last executing test programs: 1m8.253261169s ago: executing program 0 (id=1461): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) io_uring_register$auto(0xffffffffffffffff, 0x33c3, 0x0, 0x80000001) request_key$auto_KEY_SPEC_GROUP_KEYRING(&(0x7f0000000280)='/proc/thread-self/net/afs/rootcell\x00', 0x0, 0x0, 0xfffffffffffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x4000200, 0x1fffffffffff, 0x4, 0x5, 0x7) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev3\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendto$auto(0x3, 0x0, 0xff04, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x161342, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x168, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x100, 0xbd, "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"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, 'tgI^.'}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x3a, 0xac, "fc0a5735c3b616f76e3d6da644d39ced0151dca6b566bf55568b232ef8639b67e73acd3214abf2270dcf4020cd1458bc2eaab4c2630b"}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf8eb}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd11/queue/read_ahead_kb\x00', 0x22b42, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/oom_adj\x00', 0xc0000, 0x0) sendfile$auto(r3, r3, 0x0, 0x4f64a1d2) getrusage$auto(0x1, 0x0) socket(0x11, 0x5, 0x0) 1m7.348293074s ago: executing program 0 (id=1464): r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) fcntl$auto_F_GETOWNER_UIDS(0xffffffffffffffff, 0x11, 0x0) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, 0x0, 0x20048855) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) listmount$auto(0x0, 0x0, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 1m6.724482925s ago: executing program 2 (id=1467): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) io_uring_register$auto(0x2, 0x21, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, 0x0, 0x240400a5) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) unshare$auto(0x40000080) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/b_hnp_enable\x00', 0x400, 0x0) read$auto(r2, &(0x7f0000002440)='&\x00', 0x9) ioctl$auto_TIOCGDEV2(r1, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x7, 0xfffffffffffffffe) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0xffffffffe, 0x100000400008, 0x1000000000000df, 0x4000009b73, r4, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x5, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x10000]}, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 1m5.717690902s ago: executing program 2 (id=1472): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) clock_nanosleep$auto(0x8, 0x0, 0x0, &(0x7f00000000c0)={0x7fffffffffffffff, 0x6}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) prctl$auto(0x38, 0x3, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) unshare$auto(0x2000000000000003) 1m5.241603299s ago: executing program 3 (id=1473): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/xfrm_stat\x00', 0x40, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x10200000000000, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x24040081}, 0x40094) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) 1m4.236814224s ago: executing program 3 (id=1476): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r0 = socket(0x1d, 0x3, 0x1) getsockname$auto(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000046c0)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="4ffb5eeb"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x75, 0x21, "6d6e84a9905f0dffdcf2b0944b698e79da0eba57e5eaf234844de46646d0a3655acf6e14765da0f81c6887c83ceac2288173187445cee40f4face5dddfd46c50c9fd75ecc974000cee3903492cd3a2d436a3c9f4313c92c14837a4408a2e292d8dc193758ecbbc5fb6f1c319e62873bc5d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x101}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x40, 0xfd, "231ba520bd29799f51ac5d616222386074694e012ec21a3466b7083ca2749e9ad9ea81a39e82391093e01840efda8b90aaf6254c7721790e1b52aa23"}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc84}, 0x40040d4) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r3, &(0x7f0000008d40)='($}-)#@\x00', 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x9c10, 0xeb1, 0x40000000000a5, 0x3) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r4, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x100000000000000, 0x400053, 0x9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001100)=""/4105, 0x1009) msync$auto(0x80000000000001, 0xe4, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x16be82, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 1m3.884546106s ago: executing program 0 (id=1477): set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x3000fffff000) sysfs$auto(0x2, 0x10000000000002a, 0x0) socket(0xa, 0x1, 0x84) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) 1m3.668906827s ago: executing program 2 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0xfb, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r2, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 1m3.656494632s ago: executing program 0 (id=1479): socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{}, {0x2000009}}, 0x0) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) socket(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r1) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)=ANY=[@ANYBLOB="4561db95", @ANYRES16=r2, @ANYBLOB="010028bd700003dcdf250100000008000500010000001400020077673000"/42], 0x30}}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x3, 0x100, &(0x7f0000000080)={{0x6d90, 0x4}, {0x8000000000000001, 0x401}}, &(0x7f0000000140)={{0x401, 0x88}, {0x58ef57d9, 0x9}}) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010054bd7000fddbdf902d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 1m3.417893647s ago: executing program 2 (id=1481): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8) r2 = socket(0x10, 0x2, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000040)=""/36, 0x24) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x8, 0x0, 0x2, 0x0, 0x40009, 0xb52}, 0x6}, 0x40, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="0801"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x2d, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ee064f78de0638e31fea4f0df8f436c0134ad3", @ANYBLOB="04acd90ec10f79b8c3e8c1b7136b81fb253f1072fb363d469674837039ae01e3b103047bf85e67fb77b52dcf669c144249d14a14b7f4431a19b26373e55911221fc1329ba9d8171e7462209c07942134eb236fb62e783c6957412248781924"], 0x1ac}}, 0x4004) sendfile$auto(0x1, 0x3, 0x0, 0x74c) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x101000, 0x0) 1m2.782111557s ago: executing program 2 (id=1483): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) pread64$auto(r2, 0x0, 0x7e91, 0x7fffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000180)=0x7) sysfs$auto(0x2, 0x1f, 0x0) r4 = socket(0x2, 0x801, 0x106) listen$auto(r4, 0xf52b) getsockopt$auto(r4, 0x11c, 0x2, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e0000000000000000000100", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) 1m2.627034274s ago: executing program 0 (id=1484): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/xfrm_stat\x00', 0x40, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000800", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x20000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB, @ANYRES16=r3], 0x194}}, 0x40094) 1m2.443510454s ago: executing program 3 (id=1485): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) socket(0xa, 0x80000, 0xff) ioctl$auto(0x3, 0x402c542d, r0) write$auto(0x3, 0x0, 0xfffffdef) 1m2.233697116s ago: executing program 3 (id=1486): r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) fcntl$auto_F_GETOWNER_UIDS(0xffffffffffffffff, 0x11, 0x0) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, 0x0, 0x20048855) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) listmount$auto(0x0, 0x0, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 1m1.319496184s ago: executing program 2 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'vcan0\x00'}) (async) r1 = socket(0x10, 0x80002, 0x0) timerfd_settime$auto(r1, 0x3, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001a80), 0x1140, 0x0) ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, 0xfffffffffffffffd) (async) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x44040081) (async) r5 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) pread64$auto(r5, 0x0, 0x3, 0xd8) unshare$auto(0x3) r6 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r6, 0x0, 0x29, 0x0, 0x8000) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)="6a8b92919e9f6dc28b65516301421f1ae0f56281ed604ed1492bfd42", 0x2cd) (async) clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) 1m0.422972693s ago: executing program 0 (id=1489): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xfffffffd, 0x5, 0x0, 0x7ffffffffffffffc, 0x802) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket(0x10, 0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x10002, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) 58.869714584s ago: executing program 3 (id=1491): socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) timer_gettime$auto(0x0, 0x0) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) socket(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r1) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)=ANY=[@ANYBLOB="4561db95", @ANYRES16=r2, @ANYBLOB="010028bd700003dcdf250100000008000500010000001400020077673000"/42], 0x30}}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x3, 0x100, &(0x7f0000000080)={{0x6d90, 0x4}, {0x8000000000000001, 0x401}}, &(0x7f0000000140)={{0x401, 0x88}, {0x58ef57d9, 0x9}}) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010054bd7000fddbdf902d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 57.696120535s ago: executing program 3 (id=1493): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 2) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 45.05634806s ago: executing program 32 (id=1489): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xfffffffd, 0x5, 0x0, 0x7ffffffffffffffc, 0x802) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket(0x10, 0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x10002, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) 42.551190859s ago: executing program 33 (id=1493): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (fail_nth: 2) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 16.474612751s ago: executing program 1 (id=1574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r2 = pidfd_open$auto(0xffffffffffffffff, 0x1) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r3, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 16.400334601s ago: executing program 1 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0xfe, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r2, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 16.332434171s ago: executing program 1 (id=1576): r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, 0xfffffffffffffffc, 0x0) socket(0xa, 0x3, 0x3a) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x3, 0x3b) r2 = socket(0x2, 0x3, 0x7) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/trace_pipe\x00', 0x82002, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) r4 = memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/firmware/acpi/interrupts/gpe07\x00', 0x2a201, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0xff80000000000000, 0x409, 0x13) io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000300)="74248c83aa2cb7d323e8591372e3bb33a256dd9a168a742d256d6eb2929933d8cc1fa4385e4cfd4680d45db50cb41cff140496dd623ca8b0c16e5a636e3ea3de572702a3e126b168bd8ae53759a40b2d518dd5ec06b95a61412ae9f22a4a2402b220c1edddbd4d82ef69c9c6e6003dc4f071982d9d8eefff6f1f36ac1ffe75aa41b9af7571827797dae8f8c8e62cb72ca3fa6a49d1de0434e48ef5c4049ed5deb724844bab94b6441e7708b96489c092147e346f9064c6e2f2b200314f1325cfd7d3e0b7345735913aa9db0f457fa3c94cd9f030811f8fa35714748897f89e7bdbe3d46ba4710f2f872f9aed1ef6a4f364f967a4fe1b82662fd5941d044c71f5ee9f6a7fd35a201d2f239d00b4b9f7a005dabcde0df231b5e7762ccb756d531114f283f470ed623c4efca3d4652c0d91184aa6112290557197d7f374a9eeef3c625dda3cccfe1b9469e39bcc4bf5db13af7e498af57337c23e9b4779f9842531dd5bff3e2e54a9ae8a8a2375ea7be041d2df77574d588f2f573f1ee03f8fe36c95edbd58c87c173ddb96cdf117e3004f1e332fd3eabe2886e49e75f007cdee8ab6a15de97c121c6a8e1442d0c62ed46de1c7f8e8bb0d7fff8be61eb828743930cc7d5b93c92751758fc3a630c1b8afe318a2b206a1402125671ebd8865f61fa5287c423985fa906334104c8759b4846807459cd42dd246fa0d91b526e4306a818c905afc1645f7331387058b8707bb907112cb06097b71c2f6718b13e1fd70bfa0f12ba5fe5505b932565b8dfc63cdf1623bbcd0f7c96082b763720e6f2a2eed7994beb2e4b9ebfa824fd5e640854a78a176d83ac27334cbf05f3cc17733944f383c01f3b6ad475aaa97afba5cb4b8c787bbf516c9a382cf1cf93db50e1e54ac607617d6a44b9f0f03b4f42b955b8ff8702cca1f94712cd8ab35f93b2fbbc1577620d610fa9b26e510c9d5ce9412fb40178b8e64a3d6745d9478066c1aea30868da3b4d6a608906f6855ac04b866382aa164abf821b927c194c66fc62f3663f19cc718248819d8fb0d60e6a3b41c23c3a092c51317892e75f22ad450262e923b8d8c904869e3166572154b1ab0a5c27f00c1ffeb61dc28eae513b8549eacd6936352caff5d3e0dab6bd180d09384c6bc989022adc58ef95ccda6dff3859bdfa9d436a6614107f8e7b152519105131e92e6e039bccd671f1ad0176dd932b17a39180bf5ab95e39064ee8d5ff17b6ed39a29f51a0fe5e8632ed1d7622527b0c5ccb90ab066032bdfd1cbbfcda2e21baf6cf706873a67f9bd36e7f6299e198497f1554a69971eaf0595bc470244310acf70d5bfaacc83325e64815842cf53b943d99b17cabdb84d84fee7b8edf1e8fa2c026505fb022e3538e7ae8736ec939cd3ce175fbc737439f7025761b787a92f858124cc9b02e2b09fbc998350ee70a3a7d964fd7c412633f3bd8934fa9a7efa9c740285744c56e9e3a24b90cd748eead58efc5b55c912b352b7ae8c447a0d4e90ee3516586b407e6474ca285ae6c7b22aef38dacaa7a755f22d6c1a2d38a70a03e7ee710ad33388010679677935c16f95ab2341dd4f02c59b33a2d5a2f5e1ed41ec4ce312fe2706a586d579a140eeec2e738b559a1965eaa195852c645f88f5a1270776dba72f63ae97353dce3ccd10092801b5b96cf452f43f86bcdd692364fd39672e852b0a537bf6f4f8097a77c65a07add6b3617aca8c08fb30129f830b81ca94902d93603b1ca0f7256dfb103ca78c797ddb9f4dce453b9ca3b3cc47229443fae27f51e4a111a338509de7426b86fca2fbdc969d0996af866f51e5006be3bf65f26120189a90883590a11585af802a18b75c1a55e6584cf8f79486dbc61477f3a75477833a74e67e1d5274b0703f2db64d3be185197a72d5b1cb0e03ea76ca82feeee130d6cbe458416a54673a4591737fb974b74aed741bc48129da84ee956c222c3e2c2bb081475b2a40a2b781a53f16e36f3c34b11058564934c4b4a8c604ae025fa85e476e3b6420eafa689e765dadd71daf274a60ea86ced350eba3f0093a7286d4146dc457f4960f1a9e9e15445cd91a0e9bb7698454e985e94a6084fcc7e69849ddf95de05e553a4f48d73bd545f730bf400de860c5c74f16c0a99e9300b743980a052d32c541cd50df14ea8e637a9e01ea36ceeb3b95cff211db5cbc4dc85fc8fb6d1707c93ea49e43457fd62faf1a6d9c99784022818910b1b1e52f13b98b508dcd06d42ee42823ae952cd7b01ac8b07a3dcc4835a5fca336f263f9514f1d9224d614f5259f3cb2abc4dbc8ff3f15152493541952dbe94e03af4817e8cb105d9bec3904e9390f13b012eaf1c1ec3ff27ee35e0d8cd5378e32a6b6bc978224eea1a97c38b23c11e7efa4e1a1ce55aab59a8cb389699dc7f4fe508de768810ba6b12dc4c763bc9043e596c631e78a754c7047109af9e977fd5c8aebf9565b0121b4218ce32595d87117beecd996e14b83ea727e8a45bdde2ff070dfb1b1ed26936dd742262e01956020e9ab544c6dac968c4a8ce90f2f65314e197b18148f84f17ce02bc6f4b50c954c1988336fae422a550468481a68c1b0200eda1003c310568a3d909dad1d92c6b83e2a620bb2075995c86aaa87fa2c4bb8f2900f5601ff6ac11e751de61ce8672a33955fd6e7ed2628d45c83460a9fa8956a2ace2a1f57afa6acc9e4ba686198ce2dc7ff730320f6b6e8e431997014d62827059245386f796765617c600086a8ce605c03f779083d69137e2d04c140fc5dba26df90b08580807fe4f5f3bd04013a8fc40ca1dd395594254989488d9714327b03e95e26b7a1fdf18e6bc43a8b2f7e02c901dcc69835d3c47ae32d595a8d1adec29adcf58aaaca59ade2aa2fb846ce66ce8d89cf9c4edecdc1c9f50252800310f2e5c7d342c00351a280801f4a03d0635dd8f22f9e20a8e66480b07a9e57f6d015501908f71f23b3e5c79d54b70a885be41f0734825063739e5565fd34526f56d22b1a4e4b125ec3fa2feb544b0b5fa280f489f402e9a18f09b0b2b50efa4387f0e22735b0e99440dc25c2eba9e3ed15415a7e458df4481eedeb664379134ab35ddbb9fe53adc4bcbc1315c193c26b54ffb6ad0ee9eab633ad96225da4bc9b3259ae53150b2c137d08a4cc4173ebc03882251fa5c5aa14d49937d0dc0b08b182a7acd7b13bd442cd2a33c258a147271d6cc5d59e1835845bff1a40fbc9bed635be618400b539de4ffc2d203e414931fb7f91ef87ab25367ee217807224b7975b4e370e95754d7ca394258585453717ca42da703d1fb20714eb9b69f81ca68dbb5cb433f350524135c9891588ecb516e2aaac32648ce291a13e2a847b84a87b670c950c2dc7f028a699cc57fa5d543b1aab1e99c6e4d85debac0a5e51869925dbba95830ee67fcacd56fe66bf4b5b13ccba5f90695f05eefd88f78e849bc9f1c725451d8e9b1832d9bc9b09f80a31527416698dc157e9762e67440e410c4bb4fb6455b7ac78ab082c5193b30ac5cff030912f96403c340170014eae6be90956eb06ad4577556b57ddb853a03275da3578821ab0f8a8f1bc27fec3a3d62ec96f2dafb2fe45177f9be5d8601ac6a3971e3339b6da8c3e1e4c5d7c01ee603a9e0358db104175072ba51b73d6d584745e465b67ef1448ea0a73c52cddb31d9a77b31ab4a00027de1da4957fafd5f5289ba957bd397bcb282317bc18f6e36f150693d97d87a2bc0e573c3f84e9593dc2520e49f49665a87ca6bdea6f8ecfa97b61652e0072f1dc86e829ff6b2d29a95457fd83b3acc4222e8f652e4d07790417412b291dd368888883b9d3c4254b458e2324d6e72d79a0dfff8bd02f22983e4a798824a031b7d9d3b6ad715e52995a4d6cee35efed4aba96193b12dd0349c2040856e012b965462ad074de96c33a584fd71f984584f2d26b9d8a44c91e971946bf8e93533c1804a66cae793a148536999a1e6ee35cc0e72fceb3497cfabdbf833ec977e28ccbe6b9529b54014842624cfbd7857efab5071f1cff3e5344b3e08c25e1ed073fa14f1c2cd89df9ef355464c19420df8a3e185d6279a3b0bfab9fb3fed068b842393004077214e9393524b84602136a6d0e4de245d61e56045b7ef459ad5d80032bdbf6f849520ff51414e1922ca70870af118f8efc159ad5264650e2125a37e69f147570c52eb8628f65b92d24d6d55038f56a1a24f7fd49a1d0ed0a8b316cf35a409007a6249d861cf693869433423af89cb130a15a7bbda320f47247a8ca73fc303a60e6911143c3941d17d51040a222c54c18cdfcd52447d622419f44dd63138eea9e7747dfd217a14b9834a4fce1fd70ee1c9b15be495592824d9682c49b09389238fb04dd2f04828e746f5ba778cd071abbc29ca3b0b42c6ca3e6de33c3710b7376fab891f37728bbc29e6408b7374941d953d6609cc5631ed4ee43d2decf5698f8475103cb864f36d1320a1e93ce784f5065ee15d89970c3bc9fde23ace2167887604af52b89cfdd3bb4154d954b15e569be752fc312ae8b94ace04808988d2e33247cc570ca4ee1f939d093b3b2c8388c2cde259cd2a56c4d06a15d770d474ca659a9e057866422fc5380c7d19cd6e74ef115b26c309758f8b494a634167e85db300d87a466f877f1f5fa558f962bc09f8f34988a47dad64940f2e4a92bab4805eb9122216ad6f9471786715603f28e766ea6697811621bd3bcd4d6b4bbd0279b8df96857a4a2fe708286700e559f52cd4bd80826f1098be45481140cbef7d78f995960dd0903038b3b2c632596dda9febbc3d7290dbde84956f2a020bbdeb6ef538eeae6d35efe3d43d1a092c5fe254c41c44cc18a0a8e00491496e97a88caeaa56637573be66b9a421dd8d9b4023278c5b48ea80c15f5be29bc55eee56842bd07b7646517776f20b58c6b8721f5f0a7d7d43b70107e4db261f212cde4b6d0aaa016175ac18bec6e60710e6bc5ef8c23c5b0ad3bd57bbed059d483f3ac92cf30a0010bc680112a849fbc055546a50d82f1cbe2adebb6da8a4c2de1f5a40c9b85ce489728f00107fa1f16421c9e95c56dfce8dbc4f158e085798379cc9794fa349a0b2c866fa4e8af07fe0fce516c01c9f509b60b77981446194dfa6c3f8f00395f5c1ccbbb0f2060f5952436d20b0fa58b6e7ea8b32b44a2d0188f76b4817b20459b96eecb58551cee52d39d91a9fa520411d8407855ac94bf076da9cb573720501ef35143197efd5bf08c64f194438d874816ec83a88a527975e04ae427792c3157a706d1c7d8932231748d382641969468532ac9364b5e64876a3addbaee38f9dba0c2c0464f7fbc8086e04533073599b6eeb1ca84478b4c841ef1813d76ed6dbadb360bb2b673e6a669cf0891fc8da6d0c41d750ca6d665e8c59ee375d931feb73badfbccaf145adfe093bedc99c863f3e469ce5c4e0e9b7c8e4f63eb3c1e17dc3f622814553405415416a37ee2eb4a4d785c1dc79d9c44ad33254dd64831d67cae1c04ef890a416edc9097002f8f6df8e763a591586152d93e4fe21a10fa37ae8fe87ead735c29426f926942f7e9c6ae13a750e62c11f1c4078e6db845884b6c687ce277c62f1a3016c2491e2582f95845e55acffdd37e6ffd4b5bc923dce6e8251ff08733c57edc9a76278d2534ef0880b5c3b9112e85c352306bef1694247f4e2689c7738e30041a3039030630fc459c2acc4e479993536a0069101eac9bd10e2997361f89a8255dd2f4b3b63ba1fc63e84c0071df303b954f384b4f03440a35dc95e52c5b63d16f", 