last executing test programs: 16.450522578s ago: executing program 2 (id=274): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getcwd$auto(0x0, 0xfffffffeffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x8, 0x2000000000002) r0 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/broadcast\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/16, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000003, 0x400, 0x9}]}) inotify_add_watch$auto(0x4, 0x0, 0xe6e) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) 15.279905389s ago: executing program 2 (id=277): r0 = socket(0xa, 0x801, 0x106) (async) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x10) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25000000000800030000faffff050007000200000008000300000400000a00050000000000000000000a00010000000000000000000a0005000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x2, 0x3, 0x100) (rerun: 32) socket(0x6, 0x2, 0x5) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="470f8420", @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c8c4) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x945}, 0x3, 0x9) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) r1 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r1, 0x0, 0x881) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x2f0}, 0x1, 0x0, 0x0, 0x20040000}, 0x850) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001240), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (rerun: 32) 14.196057276s ago: executing program 2 (id=282): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) get_robust_list$auto(0x0, 0x0, 0x0) (rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) (async) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) (async, rerun: 64) socket(0xf, 0x3, 0x2) (rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async, rerun: 32) lsm_list_modules$auto(&(0x7f0000000040)=0x3, &(0x7f00000000c0)=0xfffffff9, 0x10000) (rerun: 32) 12.595039393s ago: executing program 2 (id=289): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x5) write$auto(r1, 0x0, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fb, 0x81) mmap$auto(0x0, 0x2000d, 0x4000001000de, 0xeb8, 0xffffffffffffffff, 0x8003) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mq_notify$auto(0xffffffffffffffff, &(0x7f00000002c0)={@sival_ptr=0x0, @raw=0x1, 0x0, @_sigev_thread={0x0, 0x0}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = open(0x0, 0x149443, 0x14) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r5, 0x0, 0x9001) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 10.845273041s ago: executing program 2 (id=292): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c80"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x444200, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x100000000) 9.691265654s ago: executing program 2 (id=294): sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x88002, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_mmio/parameters/device\x00', 0x80480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)=""/4096, 0x1000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010101}, 0x54) listen$auto(0x3, 0x83) accept4$auto(r2, 0x0, 0x0, 0x0) 9.031291262s ago: executing program 0 (id=295): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x1, 0x4) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x7fff0060) syz_clone(0x1000000, &(0x7f00000003c0)="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", 0xfffffffffffffe6e, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000100)="22f253aefcf9ce1ad63162df9990703054b0e3edb85a948d468e8c8cb387602890aae00df4de71b7eb12b74c0434a6dd1ba958c140a7e1f94fb57140957cceb8") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x100000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x21, 0x2, 0x14) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000a140a751fed53c63e5f7fb79522fbe4a93149d82c74b2a74f54cd7ba8c65c050e34bf48153ff48c83e5e15238dfc705177eb0bd62df05a7956a8fd4f0da4f09d414aa0cf73a33fd7d512f04c770c870608b1234e807459393c85765978cb81c739759e7e10dc91251214be24e44247298d72a14ccd95ca061fcac1db9241bed1775d8af8d945f8abdbb8f9b34337288"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x40020) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) io_uring_register$auto(r1, 0xdfd, &(0x7f0000000140)="ff17f64b5108c32a4772d26917affd79fa705d10030aa49cdecd616de6b05d4f559240f466351169887065ee93e6d63cdb4b763984b62128db73f15f6b607a383e265ab80e7af180f511e698679225b162628f764a0ccc710ffedc080419d927b5c7e96ec0e1910461ff27", 0x66) 8.506244178s ago: executing program 0 (id=297): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "89803500"}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd=r0}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004800) 8.042823367s ago: executing program 0 (id=299): mmap$auto(0x0, 0x2020009, 0x7, 0x93, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) socket(0x29, 0x1, 0x2) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) kexec_load$auto(0x5, 0x4, 0x0, 0x4) 6.402274362s ago: executing program 1 (id=302): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/dri/vkms/vkms_config\x00', 0x80ab01, 0x0) lseek$auto(r0, 0x9, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0x6) mq_open$auto(0x0, 0x56a, 0xb275, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1cu\xb4\x9ab\xce\xa7t3\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xb5\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xdf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$auto(r3, 0x4008af24, r2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) 5.703909119s ago: executing program 3 (id=305): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8955, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mincore$auto(0x1000, 0x8, 0x0) (async) r0 = io_uring_setup$auto(0x8, 0x0) (async) mmap$auto(0x0, 0x8, 0x5, 0xeb0, 0xfffffffffffffffa, 0x8002) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1e) (async) write$auto(0xffffffffffffffff, 0x0, 0x45c) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x34b601, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) (async) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) (async, rerun: 32) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) (async) fadvise64$auto(r2, 0x7fffffffffffffff, 0x400000040000005, 0x7af) (async) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0xd) pwrite64$auto(0x2, 0x0, 0x0, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0x1c0b00, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) mmap$auto(0x0, 0xc, 0x9c0f, 0x200044eb1, 0x10006, 0x8005) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.0/usb10/avoid_reset_quirk\x00', 0x16b142, 0x0) (async, rerun: 32) sendfile$auto(0xffffffffffffffff, r4, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) 5.288200858s ago: executing program 3 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r1 = open(0x0, 0x22240, 0x154) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000100), r1) r3 = gettid() kill$auto(r3, 0x89e) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x49083, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/199, 0xc7) r5 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r5, 0x8000) r6 = geteuid() keyctl$auto(0x1f, r6, r6, 0x0, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000003740)={0x2524, r2, 0x210, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1509, 0x1, 0x0, 0x1, [@generic="f43b2a4b96162d54a36254ef620fb5dd3a2ec5575ee4210c9b9765b84043f44a1241395dbb9af489cfc3934db7ebe312d6b7926266693dfc8875f08dfdc80dbe06dbb8e4c1a94be19ef8608f7527d0bc6ef3b1e39613b2693f8fdbe18bffbb0330f76cd234c3cba444db9a47fd808262c70d5d790d89ae35dd5abcb81c7b20be046f0b586d122888", @nested={0x4, 0x22}, @nested={0xae, 0x11b, 0x0, 0x1, [@generic="188fa61b1204b90bd410dd8befd4a944b1d0ec87fd3606e5395f5f60c596e4324f62cdfa843748ac3f58ae568069c328d9a4a990aeefcb51bade93f4783c1d8f00c0ace918d33eecf94ead78b2153fbbc70e0be41263ca43559cee47d257d824f24e67a6a2c6182da9793e252f96ba8d0ef8f2f780164e97fd", @nested={0x4, 0xe7}, @typed={0xc, 0xb3, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0xaa}, @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@local}, @generic="791439106b173e1941"]}, @nested={0x79, 0xd8, 0x0, 0x1, [@generic="0730a608911b1c748cc74fb92d286b4317c4a87da0bae21acab0504b5084409fba61b404a377bd27f82d6401b39a4dd40fc1664a6d08d80cb33457490bcfb5071ff314786e21255216a4f3ff1c12f420b35bcd0d76cfeb2bd0e19751ad239c3fddd3212c6c278a8d18909b649c50a2ad9db98f1fa1"]}, @nested={0x102c, 0x121, 0x0, 0x1, [@nested={0x4, 0x86}, @generic="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", @typed={0x8, 0x17, 0x0, 0x0, @pid=r3}, @typed={0x8, 0xe5, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xc5, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x79, 0x0, 0x0, @u64=0x100}]}, @nested={0x1c, 0x6, 0x0, 0x1, [@nested={0x4, 0x3f}, @typed={0x8, 0x6c, 0x0, 0x0, @uid=r6}, @typed={0x8, 0xcb, 0x0, 0x0, @uid}, @typed={0x4, 0x11c}]}, @nested={0x225, 0xc9, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @u32=0xf}, @generic="f8a39a6e0b5b66ac38bb0dfd60904f3a9a54726cb3a7ea36e704921de46999cdfc2d5228a7db94b1e3167664af86d8648a5935405fae80031441ffa25156326bcec3ccf29dc485734b0250b5d8b0614d3b603c93432ae0184736ab1ba2bd3a659c7196461755067ca09444a1b7e44d8d55708ad1a43ffc7a5c05e432ba67724c4de59c6398af4f177b1c4f71d067b594c0c620bb018d84fd81ebc41ac16ffecba06a1ac02a53e33d7f09bd5013046f049d8e44af9eb4c0306fa24e5e43ec42b051b801a058cda660342d9ab5540350f0dcfab96ec26b83fa7b0380acf0b4599dead53e1af967f1f244c5f1f4cd3b9f47db838da6ec9bfc4ff206e29e7c", @typed={0x8, 0x20, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xc, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0x14c, 0x0, 0x0, @u32=0xfffffffa}, @nested={0x4, 0x132}, @nested={0x4, 0xdf}, @generic="fc97571ffc8b65905cc26536af8c31245e0551987c53ec0ae1ab64235d5d0681f51442c2ea2a0d57c171310171d46820ce5961d41d41423a19cf2e530ef837455f2368e44dd153813e36e24779f013dad17d7076e45c26873299bae5bf44f56928503f6767036bf21b2bcf6407f0168ea57cab260f4e53a4431bca23a5b69f6fed0ac29e7be050eaffa7436846afd6317ffdd815876584f9cd5951c7468ec4753c5c005ca7f95064fb54a8489104ef0ce60e7be7db1e515f9c86471e7e8acb09bff1a53665d79af7df16444cd83d81f34d30d3cdee0c2f943e16a2eba7c4a2ff36350de15eb97494db8e3295ff46dfa7", @nested={0x4, 0xa8}, @nested={0x4, 0x117}]}, @typed={0x7, 0x14, 0x0, 0x0, @str='{$\x00'}, @generic="936a61b744b50ef908423bb35df8b179eea8bb2cf8d22fa074a5dbcbce6d02ba487534f6850057b99fc95507b898516d85bed1e8e761135223908d15b247b4dfcc6f42f5ea2f5e763d0a491c32faa432fc6c7a207faf39160ebee80acaa362add5bcd1b1a2b0e39845fa0018b0fa272a40924abf19d7e6341dba0fb6b59495739517ac282c0381d46b9dc1075c0654e5313ee9855928e4147ebdc4a614316f0acc11615e245a270fafb08bb6221b190fb85ea56667d47ae956230286fd2af58393a6fd792d223ac94a", @nested={0xc, 0xed, 0x0, 0x1, [@typed={0x8, 0xd6, 0x0, 0x0, @fd=r0}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1004, 0x1, 0x0, 0x1, [@generic="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"]}]}, 0x2524}}, 0x4000084) sysfs$auto(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark$auto(0xffffffffffffffff, 0x205, 0xa, 0x4, 0x0) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="810b25bd7000ffdbdf253200000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) 4.962294399s ago: executing program 3 (id=307): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/lapb4/statistics/rx_missed_errors\x00', 0x147081, 0x0) getsockopt$auto_SO_RCVLOWAT(r0, 0x401, 0x12, &(0x7f0000000000)=',#@$\x00', &(0x7f0000000080)=0x4000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/138, 0x8a) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/138, 0x8a) 4.686150072s ago: executing program 3 (id=308): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898035000000000000000000ffff"}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd=r0}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004800) 4.644490148s ago: executing program 0 (id=309): mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x80001, 0x0) write$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000280)={r0, &(0x7f00000000c0)="6247ca60695195bcffb70f99fbb8499b562dc88bc22d9c05357319c094134c875434f03ae216f734a0f2007c0c7134bf70aac68bd03cf3356617f945430b3e70a8546bad2316ede097511ec2100201091b63ea0acbc51888d1c613f83f7f07903764b6577d70db429927a77499eb47f9c16c398eed6f9af1875c2378cfdced17247a8a7ed913e66dcbcdc4b7f5242941dcce55a9d468ceff4863bac778157f67d19693e0522cbe2883fd07ef3288d7b353511dc489758ddd9f178e58da843c65842219cdb475b9bb", 0x61, &(0x7f00000001c0)="2950c908544702c6a08e0da8a884143bf90d30a97b6f4bf57b64d5b54e7b24b6582dc09706f332d7a67f29274f00deace5d951ca5c1e35408b227fae5615d5255b161b6a03a342b33edfc45d09ea495717a5736a66f694be0ccfea34deda3ee4f11a4374abe3afe574e2643c3e3a7d55028f6acbbc0007f317fac2159c0a6942fdce921a636e2bf4943196860cfcdace5f684bd9d0dc6a2feb9de324afa79e4947821062d5a40d1cfc21f067224edf4b77b179ab5812a0818d043f", 0x80000000, &(0x7f0000000000)="19ca", &(0x7f0000000040)=0x4}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r1) 4.393495193s ago: executing program 3 (id=310): mmap$auto(0x0, 0x4, 0x2, 0xebf, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x6) (async) r0 = socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x6a, 0x1, 0x0, 0xc) close_range$auto(r0, r0, 0x0) socket(0x80000000000000a, 0x0, 0x0) (async) socket(0x80000000000000a, 0x0, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) memfd_secret$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x488981, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x381401, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x400) write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) (async) write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0) lseek$auto(r3, 0xffffffffffffffff, 0x1) write$auto(r2, 0x0, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, 0x0, 0x7, 0x6) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r5, 0x0, 0x8057, 0xffff) madvise$auto(0xfffffffffffffffe, 0x200009, 0x7) (async) madvise$auto(0xfffffffffffffffe, 0x200009, 0x7) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) 3.73584895s ago: executing