last executing test programs: 6m19.067916687s ago: executing program 1 (id=1510): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x0, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/036/001\x00', 0x80a001, 0x0) ioctl$auto(r0, 0x8004550f, 0xf15) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd2, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x2, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x6, 0x8000001f, 0x9, 0x6d3e, 0x300, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) process_mrelease$auto(0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mount$auto(0x0, 0x0, &(0x7f00000001c0)='ci\x80,\xc9\xfes\x00', 0x8001, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) 6m17.464609965s ago: executing program 1 (id=1515): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x7, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x0) 6m16.289927493s ago: executing program 1 (id=1517): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socket(0x27, 0x800, 0xa5) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r0, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x27fff) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) socket(0x15, 0xa, 0x5) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 6m13.882143168s ago: executing program 1 (id=1525): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x7, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x0) 6m12.324599272s ago: executing program 1 (id=1527): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x0, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/036/001\x00', 0x80a001, 0x0) ioctl$auto(r0, 0x8004550f, 0xf15) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd2, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x2, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x6, 0x8000001f, 0x9, 0x6d3e, 0x300, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) process_mrelease$auto(0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mount$auto(0x0, 0x0, &(0x7f00000001c0)='ci\x80,\xc9\xfes\x00', 0x8001, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) 6m10.174059268s ago: executing program 1 (id=1531): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open(0x0, 0x7ffd, 0x12) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)=0x8000000000000001) madvise$auto(0x0, 0x2000040080000004, 0xe) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(r2, 0x0, 0x6) madvise$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) unshare$auto(0x40000080) r3 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) pread64$auto(r3, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x9, 0x8) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb-serial/drivers/digi_4/new_id\x00', 0x48500, 0x0) pread64$auto(r5, 0x0, 0x3ff, 0x9) ioctl$auto(0x3, 0x400454da, r4) r6 = io_uring_setup$auto(0x4c2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r7, 0x0, 0x1, 0x27) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) 5m55.098991694s ago: executing program 32 (id=1531): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open(0x0, 0x7ffd, 0x12) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)=0x8000000000000001) madvise$auto(0x0, 0x2000040080000004, 0xe) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(r2, 0x0, 0x6) madvise$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) unshare$auto(0x40000080) r3 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) pread64$auto(r3, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x9, 0x8) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb-serial/drivers/digi_4/new_id\x00', 0x48500, 0x0) pread64$auto(r5, 0x0, 0x3ff, 0x9) ioctl$auto(0x3, 0x400454da, r4) r6 = io_uring_setup$auto(0x4c2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r7, 0x0, 0x1, 0x27) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) 6.336704092s ago: executing program 2 (id=2547): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x41c681, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) read$auto(r1, &(0x7f0000000040)='\x00', 0x10001) (async, rerun: 64) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) (async, rerun: 32) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptywc\x00', 0x2200, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0xa, 0x2, 0x73) (async) symlink$auto(0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) (async) sched_get_priority_min$auto(0x40) (async) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) 5.636825121s ago: executing program 0 (id=2550): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x0, 0x0, 0x0, 0x440a48d3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) socketpair$auto(0x2, 0x5, 0xfffffffe, 0x0) r0 = socket(0x11, 0x80003, 0x300) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x8) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 5.497245283s ago: executing program 2 (id=2551): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x3, 0x80000000810004, 0xfff, 0x8000000008012, 0x3, 0x8004) write$auto(0x3, 0x0, 0x730b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESHEX=r0], 0x1ac}}, 0x4048095) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x8, &(0x7f0000000100)={0x0, 0x80000fc2}, 0x4, 0x0, 0x7, 0xa505}, 0xb}, 0x7, 0x4008) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f0000000480)='./file0\x00', 0x4009) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2) renameat2$auto(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00', 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r6, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r6, &(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000240)='./file1\x00', 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r7, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/query\x00', 0x40, 0x0) renameat2$auto(r7, &(0x7f0000000200)='./file0\x00', r7, &(0x7f0000000240)='./file1\x00', 0x2) 5.379700952s ago: executing program 3 (id=2552): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x40000, 0x0) mmap$auto(0x1, 0x2000b, 0x4000000000df, 0xeb5, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/integrity/format\x00', 0x0, 0x0) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto_TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)=0x1) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r4 = open(0x0, 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r4, 0x1) write$auto(0x3, 0x0, 0xfdef) r5 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) write$auto_cachefiles_daemon_fops_internal(r5, 0x0, 0x0) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/tty42\x00', 0x800, 0x0) read$auto_tty_fops_tty_io(r6, &(0x7f0000000180)=""/122, 0x7a) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r7) sendmsg$auto_NFSD_CMD_VERSION_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, r8, 0x1, 0x70bd25, 0x25dddbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0xc, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) poll$auto(&(0x7f0000000200)={r0, 0x3, 0x2}, 0xf, 0x7) 5.04761569s ago: executing program 2 (id=2553): mmap$auto(0x7fffffff, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@hci={0x1f, 0x2, 0x3}, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x240000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x8, 0x0, 0xfb3) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x100000001, 0x5, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xd, 0xb979, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x11, 0x80003, 0x300) ustat$auto(0x801, 0x0) setsockopt$auto(r3, 0x107, 0x8, 0x0, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) r5 = socket(0x10, 0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r5, &(0x7f0000000000)='-\x00', 0x1ff) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/tracing_on\x00', 0x22a100, 0x0) pwritev$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8}, 0x5, 0x1, 0x1) sendmsg$auto(r2, 0x0, 0x5) select$auto(0x3ff, &(0x7f00000000c0)={[0xeeca, 0x7, 0x100000000, 0x9, 0x6, 0x1ff, 0x1, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x4000000006, 0x8, 0x9, 0x5]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) 4.542468493s ago: executing program 0 (id=2555): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x400d, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) fcntl$auto(0x8000000000000001, 0x24, 0x8) write$auto_tty_fops_tty_io(r4, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) 4.494514749s ago: executing program 4 (id=2556): sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = socket(0x2, 0x3, 0x6) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001000)="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", 0x6be) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x3, 0xffffffffffffffff, 0x0) kexec_load$auto(0xff, 0x5, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x800000}, 0x1) 4.314758073s ago: executing program 3 (id=2557): socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) mmap$auto(0x0, 0x20006, 0x2000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz9\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5608, r1) io_uring_setup$auto(0x6, 0x0) mq_open$auto(&(0x7f00000002c0)='/sys/devices/platform/i8042/serio0/set\x00', 0x101, 0xbb0, &(0x7f0000000300)={0x6, 0x8, 0x5, 0x9}) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101401, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x87) socket(0xa, 0x2, 0x73) socket(0x18, 0x3, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x68) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 4.282031964s ago: executing program 4 (id=2558): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r0 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x2, 0x0, 0xb8, @_timer={0x0, 0xc8, @sival_ptr=&(0x7f0000000000)="abbaa21039e2159d07c424aaf990c918e49bcb86457e2f88ea5e6dd041deba93fb5aad9d19e5fa8ad3b02affed81e8781ce710a4e38585ad30b32297dc6139f893ef1bf20c3fec0069de2a1636e70deabb5069814621960d280ea3dac6658da9cb08a30895dac38da18078c64cfa7f7fa071e7cbcb2a7cd60a02686ab07998f84982ab05c14fb8e6ecee5ce26e7fbb825dfef5", 0xc7b}}}, 0x10, &(0x7f0000000140)={{0x2, 0x3}, {0xffffffff00000000, 0x8}, 0x4, 0x7, 0x8, 0x2, 0xbc0000000000000, 0x8, 0x8000000000000000, 0x6, 0x8, 0x7, 0x1, 0x0, 0x7ff, 0xfffffffffffffff9}) capget$auto(&(0x7f0000000200)={0x4, r0}, &(0x7f0000000240)={0x4d4f0936, 0x8, 0x800}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x29, 0x2, 0x0) (async) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_LINKS={0x28, 0x138, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "7a450fc0c03f8e7b5826b5d627c084be296233ebd5170fd0f3b2"}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4404}, 0x0) (async, rerun: 64) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x1, 0x8, 0x0) 3.887056709s ago: executing program 2 (id=2559): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@inferred=0x0, 0x10000082, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200"}, 0x0, @integer=@value=[0x80000000, 0x9, 0x6, 0x5, 0x100, 0x8, 0x2, 0x4, 0x3, 0x25, 0x2, 0x0, 0x3, 0x78c, 0x3, 0x7, 0x6, 0xfffffffffffffff7, 0x2, 0x9, 0x0, 0x0, 0xffffffffffff7fff, 0xffffffff00000001, 0xd6, 0x0, 0x34d, 0x7, 0x7, 0xc6, 0x800, 0x7fff, 0x20, 0x5, 0x4, 0x8000, 0x3, 0xb, 0x200, 0x401, 0x8000000000000001, 0x4, 0xffff, 0x10001, 0x2, 0x8, 0x0, 0x5, 0x6, 0x80000000, 0x10, 0x8000004, 0x3013, 0x8, 0x3, 0x13a, 0x6f27, 0x4, 0xc, 0x1, 0x3, 0x80000000, 0xffffffffffffffff, 0x81b, 0x2, 0x200, 0x4000000, 0x6, 0xffffffffffffffff, 0x6, 0x8, 0x7, 0x2, 0xff, 0x5, 0x5, 0x4, 0x8, 0x3, 0x5, 0x45, 0x8d, 0xffffffffffff0001, 0x9, 0x4, 0x80000001, 0x40, 0xfffffffffffff5f1, 0x100, 0x7, 0xfffffffffffffffe, 0x6, 0xd, 0x5, 0x48c0, 0x8000, 0x4000000000098, 0x3, 0xfce3, 0xffffffffffff7fff, 0x80000001, 0x34c2, 0x1000, 0x3ff, 0x0, 0x3, 0x1, 0x7, 0x9, 0x3, 0x4, 0x0, 0x1, 0x9, 0xecd, 0x1200000000000000, 0x7, 0xb, 0x2, 0xa2, 0xb, 0x7, 0x1ff, 0x8, 0x3da1, 0xffffffffffffff0d, 0x1, 0x7ff], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) socket(0xa, 0x1, 0x100) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = socket(0x1a, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x2, r2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f00000006c0)="7dd682fe6bfb01f2835a9aa528bc95e102862d85d2e9d8c8da614620892e1bba4736c70e541e93b38045e2a38d551821461000b26660c4b510def730ffb70c5378092b28692febc5e012d42e0c", 0x4d) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/bus/usb/038/001\x00', 0x442000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x7, 0x6, 0xd, 0x43d3a6d, 0x3, 0x3, 0x15f4da0a, 0x3, 0x6, 0x4000000000061, 0x80000001, 0x1, 0x4, 0x9, 0x99, 0xfffffffffffffffe]}, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101b80, 0x0) pread64$auto(r6, 0x0, 0xf469, 0xbc3ab41) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x7, 0xd, 0x1, 0xcde1, 0x3, 0x87, 0x9dcf, 0x0, 0x62, 0x9, 0x10, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/address\x00', 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc0c00, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x2, 0x7) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000600), r3) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000dcad5acf4c802bf959e681293f6678cf4deb1dfcaeb339027c2fcfa629d6cde09c81ee9e8e685c69b156d4c9cd689d7050ef71ad40794ce6ea754282438b60a2e54def5e342249f341e76e6eda5aeef7a9771a285b9401b956563acd13b92cd36367a2f1c2b6e47f0874be9e2e2ccecc3f1dff3514726aeb96bdd6c1bf78845fa47a000cf024a060a3eb4b06958f6d936eb66fe50cd8a6c1e673c3194ce4836bafbf50f0e97b7b30086b54cac9d9760468b10b94c4b89947048015e44b33fdb730bf4acc4bb00ec537b3fe6cdeb1cf4ac0f647940d2cdb6b4c8090f74e0b9e92afc61ca1ea350865b82eb22ed2213781c69b716cc96aa2daa3f641de1aba7ae76bae14f6ed08ccbdd8c45135b297f86efc60becb0eb6e122f03a", @ANYRES16=r9, @ANYRES32=r3, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r8) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x6e233a6037add35a, 0x0) 3.728023706s ago: executing program 0 (id=2560): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40e41, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x1, 0x9) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/63, 0x3f) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_TXREHASH(r2, 0x1, 0x4a, &(0x7f0000000480)='\xc4\x00', &(0x7f00000004c0)=0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) msgrcv$auto(0x0, &(0x7f0000000040)={0x7, 0x7}, 0x1, 0x7fffffffffffffff, 0x7) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r3, 0x540a, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x18000113) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) utimes$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x8, 0x4}) mmap$auto(0x2000000004, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xddf) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r4, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.932267398s ago: executing program 4 (id=2561): r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/tracing/error_log\x00', 0x603, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x88000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) (async) prctl$auto(0x4c, 0x7, 0x0, 0x1, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) (async) pidfd_open$auto(0x0, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x7fffffff, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x81ff, 0x7, 0xaec6, 0x0, 0x3, 0x1, 0x8800000000000000, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x1, 0x9, 0x40200000002, 0xfffffffffffffffb]}, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x100, 0xffffffffffffffff, 0x1000000000006, 0x12, r0, 0x8001) (async) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x551000, 0x0) ioctl$auto(r2, 0x400454ca, 0x38) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) (async) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/wlan0/proxy_arp\x00', 0x202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) read$auto(r4, 0x0, 0xb5) (async) write$auto(0x3, 0x0, 0xfdef) (async) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r1, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80, 0x3, 0x8, 0x5, 0x9d78, 0x1ff, r1, [0x7, 0xffdf, 0x7655], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x3}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x7f, 0x8000, 0xfffffffa, 0xc}}) 2.929371203s ago: executing program 3 (id=2562): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f0000000480)='./file0\x00', 0x4009) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) renameat2$auto(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x2) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r1, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r2, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file1\x00', 0x2) 2.666208691s ago: executing program 2 (id=2563): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0xa, 0x0, 0x4000000000007, 0xa509}, 0x800}, 0x4, 0x4008) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r0, 0xfd31, r2) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) mmap$auto(0x1000000400000000, 0xa, 0xdb, 0x18, 0x5, 0x7ff9) sendmsg$auto_NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xffffff96, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="316bb9d7bfbf0d41b7d3982d83b55fe402e1dfd9c9b2d29a397e1e27c62f5f15fb0e3b21d9831f905073672c49490854228d2ddd74a38da3eee018bccb48c4d86d1b263fe45c1acdf8e6f744829f3cf647cf820012d3f4edcb0cd67bbd859d40400ce93305374ef53035f4548fba6cde1d470c22384b1ac8b4c9ebfadb96278de95d733764c26fef8d743015f3d488783039c2631bed92d5ce7d5e62c5b6b45fcf5cffff450aa9f20ba121107546059ad1f6bf87c09602fae670bd7e0701307c1ecf7e98781d62896e05cf01c2b39b31f78f61", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048081) sysfs$auto(0x2, 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000000580)="19cfbd7c94bf24f39fac74395ac9d4b64a36c9ba2c7eb54f4046f8020d3da3a680770c435da22734c678da78b5269047d600908492d413da677b65340ab0d63f4441de01994cfe8ce00549bba6a168987aefbbfbcd4391c54efe1bd46c4657832c3642bd0a3df202b91ecc77") ioctl$auto_PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000780)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x0, 0x10000333d, 0x7}, {0xffffffffffffffff, 0x0, 0x7, 0x2}, {0xffffffffffffffff, 0x0, 0x5, 0xd589}, {r1, 0x0, 0x3, 0x2}]}) fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x7, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 2.48003128s ago: executing program 4 (id=2564): kcmp$auto(0x1, 0x1, 0x0, 0xffffffffffffffff, 0x100000001) unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) listmount$auto(0x0, &(0x7f00000001c0)=0x6, 0x4, 0x101) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x4d61e3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsopen$auto(&(0x7f00000000c0)=',/\\\x00', 0x7) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x1038, 0x0, 0x4, 0x70bd25, 0x3, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_PMK={0x2a, 0xfe, "e088cf61a66b7b8eff95763c3a980bdc5448f16e5d85f1c311ae52caeca00400cafc4ad82499"}, @NL80211_ATTR_REG_ALPHA2={0xff3, 0x21, "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"}]}, 0x1038}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r6, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) splice$auto(r3, &(0x7f0000000040)=0xffffffffffffc148, r5, &(0x7f0000000080)=0x3, 0x5, 0xffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001440)='/dev/dmmidi2\x00', 0x800, 0x0) epoll_create$auto(0x237a) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r8, 0x80045700, 0xfffffffffffffffd) open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) 2.375388274s ago: executing program 3 (id=2565): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) (async) pipe$auto(0x0) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) (async) pipe$auto(0x0) (async) tee$auto(0x2000000000000, 0x3, 0x402, 0x8) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r1, 0x921064b1, 0x8) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x24048084) write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000000)="a3a5ef09b5b35e13fae05cbc144f87d25db57560747a31736099f3281707ee3727cf3a430c340438cf2bfc7622074b9cbd47d33a8fcc675f800755e14e21f777602953a87d9d7c2e49c932f1c5241418c259f5e2a1b2503cceab9a366163116b184ac8d1b86457b107f50c1c04046b61946a73c534101cb745306fc6af1c74a0f948cb1d73e2ac13580c7e32d54d85beec07ff2eb69c8d41a15984f1972e642b9b23b6c352632fb7b4c1b5feef4cd41f6952484f2055b21b907aa67292afa156dbcc05f7e43ab888bb5aefab91adddec67f53b894be7cde405bd7a81f8f6cee1360bcea5d4953e7b0bb9c8806ecef879dcc644e379fbc46c61b31442cc91b967248f93ff7d880fe329752c8bb0be92332475e4f68c16a6a16223ad74ddbcc179c23864bc078e5f6da6ab5069a129c08405ad1a796579347990390966d71548262002f495a6824c9aeeae072347691188122d5bdd4b176aa40fe16f6f69f5dffbf63cee5af8facd6f083d35c609173ad85431a24a04d800275057a42ae08f9946f02cc0fcff16db4f719477937bcd107cc88d951326d537efad9840ab2898691d21d6f5ba539cebd073a20e7101b11866edc69c364300d1af3f366af7cbea46921c542e9fdcdbe614a8c5bc635b1b9fd0ea8019192416e2818de6b5c829fcb1551ef3c3916e45f32dca9915be6caef6da2dba8c099d2dbe5f8099afd4e5e1aa355a1a0be46fe5e9a26d9ed0667759cd68ba2a2fff7844016cdda98ad718ed1267d56bc79041edb3f9cf377f16cdd8d812399281f458f6612f66ea5fff4152a388998f91c8784d098276ac9770ffb1245e1e3b0df4d8718733b1aba36eec1fa1b52d01361090a92b65846b9d84bef1c73cb06b9c63d4296e2e08fc654dcdf74e61a88f74ae7f0810d0534dcec6312c2c", 0x28f) (async) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, &(0x7f00000001c0)) 2.006948147s ago: executing program 3 (id=2566): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae9c, &(0x7f0000000040)={0x2}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) timer_gettime$auto(0x1, &(0x7f0000000000)={{0x8b2b, 0x1}, {0xd, 0x4}}) ioctl$auto(r3, 0xc10c5541, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=@bpf_attr_4={0x10000, r3, 