last executing test programs: 10m37.229892643s ago: executing program 0 (id=384): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8081, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c04, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, r0, 0x9c12) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) getcwd$auto(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) sendmsg$auto_NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="f8090000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x9f8}, 0x1, 0x0, 0x0, 0x811}, 0x85) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) read$auto(r3, 0x0, 0x1ff) getrandom$auto(&(0x7f0000000900)='/dev/loop6\x00', 0xc, 0xfff) write$auto(0x3, 0x0, 0xfdef) 10m36.892468206s ago: executing program 0 (id=386): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x810004, 0x5, 0x8000000008012, 0x3, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) 10m35.301556561s ago: executing program 0 (id=392): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r0 = clone3$auto(&(0x7f0000000040)={0x8, 0x4, 0x1000000000, 0x8000000000000001, 0x1800, 0x100000000, 0x2, 0x0, 0x2, 0xa12, 0x1ff}, 0x6c3) r1 = gettid() sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1244, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x1225, 0x22, 0x0, 0x1, [@nested={0x10fb, 0xea, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @pid=r0}, @nested={0x4, 0x5e}, @generic="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", @generic="b92c8194883cc3f5882a8cf29051876af74213544055173026368b2ab3fb98400897abca5c2302026e8e0530041e942b21cf3289a03f9ec4125da158aa3c51a58b74fdc551db720bf800237ea8deee4b01b937e57cb0f5e4a1c01770d124f95868611b9e1ab8fc09d66041945b6040d63d2f30919bdc1dcbedefb78737fb53bc65b7f3e598071c7cf6ee06c94cbe1b06d7adc4c97fd02eefce3a82d93d60e7731d53012d43cecb38e9b2820a7c6a032307592aa3ac72258c1b59983c720fa2199444c00be3cb65ac817b8027bf5f70", @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x76, 0x0, 0x0, @pid=r1}]}, @typed={0x11, 0x5e, 0x0, 0x0, @binary="b098ba17b7b8a40a904637cf99"}, @nested={0x8, 0x106, 0x0, 0x1, [@nested={0x4, 0xd8}]}, @typed={0xc, 0xb9, 0x0, 0x0, @u64=0x4}, @nested={0x4c, 0x1d, 0x0, 0x1, [@generic="78d57904f531337e239b30edc47f8070fedbca229a3e9128c62aace0b6ed055bb190160ec3ab2104b85d84e48079f18a461e396c29753da1a3a381c009bf21fbcb84ad15", @nested={0x4, 0x25}]}, @nested={0x55, 0xf0, 0x0, 0x1, [@generic="1a6c937178ef0f3284fcc804a405e4b79edf208d1aab27444ec63799ee16750ed9f1ad0f8cb86675c9de3876f58def0081d256973c77a282b5ea9e33230242c8c69bb83a96c4743e9cfe6b5477", @nested={0x4, 0xf7}]}, @generic="7c17dac223c51d3b3f3a8b121d15205819fa35ac0e6e4b3e24c96326eb478accff13fc371d6f7c94ed4adc7e56eaaa2d57b7362ca71b875830db9bdf3a099ea215606fd2ea3450f8d8bf1f36c2c109dd37bbd95e2b", @typed={0x4, 0xa}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5415}]}, 0x1244}, 0x1, 0x0, 0x0, 0x11}, 0x80004) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) socket(0x21, 0x3, 0x9) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto_event_trigger_fops_trace(r2, &(0x7f0000000340)="087a5fc885515accc34eb3c38a3a401bd245bdd75afcd2d75b35e79aaa1b0ef394e5", 0x22) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) write$auto(0x3, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 10m34.179721669s ago: executing program 0 (id=405): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000001a80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000440)={0x1cc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_FILS_DISCOVERY={0x1a4, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0xcb, 0x3, "5cff3ab0934d61e80186cebf74ac8c591066d88a5c314407f5e3e8070ebcc21642275a99b4e900d43ac27dfd4238218671cedb24bb3bf4a6fe501e81d8044ab303410a4f398db01bb3844ea8da44d8fb87740413d80afce38be86ca10e4ba1249a5afdca05810eaa29c2aa41c1a896306e20b37235277d77e8284e3d43b47e8a1a953280080390fdd5609adc4f02a486ca8e9572176c41bece6d235711890aa2cb5a49f6070b85b859a13f6a8568180f305dfaaa9a5cea086e8a3adf10a231091b3c5acb6ccc35"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x4}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x38, 0x3, "c0bb0f75177afd36a577c184da4d9be81f97a62052afa8f42300437cfc6ad4e264847ae1d445d9edf7f4cd498d3d7f9557364965"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x14, 0x3, "b5cf152515f1dc489d86106edcc35a41"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x73, 0x3, "99186bbb9e7ee653b9d78dc078f37f6261c7bbb4a240fbbd004d6ff33597508ace458ffff820d2187224210fec89f709202d86500cfa1da4d0a68f3bd981f2e542f6081121589961a36a64b2033a82282cb446b757bdb49f876d35e8e98be78a66f4eda6fb35dbc61d2369fc69d489"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x7}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x8}]}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9f9}, @NL80211_ATTR_NAN_FUNC={0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004000) socket(0x29, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x4, 0x9}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) r4 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x10080, 0x0) mmap$auto(0x3, 0x4, 0x2, 0x18, r4, 0x1) mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) chdir$auto(&(0x7f0000000280)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x41) creat$auto(0x0, 0x0) ioctl$auto_TUNSETOFFLOAD2(r0, 0x400454d0, &(0x7f0000000080)=0xb) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10m33.871778629s ago: executing program 0 (id=398): r0 = socket(0x2, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r1, 0x40104d0e, 0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x5e23, @remote}, 0x6a) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo$auto(r4, r3, 0x1, 0x0) r5 = socket(0x11, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r7 = socket(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bpf$auto(0x7, &(0x7f0000000000)=@query={@target_ifindex=r8, 0x80000002, 0xc6c3, 0xa24, 0x8000010002, @count=0x42, 0x0, 0x9, 0x9, 0x0, 0x3}, 0xa3) sendmmsg$auto(r5, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) tgkill$auto(0x1, 0x1, 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0xb}, @GTPA_LINK={0x8, 0x1, 0xffffffff}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4048040) fcntl$auto(r0, 0x0, r3) 10m33.150218275s ago: executing program 0 (id=399): rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x16, &(0x7f0000000400)={@siginfo_0_0={0xfffeffff, 0x0, 0x2, @_sigpoll={0x8}}}) tgkill$auto_SIGCONT(r0, r0, 0x12) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose3/statistics/tx_bytes\x00', 0x200600, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003800)=""/168, 0xa8) 10m32.507599222s ago: executing program 32 (id=399): rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x16, &(0x7f0000000400)={@siginfo_0_0={0xfffeffff, 0x0, 0x2, @_sigpoll={0x8}}}) tgkill$auto_SIGCONT(r0, r0, 0x12) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose3/statistics/tx_bytes\x00', 0x200600, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003800)=""/168, 0xa8) 1m35.493841622s ago: executing program 2 (id=2014): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x100) r3 = eventfd2$auto(0x6af3, 0x800) socket(0x1e, 0x1, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r0, @new_map_fd=r1, 0x3, @old_prog_fd=r2}, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000040)=r3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x3, 0x3, 0x42b, 0x3, 0x3, 0x62, 0x80000001, 0x7440, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) r5 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000032c0), 0x1000, 0x0) preadv$auto(r5, &(0x7f0000003340)={&(0x7f0000003300), 0x40}, 0x9, 0x5, 0x100000001) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) execve$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) write$auto(0x3, 0x0, 0x100082) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4) 1m34.409464013s ago: executing program 2 (id=2020): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x04\x00\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) ioctl$auto_SG_GET_RESERVED_SIZE2(r3, 0x2272, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b3c", 0x25) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r4) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r7, 0x64c7, 0x1e2) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0xd, 0x7}, 0x9, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f0000001b40)={0x103}, 0x8) sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000009800)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000048) 1m32.147934008s ago: executing program 2 (id=2025): r0 = socket(0xa, 0x2, 0x3a) socketpair$auto(0x600000, 0xfffffff8, 0x5, &(0x7f0000000080)=0x5) setsockopt$auto(r0, 0x29, 0x49, &(0x7f0000000040)='!\x00', 0x1ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x1, 0x5, 0x0) getsockname$auto(r2, 0x0, 0x0) read$auto(r1, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x4, 0x80000000, 0xffa, 0x16, r4, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4008010) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r5, 0x0, 0x1f40) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/040/001\x00', 0x470801, 0x0) 1m31.390511206s ago: executing program 2 (id=2027): mmap$auto(0x7fff, 0x81, 0x7, 0xeb1, 0xfffffffffffffffa, 0xffffffffffff0000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) socketpair$auto(0x3ff, 0x5, 0x1, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/43:192/wb_stats\x00', 0x40, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0x1b) prctl$auto(0xffff7fff, 0x16, 0x0, 0x2, 0xa) r0 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="681281f6", @ANYRES16=r1, @ANYBLOB="000325bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x6, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ttyS1\x00', 0x4000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x1b) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1m30.301016543s ago: executing program 2 (id=2030): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x1c1300, 0x0) write$auto(r0, 0x0, 0x7ef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f43, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/116, 0x74) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xf, 0x9) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1\x05\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x89C:\xc3\xcbx*=\x12\xb4q\xeeC\x81\n\\_\x04D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\x9e\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x8cec, 0x6]}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x80400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xffffffffffffbfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x100000000000, 0xb1, 0x8) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) 1m29.915133929s ago: executing program 2 (id=2033): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getpid() (async) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) (async) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (async) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) (async, rerun: 32) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8880, 0x0) (rerun: 32) read$auto(0x3, 0x0, 0x7fffffff) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async, rerun: 64) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (rerun: 64) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x10000000001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x20101, 0x0) (async) r4 = geteuid() msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000440)={{0x7, r4, 0xee01, 0x10001, 0xffff, 0x7, 0x2}, 0x0, &(0x7f0000000380)=0x6, 0x3ff, 0xfffffffffffffffc, 0x2b, 0x200, 0x3, 0x47, 0x6, 0x7, @inferred=0xffffffffffffffff, @raw=0x8001}) write$auto(0xffffffffffffffff, &(0x7f0000001480)='nl80211\x00', 0x9) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000600)={0x100000001, 0x1, 0x4, 0x0, r4, 0xee01, 0x0, 0x4, 0x400009, 0x5, 0x3ff, 0xe7, 0x824, 0x1, 0x8000000000000000, 0x8, 0x1}) statx$auto(r2, &(0x7f0000000180)='./file0\x00', 0x48, 0x1, &(0x7f0000002500)={0xc, 0x9, 0x7fff, 0xfffffff8, 0xffffffffffffffff, r5, 0x800, 0x23c, 0x7, 0x5, 0x1000000000003, 0xd65, {0x7, 0x9}, {0x3, 0xcc0}, {0x8, 0x9}, {0x9, 0xfffffffc}, 0x3, 0x442, 0x6, 0x9, 0x6, 0x8, 0x1, 0x9882, 0x1ff, 0x7, 0x20003, 0x0, [0x1000000c231, 0xed75, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x400000000000004, 0xb, 0x7fffffffffffffff, 0x20008, 0x8001]}) (async) select$auto(0x100000e, 0x0, 0x0, &(0x7f00000002c0)={[0x3, 0x0, 0xd, 0x5, 0x948b, 0x400000b, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0xfffffffffffffff4, 0x6]}, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) socket(0x18, 0xa, 0x1) 1m14.544055651s ago: executing program 33 (id=2033): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getpid() (async) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) (async) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (async) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) (async, rerun: 32) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8880, 0x0) (rerun: 32) read$auto(0x3, 0x0, 0x7fffffff) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async, rerun: 64) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (rerun: 64) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x10000000001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x20101, 0x0) (async) r4 = geteuid() msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000440)={{0x7, r4, 0xee01, 0x10001, 0xffff, 0x7, 0x2}, 0x0, &(0x7f0000000380)=0x6, 0x3ff, 0xfffffffffffffffc, 0x2b, 0x200, 0x3, 0x47, 0x6, 0x7, @inferred=0xffffffffffffffff, @raw=0x8001}) write$auto(0xffffffffffffffff, &(0x7f0000001480)='nl80211\x00', 0x9) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000600)={0x100000001, 0x1, 0x4, 0x0, r4, 0xee01, 0x0, 0x4, 0x400009, 0x5, 0x3ff, 0xe7, 0x824, 0x1, 0x8000000000000000, 0x8, 0x1}) statx$auto(r2, &(0x7f0000000180)='./file0\x00', 0x48, 0x1, &(0x7f0000002500)={0xc, 0x9, 0x7fff, 0xfffffff8, 0xffffffffffffffff, r5, 0x800, 0x23c, 0x7, 0x5, 0x1000000000003, 0xd65, {0x7, 0x9}, {0x3, 0xcc0}, {0x8, 0x9}, {0x9, 0xfffffffc}, 0x3, 0x442, 0x6, 0x9, 0x6, 0x8, 0x1, 0x9882, 0x1ff, 0x7, 0x20003, 0x0, [0x1000000c231, 0xed75, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x400000000000004, 0xb, 0x7fffffffffffffff, 0x20008, 0x8001]}) (async) select$auto(0x100000e, 0x0, 0x0, &(0x7f00000002c0)={[0x3, 0x0, 0xd, 0x5, 0x948b, 0x400000b, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0xfffffffffffffff4, 0x6]}, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) socket(0x18, 0xa, 0x1) 34.292201716s ago: executing program 5 (id=2137): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x0) setsockopt$auto(r0, 0xffffffff, 0x3e, 0x0, 0x40000009) set_mempolicy_home_node$auto(0x7ffffffc, 0x1000000ffffffff, 0x400, 0x1fc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) 32.999259238s ago: executing program 5 (id=2141): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x3, 0x3c) close_range$auto(0x2, 0x8000, 0x2) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x2400, 0x0) socket(0x1, 0x5, 0x0) connect$auto(0x3, 0x0, 0x55) write$auto(r0, 0x0, 0x263f) r1 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f00000006c0)='team0\x00', 0x3) pread64$auto(r5, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000004c0), r1) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x140, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_COOKIE={0xc, 0x8, 0x6}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_PMSR_SUPPORT={0x78, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x74, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xc}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x2}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}, @HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0xf4, 0x4}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0x77, 0x15, "4476c1c495c132d5b76e2fd190322a60aae242c16d7145264af1e1373bdae67e5f59a59e6fd162c1c3667a35fbfb76de9bdaf0d667d632ff18cb5c8ebc185eb56edb2e81a1dba5703d7d68f573c638450d5cdd0a44b2bc17bc90eb552a7784fe3f592b7bd8ff2ba4ac7699339dcccdc7eadb4d"}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x20}, @HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x5, 0x6}, {0x6, 0xa4}, {0x2, 0x2}]}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xfffffffd}]}, 0x140}, 0x1, 0x0, 0x0, 0x84}, 0x40000) landlock_create_ruleset$auto(0x0, 0x0, 0x2) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) lseek$auto(r1, 0x9, 0xd) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x18, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3f}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xd8, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0xa7c}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x6}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1c}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x4}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x2}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x3}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x10}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0x4}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x843}, 0x24040081) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/122, 0x7a) r12 = socket(0x25, 0x1, 0x0) connect$auto(r12, 0x0, 0x0) 31.521390396s ago: executing program 5 (id=2144): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) write$auto(r0, 0x0, 0x9) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r1, 0x0, 0x9001) set_tid_address$auto(0x0) 29.980523366s ago: executing program 5 (id=2148): madvise$auto(0x9, 0x8000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/ipsec\x00', 0xc2040, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) socketpair$auto(0x1, 0x5, 0x1, 0x0) socket$auto(0xffb, 0x0, 0x6) r3 = fanotify_init$auto(0x65, 0x2) r4 = fanotify_init$auto(0x2400, 0x401) fanotify_mark$auto(r4, 0x205, 0x100002, 0x4, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r2) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee00, 0xffffffffffffffff, 0x3, 0x80000000, 0x8, 0x3}, 0xd, 0x3, 0x2, 0xff, @raw=0x8, @raw=0x1, 0x6, 