last executing test programs: 1m48.572353904s ago: executing program 3 (id=723): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x8000040006) ptrace$auto(0xf, 0x0, 0xfffffffffffffffe, 0x8000000000000000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x10, 0xffffffffffffff81, 0x7fa4826e, 0x19, 0x2, 0x100000001) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 1m46.607053376s ago: executing program 3 (id=728): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2d, 0x1f, 0x0, 0x10}, 0xc, 0x0}, 0x20040804) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='{\x00', 0xfff) r1 = socket(0x10, 0x2, 0x0) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0x40341, 0x0) mmap$auto(0x5, 0x40009, 0xe0, 0x9b72, 0xffffffffffffffff, 0x6) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x56d) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8880) socket$nl_generic(0x10, 0x3, 0x10) 1m44.936098513s ago: executing program 3 (id=734): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x404080, 0x0) write$auto(r0, 0x0, 0x7ef) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/116, 0x74) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) socket(0x28, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x3, 0xd, 0x1d, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x7f, 0x3, 0x1, 0x9, 0x1, 0x400000]}, 0x0) write$auto(r2, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1\x05\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x89C:\xc3\xcbx*=\x12\xb4q\xeeC\x81\n\\_\x04D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\x9e\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x0, 0x6d3e, 0x9, 0x8cec, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) fchownat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) 1m42.753892858s ago: executing program 3 (id=741): unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x165602, 0x0) 1m41.412430646s ago: executing program 3 (id=744): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000080)='..\x00', 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() mincore$auto(0x1000, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) 1m39.258223809s ago: executing program 3 (id=752): unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x165602, 0x0) 1m37.650195436s ago: executing program 1 (id=763): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) shmdt$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r1) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x14, r2, 0x901, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000e0a5c6c4618697020dd906feb8c28553131a3a4d41dda011d109000000ed801654840dbe8c95074951d39fbec827004c1db59ce5246564c0979a3ed194df790b69f28fcd42fad10f1c76d5d46f906ed4ba8477f90fd8f136620000000000000000", @ANYRES16=r2, @ANYBLOB="000428bd7000fbdbdf250100000008000b007f00000108000b00e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) shmdt$auto(0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.600824867s ago: executing program 1 (id=756): unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) listmount$auto(0x0, &(0x7f00000001c0)=0x6, 0x4, 0x101) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsopen$auto(&(0x7f00000000c0)=',/\\\x00', 0x7) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x1038, 0x0, 0x4, 0x70bd25, 0x3, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_PMK={0x2a, 0xfe, "e088cf61a66b7b8eff95763c3a980bdc5448f16e5d85f1c311ae52caeca00400cafc4ad82499"}, @NL80211_ATTR_REG_ALPHA2={0xff3, 0x21, "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"}]}, 0x1038}}, 0x4004) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r6, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) splice$auto(r3, &(0x7f0000000040)=0xffffffffffffc148, r5, &(0x7f0000000080)=0x3, 0x5, 0xffffffff) 1m35.463042951s ago: executing program 1 (id=757): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.3/usb4/devnum\x00', 0x500, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptydc\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = prctl$auto_PR_SET_MM_ARG_END(0x80000000, 0x9, 0x0, 0x8001, 0x100) mkdirat$auto(r1, 0x0, 0x5) r2 = socket(0x2, 0x1, 0x106) accept$auto(r2, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r3, &(0x7f0000000040)="981c02c843e084", 0x7) unshare$auto(0x40000080) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cec13\x00', 0x2000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r4, 0x0, 0x40000000f42c, 0x585) r5 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x9) 1m34.501927693s ago: executing program 1 (id=759): setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000000)={{0x3, 0x3}, {0x8, 0x5}}, 0x0) unshare$auto(0x40000080) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x34c, 0x9}, {0xfffffffffffffffd}}, 0x0) setitimer$auto(0x5, &(0x7f0000000240)={{0xfea07d8, 0x9d}, {0xfffffffffffffffb, 0x9}}, &(0x7f0000000280)={{0x4, 0x200}, {0x2, 0x6}}) r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x30004011) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r1, 0x80184132, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) open(0x0, 0xeee00, 0x31) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) stat$auto(0x0, &(0x7f0000000380)={0x506f, 0x7, 0x80000000000000, 0xfffffff2, 0x0, 0xee01, 0x0, 0x2, 0x101, 0x4, 0x1, 0x20fd, 0x3ff, 0x800000401, 0x5f54, 0x0, 0xfffffffeffffffff}) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) writev$auto(r2, &(0x7f00000003c0)={0x0, 0x8}, 0x3) 1m34.129427004s ago: executing program 1 (id=760): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000080)='..\x00', 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() mincore$auto(0x1000, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) 1m23.764722121s ago: executing program 32 (id=752): unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x165602, 0x0) 1m20.310142798s ago: executing program 1 (id=778): writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x101) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0xffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) 1m4.99197756s ago: executing program 33 (id=778): writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x101) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0xffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) 9.688214141s ago: executing program 5 (id=934): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x200400, 0x0) readv$auto(0x3, 0x0, 0xfffffffffffffffe) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x21, 0x4, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x4008af03, r1) readahead$auto(r1, 0x4, 0x1) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x7, 0x1, 0x0, 0x1000, 0x8001) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r0, &(0x7f0000000080)='-/%\'\xef#\x00', 0x8000000000000001) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004180), 0xffffffffffffffff) 9.688063712s ago: executing program 2 (id=935): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) socket(0xa, 0x2, 0x0) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x894}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7040f9dbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="d9f439a0abd5dc65339d72e7403fb70b0355e1d8d536c23164094035507592157b5a340b6e611075bbb70cd4dba4f1eb40c24c546ce009c015397c866d83ba262d329cd0af8041a716ae51d00c08c63d554d04c53450d46f"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) read$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x8, 0x7, 0xffffffffffffffff, 0x6, 0x8001}, 0x101) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) socket(0x10, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) ioctl$auto(r5, 0x4008550c, r5) 8.714628755s ago: executing program 2 (id=939): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) madvise$auto(0x0, 0x3, 0x66) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) mq_getsetattr$auto(r1, 0x0, 0x0) 8.57233341s ago: executing program 5 (id=940): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x7397, 0x2}) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @local, 0x1}, 0x2e) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r2, 0x0, 0x200048d4) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) close_range$auto(0x2, 0x8, 0x0) 7.317668966s ago: executing program 2 (id=942): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x400, 0x9}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x200007, 0x19) 6.438351196s ago: executing program 4 (id=943): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/phonet\x00', 0x40c80, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 6.43735037s ago: executing program 0 (id=951): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x7397, 0x2}) 6.43684014s ago: executing program 5 (id=944): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1c/sub1/sw_params\x00', 0x48041, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/misc\x00', 0xa182, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) socket(0x2, 0x801, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x0, 0x8008000, 0x0) socket(0x29, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/dfscache\x00', 0xc2402, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty17\x00', 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x101880, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 6.277191816s ago: executing program 5 (id=945): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/fs/cifs/SecurityFlags\x00', 0x22040, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff050000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.693067147s ago: executing program 0 (id=946): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x7fffffff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.158483636s ago: executing program 4 (id=947): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r3, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r4, 0x0, 0x7ff, 0x400) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 5.048840069s ago: executing program 2 (id=948): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) read$auto_vcs_fops_vc_screen(r2, &(0x7f0000000080)=""/238, 0xffffffe9) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r3, &(0x7f0000000080)=""/209, 0xd1) ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) membarrier$auto(0x2, 0x0, 0x9) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x3b, 0x0, 0x0, 0x0, 0x0) 4.004942393s ago: executing program 4 (id=949): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x200400, 0x0) readv$auto(0x3, 0x0, 0xfffffffffffffffe) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x21, 0x4, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x4008af03, r1) readahead$auto(r1, 0x4, 0x1) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x7, 0x1, 0x0, 0x1000, 0x8001) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r0, &(0x7f0000000080)='-/%\'\xef#\x00', 0x8000000000000001) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004180), 0xffffffffffffffff) 4.003724084s ago: executing program 0 (id=958): unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) keyctl$auto(0x1d, 0x0, 0x0, 0x0, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, 0x0, 0x40881) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x78, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) writev$auto(r1, &(0x7f0000000280)={&(0x7f0000000180)="bf955582c6880b6636cb98e7fa8c9e6c893ff450af5f53573f343fc2f84a95fbff92436cc702c1c073b902b961ebdcc9bc4731f95068c8cbd8ce39552bfcc37fc2ff612de3c1c6799dbea4e9d5e1edbcdb9f9ead26d0d4199390b1a4bb38fd65dcb378ab0ba78379eccf48d5d689c362581791e138237b4cc44a6564665aaa0478e28362484d4e3438d5141f77b4ada9b7bcf9a40d74b2cd225982678da7fb1eaeeeedb9cf49f7b31ce7fde98839878e960a88bdda38e438f11044cd3b3b74889138eba5de9985f345fd51dca6ec7e4b9a19bed3834bfeab7854ba6e204b1f6d5c4afcfca3a02af554a6b2cd48d120", 0x5bd}, 0xffffffffffffffc0) madvise$auto(0x0, 0x2003f0, 0x15) 4.002954547s ago: executing program 5 (id=950): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0xee01, 0xffffffffffffffff, 0x0, 0x8000000000000000) r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_options\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8400) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000180)='/sys/kernel/tracing/trace_options\x00', 0xa, 0x10000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip_vs_conn\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) 4.002803089s ago: executing program 2 (id=952): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x7397, 0x2}) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @local, 0x1}, 0x2e) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r2, 0x0, 0x200048d4) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.273215608s ago: executing program 0 (id=953): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) close_range$auto(0xffffffffffffffff, r0, 0x2abc) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x2, 0x1, 0x0) listen$auto(r1, 0xffffffff) ioctl$auto(0x3, 0x5411, 0x10000000000402) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram9\x00', 0x400802, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) 2.272561719s ago: executing program 2 (id=954): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0xc00000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0x10, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r2, 0x4008550d, r2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 2.272353252s ago: executing program 4 (id=955): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) socket(0x17, 0x1, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x2, 0x1, 0x84) recvfrom$auto(r0, 0x0, 0xfffffffffffffffe, 0xfffffff9, 0x0, 0xfffffffffffffffd) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001480)={{&(0x7f0000000380)="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"/4082, 0x80000000, &(0x7f00000000c0)={&(0x7f0000001380)="7e2f8f015987fc9fbd79f3fd56903d3908795152df7409f7ac2074a3cc9a23cc2f99c6e599a9fb81b0666b63bac2dd5e66924223e18ccedef848db6afdaf4726e07d1bc80bb6ddba409c838ae2c8ffc86fb9b50a9c25bdadb88adb17fa4edb3bacb5c958c03c0142234c1220bf0a83248c36fc5c614e03f92bfb06a4fbb5dee4616e340acfc1473898451906a650bb0a8a", 0x7}, 0x8001, &(0x7f0000001440)="aa9c2ca25cdae2a278cdfbb243e2761c81672f1c9598c2c54c99", 0x1, 0x102}, 0x7}, 0x7ffe, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x3b66, 0x0) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x0, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x2, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x2b, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) 2.085686353s ago: executing program 5 (id=956): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x7397, 0x2}) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @local, 0x1}, 0x2e) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r2, 0x0, 0x200048d4) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) close_range$auto(0x2, 0x8, 0x0) 1.364644069s ago: executing program 4 (id=957): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/phonet\x00', 0x40c80, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 1.134922077s ago: executing program 0 (id=959): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r0, &(0x7f0000000380)="703a3a82d9e5cc7c2ceda8d50bfc", 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4110000", @ANYRES16, @ANYBLOB="020029bd7000fedbdf25010000004811028043e72a4130e0ab10f58a73165236c242ce7b447d7bebf752003c4ac7a5d993864192d4846ad381f6a7cd18002c80080021008a0600000400db8008001600", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"], 0x11c4}, 0x1, 0x0, 0x0, 0x40800}, 0x20000801) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mknod$auto(&(0x7f0000000080)=':,\x00', 0x9, 0xfffffffc) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0xf, r6, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) r9 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYRES64=r3, @ANYRESHEX, @ANYRESHEX=r4], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x80) 39.224974ms ago: executing program 0 (id=960): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10002, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) symlink$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x4) read$auto(r0, &(0x7f00000001c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0xc) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) r2 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r2, 0x0, 0x800, 0x45e) pread64$auto(r1, 0x0, 0x8, 0x8000) r3 = socketpair$auto(0x13, 0x4, 0x4, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xa083, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), r3) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x8000040006) ptrace$auto(0xf, r5, 0xfffffffffffffffe, 0x8000000000000000) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r5, 0x0, 0x7fff) close_range$auto(r3, r4, 0x672) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/128, 0x80) 0s ago: executing program 4 (id=961): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000001240)) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) madvise$auto(0x1, 0x8, 0x4a35) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket(0xf, 0x3, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) bind$auto(r2, 0x0, 0x67) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0x90, 0x1, 0x9493, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x591]}, 0x0) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) kernel console output (not intermixed with test programs): 21q: adding VLAN 0 to HW filter on device team0 [ 