248f4df9b285c2f69bfdd992de44209f195b7a9ecc6342fe4892063e9d855f55e3f5c6ea77602e87a4a69498b14ae9483bd3fb3c457d254790f50d9529dd74133c7122168ddd70115de611"}, @NFSD_A_SOCK_ADDR={0x7a, 0x1, "774439d393c756f922e211d8abe8b142d5f6bcd4fcce43aacc7931bfd7e8db552580ddb6ae3e770ab3d721c2d34fae95cbdfd47f98f1abebab5aaf24ae5ad3b8e053ffce768f7d4db4ed1cee0da3e55935429086b8e0eacd1469b4341e35064a1e6d53242d9fb505ac5453e10d5f532f707e27d7a413"}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) msgctl$auto(0xfff, 0x2, &(0x7f0000000300)={{0x2, 0xee00, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x7ff}, &(0x7f00000001c0)=0x7c, &(0x7f00000002c0)=0x4e, 0x7fff, 0x4, 0xd4, 0x9, 0x8, 0x3, 0x2, 0x6, @inferred, @raw=0x8001}) keyctl$auto(0x1001d, 0xffffffffffffffff, 0x5, r3, 0x9) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 8.534794488s ago: executing program 0 (id=2412): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x62240, 0x0) socket(0xa, 0x5, 0x63) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)={0x88, 0x9, 0x0}) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVLOWAT(r1, 0x1, 0x12, &(0x7f0000000ac0)='\'!\x00', &(0x7f0000000b00)=0x80) socket(0x21, 0x1, 0x23) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x80102, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000001ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0xc, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfb, 0x2000c, 0x4000000000df, 0xeb1, r3, 0x8000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') getdents$auto(r4, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x18380, 0x0) unshare$auto(0x40000080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x5, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x40000202, 0xd6, 0x2]}, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a") close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1b, 0x5, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2000040080000003, 0x80000001) 8.532009614s ago: executing program 4 (id=2413): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xffc, 0x2020009, 0x7, 0x15, 0xffffffffffffffff, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/018/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) futex$auto(&(0x7f00000002c0)=0x1000004, 0x5, 0xe, &(0x7f0000000100)={0xf52}, &(0x7f00000001c0)=0x9, 0x7915080d) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) writev$auto(r3, &(0x7f0000000140)={&(0x7f0000000280)="63cd977ff1dd086486ab9b80f6c140f7021d9573acefa30d2679c7ddcd5a6e1b160c9c854444c8bdf235a909a4c52190", 0xe1}, 0x2ca3) mmap$auto(0x10, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfffffffffffffff9, 0x6e5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x2, 0x1, 0x100) execve$auto(0x0, &(0x7f0000000180)=0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x6, 0x7) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) 8.527627966s ago: executing program 3 (id=2414): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x62240, 0x0) socket(0xa, 0x5, 0x63) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)={0x88, 0x9, 0x0}) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVLOWAT(r1, 0x1, 0x12, &(0x7f0000000ac0)='\'!\x00', &(0x7f0000000b00)=0x80) socket(0x21, 0x1, 0x23) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000001ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0xc, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfb, 0x2000c, 0x4000000000df, 0xeb1, r3, 0x8000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') getdents$auto(r4, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x18380, 0x0) unshare$auto(0x40000080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x5, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x40000202, 0xd6, 0x2]}, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a") close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1b, 0x5, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2000040080000003, 0x80000001) 6.35526287s ago: executing program 0 (id=2415): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x3, 0x66) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$auto(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x4000000) sendmsg$auto_NL80211_CMD_EPCS_CFG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x993}, @NL80211_ATTR_PMK={0xb, 0xfe, "870934b19cf74c"}]}, 0x28}}, 0x11) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendfile$auto(r0, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) 6.344511446s ago: executing program 4 (id=2416): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000ace065ad5878b809e5c78909b6a3964dac89e9b355d7b7d8d337e5e0b2d9c36fa631f476cfb0ef550d71afd4efffd3dd470b7722094affa9006ced2208148dc1777e5d82b01c2231dc2ab2fbf5f9a0a5a3713588af3037ed0b617dee15b67", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r2, 0x5408, r2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000240)="1c520b214b197e", 0x7) unshare$auto(0x40000080) r4 = socket(0xa, 0x1, 0x84) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(r4, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000140)='./file0\x00', 0x40, 0xa2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r4, 0xca, 0x7, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) pread64$auto(r5, 0x0, 0x40000000f42c, 0x585) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) r6 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r7 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r7, 0x0, 0x80000000006) tkill$auto(r6, 0x9) unshare$auto(0x40000080) 6.341167647s ago: executing program 3 (id=2417): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x3, 0x66) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$auto(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x4000000) sendmsg$auto_NL80211_CMD_EPCS_CFG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x993}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x76}, @NL80211_ATTR_PMK={0xb, 0xfe, "870934b19cf74c"}]}, 0x30}}, 0x11) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) 4.507681896s ago: executing program 0 (id=2418): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x3, 0x66) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) r0 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$auto(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="2f212cb97000c2ebdb3357c089cb08000300", @ANYRES32=r3], 0x34}}, 0x4000000) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc01) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) 4.487485317s ago: executing program 4 (id=2419): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r2, @ANYBLOB="01002abd7000467f4b5be2f4e44ab30108f778d64b44fedbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x1003, 0x401, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7a=v^\x951\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeC\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95\a\xf5e\xfa\x94M\xb8%a\xa53fc\x95\'\xedc\xc5\xad\x7fM\xb4\xf39\x82\xdf8Y)\x8e\xa6\x0e[\xe1\x88\x1d\x0f[j\xe9\x83\x11\x1e\xca2\xba\xdb\xe4\b%\n\xcb\xbar\xf8\x84\xb0\x00$V\xa6`;\xfao\xe6A\x1b\xf2d\xfc\xb4}\xecP\x80h\xfb\x9f3e}\x8edq\x86\x00\xe0bb\x16\xb1kM\xc6GW#-\xf6\x17$BW\x83J\xd7g\xf1\xc0\xbf\x03>\xf2\xeb g\xb7\x14\xc6\xc7\xc9]\xce.\x82Y\x98\tg\v\x11a\v\xb4\xab\x12\xc7', 0x8) socket(0x10, 0x2, 0x0) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0xe5e) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "27b9e8c551ea793bffc8a7dfaf2bb4c5b47ed2a908966d91"}, @NL80211_ATTR_FILS_CACHE_ID={0x9, 0xfd, "e9041bc7ec"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x4004050) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) 4.483842516s ago: executing program 3 (id=2420): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x1, 0x4, 0x9, 0x4000000ebf, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = getpid() syz_clone3(&(0x7f0000000300)={0x100102000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r1, r1, r1, 0x0], 0x4, {r0}}, 0x58) unshare$auto(0xde) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/numa_maps\x00', 0x20a80, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x7fff) r4 = prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x3) mmap$auto(0x0, 0x4, 0x14000000000df, 0x40eb2, r4, 0x300000000000) lseek$auto(r3, 0x7ff, 0x1) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x9a6c1, 0x0) ioctl$auto_UBI_IOCATT(r6, 0x40186f40, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1e) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) connect$auto(0x3, &(0x7f0000000100)=@ax25={0x3, @default, 0x5}, 0x58) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xfffffffffffffffc, 0x5, 0x5, 0xebd, r5, 0x9) r7 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x1000, 0x400003, 0x4) write$auto_console_fops_tty_io(r7, &(0x7f0000001240)='4', 0x1) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, &(0x7f0000000080)=0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2.568870946s ago: executing program 0 (id=2421): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x200080c3}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000200)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xb25}, 0x7}, 0x3, 0x1) sendfile$auto(r1, r1, 0x0, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x202002, 0x0) read$auto(r2, &(0x7f0000000e80)='\x00', 0x7) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) ioctl$auto_OSS_GETVERSION2(0xffffffffffffffff, 0x80044d76, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) capget$auto(&(0x7f0000000c40)={0xb6, 0x0}, &(0x7f0000000c80)={0xff, 0x2, 0x1000}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000d40)={{0x4, 0xffffffffffffffff, 0xee00, 0x2, 0x1, 0x89d, 0x40}, &(0x7f0000000cc0)=0x7, &(0x7f0000000d00)=0xd, 0x0, 0x3, 0x3, 0x4f68ec7b, 0x8, 0x7, 0x80, 0x9, @inferred=0xffffffffffffffff, @raw=0x400}) r7 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0x9, 0x1, 0x9, @_kill={r5, r6}}}, 0x7fff, &(0x7f0000000b80)={{0x7fffffffffffffff, 0x200000093}, {0x6, 0xb7}, 0x0, 0x0, 0x273, 0x1, 0x80000000, 0x8001, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x7, 0x7, 0x8, 0x6}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="a3a83f4f97591127823159afef15486b9c3e40e8f52c8305343b294ab5a42a6e5b4c71c3e87ac9999018967f5a4fbe3032f6a12013768273fc01eb07449fc5025f78c1a207a2a96f8541c8e55cdc7d60c196ec9ca74b462d96920b88d2a17367c15bc49b4b0a7847ae85039b6456bfeb4f0a940f1d09265fbe0b0dfc5b16e2fda848ab8f083ce5a50c002660ae58b90cae8d09445146b0ab375fe1f8c71b96d23583ce8ae63455411d8f65b4b5ee0098992de5ac84e1281a75b7a60600a3003a0000000000"], 0x198}, 0x1, 0x0, 0x0, 0x440c5}, 0x8800) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001100)={0x91c, r4, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xd5}, @NL80211_ATTR_MLO_TTLM_ULINK={0x63, 0x149, "5dc132370d91a80fcea30c6ce6802a9d2afdbc84752c2d473ab3ed65224172f55b21dc0c75f1379e22bb1cdb16c3fa42e33611cc57292c495ac56f769d678170d7853c9dd9a41bdb490dd1a0dc21a3136d79ba01a758d5cbb36bd09895a172"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_PROBE_RESP={0x893, 0x91, "2af0a89b5cddc50001302fbc8b75cb30dd71a0f48abc4059fa784a1cf6d6b30a4324b72c4f9c93503935599cb4dfabc84574ca4a69a84fe5a3c7735759652261ebcda7156aa8141f3867f83b1106a85fdd5af0b79c44a3a1755fb5cf8c9dbe0e90217749578989c6b3db1ea0e98ca467540ef3c7b545c3ac5ddda6ed7ffe14fddc7b68ed2c0806e5d2b84f1ee5b75424b30ebc855ae4ac61af37dadd7ee9c5a7334365b18597a15d0c062c48297890b8e7fc60bdcea01b3dfba14f5f939608e5d1adc7fce40e4d770efa4b11bcd9f65a8a41376434cc0bedc82b45ab803bd539bd250e07d366e46c223407d46ae40fa18106ba8a836cf519f5b92123fec80854f19e72706d1f4ed4c6867b9716c701c8eb993e5027dbb3d3743d1b3ee985485c0e4e482db9a90d7d6f5a376f70596d58678e0d9826763429af242472b10f2bb81e0bbb4e1be519d219495d6b0d185050e7a8028dda49295ab2c47eda41b96d4fc291dcc4920aeeda38113e7a83b50c5583d42d250321f7309cf2baf7541f0ab8d46de456786d2824bea800bf75518b971a95dd704681125471687baffee7dff396965c6f6cfeee52a5a6c3a4da0a7d5ee66dc133b6b6b5292ba0a1699fc92adae51311fb969626981350e774f76b5c4c4d1c922371b6b721ec3701664bb7e881c3f23d3a6672ec6a4a895d7cb912e3e50760317aee5390819620f08c49961256db35f41facc4dfea7517962e99ef00a677acba4d86311990b8fc9748ee3ff44b23b009b4ee8f5d23aaf97ab9188ea024a61c20e809da4d21eae8153817c92e380cd25fa62dc7e83ebdee80a012a1f47975e534b51fc4d67f115ca3216f424c7a418f435f6aa04a2b8be180094f0dea4bc163856781d263e852822e355137bf507a3b007dc296723165f5936fd7ffe84f2d9eb74dffc753cbeb32ff592598b37664c1aa47195aa14bbc69a48cb5a646bd4e864df8b30f9f64b15b754f4198190d7f5db719bd407c68044a408bf543317ee9d8dbc64059428376ba3e67720c6839c7b609bf2c789c89d972d2a2a9ab1939f97f77981e12d39ba22566db657fba17286d12b61290b09d88c2681a05da4ffa523cf2c3c0c701db8bc57629c4a2d5d1533ea89f5bd3a9288b030e5422e59a7e8c5a143d80f97c254ff0a5fbf4eec75e49b423f44fee477055f2bd801d266ab03fc65ce21223e1def8de117f691af6e617e755a1d46e999d058cf3b9e8700a381480e06b3b1d73be69a620698f986af89a09913f118e4fd34389f19f8ebe8f26df88d327f3f7bf21558967407e02b8075ae9edd233189a6d14489d0c7275e89a1e674e859143b5530f3b43e64623f6094e2a4be002a1ead776f0d5f9044eee9de2ad83ba3ab470185bbf4295aa00fc05ebcd2e5334697d012b7679b3b8fda383cea5264f403ecd0ef25521d089899fafcf55eee4960d65794266c940e6e3dda085eaa0c86cc7b9dc3d2a2c07e42fb5340e63378959e660152b73396e9421ee22eee6611a5512f5ccdb48f56649a8d05d71ca957baf6c64c7afac6c5e0dd8d3cfbf7b2f1147e06fdd91467e07162f7c46e534e608a7f20e56f58e0cab6e69c06d92d135dcd3eeff519a9dd5e2f9dcbb2de81d34cefa98411eb8e35f38f730bd1015baf29a1a5fb03abc59c20969bdf79cf93f2e01eedc357c0fd62a79e2737b2dec8f9e0c970a98abc9b86a0d4ebff02a2961c6b925dc6e4035904493f3306eb76dd392ccb2668a3c59a5252730c39e69d8e32a4551ade6d50eea2e1994934f29a4a31b2d1a883469332bd09f4b6b73084479ed40aae1898a7796e1d777d046ed361d4ea2f4357117d4b8b50ad900f15dfe3c045e09e930bd277eb5224b15ae9e0ce92a78e29b69d6d069daac7afd5ab6d8f7a58e92f29ccf3eadea9f1263e1c9dce862b48d830806ec1588d1dec8effc3cd13242a1f87df8a0f96084e1652acf82d8f7a6d0a9cd9a1c6cb7d14d443b14ab3b7090b07c168a55a9f2f7c7935b4888fd5bb5c776be900e5dde5426bf8e06c538af428961cf052c79d9df2fd36e366255214124d0bb2d5b21559394d85993144230737b30a79e38bd72527e59f704aa09cd01d6999bd8e755f9d42b5d2908c1fe13a35b0239cdc64b45b4e5c0ea7ef1ac0a1e3c10ce3b5f762aad1b4c9aaa1391754e46b5f549b2d13842143405916f93ff7f835f3599c5bb7d27fa6dda951881fd5044de0de807aab1b958c79dd30a81f63e1279028c7c69136022471b9a6c3b3c5fe1609d954c4a1d93a91e80285bff47e6cc5f008f24607e7428b113b11ecbcdf9c1f2fd4a6cb6556eb5bb6974e6dd9a9f0a5bd5bb22cd0144b3969a3832ba61518c31bff80d56da4cf23b6629fa0d55c6a3a648f2d24b0f3b9f97f0cc131d780b222b3e6d3d7bbcec2cfa8f4d82f54af622f83f604bab80f00fac19536b495ec9333227b0bb68ccc4fd5446ec644a1e03627a82423b0da06c2f3a86e021dfd7c79918b853bb478ef104e86d3ec3b3992d020b3cf5278854ae72dc5ce3bd20adf9fa718dde1289f00c20977a8639b19e0c58de61bf021cde8702045f2ff3354d255bf2a06b290a4e705868254769aa4db0b7cf1b668d2dd1e27df73076b735c647ebf94f1077aa82a8f37171bf3d876957e716cad1c11ce968fe1d26c5a24940f1c856e978260637f5446f9f49ce6c6ec12f330ad20322c12f6ea61967b0ea3ba3883b19fc3ad8ef4c5a6235a6215d3244edf6078f62e802544a4cf13f21a09be7b94076879fbdeb229f8160cdb476d1058f2b322b82c54d9ab51cf6cc1fb437ecefa0f1e05aac2f6255397b9c2c63f02f7200cd431cddea548b791ce435589fa75cbb99d0913eefdb712bb2feeb3b6129b67e15f1b48fffe89b8dcb263d76a0a7d9e8fca941fb91ce301836fe39ff0173a99523051c56abb61c7ead5d923736c38e5e298fcc8a1e7fff5a069e7b19e10230e5905dfa71a9de3ea278835b3dd503753101b8566fd74a99cf21d8faff2765d097c40dd2ca7b6ef7bd69ed51d18692fe1e493a89884ec089b0f42771bca91ff6aab3d32d8f7f27721bb6f8366bdffffce926305e624ea23cd08f"}]}, 0x91c}}, 0x404c081) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x8800) read$auto(0x3, 0x0, 0x7ffffffff000) 2.563977161s ago: executing program 4 (id=2422): statmount$auto(0x0, &(0x7f0000000500)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x6, 0x5, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0x50a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) r0 = socket(0xa, 0x801, 0x84) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2ec}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x17c, r2, 0x100, 0x8, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x168, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x56, 0x1, "f80e39539ee2008983f1973ff1d0b3f7b3796fbb20e14e93cb3417dca9c4e79f026be071e6ed85b2c52b3624256769519524cc8bb79c8c4cf892e9171c0a3bb39d8fcf41c5c2a7603e6f444a2e4072bf1052"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x8, 0x2, 'HSR\x00'}, @NFSD_A_SOCK_ADDR={0x88, 0x1, "32972493f9b53f6f781e811272ef1a54af0ce2125b63c5ccf8e82897cdec9f132574eedc4b8c20909d212cb40ef3238bfc2326d5246d1bac74248f4df9b285c2f69bfdd992de44209f195b7a9ecc6342fe4892063e9d855f55e3f5c6ea77602e87a4a69498b14ae9483bd3fb3c457d254790f50d9529dd74133c7122168ddd70115de611"}, @NFSD_A_SOCK_ADDR={0x7a, 0x1, "774439d393c756f922e211d8abe8b142d5f6bcd4fcce43aacc7931bfd7e8db552580ddb6ae3e770ab3d721c2d34fae95cbdfd47f98f1abebab5aaf24ae5ad3b8e053ffce768f7d4db4ed1cee0da3e55935429086b8e0eacd1469b4341e35064a1e6d53242d9fb505ac5453e10d5f532f707e27d7a413"}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) msgctl$auto(0xfff, 0x2, &(0x7f0000000300)={{0x2, 0xee00, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x7ff}, &(0x7f00000001c0)=0x7c, &(0x7f00000002c0)=0x4e, 0x7fff, 0x4, 0xd4, 0x9, 0x8, 0x3, 0x2, 0x6, @inferred, @raw=0x8001}) keyctl$auto(0x1001d, 0xffffffffffffffff, 0x5, r3, 0x9) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.554816352s ago: executing program 3 (id=2423): socket(0x2, 0x1, 