0x0, &(0x7f0000000340)="a27537211dc7c6bf4ec5b6e31dd5af8242862093d47e7cbc84d2a19b19eb0aa711c31bcb3124b56b33c89735d813a3810391fcba427d694a10641e0d24831090f99aa14acbc5f31c728c98a3f8bb470f4dc3885e39c3fe6036609932a5a2bdb120704aa199d3e6596333d2bf00933f6bea722d71de388b6fcc270d59ec7a77d0a96b49be9e57de75c1c667c75e07ed2d416556f02a6d59baef36ef5ed424e20de069828e325c6bc211f5dbc304eea4ee2094f1607e4adf157873e998f4c7c6155118434b3c7f767616c9ba77c9ba2dc19f66df6da19ff53f77b9093f86bd5000419387080996cd9769bdb35f9eb0ae0c806acafd78da8563e39736525aa5474287b454773da90587a9d495e935284403e78b8ee7cfc9095d3f9a81a7d0a72e1a04c15efeccd968e4a2a7e9968235cd6827bac55d1ce36006d165fd7a5bb6de2a73b2516b21b72f4f552114903fcf87e897fb89368f942056e6326308085624f9fec9b332057000408ab6f3c01bea9f1b299b7b78a45ee8891785400286ae82d362db61f860c83571483f2f6e86c253f43c3087baaeea4ada3057fb73ddd7990b9f213318564b8993cc51e53088f99fce863bb9b3186e5f8dfa8d2f39e5d093d396e5ee681c2a6654a4031adf17e970f890b9a4f4a1796a9c05aae1216af36bd0420c2cd5a0ecd30759a19e35ec240ae4685f9f1b8245db73b4b35480493b74c5457cbe26ed83e47e5b20d9202eaea2faa23baf41ec8af66c00e38d17fa83c6067282d207c6e10c6dee7a030ac59efc795d093e46ee24fcc367642d20", &(0x7f00000000c0)="710315a6ecb2e1e5d85437b813321d084b6da269d8dc6478e1e27d2a40a03e6e899776a50609d7d7e58b93bc0e6a5a3545f5a049c77e8abd214d6041b3"}) r7 = gettid() r8 = getpgid(0xffffffffffffffff) r9 = setfsuid$auto(0xee00) r10 = setfsuid$auto(0xee01) setresuid$auto(r9, r10, r9) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000002640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002600)={&(0x7f0000002780)=ANY=[@ANYBLOB='<#\x00\x00', @ANYRES16=r5, @ANYRES64, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="08001b00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32, @ANYBLOB="95f93a20417854c196511328e402cc4f52862b6bbbe7b500fe66a949635c2e4895e275f84e9f97a1a1f581ca27f055b7474022c3a2296191f98c8984f5f14b3a054aef9ff5db8124cad6d01678bcfadf5fe5c50039c2bd6668e66b5a091af535412d5e41ad9ca0a29cbe54b00ddeb8b4c14ffa779d869275fe404323df4c6b3b477960f9bc4a6d9d1873ab7d77aa2de72206c792b20266b42c2fe3469481d779ae7eb53f449f1c1a0ad97f5818cb43cba837fcf436dccaff3c66be32d2ce0d61065d7960ec1e070c64cd3b38b0654db44cb1aab54ca4cf2b03f9dd59322d52db53ee06de6d7b5caed3d2e6b6221ee97099b7fb78b8223efcd9ad42f6fce485ecbc5aaf02ca850228342651dc1b3d7ef871e8b9473b2da4261752f654a48a8dd11758764079169894813dff82699f96f2771c46a3e2f1cfe743dbc2d6b2b0861a3404a1c5be11ebf4c50400d380484611bba0d54bf9248579ea4404164004de3c80a3a83387b080e7e983c730b675b202105ee61b57303012f9453654159d1909f6d8a9582d6ee15e895a2740bb16340260877942857d3b76b3d8c4a5fa4a20555550c2084479c993615bd4d0e11e24b96f9df5813b548f42c3d3dbb296165dfe648a4a9ebdb781537fe1c74e6175d473e85264632942075c45a39fcbdf02d26df2b81b2067a79d077173592c4ff15a297ac414fc06243a73d88ea5707a4dd070b927d95241fa428878971955bb364d64a295383327bdbfe5442bc8ec6268e6ee8374ebba9c0262a2e77ed71f53622423abfe898b735cadbd67736cc82efb8d9de3bfa87fafe1081964a0e59fd16c3258c7e2b7708c807d4e7c0935702a0000004c00538004003680040047800800d700a10b0000040014802b0098002f7379732f646576696365732f7669727475616c2f776f726b71756575652f6370756d61736b0000040005800400dc80cb00dc800c002f000c0000000000000004000280114af3b1451b3526d1b1c10833e2ef3ab03e4cd742485a317616a1393e5f014eed46d35206208301b15340ee80cc8deae93e09221ec2df531bd5503ea8a2e1d01d432caaf239184641956f23436ed565dfa670467570f2898169ab64da5ee3d29f66c819c622484d9645db285846c8b87c212f4dc221682c7ab5a33de8b7a1195c9c116b8c411c198cd40874c5152a6317390d7b1c2901f619d06bb5ae60454fd2f77a9379c538d2d05f8bd072daefa82771a63cfa594d00080057000a0101000400e600e14977572c9dacec7971ef3618b13d66ae789333485cfa0e02430f329f7351a25c954d1a813080b62f9cde79b3d52e9a2513e61bd5cf69d4a4c3c633fc5dc225b20d8cf1e2eea047bfbcc0b55ef1c0b3812fb59434c7da946c5315b769308828d28e8809e824f02fd20b37f6b7e646aa534377707c9c4d63920b569176477ee2aef48416ea9445e1abb15abbec5e1de75c6ab9bc83501387ebe3ce7902e5182c0de4440d92b5a90feca166703f3f4b5a889734bc65cdb164c81815607bd172d291d783013b76a9c7e5b6c2501b96b77aaaf0b8970000"], 0x233c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(r1, 0x0, r3, 0x0, 0x80000001, 0xd) write$auto(0x6, 0x0, 0x100000001) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000002680)={0x7, 0x7, "ebc06c0d6f499089aee7aef481f6d96bca966fd64db24be12f94ef99c945c26afa95a7424f625b3352be45c666b5248c84c570398d9ea604116616de1f74bcfb", "962a5b6d0ccd95d944b147156e6949fe3b4b437a925cbfaafebb9d3728b697d1733443cc5fc45936b892ec405c5933ef7757c25394fa4c606cd5a23d0cc2a4d314383f24bdf9ce7202154bed662b5495", 0x3, 0x7f, "ae9ee5f8a65d8839a3eaa6d8b23848ca76ab6833484e61262b7a7a8a1910b8d25d6f48f9b54590af295e19a8a48de2aaa5f2b8aec42bd170fec4c71d63ece039"}) recvmmsg$auto(r1, 0x0, 0xfffffe0c, 0x8e0, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 29.004530852s ago: executing program 5 (id=2149): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, r1, 0x27ffe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/syz_tun/ndisc_tclass\x00', 0x60201, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x2, 0x2) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) signalfd$auto(0x4, 0x0, 0x8) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) 27.673260054s ago: executing program 5 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) syz_clone(0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) (async) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) ioctl$auto_EVIOCGEFFECTS(r2, 0x80044584, 0x0) 19.061046682s ago: executing program 1 (id=2171): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r0, 0xab04, 0xffffffffffffffff) mmap$auto(0x0, 0x0, 0x3, 0x40eb1, r0, 0xb00000000000) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x60000, 0x0) 18.944977235s ago: executing program 1 (id=2172): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) r0 = prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x2, 0x800000000810004, 0xffa, 0xfffffffffffffff8, r0, 0x8000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0xa, 0x801, 0x84) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd=r2, 0x2f, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0xfff}, 0x63a) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) brk$auto(0x8) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r3, 0x40025504, 0xea3) 18.386724391s ago: executing program 1 (id=2173): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x9003, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, &(0x7f0000000040)={0x6, [{[0x2, 0xf5e, 0x1ff, 0xd, 0x7f, 0x8, 0x4, 0x663d349e]}, {[0x2, 0xa6, 0x5c915993, 0xfffffffd, 0x6, 0xe, 0xa, 0x3]}, {[0x2, 0xe, 0x2, 0x579c8feb, 0x9, 0x6, 0x7, 0xa53]}], [{[0x75d, 0x9, 0x6, 0x17f29ee4, 0x400, 0x7, 0xc, 0x44]}, {[0x1, 0xeade, 0x1, 0x3, 0xf0, 0x5, 0x101, 0x1]}, {[0x7e61, 0x6, 0x7, 0x0, 0x5, 0x5, 0x100, 0x9]}, {[0x4, 0x5, 0x1, 0xfffffff7, 0x5, 0x0, 0xfffffffb, 0x1]}, {[0x3, 0x1000, 0x8, 0x8, 0x2, 0xe8c, 0xf, 0xd403]}], [{0xfffffffa, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7f, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x61, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x49c5fc8b, 0x0, 0x0, 0x0, 0x1}, {0x7ff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x7fd, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfffffffd, 0x1, 0x1, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}], [{0xbe, 0xd5, 0x0, 0x1, 0x0, 0x1}, {0xc2, 0x7fffffff, 0x1, 0x1, 0x1}, {0xbc, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x100, 0x12e800, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xf, 0x0, 0x1, 0x1}, {0xffff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0x6, 0x0, 0x1}], 0x100, 0x2, 0x104, 0x9, 0x5, 0x1, 0x8, "938f570ba48ab1df6ea169301a0f4b75", "16fef137d6f6aa1d93e7fd319170d04be4063eb16bddc7a41e5782dfff02104539c9b5e571a002e14933724526d0c013"}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000740)='/dev/binderfs/binder0\x00', 0x103040, 0x0) r1 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) read$auto(r1, &(0x7f0000000080)='\x00Gn\x02\xff\xfdlw,\xaf\xb2@\x13O9\xd9d5++%\xff\xc6\xb9\x88n\xc1U\x86\xb1\xc1\x9b\xf6s\x0e\x1b\xa0N(F\xf8\xdf\xb4\x858\x8a\xaa\x00\x8a\xf08~\x03\x96\a\x00\x84h(\x14K\\\xceA\x8e', 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x6, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r2, 0x0, 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/44, 0x2c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) read$auto(0x3, 0x0, 0xfdef) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 17.435044432s ago: executing program 1 (id=2175): prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008040) openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x202200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000045480901764441b289606d51c9101931b7b0f0ce3caa17c83c2b33fc5e769e300e330cfb43a80d9a77c64094bebaa7ffac59a6e6eac1e1003f7389f9e9d88b5e1622fded80621502901f8bc69de546906084a9b93b2315318e818ce1faa22b8d59bc0d909849beb6b960af73e9e18b4820d7752eddf5dc1f0a1260f29e97d9fc0352296c9145f3255aaf6ea257ed57179625f23a18dbadedc65e8b4927b975c91fe670f84ca6a3960cad9a13b5f92150b89b5e", @ANYRES16=0x0, @ANYBLOB="e3b725bd7000fddbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x800000000000e2a) socket(0x2c, 0x80003, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x400, 0x65) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) select$auto(0x981, 0x0, &(0x7f0000000980)={[0x5, 0x40, 0xffffffff, 0x72634de1, 0x4000000000, 0x9, 0x0, 0x9, 0x1, 0xd0d, 0xc76a, 0x5, 0x2, 0x2, 0x7, 0x9]}, &(0x7f0000000a00)={[0x4, 0xd, 0x5, 0x6e, 0x4, 0x8, 0x6, 0xfffffffffffff800, 0xfffffffffffffffc, 0x202, 0x7, 0x8, 0x2, 0x6, 0x9, 0x9]}, &(0x7f0000000a80)={0x100000000, 0x2}) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) 17.145435989s ago: executing program 1 (id=2176): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0xa, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3e8) 16.168776389s ago: executing program 1 (id=2178): mmap$auto(0x400000000000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000440)={0x18, r0, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000874}, 0x8c0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x10000, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r3, 0x5453, r3) getrandom$auto(0x0, 0x8, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80840, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf, 0x2, 0x8000, 0x3000}, 0x4) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) 12.553821234s ago: executing program 34 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) syz_clone(0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) (async) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) ioctl$auto_EVIOCGEFFECTS(r2, 0x80044584, 0x0) 3.255912686s ago: executing program 3 (id=2200): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x3, 0x6, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) 2.89909819s ago: executing program 4 (id=2202): io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) (async) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/sessionid\x00', 0x240, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, 0x0, 0x51) (async) connect$auto(0x3, 0x0, 0x51) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x0e\xfb\xff\x05OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) (async) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x0e\xfb\xff\x05OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000580)) preadv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2}, 0x4, 0x7, 0xe3) 2.255188666s ago: executing program 3 (id=2203): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, r1, 0x27ffe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/syz_tun/ndisc_tclass\x00', 0x60201, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x2, 0x2) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) 2.254359717s ago: executing program 4 (id=2209): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) r0 = prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x2, 0x800000000810004, 0xffa, 0xfffffffffffffff8, r0, 0x8000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0xa, 0x801, 0x84) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd=r2, 0x2f, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0xfff}, 0x63a) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r3, 0x40025504, 0xea3) 1.844617525s ago: executing program 4 (id=2204): sendmsg$auto_KSMBD_EVENT_STARTING_UP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll$auto(&(0x7f0000000180)={r0, 0xa, 0x9816}, 0x7f, 0x9) write$auto(0xca, &(0x7f0000000100)='\x04>\x01\r\xfb\xff\xf6\xdd\x9aW\x90NC\xad\xb0\x00\xc6\xe7/NI\xaa\x9e\b\x06\x00\x00\x00\x02\xa4\xf6\xbaZ\x02\xe0c\xf9k:<\xc3\xc0\x11}\xce\xf1\xbb\ao\x9f2\x92\x06\xac\x80\xdb\x87\xbbE\xbf\xf5\xd5\x1e\xa9#K\xbd \xab\xe5\x9f]\xdfTP*\xc4(\xa7l\x95g=\xf5\b\x1aHX\xa0~\xaeO\xe5Ka0o', 0x2d9) 1.844176572s ago: executing program 3 (id=2205): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r2) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xffffffff, 0x6, 0x6, 0x0) keyctl$auto(0xa, 0xfffffffffffffffd, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0x200, 0x3, 0xffffff4c, @_sigchld={0x0, 0x0, 0x0, 0x0, 0x6}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x20, r6, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x8000, 0x0) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000002080)={0x160c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x1198, 0x2, 0x0, 0x1, [@nested={0x1194, 0x11a, 0x0, 0x1, [@nested={0x1190, 0x1b, 0x0, 0x1, [@typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@mcast2}, @generic="61324f1f6f8d02b619e99a3500a5dfef23bc5eeceafad71f6006cc35558e91d6c6203cce18730477d72f680d87e10d59093b9eb0a5dbd486f702d3114907e9a23418e36c9c126510246c9fe3d6eba9d810499739d2eefaaf0ce8163aa77214a8ea8c48ae3b8a33b2a93bf4126d198e48abbdd47ba6e38ae4b9be45dc98432bbfedb6a318225ae02c57a8b0e39d463a36aab574f265e16374f0d137f8289ef68249f1f60cf5b12d290ab120b51a2a8ab9dfe33c479d9784041b35811ab32053258d", @generic="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", @typed={0x8, 0x148, 0x0, 0x0, @uid}, @generic="7f36d6aea079244645e8b5e1729c07046aba0b5337b89560a24d87179e204c6e16b334244e2b12628392895bdc60090b3db782ea65202aa217ca7c4778a05c9d8f60caba88082258fcbe378ce859c24f679cae5af17762497d5327ad78c1496d5c21daef12188a73d5f667aa58be1bfa017efae9cb65ec80d4ec614ec00734d9059d3c6ecebd12540ddcf9c77b45e5f279d32224363fdcf7a1ebfd7c44b0a11d80d18688b5d55506cafe6842b442fb"]}, @generic]}]}, @MACSEC_ATTR_SA_CONFIG={0x456, 0x3, 0x0, 0x1, [@generic="6b71e7d3cb20da9e73265b999fd9fcaf7a8bad40c3dcb9c3e5f92d750f059656e543571610d6e196ddbdfef50c6fb4f209d377f41fe19150694ee6a03d9a55770ed20240ed724f3b01a546583b09f2b187ca70396bd482a6fa8ca33d51e9f03742691aa8fefb48fba4", @generic="bc60b076d4aabf354f9f11564148556645ce913e4e3414b7cc33b7bab00aa5a388063230c4a2f1192bac35614d636b9e181505910d947738f3a5f9a1ddadd1a2bb88eb0d044f2e81555b733eb79dce8f72c3b9cca0790cf4d7b0b3da031f9af3ddaf82dc082db261e62fdcc096b8639109cb3f46646be7a039513ca19d6d056c9693dcb8abd5f4a33f3f32a1591544de02770cab51ae9bc26f5f99c5b259493e3db506caea848cd472a6759666baeb5ff3227c7531f77a6a2ec494172a87bcc11e456952870a2fdd1830dc7b5649b6aff6e2c3add0ec92e5f7f8a41b46b41b6c54f6eb4aa40509ff650e7cef017c716687", @nested={0x121, 0x11b, 0x0, 0x1, [@nested={0x4, 0x96}, @generic="192fa39452186ef9aed81892cfe1a30e7b8bd3bc224f494773b24890653992187b82bd0461ab5294bb05ac289196d67857010849273eef843df1917a595687a764c7edd1e3f76337b36883dbf26fac86a5ed0225a8a564b059ba5b219d7456d8da34523f7002093ed6d0b19cc4320134cd823c421ef75794e509d904b0f65db21cdf57b8b07668466746e0398149d6d4f927b2a7ac70e1114cdb41ec0573db4980cf", @nested={0x4, 0x52}, @generic="f54b7c595d3f695f22b37692cc60400a83ac6f9e093e31022067d66df54f3c154fe67dd697776ec8082f1c91139d0e97a88b9649233a38aa180cd85f56bb8bd9d51f3facef165d16113f83efc96fefa871dc373920a1334ed4070a6cb2e0b52c2179fbc58052500d7a6863", @typed={0x8, 0x101, 0x0, 0x0, @fd=r1}]}, @nested={0x1cb, 0x111, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r1}, @nested={0xc5, 0x12c, 0x0, 0x1, [@generic="f1e493c1ac8b0cbff20708cb12e6f2585826987dc9f022085131edcd1d5a8851997b47537e959682dd684a63eec51ce83c0a33f65546f98198a9a9d7302bf67b1ad60b397e5894435cff01cdb8896336696267d80044df4217341170bbdac256ab241653b46da6d1890c5a0f0b9a244f4e3a5d39820f8081cea4f31343e30a9c0e2166def78e61f2b4a47b48d544728350400fbdedc50350adcb36d4488805a9d582f4568521ea209d2f40f7bad85539a69f6e9081d32820a98027cb3bcacf59b7"]}, @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="034a15a691450801753eb64b2ce103e389a58a9670aaeb9ae699282e505816803565821824ce5253e589afca2b2f6c6669447aff54d505a7e2651267b2f934a9cdd65062e06ca33a0079899f5224283df016a2fa69edf3bdf63748e043d5e8103b76449d98b3438e19cb43e0548e181e30acbc4ccb803bc8e3c139d00608245bfc7c8477e7cd12a349da47604b7c95d613aa02bc0933bcf921c0e959d636714e64a85df46c1a705cf3bc0f93445255761cc90800045c2c119b0ef82dcdbb942821f12675457dcd12ce5d6c68de8e06babf3b1b0e8cceec91f89ca1024db88881addc9bcdef563bca87e9f61719b445"]}, @nested={0x8, 0x19, 0x0, 0x1, [@nested={0x4, 0xbe}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r8}]}, 0x160c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 1.626837476s ago: executing program 4 (id=2206): mmap$auto(0x0, 0x8000007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/state\x00', 0x20a040, 0x0) mmap$auto(0x0, 0x2020009, 0x0, 0x39f, 0xffffffffffffffff, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) capset$auto(&(0x7f0000001140)={0x83, 0xffffffffffffffff}, &(0x7f0000001180)={0x6, 0x0, 0x7}) prctl$auto(0x80, 0x8, r4, 0x100, 0x2) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose12/queues/rx-0/rps_cpus\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)='\t', 0x1) socket(0x11, 0x3, 0x2) sysfs$auto(0x8, 0x7f, 0x2) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x87, 0x6d3e, 0x9, 0x5b24, 0x4000000006]}, 0x0) read$auto(r0, 0x0, 0x20) mount$auto(&(0x7f0000000040)='wg0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='!