106.836024][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.843295][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.891619][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.898804][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.912138][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.919314][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.934278][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.012408][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.040439][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.051945][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.059258][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.073708][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.075039][ T5852] Bluetooth: hci3: command tx timeout [ 107.113202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.120402][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.156647][ T5852] Bluetooth: hci0: command tx timeout [ 107.176715][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.213276][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.220558][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.237011][ T5852] Bluetooth: hci1: command tx timeout [ 107.242492][ T5852] Bluetooth: hci2: command tx timeout [ 107.288060][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.295304][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.553050][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.727203][ T5848] veth0_vlan: entered promiscuous mode [ 107.751844][ T5848] veth1_vlan: entered promiscuous mode [ 107.849772][ T5848] veth0_macvtap: entered promiscuous mode [ 107.885718][ T5848] veth1_macvtap: entered promiscuous mode [ 107.964422][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.983802][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.033589][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.070848][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.089184][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.098592][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.108672][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.118327][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.153454][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.234027][ T5847] veth0_vlan: entered promiscuous mode [ 108.338155][ T5847] veth1_vlan: entered promiscuous mode [ 108.351086][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.370164][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.389260][ T5849] veth0_vlan: entered promiscuous mode [ 108.429283][ T5850] veth0_vlan: entered promiscuous mode [ 108.447844][ T5850] veth1_vlan: entered promiscuous mode [ 108.460179][ T5849] veth1_vlan: entered promiscuous mode [ 108.483141][ T5847] veth0_macvtap: entered promiscuous mode [ 108.492571][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.501208][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.507740][ T5847] veth1_macvtap: entered promiscuous mode [ 108.568374][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.596630][ T5850] veth0_macvtap: entered promiscuous mode [ 108.606367][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.631337][ T5850] veth1_macvtap: entered promiscuous mode [ 108.638790][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.643688][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.667817][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.678166][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.688791][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.713937][ T5849] veth0_macvtap: entered promiscuous mode [ 108.741374][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.775839][ T5849] veth1_macvtap: entered promiscuous mode [ 108.829681][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.879175][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.886986][ T5938] vhci_hcd: invalid port number 16 [ 108.892831][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.893157][ T5938] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 108.903544][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.926355][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.993476][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.003686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 109.030355][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.051586][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.113355][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.127502][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.140279][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.155021][ T5858] Bluetooth: hci3: command tx timeout [ 109.158009][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.169466][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.187841][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.236009][ T5858] Bluetooth: hci0: command tx timeout [ 109.262881][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.315034][ T5858] Bluetooth: hci2: command tx timeout [ 109.320537][ T5858] Bluetooth: hci1: command tx timeout [ 109.513543][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.537754][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.779464][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 109.839073][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.915923][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.020641][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.045873][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.216572][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.249489][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.051302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 111.154393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.164913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 111.195198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.246732][ T5858] Bluetooth: hci3: command tx timeout [ 111.335956][ T5858] Bluetooth: hci0: command tx timeout [ 111.396382][ T5858] Bluetooth: hci1: command tx timeout [ 111.401874][ T5858] Bluetooth: hci2: command tx timeout [ 111.871078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.903230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.383513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.435301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.149349][ T5987] FAULT_INJECTION: forcing a failure. [ 113.149349][ T5987] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.265860][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.2.11 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 113.265903][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.265925][ T5987] Call Trace: [ 113.265935][ T5987] [ 113.265949][ T5987] dump_stack_lvl+0x16c/0x1f0 [ 113.266002][ T5987] should_fail_ex+0x512/0x640 [ 113.266048][ T5987] should_fail_alloc_page+0xe7/0x130 [ 113.266079][ T5987] prepare_alloc_pages+0x3c2/0x610 [ 113.266118][ T5987] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 113.266163][ T5987] ? kasan_save_stack+0x42/0x60 [ 113.266215][ T5987] ? __lock_acquire+0x622/0x1c90 [ 113.266258][ T5987] ? __vmf_anon_prepare+0x11c/0x240 [ 113.266287][ T5987] ? __handle_mm_fault+0x27f6/0x5490 [ 113.266322][ T5987] ? handle_mm_fault+0x589/0xd10 [ 113.266355][ T5987] ? __get_user_pages+0x589/0x3b80 [ 113.266384][ T5987] ? get_user_pages_remote+0x258/0xb20 [ 113.266416][ T5987] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.266461][ T5987] ? __lock_acquire+0x622/0x1c90 [ 113.266508][ T5987] ? __lock_acquire+0xb8a/0x1c90 [ 113.266552][ T5987] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.266596][ T5987] ? policy_nodemask+0xea/0x4e0 [ 113.266625][ T5987] alloc_pages_mpol+0x1fb/0x550 [ 113.266654][ T5987] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 113.266683][ T5987] ? __anon_vma_prepare+0x2db/0x5e0 [ 113.266728][ T5987] folio_alloc_mpol_noprof+0x36/0x2f0 [ 113.266762][ T5987] vma_alloc_folio_noprof+0xed/0x1e0 [ 113.266794][ T5987] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 113.266844][ T5987] ? __anon_vma_prepare+0x2e2/0x5e0 [ 113.266894][ T5987] __handle_mm_fault+0x2f21/0x5490 [ 113.266943][ T5987] ? __pfx___handle_mm_fault+0x10/0x10 [ 113.267013][ T5987] handle_mm_fault+0x589/0xd10 [ 113.267058][ T5987] __get_user_pages+0x589/0x3b80 [ 113.267106][ T5987] ? __pfx___get_user_pages+0x10/0x10 [ 113.267153][ T5987] get_user_pages_remote+0x258/0xb20 [ 113.267205][ T5987] ? __pfx_get_user_pages_remote+0x10/0x10 [ 113.267238][ T5987] ? __pfx_vma_link+0x10/0x10 [ 113.267296][ T5987] get_arg_page+0xf4/0x310 [ 113.267334][ T5987] ? __pfx_get_arg_page+0x10/0x10 [ 113.267370][ T5987] ? up_write+0x1b2/0x520 [ 113.267432][ T5987] copy_string_kernel+0x180/0x510 [ 113.267479][ T5987] do_execveat_common.isra.0+0x2ed/0x610 [ 113.267526][ T5987] __x64_sys_execve+0x8e/0xb0 [ 113.267566][ T5987] do_syscall_64+0xcd/0x490 [ 113.267611][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.267639][ T5987] RIP: 0033:0x7f899198e929 [ 113.267662][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.267690][ T5987] RSP: 002b:00007f898f7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 113.267716][ T5987] RAX: ffffffffffffffda RBX: 00007f8991bb6080 RCX: 00007f899198e929 [ 113.267735][ T5987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 113.267752][ T5987] RBP: 00007f8991a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.267770][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.267787][ T5987] R13: 0000000000000000 R14: 00007f8991bb6080 R15: 00007fffb7ff9428 [ 113.267828][ T5987] [ 113.594931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.861892][ T5995] Zero length message leads to an empty skb [ 116.543354][ T6022] FAULT_INJECTION: forcing a failure. [ 116.543354][ T6022] name fail_futex, interval 1, probability 0, space 0, times 1 [ 116.556483][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.0.20 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 116.556515][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.556529][ T6022] Call Trace: [ 116.556536][ T6022] [ 116.556545][ T6022] dump_stack_lvl+0x16c/0x1f0 [ 116.556584][ T6022] should_fail_ex+0x512/0x640 [ 116.556623][ T6022] get_futex_key+0x1d0/0x1540 [ 116.556655][ T6022] ? __pfx_get_futex_key+0x10/0x10 [ 116.556693][ T6022] futex_wake+0xe7/0x4e0 [ 116.556728][ T6022] ? __pfx_futex_wake+0x10/0x10 [ 116.556765][ T6022] ? kmem_cache_free+0x2d1/0x4d0 [ 116.556798][ T6022] ? fd_install+0x225/0x750 [ 116.556828][ T6022] ? putname+0x154/0x1a0 [ 116.556865][ T6022] do_futex+0x1e3/0x350 [ 116.556895][ T6022] ? __pfx_do_futex+0x10/0x10 [ 116.556932][ T6022] __x64_sys_futex+0x1e0/0x4c0 [ 116.556968][ T6022] ? __x64_sys_openat+0x174/0x210 [ 116.556995][ T6022] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.557036][ T6022] do_syscall_64+0xcd/0x490 [ 116.557074][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.557098][ T6022] RIP: 0033:0x7fdf5d58e929 [ 116.557116][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.557143][ T6022] RSP: 002b:00007fdf5e3be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.557165][ T6022] RAX: ffffffffffffffda RBX: 00007fdf5d7b5fa8 RCX: 00007fdf5d58e929 [ 116.557180][ T6022] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf5d7b5fac [ 116.557195][ T6022] RBP: 00007fdf5d7b5fa0 R08: 00007fdf5e3bf000 R09: 0000000000000000 [ 116.557210][ T6022] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fdf5d7b5fac [ 116.557224][ T6022] R13: 0000000000000000 R14: 00007ffffb63ebf0 R15: 00007ffffb63ecd8 [ 116.557253][ T6022] [ 117.769207][ T6035] program syz.1.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.861374][ T6035] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 119.055693][ T6048] netlink: 194 bytes leftover after parsing attributes in process `syz.2.23'. [ 119.292863][ T30] audit: type=1804 audit(1751835504.880:2): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.24" name="/newroot/6/file0" dev="tmpfs" ino=50 res=1 errno=0 [ 119.364857][ T30] audit: type=1800 audit(1751835504.880:3): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.24" name="file0" dev="tmpfs" ino=50 res=0 errno=0 [ 120.357048][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 121.177139][ T6079] syz.0.28 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.379640][ T6078] netlink: 194 bytes leftover after parsing attributes in process `syz.1.36'. [ 122.653353][ T6090] FAULT_INJECTION: forcing a failure. [ 122.653353][ T6090] name failslab, interval 1, probability 0, space 0, times 1 [ 122.667197][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.0.29 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 122.667241][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.667262][ T6090] Call Trace: [ 122.667273][ T6090] [ 122.667285][ T6090] dump_stack_lvl+0x16c/0x1f0 [ 122.667350][ T6090] should_fail_ex+0x512/0x640 [ 122.667397][ T6090] ? fs_reclaim_acquire+0xae/0x150 [ 122.667442][ T6090] should_failslab+0xc2/0x120 [ 122.667472][ T6090] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 122.667523][ T6090] ? security_inode_alloc+0x3b/0x2b0 [ 122.667565][ T6090] security_inode_alloc+0x3b/0x2b0 [ 122.667601][ T6090] inode_init_always_gfp+0xce4/0x1030 [ 122.667656][ T6090] alloc_inode+0x86/0x240 [ 122.667690][ T6090] new_inode+0x22/0x1c0 [ 122.667733][ T6090] tracefs_get_inode+0x19/0x80 [ 122.667771][ T6090] eventfs_get_inode+0x53/0x520 [ 122.667814][ T6090] eventfs_root_lookup+0x6f4/0xa50 [ 122.667856][ T6090] ? __pfx_eventfs_root_lookup+0x10/0x10 [ 122.667897][ T6090] ? __traverse_mounts+0x730/0x790 [ 122.667929][ T6090] ? security_inode_permission+0xbf/0x260 [ 122.667965][ T6090] ? inode_permission+0x156/0x630 [ 122.667998][ T6090] ? __pfx_eventfs_root_lookup+0x10/0x10 [ 122.668037][ T6090] lookup_open.isra.0+0x4da/0x1580 [ 122.668081][ T6090] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 122.668136][ T6090] ? __pfx_down_write+0x10/0x10 [ 122.668160][ T6090] ? mnt_get_write_access+0x20c/0x300 [ 122.668197][ T6090] path_openat+0x893/0x2cb0 [ 122.668251][ T6090] ? __pfx_path_openat+0x10/0x10 [ 122.668295][ T6090] ? __lock_acquire+0xb8a/0x1c90 [ 122.668339][ T6090] do_filp_open+0x20b/0x470 [ 122.668381][ T6090] ? __pfx_do_filp_open+0x10/0x10 [ 122.668451][ T6090] ? alloc_fd+0x471/0x7d0 [ 122.668506][ T6090] do_sys_openat2+0x11b/0x1d0 [ 122.668542][ T6090] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.668597][ T6090] __x64_sys_openat+0x174/0x210 [ 122.668635][ T6090] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.668691][ T6090] do_syscall_64+0xcd/0x490 [ 122.668747][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.668777][ T6090] RIP: 0033:0x7fdf5d58e929 [ 122.668806][ T6090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.668839][ T6090] RSP: 002b:00007fdf5e3be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.668867][ T6090] RAX: ffffffffffffffda RBX: 00007fdf5d7b5fa0 RCX: 00007fdf5d58e929 [ 122.668887][ T6090] RDX: 0000000000109041 RSI: 0000200000007380 RDI: ffffffffffffff9c [ 122.668905][ T6090] RBP: 00007fdf5d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 122.668922][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.668939][ T6090] R13: 0000000000000000 R14: 00007fdf5d7b5fa0 R15: 00007ffffb63ecd8 [ 122.668975][ T6090] [ 122.996479][ T6093] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET) [ 123.060406][ T5858] Bluetooth: hci3: unexpected event 0x17 length: 11 > 6 [ 124.642612][ T6102] mmap: syz.1.42 (6102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.161804][ T6132] block2mtd: illegal erase size [ 127.349772][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 128.965581][ T6159] FAULT_INJECTION: forcing a failure. [ 128.965581][ T6159] name fail_futex, interval 1, probability 0, space 0, times 0 [ 129.204728][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.2.45 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 129.204774][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.204792][ T6159] Call Trace: [ 129.204802][ T6159] [ 129.204813][ T6159] dump_stack_lvl+0x16c/0x1f0 [ 129.204866][ T6159] should_fail_ex+0x512/0x640 [ 129.204920][ T6159] get_futex_key+0x1d0/0x1540 [ 129.204963][ T6159] ? __pfx_get_futex_key+0x10/0x10 [ 129.205014][ T6159] futex_wake+0xe7/0x4e0 [ 129.205063][ T6159] ? __pfx_futex_wake+0x10/0x10 [ 129.205113][ T6159] ? kmem_cache_free+0x2d1/0x4d0 [ 129.205169][ T6159] ? fd_install+0x225/0x750 [ 129.205210][ T6159] ? putname+0x154/0x1a0 [ 129.205268][ T6159] do_futex+0x1e3/0x350 [ 129.205309][ T6159] ? __pfx_do_futex+0x10/0x10 [ 129.205362][ T6159] __x64_sys_futex+0x1e0/0x4c0 [ 129.205406][ T6159] ? __x64_sys_openat+0x174/0x210 [ 129.205443][ T6159] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.205498][ T6159] do_syscall_64+0xcd/0x490 [ 129.205544][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.205573][ T6159] RIP: 0033:0x7f899198e929 [ 129.205596][ T6159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.205625][ T6159] RSP: 002b:00007f898f7d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.205653][ T6159] RAX: ffffffffffffffda RBX: 00007f8991bb6088 RCX: 00007f899198e929 [ 129.205672][ T6159] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8991bb608c [ 129.205690][ T6159] RBP: 00007f8991bb6080 R08: 00007f89926ff000 R09: 0000000000000000 [ 129.205708][ T6159] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8991bb608c [ 129.205726][ T6159] R13: 0000000000000000 R14: 00007fffb7ff9340 R15: 00007fffb7ff9428 [ 129.205763][ T6159] [ 130.256495][ T6179] bond0: option all_slaves_active: invalid value () [ 132.010737][ T6191] block2mtd: illegal erase size [ 