program 3 (id=311): close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, 0x0, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10044910) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="72e6ff00", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="720100000259c3d199a2f7d4d58d7500b2aec9389deaaa91a81e29dde62b855254978e2bd8f9f19659ce6c9930437c566920d130139bdb5e0d046da50321e96b0cc592c8d15c0ebbbcc74a55d58705a7c1a10d1e599065fb4c05e83a23b262920a", @ANYBLOB="37f6"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) ioctl$auto(0x3, 0x8906, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000001", @ANYRES16=r1, @ANYBLOB="010b27bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) unshare$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) 3.61039853s ago: executing program 1 (id=312): r0 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/gid_map\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x1) preadv$auto(r0, &(0x7f0000001040)={&(0x7f0000000040), 0x40}, 0x8, 0x6, 0xfffffffffffffff8) socketpair$auto(0x0, 0x0, 0x6, &(0x7f0000000040)=0x6) 3.283714856s ago: executing program 1 (id=313): mmap$auto(0x8000000000000000, 0x2020009, 0x3, 0xebd, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x3, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) r0 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) (async) ftruncate$auto(0x3, 0x700) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) socket(0x2, 0x1, 0x106) (async) bind$auto(0x3, 0x0, 0x6a) (async) connect$auto(0x3, 0x0, 0x54) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose3/name_assign_type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/118, 0x76) (async) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r2, 0x5, 0x2b, 0x0, 0x0) read$auto_uinput_fops_uinput(r0, &(0x7f0000000100)=""/17, 0x11) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x840, 0x40000a, 0xb6a, 0x9b7f, 0x2, 0x5) (async) socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.10/usb30/30-0:1.0/bInterfaceSubClass\x00', 0x129102, 0x0) write$auto(r4, &(0x7f0000000000)='y\x8c', 0x2) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) write$auto(r3, 0x0, 0xfffffdef) connect$auto(r2, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 2.812055019s ago: executing program 1 (id=314): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) (async) socket(0xa, 0x2, 0x3a) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) (async, rerun: 64) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) (rerun: 64) read$auto_tap_fops_tap(r0, &(0x7f0000000180)=""/146, 0x92) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x63480, 0x0) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x7f, 0x80000001) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = memfd_secret$auto(0x0) (async) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000002140), 0xa002, 0x0) acct$auto(&(0x7f00000000c0)='/dev/cachefiles\x00') (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x4011) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r3, r4, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000240), r2) sendmsg$auto_SMC_PNETID_GET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300094008c0008", @ANYRES16=r5, @ANYBLOB="02002cbd7000fbdbdf25010000000500020000000000140003002f6465762f636163686566696c657300"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0xb, 0x4, 0x9, 0x8c) (rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) 1.998977565s ago: executing program 0 (id=315): sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x14, 0x0, 0x59e638bc4fbb3f7d, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vicodec.0/modalias\x00', 0x40, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$auto(r3, &(0x7f00000000c0)=@ax25={0x3, @default, 0x3}, &(0x7f0000000000)=0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x85, 0x0) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x484, 0x0, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) 750.846852ms ago: executing program 1 (id=316): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x92) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto_ptdump_fops_(r0, &(0x7f0000000040)=""/88, 0x58) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) io_uring_setup$auto(0x9e6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x30180, 0x0) 239.943068ms ago: executing program 1 (id=317): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$auto(r0, 0x88, 0x65, 0x0, 0x0) (async) r1 = clone3$auto(&(0x7f0000000300)={0x5, 0x5, 0x6, 0x8, 0x5, 0x4, 0x9, 0x0, 0x3, 0x1000, 0x1}, 0x4) prctl$auto(0x8000, 0x6, r1, 0x5, 0x1) (async, rerun: 64) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async, rerun: 64) socket(0x1e, 0x1, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop13/queue/wbt_lat_usec\x00', 0xa801, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async, rerun: 32) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) socket(0x11, 0x3, 0x9) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r5, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r5, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async, rerun: 32) socket(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="13", @ANYBLOB="72010000"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x80e4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 0 (id=318): mmap$auto(0x0, 0x1000000000000004, 0x9, 0x91, 0xffffffffffffffff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) prctl$auto(0x801, 0x1, 0x0, 0x3, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0xf, 0x1, 0xfffffffe) setsockopt$auto(0x7, 0x114, 0x3, 0xffffffffffffffff, 0xa0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.253' (ED25519) to the list of known hosts. [ 98.398537][ T5835] cgroup: Unknown subsys name 'net' [ 98.534778][ T5835] cgroup: Unknown subsys name 'cpuset' [ 98.544888][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.452488][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.392022][ T980] cfg80211: failed to load regulatory.db [ 102.761226][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.770888][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.778563][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.788375][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.803007][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.821129][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.829695][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.839151][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.840344][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.854284][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.871334][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.872301][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.887012][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.894922][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.923614][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.964058][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.972317][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.984748][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.999793][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.008586][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.671389][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 103.685314][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 103.784555][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 103.854751][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 103.998401][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.005975][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.014520][ T5849] bridge_slave_0: entered allmulticast mode [ 104.022926][ T5849] bridge_slave_0: entered promiscuous mode [ 104.031827][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.039004][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.048220][ T5846] bridge_slave_0: entered allmulticast mode [ 104.056044][ T5846] bridge_slave_0: entered promiscuous mode [ 104.077354][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.084617][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.091891][ T5849] bridge_slave_1: entered allmulticast mode [ 104.099307][ T5849] bridge_slave_1: entered promiscuous mode [ 104.107074][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.114436][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.121811][ T5846] bridge_slave_1: entered allmulticast mode [ 104.129162][ T5846] bridge_slave_1: entered promiscuous mode [ 104.268396][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.292621][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.299845][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.308702][ T5857] bridge_slave_0: entered allmulticast mode [ 104.316622][ T5857] bridge_slave_0: entered promiscuous mode [ 104.327915][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.342000][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.354985][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.394167][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.401539][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.408733][ T5852] bridge_slave_0: entered allmulticast mode [ 104.416590][ T5852] bridge_slave_0: entered promiscuous mode [ 104.424523][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.432794][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.440009][ T5857] bridge_slave_1: entered allmulticast mode [ 104.447596][ T5857] bridge_slave_1: entered promiscuous mode [ 104.496183][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.503838][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.511261][ T5852] bridge_slave_1: entered allmulticast mode [ 104.518684][ T5852] bridge_slave_1: entered promiscuous mode [ 104.545892][ T5849] team0: Port device team_slave_0 added [ 104.556302][ T5846] team0: Port device team_slave_0 added [ 104.607350][ T5849] team0: Port device team_slave_1 added [ 104.616625][ T5846] team0: Port device team_slave_1 added [ 104.639296][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.653043][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.693146][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.704886][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.743656][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.751683][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.777967][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.833374][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.840772][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.873954][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.885962][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.893032][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.919045][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.933568][ T5852] team0: Port device team_slave_0 added [ 104.941270][ T5847] Bluetooth: hci2: command tx timeout [ 104.947026][ T5847] Bluetooth: hci0: command tx timeout [ 104.956441][ T5857] team0: Port device team_slave_0 added [ 104.963411][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.970651][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.996736][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.020277][ T5847] Bluetooth: hci3: command tx timeout [ 105.021184][ T5852] team0: Port device team_slave_1 added [ 105.025999][ T5847] Bluetooth: hci1: command tx timeout [ 105.051262][ T5857] team0: Port device team_slave_1 added [ 105.146642][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.154015][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.180070][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.193314][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.200428][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.226453][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.244392][ T5846] hsr_slave_0: entered promiscuous mode [ 105.251485][ T5846] hsr_slave_1: entered promiscuous mode [ 105.258900][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.266237][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.292289][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.344266][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.351334][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.378107][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.395154][ T5849] hsr_slave_0: entered promiscuous mode [ 105.401687][ T5849] hsr_slave_1: entered promiscuous mode [ 105.407839][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.416516][ T5849] Cannot create hsr debugfs directory [ 105.521484][ T5857] hsr_slave_0: entered promiscuous mode [ 105.528091][ T5857] hsr_slave_1: entered promiscuous mode [ 105.534552][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.542625][ T5857] Cannot create hsr debugfs directory [ 105.554529][ T5852] hsr_slave_0: entered promiscuous mode [ 105.562324][ T5852] hsr_slave_1: entered promiscuous mode [ 105.568519][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.576281][ T5852] Cannot create hsr debugfs directory [ 106.072386][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.088109][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.099212][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.111984][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.193429][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.212689][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.226781][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.251270][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.323254][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.347041][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.378653][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.415020][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.479519][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.513537][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.544534][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.557380][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.665171][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.720056][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.753893][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.766358][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.773795][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.802639][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.809824][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.831122][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.885894][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.904960][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.916025][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.923265][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.947989][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.955169][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.974544][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.981780][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.020410][ T5855] Bluetooth: hci2: command tx timeout [ 107.026001][ T5847] Bluetooth: hci0: command tx timeout [ 107.043259][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.050487][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.099893][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.108129][ T5847] Bluetooth: hci1: command tx timeout [ 107.110399][ T5855] Bluetooth: hci3: command tx timeout [ 107.167364][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.239208][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.246484][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.258942][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.266252][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.653230][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.824592][ T5846] veth0_vlan: entered promiscuous mode [ 107.858503][ T5846] veth1_vlan: entered promiscuous mode [ 107.933530][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.988371][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.005320][ T5846] veth0_macvtap: entered promiscuous mode [ 108.035331][ T5846] veth1_macvtap: entered promiscuous mode [ 108.063456][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.087329][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.108676][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.139476][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.148811][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.159208][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.168144][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.220015][ T5857] veth0_vlan: entered promiscuous mode [ 108.237535][ T5849] veth0_vlan: entered promiscuous mode [ 108.249662][ T5857] veth1_vlan: entered promiscuous mode [ 108.289163][ T5849] veth1_vlan: entered promiscuous mode [ 108.352908][ T5852] veth0_vlan: entered promiscuous mode [ 108.413178][ T5852] veth1_vlan: entered promiscuous mode [ 108.447997][ T5857] veth0_macvtap: entered promiscuous mode [ 108.478163][ T5857] veth1_macvtap: entered promiscuous mode [ 108.498190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.514859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.535135][ T5849] veth0_macvtap: entered promiscuous mode [ 108.573248][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.586688][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.588740][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.605644][ T5849] veth1_macvtap: entered promiscuous mode [ 108.636115][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.653343][ T5852] veth0_macvtap: entered promiscuous mode [ 108.689095][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.706118][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.718700][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.723901][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.733490][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.751495][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.768214][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.783911][ T5852] veth1_macvtap: entered promiscuous mode [ 108.819060][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.828642][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.837556][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.847709][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.876047][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.909997][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.962234][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.970882][ T5935] process 'syz.1.2' launched '/dev/fd/10' with NULL argv: empty string added [ 108.973224][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.988888][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.997922][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.038692][ T5935] FAULT_INJECTION: forcing a failure. [ 109.038692][ T5935] name failslab, interval 1, probability 0, space 0, times 1 [ 109.059310][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz.1.2 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 109.059357][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.059383][ T5935] Call Trace: [ 109.059394][ T5935] [ 109.059411][ T5935] dump_stack_lvl+0x16c/0x1f0 [ 109.059455][ T5935] should_fail_ex+0x512/0x640 [ 109.059490][ T5935] ? __kmalloc_noprof+0xbf/0x510 [ 109.059526][ T5935] ? ops_init+0x77/0x5f0 [ 109.059562][ T5935] should_failslab+0xc2/0x120 [ 109.059601][ T5935] __kmalloc_noprof+0xd2/0x510 [ 109.059633][ T5935] ? __raw_spin_lock_init+0x3a/0x110 [ 109.059703][ T5935] ops_init+0x77/0x5f0 [ 109.059745][ T5935] setup_net+0x1ff/0x510 [ 109.059782][ T5935] ? lockdep_init_map_type+0x5c/0x280 [ 109.059830][ T5935] ? __pfx_setup_net+0x10/0x10 [ 109.059871][ T5935] ? debug_mutex_init+0x37/0x70 [ 109.059910][ T5935] copy_net_ns+0x2a6/0x5f0 [ 109.059957][ T5935] create_new_namespaces+0x3ea/0xa90 [ 109.060006][ T5935] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 109.060049][ T5935] ksys_unshare+0x45b/0xa40 [ 109.060100][ T5935] ? __pfx_ksys_unshare+0x10/0x10 [ 109.060147][ T5935] ? xfd_validate_state+0x61/0x180 [ 109.060205][ T5935] __x64_sys_unshare+0x31/0x40 [ 109.060249][ T5935] do_syscall_64+0xcd/0x490 [ 109.060286][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.060319][ T5935] RIP: 0033:0x7fb0d7b8e9a9 [ 109.060353][ T5935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.060384][ T5935] RSP: 002b:00007fb0d89d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.060414][ T5935] RAX: ffffffffffffffda RBX: 00007fb0d7db5fa0 RCX: 00007fb0d7b8e9a9 [ 109.060435][ T5935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 109.060454][ T5935] RBP: 00007fb0d7c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 109.060474][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.060493][ T5935] R13: 0000000000000000 R14: 00007fb0d7db5fa0 R15: 00007ffdc373bae8 [ 109.060535][ T5935] [ 109.131765][ T5847] Bluetooth: hci2: command tx timeout [ 109.169281][ T5855] Bluetooth: hci0: command tx timeout [ 109.182466][ T5847] Bluetooth: hci3: command tx timeout [ 109.191113][ T5847] Bluetooth: hci1: command tx timeout [ 109.397414][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.408351][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.472088][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.494230][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.559962][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.582862][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.704285][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.721788][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.814068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.866396][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.942425][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.970708][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.036938][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.368267][ T5949] vivid-003: ================= START STATUS ================= [ 110.410973][ T5949] vivid-003: Radio HW Seek Mode: Bounded [ 110.438851][ T5949] vivid-003: Radio Programmable HW Seek: false [ 110.493473][ T5949] vivid-003: RDS Rx I/O Mode: Block I/O [ 110.510703][ T5949] vivid-003: Generate RBDS Instead of RDS: false [ 110.526899][ T5949] vivid-003: RDS Reception: true [ 110.549128][ T5949] vivid-003: RDS Program Type: 0 inactive [ 110.559654][ T5949] vivid-003: RDS PS Name: inactive [ 110.565372][ T5949] vivid-003: RDS Radio Text: inactive [ 110.574455][ T5949] vivid-003: RDS Traffic Announcement: false inactive [ 110.584500][ T5949] vivid-003: RDS Traffic Program: false inactive [ 110.585665][ T5949] vivid-003: RDS Music: false inactive [ 110.605433][ T5949] vivid-003: ================== END STATUS ================== [ 110.860885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.869155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.988621][ T5955] ptrace attach of ""[5960] was attempted by "./syz-executor exec"[5955] [ 111.188004][ T5847] Bluetooth: hci2: command tx timeout [ 111.266747][ T5847] Bluetooth: hci3: command tx timeout [ 111.266758][ T5855] Bluetooth: hci0: command tx timeout [ 111.341315][ T5847] Bluetooth: hci1: command tx timeout [ 111.662350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.041184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.201388][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.221331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.230026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.425571][ T5977] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 112.994807][ T5977] Zero length message leads to an empty skb [ 113.086405][ T5984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.613680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.661119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.821174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.332616][ T5998] sd 0:0:1:0: PR command failed: 1026 [ 114.340519][ T5998] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 114.350699][ T5998] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 114.391467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.431257][ T6000] netlink: 314 bytes leftover after parsing attributes in process `syz.2.14'. [ 114.491997][ T5998] syz.0.13 (5998): /proc/5994/oom_adj is deprecated, please use /proc/5994/oom_score_adj instead. [ 115.612826][ T6021] FAULT_INJECTION: forcing a failure. [ 115.612826][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 115.654937][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.1.16 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 115.654984][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.655002][ T6021] Call Trace: [ 115.655012][ T6021] [ 115.655026][ T6021] dump_stack_lvl+0x16c/0x1f0 [ 115.655057][ T6021] should_fail_ex+0x512/0x640 [ 115.655081][ T6021] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 115.655109][ T6021] should_failslab+0xc2/0x120 [ 115.655137][ T6021] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 115.655170][ T6021] ? security_file_alloc+0x34/0x2b0 [ 115.655212][ T6021] security_file_alloc+0x34/0x2b0 [ 115.655251][ T6021] init_file+0x93/0x4c0 [ 115.655280][ T6021] alloc_empty_file+0x73/0x1e0 [ 115.655311][ T6021] path_openat+0xda/0x2cb0 [ 115.655332][ T6021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.655366][ T6021] ? __pfx_path_openat+0x10/0x10 [ 115.655391][ T6021] ? __lock_acquire+0xb8a/0x1c90 [ 115.655427][ T6021] do_filp_open+0x20b/0x470 [ 115.655450][ T6021] ? __pfx_do_filp_open+0x10/0x10 [ 115.655494][ T6021] ? alloc_fd+0x471/0x7d0 [ 115.655539][ T6021] do_sys_openat2+0x11b/0x1d0 [ 115.655570][ T6021] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.655613][ T6021] __x64_sys_openat+0x174/0x210 [ 115.655645][ T6021] ? __pfx___x64_sys_openat+0x10/0x10 [ 115.655690][ T6021] do_syscall_64+0xcd/0x490 [ 115.655716][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.655739][ T6021] RIP: 0033:0x7fb0d7b8e9a9 [ 115.655758][ T6021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.655780][ T6021] RSP: 002b:00007fb0d89b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.655802][ T6021] RAX: ffffffffffffffda RBX: 00007fb0d7db6080 RCX: 00007fb0d7b8e9a9 [ 115.655817][ T6021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 115.655831][ T6021] RBP: 00007fb0d7c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 115.655845][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.655859][ T6021] R13: 0000000000000000 R14: 00007fb0d7db6080 R15: 00007ffdc373bae8 [ 115.655887][ T6021] [ 116.294939][ T6009] svc: failed to register nfsdv3 RPC service (errno 111). [ 116.578724][ T6009] svc: failed to register nfsaclv3 RPC service (errno 111). [ 121.032610][ T6085] FAULT_INJECTION: forcing a failure. [ 121.032610][ T6085] name fail_futex, interval 1, probability 0, space 0, times 1 [ 121.068567][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: syz.3.25 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 121.068613][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.068632][ T6085] Call Trace: [ 121.068642][ T6085] [ 121.068655][ T6085] dump_stack_lvl+0x16c/0x1f0 [ 121.068694][ T6085] should_fail_ex+0x512/0x640 [ 121.068734][ T6085] get_futex_key+0x1d0/0x1540 [ 121.068779][ T6085] ? __pfx_get_futex_key+0x10/0x10 [ 121.068839][ T6085] futex_wake+0xe7/0x4e0 [ 121.068892][ T6085] ? __pfx_futex_wake+0x10/0x10 [ 121.068943][ T6085] ? rcu_is_watching+0x12/0xc0 [ 121.068998][ T6085] do_futex+0x1e3/0x350 [ 121.069041][ T6085] ? __pfx_do_futex+0x10/0x10 [ 121.069087][ T6085] ? __pfx___might_resched+0x10/0x10 [ 121.069131][ T6085] __x64_sys_futex+0x1e0/0x4c0 [ 121.069175][ T6085] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 121.069229][ T6085] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.069273][ T6085] ? __pfx___do_sys_close_range+0x10/0x10 [ 121.069321][ T6085] do_syscall_64+0xcd/0x490 [ 121.069359][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.069392][ T6085] RIP: 0033:0x7f6ada98e9a9 [ 121.069419][ T6085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.069452][ T6085] RSP: 