0x789ad7ab) mmap$auto(0x7ffffdfde004, 0x2020006, 0x9, 0x11, 0x8000000000000000, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001300), r0) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x606d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000800) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) execveat$auto(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)='^[#@-\x00', &(0x7f0000000140)=&(0x7f0000000100)='^[#@-\x00', 0x8e7) read$auto(0x3, 0x0, 0x8080) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x28, r8, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xdc}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1398a0584259c607}, 0x800) 16.168029586s ago: executing program 1 (id=1577): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x1a, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004340)=ANY=[@ANYBLOB='H#\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2348}, 0x1, 0x0, 0x0, 0x44}, 0x40044) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket(0x10, 0x2, 0x0) setresgid$auto(0x0, 0x0, 0x0) statmount$auto(0x0, 0x0, 0xe, 0xfffffff8) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r4, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2042, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x22, 0x0, 0x646) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e", 0x11) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000001c0), r0) 15.617672402s ago: executing program 1 (id=1578): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x200001d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r3, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @fd=r2}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_KEY(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_FILS_ERP_REALM={0x9, 0xfa, "3da1359768"}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x51) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x163) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r6], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040044}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 15.430355684s ago: executing program 1 (id=1579): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) r5 = prctl$auto_SIGCONT(0xfffffffd, 0x12, r4, 0x1139, 0xfffffffffffff428) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0xe0323c86bab67252, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000000180)="0000000000de5c85d5a2", 0xa) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 34 (id=1579): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) r5 = prctl$auto_SIGCONT(0xfffffffd, 0x12, r4, 0x1139, 0xfffffffffffff428) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x9, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0xe0323c86bab67252, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000000180)="0000000000de5c85d5a2", 0xa) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kernel console output (not intermixed with test programs): mory at tomoyo_realpath_from_path. [ 321.525846][ T9205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 323.104980][ T9225] mmap: syz.1.609 (9225) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 324.158721][ T9239] bond0: invalid ARP target specified [ 324.185654][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.612'. [ 324.937037][ T9257] kvm: kvm [9256]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 325.534234][ T9260] FAULT_INJECTION: forcing a failure. [ 325.534234][ T9260] name failslab, interval 1, probability 0, space 0, times 0 [ 325.638609][ T9260] CPU: 0 UID: 0 PID: 9260 Comm: syz.3.618 Not tainted syzkaller #0 PREEMPT(full) [ 325.638637][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 325.638649][ T9260] Call Trace: [ 325.638656][ T9260] [ 325.638663][ T9260] dump_stack_lvl+0x100/0x190 [ 325.638700][ T9260] should_fail_ex.cold+0x5/0xa [ 325.638726][ T9260] should_failslab+0xc2/0x120 [ 325.638749][ T9260] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 325.638781][ T9260] ? security_inode_alloc+0x3b/0x2c0 [ 325.638811][ T9260] ? lockdep_init_map_type+0x5c/0x250 [ 325.638842][ T9260] security_inode_alloc+0x3b/0x2c0 [ 325.638872][ T9260] inode_init_always_gfp+0xcc0/0x1000 [ 325.638899][ T9260] alloc_inode+0x8e/0x250 [ 325.638927][ T9260] path_from_stashed+0x25b/0x750 [ 325.638957][ T9260] pidfs_alloc_file+0xf8/0x290 [ 325.638979][ T9260] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 325.639006][ T9260] pidfd_prepare+0x123/0x200 [ 325.639032][ T9260] __x64_sys_pidfd_open+0x105/0x1a0 [ 325.639062][ T9260] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 325.639099][ T9260] do_syscall_64+0x10b/0xf80 [ 325.639117][ T9260] ? clear_bhb_loop+0x40/0x90 [ 325.639142][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.639162][ T9260] RIP: 0033:0x7f1f91f9c819 [ 325.639178][ T9260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.639197][ T9260] RSP: 002b:00007f1f92db6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 325.639216][ T9260] RAX: ffffffffffffffda RBX: 00007f1f92216090 RCX: 00007f1f91f9c819 [ 325.639229][ T9260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000002f6 [ 325.639241][ T9260] RBP: 00007f1f92032c91 R08: 0000000000000000 R09: 0000000000000000 [ 325.639253][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.639264][ T9260] R13: 00007f1f92216128 R14: 00007f1f92216090 R15: 00007fff771e56b8 [ 325.639290][ T9260] [ 326.229730][ T9271] FAULT_INJECTION: forcing a failure. [ 326.229730][ T9271] name failslab, interval 1, probability 0, space 0, times 0 [ 326.242399][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.2.621 Not tainted syzkaller #0 PREEMPT(full) [ 326.242439][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 326.242456][ T9271] Call Trace: [ 326.242467][ T9271] [ 326.242478][ T9271] dump_stack_lvl+0x100/0x190 [ 326.242535][ T9271] should_fail_ex.cold+0x5/0xa [ 326.242573][ T9271] should_failslab+0xc2/0x120 [ 326.242609][ T9271] __kmalloc_cache_noprof+0x7a/0x6f0 [ 326.242651][ T9271] ? snd_ctl_notify.part.0+0x337/0x650 [ 326.242709][ T9271] snd_ctl_notify.part.0+0x337/0x650 [ 326.242769][ T9271] snd_ctl_notify_one+0x2a4/0x300 [ 326.242818][ T9271] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 326.242876][ T9271] ? mark_held_locks+0x40/0x70 [ 326.242921][ T9271] __snd_ctl_add_replace+0x60b/0x840 [ 326.242959][ T9271] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 326.242997][ T9271] ? __kmalloc_noprof+0x320/0x850 [ 326.243054][ T9271] ? snd_ctl_new+0x13c/0x1a0 [ 326.243107][ T9271] snd_ctl_elem_add+0x832/0x1370 [ 326.243147][ T9271] ? __might_fault+0xc5/0x140 [ 326.243203][ T9271] ? __might_fault+0xc5/0x140 [ 326.243245][ T9271] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 326.243285][ T9271] snd_ctl_elem_add_user+0xc5/0x170 [ 326.243316][ T9271] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 326.243346][ T9271] ? find_held_lock+0x2b/0x80 [ 326.243424][ T9271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 326.243458][ T9271] ? do_vfs_ioctl+0x226/0x13e0 [ 326.243507][ T9271] snd_ctl_ioctl+0xbdf/0x1330 [ 326.243539][ T9271] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 326.243575][ T9271] ? find_held_lock+0x2b/0x80 [ 326.243604][ T9271] ? __fget_files+0x215/0x3d0 [ 326.243633][ T9271] ? hook_file_ioctl_common+0x149/0x410 [ 326.243690][ T9271] ? __fget_files+0x21f/0x3d0 [ 326.243726][ T9271] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 326.243759][ T9271] __x64_sys_ioctl+0x18e/0x210 [ 326.243808][ T9271] do_syscall_64+0x10b/0xf80 [ 326.243836][ T9271] ? clear_bhb_loop+0x40/0x90 [ 326.243874][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.243906][ T9271] RIP: 0033:0x7f18f379c819 [ 326.243931][ T9271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.243960][ T9271] RSP: 002b:00007f18f463e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.243990][ T9271] RAX: ffffffffffffffda RBX: 00007f18f3a15fa0 RCX: 00007f18f379c819 [ 326.244010][ T9271] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000009 [ 326.244029][ T9271] RBP: 00007f18f3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 326.244054][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.244071][ T9271] R13: 00007f18f3a16038 R14: 00007f18f3a15fa0 R15: 00007ffd165bab08 [ 326.244111][ T9271] [ 326.244129][ T9271] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 326.620356][ T30] audit: type=1326 audit(1776182731.809:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.1.620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5439c819 code=0x0 [ 326.742236][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.619'. [ 328.224725][ T9303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.628'. [ 329.433940][ T9309] Invalid ELF header magic: != ELF [ 329.799786][ T9327] bond0: invalid ARP target specified [ 331.049223][ T9347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.639'. [ 331.779656][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'. [ 335.109075][ T9404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 335.576730][ T30] audit: type=1326 audit(1776182740.759:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.651" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0df9c819 code=0x0 [ 336.904546][ T9434] bond0: invalid ARP target specified [ 338.160375][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 338.370532][ T9439] Invalid ELF header magic: != ELF [ 338.644823][ T9452] syz.2.661 uses obsolete (PF_INET,SOCK_PACKET) [ 339.099728][ T30] audit: type=1326 audit(1776182744.289:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f91f9c819 code=0x0 [ 339.806456][ T9476] bond0: invalid ARP target specified [ 341.460013][ T9506] netlink: 'syz.2.672': attribute type 8 has an invalid length. [ 342.000955][ T30] audit: type=1326 audit(1776182747.189:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.2.677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18f379c819 code=0x0 [ 342.638230][ T9531] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 342.764766][ T9525] Invalid ELF header magic: != ELF [ 342.859375][ T9533] FAULT_INJECTION: forcing a failure. [ 342.859375][ T9533] name failslab, interval 1, probability 0, space 0, times 0 [ 342.872017][ T9533] CPU: 1 UID: 0 PID: 9533 Comm: syz.2.680 Not tainted syzkaller #0 PREEMPT(full) [ 342.872043][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 342.872057][ T9533] Call Trace: [ 342.872064][ T9533] [ 342.872071][ T9533] dump_stack_lvl+0x100/0x190 [ 342.872111][ T9533] should_fail_ex.cold+0x5/0xa [ 342.872138][ T9533] should_failslab+0xc2/0x120 [ 342.872163][ T9533] __kmalloc_cache_noprof+0x7a/0x6f0 [ 342.872194][ T9533] ? snd_ctl_notify.part.0+0x337/0x650 [ 342.872234][ T9533] snd_ctl_notify.part.0+0x337/0x650 [ 342.872277][ T9533] snd_ctl_notify_one+0x2a4/0x300 [ 342.872312][ T9533] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 342.872362][ T9533] ? mark_held_locks+0x40/0x70 [ 342.872392][ T9533] __snd_ctl_add_replace+0x60b/0x840 [ 342.872417][ T9533] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 342.872442][ T9533] ? __kmalloc_noprof+0x320/0x850 [ 342.872475][ T9533] ? snd_ctl_new+0x13c/0x1a0 [ 342.872509][ T9533] snd_ctl_elem_add+0x832/0x1370 [ 342.872535][ T9533] ? __might_fault+0xc5/0x140 [ 342.872565][ T9533] ? __might_fault+0xc5/0x140 [ 342.872596][ T9533] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 342.872624][ T9533] snd_ctl_elem_add_user+0xc5/0x170 [ 342.872645][ T9533] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 342.872666][ T9533] ? find_held_lock+0x2b/0x80 [ 342.872705][ T9533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.872728][ T9533] ? do_vfs_ioctl+0x226/0x13e0 [ 342.872762][ T9533] snd_ctl_ioctl+0xbdf/0x1330 [ 342.872783][ T9533] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 342.872806][ T9533] ? find_held_lock+0x2b/0x80 [ 342.872825][ T9533] ? __fget_files+0x215/0x3d0 [ 342.872844][ T9533] ? hook_file_ioctl_common+0x149/0x410 [ 342.872888][ T9533] ? __fget_files+0x21f/0x3d0 [ 342.872912][ T9533] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 342.872935][ T9533] __x64_sys_ioctl+0x18e/0x210 [ 342.872968][ T9533] do_syscall_64+0x10b/0xf80 [ 342.872987][ T9533] ? clear_bhb_loop+0x40/0x90 [ 342.873012][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.873033][ T9533] RIP: 0033:0x7f18f379c819 [ 342.873051][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.873070][ T9533] RSP: 002b:00007f18f463e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.873089][ T9533] RAX: ffffffffffffffda RBX: 00007f18f3a15fa0 RCX: 00007f18f379c819 [ 342.873102][ T9533] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000006 [ 342.873114][ T9533] RBP: 00007f18f3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 342.873126][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.873138][ T9533] R13: 00007f18f3a16038 R14: 00007f18f3a15fa0 R15: 00007ffd165bab08 [ 342.873163][ T9533] [ 342.873176][ T9533] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 344.325190][ T9555] FAULT_INJECTION: forcing a failure. [ 344.325190][ T9555] name failslab, interval 1, probability 0, space 0, times 0 [ 344.348126][ T9555] CPU: 0 UID: 0 PID: 9555 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT(full) [ 344.348159][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 344.348174][ T9555] Call Trace: [ 344.348182][ T9555] [ 344.348191][ T9555] dump_stack_lvl+0x100/0x190 [ 344.348235][ T9555] should_fail_ex.cold+0x5/0xa [ 344.348265][ T9555] should_failslab+0xc2/0x120 [ 344.348293][ T9555] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 344.348334][ T9555] ? __alloc_skb+0x140/0x710 [ 344.348373][ T9555] __alloc_skb+0x140/0x710 [ 344.348405][ T9555] ? __alloc_skb+0x5b7/0x710 [ 344.348438][ T9555] ? __pfx___alloc_skb+0x10/0x10 [ 344.348472][ T9555] ? apparmor_capable+0x1d7/0x4d0 [ 344.348513][ T9555] netlink_alloc_large_skb+0x69/0x150 [ 344.348539][ T9555] netlink_sendmsg+0x680/0xda0 [ 344.348567][ T9555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.348589][ T9555] ? __import_iovec+0x1d2/0x640 [ 344.348615][ T9555] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 344.348652][ T9555] ____sys_sendmsg+0x9e1/0xb70 [ 344.348677][ T9555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.348702][ T9555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.348743][ T9555] ___sys_sendmsg+0x190/0x1e0 [ 344.348780][ T9555] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.348843][ T9555] __sys_sendmsg+0x170/0x220 [ 344.348880][ T9555] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.348935][ T9555] do_syscall_64+0x10b/0xf80 [ 344.348956][ T9555] ? clear_bhb_loop+0x40/0x90 [ 344.348986][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.349010][ T9555] RIP: 0033:0x7f9b5439c819 [ 344.349029][ T9555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.349052][ T9555] RSP: 002b:00007f9b55264028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.349075][ T9555] RAX: ffffffffffffffda RBX: 00007f9b54615fa0 RCX: 00007f9b5439c819 [ 344.349091][ T9555] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000003 [ 344.349105][ T9555] RBP: 00007f9b55264090 R08: 0000000000000000 R09: 0000000000000000 [ 344.349119][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.349133][ T9555] R13: 00007f9b54616038 R14: 00007f9b54615fa0 R15: 00007ffd13cefe68 [ 344.349163][ T9555] [ 346.617770][ T9571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.696'. [ 347.056636][ T9583] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 347.256140][ T9583] bond0: option all_slaves_active: invalid value (7) [ 348.719203][ T9615] blktrace: Concurrent blktraces are not allowed on loop2 [ 349.894287][ T9645] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 352.016563][ T9664] bond0: invalid ARP target specified [ 352.236626][ T30] audit: type=1326 audit(1776182757.419:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.1.709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5439c819 code=0x0 [ 352.465246][ T9683] bond0: invalid ARP target specified [ 353.600030][ T9686] Invalid ELF header magic: != ELF [ 353.797905][ T9700] vivid-007: ================= START STATUS ================= [ 353.805700][ T9700] vivid-007: Generate PTS: true [ 353.812866][ T9700] vivid-007: Generate SCR: true [ 353.818078][ T9700] tpg source WxH: 320x240 (Y'CbCr) [ 353.823221][ T9700] tpg field: 1 [ 353.826857][ T9700] tpg crop: (0,0)/320x240 [ 353.831373][ T9700] tpg compose: (0,0)/320x240 [ 353.837492][ T9700] tpg colorspace: 8 [ 353.837519][ T9700] tpg transfer function: 0/0 [ 353.837538][ T9700] tpg Y'CbCr encoding: 0/0 [ 353.837549][ T9700] tpg quantization: 0/0 [ 353.837560][ T9700] tpg RGB range: 0/2 [ 353.837571][ T9700] vivid-007: ================== END STATUS ================== [ 353.866777][ T9708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 355.917327][ T30] audit: type=1326 audit(1776182761.109:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9739 comm="syz.2.721" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18f379c819 code=0x0 [ 356.077606][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.722'. [ 356.371672][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.724'. [ 359.806658][ T7446] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 359.959733][ T30] audit: type=1326 audit(1776182765.139:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.3.734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f91f9c819 code=0x0 [ 360.278292][ T9808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 360.678259][ T9816] bond0: invalid ARP target specified [ 365.321387][ T30] audit: type=1326 audit(1776182770.509:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.0.747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0df9c819 code=0x0 [ 366.061838][ T9884] bond0: invalid ARP target specified [ 368.200849][ T9929] syz.1.761 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 369.893450][ T9926] bond0: invalid ARP target specified [ 371.737066][ T9977] FAULT_INJECTION: forcing a failure. [ 371.737066][ T9977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.836580][ T9977] CPU: 1 UID: 0 PID: 9977 Comm: syz.0.767 Not tainted syzkaller #0 PREEMPT(full) [ 371.836620][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 371.836635][ T9977] Call Trace: [ 371.836642][ T9977] [ 371.836649][ T9977] dump_stack_lvl+0x100/0x190 [ 371.836687][ T9977] should_fail_ex.cold+0x5/0xa [ 371.836712][ T9977] _copy_from_user+0x2e/0xd0 [ 371.836746][ T9977] msr_io+0x93/0x480 [ 371.836767][ T9977] ? __pfx_do_set_msr+0x10/0x10 [ 371.836795][ T9977] ? __pfx_msr_io+0x10/0x10 [ 371.836817][ T9977] ? __kernel_text_address+0xd/0x30 [ 371.836852][ T9977] kvm_arch_vcpu_ioctl+0xd32/0x5740 [ 371.836875][ T9977] ? kvm_arch_vcpu_ioctl+0xd14/0x5740 [ 371.836905][ T9977] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 371.836945][ T9977] ? __pfx_stack_trace_save+0x10/0x10 [ 371.836967][ T9977] ? stack_depot_save_flags+0x27/0x9d0 [ 371.836991][ T9977] ? __lock_acquire+0x4a5/0x2630 [ 371.837019][ T9977] ? tomoyo_path_number_perm+0x46d/0x580 [ 371.837055][ T9977] ? __lock_acquire+0x4a5/0x2630 [ 371.837082][ T9977] ? do_syscall_64+0x10b/0xf80 [ 371.837101][ T9977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.837140][ T9977] ? lock_acquire+0x1cf/0x380 [ 371.837170][ T9977] ? rcu_is_watching+0x12/0xc0 [ 371.837207][ T9977] ? trace_contention_end+0x140/0x180 [ 371.837235][ T9977] ? __mutex_lock+0x26a/0x1b90 [ 371.837256][ T9977] ? kvm_vcpu_ioctl+0x322/0x1730 [ 371.837288][ T9977] ? __pfx___mutex_lock+0x10/0x10 [ 371.837307][ T9977] ? kasan_quarantine_put+0x104/0x240 [ 371.837339][ T9977] ? lockdep_hardirqs_on+0x78/0x100 [ 371.837373][ T9977] ? tomoyo_path_number_perm+0x28f/0x580 [ 371.837427][ T9977] ? tomoyo_path_number_perm+0x188/0x580 [ 371.837489][ T9977] ? kvm_vcpu_ioctl+0x8a0/0x1730 [ 371.837521][ T9977] kvm_vcpu_ioctl+0x8a0/0x1730 [ 371.837560][ T9977] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 371.837594][ T9977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.837620][ T9977] ? do_vfs_ioctl+0x226/0x13e0 [ 371.837675][ T9977] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 371.837718][ T9977] ? find_held_lock+0x2b/0x80 [ 371.837740][ T9977] ? __fget_files+0x215/0x3d0 [ 371.837762][ T9977] ? hook_file_ioctl_common+0x149/0x410 [ 371.837805][ T9977] ? __fget_files+0x21f/0x3d0 [ 371.837832][ T9977] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 371.837867][ T9977] __x64_sys_ioctl+0x18e/0x210 [ 371.837905][ T9977] do_syscall_64+0x10b/0xf80 [ 371.837925][ T9977] ? clear_bhb_loop+0x40/0x90 [ 371.837953][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.837977][ T9977] RIP: 0033:0x7fed0df9c819 [ 371.837996][ T9977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.838018][ T9977] RSP: 002b:00007fed0ed87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.838043][ T9977] RAX: ffffffffffffffda RBX: 00007fed0e215fa0 RCX: 00007fed0df9c819 [ 371.838059][ T9977] RDX: 0000200000000140 RSI: 000000004008ae89 RDI: 0000000000000004 [ 371.838073][ T9977] RBP: 00007fed0ed87090 R08: 0000000000000000 R09: 0000000000000000 [ 371.838086][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.838100][ T9977] R13: 00007fed0e216038 R14: 00007fed0e215fa0 R15: 00007ffe23a01a98 [ 371.838129][ T9977] [ 372.608424][ T9983] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 372.778352][ T30] audit: type=1326 audit(1776182777.959:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0df9c819 code=0x0 [ 374.023075][ T30] audit: type=1326 audit(1776182779.209:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.3.782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f91f9c819 code=0x0 [ 374.277771][T10015] bond0: invalid ARP target specified [ 377.449802][T10074] bond0: invalid ARP target specified [ 378.611483][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.617989][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.940196][T10105] Invalid ELF header magic: != ELF [ 381.176324][ T30] audit: type=1800 audit(1776182786.359:63): pid=10112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.793" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 381.906601][T10130] bond0: invalid ARP target specified [ 382.335604][T10135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'. [ 382.441246][T10139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.797'. [ 382.938346][ T30] audit: type=1326 audit(1776182788.129:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.2.799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18f379c819 code=0x0 [ 385.056961][T10177] bond0: invalid ARP target specified [ 386.403824][T10195] FAULT_INJECTION: forcing a failure. [ 386.403824][T10195] name failslab, interval 1, probability 0, space 0, times 0 [ 386.451995][T10195] CPU: 1 UID: 0 PID: 10195 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT(full) [ 386.452031][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.452047][T10195] Call Trace: [ 386.452056][T10195] [ 386.452066][T10195] dump_stack_lvl+0x100/0x190 [ 386.452116][T10195] should_fail_ex.cold+0x5/0xa [ 386.452150][T10195] should_failslab+0xc2/0x120 [ 386.452179][T10195] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 386.452235][T10195] ? __d_alloc+0x34/0xa80 [ 386.452267][T10195] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 386.452298][T10195] ? lockdep_hardirqs_on+0x78/0x100 [ 386.452346][T10195] __d_alloc+0x34/0xa80 [ 386.452380][T10195] d_alloc+0x4a/0x1e0 [ 386.452412][T10195] d_alloc_name+0x83/0xb0 [ 386.452442][T10195] ? __pfx_d_alloc_name+0x10/0x10 [ 386.452478][T10195] ? dput.part.0+0xdd/0x570 [ 386.452516][T10195] simple_fill_super+0x4c3/0x680 [ 386.452550][T10195] ? __pfx_nfsd_fill_super+0x10/0x10 [ 386.452588][T10195] nfsd_fill_super+0x98/0x560 [ 386.452621][T10195] ? __pfx_set_anon_super_fc+0x10/0x10 [ 386.452662][T10195] ? __pfx_nfsd_fill_super+0x10/0x10 [ 386.452697][T10195] get_tree_keyed+0x10e/0x1d0 [ 386.452722][T10195] vfs_get_tree+0x92/0x320 [ 386.452760][T10195] path_mount+0x7d0/0x23d0 [ 386.452797][T10195] ? __pfx_path_mount+0x10/0x10 [ 386.452827][T10195] ? lockdep_hardirqs_on+0x78/0x100 [ 386.452873][T10195] ? putname+0xb1/0x110 [ 386.452901][T10195] ? kmem_cache_free+0x124/0x6a0 [ 386.452949][T10195] ? __x64_sys_mount+0x293/0x310 [ 386.452999][T10195] __x64_sys_mount+0x293/0x310 [ 386.453034][T10195] ? __pfx___x64_sys_mount+0x10/0x10 [ 386.453077][T10195] do_syscall_64+0x10b/0xf80 [ 386.453101][T10195] ? clear_bhb_loop+0x40/0x90 [ 386.453138][T10195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.453165][T10195] RIP: 0033:0x7f9b5439c819 [ 386.453188][T10195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.453228][T10195] RSP: 002b:00007f9b55264028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 386.453252][T10195] RAX: ffffffffffffffda RBX: 00007f9b54615fa0 RCX: 00007f9b5439c819 [ 386.453268][T10195] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.453283][T10195] RBP: 00007f9b54432c91 R08: 0000000000000000 R09: 0000000000000000 [ 386.453298][T10195] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 386.453330][T10195] R13: 00007f9b54616038 R14: 00007f9b54615fa0 R15: 00007ffd13cefe68 [ 386.453365][T10195] [ 386.878259][ T30] audit: type=1326 audit(1776182792.049:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.2.811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18f379c819 code=0x0 [ 387.311110][T10215] tc_dump_action: action bad kind [ 390.527109][ T30] audit: type=1326 audit(1776182795.719:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.0.822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0df9c819 code=0x0 [ 392.626999][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.827'. [ 392.639817][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.826'. [ 393.141180][T10292] FAULT_INJECTION: forcing a failure. [ 393.141180][T10292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.155604][T10292] CPU: 1 UID: 0 PID: 10292 Comm: syz.0.832 Not tainted syzkaller #0 PREEMPT(full) [ 393.155642][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.155668][T10292] Call Trace: [ 393.155678][T10292] [ 393.155690][T10292] dump_stack_lvl+0x100/0x190 [ 393.155747][T10292] should_fail_ex.cold+0x5/0xa [ 393.155788][T10292] _copy_to_user+0x32/0xd0 [ 393.155843][T10292] simple_read_from_buffer+0xcb/0x170 [ 393.155900][T10292] proc_fail_nth_read+0x1af/0x230 [ 393.155947][T10292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.155995][T10292] ? rw_verify_area+0xce/0x6d0 [ 393.156043][T10292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.156088][T10292] vfs_read+0x1e4/0xb30 [ 393.156124][T10292] ? __pfx_vfs_read+0x10/0x10 [ 393.156155][T10292] ? __fget_files+0x215/0x3d0 [ 393.156201][T10292] ? __fget_files+0x21f/0x3d0 [ 393.156245][T10292] ksys_read+0x12a/0x250 [ 393.156275][T10292] ? __pfx_ksys_read+0x10/0x10 [ 393.156318][T10292] do_syscall_64+0x10b/0xf80 [ 393.156349][T10292] ? clear_bhb_loop+0x40/0x90 [ 393.156388][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.156422][T10292] RIP: 0033:0x7fed0df5d04e [ 393.156448][T10292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 393.156478][T10292] RSP: 002b:00007fed0ed86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.156509][T10292] RAX: ffffffffffffffda RBX: 00007fed0ed876c0 RCX: 00007fed0df5d04e [ 393.156530][T10292] RDX: 000000000000000f RSI: 00007fed0ed870a0 RDI: 000000000000000a [ 393.156561][T10292] RBP: 00007fed0ed87090 R08: 0000000000000000 R09: 0000000000000000 [ 393.156579][T10292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.156597][T10292] R13: 00007fed0e216038 R14: 00007fed0e215fa0 R15: 00007ffe23a01a98 [ 393.156650][T10292] [ 393.507172][T10282] Process accounting resumed [ 395.060913][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.839'. [ 395.872051][T10340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'. [ 399.019267][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.851'. [ 402.120028][T10434] random: crng reseeded on system resumption [ 402.232770][ T7446] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 403.059643][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.865'. [ 404.384679][T10476] bond0: invalid ARP target specified [ 406.224315][T10495] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 408.964634][T10533] bond0: invalid ARP target specified [ 410.389635][T10567] FAULT_INJECTION: forcing a failure. [ 410.389635][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 410.402276][T10567] CPU: 1 UID: 0 PID: 10567 Comm: syz.3.887 Not tainted syzkaller #0 PREEMPT(full) [ 410.402301][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 410.402313][T10567] Call Trace: [ 410.402320][T10567] [ 410.402327][T10567] dump_stack_lvl+0x100/0x190 [ 410.402364][T10567] should_fail_ex.cold+0x5/0xa [ 410.402390][T10567] should_failslab+0xc2/0x120 [ 410.402414][T10567] __kmalloc_cache_noprof+0x7a/0x6f0 [ 410.402442][T10567] ? snd_ctl_notify.part.0+0x337/0x650 [ 410.402480][T10567] snd_ctl_notify.part.0+0x337/0x650 [ 410.402520][T10567] snd_ctl_notify_one+0x2a4/0x300 [ 410.402553][T10567] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 410.402592][T10567] ? mark_held_locks+0x40/0x70 [ 410.402623][T10567] __snd_ctl_add_replace+0x60b/0x840 [ 410.402648][T10567] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 410.402673][T10567] ? __kmalloc_noprof+0x320/0x850 [ 410.402705][T10567] ? snd_ctl_new+0x13c/0x1a0 [ 410.402739][T10567] snd_ctl_elem_add+0x832/0x1370 [ 410.402765][T10567] ? __might_fault+0xc5/0x140 [ 410.402795][T10567] ? __might_fault+0xc5/0x140 [ 410.402827][T10567] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 410.402854][T10567] snd_ctl_elem_add_user+0xc5/0x170 [ 410.402875][T10567] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 410.402896][T10567] ? find_held_lock+0x2b/0x80 [ 410.402935][T10567] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 410.402958][T10567] ? do_vfs_ioctl+0x226/0x13e0 [ 410.402992][T10567] snd_ctl_ioctl+0xbdf/0x1330 [ 410.403012][T10567] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 410.403036][T10567] ? find_held_lock+0x2b/0x80 [ 410.403055][T10567] ? __fget_files+0x215/0x3d0 [ 410.403074][T10567] ? hook_file_ioctl_common+0x149/0x410 [ 410.403113][T10567] ? __fget_files+0x21f/0x3d0 [ 410.403136][T10567] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 410.403158][T10567] __x64_sys_ioctl+0x18e/0x210 [ 410.403197][T10567] do_syscall_64+0x10b/0xf80 [ 410.403216][T10567] ? clear_bhb_loop+0x40/0x90 [ 410.403241][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.403262][T10567] RIP: 0033:0x7f1f91f9c819 [ 410.403279][T10567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.403298][T10567] RSP: 002b:00007f1f92dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.403317][T10567] RAX: ffffffffffffffda RBX: 00007f1f92215fa0 RCX: 00007f1f91f9c819 [ 410.403331][T10567] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000009 [ 410.403344][T10567] RBP: 00007f1f92032c91 R08: 0000000000000000 R09: 0000000000000000 [ 410.403356][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.403368][T10567] R13: 00007f1f92216038 R14: 00007f1f92215fa0 R15: 00007fff771e56b8 [ 410.403393][T10567] [ 410.403406][T10567] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 411.813185][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 412.583546][T10595] netlink: 326 bytes leftover after parsing attributes in process `syz.2.893'. [ 412.623506][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.631471][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.294670][T10603] : Can't lookup blockdev [ 413.516509][T10605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.896'. [ 413.691414][T10606] ICMPv6: process `syz.1.896' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 414.871467][T10621] Process accounting resumed [ 416.653646][T10656] netlink: 326 bytes leftover after parsing attributes in process `syz.3.906'. [ 416.677644][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.685084][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.541949][T10687] bond0: invalid ARP target specified [ 420.538628][T10723] FAULT_INJECTION: forcing a failure. [ 420.538628][T10723] name failslab, interval 1, probability 0, space 0, times 0 [ 420.576279][T10723] CPU: 1 UID: 0 PID: 10723 Comm: syz.0.915 Not tainted syzkaller #0 PREEMPT(full) [ 420.576319][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.576345][T10723] Call Trace: [ 420.576355][T10723] [ 420.576367][T10723] dump_stack_lvl+0x100/0x190 [ 420.576423][T10723] should_fail_ex.cold+0x5/0xa [ 420.576464][T10723] should_failslab+0xc2/0x120 [ 420.576502][T10723] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 420.576554][T10723] ? dst_alloc+0x99/0x1a0 [ 420.576605][T10723] dst_alloc+0x99/0x1a0 [ 420.576671][T10723] rt_dst_alloc+0x35/0x3a0 [ 420.576701][T10723] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 420.576748][T10723] ip_route_output_key_hash+0x118/0x2b0 [ 420.576785][T10723] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 420.576831][T10723] ? find_held_lock+0x2b/0x80 [ 420.576863][T10723] ip_route_output_flow+0x27/0x150 [ 420.576902][T10723] udp_sendmsg+0x1a77/0x2890 [ 420.576950][T10723] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 420.576999][T10723] ? __pfx_udp_sendmsg+0x10/0x10 [ 420.577068][T10723] ? aa_sk_perm+0x309/0xaa0 [ 420.577128][T10723] ? __pfx_udp_sendmsg+0x10/0x10 [ 420.577173][T10723] inet_sendmsg+0x105/0x140 [ 420.577207][T10723] ____sys_sendmsg+0x98d/0xb70 [ 420.577237][T10723] ? __pfx_inet_sendmsg+0x10/0x10 [ 420.577273][T10723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.577310][T10723] ? __pfx__kstrtoull+0x10/0x10 [ 420.577359][T10723] ___sys_sendmsg+0x190/0x1e0 [ 420.577395][T10723] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.577445][T10723] ? find_held_lock+0x2b/0x80 [ 420.577495][T10723] __sys_sendmmsg+0x205/0x430 [ 420.577542][T10723] ? __pfx___sys_sendmmsg+0x10/0x10 [ 420.577596][T10723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 420.577640][T10723] ? fput+0x79/0x100 [ 420.577673][T10723] ? ksys_write+0x1ac/0x250 [ 420.577699][T10723] ? __pfx_ksys_write+0x10/0x10 [ 420.577732][T10723] __x64_sys_sendmmsg+0x9c/0x100 [ 420.577774][T10723] ? lockdep_hardirqs_on+0x78/0x100 [ 420.577831][T10723] do_syscall_64+0x10b/0xf80 [ 420.577856][T10723] ? clear_bhb_loop+0x40/0x90 [ 420.577889][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.577917][T10723] RIP: 0033:0x7fed0df9c819 [ 420.577940][T10723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.577972][T10723] RSP: 002b:00007fed0ed87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.577998][T10723] RAX: ffffffffffffffda RBX: 00007fed0e215fa0 RCX: 00007fed0df9c819 [ 420.578015][T10723] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 420.578032][T10723] RBP: 00007fed0ed87090 R08: 0000000000000000 R09: 0000000000000000 [ 420.578048][T10723] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 420.578064][T10723] R13: 00007fed0e216038 R14: 00007fed0e215fa0 R15: 00007ffe23a01a98 [ 420.578099][T10723] [ 422.287051][T10730] bond0: invalid ARP target specified [ 422.817883][T10740] [U] ^B [ 422.970784][T10740] kvm: kvm [10739]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 423.977301][T10749] zswap: compressor Ñ not available [ 424.143773][T10748] Process accounting paused [ 424.210104][T10767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.926'. [ 424.386166][T10745] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 425.910980][T10795] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 425.946075][T10787] bond0: invalid ARP target specified [ 427.052101][T10818] FAULT_INJECTION: forcing a failure. [ 427.052101][T10818] name failslab, interval 1, probability 0, space 0, times 0 [ 427.065019][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.2.938 Not tainted syzkaller #0 PREEMPT(full) [ 427.065055][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.065072][T10818] Call Trace: [ 427.065081][T10818] [ 427.065090][T10818] dump_stack_lvl+0x100/0x190 [ 427.065142][T10818] should_fail_ex.cold+0x5/0xa [ 427.065178][T10818] should_failslab+0xc2/0x120 [ 427.065211][T10818] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 427.065258][T10818] ? ep_ptable_queue_proc+0x5b/0x280 [ 427.065297][T10818] ep_ptable_queue_proc+0x5b/0x280 [ 427.065326][T10818] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 427.065354][T10818] snd_seq_pool_poll_wait+0x5b/0x190 [ 427.065400][T10818] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 427.065458][T10818] snd_seq_oss_poll+0x17d/0x1d0 [ 427.065502][T10818] ? __pfx_odev_poll+0x10/0x10 [ 427.065534][T10818] odev_poll+0x4a/0x90 [ 427.065576][T10818] ep_item_poll+0x141/0x1f0 [ 427.065616][T10818] do_epoll_ctl+0x1f33/0x36a0 [ 427.065674][T10818] ? __pfx_do_epoll_ctl+0x10/0x10 [ 427.065713][T10818] ? find_held_lock+0x2b/0x80 [ 427.065746][T10818] ? __might_fault+0xc5/0x140 [ 427.065796][T10818] ? __might_fault+0xc5/0x140 [ 427.065844][T10818] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 427.065895][T10818] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 427.065934][T10818] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 427.065977][T10818] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 427.066031][T10818] do_syscall_64+0x10b/0xf80 [ 427.066063][T10818] ? clear_bhb_loop+0x40/0x90 [ 427.066105][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.066140][T10818] RIP: 0033:0x7f18f379c819 [ 427.066167][T10818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.066211][T10818] RSP: 002b:00007f18f463e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 427.066242][T10818] RAX: ffffffffffffffda RBX: 00007f18f3a15fa0 RCX: 00007f18f379c819 [ 427.066263][T10818] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000009 [ 427.066282][T10818] RBP: 00007f18f3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 427.066302][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.066322][T10818] R13: 00007f18f3a16038 R14: 00007f18f3a15fa0 R15: 00007ffd165bab08 [ 427.066366][T10818] [ 428.146909][T10836] bond0: invalid ARP target specified [ 429.365305][T10846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 429.385955][T10846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 429.941293][T10862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.954'. [ 429.951684][T10862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.954'. [ 432.566990][T10896] bond0: invalid ARP target specified [ 432.912800][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 