0x106) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="310000100000000a002ca65de95b667827494d", 0x5e) mmap$auto(0x0, 0x7, 0x4000000000e0, 0x6b1, 0x401, 0x400) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0x6, 0x0, 0x9, 0xffffffff, 0x2, "4125a04a5a947c57594bdcf48be8f6f8203586427262672331fe7a514e555423210c136544a046d30a2cf16bf4c899e9033fc264674bb55a7a268449affb6db8e65163e451dc24c7fb7fa98cf5288dc4247f5668b3a994108fc46f8ac24670df2b882ba648d71ee94e8d9f196246026261de899b"}, 0x8000, 0x0, 0x6) migrate_pages$auto(0x0, 0x2, 0x0, &(0x7f00000000c0)=0x3) mmap$auto(0x0, 0x2020009, 0x38e90acd, 0xeb1, 0xfffefffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x260582, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r2 = syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x100040eb1, r1, 0x300000000002) setsockopt$auto_SO_MAX_PACING_RATE(0xffffffffffffffff, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4) r3 = pidfd_open$auto(0x0, 0x0) setns(r3, 0x20000000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mount$auto(0x0, &(0x7f00000002c0)='}[,&*}\x00', 0x0, 0x2ee, &(0x7f0000000340)="98db5ad8") execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x10', 0x0) ptrace$auto(0x4206, r2, 0x0, 0x5) mmap$auto(0x0, 0x400000000, 0x3, 0x18, 0xffffffffffffffff, 0x8005) move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000) symlink$auto(0x0, &(0x7f0000000000)='\'--[[\x14+\\\x00') bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.456077456s ago: executing program 4 (id=2424): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1, 0x1, 0x4, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/49, 0x31) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000000)={0x8000008, [0x2, 0xffffffff, 0x80000004], [{0x80, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x9, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x6, 0xffffbffe, 0x1, 0x1}, {0x4, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0xfffff87e, 0x0, 0x1, 0x1}, {0xc14, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x800, 0x3, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x2, 0x7f69, 0x100000001, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x9, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x100000000, 0x40, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) close_range$auto(0x0, 0x5, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) ioctl$auto(r3, 0x900064b7, r3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci2/rfkill29/hard\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) io_uring_register$auto(0x2, 0x1e, 0x0, 0x1) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) 27.945992ms ago: executing program 0 (id=2425): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/49, 0x31) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x8000008, [0x2, 0xffffffff, 0x80000004], [{0x80, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x9, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x6, 0xffffbffe, 0x1, 0x1}, {0x4, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0xfffff87e, 0x0, 0x1, 0x1}, {0xc14, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x800, 0x3, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x2, 0x7f69, 0x100000001, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x9, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x100000000, 0x40, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fa, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) close_range$auto(0x0, 0x5, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) ioctl$auto(r2, 0x900064b7, r2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci2/rfkill29/hard\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 24.937122ms ago: executing program 4 (id=2426): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r2, @ANYBLOB="01002abd7000467f4b5be2f4e44ab30108f778d64b44fedbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x1003, 0x401, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7a=v^\x951\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeC\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95\a\xf5e\xfa\x94M\xb8%a\xa53fc\x95\'\xedc\xc5\xad\x7fM\xb4\xf39\x82\xdf8Y)\x8e\xa6\x0e[\xe1\x88\x1d\x0f[j\xe9\x83\x11\x1e\xca2\xba\xdb\xe4\b%\n\xcb\xbar\xf8\x84\xb0\x00$V\xa6`;\xfao\xe6A\x1b\xf2d\xfc\xb4}\xecP\x80h\xfb\x9f3e}\x8edq\x86\x00\xe0bb\x16\xb1kM\xc6GW#-\xf6\x17$BW\x83J\xd7g\xf1\xc0\xbf\x03>\xf2\xeb g\xb7\x14\xc6\xc7\xc9]\xce.\x82Y\x98\tg\v\x11a\v\xb4\xab\x12\xc7', 0x8) socket(0x10, 0x2, 0x0) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0xe5e) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "27b9e8c551ea793bffc8a7dfaf2bb4c5b47ed2a908966d91"}, @NL80211_ATTR_FILS_CACHE_ID={0x9, 0xfd, "e9041bc7ec"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x4004050) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) 0s ago: executing program 3 (id=2427): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x3, 0x66) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$auto(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x4000000) sendmsg$auto_NL80211_CMD_EPCS_CFG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x993}, @NL80211_ATTR_PMK={0xb, 0xfe, "870934b19cf74c"}]}, 0x28}}, 0x11) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendfile$auto(r0, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) kernel console output (not intermixed with test programs): ice string! [ 737.101131][T17003] netlink: set zone limit has 8 unknown bytes [ 737.262593][T17015] random: crng reseeded on system resumption [ 738.969948][T17056] FAULT_INJECTION: forcing a failure. [ 738.969948][T17056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.028861][T17056] CPU: 1 UID: 0 PID: 17056 Comm: syz.4.2082 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 739.028895][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 739.028909][T17056] Call Trace: [ 739.028917][T17056] [ 739.028925][T17056] dump_stack_lvl+0x16c/0x1f0 [ 739.028972][T17056] should_fail_ex+0x512/0x640 [ 739.029009][T17056] _copy_from_user+0x2e/0xd0 [ 739.029034][T17056] get_timespec64+0x8b/0x1b0 [ 739.029059][T17056] ? __pfx_get_timespec64+0x10/0x10 [ 739.029084][T17056] ? find_held_lock+0x2b/0x80 [ 739.029115][T17056] __x64_sys_futex+0x288/0x4c0 [ 739.029149][T17056] ? __pfx___x64_sys_futex+0x10/0x10 [ 739.029200][T17056] do_syscall_64+0xcd/0x490 [ 739.029235][T17056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.029259][T17056] RIP: 0033:0x7f23d618e929 [ 739.029278][T17056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.029297][T17056] RSP: 002b:00007ffc519a6bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 739.029318][T17056] RAX: ffffffffffffffda RBX: 00000000000b467d RCX: 00007f23d618e929 [ 739.029334][T17056] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f23d63b5fac [ 739.029349][T17056] RBP: 0000000000000032 R08: 00007f23d70b5000 R09: 00000010519a6ebf [ 739.029364][T17056] R10: 00007ffc519a6cc0 R11: 0000000000000246 R12: 00007f23d63b5fac [ 739.029378][T17056] R13: 00007ffc519a6cc0 R14: 00000000000b46af R15: 00007ffc519a6ce0 [ 739.029411][T17056] [ 739.191085][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.347894][T17066] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 739.402192][T17076] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 740.060905][T17083] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 740.334853][T17086] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 740.354658][T17086] FAULT_INJECTION: forcing a failure. [ 740.354658][T17086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.409732][T17086] CPU: 0 UID: 0 PID: 17086 Comm: syz.0.2086 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 740.409768][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.409782][T17086] Call Trace: [ 740.409790][T17086] [ 740.409800][T17086] dump_stack_lvl+0x16c/0x1f0 [ 740.409840][T17086] should_fail_ex+0x512/0x640 [ 740.409881][T17086] _copy_to_user+0x32/0xd0 [ 740.409907][T17086] simple_read_from_buffer+0xcb/0x170 [ 740.409942][T17086] proc_fail_nth_read+0x197/0x270 [ 740.409973][T17086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.410013][T17086] ? rw_verify_area+0xcf/0x680 [ 740.410043][T17086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.410073][T17086] vfs_read+0x1e4/0xc60 [ 740.410111][T17086] ? __pfx___mutex_lock+0x10/0x10 [ 740.410146][T17086] ? __pfx_vfs_read+0x10/0x10 [ 740.410190][T17086] ? __fget_files+0x20e/0x3c0 [ 740.410232][T17086] ksys_read+0x12a/0x250 [ 740.410265][T17086] ? __pfx_ksys_read+0x10/0x10 [ 740.410309][T17086] do_syscall_64+0xcd/0x490 [ 740.410347][T17086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.410371][T17086] RIP: 0033:0x7fe57ff8d33c [ 740.410391][T17086] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 740.410414][T17086] RSP: 002b:00007fe57ddf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.410437][T17086] RAX: ffffffffffffffda RBX: 00007fe5801b5fa0 RCX: 00007fe57ff8d33c [ 740.410453][T17086] RDX: 000000000000000f RSI: 00007fe57ddf60a0 RDI: 0000000000000004 [ 740.410468][T17086] RBP: 00007fe57ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 740.410483][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 740.410497][T17086] R13: 0000000000000000 R14: 00007fe5801b5fa0 R15: 00007fff96672af8 [ 740.410530][T17086] [ 740.690224][T17089] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163eaa9 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 740.705937][T17089] Call Trace: [ 740.709292][T17089] [ 740.712248][T17089] ? __pfx_mce_cpu_restart+0x10/0x10 [ 740.717574][T17089] mce_cpu_restart+0x98/0xb0 [ 740.722208][T17089] smp_call_function_many_cond+0xef9/0x1510 [ 740.728136][T17089] ? __pfx_mce_cpu_restart+0x10/0x10 [ 740.733476][T17089] ? lockdep_hardirqs_on+0x7c/0x110 [ 740.738722][T17089] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 740.744575][T17089] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 740.750943][T17089] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 740.756978][T17089] ? __pfx_mce_cpu_restart+0x10/0x10 [ 740.762402][T17089] on_each_cpu_cond_mask+0x40/0x90 [ 740.767550][T17089] set_bank+0x240/0x3a0 [ 740.771746][T17089] ? __pfx_set_bank+0x10/0x10 [ 740.776461][T17089] ? find_held_lock+0x2b/0x80 [ 740.781184][T17089] ? __pfx_set_bank+0x10/0x10 [ 740.785909][T17089] dev_attr_store+0x58/0x80 [ 740.790457][T17089] ? __pfx_dev_attr_store+0x10/0x10 [ 740.795696][T17089] sysfs_kf_write+0xf2/0x150 [ 740.800441][T17089] kernfs_fop_write_iter+0x351/0x510 [ 740.805743][T17089] ? __pfx_sysfs_kf_write+0x10/0x10 [ 740.810960][T17089] vfs_write+0x6c4/0x1150 [ 740.815315][T17089] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 740.821135][T17089] ? __pfx___mutex_lock+0x10/0x10 [ 740.826179][T17089] ? __pfx_vfs_write+0x10/0x10 [ 740.830985][T17089] ksys_write+0x12a/0x250 [ 740.835333][T17089] ? __pfx_ksys_write+0x10/0x10 [ 740.840209][T17089] do_syscall_64+0xcd/0x490 [ 740.844733][T17089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.850638][T17089] RIP: 0033:0x7fe57ff8e929 [ 740.855056][T17089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.874683][T17089] RSP: 002b:00007fe57ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 740.883110][T17089] RAX: ffffffffffffffda RBX: 00007fe5801b5fa0 RCX: 00007fe57ff8e929 [ 740.891093][T17089] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 740.899069][T17089] RBP: 00007fe580010b39 R08: 0000000000000000 R09: 0000000000000000 [ 740.907041][T17089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.915020][T17089] R13: 0000000000000000 R14: 00007fe5801b5fa0 R15: 00007fff96672af8 [ 740.923007][T17089] [ 740.976967][T17091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2088'. [ 741.009673][T17089] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2087'. [ 741.081331][T17089] veth0_macvtap: left promiscuous mode [ 741.590390][ T67] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 3402 with max blocks 99 with error 117 [ 741.618286][ T67] EXT4-fs (sda1): This should not happen!! Data will be lost [ 741.618286][ T67] [ 741.633014][ T67] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 910 with max blocks 6 with error 117 [ 741.646101][ T67] EXT4-fs (sda1): This should not happen!! Data will be lost [ 741.646101][ T67] [ 742.453978][T17102] random: crng reseeded on system resumption [ 743.551607][T17141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 745.185598][T17173] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 746.881002][T17205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 747.267038][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.328307][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.570025][T17212] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 747.763952][T17219] random: crng reseeded on system resumption [ 748.694585][T17233] netlink: set zone limit has 8 unknown bytes [ 749.032854][T17259] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2117'. [ 749.156727][T17256] CIFS mount error: No usable UNC path provided in device string! [ 749.156727][T17256] [ 749.235358][T17256] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 749.972427][T17272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2119'. [ 750.784272][T17301] ubi: mtd0 is already attached to ubi0 [ 751.213805][T17279] FAULT_INJECTION: forcing a failure. [ 751.213805][T17279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 751.227376][T17279] CPU: 1 UID: 0 PID: 17279 Comm: syz.0.2120 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 751.227412][T17279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.227428][T17279] Call Trace: [ 751.227437][T17279] [ 751.227447][T17279] dump_stack_lvl+0x16c/0x1f0 [ 751.227491][T17279] should_fail_ex+0x512/0x640 [ 751.227534][T17279] should_fail_alloc_page+0xe7/0x130 [ 751.227563][T17279] prepare_alloc_pages+0x3c2/0x610 [ 751.227595][T17279] ? rcu_is_watching+0x12/0xc0 [ 751.227626][T17279] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 751.227665][T17279] ? __lock_acquire+0xb8a/0x1c90 [ 751.227713][T17279] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 751.227752][T17279] ? do_raw_spin_lock+0x12c/0x2b0 [ 751.227790][T17279] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 751.227828][T17279] ? find_held_lock+0x2b/0x80 [ 751.227866][T17279] ? __lock_acquire+0xb8a/0x1c90 [ 751.227898][T17279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 751.227939][T17279] ? policy_nodemask+0xea/0x4e0 [ 751.227968][T17279] alloc_pages_mpol+0x1fb/0x550 [ 751.227994][T17279] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 751.228030][T17279] folio_alloc_mpol_noprof+0x36/0x2f0 [ 751.228072][T17279] shmem_alloc_folio+0x135/0x160 [ 751.228107][T17279] shmem_alloc_and_add_folio+0x499/0xc20 [ 751.228151][T17279] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 751.228192][T17279] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 751.228237][T17279] shmem_get_folio_gfp+0x67f/0x1600 [ 751.228281][T17279] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 751.228317][T17279] ? do_raw_read_unlock+0x44/0xe0 [ 751.228347][T17279] shmem_write_begin+0x160/0x300 [ 751.228388][T17279] ? __pfx_shmem_write_begin+0x10/0x10 [ 751.228427][T17279] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 751.228468][T17279] generic_perform_write+0x3d0/0x930 [ 751.228515][T17279] ? __pfx_generic_perform_write+0x10/0x10 [ 751.228553][T17279] ? inode_needs_update_time.part.0+0x191/0x270 [ 751.228603][T17279] shmem_file_write_iter+0x10e/0x140 [ 751.228633][T17279] vfs_write+0x6c4/0x1150 [ 751.228670][T17279] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 751.228699][T17279] ? __pfx___mutex_lock+0x10/0x10 [ 751.228736][T17279] ? __pfx_vfs_write+0x10/0x10 [ 751.228797][T17279] ksys_write+0x12a/0x250 [ 751.228833][T17279] ? __pfx_ksys_write+0x10/0x10 [ 751.228880][T17279] do_syscall_64+0xcd/0x490 [ 751.228921][T17279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.228946][T17279] RIP: 0033:0x7fe57ff8e929 [ 751.228968][T17279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.228994][T17279] RSP: 002b:00007fe57ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 751.229018][T17279] RAX: ffffffffffffffda RBX: 00007fe5801b5fa0 RCX: 00007fe57ff8e929 [ 751.229035][T17279] RDX: 000000000000b8c5 RSI: 0000200000000280 RDI: 000000000000000b [ 751.229058][T17279] RBP: 00007fe580010b39 R08: 0000000000000000 R09: 0000000000000000 [ 751.229074][T17279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.229090][T17279] R13: 0000000000000000 R14: 00007fe5801b5fa0 R15: 00007fff96672af8 [ 751.229126][T17279] [ 751.538777][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.957913][T17304] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 751.978622][T17304] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 752.006961][T17304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 752.068655][T17304] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 752.430496][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2130'. [ 752.532035][T17326] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2129'. [ 752.585981][T17324] CIFS mount error: No usable UNC path provided in device string! [ 752.585981][T17324] [ 752.660271][T17324] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 752.864109][T17329] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 