*@^-{,\x00', 0xfffffffffffffffc, &(0x7f0000000100)="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") openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/tracing/available_events\x00', 0x240040, 0x0) 957.649169ms ago: executing program 4 (id=2207): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x9003, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, &(0x7f0000000040)={0x6, [{[0x2, 0xf5e, 0x1ff, 0xd, 0x7f, 0x8, 0x4, 0x663d349e]}, {[0x2, 0xa6, 0x5c915993, 0xfffffffd, 0x6, 0xe, 0xa, 0x3]}, {[0x2, 0xe, 0x2, 0x579c8feb, 0x9, 0x6, 0x7, 0xa53]}], [{[0x75d, 0x9, 0x6, 0x17f29ee4, 0x400, 0x7, 0xc, 0x44]}, {[0x1, 0xeade, 0x1, 0x3, 0xf0, 0x5, 0x101, 0x1]}, {[0x7e61, 0x6, 0x7, 0x0, 0x5, 0x5, 0x100, 0x9]}, {[0x4, 0x5, 0x1, 0xfffffff7, 0x5, 0x0, 0xfffffffb, 0x1]}, {[0x3, 0x1000, 0x8, 0x8, 0x2, 0xe8c, 0xf, 0xd403]}], [{0xfffffffa, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7f, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x61, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x49c5fc8b, 0x0, 0x0, 0x0, 0x1}, {0x7ff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x7fd, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfffffffd, 0x1, 0x1, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}], [{0xbe, 0xd5, 0x0, 0x1, 0x0, 0x1}, {0xc2, 0x7fffffff, 0x1, 0x1, 0x1}, {0xbc, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x100, 0x12e800, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xf, 0x0, 0x1, 0x1}, {0xffff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0x6, 0x0, 0x1}], 0x100, 0x2, 0x104, 0x9, 0x5, 0x1, 0x8, "938f570ba48ab1df6ea169301a0f4b75", "16fef137d6f6aa1d93e7fd319170d04be4063eb16bddc7a41e5782dfff02104539c9b5e571a002e14933724526d0c013"}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000740)='/dev/binderfs/binder0\x00', 0x103040, 0x0) r1 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) read$auto(r1, &(0x7f0000000080)='\x00Gn\x02\xff\xfdlw,\xaf\xb2@\x13O9\xd9d5++%\xff\xc6\xb9\x88n\xc1U\x86\xb1\xc1\x9b\xf6s\x0e\x1b\xa0N(F\xf8\xdf\xb4\x858\x8a\xaa\x00\x8a\xf08~\x03\x96\a\x00\x84h(\x14K\\\xceA\x8e', 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x6, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) read$auto(0x3, 0x0, 0xfdef) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 825.077349ms ago: executing program 3 (id=2208): sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) r0 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000140), 0x14, &(0x7f0000000280)={0x0, 0x4e}, 0x7, 0x0, 0x0, 0x20000001}, 0x7}, 0x8, 0x8000) connect$auto(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff}, 0x31e6) kexec_load$auto(0x7ff, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x83, 0x4800c000}, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x212001, 0x91) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x1c}}, 0x20040050) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002996eed3bd647affdbdf250c0100005dfae8"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) 630.033591ms ago: executing program 3 (id=2210): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, r1, 0x27ffe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/syz_tun/ndisc_tclass\x00', 0x60201, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x2, 0x2) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) 350.393976ms ago: executing program 3 (id=2211): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x9003, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, &(0x7f0000000040)={0x6, [{[0x2, 0xf5e, 0x1ff, 0xd, 0x7f, 0x8, 0x4, 0x663d349e]}, {[0x2, 0xa6, 0x5c915993, 0xfffffffd, 0x6, 0xe, 0xa, 0x3]}, {[0x2, 0xe, 0x2, 0x579c8feb, 0x9, 0x6, 0x7, 0xa53]}], [{[0x75d, 0x9, 0x6, 0x17f29ee4, 0x400, 0x7, 0xc, 0x44]}, {[0x1, 0xeade, 0x1, 0x3, 0xf0, 0x5, 0x101, 0x1]}, {[0x7e61, 0x6, 0x7, 0x0, 0x5, 0x5, 0x100, 0x9]}, {[0x4, 0x5, 0x1, 0xfffffff7, 0x5, 0x0, 0xfffffffb, 0x1]}, {[0x3, 0x1000, 0x8, 0x8, 0x2, 0xe8c, 0xf, 0xd403]}], [{0xfffffffa, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7f, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x61, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x49c5fc8b, 0x0, 0x0, 0x0, 0x1}, {0x7ff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x7fd, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfffffffd, 0x1, 0x1, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}], [{0xbe, 0xd5, 0x0, 0x1, 0x0, 0x1}, {0xc2, 0x7fffffff, 0x1, 0x1, 0x1}, {0xbc, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x100, 0x12e800, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xf, 0x0, 0x1, 0x1}, {0xffff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0x6, 0x0, 0x1}], 0x100, 0x2, 0x104, 0x9, 0x5, 0x1, 0x8, "938f570ba48ab1df6ea169301a0f4b75", "16fef137d6f6aa1d93e7fd319170d04be4063eb16bddc7a41e5782dfff02104539c9b5e571a002e14933724526d0c013"}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000740)='/dev/binderfs/binder0\x00', 0x103040, 0x0) r1 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) read$auto(r1, &(0x7f0000000080)='\x00Gn\x02\xff\xfdlw,\xaf\xb2@\x13O9\xd9d5++%\xff\xc6\xb9\x88n\xc1U\x86\xb1\xc1\x9b\xf6s\x0e\x1b\xa0N(F\xf8\xdf\xb4\x858\x8a\xaa\x00\x8a\xf08~\x03\x96\a\x00\x84h(\x14K\\\xceA\x8e', 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x6, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, 0x0, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/44, 0x2c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) read$auto(0x3, 0x0, 0xfdef) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 0s ago: executing program 4 (id=2212): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) r0 = prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x2, 0x800000000810004, 0xffa, 0xfffffffffffffff8, r0, 0x8000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r2, 0x40025504, 0xea3) kernel console output (not intermixed with test programs): an_slab_alloc+0x89/0x90 [ 695.637289][T14609] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 695.637330][T14609] ? __pmd_alloc+0xbf/0x930 [ 695.637359][T14609] ? __handle_mm_fault+0xaac/0x5490 [ 695.637392][T14609] ? handle_mm_fault+0x589/0xd10 [ 695.637425][T14609] ? do_user_addr_fault+0x7a6/0x1370 [ 695.637462][T14609] ? exc_page_fault+0x5c/0xb0 [ 695.637501][T14609] ? asm_exc_page_fault+0x26/0x30 [ 695.637529][T14609] ? rep_movs_alternative+0xf/0x90 [ 695.637562][T14609] ? _copy_from_user+0x98/0xd0 [ 695.637603][T14609] ? ____sys_sendmsg+0x607/0xc70 [ 695.637644][T14609] ? ___sys_sendmsg+0x134/0x1d0 [ 695.637684][T14609] ? __sys_sendmmsg+0x200/0x420 [ 695.637725][T14609] ? __x64_sys_sendmmsg+0x9c/0x100 [ 695.637766][T14609] ? do_syscall_64+0xcd/0x490 [ 695.637790][T14609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.637820][T14609] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 695.637885][T14609] ? __lock_acquire+0xb8a/0x1c90 [ 695.637926][T14609] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 695.637973][T14609] ? policy_nodemask+0xea/0x4e0 [ 695.638023][T14609] alloc_pages_mpol+0x1fb/0x550 [ 695.638053][T14609] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 695.638085][T14609] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 695.638124][T14609] alloc_pages_noprof+0x131/0x390 [ 695.638154][T14609] pte_alloc_one+0x1c/0x3a0 [ 695.638198][T14609] __handle_mm_fault+0x3a68/0x5490 [ 695.638248][T14609] ? __pfx___handle_mm_fault+0x10/0x10 [ 695.638284][T14609] ? __pfx_mt_find+0x10/0x10 [ 695.638338][T14609] ? find_vma+0xbf/0x140 [ 695.638367][T14609] ? __pfx_find_vma+0x10/0x10 [ 695.638399][T14609] handle_mm_fault+0x589/0xd10 [ 695.638439][T14609] ? __pkru_allows_pkey+0x41/0xb0 [ 695.638479][T14609] do_user_addr_fault+0x7a6/0x1370 [ 695.638523][T14609] ? rcu_is_watching+0x12/0xc0 [ 695.638557][T14609] exc_page_fault+0x5c/0xb0 [ 695.638601][T14609] asm_exc_page_fault+0x26/0x30 [ 695.638629][T14609] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 695.638671][T14609] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 10 04 00 66 66 [ 695.638698][T14609] RSP: 0018:ffffc9000bdc79d0 EFLAGS: 00050202 [ 695.638724][T14609] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 695.638741][T14609] RDX: fffff520017b8f4c RSI: 0000000000000000 RDI: ffffc9000bdc7a58 [ 695.638760][T14609] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff520017b8f4b [ 695.638777][T14609] R10: ffffc9000bdc7a5e R11: 0000000000000001 R12: 0000000000000000 [ 695.638795][T14609] R13: ffffc9000bdc7a58 R14: 1ffff920017b8f45 R15: ffffc9000bdc7d8c [ 695.638836][T14609] _copy_from_user+0x98/0xd0 [ 695.638883][T14609] ____sys_sendmsg+0x607/0xc70 [ 695.638922][T14609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.638964][T14609] ? __pfx__kstrtoull+0x10/0x10 [ 695.639008][T14609] ___sys_sendmsg+0x134/0x1d0 [ 695.639055][T14609] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.639120][T14609] ? find_held_lock+0x2b/0x80 [ 695.639177][T14609] __sys_sendmmsg+0x200/0x420 [ 695.639228][T14609] ? __pfx___sys_sendmmsg+0x10/0x10 [ 695.639287][T14609] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.639352][T14609] ? fput+0x70/0xf0 [ 695.639379][T14609] ? ksys_write+0x1ac/0x250 [ 695.639416][T14609] ? __pfx_ksys_write+0x10/0x10 [ 695.639465][T14609] __x64_sys_sendmmsg+0x9c/0x100 [ 695.639510][T14609] ? lockdep_hardirqs_on+0x7c/0x110 [ 695.639553][T14609] do_syscall_64+0xcd/0x490 [ 695.639583][T14609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.639613][T14609] RIP: 0033:0x7f1ef358e929 [ 695.639644][T14609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.639670][T14609] RSP: 002b:00007f1ef437d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 695.639694][T14609] RAX: ffffffffffffffda RBX: 00007f1ef37b5fa0 RCX: 00007f1ef358e929 [ 695.639711][T14609] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 695.639727][T14609] RBP: 00007f1ef437d090 R08: 0000000000000000 R09: 0000000000000000 [ 695.639744][T14609] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 695.639761][T14609] R13: 0000000000000000 R14: 00007f1ef37b5fa0 R15: 00007ffe7d38a1b8 [ 695.639799][T14609] [ 696.154781][T14602] syz.3.1795: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 696.198158][T14616] tipc: Started in network mode [ 696.203908][T14616] tipc: Node identity ee00, cluster identity 4711 [ 696.210834][T14616] tipc: Node number set to 60928 [ 696.210855][T14602] CPU: 0 UID: 0 PID: 14602 Comm: syz.3.1795 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 696.210894][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.210910][T14602] Call Trace: [ 696.210920][T14602] [ 696.210931][T14602] dump_stack_lvl+0x16c/0x1f0 [ 696.210977][T14602] warn_alloc+0x248/0x3a0 [ 696.211017][T14602] ? __pfx_warn_alloc+0x10/0x10 [ 696.211061][T14602] ? __lock_acquire+0xb8a/0x1c90 [ 696.211110][T14602] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 696.211137][T14602] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 696.211170][T14602] ? __pfx___mutex_trylock_common+0x10/0x10 [ 696.211207][T14602] ? __pfx___might_resched+0x10/0x10 [ 696.211236][T14602] ? rcu_is_watching+0x12/0xc0 [ 696.211263][T14602] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 696.211286][T14602] ? __mutex_lock+0x1ca/0xb90 [ 696.211310][T14602] ? tomoyo_path_number_perm+0x295/0x580 [ 696.211342][T14602] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 696.211368][T14602] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 696.211406][T14602] ? __pfx___mutex_lock+0x10/0x10 [ 696.211433][T14602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 696.211473][T14602] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 696.211496][T14602] __vmalloc_node_noprof+0xad/0xf0 [ 696.211527][T14602] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 696.211557][T14602] dvb_dvr_do_ioctl+0x15d/0x290 [ 696.211589][T14602] dvb_usercopy+0x164/0x340 [ 696.211627][T14602] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 696.211655][T14602] ? __pfx_dvb_usercopy+0x10/0x10 [ 696.211711][T14602] ? __fget_files+0x20e/0x3c0 [ 696.211754][T14602] dvb_dvr_ioctl+0x29/0x40 [ 696.211791][T14602] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 696.211829][T14602] __x64_sys_ioctl+0x18b/0x210 [ 696.211863][T14602] do_syscall_64+0xcd/0x490 [ 696.211891][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.211918][T14602] RIP: 0033:0x7f964a78e929 [ 696.211940][T14602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.211965][T14602] RSP: 002b:00007f964b548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.211989][T14602] RAX: ffffffffffffffda RBX: 00007f964a9b6080 RCX: 00007f964a78e929 [ 696.212006][T14602] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 000000000000000a [ 696.212022][T14602] RBP: 00007f964a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 696.212038][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.212053][T14602] R13: 0000000000000000 R14: 00007f964a9b6080 R15: 00007ffd2f1aa818 [ 696.212091][T14602] [ 696.212101][T14602] Mem-Info: [ 696.246576][T14606] FAULT_INJECTION: forcing a failure. [ 696.246576][T14606] name failslab, interval 1, probability 0, space 0, times 0 [ 696.493060][T14606] CPU: 1 UID: 0 PID: 14606 Comm: syz.4.1804 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 696.493107][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.493126][T14606] Call Trace: [ 696.493136][T14606] [ 696.493149][T14606] dump_stack_lvl+0x16c/0x1f0 [ 696.493204][T14606] should_fail_ex+0x512/0x640 [ 696.493248][T14606] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 696.493300][T14606] should_failslab+0xc2/0x120 [ 696.493330][T14606] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 696.493377][T14606] ? __d_alloc+0x31/0xaa0 [ 696.493429][T14606] __d_alloc+0x31/0xaa0 [ 696.493479][T14606] d_alloc_pseudo+0x1c/0xc0 [ 696.493514][T14606] alloc_file_pseudo+0xcf/0x230 [ 696.493551][T14606] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 696.493601][T14606] __shmem_file_setup+0x1a3/0x330 [ 696.493649][T14606] shmem_zero_setup+0x93/0x1a0 [ 696.493697][T14606] __mmap_region+0x1ece/0x25e0 [ 696.493759][T14606] ? __pfx___mmap_region+0x10/0x10 [ 696.493801][T14606] ? find_held_lock+0x2b/0x80 [ 696.493843][T14606] ? finish_task_switch.isra.0+0x221/0xc10 [ 696.493876][T14606] ? lockdep_hardirqs_on+0x7c/0x110 [ 696.493922][T14606] ? finish_task_switch.isra.0+0x221/0xc10 [ 696.493956][T14606] ? rcu_is_watching+0x12/0xc0 [ 696.493985][T14606] ? trace_sched_exit_tp+0xde/0x130 [ 696.494022][T14606] ? __schedule+0x1181/0x5de0 [ 696.494058][T14606] ? kvm_sched_clock_read+0x11/0x20 [ 696.494180][T14606] ? trace_cap_capable+0x18d/0x200 [ 696.494224][T14606] mmap_region+0x1ab/0x3f0 [ 696.494265][T14606] ? __get_unmapped_area+0x267/0x440 [ 696.494305][T14606] do_mmap+0xa3e/0x1210 [ 696.494345][T14606] ? __pfx_do_mmap+0x10/0x10 [ 696.494378][T14606] ? __pfx_down_write_killable+0x10/0x10 [ 696.494407][T14606] ? kmem_cache_free+0x2d1/0x4d0 [ 696.494450][T14606] vm_mmap_pgoff+0x281/0x450 [ 696.494487][T14606] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 696.494526][T14606] ? __x64_sys_futex+0x1e0/0x4c0 [ 696.494560][T14606] ? __x64_sys_futex+0x1e9/0x4c0 [ 696.494601][T14606] ksys_mmap_pgoff+0x7d/0x5c0 [ 696.494631][T14606] ? xfd_validate_state+0x61/0x180 [ 696.494676][T14606] __x64_sys_mmap+0x125/0x190 [ 696.494732][T14606] do_syscall_64+0xcd/0x490 [ 696.494763][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.494794][T14606] RIP: 0033:0x7fe97f38e929 [ 696.494819][T14606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.494849][T14606] RSP: 002b:00007fe9801db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 696.494878][T14606] RAX: ffffffffffffffda RBX: 00007fe97f5b5fa0 RCX: 00007fe97f38e929 [ 696.494898][T14606] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 696.494915][T14606] RBP: 00007fe97f410b39 R08: fffffffffffffffa R09: 0000000000008000 [ 696.494934][T14606] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 696.494952][T14606] R13: 0000000000000000 R14: 00007fe97f5b5fa0 R15: 00007ffe61568188 [ 696.494993][T14606] [ 696.847754][T14602] active_anon:63439 inactive_anon:62 isolated_anon:0 [ 696.847754][T14602] active_file:11894 inactive_file:49007 isolated_file:0 [ 696.847754][T14602] unevictable:768 dirty:579 writeback:20 [ 696.847754][T14602] slab_reclaimable:10786 slab_unreclaimable:95123 [ 696.847754][T14602] mapped:40096 shmem:48628 pagetables:1425 [ 696.847754][T14602] sec_pagetables:0 bounce:0 [ 696.847754][T14602] kernel_misc_reclaimable:0 [ 696.847754][T14602] free:1259022 free_pcp:17536 free_cma:0 [ 696.894407][T14602] Node 0 active_anon:148192kB inactive_anon:248kB active_file:47576kB inactive_file:195604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107208kB dirty:2312kB writeback:80kB shmem:87384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:12012kB pagetables:5348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 696.931452][T14602] Node 1 active_anon:107764kB inactive_anon:0kB active_file:0kB inactive_file:424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53876kB dirty:4kB writeback:0kB shmem:109328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 696.963976][T14602] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.993803][T14602] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 696.999806][T14602] Node 0 DMA32 free:1236808kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148848kB inactive_anon:248kB active_file:47576kB inactive_file:194284kB unevictable:1536kB writepending:2392kB present:3129332kB managed:2540888kB mlocked:0kB bounce:0kB free_pcp:37712kB local_pcp:14592kB free_cma:0kB [ 697.033015][T14602] lowmem_reserve[]: 0 0 1 1 1 [ 697.042802][T14602] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 697.071919][T14602] lowmem_reserve[]: 0 0 0 0 0 [ 697.076801][T14602] Node 1 Normal free:3773912kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109064kB inactive_anon:0kB active_file:0kB inactive_file:424kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:38588kB local_pcp:27644kB free_cma:0kB [ 697.135284][T14602] lowmem_reserve[]: 0 0 0 0 0 [ 697.140392][T14602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 697.155075][T14602] Node 0 DMA32: 1*4kB (U) 197*8kB (U) 27*16kB (UM) 5*32kB (UE) 5*64kB (U) 97*128kB (UME) 166*256kB (UME) 114*512kB (UME) 60*1024kB (UME) 5*2048kB (UME) 256*4096kB (UM) = 1236028kB [ 697.175380][T14602] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 697.188319][T14602] Node 1 Normal: 6*4kB (UE) 12*8kB (UE) 18*16kB (U) 12*32kB (UE) 10*64kB (UM) 22*128kB (UE) 23*256kB (UE) 17*512kB (UME) 9*1024kB (U) 5*2048kB (UE) 912*4096kB (UM) = 3773848kB [ 697.207154][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.214155][T14602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.223988][T14602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 697.235649][T14602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.246386][T14602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 697.257460][T14602] 110408 total pagecache pages [ 697.262282][T14602] 62 pages in swap cache [ 697.954270][T14602] Free swap = 124748kB [ 