135.411068][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 141.215709][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 143.250235][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.259713][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.194593][ T6347] FAULT_INJECTION: forcing a failure. [ 146.194593][ T6347] name failslab, interval 1, probability 0, space 0, times 0 [ 146.253193][ T6347] CPU: 1 UID: 0 PID: 6347 Comm: syz.1.88 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 146.253242][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.253262][ T6347] Call Trace: [ 146.253273][ T6347] [ 146.253285][ T6347] dump_stack_lvl+0x16c/0x1f0 [ 146.253341][ T6347] should_fail_ex+0x512/0x640 [ 146.253390][ T6347] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 146.253439][ T6347] should_failslab+0xc2/0x120 [ 146.253470][ T6347] __kmalloc_cache_noprof+0x6a/0x3e0 [ 146.253525][ T6347] ? __asan_memcpy+0x3c/0x60 [ 146.253565][ T6347] ? create_filter_start.constprop.0+0x103/0x300 [ 146.253614][ T6347] create_filter_start.constprop.0+0x103/0x300 [ 146.253661][ T6347] apply_subsystem_event_filter+0x18d/0x17d0 [ 146.253712][ T6347] ? __might_fault+0xe3/0x190 [ 146.253760][ T6347] ? __might_fault+0x13b/0x190 [ 146.253808][ T6347] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 146.253860][ T6347] ? _copy_from_user+0x59/0xd0 [ 146.253927][ T6347] subsystem_filter_write+0x95/0x120 [ 146.253971][ T6347] ? __pfx_subsystem_filter_write+0x10/0x10 [ 146.254009][ T6347] vfs_write+0x2a0/0x1150 [ 146.254059][ T6347] ? __pfx___mutex_lock+0x10/0x10 [ 146.254108][ T6347] ? __pfx_vfs_write+0x10/0x10 [ 146.254166][ T6347] ? __fget_files+0x20e/0x3c0 [ 146.254223][ T6347] ksys_write+0x12a/0x250 [ 146.254269][ T6347] ? __pfx_ksys_write+0x10/0x10 [ 146.254329][ T6347] do_syscall_64+0xcd/0x490 [ 146.254381][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.254413][ T6347] RIP: 0033:0x7fb9b798e929 [ 146.254460][ T6347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.254491][ T6347] RSP: 002b:00007fb9b87eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.254523][ T6347] RAX: ffffffffffffffda RBX: 00007fb9b7bb6080 RCX: 00007fb9b798e929 [ 146.254545][ T6347] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 146.254564][ T6347] RBP: 00007fb9b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 146.254585][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.254604][ T6347] R13: 0000000000000000 R14: 00007fb9b7bb6080 R15: 00007fff6ae6df98 [ 146.254647][ T6347] [ 146.535914][ T6345] bond0: option all_slaves_active: invalid value () [ 146.920436][ T6360] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.124064][ T6362] process 'syz.2.82' launched '/dev/fd/9' with NULL argv: empty string added [ 147.208221][ T6362] FAULT_INJECTION: forcing a failure. [ 147.208221][ T6362] name failslab, interval 1, probability 0, space 0, times 0 [ 147.237775][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.2.82 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 147.237823][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.237839][ T6362] Call Trace: [ 147.237847][ T6362] [ 147.237858][ T6362] dump_stack_lvl+0x16c/0x1f0 [ 147.237906][ T6362] should_fail_ex+0x512/0x640 [ 147.237949][ T6362] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 147.237989][ T6362] should_failslab+0xc2/0x120 [ 147.238016][ T6362] __kmalloc_cache_noprof+0x6a/0x3e0 [ 147.238051][ T6362] ? lockdep_init_map_type+0x5c/0x280 [ 147.238092][ T6362] ? ip_vs_control_net_init+0x31e/0x1d20 [ 147.238132][ T6362] ? do_init_timer+0xc9/0x110 [ 147.238165][ T6362] ip_vs_control_net_init+0x31e/0x1d20 [ 147.238205][ T6362] ? debug_mutex_init+0x37/0x70 [ 147.238238][ T6362] __ip_vs_init+0x217/0x520 [ 147.238284][ T6362] ? __pfx___ip_vs_init+0x10/0x10 [ 147.238328][ T6362] ops_init+0x1df/0x5f0 [ 147.238380][ T6362] setup_net+0x1ff/0x510 [ 147.238430][ T6362] ? lockdep_init_map_type+0x5c/0x280 [ 147.238478][ T6362] ? __pfx_setup_net+0x10/0x10 [ 147.238530][ T6362] ? debug_mutex_init+0x37/0x70 [ 147.238566][ T6362] copy_net_ns+0x2a6/0x5f0 [ 147.238601][ T6362] create_new_namespaces+0x3ea/0xa90 [ 147.238646][ T6362] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 147.238686][ T6362] ksys_unshare+0x45b/0xa40 [ 147.238729][ T6362] ? __pfx_ksys_unshare+0x10/0x10 [ 147.238772][ T6362] ? xfd_validate_state+0x61/0x180 [ 147.238839][ T6362] __x64_sys_unshare+0x31/0x40 [ 147.238881][ T6362] do_syscall_64+0xcd/0x490 [ 147.238933][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.238964][ T6362] RIP: 0033:0x7f899198e929 [ 147.238988][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.239018][ T6362] RSP: 002b:00007f898f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 147.239047][ T6362] RAX: ffffffffffffffda RBX: 00007f8991bb5fa0 RCX: 00007f899198e929 [ 147.239067][ T6362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 147.239086][ T6362] RBP: 00007f8991a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 147.239104][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.239122][ T6362] R13: 0000000000000000 R14: 00007f8991bb5fa0 R15: 00007fffb7ff9428 [ 147.239162][ T6362] [ 147.477333][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.317108][ T6419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.272788][ T6427] FAULT_INJECTION: forcing a failure. [ 155.272788][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 155.329368][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.1.97 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 155.329417][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.329436][ T6427] Call Trace: [ 155.329446][ T6427] [ 155.329460][ T6427] dump_stack_lvl+0x16c/0x1f0 [ 155.329515][ T6427] should_fail_ex+0x512/0x640 [ 155.329583][ T6427] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 155.329641][ T6427] should_failslab+0xc2/0x120 [ 155.329693][ T6427] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 155.329748][ T6427] ? __pfx___register_sysctl_table+0x10/0x10 [ 155.329801][ T6427] ? is_module_address+0x69/0xf0 [ 155.329848][ T6427] ? __ip_vs_lblcr_init+0x77/0x330 [ 155.329931][ T6427] ? __pfx___ip_vs_lblcr_init+0x10/0x10 [ 155.329985][ T6427] kmemdup_noprof+0x29/0x60 [ 155.330038][ T6427] __ip_vs_lblcr_init+0x77/0x330 [ 155.330091][ T6427] ? __pfx___ip_vs_lblcr_init+0x10/0x10 [ 155.330139][ T6427] ops_init+0x1df/0x5f0 [ 155.330197][ T6427] setup_net+0x1ff/0x510 [ 155.330246][ T6427] ? lockdep_init_map_type+0x5c/0x280 [ 155.330293][ T6427] ? __pfx_setup_net+0x10/0x10 [ 155.330349][ T6427] ? debug_mutex_init+0x37/0x70 [ 155.330388][ T6427] copy_net_ns+0x2a6/0x5f0 [ 155.330424][ T6427] create_new_namespaces+0x3ea/0xa90 [ 155.330473][ T6427] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 155.330515][ T6427] ksys_unshare+0x45b/0xa40 [ 155.330567][ T6427] ? __pfx_ksys_unshare+0x10/0x10 [ 155.330613][ T6427] ? xfd_validate_state+0x61/0x180 [ 155.330670][ T6427] __x64_sys_unshare+0x31/0x40 [ 155.330715][ T6427] do_syscall_64+0xcd/0x490 [ 155.330768][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.330800][ T6427] RIP: 0033:0x7fb9b798e929 [ 155.330833][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.330865][ T6427] RSP: 002b:00007fb9b880c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 155.330897][ T6427] RAX: ffffffffffffffda RBX: 00007fb9b7bb5fa0 RCX: 00007fb9b798e929 [ 155.330933][ T6427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 155.330954][ T6427] RBP: 00007fb9b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 155.330974][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.331002][ T6427] R13: 0000000000000000 R14: 00007fb9b7bb5fa0 R15: 00007fff6ae6df98 [ 155.331044][ T6427] [ 155.594777][ T6428] FAULT_INJECTION: forcing a failure. [ 155.594777][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 155.608745][ T6428] CPU: 1 UID: 0 PID: 6428 Comm: syz.3.96 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 155.608790][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.608809][ T6428] Call Trace: [ 155.608819][ T6428] [ 155.608830][ T6428] dump_stack_lvl+0x16c/0x1f0 [ 155.608885][ T6428] should_fail_ex+0x512/0x640 [ 155.608943][ T6428] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 155.608993][ T6428] should_failslab+0xc2/0x120 [ 155.609024][ T6428] __kmalloc_cache_noprof+0x6a/0x3e0 [ 155.609070][ T6428] ? apply_subsystem_event_filter+0x323/0x17d0 [ 155.609122][ T6428] apply_subsystem_event_filter+0x323/0x17d0 [ 155.609180][ T6428] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 155.609235][ T6428] ? _copy_from_user+0x59/0xd0 [ 155.609292][ T6428] subsystem_filter_write+0x95/0x120 [ 155.609338][ T6428] ? __pfx_subsystem_filter_write+0x10/0x10 [ 155.609379][ T6428] vfs_write+0x2a0/0x1150 [ 155.609436][ T6428] ? __pfx___mutex_lock+0x10/0x10 [ 155.609500][ T6428] ? __pfx_vfs_write+0x10/0x10 [ 155.609560][ T6428] ? __fget_files+0x20e/0x3c0 [ 155.609621][ T6428] ksys_write+0x12a/0x250 [ 155.609669][ T6428] ? __pfx_ksys_write+0x10/0x10 [ 155.609731][ T6428] do_syscall_64+0xcd/0x490 [ 155.609784][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.609818][ T6428] RIP: 0033:0x7fa178d8e929 [ 155.609853][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.609916][ T6428] RSP: 002b:00007fa179b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.609946][ T6428] RAX: ffffffffffffffda RBX: 00007fa178fb6080 RCX: 00007fa178d8e929 [ 155.609969][ T6428] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 155.609989][ T6428] RBP: 00007fa178e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 155.610008][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.610027][ T6428] R13: 0000000000000000 R14: 00007fa178fb6080 R15: 00007ffca4d90358 [ 155.610072][ T6428] [ 155.815701][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.203279][ T6433] bond0: option all_slaves_active: invalid value () [ 163.691903][ T6512] bond0: option all_slaves_active: invalid value () [ 163.739159][ T6494] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 169.058948][ T6562] sp0: Synchronizing with TNC [ 169.202355][ T6562] capability: warning: `syz.0.132' uses 32-bit capabilities (legacy support in use) [ 173.261911][ T6581] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 175.773988][ T6630] FAULT_INJECTION: forcing a failure. [ 175.773988][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 175.840882][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.2.136 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 175.840930][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.840950][ T6630] Call Trace: [ 175.840961][ T6630] [ 175.840972][ T6630] dump_stack_lvl+0x16c/0x1f0 [ 175.841027][ T6630] should_fail_ex+0x512/0x640 [ 175.841076][ T6630] ? __kmalloc_noprof+0xbf/0x510 [ 175.841129][ T6630] ? ptp_open+0x103/0x520 [ 175.841165][ T6630] should_failslab+0xc2/0x120 [ 175.841196][ T6630] __kmalloc_noprof+0xd2/0x510 [ 175.841256][ T6630] ptp_open+0x103/0x520 [ 175.841302][ T6630] ? __pfx_ptp_open+0x10/0x10 [ 175.841356][ T6630] ? __pfx_ptp_open+0x10/0x10 [ 175.841404][ T6630] posix_clock_open+0x17b/0x290 [ 175.841447][ T6630] ? __pfx_posix_clock_open+0x10/0x10 [ 175.841486][ T6630] chrdev_open+0x234/0x6a0 [ 175.841536][ T6630] ? __pfx_apparmor_file_open+0x10/0x10 [ 175.841579][ T6630] ? __pfx_chrdev_open+0x10/0x10 [ 175.841634][ T6630] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 175.841688][ T6630] do_dentry_open+0x741/0x1c10 [ 175.841739][ T6630] ? __pfx_chrdev_open+0x10/0x10 [ 175.841800][ T6630] vfs_open+0x82/0x3f0 [ 175.841841][ T6630] path_openat+0x1de4/0x2cb0 [ 175.841904][ T6630] ? __pfx_path_openat+0x10/0x10 [ 175.841956][ T6630] ? __lock_acquire+0xb8a/0x1c90 [ 175.842008][ T6630] do_filp_open+0x20b/0x470 [ 175.842056][ T6630] ? __pfx_do_filp_open+0x10/0x10 [ 175.842136][ T6630] ? alloc_fd+0x471/0x7d0 [ 175.842194][ T6630] do_sys_openat2+0x11b/0x1d0 [ 175.842232][ T6630] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.842287][ T6630] __x64_sys_openat+0x174/0x210 [ 175.842326][ T6630] ? __pfx___x64_sys_openat+0x10/0x10 [ 175.842382][ T6630] do_syscall_64+0xcd/0x490 [ 175.842450][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.842485][ T6630] RIP: 0033:0x7f899198e929 [ 175.842511][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.842543][ T6630] RSP: 002b:00007f898f7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.842574][ T6630] RAX: ffffffffffffffda RBX: 00007f8991bb6080 RCX: 00007f899198e929 [ 175.842596][ T6630] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 175.842616][ T6630] RBP: 00007f8991a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 175.842635][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.842654][ T6630] R13: 0000000000000000 R14: 00007f8991bb6080 R15: 00007fffb7ff9428 [ 175.842696][ T6630] [ 177.042365][ T6650] sp0: Synchronizing with TNC [ 182.197759][ T6678] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 182.283964][ T6702] Invalid ELF header magic: != ELF [ 184.145953][ T6725] sp0: Synchronizing with TNC [ 185.913386][ T6723] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 188.405472][ T6775] sp0: Synchronizing with TNC [ 191.869120][ T6801] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 193.441367][ T6819] Invalid ELF header magic: != ELF [ 195.250985][ T6848] sp0: Synchronizing with TNC [ 201.111449][ T6892] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 202.220179][ T6920] Invalid ELF header magic: != ELF [ 202.598373][ T6929] sp0: Synchronizing with TNC [ 204.689742][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.696451][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.509671][ T6968] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 212.136004][ T7042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.487828][ T7039] Invalid ELF header magic: != ELF [ 213.123943][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 218.388614][ T7083] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 218.796592][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.219'. [ 222.193367][ T7159] Invalid ELF header magic: != ELF [ 225.416466][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 227.245719][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 227.253316][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 227.260394][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 227.269543][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 227.375914][ T7193] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 228.777272][ T7216] Invalid ELF header magic: != ELF [ 234.992838][ T7283] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 237.048297][ T7318] Invalid ELF header magic: != ELF [ 238.626167][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'. [ 241.706991][ T7373] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 244.892182][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 247.842563][ T7474] Invalid ELF header magic: != ELF [ 248.306538][ T7482] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.324862][ T7482] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 248.346844][ T7482] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.414037][ T7482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 248.614061][ T7473] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 248.626816][ T7482] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.655021][ T7482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 248.872823][ T7482] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.904689][ T7482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 249.875250][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 250.355545][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 250.674549][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 250.914849][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 251.582202][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 251.955254][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 252.434559][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 252.483456][ T7550] FAULT_INJECTION: forcing a failure. [ 252.483456][ T7550] name failslab, interval 1, probability 0, space 0, times 0 [ 252.518553][ T7550] CPU: 0 UID: 0 PID: 7550 Comm: syz.1.282 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 252.518588][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.518605][ T7550] Call Trace: [ 252.518614][ T7550] [ 252.518626][ T7550] dump_stack_lvl+0x16c/0x1f0 [ 252.518668][ T7550] should_fail_ex+0x512/0x640 [ 252.518703][ T7550] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 252.518738][ T7550] should_failslab+0xc2/0x120 [ 252.518760][ T7550] __kmalloc_cache_noprof+0x6a/0x3e0 [ 252.518793][ T7550] ? cec_open+0xdb/0x690 [ 252.518829][ T7550] cec_open+0xdb/0x690 [ 252.518869][ T7550] ? __pfx_cec_open+0x10/0x10 [ 252.518906][ T7550] ? kobject_get_unless_zero+0x156/0x1e0 [ 252.518944][ T7550] ? find_held_lock+0x2b/0x80 [ 252.518970][ T7550] ? chrdev_open+0x10b/0x6a0 [ 252.519010][ T7550] ? __pfx_cec_open+0x10/0x10 [ 252.519042][ T7550] chrdev_open+0x234/0x6a0 [ 252.519077][ T7550] ? __pfx_apparmor_file_open+0x10/0x10 [ 252.519108][ T7550] ? __pfx_chrdev_open+0x10/0x10 [ 252.519147][ T7550] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 252.519185][ T7550] do_dentry_open+0x741/0x1c10 [ 252.519220][ T7550] ? __pfx_chrdev_open+0x10/0x10 [ 252.519263][ T7550] vfs_open+0x82/0x3f0 [ 252.519291][ T7550] path_openat+0x1de4/0x2cb0 [ 252.519335][ T7550] ? __pfx_path_openat+0x10/0x10 [ 252.519371][ T7550] ? __lock_acquire+0xb8a/0x1c90 [ 252.519407][ T7550] do_filp_open+0x20b/0x470 [ 252.519441][ T7550] ? __pfx_do_filp_open+0x10/0x10 [ 252.519496][ T7550] ? alloc_fd+0x471/0x7d0 [ 252.519538][ T7550] do_sys_openat2+0x11b/0x1d0 [ 252.519564][ T7550] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.519603][ T7550] __x64_sys_openat+0x174/0x210 [ 252.519631][ T7550] ? __pfx___x64_sys_openat+0x10/0x10 [ 252.519670][ T7550] do_syscall_64+0xcd/0x490 [ 252.519708][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.519732][ T7550] RIP: 0033:0x7fb9b798e929 [ 252.519750][ T7550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.519773][ T7550] RSP: 002b:00007fb9b880c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.519800][ T7550] RAX: ffffffffffffffda RBX: 00007fb9b7bb5fa0 RCX: 00007fb9b798e929 [ 252.519818][ T7550] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 252.519837][ T7550] RBP: 00007fb9b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 252.519861][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.519881][ T7550] R13: 0000000000000000 R14: 00007fb9b7bb5fa0 R15: 00007fff6ae6df98 [ 252.519916][ T7550] [ 252.794803][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 253.047523][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 254.807602][ T7578] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 254.945647][ T7578] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 254.945647][ T7578] program syz.3.286 not setting count and/or reply_len properly [ 255.184337][ T7573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.193402][ T7573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.204836][ T7573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.213458][ T7573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.351683][ T7566] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 256.674562][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 256.802372][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 257.042555][ T7600] Invalid ELF header magic: != ELF [ 257.235710][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 257.241742][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 257.241861][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 259.556278][ T7629] FAULT_INJECTION: forcing a failure. [ 259.556278][ T7629] name failslab, interval 1, probability 0, space 0, times 0 [ 259.612215][ T7627] Invalid ELF header magic: != ELF [ 259.621785][ T7629] CPU: 0 UID: 0 PID: 7629 Comm: syz.2.295 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 259.621831][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.621850][ T7629] Call Trace: [ 259.621861][ T7629] [ 259.621873][ T7629] dump_stack_lvl+0x16c/0x1f0 [ 259.621930][ T7629] should_fail_ex+0x512/0x640 [ 259.621978][ T7629] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 259.622028][ T7629] should_failslab+0xc2/0x120 [ 259.622086][ T7629] __kmalloc_cache_noprof+0x6a/0x3e0 [ 259.622133][ T7629] ? cec_open+0xdb/0x690 [ 259.622187][ T7629] cec_open+0xdb/0x690 [ 259.622235][ T7629] ? __pfx_cec_open+0x10/0x10 [ 259.622288][ T7629] ? kobject_get_unless_zero+0x156/0x1e0 [ 259.622341][ T7629] ? find_held_lock+0x2b/0x80 [ 259.622377][ T7629] ? chrdev_open+0x10b/0x6a0 [ 259.622434][ T7629] ? __pfx_cec_open+0x10/0x10 [ 259.622479][ T7629] chrdev_open+0x234/0x6a0 [ 259.622530][ T7629] ? __pfx_apparmor_file_open+0x10/0x10 [ 259.622574][ T7629] ? __pfx_chrdev_open+0x10/0x10 [ 259.622629][ T7629] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 259.622682][ T7629] do_dentry_open+0x741/0x1c10 [ 259.622734][ T7629] ? __pfx_chrdev_open+0x10/0x10 [ 259.622795][ T7629] vfs_open+0x82/0x3f0 [ 259.622837][ T7629] path_openat+0x1de4/0x2cb0 [ 259.622900][ T7629] ? __pfx_path_openat+0x10/0x10 [ 259.622951][ T7629] ? __lock_acquire+0xb8a/0x1c90 [ 259.623002][ T7629] do_filp_open+0x20b/0x470 [ 259.623059][ T7629] ? __pfx_do_filp_open+0x10/0x10 [ 259.623139][ T7629] ? alloc_fd+0x471/0x7d0 [ 259.623196][ T7629] do_sys_openat2+0x11b/0x1d0 [ 259.623233][ T7629] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.623287][ T7629] __x64_sys_openat+0x174/0x210 [ 259.623326][ T7629] ? __pfx___x64_sys_openat+0x10/0x10 [ 259.623383][ T7629] do_syscall_64+0xcd/0x490 [ 259.623437][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.623470][ T7629] RIP: 0033:0x7f899198e929 [ 259.623497][ T7629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.623528][ T7629] RSP: 002b:00007f898f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.623559][ T7629] RAX: ffffffffffffffda RBX: 00007f8991bb5fa0 RCX: 00007f899198e929 [ 259.623581][ T7629] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 259.623602][ T7629] RBP: 00007f8991a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.623622][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.623641][ T7629] R13: 0000000000000000 R14: 00007f8991bb5fa0 R15: 00007fffb7ff9428 [ 259.623683][ T7629] [ 259.681985][ T7631] netlink: 330 bytes leftover after parsing attributes in process `syz.0.303'. [ 260.858330][ T7645] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 261.426200][ T7645] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 261.426200][ T7645] program syz.0.298 not setting count and/or reply_len properly [ 262.274093][ T7660] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 262.510407][ T7659] FAULT_INJECTION: forcing a failure. [ 262.510407][ T7659] name fail_futex, interval 1, probability 0, space 0, times 0 [ 262.523808][ T7659] CPU: 1 UID: 2054 PID: 7659 Comm: syz.0.301 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 262.523856][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.523876][ T7659] Call Trace: [ 262.523887][ T7659] [ 262.523899][ T7659] dump_stack_lvl+0x16c/0x1f0 [ 262.523954][ T7659] should_fail_ex+0x512/0x640 [ 262.524001][ T7659] ? kasan_save_stack+0x33/0x60 [ 262.524055][ T7659] get_futex_key+0x1d0/0x1540 [ 262.524100][ T7659] ? __pfx_get_futex_key+0x10/0x10 [ 262.524163][ T7659] futex_wait_setup+0x84/0x510 [ 262.524220][ T7659] __futex_wait+0x194/0x2f0 [ 262.524270][ T7659] ? __pfx___futex_wait+0x10/0x10 [ 262.524324][ T7659] ? __pfx_futex_wake_mark+0x10/0x10 [ 262.524376][ T7659] ? tomoyo_path_number_perm+0x295/0x580 [ 262.524428][ T7659] ? __futex_hash.constprop.0+0x1e9/0x440 [ 262.524470][ T7659] futex_wait+0xe8/0x380 [ 262.524518][ T7659] ? __pfx_futex_wait+0x10/0x10 [ 262.524589][ T7659] do_futex+0x229/0x350 [ 262.524630][ T7659] ? __pfx_do_futex+0x10/0x10 [ 262.524673][ T7659] ? find_held_lock+0x2b/0x80 [ 262.524711][ T7659] __x64_sys_futex+0x1e0/0x4c0 [ 262.524754][ T7659] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.524805][ T7659] ? __pfx___x64_sys_futex+0x10/0x10 [ 262.524847][ T7659] ? syscall_user_dispatch+0x78/0x140 [ 262.524903][ T7659] ? fput+0x70/0xf0 [ 262.524940][ T7659] do_syscall_64+0xcd/0x490 [ 262.524993][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.525025][ T7659] RIP: 0033:0x7fdf5d58e929 [ 262.525050][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.525080][ T7659] RSP: 002b:00007fdf5e3be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 262.525116][ T7659] RAX: ffffffffffffffda RBX: 00007fdf5d7b5fa8 RCX: 00007fdf5d58e929 [ 262.525138][ T7659] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf5d7b5fa8 [ 262.525159][ T7659] RBP: 00007fdf5d7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 262.525179][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf5d7b5fac [ 262.525199][ T7659] R13: 0000000000000000 R14: 00007ffffb63ebf0 R15: 00007ffffb63ecd8 [ 262.525241][ T7659] syzkaller syzkaller login: [ 264.059626][ T7679] [U] [ 264.062687][ T7679] [U] [ 264.065462][ T7679] [U] [ 264.068229][ T7679] [U] [ 264.121102][ T7679] [U] [ 264.124004][ T7679] [U] [ 264.126770][ T7679] [U] [ 264.129535][ T7679] [U] [ 264.184595][ T7679] [U] [ 264.187411][ T7679] [U] [ 264.190176][ T7679] [U] [ 264.192942][ T7679] [U] [ 264.223631][ T7679] [U] [ 264.226450][ T7679] [U] [ 264.229228][ T7679] [U] [ 264.231990][ T7679] [U] [ 264.251947][ T7679] [U] [ 264.254775][ T7679] [U] [ 264.257550][ T7679] [U] [ 264.260402][ T7679] [U] [ 264.297543][ T7679] [U] [ 264.300350][ T7679] [U] [ 264.303115][ T7679] [U] [ 264.305879][ T7679] [U] [ 264.336000][ T7679] [U] [ 264.338813][ T7679] [U] [ 264.341580][ T7679] [U] [ 264.344351][ T7679] [U] [ 264.374722][ T7679] [U] [ 264.377531][ T7679] [U] [ 264.380299][ T7679] [U] [ 264.383078][ T7679] [U] [ 264.456848][ T7679] [U] [ 264.459765][ T7679] [U] [ 264.462543][ T7679] [U] [ 264.465281][ T7679] [U] [ 264.484759][ T7679] [U] [ 264.487552][ T7679] [U] [ 264.490272][ T7679] [U] [ 264.493007][ T7679] [U] [ 264.503871][ T7679] [U] [ 264.506639][ T7679] [U] [ 264.509358][ T7679] [U] [ 264.512072][ T7679] [U] [ 264.537969][ T7679] [U] [ 264.540756][ T7679] [U] [ 264.543514][ T7679] [U] [ 264.546228][ T7679] [U] [ 264.789398][ T7691] [U] [ 266.122675][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.129219][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.605864][ T7703] Invalid ELF header magic: != ELF [ 268.857232][ T7736] Invalid ELF header magic: != ELF [ 269.160257][ T7736] netlink: 330 bytes leftover after parsing attributes in process `syz.3.314'. [ 270.173949][ T7742] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 275.534957][ T7811] [U] [ 275.537716][ T7811] [U] [ 275.540431][ T7811] [U] [ 275.543155][ T7811] [U] [ 275.596955][ T7809] Invalid ELF header magic: != ELF [ 275.627796][ T7811] [U] [ 275.630559][ T7811] [U] [ 275.633315][ T7811] [U] [ 275.636091][ T7811] [U] [ 275.674571][ T7811] [U] [ 275.677349][ T7811] [U] [ 275.680065][ T7811] [U] [ 275.682792][ T7811] [U] [ 275.755328][ T7811] [U] [ 275.758155][ T7811] [U] [ 275.760940][ T7811] [U] [ 275.763712][ T7811] [U] [ 275.766862][ T7811] [U] [ 275.769633][ T7811] [U] [ 275.772387][ T7811] [U] [ 275.775153][ T7811] [U] [ 275.778383][ T7811] [U] [ 275.781172][ T7811] [U] [ 275.783936][ T7811] [U] [ 275.786702][ T7811] [U] [ 275.789863][ T7811] [U] [ 275.792627][ T7811] [U] [ 275.795410][ T7811] [U] [ 275.798186][ T7811] [U] [ 275.807111][ T7811] [U] [ 275.809895][ T7811] [U] [ 275.812664][ T7811] [U] [ 275.815516][ T7811] [U] [ 275.820913][ T7811] [U] [ 275.823688][ T7811] [U] [ 275.826422][ T7811] [U] [ 275.829140][ T7811] [U] [ 275.836888][ T7811] [U] [ 275.839664][ T7811] [U] [ 275.842414][ T7811] [U] [ 275.845166][ T7811] [U] [ 275.916275][ T7809] netlink: 330 bytes leftover after parsing attributes in process `syz.2.329'. [ 275.925948][ T7811] [U] [ 275.928737][ T7811] [U] [ 275.931508][ T7811] [U] [ 275.934272][ T7811] [U] [ 275.950593][ T7811] [U] [ 275.953353][ T7811] [U] [ 275.956138][ T7811] [U] [ 275.958904][ T7811] [U] [ 276.051830][ T7811] [U] [ 276.054653][ T7811] [U] [ 276.057428][ T7811] [U] [ 276.060197][ T7811] [U] [ 276.172430][ T7816] [U] [ 281.498990][ T7872] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 281.673194][ T7879] Invalid ELF header magic: != ELF [ 281.683152][ T7885] program syz.2.340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.753082][ T7885] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 282.087282][ T7879] netlink: 330 bytes leftover after parsing attributes in process `syz.1.339'. [ 282.711063][ T7895] random: crng reseeded on system resumption syzkaller syzkaller login: [ 287.297880][ T7954] Invalid ELF header magic: != ELF [ 287.476272][ T7939] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 287.624311][ T7958] FAULT_INJECTION: forcing a failure. [ 287.624311][ T7958] name fail_futex, interval 1, probability 0, space 0, times 0 [ 287.874542][ T7958] CPU: 0 UID: 2054 PID: 7958 Comm: syz.1.356 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 287.874588][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.874607][ T7958] Call Trace: [ 287.874618][ T7958] [ 287.874630][ T7958] dump_stack_lvl+0x16c/0x1f0 [ 287.874685][ T7958] should_fail_ex+0x512/0x640 [ 287.874739][ T7958] get_futex_key+0x1d0/0x1540 [ 287.874783][ T7958] ? __pfx_get_futex_key+0x10/0x10 [ 287.874843][ T7958] ? key_put+0x54/0x2c0 [ 287.874892][ T7958] futex_wake+0xe7/0x4e0 [ 287.874950][ T7958] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 287.875004][ T7958] ? __pfx_futex_wake+0x10/0x10 [ 287.875061][ T7958] ? __pfx___might_resched+0x10/0x10 [ 287.875104][ T7958] do_futex+0x1e3/0x350 [ 287.875144][ T7958] ? __pfx_do_futex+0x10/0x10 [ 287.875185][ T7958] ? up_write+0x1b2/0x520 [ 287.875240][ T7958] __x64_sys_futex+0x1e0/0x4c0 [ 287.875283][ T7958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.875332][ T7958] ? __pfx___x64_sys_futex+0x10/0x10 [ 287.875375][ T7958] ? syscall_user_dispatch+0x78/0x140 [ 287.875429][ T7958] ? keyctl_keyring_clear+0xb8/0x1a0 [ 287.875467][ T7958] do_syscall_64+0xcd/0x490 [ 287.875518][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.875551][ T7958] RIP: 0033:0x7fb9b798e929 [ 287.875575][ T7958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.875606][ T7958] RSP: 002b:00007fb9b880c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.875636][ T7958] RAX: ffffffffffffffda RBX: 00007fb9b7bb5fa8 RCX: 00007fb9b798e929 [ 287.875657][ T7958] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9b7bb5fac [ 287.875677][ T7958] RBP: 00007fb9b7bb5fa0 R08: 00007fb9b880d000 R09: 0000000000000000 [ 287.875696][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb9b7bb5fac [ 287.875715][ T7958] R13: 0000000000000000 R14: 00007fff6ae6deb0 R15: 00007fff6ae6df98 [ 287.875756][ T7958] [ 288.639358][ T7962] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 288.856609][ T7972] FAULT_INJECTION: forcing a failure. [ 288.856609][ T7972] name failslab, interval 1, probability 0, space 0, times 0 [ 288.925702][ T7972] CPU: 1 UID: 0 PID: 7972 Comm: syz.2.360 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 288.925751][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.925771][ T7972] Call Trace: [ 288.925782][ T7972] [ 288.925796][ T7972] dump_stack_lvl+0x16c/0x1f0 [ 288.925852][ T7972] should_fail_ex+0x512/0x640 [ 288.925901][ T7972] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 288.925964][ T7972] should_failslab+0xc2/0x120 [ 288.925997][ T7972] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 288.926047][ T7972] ? __proc_create+0xc3/0x8c0 [ 288.926099][ T7972] ? __proc_create+0x2ce/0x8c0 [ 288.926155][ T7972] __proc_create+0x2ce/0x8c0 [ 288.926209][ T7972] ? __pfx___proc_create+0x10/0x10 [ 288.926268][ T7972] ? _raw_write_unlock+0x28/0x50 [ 288.926313][ T7972] ? proc_register+0x314/0x5f0 [ 288.926371][ T7972] proc_create_reg+0x7d/0x180 [ 288.926406][ T7972] proc_create_net_data+0x8e/0x1b0 [ 288.926462][ T7972] ? __pfx_proc_create_net_data+0x10/0x10 [ 288.926531][ T7972] nfs_fs_proc_net_init+0x141/0x1e0 [ 288.926577][ T7972] nfs_net_init+0x130/0x340 [ 288.926617][ T7972] ? __pfx_nfs_net_init+0x10/0x10 [ 288.926656][ T7972] ops_init+0x1df/0x5f0 [ 288.926713][ T7972] setup_net+0x1ff/0x510 [ 288.926763][ T7972] ? lockdep_init_map_type+0x5c/0x280 [ 288.926812][ T7972] ? __pfx_setup_net+0x10/0x10 [ 288.926868][ T7972] ? debug_mutex_init+0x37/0x70 [ 288.926906][ T7972] copy_net_ns+0x2a6/0x5f0 [ 288.926951][ T7972] create_new_namespaces+0x3ea/0xa90 [ 288.927000][ T7972] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 288.927043][ T7972] ksys_unshare+0x45b/0xa40 [ 288.927091][ T7972] ? __pfx_ksys_unshare+0x10/0x10 [ 288.927139][ T7972] ? xfd_validate_state+0x61/0x180 [ 288.927197][ T7972] __x64_sys_unshare+0x31/0x40 [ 288.927243][ T7972] do_syscall_64+0xcd/0x490 [ 288.927296][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.927329][ T7972] RIP: 0033:0x7f899198e929 [ 288.927356][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.927389][ T7972] RSP: 002b:00007f898f7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 288.927421][ T7972] RAX: ffffffffffffffda RBX: 00007f8991bb6080 RCX: 00007f899198e929 [ 288.927443][ T7972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 288.927463][ T7972] RBP: 00007f8991a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 288.927483][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.927502][ T7972] R13: 0000000000000000 R14: 00007f8991bb6080 R15: 00007fffb7ff9428 [ 288.927546][ T7972] [ 289.684357][ T7980] FAULT_INJECTION: forcing a failure. [ 289.684357][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 289.697372][ T7980] CPU: 0 UID: 0 PID: 7980 Comm: syz.0.361 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 289.697403][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.697416][ T7980] Call Trace: [ 289.697424][ T7980] [ 289.697432][ T7980] dump_stack_lvl+0x16c/0x1f0 [ 289.697471][ T7980] should_fail_ex+0x512/0x640 [ 289.697504][ T7980] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 289.697543][ T7980] should_failslab+0xc2/0x120 [ 289.697564][ T7980] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 289.697601][ T7980] ? __d_alloc+0x31/0xaa0 [ 289.697640][ T7980] __d_alloc+0x31/0xaa0 [ 289.697679][ T7980] d_alloc+0x4a/0x1e0 [ 289.697715][ T7980] d_alloc_parallel+0xe3/0x12e0 [ 289.697750][ T7980] ? find_held_lock+0x2b/0x80 [ 289.697775][ T7980] ? __pfx_d_alloc_parallel+0x10/0x10 [ 289.697831][ T7980] ? __d_lookup+0x266/0x4a0 [ 289.697865][ T7980] lookup_open.isra.0+0x665/0x1580 [ 289.697902][ T7980] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 289.697951][ T7980] ? lookup_fast+0x156/0x610 [ 289.697985][ T7980] path_openat+0x893/0x2cb0 [ 289.698025][ T7980] ? trace_kmem_cache_alloc+0x28/0xc0 [ 289.698049][ T7980] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 289.698085][ T7980] ? __pfx_path_openat+0x10/0x10 [ 289.698120][ T7980] ? __asan_memcpy+0x3c/0x60 [ 289.698155][ T7980] do_file_open_root+0x322/0x610 [ 289.698193][ T7980] ? __pfx_do_file_open_root+0x10/0x10 [ 289.698257][ T7980] ? vsnprintf+0x318/0x1160 [ 289.698292][ T7980] file_open_root+0x2a7/0x450 [ 289.698329][ T7980] ? __pfx_file_open_root+0x10/0x10 [ 289.698362][ T7980] ? find_held_lock+0x2b/0x80 [ 289.698388][ T7980] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 289.698421][ T7980] kernel_read_file_from_path_initns+0x189/0x260 [ 289.698450][ T7980] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 289.698486][ T7980] _request_firmware+0x744/0x1470 [ 289.698530][ T7980] ? __pfx__request_firmware+0x10/0x10 [ 289.698561][ T7980] ? __pfx_netdev_run_todo+0x10/0x10 [ 289.698599][ T7980] ? __pfx___mutex_lock+0x10/0x10 [ 289.698643][ T7980] request_firmware+0x35/0x50 [ 289.698674][ T7980] reg_reload_regdb+0x89/0x460 [ 289.698703][ T7980] ? __pfx_reg_reload_regdb+0x10/0x10 [ 289.698732][ T7980] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 289.698765][ T7980] ? nl80211_pre_doit+0x1b0/0xb10 [ 289.698811][ T7980] genl_family_rcv_msg_doit+0x206/0x2f0 [ 289.698843][ T7980] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 289.698871][ T7980] ? rcu_is_watching+0x12/0xc0 [ 289.698906][ T7980] ? bpf_lsm_capable+0x9/0x10 [ 289.698934][ T7980] ? security_capable+0x7e/0x260 [ 289.698963][ T7980] genl_rcv_msg+0x55c/0x800 [ 289.699000][ T7980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.699029][ T7980] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 289.699062][ T7980] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 289.699086][ T7980] ? __pfx_nl80211_post_doit+0x10/0x10 [ 289.699131][ T7980] netlink_rcv_skb+0x155/0x420 [ 289.699156][ T7980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.699185][ T7980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.699222][ T7980] ? netlink_deliver_tap+0x1ae/0xd30 [ 289.699265][ T7980] genl_rcv+0x28/0x40 [ 289.699289][ T7980] netlink_unicast+0x53a/0x7f0 [ 289.699316][ T7980] ? __pfx_netlink_unicast+0x10/0x10 [ 289.699348][ T7980] netlink_sendmsg+0x8d1/0xdd0 [ 289.699377][ T7980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.699413][ T7980] ____sys_sendmsg+0xa98/0xc70 [ 289.699440][ T7980] ? copy_msghdr_from_user+0x10a/0x160 [ 289.699474][ T7980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.699507][ T7980] ? __pfx_futex_wake_mark+0x10/0x10 [ 289.699546][ T7980] ___sys_sendmsg+0x134/0x1d0 [ 289.699583][ T7980] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.699615][ T7980] ? __lock_acquire+0x622/0x1c90 [ 289.699684][ T7980] __sys_sendmsg+0x16d/0x220 [ 289.699719][ T7980] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.699754][ T7980] ? __x64_sys_futex+0x1e0/0x4c0 [ 289.699825][ T7980] do_syscall_64+0xcd/0x490 [ 289.699864][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.699888][ T7980] RIP: 0033:0x7fdf5d58e929 [ 289.699907][ T7980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.699929][ T7980] RSP: 002b:00007fdf5e3be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.699951][ T7980] RAX: ffffffffffffffda RBX: 00007fdf5d7b5fa0 RCX: 00007fdf5d58e929 [ 289.699967][ T7980] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 289.699987][ T7980] RBP: 00007fdf5d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 289.700005][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.700024][ T7980] R13: 0000000000000000 R14: 00007fdf5d7b5fa0 R15: 00007ffffb63ecd8 [ 289.700065][ T7980] [ 289.700211][ T7980] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 290.263721][ T7980] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 290.339460][ T7980] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 293.242669][ T8012] Invalid ELF header magic: != ELF [ 293.456119][ T8012] netlink: 330 bytes leftover after parsing attributes in process `syz.0.368'. syzkaller syzkaller login: [ 295.648095][ T8021] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 297.388682][ T8034] x86/mm: Checked W+X mappings: passed, no W+X pages found. syzkaller syzkaller login: [ 305.036606][ T8122] FAULT_INJECTION: forcing a failure. [ 305.036606][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 305.049870][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.0.388 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 305.049911][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.049942][ T8122] Call Trace: [ 305.049952][ T8122] [ 305.049963][ T8122] dump_stack_lvl+0x16c/0x1f0 [ 305.050011][ T8122] should_fail_ex+0x512/0x640 [ 305.050055][ T8122] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 305.050103][ T8122] should_failslab+0xc2/0x120 [ 305.050130][ T8122] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 305.050174][ T8122] ? getname_kernel+0x52/0x370 [ 305.050206][ T8122] getname_kernel+0x52/0x370 [ 305.050235][ T8122] kern_path+0x1d/0x50 [ 305.050272][ T8122] tomoyo_realpath_nofollow+0x87/0xf0 [ 305.050312][ T8122] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 305.050350][ T8122] ? tomoyo_domain+0xbb/0x150 [ 305.050395][ T8122] ? tomoyo_init_request_info+0x101/0x370 [ 305.050427][ T8122] tomoyo_find_next_domain+0x2a8/0x20b0 [ 305.050471][ T8122] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 305.050521][ T8122] tomoyo_bprm_check_security+0x12e/0x1d0 [ 305.050573][ T8122] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 305.050628][ T8122] security_bprm_check+0x1b9/0x1e0 [ 305.050693][ T8122] bprm_execve+0x810/0x1650 [ 305.050748][ T8122] ? __pfx_bprm_execve+0x10/0x10 [ 305.050792][ T8122] ? copy_string_kernel+0x444/0x510 [ 305.050846][ T8122] do_execveat_common.isra.0+0x4a5/0x610 [ 305.050903][ T8122] __x64_sys_execve+0x8e/0xb0 [ 305.050952][ T8122] do_syscall_64+0xcd/0x490 [ 305.051006][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.051039][ T8122] RIP: 0033:0x7fdf5d58e929 [ 305.051066][ T8122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.051098][ T8122] RSP: 002b:00007fdf5e39d038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 305.051129][ T8122] RAX: ffffffffffffffda RBX: 00007fdf5d7b6080 RCX: 00007fdf5d58e929 [ 305.051151][ T8122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 305.051171][ T8122] RBP: 00007fdf5d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 305.051191][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.051211][ T8122] R13: 0000000000000000 R14: 00007fdf5d7b6080 R15: 00007ffffb63ecd8 [ 305.051254][ T8122] [ 312.125662][ T8173] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 312.392818][ T8188] FAULT_INJECTION: forcing a failure. [ 312.392818][ T8188] name failslab, interval 1, probability 0, space 0, times 0 [ 312.405748][ T8188] CPU: 0 UID: 0 PID: 8188 Comm: syz.1.400 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 312.405780][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.405795][ T8188] Call Trace: [ 312.405802][ T8188] [ 312.405811][ T8188] dump_stack_lvl+0x16c/0x1f0 [ 312.405851][ T8188] should_fail_ex+0x512/0x640 [ 312.405885][ T8188] ? fs_reclaim_acquire+0xae/0x150 [ 312.405916][ T8188] should_failslab+0xc2/0x120 [ 312.405938][ T8188] __kmalloc_cache_noprof+0x6a/0x3e0 [ 312.405971][ T8188] ? tomoyo_find_next_domain+0x145/0x20b0 [ 312.405996][ T8188] ? kasan_save_track+0x14/0x30 [ 312.406034][ T8188] tomoyo_find_next_domain+0x145/0x20b0 [ 312.406070][ T8188] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 312.406117][ T8188] tomoyo_bprm_check_security+0x12e/0x1d0 [ 312.406157][ T8188] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 312.406198][ T8188] security_bprm_check+0x1b9/0x1e0 [ 312.406221][ T8188] bprm_execve+0x810/0x1650 [ 312.406259][ T8188] ? __pfx_bprm_execve+0x10/0x10 [ 312.406289][ T8188] ? copy_string_kernel+0x444/0x510 [ 312.406327][ T8188] do_execveat_common.isra.0+0x4a5/0x610 [ 312.406367][ T8188] __x64_sys_execve+0x8e/0xb0 [ 312.406400][ T8188] do_syscall_64+0xcd/0x490 [ 312.406438][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.406462][ T8188] RIP: 0033:0x7fb9b798e929 [ 312.406480][ T8188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.406502][ T8188] RSP: 002b:00007fb9b87eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 312.406524][ T8188] RAX: ffffffffffffffda RBX: 00007fb9b7bb6080 RCX: 00007fb9b798e929 [ 312.406540][ T8188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 312.406554][ T8188] RBP: 00007fb9b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 312.406568][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.406582][ T8188] R13: 0000000000000000 R14: 00007fb9b7bb6080 R15: 00007fff6ae6df98 [ 312.406611][ T8188] [ 314.177265][ T8204] can: request_module (can-proto-3) failed. [ 315.137168][ T8217] FAULT_INJECTION: forcing a failure. [ 315.137168][ T8217] name failslab, interval 1, probability 0, space 0, times 0 [ 315.297319][ T8217] CPU: 0 UID: 0 PID: 8217 Comm: syz.3.416 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 315.297373][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.297394][ T8217] Call Trace: [ 315.297405][ T8217] [ 315.297418][ T8217] dump_stack_lvl+0x16c/0x1f0 [ 315.297464][ T8217] should_fail_ex+0x512/0x640 [ 315.297499][ T8217] ? fs_reclaim_acquire+0xae/0x150 [ 315.297530][ T8217] should_failslab+0xc2/0x120 [ 315.297552][ T8217] __kmalloc_cache_noprof+0x6a/0x3e0 [ 315.297585][ T8217] ? tomoyo_find_next_domain+0x145/0x20b0 [ 315.297609][ T8217] ? kasan_save_track+0x14/0x30 [ 315.297647][ T8217] tomoyo_find_next_domain+0x145/0x20b0 [ 315.297683][ T8217] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 315.297720][ T8217] tomoyo_bprm_check_security+0x12e/0x1d0 [ 315.297758][ T8217] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 315.297798][ T8217] security_bprm_check+0x1b9/0x1e0 [ 315.297822][ T8217] bprm_execve+0x810/0x1650 [ 315.297875][ T8217] ? __pfx_bprm_execve+0x10/0x10 [ 315.297906][ T8217] ? copy_string_kernel+0x444/0x510 [ 315.297953][ T8217] do_execveat_common.isra.0+0x4a5/0x610 [ 315.297993][ T8217] __x64_sys_execve+0x8e/0xb0 [ 315.298027][ T8217] do_syscall_64+0xcd/0x490 [ 315.298065][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.298089][ T8217] RIP: 0033:0x7fa178d8e929 [ 315.298107][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.298130][ T8217] RSP: 002b:00007fa179b10038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 315.298151][ T8217] RAX: ffffffffffffffda RBX: 00007fa178fb6080 RCX: 00007fa178d8e929 [ 315.298167][ T8217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 315.298181][ T8217] RBP: 00007fa178e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 315.298196][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.298210][ T8217] R13: 0000000000000000 R14: 00007fa178fb6080 R15: 00007ffca4d90358 [ 315.298239][ T8217] [ 322.594206][ T8275] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 326.735520][ T8345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 326.829697][ T8345] netlink: 93 bytes leftover after parsing attributes in process `syz.2.431'. [ 326.842937][ T8348] QAT: Invalid ioctl 21531 [ 327.571335][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.577826][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.703351][ T8380] vhci_hcd: invalid port number 16 [ 329.711521][ T8380] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 332.927874][ T8414] random: crng reseeded on system resumption [ 332.985953][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 336.253834][ T8433] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 342.604786][ T8542] random: crng reseeded on system resumption [ 344.795252][ T8557] syz.1.469: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 344.902611][ T8564] loop6: detected capacity change from 0 to 8192 [ 344.909496][ T8557] CPU: 1 UID: 0 PID: 8557 Comm: syz.1.469 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 344.909542][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.909562][ T8557] Call Trace: [ 344.909572][ T8557] [ 344.909584][ T8557] dump_stack_lvl+0x16c/0x1f0 [ 344.909638][ T8557] warn_alloc+0x248/0x3a0 [ 344.909706][ T8557] ? __pfx_warn_alloc+0x10/0x10 [ 344.909767][ T8557] ? alloc_pages_mpol+0x25a/0x550 [ 344.909805][ T8557] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 344.909860][ T8557] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 344.909923][ T8557] ? kernel_clone+0xfc/0x960 [ 344.909981][ T8557] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.910045][ T8557] ? kernel_clone+0xfc/0x960 [ 344.910089][ T8557] __vmalloc_node_noprof+0xad/0xf0 [ 344.910135][ T8557] ? kernel_clone+0xfc/0x960 [ 344.910186][ T8557] copy_process+0x2c70/0x7650 [ 344.910232][ T8557] ? preempt_schedule_thunk+0x16/0x30 [ 344.910297][ T8557] ? __pfx_copy_process+0x10/0x10 [ 344.910345][ T8557] ? find_held_lock+0x2b/0x80 [ 344.910389][ T8557] ? wake_up_q+0xb0/0x160 [ 344.910421][ T8557] ? do_raw_spin_unlock+0x172/0x230 [ 344.910488][ T8557] kernel_clone+0xfc/0x960 [ 344.910539][ T8557] ? __pfx_futex_wake+0x10/0x10 [ 344.910591][ T8557] ? __pfx_kernel_clone+0x10/0x10 [ 344.910662][ T8557] __do_sys_clone+0xce/0x120 [ 344.910715][ T8557] ? __pfx___do_sys_clone+0x10/0x10 [ 344.910784][ T8557] ? xfd_validate_state+0x61/0x180 [ 344.910849][ T8557] do_syscall_64+0xcd/0x490 [ 344.910910][ T8557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.910946][ T8557] RIP: 0033:0x7fb9b798e929 [ 344.910974][ T8557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.911010][ T8557] RSP: 002b:00007fb9b87eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 344.911042][ T8557] RAX: ffffffffffffffda RBX: 00007fb9b7bb6080 RCX: 00007fb9b798e929 [ 344.911066][ T8557] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 344.911089][ T8557] RBP: 00007fb9b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 344.911111][ T8557] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 344.911134][ T8557] R13: 0000000000000000 R14: 00007fb9b7bb6080 R15: 00007fff6ae6df98 [ 344.911182][ T8557] [ 344.912387][ T8557] Mem-Info: [ 345.278319][ T8557] active_anon:10623 inactive_anon:0 isolated_anon:5 [ 345.278319][ T8557] active_file:8397 inactive_file:40648 isolated_file:0 [ 345.278319][ T8557] unevictable:1601 dirty:519 writeback:0 [ 345.278319][ T8557] slab_reclaimable:10098 slab_unreclaimable:95079 [ 345.278319][ T8557] mapped:26859 shmem:1888 pagetables:1053 [ 345.278319][ T8557] sec_pagetables:0 bounce:0 [ 345.278319][ T8557] kernel_misc_reclaimable:0 [ 345.278319][ T8557] free:1328328 free_pcp:13997 free_cma:0 [ 345.477674][ T8557] Node 0 active_anon:43292kB inactive_anon:0kB active_file:33588kB inactive_file:164288kB unevictable:1668kB isolated(anon):20kB isolated(file):0kB mapped:99216kB dirty:2072kB writeback:0kB shmem:6016kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11428kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 345.547925][ T8557] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 345.590229][ T8557] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.636449][ T8557] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 345.642340][ T8557] Node 0 DMA32 free:1394640kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41116kB inactive_anon:0kB active_file:33588kB inactive_file:162980kB unevictable:1468kB writepending:2072kB present:3129332kB managed:2540356kB mlocked:0kB bounce:0kB free_pcp:42720kB local_pcp:22416kB free_cma:0kB [ 345.698459][ T8557] lowmem_reserve[]: 0 0 1 1 1 [ 345.703321][ T8557] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 345.734200][ T8557] lowmem_reserve[]: 0 0 0 0 0 [ 345.751575][ T8557] Node 1 Normal free:3906976kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12448kB local_pcp:3680kB free_cma:0kB [ 345.784300][ T8557] lowmem_reserve[]: 0 0 0 0 0 [ 345.792548][ T8557] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.807877][ T8557] Node 0 DMA32: 1001*4kB (UME) 812*8kB (UME) 470*16kB (UME) 764*32kB (UME) 607*64kB (UME) 146*128kB (UME) 81*256kB (UME) 32*512kB (UM) 18*1024kB (UME) 5*2048kB (UM) 300*4096kB (M) = 1394596kB [ 345.827833][ T8557] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 345.840668][ T8557] Node 1 Normal: 178*4kB (UME) 43*8kB (UME) 36*16kB (UME) 170*32kB (UME) 60*64kB (UME) 12*128kB (UME) 7*256kB (UME) 1*512kB (M) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3906976kB [ 345.862137][ T8557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.872192][ T8557] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.882537][ T8557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.892500][ T8557] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.902276][ T8557] 50868 total pagecache pages [ 345.907081][ T8557] 0 pages in swap cache [ 345.911297][ T8557] Free swap = 124996kB [ 345.915820][ T8557] Total swap = 124996kB [ 345.920035][ T8557] 2097051 pages RAM [ 345.923884][ T8557] 0 pages HighMem/MovableOnly [ 345.929243][ T8557] 429984 pages reserved [ 345.933453][ T8557] 0 pages cma reserved [ 346.185645][ T8576] vhci_hcd: invalid port number 16 [ 346.204463][ T8576] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 346.280022][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.474'. [ 346.296000][ T8573] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 349.191164][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 349.263472][ T8611] netlink: 354 bytes leftover after parsing attributes in process `syz.0.478'. [ 350.998231][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.485'. [ 351.035019][ T8637] geneve1: entered promiscuous mode [ 351.040322][ T8637] geneve1: entered allmulticast mode [ 351.080548][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.485'. [ 351.443640][ T8644] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 