753.240973][T17331] FAULT_INJECTION: forcing a failure. [ 753.240973][T17331] name fail_futex, interval 1, probability 0, space 0, times 0 [ 753.326587][T17331] CPU: 1 UID: 0 PID: 17331 Comm: syz.3.2133 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 753.326620][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 753.326633][T17331] Call Trace: [ 753.326639][T17331] [ 753.326647][T17331] dump_stack_lvl+0x16c/0x1f0 [ 753.326687][T17331] should_fail_ex+0x512/0x640 [ 753.326730][T17331] should_fail_futex+0x4c/0x60 [ 753.326758][T17331] __x64_sys_futex+0x25e/0x4c0 [ 753.326792][T17331] ? __pfx___x64_sys_futex+0x10/0x10 [ 753.326822][T17331] ? xfd_validate_state+0x61/0x180 [ 753.326865][T17331] do_syscall_64+0xcd/0x490 [ 753.326903][T17331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.326928][T17331] RIP: 0033:0x7fadad38e929 [ 753.326948][T17331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.326971][T17331] RSP: 002b:00007ffe78ff2498 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 753.326994][T17331] RAX: ffffffffffffffda RBX: 00000000000b7e3c RCX: 00007fadad38e929 [ 753.327010][T17331] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fadad5b608c [ 753.327025][T17331] RBP: 0000000000000032 R08: 00007fadae200000 R09: 0000001178ff278f [ 753.327040][T17331] R10: 00007ffe78ff2590 R11: 0000000000000246 R12: 00007fadad5b608c [ 753.327055][T17331] R13: 00007ffe78ff2590 R14: 00000000000b7e6e R15: 00007ffe78ff25b0 [ 753.327089][T17331] [ 753.638685][T17341] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 753.707779][T17343] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 753.739226][T16193] Bluetooth: hci0: command 0x0c1a tx timeout [ 754.058961][T16193] Bluetooth: hci2: command 0x0c1a tx timeout [ 754.063970][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 754.138431][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 755.155114][T17369] random: crng reseeded on system resumption [ 755.720437][T17381] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 756.769784][T17400] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2149'. [ 756.902095][T17400] CIFS mount error: No usable UNC path provided in device string! [ 756.902095][T17400] [ 756.928422][T17400] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 757.743430][T17415] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 758.337856][T17422] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 758.966655][T17431] FAULT_INJECTION: forcing a failure. [ 758.966655][T17431] name failslab, interval 1, probability 0, space 0, times 0 [ 759.047120][T17431] CPU: 1 UID: 0 PID: 17431 Comm: syz.3.2156 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 759.047161][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.047177][T17431] Call Trace: [ 759.047186][T17431] [ 759.047195][T17431] dump_stack_lvl+0x16c/0x1f0 [ 759.047240][T17431] should_fail_ex+0x512/0x640 [ 759.047278][T17431] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 759.047322][T17431] should_failslab+0xc2/0x120 [ 759.047349][T17431] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 759.047388][T17431] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 759.047417][T17431] ? __khugepaged_enter+0xc8/0x380 [ 759.047452][T17431] __khugepaged_enter+0xc8/0x380 [ 759.047484][T17431] khugepaged_enter_vma+0x135/0x2c0 [ 759.047517][T17431] hugepage_madvise+0xa8/0xd0 [ 759.047547][T17431] madvise_vma_behavior+0x124e/0x2420 [ 759.047576][T17431] ? mas_prev_setup.constprop.0+0x81/0x830 [ 759.047617][T17431] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 759.047647][T17431] ? __pfx_mas_prev+0x10/0x10 [ 759.047694][T17431] ? find_vma_prev+0xda/0x160 [ 759.047724][T17431] ? __pfx_find_vma_prev+0x10/0x10 [ 759.047775][T17431] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 759.047803][T17431] madvise_walk_vmas+0x1d1/0x2c0 [ 759.047828][T17431] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 759.047865][T17431] madvise_do_behavior+0x15d/0x3f0 [ 759.047900][T17431] ? __pfx_madvise_do_behavior+0x10/0x10 [ 759.047944][T17431] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.047983][T17431] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.048028][T17431] do_madvise+0x161/0x230 [ 759.048065][T17431] ? __pfx_do_madvise+0x10/0x10 [ 759.048092][T17431] ? __pfx_do_sendfile+0x10/0x10 [ 759.048148][T17431] ? xfd_validate_state+0x61/0x180 [ 759.048182][T17431] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 759.048217][T17431] __x64_sys_madvise+0xa9/0x110 [ 759.048246][T17431] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.048280][T17431] do_syscall_64+0xcd/0x490 [ 759.048321][T17431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.048347][T17431] RIP: 0033:0x7fadad38e929 [ 759.048369][T17431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.048393][T17431] RSP: 002b:00007fadae1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 759.048418][T17431] RAX: ffffffffffffffda RBX: 00007fadad5b5fa0 RCX: 00007fadad38e929 [ 759.048436][T17431] RDX: 000000000000000e RSI: 2000040080000004 RDI: 0000000000000000 [ 759.048453][T17431] RBP: 00007fadad410b39 R08: 0000000000000000 R09: 0000000000000000 [ 759.048470][T17431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.048486][T17431] R13: 0000000000000000 R14: 00007fadad5b5fa0 R15: 00007ffe78ff2338 [ 759.048522][T17431] [ 759.318288][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.626212][T17440] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2157'. [ 759.664942][T17438] CIFS mount error: No usable UNC path provided in device string! [ 759.664942][T17438] [ 759.710420][T17438] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 760.711199][T17450] FAULT_INJECTION: forcing a failure. [ 760.711199][T17450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.764612][T17450] CPU: 1 UID: 0 PID: 17450 Comm: syz.1.2160 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 760.764651][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.764666][T17450] Call Trace: [ 760.764676][T17450] [ 760.764687][T17450] dump_stack_lvl+0x16c/0x1f0 [ 760.764730][T17450] should_fail_ex+0x512/0x640 [ 760.764771][T17450] should_fail_alloc_page+0xe7/0x130 [ 760.764797][T17450] prepare_alloc_pages+0x3c2/0x610 [ 760.764827][T17450] ? rcu_is_watching+0x12/0xc0 [ 760.764871][T17450] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 760.764911][T17450] ? __lock_acquire+0xb8a/0x1c90 [ 760.764951][T17450] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 760.764987][T17450] ? do_raw_spin_lock+0x12c/0x2b0 [ 760.765022][T17450] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 760.765058][T17450] ? find_held_lock+0x2b/0x80 [ 760.765093][T17450] ? __lock_acquire+0xb8a/0x1c90 [ 760.765126][T17450] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.765167][T17450] ? policy_nodemask+0xea/0x4e0 [ 760.765197][T17450] alloc_pages_mpol+0x1fb/0x550 [ 760.765226][T17450] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 760.765259][T17450] folio_alloc_mpol_noprof+0x36/0x2f0 [ 760.765291][T17450] shmem_alloc_folio+0x135/0x160 [ 760.765325][T17450] shmem_alloc_and_add_folio+0x499/0xc20 [ 760.765370][T17450] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 760.765409][T17450] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 760.765449][T17450] shmem_get_folio_gfp+0x67f/0x1600 [ 760.765494][T17450] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 760.765530][T17450] ? do_raw_read_unlock+0x44/0xe0 [ 760.765562][T17450] shmem_write_begin+0x160/0x300 [ 760.765602][T17450] ? __pfx_shmem_write_begin+0x10/0x10 [ 760.765640][T17450] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 760.765680][T17450] generic_perform_write+0x3d0/0x930 [ 760.765727][T17450] ? __pfx_generic_perform_write+0x10/0x10 [ 760.765758][T17450] ? inode_needs_update_time.part.0+0x191/0x270 [ 760.765796][T17450] shmem_file_write_iter+0x10e/0x140 [ 760.765819][T17450] vfs_write+0x6c4/0x1150 [ 760.765859][T17450] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 760.765882][T17450] ? __pfx___mutex_lock+0x10/0x10 [ 760.765913][T17450] ? __pfx_vfs_write+0x10/0x10 [ 760.765959][T17450] ksys_write+0x12a/0x250 [ 760.765987][T17450] ? __pfx_ksys_write+0x10/0x10 [ 760.766022][T17450] do_syscall_64+0xcd/0x490 [ 760.766053][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.766073][T17450] RIP: 0033:0x7f796698e929 [ 760.766089][T17450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.766109][T17450] RSP: 002b:00007f7967722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 760.766129][T17450] RAX: ffffffffffffffda RBX: 00007f7966bb6080 RCX: 00007f796698e929 [ 760.766142][T17450] RDX: 000000000000b8c5 RSI: 0000200000000280 RDI: 000000000000000b [ 760.766155][T17450] RBP: 00007f7966a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 760.766168][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.766180][T17450] R13: 0000000000000000 R14: 00007f7966bb6080 R15: 00007fff9506b6b8 [ 760.766208][T17450] [ 761.077770][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.287254][T17453] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 761.818915][T17450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 761.830670][T17450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.837004][T17450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 761.846839][T17450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 762.182476][T17469] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2164'. [ 762.249874][T17468] CIFS mount error: No usable UNC path provided in device string! [ 762.249874][T17468] [ 762.260083][T17468] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 763.259011][T17467] netlink: set zone limit has 8 unknown bytes [ 763.578591][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 763.837704][T17504] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 763.913592][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 763.920599][T16193] Bluetooth: hci3: command 0x0c1a tx timeout [ 763.926661][T16193] Bluetooth: hci2: command 0x0c1a tx timeout [ 764.206665][T17516] random: crng reseeded on system resumption [ 765.108350][T17529] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 765.366274][T17538] Invalid ELF header magic: != ELF [ 766.160417][T17550] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 766.853977][T17557] netlink: set zone limit has 8 unknown bytes [ 766.948508][ T13] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:1: bg 7: bad block bitmap checksum [ 766.984829][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 925 with max blocks 3 with error 74 [ 767.017915][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 767.017915][ T13] [ 767.368101][T17576] FAULT_INJECTION: forcing a failure. [ 767.368101][T17576] name fail_futex, interval 1, probability 0, space 0, times 0 [ 767.381475][T17576] CPU: 0 UID: 0 PID: 17576 Comm: syz.4.2180 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 767.381506][T17576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 767.381518][T17576] Call Trace: [ 767.381525][T17576] [ 767.381533][T17576] dump_stack_lvl+0x16c/0x1f0 [ 767.381566][T17576] should_fail_ex+0x512/0x640 [ 767.381604][T17576] should_fail_futex+0x4c/0x60 [ 767.381629][T17576] __x64_sys_futex+0x25e/0x4c0 [ 767.381664][T17576] ? __pfx___x64_sys_futex+0x10/0x10 [ 767.381693][T17576] ? xfd_validate_state+0x61/0x180 [ 767.381735][T17576] do_syscall_64+0xcd/0x490 [ 767.381772][T17576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.381796][T17576] RIP: 0033:0x7f23d618e929 [ 767.381816][T17576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.381838][T17576] RSP: 002b:00007ffc519a6bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 767.381861][T17576] RAX: ffffffffffffffda RBX: 00000000000bb56b RCX: 00007f23d618e929 [ 767.381885][T17576] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f23d63b608c [ 767.381900][T17576] RBP: 0000000000000032 R08: 00007f23d70b5000 R09: 00000011519a6ebf [ 767.381915][T17576] R10: 00007ffc519a6cc0 R11: 0000000000000246 R12: 00007f23d63b608c [ 767.381930][T17576] R13: 00007ffc519a6cc0 R14: 00000000000bb59d R15: 00007ffc519a6ce0 [ 767.381961][T17576] [ 768.830245][T17624] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 769.603962][T17641] FAULT_INJECTION: forcing a failure. [ 769.603962][T17641] name failslab, interval 1, probability 0, space 0, times 0 [ 769.630197][T17641] CPU: 0 UID: 0 PID: 17641 Comm: syz.1.2190 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 769.630236][T17641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.630252][T17641] Call Trace: [ 769.630262][T17641] [ 769.630272][T17641] dump_stack_lvl+0x16c/0x1f0 [ 769.630316][T17641] should_fail_ex+0x512/0x640 [ 769.630351][T17641] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 769.630393][T17641] should_failslab+0xc2/0x120 [ 769.630419][T17641] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 769.630457][T17641] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 769.630485][T17641] ? __khugepaged_enter+0xc8/0x380 [ 769.630541][T17641] __khugepaged_enter+0xc8/0x380 [ 769.630574][T17641] khugepaged_enter_vma+0x135/0x2c0 [ 769.630608][T17641] hugepage_madvise+0xa8/0xd0 [ 769.630637][T17641] madvise_vma_behavior+0x124e/0x2420 [ 769.630665][T17641] ? mas_prev_setup.constprop.0+0x81/0x830 [ 769.630705][T17641] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 769.630734][T17641] ? __pfx_mas_prev+0x10/0x10 [ 769.630780][T17641] ? find_vma_prev+0xda/0x160 [ 769.630816][T17641] ? __pfx_find_vma_prev+0x10/0x10 [ 769.630867][T17641] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 769.630896][T17641] madvise_walk_vmas+0x1d1/0x2c0 [ 769.630925][T17641] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 769.630962][T17641] madvise_do_behavior+0x15d/0x3f0 [ 769.630996][T17641] ? __pfx_madvise_do_behavior+0x10/0x10 [ 769.631038][T17641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 769.631074][T17641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 769.631117][T17641] do_madvise+0x161/0x230 [ 769.631145][T17641] ? __pfx_do_madvise+0x10/0x10 [ 769.631170][T17641] ? __pfx_do_sendfile+0x10/0x10 [ 769.631221][T17641] ? xfd_validate_state+0x61/0x180 [ 769.631253][T17641] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 769.631286][T17641] __x64_sys_madvise+0xa9/0x110 [ 769.631312][T17641] ? lockdep_hardirqs_on+0x7c/0x110 [ 769.631348][T17641] do_syscall_64+0xcd/0x490 [ 769.631388][T17641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.631413][T17641] RIP: 0033:0x7f796698e929 [ 769.631435][T17641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.631459][T17641] RSP: 002b:00007f7967743038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 769.631484][T17641] RAX: ffffffffffffffda RBX: 00007f7966bb5fa0 RCX: 00007f796698e929 [ 769.631502][T17641] RDX: 000000000000000e RSI: 2000040080000004 RDI: 0000000000000000 [ 769.631518][T17641] RBP: 00007f7966a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 769.631534][T17641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.631550][T17641] R13: 0000000000000000 R14: 00007f7966bb5fa0 R15: 00007fff9506b6b8 [ 769.631585][T17641] [ 770.266843][T17645] FAULT_INJECTION: forcing a failure. [ 770.266843][T17645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.320202][T17645] CPU: 0 UID: 0 PID: 17645 Comm: syz.1.2191 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 770.320234][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.320246][T17645] Call Trace: [ 770.320255][T17645] [ 770.320265][T17645] dump_stack_lvl+0x16c/0x1f0 [ 770.320304][T17645] should_fail_ex+0x512/0x640 [ 770.320343][T17645] _copy_from_user+0x2e/0xd0 [ 770.320365][T17645] get_timespec64+0x8b/0x1b0 [ 770.320395][T17645] ? __pfx_get_timespec64+0x10/0x10 [ 770.320422][T17645] ? find_held_lock+0x2b/0x80 [ 770.320467][T17645] __x64_sys_futex+0x288/0x4c0 [ 770.320502][T17645] ? __pfx___x64_sys_futex+0x10/0x10 [ 770.320545][T17645] do_syscall_64+0xcd/0x490 [ 770.320576][T17645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.320595][T17645] RIP: 0033:0x7f796698e929 [ 770.320610][T17645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.320628][T17645] RSP: 002b:00007fff9506b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 770.320647][T17645] RAX: ffffffffffffffda RBX: 00000000000bc0be RCX: 00007f796698e929 [ 770.320660][T17645] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7966bb608c [ 770.320671][T17645] RBP: 0000000000000032 R08: 00007f7967744000 R09: 000000109506bb0f [ 770.320683][T17645] R10: 00007fff9506b910 R11: 0000000000000246 R12: 00007f7966bb608c [ 770.320695][T17645] R13: 00007fff9506b910 R14: 00000000000bc0f0 R15: 00007fff9506b930 [ 770.320721][T17645] [ 770.566275][T17637] netlink: set zone limit has 8 unknown bytes [ 771.607866][T17677] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 771.996354][T17691] FAULT_INJECTION: forcing a failure. [ 771.996354][T17691] name failslab, interval 1, probability 0, space 0, times 0 [ 772.032989][T17691] CPU: 1 UID: 0 PID: 17691 Comm: syz.1.2199 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 772.033023][T17691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 772.033038][T17691] Call Trace: [ 772.033046][T17691] [ 772.033055][T17691] dump_stack_lvl+0x16c/0x1f0 [ 772.033094][T17691] should_fail_ex+0x512/0x640 [ 