0x2, r2}, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, &(0x7f0000000240)="6b0f5ee986bc049d1da1eff152c8c8b26581e09cb79324ef2eb04bf6d7454692ddc8fac3030c500f24342f98e452adfedd76540f6b216638d13709aa92c4eb5589dc9c38631150fd7d1bb9ef49a0437664110a59c5160cc9fd753aaba588427087bacf60d32f6a3e54e44ab685eb737a569e22c43d298b49fe17ea07933245ee56aed286cc6b90a243a990312e62a5fcbf0f21e4f292c536fc2e935d8621fda712855f599bdb6bd0735b193b43b0708b") 1.949907352s ago: executing program 0 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x2, 0x0, &(0x7f0000001140)={{0x4c, 0xee01, 0x0, 0x80, 0x101, 0x5, 0x1}, 0x5, 0x0, 0x3, 0x7, @inferred, @raw=0x6, 0x6, 0x0, &(0x7f0000000080)="9ec0a4e8013f90ea62b9bfde09cda6ca0f4722440913cc1546025ca80fdf7e6761fad4421d21c6eb573577875f17e2f79afceee3d4987752ece89c37b22c557e0df7a0fcc8fe4473f1c6af5169dce5ffbba7a1f465ea5275081235cf5ec111cd7739c2cb6c6d5d4457c3eec8f00b1fb313355c7bd9472f872c400381c01120e30f602dd6881e3118e30ad52a5819605c3331699e6de2bfb97090f2afa94788d8881e52edf80e336a4b978fc37572d44630506f4d43451d77cba6a1", &(0x7f0000000140)="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"}) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/ieee80211/phy3/rts_threshold\x00', 0x303103, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000034c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003480)={&(0x7f0000001200)={0x2244, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0xa}, @NLBL_CIPSOV4_A_MLSLVL={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@generic, @typed={0x8, 0x29, 0x0, 0x0, @uid=r2}]}]}, @NLBL_CIPSOV4_A_MLSCAT={0x11bc, 0xb, 0x0, 0x1, [@nested={0x102c, 0x76, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="ac7151a725ef9270591d95fca6b9608b3e1604b57e6005ee473703514bd4261215ea61a1", @generic="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"]}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r4}, @nested={0xd2, 0x86, 0x0, 0x1, [@generic="1aa20bc819eb4737e4a67ac75d978d716bdb9c2123f10d15082fe72c4af2a0fbde632a2b0bf9019e25a6bff3e9e9fb1b196e440e60a1b23af40744d83f16004e194ed3a0a889b7863d2475bdc2d8e525eeaabbbd7e4062f9d89bb34a04022951bf8d59ab70062963f73d5184ee14f381ce64b5d2d07f6c837d9ee9f8a560587a0d4f40208979cc47269542ce6be553c956f047f65bc806efd99c6694a61faeb3f0b81995c39be6491efe8a736bab2d78f3f5a58e16cce15e3be7dd6fa923f5e4006bfaffa4924fa2364a55822ac6"]}, @typed={0x8, 0x12e, 0x0, 0x0, @u32=0x3}, @generic="c95c2e2555d98fd87a0afdf0ef29bfe5533eadd35329817e542739afd81c55a00419a226f5352226575af6b3c39dc601630cdf02e70c40fde12d4fd35e275ee09a40409e68e931224ccd4b32ac7446596d860669ef323268a1b7da4027a310f9c17481f1229cbf2eb77ffae1bead1a55a98b3d4c831254a9fd9c03f4091f23ef4863920b0f94b865bc0a42dfc7fdca59f896ddf92bec53e1936cbd04de373f9481bcc4e884f8c9c0"]}, @NLBL_CIPSOV4_A_MLSLVL={0x1052, 0x7, 0x0, 0x1, [@typed={0x6, 0x145, 0x0, 0x0, @str='\\\x00'}, @generic="3dc154912d2082d40b6903b39e73128dff4601b9fd45", @nested={0x1030, 0x74, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @u32}, @generic="d7f0630ecfe116ffdf707bec49a873fb43f41a310a4f8c47a0f9a57c287dc987", @generic="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", @nested={0x4, 0x11}]}]}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}]}, 0x2244}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) io_uring_register$auto_IORING_REGISTER_PERSONALITY(r0, 0x9, &(0x7f0000003500)="9a515d16ffd1884505d87e129c0a98de43b35f9f019c76d03e0569d235acef02ecd8357642993a0fe74357d51578ef9dec24e0ad814f46091054b6fc490fc0fff91fb098516696bce5fe53a64580ac40a372687f7a4af490f5982b0d4f9bea0840460e486f35e61645f80d6c3d7d79b2d9f602094bedab", 0x6) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000035c0), r0) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000003980)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x2a0000}, 0xc, &(0x7f0000003940)={&(0x7f0000003600)={0x308, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_COORDINATOR={0x2f4, 0x1e, 0x0, 0x1, [@typed={0x4, 0xbb}, @generic="24756c14af3534be26ee3df4d4a4c902accd0d362c41d5ba46f37dd79210d46a5d85276442f249d940651dba9666752f2dc657bcafba1ba6dfdb", @nested={0x53, 0x142, 0x0, 0x1, [@generic="b9c2121895b0169d02b9886c6f42a8dde44ca14b8da9ab775a5658af61ab11e5f0efb9cccff783cbc269aee553f529045bc9633b4137fc7072a0100c3964b5a003473f235729ff", @typed={0x8, 0xd7, 0x0, 0x0, @uid=r2}]}, @typed={0x2d, 0x14f, 0x0, 0x0, @binary="856e5578d04f0f93899524a5f7e77bf6f02b676af24c3bcaadc1fbff1a5e90fa545d1a244faf9f6c6e"}, @generic="0156371cdc44a8bc80b0b70aba923bef69daf8bfb8e490183d4131556e932a64da9813d50e7872831f3489f94b1101d2a73e17fc3be33454ac31c5bc362088f6988b757bec45838975fa73cae220a18eb35755e1", @generic="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", @nested={0xd9, 0x84, 0x0, 0x1, [@generic="ad0e26668ac2db84a4acdbc65c9d8ea8f3a82bb7ab3f897f4c852bb617f476a82b09f8", @generic="0f3cded4132aa8b9635c1dca35d4b6cc48490e2ec2f6189c317d40bc10afc37026c4dcafc75d28a71600fa474d1a75d1817b7f1ff709121bc5a85f27ed278bb656f6d03d8f3b92a188496ec0702145c2cbcc45ecdb90d5d887bfc8d851e443ffe90bb19d085cd8a26e6d28be1bf98171412eab0163d76c2d02eef10801eb4c18f2d6e2fb74268dec776c3a78f61f3827564b9872f8fff02f5f5117478cf01a557b81f67c24f8", @nested={0x4, 0x108}, @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4}, 0xc080) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003a00), r0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000003bc0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x110, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xd}, @NL80211_ATTR_IE_PROBE_RESP={0xe6, 0x7f, "8ac2c132c217e6b3994d188207590e19ccb5ebb05c45d9bbf2cf82d50fd8573636551c47f221b21c5201a182239b5322fc2b310d64cdf1df8d8452e8caa1bdde3ba85080451145f90b8917469a211e68a8e613231ae27820109a4bfe7f30cf99b508f014f64eeec79ab4e1d59e6221b67e7dcf76315748d6f7eaa59be96c3a4992d08905fc12e9695e281398a31b6cfb8543ab4b85d37812c66e6e628f6b2029bca100d4d2df263ffb18cb485a5b0be2eb1536ddd31ddb0eb87016d39f761e9debc8393442147b29beb2257b0b11faf58442d4ad138ccf9950bcea9285d8eaf691f5"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x10}, @NL80211_ATTR_DISABLE_HE={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r7 = landlock_create_ruleset$auto(&(0x7f0000003c00)={0x5, 0xfffffffffffffff7, 0xa}, 0xb, 0xfffffffb) r8 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000003c80), r0) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r7, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x80000000}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) madvise$auto(0xe, 0x1000, 0x7) ioctl$auto_PROCMAP_QUERY(r7, 0xc0686611, &(0x7f0000003d80)={0xffffffff7fffffff, 0x2, 0x4, 0x6, 0x10001, 0x3, 0x3ff, 0x81, 0xa53, 0x4, 0x5, 0xffff, 0x5, 0x6, 0x6}) ioctl$auto_tracing_buffers_fops_trace(r7, 0x2, &(0x7f0000003e00)="b5ae0b871c8881fe87c4474b6da03150df933a592d019c225c22c7b079fb0bb7cedd7dc2db4842ba730cdd96aee2a4d1ba01e1d9ff36e1853a8b301e6e351c6af1d447cc1ffdd678da82da9b94caf6b05165642caaf092a42928e44a633705d57a1fc839b9b4d9bcd8f05c4f35c98f0e10ab8d59dbabe62636695373504c6b189a7da7cbd3d1af0d0c5df5f38c35a3689bea5e298cf8c2eb8c2c92d46772724098a39501309a8a58b1b393371c7373ed648c9b3fc0bcb6284cf2fe100d35faf1a8d20566c7d9eb4a1cf70b1545bedcaf11e61598c7d76691672522245a467e550965ddfbe14a9e63658ae5a3") r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000003f00)='/proc/sys/net/ipv4/neigh/bond_slave_1/proxy_qlen\x00', 0x408100, 0x0) r10 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000003f40)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x2, 0x0) ioctl$auto(r10, 0x3, r9) landlock_add_rule$auto(r9, 0x3, &(0x7f0000003f80)="3de6593caff84fb243c16e746b0bbecb6b840ecb7bcc81bb6dd8f656a436c30538e94f63fba35bdf4b365fad896d820c48eeece8d75ba9daaf1975e3ad6f1bc561990f20c36c55e56d051b4fe86c71931d9d3cbe80d561c076f41f591d60681bdd50f0c44316a774b98c8a213981723481db64a64dddeab31f1107bd723441c9188a8af0f23eb79ab044d0852da5e540cdd8d853c5d591ef364c1585caf1d0c73d7caf", 0x5) keyctl$auto_KEY_SPEC_REQUESTOR_KEYRING(0x8, r2, r2, r3, 0xfffffffffffffff8) ioctl$auto_EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000004040)={0x3, r9, 0x2, 0x1ff, 0x7fffffffffffffff, 0xfffffffffffffff0}) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r11, &(0x7f0000004180)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004140)={&(0x7f00000040c0)={0x5c, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0x44, 0x129, "c3c7af0ee410490a9f0c23d5bad144c02b31f70da453832ca10204c812d6d651c94671c9fe237649b1f4d0f5925f102e652c8819b4c8cb471eb13b3faf3cdc87"}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40080) inotify_init1$auto(0x3) fstatfs$auto(0xffffffffffffffff, &(0x7f00000041c0)={0x7, 0x739c, 0x101, 0x1, 0x2, 0x40, 0xf6, {[0x6, 0x7ca83f96]}, 0x3, 0x5, 0x200, [0x6, 0x4, 0x0, 0x100000000]}) madvise$auto(0xfffffffffffffbff, 0x6, 0x4) r12 = ioctl$auto_TIOCGPTPEER(r11, 0x5441, 0x0) madvise$auto(0x8, 0x64bc, 0x9) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r12, 0xc1105517, &(0x7f0000004240)={{@raw=0xd, 0x4, 0x8, 0xeb, "46c6378642e11095b1f6d8ca9f42ca6c62a8ece80346f16a64716817c46ea3fdfd729f5cc64a09aaf60b11fb", @raw=0xfffffff9}, 0x200, 0xb823, 0x0, @raw=0x40, @integer64={0x7ff, 0x6, 0x3}, "d21554a0540f5e9d5bd09f4459472897aaac3efff7aaf95bcc79c4d368d160c70d817c358655ffd93392b0e1bcb373d1885feb86340de7950b04f12a875a83b1"}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000004380)='/proc/self/pagemap\x00', 0x1800, 0x0) 1.708720941s ago: executing program 0 (id=2568): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x900, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) r4 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/tracing/trace_options\x00', 0x442, 0x0) writev$auto(r5, &(0x7f0000000e00)={0x0, 0xd762}, 0x400) r6 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r6) ioctl$auto_VHOST_SET_VRING_ERR2(r4, 0x4008af22, &(0x7f0000000040)={0xe29, r6}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) write$auto(0x3, 0x0, 0xffd8) munmap$auto(0x8000, 0xffffffff) 1.299588531s ago: executing program 4 (id=2569): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) 128.517612ms ago: executing program 2 (id=2570): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) clock_getres$auto(0x2, 0x0) alarm$auto(0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x5, r2, @relative_fd=r3, 0x100000000}, 0xf) bpf$auto(0x4, &(0x7f00000002c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89b1, &(0x7f0000000900)={'macvlan1\x00'}) 110.047462ms ago: executing program 0 (id=2571): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]}) (async) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) sendmsg$auto_SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) (async) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, r4, 0x7) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async) r8 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) setresuid$auto(0x2, 0x5, 0x200) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r3, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) (async) r10 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000002c0)={@_si_pad}, 0xd, &(0x7f0000000340)={{0x9, 0x8001}, {0x6, 0x5}, 0x5, 0x0, 0xd381, 0xc3, 0x6, 0x1ff, 0x2, 0x5, 0x4, 0x5, 0x5, 0xf, 0x5, 0x3}) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000480)={0x3c8, r9, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS={0x329, 0x11, 0x0, 0x1, [@generic="a29373dcb6b8d54f731da759eb874ee8faea4c373aba66b15a3b5159d28161b317c9ae13b9e3fdb4ad31752fa4480df7f2c05dd66daa7c13fac77fd268c4ebb4008e9aec7a00f4a03a865929c903de0c9fd98c3e463faf748a5473b16601646dcde8c737005440baead2e87b80656f0b9ab8541ebc6ac4839fefd51a7591c9f1625271a128d93201ef3e86a4d288c2cc6983f66494a8cc6b87b024e95357209e3868752e4f18206592e11d45ae7411866dfe58f73d767bd053", @nested={0xaf, 0x129, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="3db9edad3c6e6be5", @nested={0x4, 0x64}, @nested={0x4, 0x59}, @generic="ea911bfe795887bfb98ff9cb937e0f880aa3edd2853e7d26b5b4d45c0a059f902b10b531e9b7dfaeb2d1b29135cfeb20dc15e1dc36a3018361e0df502836ea144e5b24e557984d473fd8eb10220413e3a9615de7341567942ec6a3d8c7b3b966c042a993d86407772be4cc38d65ac7094e6f3ce76a1b87940e3d1aa02bf805e1cc70792025388be393d830545a3d5adc98fcee", @nested={0x4, 0xe9}]}, @nested={0x1bb, 0x53, 0x0, 0x1, [@nested={0x4, 0x39}, @generic="64b4071c896e7a6a3daa73ec3375365098f9aa176ae0d2031e46557adf418efc52d6a6a79dd9dea572c12c283750e6adc303882f2ef29664dc7490f77da938ed284d521c8a0641f4b63eb933083299c4187492cd4b76240f235e759faf5ec71e660a608411f81911c54b659fcc5d0eb32d30b2eca4889e548d190aa4061f3d8987ac374b59407a21aa965294bac2f3104de5faf8b5e6e74146d971dfad86edeccd2b4c", @typed={0x8, 0xd1, 0x0, 0x0, @pid=r10}, @generic="a1e54550fab720c64438f8183f01b7d773b06aafdc226f6f906d0b2693873e3048fc411c67fd900dc685ba92b95559141cd09b504de10dd69fe2912542b39b8af3b1595a875750b729e8ff9312eb32fcb6f9a889cfdc17f0e71e5f2912f483aca1dce86e813c87fbf6f0b698d77e5125c9b6a951f438be64c679e489d1e4619acd982b6fa751806adcb356621e9f23055d2bf4cba378aad02a11815d8fcfe11948d58af6d216042472df31c73762e09a4f9fd7a3c5b837d3ecf35f2ab4c582f56b21249545d39f", @generic="d97c97569eae084b22c03e77c5fa0c58e81e6fb1448829c552db116987994f48a0f7923c2112415eed7929d93ba00db44d605de194", @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x5}]}]}, @NL80211_ATTR_FILS_KEK={0x31, 0xf2, "146f6aea3c6cafa2495eb851ea8555221e59847cdd9edc9418e483ebc10a614415e30f290d2493048808041187"}, @NL80211_ATTR_PMKID={0x51, 0x55, "71f845d1e1e06e919ae984aa275ed086d871b75df329de31f86f7ca01a79174d52bf77d0f83c985a91a66e65d44e127bbdd9cb348fdefcbedbeab95033f693c45baee008c00f6d488936c5b88b"}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) (async) open_by_handle_at$auto(r8, 0xfffffffffffffffc, 0x10003) (async) landlock_restrict_self$auto(r7, 0x0) (async) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)=',{\x00', &(0x7f0000000140)=&(0x7f0000000100)='}.\x00') move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) 20.166233ms ago: executing program 3 (id=2572): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)={0x484, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REKEY_DATA={0x45f, 0x7a, 0x0, 0x1, [@generic="d0b639691b58f71f024766982495e3cfffa17c8f4806e0983435a588634a84efadb1b11d03066b3ff302819c59c9863f4e2770f3550f17c01d91b53f284d56e8715b2000613028a42b278269d3d37897cdaf50f3295eea0c1eb8355bed15deaf34f3a0e3169692654ee033c456c096c9019df54705d175af99709c51b7f620c7c6fd527be2d48ef927762b2c9f0ab65c1f25adaeb34ff107bb150d8ec40cd8be10232d7868a17f27c8413545f9220199308e8cc86ea6d9ab7b169188c3bb96baf36b", @generic="e7f1218c833b7510c4fec587d4a6ffa5cd1554864e276019337d2fa32ad32dfe6b3b92f4ae6211048811a8a5976ca27c0334699a13", @nested={0x265, 0x11, 0x0, 0x1, [@generic="2dcade7ee68767ae7993e71cfb00e3abd48557586a534b768bfdd3df1ecad1b0c3a71b0cd008113cb8b70db5336576d8f19b669caab0dee5abb58443138de67fd52227ef2a230bff070e0746cfee3f64c731b73b20f18b4bd695510efe36f5039a8d04f3dfe3ea80767e63a7cbf730e50717fc5d7daa691f0f4df0b2bbf037e0e7022a2a3b9476e86a49a51cb4", @generic="668f1a2bc345484f795e3a1c9f3caf24b664d9ba60a095cdf9a6070fa2be4c2674c0d801597a35876cb75f9a4a6831aea5739b7bd85d9f1688cae697845fcf58d19a1e25c9e0eec46e2c168cbd6b3491d00004ff3856c13378e5f86828c0622eb9e561f3ec654588ddae461580f784720f941ba3493991ee8e954e57d1898548d9597891e15a92c42636c671a7186e2f3f50f28cae586be67797c07406ad7f80d46952b8575b28f47320e7b1a7db31368462f4058ce907bc1c29439efc09b8e14234e007", @generic="2687cadebe7f3809975be733ffa1b916212fa694f38a8e7ffbe333c2399867463504652c1459e8fa3651460affdf1a0433a64f9b1822af4546f8a81fbbe07abdc43f53ba013db47ca8ed0bbb41ae2c191bc7102bea6d93650e0ec38292efbc8eaaaba9dbfaaf86d5e3b8d90fb9351dd0f51e36b8fd8f926e0223540d0c172a1496374f91e3ea0042a3e7cac19450f57ff87bcb4c3c396b1e8483d7bc1a0dc71bcd0b36f5", @nested={0x4, 0x97}, @generic="8a76dfd5a149652b4bba0f3235d1fd4c854889b963abbe6c3afae6fbcc576b56c3ecbe9a17a6be3b4493d741b30f729e64a63aeb4733acebbc665d001b6960b0051cc57f1e4a57356aedfd0868e34f7d06be7474243c97e5ac21b2c78e56781dba6ee6dabe63e4dd"]}, @nested={0x14, 0xb0, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @str='{+$\x00'}, @typed={0x4, 0x2e}, @nested={0x4, 0x3e}]}, @typed={0x8, 0x50, 0x0, 0x0, @pid}, @generic="6bdcfab5378d649e3de0430fe973edc77255054d7f48a18d127fdfdd6c45ff62c4a93301f585da9944f856b5e8ec78e990d5e85d921cbaa2951574134698dae2c79cc487e2061d5eb9cb1fea11293ed2f70b9ee735e78fd4e885176be00e1933039007581fafdcba1cda83d9787b054c388e3b499310977542eb845c0f63abaa6265d01d594a6660f23d5f4c314676a2bc66c986914641f9d1dd13541546fdaa84703f24b29421211b9e5480e08df32c92232e103eeff6bed4a739df778c603ddd13acf5b897ee6a9e171fd4c3c23bab06454ec6bd6e9eb7791cda2cc98fb95e"]}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xbac}]}, 0x484}, 0x1, 0x0, 0x0, 0x4004041}, 0x40100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x660040, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) memfd_create$auto(0x0, 0x7) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x1003, 0x1, 0x948b, 0x3, 0x9, 0xfffffffffffffffd, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x6, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x200, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setfsgid$auto(0xee00) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080)="af101b8f8a7d3fb11541234c841ad04ef950bd816b1a4f98cd92c3e2a12357557135aad56ced71a1f0d966c275daa2c99a9c0ad115b322b5d8183b96ab92708cc68cbbdfb3df131db9a98348c8", 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)='-7', 0x3a) 0s ago: executing program 4 (id=2573): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x10000, 0x2d) write$auto_tty_fops_tty_io(r0, &(0x7f0000000240)="352c8e00000000c39c1fd7b1111793bf6ab3955868ef3590a739f2974bd1583034283e99c5b18591f6c37fc07a1441b9fbfe0001000000000000eb7a892a9a0a3e0165443b9ca9a77eb200000000000000000000412a59dbeec8b163c00b43884755d72d50bf467b8774efd6dcb8328a2f6afb48b94cfc186aa459cfbd078b97", 0x9b) mmap$auto(0xfffffffffffffff9, 0xa, 0x1, 0x16, r1, 0x308000010002) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0x9, 0x19, 0xfffffffffffffffe, 0x8002) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) ustat$auto(0x1, &(0x7f0000000180)={0xfffff499, 0x8, "0001f8c000"}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x20000002003f4, 0x15) mmap$auto(0xa, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r3 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x1, 0xa12a, 0xeb1, 0x400, 0x8000) capset$auto(0x0, 0x0) getsockopt$auto(r3, 0x40000000029, 0x30, 0xfffffffffffffffe, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/query\x00', 0x94300, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="79a327bd7000fedbdf2520000000", @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) kernel console output (not intermixed with test programs): switch: netlink: Either Ethernet header or EtherType is required. [ 237.060637][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.069500][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.793895][ T7786] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 238.136276][ T7796] FAULT_INJECTION: forcing a failure. [ 238.136276][ T7796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.151542][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.1.359 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 238.151580][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.151597][ T7796] Call Trace: [ 238.151606][ T7796] [ 238.151616][ T7796] dump_stack_lvl+0x16c/0x1f0 [ 238.151666][ T7796] should_fail_ex+0x512/0x640 [ 238.151715][ T7796] should_fail_alloc_page+0xe7/0x130 [ 238.151746][ T7796] prepare_alloc_pages+0x3c2/0x610 [ 238.151781][ T7796] ? rcu_is_watching+0x12/0xc0 [ 238.151816][ T7796] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 238.151865][ T7796] ? __lock_acquire+0xb8a/0x1c90 [ 238.151920][ T7796] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 238.151966][ T7796] ? do_raw_spin_lock+0x12c/0x2b0 [ 238.152014][ T7796] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 238.152061][ T7796] ? find_held_lock+0x2b/0x80 [ 238.152103][ T7796] ? __lock_acquire+0xb8a/0x1c90 [ 238.152142][ T7796] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.152189][ T7796] ? policy_nodemask+0xea/0x4e0 [ 238.152237][ T7796] alloc_pages_mpol+0x1fb/0x550 [ 238.152266][ T7796] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 238.152303][ T7796] folio_alloc_mpol_noprof+0x36/0x2f0 [ 238.152339][ T7796] shmem_alloc_folio+0x135/0x160 [ 238.152382][ T7796] shmem_alloc_and_add_folio+0x499/0xc20 [ 238.152432][ T7796] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 238.152477][ T7796] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 238.152526][ T7796] shmem_get_folio_gfp+0x67f/0x1600 [ 238.152574][ T7796] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 238.152619][ T7796] ? filemap_map_pages+0xf6f/0x1680 [ 238.152667][ T7796] shmem_fault+0x1fe/0xa30 [ 238.152710][ T7796] ? __pfx_shmem_fault+0x10/0x10 [ 238.152757][ T7796] ? __pfx_filemap_map_pages+0x10/0x10 [ 238.152812][ T7796] __do_fault+0x10d/0x490 [ 238.152859][ T7796] __handle_mm_fault+0x3c2a/0x5490 [ 238.152907][ T7796] ? __pfx___handle_mm_fault+0x10/0x10 [ 238.152942][ T7796] ? __pfx_mt_find+0x10/0x10 [ 238.152988][ T7796] ? find_vma+0xbf/0x140 [ 238.153015][ T7796] ? __pfx_find_vma+0x10/0x10 [ 238.153047][ T7796] handle_mm_fault+0x589/0xd10 [ 238.153086][ T7796] ? __pkru_allows_pkey+0x51/0xb0 [ 238.153128][ T7796] do_user_addr_fault+0x7a6/0x1370 [ 238.153173][ T7796] ? rcu_is_watching+0x12/0xc0 [ 238.153207][ T7796] exc_page_fault+0x5c/0xb0 [ 238.153249][ T7796] asm_exc_page_fault+0x26/0x30 [ 238.153276][ T7796] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 238.153309][ T7796] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 238.153336][ T7796] RSP: 0018:ffffc9000400fb60 EFLAGS: 