432.971375][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 433.066836][ T30] audit: type=1326 audit(1776182838.249:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.1.957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5439c819 code=0x0 [ 434.272155][T10942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.961'. [ 434.790868][T10969] bond0: invalid ARP target specified [ 435.903840][T10982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.968'. [ 435.927952][T10982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.968'. [ 435.937779][ T30] audit: type=1326 audit(1776182841.129:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.3.969" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f91f9c819 code=0x0 [ 438.334154][T11020] bond0: invalid ARP target specified [ 438.776489][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'. [ 439.290501][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.981'. [ 439.354946][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.981'. [ 439.553045][T11039] tc_dump_action: action bad kind [ 440.050287][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.057258][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.832199][T11043] bond0: invalid ARP target specified [ 441.595401][T11062] syz.3.987(11062): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 442.521189][T11083] FAULT_INJECTION: forcing a failure. [ 442.521189][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 442.533837][T11083] CPU: 1 UID: 0 PID: 11083 Comm: syz.3.993 Not tainted syzkaller #0 PREEMPT(full) [ 442.533862][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 442.533874][T11083] Call Trace: [ 442.533881][T11083] [ 442.533888][T11083] dump_stack_lvl+0x100/0x190 [ 442.533925][T11083] should_fail_ex.cold+0x5/0xa [ 442.533952][T11083] should_failslab+0xc2/0x120 [ 442.533976][T11083] __kmalloc_cache_noprof+0x7a/0x6f0 [ 442.534004][T11083] ? snd_ctl_notify.part.0+0x337/0x650 [ 442.534042][T11083] snd_ctl_notify.part.0+0x337/0x650 [ 442.534083][T11083] snd_ctl_notify_one+0x2a4/0x300 [ 442.534115][T11083] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 442.534155][T11083] ? mark_held_locks+0x40/0x70 [ 442.534185][T11083] __snd_ctl_add_replace+0x60b/0x840 [ 442.534210][T11083] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 442.534239][T11083] ? __kmalloc_noprof+0x320/0x850 [ 442.534272][T11083] ? snd_ctl_new+0x13c/0x1a0 [ 442.534306][T11083] snd_ctl_elem_add+0x832/0x1370 [ 442.534332][T11083] ? __might_fault+0xc5/0x140 [ 442.534362][T11083] ? __might_fault+0xc5/0x140 [ 442.534394][T11083] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 442.534422][T11083] snd_ctl_elem_add_user+0xc5/0x170 [ 442.534443][T11083] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 442.534464][T11083] ? find_held_lock+0x2b/0x80 [ 442.534503][T11083] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.534526][T11083] ? do_vfs_ioctl+0x226/0x13e0 [ 442.534560][T11083] snd_ctl_ioctl+0xbdf/0x1330 [ 442.534581][T11083] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 442.534604][T11083] ? find_held_lock+0x2b/0x80 [ 442.534623][T11083] ? __fget_files+0x215/0x3d0 [ 442.534642][T11083] ? hook_file_ioctl_common+0x149/0x410 [ 442.534680][T11083] ? __fget_files+0x21f/0x3d0 [ 442.534704][T11083] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 442.534726][T11083] __x64_sys_ioctl+0x18e/0x210 [ 442.534759][T11083] do_syscall_64+0x10b/0xf80 [ 442.534778][T11083] ? clear_bhb_loop+0x40/0x90 [ 442.534802][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.534824][T11083] RIP: 0033:0x7f1f91f9c819 [ 442.534840][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.534860][T11083] RSP: 002b:00007f1f92dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.534879][T11083] RAX: ffffffffffffffda RBX: 00007f1f92215fa0 RCX: 00007f1f91f9c819 [ 442.534892][T11083] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000006 [ 442.534904][T11083] RBP: 00007f1f92032c91 R08: 0000000000000000 R09: 0000000000000000 [ 442.534916][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.534928][T11083] R13: 00007f1f92216038 R14: 00007f1f92215fa0 R15: 00007fff771e56b8 [ 442.534954][T11083] [ 442.534971][T11083] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 443.036300][ T30] audit: type=1326 audit(1776182848.199:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11086 comm="syz.1.994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5439c819 code=0x0 [ 443.404329][ T30] audit: type=1804 audit(1776182848.589:70): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.998" name="/newroot/238/file0" dev="tmpfs" ino=1265 res=1 errno=0 [ 444.982037][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 445.051715][T11131] Process accounting paused [ 445.561048][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 445.661512][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 446.413365][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 447.706635][T11186] bond0: invalid ARP target specified [ 448.929317][T11194] bond0: invalid ARP target specified [ 449.052951][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1021'. [ 449.073603][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1021'. [ 450.459374][T11217] bond0: invalid ARP target specified [ 451.047715][T11227] futex_wake_op: syz.2.1029 tries to shift op by -2048; fix this program [ 452.496348][ T30] audit: type=1326 audit(1776182857.679:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.3.1032" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f91f9c819 code=0x0 [ 454.326497][T11268] bond0: invalid ARP target specified [ 455.049525][T11267] Process accounting resumed [ 455.067548][T11275] futex_wake_op: syz.0.1036 tries to shift op by -2048; fix this program [ 456.328169][T11298] futex_wake_op: syz.1.1049 tries to shift op by -2048; fix this program [ 456.595113][T11311] futex_wake_op: syz.0.1043 tries to shift op by -2048; fix this program [ 460.030736][ T30] audit: type=1326 audit(1776182865.219:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.1051" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18f379c819 code=0x0 [ 461.708455][T11361] bond0: invalid ARP target specified [ 464.186974][T11401] futex_wake_op: syz.1.1063 tries to shift op by -2048; fix this program [ 464.973501][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 465.009975][T11406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.126451][T11406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.183464][T11406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.242515][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 465.308544][T11406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.011550][T11447] bond0: invalid ARP target specified [ 471.393762][T11496] bond0: invalid ARP target specified [ 476.323654][T11560] Invalid ELF header magic: != ELF [ 478.575992][T11602] bond0: invalid ARP target specified [ 478.693077][T11238] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 478.886853][T11548] Process accounting resumed [ 482.123334][T11643] Invalid ELF header magic: != ELF [ 485.884352][T11678] bond0: invalid ARP target specified [ 486.209086][T11690] bond0: invalid ARP target specified [ 486.407378][T11690] Process accounting paused [ 488.933884][T11732] bond0: invalid ARP target specified [ 489.577743][T11744] FAULT_INJECTION: forcing a failure. [ 489.577743][T11744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.615259][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.1.1137 Not tainted syzkaller #0 PREEMPT(full) [ 489.615303][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 489.615319][T11744] Call Trace: [ 489.615326][T11744] [ 489.615334][T11744] dump_stack_lvl+0x100/0x190 [ 489.615375][T11744] should_fail_ex.cold+0x5/0xa [ 489.615406][T11744] _copy_from_iter+0x1f4/0x1690 [ 489.615432][T11744] ? __asan_memset+0x23/0x50 [ 489.615467][T11744] ? __pfx__copy_from_iter+0x10/0x10 [ 489.615493][T11744] ? __pfx___alloc_skb+0x10/0x10 [ 489.615544][T11744] netlink_sendmsg+0x808/0xda0 [ 489.615572][T11744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.615598][T11744] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 489.615639][T11744] __sys_sendto+0x468/0x4b0 [ 489.615671][T11744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.615694][T11744] ? __pfx___sys_sendto+0x10/0x10 [ 489.615735][T11744] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 489.615760][T11744] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 489.615805][T11744] __x64_sys_sendto+0xe0/0x1c0 [ 489.615837][T11744] ? do_syscall_64+0x90/0xf80 [ 489.615859][T11744] ? lockdep_hardirqs_on+0x78/0x100 [ 489.615896][T11744] do_syscall_64+0x10b/0xf80 [ 489.615916][T11744] ? clear_bhb_loop+0x40/0x90 [ 489.615944][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.615967][T11744] RIP: 0033:0x7f9b5435d04e [ 489.615986][T11744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.616008][T11744] RSP: 002b:00007f9b55262e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.616029][T11744] RAX: ffffffffffffffda RBX: 00007f9b552646c0 RCX: 00007f9b5435d04e [ 489.616044][T11744] RDX: 0000000000000028 RSI: 00007f9b55263000 RDI: 0000000000000007 [ 489.616058][T11744] RBP: 0000000000000000 R08: 00007f9b55262f04 R09: 000000000000000c [ 489.616071][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 489.616084][T11744] R13: 00007f9b55262f58 R14: 00007f9b55263000 R15: 0000000000000000 [ 489.616113][T11744] [ 489.851197][T11744] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1137'. [ 489.981987][T11753] bond0: invalid ARP target specified [ 490.697815][T11761] zswap: compressor û not available [ 490.749069][T11769] FAULT_INJECTION: forcing a failure. [ 490.749069][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 490.780145][T11769] CPU: 0 UID: 0 PID: 11769 Comm: syz.1.1141 Not tainted syzkaller #0 PREEMPT(full) [ 490.780172][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 490.780185][T11769] Call Trace: [ 490.780203][T11769] [ 490.780211][T11769] dump_stack_lvl+0x100/0x190 [ 490.780248][T11769] should_fail_ex.cold+0x5/0xa [ 490.780275][T11769] should_failslab+0xc2/0x120 [ 490.780298][T11769] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 490.780331][T11769] ? mas_alloc_nodes+0x280/0x390 [ 490.780365][T11769] mas_alloc_nodes+0x280/0x390 [ 490.780398][T11769] mas_preallocate+0x39c/0xf10 [ 490.780417][T11769] ? __memcg_slab_post_alloc_hook+0x460/0x990 [ 490.780447][T11769] ? __pfx_mas_preallocate+0x10/0x10 [ 490.780475][T11769] ? anon_vma_name+0x5a/0x250 [ 490.780505][T11769] __split_vma+0x33d/0xd90 [ 490.780538][T11769] ? __pfx___split_vma+0x10/0x10 [ 490.780573][T11769] ? __pfx_mas_prev+0x10/0x10 [ 490.780600][T11769] vms_gather_munmap_vmas+0x39f/0x1500 [ 490.780632][T11769] ? validate_mm+0x261/0x4e0 [ 490.780660][T11769] ? validate_mm+0x261/0x4e0 [ 490.780691][T11769] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 490.780724][T11769] ? validate_mm+0x392/0x4e0 [ 490.780756][T11769] ? __pfx_validate_mm+0x10/0x10 [ 490.780790][T11769] do_vmi_align_munmap+0x287/0x5f0 [ 490.780825][T11769] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 490.780890][T11769] do_vmi_munmap+0x1f8/0x3e0 [ 490.780925][T11769] __vm_munmap+0x196/0x390 [ 490.780945][T11769] ? __pfx___vm_munmap+0x10/0x10 [ 490.780979][T11769] __x64_sys_munmap+0x59/0x80 [ 490.781004][T11769] do_syscall_64+0x10b/0xf80 [ 490.781022][T11769] ? clear_bhb_loop+0x40/0x90 [ 490.781047][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.781067][T11769] RIP: 0033:0x7f9b5439c647 [ 490.781084][T11769] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.781103][T11769] RSP: 002b:00007f9b55262d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 490.781141][T11769] RAX: ffffffffffffffda RBX: 00007f9b4c000000 RCX: 00007f9b5439c647 [ 490.781154][T11769] RDX: 0000000000000000 RSI: 0000000001c00000 RDI: 00007f9b4a400000 [ 490.781167][T11769] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 490.781180][T11769] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 490.781197][T11769] R13: 0000000000001000 R14: 00007f9b50000000 R15: 0000000001c00000 [ 490.781224][T11769] [ 492.735702][T11800] FAULT_INJECTION: forcing a failure. [ 492.735702][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 492.783458][T11800] CPU: 0 UID: 0 PID: 11800 Comm: syz.3.1148 Not tainted syzkaller #0 PREEMPT(full) [ 492.783491][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 492.783504][T11800] Call Trace: [ 492.783512][T11800] [ 492.783520][T11800] dump_stack_lvl+0x100/0x190 [ 492.783561][T11800] should_fail_ex.cold+0x5/0xa [ 492.783590][T11800] should_failslab+0xc2/0x120 [ 492.783616][T11800] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 492.783659][T11800] ? skb_clone+0x190/0x400 [ 492.783699][T11800] skb_clone+0x190/0x400 [ 492.783736][T11800] netlink_deliver_tap+0xaed/0xcc0 [ 492.783779][T11800] netlink_unicast+0x650/0x870 [ 492.783805][T11800] ? __pfx_netlink_unicast+0x10/0x10 [ 492.783827][T11800] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 492.783874][T11800] netlink_sendmsg+0x8b0/0xda0 [ 492.783901][T11800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.783922][T11800] ? __import_iovec+0x1d2/0x640 [ 492.783948][T11800] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 492.783984][T11800] ____sys_sendmsg+0x9e1/0xb70 [ 492.784009][T11800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.784040][T11800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.784079][T11800] ___sys_sendmsg+0x190/0x1e0 [ 492.784109][T11800] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.784170][T11800] __sys_sendmsg+0x170/0x220 [ 492.784207][T11800] ? __pfx___sys_sendmsg+0x10/0x10 [ 492.784299][T11800] do_syscall_64+0x10b/0xf80 [ 492.784329][T11800] ? clear_bhb_loop+0x40/0x90 [ 492.784371][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.784395][T11800] RIP: 0033:0x7f1f91f9c819 [ 492.784414][T11800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.784435][T11800] RSP: 002b:00007f1f92dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.784457][T11800] RAX: ffffffffffffffda RBX: 00007f1f92215fa0 RCX: 00007f1f91f9c819 [ 492.784472][T11800] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000003 [ 492.784486][T11800] RBP: 00007f1f92dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 492.784499][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.784513][T11800] R13: 00007f1f92216038 R14: 00007f1f92215fa0 R15: 00007fff771e56b8 [ 492.784542][T11800] [ 493.631778][T11800] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 493.641361][T11800] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 493.652269][T11800] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 493.855664][T11804] bond0: invalid ARP target specified [ 497.401036][T11872] FAULT_INJECTION: forcing a failure. [ 497.401036][T11872] name failslab, interval 1, probability 0, space 0, times 0 [ 497.413703][T11872] CPU: 0 UID: 0 PID: 11872 Comm: syz.0.1163 Not tainted syzkaller #0 PREEMPT(full) [ 497.413743][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 497.413761][T11872] Call Trace: [ 497.413772][T11872] [ 497.413782][T11872] dump_stack_lvl+0x100/0x190 [ 497.413837][T11872] should_fail_ex.cold+0x5/0xa [ 497.413874][T11872] should_failslab+0xc2/0x120 [ 497.413907][T11872] __kmalloc_cache_noprof+0x7a/0x6f0 [ 497.413947][T11872] ? snd_ctl_notify.part.0+0x337/0x650 [ 497.414002][T11872] snd_ctl_notify.part.0+0x337/0x650 [ 497.414062][T11872] snd_ctl_notify_one+0x2a4/0x300 [ 497.414111][T11872] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 497.414167][T11872] ? mark_held_locks+0x40/0x70 [ 497.414211][T11872] __snd_ctl_add_replace+0x60b/0x840 [ 497.414247][T11872] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 497.414283][T11872] ? __kmalloc_noprof+0x320/0x850 [ 497.414329][T11872] ? snd_ctl_new+0x13c/0x1a0 [ 497.414378][T11872] snd_ctl_elem_add+0x832/0x1370 [ 497.414416][T11872] ? __might_fault+0xc5/0x140 [ 497.414459][T11872] ? __might_fault+0xc5/0x140 [ 497.414503][T11872] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 497.414544][T11872] snd_ctl_elem_add_user+0xc5/0x170 [ 497.414574][T11872] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 497.414604][T11872] ? find_held_lock+0x2b/0x80 [ 497.414673][T11872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.414706][T11872] ? do_vfs_ioctl+0x226/0x13e0 [ 497.414756][T11872] snd_ctl_ioctl+0xbdf/0x1330 [ 497.414786][T11872] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 497.414820][T11872] ? find_held_lock+0x2b/0x80 [ 497.414847][T11872] ? __fget_files+0x215/0x3d0 [ 497.414874][T11872] ? hook_file_ioctl_common+0x149/0x410 [ 497.414929][T11872] ? __fget_files+0x21f/0x3d0 [ 497.414964][T11872] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 497.414996][T11872] __x64_sys_ioctl+0x18e/0x210 [ 497.415042][T11872] do_syscall_64+0x10b/0xf80 [ 497.415069][T11872] ? clear_bhb_loop+0x40/0x90 [ 497.415105][T11872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.415136][T11872] RIP: 0033:0x7fed0df9c819 [ 497.415161][T11872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.415190][T11872] RSP: 002b:00007fed0ed87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.415219][T11872] RAX: ffffffffffffffda RBX: 00007fed0e215fa0 RCX: 00007fed0df9c819 [ 497.415238][T11872] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000009 [ 497.415256][T11872] RBP: 00007fed0e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 497.415274][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.415292][T11872] R13: 00007fed0e216038 R14: 00007fed0e215fa0 R15: 00007ffe23a01a98 [ 497.415329][T11872] [ 497.415346][T11872] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 501.490417][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.496816][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.375613][T11938] FAULT_INJECTION: forcing a failure. [ 502.375613][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 502.573278][T11938] CPU: 1 UID: 0 PID: 11938 Comm: syz.2.1178 Not tainted syzkaller #0 PREEMPT(full) [ 502.573324][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.573341][T11938] Call Trace: [ 502.573351][T11938] [ 502.573361][T11938] dump_stack_lvl+0x100/0x190 [ 502.573407][T11938] should_fail_ex.cold+0x5/0xa [ 502.573434][T11938] should_failslab+0xc2/0x120 [ 502.573457][T11938] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 502.573497][T11938] ? security_inode_alloc+0x3b/0x2c0 [ 502.573527][T11938] ? lockdep_init_map_type+0x5c/0x250 [ 502.573559][T11938] security_inode_alloc+0x3b/0x2c0 [ 502.573589][T11938] inode_init_always_gfp+0xcc0/0x1000 [ 502.573616][T11938] alloc_inode+0x8e/0x250 [ 502.573644][T11938] path_from_stashed+0x25b/0x750 [ 502.573670][T11938] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.573705][T11938] ns_get_path+0x60/0x80 [ 502.573728][T11938] proc_ns_get_link+0x121/0x230 [ 502.573762][T11938] ? __pfx_proc_ns_get_link+0x10/0x10 [ 502.573798][T11938] ? atime_needs_update+0x8b/0x6b0 [ 502.573831][T11938] pick_link+0xd17/0x13c0 [ 502.573861][T11938] ? __pfx_proc_ns_get_link+0x10/0x10 [ 502.573898][T11938] step_into_slowpath+0x9ba/0xf90 [ 502.573935][T11938] ? __pfx_step_into_slowpath+0x10/0x10 [ 502.573969][T11938] ? __pfx___up_read+0x10/0x10 [ 502.573999][T11938] ? path_openat+0x1508/0x31a0 [ 502.574021][T11938] ? lookup_fast+0x2da/0x600 [ 502.574055][T11938] path_openat+0xf95/0x31a0 [ 502.574085][T11938] ? __pfx_path_openat+0x10/0x10 [ 502.574116][T11938] do_file_open+0x20e/0x430 [ 502.574140][T11938] ? __pfx_do_file_open+0x10/0x10 [ 502.574180][T11938] ? alloc_fd+0x476/0x790 [ 502.574203][T11938] ? do_getname+0x191/0x390 [ 502.574234][T11938] do_sys_openat2+0x10d/0x1e0 [ 502.574263][T11938] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.574294][T11938] ? __fget_files+0x21f/0x3d0 [ 502.574319][T11938] __x64_sys_openat+0x12d/0x210 [ 502.574349][T11938] ? __pfx___x64_sys_openat+0x10/0x10 [ 502.574387][T11938] do_syscall_64+0x10b/0xf80 [ 502.574405][T11938] ? clear_bhb_loop+0x40/0x90 [ 502.574430][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.574451][T11938] RIP: 0033:0x7f18f379c819 [ 502.574468][T11938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.574494][T11938] RSP: 002b:00007f18f463e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.574514][T11938] RAX: ffffffffffffffda RBX: 00007f18f3a15fa0 RCX: 00007f18f379c819 [ 502.574527][T11938] RDX: 0000000000000080 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 502.574540][T11938] RBP: 00007f18f3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 502.574553][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.574565][T11938] R13: 00007f18f3a16038 R14: 00007f18f3a15fa0 R15: 00007ffd165bab08 [ 502.574616][T11938] [ 506.302201][T12000] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1189'. [ 509.515876][T12032] Process accounting paused [ 510.273599][T12026] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 512.591651][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1212'. [ 515.349960][T12115] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 517.458085][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 517.480558][T12158] Process accounting resumed [ 520.042757][T12213] random: crng reseeded on system resumption [ 520.497456][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 521.616372][T12237] kvm: kvm [12236]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 522.438523][T12257] FAULT_INJECTION: forcing a failure. [ 522.438523][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 522.451952][T12257] CPU: 0 UID: 0 PID: 12257 Comm: syz.2.1258 Not tainted syzkaller #0 PREEMPT(full) [ 522.451987][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 522.452004][T12257] Call Trace: [ 522.452014][T12257] [ 522.452024][T12257] dump_stack_lvl+0x100/0x190 [ 522.452074][T12257] should_fail_ex.cold+0x5/0xa [ 522.452108][T12257] ? ima_write_template_field_data+0x59/0x1d0 [ 522.452137][T12257] should_failslab+0xc2/0x120 [ 522.452168][T12257] __kmalloc_noprof+0xe0/0x850 [ 522.452212][T12257] ? __x64_sys_openat+0x12d/0x210 [ 522.452249][T12257] ? do_syscall_64+0x10b/0xf80 [ 522.452281][T12257] ima_write_template_field_data+0x59/0x1d0 [ 522.452316][T12257] ima_eventdigest_init_common+0x158/0x460 [ 522.452349][T12257] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 522.452402][T12257] ? trace_kmalloc+0x70/0x130 [ 522.452431][T12257] ? __kasan_kmalloc+0xaa/0xb0 [ 522.452458][T12257] ? __kmalloc_noprof+0x320/0x850 [ 522.452507][T12257] ima_alloc_init_template+0x399/0x6d0 [ 522.452569][T12257] ima_store_measurement+0x1e3/0x5b0 [ 522.452612][T12257] ? __pfx_ima_store_measurement+0x10/0x10 [ 522.452667][T12257] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 522.452708][T12257] process_measurement+0x19cc/0x2350 [ 522.452757][T12257] ? __pfx_process_measurement+0x10/0x10 [ 522.452797][T12257] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 522.452900][T12257] ? path_get+0x61/0x80 [ 522.452936][T12257] ? lockdown_is_locked_down+0x3d/0x140 [ 522.452972][T12257] ? inode_to_bdi+0x9e/0x160 [ 522.453007][T12257] ima_file_check+0xcc/0x120 [ 522.453045][T12257] ? __pfx_ima_file_check+0x10/0x10 [ 522.453094][T12257] security_file_post_open+0xc4/0x210 [ 522.453140][T12257] path_openat+0x1418/0x31a0 [ 522.453184][T12257] ? __pfx_path_openat+0x10/0x10 [ 522.453231][T12257] do_file_open+0x20e/0x430 [ 522.453266][T12257] ? __pfx_do_file_open+0x10/0x10 [ 522.453325][T12257] ? alloc_fd+0x476/0x790 [ 522.453360][T12257] ? do_getname+0x191/0x390 [ 522.453401][T12257] do_sys_openat2+0x10d/0x1e0 [ 522.453461][T12257] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.453507][T12257] ? __fget_files+0x21f/0x3d0 [ 522.453564][T12257] __x64_sys_openat+0x12d/0x210 [ 522.453606][T12257] ? __pfx___x64_sys_openat+0x10/0x10 [ 522.453662][T12257] do_syscall_64+0x10b/0xf80 [ 522.453688][T12257] ? clear_bhb_loop+0x40/0x90 [ 522.453723][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.453753][T12257] RIP: 0033:0x7f18f379c819 [ 522.453777][T12257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.453807][T12257] RSP: 002b:00007f18f463e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 522.453835][T12257] RAX: ffffffffffffffda RBX: 00007f18f3a15fa0 RCX: 00007f18f379c819 [ 522.453854][T12257] RDX: 0000000000000080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 522.453873][T12257] RBP: 00007f18f3832c91 R08: 0000000000000000 R09: 0000000000000000 [ 522.453890][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.453908][T12257] R13: 00007f18f3a16038 R14: 00007f18f3a15fa0 R15: 00007ffd165bab08 [ 522.453948][T12257] [ 522.771206][ T30] audit: type=1804 audit(1776182927.959:73): pid=12257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.1258" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3488 res=0 errno=0 [ 524.678983][T12279] bond0: invalid ARP target specified [ 524.888332][T12287] bond0: invalid ARP target specified [ 525.349624][T12297] FAULT_INJECTION: forcing a failure. [ 525.349624][T12297] name failslab, interval 1, probability 0, space 0, times 0 [ 525.362250][T12297] CPU: 0 UID: 0 PID: 12297 Comm: syz.3.1256 Not tainted syzkaller #0 PREEMPT(full) [ 525.362276][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 525.362288][T12297] Call Trace: [ 525.362295][T12297] [ 525.362303][T12297] dump_stack_lvl+0x100/0x190 [ 525.362345][T12297] should_fail_ex.cold+0x5/0xa [ 525.362370][T12297] should_failslab+0xc2/0x120 [ 525.362395][T12297] __kmalloc_cache_noprof+0x7a/0x6f0 [ 525.362423][T12297] ? snd_ctl_notify.part.0+0x337/0x650 [ 525.362462][T12297] snd_ctl_notify.part.0+0x337/0x650 [ 525.362502][T12297] snd_ctl_notify_one+0x2a4/0x300 [ 525.362535][T12297] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 525.362573][T12297] ? mark_held_locks+0x40/0x70 [ 525.362604][T12297] __snd_ctl_add_replace+0x60b/0x840 [ 525.362629][T12297] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 525.362654][T12297] ? __kmalloc_noprof+0x320/0x850 [ 525.362687][T12297] ? snd_ctl_new+0x13c/0x1a0 [ 525.362721][T12297] snd_ctl_elem_add+0x832/0x1370 [ 525.362747][T12297] ? __might_fault+0xc5/0x140 [ 525.362777][T12297] ? __might_fault+0xc5/0x140 [ 525.362809][T12297] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 525.362837][T12297] snd_ctl_elem_add_user+0xc5/0x170 [ 525.362859][T12297] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 525.362880][T12297] ? find_held_lock+0x2b/0x80 [ 525.362919][T12297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 525.362942][T12297] ? do_vfs_ioctl+0x226/0x13e0 [ 525.362976][T12297] snd_ctl_ioctl+0xbdf/0x1330 [ 525.362997][T12297] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 525.363021][T12297] ? find_held_lock+0x2b/0x80 [ 525.363040][T12297] ? __fget_files+0x215/0x3d0 [ 525.363059][T12297] ? hook_file_ioctl_common+0x149/0x410 [ 525.363098][T12297] ? __fget_files+0x21f/0x3d0 [ 525.363121][T12297] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 525.363144][T12297] __x64_sys_ioctl+0x18e/0x210 [ 525.363177][T12297] do_syscall_64+0x10b/0xf80 [ 525.363196][T12297] ? clear_bhb_loop+0x40/0x90 [ 525.363221][T12297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.363243][T12297] RIP: 0033:0x7f1f91f9c819 [ 525.363260][T12297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.363281][T12297] RSP: 002b:00007f1f92dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.363300][T12297] RAX: ffffffffffffffda RBX: 00007f1f92215fa0 RCX: 00007f1f91f9c819 [ 525.363314][T12297] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000009 [ 525.363333][T12297] RBP: 00007f1f92032c91 R08: 0000000000000000 R09: 0000000000000000 [ 525.363345][T12297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.363358][T12297] R13: 00007f1f92216038 R14: 00007f1f92215fa0 R15: 00007fff771e56b8 [ 525.363384][T12297] [ 525.363397][T12297] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 525.858431][T12308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1259'. [ 526.137523][T12311] binder: 12310:12311 ioctl c0306201 0 returned -14 [ 531.857659][ T30] audit: type=1326 audit(1776182937.049:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.1.1277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5439c819 code=0x0 [ 532.719601][T12401] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 533.065417][T12418] futex_wake_op: syz.0.1283 tries to shift op by -2048; fix this program [ 540.140124][T12521] Process accounting resumed [ 540.257867][T12537] zram: Removed device: zram0 [ 541.573876][T12569] binder: 12565:12569 ioctl c00c620f 2000000001c0 returned -22 [ 542.345012][T12585] FAULT_INJECTION: forcing a failure. [ 542.345012][T12585] name failslab, interval 1, probability 0, space 0, times 0 [ 542.357975][T12585] CPU: 0 UID: 0 PID: 12585 Comm: syz.1.1318 Not tainted syzkaller #0 PREEMPT(full) [ 542.358001][T12585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.358013][T12585] Call Trace: [ 542.358020][T12585] [ 542.358028][T12585] dump_stack_lvl+0x100/0x190 [ 542.358065][T12585] should_fail_ex.cold+0x5/0xa [ 542.358091][T12585] should_failslab+0xc2/0x120 [ 542.358116][T12585] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 542.358151][T12585] ? security_inode_alloc+0x3b/0x2c0 [ 542.358181][T12585] ? lockdep_init_map_type+0x5c/0x250 [ 542.358214][T12585] security_inode_alloc+0x3b/0x2c0 [ 542.358245][T12585] inode_init_always_gfp+0xcc0/0x1000 [ 542.358273][T12585] alloc_inode+0x8e/0x250 [ 542.358312][T12585] new_inode+0x22/0x1c0 [ 542.358361][T12585] simple_fill_super+0x2d9/0x680 [ 542.358388][T12585] ? __pfx_nfsd_fill_super+0x10/0x10 [ 542.358418][T12585] nfsd_fill_super+0x98/0x560 [ 542.358446][T12585] ? __pfx_set_anon_super_fc+0x10/0x10 [ 542.358479][T12585] ? __pfx_nfsd_fill_super+0x10/0x10 [ 542.358508][T12585] get_tree_keyed+0x10e/0x1d0 [ 542.358529][T12585] vfs_get_tree+0x92/0x320 [ 542.358561][T12585] path_mount+0x7d0/0x23d0 [ 542.358591][T12585] ? __pfx_path_mount+0x10/0x10 [ 542.358615][T12585] ? lockdep_hardirqs_on+0x78/0x100 [ 542.358652][T12585] ? putname+0xb1/0x110 [ 542.358675][T12585] ? kmem_cache_free+0x124/0x6a0 [ 542.358714][T12585] ? __x64_sys_mount+0x293/0x310 [ 542.358749][T12585] __x64_sys_mount+0x293/0x310 [ 542.358776][T12585] ? __pfx___x64_sys_mount+0x10/0x10 [ 542.358811][T12585] do_syscall_64+0x10b/0xf80 [ 542.358829][T12585] ? clear_bhb_loop+0x40/0x90 [ 542.358855][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.358876][T12585] RIP: 0033:0x7f9b5439c819 [ 542.358893][T12585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.358920][T12585] RSP: 002b:00007f9b55264028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.358939][T12585] RAX: ffffffffffffffda RBX: 00007f9b54615fa0 RCX: 00007f9b5439c819 [ 542.358953][T12585] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.358966][T12585] RBP: 00007f9b55264090 R08: 0000000000000000 R09: 0000000000000000 [ 542.358980][T12585] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000002 [ 542.358992][T12585] R13: 00007f9b54616038 R14: 00007f9b54615fa0 R15: 00007ffd13cefe68 [ 542.359019][T12585] [ 544.084272][T12621] futex_wake_op: syz.3.1324 tries to shift op by -2048; fix this program [ 547.397718][T12659] Invalid ELF header magic: != ELF [ 548.578266][T12674] Process accounting paused [ 550.068558][T12710] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1343'. [ 550.712842][T12718] bond0: invalid ARP target specified [ 552.032281][T12741] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1349'. [ 554.742119][T12788] tc_dump_action: action bad kind [ 557.563543][T12847] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1373'. [ 559.169765][T12871] FAULT_INJECTION: forcing a failure. [ 559.169765][T12871] name failslab, interval 1, probability 0, space 0, times 0 [ 559.182395][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.1.1378 Not tainted syzkaller #0 PREEMPT(full) [ 559.182428][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 559.182443][T12871] Call Trace: [ 559.182452][T12871] [ 559.182461][T12871] dump_stack_lvl+0x100/0x190 [ 559.182507][T12871] should_fail_ex.cold+0x5/0xa [ 559.182540][T12871] should_failslab+0xc2/0x120 [ 559.182568][T12871] __kmalloc_cache_noprof+0x7a/0x6f0 [ 559.182602][T12871] ? snd_ctl_notify.part.0+0x337/0x650 [ 559.182647][T12871] snd_ctl_notify.part.0+0x337/0x650 [ 559.182697][T12871] snd_ctl_notify_one+0x2a4/0x300 [ 559.182736][T12871] ? __pfx_snd_ctl_notify_one+0x10/0x10 [ 559.182781][T12871] ? mark_held_locks+0x40/0x70 [ 559.182816][T12871] __snd_ctl_add_replace+0x60b/0x840 [ 559.182845][T12871] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 559.182875][T12871] ? __kmalloc_noprof+0x320/0x850 [ 559.182913][T12871] ? snd_ctl_new+0x13c/0x1a0 [ 559.182953][T12871] snd_ctl_elem_add+0x832/0x1370 [ 559.182983][T12871] ? __might_fault+0xc5/0x140 [ 559.183019][T12871] ? __might_fault+0xc5/0x140 [ 559.183056][T12871] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 559.183088][T12871] snd_ctl_elem_add_user+0xc5/0x170 [ 559.183113][T12871] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 559.183138][T12871] ? find_held_lock+0x2b/0x80 [ 559.183184][T12871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 559.183211][T12871] ? do_vfs_ioctl+0x226/0x13e0 [ 559.183251][T12871] snd_ctl_ioctl+0xbdf/0x1330 [ 559.183275][T12871] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 559.183303][T12871] ? find_held_lock+0x2b/0x80 [ 559.183326][T12871] ? __fget_files+0x215/0x3d0 [ 559.183348][T12871] ? hook_file_ioctl_common+0x149/0x410 [ 559.183393][T12871] ? __fget_files+0x21f/0x3d0 [ 559.183421][T12871] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 559.183449][T12871] __x64_sys_ioctl+0x18e/0x210 [ 559.183488][T12871] do_syscall_64+0x10b/0xf80 [ 559.183511][T12871] ? clear_bhb_loop+0x40/0x90 [ 559.183541][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.183567][T12871] RIP: 0033:0x7f9b5439c819 [ 559.183587][T12871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.183611][T12871] RSP: 002b:00007f9b55264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.183635][T12871] RAX: ffffffffffffffda RBX: 00007f9b54615fa0 RCX: 00007f9b5439c819 [ 559.183652][T12871] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000006 [ 559.183667][T12871] RBP: 00007f9b54432c91 R08: 0000000000000000 R09: 0000000000000000 [ 559.183682][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.183701][T12871] R13: 00007f9b54616038 R14: 00007f9b54615fa0 R15: 00007ffd13cefe68 [ 559.183732][T12871] [ 559.183746][T12871] snd_virmidi snd_virmidi.0: No memory available to allocate event [ 562.000781][T12906] zswap: compressor not available [ 562.942269][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.948693][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.206434][T12924] bond0: invalid ARP target specified [ 564.738773][T12947] random: crng reseeded on system resumption [ 564.901448][T12951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1396'. [ 564.951050][T12951] team0 (unregistering): Port device team_slave_0 removed [ 564.990836][T12951] team0 (unregistering): Port device team_slave_1 removed [ 565.416780][T12958] FAULT_INJECTION: forcing a failure. [ 565.416780][T12958] name failslab, interval 1, probability 0, space 0, times 0 [ 565.429598][T12958] CPU: 0 UID: 0 PID: 12958 Comm: syz.3.1397 Not tainted syzkaller #0 PREEMPT(full) [ 565.429634][T12958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 565.429650][T12958] Call Trace: [ 565.429664][T12958] [ 565.429677][T12958] dump_stack_lvl+0x100/0x190 [ 565.429714][T12958] should_fail_ex.cold+0x5/0xa [ 565.429739][T12958] should_failslab+0xc2/0x120 [ 565.429764][T12958] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 565.429798][T12958] ? do_getname+0x35/0x390 [ 565.429825][T12958] ? find_held_lock+0x2b/0x80 [ 565.429850][T12958] do_getname+0x35/0x390 [ 565.429880][T12958] do_sys_openat2+0xc5/0x1e0 [ 565.429909][T12958] ? __pfx_do_sys_openat2+0x10/0x10 [ 565.429940][T12958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 565.429971][T12958] ? __fget_files+0x21f/0x3d0 [ 565.429998][T12958] __x64_sys_openat+0x12d/0x210 [ 565.430028][T12958] ? __pfx___x64_sys_openat+0x10/0x10 [ 565.430056][T12958] ? ksys_write+0x1ac/0x250 [ 565.430085][T12958] do_syscall_64+0x10b/0xf80 [ 565.430104][T12958] ? clear_bhb_loop+0x40/0x90 [ 565.430130][T12958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.430151][T12958] RIP: 0033:0x7f1f91f9c819 [ 565.430168][T12958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.430194][T12958] RSP: 002b:00007f1f92db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 565.430214][T12958] RAX: ffffffffffffffda RBX: 00007f1f92216090 RCX: 00007f1f91f9c819 [ 565.430233][T12958] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 565.430246][T12958] RBP: 00007f1f92db6090 R08: 0000000000000000 R09: 0000000000000000 [ 565.430259][T12958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.430272][T12958] R13: 00007f1f92216128 R14: 00007f1f92216090 R15: 00007fff771e56b8 [ 565.430298][T12958] [ 565.705092][T12963] bond0: invalid ARP target specified [ 568.574417][T13008] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 570.188961][T13038] Process accounting paused [ 570.262152][ T30] audit: type=1326 audit(1776182975.449:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.1.1414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5439c819 code=0x0 [ 571.121941][T11242] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.460107][T13092] kvm: kvm [13091]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0xfffffffffffffffc [ 574.292135][T13111] nbd: illegal input index 37139 [ 575.566812][T11238] Bluetooth: hci0: command 0x0406 tx timeout [ 575.567625][T13092] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 575.898520][T13127] bond0: invalid ARP target specified [ 575.914599][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1435'. [ 576.326221][T13092] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 576.489176][T13092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 576.501046][T13092] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 576.508804][T13092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.514859][T13092] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 576.522320][T13092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.528433][T13092] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 577.622029][T13157] FAULT_INJECTION: forcing a failure. [ 577.622029][T13157] name failslab, interval 1, probability 0, space 0, times 0 [ 577.648282][T11238] Bluetooth: hci0: command 0x0406 tx timeout [ 577.655036][T13157] CPU: 1 UID: 0 PID: 13157 Comm: syz.1.1441 Not tainted syzkaller #0 PREEMPT(full) [ 577.655072][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 577.655091][T13157] Call Trace: [ 577.655101][T13157] [ 577.655111][T13157] dump_stack_lvl+0x100/0x190 [ 577.655168][T13157] should_fail_ex.cold+0x5/0xa [ 577.655204][T13157] should_failslab+0xc2/0x120 [ 577.655238][T13157] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 577.655289][T13157] ? __d_alloc+0x34/0xa80 [ 577.655324][T13157] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 577.655358][T13157] ? lockdep_hardirqs_on+0x78/0x100 [ 577.655410][T13157] __d_alloc+0x34/0xa80 [ 577.655449][T13157] d_alloc+0x4a/0x1e0 [ 577.655506][T13157] d_alloc_name+0x83/0xb0 [ 577.655566][T13157] ? __pfx_d_alloc_name+0x10/0x10 [ 577.655612][T13157] ? dput.part.0+0xdd/0x570 [ 577.655663][T13157] simple_fill_super+0x4c3/0x680 [ 577.655709][T13157] ? __pfx_nfsd_fill_super+0x10/0x10 [ 577.655771][T13157] nfsd_fill_super+0x98/0x560 [ 577.655818][T13157] ? __pfx_set_anon_super_fc+0x10/0x10 [ 577.655872][T13157] ? __pfx_nfsd_fill_super+0x10/0x10 [ 577.655920][T13157] get_tree_keyed+0x10e/0x1d0 [ 577.655955][T13157] vfs_get_tree+0x92/0x320 [ 577.656006][T13157] path_mount+0x7d0/0x23d0 [ 577.656056][T13157] ? __pfx_path_mount+0x10/0x10 [ 577.656096][T13157] ? lockdep_hardirqs_on+0x78/0x100 [ 577.656170][T13157] ? putname+0xb1/0x110 [ 577.656207][T13157] ? kmem_cache_free+0x124/0x6a0 [ 577.656270][T13157] ? __x64_sys_mount+0x293/0x310 [ 577.656311][T13157] __x64_sys_mount+0x293/0x310 [ 577.656355][T13157] ? __pfx___x64_sys_mount+0x10/0x10 [ 577.656410][T13157] do_syscall_64+0x10b/0xf80 [ 577.656441][T13157] ? clear_bhb_loop+0x40/0x90 [ 577.656482][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.656519][T13157] RIP: 0033:0x7f9b5439c819 [ 577.656547][T13157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.656581][T13157] RSP: 002b:00007f9b55264028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 577.656614][T13157] RAX: ffffffffffffffda RBX: 00007f9b54615fa0 RCX: 00007f9b5439c819 [ 577.656637][T13157] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.656669][T13157] RBP: 00007f9b54432c91 R08: 0000000000000000 R09: 0000000000000000 [ 577.656689][T13157] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 577.656719][T13157] R13: 00007f9b54616038 R14: 00007f9b54615fa0 R15: 00007ffd13cefe68 [ 577.656757][T13157] [ 578.456926][T11238] Bluetooth: hci1: command 0x0406 tx timeout [ 578.530914][T11238] Bluetooth: hci3: command 0x0406 tx timeout [ 578.537020][T11579] Bluetooth: hci2: command 0x0406 tx timeout [ 579.013043][T13169] bond0: invalid ARP target specified [ 579.232554][T13168] Process accounting resumed [ 579.348649][T13173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1446'. [ 580.526351][T11238] Bluetooth: hci1: command 0x0406 tx timeout [ 580.606316][T11238] Bluetooth: hci3: command 0x0406 tx timeout [ 580.612430][T11579] Bluetooth: hci2: command 0x0406 tx timeout [ 580.894258][T13209] blktrace: Concurrent blktraces are not allowed on loop2 [ 581.054775][T13215] tc_dump_action: action bad kind [ 581.986867][T13194] Invalid ELF header magic: != ELF [ 590.124487][T11242] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.240697][T13354] bond0: invalid ARP target specified [ 590.312632][T11579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 590.321968][T11579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 590.330065][T11579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 590.338163][T11579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 590.345941][T11579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 590.606299][T11242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.887779][T11242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.000300][T11242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.086091][T11242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.172506][T13358] chnl_net:caif_netlink_parms(): no params data found [ 591.362332][T13358] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.469028][T13358] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.500653][T13358] bridge_slave_0: entered allmulticast mode [ 591.518176][T13358] bridge_slave_0: entered promiscuous mode [ 591.547534][T13358] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.554965][T13358] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.580449][T13358] bridge_slave_1: entered allmulticast mode [ 591.589611][T13358] bridge_slave_1: entered promiscuous mode [ 591.718553][T13358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.757768][T13358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.807832][T13358] team0: Port device team_slave_0 added [ 591.817357][T13358] team0: Port device team_slave_1 added [ 591.919191][T13358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.936579][T13358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.963644][T13358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.008510][T13358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.029305][T13358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.067915][T13358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.219237][T13358] hsr_slave_0: entered promiscuous mode [ 592.232515][T13358] hsr_slave_1: entered promiscuous mode [ 592.250228][T13358] debugfs: 'hsr0' already exists in 'hsr' [ 592.264293][T13358] Cannot create hsr debugfs directory [ 592.446310][T11579] Bluetooth: hci3: command tx timeout [ 592.838841][T13384] FAULT_INJECTION: forcing a failure. [ 592.838841][T13384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.852501][T13384] CPU: 0 UID: 0 PID: 13384 Comm: syz.3.1493 Not tainted syzkaller #0 PREEMPT(full) [ 592.852535][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 592.852552][T13384] Call Trace: [ 592.852564][T13384] [ 592.852574][T13384] dump_stack_lvl+0x100/0x190 [ 592.852642][T13384] should_fail_ex.cold+0x5/0xa [ 592.852676][T13384] strncpy_from_user+0x3b/0x2d0 [ 592.852726][T13384] do_getname+0x78/0x390 [ 592.852765][T13384] do_sys_openat2+0xc5/0x1e0 [ 592.852803][T13384] ? __pfx_do_sys_openat2+0x10/0x10 [ 592.852838][T13384] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 592.852871][T13384] ? __fget_files+0x21f/0x3d0 [ 592.852904][T13384] __x64_sys_openat+0x12d/0x210 [ 592.852962][T13384] ? __pfx___x64_sys_openat+0x10/0x10 [ 592.853014][T13384] ? ksys_write+0x1ac/0x250 [ 592.853053][T13384] do_syscall_64+0x10b/0xf80 [ 592.853077][T13384] ? clear_bhb_loop+0x40/0x90 [ 592.853110][T13384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.853139][T13384] RIP: 0033:0x7f1f91f9c819 [ 592.853162][T13384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.853189][T13384] RSP: 002b:00007f1f92db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.853215][T13384] RAX: ffffffffffffffda RBX: 00007f1f92216090 RCX: 00007f1f91f9c819 [ 592.853233][T13384] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 592.853250][T13384] RBP: 00007f1f92db6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.853267][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.853283][T13384] R13: 00007f1f92216128 R14: 00007f1f92216090 R15: 00007fff771e56b8 [ 592.853319][T13384] [ 593.106275][T13378] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 593.270380][T13385] bond0: invalid ARP target specified [ 594.526485][T11579] Bluetooth: hci3: command tx timeout [ 594.871280][T13398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1497'. [ 596.606295][T11579] Bluetooth: hci3: command tx timeout [ 598.686237][T11579] Bluetooth: hci3: command tx timeout [ 602.584728][T13458] Invalid ELF header magic: != ELF [ 603.186870][T13461] FAULT_INJECTION: forcing a failure. [ 603.186870][T13461] name failslab, interval 1, probability 0, space 0, times 0 [ 603.200245][T13461] CPU: 0 UID: 0 PID: 13461 Comm: syz.1.1515 Not tainted syzkaller #0 PREEMPT(full) [ 603.200270][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 603.200282][T13461] Call Trace: [ 603.200293][T13461] [ 603.200301][T13461] dump_stack_lvl+0x100/0x190 [ 603.200336][T13461] should_fail_ex.cold+0x5/0xa [ 603.200360][T13461] ? tomoyo_realpath_from_path+0xb6/0x690 [ 603.200382][T13461] should_failslab+0xc2/0x120 [ 603.200405][T13461] __kmalloc_noprof+0xe0/0x850 [ 603.200442][T13461] tomoyo_realpath_from_path+0xb6/0x690 [ 603.200469][T13461] tomoyo_check_open_permission+0x2af/0x3c0 [ 603.200501][T13461] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 603.200541][T13461] ? hook_file_open+0x24e/0x7a0 [ 603.200575][T13461] ? path_get+0x61/0x80 [ 603.200601][T13461] tomoyo_file_open+0x6b/0x90 [ 603.200627][T13461] security_file_open+0xb5/0x1e0 [ 603.200647][T13461] do_dentry_open+0x5aa/0x1660 [ 603.200670][T13461] ? security_inode_permission+0xbf/0x250 [ 603.200704][T13461] vfs_open+0x82/0x3f0 [ 603.200733][T13461] path_openat+0x208c/0x31a0 [ 603.200768][T13461] ? __pfx_path_openat+0x10/0x10 [ 603.200799][T13461] do_file_open+0x20e/0x430 [ 603.200822][T13461] ? __pfx_do_file_open+0x10/0x10 [ 603.200862][T13461] ? alloc_fd+0x476/0x790 [ 603.200885][T13461] ? do_getname+0x191/0x390 [ 603.200913][T13461] do_sys_openat2+0x10d/0x1e0 [ 603.200940][T13461] ? __pfx_do_sys_openat2+0x10/0x10 [ 603.200966][T13461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 603.200991][T13461] ? __fget_files+0x21f/0x3d0 [ 603.201015][T13461] __x64_sys_openat+0x12d/0x210 [ 603.201043][T13461] ? __pfx___x64_sys_openat+0x10/0x10 [ 603.201070][T13461] ? ksys_write+0x1ac/0x250 [ 603.201097][T13461] do_syscall_64+0x10b/0xf80 [ 603.201115][T13461] ? clear_bhb_loop+0x40/0x90 [ 603.201139][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.201159][T13461] RIP: 0033:0x7f9b5439c819 [ 603.201175][T13461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.201195][T13461] RSP: 002b:00007f9b55264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 603.201214][T13461] RAX: ffffffffffffffda RBX: 00007f9b54615fa0 RCX: 00007f9b5439c819 [ 603.201227][T13461] RDX: 0000000000008640 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 603.201239][T13461] RBP: 00007f9b55264090 R08: 0000000000000000 R09: 0000000000000000 [ 603.201251][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.201262][T13461] R13: 00007f9b54616038 R14: 00007f9b54615fa0 R15: 00007ffd13cefe68 [ 603.201287][T13461] [ 603.201295][T13461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.480260][T11238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 605.488394][T11238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 605.497280][T11238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 605.506063][T11238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 605.514072][T11238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 605.779211][T13475] chnl_net:caif_netlink_parms(): no params data found [ 605.910722][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.918133][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.925306][T13475] bridge_slave_0: entered allmulticast mode [ 605.935251][T13475] bridge_slave_0: entered promiscuous mode [ 605.944073][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.951666][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.959262][T13475] bridge_slave_1: entered allmulticast mode [ 605.968717][T13475] bridge_slave_1: entered promiscuous mode [ 606.007464][T13475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.020566][T13475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.085936][T13475] team0: Port device team_slave_0 added [ 606.108896][T13475] team0: Port device team_slave_1 added [ 606.154562][T13475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.166156][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.198644][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.211588][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.218781][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.247068][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.304484][T13475] hsr_slave_0: entered promiscuous mode [ 606.311580][T13475] hsr_slave_1: entered promiscuous mode [ 606.318378][T13475] debugfs: 'hsr0' already exists in 'hsr' [ 606.324168][T13475] Cannot create hsr debugfs directory [ 607.002264][T13483] kexec: Could not allocate control_code_buffer [ 607.566316][T11238] Bluetooth: hci4: command tx timeout [ 607.803061][ T5825] Process accounting resumed [ 607.920787][T11579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.929430][T11579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.937735][T11579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.945515][T11579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.953926][T11579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 608.245856][T13505] chnl_net:caif_netlink_parms(): no params data found [ 608.507504][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.514861][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.522199][T13505] bridge_slave_0: entered allmulticast mode [ 608.530197][T13505] bridge_slave_0: entered promiscuous mode [ 608.547487][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.568255][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.575413][T13505] bridge_slave_1: entered allmulticast mode [ 608.596523][T13505] bridge_slave_1: entered promiscuous mode [ 608.652030][T13505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.670133][T13505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.768048][T13505] team0: Port device team_slave_0 added [ 608.775728][T13505] team0: Port device team_slave_1 added [ 608.828845][T13505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.835846][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.862144][T13505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.874896][T13505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.882066][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.911824][T13505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.977329][T13505] hsr_slave_0: entered promiscuous mode [ 608.996717][T13505] hsr_slave_1: entered promiscuous mode [ 609.003695][T13505] debugfs: 'hsr0' already exists in 'hsr' [ 609.011777][T13505] Cannot create hsr debugfs directory [ 609.646383][T11238] Bluetooth: hci4: command tx timeout [ 609.768261][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1526'. [ 609.914300][T13522] FAULT_INJECTION: forcing a failure. [ 609.914300][T13522] name failslab, interval 1, probability 0, space 0, times 0 [ 609.928912][T13522] CPU: 0 UID: 0 PID: 13522 Comm: syz.1.1528 Not tainted syzkaller #0 PREEMPT(full) [ 609.928947][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 609.928963][T13522] Call Trace: [ 609.928972][T13522] [ 609.928981][T13522] dump_stack_lvl+0x100/0x190 [ 609.929030][T13522] should_fail_ex.cold+0x5/0xa [ 609.929063][T13522] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 609.929098][T13522] should_failslab+0xc2/0x120 [ 609.929129][T13522] __kmalloc_noprof+0xe0/0x850 [ 609.929172][T13522] ? lockdep_hardirqs_on+0x78/0x100 [ 609.929230][T13522] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 609.929270][T13522] genl_family_rcv_msg_doit+0xc7/0x300 [ 609.929310][T13522] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 609.929333][T13522] ? genl_get_cmd+0x3ef/0x720 [ 609.929360][T13522] ? bpf_lsm_capable+0x9/0x10 [ 609.929381][T13522] ? security_capable+0x80/0x260 [ 609.929412][T13522] genl_rcv_msg+0x560/0x800 [ 609.929437][T13522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.929459][T13522] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 609.929486][T13522] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 609.929506][T13522] ? __pfx_nl80211_post_doit+0x10/0x10 [ 609.929543][T13522] netlink_rcv_skb+0x159/0x420 [ 609.929562][T13522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.929586][T13522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.929614][T13522] ? netlink_deliver_tap+0x1ae/0xcc0 [ 609.929649][T13522] genl_rcv+0x28/0x40 [ 609.929668][T13522] netlink_unicast+0x5aa/0x870 [ 609.929690][T13522] ? __pfx_netlink_unicast+0x10/0x10 [ 609.929709][T13522] ? __pfx___might_resched+0x10/0x10 [ 609.929739][T13522] ? __lock_acquire+0x4a5/0x2630 [ 609.929771][T13522] netlink_sendmsg+0x8b0/0xda0 [ 609.929794][T13522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.929812][T13522] ? __import_iovec+0x1d2/0x640 [ 609.929834][T13522] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 609.929865][T13522] ____sys_sendmsg+0x9e1/0xb70 [ 609.929885][T13522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.929907][T13522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.929940][T13522] ___sys_sendmsg+0x190/0x1e0 [ 609.929965][T13522] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.930017][T13522] __sys_sendmsg+0x170/0x220 [ 609.930048][T13522] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.930093][T13522] do_syscall_64+0x10b/0xf80 [ 609.930111][T13522] ? clear_bhb_loop+0x40/0x90 [ 609.930135][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.930156][T13522] RIP: 0033:0x7f9b5439c819 [ 609.930171][T13522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.930195][T13522] RSP: 002b:00007f9b55264028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.930213][T13522] RAX: ffffffffffffffda RBX: 00007f9b54615fa0 RCX: 00007f9b5439c819 [ 609.930226][T13522] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000003 [ 609.930239][T13522] RBP: 00007f9b55264090 R08: 0000000000000000 R09: 0000000000000000 [ 609.930250][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.930262][T13522] R13: 00007f9b54616038 R14: 00007f9b54615fa0 R15: 00007ffd13cefe68 [ 609.930287][T13522] [ 610.245647][T11238] Bluetooth: hci5: command tx timeout [ 611.726739][T11238] Bluetooth: hci4: command tx timeout [ 611.808538][T13536] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1531'. [ 612.289680][T11238] Bluetooth: hci5: command tx timeout [ 613.806652][T11238] Bluetooth: hci4: command tx timeout [ 613.859521][T13557] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1536'. [ 614.366513][T11238] Bluetooth: hci5: command tx timeout [ 615.892516][T13578] futex_wake_op: syz.1.1541 tries to shift op by -2048; fix this program [ 615.901339][T13578] futex_wake_op: syz.1.1541 tries to shift op by -2048; fix this program [ 616.446437][T11238] Bluetooth: hci5: command tx timeout [ 618.642565][T13601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'. [ 622.918628][T13612] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1551'. [ 624.369784][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.376410][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.651689][T13629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1557'. [ 624.664176][T13629] netlink: 'syz.1.1557': attribute type 1 has an invalid length. [ 628.405344][T13660] FAULT_INJECTION: forcing a failure. [ 628.405344][T13660] name fail_futex, interval 1, probability 0, space 0, times 0 [ 628.419989][T13660] CPU: 0 UID: 0 PID: 13660 Comm: syz.1.1565 Not tainted syzkaller #0 PREEMPT(full) [ 628.420015][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.420028][T13660] Call Trace: [ 628.420034][T13660] [ 628.420041][T13660] dump_stack_lvl+0x100/0x190 [ 628.420077][T13660] should_fail_ex.cold+0x5/0xa [ 628.420103][T13660] get_futex_key+0x1d2/0x1620 [ 628.420131][T13660] ? __pfx_get_futex_key+0x10/0x10 [ 628.420159][T13660] ? __local_bh_enable_ip+0x9e/0x120 [ 628.420187][T13660] futex_wake+0xea/0x530 [ 628.420221][T13660] ? __pfx_futex_wake+0x10/0x10 [ 628.420250][T13660] ? find_held_lock+0x2b/0x80 [ 628.420271][T13660] ? __inet_bind+0x953/0xc60 [ 628.420296][T13660] ? __local_bh_enable_ip+0x9e/0x120 [ 628.420318][T13660] ? lockdep_hardirqs_on+0x78/0x100 [ 628.420352][T13660] ? __inet_bind+0x953/0xc60 [ 628.420375][T13660] ? __local_bh_enable_ip+0x9e/0x120 [ 628.420400][T13660] do_futex+0x32b/0x350 [ 628.420428][T13660] ? __pfx_do_futex+0x10/0x10 [ 628.420455][T13660] ? __sys_bind+0x1c7/0x260 [ 628.420485][T13660] __x64_sys_futex+0x34f/0x4d0 [ 628.420516][T13660] ? __pfx___x64_sys_futex+0x10/0x10 [ 628.420545][T13660] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 628.420575][T13660] do_syscall_64+0x10b/0xf80 [ 628.420593][T13660] ? clear_bhb_loop+0x40/0x90 [ 628.420617][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.420639][T13660] RIP: 0033:0x7f9b5439c819 [ 628.420661][T13660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.420681][T13660] RSP: 002b:00007f9b552640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 628.420700][T13660] RAX: ffffffffffffffda RBX: 00007f9b54615fa8 RCX: 00007f9b5439c819 [ 628.420714][T13660] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b54615fac [ 628.420726][T13660] RBP: 00007f9b54615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 628.420739][T13660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.420751][T13660] R13: 00007f9b54616038 R14: 00007ffd13cefd80 R15: 00007ffd13cefe68 [ 628.420776][T13660] [ 631.618504][T13685] binder: 13684:13685 ioctl 40047452 200000000000 returned -22 [ 649.936470][T11579] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 649.946509][T11579] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 649.954204][T11579] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 649.963996][T11579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 649.974241][T11579] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 650.123363][T13727] chnl_net:caif_netlink_parms(): no params data found [ 650.195795][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.203216][T13727] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.210577][T13727] bridge_slave_0: entered allmulticast mode [ 650.219988][T13727] bridge_slave_0: entered promiscuous mode [ 650.228194][T13727] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.235320][T13727] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.242833][T13727] bridge_slave_1: entered allmulticast mode [ 650.250090][T13727] bridge_slave_1: entered promiscuous mode [ 650.280886][T13727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.293439][T13727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.328583][T13727] team0: Port device team_slave_0 added [ 650.338957][T13727] team0: Port device team_slave_1 added [ 650.375716][T13727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.382988][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.409965][T13727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.422843][T13727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.430018][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.461832][T13727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.523530][T13727] hsr_slave_0: entered promiscuous mode [ 650.532994][T13727] hsr_slave_1: entered promiscuous mode [ 650.540957][T13727] debugfs: 'hsr0' already exists in 'hsr' [ 650.546860][T13727] Cannot create hsr debugfs directory [ 650.578032][T11579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 650.586617][T11579] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 650.595371][T11579] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 650.603934][T11579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 650.611921][T11579] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 650.869012][T13738] chnl_net:caif_netlink_parms(): no params data found [ 650.943764][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.951083][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.959032][T13738] bridge_slave_0: entered allmulticast mode [ 650.966689][T13738] bridge_slave_0: entered promiscuous mode [ 650.974602][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.982059][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.989834][T13738] bridge_slave_1: entered allmulticast mode [ 650.997423][T13738] bridge_slave_1: entered promiscuous mode [ 651.031941][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.043758][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.074246][T13738] team0: Port device team_slave_0 added [ 651.082411][T13738] team0: Port device team_slave_1 added [ 651.113996][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.122821][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.148998][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.161094][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.169557][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.197352][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.243088][T13738] hsr_slave_0: entered promiscuous mode [ 651.249730][T13738] hsr_slave_1: entered promiscuous mode [ 651.255898][T13738] debugfs: 'hsr0' already exists in 'hsr' [ 651.261779][T13738] Cannot create hsr debugfs directory [ 652.046391][T11579] Bluetooth: hci6: command tx timeout [ 652.686288][T11579] Bluetooth: hci7: command tx timeout [ 654.126306][T11579] Bluetooth: hci6: command tx timeout [ 654.766507][T11579] Bluetooth: hci7: command tx timeout [ 656.206438][T11579] Bluetooth: hci6: command tx timeout [ 656.846257][T11579] Bluetooth: hci7: command tx timeout [ 658.286494][T11238] Bluetooth: hci6: command tx timeout [ 658.926402][T11579] Bluetooth: hci7: command tx timeout [ 665.466560][T11238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 665.474829][T11238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 665.482839][T11238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 665.491622][T11238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 665.500487][T11238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 665.660862][T13748] chnl_net:caif_netlink_parms(): no params data found [ 665.736407][T13748] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.743552][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.752047][T13748] bridge_slave_0: entered allmulticast mode [ 665.759458][T13748] bridge_slave_0: entered promiscuous mode [ 665.767757][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.775892][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.783451][T13748] bridge_slave_1: entered allmulticast mode [ 665.790798][T13748] bridge_slave_1: entered promiscuous mode [ 665.821673][T13748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.836006][T13748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.868368][T13748] team0: Port device team_slave_0 added [ 665.877660][T13748] team0: Port device team_slave_1 added [ 665.903589][T13748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.910625][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.938884][T13748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.951141][T13748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.958399][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.987479][T13748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.032251][T13748] hsr_slave_0: entered promiscuous mode [ 666.039795][T13748] hsr_slave_1: entered promiscuous mode [ 666.046026][T13748] debugfs: 'hsr0' already exists in 'hsr' [ 666.055725][T13748] Cannot create hsr debugfs directory [ 667.566370][T11238] Bluetooth: hci8: command tx timeout [ 667.991384][T11579] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 667.999840][T11579] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 668.008648][T11579] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 668.017403][T11579] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 668.025721][T11579] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 668.185427][T13759] chnl_net:caif_netlink_parms(): no params data found [ 668.261036][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.268383][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.275549][T13759] bridge_slave_0: entered allmulticast mode [ 668.282937][T13759] bridge_slave_0: entered promiscuous mode [ 668.291525][T13759] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.300831][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.308648][T13759] bridge_slave_1: entered allmulticast mode [ 668.315899][T13759] bridge_slave_1: entered promiscuous mode [ 668.345225][T13759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.357779][T13759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.389287][T13759] team0: Port device team_slave_0 added [ 668.398905][T13759] team0: Port device team_slave_1 added [ 668.427802][T13759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.434771][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.460813][T13759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.473168][T13759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.480220][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.508179][T13759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.555380][T13759] hsr_slave_0: entered promiscuous mode [ 668.561806][T13759] hsr_slave_1: entered promiscuous mode [ 668.568108][T13759] debugfs: 'hsr0' already exists in 'hsr' [ 668.573866][T13759] Cannot create hsr debugfs directory [ 669.646349][T11238] Bluetooth: hci8: command tx timeout [ 670.046347][T11238] Bluetooth: hci9: command tx timeout [ 671.726443][T11579] Bluetooth: hci8: command tx timeout [ 672.126313][T11238] Bluetooth: hci9: command tx timeout [ 673.806356][T11238] Bluetooth: hci8: command tx timeout [ 674.206603][T11238] Bluetooth: hci9: command tx timeout [ 676.286365][T11238] Bluetooth: hci9: command tx timeout [ 685.812065][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.818458][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.044919][T11579] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 710.055866][T11579] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 710.064068][T11579] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 710.073318][T11579] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 710.081159][T11579] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 710.241182][T13774] chnl_net:caif_netlink_parms(): no params data found [ 710.318456][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.325663][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.333279][T13774] bridge_slave_0: entered allmulticast mode [ 710.340486][T13774] bridge_slave_0: entered promiscuous mode [ 710.348698][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.355816][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.363136][T13774] bridge_slave_1: entered allmulticast mode [ 710.371028][T13774] bridge_slave_1: entered promiscuous mode [ 710.402416][T13774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.414095][T13774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.451403][T13774] team0: Port device team_slave_0 added [ 710.460107][T13774] team0: Port device team_slave_1 added [ 710.503216][T13774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.510424][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.537037][T13774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.550387][T13774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.557733][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.586512][T13774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.649723][T13774] hsr_slave_0: entered promiscuous mode [ 710.656939][T13774] hsr_slave_1: entered promiscuous mode [ 710.663291][T13774] debugfs: 'hsr0' already exists in 'hsr' [ 710.669572][T13774] Cannot create hsr debugfs directory [ 710.684740][T11579] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 710.696863][T11579] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 710.705899][T11579] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 710.715160][T11579] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 710.723916][T11579] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 710.970092][T13784] chnl_net:caif_netlink_parms(): no params data found [ 711.044432][T13784] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.052160][T13784] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.059740][T13784] bridge_slave_0: entered allmulticast mode [ 711.067545][T13784] bridge_slave_0: entered promiscuous mode [ 711.075404][T13784] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.082735][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.090761][T13784] bridge_slave_1: entered allmulticast mode [ 711.100733][T13784] bridge_slave_1: entered promiscuous mode [ 711.131405][T13784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.143290][T13784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.180128][T13784] team0: Port device team_slave_0 added [ 711.188595][T13784] team0: Port device team_slave_1 added [ 711.215789][T13784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.222991][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.249626][T13784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.269105][T13784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.276057][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.303623][T13784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.350303][T13784] hsr_slave_0: entered promiscuous mode [ 711.357359][T13784] hsr_slave_1: entered promiscuous mode [ 711.363586][T13784] debugfs: 'hsr0' already exists in 'hsr' [ 711.370263][T13784] Cannot create hsr debugfs directory [ 712.126521][T13730] Bluetooth: hci10: command tx timeout [ 712.766799][T13730] Bluetooth: hci11: command tx timeout [ 713.488910][T13730] Bluetooth: hci3: command 0x0406 tx timeout [ 714.206569][T13730] Bluetooth: hci10: command tx timeout [ 714.846852][T13730] Bluetooth: hci11: command tx timeout [ 716.287277][T13730] Bluetooth: hci10: command tx timeout [ 716.926939][T13730] Bluetooth: hci11: command tx timeout [ 718.366546][T13730] Bluetooth: hci10: command tx timeout [ 719.006877][T13730] Bluetooth: hci11: command tx timeout [ 725.558071][T11579] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 725.571634][T11579] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 725.579697][T11579] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 725.587778][T11579] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 725.595626][T11579] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 725.759789][T13794] chnl_net:caif_netlink_parms(): no params data found [ 725.832137][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.841572][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.849279][T13794] bridge_slave_0: entered allmulticast mode [ 725.856875][T13794] bridge_slave_0: entered promiscuous mode [ 725.864816][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.872268][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.879552][T13794] bridge_slave_1: entered allmulticast mode [ 725.888861][T13794] bridge_slave_1: entered promiscuous mode [ 725.919938][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.931642][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.967395][T13794] team0: Port device team_slave_0 added [ 725.975203][T13794] team0: Port device team_slave_1 added [ 726.001297][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.008889][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.035344][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.049059][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.056010][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.083553][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.130936][T13794] hsr_slave_0: entered promiscuous mode [ 726.138397][T13794] hsr_slave_1: entered promiscuous mode [ 726.144586][T13794] debugfs: 'hsr0' already exists in 'hsr' [ 726.151073][T13794] Cannot create hsr debugfs directory [ 727.646353][T11238] Bluetooth: hci12: command tx timeout [ 728.060846][T13730] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 728.071747][T13730] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 728.080084][T13730] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 728.088528][T13730] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 728.097041][T13730] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 728.258175][T13805] chnl_net:caif_netlink_parms(): no params data found [ 728.334718][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.342103][T13805] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.349644][T13805] bridge_slave_0: entered allmulticast mode [ 728.357244][T13805] bridge_slave_0: entered promiscuous mode [ 728.365406][T13805] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.373313][T13805] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.380737][T13805] bridge_slave_1: entered allmulticast mode [ 728.388165][T13805] bridge_slave_1: entered promiscuous mode [ 728.422502][T13805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.434424][T13805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.469204][T13805] team0: Port device team_slave_0 added [ 728.477854][T13805] team0: Port device team_slave_1 added [ 728.504103][T13805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.512518][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.541501][T13805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.553835][T13805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.561034][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.587146][T13805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.633736][T13805] hsr_slave_0: entered promiscuous mode [ 728.640271][T13805] hsr_slave_1: entered promiscuous mode [ 728.647705][T13805] debugfs: 'hsr0' already exists in 'hsr' [ 728.653435][T13805] Cannot create hsr debugfs directory [ 728.846446][T13730] Bluetooth: hci4: command 0x0406 tx timeout [ 729.726312][T11579] Bluetooth: hci12: command tx timeout [ 730.126323][T11579] Bluetooth: hci13: command tx timeout [ 731.806353][T11579] Bluetooth: hci12: command tx timeout [ 732.206263][T13730] Bluetooth: hci13: command tx timeout [ 733.886516][T13730] Bluetooth: hci12: command tx timeout [ 733.968015][T13730] Bluetooth: hci5: command 0x0406 tx timeout [ 734.286284][T11579] Bluetooth: hci13: command tx timeout [ 736.366429][T11579] Bluetooth: hci13: command tx timeout [ 737.006326][ T31] INFO: task kworker/u10:3:11242 blocked for more than 143 seconds. [ 737.014377][ T31] Not tainted syzkaller #0 [ 737.019495][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.028481][ T31] task:kworker/u10:3 state:D stack:23512 pid:11242 tgid:11242 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 737.040644][ T31] Workqueue: netns cleanup_net [ 737.045449][ T31] Call Trace: [ 737.048792][ T31] [ 737.051745][ T31] __schedule+0xfee/0x6120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 737.056284][ T31] ? __lock_acquire+0x4a5/0x2630 [ 737.061936][ T31] ? __pfx___schedule+0x10/0x10 [ 737.067353][ T31] ? find_held_lock+0x2b/0x80 [ 737.072106][ T31] ? schedule+0x2bf/0x390 [ 737.076605][ T31] schedule+0xdd/0x390 [ 737.080755][ T31] schedule_timeout+0x1b2/0x280 [ 737.085659][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 737.091171][ T31] ? mark_held_locks+0x40/0x70 [ 737.096003][ T31] __wait_for_common+0x2e7/0x4c0 [ 737.101255][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 737.108741][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 737.114314][ T31] remove_one+0x312/0x420 [ 737.119013][ T31] ? find_next_child+0x18f/0x280 [ 737.124012][ T31] __simple_recursive_removal+0x148/0x5c0 [ 737.130187][ T31] ? __pfx_remove_one+0x10/0x10 [ 737.135113][ T31] debugfs_remove+0x5d/0x80 [ 737.140098][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 737.145179][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 737.151065][ T31] nsim_dev_reload_down+0x66/0xd0 [ 737.156430][ T31] devlink_reload+0x173/0x790 [ 737.161190][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 737.167062][ T31] devlink_pernet_pre_exit+0x222/0x330 [ 737.172616][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 737.179059][ T31] ? kobject_put+0xb9/0x640 [ 737.183616][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 737.191226][ T31] ops_undo_list+0x187/0xab0 [ 737.195878][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 737.201472][ T31] ? cleanup_net+0x332/0x920 [ 737.207963][ T31] ? cleanup_net+0x332/0x920 [ 737.212604][ T31] ? idr_destroy+0x62/0x2e0 [ 737.217704][ T31] cleanup_net+0x499/0x920 [ 737.222202][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 737.227613][ T31] ? rcu_is_watching+0x12/0xc0 [ 737.232459][ T31] process_one_work+0xa23/0x19a0 [ 737.237839][ T31] ? __pfx_process_one_work+0x10/0x10 [ 737.243285][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 737.248633][ T31] worker_thread+0x5ef/0xe50 [ 737.253298][ T31] ? kthread+0x13a/0x450 [ 737.257968][ T31] ? __pfx_worker_thread+0x10/0x10 [ 737.263136][ T31] kthread+0x370/0x450 [ 737.267612][ T31] ? __pfx_kthread+0x10/0x10 [ 737.272256][ T31] ret_from_fork+0x72b/0xd50 [ 737.277242][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 737.282411][ T31] ? __switch_to+0x7b4/0x1120 [ 737.287521][ T31] ? __pfx_kthread+0x10/0x10 [ 737.292221][ T31] ret_from_fork_asm+0x1a/0x30 [ 737.297465][ T31] [ 737.300576][ T31] INFO: task syz.0.1489:13356 blocked for more than 143 seconds. [ 737.310908][ T31] Not tainted syzkaller #0 [ 737.315885][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.324904][ T31] task:syz.0.1489 state:D stack:29000 pid:13356 tgid:13351 ppid:5821 task_flags:0x400040 flags:0x00080002 [ 737.337599][ T31] Call Trace: [ 737.340910][ T31] [ 737.343867][ T31] __schedule+0xfee/0x6120 [ 737.348870][ T31] ? __lock_acquire+0x4a5/0x2630 [ 737.353877][ T31] ? __pfx___schedule+0x10/0x10 [ 737.359164][ T31] ? find_held_lock+0x2b/0x80 [ 737.363901][ T31] ? schedule+0x2bf/0x390 [ 737.368632][ T31] schedule+0xdd/0x390 [ 737.372748][ T31] schedule_preempt_disabled+0x13/0x30 [ 737.378635][ T31] __mutex_lock+0xc9a/0x1b90 [ 737.383301][ T31] ? netlink_has_listeners+0x20f/0x430 [ 737.389156][ T31] ? devlink_health_report+0x681/0xb50 [ 737.394663][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 737.400079][ T31] ? devlink_recover_notify.constprop.0+0x200/0x670 [ 737.407133][ T31] ? __lock_acquire+0x401/0x2630 [ 737.413721][ T31] ? devlink_health_report+0x681/0xb50 [ 737.419618][ T31] devlink_health_report+0x681/0xb50 [ 737.424961][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 737.431169][ T31] ? _copy_from_user+0x59/0xd0 [ 737.435996][ T31] nsim_dev_health_break_write+0x166/0x210 [ 737.442095][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 737.448872][ T31] full_proxy_write+0x135/0x1a0 [ 737.453774][ T31] vfs_write+0x2aa/0x1070 [ 737.458548][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 737.463968][ T31] ? __pfx_vfs_write+0x10/0x10 [ 737.469115][ T31] ? __fget_files+0x215/0x3d0 [ 737.473843][ T31] ? __fget_files+0x21f/0x3d0 [ 737.478879][ T31] ksys_write+0x12a/0x250 [ 737.483252][ T31] ? __pfx_ksys_write+0x10/0x10 [ 737.488506][ T31] ? kcov_ioctl+0x16a/0x720 [ 737.493054][ T31] do_syscall_64+0x10b/0xf80 [ 737.498012][ T31] ? clear_bhb_loop+0x40/0x90 [ 737.502737][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.509059][ T31] RIP: 0033:0x7fed0df9c819 [ 737.515255][ T31] RSP: 002b:00007fed0c1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 737.524105][ T31] RAX: ffffffffffffffda RBX: 00007fed0e216180 RCX: 00007fed0df9c819 [ 737.532354][ T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 000000000000000c [ 737.540602][ T31] RBP: 00007fed0e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 737.548854][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.557066][ T31] R13: 00007fed0e216218 R14: 00007fed0e216180 R15: 00007ffe23a01a98 [ 737.565102][ T31] [ 737.568768][ T31] INFO: task syz-executor:13358 blocked for more than 143 seconds. [ 737.576931][ T31] Not tainted syzkaller #0 [ 737.581898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.591027][ T31] task:syz-executor state:D stack:24424 pid:13358 tgid:13358 ppid:1 task_flags:0x400140 flags:0x00080002 [ 737.603410][ T31] Call Trace: [ 737.607003][ T31] [ 737.609982][ T31] __schedule+0xfee/0x6120 [ 737.630893][ T31] ? __lock_acquire+0x4a5/0x2630 [ 737.635908][ T31] ? __pfx___schedule+0x10/0x10 [ 737.666157][ T31] ? find_held_lock+0x2b/0x80 [ 737.670913][ T31] ? schedule+0x2bf/0x390 [ 737.675303][ T31] schedule+0xdd/0x390 [ 737.680775][ T31] schedule_preempt_disabled+0x13/0x30 [ 737.686625][ T31] __mutex_lock+0xc9a/0x1b90 [ 737.691303][ T31] ? device_del+0xa0/0x9b0 [ 737.695791][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 737.707718][ T31] ? mark_held_locks+0x40/0x70 [ 737.712557][ T31] ? device_del+0xa0/0x9b0 [ 737.717376][ T31] device_del+0xa0/0x9b0 [ 737.723220][ T31] ? __pfx_ida_free+0x10/0x10 [ 737.728686][ T31] ? __pfx_device_del+0x10/0x10 [ 737.733599][ T31] ? __lock_acquire+0x4a5/0x2630 [ 737.738997][ T31] device_unregister+0x1d/0xe0 [ 737.743819][ T31] del_device_store+0x346/0x480 [ 737.749104][ T31] ? __pfx_del_device_store+0x10/0x10 [ 737.754604][ T31] ? find_held_lock+0x2b/0x80 [ 737.759656][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 737.764953][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 737.769940][ T31] ? __pfx_del_device_store+0x10/0x10 [ 737.775351][ T31] bus_attr_store+0x74/0xb0 [ 737.779928][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 737.785181][ T31] sysfs_kf_write+0xf2/0x150 [ 737.789912][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 737.795236][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 737.800527][ T31] vfs_write+0x6ac/0x1070 [ 737.804901][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 737.811223][ T31] ? __pfx_vfs_write+0x10/0x10 [ 737.816041][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 737.822687][ T31] ksys_write+0x12a/0x250 [ 737.827156][ T31] ? __pfx_ksys_write+0x10/0x10 [ 737.832044][ T31] do_syscall_64+0x10b/0xf80 [ 737.836754][ T31] ? clear_bhb_loop+0x40/0x90 [ 737.841470][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.847568][ T31] RIP: 0033:0x7f46c095d04e [ 737.852010][ T31] RSP: 002b:00007ffcd010a088 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 737.860506][ T31] RAX: ffffffffffffffda RBX: 000055557a2ff500 RCX: 00007f46c095d04e [ 737.868608][ T31] RDX: 0000000000000001 RSI: 00007ffcd010a110 RDI: 0000000000000005 [ 737.876669][ T31] RBP: 00007f46c0a33514 R08: 0000000000000000 R09: 0000000000000000 [ 737.884688][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.892969][ T31] R13: 00007ffcd010a110 R14: 00007f46c1744620 R15: 0000000000000003 [ 737.901014][ T31] [ 737.904070][ T31] INFO: task syz.3.1493:13384 blocked for more than 144 seconds. [ 737.911863][ T31] Not tainted syzkaller #0 [ 737.916846][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.927136][ T31] task:syz.3.1493 state:D stack:27784 pid:13384 tgid:13382 ppid:5825 task_flags:0x400040 flags:0x00080002 [ 737.939252][ T31] Call Trace: [ 737.942553][ T31] [ 737.945493][ T31] __schedule+0xfee/0x6120 [ 737.949985][ T31] ? __lock_acquire+0x4a5/0x2630 [ 737.954978][ T31] ? __pfx___schedule+0x10/0x10 [ 737.959916][ T31] ? find_held_lock+0x2b/0x80 [ 737.964630][ T31] ? schedule+0x2bf/0x390 [ 737.969061][ T31] schedule+0xdd/0x390 [ 737.973175][ T31] schedule_preempt_disabled+0x13/0x30 [ 737.978726][ T31] rwsem_down_read_slowpath+0x5dc/0xb30 [ 737.984316][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 737.990518][ T31] ? __pfx___might_resched+0x10/0x10 [ 737.995860][ T31] down_read+0xed/0x460 [ 738.000094][ T31] ? __pfx_down_read+0x10/0x10 [ 738.004892][ T31] ? mnt_get_write_access+0x1e9/0x2f0 [ 738.010350][ T31] path_openat+0xa16/0x31a0 [ 738.014935][ T31] ? __pfx_path_openat+0x10/0x10 [ 738.019993][ T31] do_file_open+0x20e/0x430 [ 738.024550][ T31] ? __pfx_do_file_open+0x10/0x10 [ 738.030991][ T31] ? alloc_fd+0x476/0x790 [ 738.035364][ T31] ? do_getname+0x191/0x390 [ 738.039950][ T31] do_sys_openat2+0x10d/0x1e0 [ 738.044671][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 738.049992][ T31] __x64_sys_openat+0x12d/0x210 [ 738.054891][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 738.060371][ T31] do_syscall_64+0x10b/0xf80 [ 738.065004][ T31] ? clear_bhb_loop+0x40/0x90 [ 738.069777][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.075712][ T31] RIP: 0033:0x7f1f91f9c819 [ 738.080188][ T31] RSP: 002b:00007f1f92db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 738.088704][ T31] RAX: ffffffffffffffda RBX: 00007f1f92216090 RCX: 00007f1f91f9c819 [ 738.096817][ T31] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 738.104815][ T31] RBP: 00007f1f92032c91 R08: 0000000000000000 R09: 0000000000000000 [ 738.112869][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.120913][ T31] R13: 00007f1f92216128 R14: 00007f1f92216090 R15: 00007fff771e56b8 [ 738.130251][ T31] [ 738.133426][ T31] [ 738.133426][ T31] Showing all locks held in the system: [ 738.141232][ T31] 1 lock held by khungtaskd/31: [ 738.146161][ T31] #0: ffffffff8e7e6960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 738.156170][ T31] 2 locks held by getty/5581: [ 738.160876][ T31] #0: ffff8880357e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 738.170720][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 738.180939][ T31] 6 locks held by kworker/u10:3/11242: [ 738.186483][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 738.197011][ T31] #1: ffffc90003597d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 738.207732][ T31] #2: ffffffff90603590 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 738.217367][ T31] #3: ffff88802c995130 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x185/0x330 [ 738.227956][ T31] #4: ffff88802c994250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x18f/0x330 [ 738.240344][ T31] #5: ffff8880777c9018 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 738.252165][ T31] 3 locks held by syz.0.1489/13356: [ 738.257417][ T31] #0: ffff88807a25bb38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 738.266540][ T31] #1: ffff8880202e0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.275623][ T31] #2: ffff88802c994250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50 [ 738.286761][ T31] 5 locks held by syz-executor/13358: [ 738.292249][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.301375][ T31] #1: ffff888033df4888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.311542][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.321839][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.332349][ T31] #4: ffff88802c995130 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 738.342877][ T31] 2 locks held by syz.3.1493/13384: [ 738.348150][ T31] #0: ffff8880202e0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 738.357374][ T31] #1: ffff8880777c9018 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 738.367959][ T31] 4 locks held by syz-executor/13475: [ 738.373359][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.382449][ T31] #1: ffff88802c17e888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.392298][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.402393][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.412766][ T31] 4 locks held by syz-executor/13505: [ 738.418199][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.427260][ T31] #1: ffff88807afff888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.438517][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.448874][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.459244][ T31] 2 locks held by syz.1.1579/13723: [ 738.464443][ T31] #0: ffff8880202e0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 738.473681][ T31] #1: ffff8880777c9018 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 738.484226][ T31] 4 locks held by syz-executor/13727: [ 738.489659][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.498751][ T31] #1: ffff88802ec18488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.508663][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.518808][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.529260][ T31] 4 locks held by syz-executor/13738: [ 738.534650][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.545053][ T31] #1: ffff88806a8e5c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.554961][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.565105][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.575521][ T31] 4 locks held by syz-executor/13748: [ 738.581013][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.590078][ T31] #1: ffff888033d43c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.599915][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.610087][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.620434][ T31] 4 locks held by syz-executor/13759: [ 738.625807][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.634872][ T31] #1: ffff88805b365c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.646033][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.656266][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.666665][ T31] 4 locks held by syz-executor/13774: [ 738.672065][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.681181][ T31] #1: ffff88805b807088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.691155][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.702932][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.713308][ T31] 4 locks held by syz-executor/13784: [ 738.718748][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.727796][ T31] #1: ffff888078822488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.737666][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.749459][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.759922][ T31] 4 locks held by syz-executor/13794: [ 738.765319][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.774958][ T31] #1: ffff888035b6a888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.784853][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.795101][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.805481][ T31] 4 locks held by syz-executor/13805: [ 738.810945][ T31] #0: ffff88803404a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 738.820033][ T31] #1: ffff88807a531c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 738.829925][ T31] #2: ffff88802913cc38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 738.840053][ T31] #3: ffffffff8fb72c08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 738.852138][ T31] [ 738.854632][ T31] ============================================= [ 738.854632][ T31] [ 738.869114][ T31] NMI backtrace for cpu 1 [ 738.869129][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 738.869170][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.869182][ T31] Call Trace: [ 738.869188][ T31] [ 738.869195][ T31] dump_stack_lvl+0x100/0x190 [ 738.869247][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 738.869270][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 738.869303][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 738.869336][ T31] sys_info+0x141/0x190 [ 738.869358][ T31] watchdog+0xd25/0x1050 [ 738.869392][ T31] ? __pfx_watchdog+0x10/0x10 [ 738.869414][ T31] ? __kthread_parkme+0x18c/0x230 [ 738.869441][ T31] ? kthread+0x13a/0x450 [ 738.869467][ T31] ? __pfx_watchdog+0x10/0x10 [ 738.869486][ T31] kthread+0x370/0x450 [ 738.869513][ T31] ? __pfx_kthread+0x10/0x10 [ 738.869543][ T31] ret_from_fork+0x72b/0xd50 [ 738.869577][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 738.869612][ T31] ? __switch_to+0x7b4/0x1120 [ 738.869637][ T31] ? __pfx_kthread+0x10/0x10 [ 738.869667][ T31] ret_from_fork_asm+0x1a/0x30 [ 738.869703][ T31] [ 738.869710][ T31] Sending NMI from CPU 1 to CPUs 0: [ 738.990901][ C0] NMI backtrace for cpu 0 [ 738.990923][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 738.990948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.990961][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 738.991001][ C0] Code: 07 84 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 dd 1b 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 738.991022][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 738.991040][ C0] RAX: 000000000071418b RBX: ffffffff8e4975c0 RCX: ffffffff8b8fad45 [ 738.991055][ C0] RDX: 0000000000000000 RSI: ffffffff8de8a961 RDI: ffffffff8c1b6220 [ 738.991069][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708679d [ 738.991082][ C0] R10: ffff8880b8433ceb R11: 0000000000000000 R12: 0000000000000000 [ 738.991095][ C0] R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90da5610 [ 738.991110][ C0] FS: 0000000000000000(0000) GS:ffff888124332000(0000) knlGS:0000000000000000 [ 738.991131][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.991145][ C0] CR2: 00007ffb1d6f2bd0 CR3: 000000000e598000 CR4: 00000000003526f0 [ 738.991159][ C0] Call Trace: [ 738.991166][ C0] [ 738.991172][ C0] default_idle+0x9/0x10 [ 738.991196][ C0] default_idle_call+0x6c/0xb0 [ 738.991219][ C0] do_idle+0x464/0x590 [ 738.991241][ C0] ? __pfx_do_idle+0x10/0x10 [ 738.991265][ C0] cpu_startup_entry+0x4f/0x60 [ 738.991286][ C0] rest_init+0x251/0x260 [ 738.991310][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 738.991341][ C0] start_kernel+0x47f/0x480 [ 738.991367][ C0] x86_64_start_reservations+0x24/0x30 [ 738.991395][ C0] x86_64_start_kernel+0x12b/0x130 [ 738.991423][ C0] common_startup_64+0x13e/0x148 [ 738.991455][ C0] [ 739.174838][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 739.181713][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 739.190851][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.200930][ T31] Call Trace: [ 739.204225][ T31] [ 739.207184][ T31] dump_stack_lvl+0x100/0x190 [ 739.211899][ T31] vpanic+0x552/0x970 [ 739.215906][ T31] ? __pfx_vpanic+0x10/0x10 [ 739.220447][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 739.226646][ T31] panic+0xd1/0xe0 [ 739.230430][ T31] ? __pfx_panic+0x10/0x10 [ 739.234875][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 739.241068][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 739.247283][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 739.253485][ T31] ? watchdog.cold+0x198/0x1ca [ 739.258279][ T31] ? watchdog+0xd35/0x1050 [ 739.262737][ T31] watchdog.cold+0x1a9/0x1ca [ 739.267366][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.272080][ T31] ? __kthread_parkme+0x18c/0x230 [ 739.277159][ T31] ? kthread+0x13a/0x450 [ 739.281438][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.286137][ T31] kthread+0x370/0x450 [ 739.290264][ T31] ? __pfx_kthread+0x10/0x10 [ 739.294925][ T31] ret_from_fork+0x72b/0xd50 [ 739.299553][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 739.304722][ T31] ? __switch_to+0x7b4/0x1120 [ 739.309431][ T31] ? __pfx_kthread+0x10/0x10 [ 739.314069][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.318903][ T31] [ 739.322531][ T31] Kernel Offset: disabled [ 739.326864][ T31] Rebooting in 86400 seconds..