772.033127][T17691] ? __kmalloc_noprof+0xbf/0x510 [ 772.033163][T17691] ? kernfs_fop_write_iter+0x237/0x510 [ 772.033187][T17691] should_failslab+0xc2/0x120 [ 772.033211][T17691] __kmalloc_noprof+0xd2/0x510 [ 772.033254][T17691] kernfs_fop_write_iter+0x237/0x510 [ 772.033294][T17691] vfs_write+0x6c4/0x1150 [ 772.033328][T17691] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 772.033356][T17691] ? __pfx___mutex_lock+0x10/0x10 [ 772.033391][T17691] ? __pfx_vfs_write+0x10/0x10 [ 772.033447][T17691] ksys_write+0x12a/0x250 [ 772.033480][T17691] ? __pfx_ksys_write+0x10/0x10 [ 772.033523][T17691] do_syscall_64+0xcd/0x490 [ 772.033561][T17691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.033584][T17691] RIP: 0033:0x7f796698e929 [ 772.033603][T17691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.033625][T17691] RSP: 002b:00007f7967743038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 772.033648][T17691] RAX: ffffffffffffffda RBX: 00007f7966bb5fa0 RCX: 00007f796698e929 [ 772.033664][T17691] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 772.033678][T17691] RBP: 00007f7967743090 R08: 0000000000000000 R09: 0000000000000000 [ 772.033692][T17691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.033707][T17691] R13: 0000000000000000 R14: 00007f7966bb5fa0 R15: 00007fff9506b6b8 [ 772.033741][T17691] [ 772.216325][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.335829][ T2950] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 3489 with max blocks 12 with error 117 [ 772.348807][ T2950] EXT4-fs (sda1): This should not happen!! Data will be lost [ 772.348807][ T2950] [ 772.391848][T17672] random: crng reseeded on system resumption [ 772.462472][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 772.538205][T17701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2201'. [ 772.846312][T17701] veth0_macvtap: left promiscuous mode [ 773.200867][T17713] FAULT_INJECTION: forcing a failure. [ 773.200867][T17713] name failslab, interval 1, probability 0, space 0, times 0 [ 773.395949][T17713] CPU: 0 UID: 0 PID: 17713 Comm: syz.3.2204 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 773.395974][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 773.395983][T17713] Call Trace: [ 773.395989][T17713] [ 773.395996][T17713] dump_stack_lvl+0x16c/0x1f0 [ 773.396023][T17713] should_fail_ex+0x512/0x640 [ 773.396044][T17713] ? fs_reclaim_acquire+0xae/0x150 [ 773.396064][T17713] ? tomoyo_encode2+0x100/0x3e0 [ 773.396094][T17713] should_failslab+0xc2/0x120 [ 773.396110][T17713] __kmalloc_noprof+0xd2/0x510 [ 773.396133][T17713] ? d_absolute_path+0x136/0x1a0 [ 773.396152][T17713] tomoyo_encode2+0x100/0x3e0 [ 773.396174][T17713] tomoyo_encode+0x29/0x50 [ 773.396192][T17713] tomoyo_realpath_from_path+0x18f/0x6e0 [ 773.396218][T17713] tomoyo_path_number_perm+0x245/0x580 [ 773.396234][T17713] ? tomoyo_path_number_perm+0x237/0x580 [ 773.396253][T17713] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 773.396269][T17713] ? __lock_acquire+0xb8a/0x1c90 [ 773.396307][T17713] ? d_add+0x47a/0x780 [ 773.396321][T17713] ? do_raw_spin_unlock+0x172/0x230 [ 773.396335][T17713] ? current_check_access_path+0x33c/0x460 [ 773.396354][T17713] ? __pfx_current_check_access_path+0x10/0x10 [ 773.396373][T17713] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 773.396389][T17713] ? lookup_dcache+0x66/0x170 [ 773.396408][T17713] tomoyo_path_mkdir+0x9b/0xe0 [ 773.396421][T17713] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 773.396440][T17713] security_path_mkdir+0x154/0x2f0 [ 773.396458][T17713] do_mkdirat+0x175/0x3e0 [ 773.396481][T17713] ? __pfx_do_mkdirat+0x10/0x10 [ 773.396503][T17713] ? getname_flags.part.0+0x1c5/0x550 [ 773.396522][T17713] __x64_sys_mkdir+0xef/0x140 [ 773.396543][T17713] do_syscall_64+0xcd/0x490 [ 773.396565][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.396579][T17713] RIP: 0033:0x7fadad38e929 [ 773.396592][T17713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.396605][T17713] RSP: 002b:00007fadae1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 773.396619][T17713] RAX: ffffffffffffffda RBX: 00007fadad5b5fa0 RCX: 00007fadad38e929 [ 773.396629][T17713] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 773.396637][T17713] RBP: 00007fadad410b39 R08: 0000000000000000 R09: 0000000000000000 [ 773.396646][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.396655][T17713] R13: 0000000000000000 R14: 00007fadad5b5fa0 R15: 00007ffe78ff2338 [ 773.396674][T17713] [ 773.396692][T17713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 773.983455][T17722] FAULT_INJECTION: forcing a failure. [ 773.983455][T17722] name failslab, interval 1, probability 0, space 0, times 0 [ 773.996241][T17722] CPU: 0 UID: 0 PID: 17722 Comm: syz.4.2208 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 773.996277][T17722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 773.996291][T17722] Call Trace: [ 773.996300][T17722] [ 773.996310][T17722] dump_stack_lvl+0x16c/0x1f0 [ 773.996354][T17722] should_fail_ex+0x512/0x640 [ 773.996390][T17722] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 773.996432][T17722] should_failslab+0xc2/0x120 [ 773.996458][T17722] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 773.996491][T17722] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 773.996516][T17722] ? __khugepaged_enter+0xc8/0x380 [ 773.996551][T17722] __khugepaged_enter+0xc8/0x380 [ 773.996581][T17722] khugepaged_enter_vma+0x135/0x2c0 [ 773.996613][T17722] hugepage_madvise+0xa8/0xd0 [ 773.996643][T17722] madvise_vma_behavior+0x124e/0x2420 [ 773.996671][T17722] ? mas_prev_setup.constprop.0+0x81/0x830 [ 773.996710][T17722] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 773.996739][T17722] ? __pfx_mas_prev+0x10/0x10 [ 773.996784][T17722] ? find_vma_prev+0xda/0x160 [ 773.996814][T17722] ? __pfx_find_vma_prev+0x10/0x10 [ 773.996865][T17722] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 773.996892][T17722] madvise_walk_vmas+0x1d1/0x2c0 [ 773.996921][T17722] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 773.996958][T17722] madvise_do_behavior+0x15d/0x3f0 [ 773.996991][T17722] ? __pfx_madvise_do_behavior+0x10/0x10 [ 773.997038][T17722] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 773.997075][T17722] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 773.997119][T17722] do_madvise+0x161/0x230 [ 773.997148][T17722] ? __pfx_do_madvise+0x10/0x10 [ 773.997174][T17722] ? __pfx_do_sendfile+0x10/0x10 [ 773.997229][T17722] ? xfd_validate_state+0x61/0x180 [ 773.997260][T17722] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 773.997293][T17722] __x64_sys_madvise+0xa9/0x110 [ 773.997321][T17722] ? lockdep_hardirqs_on+0x7c/0x110 [ 773.997356][T17722] do_syscall_64+0xcd/0x490 [ 773.997395][T17722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.997421][T17722] RIP: 0033:0x7f23d618e929 [ 773.997441][T17722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.997466][T17722] RSP: 002b:00007f23d70b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 773.997489][T17722] RAX: ffffffffffffffda RBX: 00007f23d63b5fa0 RCX: 00007f23d618e929 [ 773.997507][T17722] RDX: 000000000000000e RSI: 2000040080000004 RDI: 0000000000000000 [ 773.997523][T17722] RBP: 00007f23d6210b39 R08: 0000000000000000 R09: 0000000000000000 [ 773.997539][T17722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.997555][T17722] R13: 0000000000000000 R14: 00007f23d63b5fa0 R15: 00007ffc519a6a68 [ 773.997590][T17722] [ 774.327459][T17724] Invalid ELF header magic: != ELF [ 774.591785][T17735] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2207'. [ 774.602618][T17735] : renamed from hsr0 (while UP) [ 775.280237][T17747] FAULT_INJECTION: forcing a failure. [ 775.280237][T17747] name failslab, interval 1, probability 0, space 0, times 0 [ 775.313726][T17744] FAULT_INJECTION: forcing a failure. [ 775.313726][T17744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.327625][T17744] CPU: 0 UID: 0 PID: 17744 Comm: syz.3.2213 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 775.327657][T17744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.327670][T17744] Call Trace: [ 775.327678][T17744] [ 775.327687][T17744] dump_stack_lvl+0x16c/0x1f0 [ 775.327726][T17744] should_fail_ex+0x512/0x640 [ 775.327765][T17744] _copy_from_user+0x2e/0xd0 [ 775.327788][T17744] get_timespec64+0x8b/0x1b0 [ 775.327817][T17744] ? __pfx_get_timespec64+0x10/0x10 [ 775.327904][T17744] ? find_held_lock+0x2b/0x80 [ 775.327937][T17744] __x64_sys_futex+0x288/0x4c0 [ 775.327971][T17744] ? __pfx___x64_sys_futex+0x10/0x10 [ 775.328014][T17744] do_syscall_64+0xcd/0x490 [ 775.328047][T17744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.328068][T17744] RIP: 0033:0x7fadad38e929 [ 775.328087][T17744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.328107][T17744] RSP: 002b:00007ffe78ff2498 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 775.328165][T17744] RAX: ffffffffffffffda RBX: 00000000000bd475 RCX: 00007fadad38e929 [ 775.328181][T17744] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fadad5b608c [ 775.328195][T17744] RBP: 0000000000000032 R08: 00007fadae200000 R09: 0000001078ff278f [ 775.328209][T17744] R10: 00007ffe78ff2590 R11: 0000000000000246 R12: 00007fadad5b608c [ 775.328226][T17744] R13: 00007ffe78ff2590 R14: 00000000000bd4a7 R15: 00007ffe78ff25b0 [ 775.328255][T17744] [ 775.522393][T17747] CPU: 0 UID: 0 PID: 17747 Comm: syz.0.2214 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 775.522431][T17747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.522445][T17747] Call Trace: [ 775.522453][T17747] [ 775.522463][T17747] dump_stack_lvl+0x16c/0x1f0 [ 775.522503][T17747] should_fail_ex+0x512/0x640 [ 775.522536][T17747] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 775.522577][T17747] should_failslab+0xc2/0x120 [ 775.522602][T17747] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 775.522638][T17747] ? __alloc_skb+0x2b2/0x380 [ 775.522678][T17747] __alloc_skb+0x2b2/0x380 [ 775.522711][T17747] ? __pfx___alloc_skb+0x10/0x10 [ 775.522748][T17747] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 775.522780][T17747] netlink_alloc_large_skb+0x69/0x130 [ 775.522809][T17747] netlink_sendmsg+0x6a1/0xdd0 [ 775.522840][T17747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.522878][T17747] ____sys_sendmsg+0xa98/0xc70 [ 775.522906][T17747] ? copy_msghdr_from_user+0x10a/0x160 [ 775.522940][T17747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.522983][T17747] ___sys_sendmsg+0x134/0x1d0 [ 775.523020][T17747] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.523052][T17747] ? __lock_acquire+0x622/0x1c90 [ 775.523128][T17747] __sys_sendmsg+0x16d/0x220 [ 775.523164][T17747] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.523213][T17747] do_syscall_64+0xcd/0x490 [ 775.523252][T17747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.523275][T17747] RIP: 0033:0x7fe57ff8e929 [ 775.523295][T17747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.523318][T17747] RSP: 002b:00007fe57ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.523342][T17747] RAX: ffffffffffffffda RBX: 00007fe5801b5fa0 RCX: 00007fe57ff8e929 [ 775.523359][T17747] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 775.523374][T17747] RBP: 00007fe57ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 775.523390][T17747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.523404][T17747] R13: 0000000000000000 R14: 00007fe5801b5fa0 R15: 00007fff96672af8 [ 775.523437][T17747] [ 776.258882][T17766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2215'. [ 776.792529][T17776] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2219'. [ 776.955357][T17776] CIFS mount error: No usable UNC path provided in device string! [ 776.955357][T17776] [ 777.005988][T17776] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 778.662111][T17809] FAULT_INJECTION: forcing a failure. [ 778.662111][T17809] name fail_futex, interval 1, probability 0, space 0, times 0 [ 778.703180][T17809] CPU: 0 UID: 0 PID: 17809 Comm: syz.3.2226 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 778.703212][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.703225][T17809] Call Trace: [ 778.703232][T17809] [ 778.703241][T17809] dump_stack_lvl+0x16c/0x1f0 [ 778.703277][T17809] should_fail_ex+0x512/0x640 [ 778.703313][T17809] should_fail_futex+0x4c/0x60 [ 778.703337][T17809] __x64_sys_futex+0x25e/0x4c0 [ 778.703367][T17809] ? __pfx___x64_sys_futex+0x10/0x10 [ 778.703393][T17809] ? xfd_validate_state+0x61/0x180 [ 778.703431][T17809] do_syscall_64+0xcd/0x490 [ 778.703466][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.703489][T17809] RIP: 0033:0x7fadad38e929 [ 778.703508][T17809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.703529][T17809] RSP: 002b:00007ffe78ff2498 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 778.703551][T17809] RAX: ffffffffffffffda RBX: 00000000000be189 RCX: 00007fadad38e929 [ 778.703564][T17809] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fadad5b608c [ 778.703575][T17809] RBP: 0000000000000032 R08: 00007fadae200000 R09: 0000001178ff278f [ 778.703589][T17809] R10: 00007ffe78ff2590 R11: 0000000000000246 R12: 00007fadad5b608c [ 778.703602][T17809] R13: 00007ffe78ff2590 R14: 00000000000be1bb R15: 00007ffe78ff25b0 [ 778.703632][T17809] [ 779.804061][T17823] FAULT_INJECTION: forcing a failure. [ 779.804061][T17823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.943168][T17823] CPU: 0 UID: 0 PID: 17823 Comm: syz.0.2227 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 779.943208][T17823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.943224][T17823] Call Trace: [ 779.943233][T17823] [ 779.943244][T17823] dump_stack_lvl+0x16c/0x1f0 [ 779.943289][T17823] should_fail_ex+0x512/0x640 [ 779.943327][T17823] ? page_copy_sane+0xcd/0x2d0 [ 779.943366][T17823] copy_folio_from_iter_atomic+0x375/0x1aa0 [ 779.943411][T17823] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 779.943437][T17823] ? shmem_write_begin+0x176/0x300 [ 779.943478][T17823] ? __pfx_shmem_write_begin+0x10/0x10 [ 779.943518][T17823] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 779.943559][T17823] generic_perform_write+0x22c/0x930 [ 779.943612][T17823] ? __mark_inode_dirty+0x680/0xe50 [ 779.943648][T17823] ? __pfx_generic_perform_write+0x10/0x10 [ 779.943692][T17823] ? generic_update_time+0xcf/0xf0 [ 779.943717][T17823] ? mnt_put_write_access_file+0x45/0xf0 [ 779.943757][T17823] shmem_file_write_iter+0x10e/0x140 [ 779.943787][T17823] vfs_write+0x6c4/0x1150 [ 779.943825][T17823] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 779.943854][T17823] ? __pfx___mutex_lock+0x10/0x10 [ 779.943892][T17823] ? __pfx_vfs_write+0x10/0x10 [ 779.943954][T17823] ksys_write+0x12a/0x250 [ 779.943991][T17823] ? __pfx_ksys_write+0x10/0x10 [ 779.944039][T17823] do_syscall_64+0xcd/0x490 [ 779.944080][T17823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.944107][T17823] RIP: 0033:0x7fe57ff8e929 [ 779.944129][T17823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.944153][T17823] RSP: 002b:00007fe57ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.944177][T17823] RAX: ffffffffffffffda RBX: 00007fe5801b5fa0 RCX: 00007fe57ff8e929 [ 779.944195][T17823] RDX: 000000000000b8c5 RSI: 0000200000000280 RDI: 000000000000000b [ 779.944211][T17823] RBP: 00007fe580010b39 R08: 0000000000000000 R09: 0000000000000000 [ 779.944227][T17823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.944243][T17823] R13: 0000000000000000 R14: 00007fe5801b5fa0 R15: 00007fff96672af8 [ 779.944279][T17823] [ 781.130663][T17844] vivid-009: ================= START STATUS ================= [ 781.186117][T17844] vivid-009: Enable Output Cropping: true [ 781.193593][T17844] vivid-009: Enable Output Composing: true [ 781.201338][T17844] vivid-009: Enable Output Scaler: true [ 781.214972][T17844] vivid-009: Tx RGB Quantization Range: Automatic [ 781.221773][T17844] vivid-009: Transmit Mode: HDMI [ 781.226901][T17844] vivid-009: Hotplug Present: 0x00000000 [ 781.236989][T17844] vivid-009: RxSense Present: 0x00000000 [ 781.277634][T17856] ptrace attach of "./syz-executor exec"[5842] was attempted by "./5}0O_K{b9f^~\x09wKL~aJ\x0c\x22ѯh&HY{Y3\x07Mٖ^T\x0b]'*ȏG#ە1KEmE=-wcײfD7М#TCvdluu+M\x0a$=pԎPxʾs%mTU־^Qm-@dSh|b5^dTQĔ{c׍c]5;>B(GcQ\x0bT4/T7^}\x0bb|t#-EYoIwL+;5q\x09wBwʰ]j)s-;-b\x09{W6Rò>g:ƍ{#=@w&X| NjlN?NB\x1bVn\x22K *08nv\x09wJ\x0cC9)].R..:Z 2\x1bHO;٘hAZ6$`MNZKZy\x1b'(gw(q\x22'~+\x0dgK><VՏxS7 [ 781.285413][T17844] vivid-009: EDID Present: 0x00000000 [ 781.386988][T17844] vivid-009: ================== END STATUS ================== [ 781.862312][T17871] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 782.280734][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 782.739787][T17893] FAULT_INJECTION: forcing a failure. [ 782.739787][T17893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.758464][T17893] CPU: 0 UID: 0 PID: 17893 Comm: syz.4.2240 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 782.758501][T17893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 782.758516][T17893] Call Trace: [ 782.758525][T17893] [ 782.758533][T17893] dump_stack_lvl+0x16c/0x1f0 [ 782.758572][T17893] should_fail_ex+0x512/0x640 [ 782.758594][T17893] ? page_copy_sane+0xcd/0x2d0 [ 782.758616][T17893] copy_folio_from_iter_atomic+0x375/0x1aa0 [ 