351.656970][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 351.802532][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 352.543938][ T8660] vhci_hcd: invalid port number 16 [ 352.717449][ T8660] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 354.430461][ T8681] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.493'. [ 356.029752][ T51] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 356.387742][ T8706] netlink: 338 bytes leftover after parsing attributes in process `syz.1.496'. [ 366.986941][ T8806] ima: policy update failed [ 367.001553][ T30] audit: type=1802 audit(6046803048.590:4): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.516" res=0 errno=0 [ 367.085250][ T8806] netlink: 25 bytes leftover after parsing attributes in process `syz.3.516'. [ 367.905161][ T8787] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 370.616483][ T8847] netlink: 13832 bytes leftover after parsing attributes in process `syz.1.524'. [ 371.079293][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 371.230381][ T8851] HfR: entered promiscuous mode [ 372.690668][ T8878] vhci_hcd: invalid port number 16 [ 372.696026][ T8878] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 374.432750][ T8894] FAULT_INJECTION: forcing a failure. [ 374.432750][ T8894] name failslab, interval 1, probability 0, space 0, times 0 [ 374.451512][ T8894] CPU: 0 UID: 0 PID: 8894 Comm: syz.1.533 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 374.451558][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.451577][ T8894] Call Trace: [ 374.451587][ T8894] [ 374.451600][ T8894] dump_stack_lvl+0x16c/0x1f0 [ 374.451681][ T8894] should_fail_ex+0x512/0x640 [ 374.451732][ T8894] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 374.451795][ T8894] should_failslab+0xc2/0x120 [ 374.451828][ T8894] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 374.451877][ T8894] ? __proc_create+0xc3/0x8c0 [ 374.451937][ T8894] ? __proc_create+0x2ce/0x8c0 [ 374.451996][ T8894] __proc_create+0x2ce/0x8c0 [ 374.452050][ T8894] ? __pfx___proc_create+0x10/0x10 [ 374.452109][ T8894] ? _raw_write_unlock+0x28/0x50 [ 374.452154][ T8894] ? proc_register+0x314/0x5f0 [ 374.452211][ T8894] proc_create_reg+0x7d/0x180 [ 374.452246][ T8894] proc_create_net_data+0x8e/0x1b0 [ 374.452302][ T8894] ? __pfx_proc_create_net_data+0x10/0x10 [ 374.452367][ T8894] ? __pfx_ip6mr_net_init+0x10/0x10 [ 374.452411][ T8894] ip6mr_net_init+0x2ce/0x4e0 [ 374.452456][ T8894] ? __pfx_ip6mr_net_init+0x10/0x10 [ 374.452500][ T8894] ops_init+0x1df/0x5f0 [ 374.452562][ T8894] setup_net+0x1ff/0x510 [ 374.452614][ T8894] ? lockdep_init_map_type+0x5c/0x280 [ 374.452672][ T8894] ? __pfx_setup_net+0x10/0x10 [ 374.452728][ T8894] ? debug_mutex_init+0x37/0x70 [ 374.452768][ T8894] copy_net_ns+0x2a6/0x5f0 [ 374.452806][ T8894] create_new_namespaces+0x3ea/0xa90 [ 374.452856][ T8894] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 374.452900][ T8894] ksys_unshare+0x45b/0xa40 [ 374.452947][ T8894] ? __pfx_ksys_unshare+0x10/0x10 [ 374.452994][ T8894] ? xfd_validate_state+0x61/0x180 [ 374.453054][ T8894] __x64_sys_unshare+0x31/0x40 [ 374.453099][ T8894] do_syscall_64+0xcd/0x490 [ 374.453153][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.453187][ T8894] RIP: 0033:0x7fb9b798e929 [ 374.453214][ T8894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.453246][ T8894] RSP: 002b:00007fb9b880c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 374.453278][ T8894] RAX: ffffffffffffffda RBX: 00007fb9b7bb5fa0 RCX: 00007fb9b798e929 [ 374.453300][ T8894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 374.453320][ T8894] RBP: 00007fb9b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 374.453340][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.453360][ T8894] R13: 0000000000000000 R14: 00007fb9b7bb5fa0 R15: 00007fff6ae6df98 [ 374.453422][ T8894] [ 376.656324][ T8917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.538'. [ 376.834983][ T8919] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 377.525269][ T8926] netlink: 25 bytes leftover after parsing attributes in process `syz.1.540'. [ 377.603110][ T8924] ima: policy update failed [ 377.618725][ T30] audit: type=1802 audit(6046803059.200:5): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.540" res=0 errno=0 [ 378.548896][ T8935] FAULT_INJECTION: forcing a failure. [ 378.548896][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 378.604757][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.2.542 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 378.604804][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.604823][ T8935] Call Trace: [ 378.604834][ T8935] [ 378.604846][ T8935] dump_stack_lvl+0x16c/0x1f0 [ 378.604901][ T8935] should_fail_ex+0x512/0x640 [ 378.604950][ T8935] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 378.605005][ T8935] should_failslab+0xc2/0x120 [ 378.605037][ T8935] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 378.605087][ T8935] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 378.605134][ T8935] ? __d_alloc+0x31/0xaa0 [ 378.605202][ T8935] __d_alloc+0x31/0xaa0 [ 378.605251][ T8935] ? look_up_lock_class+0x59/0x150 [ 378.605303][ T8935] d_alloc_pseudo+0x1c/0xc0 [ 378.605341][ T8935] alloc_file_pseudo+0xcf/0x230 [ 378.605379][ T8935] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 378.605413][ T8935] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 378.605473][ T8935] create_pipe_files+0x364/0x930 [ 378.605531][ T8935] do_pipe2+0xaf/0x1c0 [ 378.605582][ T8935] ? __pfx_do_pipe2+0x10/0x10 [ 378.605635][ T8935] ? xfd_validate_state+0x61/0x180 [ 378.605679][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 378.605738][ T8935] __x64_sys_pipe+0x33/0x50 [ 378.605790][ T8935] do_syscall_64+0xcd/0x490 [ 378.605843][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.605876][ T8935] RIP: 0033:0x7f899198e929 [ 378.605903][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.605934][ T8935] RSP: 002b:00007f898f7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 378.605966][ T8935] RAX: ffffffffffffffda RBX: 00007f8991bb6080 RCX: 00007f899198e929 [ 378.605988][ T8935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.606008][ T8935] RBP: 00007f8991a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 378.606029][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.606049][ T8935] R13: 0000000000000000 R14: 00007f8991bb6080 R15: 00007fffb7ff9428 [ 378.606091][ T8935] [ 380.659425][ T8961] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 381.719425][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 384.153636][ T9005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.556'. [ 384.204939][ T9005] vcan0: entered promiscuous mode [ 384.411085][ T9005] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78002 [ 384.454215][ T9005] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 384.518772][ T9005] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 384.556008][ T9005] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 384.645256][ T9005] page dumped because: unmovable page [ 384.713994][ T9005] page_owner tracks the page as allocated [ 384.755655][ T9005] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5845, tgid 5845 (syz-executor), ts 102205446712, free_ts 98868647077 [ 384.794536][ T9005] post_alloc_hook+0x1c0/0x230 [ 384.799469][ T9005] get_page_from_freelist+0x1321/0x3890 [ 384.815808][ T9005] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 384.841067][ T9017] openvswitch: netlink: IPv4 tunnel dst address is zero [ 384.853806][ T9005] alloc_pages_bulk_noprof+0x71c/0x1410 [ 384.877576][ T9005] kasan_populate_vmalloc+0xf1/0x1f0 [ 384.964305][ T9018] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 384.984847][ T9005] alloc_vmap_area+0x959/0x29c0 [ 385.044983][ T9005] __get_vm_area_node+0x1ca/0x330 [ 385.063967][ T9005] __vmalloc_node_range_noprof+0x271/0x14b0 [ 385.086506][ T9005] vmalloc_user_noprof+0x9e/0xe0 [ 385.122581][ T9005] kcov_ioctl+0x4c/0x730 [ 385.142501][ T9005] __x64_sys_ioctl+0x18e/0x210 [ 385.184557][ T9005] do_syscall_64+0xcd/0x490 [ 385.189351][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.241729][ T9005] page last free pid 5834 tgid 5834 stack trace: [ 385.257535][ T9005] __free_frozen_pages+0x7fe/0x1180 [ 385.267565][ T9005] vfree+0x1fd/0xb50 [ 385.307308][ T9005] kcov_close+0x34/0x60 [ 385.330135][ T9005] __fput+0x402/0xb70 [ 385.386386][ T9005] fput_close_sync+0x118/0x260 [ 385.391507][ T9005] __x64_sys_close+0x8b/0x120 [ 385.408242][ T9005] do_syscall_64+0xcd/0x490 [ 385.418744][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.743302][ T9023] vivid-003: ================= START STATUS ================= [ 385.765397][ T9015] ima: policy update failed [ 385.775500][ T30] audit: type=1802 audit(6046803067.360:6): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.557" res=0 errno=0 [ 385.815528][ T9023] vivid-003: Radio HW Seek Mode: Bounded [ 385.821589][ T9023] vivid-003: Radio Programmable HW Seek: false [ 385.829574][ T9023] vivid-003: RDS Rx I/O Mode: Block I/O [ 385.835932][ T9023] vivid-003: Generate RBDS Instead of RDS: false [ 385.842466][ T9023] vivid-003: RDS Reception: true [ 385.847567][ T9023] vivid-003: RDS Program Type: 0 inactive [ 385.855534][ T9023] vivid-003: RDS PS Name: inactive [ 385.860852][ T9023] vivid-003: RDS Radio Text: inactive [ 385.868025][ T9023] vivid-003: RDS Traffic Announcement: false inactive [ 385.876033][ T9023] vivid-003: RDS Traffic Program: false inactive [ 385.895378][ T9023] vivid-003: RDS Music: false inactive [ 385.907196][ T9023] vivid-003: ================== END STATUS ================== [ 386.044291][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.560'. [ 386.377713][ T9036] hsr_slave_0 (unregistering): hsr_addr_subst_dest: Unknown node [ 386.386109][ T9036] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 386.723999][ T9026] hsr_slave_0 (unregistering): left promiscuous mode [ 389.017666][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.024083][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.577424][ T9092] random: crng reseeded on system resumption [ 390.586010][ T9090] vhci_hcd: invalid port number 16 [ 390.591213][ T9090] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 392.331614][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.575'. [ 392.427879][ T9111] vcan0: entered promiscuous mode [ 393.250212][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.586'. [ 393.486722][ T9126] hsr_slave_0 (unregistering): left promiscuous mode [ 393.529537][ T9126] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 397.997796][ T9174] random: crng reseeded on system resumption [ 399.258403][ T9186] vivid-003: ================= START STATUS ================= [ 399.314528][ T9186] vivid-003: Radio HW Seek Mode: Bounded [ 399.320303][ T9186] vivid-003: Radio Programmable HW Seek: false [ 399.337541][ T9186] vivid-003: RDS Rx I/O Mode: Block I/O [ 399.378802][ T9186] vivid-003: Generate RBDS Instead of RDS: false [ 399.412917][ T9186] vivid-003: RDS Reception: true [ 399.450647][ T9186] vivid-003: RDS Program Type: 0 inactive [ 399.485031][ T9186] vivid-003: RDS PS Name: inactive [ 399.515439][ T9186] vivid-003: RDS Radio Text: inactive [ 399.558277][ T9186] vivid-003: RDS Traffic Announcement: false inactive [ 399.568107][ T9186] vivid-003: RDS Traffic Program: false inactive [ 399.583008][ T9186] vivid-003: RDS Music: false inactive [ 399.594471][ T9186] vivid-003: ================== END STATUS ================== [ 399.724224][ T9195] netlink: 330 bytes leftover after parsing attributes in process `syz.2.588'. [ 400.706971][ T9196] FAULT_INJECTION: forcing a failure. [ 400.706971][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 400.757796][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.1.589 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 400.757843][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.757862][ T9196] Call Trace: [ 400.757872][ T9196] [ 400.757885][ T9196] dump_stack_lvl+0x16c/0x1f0 [ 400.757942][ T9196] should_fail_ex+0x512/0x640 [ 400.757990][ T9196] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 400.758049][ T9196] should_failslab+0xc2/0x120 [ 400.758082][ T9196] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 400.758134][ T9196] ? __d_alloc+0x31/0xaa0 [ 400.758190][ T9196] __d_alloc+0x31/0xaa0 [ 400.758238][ T9196] ? look_up_lock_class+0x59/0x150 [ 400.758290][ T9196] d_alloc_pseudo+0x1c/0xc0 [ 400.758327][ T9196] alloc_file_pseudo+0xcf/0x230 [ 400.758365][ T9196] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 400.758399][ T9196] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 400.758457][ T9196] create_pipe_files+0x364/0x930 [ 400.758513][ T9196] do_pipe2+0xaf/0x1c0 [ 400.758563][ T9196] ? __pfx_do_pipe2+0x10/0x10 [ 400.758615][ T9196] ? xfd_validate_state+0x61/0x180 [ 400.758658][ T9196] ? __pfx_ksys_write+0x10/0x10 [ 400.758726][ T9196] __x64_sys_pipe+0x33/0x50 [ 400.758779][ T9196] do_syscall_64+0xcd/0x490 [ 400.758833][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.758867][ T9196] RIP: 0033:0x7fb9b798e929 [ 400.758893][ T9196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.758926][ T9196] RSP: 002b:00007fb9b87eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 400.758956][ T9196] RAX: ffffffffffffffda RBX: 00007fb9b7bb6080 RCX: 00007fb9b798e929 [ 400.758978][ T9196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.758998][ T9196] RBP: 00007fb9b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 400.759019][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.759037][ T9196] R13: 0000000000000000 R14: 00007fb9b7bb6080 R15: 00007fff6ae6df98 [ 400.759077][ T9196] [ 400.966104][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.218307][ T9205] openvswitch: netlink: IPv4 tunnel dst address is zero [ 401.301948][ T9209] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 402.303934][ T30] audit: type=1804 audit(6046803083.890:7): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.593" name="/newroot/146/file0" dev="tmpfs" ino=779 res=1 errno=0 [ 402.454491][ T30] audit: type=1800 audit(6046803083.890:8): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.593" name="file0" dev="tmpfs" ino=779 res=0 errno=0 [ 406.508580][ T9258] vivid-003: ================= START STATUS ================= [ 406.516923][ T9264] netlink: 330 bytes leftover after parsing attributes in process `syz.1.602'. [ 406.560165][ T9258] vivid-003: Radio HW Seek Mode: Bounded [ 406.611910][ T9258] vivid-003: Radio Programmable HW Seek: false [ 406.624589][ T9258] vivid-003: RDS Rx I/O Mode: Block I/O [ 406.631061][ T9258] vivid-003: Generate RBDS Instead of RDS: false [ 406.638505][ T9258] vivid-003: RDS Reception: true [ 406.651129][ T9258] vivid-003: RDS Program Type: 0 inactive [ 406.659295][ T9258] vivid-003: RDS PS Name: inactive [ 406.666215][ T9258] vivid-003: RDS Radio Text: inactive [ 406.676429][ T9258] vivid-003: RDS Traffic Announcement: false inactive [ 406.687900][ T9258] vivid-003: RDS Traffic Program: false inactive [ 406.777676][ T9258] vivid-003: RDS Music: false inactive [ 406.785238][ T9258] vivid-003: ================== END STATUS ================== [ 408.648016][ T9280] openvswitch: netlink: IPv4 tunnel dst address is zero [ 408.836709][ T9281] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 410.096164][ T9290] random: crng reseeded on system resumption [ 415.300408][ T9342] openvswitch: netlink: IP tunnel dst address not specified [ 420.065874][ T9391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.625'. [ 420.119019][ T9391] bridge_slave_1: left allmulticast mode [ 420.127380][ T9391] bridge_slave_1: left promiscuous mode [ 420.134648][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.186299][ T9391] bridge_slave_0: left allmulticast mode [ 420.192030][ T9391] bridge_slave_0: left promiscuous mode [ 420.204441][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.120505][ T9426] vhci_hcd: invalid port number 16 [ 422.131772][ T9426] vhci_hcd: invalid port number 16 [ 430.507707][ T9527] openvswitch: netlink: IP tunnel dst address not specified [ 431.723487][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.734403][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.748794][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.755268][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.763673][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.774853][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.787931][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.797889][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.371990][ T9566] ptp ptp0: new virtual clock ptp1 [ 433.647367][ T9566] ptp ptp0: new virtual clock ptp2 [ 433.728453][ T9566] ptp ptp0: new virtual clock ptp3 [ 433.733674][ T9566] ptp ptp0: guarantee physical clock free running [ 436.157663][ T9615] netlink: 330 bytes leftover after parsing attributes in process `syz.3.671'. [ 437.413049][ T9633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 437.908689][ T9635] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 440.049220][ T9667] Invalid ELF header magic: != ELF [ 440.143955][ T9667] netlink: zone id is out of range [ 440.180119][ T9667] netlink: zone id is out of range [ 440.190157][ T9667] netlink: zone id is out of range [ 440.207773][ T9667] netlink: zone id is out of range [ 440.213001][ T9667] netlink: zone id is out of range [ 442.080728][ T9698] netlink: 330 bytes leftover after parsing attributes in process `syz.0.684'. [ 