697.964194][T14602] Total swap = 124996kB [ 697.968419][T14602] 2097051 pages RAM [ 698.021953][T14602] 0 pages HighMem/MovableOnly [ 698.047597][T14602] 429851 pages reserved [ 698.051839][T14602] 0 pages cma reserved [ 698.087274][T14622] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 698.555357][T14629] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 700.122475][T14641] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 701.235999][T10448] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 701.561726][T14660] FAULT_INJECTION: forcing a failure. [ 701.561726][T14660] name failslab, interval 1, probability 0, space 0, times 0 [ 701.654490][T14660] CPU: 0 UID: 0 PID: 14660 Comm: syz.3.1807 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 701.654537][T14660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 701.654557][T14660] Call Trace: [ 701.654567][T14660] [ 701.654579][T14660] dump_stack_lvl+0x16c/0x1f0 [ 701.654640][T14660] should_fail_ex+0x512/0x640 [ 701.654684][T14660] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 701.654732][T14660] should_failslab+0xc2/0x120 [ 701.654758][T14660] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 701.654793][T14660] ? __pmd_alloc+0xbf/0x930 [ 701.654822][T14660] __pmd_alloc+0xbf/0x930 [ 701.654845][T14660] ? find_held_lock+0x2b/0x80 [ 701.654870][T14660] __handle_mm_fault+0xaac/0x5490 [ 701.654909][T14660] ? __pfx___handle_mm_fault+0x10/0x10 [ 701.654936][T14660] ? __pfx_mt_find+0x10/0x10 [ 701.654978][T14660] ? find_vma+0xbf/0x140 [ 701.655000][T14660] ? __pfx_find_vma+0x10/0x10 [ 701.655025][T14660] handle_mm_fault+0x589/0xd10 [ 701.655057][T14660] ? __pkru_allows_pkey+0x41/0xb0 [ 701.655090][T14660] do_user_addr_fault+0x7a6/0x1370 [ 701.655123][T14660] ? rcu_is_watching+0x12/0xc0 [ 701.655150][T14660] exc_page_fault+0x5c/0xb0 [ 701.655183][T14660] asm_exc_page_fault+0x26/0x30 [ 701.655205][T14660] RIP: 0010:__put_user_4+0xd/0x20 [ 701.655240][T14660] Code: 66 89 01 31 c9 0f 01 ca e9 d0 5a 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 701.655263][T14660] RSP: 0018:ffffc9000bef7e28 EFLAGS: 00050246 [ 701.655283][T14660] RAX: 0000000000000009 RBX: 0000000000000000 RCX: 0000000000000000 [ 701.655297][T14660] RDX: 0000000000080000 RSI: ffffffff894adfb4 RDI: ffffffff8c156360 [ 701.655312][T14660] RBP: 1ffff920017defc9 R08: 856fcac407a10a04 R09: 0000000000000000 [ 701.655327][T14660] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000009 [ 701.655342][T14660] R13: 000000000000000a R14: 0000000000000002 R15: dffffc0000000000 [ 701.655366][T14660] ? __sys_socketpair+0x114/0x5a0 [ 701.655401][T14660] __sys_socketpair+0x120/0x5a0 [ 701.655432][T14660] ? __pfx___sys_socketpair+0x10/0x10 [ 701.655465][T14660] ? xfd_validate_state+0x61/0x180 [ 701.655492][T14660] ? __pfx_kernel_mbind+0x10/0x10 [ 701.655524][T14660] __x64_sys_socketpair+0x96/0x100 [ 701.655553][T14660] ? lockdep_hardirqs_on+0x7c/0x110 [ 701.655595][T14660] do_syscall_64+0xcd/0x490 [ 701.655618][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.655640][T14660] RIP: 0033:0x7f964a78e929 [ 701.655659][T14660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.655680][T14660] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 701.655700][T14660] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 701.655714][T14660] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 701.655729][T14660] RBP: 00007f964a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 701.655743][T14660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.655757][T14660] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 701.655789][T14660] [ 702.229868][T14668] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 704.539654][T14695] HfR: entered promiscuous mode [ 704.585685][T14698] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1817'. [ 706.198339][T14704] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 706.216658][T14704] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 706.256027][T14704] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 706.276175][T14704] page_type: f5(slab) [ 706.290101][T14704] raw: 00fff00000000040 ffff8881404098c0 dead000000000122 0000000000000000 [ 706.330718][T14704] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 706.364227][T14704] head: 00fff00000000040 ffff8881404098c0 dead000000000122 0000000000000000 [ 706.393503][T14704] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 706.402489][T14704] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 706.432446][T14704] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 706.441452][T14704] page dumped because: unmovable page [ 706.447426][T14704] page_owner tracks the page as allocated [ 706.461519][T14704] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5217, tgid 5217 (udevadm), ts 41249221054, free_ts 33062711902 [ 706.519979][T14704] post_alloc_hook+0x1c0/0x230 [ 706.528041][T14704] get_page_from_freelist+0x1321/0x3890 [ 706.554110][T14704] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 706.561095][T14704] alloc_pages_mpol+0x1fb/0x550 [ 706.579859][T14704] new_slab+0x23b/0x330 [ 706.594229][T14704] ___slab_alloc+0xd9c/0x1940 [ 706.614136][T14704] __slab_alloc.constprop.0+0x56/0xb0 [ 706.619631][T14704] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 706.646264][T14704] alloc_inode+0xc3/0x240 [ 706.653856][T14704] iget_locked+0x2e4/0x830 [ 706.674079][T14704] kernfs_get_inode+0x48/0x460 [ 706.678999][T14704] kernfs_iop_lookup+0x1a7/0x2d0 [ 706.699316][T14704] __lookup_slow+0x24e/0x460 [ 706.707711][T14704] walk_component+0x353/0x5b0 [ 706.725965][T14704] path_lookupat+0x142/0x6d0 [ 706.730681][T14704] filename_lookup+0x224/0x5f0 [ 706.759727][T14704] page last free pid 1 tgid 1 stack trace: [ 706.774092][T14704] __free_frozen_pages+0x7fe/0x1180 [ 706.779416][T14704] free_contig_range+0x183/0x4b0 [ 706.814174][T14704] destroy_args+0x7f6/0xa60 [ 706.819723][T14704] debug_vm_pgtable+0x13b8/0x2d00 [ 706.842648][T14704] do_one_initcall+0x120/0x6e0 [ 706.850565][T14704] kernel_init_freeable+0x5c2/0x900 [ 706.864205][T14704] kernel_init+0x1c/0x2b0 [ 706.874088][T14704] ret_from_fork+0x5d7/0x6f0 [ 706.880015][T14704] ret_from_fork_asm+0x1a/0x30 [ 709.469774][T14748] nbd: must specify a device to reconfigure [ 709.711344][T14750] FAULT_INJECTION: forcing a failure. [ 709.711344][T14750] name fail_futex, interval 1, probability 0, space 0, times 0 [ 709.756442][T14750] CPU: 0 UID: 0 PID: 14750 Comm: syz.2.1839 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 709.756490][T14750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 709.756510][T14750] Call Trace: [ 709.756521][T14750] [ 709.756535][T14750] dump_stack_lvl+0x16c/0x1f0 [ 709.756601][T14750] should_fail_ex+0x512/0x640 [ 709.756653][T14750] get_futex_key+0x1d0/0x1540 [ 709.756692][T14750] ? madvise_walk_vmas+0x238/0x2c0 [ 709.756723][T14750] ? __pfx_get_futex_key+0x10/0x10 [ 709.756754][T14750] ? __pfx___blk_flush_plug+0x10/0x10 [ 709.756793][T14750] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 709.756835][T14750] futex_wake+0xea/0x530 [ 709.756884][T14750] ? __pfx_futex_wake+0x10/0x10 [ 709.756932][T14750] ? __pfx___up_read+0x10/0x10 [ 709.756978][T14750] ? madvise_unlock+0xf6/0x190 [ 709.757015][T14750] do_futex+0x1e3/0x350 [ 709.757053][T14750] ? __pfx_do_futex+0x10/0x10 [ 709.757090][T14750] ? __pfx_do_madvise+0x10/0x10 [ 709.757123][T14750] ? find_held_lock+0x2b/0x80 [ 709.757156][T14750] __x64_sys_futex+0x1e0/0x4c0 [ 709.757198][T14750] ? __pfx___x64_sys_futex+0x10/0x10 [ 709.757230][T14750] ? xfd_validate_state+0x61/0x180 [ 709.757283][T14750] do_syscall_64+0xcd/0x490 [ 709.757315][T14750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.757345][T14750] RIP: 0033:0x7f1ef358e929 [ 709.757370][T14750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.757401][T14750] RSP: 002b:00007f1ef437d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 709.757431][T14750] RAX: ffffffffffffffda RBX: 00007f1ef37b5fa8 RCX: 00007f1ef358e929 [ 709.757451][T14750] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1ef37b5fac [ 709.757471][T14750] RBP: 00007f1ef37b5fa0 R08: 00007f1ef437e000 R09: 0000000000000000 [ 709.757489][T14750] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f1ef37b5fac [ 709.757508][T14750] R13: 0000000000000000 R14: 00007ffe7d38a0d0 R15: 00007ffe7d38a1b8 [ 709.757548][T14750] [ 710.539556][T14757] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 714.145980][T14802] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 714.858310][T14818] FAULT_INJECTION: forcing a failure. [ 714.858310][T14818] name failslab, interval 1, probability 0, space 0, times 0 [ 714.934144][T14818] CPU: 0 UID: 0 PID: 14818 Comm: syz.3.1848 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 714.934189][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.934208][T14818] Call Trace: [ 714.934219][T14818] [ 714.934230][T14818] dump_stack_lvl+0x16c/0x1f0 [ 714.934284][T14818] should_fail_ex+0x512/0x640 [ 714.934328][T14818] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 714.934373][T14818] should_failslab+0xc2/0x120 [ 714.934403][T14818] __kmalloc_cache_noprof+0x6a/0x3e0 [ 714.934445][T14818] ? ima_add_digest_entry+0x52/0x540 [ 714.934505][T14818] ima_add_digest_entry+0x52/0x540 [ 714.934555][T14818] ima_add_template_entry+0x478/0x870 [ 714.934613][T14818] ? __pfx_ima_add_template_entry+0x10/0x10 [ 714.934662][T14818] ? ima_alloc_init_template+0x536/0x720 [ 714.934705][T14818] ima_add_violation+0x17f/0x3d0 [ 714.934742][T14818] ? __pfx_ima_add_violation+0x10/0x10 [ 714.934772][T14818] ? ima_d_path+0x12b/0x2a0 [ 714.934804][T14818] ? __pfx_ima_d_path+0x10/0x10 [ 714.934845][T14818] ? lockdep_init_map_type+0x5c/0x280 [ 714.934888][T14818] ? ima_inode_get+0x39e/0x580 [ 714.934940][T14818] process_measurement+0x1783/0x23e0 [ 714.935002][T14818] ? __pfx_process_measurement+0x10/0x10 [ 714.935052][T14818] ? futex_unqueue+0x133/0x2c0 [ 714.935171][T14818] ima_file_mmap+0x1b1/0x1d0 [ 714.935217][T14818] ? __pfx_ima_file_mmap+0x10/0x10 [ 714.935255][T14818] ? __lock_acquire+0x622/0x1c90 [ 714.935308][T14818] security_mmap_file+0x88c/0x990 [ 714.935351][T14818] vm_mmap_pgoff+0xec/0x450 [ 714.935385][T14818] ? find_held_lock+0x2b/0x80 [ 714.935414][T14818] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 714.935455][T14818] ? __fget_files+0x20e/0x3c0 [ 714.935513][T14818] ksys_mmap_pgoff+0x32c/0x5c0 [ 714.935557][T14818] __x64_sys_mmap+0x125/0x190 [ 714.935606][T14818] do_syscall_64+0xcd/0x490 [ 714.935638][T14818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.935670][T14818] RIP: 0033:0x7f964a78e929 [ 714.935696][T14818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.935725][T14818] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 714.935754][T14818] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 714.935774][T14818] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 714.935792][T14818] RBP: 00007f964a810b39 R08: 0000000000000003 R09: 0700000000000000 [ 714.935810][T14818] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 714.935829][T14818] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 714.935870][T14818] [ 714.935961][T14818] ima: OUT OF MEMORY ERROR creating queue entry [ 715.333010][ T30] audit: type=1804 audit(4294967302.300:36): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.1848" name="/newroot/454/file0" dev="tmpfs" ino=2425 res=0 errno=0 [ 715.425866][ T30] audit: type=1804 audit(4294967302.300:37): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1848" name="/newroot/454/file0" dev="tmpfs" ino=2425 res=0 errno=0 [ 715.454422][ T30] audit: type=1800 audit(4294967302.300:38): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1848" name="file0" dev="tmpfs" ino=2425 res=0 errno=0 [ 716.020442][T14833] [U]  [ 716.023334][T14833] [U] [ 716.026094][T14833] [U] [ 716.028849][T14833] [U] [ 716.032636][T14833] [U] [ 716.035415][T14833] [U] [ 716.038165][T14833] [U] [ 716.040919][T14833] [U] [ 716.044108][T14833] [U] [ 716.046869][T14833] [U] [ 716.049626][T14833] [U] [ 716.052375][T14833] [U] [ 716.055542][T14833] [U] [ 716.058304][T14833] [U] [ 716.061076][T14833] [U] [ 716.063824][T14833] [U] [ 716.067925][T14833] [U] [ 716.070691][T14833] [U] [ 716.073447][T14833] [U] [ 716.076201][T14833] [U] [ 716.080795][T14833] [U] [ 716.083561][T14833] [U] [ 716.086319][T14833] [U] [ 716.089065][T14833] [U] [ 716.112866][T14836] [U] [ 716.557369][T14840] FAULT_INJECTION: forcing a failure. [ 716.557369][T14840] name failslab, interval 1, probability 0, space 0, times 0 [ 716.590889][T14840] CPU: 1 UID: 0 PID: 14840 Comm: syz.2.1854 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 716.590933][T14840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.590950][T14840] Call Trace: [ 716.590961][T14840] [ 716.590973][T14840] dump_stack_lvl+0x16c/0x1f0 [ 716.591025][T14840] should_fail_ex+0x512/0x640 [ 716.591067][T14840] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 716.591117][T14840] should_failslab+0xc2/0x120 [ 716.591145][T14840] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 716.591189][T14840] ? __d_alloc+0x31/0xaa0 [ 716.591239][T14840] __d_alloc+0x31/0xaa0 [ 716.591288][T14840] d_alloc_pseudo+0x1c/0xc0 [ 716.591321][T14840] alloc_file_pseudo+0xcf/0x230 [ 716.591355][T14840] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 716.591400][T14840] __shmem_file_setup+0x1a3/0x330 [ 716.591452][T14840] shmem_zero_setup+0x93/0x1a0 [ 716.591500][T14840] __mmap_region+0x1ece/0x25e0 [ 716.591549][T14840] ? __pfx___mmap_region+0x10/0x10 [ 716.591590][T14840] ? find_held_lock+0x2b/0x80 [ 716.591628][T14840] ? finish_task_switch.isra.0+0x221/0xc10 [ 716.591659][T14840] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.591703][T14840] ? finish_task_switch.isra.0+0x221/0xc10 [ 716.591735][T14840] ? rcu_is_watching+0x12/0xc0 [ 716.591764][T14840] ? trace_sched_exit_tp+0xde/0x130 [ 716.591799][T14840] ? __schedule+0x1181/0x5de0 [ 716.591914][T14840] ? trace_cap_capable+0x18d/0x200 [ 716.591959][T14840] mmap_region+0x1ab/0x3f0 [ 716.592002][T14840] ? __get_unmapped_area+0x267/0x440 [ 716.592040][T14840] do_mmap+0xa3e/0x1210 [ 716.592080][T14840] ? __pfx_do_mmap+0x10/0x10 [ 716.592113][T14840] ? __pfx_down_write_killable+0x10/0x10 [ 716.592143][T14840] ? kmem_cache_free+0x2d1/0x4d0 [ 716.592190][T14840] vm_mmap_pgoff+0x281/0x450 [ 716.592227][T14840] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 716.592267][T14840] ? __x64_sys_futex+0x1e0/0x4c0 [ 716.592301][T14840] ? __x64_sys_futex+0x1e9/0x4c0 [ 716.592343][T14840] ksys_mmap_pgoff+0x7d/0x5c0 [ 716.592373][T14840] ? xfd_validate_state+0x61/0x180 [ 716.592425][T14840] __x64_sys_mmap+0x125/0x190 [ 716.592470][T14840] do_syscall_64+0xcd/0x490 [ 716.592500][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.592529][T14840] RIP: 0033:0x7f1ef358e929 [ 716.592552][T14840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.592579][T14840] RSP: 002b:00007f1ef437d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 716.592606][T14840] RAX: ffffffffffffffda RBX: 00007f1ef37b5fa0 RCX: 00007f1ef358e929 [ 716.592625][T14840] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 716.592643][T14840] RBP: 00007f1ef3610b39 R08: fffffffffffffffa R09: 0000000000008000 [ 716.592661][T14840] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 716.592679][T14840] R13: 0000000000000000 R14: 00007f1ef37b5fa0 R15: 00007ffe7d38a1b8 [ 716.592718][T14840] [ 716.881920][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.636013][T14846] Process accounting paused [ 717.882099][T14864] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 717.927864][T14866] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1860'. [ 719.942300][T14879] FAULT_INJECTION: forcing a failure. [ 719.942300][T14879] name failslab, interval 1, probability 0, space 0, times 0 [ 720.121677][T14879] CPU: 0 UID: 0 PID: 14879 Comm: syz.4.1863 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 720.121725][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.121744][T14879] Call Trace: [ 720.121756][T14879] [ 720.121770][T14879] dump_stack_lvl+0x16c/0x1f0 [ 720.121825][T14879] should_fail_ex+0x512/0x640 [ 720.121871][T14879] ? __kmalloc_noprof+0xbf/0x510 [ 720.121919][T14879] ? mpi_alloc_limb_space+0x31/0x60 [ 720.121957][T14879] should_failslab+0xc2/0x120 [ 720.121988][T14879] __kmalloc_noprof+0xd2/0x510 [ 720.122040][T14879] mpi_alloc_limb_space+0x31/0x60 [ 720.122077][T14879] mpi_alloc+0x199/0x230 [ 720.122113][T14879] mpi_read_raw_from_sgl+0x222/0x5b0 [ 720.122154][T14879] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 720.122200][T14879] ? kasan_save_track+0x14/0x30 [ 720.122244][T14879] ? __kasan_kmalloc+0xaa/0xb0 [ 720.122294][T14879] rsa_enc+0x15d/0x3b0 [ 720.122344][T14879] ? __pfx_rsa_enc+0x10/0x10 [ 720.122389][T14879] ? __virt_addr_valid+0x81/0x610 [ 720.122420][T14879] ? __phys_addr+0xe8/0x180 [ 720.122461][T14879] ? sg_init_one+0xf5/0x1b0 [ 720.122510][T14879] rsassa_pkcs1_verify+0x502/0xb60 [ 720.122557][T14879] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 720.122614][T14879] ? rsa_max_size+0xd/0x70 [ 720.122655][T14879] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 720.122693][T14879] public_key_verify_signature+0x672/0x970 [ 720.122741][T14879] ? __pfx_public_key_verify_signature+0x10/0x10 [ 720.122823][T14879] x509_check_for_self_signed+0x31a/0x500 [ 720.122876][T14879] x509_cert_parse+0x5f8/0x900 [ 720.122913][T14879] ? kasan_save_stack+0x42/0x60 [ 720.122957][T14879] ? kasan_save_stack+0x33/0x60 [ 720.123006][T14879] ? kasan_save_track+0x14/0x30 [ 720.123054][T14879] pkcs7_extract_cert+0xa4/0x320 [ 720.123109][T14879] asn1_ber_decoder+0xc5f/0x1df0 [ 720.123180][T14879] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 720.123267][T14879] pkcs7_parse_message+0x288/0x720 [ 720.123319][T14879] verify_pkcs7_signature+0x30/0xa0 [ 720.123359][T14879] valid_regdb+0x215/0x590 [ 720.123398][T14879] ? __pfx___mutex_lock+0x10/0x10 [ 720.123429][T14879] ? __pfx_valid_regdb+0x10/0x10 [ 720.123488][T14879] reg_reload_regdb+0x11e/0x460 [ 720.123525][T14879] ? __pfx_reg_reload_regdb+0x10/0x10 [ 720.123561][T14879] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 720.123603][T14879] ? nl80211_pre_doit+0x1b0/0xb10 [ 720.123655][T14879] genl_family_rcv_msg_doit+0x209/0x2f0 [ 