782.758640][T17893] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 782.758655][T17893] ? shmem_write_begin+0x176/0x300 [ 782.758677][T17893] ? __pfx_shmem_write_begin+0x10/0x10 [ 782.758698][T17893] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 782.758720][T17893] generic_perform_write+0x22c/0x930 [ 782.758742][T17893] ? __mark_inode_dirty+0x680/0xe50 [ 782.758761][T17893] ? __pfx_generic_perform_write+0x10/0x10 [ 782.758784][T17893] ? generic_update_time+0xcf/0xf0 [ 782.758797][T17893] ? mnt_put_write_access_file+0x45/0xf0 [ 782.758819][T17893] shmem_file_write_iter+0x10e/0x140 [ 782.758835][T17893] vfs_write+0x6c4/0x1150 [ 782.758855][T17893] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 782.758871][T17893] ? __pfx___mutex_lock+0x10/0x10 [ 782.758891][T17893] ? __pfx_vfs_write+0x10/0x10 [ 782.758924][T17893] ksys_write+0x12a/0x250 [ 782.758944][T17893] ? __pfx_ksys_write+0x10/0x10 [ 782.758971][T17893] do_syscall_64+0xcd/0x490 [ 782.758994][T17893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.759010][T17893] RIP: 0033:0x7f23d618e929 [ 782.759022][T17893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.759035][T17893] RSP: 002b:00007f23d7093038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 782.759049][T17893] RAX: ffffffffffffffda RBX: 00007f23d63b6080 RCX: 00007f23d618e929 [ 782.759059][T17893] RDX: 000000000000b8c5 RSI: 0000200000000280 RDI: 000000000000000b [ 782.759068][T17893] RBP: 00007f23d6210b39 R08: 0000000000000000 R09: 0000000000000000 [ 782.759076][T17893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.759085][T17893] R13: 0000000000000000 R14: 00007f23d63b6080 R15: 00007ffc519a6a68 [ 782.759103][T17893] [ 784.574422][T17926] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 785.317857][T17933] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2248'. [ 785.380868][T17937] netlink: 'syz.0.2247': attribute type 4 has an invalid length. [ 785.431213][T17938] FAULT_INJECTION: forcing a failure. [ 785.431213][T17938] name failslab, interval 1, probability 0, space 0, times 0 [ 785.462994][T17934] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2246'. [ 785.488448][T17938] CPU: 0 UID: 0 PID: 17938 Comm: syz.4.2249 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 785.488482][T17938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.488496][T17938] Call Trace: [ 785.488505][T17938] [ 785.488514][T17938] dump_stack_lvl+0x16c/0x1f0 [ 785.488568][T17938] should_fail_ex+0x512/0x640 [ 785.488607][T17938] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 785.488669][T17938] should_failslab+0xc2/0x120 [ 785.488696][T17938] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 785.488735][T17938] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 785.488765][T17938] ? __khugepaged_enter+0xc8/0x380 [ 785.488800][T17938] __khugepaged_enter+0xc8/0x380 [ 785.488832][T17938] khugepaged_enter_vma+0x135/0x2c0 [ 785.488865][T17938] hugepage_madvise+0xa8/0xd0 [ 785.488894][T17938] madvise_vma_behavior+0x124e/0x2420 [ 785.488934][T17938] ? mt_find+0x3ef/0xa30 [ 785.488964][T17938] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 785.488994][T17938] ? __pfx_mt_find+0x10/0x10 [ 785.489028][T17938] ? find_vma_prev+0xda/0x160 [ 785.489068][T17938] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 785.489097][T17938] ? find_vma+0xbf/0x140 [ 785.489123][T17938] ? __pfx_find_vma+0x10/0x10 [ 785.489160][T17938] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 785.489188][T17938] madvise_walk_vmas+0x1d1/0x2c0 [ 785.489218][T17938] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 785.489256][T17938] madvise_do_behavior+0x15d/0x3f0 [ 785.489290][T17938] ? __pfx_madvise_do_behavior+0x10/0x10 [ 785.489332][T17938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 785.489369][T17938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 785.489413][T17938] do_madvise+0x161/0x230 [ 785.489442][T17938] ? __pfx_do_madvise+0x10/0x10 [ 785.489468][T17938] ? __pfx_do_sendfile+0x10/0x10 [ 785.489520][T17938] ? xfd_validate_state+0x61/0x180 [ 785.489552][T17938] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 785.489586][T17938] __x64_sys_madvise+0xa9/0x110 [ 785.489615][T17938] ? lockdep_hardirqs_on+0x7c/0x110 [ 785.489651][T17938] do_syscall_64+0xcd/0x490 [ 785.489689][T17938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.489716][T17938] RIP: 0033:0x7f23d618e929 [ 785.489737][T17938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.489762][T17938] RSP: 002b:00007f23d70b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 785.489788][T17938] RAX: ffffffffffffffda RBX: 00007f23d63b5fa0 RCX: 00007f23d618e929 [ 785.489805][T17938] RDX: 000000000000000e RSI: 2000040080000004 RDI: 0000000000000000 [ 785.489820][T17938] RBP: 00007f23d6210b39 R08: 0000000000000000 R09: 0000000000000000 [ 785.489836][T17938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.489851][T17938] R13: 0000000000000000 R14: 00007f23d63b5fa0 R15: 00007ffc519a6a68 [ 785.489886][T17938] [ 785.776704][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.204914][T17931] CIFS mount error: No usable UNC path provided in device string! [ 786.204914][T17931] [ 786.264446][T17931] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 786.647318][T17944] random: crng reseeded on system resumption [ 786.715244][T17960] FAULT_INJECTION: forcing a failure. [ 786.715244][T17960] name failslab, interval 1, probability 0, space 0, times 0 [ 786.753624][T17960] CPU: 0 UID: 0 PID: 17960 Comm: syz.0.2254 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 786.753659][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 786.753673][T17960] Call Trace: [ 786.753681][T17960] [ 786.753690][T17960] dump_stack_lvl+0x16c/0x1f0 [ 786.753731][T17960] should_fail_ex+0x512/0x640 [ 786.753777][T17960] ? fs_reclaim_acquire+0xae/0x150 [ 786.753809][T17960] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 786.753843][T17960] should_failslab+0xc2/0x120 [ 786.753869][T17960] __kmalloc_noprof+0xd2/0x510 [ 786.753913][T17960] tomoyo_realpath_from_path+0xc2/0x6e0 [ 786.753952][T17960] ? tomoyo_profile+0x47/0x60 [ 786.753979][T17960] tomoyo_path_perm+0x274/0x460 [ 786.754006][T17960] ? tomoyo_path_perm+0x260/0x460 [ 786.754038][T17960] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 786.754106][T17960] ? __pfx_ima_file_check+0x10/0x10 [ 786.754141][T17960] ? hook_file_truncate+0xc7/0x250 [ 786.754178][T17960] security_file_truncate+0x84/0x1e0 [ 786.754213][T17960] path_openat+0xc10/0x2cb0 [ 786.754261][T17960] ? __pfx_path_openat+0x10/0x10 [ 786.754298][T17960] ? __lock_acquire+0xb8a/0x1c90 [ 786.754336][T17960] do_filp_open+0x20b/0x470 [ 786.754372][T17960] ? __pfx_do_filp_open+0x10/0x10 [ 786.754434][T17960] ? alloc_fd+0x471/0x7d0 [ 786.754479][T17960] do_sys_openat2+0x11b/0x1d0 [ 786.754507][T17960] ? __pfx_do_sys_openat2+0x10/0x10 [ 786.754539][T17960] ? __fget_files+0x20e/0x3c0 [ 786.754578][T17960] __x64_sys_openat+0x174/0x210 [ 786.754608][T17960] ? __pfx___x64_sys_openat+0x10/0x10 [ 786.754635][T17960] ? ksys_write+0x1ac/0x250 [ 786.754677][T17960] do_syscall_64+0xcd/0x490 [ 786.754712][T17960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.754734][T17960] RIP: 0033:0x7fe57ff8e929 [ 786.754766][T17960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.754788][T17960] RSP: 002b:00007fe57ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 786.754810][T17960] RAX: ffffffffffffffda RBX: 00007fe5801b5fa0 RCX: 00007fe57ff8e929 [ 786.754827][T17960] RDX: 0000000000000201 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 786.754842][T17960] RBP: 00007fe57ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 786.754857][T17960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.754871][T17960] R13: 0000000000000001 R14: 00007fe5801b5fa0 R15: 00007fff96672af8 [ 786.754905][T17960] [ 786.754945][T17960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 788.007564][T17968] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2255'. [ 788.053412][T17968] CIFS mount error: No usable UNC path provided in device string! [ 788.053412][T17968] [ 788.063544][T17968] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 789.105647][T17993] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 789.112294][T17993] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 789.169745][T17993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 789.176759][T17993] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 789.428852][T18005] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 790.352609][T18013] FAULT_INJECTION: forcing a failure. [ 790.352609][T18013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.366277][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.4.2264 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 790.366320][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.366329][T18013] Call Trace: [ 790.366335][T18013] [ 790.366341][T18013] dump_stack_lvl+0x16c/0x1f0 [ 790.366368][T18013] should_fail_ex+0x512/0x640 [ 790.366393][T18013] should_fail_alloc_page+0xe7/0x130 [ 790.366409][T18013] prepare_alloc_pages+0x3c2/0x610 [ 790.366428][T18013] ? rcu_is_watching+0x12/0xc0 [ 790.366445][T18013] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 790.366468][T18013] ? __lock_acquire+0xb8a/0x1c90 [ 790.366494][T18013] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 790.366516][T18013] ? do_raw_spin_lock+0x12c/0x2b0 [ 790.366538][T18013] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 790.366559][T18013] ? find_held_lock+0x2b/0x80 [ 790.366579][T18013] ? __lock_acquire+0xb8a/0x1c90 [ 790.366597][T18013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.366620][T18013] ? policy_nodemask+0xea/0x4e0 [ 790.366636][T18013] alloc_pages_mpol+0x1fb/0x550 [ 790.366650][T18013] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 790.366670][T18013] folio_alloc_mpol_noprof+0x36/0x2f0 [ 790.366688][T18013] shmem_alloc_folio+0x135/0x160 [ 790.366708][T18013] shmem_alloc_and_add_folio+0x499/0xc20 [ 790.366732][T18013] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 790.366755][T18013] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 790.366779][T18013] shmem_get_folio_gfp+0x67f/0x1600 [ 790.366803][T18013] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 790.366823][T18013] ? do_raw_read_unlock+0x44/0xe0 [ 790.366840][T18013] shmem_write_begin+0x160/0x300 [ 790.366863][T18013] ? __pfx_shmem_write_begin+0x10/0x10 [ 790.366885][T18013] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 790.366906][T18013] generic_perform_write+0x3d0/0x930 [ 790.366932][T18013] ? __pfx_generic_perform_write+0x10/0x10 [ 790.366953][T18013] ? inode_needs_update_time.part.0+0x191/0x270 [ 790.366981][T18013] shmem_file_write_iter+0x10e/0x140 [ 790.366997][T18013] vfs_write+0x6c4/0x1150 [ 790.367018][T18013] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 790.367034][T18013] ? __pfx___mutex_lock+0x10/0x10 [ 790.367054][T18013] ? __pfx_vfs_write+0x10/0x10 [ 790.367090][T18013] ksys_write+0x12a/0x250 [ 790.367110][T18013] ? __pfx_ksys_write+0x10/0x10 [ 790.367135][T18013] do_syscall_64+0xcd/0x490 [ 790.367158][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.367172][T18013] RIP: 0033:0x7f23d618e929 [ 790.367185][T18013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.367198][T18013] RSP: 002b:00007f23d7093038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 790.367211][T18013] RAX: ffffffffffffffda RBX: 00007f23d63b6080 RCX: 00007f23d618e929 [ 790.367221][T18013] RDX: 000000000000b8c5 RSI: 0000200000000280 RDI: 000000000000000b [ 790.367230][T18013] RBP: 00007f23d6210b39 R08: 0000000000000000 R09: 0000000000000000 [ 790.367239][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.367247][T18013] R13: 0000000000000000 R14: 00007f23d63b6080 R15: 00007ffc519a6a68 [ 790.367267][T18013] [ 790.677518][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.178974][T16193] Bluetooth: hci3: command 0x0c1a tx timeout [ 791.185034][T16193] Bluetooth: hci2: command 0x0c1a tx timeout [ 791.191156][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 791.258449][T16193] Bluetooth: hci1: command 0x0c1a tx timeout [ 791.379753][T18020] random: crng reseeded on system resumption [ 791.682680][T18036] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2267'. [ 791.714111][T18036] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2267'. [ 791.728540][T18036] CIFS mount error: No usable UNC path provided in device string! [ 791.728540][T18036] [ 791.753154][T18036] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 792.540347][ T67] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 5 with max blocks 2 with error 117 [ 792.572425][ T67] EXT4-fs (sda1): This should not happen!! Data will be lost [ 792.572425][ T67] [ 793.700222][T18076] FAULT_INJECTION: forcing a failure. [ 793.700222][T18076] name fail_futex, interval 1, probability 0, space 0, times 0 [ 793.714929][T18076] CPU: 0 UID: 0 PID: 18076 Comm: syz.3.2273 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 793.714955][T18076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 793.714963][T18076] Call Trace: [ 793.714968][T18076] [ 793.714974][T18076] dump_stack_lvl+0x16c/0x1f0 [ 793.715005][T18076] should_fail_ex+0x512/0x640 [ 793.715028][T18076] should_fail_futex+0x4c/0x60 [ 793.715046][T18076] __x64_sys_futex+0x25e/0x4c0 [ 793.715066][T18076] ? __pfx___x64_sys_futex+0x10/0x10 [ 793.715083][T18076] ? xfd_validate_state+0x61/0x180 [ 793.715108][T18076] do_syscall_64+0xcd/0x490 [ 793.715130][T18076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.715144][T18076] RIP: 0033:0x7fadad38e929 [ 793.715156][T18076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.715169][T18076] RSP: 002b:00007ffe78ff2498 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 793.715183][T18076] RAX: ffffffffffffffda RBX: 00000000000c1c48 RCX: 00007fadad38e929 [ 793.715192][T18076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fadad5b608c [ 793.715200][T18076] RBP: 0000000000000032 R08: 00007fadae200000 R09: 0000001178ff278f [ 793.715209][T18076] R10: 00007ffe78ff2590 R11: 0000000000000246 R12: 00007fadad5b608c [ 793.715217][T18076] R13: 00007ffe78ff2590 R14: 00000000000c1c7a R15: 00007ffe78ff25b0 [ 793.715235][T18076] [ 793.861964][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.330943][T18088] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 794.727066][T18094] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 795.402223][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 795.421360][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 795.432740][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 795.441162][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 795.460712][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 795.794286][ T3020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.823263][T18108] Invalid ELF header magic: != ELF [ 796.001248][T18116] random: crng reseeded on system resumption [ 796.119487][ T3020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.271167][ T3020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.395849][T18129] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 796.453025][T18126] FAULT_INJECTION: forcing a failure. [ 796.453025][T18126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.472418][T18126] CPU: 0 UID: 0 PID: 18126 Comm: syz.1.2281 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 796.472440][T18126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 796.472449][T18126] Call Trace: [ 796.472453][T18126] [ 796.472459][T18126] dump_stack_lvl+0x16c/0x1f0 [ 796.472485][T18126] should_fail_ex+0x512/0x640 [ 796.472509][T18126] _copy_from_user+0x2e/0xd0 [ 796.472523][T18126] get_timespec64+0x8b/0x1b0 [ 796.472541][T18126] ? __pfx_get_timespec64+0x10/0x10 [ 796.472559][T18126] ? find_held_lock+0x2b/0x80 [ 796.472578][T18126] __x64_sys_futex+0x288/0x4c0 [ 796.472599][T18126] ? __pfx___x64_sys_futex+0x10/0x10 [ 796.472618][T18126] ? xfd_validate_state+0x61/0x180 [ 796.472644][T18126] do_syscall_64+0xcd/0x490 [ 796.472666][T18126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.472680][T18126] RIP: 0033:0x7f796698e929 [ 796.472692][T18126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.472705][T18126] RSP: 002b:00007fff9506b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 796.472718][T18126] RAX: ffffffffffffffda RBX: 00000000000c2708 RCX: 00007f796698e929 [ 796.472727][T18126] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7966bb608c [ 796.472735][T18126] RBP: 0000000000000032 R08: 00007f7967744000 R09: 000000109506bb0f [ 796.472743][T18126] R10: 00007fff9506b910 R11: 0000000000000246 R12: 00007f7966bb608c [ 796.472751][T18126] R13: 00007fff9506b910 R14: 00000000000c273a R15: 00007fff9506b930 [ 796.472769][T18126] [ 796.635770][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.659561][ T3020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.245119][T18146] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 797.399918][T18110] chnl_net:caif_netlink_parms(): no params data found [ 797.481640][ T3020] bridge_slave_0: left allmulticast mode [ 797.487549][ T3020] bridge_slave_0: left promiscuous mode [ 797.531021][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.578527][ T5845] Bluetooth: hci0: command tx timeout [ 