00050202 [ 238.153358][ T7796] RAX: 0000000000000001 RBX: 0000000000020083 RCX: 0000000000009084 [ 238.153380][ T7796] RDX: ffffed100b28e000 RSI: 0000000000027000 RDI: ffff888059466f7d [ 238.153398][ T7796] RBP: 0000000000010001 R08: 0000000000000001 R09: ffffed100b28e000 [ 238.153415][ T7796] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 238.153431][ T7796] R13: ffff888059460000 R14: 0000000000000008 R15: 0000000000000020 [ 238.153466][ T7796] _copy_from_user+0x98/0xd0 [ 238.153512][ T7796] generic_map_update_batch+0x380/0x610 [ 238.153569][ T7796] ? __pfx_generic_map_update_batch+0x10/0x10 [ 238.153623][ T7796] ? __pfx_generic_map_update_batch+0x10/0x10 [ 238.153671][ T7796] bpf_map_do_batch+0x5b1/0x680 [ 238.153712][ T7796] __sys_bpf+0x15f3/0x4d80 [ 238.153741][ T7796] ? __pfx___sys_bpf+0x10/0x10 [ 238.153767][ T7796] ? ksys_write+0x190/0x250 [ 238.153813][ T7796] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 238.153878][ T7796] ? fput+0x70/0xf0 [ 238.153904][ T7796] ? ksys_write+0x1ac/0x250 [ 238.153943][ T7796] ? __pfx_ksys_write+0x10/0x10 [ 238.153990][ T7796] __x64_sys_bpf+0x78/0xc0 [ 238.154016][ T7796] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.154056][ T7796] do_syscall_64+0xcd/0x490 [ 238.154102][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.154129][ T7796] RIP: 0033:0x7fe78b38e929 [ 238.154150][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.154175][ T7796] RSP: 002b:00007fe78c16a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.154199][ T7796] RAX: ffffffffffffffda RBX: 00007fe78b5b5fa0 RCX: 00007fe78b38e929 [ 238.154217][ T7796] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 238.154234][ T7796] RBP: 00007fe78c16a090 R08: 0000000000000000 R09: 0000000000000000 [ 238.154250][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.154266][ T7796] R13: 0000000000000000 R14: 00007fe78b5b5fa0 R15: 00007ffd443b0258 [ 238.154300][ T7796] [ 238.609893][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.133276][ T7818] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 240.625349][ T7828] nbd: socks must be embedded in a SOCK_ITEM attr [ 240.639056][ T7828] block nbd0: shutting down sockets [ 242.653045][ T7864] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 244.675245][ T7884] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(13) [ 246.430058][ T7883] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 247.694388][ T7894] zswap: compressor not available [ 248.076194][ T7915] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 249.730047][ T7921] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.252738][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.261645][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.353496][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.363063][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.990389][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 252.029923][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 254.201769][ T8006] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 255.362252][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.375455][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.770873][ T8036] FAULT_INJECTION: forcing a failure. [ 256.770873][ T8036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.770927][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.3.409 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 256.770960][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.770975][ T8036] Call Trace: [ 256.770983][ T8036] [ 256.770997][ T8036] dump_stack_lvl+0x16c/0x1f0 [ 256.771040][ T8036] should_fail_ex+0x512/0x640 [ 256.771086][ T8036] should_fail_alloc_page+0xe7/0x130 [ 256.771114][ T8036] prepare_alloc_pages+0x3c2/0x610 [ 256.771146][ T8036] ? rcu_is_watching+0x12/0xc0 [ 256.771179][ T8036] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 256.771224][ T8036] ? __lock_acquire+0xb8a/0x1c90 [ 256.771282][ T8036] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.771325][ T8036] ? do_raw_spin_lock+0x12c/0x2b0 [ 256.771369][ T8036] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.771413][ T8036] ? find_held_lock+0x2b/0x80 [ 256.771452][ T8036] ? __lock_acquire+0xb8a/0x1c90 [ 256.771487][ T8036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.771532][ T8036] ? policy_nodemask+0xea/0x4e0 [ 256.771560][ T8036] alloc_pages_mpol+0x1fb/0x550 [ 256.771588][ T8036] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 256.771625][ T8036] folio_alloc_mpol_noprof+0x36/0x2f0 [ 256.771659][ T8036] shmem_alloc_folio+0x135/0x160 [ 256.771694][ T8036] shmem_alloc_and_add_folio+0x499/0xc20 [ 256.771741][ T8036] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 256.771784][ T8036] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 256.771829][ T8036] shmem_get_folio_gfp+0x67f/0x1600 [ 256.771874][ T8036] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 256.771919][ T8036] ? filemap_map_pages+0xf6f/0x1680 [ 256.771966][ T8036] shmem_fault+0x1fe/0xa30 [ 256.772007][ T8036] ? __pfx_shmem_fault+0x10/0x10 [ 256.772054][ T8036] ? __pfx_filemap_map_pages+0x10/0x10 [ 256.772105][ T8036] __do_fault+0x10d/0x490 [ 256.772149][ T8036] __handle_mm_fault+0x3c2a/0x5490 [ 256.772195][ T8036] ? __pfx___handle_mm_fault+0x10/0x10 [ 256.772228][ T8036] ? __pfx_mt_find+0x10/0x10 [ 256.772278][ T8036] ? find_vma+0xbf/0x140 [ 256.772306][ T8036] ? __pfx_find_vma+0x10/0x10 [ 256.772338][ T8036] handle_mm_fault+0x589/0xd10 [ 256.772375][ T8036] ? __pkru_allows_pkey+0x51/0xb0 [ 256.772415][ T8036] do_user_addr_fault+0x7a6/0x1370 [ 256.772458][ T8036] ? rcu_is_watching+0x12/0xc0 [ 256.772491][ T8036] exc_page_fault+0x5c/0xb0 [ 256.772531][ T8036] asm_exc_page_fault+0x26/0x30 [ 256.772557][ T8036] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 256.772590][ T8036] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 256.772615][ T8036] RSP: 0018:ffffc90003487b60 EFLAGS: 00050202 [ 256.772637][ T8036] RAX: 0000000000000001 RBX: 0000000000010082 RCX: 0000000000009083 [ 256.772653][ T8036] RDX: ffffed100adce000 RSI: 0000000000017000 RDI: ffff888056e66f7e [ 256.772669][ T8036] RBP: 0000000000010001 R08: 0000000000000001 R09: ffffed100adce000 [ 256.772686][ T8036] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 256.772701][ T8036] R13: ffff888056e60000 R14: 0000000000000008 R15: 0000000000000020 [ 256.772735][ T8036] _copy_from_user+0x98/0xd0 [ 256.772780][ T8036] generic_map_update_batch+0x380/0x610 [ 256.772833][ T8036] ? __pfx_generic_map_update_batch+0x10/0x10 [ 256.772884][ T8036] ? __pfx_generic_map_update_batch+0x10/0x10 [ 256.772929][ T8036] bpf_map_do_batch+0x5b1/0x680 [ 256.772969][ T8036] __sys_bpf+0x15f3/0x4d80 [ 256.772998][ T8036] ? __pfx___sys_bpf+0x10/0x10 [ 256.773024][ T8036] ? ksys_write+0x190/0x250 [ 256.773069][ T8036] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 256.773133][ T8036] ? fput+0x70/0xf0 [ 256.773158][ T8036] ? ksys_write+0x1ac/0x250 [ 256.773195][ T8036] ? __pfx_ksys_write+0x10/0x10 [ 256.773237][ T8036] __x64_sys_bpf+0x78/0xc0 [ 256.773261][ T8036] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.773305][ T8036] do_syscall_64+0xcd/0x490 [ 256.773348][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.773374][ T8036] RIP: 0033:0x7f5c4d98e929 [ 256.773395][ T8036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.773419][ T8036] RSP: 002b:00007f5c4e8ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.773442][ T8036] RAX: ffffffffffffffda RBX: 00007f5c4dbb5fa0 RCX: 00007f5c4d98e929 [ 256.773458][ T8036] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 256.773475][ T8036] RBP: 00007f5c4e8ad090 R08: 0000000000000000 R09: 0000000000000000 [ 256.773491][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.773504][ T8036] R13: 0000000000000000 R14: 00007f5c4dbb5fa0 R15: 00007ffc12db41a8 [ 256.773538][ T8036] [ 258.652589][ T8082] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 259.033080][ T8083] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 260.591872][ T8109] FAULT_INJECTION: forcing a failure. [ 260.591872][ T8109] name failslab, interval 1, probability 0, space 0, times 0 [ 260.607465][ T8109] CPU: 1 UID: 0 PID: 8109 Comm: syz.0.421 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 260.607500][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.607515][ T8109] Call Trace: [ 260.607524][ T8109] [ 260.607533][ T8109] dump_stack_lvl+0x16c/0x1f0 [ 260.607573][ T8109] should_fail_ex+0x512/0x640 [ 260.607601][ T8109] ? fs_reclaim_acquire+0xae/0x150 [ 260.607626][ T8109] ? tomoyo_encode2+0x100/0x3e0 [ 260.607651][ T8109] should_failslab+0xc2/0x120 [ 260.607669][ T8109] __kmalloc_noprof+0xd2/0x510 [ 260.607697][ T8109] ? d_absolute_path+0x136/0x1a0 [ 260.607721][ T8109] tomoyo_encode2+0x100/0x3e0 [ 260.607756][ T8109] tomoyo_encode+0x29/0x50 [ 260.607782][ T8109] tomoyo_realpath_from_path+0x18f/0x6e0 [ 260.607817][ T8109] tomoyo_path_number_perm+0x245/0x580 [ 260.607840][ T8109] ? tomoyo_path_number_perm+0x237/0x580 [ 260.607865][ T8109] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 260.607890][ T8109] ? find_held_lock+0x2b/0x80 [ 260.607932][ T8109] ? find_held_lock+0x2b/0x80 [ 260.607951][ T8109] ? hook_file_ioctl_common+0x145/0x410 [ 260.607978][ T8109] ? __fget_files+0x20e/0x3c0 [ 260.608009][ T8109] security_file_ioctl+0x9b/0x240 [ 260.608035][ T8109] __x64_sys_ioctl+0xb7/0x210 [ 260.608060][ T8109] do_syscall_64+0xcd/0x490 [ 260.608092][ T8109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.608112][ T8109] RIP: 0033:0x7f8b2778e929 [ 260.608126][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.608144][ T8109] RSP: 002b:00007f8b28517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.608163][ T8109] RAX: ffffffffffffffda RBX: 00007f8b279b6080 RCX: 00007f8b2778e929 [ 260.608175][ T8109] RDX: 0000000000000000 RSI: 00000000000007ac RDI: 0000000000000006 [ 260.608186][ T8109] RBP: 00007f8b28517090 R08: 0000000000000000 R09: 0000000000000000 [ 260.608198][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.608209][ T8109] R13: 0000000000000000 R14: 00007f8b279b6080 R15: 00007fff97d062f8 [ 260.608233][ T8109] [ 260.608249][ T8109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.771338][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.786895][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.855063][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.445720][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.454858][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.119884][ T8184] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.426948][ T8210] FAULT_INJECTION: forcing a failure. [ 264.426948][ T8210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.469905][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: syz.0.434 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 264.469944][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.469960][ T8210] Call Trace: [ 264.469969][ T8210] [ 264.469979][ T8210] dump_stack_lvl+0x16c/0x1f0 [ 264.470029][ T8210] should_fail_ex+0x512/0x640 [ 264.470074][ T8210] should_fail_alloc_page+0xe7/0x130 [ 264.470104][ T8210] prepare_alloc_pages+0x3c2/0x610 [ 264.470137][ T8210] ? rcu_is_watching+0x12/0xc0 [ 264.470169][ T8210] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 264.470226][ T8210] ? __lock_acquire+0xb8a/0x1c90 [ 264.470296][ T8210] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 264.470342][ T8210] ? do_raw_spin_lock+0x12c/0x2b0 [ 264.470400][ T8210] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 264.470445][ T8210] ? find_held_lock+0x2b/0x80 [ 264.470490][ T8210] ? __lock_acquire+0xb8a/0x1c90 [ 264.470524][ T8210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 264.470565][ T8210] ? policy_nodemask+0xea/0x4e0 [ 264.470592][ T8210] alloc_pages_mpol+0x1fb/0x550 [ 264.470618][ T8210] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 264.470652][ T8210] folio_alloc_mpol_noprof+0x36/0x2f0 [ 264.470683][ T8210] shmem_alloc_folio+0x135/0x160 [ 264.470716][ T8210] shmem_alloc_and_add_folio+0x499/0xc20 [ 264.470766][ T8210] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 264.470810][ T8210] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 264.470857][ T8210] shmem_get_folio_gfp+0x67f/0x1600 [ 264.470905][ T8210] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 264.470950][ T8210] ? filemap_map_pages+0xf6f/0x1680 [ 264.470996][ T8210] shmem_fault+0x1fe/0xa30 [ 264.471039][ T8210] ? __pfx_shmem_fault+0x10/0x10 [ 264.471085][ T8210] ? __pfx_filemap_map_pages+0x10/0x10 [ 264.471149][ T8210] __do_fault+0x10d/0x490 [ 264.471193][ T8210] __handle_mm_fault+0x3c2a/0x5490 [ 264.471238][ T8210] ? __pfx___handle_mm_fault+0x10/0x10 [ 264.471270][ T8210] ? __pfx_mt_find+0x10/0x10 [ 264.471314][ T8210] ? find_vma+0xbf/0x140 [ 264.471339][ T8210] ? __pfx_find_vma+0x10/0x10 [ 264.471369][ T8210] handle_mm_fault+0x589/0xd10 [ 264.471406][ T8210] ? __pkru_allows_pkey+0x51/0xb0 [ 264.471496][ T8210] do_user_addr_fault+0x7a6/0x1370 [ 264.471539][ T8210] ? rcu_is_watching+0x12/0xc0 [ 264.471572][ T8210] exc_page_fault+0x5c/0xb0 [ 264.471634][ T8210] asm_exc_page_fault+0x26/0x30 [ 264.471664][ T8210] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 264.471701][ T8210] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 264.471732][ T8210] RSP: 0018:ffffc900034a7b60 EFLAGS: 00050202 [ 264.471756][ T8210] RAX: 0000000000000001 RBX: 0000000000010082 RCX: 0000000000007083 [ 264.471774][ T8210] RDX: ffffed100adce000 RSI: 0000000000019000 RDI: ffff888056e68f7e [ 264.471793][ T8210] RBP: 0000000000010001 R08: 0000000000000001 R09: ffffed100adce000 [ 264.471811][ T8210] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 264.471828][ T8210] R13: ffff888056e60000 R14: 0000000000000008 R15: 0000000000000020 [ 264.471867][ T8210] _copy_from_user+0x98/0xd0 [ 264.471918][ T8210] generic_map_update_batch+0x380/0x610 [ 264.471978][ T8210] ? __pfx_generic_map_update_batch+0x10/0x10 [ 264.472036][ T8210] ? __pfx_generic_map_update_batch+0x10/0x10 [ 264.472087][ T8210] bpf_map_do_batch+0x5b1/0x680 [ 264.472132][ T8210] __sys_bpf+0x15f3/0x4d80 [ 264.472165][ T8210] ? __pfx___sys_bpf+0x10/0x10 [ 264.472194][ T8210] ? ksys_write+0x190/0x250 [ 264.472246][ T8210] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 264.472319][ T8210] ? fput+0x70/0xf0 [ 264.472348][ T8210] ? ksys_write+0x1ac/0x250 [ 264.472389][ T8210] ? __pfx_ksys_write+0x10/0x10 [ 264.472442][ T8210] __x64_sys_bpf+0x78/0xc0 [ 264.472477][ T8210] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.472522][ T8210] do_syscall_64+0xcd/0x490 [ 264.472572][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.472602][ T8210] RIP: 0033:0x7f8b2778e929 [ 264.472626][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.472655][ T8210] RSP: 002b:00007f8b28538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.472681][ T8210] RAX: ffffffffffffffda RBX: 00007f8b279b5fa0 RCX: 00007f8b2778e929 [ 264.472700][ T8210] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 264.472718][ T8210] RBP: 00007f8b28538090 R08: 0000000000000000 R09: 0000000000000000 [ 264.472749][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.472766][ T8210] R13: 0000000000000000 R14: 00007f8b279b5fa0 R15: 00007fff97d062f8 [ 264.472814][ T8210] [ 264.930402][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.103792][ T8197] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 265.432502][ T8219] binder: 8218:8219 unknown command 4 [ 265.458728][ T8219] binder: 8218:8219 ioctl c0306201 0 returned -22 [ 266.627158][ T8231] mkiss: ax0: crc mode is auto. [ 267.925726][ T8246] FAULT_INJECTION: forcing a failure. [ 267.925726][ T8246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.977036][ T8246] CPU: 1 UID: 0 PID: 8246 Comm: syz.1.444 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 267.977073][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.977088][ T8246] Call Trace: [ 267.977097][ T8246] [ 267.977107][ T8246] dump_stack_lvl+0x16c/0x1f0 [ 267.977153][ T8246] should_fail_ex+0x512/0x640 [ 267.977200][ T8246] should_fail_alloc_page+0xe7/0x130 [ 267.977229][ T8246] prepare_alloc_pages+0x3c2/0x610 [ 267.977268][ T8246] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 267.977315][ T8246] ? kvm_sched_clock_read+0x11/0x20 [ 267.977356][ T8246] ? __lock_acquire+0xb8a/0x1c90 [ 267.977401][ T8246] ? psi_task_switch+0x201/0x8e0 [ 267.977435][ T8246] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.977486][ T8246] ? find_held_lock+0x2b/0x80 [ 267.977522][ T8246] ? finish_task_switch.isra.0+0x221/0xc10 [ 267.977552][ T8246] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.977591][ T8246] ? finish_task_switch.isra.0+0x221/0xc10 [ 267.977622][ T8246] ? rcu_is_watching+0x12/0xc0 [ 267.977650][ T8246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.977696][ T8246] ? policy_nodemask+0xea/0x4e0 [ 267.977725][ T8246] alloc_pages_mpol+0x1fb/0x550 [ 267.977753][ T8246] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 267.977790][ T8246] folio_alloc_mpol_noprof+0x36/0x2f0 [ 267.977825][ T8246] shmem_alloc_folio+0x135/0x160 [ 267.977860][ T8246] shmem_alloc_and_add_folio+0x499/0xc20 [ 267.977907][ T8246] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 267.977950][ T8246] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 267.977996][ T8246] shmem_get_folio_gfp+0x67f/0x1600 [ 267.978042][ T8246] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 267.978085][ T8246] ? filemap_map_pages+0xf6f/0x1680 [ 267.978130][ T8246] shmem_fault+0x1fe/0xa30 [ 267.978170][ T8246] ? __pfx_shmem_fault+0x10/0x10 [ 267.978210][ T8246] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 267.978248][ T8246] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.978286][ T8246] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.978340][ T8246] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 267.978391][ T8246] __do_fault+0x10d/0x490 [ 267.978447][ T8246] __handle_mm_fault+0x3c2a/0x5490 [ 267.978499][ T8246] ? __pfx___handle_mm_fault+0x10/0x10 [ 267.978533][ T8246] ? __pfx_mt_find+0x10/0x10 [ 267.978576][ T8246] ? find_vma+0xbf/0x140 [ 267.978602][ T8246] ? __pfx_find_vma+0x10/0x10 [ 267.978632][ T8246] handle_mm_fault+0x589/0xd10 [ 267.978669][ T8246] ? __pkru_allows_pkey+0x51/0xb0 [ 267.978708][ T8246] do_user_addr_fault+0x7a6/0x1370 [ 267.978749][ T8246] ? rcu_is_watching+0x12/0xc0 [ 267.978780][ T8246] exc_page_fault+0x5c/0xb0 [ 267.978819][ T8246] asm_exc_page_fault+0x26/0x30 [ 267.978845][ T8246] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 267.978876][ T8246] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 267.978901][ T8246] RSP: 0018:ffffc9000bf2fb60 EFLAGS: 00050202 [ 267.978922][ T8246] RAX: 0000000000000001 RBX: 0000000000020083 RCX: 0000000000002084 [ 267.978938][ T8246] RDX: ffffed100adce000 RSI: 000000000002e000 RDI: ffff888056e6df7d [ 267.978954][ T8246] RBP: 0000000000010001 R08: 0000000000000001 R09: ffffed100adce000 [ 267.978970][ T8246] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 267.978984][ T8246] R13: ffff888056e60000 R14: 0000000000000008 R15: 0000000000000020 [ 267.979036][ T8246] _copy_from_user+0x98/0xd0 [ 267.979081][ T8246] generic_map_update_batch+0x380/0x610 [ 267.979147][ T8246] ? __pfx_generic_map_update_batch+0x10/0x10 [ 267.979196][ T8246] ? __pfx_generic_map_update_batch+0x10/0x10 [ 267.979240][ T8246] bpf_map_do_batch+0x5b1/0x680 [ 267.979278][ T8246] __sys_bpf+0x15f3/0x4d80 [ 267.979306][ T8246] ? __pfx___sys_bpf+0x10/0x10 [ 267.979331][ T8246] ? ksys_write+0x190/0x250 [ 267.979373][ T8246] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 267.979434][ T8246] ? fput+0x70/0xf0 [ 267.979458][ T8246] ? ksys_write+0x1ac/0x250 [ 267.979502][ T8246] ? __pfx_ksys_write+0x10/0x10 [ 267.979547][ T8246] __x64_sys_bpf+0x78/0xc0 [ 267.979571][ T8246] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.979609][ T8246] do_syscall_64+0xcd/0x490 [ 267.979653][ T8246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.979678][ T8246] RIP: 0033:0x7fe78b38e929 [ 267.979698][ T8246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.979723][ T8246] RSP: 002b:00007fe78c16a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.979745][ T8246] RAX: ffffffffffffffda RBX: 00007fe78b5b5fa0 RCX: 00007fe78b38e929 [ 267.979762][ T8246] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 267.979777][ T8246] RBP: 00007fe78c16a090 R08: 0000000000000000 R09: 0000000000000000 [ 267.979792][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.979807][ T8246] R13: 0000000000000000 R14: 00007fe78b5b5fa0 R15: 00007ffd443b0258 [ 267.979840][ T8246] [ 269.399026][ T8265] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 272.580682][ T8310] FAULT_INJECTION: forcing a failure. [ 272.580682][ T8310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.622090][ T8310] CPU: 1 UID: 0 PID: 8310 Comm: syz.2.459 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 272.622132][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.622150][ T8310] Call Trace: [ 272.622160][ T8310] [ 272.622172][ T8310] dump_stack_lvl+0x16c/0x1f0 [ 272.622227][ T8310] should_fail_ex+0x512/0x640 [ 272.622281][ T8310] should_fail_alloc_page+0xe7/0x130 [ 272.622316][ T8310] prepare_alloc_pages+0x3c2/0x610 [ 272.622355][ T8310] ? rcu_is_watching+0x12/0xc0 [ 272.622391][ T8310] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 272.622442][ T8310] ? __lock_acquire+0xb8a/0x1c90 [ 272.622502][ T8310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.622552][ T8310] ? do_raw_spin_lock+0x12c/0x2b0 [ 272.622604][ T8310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 