002b:00007f6adb7e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.069483][ T6085] RAX: ffffffffffffffda RBX: 00007f6adabb5fa8 RCX: 00007f6ada98e9a9 [ 121.069505][ T6085] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6adabb5fac [ 121.069526][ T6085] RBP: 00007f6adabb5fa0 R08: 00007f6adb7e9000 R09: 0000000000000000 [ 121.069546][ T6085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6adabb5fac [ 121.069567][ T6085] R13: 0000000000000000 R14: 00007ffdeed4ce40 R15: 00007ffdeed4cf28 [ 121.069609][ T6085] [ 123.784485][ T6121] mmap: syz.3.29 (6121) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.372235][ T6121] netlink: 342 bytes leftover after parsing attributes in process `syz.3.29'. [ 125.406800][ T6121] netlink: 342 bytes leftover after parsing attributes in process `syz.3.29'. [ 125.877056][ T6120] syz.3.29 (6120) used greatest stack depth: 19784 bytes left [ 126.365686][ T6145] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 127.905398][ T6163] FAULT_INJECTION: forcing a failure. [ 127.905398][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 127.963763][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.3.37 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 127.963810][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.963829][ T6163] Call Trace: [ 127.963840][ T6163] [ 127.963852][ T6163] dump_stack_lvl+0x16c/0x1f0 [ 127.963891][ T6163] should_fail_ex+0x512/0x640 [ 127.963924][ T6163] ? __kmalloc_noprof+0xbf/0x510 [ 127.963958][ T6163] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 127.964004][ T6163] should_failslab+0xc2/0x120 [ 127.964042][ T6163] __kmalloc_noprof+0xd2/0x510 [ 127.964087][ T6163] vb2_core_allocated_buffers_storage+0x184/0x220 [ 127.964136][ T6163] vb2_core_reqbufs+0x398/0xfe0 [ 127.964182][ T6163] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 127.964245][ T6163] __vb2_init_fileio+0x3f1/0x1100 [ 127.964295][ T6163] ? __mutex_lock+0x1ca/0xb90 [ 127.964327][ T6163] ? __pfx___futex_wait+0x10/0x10 [ 127.964371][ T6163] ? vb2_fop_write+0xe6/0x3f0 [ 127.964410][ T6163] __vb2_perform_fileio+0x9c2/0x1660 [ 127.964461][ T6163] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 127.964513][ T6163] vb2_fop_write+0x207/0x3f0 [ 127.964554][ T6163] v4l2_write+0x226/0x360 [ 127.964583][ T6163] ? __pfx_v4l2_write+0x10/0x10 [ 127.964609][ T6163] vfs_write+0x29d/0x1150 [ 127.964646][ T6163] ? __pfx_vfs_write+0x10/0x10 [ 127.964671][ T6163] ? find_held_lock+0x2b/0x80 [ 127.964702][ T6163] ? __fget_files+0x204/0x3c0 [ 127.964754][ T6163] ? __fget_files+0x20e/0x3c0 [ 127.964809][ T6163] ksys_write+0x12a/0x250 [ 127.964836][ T6163] ? __pfx_ksys_write+0x10/0x10 [ 127.964874][ T6163] do_syscall_64+0xcd/0x490 [ 127.964908][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.964939][ T6163] RIP: 0033:0x7f6ada98e9a9 [ 127.964983][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.965013][ T6163] RSP: 002b:00007f6adb7a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.965041][ T6163] RAX: ffffffffffffffda RBX: 00007f6adabb6160 RCX: 00007f6ada98e9a9 [ 127.965061][ T6163] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 127.965079][ T6163] RBP: 00007f6adaa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 127.965097][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.965114][ T6163] R13: 0000000000000000 R14: 00007f6adabb6160 R15: 00007ffdeed4cf28 [ 127.965153][ T6163] [ 128.207725][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.286275][ T6175] netlink: 342 bytes leftover after parsing attributes in process `syz.3.40'. [ 129.396703][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.40'. [ 130.894453][ T6191] FAULT_INJECTION: forcing a failure. [ 130.894453][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 130.970962][ T6191] CPU: 1 UID: 0 PID: 6191 Comm: syz.0.43 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 130.970997][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.971011][ T6191] Call Trace: [ 130.971019][ T6191] [ 130.971028][ T6191] dump_stack_lvl+0x16c/0x1f0 [ 130.971057][ T6191] should_fail_ex+0x512/0x640 [ 130.971088][ T6191] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 130.971116][ T6191] should_failslab+0xc2/0x120 [ 130.971144][ T6191] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 130.971170][ T6191] ? sock_alloc_inode+0x25/0x1c0 [ 130.971205][ T6191] ? __pfx_sock_alloc_inode+0x10/0x10 [ 130.971234][ T6191] sock_alloc_inode+0x25/0x1c0 [ 130.971263][ T6191] alloc_inode+0x61/0x240 [ 130.971293][ T6191] sock_alloc+0x40/0x280 [ 130.971322][ T6191] __sock_create+0xc1/0x8d0 [ 130.971360][ T6191] __sys_socket+0x14d/0x260 [ 130.971392][ T6191] ? __x64_sys_openat+0x160/0x210 [ 130.971425][ T6191] ? __pfx___sys_socket+0x10/0x10 [ 130.971459][ T6191] ? xfd_validate_state+0x61/0x180 [ 130.971498][ T6191] __x64_sys_socket+0x72/0xb0 [ 130.971530][ T6191] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.971553][ T6191] do_syscall_64+0xcd/0x490 [ 130.971580][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.971604][ T6191] RIP: 0033:0x7f9ae878e9a9 [ 130.971622][ T6191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.971644][ T6191] RSP: 002b:00007f9ae9615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 130.971665][ T6191] RAX: ffffffffffffffda RBX: 00007f9ae89b6160 RCX: 00007f9ae878e9a9 [ 130.971681][ T6191] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 130.971694][ T6191] RBP: 00007f9ae8810d69 R08: 0000000000000000 R09: 0000000000000000 [ 130.971708][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.971721][ T6191] R13: 0000000000000000 R14: 00007f9ae89b6160 R15: 00007ffcf9d40fe8 [ 130.971750][ T6191] [ 130.971888][ T6191] socket: no more sockets [ 131.123345][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.645379][ T30] audit: type=1326 audit(6351.040:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.2.44" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a5bb8e9a9 code=0x0 [ 133.277739][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'. [ 133.552191][ T6222] ipvlan0: entered allmulticast mode [ 133.557724][ T6222] veth0_vlan: entered allmulticast mode [ 134.369274][ T6240] FAULT_INJECTION: forcing a failure. [ 134.369274][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.428878][ T6240] CPU: 1 UID: 0 PID: 6240 Comm: syz.3.51 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 134.428924][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.428949][ T6240] Call Trace: [ 134.428960][ T6240] [ 134.428974][ T6240] dump_stack_lvl+0x16c/0x1f0 [ 134.429017][ T6240] should_fail_ex+0x512/0x640 [ 134.429057][ T6240] _copy_from_user+0x2e/0xd0 [ 134.429096][ T6240] move_addr_to_kernel+0x65/0x170 [ 134.429148][ T6240] __sys_sendto+0x1be/0x520 [ 134.429181][ T6240] ? __pfx___sys_sendto+0x10/0x10 [ 134.429225][ T6240] ? find_held_lock+0x2b/0x80 [ 134.429291][ T6240] __x64_sys_sendto+0xe0/0x1c0 [ 134.429322][ T6240] ? do_syscall_64+0x91/0x490 [ 134.429357][ T6240] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.429389][ T6240] do_syscall_64+0xcd/0x490 [ 134.429428][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.429463][ T6240] RIP: 0033:0x7f6ada99083c [ 134.429490][ T6240] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 134.429522][ T6240] RSP: 002b:00007f6adb7a4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 134.429554][ T6240] RAX: ffffffffffffffda RBX: 00007f6adb7a4fc0 RCX: 00007f6ada99083c [ 134.429578][ T6240] RDX: 0000000000000020 RSI: 00007f6adb7a5010 RDI: 0000000000000008 [ 134.429599][ T6240] RBP: 0000000000000000 R08: 00007f6adb7a4f14 R09: 000000000000000c [ 134.429621][ T6240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 134.429641][ T6240] R13: 00007f6adb7a4f68 R14: 00007f6adb7a5010 R15: 0000000000000000 [ 134.429682][ T6240] [ 134.592151][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.234245][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 137.276669][ T6275] bridge_slave_1: left allmulticast mode [ 137.287877][ T6275] bridge_slave_1: left promiscuous mode [ 137.356754][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.707581][ T6275] bridge_slave_0: left allmulticast mode [ 137.714075][ T6275] bridge_slave_0: left promiscuous mode [ 137.780648][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.994072][ T6322] netlink: 314 bytes leftover after parsing attributes in process `syz.1.63'. [ 142.262232][ T6324] sd 0:0:1:0: PR command failed: 1026 [ 142.268533][ T6324] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 142.275871][ T6324] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 142.859402][ T6342] netlink: 342 bytes leftover after parsing attributes in process `syz.1.69'. [ 143.126193][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 143.354966][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.395029][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.996284][ T6372] FAULT_INJECTION: forcing a failure. [ 145.996284][ T6372] name failslab, interval 1, probability 0, space 0, times 0 [ 146.080325][ T6372] CPU: 1 UID: 0 PID: 6372 Comm: syz.2.74 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 146.080375][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.080397][ T6372] Call Trace: [ 146.080407][ T6372] [ 146.080419][ T6372] dump_stack_lvl+0x16c/0x1f0 [ 146.080451][ T6372] should_fail_ex+0x512/0x640 [ 146.080475][ T6372] ? fs_reclaim_acquire+0xae/0x150 [ 146.080512][ T6372] should_failslab+0xc2/0x120 [ 146.080540][ T6372] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 146.080565][ T6372] ? security_inode_alloc+0x3b/0x2b0 [ 146.080602][ T6372] security_inode_alloc+0x3b/0x2b0 [ 146.080645][ T6372] inode_init_always_gfp+0xce4/0x1030 [ 146.080690][ T6372] alloc_inode+0x86/0x240 [ 146.080720][ T6372] sock_alloc+0x40/0x280 [ 146.080749][ T6372] __sock_create+0xc1/0x8d0 [ 146.080788][ T6372] __sys_socket+0x14d/0x260 [ 146.080820][ T6372] ? __x64_sys_openat+0x160/0x210 [ 146.080858][ T6372] ? __pfx___sys_socket+0x10/0x10 [ 146.080893][ T6372] ? xfd_validate_state+0x61/0x180 [ 146.080934][ T6372] __x64_sys_socket+0x72/0xb0 [ 146.080967][ T6372] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.080989][ T6372] do_syscall_64+0xcd/0x490 [ 146.081017][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.081041][ T6372] RIP: 0033:0x7f7a5bb8e9a9 [ 146.081060][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.081082][ T6372] RSP: 002b:00007f7a5c998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 146.081103][ T6372] RAX: ffffffffffffffda RBX: 00007f7a5bdb6160 RCX: 00007f7a5bb8e9a9 [ 146.081119][ T6372] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 146.081132][ T6372] RBP: 00007f7a5bc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 146.081146][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.081159][ T6372] R13: 0000000000000000 R14: 00007f7a5bdb6160 R15: 00007ffe36a8bc28 [ 146.081188][ T6372] [ 146.287350][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.365473][ T6372] socket: no more sockets [ 149.764412][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'. [ 149.774076][ T6407] ipvlan0: entered allmulticast mode [ 149.779538][ T6407] veth0_vlan: entered allmulticast mode [ 150.743110][ T6409] netlink: 342 bytes leftover after parsing attributes in process `syz.2.80'. [ 151.130405][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 152.493164][ T6438] FAULT_INJECTION: forcing a failure. [ 152.493164][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 152.510248][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.1.85 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 152.510293][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.510312][ T6438] Call Trace: [ 152.510323][ T6438] [ 152.510336][ T6438] dump_stack_lvl+0x16c/0x1f0 [ 152.510377][ T6438] should_fail_ex+0x512/0x640 [ 152.510410][ T6438] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 152.510457][ T6438] should_failslab+0xc2/0x120 [ 152.510495][ T6438] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 152.510530][ T6438] ? sock_alloc_inode+0x25/0x1c0 [ 152.510579][ T6438] ? __pfx_sock_alloc_inode+0x10/0x10 [ 152.510621][ T6438] sock_alloc_inode+0x25/0x1c0 [ 152.510665][ T6438] alloc_inode+0x61/0x240 [ 152.510708][ T6438] sock_alloc+0x40/0x280 [ 152.510750][ T6438] __sock_create+0xc1/0x8d0 [ 152.510806][ T6438] __sys_socket+0x14d/0x260 [ 152.510853][ T6438] ? __x64_sys_openat+0x160/0x210 [ 152.510900][ T6438] ? __pfx___sys_socket+0x10/0x10 [ 152.510950][ T6438] ? xfd_validate_state+0x61/0x180 [ 152.511007][ T6438] __x64_sys_socket+0x72/0xb0 [ 152.511055][ T6438] ? lockdep_hardirqs_on+0x7c/0x110 [ 152.511088][ T6438] do_syscall_64+0xcd/0x490 [ 152.511127][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.511161][ T6438] RIP: 0033:0x7fb0d7b8e9a9 [ 152.511188][ T6438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.511220][ T6438] RSP: 002b:00007fb0d8993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 152.511251][ T6438] RAX: ffffffffffffffda RBX: 00007fb0d7db6160 RCX: 00007fb0d7b8e9a9 [ 152.511274][ T6438] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 152.511293][ T6438] RBP: 00007fb0d7c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 152.511313][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.511333][ T6438] R13: 0000000000000000 R14: 00007fb0d7db6160 R15: 00007ffdc373bae8 [ 152.511377][ T6438] [ 152.512629][ T6438] socket: no more sockets [ 152.660412][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.638352][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.90'. [ 155.647614][ T6472] ipvlan0: entered allmulticast mode [ 155.653100][ T6472] veth0_vlan: entered allmulticast mode [ 155.696637][ T6473] vivid-003: ================= START STATUS ================= [ 155.740765][ T6473] vivid-003: Radio HW Seek Mode: Bounded [ 155.852214][ T6473] vivid-003: Radio Programmable HW Seek: false [ 155.858861][ T6473] vivid-003: RDS Rx I/O Mode: Block I/O [ 155.874032][ T6473] vivid-003: Generate RBDS Instead of RDS: false [ 156.067439][ T6473] vivid-003: RDS Reception: true [ 156.078938][ T6473] vivid-003: RDS Program Type: 0 inactive [ 156.128555][ T6473] vivid-003: RDS PS Name: inactive [ 156.143113][ T6473] vivid-003: RDS Radio Text: inactive [ 156.168884][ T6473] vivid-003: RDS Traffic Announcement: false inactive [ 156.204255][ T6473] vivid-003: RDS Traffic Program: false inactive [ 156.333590][ T6473] vivid-003: RDS Music: false inactive [ 156.360277][ T6473] vivid-003: ================== END STATUS ================== [ 161.167422][ T6550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.103'. [ 161.201414][ T6550] bridge_slave_1: left allmulticast mode [ 161.225739][ T6550] bridge_slave_1: left promiscuous mode [ 161.262624][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.336513][ T6550] bridge_slave_0: left allmulticast mode [ 161.364987][ T6550] bridge_slave_0: left promiscuous mode [ 161.406696][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.922888][ T6582] FAULT_INJECTION: forcing a failure. [ 162.922888][ T6582] name failslab, interval 1, probability 0, space 0, times 0 [ 163.006783][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.110 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 163.006817][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.006832][ T6582] Call Trace: [ 163.006839][ T6582] [ 163.006849][ T6582] dump_stack_lvl+0x16c/0x1f0 [ 163.006878][ T6582] should_fail_ex+0x512/0x640 [ 163.006902][ T6582] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 163.006943][ T6582] should_failslab+0xc2/0x120 [ 163.006972][ T6582] __kmalloc_cache_noprof+0x6a/0x3e0 [ 163.007010][ T6582] ? kobject_create_and_add+0x4a/0xf0 [ 163.007045][ T6582] kobject_create_and_add+0x4a/0xf0 [ 163.007075][ T6582] __add_disk+0x709/0xf00 [ 163.007099][ T6582] ? find_held_lock+0x2b/0x80 [ 163.007127][ T6582] add_disk_fwnode+0x3f8/0x5d0 [ 163.007153][ T6582] zram_add+0x4c8/0x700 [ 163.007188][ T6582] ? __pfx_zram_add+0x10/0x10 [ 163.007241][ T6582] ? find_held_lock+0x2b/0x80 [ 163.007271][ T6582] ? __pfx_hot_add_show+0x10/0x10 [ 163.007304][ T6582] ? __pfx_class_attr_show+0x10/0x10 [ 163.007333][ T6582] hot_add_show+0x21/0x80 [ 163.007367][ T6582] class_attr_show+0x72/0xa0 [ 163.007398][ T6582] sysfs_kf_seq_show+0x216/0x3e0 [ 163.007439][ T6582] seq_read_iter+0x506/0x12c0 [ 163.007488][ T6582] kernfs_fop_read_iter+0x40f/0x5a0 [ 163.007518][ T6582] ? rw_verify_area+0xcf/0x680 [ 163.007568][ T6582] vfs_read+0x8bc/0xc60 [ 163.007594][ T6582] ? __pfx___mutex_lock+0x10/0x10 [ 163.007620][ T6582] ? __pfx_vfs_read+0x10/0x10 [ 163.007645][ T6582] ? __rcu_read_unlock+0x2b4/0x580 [ 163.007694][ T6582] ksys_read+0x12a/0x250 [ 163.007715][ T6582] ? __pfx_ksys_read+0x10/0x10 [ 163.007746][ T6582] do_syscall_64+0xcd/0x490 [ 163.007773][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.007797][ T6582] RIP: 0033:0x7f9ae878e9a9 [ 163.007816][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.007838][ T6582] RSP: 002b:00007f9ae9657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.007860][ T6582] RAX: ffffffffffffffda RBX: 00007f9ae89b5fa0 RCX: 00007f9ae878e9a9 [ 163.007875][ T6582] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 163.007889][ T6582] RBP: 00007f9ae8810d69 R08: 0000000000000000 R09: 0000000000000000 [ 163.007903][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.007916][ T6582] R13: 0000000000000000 R14: 00007f9ae89b5fa0 R15: 00007ffcf9d40fe8 [ 163.007947][ T6582] [ 163.578406][ T6593] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.625979][ T5897] Process accounting resumed [ 163.982417][ T6603] netlink: 334 bytes leftover after parsing attributes in process `syz.1.118'. [ 164.130456][ T5847] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 164.130506][ T5847] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 164.150447][ T5847] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 164.150514][ T5847] Bluetooth: hci3: adv larger than maximum supported [ 164.158551][ T5847] Bluetooth: hci3: adv larger than maximum supported [ 164.166346][ T5847] Bluetooth: hci3: Malformed LE Event: 0x0d [ 165.113233][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 165.408109][ T6634] hsr_slave_0 (unregistering): left promiscuous mode [ 167.755224][ T6683] CIFS: VFS: Unsupported security flags: 0x10 [ 167.818826][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.138'. [ 168.059225][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.108229][ T6698] FAULT_INJECTION: forcing a failure. [ 168.108229][ T6698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.144015][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.195688][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.0.141 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 168.195735][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.195754][ T6698] Call Trace: [ 168.195763][ T6698] [ 168.195774][ T6698] dump_stack_lvl+0x16c/0x1f0 [ 168.195813][ T6698] should_fail_ex+0x512/0x640 [ 168.195851][ T6698] _copy_from_user+0x2e/0xd0 [ 168.195898][ T6698] load_msg+0x19e/0x4a0 [ 168.195937][ T6698] do_mq_timedsend+0x3d7/0xc40 [ 168.195980][ T6698] ? __pfx_do_mq_timedsend+0x10/0x10 [ 168.196020][ T6698] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 168.196059][ T6698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.196099][ T6698] ? __fget_files+0x20e/0x3c0 [ 168.196161][ T6698] __x64_sys_mq_timedsend+0x1cd/0x260 [ 168.196203][ T6698] ? ksys_write+0x1ac/0x250 [ 168.196234][ T6698] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 168.196289][ T6698] do_syscall_64+0xcd/0x490 [ 168.196326][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.196359][ T6698] RIP: 0033:0x7f9ae878e9a9 [ 168.196384][ T6698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.196415][ T6698] RSP: 002b:00007f9ae9636038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 168.196444][ T6698] RAX: ffffffffffffffda RBX: 00007f9ae89b6080 RCX: 00007f9ae878e9a9 [ 168.196465][ T6698] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000008 [ 168.196483][ T6698] RBP: 00007f9ae9636090 R08: 0000000000000000 R09: 0000000000000000 [ 168.196502][ T6698] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 168.196520][ T6698] R13: 0000000000000001 R14: 00007f9ae89b6080 R15: 00007ffcf9d40fe8 [ 168.196561][ T6698] [ 168.399336][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.407154][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.033448][ T5847] Bluetooth: hci2: Malformed LE Event: 0x1b [ 169.256725][ T6717] MTRR 1 not used [ 169.262147][ T5847] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 169.934934][ T6729] FAULT_INJECTION: forcing a failure. [ 169.934934][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 170.005096][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.3.149 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 170.005141][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.005159][ T6729] Call Trace: [ 170.005168][ T6729] [ 170.005180][ T6729] dump_stack_lvl+0x16c/0x1f0 [ 170.005217][ T6729] should_fail_ex+0x512/0x640 [ 170.005248][ T6729] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 170.005286][ T6729] should_failslab+0xc2/0x120 [ 170.005325][ T6729] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 170.005359][ T6729] ? __proc_create+0xc3/0x8c0 [ 170.005393][ T6729] ? __proc_create+0x2ce/0x8c0 [ 170.005434][ T6729] __proc_create+0x2ce/0x8c0 [ 170.005471][ T6729] ? __pfx___proc_create+0x10/0x10 [ 170.005512][ T6729] ? _raw_write_unlock+0x28/0x50 [ 170.005542][ T6729] ? proc_register+0x314/0x5f0 [ 170.005583][ T6729] proc_create_reg+0x7d/0x180 [ 170.005623][ T6729] ? __pfx_can_rcvlist_sff_proc_show+0x10/0x10 [ 170.005665][ T6729] proc_create_net_single+0x86/0x170 [ 170.005703][ T6729] ? __pfx_proc_create_net_single+0x10/0x10 [ 170.005767][ T6729] can_init_proc+0x37f/0x4d0 [ 170.005807][ T6729] can_pernet_init+0x1e4/0x370 [ 170.005846][ T6729] ? __pfx_can_pernet_init+0x10/0x10 [ 170.005880][ T6729] ops_init+0x1df/0x5f0 [ 170.005923][ T6729] setup_net+0x1ff/0x510 [ 170.005959][ T6729] ? lockdep_init_map_type+0x5c/0x280 [ 170.006008][ T6729] ? __pfx_setup_net+0x10/0x10 [ 170.006050][ T6729] ? debug_mutex_init+0x37/0x70 [ 170.006089][ T6729] copy_net_ns+0x2a6/0x5f0 [ 170.006136][ T6729] create_new_namespaces+0x3ea/0xa90 [ 170.006185][ T6729] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 170.006226][ T6729] ksys_unshare+0x45b/0xa40 [ 170.006270][ T6729] ? __pfx_ksys_unshare+0x10/0x10 [ 170.006320][ T6729] ? syscall_user_dispatch+0x78/0x140 [ 170.006385][ T6729] __x64_sys_unshare+0x31/0x40 [ 170.006430][ T6729] do_syscall_64+0xcd/0x490 [ 170.006468][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.006503][ T6729] RIP: 0033:0x7f6ada98e9a9 [ 170.006529][ T6729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.006561][ T6729] RSP: 002b:00007f6adb7e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 170.006592][ T6729] RAX: ffffffffffffffda RBX: 00007f6adabb5fa0 RCX: 00007f6ada98e9a9 [ 170.006612][ T6729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 170.006630][ T6729] RBP: 00007f6adaa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 170.006648][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.006667][ T6729] R13: 0000000000000000 R14: 00007f6adabb5fa0 R15: 00007ffdeed4cf28 [ 170.006709][ T6729] [ 171.303492][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'. [ 171.376794][ T6745] FAULT_INJECTION: forcing a failure. [ 171.376794][ T6745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.399921][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz.2.153 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 171.399973][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.399993][ T6745] Call Trace: [ 171.400003][ T6745] [ 171.400015][ T6745] dump_stack_lvl+0x16c/0x1f0 [ 171.400058][ T6745] should_fail_ex+0x512/0x640 [ 171.400096][ T6745] _copy_from_user+0x2e/0xd0 [ 171.400133][ T6745] load_msg+0x253/0x4a0 [ 171.400172][ T6745] do_mq_timedsend+0x3d7/0xc40 [ 171.400216][ T6745] ? __pfx_do_mq_timedsend+0x10/0x10 [ 171.400256][ T6745] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 171.400296][ T6745] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.400337][ T6745] ? __fget_files+0x20e/0x3c0 [ 171.400398][ T6745] __x64_sys_mq_timedsend+0x1cd/0x260 [ 171.400439][ T6745] ? ksys_write+0x1ac/0x250 [ 171.400469][ T6745] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 171.400526][ T6745] do_syscall_64+0xcd/0x490 [ 171.400563][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.400596][ T6745] RIP: 0033:0x7f7a5bb8e9a9 [ 171.400622][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.400651][ T6745] RSP: 002b:00007f7a5c9b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 171.400681][ T6745] RAX: ffffffffffffffda RBX: 00007f7a5bdb6080 RCX: 00007f7a5bb8e9a9 [ 171.400709][ T6745] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000008 [ 171.400728][ T6745] RBP: 00007f7a5c9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 171.400748][ T6745] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 171.400766][ T6745] R13: 0000000000000001 R14: 00007f7a5bdb6080 R15: 00007ffe36a8bc28 [ 171.400807][ T6745] [ 171.765866][ T6759] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 171.829095][ T6758] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 173.517679][ T6810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'. [ 174.108259][ T6822] FAULT_INJECTION: forcing a failure. [ 174.108259][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.154380][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.2.172 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 174.154436][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.154455][ T6822] Call Trace: [ 174.154465][ T6822] [ 174.154477][ T6822] dump_stack_lvl+0x16c/0x1f0 [ 174.154516][ T6822] should_fail_ex+0x512/0x640 [ 174.154556][ T6822] _copy_from_user+0x2e/0xd0 [ 174.154594][ T6822] load_msg+0x19e/0x4a0 [ 174.154633][ T6822] do_mq_timedsend+0x3d7/0xc40 [ 174.154678][ T6822] ? __pfx_do_mq_timedsend+0x10/0x10 [ 174.154718][ T6822] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 174.154758][ T6822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.154799][ T6822] ? __fget_files+0x20e/0x3c0 [ 174.154861][ T6822] __x64_sys_mq_timedsend+0x1cd/0x260 [ 174.154903][ T6822] ? ksys_write+0x1ac/0x250 [ 174.154934][ T6822] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 174.154991][ T6822] do_syscall_64+0xcd/0x490 [ 174.155028][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.155060][ T6822] RIP: 0033:0x7f7a5bb8e9a9 [ 174.155085][ T6822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.155114][ T6822] RSP: 002b:00007f7a5c9b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 174.155143][ T6822] RAX: ffffffffffffffda RBX: 00007f7a5bdb6080 RCX: 00007f7a5bb8e9a9 [ 174.155164][ T6822] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000008 [ 174.155182][ T6822] RBP: 00007f7a5c9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 174.155200][ T6822] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 174.155219][ T6822] R13: 0000000000000001 R14: 00007f7a5bdb6080 R15: 00007ffe36a8bc28 [ 174.155260][ T6822] [ 177.580242][ T30] audit: type=1800 audit(6396.890:3): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.183" name="dbroot" dev="configfs" ino=10587 res=0 errno=0 [ 177.631909][ T6875] ima: policy update failed [ 177.698129][ T30] audit: type=1802 audit(6397.050:4): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.183" res=0 errno=0 [ 179.359315][ T6911] Invalid ELF header magic: != ELF [ 179.944250][ T6918] netlink: 13 bytes leftover after parsing attributes in process `syz.1.192'. [ 180.315285][ T6925] can: request_module (can-proto-4) failed. [ 183.299166][ T6973] random: crng reseeded on system resumption [ 183.335824][ T6973] [ 183.722332][ T6946] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 184.372296][ T6984] FAULT_INJECTION: forcing a failure. [ 184.372296][ T6984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.402205][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.3.205 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 184.402252][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.402270][ T6984] Call Trace: [ 184.402281][ T6984] [ 184.402297][ T6984] dump_stack_lvl+0x16c/0x1f0 [ 184.402335][ T6984] should_fail_ex+0x512/0x640 [ 184.402376][ T6984] _copy_to_user+0x32/0xd0 [ 184.402416][ T6984] simple_read_from_buffer+0xcb/0x170 [ 184.402469][ T6984] proc_fail_nth_read+0x197/0x270 [ 184.402517][ T6984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.402565][ T6984] ? rw_verify_area+0xcf/0x680 [ 184.402613][ T6984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.402658][ T6984] vfs_read+0x1e4/0xc60 [ 184.402695][ T6984] ? __pfx___mutex_lock+0x10/0x10 [ 184.402729][ T6984] ? __pfx_vfs_read+0x10/0x10 [ 184.402772][ T6984] ? __fget_files+0x20e/0x3c0 [ 184.402835][ T6984] ksys_read+0x12a/0x250 [ 184.402865][ T6984] ? __pfx_ksys_read+0x10/0x10 [ 184.402907][ T6984] do_syscall_64+0xcd/0x490 [ 184.402950][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.402982][ T6984] RIP: 0033:0x7f6ada98d3bc [ 184.403007][ T6984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.403033][ T6984] RSP: 002b:00007f6adb7c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.403054][ T6984] RAX: ffffffffffffffda RBX: 00007f6adabb6080 RCX: 00007f6ada98d3bc [ 184.403069][ T6984] RDX: 000000000000000f RSI: 00007f6adb7c70a0 RDI: 0000000000000009 [ 184.403083][ T6984] RBP: 00007f6adb7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.403097][ T6984] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 184.403110][ T6984] R13: 0000000000000001 R14: 00007f6adabb6080 R15: 00007ffdeed4cf28 [ 184.403139][ T6984] [ 186.265218][ T7008] CIFS: VFS: Unsupported security flags: 0x10 [ 186.374440][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 186.462912][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.495526][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.542494][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.577838][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.070929][ T7020] program syz.0.