798.559338][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.593274][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.625190][ T3020] bond0 (unregistering): Released all slaves [ 798.743395][T18129] ovs_: entered promiscuous mode [ 798.864063][ T3020] .SR: left promiscuous mode [ 799.020058][T18110] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.033585][T18110] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.061373][T18110] bridge_slave_0: entered allmulticast mode [ 799.069366][T18110] bridge_slave_0: entered promiscuous mode [ 799.126860][T18110] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.134990][T18110] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.144973][T18110] bridge_slave_1: entered allmulticast mode [ 799.152739][T18110] bridge_slave_1: entered promiscuous mode [ 799.332329][T18110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.351962][T18110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.507105][T18176] random: crng reseeded on system resumption [ 799.663995][T18110] team0: Port device team_slave_0 added [ 799.668753][ T5845] Bluetooth: hci0: command tx timeout [ 799.741665][T18110] team0: Port device team_slave_1 added [ 800.148587][T18110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.156263][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.183893][T18196] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 800.844780][T18110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.857797][T18110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.865379][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.892206][T18110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.239145][T18110] hsr_slave_0: entered promiscuous mode [ 801.257344][T18110] hsr_slave_1: entered promiscuous mode [ 801.738573][ T5845] Bluetooth: hci0: command tx timeout [ 802.975818][T18245] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 803.295264][ T3020] hsr_slave_0: left promiscuous mode [ 803.303760][ T3020] hsr_slave_1: left promiscuous mode [ 803.321404][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.331028][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.347396][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.363312][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.407893][ T3020] veth1_macvtap: left promiscuous mode [ 803.427272][ T3020] veth1_vlan: left promiscuous mode [ 803.472484][ T3020] veth0_vlan: left promiscuous mode [ 803.829586][ T5845] Bluetooth: hci0: command tx timeout [ 803.925613][T18249] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 804.758774][T18252] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 805.044914][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 805.125136][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 805.525636][T18255] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1.0.0), cmd(5) [ 806.356240][T18110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 806.400777][T18110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 806.440490][T18110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 806.520429][T18110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 806.631132][T18261] random: crng reseeded on system resumption [ 807.251862][T18110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.475395][T18298] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 807.730069][T18110] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.351819][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.359080][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.405624][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.412799][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.710069][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.726781][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.106273][T18327] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1.6.0), cmd(5) [ 810.165961][T18110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.246604][T18110] veth0_vlan: entered promiscuous mode [ 810.326408][T18110] veth1_vlan: entered promiscuous mode [ 810.472375][T18110] veth0_macvtap: entered promiscuous mode [ 810.502333][T18110] veth1_macvtap: entered promiscuous mode [ 810.538610][T18110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.620714][T18110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.715021][T18110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.777131][T18110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.826726][T18110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.888436][T18110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.325655][T18358] netlink: set zone limit has 8 unknown bytes [ 811.333844][T18367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2314'. [ 811.369249][T18367] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.464671][T18367] bridge_slave_1 (unregistering): left allmulticast mode [ 811.482253][T18367] bridge_slave_1 (unregistering): left promiscuous mode [ 811.491769][T18367] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.576306][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.595054][T18374] FAULT_INJECTION: forcing a failure. [ 811.595054][T18374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.627125][T18374] CPU: 0 UID: 0 PID: 18374 Comm: syz.1.2316 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 811.627159][T18374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.627172][T18374] Call Trace: [ 811.627180][T18374] [ 811.627189][T18374] dump_stack_lvl+0x16c/0x1f0 [ 811.627228][T18374] should_fail_ex+0x512/0x640 [ 811.627265][T18374] _copy_from_user+0x2e/0xd0 [ 811.627288][T18374] get_timespec64+0x8b/0x1b0 [ 811.627318][T18374] ? __pfx_get_timespec64+0x10/0x10 [ 811.627344][T18374] ? find_held_lock+0x2b/0x80 [ 811.627374][T18374] __x64_sys_futex+0x288/0x4c0 [ 811.627408][T18374] ? __pfx___x64_sys_futex+0x10/0x10 [ 811.627436][T18374] ? xfd_validate_state+0x61/0x180 [ 811.627479][T18374] do_syscall_64+0xcd/0x490 [ 811.627515][T18374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.627539][T18374] RIP: 0033:0x7f796698e929 [ 811.627558][T18374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.627584][T18374] RSP: 002b:00007fff9506b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 811.627613][T18374] RAX: ffffffffffffffda RBX: 00000000000c622e RCX: 00007f796698e929 [ 811.627629][T18374] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7966bb608c [ 811.627643][T18374] RBP: 0000000000000032 R08: 00007f7967744000 R09: 000000109506bb0f [ 811.627658][T18374] R10: 00007fff9506b910 R11: 0000000000000246 R12: 00007f7966bb608c [ 811.627674][T18374] R13: 00007fff9506b910 R14: 00000000000c6260 R15: 00007fff9506b930 [ 811.627707][T18374] [ 811.786143][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.799746][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.005077][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.049492][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.330911][T18394] random: crng reseeded on system resumption [ 812.633818][T18384] FAULT_INJECTION: forcing a failure. [ 812.633818][T18384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 812.647916][T18384] CPU: 1 UID: 0 PID: 18384 Comm: syz.3.2317 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 812.647953][T18384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 812.647968][T18384] Call Trace: [ 812.647976][T18384] [ 812.647986][T18384] dump_stack_lvl+0x16c/0x1f0 [ 812.648030][T18384] should_fail_ex+0x512/0x640 [ 812.648074][T18384] should_fail_alloc_page+0xe7/0x130 [ 812.648104][T18384] prepare_alloc_pages+0x3c2/0x610 [ 812.648143][T18384] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 812.648186][T18384] ? lock_acquire+0x179/0x350 [ 812.648225][T18384] ? find_held_lock+0x2b/0x80 [ 812.648252][T18384] ? page_table_check_set+0x627/0x750 [ 812.648281][T18384] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 812.648331][T18384] ? find_held_lock+0x2b/0x80 [ 812.648359][T18384] ? __handle_mm_fault+0x27cd/0x5490 [ 812.648396][T18384] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.648438][T18384] ? policy_nodemask+0xea/0x4e0 [ 812.648466][T18384] alloc_pages_mpol+0x1fb/0x550 [ 812.648495][T18384] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 812.648533][T18384] folio_alloc_mpol_noprof+0x36/0x2f0 [ 812.648565][T18384] shmem_alloc_folio+0x135/0x160 [ 812.648600][T18384] shmem_alloc_and_add_folio+0x499/0xc20 [ 812.648646][T18384] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 812.648687][T18384] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 812.648738][T18384] shmem_get_folio_gfp+0x67f/0x1600 [ 812.648786][T18384] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 812.648836][T18384] shmem_write_begin+0x160/0x300 [ 812.648879][T18384] ? __pfx_shmem_write_begin+0x10/0x10 [ 812.648920][T18384] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 812.648965][T18384] generic_perform_write+0x3d0/0x930 [ 812.649015][T18384] ? __pfx_generic_perform_write+0x10/0x10 [ 812.649054][T18384] ? inode_needs_update_time.part.0+0x191/0x270 [ 812.649107][T18384] shmem_file_write_iter+0x10e/0x140 [ 812.649138][T18384] vfs_write+0x6c4/0x1150 [ 812.649175][T18384] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 812.649204][T18384] ? __pfx___mutex_lock+0x10/0x10 [ 812.649242][T18384] ? __pfx_vfs_write+0x10/0x10 [ 812.649304][T18384] ksys_write+0x12a/0x250 [ 812.649340][T18384] ? __pfx_ksys_write+0x10/0x10 [ 812.649388][T18384] do_syscall_64+0xcd/0x490 [ 812.649431][T18384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.649457][T18384] RIP: 0033:0x7fadad38e929 [ 812.649478][T18384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.649503][T18384] RSP: 002b:00007fadae1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 812.649528][T18384] RAX: ffffffffffffffda RBX: 00007fadad5b5fa0 RCX: 00007fadad38e929 [ 812.649545][T18384] RDX: 000000000000b8c5 RSI: 0000200000000280 RDI: 000000000000000b [ 812.649562][T18384] RBP: 00007fadad410b39 R08: 0000000000000000 R09: 0000000000000000 [ 812.649577][T18384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.649593][T18384] R13: 0000000000000000 R14: 00007fadad5b5fa0 R15: 00007ffe78ff2338 [ 812.649630][T18384] [ 813.609799][T18408] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input62 [ 814.369027][T18414] netlink: set zone limit has 8 unknown bytes [ 815.116819][T18430] netlink: set zone limit has 8 unknown bytes [ 815.805368][T18459] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 816.489346][T18477] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 817.720174][T18498] FAULT_INJECTION: forcing a failure. [ 817.720174][T18498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.740704][T18498] CPU: 0 UID: 0 PID: 18498 Comm: syz.1.2333 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 817.740737][T18498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.740752][T18498] Call Trace: [ 817.740759][T18498] [ 817.740767][T18498] dump_stack_lvl+0x16c/0x1f0 [ 817.740805][T18498] should_fail_ex+0x512/0x640 [ 817.740842][T18498] _copy_to_user+0x32/0xd0 [ 817.740863][T18498] __tun_chr_ioctl+0x85c/0x47a0 [ 817.740895][T18498] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 817.740928][T18498] ? hook_file_ioctl_common+0x145/0x410 [ 817.740955][T18498] ? __fget_files+0x20e/0x3c0 [ 817.740986][T18498] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 817.741005][T18498] __x64_sys_ioctl+0x18b/0x210 [ 817.741030][T18498] do_syscall_64+0xcd/0x490 [ 817.741061][T18498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.741081][T18498] RIP: 0033:0x7f796698e929 [ 817.741096][T18498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.741119][T18498] RSP: 002b:00007f7967743038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.741138][T18498] RAX: ffffffffffffffda RBX: 00007f7966bb5fa0 RCX: 00007f796698e929 [ 817.741151][T18498] RDX: 0000000000005c8d RSI: 00000000800454d3 RDI: 00000000000000c8 [ 817.741162][T18498] RBP: 00007f7967743090 R08: 0000000000000000 R09: 0000000000000000 [ 817.741173][T18498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.741184][T18498] R13: 0000000000000001 R14: 00007f7966bb5fa0 R15: 00007fff9506b6b8 [ 817.741210][T18498] [ 818.221855][T18507] random: crng reseeded on system resumption [ 818.623161][T18519] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 818.873838][T18526] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 819.366284][T16193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 819.380997][T16193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 819.389846][T16193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 819.402896][T16193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 819.414170][T16193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 819.751309][ T3020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.910632][T18537] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 819.931244][T18538] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 819.982180][ T3020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.145525][ T3020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.336106][ T3020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.765704][T18530] chnl_net:caif_netlink_parms(): no params data found [ 820.815528][ T3020] bridge_slave_1: left allmulticast mode [ 820.841123][ T3020] bridge_slave_1: left promiscuous mode [ 820.873795][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.898084][ T3020] bridge_slave_0: left allmulticast mode [ 820.907645][ T3020] bridge_slave_0: left promiscuous mode [ 820.919815][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.956066][T18554] syz.4.2343: vmalloc error: size 1908736, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 820.978918][T18554] CPU: 1 UID: 0 PID: 18554 Comm: syz.4.2343 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 820.978955][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 820.978971][T18554] Call Trace: [ 820.978979][T18554] [ 820.978990][T18554] dump_stack_lvl+0x16c/0x1f0 [ 820.979033][T18554] warn_alloc+0x248/0x3a0 [ 820.979072][T18554] ? __pfx_warn_alloc+0x10/0x10 [ 820.979114][T18554] ? alloc_pages_mpol+0x25a/0x550 [ 820.979142][T18554] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 820.979183][T18554] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 820.979230][T18554] ? __snd_dma_alloc_pages+0x53/0x90 [ 820.979273][T18554] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 820.979314][T18554] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 820.979358][T18554] ? __snd_dma_alloc_pages+0x53/0x90 [ 820.979389][T18554] __vmalloc_node_noprof+0xad/0xf0 [ 820.979422][T18554] ? __snd_dma_alloc_pages+0x53/0x90 [ 820.979452][T18554] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 820.979489][T18554] __snd_dma_alloc_pages+0x53/0x90 [ 820.979534][T18554] snd_dma_alloc_dir_pages+0x151/0x240 [ 820.979567][T18554] do_alloc_pages+0x115/0x280 [ 820.979594][T18554] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 820.979626][T18554] snd_pcm_hw_params+0x15e1/0x1b40 [ 820.979659][T18554] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 820.979689][T18554] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 820.979721][T18554] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 820.979746][T18554] ? __asan_memset+0x23/0x50 [ 820.979778][T18554] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 820.979812][T18554] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 820.979857][T18554] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 820.979888][T18554] ? snd_pcm_oss_sync+0x30c/0x840 [ 820.979940][T18554] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 820.979971][T18554] snd_pcm_oss_sync+0x32e/0x840 [ 820.980002][T18554] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 820.980028][T18554] snd_pcm_oss_release+0x28b/0x310 [ 820.980057][T18554] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 820.980083][T18554] __fput+0x402/0xb70 [ 820.980117][T18554] task_work_run+0x14d/0x240 [ 820.980155][T18554] ? __pfx_task_work_run+0x10/0x10 [ 820.980192][T18554] ? __pfx___do_sys_close_range+0x10/0x10 [ 820.980236][T18554] exit_to_user_mode_loop+0xeb/0x110 [ 820.980275][T18554] do_syscall_64+0x3f6/0x490 [ 820.980314][T18554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.980340][T18554] RIP: 0033:0x7f23d618e929 [ 820.980361][T18554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.980385][T18554] RSP: 002b:00007f23d70b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 820.980409][T18554] RAX: 0000000000000000 RBX: 00007f23d63b5fa0 RCX: 00007f23d618e929 [ 820.980426][T18554] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 820.980441][T18554] RBP: 00007f23d6210b39 R08: 0000000000000000 R09: 0000000000000000 [ 820.980456][T18554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.980472][T18554] R13: 0000000000000000 R14: 00007f23d63b5fa0 R15: 00007ffc519a6a68 [ 820.980518][T18554] [ 820.980556][T18554] Mem-Info: [ 821.243062][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.317210][T18554] active_anon:13649 inactive_anon:0 isolated_anon:0 [ 821.317210][T18554] active_file:16743 inactive_file:42552 isolated_file:0 [ 821.317210][T18554] unevictable:769 dirty:946 writeback:0 [ 821.317210][T18554] slab_reclaimable:12856 slab_unreclaimable:103929 [ 821.317210][T18554] mapped:29041 shmem:1436 pagetables:1359 [ 821.317210][T18554] sec_pagetables:0 bounce:0 [ 821.317210][T18554] kernel_misc_reclaimable:0 [ 821.317210][T18554] free:1041513 free_pcp:9656 free_cma:0 [ 821.511191][T18554] Node 0 active_anon:54596kB inactive_anon:0kB active_file:70940kB inactive_file:170076kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:120236kB dirty:3784kB writeback:0kB shmem:4208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11960kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 821.544687][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.554077][T18548] Bluetooth: hci3: command tx timeout [ 821.748993][T18567] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 821.822243][T18554] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 821.853717][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.934589][T18554] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.068314][T18554] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 822.074122][T18554] Node 0 DMA32 free:1268312kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58744kB inactive_anon:0kB active_file:73372kB inactive_file:168716kB unevictable:1536kB writepending:3740kB present:3129332kB managed:2540344kB mlocked:0kB bounce:0kB free_pcp:39268kB local_pcp:20888kB free_cma:0kB [ 822.214476][T18554] lowmem_reserve[]: 0 0 1 1 1 [ 822.220393][T18554] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 822.280726][T18554] lowmem_reserve[]: 0 0 0 0 0 [ 822.310899][T18554] Node 1 Normal free:2871636kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 822.408480][T18554] lowmem_reserve[]: 0 0 0 0 0 [ 822.443660][T18554] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 822.487418][T18554] Node 0 DMA32: 1164*4kB (ME) 857*8kB (ME) 1110*16kB (ME) 924*32kB (ME) 430*64kB (ME) 244*128kB (ME) 87*256kB (UME) 72*512kB (UME) 40*1024kB (UM) 13*2048kB (UME) 250*4096kB (UM) = 1268312kB [ 822.524781][T18554] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 822.549889][T18554] Node 1 Normal: 197*4kB (UME) 60*8kB (UME) 52*16kB (UME) 193*32kB (UME) 82*64kB (UME) 39*128kB (UME) 13*256kB (UM) 8*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 693*4096kB (M) = 2871636kB [ 822.568875][T18554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.593811][T18554] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 822.658449][T18554] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 822.686554][T18554] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 822.704365][T18554] 62317 total pagecache pages [ 822.715799][T18554] 0 pages in swap cache [ 822.726827][T18554] Free swap = 124996kB [ 822.740650][T18554] Total swap = 124996kB [ 822.751028][T18554] 2097051 pages RAM [ 822.755170][T18554] 0 pages HighMem/MovableOnly [ 822.770507][T18554] 429987 pages reserved [ 822.786676][T18554] 0 pages cma reserved [ 823.055240][T18581] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 823.362593][ T3020]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.390293][ T3020]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.414909][ T3020]  (unregistering): Released all slaves [ 823.578975][T18548] Bluetooth: hci3: command tx timeout [ 823.959107][T18598] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 824.663701][T18530] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.678893][T18530] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.686383][T18530] bridge_slave_0: entered allmulticast mode [ 824.697219][T18530] bridge_slave_0: entered promiscuous mode [ 824.766617][T18530] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.794297][T18530] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.816791][T18530] bridge_slave_1: entered allmulticast mode [ 824.851289][T18530] bridge_slave_1: entered promiscuous mode [ 825.041633][T18530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.240740][T18530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.436324][T18530] team0: Port device team_slave_0 added [ 825.536095][T18530] team0: Port device team_slave_1 added [ 825.658340][T18548] Bluetooth: hci3: command tx timeout [ 825.703596][T18530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.716977][T18530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.743087][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.751109][T18530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.868954][T18530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.911355][T18530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.937989][T18530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.236098][T18530] hsr_slave_0: entered promiscuous mode [ 826.270433][T18530] hsr_slave_1: entered promiscuous mode [ 826.276949][T18530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.289998][T18530] Cannot create hsr debugfs directory [ 826.365201][T18637] FAULT_INJECTION: forcing a failure. [ 826.365201][T18637] name fail_futex, interval 1, probability 0, space 0, times 0 [ 826.391766][T18637] CPU: 1 UID: 0 PID: 18637 Comm: syz.3.2357 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 826.391799][T18637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.391813][T18637] Call Trace: [ 826.391820][T18637] [ 826.391829][T18637] dump_stack_lvl+0x16c/0x1f0 [ 826.391868][T18637] should_fail_ex+0x512/0x640 [ 826.391914][T18637] should_fail_futex+0x4c/0x60 [ 826.391941][T18637] __x64_sys_futex+0x25e/0x4c0 [ 826.391971][T18637] ? __pfx___x64_sys_futex+0x10/0x10 [ 826.392001][T18637] ? xfd_validate_state+0x61/0x180 [ 826.392045][T18637] do_syscall_64+0xcd/0x490 [ 826.392082][T18637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.392106][T18637] RIP: 0033:0x7fadad38e929 [ 826.392125][T18637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.392147][T18637] RSP: 002b:00007ffe78ff2498 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 826.392170][T18637] RAX: ffffffffffffffda RBX: 00000000000c9be1 RCX: 00007fadad38e929 [ 826.392186][T18637] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fadad5b608c [ 826.392201][T18637] RBP: 0000000000000032 R08: 00007fadae200000 R09: 0000001178ff278f [ 826.392217][T18637] R10: 00007ffe78ff2590 R11: 0000000000000246 R12: 00007fadad5b608c [ 826.392232][T18637] R13: 00007ffe78ff2590 R14: 00000000000c9c13 R15: 00007ffe78ff25b0 [ 826.392265][T18637] [ 826.541686][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.728702][T18672] random: crng reseeded on system resumption [ 827.738524][T18548] Bluetooth: hci3: command tx timeout [ 828.240504][T18685] FAULT_INJECTION: forcing a failure. [ 828.240504][T18685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.286952][T18685] CPU: 1 UID: 0 PID: 18685 Comm: syz.0.2361 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 828.286984][T18685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 828.286997][T18685] Call Trace: [ 828.287006][T18685] [ 828.287015][T18685] dump_stack_lvl+0x16c/0x1f0 [ 828.287054][T18685] should_fail_ex+0x512/0x640 [ 828.287092][T18685] _copy_from_iter+0x463/0x16f0 [ 828.287137][T18685] ? __pfx__copy_from_iter+0x10/0x10 [ 828.287173][T18685] ? rcu_is_watching+0x12/0xc0 [ 828.287199][T18685] ? trace_kmalloc+0x2b/0xd0 [ 828.287221][T18685] ? __kmalloc_noprof+0x242/0x510 [ 828.287266][T18685] kernfs_fop_write_iter+0x19a/0x510 [ 828.287298][T18685] do_iter_readv_writev+0x657/0x950 [ 828.287334][T18685] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 828.287384][T18685] vfs_writev+0x35f/0xde0 [ 828.287411][T18685] ? __pfx___mutex_trylock_common+0x10/0x10 [ 828.287454][T18685] ? __pfx_vfs_writev+0x10/0x10 [ 828.287483][T18685] ? __mutex_lock+0x1ca/0xb90 [ 828.287524][T18685] ? __pfx___mutex_lock+0x10/0x10 [ 828.287565][T18685] ? __fget_files+0x20e/0x3c0 [ 828.287603][T18685] ? __fget_files+0x140/0x3c0 [ 828.287644][T18685] ? do_writev+0x132/0x340 [ 828.287672][T18685] do_writev+0x132/0x340 [ 828.287703][T18685] ? __pfx_do_writev+0x10/0x10 [ 828.287744][T18685] do_syscall_64+0xcd/0x490 [ 828.287779][T18685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.287803][T18685] RIP: 0033:0x7fb789b8e929 [ 828.287822][T18685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.287844][T18685] RSP: 002b:00007fb78a9dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 828.287866][T18685] RAX: ffffffffffffffda RBX: 00007fb789db5fa0 RCX: 00007fb789b8e929 [ 828.287883][T18685] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 828.287900][T18685] RBP: 00007fb78a9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 828.287913][T18685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.287926][T18685] R13: 0000000000000000 R14: 00007fb789db5fa0 R15: 00007ffc74e451b8 [ 828.287960][T18685] [ 828.499724][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.680097][ T3020] hsr_slave_0: left promiscuous mode [ 828.690228][ T3020] hsr_slave_1: left promiscuous mode [ 828.696600][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.738500][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.791387][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.818508][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.877601][ T3020] veth1_macvtap: left promiscuous mode [ 828.944905][ T3020] veth0_macvtap: left promiscuous mode [ 828.954767][ T3020] veth1_vlan: left promiscuous mode [ 828.962449][ T3020] veth0_vlan: left promiscuous mode [ 828.995814][T18698] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 830.090275][T18713] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 830.854712][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 830.947452][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 831.370529][T18721] FAULT_INJECTION: forcing a failure. [ 831.370529][T18721] name failslab, interval 1, probability 0, space 0, times 0 [ 831.391470][T18721] CPU: 0 UID: 0 PID: 18721 Comm: syz.4.2367 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 831.391504][T18721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.391515][T18721] Call Trace: [ 831.391523][T18721] [ 831.391532][T18721] dump_stack_lvl+0x16c/0x1f0 [ 831.391571][T18721] should_fail_ex+0x512/0x640 [ 831.391605][T18721] ? fs_reclaim_acquire+0xae/0x150 [ 831.391637][T18721] ? tomoyo_encode2+0x100/0x3e0 [ 831.391666][T18721] should_failslab+0xc2/0x120 [ 831.391689][T18721] __kmalloc_noprof+0xd2/0x510 [ 831.391733][T18721] tomoyo_encode2+0x100/0x3e0 [ 831.391768][T18721] tomoyo_encode+0x29/0x50 [ 831.391797][T18721] tomoyo_realpath_from_path+0x18f/0x6e0 [ 831.391832][T18721] ? tomoyo_profile+0x47/0x60 [ 831.391856][T18721] tomoyo_path_number_perm+0x245/0x580 [ 831.391882][T18721] ? tomoyo_path_number_perm+0x237/0x580 [ 831.391911][T18721] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 831.391940][T18721] ? find_held_lock+0x2b/0x80 [ 831.391998][T18721] ? find_held_lock+0x2b/0x80 [ 831.392022][T18721] ? hook_file_ioctl_common+0x145/0x410 [ 831.392061][T18721] ? __fget_files+0x20e/0x3c0 [ 831.392099][T18721] security_file_ioctl+0x9b/0x240 [ 831.392131][T18721] __x64_sys_ioctl+0xb7/0x210 [ 831.392162][T18721] do_syscall_64+0xcd/0x490 [ 831.392199][T18721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.392222][T18721] RIP: 0033:0x7f23d618e929 [ 831.392242][T18721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.392264][T18721] RSP: 002b:00007f23d70b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.392291][T18721] RAX: ffffffffffffffda RBX: 00007f23d63b5fa0 RCX: 00007f23d618e929 [ 831.392307][T18721] RDX: 0000000000000000 RSI: 000000004040aea0 RDI: 0000000000000004 [ 831.392320][T18721] RBP: 00007f23d70b4090 R08: 0000000000000000 R09: 0000000000000000 [ 831.392334][T18721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.392347][T18721] R13: 0000000000000000 R14: 00007f23d63b5fa0 R15: 00007ffc519a6a68 [ 831.392380][T18721] [ 831.392428][T18721] ERROR: Out of memory at tomoyo_realpath_from_path. [ 832.786272][T18744] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 833.274797][T18530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 833.312091][T18530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 833.333092][T18530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 833.363163][T18546] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 3434 with max blocks 67 with error 117 [ 833.376806][T18530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 833.397280][T18546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 833.397280][T18546] [ 833.431546][T18546] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 912 with max blocks 4 with error 117 [ 833.448576][T18546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 833.448576][T18546] [ 834.020447][T18763] random: crng reseeded on system resumption [ 834.186935][T18530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.354634][T18530] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.450656][T18546] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.457887][T18546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.543048][T18546] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.550288][T18546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.734244][T18530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 834.755012][T18530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 835.387853][T18530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.564061][T18530] veth0_vlan: entered promiscuous mode [ 835.577605][T18530] veth1_vlan: entered promiscuous mode [ 835.610987][T18530] veth0_macvtap: entered promiscuous mode [ 835.666898][T18530] veth1_macvtap: entered promiscuous mode [ 835.691165][T18530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.704111][T18530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.747768][T18530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.758355][T18530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.778792][T18530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.787961][T18530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.439787][T18812] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 836.546344][T18738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.582500][T18738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.756860][T18546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.833053][T18546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.895082][T18530] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 3, inode_bitmap = 140 [ 836.937807][T18530] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 6: bad block bitmap checksum [ 837.095043][T18822] FAULT_INJECTION: forcing a failure. [ 837.095043][T18822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.124923][T18822] CPU: 1 UID: 0 PID: 18822 Comm: syz.3.2380 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 837.124959][T18822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.124973][T18822] Call Trace: [ 837.124980][T18822] [ 837.124994][T18822] dump_stack_lvl+0x16c/0x1f0 [ 837.125033][T18822] should_fail_ex+0x512/0x640 [ 837.125073][T18822] _copy_from_user+0x2e/0xd0 [ 837.125097][T18822] move_addr_to_kernel+0x65/0x170 [ 837.125128][T18822] __sys_connect+0xb1/0x160 [ 837.125158][T18822] ? __pfx___sys_connect+0x10/0x10 [ 837.125201][T18822] ? __pfx_ksys_write+0x10/0x10 [ 837.125243][T18822] __x64_sys_connect+0x72/0xb0 [ 837.125272][T18822] ? lockdep_hardirqs_on+0x7c/0x110 [ 837.125305][T18822] do_syscall_64+0xcd/0x490 [ 837.125343][T18822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.125368][T18822] RIP: 0033:0x7fadad38e929 [ 837.125387][T18822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.125409][T18822] RSP: 002b:00007fadae1de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 837.125432][T18822] RAX: ffffffffffffffda RBX: 00007fadad5b6080 RCX: 00007fadad38e929 [ 837.125448][T18822] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000004 [ 837.125462][T18822] RBP: 00007fadae1de090 R08: 0000000000000000 R09: 0000000000000000 [ 837.125476][T18822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.125490][T18822] R13: 0000000000000000 R14: 00007fadad5b6080 R15: 00007ffe78ff2338 [ 837.125523][T18822] [ 837.285761][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.318371][T18826] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 837.983939][T18555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.432146][T18555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.523299][T18848] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 838.566933][T18848] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 2 [ 838.602844][T18848] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 838.641785][T18848] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 4 [ 838.679368][T18555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.698992][T18848] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 5 [ 838.723416][T18848] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 6 [ 838.746848][T18855] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 838.776529][T18848] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 7 [ 838.815896][T18848] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 838.982501][T18555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.516077][T18555] bridge_slave_1: left allmulticast mode [ 839.545425][T18555] bridge_slave_1: left promiscuous mode [ 