272.622657][ T8310] ? find_held_lock+0x2b/0x80 [ 272.622703][ T8310] ? __lock_acquire+0xb8a/0x1c90 [ 272.622747][ T8310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.622800][ T8310] ? policy_nodemask+0xea/0x4e0 [ 272.622835][ T8310] alloc_pages_mpol+0x1fb/0x550 [ 272.622869][ T8310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 272.622921][ T8310] folio_alloc_mpol_noprof+0x36/0x2f0 [ 272.622973][ T8310] shmem_alloc_folio+0x135/0x160 [ 272.623012][ T8310] shmem_alloc_and_add_folio+0x499/0xc20 [ 272.623061][ T8310] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 272.623105][ T8310] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 272.623154][ T8310] shmem_get_folio_gfp+0x67f/0x1600 [ 272.623203][ T8310] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 272.623247][ T8310] ? filemap_map_pages+0xf6f/0x1680 [ 272.623294][ T8310] shmem_fault+0x1fe/0xa30 [ 272.623337][ T8310] ? __pfx_shmem_fault+0x10/0x10 [ 272.623384][ T8310] ? __pfx_filemap_map_pages+0x10/0x10 [ 272.623437][ T8310] __do_fault+0x10d/0x490 [ 272.623484][ T8310] __handle_mm_fault+0x3c2a/0x5490 [ 272.623531][ T8310] ? __pfx___handle_mm_fault+0x10/0x10 [ 272.623566][ T8310] ? __pfx_mt_find+0x10/0x10 [ 272.623612][ T8310] ? find_vma+0xbf/0x140 [ 272.623639][ T8310] ? __pfx_find_vma+0x10/0x10 [ 272.623670][ T8310] handle_mm_fault+0x589/0xd10 [ 272.623710][ T8310] ? __pkru_allows_pkey+0x51/0xb0 [ 272.623751][ T8310] do_user_addr_fault+0x7a6/0x1370 [ 272.623795][ T8310] ? rcu_is_watching+0x12/0xc0 [ 272.623828][ T8310] exc_page_fault+0x5c/0xb0 [ 272.623868][ T8310] asm_exc_page_fault+0x26/0x30 [ 272.623923][ T8310] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 272.623979][ T8310] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 272.624009][ T8310] RSP: 0018:ffffc90005277b60 EFLAGS: 00050202 [ 272.624034][ T8310] RAX: 0000000000000001 RBX: 0000000000020083 RCX: 0000000000001084 [ 272.624053][ T8310] RDX: ffffed100adce000 RSI: 000000000002f000 RDI: ffff888056e6ef7d [ 272.624073][ T8310] RBP: 0000000000010001 R08: 0000000000000001 R09: ffffed100adce000 [ 272.624092][ T8310] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 272.624110][ T8310] R13: ffff888056e60000 R14: 0000000000000008 R15: 0000000000000020 [ 272.624152][ T8310] _copy_from_user+0x98/0xd0 [ 272.624205][ T8310] generic_map_update_batch+0x380/0x610 [ 272.624270][ T8310] ? __pfx_generic_map_update_batch+0x10/0x10 [ 272.624330][ T8310] ? __pfx_generic_map_update_batch+0x10/0x10 [ 272.624384][ T8310] bpf_map_do_batch+0x5b1/0x680 [ 272.624432][ T8310] __sys_bpf+0x15f3/0x4d80 [ 272.624466][ T8310] ? __pfx___sys_bpf+0x10/0x10 [ 272.624496][ T8310] ? ksys_write+0x190/0x250 [ 272.624549][ T8310] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 272.624626][ T8310] ? fput+0x70/0xf0 [ 272.624656][ T8310] ? ksys_write+0x1ac/0x250 [ 272.624701][ T8310] ? __pfx_ksys_write+0x10/0x10 [ 272.624755][ T8310] __x64_sys_bpf+0x78/0xc0 [ 272.624785][ T8310] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.624832][ T8310] do_syscall_64+0xcd/0x490 [ 272.624885][ T8310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.624924][ T8310] RIP: 0033:0x7f9c53d8e929 [ 272.624949][ T8310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.624979][ T8310] RSP: 002b:00007f9c54b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.625006][ T8310] RAX: ffffffffffffffda RBX: 00007f9c53fb5fa0 RCX: 00007f9c53d8e929 [ 272.625026][ T8310] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 272.625045][ T8310] RBP: 00007f9c54b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 272.625064][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.625082][ T8310] R13: 0000000000000000 R14: 00007f9c53fb5fa0 R15: 00007fffe488a5c8 [ 272.625122][ T8310] [ 273.078828][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.825728][ T8315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 274.602289][ T8336] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 274.644425][ T8337] netlink: 342 bytes leftover after parsing attributes in process `syz.0.464'. [ 275.698736][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 276.278841][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.296289][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.496893][ T8372] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 279.279143][ T8401] random: crng reseeded on system resumption [ 280.190567][ T8408] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.974409][ T8425] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 283.459083][ T8461] __vm_enough_memory: pid: 8461, comm: syz.2.489, bytes: 4398046511104 not enough memory for the allocation [ 285.193410][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 285.617814][ T8498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.358878][ T8516] block nbd9: NBD_DISCONNECT [ 287.283473][ T8522] mmap: syz.3.499 (8522) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 287.322471][ T8518] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[8518] [ 288.290001][ T8530] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 290.717932][ T8561] Invalid ELF header magic: != ELF [ 291.557177][ T8575] random: crng reseeded on system resumption [ 292.164156][ T8570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 294.465223][ T8617] random: crng reseeded on system resumption [ 295.396419][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.470598][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.837471][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.848508][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.865684][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'. [ 300.350225][ T8692] hsr_slave_0 (unregistering): left promiscuous mode [ 301.138334][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.148883][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.262470][ T8741] FAULT_INJECTION: forcing a failure. [ 303.262470][ T8741] name fail_futex, interval 1, probability 0, space 0, times 1 [ 303.275506][ T8741] CPU: 1 UID: 0 PID: 8741 Comm: syz.1.540 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 303.275545][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.275563][ T8741] Call Trace: [ 303.275573][ T8741] [ 303.275584][ T8741] dump_stack_lvl+0x16c/0x1f0 [ 303.275635][ T8741] should_fail_ex+0x512/0x640 [ 303.275686][ T8741] get_futex_key+0x1d0/0x1540 [ 303.275759][ T8741] ? __pfx_get_futex_key+0x10/0x10 [ 303.275800][ T8741] ? mremap_userfaultfd_complete+0x106/0x170 [ 303.275845][ T8741] ? __futex_hash.constprop.0+0x1e9/0x440 [ 303.275889][ T8741] futex_wake+0xe7/0x4e0 [ 303.275940][ T8741] ? __pfx_futex_wake+0x10/0x10 [ 303.275995][ T8741] ? __do_sys_mremap+0x5d4/0x1590 [ 303.276046][ T8741] ? ksys_write+0x190/0x250 [ 303.276100][ T8741] do_futex+0x1e3/0x350 [ 303.276140][ T8741] ? __pfx_do_futex+0x10/0x10 [ 303.276190][ T8741] __x64_sys_futex+0x1e0/0x4c0 [ 303.276235][ T8741] ? __pfx___x64_sys_futex+0x10/0x10 [ 303.276278][ T8741] ? __task_pid_nr_ns+0x17c/0x500 [ 303.276336][ T8741] do_syscall_64+0xcd/0x490 [ 303.276388][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.276421][ T8741] RIP: 0033:0x7fe78b38e929 [ 303.276446][ T8741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.276477][ T8741] RSP: 002b:00007fe78c16a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 303.276507][ T8741] RAX: ffffffffffffffda RBX: 00007fe78b5b5fa8 RCX: 00007fe78b38e929 [ 303.276529][ T8741] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe78b5b5fac [ 303.276549][ T8741] RBP: 00007fe78b5b5fa0 R08: 00007fe78c16b000 R09: 0000000000000000 [ 303.276568][ T8741] R10: 0000000000000213 R11: 0000000000000246 R12: 00007fe78b5b5fac [ 303.276587][ T8741] R13: 0000000000000000 R14: 00007ffd443b0170 R15: 00007ffd443b0258 [ 303.276626][ T8741] [ 303.464048][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.892894][ T8836] sp0: Synchronizing with TNC [ 310.022288][ T8838] sp0: Synchronizing with TNC [ 312.720678][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.746555][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.307321][ T8953] netlink: 342 bytes leftover after parsing attributes in process `syz.2.580'. [ 318.419489][ T8953] cifs: Unknown parameter '$' [ 318.948058][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.064968][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.157212][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.166474][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.720299][ T8991] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 321.378196][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.589'. [ 322.094534][ T8998] bond0: (slave bond_slave_1): Releasing backup interface [ 322.130102][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.143561][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.683422][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.693813][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.952369][ T9060] kafs: addr_prefs: Invalid Command [ 326.816469][ T9073] ubi0: attaching mtd0 [ 326.852588][ T9073] ubi0: scanning is finished [ 326.893082][ T9073] ubi0: empty MTD device detected [ 327.668596][ T9073] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 327.777886][ T9073] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 327.785230][ T9073] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 327.907249][ T9073] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 327.914799][ T9073] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 327.925198][ T9073] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 327.996196][ T9073] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 580513159 [ 328.097116][ T9073] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 328.123549][ T9082] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.148116][ T9089] ubi0: background thread "ubi_bgt0d" started, PID 9089 [ 328.948322][ T9109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.401378][ T9100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.610'. [ 330.038838][ T9119] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 331.546223][ T9136] FAULT_INJECTION: forcing a failure. [ 331.546223][ T9136] name failslab, interval 1, probability 0, space 0, times 0 [ 331.578482][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.3.620 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 331.578527][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.578547][ T9136] Call Trace: [ 331.578557][ T9136] [ 331.578570][ T9136] dump_stack_lvl+0x16c/0x1f0 [ 331.578625][ T9136] should_fail_ex+0x512/0x640 [ 331.578673][ T9136] ? __kvmalloc_node_noprof+0x124/0x620 [ 331.578735][ T9136] should_failslab+0xc2/0x120 [ 331.578768][ T9136] __kvmalloc_node_noprof+0x137/0x620 [ 331.578816][ T9136] ? sprintf+0xcc/0x100 [ 331.578880][ T9136] ? alloc_netdev_mqs+0xd2/0x1570 [ 331.578925][ T9136] ? __pfx_sprintf+0x10/0x10 [ 331.578969][ T9136] ? __pfx_sl_setup+0x10/0x10 [ 331.579004][ T9136] ? alloc_netdev_mqs+0xd2/0x1570 [ 331.579047][ T9136] alloc_netdev_mqs+0xd2/0x1570 [ 331.579096][ T9136] ? slip_open+0x31c/0x1150 [ 331.579145][ T9136] slip_open+0x35c/0x1150 [ 331.579181][ T9136] ? __pfx___might_resched+0x10/0x10 [ 331.579214][ T9136] ? find_held_lock+0x2b/0x80 [ 331.579244][ T9136] ? __pfx_slip_open+0x10/0x10 [ 331.579278][ T9136] ? down_write+0x14d/0x200 [ 331.579306][ T9136] ? __pfx_slip_open+0x10/0x10 [ 331.579341][ T9136] tty_ldisc_open+0x9c/0x120 [ 331.579382][ T9136] tty_set_ldisc+0x32b/0x780 [ 331.579428][ T9136] tty_ioctl+0xc2e/0x1640 [ 331.579490][ T9136] ? __pfx_tty_ioctl+0x10/0x10 [ 331.579553][ T9136] ? find_held_lock+0x2b/0x80 [ 331.579584][ T9136] ? hook_file_ioctl_common+0x145/0x410 [ 331.579627][ T9136] ? __fget_files+0x20e/0x3c0 [ 331.579674][ T9136] ? __pfx_tty_ioctl+0x10/0x10 [ 331.579729][ T9136] __x64_sys_ioctl+0x18e/0x210 [ 331.579769][ T9136] do_syscall_64+0xcd/0x490 [ 331.579818][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.579867][ T9136] RIP: 0033:0x7f5c4d98e929 [ 331.579891][ T9136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.579922][ T9136] RSP: 002b:00007f5c4e8ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.579951][ T9136] RAX: ffffffffffffffda RBX: 00007f5c4dbb5fa0 RCX: 00007f5c4d98e929 [ 331.579971][ T9136] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000011 [ 331.579990][ T9136] RBP: 00007f5c4e8ad090 R08: 0000000000000000 R09: 0000000000000000 [ 331.580029][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.580047][ T9136] R13: 0000000000000000 R14: 00007f5c4dbb5fa0 R15: 00007ffc12db41a8 [ 331.580089][ T9136] [ 331.828821][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.548860][ T9131] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2048.0.4294967295), cmd(1) [ 333.186110][ T9154] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 333.238959][ T9156] FAULT_INJECTION: forcing a failure. [ 333.238959][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 333.306813][ T9156] CPU: 1 UID: 0 PID: 9156 Comm: syz.1.624 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 333.306860][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.306892][ T9156] Call Trace: [ 333.306903][ T9156] [ 333.306917][ T9156] dump_stack_lvl+0x16c/0x1f0 [ 333.306984][ T9156] should_fail_ex+0x512/0x640 [ 333.307046][ T9156] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 333.307093][ T9156] should_failslab+0xc2/0x120 [ 333.307124][ T9156] __kmalloc_cache_noprof+0x6a/0x3e0 [ 333.307166][ T9156] ? ipv6_add_dev+0x6b7/0x15f0 [ 333.307215][ T9156] ? kasan_save_track+0x14/0x30 [ 333.307264][ T9156] ipv6_add_dev+0x6b7/0x15f0 [ 333.307319][ T9156] addrconf_notify+0x53e/0x19e0 [ 333.307356][ T9156] ? ip6mr_device_event+0x1bc/0x230 [ 333.307413][ T9156] notifier_call_chain+0xbc/0x410 [ 333.307448][ T9156] ? __pfx_addrconf_notify+0x10/0x10 [ 333.307489][ T9156] call_netdevice_notifiers_info+0xbe/0x140 [ 333.307526][ T9156] register_netdevice+0x182e/0x2270 [ 333.307559][ T9156] ? idr_alloc+0xdd/0x130 [ 333.307597][ T9156] ? __pfx_register_netdevice+0x10/0x10 [ 333.307635][ T9156] ppp_dev_configure+0x99b/0xc80 [ 333.307716][ T9156] ppp_ioctl+0x17e0/0x2660 [ 333.307759][ T9156] ? find_held_lock+0x2b/0x80 [ 333.307791][ T9156] ? __pfx_ppp_ioctl+0x10/0x10 [ 333.307842][ T9156] ? __fget_files+0x20e/0x3c0 [ 333.307896][ T9156] ? __pfx_ppp_ioctl+0x10/0x10 [ 333.307937][ T9156] __x64_sys_ioctl+0x18e/0x210 [ 333.307998][ T9156] do_syscall_64+0xcd/0x490 [ 333.308054][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.308087][ T9156] RIP: 0033:0x7fe78b38e929 [ 333.308112][ T9156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.308145][ T9156] RSP: 002b:00007fe78c16a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.308175][ T9156] RAX: ffffffffffffffda RBX: 00007fe78b5b5fa0 RCX: 00007fe78b38e929 [ 333.308195][ T9156] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 333.308215][ T9156] RBP: 00007fe78b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 333.308246][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.308265][ T9156] R13: 0000000000000000 R14: 00007fe78b5b5fa0 R15: 00007ffd443b0258 [ 333.308306][ T9156] [ 333.543689][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.234014][ T9171] FAULT_INJECTION: forcing a failure. [ 334.234014][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 334.262653][ T9171] CPU: 0 UID: 0 PID: 9171 Comm: syz.2.630 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 334.262691][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.262707][ T9171] Call Trace: [ 334.262715][ T9171] [ 334.262726][ T9171] dump_stack_lvl+0x16c/0x1f0 [ 334.262772][ T9171] should_fail_ex+0x512/0x640 [ 334.262820][ T9171] should_failslab+0xc2/0x120 [ 334.262854][ T9171] __kmalloc_cache_noprof+0x6a/0x3e0 [ 334.262894][ T9171] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 334.262932][ T9171] __hw_addr_add_ex+0x3c9/0x7c0 [ 334.262970][ T9171] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 334.263001][ T9171] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 334.263053][ T9171] ? __pfx_sl_setup+0x10/0x10 [ 334.263085][ T9171] dev_addr_init+0x161/0x250 [ 334.263121][ T9171] ? __pfx_dev_addr_init+0x10/0x10 [ 334.263170][ T9171] alloc_netdev_mqs+0x3d2/0x1570 [ 334.263216][ T9171] ? slip_open+0x31c/0x1150 [ 334.263254][ T9171] slip_open+0x35c/0x1150 [ 334.263290][ T9171] ? __pfx___might_resched+0x10/0x10 [ 334.263324][ T9171] ? find_held_lock+0x2b/0x80 [ 334.263352][ T9171] ? __pfx_slip_open+0x10/0x10 [ 334.263387][ T9171] ? down_write+0x14d/0x200 [ 334.263415][ T9171] ? __pfx_slip_open+0x10/0x10 [ 334.263451][ T9171] tty_ldisc_open+0x9c/0x120 [ 334.263492][ T9171] tty_set_ldisc+0x32b/0x780 [ 334.263537][ T9171] tty_ioctl+0xc2e/0x1640 [ 334.263584][ T9171] ? __pfx_tty_ioctl+0x10/0x10 [ 334.263640][ T9171] ? find_held_lock+0x2b/0x80 [ 334.263668][ T9171] ? hook_file_ioctl_common+0x145/0x410 [ 334.263706][ T9171] ? __fget_files+0x20e/0x3c0 [ 334.263750][ T9171] ? __pfx_tty_ioctl+0x10/0x10 [ 334.263795][ T9171] __x64_sys_ioctl+0x18e/0x210 [ 334.263836][ T9171] do_syscall_64+0xcd/0x490 [ 334.263881][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.263908][ T9171] RIP: 0033:0x7f9c53d8e929 [ 334.263929][ T9171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.263955][ T9171] RSP: 002b:00007f9c54b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.263980][ T9171] RAX: ffffffffffffffda RBX: 00007f9c53fb5fa0 RCX: 00007f9c53d8e929 [ 334.263998][ T9171] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000011 [ 334.264013][ T9171] RBP: 00007f9c54b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 334.264029][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.264045][ T9171] R13: 0000000000000000 R14: 00007f9c53fb5fa0 R15: 00007fffe488a5c8 [ 334.264080][ T9171] [ 337.102496][ T9203] netlink: set zone limit has 8 unknown bytes [ 338.153307][ T9228] nvme_fcloop: unknown parameter or missing value '^/]' [ 338.165276][ T9228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.641'. [ 338.254757][ T9212] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 339.191626][ T9239] zswap: compressor not available [ 339.334653][ T9247] FAULT_INJECTION: forcing a failure. [ 339.334653][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 339.396149][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.0.645 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 339.396209][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.396229][ T9247] Call Trace: [ 339.396240][ T9247] [ 339.396253][ T9247] dump_stack_lvl+0x16c/0x1f0 [ 339.396314][ T9247] should_fail_ex+0x512/0x640 [ 339.396363][ T9247] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 339.396421][ T9247] should_failslab+0xc2/0x120 [ 339.396454][ T9247] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 339.396508][ T9247] ? sock_alloc_inode+0x25/0x1c0 [ 339.396549][ T9247] ? __pfx_sock_alloc_inode+0x10/0x10 [ 339.396583][ T9247] sock_alloc_inode+0x25/0x1c0 [ 339.396616][ T9247] alloc_inode+0x61/0x240 [ 339.396652][ T9247] sock_alloc+0x40/0x280 [ 339.396685][ T9247] __sock_create+0xc1/0x8d0 [ 339.396731][ T9247] __sys_socketpair+0x25c/0x5a0 [ 339.396776][ T9247] ? __pfx___sys_socketpair+0x10/0x10 [ 339.396822][ T9247] ? xfd_validate_state+0x61/0x180 [ 339.396877][ T9247] __x64_sys_socketpair+0x96/0x100 [ 339.396920][ T9247] ? lockdep_hardirqs_on+0x7c/0x110 [ 339.396968][ T9247] do_syscall_64+0xcd/0x490 [ 339.397022][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.397073][ T9247] RIP: 0033:0x7f8b2778e929 [ 339.397101][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.397135][ T9247] RSP: 002b:00007f8b28538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 339.397167][ T9247] RAX: ffffffffffffffda RBX: 00007f8b279b5fa0 RCX: 00007f8b2778e929 [ 339.397196][ T9247] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 339.397218][ T9247] RBP: 00007f8b27810b39 R08: 0000000000000000 R09: 0000000000000000 [ 339.397239][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.397259][ T9247] R13: 0000000000000000 R14: 00007f8b279b5fa0 R15: 00007fff97d062f8 [ 339.397301][ T9247] [ 339.397317][ T9247] socket: no more sockets [ 341.986615][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.997919][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.264241][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.277841][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.748245][ T9310] FAULT_INJECTION: forcing a failure. [ 342.748245][ T9310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.762650][ T9310] CPU: 1 UID: 0 PID: 9310 Comm: syz.3.659 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 342.762689][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.762706][ T9310] Call Trace: [ 342.762715][ T9310] [ 342.762726][ T9310] dump_stack_lvl+0x16c/0x1f0 [ 342.762775][ T9310] should_fail_ex+0x512/0x640 [ 342.762825][ T9310] should_fail_alloc_page+0xe7/0x130 [ 342.762857][ T9310] prepare_alloc_pages+0x3c2/0x610 [ 342.762892][ T9310] ? rcu_is_watching+0x12/0xc0 [ 342.762928][ T9310] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 342.762974][ T9310] ? css_rstat_updated+0x9d/0xd30 [ 342.763009][ T9310] ? rcu_is_watching+0x12/0xc0 [ 342.763041][ T9310] ? mod_memcg_lruvec_state+0x394/0x610 [ 342.763081][ T9310] ? __mod_zone_page_state+0xcc/0x1a0 [ 342.763120][ T9310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.763183][ T9310] ? folios_put_refs+0x5ce/0x740 [ 342.763240][ T9310] ? __pfx_folios_put_refs+0x10/0x10 [ 342.763288][ T9310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.763333][ T9310] ? policy_nodemask+0xea/0x4e0 [ 342.763361][ T9310] alloc_pages_mpol+0x1fb/0x550 [ 342.763388][ T9310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 342.763425][ T9310] folio_alloc_mpol_noprof+0x36/0x2f0 [ 342.763460][ T9310] shmem_alloc_folio+0x135/0x160 [ 342.763495][ T9310] shmem_alloc_and_add_folio+0x499/0xc20 [ 342.763542][ T9310] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 342.763585][ T9310] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 342.763633][ T9310] shmem_get_folio_gfp+0x67f/0x1600 [ 342.763681][ T9310] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 342.763725][ T9310] ? filemap_map_pages+0xf6f/0x1680 [ 342.763771][ T9310] shmem_fault+0x1fe/0xa30 [ 342.763812][ T9310] ? __pfx_shmem_fault+0x10/0x10 [ 342.763856][ T9310] ? __pfx_filemap_map_pages+0x10/0x10 [ 342.763909][ T9310] __do_fault+0x10d/0x490 [ 342.763954][ T9310] __handle_mm_fault+0x3c2a/0x5490 [ 342.764000][ T9310] ? __pfx___handle_mm_fault+0x10/0x10 [ 342.764035][ T9310] ? __pfx_mt_find+0x10/0x10 [ 342.764080][ T9310] ? find_vma+0xbf/0x140 [ 342.764107][ T9310] ? __pfx_find_vma+0x10/0x10 [ 342.764139][ T9310] handle_mm_fault+0x589/0xd10 [ 342.764174][ T9310] ? __pkru_allows_pkey+0x51/0xb0 [ 342.764212][ T9310] do_user_addr_fault+0x7a6/0x1370 [ 342.764262][ T9310] ? rcu_is_watching+0x12/0xc0 [ 342.764296][ T9310] exc_page_fault+0x5c/0xb0 [ 342.764337][ T9310] asm_exc_page_fault+0x26/0x30 [ 342.764364][ T9310] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 342.764397][ T9310] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 342.764422][ T9310] RSP: 0018:ffffc9000b837b60 EFLAGS: 00050202 [ 342.764443][ T9310] RAX: 0000000000000001 RBX: 0000000000020083 RCX: 0000000000003084 [ 342.764459][ T9310] RDX: ffffed100b3d2000 RSI: 000000000002d000 RDI: ffff888059e8cf7d [ 342.764475][ T9310] RBP: 0000000000010001 R08: 0000000000000001 R09: ffffed100b3d2000 [ 342.764491][ T9310] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 342.764506][ T9310] R13: ffff888059e80000 R14: 0000000000000008 R15: 0000000000000020 [ 342.764539][ T9310] _copy_from_user+0x98/0xd0 [ 342.764583][ T9310] generic_map_update_batch+0x380/0x610 [ 342.764637][ T9310] ? __pfx_generic_map_update_batch+0x10/0x10 [ 342.764687][ T9310] ? __pfx_generic_map_update_batch+0x10/0x10 [ 342.764732][ T9310] bpf_map_do_batch+0x5b1/0x680 [ 342.764772][ T9310] __sys_bpf+0x15f3/0x4d80 [ 342.764806][ T9310] ? __pfx___sys_bpf+0x10/0x10 [ 342.764832][ T9310] ? ksys_write+0x190/0x250 [ 342.764877][ T9310] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 342.764937][ T9310] ? fput+0x70/0xf0 [ 342.764963][ T9310] ? ksys_write+0x1ac/0x250 [ 342.765000][ T9310] ? __pfx_ksys_write+0x10/0x10 [ 342.765045][ T9310] __x64_sys_bpf+0x78/0xc0 [ 342.765068][ T9310] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.765108][ T9310] do_syscall_64+0xcd/0x490 [ 342.765154][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.765181][ T9310] RIP: 0033:0x7f5c4d98e929 [ 342.765201][ T9310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.765234][ T9310] RSP: 002b:00007f5c4e8ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.765259][ T9310] RAX: ffffffffffffffda RBX: 00007f5c4dbb5fa0 RCX: 00007f5c4d98e929 [ 342.765276][ T9310] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 342.765293][ T9310] RBP: 00007f5c4e8ad090 R08: 0000000000000000 R09: 0000000000000000 [ 342.765310][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.765326][ T9310] R13: 0000000000000000 R14: 00007f5c4dbb5fa0 R15: 00007ffc12db41a8 [ 342.765361][ T9310] [ 343.379949][ T9312] can: request_module (can-proto-0) failed. [ 346.419176][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.445653][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.659016][ T9374] netlink: 'syz.2.671': attribute type 5 has an invalid length. [ 348.101141][ T9379] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 349.466678][ T9380] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 350.027798][ T9413] FAULT_INJECTION: forcing a failure. [ 350.027798][ T9413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.041365][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.1.680 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 350.041404][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.041417][ T9413] Call Trace: [ 350.041424][ T9413] [ 350.041433][ T9413] dump_stack_lvl+0x16c/0x1f0 [ 350.041471][ T9413] should_fail_ex+0x512/0x640 [ 350.041516][ T9413] should_fail_alloc_page+0xe7/0x130 [ 350.041541][ T9413] prepare_alloc_pages+0x3c2/0x610 [ 350.041569][ T9413] ? rcu_is_watching+0x12/0xc0 [ 350.041596][ T9413] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 350.041634][ T9413] ? __lock_acquire+0xb8a/0x1c90 [ 350.041677][ T9413] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.041712][ T9413] ? do_raw_spin_lock+0x12c/0x2b0 [ 350.041749][ T9413] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 350.041786][ T9413] ? find_held_lock+0x2b/0x80 [ 350.041818][ T9413] ? __lock_acquire+0xb8a/0x1c90 [ 350.041849][ T9413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.041887][ T9413] ? policy_nodemask+0xea/0x4e0 [ 350.041911][ T9413] alloc_pages_mpol+0x1fb/0x550 [ 350.041934][ T9413] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 350.041964][ T9413] folio_alloc_mpol_noprof+0x36/0x2f0 [ 350.041993][ T9413] shmem_alloc_folio+0x135/0x160 [ 350.042022][ T9413] shmem_alloc_and_add_folio+0x499/0xc20 [ 350.042062][ T9413] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 350.042098][ T9413] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 350.042137][ T9413] shmem_get_folio_gfp+0x67f/0x1600 [ 350.042177][ T9413] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 350.042213][ T9413] ? filemap_map_pages+0xf6f/0x1680 [ 350.042252][ T9413] shmem_fault+0x1fe/0xa30 [ 350.042286][ T9413] ? __pfx_shmem_fault+0x10/0x10 [ 350.042324][ T9413] ? __pfx_filemap_map_pages+0x10/0x10 [ 350.042367][ T9413] __do_fault+0x10d/0x490 [ 350.042405][ T9413] __handle_mm_fault+0x3c2a/0x5490 [ 350.042443][ T9413] ? __pfx___handle_mm_fault+0x10/0x10 [ 350.042472][ T9413] ? __pfx_mt_find+0x10/0x10 [ 350.042515][ T9413] ? find_vma+0xbf/0x140 [ 350.042537][ T9413] ? __pfx_find_vma+0x10/0x10 [ 350.042562][ T9413] handle_mm_fault+0x589/0xd10 [ 350.042594][ T9413] ? __pkru_allows_pkey+0x51/0xb0 [ 350.042628][ T9413] do_user_addr_fault+0x7a6/0x1370 [ 350.042664][ T9413] ? rcu_is_watching+0x12/0xc0 [ 350.042691][ T9413] exc_page_fault+0x5c/0xb0 [ 350.042725][ T9413] asm_exc_page_fault+0x26/0x30 [ 350.042747][ T9413] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 350.042775][ T9413] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 11 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 350.042797][ T9413] RSP: 0018:ffffc90005377b60 EFLAGS: 00050202 [ 350.042815][ T9413] RAX: 0000000000000001 RBX: 0000000000020083 RCX: 0000000000001084 [ 350.042829][ T9413] RDX: ffffed100aaf6000 RSI: 000000000002f000 RDI: ffff8880557aef7d [ 350.042861][ T9413] RBP: 0000000000010001 R08: 0000000000000001 R09: ffffed100aaf6000 [ 350.042875][ T9413] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.042888][ T9413] R13: ffff8880557a0000 R14: 0000000000000008 R15: 0000000000000020 [ 350.042917][ T9413] _copy_from_user+0x98/0xd0 [ 350.042953][ T9413] generic_map_update_batch+0x380/0x610 [ 350.042998][ T9413] ? __pfx_generic_map_update_batch+0x10/0x10 [ 350.043040][ T9413] ? __pfx_generic_map_update_batch+0x10/0x10 [ 350.043077][ T9413] bpf_map_do_batch+0x5b1/0x680 [ 350.043109][ T9413] __sys_bpf+0x15f3/0x4d80 [ 350.043133][ T9413] ? __pfx___sys_bpf+0x10/0x10 [ 350.043154][ T9413] ? ksys_write+0x190/0x250 [ 350.043191][ T9413] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 350.043242][ T9413] ? fput+0x70/0xf0 [ 350.043264][ T9413] ? ksys_write+0x1ac/0x250 [ 350.043295][ T9413] ? __pfx_ksys_write+0x10/0x10 [ 350.043332][ T9413] __x64_sys_bpf+0x78/0xc0 [ 350.043352][ T9413] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.043384][ T9413] do_syscall_64+0xcd/0x490 [ 350.043421][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.043443][ T9413] RIP: 0033:0x7fe78b38e929 [ 350.043459][ T9413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.043489][ T9413] RSP: 002b:00007fe78c16a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.043510][ T9413] RAX: ffffffffffffffda RBX: 00007fe78b5b5fa0 RCX: 00007fe78b38e929 [ 350.043525][ T9413] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 350.043540][ T9413] RBP: 00007fe78c16a090 R08: 0000000000000000 R09: 0000000000000000 [ 350.043554][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.043568][ T9413] R13: 0000000000000000 R14: 00007fe78b5b5fa0 R15: 00007ffd443b0258 [ 350.043596][ T9413] [ 353.810596][ T9456] FAULT_INJECTION: forcing a failure. [ 353.810596][ T9456] name fail_futex, interval 1, probability 0, space 0, times 0 [ 353.824769][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.2.688 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 353.824809][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.824827][ T9456] Call Trace: [ 353.824836][ T9456] [ 353.824846][ T9456] dump_stack_lvl+0x16c/0x1f0 [ 353.824897][ T9456] should_fail_ex+0x512/0x640 [ 353.824946][ T9456] get_futex_key+0x1d0/0x1540 [ 353.824986][ T9456] ? __pfx_get_futex_key+0x10/0x10 [ 353.825033][ T9456] futex_wake+0xe7/0x4e0 [ 353.825077][ T9456] ? __pfx_futex_wake+0x10/0x10 [ 353.825123][ T9456] ? kmem_cache_free+0x2d1/0x4d0 [ 353.825165][ T9456] ? fd_install+0x225/0x750 [ 353.825202][ T9456] ? putname+0x154/0x1a0 [ 353.825236][ T9456] do_futex+0x1e3/0x350 [ 353.825273][ T9456] ? __pfx_do_futex+0x10/0x10 [ 353.825319][ T9456] __x64_sys_futex+0x1e0/0x4c0 [ 353.825362][ T9456] ? __x64_sys_openat+0x174/0x210 [ 353.825396][ T9456] ? __pfx___x64_sys_futex+0x10/0x10 [ 353.825455][ T9456] do_syscall_64+0xcd/0x490 [ 353.825503][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.825533][ T9456] RIP: 0033:0x7f9c53d8e929 [ 353.825556][ T9456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.825585][ T9456] RSP: 002b:00007f9c54b8b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 353.825613][ T9456] RAX: ffffffffffffffda RBX: 00007f9c53fb5fa8 RCX: 00007f9c53d8e929 [ 353.825632][ T9456] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c53fb5fac [ 353.825649][ T9456] RBP: 00007f9c53fb5fa0 R08: 00007f9c54b8c000 R09: 0000000000000000 [ 353.825666][ T9456] R10: 000000000000000e R11: 0000000000000246 R12: 00007f9c53fb5fac [ 353.825683][ T9456] R13: 0000000000000000 R14: 00007fffe488a4e0 R15: 00007fffe488a5c8 [ 353.825719][ T9456] [ 354.005961][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.046922][ T9435] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.186476][ T9467] openvswitch: netlink: IP tunnel dst address not specified [ 355.466363][ T9471] netlink: 342 bytes leftover after parsing attributes in process `syz.1.692'. [ 355.649717][ T9471] netlink: 294 bytes leftover after parsing attributes in process `syz.1.692'. [ 356.336272][ T9476] syz.2.694 (9476) used greatest stack depth: 20776 bytes left [ 357.442808][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.549180][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.195335][ T9515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.204217][ T9515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.710583][ T9509] ima: policy update failed [ 358.736129][ T30] audit: type=1802 audit(4294967308.320:2): pid=9509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.699" res=0 errno=0 [ 359.277229][ T9530] openvswitch: netlink: IP tunnel dst address not specified [ 359.650972][ T9534] Invalid ELF header magic: != ELF [ 360.440622][ T9549] vivid-015: ================= START STATUS ================= [ 360.505230][ T9549] vivid-015: Radio HW Seek Mode: Bounded [ 360.514937][ T9539] sd 0:0:1:0: PR command failed: 1026 [ 360.525261][ T9539] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 360.535944][ T9549] vivid-015: Radio Programmable HW Seek: false [ 360.551997][ T9539] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 360.561524][ T9549] vivid-015: RDS Rx I/O Mode: Block I/O [ 360.577069][ T9549] vivid-015: Generate RBDS Instead of RDS: false [ 360.639747][ T9549] vivid-015: RDS Reception: true [ 360.653370][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.703'. [ 360.669353][ T9549] vivid-015: RDS Program Type: 0 inactive [ 360.695072][ T9549] vivid-015: RDS PS Name: inactive [ 360.734033][ T9552] can0: slcan on ttyS2. [ 360.759059][ T9549] vivid-015: RDS Radio Text: inactive [ 360.793524][ T9549] vivid-015: RDS Traffic Announcement: false inactive [ 360.807112][ T9549] vivid-015: RDS Traffic Program: false inactive [ 360.838410][ T9549] vivid-015: RDS Music: false inactive [ 360.844600][ T9549] vivid-015: ================== END STATUS ================== [ 361.056128][ T9547] can0 (unregistered): slcan off ttyS2. [ 362.570264][ T9582] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 363.080325][ T9585] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 365.052196][ T9608] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 365.491132][ T9616] FAULT_INJECTION: forcing a failure. [ 365.491132][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 365.504084][ T9616] CPU: 0 UID: 0 PID: 9616 Comm: syz.2.721 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 365.504126][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.504152][ T9616] Call Trace: [ 365.504163][ T9616] [ 365.504174][ T9616] dump_stack_lvl+0x16c/0x1f0 [ 365.504227][ T9616] should_fail_ex+0x512/0x640 [ 365.504272][ T9616] ? __kmalloc_noprof+0xbf/0x510 [ 365.504321][ T9616] ? __register_sysctl_table+0xea2/0x1900 [ 365.504378][ T9616] should_failslab+0xc2/0x120 [ 365.504407][ T9616] __kmalloc_noprof+0xd2/0x510 [ 365.504470][ T9616] ? __register_sysctl_table+0xe8e/0x1900 [ 365.504544][ T9616] __register_sysctl_table+0xea2/0x1900 [ 365.504603][ T9616] ? __pfx___register_sysctl_table+0x10/0x10 [ 365.504652][ T9616] ? is_module_address+0x69/0xf0 [ 365.504696][ T9616] ? register_net_sysctl_sz+0x228/0x3e0 [ 365.504735][ T9616] neigh_sysctl_register+0x31f/0x670 [ 365.504783][ T9616] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 365.504826][ T9616] ? __pfx___debug_object_init+0x10/0x10 [ 365.504862][ T9616] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 365.504918][ T9616] ? lockdep_init_map_type+0x5c/0x280 [ 365.504961][ T9616] ? mld_in_v1_mode+0x2b2/0x3a0 [ 365.505004][ T9616] addrconf_sysctl_register+0xb9/0x1f0 [ 365.505057][ T9616] ipv6_add_dev+0xb39/0x15f0 [ 365.505112][ T9616] addrconf_notify+0x53e/0x19e0 [ 365.505149][ T9616] ? ip6mr_device_event+0x1bc/0x230 [ 365.505205][ T9616] notifier_call_chain+0xbc/0x410 [ 365.505240][ T9616] ? __pfx_addrconf_notify+0x10/0x10 [ 365.505282][ T9616] call_netdevice_notifiers_info+0xbe/0x140 [ 365.505319][ T9616] register_netdevice+0x182e/0x2270 [ 365.505359][ T9616] ? idr_alloc+0xdd/0x130 [ 365.505400][ T9616] ? __pfx_register_netdevice+0x10/0x10 [ 365.505439][ T9616] ppp_dev_configure+0x99b/0xc80 [ 365.505482][ T9616] ppp_ioctl+0x17e0/0x2660 [ 365.505520][ T9616] ? find_held_lock+0x2b/0x80 [ 365.505549][ T9616] ? __pfx_ppp_ioctl+0x10/0x10 [ 365.505591][ T9616] ? __fget_files+0x20e/0x3c0 [ 365.505637][ T9616] ? __pfx_ppp_ioctl+0x10/0x10 [ 365.505692][ T9616] __x64_sys_ioctl+0x18e/0x210 [ 365.505732][ T9616] do_syscall_64+0xcd/0x490 [ 365.505782][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.505829][ T9616] RIP: 0033:0x7f9c53d8e929 [ 365.505857][ T9616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.505890][ T9616] RSP: 002b:00007f9c54b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.505921][ T9616] RAX: ffffffffffffffda RBX: 00007f9c53fb5fa0 RCX: 00007f9c53d8e929 [ 365.505944][ T9616] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 365.505964][ T9616] RBP: 00007f9c53e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 365.505988][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.506008][ T9616] R13: 0000000000000000 R14: 00007f9c53fb5fa0 R15: 00007fffe488a5c8 [ 365.506052][ T9616] [ 365.810573][ T9616] sysctl could not get directory: /net/ipv6/neigh/ppp0 -12 [ 366.281109][ T9627] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 366.749035][ T9619] : renamed from gre0 (while UP) [ 367.799323][ T9641] FAULT_INJECTION: forcing a failure. [ 367.799323][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 367.840456][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.0.728 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 367.840503][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.840523][ T9641] Call Trace: [ 367.840534][ T9641] [ 367.840547][ T9641] dump_stack_lvl+0x16c/0x1f0 [ 367.840605][ T9641] should_fail_ex+0x512/0x640 [ 367.840652][ T9641] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 367.840700][ T9641] should_failslab+0xc2/0x120 [ 367.840733][ T9641] __kmalloc_cache_noprof+0x6a/0x3e0 [ 367.840778][ T9641] ? mpls_dev_notify+0x346/0xa20 [ 367.840836][ T9641] mpls_dev_notify+0x346/0xa20 [ 367.840893][ T9641] notifier_call_chain+0xbc/0x410 [ 367.840931][ T9641] ? __pfx_mpls_dev_notify+0x10/0x10 [ 367.840992][ T9641] call_netdevice_notifiers_info+0xbe/0x140 [ 367.841035][ T9641] register_netdevice+0x182e/0x2270 [ 367.841082][ T9641] ? idr_alloc+0xdd/0x130 [ 367.841144][ T9641] ? __pfx_register_netdevice+0x10/0x10 [ 367.841210][ T9641] ppp_dev_configure+0x99b/0xc80 [ 367.841256][ T9641] ppp_ioctl+0x17e0/0x2660 [ 367.841297][ T9641] ? find_held_lock+0x2b/0x80 [ 367.841329][ T9641] ? __pfx_ppp_ioctl+0x10/0x10 [ 367.841374][ T9641] ? __fget_files+0x20e/0x3c0 [ 367.841420][ T9641] ? __pfx_ppp_ioctl+0x10/0x10 [ 367.841457][ T9641] __x64_sys_ioctl+0x18e/0x210 [ 367.841496][ T9641] do_syscall_64+0xcd/0x490 [ 367.841544][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.841574][ T9641] RIP: 0033:0x7f8b2778e929 [ 367.841599][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.841629][ T9641] RSP: 002b:00007f8b28538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.841657][ T9641] RAX: ffffffffffffffda RBX: 00007f8b279b5fa0 RCX: 00007f8b2778e929 [ 367.841678][ T9641] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 367.841696][ T9641] RBP: 00007f8b27810b39 R08: 0000000000000000 R09: 0000000000000000 [ 367.841715][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.841733][ T9641] R13: 0000000000000000 R14: 00007f8b279b5fa0 R15: 00007fff97d062f8 [ 367.841772][ T9641] [ 368.058369][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.415608][ T9655] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 368.905674][ T9665] warning: `syz.0.733' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 370.272032][ T5861] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 370.662950][ T9642] Process accounting resumed [ 371.070645][ T9702] netlink: 354 bytes leftover after parsing attributes in process `syz.2.738'. [ 933.454658][T18277] : Can't lookup blockdev [ 936.531308][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.547478][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.612661][T18333] FAULT_INJECTION: forcing a failure. [ 936.612661][T18333] name failslab, interval 1, probability 0, space 0, times 0 [ 936.643832][ T7735] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 941 with max blocks 1 with error 117 [ 936.710004][ T7735] EXT4-fs (sda1): This should not happen!! Data will be lost [ 936.710004][ T7735] [ 936.778624][T18333] CPU: 1 UID: 0 PID: 18333 Comm: syz.3.2318 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 936.778654][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.778666][T18333] Call Trace: [ 936.778673][T18333] [ 936.778682][T18333] dump_stack_lvl+0x16c/0x1f0 [ 936.778718][T18333] should_fail_ex+0x512/0x640 [ 936.778749][T18333] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 936.778785][T18333] should_failslab+0xc2/0x120 [ 936.778805][T18333] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 936.778837][T18333] ? shmem_alloc_inode+0x25/0x50 [ 936.778862][T18333] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 936.778882][T18333] shmem_alloc_inode+0x25/0x50 [ 936.778902][T18333] alloc_inode+0x61/0x240 [ 936.778924][T18333] new_inode+0x22/0x1c0 [ 936.778943][T18333] ? trace_cap_capable+0x18d/0x200 [ 936.778973][T18333] shmem_get_inode+0x19a/0xfb0 [ 936.778998][T18333] ? __vm_enough_memory+0x184/0x3f0 [ 936.779022][T18333] __shmem_file_setup+0x279/0x330 [ 936.779052][T18333] shmem_zero_setup+0x93/0x1a0 [ 936.779085][T18333] __mmap_region+0x1ece/0x25e0 [ 936.779120][T18333] ? __pfx___mmap_region+0x10/0x10 [ 936.779151][T18333] ? find_held_lock+0x2b/0x80 [ 936.779178][T18333] ? finish_task_switch.isra.0+0x221/0xc10 [ 936.779201][T18333] ? lockdep_hardirqs_on+0x7c/0x110 [ 936.779231][T18333] ? finish_task_switch.isra.0+0x221/0xc10 [ 936.779254][T18333] ? rcu_is_watching+0x12/0xc0 [ 936.779276][T18333] ? trace_sched_exit_tp+0xde/0x130 [ 936.779302][T18333] ? __schedule+0x1181/0x5de0 [ 936.779368][T18333] ? trace_cap_capable+0x18d/0x200 [ 936.779396][T18333] mmap_region+0x1ab/0x3f0 [ 936.779427][T18333] ? __get_unmapped_area+0x267/0x440 [ 936.779454][T18333] do_mmap+0xa3e/0x1210 [ 936.779481][T18333] ? __pfx_do_mmap+0x10/0x10 [ 936.779505][T18333] ? __pfx_down_write_killable+0x10/0x10 [ 936.779530][T18333] vm_mmap_pgoff+0x281/0x450 [ 936.779556][T18333] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 936.779583][T18333] ? __x64_sys_futex+0x1e0/0x4c0 [ 936.779608][T18333] ? __x64_sys_futex+0x1e9/0x4c0 [ 936.779636][T18333] ksys_mmap_pgoff+0x7d/0x5c0 [ 936.779658][T18333] ? xfd_validate_state+0x61/0x180 [ 936.779686][T18333] ? __pfx_do_writev+0x10/0x10 [ 936.779716][T18333] __x64_sys_mmap+0x125/0x190 [ 936.779749][T18333] do_syscall_64+0xcd/0x490 [ 936.779783][T18333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.779804][T18333] RIP: 0033:0x7f5c4d98e929 [ 936.779821][T18333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.779847][T18333] RSP: 002b:00007f5c4e88c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 936.779868][T18333] RAX: ffffffffffffffda RBX: 00007f5c4dbb6080 RCX: 00007f5c4d98e929 [ 936.779882][T18333] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 936.779896][T18333] RBP: 00007f5c4da10b39 R08: 0000000000000401 R09: 0000000000008000 [ 936.779909][T18333] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 936.779921][T18333] R13: 0000000000000000 R14: 00007f5c4dbb6080 R15: 00007ffc12db41a8 [ 936.779947][T18333] [ 937.615855][ T30] audit: type=1400 audit(4294968417.044:20): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=18336 comm="syz.2.2320" [ 939.299060][T18365] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2325'. [ 939.514438][T18356] workqueue: max_active 106304882 requested for writeback is out of range, clamping between 1 and 2048 [ 939.600285][ T30] audit: type=1800 audit(4294968419.124:21): pid=18356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2323" name="lu_gp_id" dev="configfs" ino=60391 res=0 errno=0 [ 939.794875][T18359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2324'. [ 940.305025][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 940.869028][ T7735] ttyS ttyS0: 5 input overrun(s) [ 941.030880][T18394] FAULT_INJECTION: forcing a failure. [ 941.030880][T18394] name failslab, interval 1, probability 0, space 0, times 0 [ 941.130639][T18394] CPU: 1 UID: 0 PID: 18394 Comm: syz.4.2332 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 941.130670][T18394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 941.130682][T18394] Call Trace: [ 941.130689][T18394] [ 941.130702][T18394] dump_stack_lvl+0x16c/0x1f0 [ 941.130737][T18394] should_fail_ex+0x512/0x640 [ 941.130766][T18394] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 941.130799][T18394] should_failslab+0xc2/0x120 [ 941.130818][T18394] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 941.130853][T18394] ? __kernfs_new_node+0xd2/0x8e0 [ 941.130885][T18394] __kernfs_new_node+0xd2/0x8e0 [ 941.130916][T18394] ? __pfx___kernfs_new_node+0x10/0x10 [ 941.130950][T18394] ? find_held_lock+0x2b/0x80 [ 941.130972][T18394] ? kernfs_root+0xee/0x2a0 [ 941.131005][T18394] kernfs_new_node+0x13c/0x1e0 [ 941.131040][T18394] __kernfs_create_file+0x53/0x350 [ 941.131067][T18394] sysfs_add_file_mode_ns+0x207/0x3c0 [ 941.131099][T18394] internal_create_group+0x578/0xf30 [ 941.131134][T18394] ? __pfx_internal_create_group+0x10/0x10 [ 941.131167][T18394] ? kernfs_create_link+0x1bd/0x240 [ 941.131194][T18394] internal_create_groups+0x9d/0x150 [ 941.131226][T18394] device_add+0xf30/0x1a70 [ 941.131251][T18394] ? __pfx_device_add+0x10/0x10 [ 941.131272][T18394] ? lockdep_init_map_type+0x5c/0x280 [ 941.131302][T18394] ? __init_waitqueue_head+0xca/0x150 [ 941.131328][T18394] netdev_register_kobject+0x182/0x3a0 [ 941.131354][T18394] register_netdevice+0x13dc/0x2270 [ 941.131378][T18394] ? __pfx_register_netdevice+0x10/0x10 [ 941.131404][T18394] ? __pfx_loopback_net_init+0x10/0x10 [ 941.131430][T18394] register_netdev+0x34/0x50 [ 941.131448][T18394] loopback_net_init+0x7a/0x170 [ 941.131473][T18394] ? __pfx_loopback_net_init+0x10/0x10 [ 941.131496][T18394] ops_init+0x1df/0x5f0 [ 941.131529][T18394] setup_net+0x1ff/0x510 [ 941.131546][T18394] ? lockdep_init_map_type+0x5c/0x280 [ 941.131575][T18394] ? __pfx_setup_net+0x10/0x10 [ 941.131595][T18394] ? debug_mutex_init+0x37/0x70 [ 941.131618][T18394] copy_net_ns+0x2a6/0x5f0 [ 941.131641][T18394] create_new_namespaces+0x3ea/0xa90 [ 941.131669][T18394] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 941.131701][T18394] ksys_unshare+0x45b/0xa40 [ 941.131730][T18394] ? __pfx_ksys_unshare+0x10/0x10 [ 941.131759][T18394] ? xfd_validate_state+0x61/0x180 [ 941.131794][T18394] __x64_sys_unshare+0x31/0x40 [ 941.131821][T18394] do_syscall_64+0xcd/0x490 [ 941.131853][T18394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.131874][T18394] RIP: 0033:0x7fc37718e929 [ 941.131890][T18394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.131910][T18394] RSP: 002b:00007fc378091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 941.131930][T18394] RAX: ffffffffffffffda RBX: 00007fc3773b5fa0 RCX: 00007fc37718e929 [ 941.131943][T18394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 941.131956][T18394] RBP: 00007fc377210b39 R08: 0000000000000000 R09: 0000000000000000 [ 941.131968][T18394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.131981][T18394] R13: 0000000000000000 R14: 00007fc3773b5fa0 R15: 00007ffc1a03ebe8 [ 941.132006][T18394] [ 941.486425][T18402] input: f as /devices/virtual/input/input36 [ 941.498374][T18382] Console: switching to colour VGA+ 80x25 [ 942.067016][T18414] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2334'. [ 942.552770][T18426] random: crng reseeded on system resumption [ 943.793948][T12736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 943.802946][T12736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 943.811324][T12736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 943.819226][T12736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 943.827172][T12736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 943.928170][ T7735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.203449][ T7735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.259688][T18443] netlink: 'syz.4.2341': attribute type 5 has an invalid length. [ 944.319482][ T7735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.417347][T18444] netlink: 'syz.4.2341': attribute type 5 has an invalid length. [ 944.589014][ T7735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.231185][ T7735] bridge_slave_1: left allmulticast mode [ 945.276161][ T7735] bridge_slave_1: left promiscuous mode [ 945.281954][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.517800][ T7735] bridge_slave_0: left allmulticast mode [ 945.523478][ T7735] bridge_slave_0: left promiscuous mode [ 945.586733][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.848545][T18471] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input37 [ 945.887892][T18172] Bluetooth: hci2: command tx timeout [ 946.137690][T18487] random: crng reseeded on system resumption [ 947.199802][T14713] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3317 with max blocks 224 with error 117 [ 947.249574][T14713] EXT4-fs (sda1): This should not happen!! Data will be lost [ 947.249574][T14713] [ 947.391509][ T7735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.420318][ T7735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.476639][ T7735] bond0 (unregistering): Released all slaves [ 947.524427][T18437] chnl_net:caif_netlink_parms(): no params data found [ 947.965995][T18172] Bluetooth: hci2: command tx timeout [ 948.660221][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.706128][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.740494][T18437] bridge_slave_0: entered allmulticast mode [ 948.771776][T18437] bridge_slave_0: entered promiscuous mode [ 948.918425][T18437] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.925535][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.988796][T18437] bridge_slave_1: entered allmulticast mode [ 949.027334][T18437] bridge_slave_1: entered promiscuous mode [ 949.861538][T18437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.993463][T18437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.048247][T18172] Bluetooth: hci2: command tx timeout [ 950.198248][ T7735] hsr_slave_0: left promiscuous mode [ 950.230854][ T7735] hsr_slave_1: left promiscuous mode [ 950.284955][ T7735] veth1_macvtap: left promiscuous mode [ 950.317766][ T7735] veth0_macvtap: left promiscuous mode [ 950.338288][ T7735] veth1_vlan: left promiscuous mode [ 950.343586][ T7735] veth0_vlan: left promiscuous mode [ 951.703250][ T7735] team0 (unregistering): Port device team_slave_0 removed [ 952.129284][T18172] Bluetooth: hci2: command tx timeout [ 952.920907][T18437] team0: Port device team_slave_0 added [ 952.950072][T18437] team0: Port device team_slave_1 added [ 953.236330][T18437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.243312][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.417495][T18437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.493052][T18437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.532750][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.710933][T18437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.110084][T18577] zswap: compressor not available [ 954.273982][T18437] hsr_slave_0: entered promiscuous mode [ 954.307538][T18437] hsr_slave_1: entered promiscuous mode [ 954.991862][T18596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2363'. [ 955.080516][T18596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2363'. [ 955.139662][T18596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.149822][T18596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.158670][T18596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.172191][T18596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.059818][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 957.361387][T18437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 957.458061][T18437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 957.472533][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bbeb800: rx timeout, send abort [ 957.480849][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bbe9400: rx timeout, send abort [ 957.490783][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bbeb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 957.505169][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bbe9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 957.716422][T18437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 957.810347][T18437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 957.921781][T17762] udevd[17762]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 957.941822][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 958.209729][T18611] kexec: Could not allocate control_code_buffer [ 958.222139][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2368'. [ 958.330511][T18645] HfR: entered promiscuous mode [ 958.387645][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 958.489979][T18437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.574286][T18437] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.644462][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.651631][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.753656][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.760831][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.815504][T18654] random: crng reseeded on system resumption [ 959.323111][T18662] FAULT_INJECTION: forcing a failure. [ 959.323111][T18662] name failslab, interval 1, probability 0, space 0, times 0 [ 959.420312][T18662] CPU: 1 UID: 0 PID: 18662 Comm: syz.0.2370 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 959.420343][T18662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 959.420366][T18662] Call Trace: [ 959.420373][T18662] [ 959.420382][T18662] dump_stack_lvl+0x16c/0x1f0 [ 959.420419][T18662] should_fail_ex+0x512/0x640 [ 959.420449][T18662] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 959.420484][T18662] should_failslab+0xc2/0x120 [ 959.420504][T18662] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 959.420535][T18662] ? __proc_create+0xc3/0x8c0 [ 959.420567][T18662] ? __proc_create+0x2ce/0x8c0 [ 959.420603][T18662] __proc_create+0x2ce/0x8c0 [ 959.420636][T18662] ? __pfx___proc_create+0x10/0x10 [ 959.420672][T18662] ? proc_register+0x314/0x5f0 [ 959.420695][T18662] proc_create_reg+0x7d/0x180 [ 959.420718][T18662] proc_create_net_data+0x8e/0x1b0 [ 959.420738][T18662] ? __pfx_proc_create_net_data+0x10/0x10 [ 959.420757][T18662] ? __pfx_uevent_net_rcv+0x10/0x10 [ 959.420784][T18662] ? __pfx_dev_mc_net_init+0x10/0x10 [ 959.420811][T18662] dev_mc_net_init+0x50/0x70 [ 959.420836][T18662] ops_init+0x1df/0x5f0 [ 959.420872][T18662] setup_net+0x1ff/0x510 [ 959.420888][T18662] ? lockdep_init_map_type+0x5c/0x280 [ 959.420920][T18662] ? __pfx_setup_net+0x10/0x10 [ 959.420940][T18662] ? debug_mutex_init+0x37/0x70 [ 959.420964][T18662] copy_net_ns+0x2a6/0x5f0 [ 959.420987][T18662] create_new_namespaces+0x3ea/0xa90 [ 959.421017][T18662] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 959.421043][T18662] ksys_unshare+0x45b/0xa40 [ 959.421072][T18662] ? __pfx_ksys_unshare+0x10/0x10 [ 959.421102][T18662] ? xfd_validate_state+0x61/0x180 [ 959.421138][T18662] __x64_sys_unshare+0x31/0x40 [ 959.421166][T18662] do_syscall_64+0xcd/0x490 [ 959.421199][T18662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.421221][T18662] RIP: 0033:0x7f8b2778e929 [ 959.421237][T18662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.421258][T18662] RSP: 002b:00007f8b28517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 959.421278][T18662] RAX: ffffffffffffffda RBX: 00007f8b279b6080 RCX: 00007f8b2778e929 [ 959.421292][T18662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 959.421305][T18662] RBP: 00007f8b27810b39 R08: 0000000000000000 R09: 0000000000000000 [ 959.421318][T18662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.421330][T18662] R13: 0000000000000000 R14: 00007f8b279b6080 R15: 00007fff97d062f8 [ 959.421361][T18662] [ 962.527605][T18437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.811599][T18437] veth0_vlan: entered promiscuous mode [ 962.852344][T18437] veth1_vlan: entered promiscuous mode [ 962.983703][T18437] veth0_macvtap: entered promiscuous mode [ 963.079907][T18437] veth1_macvtap: entered promiscuous mode [ 963.219873][T18437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.278222][T18437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.343162][T18437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.415364][T18437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.456968][T18437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.517021][T18437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.812594][T18727] FAULT_INJECTION: forcing a failure. [ 963.812594][T18727] name failslab, interval 1, probability 0, space 0, times 0 [ 963.965684][T18729] program syz.2.2380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 963.993989][T18727] CPU: 1 UID: 0 PID: 18727 Comm: syz.4.2379 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 963.994027][T18727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 963.994042][T18727] Call Trace: [ 963.994050][T18727] [ 963.994065][T18727] dump_stack_lvl+0x16c/0x1f0 [ 963.994119][T18727] should_fail_ex+0x512/0x640 [ 963.994170][T18727] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 963.994207][T18727] should_failslab+0xc2/0x120 [ 963.994229][T18727] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 963.994263][T18727] ? __kernfs_new_node+0xd2/0x8e0 [ 963.994344][T18727] __kernfs_new_node+0xd2/0x8e0 [ 963.994382][T18727] ? __pfx___kernfs_new_node+0x10/0x10 [ 963.994423][T18727] ? find_held_lock+0x2b/0x80 [ 963.994450][T18727] ? kernfs_root+0xee/0x2a0 [ 963.994489][T18727] kernfs_new_node+0x13c/0x1e0 [ 963.994533][T18727] __kernfs_create_file+0x53/0x350 [ 963.994564][T18727] sysfs_add_file_mode_ns+0x207/0x3c0 [ 963.994604][T18727] internal_create_group+0x578/0xf30 [ 963.994647][T18727] ? __pfx_internal_create_group+0x10/0x10 [ 963.994687][T18727] ? kernfs_create_link+0x1bd/0x240 [ 963.994719][T18727] internal_create_groups+0x9d/0x150 [ 963.994760][T18727] device_add+0xf30/0x1a70 [ 963.994790][T18727] ? __pfx_device_add+0x10/0x10 [ 963.994816][T18727] ? lockdep_init_map_type+0x5c/0x280 [ 963.994859][T18727] ? __init_waitqueue_head+0xca/0x150 [ 963.994890][T18727] netdev_register_kobject+0x182/0x3a0 [ 963.994921][T18727] register_netdevice+0x13dc/0x2270 [ 963.994953][T18727] ? __pfx_register_netdevice+0x10/0x10 [ 963.994984][T18727] ? __pfx_loopback_net_init+0x10/0x10 [ 963.995014][T18727] register_netdev+0x34/0x50 [ 963.995037][T18727] loopback_net_init+0x7a/0x170 [ 963.995073][T18727] ? __pfx_loopback_net_init+0x10/0x10 [ 963.995101][T18727] ops_init+0x1df/0x5f0 [ 963.995143][T18727] setup_net+0x1ff/0x510 [ 963.995164][T18727] ? lockdep_init_map_type+0x5c/0x280 [ 963.995199][T18727] ? __pfx_setup_net+0x10/0x10 [ 963.995223][T18727] ? debug_mutex_init+0x37/0x70 [ 963.995252][T18727] copy_net_ns+0x2a6/0x5f0 [ 963.995279][T18727] create_new_namespaces+0x3ea/0xa90 [ 963.995315][T18727] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 963.995346][T18727] ksys_unshare+0x45b/0xa40 [ 963.995381][T18727] ? __pfx_ksys_unshare+0x10/0x10 [ 963.995415][T18727] ? xfd_validate_state+0x61/0x180 [ 963.995457][T18727] __x64_sys_unshare+0x31/0x40 [ 963.995490][T18727] do_syscall_64+0xcd/0x490 [ 963.995530][T18727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.995555][T18727] RIP: 0033:0x7fc37718e929 [ 963.995574][T18727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.995598][T18727] RSP: 002b:00007fc378091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 963.995621][T18727] RAX: ffffffffffffffda RBX: 00007fc3773b5fa0 RCX: 00007fc37718e929 [ 963.995638][T18727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 963.995653][T18727] RBP: 00007fc377210b39 R08: 0000000000000000 R09: 0000000000000000 [ 963.995668][T18727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.995683][T18727] R13: 0000000000000000 R14: 00007fc3773b5fa0 R15: 00007ffc1a03ebe8 [ 963.995714][T18727] [ 964.480008][T18729] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 964.732080][T18746] random: crng reseeded on system resumption [ 965.178663][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.227801][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.468502][ T7736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.510593][ T7736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.966786][T18781] bridge0: port 3(batadv0) entered blocking state [ 967.035253][T18781] bridge0: port 3(batadv0) entered disabled state [ 967.086917][T18781] batadv0: entered allmulticast mode [ 967.149867][T18781] batadv0: entered promiscuous mode [ 967.171703][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 967.181689][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 967.259879][T18781] bridge0: port 3(batadv0) entered blocking state [ 967.266450][T18781] bridge0: port 3(batadv0) entered forwarding state [ 967.491988][T12736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 967.504213][ T7736] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1365 with max blocks 1 with error 117 [ 967.521210][T12736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 967.529415][T12736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.541790][T12736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 967.549646][T12736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 967.696016][ T7736] EXT4-fs (sda1): This should not happen!! Data will be lost [ 967.696016][ T7736] [ 969.648392][T12736] Bluetooth: hci3: command tx timeout [ 969.701136][T18789] chnl_net:caif_netlink_parms(): no params data found [ 970.070645][T11374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.420497][T11374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.591382][T18789] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.632614][T18789] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.674760][T18789] bridge_slave_0: entered allmulticast mode [ 970.718673][T18789] bridge_slave_0: entered promiscuous mode [ 970.962878][T11374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.000252][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 971.047901][T18847] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2391'. [ 971.104359][T18789] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.156167][T18789] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.198719][T18789] bridge_slave_1: entered allmulticast mode [ 971.243775][T18789] bridge_slave_1: entered promiscuous mode [ 971.369153][T11374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.442979][T18847] bridge0: port 4(dummy0) entered blocking state [ 971.451640][T18847] bridge0: port 4(dummy0) entered disabled state [ 971.482326][T18847] dummy0: entered allmulticast mode [ 971.545624][T18847] dummy0: entered promiscuous mode [ 971.585376][T18847] bridge0: port 4(dummy0) entered blocking state [ 971.592733][T18847] bridge0: port 4(dummy0) entered forwarding state [ 971.728659][T12736] Bluetooth: hci3: command tx timeout [ 971.868637][T18789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.967720][T18789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.279687][T18858] Invalid ELF header magic: != ELF [ 972.317719][T18858] netlink: zone id is out of range [ 972.340427][T18789] team0: Port device team_slave_0 added [ 972.399878][T18858] netlink: get zone limit has 8 unknown bytes [ 972.572383][T18789] team0: Port device team_slave_1 added [ 972.849401][T18789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.899150][T18789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.925056][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.035694][T18789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.238212][T18789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.271877][T18789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.419335][T18789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.567713][T11374] bridge_slave_0: left allmulticast mode [ 973.573436][T11374] bridge_slave_0: left promiscuous mode [ 973.613475][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.809114][T12736] Bluetooth: hci3: command tx timeout [ 974.192299][T11374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.204549][T11374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.220919][T11374] bond0 (unregistering): Released all slaves [ 974.511762][T18789] hsr_slave_0: entered promiscuous mode [ 974.525511][T18789] hsr_slave_1: entered promiscuous mode [ 974.537413][T18891] ptrace attach of "./syz-executor exec"[14328] was attempted by ""[18891] [ 974.548951][T18789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.558367][T18789] Cannot create hsr debugfs directory [ 975.885992][T12736] Bluetooth: hci3: command tx timeout [ 975.983280][T11374] hsr_slave_0: left promiscuous mode [ 976.020724][T11374] hsr_slave_1: left promiscuous mode [ 976.133850][T11374] veth1_macvtap: left promiscuous mode [ 976.186020][T11374] veth1_vlan: left promiscuous mode [ 976.226091][T11374] veth0_vlan: left promiscuous mode [ 977.817889][T18949] ubi0: attaching mtd0 [ 977.823253][T18949] ubi0: scanning is finished [ 977.860887][T18949] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 978.020722][T18949] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 978.064770][ T30] audit: type=1326 audit(4294968457.584:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18953 comm="syz.3.2408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1698e929 code=0x0 [ 978.462985][T11374] team0 (unregistering): Port device team_slave_1 removed [ 978.673723][T11374] team0 (unregistering): Port device team_slave_0 removed [ 981.599647][T19002] mkiss: ax0: crc mode is auto. [ 981.965342][T18789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 982.049604][T18789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 982.358442][T18789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 982.400162][T19021] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 982.428157][T18789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 983.169663][T18789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.296568][T18789] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.421313][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.428494][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.527908][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.535151][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.745062][T18789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.242844][T18789] veth0_vlan: entered promiscuous mode [ 985.315565][T18789] veth1_vlan: entered promiscuous mode [ 985.914840][T18789] veth0_macvtap: entered promiscuous mode [ 985.991235][T18789] veth1_macvtap: entered promiscuous mode [ 986.361130][T18789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.432129][T18789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.569972][T18789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.622670][T18789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.669773][T18789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.715972][T18789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.084789][T14539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.124159][T14539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.179321][T19110] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 987.273272][T11374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.333852][T11374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.291451][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b1c9400: rx timeout, send abort [ 989.299805][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b1cac00: rx timeout, send abort [ 989.308165][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b1c9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 989.322511][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b1cac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 992.439774][T19155] mkiss: ax0: crc mode is auto. [ 992.690938][T19167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 992.700274][T19167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 992.715857][T19167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 992.724533][T19167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 992.732105][T19167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 993.189198][T19174] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 994.138234][T19178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.184225][T19161] chnl_net:caif_netlink_parms(): no params data found [ 994.318565][T19178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.553552][T19178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.769489][T19167] Bluetooth: hci1: command tx timeout [ 994.933929][T19161] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.956989][T19161] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.979955][T19161] bridge_slave_0: entered allmulticast mode [ 995.008703][T19161] bridge_slave_0: entered promiscuous mode [ 995.040877][T19161] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.078038][T19161] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.108137][T19161] bridge_slave_1: entered allmulticast mode [ 995.126911][T19161] bridge_slave_1: entered promiscuous mode [ 995.359646][T19161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.418028][T19161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.643151][T19178] bridge_slave_1: left allmulticast mode [ 995.657891][T19178] bridge_slave_1: left promiscuous mode [ 995.690197][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.769778][T19178] bridge_slave_0: left allmulticast mode [ 995.808869][T19201] FAULT_INJECTION: forcing a failure. [ 995.808869][T19201] name failslab, interval 1, probability 0, space 0, times 0 [ 995.823042][T19178] bridge_slave_0: left promiscuous mode [ 995.856943][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.923037][T19201] CPU: 1 UID: 0 PID: 19201 Comm: syz.2.2444 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 995.923066][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 995.923078][T19201] Call Trace: [ 995.923085][T19201] [ 995.923093][T19201] dump_stack_lvl+0x16c/0x1f0 [ 995.923128][T19201] should_fail_ex+0x512/0x640 [ 995.923157][T19201] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 995.923189][T19201] should_failslab+0xc2/0x120 [ 995.923208][T19201] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 995.923238][T19201] ? security_file_alloc+0x34/0x2b0 [ 995.923268][T19201] security_file_alloc+0x34/0x2b0 [ 995.923294][T19201] init_file+0x93/0x4c0 [ 995.923314][T19201] alloc_empty_file+0x73/0x1e0 [ 995.923335][T19201] path_openat+0xda/0x2cb0 [ 995.923362][T19201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.923390][T19201] ? __pfx_path_openat+0x10/0x10 [ 995.923420][T19201] ? __lock_acquire+0xb8a/0x1c90 [ 995.923450][T19201] do_filp_open+0x20b/0x470 [ 995.923479][T19201] ? __pfx_do_filp_open+0x10/0x10 [ 995.923524][T19201] ? alloc_fd+0x471/0x7d0 [ 995.923557][T19201] do_sys_openat2+0x11b/0x1d0 [ 995.923579][T19201] ? __pfx_do_sys_openat2+0x10/0x10 [ 995.923603][T19201] ? __fget_files+0x20e/0x3c0 [ 995.923634][T19201] __x64_sys_openat+0x174/0x210 [ 995.923657][T19201] ? __pfx___x64_sys_openat+0x10/0x10 [ 995.923679][T19201] ? ksys_write+0x1ac/0x250 [ 995.923714][T19201] do_syscall_64+0xcd/0x490 [ 995.923746][T19201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.923765][T19201] RIP: 0033:0x7f5e19b8e929 [ 995.923781][T19201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.923802][T19201] RSP: 002b:00007f5e1aa16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 995.923827][T19201] RAX: ffffffffffffffda RBX: 00007f5e19db6080 RCX: 00007f5e19b8e929 [ 995.923841][T19201] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 995.923854][T19201] RBP: 00007f5e1aa16090 R08: 0000000000000000 R09: 0000000000000000 [ 995.923867][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.923879][T19201] R13: 0000000000000000 R14: 00007f5e19db6080 R15: 00007fff20fa0318 [ 995.923903][T19201] [ 996.219693][T19208] netlink: 11100 bytes leftover after parsing attributes in process `syz.3.2445'. [ 996.868279][T19167] Bluetooth: hci1: command tx timeout [ 997.976809][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.983114][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.019775][T19178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.049483][T19178] bond0 (unregistering): Released all slaves [ 998.092189][T19161] team0: Port device team_slave_0 added [ 998.277106][T19161] team0: Port device team_slave_1 added [ 998.573238][T19161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.603422][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.721793][T19161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.839780][T19161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.859650][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.928070][T19167] Bluetooth: hci1: command tx timeout [ 998.963147][T19161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.400918][T19161] hsr_slave_0: entered promiscuous mode [ 999.416652][T19161] hsr_slave_1: entered promiscuous mode [ 999.429980][T19161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.450544][T19161] Cannot create hsr debugfs directory [ 999.751297][T19178] hsr_slave_1: left promiscuous mode [ 999.780504][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.808078][T19178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.847907][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.884633][T19178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.981760][T19178] veth1_macvtap: left promiscuous mode [ 1000.016136][T19178] veth1_vlan: left promiscuous mode [ 1000.036501][T19178] veth0_vlan: left promiscuous mode [ 1001.005921][T19167] Bluetooth: hci1: command tx timeout [ 1001.742441][T19284] can: request_module (can-proto-3) failed. [ 1002.942780][T19307] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 1004.264574][T19161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1004.317540][T19161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1004.356269][T19161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1004.376908][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'. [ 1004.401181][T19161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1005.054933][T19161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.141069][T19161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.241845][T19178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.249032][T19178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.338033][T19178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.345317][T19178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.853051][T19360] FAULT_INJECTION: forcing a failure. [ 1005.853051][T19360] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.926640][T19360] CPU: 1 UID: 0 PID: 19360 Comm: syz.4.2461 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1005.926675][T19360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.926691][T19360] Call Trace: [ 1005.926699][T19360] [ 1005.926709][T19360] dump_stack_lvl+0x16c/0x1f0 [ 1005.926750][T19360] should_fail_ex+0x512/0x640 [ 1005.926786][T19360] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1005.926827][T19360] should_failslab+0xc2/0x120 [ 1005.926851][T19360] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1005.926886][T19360] ? __proc_create+0xc3/0x8c0 [ 1005.926924][T19360] ? __proc_create+0x2ce/0x8c0 [ 1005.926967][T19360] __proc_create+0x2ce/0x8c0 [ 1005.927006][T19360] ? __pfx___proc_create+0x10/0x10 [ 1005.927056][T19360] _proc_mkdir+0xb9/0x200 [ 1005.927079][T19360] ? __pfx__proc_mkdir+0x10/0x10 [ 1005.927101][T19360] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1005.927144][T19360] proc_net_ns_init+0x265/0x410 [ 1005.927168][T19360] ? __pfx_proc_net_ns_init+0x10/0x10 [ 1005.927190][T19360] ops_init+0x1df/0x5f0 [ 1005.927232][T19360] setup_net+0x1ff/0x510 [ 1005.927252][T19360] ? lockdep_init_map_type+0x5c/0x280 [ 1005.927300][T19360] ? __pfx_setup_net+0x10/0x10 [ 1005.927334][T19360] ? debug_mutex_init+0x37/0x70 [ 1005.927359][T19360] copy_net_ns+0x2a6/0x5f0 [ 1005.927391][T19360] create_new_namespaces+0x3ea/0xa90 [ 1005.927423][T19360] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1005.927451][T19360] ksys_unshare+0x45b/0xa40 [ 1005.927493][T19360] ? __pfx_ksys_unshare+0x10/0x10 [ 1005.927523][T19360] ? xfd_validate_state+0x61/0x180 [ 1005.927558][T19360] __x64_sys_unshare+0x31/0x40 [ 1005.927586][T19360] do_syscall_64+0xcd/0x490 [ 1005.927620][T19360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.927641][T19360] RIP: 0033:0x7fc37718e929 [ 1005.927658][T19360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.927679][T19360] RSP: 002b:00007fc378091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1005.927700][T19360] RAX: ffffffffffffffda RBX: 00007fc3773b5fa0 RCX: 00007fc37718e929 [ 1005.927714][T19360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1005.927727][T19360] RBP: 00007fc377210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1005.927739][T19360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.927752][T19360] R13: 0000000000000000 R14: 00007fc3773b5fa0 R15: 00007ffc1a03ebe8 [ 1005.927778][T19360] [ 1008.411720][T19161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.701201][T19161] veth0_vlan: entered promiscuous mode [ 1008.775170][T19161] veth1_vlan: entered promiscuous mode [ 1008.920304][T19161] veth0_macvtap: entered promiscuous mode [ 1008.982432][T19161] veth1_macvtap: entered promiscuous mode [ 1009.070673][T19161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.146492][T19161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.206797][T19161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.286026][T19161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.309597][T19161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.367552][T19161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.902698][T19159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.960492][T19159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.160395][T19177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.227532][T19177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.728932][T19457] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 1011.507981][T19468] .SR: entered promiscuous mode [ 1015.253564][T19540] FAULT_INJECTION: forcing a failure. [ 1015.253564][T19540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1015.327339][T19540] CPU: 1 UID: 0 PID: 19540 Comm: syz.0.2479 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1015.327370][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1015.327384][T19540] Call Trace: [ 1015.327391][T19540] [ 1015.327399][T19540] dump_stack_lvl+0x16c/0x1f0 [ 1015.327442][T19540] should_fail_ex+0x512/0x640 [ 1015.327476][T19540] should_fail_alloc_page+0xe7/0x130 [ 1015.327499][T19540] prepare_alloc_pages+0x3c2/0x610 [ 1015.327527][T19540] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1015.327564][T19540] ? find_held_lock+0x2b/0x80 [ 1015.327587][T19540] ? is_bpf_text_address+0x8a/0x1a0 [ 1015.327616][T19540] ? bpf_ksym_find+0x124/0x1c0 [ 1015.327638][T19540] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1015.327665][T19540] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1015.327698][T19540] ? __kernel_text_address+0xd/0x40 [ 1015.327717][T19540] ? unwind_get_return_address+0x59/0xa0 [ 1015.327751][T19540] ? arch_stack_walk+0xa6/0x100 [ 1015.327780][T19540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1015.327813][T19540] ? policy_nodemask+0xea/0x4e0 [ 1015.327835][T19540] alloc_pages_mpol+0x1fb/0x550 [ 1015.327856][T19540] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1015.327883][T19540] alloc_pages_noprof+0x131/0x390 [ 1015.327904][T19540] __pud_alloc+0x3b/0x750 [ 1015.327929][T19540] __handle_mm_fault+0xc87/0x5490 [ 1015.327964][T19540] ? __pfx___handle_mm_fault+0x10/0x10 [ 1015.328013][T19540] handle_mm_fault+0x589/0xd10 [ 1015.328046][T19540] __get_user_pages+0x589/0x3b80 [ 1015.328079][T19540] ? __pfx___get_user_pages+0x10/0x10 [ 1015.328113][T19540] get_user_pages_remote+0x258/0xb20 [ 1015.328143][T19540] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1015.328166][T19540] ? __pfx_vma_link+0x10/0x10 [ 1015.328205][T19540] get_arg_page+0xf4/0x310 [ 1015.328233][T19540] ? __pfx_get_arg_page+0x10/0x10 [ 1015.328259][T19540] ? up_write+0x1b2/0x520 [ 1015.328295][T19540] copy_string_kernel+0x180/0x510 [ 1015.328333][T19540] do_execveat_common.isra.0+0x2ed/0x610 [ 1015.328368][T19540] __x64_sys_execve+0x8e/0xb0 [ 1015.328399][T19540] do_syscall_64+0xcd/0x490 [ 1015.328438][T19540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.328460][T19540] RIP: 0033:0x7feaf218e929 [ 1015.328476][T19540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.328497][T19540] RSP: 002b:00007feaf2f2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1015.328518][T19540] RAX: ffffffffffffffda RBX: 00007feaf23b6080 RCX: 00007feaf218e929 [ 1015.328532][T19540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1015.328544][T19540] RBP: 00007feaf2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1015.328557][T19540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.328569][T19540] R13: 0000000000000000 R14: 00007feaf23b6080 R15: 00007fffb731c7a8 [ 1015.328595][T19540] [ 1018.872292][T19572] vivid-003: ================= START STATUS ================= [ 1018.906034][T19572] vivid-003: Radio HW Seek Mode: Bounded [ 1018.938612][T19572] vivid-003: Radio Programmable HW Seek: false [ 1018.944807][T19572] vivid-003: RDS Rx I/O Mode: Block I/O [ 1019.004902][T19572] vivid-003: Generate RBDS Instead of RDS: false [ 1019.051157][T19572] vivid-003: RDS Reception: true [ 1019.094466][T19572] vivid-003: RDS Program Type: 0 inactive [ 1019.124718][T19572] vivid-003: RDS PS Name: inactive [ 1019.285859][T19572] vivid-003: RDS Radio Text: inactive [ 1019.325876][T19572] vivid-003: RDS Traffic Announcement: false inactive [ 1019.348912][T19572] vivid-003: RDS Traffic Program: false inactive [ 1019.539146][T19572] vivid-003: RDS Music: false inactive [ 1019.583156][T19572] vivid-003: ================== END STATUS ================== [ 1023.214043][T19607] FAULT_INJECTION: forcing a failure. [ 1023.214043][T19607] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.265945][T19607] CPU: 1 UID: 0 PID: 19607 Comm: syz.4.2492 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1023.265976][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1023.265990][T19607] Call Trace: [ 1023.265998][T19607] [ 1023.266006][T19607] dump_stack_lvl+0x16c/0x1f0 [ 1023.266047][T19607] should_fail_ex+0x512/0x640 [ 1023.266099][T19607] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1023.266153][T19607] should_failslab+0xc2/0x120 [ 1023.266176][T19607] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1023.266209][T19607] ? j1939_session_new+0x7a/0x4e0 [ 1023.266239][T19607] j1939_session_new+0x7a/0x4e0 [ 1023.266269][T19607] j1939_tp_send+0x1fd/0x860 [ 1023.266300][T19607] j1939_sk_sendmsg+0xaf8/0x13d0 [ 1023.266331][T19607] ? iovec_from_user+0xbb/0x140 [ 1023.266357][T19607] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1023.266380][T19607] ? __might_fault+0x13b/0x190 [ 1023.266422][T19607] ____sys_sendmsg+0xa98/0xc70 [ 1023.266451][T19607] ? copy_msghdr_from_user+0x10a/0x160 [ 1023.266486][T19607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1023.266517][T19607] ? kfree+0x24f/0x4d0 [ 1023.266544][T19607] ? __pfx__kstrtoull+0x10/0x10 [ 1023.266578][T19607] ___sys_sendmsg+0x134/0x1d0 [ 1023.266615][T19607] ? __pfx____sys_sendmsg+0x10/0x10 [ 1023.266678][T19607] ? __pfx___might_resched+0x10/0x10 [ 1023.266711][T19607] __sys_sendmmsg+0x200/0x420 [ 1023.266754][T19607] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1023.266801][T19607] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1023.266851][T19607] ? fput+0x70/0xf0 [ 1023.266879][T19607] ? ksys_write+0x1ac/0x250 [ 1023.266913][T19607] ? __pfx_ksys_write+0x10/0x10 [ 1023.266952][T19607] __x64_sys_sendmmsg+0x9c/0x100 [ 1023.266987][T19607] ? lockdep_hardirqs_on+0x7c/0x110 [ 1023.267029][T19607] do_syscall_64+0xcd/0x490 [ 1023.267068][T19607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.267093][T19607] RIP: 0033:0x7fc37718e929 [ 1023.267111][T19607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.267135][T19607] RSP: 002b:00007fc378091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1023.267157][T19607] RAX: ffffffffffffffda RBX: 00007fc3773b5fa0 RCX: 00007fc37718e929 [ 1023.267173][T19607] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1023.267188][T19607] RBP: 00007fc378091090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.267214][T19607] R10: 000000003f0000f5 R11: 0000000000000246 R12: 0000000000000001 [ 1023.267228][T19607] R13: 0000000000000000 R14: 00007fc3773b5fa0 R15: 00007ffc1a03ebe8 [ 1023.267268][T19607] [ 1023.829695][T19614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2488'. [ 1025.463931][T19167] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1028.675135][T19648] FAULT_INJECTION: forcing a failure. [ 1028.675135][T19648] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.762925][T19648] CPU: 1 UID: 0 PID: 19648 Comm: syz.0.2500 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1028.762961][T19648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1028.762976][T19648] Call Trace: [ 1028.762985][T19648] [ 