444.755257][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.761623][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.770391][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.777215][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.795250][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.801581][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.817654][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.824170][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.396785][ T9741] syz.2.693 (9741) used greatest stack depth: 19800 bytes left [ 450.449816][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.456299][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.767555][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.774103][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.782866][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.789284][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.798137][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.804547][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.812887][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.819761][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.269509][ T9800] ecryptfs_parse_packet_length: Error parsing packet length [ 452.287786][ T9800] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 457.790000][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.866606][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.040070][ T9879] ecryptfs_parse_packet_length: Error parsing packet length [ 460.048289][ T30] audit: type=1804 audit(6046803141.640:9): pid=9877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.721" name="/newroot/184/file0" dev="tmpfs" ino=974 res=1 errno=0 [ 460.064589][ T9879] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 460.100127][ T30] audit: type=1800 audit(6046803141.640:10): pid=9877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.721" name="file0" dev="tmpfs" ino=974 res=0 errno=0 [ 465.929830][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'. [ 465.972011][ T9962] random: crng reseeded on system resumption [ 466.039298][ T9960] team0: Port device team_slave_1 removed [ 467.119261][ T9978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.130750][ T9978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.644554][T10002] FAULT_INJECTION: forcing a failure. [ 468.644554][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 468.733552][T10002] CPU: 0 UID: 0 PID: 10002 Comm: syz.1.745 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 468.733587][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.733602][T10002] Call Trace: [ 468.733610][T10002] [ 468.733618][T10002] dump_stack_lvl+0x16c/0x1f0 [ 468.733661][T10002] should_fail_ex+0x512/0x640 [ 468.733695][T10002] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 468.733731][T10002] should_failslab+0xc2/0x120 [ 468.733754][T10002] __kmalloc_cache_noprof+0x6a/0x3e0 [ 468.733784][T10002] ? lockdep_init_map_type+0x5c/0x280 [ 468.733819][T10002] ? io_uring_alloc_task_context+0x96/0x650 [ 468.733843][T10002] ? lockdep_init_map_type+0x5c/0x280 [ 468.733880][T10002] io_uring_alloc_task_context+0x96/0x650 [ 468.733903][T10002] ? file_init_path+0x4fe/0x760 [ 468.733927][T10002] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 468.733955][T10002] ? alloc_file_pseudo+0x1b3/0x230 [ 468.733985][T10002] __io_uring_add_tctx_node+0x2dd/0x500 [ 468.734009][T10002] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 468.734035][T10002] ? __anon_inode_getfile+0x17c/0x280 [ 468.734072][T10002] io_uring_setup+0x1579/0x2080 [ 468.734113][T10002] ? __pfx_io_uring_setup+0x10/0x10 [ 468.734166][T10002] ? __pfx___might_resched+0x10/0x10 [ 468.734219][T10002] ? xfd_validate_state+0x61/0x180 [ 468.734273][T10002] __x64_sys_io_uring_setup+0xc2/0x170 [ 468.734317][T10002] do_syscall_64+0xcd/0x490 [ 468.734370][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.734403][T10002] RIP: 0033:0x7fb9b798e929 [ 468.734429][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.734462][T10002] RSP: 002b:00007fb9b87eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 468.734493][T10002] RAX: ffffffffffffffda RBX: 00007fb9b7bb6080 RCX: 00007fb9b798e929 [ 468.734515][T10002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 468.734534][T10002] RBP: 00007fb9b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 468.734565][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.734583][T10002] R13: 0000000000000000 R14: 00007fb9b7bb6080 R15: 00007fff6ae6df98 [ 468.734623][T10002] [ 469.248290][T10007] netlink: 330 bytes leftover after parsing attributes in process `syz.2.746'. [ 470.235197][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'. [ 470.755359][T10021] team0: Port device team_slave_1 removed [ 471.390137][T10044] openvswitch: netlink: IP tunnel dst address not specified [ 472.322121][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.331400][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.305742][T10083] ecryptfs_parse_packet_length: Error parsing packet length [ 474.313127][T10083] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 475.173387][T10097] ecryptfs_parse_packet_length: Error parsing packet length [ 475.181120][T10097] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 485.902539][T10122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.911678][T10122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.919900][T10122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.929958][T10122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.941020][T10122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.128159][T10121] chnl_net:caif_netlink_parms(): no params data found [ 486.219261][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.227542][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.235321][T10121] bridge_slave_0: entered allmulticast mode [ 486.242974][T10121] bridge_slave_0: entered promiscuous mode [ 486.254095][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.261499][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.268802][T10121] bridge_slave_1: entered allmulticast mode [ 486.277368][T10121] bridge_slave_1: entered promiscuous mode [ 486.315322][T10121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.328386][T10121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.370307][T10121] team0: Port device team_slave_0 added [ 486.380189][T10121] team0: Port device team_slave_1 added [ 486.412674][T10121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.419835][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.446643][T10121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.463097][T10121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.470248][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.498647][T10121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.549463][T10121] hsr_slave_0: entered promiscuous mode [ 486.558323][T10121] hsr_slave_1: entered promiscuous mode [ 486.566206][T10121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.573806][T10121] Cannot create hsr debugfs directory [ 486.741384][T10121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 486.753821][T10121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 486.766997][T10121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 486.778165][T10121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.813172][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.820441][T10121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.827977][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.835172][T10121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.899985][T10121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.923349][T10121] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.932772][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.941705][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.968889][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.976154][ T9567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.990756][ T9375] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.997937][ T9375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.238679][T10121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.529269][T10121] veth0_vlan: entered promiscuous mode [ 487.542322][T10121] veth1_vlan: entered promiscuous mode [ 487.575594][T10121] veth0_macvtap: entered promiscuous mode [ 487.587192][T10121] veth1_macvtap: entered promiscuous mode [ 487.608821][T10121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.624196][T10121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.640395][T10121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.650421][T10121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.659387][T10121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.668170][T10121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.747894][ T9380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.765681][ T9380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.794193][ T9380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.803522][ T9380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.972606][T10151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 488.036205][ T9394] Bluetooth: hci4: command tx timeout [ 488.085961][T10151] team0: Port device team_slave_1 removed [ 489.387269][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 489.818005][T10159] team0: Port device team_slave_1 removed [ 490.114716][ T9394] Bluetooth: hci4: command tx timeout [ 490.689811][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.722383][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.812635][T10176] ptp ptp0: guarantee physical clock free running [ 492.195729][T10122] Bluetooth: hci4: command tx timeout [ 493.788251][T10214] can: request_module (can-proto-3) failed. [ 493.919663][T10224] random: crng reseeded on system resumption [ 494.149256][T10227] can: request_module (can-proto-3) failed. [ 494.274664][T10122] Bluetooth: hci4: command tx timeout [ 496.305903][T10251] FAULT_INJECTION: forcing a failure. [ 496.305903][T10251] name failslab, interval 1, probability 0, space 0, times 0 [ 496.365104][T10251] CPU: 1 UID: 0 PID: 10251 Comm: syz.0.784 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 496.365151][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.365171][T10251] Call Trace: [ 496.365182][T10251] [ 496.365195][T10251] dump_stack_lvl+0x16c/0x1f0 [ 496.365251][T10251] should_fail_ex+0x512/0x640 [ 496.365301][T10251] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 496.365352][T10251] should_failslab+0xc2/0x120 [ 496.365385][T10251] __kmalloc_cache_noprof+0x6a/0x3e0 [ 496.365431][T10251] ? io_wq_create+0x6a/0x9d0 [ 496.365473][T10251] io_wq_create+0x6a/0x9d0 [ 496.365514][T10251] io_uring_alloc_task_context+0x1e1/0x650 [ 496.365562][T10251] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 496.365599][T10251] ? alloc_file_pseudo+0x1b3/0x230 [ 496.365642][T10251] __io_uring_add_tctx_node+0x2dd/0x500 [ 496.365677][T10251] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 496.365715][T10251] ? __anon_inode_getfile+0x17c/0x280 [ 496.365768][T10251] io_uring_setup+0x1579/0x2080 [ 496.365817][T10251] ? __pfx_io_uring_setup+0x10/0x10 [ 496.365871][T10251] ? _raw_spin_unlock_irq+0x2e/0x50 [ 496.365933][T10251] ? xfd_validate_state+0x61/0x180 [ 496.365989][T10251] __x64_sys_io_uring_setup+0xc2/0x170 [ 496.366036][T10251] do_syscall_64+0xcd/0x490 [ 496.366090][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.366123][T10251] RIP: 0033:0x7fdf5d58e929 [ 496.366150][T10251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.366182][T10251] RSP: 002b:00007fdf5e39d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 496.366214][T10251] RAX: ffffffffffffffda RBX: 00007fdf5d7b6080 RCX: 00007fdf5d58e929 [ 496.366236][T10251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 496.366256][T10251] RBP: 00007fdf5d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 496.366276][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.366296][T10251] R13: 0000000000000000 R14: 00007fdf5d7b6080 R15: 00007ffffb63ecd8 [ 496.366338][T10251] [ 497.017997][T10260] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 498.343724][T10258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.354696][T10258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.750809][T10328] ptp ptp0: guarantee physical clock free running [ 504.345412][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.356121][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.472842][ T9394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.482231][ T9394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.490800][ T9394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.501237][ T9394] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.510344][ T9394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.706649][T10359] chnl_net:caif_netlink_parms(): no params data found [ 505.794783][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.802666][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.810713][T10359] bridge_slave_0: entered allmulticast mode [ 505.818828][T10359] bridge_slave_0: entered promiscuous mode [ 505.827307][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.835127][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.842392][T10359] bridge_slave_1: entered allmulticast mode [ 505.850590][T10359] bridge_slave_1: entered promiscuous mode [ 505.891139][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.903948][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.944481][T10359] team0: Port device team_slave_0 added [ 505.953503][T10359] team0: Port device team_slave_1 added [ 505.989560][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.996868][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.023773][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.036900][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.043989][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.070049][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.125817][T10359] hsr_slave_0: entered promiscuous mode [ 506.132679][T10359] hsr_slave_1: entered promiscuous mode [ 506.139696][T10359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.147452][T10359] Cannot create hsr debugfs directory [ 506.329291][T10359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 506.340078][T10359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 506.350844][T10359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.361933][T10359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 506.397399][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.404623][T10359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.412993][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.420267][T10359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.487895][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.510138][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.523520][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.543803][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.561511][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.568787][ T9704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.583127][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.590300][ T9567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.838882][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.128633][T10359] veth0_vlan: entered promiscuous mode [ 507.143464][T10359] veth1_vlan: entered promiscuous mode [ 507.180041][T10359] veth0_macvtap: entered promiscuous mode [ 507.190822][T10359] veth1_macvtap: entered promiscuous mode [ 507.213189][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.228834][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.241521][T10359] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.250732][T10359] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.260117][T10359] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.268904][T10359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.352976][T10220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.361708][T10220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.407636][ T9567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.415765][ T9567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.558509][ T9394] Bluetooth: hci5: command tx timeout [ 507.655441][T10394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 508.280227][T10395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 508.731981][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.744620][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.761964][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.768395][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.780800][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.790928][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.805520][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.812004][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.635722][ T9394] Bluetooth: hci5: command tx timeout [ 511.654632][T10449] can: request_module (can-proto-3) failed. [ 511.714996][ T9394] Bluetooth: hci5: command tx timeout [ 511.878241][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.884728][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.721931][T10467] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 513.256151][T10476] random: crng reseeded on system resumption [ 