720.123699][T14879] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 720.123740][T14879] ? rcu_is_watching+0x12/0xc0 [ 720.123791][T14879] ? bpf_lsm_capable+0x9/0x10 [ 720.123829][T14879] ? security_capable+0x7e/0x260 [ 720.123872][T14879] genl_rcv_msg+0x55c/0x800 [ 720.123920][T14879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 720.123963][T14879] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 720.124008][T14879] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 720.124039][T14879] ? __pfx_nl80211_post_doit+0x10/0x10 [ 720.124107][T14879] netlink_rcv_skb+0x158/0x420 [ 720.124142][T14879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 720.124181][T14879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 720.124233][T14879] ? netlink_deliver_tap+0x1ae/0xd30 [ 720.124274][T14879] genl_rcv+0x28/0x40 [ 720.124310][T14879] netlink_unicast+0x53a/0x7f0 [ 720.124353][T14879] ? __pfx_netlink_unicast+0x10/0x10 [ 720.124406][T14879] netlink_sendmsg+0x8d1/0xdd0 [ 720.124461][T14879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 720.124519][T14879] ____sys_sendmsg+0xa98/0xc70 [ 720.124562][T14879] ? copy_msghdr_from_user+0x10a/0x160 [ 720.124617][T14879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 720.124672][T14879] ? __pfx_futex_wake_mark+0x10/0x10 [ 720.124729][T14879] ___sys_sendmsg+0x134/0x1d0 [ 720.124778][T14879] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.124819][T14879] ? __lock_acquire+0x622/0x1c90 [ 720.124920][T14879] __sys_sendmsg+0x16d/0x220 [ 720.124970][T14879] ? __pfx___sys_sendmsg+0x10/0x10 [ 720.125016][T14879] ? __x64_sys_futex+0x1e0/0x4c0 [ 720.125084][T14879] do_syscall_64+0xcd/0x490 [ 720.125117][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.125148][T14879] RIP: 0033:0x7fe97f38e929 [ 720.125173][T14879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.125199][T14879] RSP: 002b:00007fe9801ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.125231][T14879] RAX: ffffffffffffffda RBX: 00007fe97f5b6080 RCX: 00007fe97f38e929 [ 720.125251][T14879] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 720.125270][T14879] RBP: 00007fe97f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 720.125288][T14879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.125306][T14879] R13: 0000000000000000 R14: 00007fe97f5b6080 R15: 00007ffe61568188 [ 720.125347][T14879] [ 721.189041][T14912] FAULT_INJECTION: forcing a failure. [ 721.189041][T14912] name failslab, interval 1, probability 0, space 0, times 0 [ 721.224842][T14912] CPU: 0 UID: 0 PID: 14912 Comm: syz.2.1868 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 721.224890][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 721.224909][T14912] Call Trace: [ 721.224920][T14912] [ 721.224932][T14912] dump_stack_lvl+0x16c/0x1f0 [ 721.224984][T14912] should_fail_ex+0x512/0x640 [ 721.225027][T14912] ? fs_reclaim_acquire+0xae/0x150 [ 721.225068][T14912] should_failslab+0xc2/0x120 [ 721.225098][T14912] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 721.225143][T14912] ? security_inode_alloc+0x3b/0x2b0 [ 721.225186][T14912] security_inode_alloc+0x3b/0x2b0 [ 721.225221][T14912] inode_init_always_gfp+0xce4/0x1030 [ 721.225273][T14912] alloc_inode+0x86/0x240 [ 721.225311][T14912] new_inode+0x22/0x1c0 [ 721.225337][T14912] ? trace_cap_capable+0x18d/0x200 [ 721.225372][T14912] shmem_get_inode+0x19a/0xfb0 [ 721.225420][T14912] ? __vm_enough_memory+0x184/0x3f0 [ 721.225457][T14912] __shmem_file_setup+0x279/0x330 [ 721.225499][T14912] shmem_zero_setup+0x93/0x1a0 [ 721.225545][T14912] __mmap_region+0x1ece/0x25e0 [ 721.225595][T14912] ? __pfx___mmap_region+0x10/0x10 [ 721.225639][T14912] ? rcu_is_watching+0x12/0xc0 [ 721.225676][T14912] ? rcu_is_watching+0x12/0xc0 [ 721.225705][T14912] ? trace_sched_exit_tp+0xde/0x130 [ 721.225740][T14912] ? __schedule+0x1181/0x5de0 [ 721.225806][T14912] ? __pfx___schedule+0x10/0x10 [ 721.225896][T14912] ? trace_cap_capable+0x18d/0x200 [ 721.225940][T14912] mmap_region+0x1ab/0x3f0 [ 721.225983][T14912] ? __get_unmapped_area+0x267/0x440 [ 721.226021][T14912] do_mmap+0xa3e/0x1210 [ 721.226062][T14912] ? __pfx_do_mmap+0x10/0x10 [ 721.226095][T14912] ? __pfx_down_write_killable+0x10/0x10 [ 721.226126][T14912] ? kmem_cache_free+0x2d1/0x4d0 [ 721.226171][T14912] vm_mmap_pgoff+0x281/0x450 [ 721.226209][T14912] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 721.226249][T14912] ? __x64_sys_futex+0x1e0/0x4c0 [ 721.226284][T14912] ? __x64_sys_futex+0x1e9/0x4c0 [ 721.226326][T14912] ksys_mmap_pgoff+0x7d/0x5c0 [ 721.226357][T14912] ? xfd_validate_state+0x61/0x180 [ 721.226411][T14912] __x64_sys_mmap+0x125/0x190 [ 721.226458][T14912] do_syscall_64+0xcd/0x490 [ 721.226490][T14912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.226520][T14912] RIP: 0033:0x7f1ef358e929 [ 721.226544][T14912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.226573][T14912] RSP: 002b:00007f1ef437d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 721.226602][T14912] RAX: ffffffffffffffda RBX: 00007f1ef37b5fa0 RCX: 00007f1ef358e929 [ 721.226622][T14912] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 721.226640][T14912] RBP: 00007f1ef3610b39 R08: fffffffffffffffa R09: 0000000000008000 [ 721.226659][T14912] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 721.226677][T14912] R13: 0000000000000000 R14: 00007f1ef37b5fa0 R15: 00007ffe7d38a1b8 [ 721.226718][T14912] [ 722.171110][T14876] Process accounting paused [ 724.984760][T14973] Console: switching to colour VGA+ 80x25 [ 725.343264][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 725.910536][T14995] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 726.890594][T15011] FAULT_INJECTION: forcing a failure. [ 726.890594][T15011] name failslab, interval 1, probability 0, space 0, times 0 [ 726.920540][T15011] CPU: 1 UID: 0 PID: 15011 Comm: syz.2.1890 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 726.920585][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 726.920603][T15011] Call Trace: [ 726.920614][T15011] [ 726.920626][T15011] dump_stack_lvl+0x16c/0x1f0 [ 726.920677][T15011] should_fail_ex+0x512/0x640 [ 726.920714][T15011] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 726.920762][T15011] should_failslab+0xc2/0x120 [ 726.920790][T15011] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 726.920833][T15011] ? __d_alloc+0x31/0xaa0 [ 726.920875][T15011] ? stack_trace_save+0x8e/0xc0 [ 726.920910][T15011] __d_alloc+0x31/0xaa0 [ 726.920982][T15011] d_alloc+0x4a/0x1e0 [ 726.921036][T15011] d_alloc_parallel+0xe3/0x12e0 [ 726.921082][T15011] ? find_held_lock+0x2b/0x80 [ 726.921113][T15011] ? __pfx_d_alloc_parallel+0x10/0x10 [ 726.921150][T15011] ? __d_lookup+0x266/0x4a0 [ 726.921191][T15011] lookup_open.isra.0+0x665/0x1580 [ 726.921238][T15011] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 726.921300][T15011] ? mnt_get_write_access+0x20c/0x300 [ 726.921339][T15011] path_openat+0x893/0x2cb0 [ 726.921405][T15011] ? __pfx_path_openat+0x10/0x10 [ 726.921450][T15011] ? __lock_acquire+0xb8a/0x1c90 [ 726.921494][T15011] do_filp_open+0x20b/0x470 [ 726.921531][T15011] ? __pfx_do_filp_open+0x10/0x10 [ 726.921598][T15011] ? alloc_fd+0x471/0x7d0 [ 726.921648][T15011] do_sys_openat2+0x11b/0x1d0 [ 726.921681][T15011] ? __pfx_do_sys_openat2+0x10/0x10 [ 726.921731][T15011] __x64_sys_openat+0x174/0x210 [ 726.921765][T15011] ? __pfx___x64_sys_openat+0x10/0x10 [ 726.921811][T15011] do_syscall_64+0xcd/0x490 [ 726.921842][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.921870][T15011] RIP: 0033:0x7f1ef358e929 [ 726.921896][T15011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.921921][T15011] RSP: 002b:00007f1ef437d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 726.921950][T15011] RAX: ffffffffffffffda RBX: 00007f1ef37b5fa0 RCX: 00007f1ef358e929 [ 726.921970][T15011] RDX: 0000000000028102 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 726.921989][T15011] RBP: 00007f1ef3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 726.922008][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.922024][T15011] R13: 0000000000000000 R14: 00007f1ef37b5fa0 R15: 00007ffe7d38a1b8 [ 726.922060][T15011] [ 729.274456][T10448] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 732.334458][T15093] FAULT_INJECTION: forcing a failure. [ 732.334458][T15093] name failslab, interval 1, probability 0, space 0, times 0 [ 732.363463][T15093] CPU: 1 UID: 0 PID: 15093 Comm: syz.3.1909 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 732.363507][T15093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 732.363526][T15093] Call Trace: [ 732.363536][T15093] [ 732.363548][T15093] dump_stack_lvl+0x16c/0x1f0 [ 732.363597][T15093] should_fail_ex+0x512/0x640 [ 732.363637][T15093] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 732.363683][T15093] should_failslab+0xc2/0x120 [ 732.363709][T15093] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 732.363748][T15093] ? vma_merge_new_range+0x37f/0xa00 [ 732.363785][T15093] ? vm_area_alloc+0x1f/0x160 [ 732.363825][T15093] vm_area_alloc+0x1f/0x160 [ 732.363859][T15093] __mmap_region+0xf0a/0x25e0 [ 732.363903][T15093] ? __pfx___mmap_region+0x10/0x10 [ 732.363940][T15093] ? rcu_is_watching+0x12/0xc0 [ 732.363974][T15093] ? rcu_is_watching+0x12/0xc0 [ 732.364007][T15093] ? trace_sched_exit_tp+0xde/0x130 [ 732.364038][T15093] ? __schedule+0x1181/0x5de0 [ 732.364100][T15093] ? __pfx___schedule+0x10/0x10 [ 732.364192][T15093] ? trace_cap_capable+0x18d/0x200 [ 732.364234][T15093] mmap_region+0x1ab/0x3f0 [ 732.364283][T15093] ? __get_unmapped_area+0x267/0x440 [ 732.364317][T15093] do_mmap+0xa3e/0x1210 [ 732.364355][T15093] ? __pfx_do_mmap+0x10/0x10 [ 732.364385][T15093] ? __pfx_down_write_killable+0x10/0x10 [ 732.364414][T15093] ? kmem_cache_free+0x2d1/0x4d0 [ 732.364457][T15093] vm_mmap_pgoff+0x281/0x450 [ 732.364495][T15093] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 732.364533][T15093] ? __x64_sys_futex+0x1e0/0x4c0 [ 732.364563][T15093] ? __x64_sys_futex+0x1e9/0x4c0 [ 732.364602][T15093] ksys_mmap_pgoff+0x7d/0x5c0 [ 732.364630][T15093] ? xfd_validate_state+0x61/0x180 [ 732.364672][T15093] __x64_sys_mmap+0x125/0x190 [ 732.364712][T15093] do_syscall_64+0xcd/0x490 [ 732.364740][T15093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.364768][T15093] RIP: 0033:0x7f964a78e929 [ 732.364792][T15093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.364818][T15093] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 732.364846][T15093] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 732.364866][T15093] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 732.364883][T15093] RBP: 00007f964a810b39 R08: fffffffffffffffa R09: 0000000000008000 [ 732.364902][T15093] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 732.364919][T15093] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 732.364957][T15093] [ 736.198095][T15143] FAULT_INJECTION: forcing a failure. [ 736.198095][T15143] name failslab, interval 1, probability 0, space 0, times 0 [ 736.338425][T15143] CPU: 1 UID: 0 PID: 15143 Comm: syz.3.1921 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 736.338471][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 736.338490][T15143] Call Trace: [ 736.338501][T15143] [ 736.338513][T15143] dump_stack_lvl+0x16c/0x1f0 [ 736.338564][T15143] should_fail_ex+0x512/0x640 [ 736.338606][T15143] ? __kmalloc_noprof+0xbf/0x510 [ 736.338653][T15143] ? sk_prot_alloc+0x1a8/0x2a0 [ 736.338686][T15143] should_failslab+0xc2/0x120 [ 736.338716][T15143] __kmalloc_noprof+0xd2/0x510 [ 736.338773][T15143] sk_prot_alloc+0x1a8/0x2a0 [ 736.338811][T15143] sk_alloc+0x36/0xc20 [ 736.338858][T15143] __netlink_create+0x5e/0x2c0 [ 736.338902][T15143] ? __wake_up+0x3f/0x60 [ 736.338938][T15143] netlink_create+0x39e/0x620 [ 736.338965][T15143] ? __pfx_genl_bind+0x10/0x10 [ 736.338999][T15143] ? __pfx_genl_unbind+0x10/0x10 [ 736.339033][T15143] ? __pfx_genl_release+0x10/0x10 [ 736.339076][T15143] __sock_create+0x338/0x8d0 [ 736.339134][T15143] __sys_socket+0x14d/0x260 [ 736.339174][T15143] ? __pfx___sys_socket+0x10/0x10 [ 736.339213][T15143] ? xfd_validate_state+0x61/0x180 [ 736.339263][T15143] __x64_sys_socket+0x72/0xb0 [ 736.339302][T15143] ? lockdep_hardirqs_on+0x7c/0x110 [ 736.339346][T15143] do_syscall_64+0xcd/0x490 [ 736.339377][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.339409][T15143] RIP: 0033:0x7f964a78e929 [ 736.339433][T15143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.339460][T15143] RSP: 002b:00007f964b548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 736.339488][T15143] RAX: ffffffffffffffda RBX: 00007f964a9b6080 RCX: 00007f964a78e929 [ 736.339508][T15143] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 736.339525][T15143] RBP: 00007f964a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 736.339544][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.339562][T15143] R13: 0000000000000000 R14: 00007f964a9b6080 R15: 00007ffd2f1aa818 [ 736.339592][T15143] [ 737.365394][T15164] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1923'. [ 737.651776][T15170] FAULT_INJECTION: forcing a failure. [ 737.651776][T15170] name failslab, interval 1, probability 0, space 0, times 0 [ 737.690771][T15170] CPU: 0 UID: 0 PID: 15170 Comm: syz.3.1924 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 737.690813][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 737.690828][T15170] Call Trace: [ 737.690837][T15170] [ 737.690847][T15170] dump_stack_lvl+0x16c/0x1f0 [ 737.690896][T15170] should_fail_ex+0x512/0x640 [ 737.690933][T15170] ? fs_reclaim_acquire+0xae/0x150 [ 737.690966][T15170] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 737.691002][T15170] should_failslab+0xc2/0x120 [ 737.691029][T15170] __kmalloc_noprof+0xd2/0x510 [ 737.691079][T15170] tomoyo_realpath_from_path+0xc2/0x6e0 [ 737.691120][T15170] ? tomoyo_profile+0x47/0x60 [ 737.691166][T15170] tomoyo_path_number_perm+0x245/0x580 [ 737.691197][T15170] ? tomoyo_path_number_perm+0x237/0x580 [ 737.691234][T15170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 737.691268][T15170] ? find_held_lock+0x2b/0x80 [ 737.691347][T15170] ? fd_install+0x244/0x750 [ 737.691385][T15170] ? hook_file_ioctl_common+0x145/0x410 [ 737.691439][T15170] security_file_ioctl+0x9b/0x240 [ 737.691476][T15170] __x64_sys_ioctl+0xb7/0x210 [ 737.691513][T15170] do_syscall_64+0xcd/0x490 [ 737.691544][T15170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.691572][T15170] RIP: 0033:0x7f964a78e929 [ 737.691596][T15170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.691625][T15170] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.691654][T15170] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 737.691674][T15170] RDX: 0000000000000000 RSI: 0000000000004b72 RDI: 0000000000000000 [ 737.691692][T15170] RBP: 00007f964b569090 R08: 0000000000000000 R09: 0000000000000000 [ 737.691709][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.691725][T15170] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 737.691765][T15170] [ 737.691777][T15170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 738.933704][T15184] FAULT_INJECTION: forcing a failure. [ 738.933704][T15184] name failslab, interval 1, probability 0, space 0, times 0 [ 738.981121][T15184] CPU: 1 UID: 0 PID: 15184 Comm: syz.3.1929 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 738.981171][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 738.981191][T15184] Call Trace: [ 738.981202][T15184] [ 738.981215][T15184] dump_stack_lvl+0x16c/0x1f0 [ 738.981268][T15184] should_fail_ex+0x512/0x640 [ 738.981311][T15184] ? fs_reclaim_acquire+0xae/0x150 [ 738.981351][T15184] should_failslab+0xc2/0x120 [ 738.981380][T15184] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 738.981426][T15184] ? security_inode_alloc+0x3b/0x2b0 [ 738.981466][T15184] security_inode_alloc+0x3b/0x2b0 [ 738.981502][T15184] inode_init_always_gfp+0xce4/0x1030 [ 738.981552][T15184] alloc_inode+0x86/0x240 [ 738.981584][T15184] new_inode+0x22/0x1c0 [ 738.981611][T15184] ? trace_cap_capable+0x18d/0x200 [ 738.981645][T15184] shmem_get_inode+0x19a/0xfb0 [ 738.981682][T15184] ? __vm_enough_memory+0x184/0x3f0 [ 738.981718][T15184] __shmem_file_setup+0x279/0x330 [ 738.981761][T15184] shmem_zero_setup+0x93/0x1a0 [ 738.981809][T15184] __mmap_region+0x1ece/0x25e0 [ 738.981860][T15184] ? __pfx___mmap_region+0x10/0x10 [ 738.981904][T15184] ? rcu_is_watching+0x12/0xc0 [ 738.981943][T15184] ? rcu_is_watching+0x12/0xc0 [ 738.981973][T15184] ? trace_sched_exit_tp+0xde/0x130 [ 738.982017][T15184] ? __schedule+0x1181/0x5de0 [ 738.982090][T15184] ? __pfx___schedule+0x10/0x10 [ 738.982195][T15184] ? trace_cap_capable+0x18d/0x200 [ 738.982242][T15184] mmap_region+0x1ab/0x3f0 [ 738.982286][T15184] ? __get_unmapped_area+0x267/0x440 [ 738.982325][T15184] do_mmap+0xa3e/0x1210 [ 738.982369][T15184] ? __pfx_do_mmap+0x10/0x10 [ 738.982404][T15184] ? __pfx_down_write_killable+0x10/0x10 [ 738.982434][T15184] ? kmem_cache_free+0x2d1/0x4d0 [ 738.982484][T15184] vm_mmap_pgoff+0x281/0x450 [ 738.982525][T15184] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 738.982567][T15184] ? __x64_sys_futex+0x1e0/0x4c0 [ 738.982602][T15184] ? __x64_sys_futex+0x1e9/0x4c0 [ 738.982645][T15184] ksys_mmap_pgoff+0x7d/0x5c0 [ 738.982676][T15184] ? xfd_validate_state+0x61/0x180 [ 738.982721][T15184] __x64_sys_mmap+0x125/0x190 [ 738.982770][T15184] do_syscall_64+0xcd/0x490 [ 738.982802][T15184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.982831][T15184] RIP: 0033:0x7f964a78e929 [ 738.982857][T15184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.982885][T15184] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 738.982914][T15184] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 738.982934][T15184] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 738.982952][T15184] RBP: 00007f964a810b39 R08: fffffffffffffffa R09: 0000000000008000 [ 738.982971][T15184] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 738.982989][T15184] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 738.983041][T15184] [ 739.926060][ T30] audit: type=1800 audit(4294967326.900:39): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1930" name="features" dev="configfs" ino=42989 res=0 errno=0 [ 743.079207][T15213] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 743.134105][T15213] File: /dev/ram7 PID: 15213 Comm: syz.2.1932 [ 745.046470][T15252] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 746.501810][T15279] FAULT_INJECTION: forcing a failure. [ 746.501810][T15279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 746.554822][T15279] CPU: 0 UID: 0 PID: 15279 Comm: syz.2.1947 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 746.554871][T15279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 746.554888][T15279] Call Trace: [ 746.554898][T15279] [ 746.554911][T15279] dump_stack_lvl+0x16c/0x1f0 [ 746.554963][T15279] should_fail_ex+0x512/0x640 [ 746.555014][T15279] should_fail_alloc_page+0xe7/0x130 [ 746.555046][T15279] prepare_alloc_pages+0x3c2/0x610 [ 746.555083][T15279] ? rcu_is_watching+0x12/0xc0 [ 746.555120][T15279] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 746.555191][T15279] ? __lock_acquire+0x622/0x1c90 [ 746.555241][T15279] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.555285][T15279] ? relay_open+0x653/0xad0 [ 746.555336][T15279] ? rcu_read_unlock+0x17/0x60 [ 746.555376][T15279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 746.555424][T15279] ? policy_nodemask+0xea/0x4e0 [ 746.555476][T15279] alloc_pages_mpol+0x1fb/0x550 [ 746.555507][T15279] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 746.555535][T15279] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 746.555580][T15279] ? trace_kmalloc+0x2b/0xd0 [ 746.555608][T15279] ? __kmalloc_noprof.cold+0x5c/0x61 [ 746.555648][T15279] ? relay_open_buf.part.0+0x194/0xc80 [ 746.555690][T15279] alloc_pages_noprof+0x131/0x390 [ 746.555722][T15279] relay_open_buf.part.0+0x262/0xc80 [ 746.555776][T15279] relay_open+0x653/0xad0 [ 746.555814][T15279] ? debugfs_create_file_full+0x41/0x60 [ 746.555865][T15279] do_blk_trace_setup+0x503/0xb50 [ 746.555903][T15279] blk_trace_setup+0xed/0x1b0 [ 746.555938][T15279] ? __pfx_blk_trace_setup+0x10/0x10 [ 746.555971][T15279] ? __pfx_snprintf+0x10/0x10 [ 746.556037][T15279] blk_trace_ioctl+0x146/0x280 [ 746.556073][T15279] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 746.556115][T15279] ? find_held_lock+0x2b/0x80 [ 746.556173][T15279] ? hook_file_ioctl_common+0x145/0x410 [ 746.556213][T15279] blkdev_ioctl+0x108/0x6d0 [ 746.556249][T15279] ? __pfx_blkdev_ioctl+0x10/0x10 [ 746.556290][T15279] ? __pfx_blkdev_ioctl+0x10/0x10 [ 746.556325][T15279] __x64_sys_ioctl+0x18b/0x210 [ 746.556361][T15279] do_syscall_64+0xcd/0x490 [ 746.556391][T15279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.556422][T15279] RIP: 0033:0x7f1ef358e929 [ 746.556447][T15279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.556476][T15279] RSP: 002b:00007f1ef437d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.556506][T15279] RAX: ffffffffffffffda RBX: 00007f1ef37b5fa0 RCX: 00007f1ef358e929 [ 746.556526][T15279] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 746.556544][T15279] RBP: 00007f1ef3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 746.556562][T15279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.556580][T15279] R13: 0000000000000000 R14: 00007f1ef37b5fa0 R15: 00007ffe7d38a1b8 [ 746.556620][T15279] [ 748.240062][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 749.434137][T10448] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 750.646298][T15291] Process accounting resumed [ 751.937333][T15324] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 752.606087][T15341] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 752.738116][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.744779][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.826635][T15344] Process accounting resumed [ 754.416518][T15350] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 755.911664][T15378] FAULT_INJECTION: forcing a failure. [ 755.911664][T15378] name failslab, interval 1, probability 0, space 0, times 0 [ 755.924669][T15378] CPU: 0 UID: 0 PID: 15378 Comm: syz.3.1968 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 755.924711][T15378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.924729][T15378] Call Trace: [ 755.924740][T15378] [ 755.924752][T15378] dump_stack_lvl+0x16c/0x1f0 [ 755.924804][T15378] should_fail_ex+0x512/0x640 [ 755.924857][T15378] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 755.924904][T15378] should_failslab+0xc2/0x120 [ 755.924934][T15378] __kmalloc_cache_noprof+0x6a/0x3e0 [ 755.924972][T15378] ? vhost_net_open+0x28/0x8a0 [ 755.925015][T15378] ? vhost_net_open+0x6e/0x8a0 [ 755.925062][T15378] ? __pfx_vhost_net_open+0x10/0x10 [ 755.925102][T15378] vhost_net_open+0x6e/0x8a0 [ 755.925144][T15378] ? __pfx_vhost_net_open+0x10/0x10 [ 755.925187][T15378] misc_open+0x35d/0x420 [ 755.925227][T15378] ? __pfx_misc_open+0x10/0x10 [ 755.925264][T15378] chrdev_open+0x231/0x6a0 [ 755.925308][T15378] ? __pfx_apparmor_file_open+0x10/0x10 [ 755.925347][T15378] ? __pfx_chrdev_open+0x10/0x10 [ 755.925397][T15378] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 755.925447][T15378] do_dentry_open+0x744/0x1c10 [ 755.925492][T15378] ? __pfx_chrdev_open+0x10/0x10 [ 755.925549][T15378] vfs_open+0x82/0x3f0 [ 755.925587][T15378] path_openat+0x1de4/0x2cb0 [ 755.925647][T15378] ? __pfx_path_openat+0x10/0x10 [ 755.925693][T15378] ? __lock_acquire+0xb8a/0x1c90 [ 755.925740][T15378] do_filp_open+0x20b/0x470 [ 755.925784][T15378] ? __pfx_do_filp_open+0x10/0x10 [ 755.925874][T15378] ? alloc_fd+0x471/0x7d0 [ 755.925930][T15378] do_sys_openat2+0x11b/0x1d0 [ 755.925964][T15378] ? __pfx_do_sys_openat2+0x10/0x10 [ 755.926020][T15378] __x64_sys_openat+0x174/0x210 [ 755.926055][T15378] ? __pfx___x64_sys_openat+0x10/0x10 [ 755.926110][T15378] do_syscall_64+0xcd/0x490 [ 755.926143][T15378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.926173][T15378] RIP: 0033:0x7f964a78e929 [ 755.926198][T15378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.926227][T15378] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 755.926257][T15378] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 755.926277][T15378] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 755.926297][T15378] RBP: 00007f964a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 755.926315][T15378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.926334][T15378] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 755.926374][T15378] [ 755.953785][T10448] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 756.192885][T10448] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 756.207782][T10448] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 756.207814][T10448] Bluetooth: hci1: Unknown advertising packet type: 0x3a [ 756.214968][T10448] Bluetooth: hci1: adv larger than maximum supported [ 756.222068][T10448] Bluetooth: hci1: adv larger than maximum supported [ 756.228870][T10448] Bluetooth: hci1: Malformed LE Event: 0x0d [ 757.984886][T15387] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 759.207948][T15392] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 759.861519][T15413] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 760.606077][T15422] FAULT_INJECTION: forcing a failure. [ 760.606077][T15422] name failslab, interval 1, probability 0, space 0, times 0 [ 760.650522][T15422] CPU: 1 UID: 0 PID: 15422 Comm: syz.3.1981 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 760.650567][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.650587][T15422] Call Trace: [ 760.650597][T15422] [ 760.650609][T15422] dump_stack_lvl+0x16c/0x1f0 [ 760.650663][T15422] should_fail_ex+0x512/0x640 [ 760.650705][T15422] ? fs_reclaim_acquire+0xae/0x150 [ 760.650754][T15422] should_failslab+0xc2/0x120 [ 760.650783][T15422] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 760.650828][T15422] ? security_inode_alloc+0x3b/0x2b0 [ 760.650870][T15422] security_inode_alloc+0x3b/0x2b0 [ 760.650906][T15422] inode_init_always_gfp+0xce4/0x1030 [ 760.650956][T15422] alloc_inode+0x86/0x240 [ 760.650988][T15422] new_inode+0x22/0x1c0 [ 760.651013][T15422] ? trace_cap_capable+0x18d/0x200 [ 760.651047][T15422] shmem_get_inode+0x19a/0xfb0 [ 760.651085][T15422] ? __vm_enough_memory+0x184/0x3f0 [ 760.651122][T15422] __shmem_file_setup+0x279/0x330 [ 760.651167][T15422] shmem_zero_setup+0x93/0x1a0 [ 760.651215][T15422] __mmap_region+0x1ece/0x25e0 [ 760.651267][T15422] ? __pfx___mmap_region+0x10/0x10 [ 760.651311][T15422] ? rcu_is_watching+0x12/0xc0 [ 760.651352][T15422] ? rcu_is_watching+0x12/0xc0 [ 760.651382][T15422] ? trace_sched_exit_tp+0xde/0x130 [ 760.651418][T15422] ? __schedule+0x1181/0x5de0 [ 760.651490][T15422] ? __pfx___schedule+0x10/0x10 [ 760.651594][T15422] ? trace_cap_capable+0x18d/0x200 [ 760.651641][T15422] mmap_region+0x1ab/0x3f0 [ 760.651686][T15422] ? __get_unmapped_area+0x267/0x440 [ 760.651727][T15422] do_mmap+0xa3e/0x1210 [ 760.651778][T15422] ? __pfx_do_mmap+0x10/0x10 [ 760.651813][T15422] ? __pfx_down_write_killable+0x10/0x10 [ 760.651844][T15422] ? kmem_cache_free+0x2d1/0x4d0 [ 760.651895][T15422] vm_mmap_pgoff+0x281/0x450 [ 760.651936][T15422] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 760.651980][T15422] ? __x64_sys_futex+0x1e0/0x4c0 [ 760.652014][T15422] ? __x64_sys_futex+0x1e9/0x4c0 [ 760.652059][T15422] ksys_mmap_pgoff+0x7d/0x5c0 [ 760.652089][T15422] ? xfd_validate_state+0x61/0x180 [ 760.652133][T15422] __x64_sys_mmap+0x125/0x190 [ 760.652177][T15422] do_syscall_64+0xcd/0x490 [ 760.652208][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.652236][T15422] RIP: 0033:0x7f964a78e929 [ 760.652261][T15422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.652289][T15422] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 760.652317][T15422] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 760.652337][T15422] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 760.652354][T15422] RBP: 00007f964a810b39 R08: fffffffffffffffa R09: 0000000000008000 [ 760.652373][T15422] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 760.652391][T15422] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 760.652475][T15422] [ 762.206923][T15440] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 763.029565][T15456] FAULT_INJECTION: forcing a failure. [ 763.029565][T15456] name failslab, interval 1, probability 0, space 0, times 0 [ 763.086189][T15456] CPU: 0 UID: 0 PID: 15456 Comm: syz.2.1988 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 763.086233][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.086250][T15456] Call Trace: [ 763.086260][T15456] [ 763.086272][T15456] dump_stack_lvl+0x16c/0x1f0 [ 763.086320][T15456] should_fail_ex+0x512/0x640 [ 763.086362][T15456] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 763.086411][T15456] should_failslab+0xc2/0x120 [ 763.086438][T15456] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 763.086480][T15456] ? __alloc_skb+0x2b2/0x380 [ 763.086521][T15456] ? bpf_lsm_capable+0x9/0x10 [ 763.086563][T15456] __alloc_skb+0x2b2/0x380 [ 763.086608][T15456] ? __pfx___alloc_skb+0x10/0x10 [ 763.086653][T15456] ? genl_rcv_msg+0x4bb/0x800 [ 763.086703][T15456] netlink_ack+0x15d/0xb80 [ 763.086760][T15456] netlink_rcv_skb+0x332/0x420 [ 763.086794][T15456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.086836][T15456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 763.086883][T15456] ? netlink_deliver_tap+0x1ae/0xd30 [ 763.086919][T15456] genl_rcv+0x28/0x40 [ 763.086950][T15456] netlink_unicast+0x53a/0x7f0 [ 763.086986][T15456] ? __pfx_netlink_unicast+0x10/0x10 [ 763.087027][T15456] netlink_sendmsg+0x8d1/0xdd0 [ 763.087067][T15456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.087117][T15456] ____sys_sendmsg+0xa98/0xc70 [ 763.087154][T15456] ? copy_msghdr_from_user+0x10a/0x160 [ 763.087201][T15456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.087247][T15456] ? __pfx_futex_wake_mark+0x10/0x10 [ 763.087295][T15456] ___sys_sendmsg+0x134/0x1d0 [ 763.087338][T15456] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.087374][T15456] ? __lock_acquire+0x622/0x1c90 [ 763.087454][T15456] __sys_sendmsg+0x16d/0x220 [ 763.087497][T15456] ? __pfx___sys_sendmsg+0x10/0x10 [ 763.087533][T15456] ? __x64_sys_futex+0x1e0/0x4c0 [ 763.087571][T15456] do_syscall_64+0xcd/0x490 [ 763.087589][T15456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.087607][T15456] RIP: 0033:0x7f1ef358e929 [ 763.087622][T15456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.087640][T15456] RSP: 002b:00007f1ef435c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.087657][T15456] RAX: ffffffffffffffda RBX: 00007f1ef37b6080 RCX: 00007f1ef358e929 [ 763.087669][T15456] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000008 [ 763.087680][T15456] RBP: 00007f1ef3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 763.087690][T15456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.087700][T15456] R13: 0000000000000000 R14: 00007f1ef37b6080 R15: 00007ffe7d38a1b8 [ 763.087730][T15456] [ 764.811662][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 765.548996][T15481] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 765.911022][T15494] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 767.938431][T15511] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 768.992928][T15526] FAULT_INJECTION: forcing a failure. [ 768.992928][T15526] name failslab, interval 1, probability 0, space 0, times 0 [ 769.032196][T15526] CPU: 0 UID: 0 PID: 15526 Comm: syz.2.2004 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 769.032246][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.032266][T15526] Call Trace: [ 769.032277][T15526] [ 769.032290][T15526] dump_stack_lvl+0x16c/0x1f0 [ 769.032346][T15526] should_fail_ex+0x512/0x640 [ 769.032390][T15526] ? fs_reclaim_acquire+0xae/0x150 [ 769.032431][T15526] should_failslab+0xc2/0x120 [ 769.032462][T15526] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 769.032509][T15526] ? security_inode_alloc+0x3b/0x2b0 [ 769.032551][T15526] security_inode_alloc+0x3b/0x2b0 [ 769.032586][T15526] inode_init_always_gfp+0xce4/0x1030 [ 769.032646][T15526] alloc_inode+0x86/0x240 [ 769.032679][T15526] new_inode+0x22/0x1c0 [ 769.032707][T15526] ? trace_cap_capable+0x18d/0x200 [ 769.032742][T15526] shmem_get_inode+0x19a/0xfb0 [ 769.032781][T15526] ? __vm_enough_memory+0x184/0x3f0 [ 769.032818][T15526] __shmem_file_setup+0x279/0x330 [ 769.032864][T15526] shmem_zero_setup+0x93/0x1a0 [ 769.032912][T15526] __mmap_region+0x1ece/0x25e0 [ 769.032966][T15526] ? __pfx___mmap_region+0x10/0x10 [ 769.033011][T15526] ? rcu_is_watching+0x12/0xc0 [ 769.033053][T15526] ? rcu_is_watching+0x12/0xc0 [ 769.033084][T15526] ? trace_sched_exit_tp+0xde/0x130 [ 769.033121][T15526] ? __schedule+0x1181/0x5de0 [ 769.033189][T15526] ? __pfx___schedule+0x10/0x10 [ 769.033277][T15526] ? trace_cap_capable+0x18d/0x200 [ 769.033320][T15526] mmap_region+0x1ab/0x3f0 [ 769.033364][T15526] ? __get_unmapped_area+0x267/0x440 [ 769.033404][T15526] do_mmap+0xa3e/0x1210 [ 769.033446][T15526] ? __pfx_do_mmap+0x10/0x10 [ 769.033481][T15526] ? __pfx_down_write_killable+0x10/0x10 [ 769.033513][T15526] ? kmem_cache_free+0x2d1/0x4d0 [ 769.033562][T15526] vm_mmap_pgoff+0x281/0x450 [ 769.033601][T15526] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 769.033653][T15526] ? __x64_sys_futex+0x1e0/0x4c0 [ 769.033690][T15526] ? __x64_sys_futex+0x1e9/0x4c0 [ 769.033735][T15526] ksys_mmap_pgoff+0x7d/0x5c0 [ 769.033768][T15526] ? xfd_validate_state+0x61/0x180 [ 769.033816][T15526] __x64_sys_mmap+0x125/0x190 [ 769.033866][T15526] do_syscall_64+0xcd/0x490 [ 769.033897][T15526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.033928][T15526] RIP: 0033:0x7f1ef358e929 [ 769.033954][T15526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.033985][T15526] RSP: 002b:00007f1ef437d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 769.034016][T15526] RAX: ffffffffffffffda RBX: 00007f1ef37b5fa0 RCX: 00007f1ef358e929 [ 769.034037][T15526] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 769.034056][T15526] RBP: 00007f1ef3610b39 R08: fffffffffffffffa R09: 0000000000008000 [ 769.034076][T15526] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 769.034095][T15526] R13: 0000000000000000 R14: 00007f1ef37b5fa0 R15: 00007ffe7d38a1b8 [ 769.034136][T15526] [ 771.198904][T15550] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 771.278959][T15549] FAULT_INJECTION: forcing a failure. [ 771.278959][T15549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.315774][T15549] CPU: 0 UID: 0 PID: 15549 Comm: syz.3.2010 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 771.315817][T15549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.315834][T15549] Call Trace: [ 771.315844][T15549] [ 771.315856][T15549] dump_stack_lvl+0x16c/0x1f0 [ 771.315906][T15549] should_fail_ex+0x512/0x640 [ 771.315952][T15549] _copy_to_iter+0x29f/0x16f0 [ 771.316002][T15549] ? anon_pipe_read+0x7de/0x1210 [ 771.316043][T15549] ? __pfx__copy_to_iter+0x10/0x10 [ 771.316086][T15549] ? __pfx___mutex_lock+0x10/0x10 [ 771.316131][T15549] copy_page_to_iter+0x12a/0x1e0 [ 771.316180][T15549] anon_pipe_read+0x47e/0x1210 [ 771.316235][T15549] ? __pfx_anon_pipe_read+0x10/0x10 [ 771.316281][T15549] ? __pfx_autoremove_wake_function+0x10/0x10 [ 771.316317][T15549] ? __pfx_aa_file_perm+0x10/0x10 [ 771.316358][T15549] ? __lock_acquire+0x622/0x1c90 [ 771.316398][T15549] fifo_pipe_read+0x1e/0xd0 [ 771.316439][T15549] do_iter_readv_writev+0x735/0x950 [ 771.316480][T15549] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 771.316525][T15549] ? bpf_lsm_file_permission+0x9/0x10 [ 771.316554][T15549] ? security_file_permission+0x71/0x210 [ 771.316593][T15549] ? rw_verify_area+0xcf/0x680 [ 771.316631][T15549] vfs_readv+0x4cb/0x8b0 [ 771.316686][T15549] ? __pfx_vfs_readv+0x10/0x10 [ 771.316762][T15549] ? __fget_files+0x20e/0x3c0 [ 771.316796][T15549] ? __fget_files+0x150/0x3c0 [ 771.316843][T15549] ? do_readv+0x28c/0x340 [ 771.316876][T15549] do_readv+0x28c/0x340 [ 771.316913][T15549] ? __pfx_do_readv+0x10/0x10 [ 771.316962][T15549] do_syscall_64+0xcd/0x490 [ 771.316993][T15549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.317021][T15549] RIP: 0033:0x7f964a78e929 [ 771.317045][T15549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.317073][T15549] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 771.317101][T15549] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 771.317120][T15549] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 771.317137][T15549] RBP: 