1028.762994][T19648] dump_stack_lvl+0x16c/0x1f0 [ 1028.763035][T19648] should_fail_ex+0x512/0x640 [ 1028.763071][T19648] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1028.763108][T19648] should_failslab+0xc2/0x120 [ 1028.763132][T19648] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1028.763166][T19648] ? fib_net_init+0x1a4/0x3f0 [ 1028.763198][T19648] fib_net_init+0x1a4/0x3f0 [ 1028.763222][T19648] ? __pfx___register_sysctl_table+0x10/0x10 [ 1028.763263][T19648] ? __pfx_fib_net_init+0x10/0x10 [ 1028.763289][T19648] ? lockdep_init_map_type+0x5c/0x280 [ 1028.763325][T19648] ? do_init_timer+0xc9/0x110 [ 1028.763355][T19648] ? devinet_init_net+0x5c2/0x910 [ 1028.763387][T19648] ? __pfx_fib_net_init+0x10/0x10 [ 1028.763412][T19648] ops_init+0x1df/0x5f0 [ 1028.763454][T19648] setup_net+0x1ff/0x510 [ 1028.763481][T19648] ? lockdep_init_map_type+0x5c/0x280 [ 1028.763517][T19648] ? __pfx_setup_net+0x10/0x10 [ 1028.763541][T19648] ? debug_mutex_init+0x37/0x70 [ 1028.763569][T19648] copy_net_ns+0x2a6/0x5f0 [ 1028.763597][T19648] create_new_namespaces+0x3ea/0xa90 [ 1028.763632][T19648] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1028.763664][T19648] ksys_unshare+0x45b/0xa40 [ 1028.763698][T19648] ? __pfx_ksys_unshare+0x10/0x10 [ 1028.763733][T19648] ? xfd_validate_state+0x61/0x180 [ 1028.763775][T19648] __x64_sys_unshare+0x31/0x40 [ 1028.763808][T19648] do_syscall_64+0xcd/0x490 [ 1028.763848][T19648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.763873][T19648] RIP: 0033:0x7feaf218e929 [ 1028.763892][T19648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.763927][T19648] RSP: 002b:00007feaf2f4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1028.763954][T19648] RAX: ffffffffffffffda RBX: 00007feaf23b5fa0 RCX: 00007feaf218e929 [ 1028.763970][T19648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1028.763985][T19648] RBP: 00007feaf2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1028.763999][T19648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.764013][T19648] R13: 0000000000000000 R14: 00007feaf23b5fa0 R15: 00007fffb731c7a8 [ 1028.764054][T19648] [ 1029.366554][ T30] audit: type=1800 audit(4294968508.804:23): pid=19660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2502" name="members" dev="configfs" ino=67307 res=0 errno=0 [ 1029.548468][T19653] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1029.828887][T19672] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 1032.435651][T19703] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1032.689380][T19694] block nbd9: NBD_DISCONNECT [ 1032.700079][T19685] kexec: Could not allocate control_code_buffer [ 1035.935825][T19768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2520'. [ 1036.173128][T19777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2522'. [ 1036.298003][T19779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2523'. [ 1036.340604][T19781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2523'. [ 1037.812497][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'. [ 1038.402371][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2535'. [ 1038.481129][T19832] HfR: entered promiscuous mode [ 1038.504916][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 1040.705193][T19877] ima: policy update failed [ 1040.747009][ T30] audit: type=1802 audit(4294968528.258:24): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2546" res=0 errno=0 [ 1047.268773][T19982] [ 1047.271213][T19982] ====================================================== [ 1047.278226][T19982] WARNING: possible circular locking dependency detected [ 1047.285247][T19982] 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 Not tainted [ 1047.292371][T19982] ------------------------------------------------------ [ 1047.299379][T19982] syz.0.2571/19982 is trying to acquire lock: [ 1047.305434][T19982] ffff888142b5e7b0 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 1047.315303][T19982] [ 1047.315303][T19982] but task is already holding lock: [ 1047.322658][T19982] ffff888142b5e278 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1047.333893][T19982] [ 1047.333893][T19982] which lock already depends on the new lock. [ 1047.333893][T19982] [ 1047.344371][T19982] [ 1047.344371][T19982] the existing dependency chain (in reverse order) is: [ 1047.353371][T19982] [ 1047.353371][T19982] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 1047.361977][T19982] blk_alloc_queue+0x619/0x760 [ 1047.367266][T19982] blk_mq_alloc_queue+0x175/0x290 [ 1047.372846][T19982] __blk_mq_alloc_disk+0x29/0x120 [ 1047.378411][T19982] nbd_dev_add+0x4a0/0xbc0 [ 1047.383354][T19982] nbd_init+0x181/0x320 [ 1047.388041][T19982] do_one_initcall+0x120/0x6e0 [ 1047.393422][T19982] kernel_init_freeable+0x5c2/0x900 [ 1047.399150][T19982] kernel_init+0x1c/0x2b0 [ 1047.404001][T19982] ret_from_fork+0x5d7/0x6f0 [ 1047.409117][T19982] ret_from_fork_asm+0x1a/0x30 [ 1047.414494][T19982] [ 1047.414494][T19982] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1047.421713][T19982] fs_reclaim_acquire+0x102/0x150 [ 1047.427349][T19982] prepare_alloc_pages+0x162/0x610 [ 1047.432995][T19982] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1047.439446][T19982] __alloc_pages_noprof+0xb/0x1b0 [ 1047.444999][T19982] pcpu_populate_chunk+0x110/0xb00 [ 1047.450638][T19982] pcpu_alloc_noprof+0x86a/0x1470 [ 1047.456196][T19982] xt_percpu_counter_alloc+0x13e/0x1b0 [ 1047.462193][T19982] find_check_entry.constprop.0+0xbc/0x9b0 [ 1047.468528][T19982] translate_table+0xc98/0x1720 [ 1047.473905][T19982] ipt_register_table+0x102/0x430 [ 1047.479458][T19982] iptable_raw_table_init+0x63/0x90 [ 1047.485186][T19982] xt_find_table_lock+0x2e4/0x520 [ 1047.490737][T19982] xt_request_find_table_lock+0x28/0xf0 [ 1047.496815][T19982] get_info+0x190/0x610 [ 1047.501515][T19982] do_ipt_get_ctl+0x169/0xa10 [ 1047.506726][T19982] nf_getsockopt+0x79/0xe0 [ 1047.511676][T19982] ip_getsockopt+0x18c/0x1e0 [ 1047.516799][T19982] tcp_getsockopt+0xa1/0x100 [ 1047.521934][T19982] do_sock_getsockopt+0x3ff/0x800 [ 1047.527497][T19982] __sys_getsockopt+0x123/0x1b0 [ 1047.532888][T19982] __x64_sys_getsockopt+0xbd/0x160 [ 1047.538528][T19982] do_syscall_64+0xcd/0x490 [ 1047.543653][T19982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.550069][T19982] [ 1047.550069][T19982] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1047.557809][T19982] __mutex_lock+0x199/0xb90 [ 1047.562854][T19982] pcpu_alloc_noprof+0xb4c/0x1470 [ 1047.568427][T19982] sbitmap_init_node+0x2fd/0x770 [ 1047.573889][T19982] sbitmap_queue_init_node+0x41/0x560 [ 1047.579794][T19982] blk_mq_init_tags+0x12d/0x2b0 [ 1047.585196][T19982] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 1047.591301][T19982] blk_mq_init_sched+0x30c/0x610 [ 1047.596775][T19982] elevator_switch+0x1e1/0x7f0 [ 1047.602070][T19982] elevator_change+0x2ac/0x400 [ 1047.607362][T19982] elevator_set_default+0x292/0x320 [ 1047.613094][T19982] blk_register_queue+0x393/0x4f0 [ 1047.618636][T19982] __add_disk+0x74a/0xf00 [ 1047.623492][T19982] add_disk_fwnode+0x13f/0x5d0 [ 1047.628786][T19982] nbd_dev_add+0x791/0xbc0 [ 1047.633730][T19982] nbd_init+0x181/0x320 [ 1047.638411][T19982] do_one_initcall+0x120/0x6e0 [ 1047.643697][T19982] kernel_init_freeable+0x5c2/0x900 [ 1047.649423][T19982] kernel_init+0x1c/0x2b0 [ 1047.654269][T19982] ret_from_fork+0x5d7/0x6f0 [ 1047.659386][T19982] ret_from_fork_asm+0x1a/0x30 [ 1047.664672][T19982] [ 1047.664672][T19982] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1047.672493][T19982] __lock_acquire+0x126f/0x1c90 [ 1047.677867][T19982] lock_acquire+0x179/0x350 [ 1047.682895][T19982] __mutex_lock+0x199/0xb90 [ 1047.687930][T19982] queue_requests_store+0x1c7/0x310 [ 1047.693650][T19982] queue_attr_store+0x279/0x320 [ 1047.699029][T19982] sysfs_kf_write+0xef/0x150 [ 1047.704141][T19982] kernfs_fop_write_iter+0x351/0x510 [ 1047.709951][T19982] iter_file_splice_write+0x91f/0x1150 [ 1047.715936][T19982] direct_splice_actor+0x192/0x6c0 [ 1047.721571][T19982] splice_direct_to_actor+0x342/0xa30 [ 1047.727472][T19982] do_splice_direct+0x174/0x240 [ 1047.732933][T19982] do_sendfile+0xb06/0xe50 [ 1047.737877][T19982] __x64_sys_sendfile64+0x1d8/0x220 [ 1047.743590][T19982] do_syscall_64+0xcd/0x490 [ 1047.748624][T19982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.755043][T19982] [ 1047.755043][T19982] other info that might help us debug this: [ 1047.755043][T19982] [ 1047.765269][T19982] Chain exists of: [ 1047.765269][T19982] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 1047.765269][T19982] [ 1047.779026][T19982] Possible unsafe locking scenario: [ 1047.779026][T19982] [ 1047.786469][T19982] CPU0 CPU1 [ 1047.791836][T19982] ---- ---- [ 1047.797201][T19982] lock(&q->q_usage_counter(io)#59); [ 1047.802601][T19982] lock(fs_reclaim); [ 1047.809100][T19982] lock(&q->q_usage_counter(io)#59); [ 1047.817008][T19982] lock(&q->elevator_lock); [ 1047.821604][T19982] [ 1047.821604][T19982] *** DEADLOCK *** [ 1047.821604][T19982] [ 1047.829742][T19982] 5 locks held by syz.0.2571/19982: [ 1047.834941][T19982] #0: ffff888031836428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 1047.845861][T19982] #1: ffff888029e6dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1047.855639][T19982] #2: ffff8880261051e8 (kn->active#307){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1047.865775][T19982] #3: ffff888142b5e278 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1047.877464][T19982] #4: ffff888142b5e2b0 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1047.889409][T19982] [ 1047.889409][T19982] stack backtrace: [ 1047.895291][T19982] CPU: 1 UID: 0 PID: 19982 Comm: syz.0.2571 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1047.895317][T19982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1047.895330][T19982] Call Trace: [ 1047.895338][T19982] [ 1047.895346][T19982] dump_stack_lvl+0x116/0x1f0 [ 1047.895378][T19982] print_circular_bug+0x275/0x350 [ 1047.895405][T19982] check_noncircular+0x14c/0x170 [ 1047.895435][T19982] __lock_acquire+0x126f/0x1c90 [ 1047.895463][T19982] ? __lock_acquire+0xb8a/0x1c90 [ 1047.895491][T19982] lock_acquire+0x179/0x350 [ 1047.895517][T19982] ? queue_requests_store+0x1c7/0x310 [ 1047.895537][T19982] ? __pfx___might_resched+0x10/0x10 [ 1047.895559][T19982] ? do_raw_spin_lock+0x12c/0x2b0 [ 1047.895591][T19982] __mutex_lock+0x199/0xb90 [ 1047.895622][T19982] ? queue_requests_store+0x1c7/0x310 [ 1047.895641][T19982] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1047.895668][T19982] ? queue_requests_store+0x1c7/0x310 [ 1047.895685][T19982] ? lockdep_hardirqs_on+0x7c/0x110 [ 1047.895714][T19982] ? __pfx___mutex_lock+0x10/0x10 [ 1047.895747][T19982] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1047.895776][T19982] ? queue_requests_store+0x1c7/0x310 [ 1047.895794][T19982] queue_requests_store+0x1c7/0x310 [ 1047.895812][T19982] ? __pfx_queue_requests_store+0x10/0x10 [ 1047.895833][T19982] ? __mutex_trylock_common+0xe9/0x250 [ 1047.895862][T19982] ? __pfx_queue_requests_store+0x10/0x10 [ 1047.895881][T19982] queue_attr_store+0x279/0x320 [ 1047.895912][T19982] ? __pfx_queue_attr_store+0x10/0x10 [ 1047.895941][T19982] ? __lock_acquire+0x622/0x1c90 [ 1047.895973][T19982] ? find_held_lock+0x2b/0x80 [ 1047.895993][T19982] ? sysfs_file_kobj+0xe4/0x290 [ 1047.896018][T19982] ? __pfx_queue_attr_store+0x10/0x10 [ 1047.896051][T19982] sysfs_kf_write+0xef/0x150 [ 1047.896095][T19982] kernfs_fop_write_iter+0x351/0x510 [ 1047.896119][T19982] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1047.896153][T19982] iter_file_splice_write+0x91f/0x1150 [ 1047.896193][T19982] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1047.896228][T19982] ? __pfx_copy_splice_read+0x10/0x10 [ 1047.896264][T19982] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1047.896297][T19982] direct_splice_actor+0x192/0x6c0 [ 1047.896330][T19982] splice_direct_to_actor+0x342/0xa30 [ 1047.896360][T19982] ? __pfx_direct_splice_actor+0x10/0x10 [ 1047.896394][T19982] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1047.896428][T19982] do_splice_direct+0x174/0x240 [ 1047.896458][T19982] ? __pfx_do_splice_direct+0x10/0x10 [ 1047.896488][T19982] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1047.896519][T19982] ? rw_verify_area+0xcf/0x680 [ 1047.896550][T19982] do_sendfile+0xb06/0xe50 [ 1047.896584][T19982] ? __pfx_do_sendfile+0x10/0x10 [ 1047.896615][T19982] ? handle_mm_fault+0x2ab/0xd10 [ 1047.896647][T19982] ? __x64_sys_futex+0x1e0/0x4c0 [ 1047.896676][T19982] ? __x64_sys_futex+0x1e9/0x4c0 [ 1047.896706][T19982] __x64_sys_sendfile64+0x1d8/0x220 [ 1047.896729][T19982] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1047.896756][T19982] do_syscall_64+0xcd/0x490 [ 1047.896793][T19982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.896817][T19982] RIP: 0033:0x7feaf218e929 [ 1047.896836][T19982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.896860][T19982] RSP: 002b:00007feaf2f4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1047.896881][T19982] RAX: ffffffffffffffda RBX: 00007feaf23b5fa0 RCX: 00007feaf218e929 [ 1047.896898][T19982] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1047.896913][T19982] RBP: 00007feaf2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1047.896928][T19982] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1047.896942][T19982] R13: 0000000000000000 R14: 00007feaf23b5fa0 R15: 00007fffb731c7a8 [ 1047.896964][T19982] [ 1048.265162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.473337][T19988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2572'. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1049.366208][T19993] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1049.532171][T18762] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz-executor: Error -117 reading block bitmap for 2 [ 1049.715455][T18762] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1049.781715][T18762] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1049.815535][T19993] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1049.828754][T19178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.857129][T19993] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.4.2573: Error -117 reading block bitmap for 2 [ 1049.892780][T19178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.956497][T19993] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1049.977420][T19178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.020064][T19987] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1050.034153][T19178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.179118][T19178] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.312647][T19178] bridge_slave_1: left allmulticast mode [ 1050.346667][T19178] bridge_slave_1: left promiscuous mode [ 1050.352355][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.383492][T19987] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1050.398815][T19178] bridge_slave_0: left allmulticast mode [ 1050.404470][T19178] bridge_slave_0: left promiscuous mode [ 1050.421949][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.550193][T19178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.572192][T19178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.594734][T19178] bond0 (unregistering): Released all slaves [ 1050.639489][T19178] HfR: left promiscuous mode [ 1050.762884][T19982] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.0.2571: Error -117 reading block bitmap for 2 [ 1050.779873][T19178] hsr_slave_0: left promiscuous mode [ 1050.802115][T19178] hsr_slave_1: left promiscuous mode [ 1050.827692][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.835120][T19178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.848677][T19982] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1050.866246][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.873649][T19178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.922963][T19178] veth1_macvtap: left promiscuous mode [ 1050.938147][T19178] veth0_macvtap: left promiscuous mode [ 1050.943714][T19178] veth1_vlan: left promiscuous mode [ 1050.959340][T19178] veth0_vlan: left promiscuous mode [ 1051.193998][T19178] team0 (unregistering): Port device team_slave_1 removed [ 1051.221853][T19178] team0 (unregistering): Port device team_slave_0 removed [ 1051.490173][T19178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.530186][T19178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.579696][T19178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.622129][T19178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.724194][T19178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.780819][T19178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.832170][T19178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.868520][T19178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.959404][T19178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.011166][T19178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.071149][T19178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.119262][T19178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.208445][T19178] bridge_slave_1: left allmulticast mode [ 1052.214118][T19178] bridge_slave_1: left promiscuous mode [ 1052.235977][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.244052][T19178] bridge_slave_0: left allmulticast mode [ 1052.267018][T19178] bridge_slave_0: left promiscuous mode [ 1052.272680][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.288288][T19178] dummy0: left allmulticast mode [ 1052.293266][T19178] dummy0: left promiscuous mode [ 1052.305927][T19178] bridge0: port 4(dummy0) entered disabled state [ 1052.328299][T19178] batadv0: left allmulticast mode [ 1052.333337][T19178] batadv0: left promiscuous mode [ 1052.346186][T19178] bridge0: port 3(batadv0) entered disabled state [ 1052.358068][T19178] bridge_slave_1: left allmulticast mode [ 1052.363712][T19178] bridge_slave_1: left promiscuous mode [ 1052.371187][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.380219][T19178] bridge_slave_0: left allmulticast mode [ 1052.386675][T19178] bridge_slave_0: left promiscuous mode [ 1052.392310][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.401524][T19178] bridge_slave_1: left allmulticast mode [ 1052.407345][T19178] bridge_slave_1: left promiscuous mode [ 1052.412970][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.421446][T19178] bridge_slave_0: left allmulticast mode [ 1052.427840][T19178] bridge_slave_0: left promiscuous mode [ 1052.433467][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.549825][T19178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.559755][T19178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.569292][T19178] bond0 (unregistering): Released all slaves [ 1052.620970][T19178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.630760][T19178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.640236][T19178] bond0 (unregistering): Released all slaves [ 1052.693026][T19178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.703504][T19178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.717037][T19178] bond0 (unregistering): Released all slaves [ 1052.785707][T19178] .SR: left promiscuous mode [ 1052.827826][T19178] HfR: left promiscuous mode [ 1053.064438][T19178] hsr_slave_0: left promiscuous mode [ 1053.077170][T19178] hsr_slave_1: left promiscuous mode [ 1053.090263][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.107501][T19178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.127280][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.134705][T19178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.168292][T19178] hsr_slave_0: left promiscuous mode [ 1053.174118][T19178] hsr_slave_1: left promiscuous mode [ 1053.186169][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.193562][T19178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.216614][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.224012][T19178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.252952][T19178] hsr_slave_0: left promiscuous mode [ 1053.260115][T19178] hsr_slave_1: left promiscuous mode [ 1053.265680][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.274457][T19178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.282475][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.289992][T19178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.303994][T19178] veth1_macvtap: left promiscuous mode [ 1053.309708][T19178] veth0_macvtap: left promiscuous mode [ 1053.315233][T19178] veth1_vlan: left promiscuous mode [ 1053.323519][T19178] veth0_vlan: left promiscuous mode [ 1053.329944][T19178] veth1_macvtap: left promiscuous mode [ 1053.335435][T19178] veth0_macvtap: left promiscuous mode [ 1053.341417][T19178] veth1_vlan: left promiscuous mode [ 1053.346778][T19178] veth0_vlan: left promiscuous mode [ 1053.352412][T19178] veth1_macvtap: left promiscuous mode [ 1053.358522][T19178] veth0_macvtap: left promiscuous mode [ 1053.364071][T19178] veth1_vlan: left promiscuous mode [ 1053.369492][T19178] veth0_vlan: left promiscuous mode [ 1053.572615][T19178] team0 (unregistering): Port device team_slave_1 removed [ 1053.595617][T19178] team0 (unregistering): Port device team_slave_0 removed [ 1053.769190][T19178] team0 (unregistering): Port device team_slave_1 removed [ 1053.783180][T19178] team0 (unregistering): Port device team_slave_0 removed [ 1053.941312][T19178] team0 (unregistering): Port device team_slave_1 removed [ 1053.961284][T19178] team0 (unregistering): Port device team_slave_0 removed