513.418050][T10469] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 513.823259][ T9394] Bluetooth: hci5: command tx timeout [ 515.629806][T10499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.824'. [ 515.696439][T10500] netlink: 93 bytes leftover after parsing attributes in process `syz.5.824'. [ 520.329953][T10564] random: crng reseeded on system resumption [ 522.786407][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 522.911996][T10589] netlink: 354 bytes leftover after parsing attributes in process `syz.5.844'. [ 526.343787][T10625] random: crng reseeded on system resumption [ 527.284950][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.854'. [ 528.496483][T10645] FAULT_INJECTION: forcing a failure. [ 528.496483][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 528.524358][T10645] CPU: 0 UID: 0 PID: 10645 Comm: syz.2.865 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 528.524405][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.524425][T10645] Call Trace: [ 528.524435][T10645] [ 528.524447][T10645] dump_stack_lvl+0x16c/0x1f0 [ 528.524506][T10645] should_fail_ex+0x512/0x640 [ 528.524557][T10645] ? __kvmalloc_node_noprof+0x124/0x620 [ 528.524612][T10645] should_failslab+0xc2/0x120 [ 528.524645][T10645] __kvmalloc_node_noprof+0x137/0x620 [ 528.524698][T10645] ? alloc_fdtable+0x158/0x2b0 [ 528.524750][T10645] ? alloc_fdtable+0x158/0x2b0 [ 528.524790][T10645] alloc_fdtable+0x158/0x2b0 [ 528.524836][T10645] dup_fd+0x83b/0xb90 [ 528.524890][T10645] ? apparmor_task_alloc+0x2c2/0x3b0 [ 528.524930][T10645] copy_process+0x230c/0x7650 [ 528.524975][T10645] ? __pfx___futex_wait+0x10/0x10 [ 528.525025][T10645] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 528.525096][T10645] ? __pfx_copy_process+0x10/0x10 [ 528.525143][T10645] ? find_held_lock+0x2b/0x80 [ 528.525197][T10645] kernel_clone+0xfc/0x960 [ 528.525245][T10645] ? __pfx_kernel_clone+0x10/0x10 [ 528.525315][T10645] __do_sys_clone+0xce/0x120 [ 528.525360][T10645] ? __pfx___do_sys_clone+0x10/0x10 [ 528.525425][T10645] ? xfd_validate_state+0x61/0x180 [ 528.525487][T10645] do_syscall_64+0xcd/0x490 [ 528.525542][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.525577][T10645] RIP: 0033:0x7f899198e929 [ 528.525606][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.525640][T10645] RSP: 002b:00007f898f7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 528.525672][T10645] RAX: ffffffffffffffda RBX: 00007f8991bb6080 RCX: 00007f899198e929 [ 528.525694][T10645] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 528.525714][T10645] RBP: 00007f8991a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 528.525734][T10645] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 528.525754][T10645] R13: 0000000000000000 R14: 00007f8991bb6080 R15: 00007fffb7ff9428 [ 528.525794][T10645] [ 532.549876][T10685] random: crng reseeded on system resumption [ 532.926135][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.868'. [ 534.862339][T10717] tipc: Started in network mode [ 534.868093][T10717] tipc: Node identity ee00, cluster identity 4711 [ 534.878609][T10717] tipc: Node number set to 60928 [ 536.881544][T10745] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 536.965978][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 539.028302][T10776] random: crng reseeded on system resumption [ 540.162300][T10784] netlink: 13832 bytes leftover after parsing attributes in process `syz.4.886'. [ 542.339871][T10822] qrtr: Invalid version 6 [ 544.724777][T10854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.899'. [ 544.804472][T10855] nfs4: Unknown parameter '€' [ 546.340022][T10883] ALSA: mixer_oss: invalid OSS volume '0' [ 546.346016][T10883] ALSA: mixer_oss: invalid OSS volume '' [ 546.735545][T10888] netlink: 'syz.4.906': attribute type 2 has an invalid length. [ 547.430729][T10894] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 549.303553][T10921] FAULT_INJECTION: forcing a failure. [ 549.303553][T10921] name fail_futex, interval 1, probability 0, space 0, times 0 [ 549.394488][T10921] CPU: 1 UID: 0 PID: 10921 Comm: syz.0.912 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 549.394536][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.394555][T10921] Call Trace: [ 549.394565][T10921] [ 549.394577][T10921] dump_stack_lvl+0x16c/0x1f0 [ 549.394633][T10921] should_fail_ex+0x512/0x640 [ 549.394686][T10921] get_futex_key+0x1d0/0x1540 [ 549.394730][T10921] ? __pfx_get_futex_key+0x10/0x10 [ 549.394769][T10921] ? __mutex_trylock_common+0xe9/0x250 [ 549.394827][T10921] futex_wake+0xe7/0x4e0 [ 549.394876][T10921] ? __pfx_futex_wake+0x10/0x10 [ 549.394919][T10921] ? __lock_acquire+0xb8a/0x1c90 [ 549.394982][T10921] do_futex+0x1e3/0x350 [ 549.395021][T10921] ? __pfx_do_futex+0x10/0x10 [ 549.395059][T10921] ? __might_fault+0xe3/0x190 [ 549.395118][T10921] mm_release+0x24e/0x300 [ 549.395157][T10921] do_exit+0x68b/0x2bd0 [ 549.395211][T10921] ? __pfx_do_exit+0x10/0x10 [ 549.395255][T10921] ? do_raw_spin_lock+0x12c/0x2b0 [ 549.395365][T10921] ? find_held_lock+0x2b/0x80 [ 549.395406][T10921] do_group_exit+0xd3/0x2a0 [ 549.395453][T10921] get_signal+0x2673/0x26d0 [ 549.395495][T10921] ? find_held_lock+0x2b/0x80 [ 549.395530][T10921] ? write_ldt+0x9ad/0xd20 [ 549.395586][T10921] ? __pfx_get_signal+0x10/0x10 [ 549.395623][T10921] ? do_futex+0x122/0x350 [ 549.395662][T10921] ? __pfx_do_futex+0x10/0x10 [ 549.395705][T10921] arch_do_signal_or_restart+0x8f/0x790 [ 549.395747][T10921] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 549.395799][T10921] ? xfd_validate_state+0x61/0x180 [ 549.395853][T10921] exit_to_user_mode_loop+0x84/0x110 [ 549.395907][T10921] do_syscall_64+0x3f6/0x490 [ 549.395959][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.395992][T10921] RIP: 0033:0x7fdf5d58e929 [ 549.396018][T10921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.396050][T10921] RSP: 002b:00007fdf5e3be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 549.396080][T10921] RAX: fffffffffffffe00 RBX: 00007fdf5d7b5fa8 RCX: 00007fdf5d58e929 [ 549.396101][T10921] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf5d7b5fa8 [ 549.396121][T10921] RBP: 00007fdf5d7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 549.396141][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf5d7b5fac [ 549.396161][T10921] R13: 0000000000000000 R14: 00007ffffb63ebf0 R15: 00007ffffb63ecd8 [ 549.396202][T10921] [ 550.179957][T10930] random: crng reseeded on system resumption [ 550.480103][T10934] sd 0:0:1:0: PR command failed: 1026 [ 550.534522][T10934] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 550.541345][T10934] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 552.345422][T10958] random: crng reseeded on system resumption [ 558.501573][T11047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.930'. [ 559.926597][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 559.987533][T11075] random: crng reseeded on system resumption [ 560.452059][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'. [ 560.833601][T11083] ptrace attach of "./syz-executor exec"[11084] was attempted by "./syz-executor exec"[11083] [ 562.453232][T10122] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 563.512875][T11129] netlink: 338 bytes leftover after parsing attributes in process `syz.5.945'. [ 567.321779][T11181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.955'. [ 567.630225][T11188] can: request_module (can-proto-3) failed. [ 569.475421][ T31] INFO: task kworker/u8:5:1126 blocked for more than 143 seconds. [ 569.494502][ T31] Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 569.537088][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.554504][ T31] task:kworker/u8:5 state:D stack:25672 pid:1126 tgid:1126 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 569.574558][ T31] Workqueue: netns cleanup_net [ 569.579437][ T31] Call Trace: [ 569.582761][ T31] [ 569.601503][ T31] __schedule+0x116a/0x5de0 [ 569.612183][ T31] ? __pfx___schedule+0x10/0x10 [ 569.634542][ T31] ? find_held_lock+0x2b/0x80 [ 569.639426][ T31] ? schedule+0x2d7/0x3a0 [ 569.643824][ T31] schedule+0xe7/0x3a0 [ 569.662787][ T31] schedule_timeout+0x257/0x290 [ 569.675586][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 569.684512][ T31] ? mark_held_locks+0x49/0x80 [ 569.690254][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 569.719416][ T31] __wait_for_common+0x2ff/0x4e0 [ 569.737463][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 569.742939][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 569.764371][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 569.774677][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 569.780594][ T31] __flush_workqueue+0x3e2/0x1230 [ 569.815109][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 569.912959][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 569.984462][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 569.990046][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 570.084581][ T31] rds_tcp_listen_stop+0x104/0x150 [ 570.144467][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 570.149945][ T31] rds_tcp_exit_net+0xcb/0x810 [ 570.158687][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 570.164165][ T31] ? __pfx___might_resched+0x10/0x10 [ 570.180172][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 570.195139][ T31] ops_undo_list+0x2eb/0xab0 [ 570.199837][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 570.205118][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 570.210491][ T31] cleanup_net+0x408/0x890 [ 570.215564][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 570.220546][ T31] ? rcu_is_watching+0x12/0xc0 [ 570.225391][ T31] process_one_work+0x9cc/0x1b70 [ 570.230444][ T31] ? __pfx_rds_connect_worker+0x10/0x10 [ 570.254821][ T31] ? __pfx_process_one_work+0x10/0x10 [ 570.294708][ T31] ? assign_work+0x1a0/0x250 [ 570.299428][ T31] worker_thread+0x6c8/0xf10 [ 570.304231][ T31] ? __pfx_worker_thread+0x10/0x10 [ 570.312631][ T31] kthread+0x3c5/0x780 [ 570.317740][ T31] ? __pfx_kthread+0x10/0x10 [ 570.322428][ T31] ? rcu_is_watching+0x12/0xc0 [ 570.328283][ T31] ? __pfx_kthread+0x10/0x10 [ 570.332947][ T31] ret_from_fork+0x5d4/0x6f0 [ 570.338135][ T31] ? __pfx_kthread+0x10/0x10 [ 570.342811][ T31] ret_from_fork_asm+0x1a/0x30 [ 570.349563][ T31] [ 570.353085][ T31] [ 570.353085][ T31] Showing all locks held in the system: [ 570.378823][ T31] 1 lock held by khungtaskd/31: [ 570.383842][ T31] #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 570.395004][ T31] 3 locks held by kworker/u8:5/1126: [ 570.400365][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 570.411352][ T31] #1: ffffc900037bfd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 570.478370][ T31] #2: ffffffff9034d5d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 570.504466][ T31] 1 lock held by syz-executor/5834: [ 570.509924][ T31] 2 locks held by getty/8116: [ 570.521596][ T31] #0: ffff888031fe40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 570.553630][ T31] #1: ffffc900041c92f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 570.563892][ T31] 1 lock held by syz.3.752/10024: [ 570.594329][ T31] #0: ffffffff9034d5d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 570.637572][ T31] 1 lock held by syz.1.778/10165: [ 570.642703][ T31] #0: ffffffff9034d5d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 570.734344][ T31] 1 lock held by syz.5.956/11187: [ 570.763506][ T31] 2 locks held by syz.0.960/11217: [ 570.794693][ T31] [ 570.797101][ T31] ============================================= [ 570.797101][ T31] [ 570.893329][ T31] NMI backtrace for cpu 1 [ 570.893355][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 570.893396][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.893415][ T31] Call Trace: [ 570.893425][ T31] [ 570.893436][ T31] dump_stack_lvl+0x116/0x1f0 [ 570.893498][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 570.893553][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 570.893600][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 570.893642][ T31] watchdog+0xf70/0x12c0 [ 570.893700][ T31] ? __pfx_watchdog+0x10/0x10 [ 570.893747][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 570.893795][ T31] ? __kthread_parkme+0x19e/0x250 [ 570.893838][ T31] ? __pfx_watchdog+0x10/0x10 [ 570.893892][ T31] kthread+0x3c5/0x780 [ 570.893940][ T31] ? __pfx_kthread+0x10/0x10 [ 570.893990][ T31] ? rcu_is_watching+0x12/0xc0 [ 570.894024][ T31] ? __pfx_kthread+0x10/0x10 [ 570.894071][ T31] ret_from_fork+0x5d4/0x6f0 [ 570.894112][ T31] ? __pfx_kthread+0x10/0x10 [ 570.894158][ T31] ret_from_fork_asm+0x1a/0x30 [ 570.894214][ T31] [ 570.894226][ T31] Sending NMI from CPU 1 to CPUs 0: [ 571.026052][ C0] NMI backtrace for cpu 0 [ 571.026072][ C0] CPU: 0 UID: 0 PID: 10121 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 571.026104][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.026119][ C0] RIP: 0010:unwind_next_frame+0x3f4/0x20a0 [ 571.026184][ C0] Code: 8e 10 15 00 00 41 c7 45 00 00 00 00 00 31 ed e8 b2 a6 19 0a 85 c0 0f 85 a7 06 00 00 48 c7 c7 c0 47 5c 8e 48 8d 35 00 00 00 00 77 76 2d 00 e8 62 2b 37 00 e9 3d fc ff ff 49 81 ff 00 10 25 92 [ 571.026210][ C0] RSP: 0018:ffffc900193278d0 EFLAGS: 00000202 [ 571.026230][ C0] RAX: 0000000000000001 RBX: ffffc90019327cd8 RCX: ffffc90019328001 [ 571.026247][ C0] RDX: 0000000000000000 RSI: ffffffff816a8ad4 RDI: ffffffff8e5c47c0 [ 571.026264][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 571.026279][ C0] R10: 0000000000000000 R11: 00000000000110ac R12: ffffc90019327990 [ 571.026296][ C0] R13: ffffc90019327940 R14: ffffc90019327cd8 R15: ffffc90019327974 [ 571.026313][ C0] FS: 0000000000000000(0000) GS:ffff888124723000(0000) knlGS:0000000000000000 [ 571.026337][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.026354][ C0] CR2: 000055557ad935c8 CR3: 0000000040292000 CR4: 00000000003526f0 [ 571.026370][ C0] Call Trace: [ 571.026379][ C0] [ 571.026387][ C0] ? vfree+0x1fd/0xb50 [ 571.026420][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 571.026452][ C0] arch_stack_walk+0x94/0x100 [ 571.026480][ C0] ? kcov_close+0x34/0x60 [ 571.026519][ C0] stack_trace_save+0x8e/0xc0 [ 571.026548][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 571.026579][ C0] ? __lock_acquire+0x622/0x1c90 [ 571.026624][ C0] save_stack+0x160/0x1f0 [ 571.026661][ C0] ? __pfx_save_stack+0x10/0x10 [ 571.026697][ C0] ? __free_frozen_pages+0x7fe/0x1180 [ 571.026730][ C0] ? vfree+0x1fd/0xb50 [ 571.026763][ C0] ? page_ext_put+0x3e/0xd0 [ 571.026806][ C0] __reset_page_owner+0x84/0x1a0 [ 571.026847][ C0] __free_frozen_pages+0x7fe/0x1180 [ 571.026886][ C0] vfree+0x1fd/0xb50 [ 571.026914][ C0] ? find_held_lock+0x2b/0x80 [ 571.026942][ C0] ? rcu_is_watching+0x12/0xc0 [ 571.026969][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 571.027007][ C0] ? __pfx_kcov_close+0x10/0x10 [ 571.027044][ C0] kcov_close+0x34/0x60 [ 571.027078][ C0] __fput+0x402/0xb70 [ 571.027104][ C0] ? cleanup_mnt+0x262/0x450 [ 571.027137][ C0] task_work_run+0x14d/0x240 [ 571.027178][ C0] ? __pfx_task_work_run+0x10/0x10 [ 571.027218][ C0] ? switch_task_namespaces+0xeb/0x100 [ 571.027253][ C0] do_exit+0x86c/0x2bd0 [ 571.027291][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 571.027332][ C0] ? __pfx_do_exit+0x10/0x10 [ 571.027369][ C0] ? rcu_is_watching+0x12/0xc0 [ 571.027398][ C0] do_group_exit+0xd3/0x2a0 [ 571.027436][ C0] __x64_sys_exit_group+0x3e/0x50 [ 571.027473][ C0] x64_sys_call+0x1530/0x1730 [ 571.027501][ C0] do_syscall_64+0xcd/0x490 [ 571.027541][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.027567][ C0] RIP: 0033:0x7f2f48f8e929 [ 571.027585][ C0] Code: Unable to access opcode bytes at 0x7f2f48f8e8ff. [ 571.027608][ C0] RSP: 002b:00007ffe847c9968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 571.027636][ C0] RAX: ffffffffffffffda RBX: 00007f2f4901231f RCX: 00007f2f48f8e929 [ 571.027653][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 571.027668][ C0] RBP: 00007f2f49012331 R08: 00007ffe847c7707 R09: 00000000000927c0 [ 571.027703][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 571.027718][ C0] R13: 00000000000927c0 R14: 000000000008b4e0 R15: 00007ffe847c9b10 [ 571.027744][ C0] [ 571.388499][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 571.395421][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 571.407375][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.417477][ T31] Call Trace: [ 571.420794][ T31] [ 571.423756][ T31] dump_stack_lvl+0x3d/0x1f0 [ 571.428412][ T31] panic+0x71c/0x800 [ 571.432358][ T31] ? __pfx_panic+0x10/0x10 [ 571.436821][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 571.442247][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 571.448285][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 571.453703][ T31] ? watchdog+0xdda/0x12c0 [ 571.458164][ T31] ? watchdog+0xdcd/0x12c0 [ 571.462637][ T31] watchdog+0xdeb/0x12c0 [ 571.466936][ T31] ? __pfx_watchdog+0x10/0x10 [ 571.471662][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 571.476913][ T31] ? __kthread_parkme+0x19e/0x250 [ 571.481989][ T31] ? __pfx_watchdog+0x10/0x10 [ 571.486747][ T31] kthread+0x3c5/0x780 [ 571.490880][ T31] ? __pfx_kthread+0x10/0x10 [ 571.495513][ T31] ? rcu_is_watching+0x12/0xc0 [ 571.500396][ T31] ? __pfx_kthread+0x10/0x10 [ 571.505036][ T31] ret_from_fork+0x5d4/0x6f0 [ 571.509783][ T31] ? __pfx_kthread+0x10/0x10 [ 571.514424][ T31] ret_from_fork_asm+0x1a/0x30 [ 571.519235][ T31] [ 571.522616][ T31] Kernel Offset: disabled [ 571.526964][ T31] Rebooting in 86400 seconds..