00007f964b569090 R08: 0000000000000000 R09: 0000000000000000 [ 771.317154][T15549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.317171][T15549] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 771.317218][T15549] [ 775.507694][T15596] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 776.560887][T15602] FAULT_INJECTION: forcing a failure. [ 776.560887][T15602] name failslab, interval 1, probability 0, space 0, times 0 [ 776.604850][T15602] CPU: 0 UID: 0 PID: 15602 Comm: syz.2.2025 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 776.604897][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.604916][T15602] Call Trace: [ 776.604928][T15602] [ 776.604940][T15602] dump_stack_lvl+0x16c/0x1f0 [ 776.604993][T15602] should_fail_ex+0x512/0x640 [ 776.605037][T15602] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 776.605087][T15602] should_failslab+0xc2/0x120 [ 776.605116][T15602] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 776.605162][T15602] ? __d_alloc+0x31/0xaa0 [ 776.605212][T15602] __d_alloc+0x31/0xaa0 [ 776.605262][T15602] d_alloc_pseudo+0x1c/0xc0 [ 776.605295][T15602] alloc_file_pseudo+0xcf/0x230 [ 776.605329][T15602] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 776.605375][T15602] __shmem_file_setup+0x1a3/0x330 [ 776.605418][T15602] shmem_zero_setup+0x93/0x1a0 [ 776.605464][T15602] __mmap_region+0x1ece/0x25e0 [ 776.605516][T15602] ? __pfx___mmap_region+0x10/0x10 [ 776.605557][T15602] ? find_held_lock+0x2b/0x80 [ 776.605595][T15602] ? finish_task_switch.isra.0+0x221/0xc10 [ 776.605639][T15602] ? lockdep_hardirqs_on+0x7c/0x110 [ 776.605681][T15602] ? finish_task_switch.isra.0+0x221/0xc10 [ 776.605714][T15602] ? rcu_is_watching+0x12/0xc0 [ 776.605745][T15602] ? trace_sched_exit_tp+0xde/0x130 [ 776.605781][T15602] ? __schedule+0x1181/0x5de0 [ 776.605822][T15602] ? kvm_sched_clock_read+0x11/0x20 [ 776.605949][T15602] ? trace_cap_capable+0x18d/0x200 [ 776.605995][T15602] mmap_region+0x1ab/0x3f0 [ 776.606040][T15602] ? __get_unmapped_area+0x267/0x440 [ 776.606080][T15602] do_mmap+0xa3e/0x1210 [ 776.606118][T15602] ? __pfx_do_mmap+0x10/0x10 [ 776.606144][T15602] ? __pfx_down_write_killable+0x10/0x10 [ 776.606167][T15602] ? kmem_cache_free+0x2d1/0x4d0 [ 776.606204][T15602] vm_mmap_pgoff+0x281/0x450 [ 776.606235][T15602] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 776.606267][T15602] ? __x64_sys_futex+0x1e0/0x4c0 [ 776.606294][T15602] ? __x64_sys_futex+0x1e9/0x4c0 [ 776.606327][T15602] ksys_mmap_pgoff+0x7d/0x5c0 [ 776.606351][T15602] ? xfd_validate_state+0x61/0x180 [ 776.606386][T15602] __x64_sys_mmap+0x125/0x190 [ 776.606427][T15602] do_syscall_64+0xcd/0x490 [ 776.606450][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.606473][T15602] RIP: 0033:0x7f1ef358e929 [ 776.606493][T15602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.606516][T15602] RSP: 002b:00007f1ef437d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 776.606539][T15602] RAX: ffffffffffffffda RBX: 00007f1ef37b5fa0 RCX: 00007f1ef358e929 [ 776.606555][T15602] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 776.606569][T15602] RBP: 00007f1ef3610b39 R08: fffffffffffffffa R09: 0000000000008000 [ 776.606583][T15602] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 776.606597][T15602] R13: 0000000000000000 R14: 00007f1ef37b5fa0 R15: 00007ffe7d38a1b8 [ 776.606643][T15602] [ 777.359306][T15615] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 779.002946][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'. [ 779.113111][T15646] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 779.143029][T15636] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2031'. [ 780.201044][T15655] FAULT_INJECTION: forcing a failure. [ 780.201044][T15655] name failslab, interval 1, probability 0, space 0, times 0 [ 780.235302][T15655] CPU: 1 UID: 0 PID: 15655 Comm: syz.3.2035 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 780.235345][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 780.235363][T15655] Call Trace: [ 780.235373][T15655] [ 780.235384][T15655] dump_stack_lvl+0x16c/0x1f0 [ 780.235431][T15655] should_fail_ex+0x512/0x640 [ 780.235469][T15655] ? fs_reclaim_acquire+0xae/0x150 [ 780.235516][T15655] should_failslab+0xc2/0x120 [ 780.235551][T15655] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 780.235594][T15655] ? security_inode_alloc+0x3b/0x2b0 [ 780.235642][T15655] security_inode_alloc+0x3b/0x2b0 [ 780.235675][T15655] inode_init_always_gfp+0xce4/0x1030 [ 780.235721][T15655] alloc_inode+0x86/0x240 [ 780.235751][T15655] new_inode+0x22/0x1c0 [ 780.235777][T15655] ? trace_cap_capable+0x18d/0x200 [ 780.235808][T15655] shmem_get_inode+0x19a/0xfb0 [ 780.235842][T15655] ? __vm_enough_memory+0x184/0x3f0 [ 780.235874][T15655] __shmem_file_setup+0x279/0x330 [ 780.235915][T15655] shmem_zero_setup+0x93/0x1a0 [ 780.235957][T15655] __mmap_region+0x1ece/0x25e0 [ 780.236002][T15655] ? __pfx___mmap_region+0x10/0x10 [ 780.236040][T15655] ? rcu_is_watching+0x12/0xc0 [ 780.236077][T15655] ? rcu_is_watching+0x12/0xc0 [ 780.236103][T15655] ? trace_sched_exit_tp+0xde/0x130 [ 780.236135][T15655] ? __schedule+0x1181/0x5de0 [ 780.236199][T15655] ? __pfx___schedule+0x10/0x10 [ 780.236290][T15655] ? trace_cap_capable+0x18d/0x200 [ 780.236333][T15655] mmap_region+0x1ab/0x3f0 [ 780.236372][T15655] ? __get_unmapped_area+0x267/0x440 [ 780.236408][T15655] do_mmap+0xa3e/0x1210 [ 780.236447][T15655] ? __pfx_do_mmap+0x10/0x10 [ 780.236477][T15655] ? __pfx_down_write_killable+0x10/0x10 [ 780.236505][T15655] ? kmem_cache_free+0x2d1/0x4d0 [ 780.236558][T15655] vm_mmap_pgoff+0x281/0x450 [ 780.236595][T15655] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 780.236634][T15655] ? __x64_sys_futex+0x1e0/0x4c0 [ 780.236665][T15655] ? __x64_sys_futex+0x1e9/0x4c0 [ 780.236712][T15655] ksys_mmap_pgoff+0x7d/0x5c0 [ 780.236749][T15655] ? xfd_validate_state+0x61/0x180 [ 780.236791][T15655] __x64_sys_mmap+0x125/0x190 [ 780.236834][T15655] do_syscall_64+0xcd/0x490 [ 780.236865][T15655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.236894][T15655] RIP: 0033:0x7f964a78e929 [ 780.236917][T15655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.236944][T15655] RSP: 002b:00007f964b569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 780.236971][T15655] RAX: ffffffffffffffda RBX: 00007f964a9b5fa0 RCX: 00007f964a78e929 [ 780.236989][T15655] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 780.237006][T15655] RBP: 00007f964a810b39 R08: fffffffffffffffa R09: 0000000000008000 [ 780.237023][T15655] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 780.237039][T15655] R13: 0000000000000000 R14: 00007f964a9b5fa0 R15: 00007ffd2f1aa818 [ 780.237076][T15655] [ 780.530601][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.182228][T15671] Process accounting paused [ 785.757493][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2043'. [ 786.758831][T15706] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 790.730911][T15744] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 794.300814][T15767] FAULT_INJECTION: forcing a failure. [ 794.300814][T15767] name failslab, interval 1, probability 0, space 0, times 0 [ 794.352467][ T5828] Process accounting paused [ 794.381669][T15767] CPU: 0 UID: 0 PID: 15767 Comm: syz.4.2058 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 794.381710][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 794.381725][T15767] Call Trace: [ 794.381737][T15767] [ 794.381748][T15767] dump_stack_lvl+0x16c/0x1f0 [ 794.381799][T15767] should_fail_ex+0x512/0x640 [ 794.381837][T15767] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 794.381882][T15767] should_failslab+0xc2/0x120 [ 794.381909][T15767] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 794.381948][T15767] ? shmem_alloc_inode+0x25/0x50 [ 794.381978][T15767] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 794.382004][T15767] shmem_alloc_inode+0x25/0x50 [ 794.382030][T15767] alloc_inode+0x64/0x240 [ 794.382058][T15767] new_inode+0x22/0x1c0 [ 794.382085][T15767] ? trace_cap_capable+0x18d/0x200 [ 794.382114][T15767] shmem_get_inode+0x19a/0xfb0 [ 794.382146][T15767] ? __vm_enough_memory+0x184/0x3f0 [ 794.382179][T15767] __shmem_file_setup+0x279/0x330 [ 794.382218][T15767] shmem_zero_setup+0x93/0x1a0 [ 794.382259][T15767] __mmap_region+0x1ece/0x25e0 [ 794.382305][T15767] ? __pfx___mmap_region+0x10/0x10 [ 794.382345][T15767] ? find_held_lock+0x2b/0x80 [ 794.382380][T15767] ? finish_task_switch.isra.0+0x221/0xc10 [ 794.382421][T15767] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.382465][T15767] ? finish_task_switch.isra.0+0x221/0xc10 [ 794.382497][T15767] ? rcu_is_watching+0x12/0xc0 [ 794.382526][T15767] ? trace_sched_exit_tp+0xde/0x130 [ 794.382558][T15767] ? __schedule+0x1181/0x5de0 [ 794.382665][T15767] ? trace_cap_capable+0x18d/0x200 [ 794.382708][T15767] mmap_region+0x1ab/0x3f0 [ 794.382752][T15767] ? __get_unmapped_area+0x267/0x440 [ 794.382789][T15767] do_mmap+0xa3e/0x1210 [ 794.382833][T15767] ? __pfx_do_mmap+0x10/0x10 [ 794.382869][T15767] ? __pfx_down_write_killable+0x10/0x10 [ 794.382901][T15767] ? kmem_cache_free+0x2d1/0x4d0 [ 794.382951][T15767] vm_mmap_pgoff+0x281/0x450 [ 794.382990][T15767] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 794.383031][T15767] ? __x64_sys_futex+0x1e0/0x4c0 [ 794.383066][T15767] ? __x64_sys_futex+0x1e9/0x4c0 [ 794.383106][T15767] ksys_mmap_pgoff+0x7d/0x5c0 [ 794.383136][T15767] ? xfd_validate_state+0x61/0x180 [ 794.383181][T15767] __x64_sys_mmap+0x125/0x190 [ 794.383228][T15767] do_syscall_64+0xcd/0x490 [ 794.383261][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.383293][T15767] RIP: 0033:0x7fe97f38e929 [ 794.383319][T15767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.383348][T15767] RSP: 002b:00007fe9801db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 794.383378][T15767] RAX: ffffffffffffffda RBX: 00007fe97f5b5fa0 RCX: 00007fe97f38e929 [ 794.383407][T15767] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 794.383426][T15767] RBP: 00007fe97f410b39 R08: fffffffffffffffa R09: 0000000000008000 [ 794.383445][T15767] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 794.383461][T15767] R13: 0000000000000000 R14: 00007fe97f5b5fa0 R15: 00007ffe61568188 [ 794.383502][T15767] [ 795.074869][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.090264][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.102432][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.128848][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.143363][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.244084][T15773] chnl_net:caif_netlink_parms(): no params data found [ 796.888863][T15773] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.906108][T15773] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.932553][T15773] bridge_slave_0: entered allmulticast mode [ 796.964562][T15773] bridge_slave_0: entered promiscuous mode [ 797.013555][T15773] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.051162][T15773] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.092631][T15773] bridge_slave_1: entered allmulticast mode [ 797.122190][T15773] bridge_slave_1: entered promiscuous mode [ 797.256607][ T5832] Bluetooth: hci4: command tx timeout [ 797.706743][T15773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.758303][T15773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.205634][T15773] team0: Port device team_slave_0 added [ 798.240098][T15773] team0: Port device team_slave_1 added [ 798.269350][T15801] random: crng reseeded on system resumption [ 798.437266][T15773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.465723][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.557736][T15773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.643964][T15773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.663246][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.769207][T15773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.345427][ T5832] Bluetooth: hci4: command tx timeout [ 799.380311][T15773] hsr_slave_0: entered promiscuous mode [ 799.482397][T15773] hsr_slave_1: entered promiscuous mode [ 799.488885][T15773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.627295][T15806] batman_adv: Routing algorithm '' is not supported [ 799.757992][T15773] Cannot create hsr debugfs directory [ 801.374713][T15773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 801.413258][ T5832] Bluetooth: hci4: command tx timeout [ 801.470904][T15773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 801.540182][T15773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 801.592279][T15773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 803.003365][T15773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.139507][T15773] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.268389][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.275680][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.332059][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.339342][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.495399][ T5832] Bluetooth: hci4: command tx timeout [ 804.495575][T15773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.035790][T15773] veth0_vlan: entered promiscuous mode [ 806.088544][T15773] veth1_vlan: entered promiscuous mode [ 806.214916][T15773] veth0_macvtap: entered promiscuous mode [ 806.295146][T15773] veth1_macvtap: entered promiscuous mode [ 806.373408][T15773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.430983][T15773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.482157][T15773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.514731][T15773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.547738][T15773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.577039][T15773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.984275][T13486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.022550][T13486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.148561][T13484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.191965][T13484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.699050][T15900] FAULT_INJECTION: forcing a failure. [ 807.699050][T15900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.747168][T15900] CPU: 1 UID: 0 PID: 15900 Comm: syz.4.2079 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 807.747210][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.747226][T15900] Call Trace: [ 807.747236][T15900] [ 807.747247][T15900] dump_stack_lvl+0x16c/0x1f0 [ 807.747296][T15900] should_fail_ex+0x512/0x640 [ 807.747345][T15900] _copy_to_user+0x32/0xd0 [ 807.747393][T15900] simple_read_from_buffer+0xcb/0x170 [ 807.747434][T15900] proc_fail_nth_read+0x197/0x270 [ 807.747471][T15900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 807.747508][T15900] ? rw_verify_area+0xcf/0x680 [ 807.747553][T15900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 807.747586][T15900] vfs_read+0x1e4/0xc60 [ 807.747631][T15900] ? __pfx___mutex_lock+0x10/0x10 [ 807.747656][T15900] ? __pfx_vfs_read+0x10/0x10 [ 807.747706][T15900] ? __fget_files+0x20e/0x3c0 [ 807.747756][T15900] ksys_read+0x12a/0x250 [ 807.747794][T15900] ? __pfx_ksys_read+0x10/0x10 [ 807.747845][T15900] do_syscall_64+0xcd/0x490 [ 807.747875][T15900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.747905][T15900] RIP: 0033:0x7fe97f38d33c [ 807.747928][T15900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 807.747955][T15900] RSP: 002b:00007fe9801db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 807.747982][T15900] RAX: ffffffffffffffda RBX: 00007fe97f5b5fa0 RCX: 00007fe97f38d33c [ 807.748001][T15900] RDX: 000000000000000f RSI: 00007fe9801db0a0 RDI: 0000000000000004 [ 807.748018][T15900] RBP: 00007fe9801db090 R08: 0000000000000000 R09: 0000000000000000 [ 807.748035][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 807.748051][T15900] R13: 0000000000000000 R14: 00007fe97f5b5fa0 R15: 00007ffe61568188 [ 807.748092][T15900] [ 809.160881][T15906] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 810.365030][T15921] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 814.139404][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.145846][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.368260][T15949] Process accounting resumed [ 814.704789][T15944] Invalid ELF header magic: != ELF [ 814.865933][T15951] random: crng reseeded on system resumption [ 817.708878][T15967] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 818.455022][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2096'. [ 818.912614][T15973] FAULT_INJECTION: forcing a failure. [ 818.912614][T15973] name fail_futex, interval 1, probability 0, space 0, times 0 [ 819.071311][T15973] CPU: 1 UID: 0 PID: 15973 Comm: syz.3.2097 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 819.071342][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 819.071353][T15973] Call Trace: [ 819.071360][T15973] [ 819.071368][T15973] dump_stack_lvl+0x16c/0x1f0 [ 819.071399][T15973] should_fail_ex+0x512/0x640 [ 819.071428][T15973] get_futex_key+0x1d0/0x1540 [ 819.071458][T15973] ? __pfx_get_futex_key+0x10/0x10 [ 819.071479][T15973] ? pick_eevdf+0x3be/0x5b0 [ 819.071497][T15973] ? update_curr_se+0x8b/0x270 [ 819.071522][T15973] futex_wait_setup+0x9d/0x550 [ 819.071552][T15973] __futex_wait+0x194/0x2f0 [ 819.071576][T15973] ? __pfx___futex_wait+0x10/0x10 [ 819.071598][T15973] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 819.071623][T15973] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.071651][T15973] ? __pfx_futex_wake_mark+0x10/0x10 [ 819.071687][T15973] futex_wait+0xe8/0x380 [ 819.071710][T15973] ? __pfx_futex_wait+0x10/0x10 [ 819.071737][T15973] ? __pfx___up_read+0x10/0x10 [ 819.071761][T15973] ? madvise_unlock+0xf6/0x190 [ 819.071782][T15973] do_futex+0x229/0x350 [ 819.071802][T15973] ? __pfx_do_futex+0x10/0x10 [ 819.071823][T15973] ? __pfx_do_madvise+0x10/0x10 [ 819.071840][T15973] ? find_held_lock+0x2b/0x80 [ 819.071858][T15973] __x64_sys_futex+0x1e0/0x4c0 [ 819.071881][T15973] ? __pfx___x64_sys_futex+0x10/0x10 [ 819.071902][T15973] ? xfd_validate_state+0x61/0x180 [ 819.071931][T15973] do_syscall_64+0xcd/0x490 [ 819.071948][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.071966][T15973] RIP: 0033:0x7f964a78e929 [ 819.071981][T15973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.071996][T15973] RSP: 