839.595746][T18555] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.646454][T18555] bridge_slave_0: left allmulticast mode [ 839.666563][T18555] bridge_slave_0: left promiscuous mode [ 839.678561][T18555] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.137232][T18889] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 28 [ 840.152281][T18889] EXT4-fs (sda1): This should not happen!! Data will be lost [ 840.152281][T18889] [ 840.214703][T18889] EXT4-fs (sda1): Total free blocks count 0 [ 840.231351][T18889] EXT4-fs (sda1): Free/Dirty block details [ 840.264303][T18889] EXT4-fs (sda1): free_blocks=22546 [ 840.282254][T18889] EXT4-fs (sda1): dirty_blocks=170 [ 840.304568][T18889] EXT4-fs (sda1): Block reservation details [ 840.312748][T18889] EXT4-fs (sda1): i_reserved_data_blocks=131 [ 840.566542][T18889] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 3750 with max blocks 2 with error 28 [ 840.585805][T18889] EXT4-fs (sda1): This should not happen!! Data will be lost [ 840.585805][T18889] [ 841.061241][T18902] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2390'. [ 841.103008][T18902] CIFS mount error: No usable UNC path provided in device string! [ 841.103008][T18902] [ 841.127301][T18902] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 841.254056][T18555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.271187][T18555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.284420][T18555] bond0 (unregistering): Released all slaves [ 841.894795][T18555] hsr_slave_0: left promiscuous mode [ 841.924170][T18555] hsr_slave_1: left promiscuous mode [ 841.938948][T18555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.990470][T18918] FAULT_INJECTION: forcing a failure. [ 841.990470][T18918] name failslab, interval 1, probability 0, space 0, times 0 [ 842.012258][T18921] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2392'. [ 842.014351][T18555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.033655][T18921] CIFS mount error: No usable UNC path provided in device string! [ 842.033655][T18921] [ 842.044677][T18921] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 842.067955][T18918] CPU: 1 UID: 0 PID: 18918 Comm: syz.0.2391 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 842.067982][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 842.067991][T18918] Call Trace: [ 842.067997][T18918] [ 842.068002][T18918] dump_stack_lvl+0x16c/0x1f0 [ 842.068030][T18918] should_fail_ex+0x512/0x640 [ 842.068053][T18918] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 842.068078][T18918] should_failslab+0xc2/0x120 [ 842.068093][T18918] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 842.068115][T18918] ? shmem_alloc_inode+0x25/0x50 [ 842.068133][T18918] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 842.068147][T18918] shmem_alloc_inode+0x25/0x50 [ 842.068161][T18918] alloc_inode+0x64/0x240 [ 842.068177][T18918] new_inode+0x22/0x1c0 [ 842.068207][T18918] shmem_get_inode+0x19a/0xfb0 [ 842.068250][T18918] shmem_mknod+0x1a8/0x450 [ 842.068282][T18918] vfs_mknod+0x5da/0x8e0 [ 842.068315][T18918] do_mknodat+0x30f/0x5d0 [ 842.068337][T18918] ? __pfx_do_mknodat+0x10/0x10 [ 842.068356][T18918] ? getname_flags.part.0+0x1c5/0x550 [ 842.068377][T18918] __x64_sys_mknod+0x87/0xb0 [ 842.068397][T18918] do_syscall_64+0xcd/0x490 [ 842.068420][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.068434][T18918] RIP: 0033:0x7fb789b8e929 [ 842.068447][T18918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.068460][T18918] RSP: 002b:00007fb78a9bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 842.068475][T18918] RAX: ffffffffffffffda RBX: 00007fb789db6080 RCX: 00007fb789b8e929 [ 842.068484][T18918] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 842.068492][T18918] RBP: 00007fb789c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 842.068501][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.068509][T18918] R13: 0000000000000000 R14: 00007fb789db6080 R15: 00007ffc74e451b8 [ 842.068527][T18918] [ 842.264279][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.353293][T18555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.361663][T18555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.527420][T18555] veth1_macvtap: left promiscuous mode [ 842.605267][T18555] veth0_macvtap: left promiscuous mode [ 842.698514][T18555] veth1_vlan: left promiscuous mode [ 842.742742][T18555] veth0_vlan: left promiscuous mode [ 842.771517][T18927] EXT4-fs error: 1630 callbacks suppressed [ 842.771535][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 842.805048][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 2 [ 842.820912][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 842.835022][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 4 [ 842.849215][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 5 [ 842.883714][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 6 [ 842.950653][T18931] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2393'. [ 842.963729][T18931] CIFS mount error: No usable UNC path provided in device string! [ 842.963729][T18931] [ 842.975431][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 7 [ 842.989617][T18931] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 843.018641][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 843.040360][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 2 [ 843.054930][T18927] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 843.721876][T18555] team0 (unregistering): Port device team_slave_1 removed [ 843.793922][T18555] team0 (unregistering): Port device team_slave_0 removed [ 847.437160][T18989] sysfs_service_op_show: Client not running :-5: [ 847.787714][T19003] EXT4-fs error: 622 callbacks suppressed [ 847.787735][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 847.815935][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 4 [ 847.855764][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 5 [ 847.882491][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 6 [ 847.918027][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 7 [ 847.934752][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 847.949473][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 2 [ 847.964498][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 847.978907][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 4 [ 847.998796][T19003] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 5 [ 848.107150][T19016] random: crng reseeded on system resumption [ 848.160980][T19012] FAULT_INJECTION: forcing a failure. [ 848.160980][T19012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.195583][T19012] CPU: 0 UID: 0 PID: 19012 Comm: syz.0.2402 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 848.195616][T19012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 848.195630][T19012] Call Trace: [ 848.195637][T19012] [ 848.195646][T19012] dump_stack_lvl+0x16c/0x1f0 [ 848.195685][T19012] should_fail_ex+0x512/0x640 [ 848.195720][T19012] _copy_from_user+0x2e/0xd0 [ 848.195741][T19012] get_timespec64+0x8b/0x1b0 [ 848.195770][T19012] ? __pfx_get_timespec64+0x10/0x10 [ 848.195796][T19012] ? find_held_lock+0x2b/0x80 [ 848.195830][T19012] __x64_sys_futex+0x288/0x4c0 [ 848.195863][T19012] ? __pfx___x64_sys_futex+0x10/0x10 [ 848.195892][T19012] ? xfd_validate_state+0x61/0x180 [ 848.195932][T19012] do_syscall_64+0xcd/0x490 [ 848.195969][T19012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.195992][T19012] RIP: 0033:0x7fb789b8e929 [ 848.196012][T19012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.196035][T19012] RSP: 002b:00007ffc74e45318 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 848.196057][T19012] RAX: ffffffffffffffda RBX: 00000000000cf104 RCX: 00007fb789b8e929 [ 848.196073][T19012] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb789db608c [ 848.196088][T19012] RBP: 0000000000000032 R08: 00007fb78a9dd000 R09: 0000001074e4560f [ 848.196102][T19012] R10: 00007ffc74e45410 R11: 0000000000000246 R12: 00007fb789db608c [ 848.196118][T19012] R13: 00007ffc74e45410 R14: 00000000000cf136 R15: 00007ffc74e45430 [ 848.196150][T19012] [ 852.693702][T19136] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.6.0), cmd(5) [ 854.203877][T19147] EXT4-fs error: 212 callbacks suppressed [ 854.203896][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 854.224652][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 2 [ 854.241086][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 854.270079][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 4 [ 854.345468][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 5 [ 854.378979][T19149] FAULT_INJECTION: forcing a failure. [ 854.378979][T19149] name fail_futex, interval 1, probability 0, space 0, times 0 [ 854.398841][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 6 [ 854.414446][T19149] CPU: 0 UID: 0 PID: 19149 Comm: syz.4.2413 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 854.414490][T19149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 854.414504][T19149] Call Trace: [ 854.414511][T19149] [ 854.414520][T19149] dump_stack_lvl+0x16c/0x1f0 [ 854.414561][T19149] should_fail_ex+0x512/0x640 [ 854.414598][T19149] should_fail_futex+0x4c/0x60 [ 854.414626][T19149] __x64_sys_futex+0x25e/0x4c0 [ 854.414659][T19149] ? __pfx___x64_sys_futex+0x10/0x10 [ 854.414699][T19149] do_syscall_64+0xcd/0x490 [ 854.414736][T19149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.414760][T19149] RIP: 0033:0x7f23d618e929 [ 854.414779][T19149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.414801][T19149] RSP: 002b:00007ffc519a6bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 854.414823][T19149] RAX: ffffffffffffffda RBX: 00000000000d094e RCX: 00007f23d618e929 [ 854.414837][T19149] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f23d63b608c [ 854.414852][T19149] RBP: 0000000000000032 R08: 00007f23d70b5000 R09: 00000010519a6ebf [ 854.414866][T19149] R10: 00007ffc519a6cc0 R11: 0000000000000246 R12: 00007f23d63b608c [ 854.414881][T19149] R13: 00007ffc519a6cc0 R14: 00000000000d0980 R15: 00007ffc519a6ce0 [ 854.414913][T19149] [ 854.596118][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 7 [ 854.610271][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 854.624048][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 2 [ 854.638238][T19147] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 856.423631][T19189] random: crng reseeded on system resumption [ 859.120032][T18566] EXT4-fs: 936 callbacks suppressed [ 859.120051][T18566] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1377 with max blocks 6 with error 117 [ 859.140181][T18566] EXT4-fs (sda1): This should not happen!! Data will be lost [ 859.140181][T18566] [ 860.172503][T19233] EXT4-fs error: 158 callbacks suppressed [ 860.172523][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 860.192300][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 2 [ 860.236955][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 860.251500][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 4 [ 860.270685][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 5 [ 860.288391][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 6 [ 860.302640][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 7 [ 860.323665][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 1 [ 860.408672][T19245] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 860.492727][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 2 [ 860.549041][T19233] EXT4-fs error (device sda1): ext4_mb_discard_group_preallocations:5425: comm syz-executor: Error -117 reading block bitmap for 3 [ 861.047982][T19240] nfsd: Unknown parameter 'Zwһh' SYZFAIL: mkdir(syz-tmp) failed (errno 74: Bad message) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=1 req=2334 state=1 status=67 (errno 9: Bad file descriptor) [ 862.862599][T19261] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 864.237052][T18738] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 934 with max blocks 1 with error 117 [ 864.268666][T18738] EXT4-fs (sda1): This should not happen!! Data will be lost [ 864.268666][T18738] [ 864.312396][T18738] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1324 with max blocks 51 with error 117 [ 864.365407][T18738] EXT4-fs (sda1): This should not happen!! Data will be lost [ 864.365407][T18738] [ 864.644551][T18738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.845590][T18738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.043498][T18738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.207735][T18738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.271657][T19255] EXT4-fs error: 121 callbacks suppressed [ 865.271677][T19255] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 865.501607][T18738] bridge_slave_1: left allmulticast mode [ 865.507328][T18738] bridge_slave_1: left promiscuous mode [ 865.524382][T18738] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.539410][T18738] bridge_slave_0: left allmulticast mode [ 865.545114][T18738] bridge_slave_0: left promiscuous mode [ 865.565684][T18738] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.607987][T19255] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 866.101197][T18738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.113391][T18738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.124021][T18738] bond0 (unregistering): Released all slaves [ 866.388124][T18738] hsr_slave_0: left promiscuous mode [ 866.397347][T18738] hsr_slave_1: left promiscuous mode [ 866.405544][T18738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.417061][T18738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.426095][T18738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.436785][T18738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.461759][T18738] veth1_macvtap: left promiscuous mode [ 866.468685][T18738] veth0_macvtap: left promiscuous mode [ 866.474385][T18738] veth1_vlan: left promiscuous mode [ 866.480842][T18738] veth0_vlan: left promiscuous mode [ 866.934380][T18738] team0 (unregistering): Port device team_slave_1 removed [ 866.972995][T18738] team0 (unregistering): Port device team_slave_0 removed [ 867.726174][T18738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.813758][T18738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.914543][T18738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.990815][T18738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.203398][T18738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.284412][T18738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.375241][T18738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.460979][T18738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.642305][T18738] bridge_slave_0: left allmulticast mode [ 868.648008][T18738] bridge_slave_0: left promiscuous mode [ 868.655665][T18738] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.669472][T18738] bridge_slave_1: left allmulticast mode [ 868.675165][T18738] bridge_slave_1: left promiscuous mode [ 868.682253][T18738] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.692377][T18738] bridge_slave_0: left allmulticast mode [ 868.698049][T18738] bridge_slave_0: left promiscuous mode [ 868.704451][T18738] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.037261][T18738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.047937][T18738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.060848][T18738] bond0 (unregistering): Released all slaves [ 869.333337][T18738]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.346269][T18738]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.356648][T18738]  (unregistering): Released all slaves [ 869.473721][T18738] ovs_: left promiscuous mode [ 870.152810][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.159563][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.908940][T18738] hsr_slave_0: left promiscuous mode [ 870.915213][T18738] hsr_slave_1: left promiscuous mode [ 870.924375][T18738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.938376][T18738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.946623][T18738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.954652][T18738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.971394][T18738] hsr_slave_0: left promiscuous mode [ 870.977613][T18738] hsr_slave_1: left promiscuous mode [ 870.984311][T18738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.993995][T18738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.002985][T18738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.011718][T18738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.054749][T18738] veth1_macvtap: left promiscuous mode [ 871.060854][T18738] veth0_macvtap: left promiscuous mode [ 871.066543][T18738] veth1_vlan: left promiscuous mode [ 871.072563][T18738] veth0_vlan: left promiscuous mode [ 871.080288][T18738] veth1_macvtap: left promiscuous mode [ 871.085985][T18738] veth1_vlan: left promiscuous mode [ 871.092146][T18738] veth0_vlan: left promiscuous mode [ 871.599530][T18738] team0 (unregistering): Port device team_slave_1 removed [ 871.641556][T18738] team0 (unregistering): Port device team_slave_0 removed [ 872.336005][T18738] team0 (unregistering): Port device team_slave_1 removed [ 872.376549][T18738] team0 (unregistering): Port device team_slave_0 removed