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.434495][ T7022] zswap: compressor not available [ 187.888438][ T7056] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 187.899024][ T7056] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 187.899024][ T7056] program syz.2.221 not setting count and/or reply_len properly [ 191.025288][ T7085] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 191.050349][ T7082] CIFS: VFS: Unsupported security flags: 0x10 [ 191.073449][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 191.086008][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.094452][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.170885][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.228449][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.044883][ T7077] ieee80211 phy13: Failed to add default virtual iface [ 193.362375][ T7128] nbd: must specify at least one socket [ 193.414113][ T7133] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 193.507417][ T7133] Invalid ELF header magic: != ELF [ 194.156344][ T7158] FAULT_INJECTION: forcing a failure. [ 194.156344][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 194.176194][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.1.245 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 194.176243][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.176264][ T7158] Call Trace: [ 194.176275][ T7158] [ 194.176287][ T7158] dump_stack_lvl+0x16c/0x1f0 [ 194.176328][ T7158] should_fail_ex+0x512/0x640 [ 194.176363][ T7158] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 194.176403][ T7158] should_failslab+0xc2/0x120 [ 194.176445][ T7158] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 194.176480][ T7158] ? __proc_create+0xc3/0x8c0 [ 194.176516][ T7158] ? __proc_create+0x2ce/0x8c0 [ 194.176559][ T7158] __proc_create+0x2ce/0x8c0 [ 194.176598][ T7158] ? __pfx___proc_create+0x10/0x10 [ 194.176645][ T7158] ? _raw_write_unlock+0x28/0x50 [ 194.176681][ T7158] proc_create_reg+0x7d/0x180 [ 194.176725][ T7158] proc_create_data+0x86/0x110 [ 194.176765][ T7158] ? __pfx_proc_create_data+0x10/0x10 [ 194.176807][ T7158] ? cache_register_net+0x137/0x5e0 [ 194.176853][ T7158] cache_register_net+0x1e0/0x5e0 [ 194.176892][ T7158] gss_svc_init_net+0x151/0x660 [ 194.176923][ T7158] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 194.176969][ T7158] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 194.177004][ T7158] ops_init+0x1df/0x5f0 [ 194.177044][ T7158] setup_net+0x1ff/0x510 [ 194.177079][ T7158] ? lockdep_init_map_type+0x5c/0x280 [ 194.177136][ T7158] ? __pfx_setup_net+0x10/0x10 [ 194.177178][ T7158] ? debug_mutex_init+0x37/0x70 [ 194.177215][ T7158] copy_net_ns+0x2a6/0x5f0 [ 194.177263][ T7158] create_new_namespaces+0x3ea/0xa90 [ 194.177312][ T7158] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 194.177364][ T7158] ksys_unshare+0x45b/0xa40 [ 194.177426][ T7158] ? __pfx_ksys_unshare+0x10/0x10 [ 194.177469][ T7158] ? xfd_validate_state+0x61/0x180 [ 194.177535][ T7158] __x64_sys_unshare+0x31/0x40 [ 194.177577][ T7158] do_syscall_64+0xcd/0x490 [ 194.177613][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.177646][ T7158] RIP: 0033:0x7fb0d7b8e9a9 [ 194.177673][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.177705][ T7158] RSP: 002b:00007fb0d89d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.177736][ T7158] RAX: ffffffffffffffda RBX: 00007fb0d7db5fa0 RCX: 00007fb0d7b8e9a9 [ 194.177757][ T7158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 194.177776][ T7158] RBP: 00007fb0d7c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 194.177795][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.177814][ T7158] R13: 0000000000000000 R14: 00007fb0d7db5fa0 R15: 00007ffdc373bae8 [ 194.177855][ T7158] [ 194.594866][ T7148] FAULT_INJECTION: forcing a failure. [ 194.594866][ T7148] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 194.634422][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.2.242 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 194.634465][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.634482][ T7148] Call Trace: [ 194.634492][ T7148] [ 194.634503][ T7148] dump_stack_lvl+0x16c/0x1f0 [ 194.634538][ T7148] should_fail_ex+0x512/0x640 [ 194.634576][ T7148] should_fail_alloc_page+0xe7/0x130 [ 194.634615][ T7148] prepare_alloc_pages+0x3c2/0x610 [ 194.634657][ T7148] ? rcu_is_watching+0x12/0xc0 [ 194.634696][ T7148] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 194.634736][ T7148] ? rcu_is_watching+0x12/0xc0 [ 194.634767][ T7148] ? trace_mm_page_alloc+0x11f/0x1a0 [ 194.634811][ T7148] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 194.634842][ T7148] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.634873][ T7148] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 194.634924][ T7148] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.634967][ T7148] ? alloc_vmap_area+0x645/0x29c0 [ 194.635001][ T7148] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 194.635044][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.635081][ T7148] ? do_syscall_64+0xcd/0x490 [ 194.635115][ T7148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.635156][ T7148] alloc_pages_bulk_noprof+0x71c/0x1410 [ 194.635185][ T7148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.635230][ T7148] ? policy_nodemask+0xea/0x4e0 [ 194.635265][ T7148] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 194.635295][ T7148] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 194.635341][ T7148] kasan_populate_vmalloc+0xf1/0x1f0 [ 194.635397][ T7148] alloc_vmap_area+0x959/0x29c0 [ 194.635450][ T7148] ? __pfx_alloc_vmap_area+0x10/0x10 [ 194.635500][ T7148] __get_vm_area_node+0x1ca/0x330 [ 194.635551][ T7148] __vmalloc_node_range_noprof+0x271/0x14b0 [ 194.635596][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.635642][ T7148] ? __lock_acquire+0xb8a/0x1c90 [ 194.635681][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.635733][ T7148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.635781][ T7148] ? __alloc_pages_noprof+0xb/0x1b0 [ 194.635810][ T7148] ? ___kmalloc_large_node+0x84/0x1e0 [ 194.635852][ T7148] ? find_held_lock+0x2b/0x80 [ 194.635892][ T7148] __kvmalloc_node_noprof+0x30a/0x620 [ 194.635945][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.635990][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.636043][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.636098][ T7148] __do_sys_listmount+0x1c2/0xec0 [ 194.636156][ T7148] ? __x64_sys_futex+0x1e0/0x4c0 [ 194.636196][ T7148] ? __x64_sys_futex+0x1e9/0x4c0 [ 194.636237][ T7148] ? __pfx___do_sys_listmount+0x10/0x10 [ 194.636307][ T7148] do_syscall_64+0xcd/0x490 [ 194.636344][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.636375][ T7148] RIP: 0033:0x7f7a5bb8e9a9 [ 194.636399][ T7148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.636427][ T7148] RSP: 002b:00007f7a5c9b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 194.636456][ T7148] RAX: ffffffffffffffda RBX: 00007f7a5bdb6080 RCX: 00007f7a5bb8e9a9 [ 194.636477][ T7148] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 194.636495][ T7148] RBP: 00007f7a5bc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 194.636514][ T7148] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 194.636532][ T7148] R13: 0000000000000000 R14: 00007f7a5bdb6080 R15: 00007ffe36a8bc28 [ 194.636571][ T7148] [ 194.638120][ T7148] syz.2.242: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 194.991727][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.2.242 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 194.991766][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.991784][ T7148] Call Trace: [ 194.991794][ T7148] [ 194.991804][ T7148] dump_stack_lvl+0x16c/0x1f0 [ 194.991840][ T7148] warn_alloc+0x248/0x3a0 [ 194.991873][ T7148] ? __pfx_warn_alloc+0x10/0x10 [ 194.991907][ T7148] ? kfree+0x2b4/0x4d0 [ 194.991961][ T7148] ? __get_vm_area_node+0x208/0x330 [ 194.992013][ T7148] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 194.992076][ T7148] ? __lock_acquire+0xb8a/0x1c90 [ 194.992119][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.992175][ T7148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.992224][ T7148] ? __alloc_pages_noprof+0xb/0x1b0 [ 194.992255][ T7148] ? ___kmalloc_large_node+0x84/0x1e0 [ 194.992297][ T7148] ? find_held_lock+0x2b/0x80 [ 194.992338][ T7148] __kvmalloc_node_noprof+0x30a/0x620 [ 194.992390][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.992438][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.992491][ T7148] ? __do_sys_listmount+0x1c2/0xec0 [ 194.992536][ T7148] __do_sys_listmount+0x1c2/0xec0 [ 194.992590][ T7148] ? __x64_sys_futex+0x1e0/0x4c0 [ 194.992629][ T7148] ? __x64_sys_futex+0x1e9/0x4c0 [ 194.992669][ T7148] ? __pfx___do_sys_listmount+0x10/0x10 [ 194.992737][ T7148] do_syscall_64+0xcd/0x490 [ 194.992774][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.992806][ T7148] RIP: 0033:0x7f7a5bb8e9a9 [ 194.992832][ T7148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.992861][ T7148] RSP: 002b:00007f7a5c9b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 194.992889][ T7148] RAX: ffffffffffffffda RBX: 00007f7a5bdb6080 RCX: 00007f7a5bb8e9a9 [ 194.992910][ T7148] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 194.992929][ T7148] RBP: 00007f7a5bc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 194.992948][ T7148] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 194.992967][ T7148] R13: 0000000000000000 R14: 00007f7a5bdb6080 R15: 00007ffe36a8bc28 [ 194.993007][ T7148] [ 194.993018][ T7148] Mem-Info: [ 194.993041][ T7148] active_anon:6739 inactive_anon:0 isolated_anon:0 [ 194.993041][ T7148] active_file:13040 inactive_file:40686 isolated_file:0 [ 194.993041][ T7148] unevictable:768 dirty:861 writeback:0 [ 194.993041][ T7148] slab_reclaimable:11060 slab_unreclaimable:92396 [ 194.993041][ T7148] mapped:24905 shmem:1362 pagetables:1097 [ 194.993041][ T7148] sec_pagetables:0 bounce:0 [ 194.993041][ T7148] kernel_misc_reclaimable:0 [ 194.993041][ T7148] free:1329438 free_pcp:14810 free_cma:0 [ 194.993127][ T7148] Node 0 active_anon:26956kB inactive_anon:0kB active_file:52160kB inactive_file:162536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99620kB dirty:3444kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11352kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.993213][ T7148] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.993297][ T7148] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.993388][ T7148] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 194.993452][ T7148] Node 0 DMA32 free:1411712kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26904kB inactive_anon:0kB active_file:52160kB inactive_file:161216kB unevictable:1536kB writepending:3444kB present:3129332kB managed:2540444kB mlocked:0kB bounce:0kB free_pcp:32252kB local_pcp:13824kB free_cma:0kB [ 194.993546][ T7148] lowmem_reserve[]: 0 0 1 1 1 [ 194.993606][ T7148] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 194.993695][ T7148] lowmem_reserve[]: 0 0 0 0 0 [ 194.993757][ T7148] Node 1 Normal free:3890672kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:26980kB local_pcp:11428kB free_cma:0kB [ 194.993848][ T7148] lowmem_reserve[]: 0 0 0 0 0 [ 194.993909][ T7148] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 194.994120][ T7148] Node 0 DMA32: 1564*4kB (UM) 945*8kB (UME) 644*16kB (UME) 507*32kB (UM) 338*64kB (UM) 55*128kB (UME) 27*256kB (UM) 9*512kB (ME) 8*1024kB (UME) 14*2048kB (UM) 316*4096kB (UM) = 1411736kB [ 194.994391][ T7148] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 194.994568][ T7148] Node 1 Normal: 150*4kB (UME) 47*8kB (UME) 42*16kB (UME) 92*32kB (UM) 28*64kB (UM) 6*128kB (UME) 4*256kB (UE) 1*512kB (U) 3*1024kB (UM) 2*2048kB (UM) 946*4096kB (ME) = 3890672kB [ 194.994854][ T7148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.994881][ T7148] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.994907][ T7148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.994933][ T7148] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.994959][ T7148] 55084 total pagecache pages [ 194.994971][ T7148] 0 pages in swap cache [ 194.994983][ T7148] Free swap = 124996kB [ 194.994995][ T7148] Total swap = 124996kB [ 194.995008][ T7148] 2097051 pages RAM [ 194.995019][ T7148] 0 pages HighMem/MovableOnly [ 194.995031][ T7148] 429962 pages reserved [ 194.995043][ T7148] 0 pages cma reserved [ 195.910097][ T7185] tty tty12: ldisc open failed (-12), clearing slot 11 [ 196.406278][ T7207] netlink: 342 bytes leftover after parsing attributes in process `syz.2.256'. [ 197.943818][ T7257] syz.1.270 uses obsolete (PF_INET,SOCK_PACKET) [ 198.008335][ T7257] warning: `syz.1.270' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.624502][ T7264] netlink: 346 bytes leftover after parsing attributes in process `syz.0.271'. [ 199.636914][ T7272] FAULT_INJECTION: forcing a failure. [ 199.636914][ T7272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.675786][ T7272] CPU: 1 UID: 0 PID: 7272 Comm: syz.0.272 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 199.675837][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.675857][ T7272] Call Trace: [ 199.675867][ T7272] [ 199.675879][ T7272] dump_stack_lvl+0x16c/0x1f0 [ 199.675918][ T7272] should_fail_ex+0x512/0x640 [ 199.675964][ T7272] should_fail_alloc_page+0xe7/0x130 [ 199.676006][ T7272] prepare_alloc_pages+0x3c2/0x610 [ 199.676053][ T7272] ? rcu_is_watching+0x12/0xc0 [ 199.676092][ T7272] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 199.676135][ T7272] ? css_rstat_updated+0x9d/0xd30 [ 199.676180][ T7272] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 199.676213][ T7272] ? __lock_acquire+0x622/0x1c90 [ 199.676273][ T7272] ? __lock_acquire+0x622/0x1c90 [ 199.676320][ T7272] ? __lock_acquire+0x622/0x1c90 [ 199.676364][ T7272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.676417][ T7272] ? policy_nodemask+0xea/0x4e0 [ 199.676458][ T7272] alloc_pages_mpol+0x1fb/0x550 [ 199.676499][ T7272] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 199.676557][ T7272] folio_alloc_mpol_noprof+0x36/0x2f0 [ 199.676606][ T7272] vma_alloc_folio_noprof+0xed/0x1e0 [ 199.676651][ T7272] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 199.676695][ T7272] ? find_held_lock+0x2b/0x80 [ 199.676749][ T7272] ? __handle_mm_fault+0x1092/0x5490 [ 199.676809][ T7272] __handle_mm_fault+0x2f21/0x5490 [ 199.676874][ T7272] ? __pfx___handle_mm_fault+0x10/0x10 [ 199.676940][ T7272] ? __pte_offset_map_lock+0x174/0x310 [ 199.676983][ T7272] ? find_held_lock+0x2b/0x80 [ 199.677015][ T7272] ? find_held_lock+0x2b/0x80 [ 199.677058][ T7272] ? follow_page_pte+0x3af/0x14c0 [ 199.677113][ T7272] handle_mm_fault+0x589/0xd10 [ 199.677172][ T7272] __get_user_pages+0x589/0x3b80 [ 199.677229][ T7272] ? __pfx_mt_find+0x10/0x10 [ 199.677267][ T7272] ? __pfx___get_user_pages+0x10/0x10 [ 199.677326][ T7272] populate_vma_page_range+0x278/0x3a0 [ 199.677397][ T7272] ? __pfx_populate_vma_page_range+0x10/0x10 [ 199.677446][ T7272] ? __pfx_find_vma_intersection+0x10/0x10 [ 199.677495][ T7272] ? do_mmap+0x69c/0x1210 [ 199.677559][ T7272] __mm_populate+0x1d8/0x380 [ 199.677610][ T7272] ? __pfx___mm_populate+0x10/0x10 [ 199.677663][ T7272] ? up_write+0x1b2/0x520 [ 199.677720][ T7272] vm_mmap_pgoff+0x362/0x450 [ 199.677767][ T7272] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 199.677821][ T7272] ? __x64_sys_futex+0x1e0/0x4c0 [ 199.677861][ T7272] ? __x64_sys_futex+0x1e9/0x4c0 [ 199.677909][ T7272] ksys_mmap_pgoff+0x7d/0x5c0 [ 199.677951][ T7272] ? xfd_validate_state+0x61/0x180 [ 199.677996][ T7272] ? __task_pid_nr_ns+0x17c/0x500 [ 199.678048][ T7272] __x64_sys_mmap+0x125/0x190 [ 199.678103][ T7272] do_syscall_64+0xcd/0x490 [ 199.678141][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.678174][ T7272] RIP: 0033:0x7f9ae878e9a9 [ 199.678201][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.678233][ T7272] RSP: 002b:00007f9ae9657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 199.678264][ T7272] RAX: ffffffffffffffda RBX: 00007f9ae89b5fa0 RCX: 00007f9ae878e9a9 [ 199.678287][ T7272] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 199.678307][ T7272] RBP: 00007f9ae8810d69 R08: 0000000000000007 R09: 0000000000028000 [ 199.678328][ T7272] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 199.678349][ T7272] R13: 0000000000000000 R14: 00007f9ae89b5fa0 R15: 00007ffcf9d40fe8 [ 199.678392][ T7272] [ 201.115791][ T7307] netlink: 334 bytes leftover after parsing attributes in process `syz.0.278'. [ 202.386216][ T5855] Bluetooth: hci2: unexpected event 0x1d length: 10 > 5 [ 202.762515][ T7338] FAULT_INJECTION: forcing a failure. [ 202.762515][ T7338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.804237][ T7346] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78002 [ 202.815682][ T7346] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 202.849230][ T7346] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 202.849377][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.3.285 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 202.849424][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.849446][ T7338] Call Trace: [ 202.849458][ T7338] [ 202.849471][ T7338] dump_stack_lvl+0x16c/0x1f0 [ 202.849516][ T7338] should_fail_ex+0x512/0x640 [ 202.849557][ T7338] should_fail_alloc_page+0xe7/0x130 [ 202.849605][ T7338] prepare_alloc_pages+0x3c2/0x610 [ 202.849656][ T7338] ? rcu_is_watching+0x12/0xc0 [ 202.849701][ T7338] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 202.849739][ T7338] ? psi_task_switch+0x201/0x8e0 [ 202.849788][ T7338] ? css_rstat_updated+0x9d/0xd30 [ 202.849838][ T7338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.849875][ T7338] ? __lock_acquire+0x622/0x1c90 [ 202.849941][ T7338] ? __lock_acquire+0x622/0x1c90 [ 202.849995][ T7338] ? __lock_acquire+0x622/0x1c90 [ 202.850048][ T7338] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.850108][ T7338] ? policy_nodemask+0xea/0x4e0 [ 202.850154][ T7338] alloc_pages_mpol+0x1fb/0x550 [ 202.850199][ T7338] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 202.850254][ T7338] folio_alloc_mpol_noprof+0x36/0x2f0 [ 202.850314][ T7338] vma_alloc_folio_noprof+0xed/0x1e0 [ 202.850363][ T7338] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 202.850410][ T7338] ? find_held_lock+0x2b/0x80 [ 202.850448][ T7338] ? __handle_mm_fault+0x1092/0x5490 [ 202.850512][ T7338] __handle_mm_fault+0x2f21/0x5490 [ 202.850580][ T7338] ? __pfx___handle_mm_fault+0x10/0x10 [ 202.850637][ T7338] ? __pte_offset_map_lock+0x174/0x310 [ 202.850683][ T7338] ? find_held_lock+0x2b/0x80 [ 202.850716][ T7338] ? find_held_lock+0x2b/0x80 [ 202.850764][ T7338] ? follow_page_pte+0x3af/0x14c0 [ 202.850825][ T7338] handle_mm_fault+0x589/0xd10 [ 202.850894][ T7338] __get_user_pages+0x589/0x3b80 [ 202.850955][ T7338] ? __pfx_mt_find+0x10/0x10 [ 202.850997][ T7338] ? __pfx___get_user_pages+0x10/0x10 [ 202.851066][ T7338] populate_vma_page_range+0x278/0x3a0 [ 202.851121][ T7338] ? __pfx_populate_vma_page_range+0x10/0x10 [ 202.851174][ T7338] ? __pfx_find_vma_intersection+0x10/0x10 [ 202.851234][ T7338] __mm_populate+0x1d8/0x380 [ 202.851295][ T7338] ? __pfx___mm_populate+0x10/0x10 [ 202.851351][ T7338] ? up_write+0x209/0x520 [ 202.851410][ T7338] vm_mmap_pgoff+0x362/0x450 [ 202.851460][ T7338] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 202.851500][ T7338] ? find_held_lock+0x2b/0x80 [ 202.851545][ T7338] ? __x64_sys_futex+0x1e0/0x4c0 [ 202.851588][ T7338] ? __x64_sys_futex+0x1e9/0x4c0 [ 202.851637][ T7338] ksys_mmap_pgoff+0x7d/0x5c0 [ 202.851683][ T7338] ? xfd_validate_state+0x61/0x180 [ 202.851737][ T7338] __x64_sys_mmap+0x125/0x190 [ 202.851793][ T7338] do_syscall_64+0xcd/0x490 [ 202.851834][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.851871][ T7338] RIP: 0033:0x7f6ada98e9a9 [ 202.851899][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.851933][ T7338] RSP: 002b:00007f6adb7a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 202.851965][ T7338] RAX: ffffffffffffffda RBX: 00007f6adabb6160 RCX: 00007f6ada98e9a9 [ 202.851988][ T7338] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000000000000 [ 202.852010][ T7338] RBP: 00007f6adaa10d69 R08: 0000000000000007 R09: 0000000000028000 [ 202.852031][ T7338] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 202.852051][ T7338] R13: 0000000000000000 R14: 00007f6adabb6160 R15: 00007ffdeed4cf28 [ 202.852095][ T7338] [ 203.224492][ T7346] page_type: f5(slab) [ 203.228600][ T7346] raw: 00fff00000000040 ffff88801b891000 0000000000000000 dead000000000001 [ 203.249255][ T7346] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 203.270190][ T7346] head: 00fff00000000040 ffff88801b891000 0000000000000000 dead000000000001 [ 203.298490][ T7346] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 203.411164][ T7346] head: 00fff00000000001 ffffea0001e00081 00000000ffffffff 00000000ffffffff [ 203.445538][ T7346] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 203.497302][ T7346] page dumped because: unmovable page [ 203.515873][ T7346] page_owner tracks the page as allocated [ 203.523368][ T7346] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5357, tgid 5357 (v4l_id), ts 54223524187, free_ts 36945280341 [ 203.577772][ T7361] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 203.598142][ T7346] post_alloc_hook+0x1c0/0x230 [ 203.714245][ T7346] get_page_from_freelist+0x1321/0x3890 [ 203.719918][ T7346] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 203.731249][ T7366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 203.859960][ T7346] alloc_pages_mpol+0x1fb/0x550 [ 203.865314][ T7346] new_slab+0x23b/0x330 [ 203.869670][ T7346] ___slab_alloc+0xd9c/0x1940 [ 203.875819][ T7346] kmem_cache_alloc_bulk_noprof+0x24e/0xbc0 [ 203.888262][ T7346] mas_alloc_nodes+0x2f1/0x8b0 [ 203.894509][ T7346] mas_node_count_gfp+0x105/0x130 [ 203.928527][ T7346] mas_preallocate+0x7e0/0xde0 [ 203.950859][ T7346] __mmap_region+0x1104/0x25e0 [ 203.982267][ T7346] mmap_region+0x1ab/0x3f0 [ 203.986797][ T7346] do_mmap+0xa3e/0x1210 [ 204.050023][ T7346] vm_mmap_pgoff+0x281/0x450 [ 204.055216][ T7346] ksys_mmap_pgoff+0x32c/0x5c0 [ 204.113989][ T7346] __x64_sys_mmap+0x125/0x190 [ 204.156363][ T7346] page last free pid 1 tgid 1 stack trace: [ 204.175401][ T7346] __free_frozen_pages+0x7fe/0x1180 [ 204.191343][ T7346] free_contig_range+0x183/0x4b0 [ 204.220373][ T7346] destroy_args+0x7f6/0xa60 [ 204.250356][ T7346] debug_vm_pgtable+0x13b8/0x2d00 [ 204.279987][ T7346] do_one_initcall+0x120/0x6e0 [ 204.285028][ T7346] kernel_init_freeable+0x5c2/0x900 [ 204.370253][ T7346] kernel_init+0x1c/0x2b0 [ 204.379060][ T7346] ret_from_fork+0x5d4/0x6f0 [ 204.385802][ T7346] ret_from_fork_asm+0x1a/0x30 [ 204.597477][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 204.787060][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.793622][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.610180][ T1158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.767540][ T1158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.932272][ T1158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.198136][ T1158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.654945][ T1158] bridge_slave_1: left allmulticast mode [ 207.680376][ T1158] bridge_slave_1: left promiscuous mode [ 207.707070][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.762304][ T1158] bridge_slave_0: left allmulticast mode [ 207.780645][ T1158] bridge_slave_0: left promiscuous mode [ 207.807607][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.425312][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.440426][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.455576][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.464888][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.473740][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.488619][ T5847] Bluetooth: hci2: unexpected event 0x1d length: 10 > 5 [ 210.531738][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.549598][ T5847] Bluetooth: hci3: command tx timeout [ 210.617729][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.738404][ T1158] bond0 (unregistering): Released all slaves [ 211.828281][ T7515] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 212.414663][ T1158] hsr_slave_1: left promiscuous mode [ 212.494026][ T1158] veth1_macvtap: left promiscuous mode [ 212.521668][ T1158] veth0_macvtap: left promiscuous mode [ 212.527540][ T1158] veth1_vlan: left promiscuous mode [ 212.547324][ T1158] veth0_vlan: left promiscuous mode [ 212.621546][ T5847] Bluetooth: hci3: command tx timeout [ 214.449673][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 214.538776][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 214.625378][ T7560] IPVS: length: 256 != 24 [ 214.706085][ T5847] Bluetooth: hci3: command tx timeout [ 215.087548][ T7453] chnl_net:caif_netlink_parms(): no params data found [ 215.513760][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.545367][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.560580][ T7453] bridge_slave_0: entered allmulticast mode [ 215.575901][ T7453] bridge_slave_0: entered promiscuous mode [ 215.704347][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.730231][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.737570][ T7453] bridge_slave_1: entered allmulticast mode [ 215.784868][ T7453] bridge_slave_1: entered promiscuous mode [ 215.904769][ T7453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.945789][ T7453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.080805][ T7576] [ 216.083229][ T7576] ====================================================== [ 216.090289][ T7576] WARNING: possible circular locking dependency detected [ 216.097353][ T7576] 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 Not tainted [ 216.104509][ T7576] ------------------------------------------------------ [ 216.111558][ T7576] syz.1.317/7576 is trying to acquire lock: [ 216.117470][ T7576] ffffffff8e72a5a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 216.127087][ T7576] [ 216.127087][ T7576] but task is already holding lock: [ 216.134476][ T7576] ffff8880263d9e00 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 216.145778][ T7576] [ 216.145778][ T7576] which lock already depends on the new lock. [ 216.145778][ T7576] [ 216.156202][ T7576] [ 216.156202][ T7576] the existing dependency chain (in reverse order) is: [ 216.165240][ T7576] [ 216.165240][ T7576] -> #2 (&q->q_usage_counter(io)#30){++++}-{0:0}: [ 216.173896][ T7576] blk_alloc_queue+0x619/0x760 [ 216.179250][ T7576] blk_mq_alloc_queue+0x175/0x290 [ 216.184826][ T7576] __blk_mq_alloc_disk+0x29/0x120 [ 216.190406][ T7576] loop_add+0x49e/0xb70 [ 216.195140][ T7576] loop_init+0x164/0x270 [ 216.199982][ T7576] do_one_initcall+0x120/0x6e0 [ 216.205298][ T7576] kernel_init_freeable+0x5c2/0x900 [ 216.211063][ T7576] kernel_init+0x1c/0x2b0 [ 216.215973][ T7576] ret_from_fork+0x5d4/0x6f0 [ 216.221127][ T7576] ret_from_fork_asm+0x1a/0x30 [ 216.226441][ T7576] [ 216.226441][ T7576] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 216.233701][ T7576] fs_reclaim_acquire+0x102/0x150 [ 216.239290][ T7576] prepare_alloc_pages+0x162/0x610 [ 216.244969][ T7576] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 216.251417][ T7576] __alloc_pages_noprof+0xb/0x1b0 [ 216.257002][ T7576] pcpu_populate_chunk+0x110/0xb00 [ 216.262677][ T7576] pcpu_alloc_noprof+0x86a/0x1470 [ 216.268250][ T7576] xt_percpu_counter_alloc+0x13e/0x1b0 [ 216.274274][ T7576] find_check_entry.constprop.0+0xbc/0x9b0 [ 216.280648][ T7576] translate_table+0xc98/0x1720 [ 216.286064][ T7576] ipt_register_table+0x102/0x430 [ 216.291669][ T7576] iptable_security_table_init+0x40/0x60 [ 216.297851][ T7576] xt_find_table_lock+0x2e1/0x520 [ 216.303438][ T7576] xt_request_find_table_lock+0x28/0xf0 [ 216.309548][ T7576] get_info+0x190/0x610 [ 216.314266][ T7576] do_ipt_get_ctl+0x169/0xa10 [ 216.319504][ T7576] nf_getsockopt+0x79/0xe0 [ 216.324478][ T7576] ip_getsockopt+0x18c/0x1e0 [ 216.329632][ T7576] tcp_getsockopt+0x9e/0x100 [ 216.334768][ T7576] do_sock_getsockopt+0x34a/0x440 [ 216.340351][ T7576] __sys_getsockopt+0x123/0x1b0 [ 216.345754][ T7576] __x64_sys_getsockopt+0xbd/0x160 [ 216.351430][ T7576] do_syscall_64+0xcd/0x490 [ 216.356504][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.362969][ T7576] [ 216.362969][ T7576] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 216.370748][ T7576] __lock_acquire+0x126f/0x1c90 [ 216.376162][ T7576] lock_acquire+0x179/0x350 [ 216.381221][ T7576] __mutex_lock+0x199/0xb90 [ 216.386273][ T7576] pcpu_alloc_noprof+0xb4c/0x1470 [ 216.391860][ T7576] blk_stat_alloc_callback+0xc8/0x280 [ 216.397792][ T7576] wbt_init+0xac/0x540 [ 216.402418][ T7576] queue_wb_lat_store+0x354/0x3d0 [ 216.407990][ T7576] queue_attr_store+0x276/0x320 [ 216.413385][ T7576] sysfs_kf_write+0xf2/0x150 [ 216.418559][ T7576] kernfs_fop_write_iter+0x354/0x510 [ 216.424412][ T7576] vfs_write+0x6c4/0x1150 [ 216.429287][ T7576] ksys_write+0x12a/0x250 [ 216.434161][ T7576] do_syscall_64+0xcd/0x490 [ 216.439213][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.445658][ T7576] [ 216.445658][ T7576] other info that might help us debug this: [ 216.445658][ T7576] [ 216.455900][ T7576] Chain exists of: [ 216.455900][ T7576] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#30 [ 216.455900][ T7576] [ 216.469601][ T7576] Possible unsafe locking scenario: [ 216.469601][ T7576] [ 216.477064][ T7576] CPU0 CPU1 [ 216.482442][ T7576] ---- ---- [ 216.487823][ T7576] lock(&q->q_usage_counter(io)#30); [ 216.493238][ T7576] lock(fs_reclaim); [ 216.499865][ T7576] lock(&q->q_usage_counter(io)#30); [ 216.507792][ T7576] lock(pcpu_alloc_mutex); [ 216.512325][ T7576] [ 216.512325][ T7576] *** DEADLOCK *** [ 216.512325][ T7576] [ 216.520489][ T7576] 6 locks held by syz.1.317/7576: [ 216.525552][ T7576] #0: ffff8880323a00f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 216.534656][ T7576] #1: ffff888036162428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 216.543687][ T7576] #2: ffff88805d786488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 216.553502][ T7576] #3: ffff888142f23878 (kn->active#116){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 216.563673][ T7576] #4: ffff8880263d9e00 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 216.575413][ T7576] #5: ffff8880263d9e38 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 216.587420][ T7576] [ 216.587420][ T7576] stack backtrace: [ 216.593338][ T7576] CPU: 0 UID: 0 PID: 7576 Comm: syz.1.317 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 216.593375][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.593391][ T7576] Call Trace: [ 216.593398][ T7576] [ 216.593407][ T7576] dump_stack_lvl+0x116/0x1f0 [ 216.593435][ T7576] print_circular_bug+0x275/0x350 [ 216.593471][ T7576] check_noncircular+0x14c/0x170 [ 216.593515][ T7576] __lock_acquire+0x126f/0x1c90 [ 216.593556][ T7576] lock_acquire+0x179/0x350 [ 216.593590][ T7576] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 216.593616][ T7576] ? __pfx___might_resched+0x10/0x10 [ 216.593643][ T7576] ? ksys_write+0x12a/0x250 [ 216.593666][ T7576] ? do_syscall_64+0xcd/0x490 [ 216.593691][ T7576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.593719][ T7576] __mutex_lock+0x199/0xb90 [ 216.593745][ T7576] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 216.593769][ T7576] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 216.593796][ T7576] ? __pfx___mutex_lock+0x10/0x10 [ 216.593832][ T7576] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 216.593854][ T7576] pcpu_alloc_noprof+0xb4c/0x1470 [ 216.593901][ T7576] ? __pfx_wbt_data_dir+0x10/0x10 [ 216.593927][ T7576] ? __pfx_wb_timer_fn+0x10/0x10 [ 216.593958][ T7576] blk_stat_alloc_callback+0xc8/0x280 [ 216.593990][ T7576] ? kasan_save_track+0x14/0x30 [ 216.594018][ T7576] wbt_init+0xac/0x540 [ 216.594052][ T7576] queue_wb_lat_store+0x354/0x3d0 [ 216.594082][ T7576] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 216.594112][ T7576] ? __mutex_trylock_common+0xe9/0x250 [ 216.594151][ T7576] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 216.594180][ T7576] queue_attr_store+0x276/0x320 [ 216.594210][ T7576] ? __pfx_queue_attr_store+0x10/0x10 [ 216.594237][ T7576] ? __lock_acquire+0x622/0x1c90 [ 216.594283][ T7576] ? find_held_lock+0x2b/0x80 [ 216.594309][ T7576] ? sysfs_file_kobj+0xe4/0x290 [ 216.594349][ T7576] ? __pfx_queue_attr_store+0x10/0x10 [ 216.594377][ T7576] sysfs_kf_write+0xf2/0x150 [ 216.594416][ T7576] kernfs_fop_write_iter+0x354/0x510 [ 216.594449][ T7576] ? __pfx_sysfs_kf_write+0x10/0x10 [ 216.594488][ T7576] vfs_write+0x6c4/0x1150 [ 216.594520][ T7576] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 216.594556][ T7576] ? __pfx___mutex_lock+0x10/0x10 [ 216.594582][ T7576] ? __pfx_vfs_write+0x10/0x10 [ 216.594617][ T7576] ksys_write+0x12a/0x250 [ 216.594641][ T7576] ? __pfx_ksys_write+0x10/0x10 [ 216.594670][ T7576] do_syscall_64+0xcd/0x490 [ 216.594698][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.594724][ T7576] RIP: 0033:0x7fb0d7b8e9a9 [ 216.594745][ T7576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.594770][ T7576] RSP: 002b:00007fb0d8972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.594793][ T7576] RAX: ffffffffffffffda RBX: 00007fb0d7db6240 RCX: 00007fb0d7b8e9a9 [ 216.594811][ T7576] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000015 [ 216.594827][ T7576] RBP: 00007fb0d7c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 216.594843][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.594858][ T7576] R13: 0000000000000000 R14: 00007fb0d7db6240 R15: 00007ffdc373bae8 [ 216.594882][ T7576] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 216.927414][ T5847] Bluetooth: hci3: command tx timeout [ 216.972988][ T7453] team0: Port device team_slave_0 added [ 216.982204][ T7453] team0: Port device team_slave_1 added [ 217.122319][ T7583] FAULT_INJECTION: forcing a failure. [ 217.122319][ T7583] name failslab, interval 1, probability 0, space 0, times 0 [ 217.179582][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.0.318 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 217.179628][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.179647][ T7583] Call Trace: [ 217.179656][ T7583] [ 217.179667][ T7583] dump_stack_lvl+0x16c/0x1f0 [ 217.179705][ T7583] should_fail_ex+0x512/0x640 [ 217.179738][ T7583] ? xfrm_hash_alloc+0xd1/0x100 [ 217.179784][ T7583] should_failslab+0xc2/0x120 [ 217.179821][ T7583] __kmalloc_noprof+0xd2/0x510 [ 217.179852][ T7583] ? __pfx_xfrm_statistics_seq_show+0x10/0x10 [ 217.179892][ T7583] ? __pfx_xfrm_net_init+0x10/0x10 [ 217.179921][ T7583] xfrm_hash_alloc+0xd1/0x100 [ 217.179969][ T7583] xfrm_state_init+0x9c/0x630 [ 217.180025][ T7583] ? __pfx_xfrm_net_init+0x10/0x10 [ 217.180052][ T7583] xfrm_net_init+0x210/0xcc0 [ 217.180101][ T7583] ? __pfx_xfrm_net_init+0x10/0x10 [ 217.180130][ T7583] ops_init+0x1df/0x5f0 [ 217.180169][ T7583] setup_net+0x1ff/0x510 [ 217.180204][ T7583] ? lockdep_init_map_type+0x5c/0x280 [ 217.180249][ T7583] ? __pfx_setup_net+0x10/0x10 [ 217.180282][ T7583] ? __raw_spin_lock_init+0x3a/0x110 [ 217.180334][ T7583] ? debug_mutex_init+0x37/0x70 [ 217.180378][ T7583] copy_net_ns+0x2a6/0x5f0 [ 217.180421][ T7583] create_new_namespaces+0x3ea/0xa90 [ 217.180462][ T7583] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 217.180498][ T7583] ksys_unshare+0x45b/0xa40 [ 217.180538][ T7583] ? __pfx_ksys_unshare+0x10/0x10 [ 217.180578][ T7583] ? xfd_validate_state+0x61/0x180 [ 217.180627][ T7583] __x64_sys_unshare+0x31/0x40 [ 217.180670][ T7583] do_syscall_64+0xcd/0x490 [ 217.180706][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.180738][ T7583] RIP: 0033:0x7f9ae878e9a9 [ 217.180763][ T7583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.180795][ T7583] RSP: 002b:00007f9ae9657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 217.180825][ T7583] RAX: ffffffffffffffda RBX: 00007f9ae89b5fa0 RCX: 00007f9ae878e9a9 [ 217.180844][ T7583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 217.180862][ T7583] RBP: 00007f9ae8810d69 R08: 0000000000000000 R09: 0000000000000000 [ 217.180879][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.180895][ T7583] R13: 0000000000000000 R14: 00007f9ae89b5fa0 R15: 00007ffcf9d40fe8 [ 217.180920][ T7583] [ 217.943644][ T1158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.998265][ T1158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.076581][ T1158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.178314][ T1158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.294956][ T1158] bridge_slave_1: left allmulticast mode [ 218.301956][ T1158] bridge_slave_1: left promiscuous mode [ 218.307735][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.331806][ T1158] bridge_slave_0: left allmulticast mode [ 218.338225][ T1158] bridge_slave_0: left promiscuous mode [ 218.360306][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.566112][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.577598][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.591406][ T1158] bond0 (unregistering): Released all slaves [ 218.800903][ T1158] hsr_slave_0: left promiscuous mode [ 218.806883][ T1158] hsr_slave_1: left promiscuous mode [ 218.819298][ T1158] veth1_macvtap: left promiscuous mode [ 218.826638][ T1158] veth0_macvtap: left promiscuous mode [ 218.834664][ T1158] veth1_vlan: left promiscuous mode [ 218.840007][ T1158] veth0_vlan: left promiscuous mode [ 219.010263][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 219.040022][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 219.442630][ T1158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.492438][ T1158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.552802][ T1158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.595679][ T1158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.696450][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.747279][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.795033][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.898758][ T1158] bridge_slave_1: left allmulticast mode [ 219.905974][ T1158] bridge_slave_1: left promiscuous mode [ 219.915698][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.924530][ T1158] bridge_slave_0: left allmulticast mode [ 219.932048][ T1158] bridge_slave_0: left promiscuous mode [ 219.937860][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.068419][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.083173][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.093295][ T1158] bond0 (unregistering): Released all slaves [ 220.136261][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.147350][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.158581][ T1158] bond0 (unregistering): Released all slaves [ 220.255734][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.266051][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.276501][ T1158] bond0 (unregistering): Released all slaves [ 220.763749][ T1158] hsr_slave_0: left promiscuous mode [ 220.769861][ T1158] hsr_slave_1: left promiscuous mode [ 220.779691][ T1158] hsr_slave_0: left promiscuous mode [ 220.786549][ T1158] hsr_slave_1: left promiscuous mode [ 220.794029][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.801607][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.812046][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.819503][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.838099][ T1158] veth1_macvtap: left promiscuous mode [ 220.843833][ T1158] veth0_macvtap: left promiscuous mode [ 220.849612][ T1158] veth1_vlan: left promiscuous mode [ 220.856084][ T1158] veth0_vlan: left promiscuous mode [ 220.862965][ T1158] veth1_macvtap: left promiscuous mode [ 220.868542][ T1158] veth0_macvtap: left promiscuous mode [ 220.875332][ T1158] veth1_vlan: left promiscuous mode [ 220.880973][ T1158] veth0_vlan: left promiscuous mode [ 221.153860][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 221.166122][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 221.345557][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 221.359685][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 221.453048][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 221.483219][ T1158] team0 (unregistering): Port device team_slave_0 removed