002b:00007f964b5690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 819.072014][T15973] RAX: ffffffffffffffda RBX: 00007f964a9b5fa8 RCX: 00007f964a78e929 [ 819.072025][T15973] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f964a9b5fa8 [ 819.072035][T15973] RBP: 00007f964a9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 819.072045][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f964a9b5fac [ 819.072055][T15973] R13: 0000000000000000 R14: 00007ffd2f1aa730 R15: 00007ffd2f1aa818 [ 819.072076][T15973] [ 820.761490][T15988] ima: policy update failed [ 820.801278][ T30] audit: type=1802 audit(4294967407.813:40): pid=15988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2101" res=0 errno=0 [ 824.939505][T16028] netlink: zone id is out of range [ 824.944735][T16028] netlink: del zone limit has 4 unknown bytes [ 825.064885][T16027] netlink: set zone limit has 8 unknown bytes [ 825.374800][ T30] audit: type=1804 audit(4294967412.356:41): pid=16033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2113" name="file0" dev="tmpfs" ino=3031 res=1 errno=0 [ 827.756188][T16055] CIFS: VFS: Invalid SecurityFlags: [ 828.996715][T16077] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 830.109156][T16083] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2126'. [ 831.215808][T16090] FAULT_INJECTION: forcing a failure. [ 831.215808][T16090] name failslab, interval 1, probability 0, space 0, times 0 [ 831.299896][T16090] CPU: 1 UID: 0 PID: 16090 Comm: syz.5.2127 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 831.299925][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.299937][T16090] Call Trace: [ 831.299943][T16090] [ 831.299950][T16090] dump_stack_lvl+0x16c/0x1f0 [ 831.299981][T16090] should_fail_ex+0x512/0x640 [ 831.300006][T16090] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 831.300034][T16090] should_failslab+0xc2/0x120 [ 831.300051][T16090] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 831.300075][T16090] ? trace_cap_capable+0x18d/0x200 [ 831.300098][T16090] ? vm_area_dup+0x27/0x8d0 [ 831.300123][T16090] vm_area_dup+0x27/0x8d0 [ 831.300147][T16090] dup_mmap+0x877/0x21d0 [ 831.300175][T16090] ? __pfx_dup_mmap+0x10/0x10 [ 831.300210][T16090] copy_process+0x4081/0x76a0 [ 831.300231][T16090] ? __pfx___futex_wait+0x10/0x10 [ 831.300264][T16090] ? __pfx_copy_process+0x10/0x10 [ 831.300302][T16090] kernel_clone+0xfc/0x960 [ 831.300324][T16090] ? __pfx_kernel_clone+0x10/0x10 [ 831.300358][T16090] __do_sys_clone+0xce/0x120 [ 831.300378][T16090] ? __pfx___do_sys_clone+0x10/0x10 [ 831.300409][T16090] ? xfd_validate_state+0x61/0x180 [ 831.300438][T16090] do_syscall_64+0xcd/0x490 [ 831.300456][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.300473][T16090] RIP: 0033:0x7f93c318e929 [ 831.300488][T16090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.300505][T16090] RSP: 002b:00007f93c4029fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 831.300523][T16090] RAX: ffffffffffffffda RBX: 00007f93c33b6080 RCX: 00007f93c318e929 [ 831.300535][T16090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 831.300545][T16090] RBP: 00007f93c3210b39 R08: 0000000000000000 R09: 0000000000000000 [ 831.300555][T16090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 831.300565][T16090] R13: 0000000000000000 R14: 00007f93c33b6080 R15: 00007ffe32f61118 [ 831.300587][T16090] [ 834.911664][T16103] Invalid ELF header magic: != ELF [ 836.745579][T16155] netlink: 'syz.5.2141': attribute type 2 has an invalid length. [ 841.183360][T16214] FAULT_INJECTION: forcing a failure. [ 841.183360][T16214] name failslab, interval 1, probability 0, space 0, times 0 [ 841.196745][T16214] CPU: 0 UID: 0 PID: 16214 Comm: syz.4.2150 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 841.196771][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 841.196781][T16214] Call Trace: [ 841.196788][T16214] [ 841.196795][T16214] dump_stack_lvl+0x16c/0x1f0 [ 841.196826][T16214] should_fail_ex+0x512/0x640 [ 841.196851][T16214] ? fs_reclaim_acquire+0xae/0x150 [ 841.196874][T16214] ? tomoyo_encode2+0x100/0x3e0 [ 841.196897][T16214] should_failslab+0xc2/0x120 [ 841.196914][T16214] __kmalloc_noprof+0xd2/0x510 [ 841.196939][T16214] ? d_absolute_path+0x136/0x1a0 [ 841.196960][T16214] tomoyo_encode2+0x100/0x3e0 [ 841.196987][T16214] tomoyo_encode+0x29/0x50 [ 841.197009][T16214] tomoyo_realpath_from_path+0x18f/0x6e0 [ 841.197039][T16214] tomoyo_path_number_perm+0x245/0x580 [ 841.197059][T16214] ? tomoyo_path_number_perm+0x237/0x580 [ 841.197081][T16214] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 841.197103][T16214] ? find_held_lock+0x2b/0x80 [ 841.197140][T16214] ? fd_install+0x244/0x750 [ 841.197162][T16214] ? hook_file_ioctl_common+0x145/0x410 [ 841.197199][T16214] security_file_ioctl+0x9b/0x240 [ 841.197222][T16214] __x64_sys_ioctl+0xb7/0x210 [ 841.197245][T16214] do_syscall_64+0xcd/0x490 [ 841.197262][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.197281][T16214] RIP: 0033:0x7fe97f38e929 [ 841.197296][T16214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.197313][T16214] RSP: 002b:00007fe9801db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.197331][T16214] RAX: ffffffffffffffda RBX: 00007fe97f5b5fa0 RCX: 00007fe97f38e929 [ 841.197342][T16214] RDX: 0000000000000000 RSI: 0000000000004b72 RDI: 0000000000000000 [ 841.197352][T16214] RBP: 00007fe9801db090 R08: 0000000000000000 R09: 0000000000000000 [ 841.197363][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.197373][T16214] R13: 0000000000000000 R14: 00007fe97f5b5fa0 R15: 00007ffe61568188 [ 841.197394][T16214] [ 841.197410][T16214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 844.805316][T16232] Process accounting paused [ 849.109698][ T30] audit: type=1800 audit(4294967444.132:42): pid=16280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2167" name="lu_gp_id" dev="configfs" ino=49284 res=0 errno=0 [ 851.588139][T16312] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2176'. [ 853.159204][T16319] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 854.117673][T16191] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 854.145579][T16191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 854.158603][T16191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 854.175410][T16191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 854.188119][T16191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 855.347921][T16327] chnl_net:caif_netlink_parms(): no params data found [ 855.745516][T16327] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.787212][T16327] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.809025][T16327] bridge_slave_0: entered allmulticast mode [ 855.830845][T16327] bridge_slave_0: entered promiscuous mode [ 855.845118][T16324] kexec: Could not allocate control_code_buffer [ 855.866824][T16327] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.897302][T16327] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.904607][T16327] bridge_slave_1: entered allmulticast mode [ 855.949597][T16327] bridge_slave_1: entered promiscuous mode [ 856.191763][T16327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.236813][T16327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.268773][T16191] Bluetooth: hci5: command tx timeout [ 856.459949][T16327] team0: Port device team_slave_0 added [ 856.508180][T16327] team0: Port device team_slave_1 added [ 856.739712][T16327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.759518][T16327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.808943][T16327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.868907][T16327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.886622][T16327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.952738][T16327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.982836][T16213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 857.011721][T16213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 857.021688][T16213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 857.030495][T16213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 857.038588][T16213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.347676][T16327] hsr_slave_0: entered promiscuous mode [ 857.359551][T16327] hsr_slave_1: entered promiscuous mode [ 857.367414][T16327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 857.375047][T16327] Cannot create hsr debugfs directory [ 858.356973][T16213] Bluetooth: hci5: command tx timeout [ 858.830417][T16327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.940904][T16343] chnl_net:caif_netlink_parms(): no params data found [ 859.081090][T16213] Bluetooth: hci1: command tx timeout [ 859.335914][T16343] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.345410][T16343] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.409314][T16343] bridge_slave_0: entered allmulticast mode [ 859.503178][T16343] bridge_slave_0: entered promiscuous mode [ 859.556603][T16343] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.587234][T16343] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.594581][T16343] bridge_slave_1: entered allmulticast mode [ 859.678593][T16343] bridge_slave_1: entered promiscuous mode [ 859.934978][T16343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.963517][T16343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.154255][T16343] team0: Port device team_slave_0 added [ 860.191969][T16343] team0: Port device team_slave_1 added [ 860.289885][T16343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.309116][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.386402][T16343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.416750][T16343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.427213][T16213] Bluetooth: hci5: command tx timeout [ 860.433246][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.477689][T16213] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 860.477736][T16213] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 860.492661][T16213] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 860.492702][T16213] Bluetooth: hci2: Unknown advertising packet type: 0x3a [ 860.500036][T16213] Bluetooth: hci2: adv larger than maximum supported [ 860.507242][T16213] Bluetooth: hci2: adv larger than maximum supported [ 860.513940][T16213] Bluetooth: hci2: Malformed LE Event: 0x0d [ 860.552224][T16343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.749592][T16343] hsr_slave_0: entered promiscuous mode [ 860.755912][T16343] hsr_slave_1: entered promiscuous mode [ 860.807414][T16343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.815003][T16343] Cannot create hsr debugfs directory [ 861.165325][T16213] Bluetooth: hci1: command tx timeout [ 861.165825][T16370] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 861.842819][T16372] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 862.507074][T16213] Bluetooth: hci5: command tx timeout [ 862.837688][T16384] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 862.976559][T16388] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2193'. [ 863.238919][T16213] Bluetooth: hci1: command tx timeout [ 864.437883][T16404] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 865.307420][T16213] Bluetooth: hci1: command tx timeout [ 865.674643][T16420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 865.688495][T16420] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 865.768349][T16420] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 865.775954][T16420] page_type: f5(slab) [ 865.801568][T16420] raw: 00fff00000000040 ffff8881404098c0 dead000000000122 0000000000000000 [ 865.820824][T16213] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 865.820868][T16213] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 865.824221][T16420] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 865.828465][T16213] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 865.837144][T16420] head: 00fff00000000040 ffff8881404098c0 dead000000000122 0000000000000000 [ 865.845142][T16213] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 865.864298][T16420] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 865.864511][T16213] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 865.871935][T16420] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 865.882624][T16213] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 865.931449][T16420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 865.941188][T16420] page dumped because: unmovable page [ 865.946661][T16420] page_owner tracks the page as allocated [ 865.959475][T16420] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5217, tgid 5217 (udevadm), ts 41249221054, free_ts 33062711902 [ 865.987125][T16420] post_alloc_hook+0x1c0/0x230 [ 865.992071][T16420] get_page_from_freelist+0x1321/0x3890 [ 865.999826][T16420] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 866.005912][T16420] alloc_pages_mpol+0x1fb/0x550 [ 866.017335][T16420] new_slab+0x23b/0x330 [ 866.021654][T16420] ___slab_alloc+0xd9c/0x1940 [ 866.037029][T16420] __slab_alloc.constprop.0+0x56/0xb0 [ 866.042587][T16420] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 866.048821][T16420] alloc_inode+0xc3/0x240 [ 866.053674][T16420] iget_locked+0x2e4/0x830 [ 866.058497][T16420] kernfs_get_inode+0x48/0x460 [ 866.063364][T16420] kernfs_iop_lookup+0x1a7/0x2d0 [ 866.069773][T16420] __lookup_slow+0x24e/0x460 [ 866.074481][T16420] walk_component+0x353/0x5b0 [ 866.079357][T16420] path_lookupat+0x142/0x6d0 [ 866.084027][T16420] filename_lookup+0x224/0x5f0 [ 866.089619][T16420] page last free pid 1 tgid 1 stack trace: [ 866.096951][T16420] __free_frozen_pages+0x7fe/0x1180 [ 866.103473][T16420] free_contig_range+0x183/0x4b0 [ 866.110009][T16420] destroy_args+0x7f6/0xa60 [ 866.114547][T16420] debug_vm_pgtable+0x13b8/0x2d00 [ 866.119691][T16420] do_one_initcall+0x120/0x6e0 [ 866.124528][T16420] kernel_init_freeable+0x5c2/0x900 [ 866.131294][T16420] kernel_init+0x1c/0x2b0 [ 866.135777][T16420] ret_from_fork+0x5d7/0x6f0 [ 866.140530][T16420] ret_from_fork_asm+0x1a/0x30 [ 866.924035][T16213] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 866.924078][T16213] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 866.940778][T16213] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 866.940815][T16213] Bluetooth: hci3: Unknown advertising packet type: 0x3a [ 866.948800][T16213] Bluetooth: hci3: adv larger than maximum supported [ 866.956358][T16213] Bluetooth: hci3: adv larger than maximum supported [ 866.963324][T16213] Bluetooth: hci3: Malformed LE Event: 0x0d [ 867.188400][T16446] FAULT_INJECTION: forcing a failure. [ 867.188400][T16446] name failslab, interval 1, probability 0, space 0, times 0 [ 867.207073][T16446] CPU: 1 UID: 0 PID: 16446 Comm: syz.4.2206 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 867.207117][T16446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 867.207135][T16446] Call Trace: [ 867.207146][T16446] [ 867.207159][T16446] dump_stack_lvl+0x16c/0x1f0 [ 867.207214][T16446] should_fail_ex+0x512/0x640 [ 867.207258][T16446] ? __kmalloc_noprof+0xbf/0x510 [ 867.207301][T16446] ? constrain_params_by_rules+0x175/0xca0 [ 867.207338][T16446] should_failslab+0xc2/0x120 [ 867.207367][T16446] __kmalloc_noprof+0xd2/0x510 [ 867.207409][T16446] ? unwind_get_return_address+0x59/0xa0 [ 867.207461][T16446] constrain_params_by_rules+0x175/0xca0 [ 867.207506][T16446] ? stack_trace_save+0x8e/0xc0 [ 867.207541][T16446] ? stack_depot_save_flags+0x28/0xa40 [ 867.207586][T16446] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 867.207631][T16446] ? __kasan_kmalloc+0xaa/0xb0 [ 867.207665][T16446] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 867.207697][T16446] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 867.207725][T16446] ? snd_pcm_oss_sync+0x1de/0x840 [ 867.207767][T16446] ? rcu_is_watching+0x12/0xc0 [ 867.207793][T16446] ? snd_interval_refine+0x2fa/0x580 [ 867.207836][T16446] snd_pcm_hw_refine+0x7de/0xad0 [ 867.207875][T16446] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 867.207920][T16446] ? __asan_memset+0x23/0x50 [ 867.207963][T16446] ? _snd_pcm_hw_param_min+0x259/0x630 [ 867.208000][T16446] snd_pcm_oss_change_params_locked+0x65e/0x3a30 [ 867.208038][T16446] ? rcu_is_watching+0x12/0xc0 [ 867.208078][T16446] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 867.208132][T16446] ? __pfx___mutex_lock+0x10/0x10 [ 867.208197][T16446] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 867.208233][T16446] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 867.208264][T16446] snd_pcm_oss_sync+0x1de/0x840 [ 867.208301][T16446] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 867.208333][T16446] snd_pcm_oss_release+0x28b/0x310 [ 867.208367][T16446] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 867.208397][T16446] __fput+0x3ff/0xb70 [ 867.208436][T16446] task_work_run+0x14d/0x240 [ 867.208480][T16446] ? __pfx_task_work_run+0x10/0x10 [ 867.208520][T16446] ? __pfx___do_sys_close_range+0x10/0x10 [ 867.208570][T16446] exit_to_user_mode_loop+0xeb/0x110 [ 867.208612][T16446] do_syscall_64+0x3f6/0x490 [ 867.208642][T16446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.208670][T16446] RIP: 0033:0x7fe97f38e929 [ 867.208694][T16446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.208719][T16446] RSP: 002b:00007fe9801ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 867.208746][T16446] RAX: 0000000000000000 RBX: 00007fe97f5b6080 RCX: 00007fe97f38e929 [ 867.208764][T16446] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 867.208781][T16446] RBP: 00007fe97f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 867.208798][T16446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.208815][T16446] R13: 0000000000000000 R14: 00007fe97f5b6080 R15: 00007ffe61568188 [ 867.208856][T16446] [ 867.811798][T16450] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 868.442263][T16463] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 874.389660][T15634] Process accounting resumed [ 875.550302][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.556795][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 913.353579][T16191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 913.363905][T16191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 913.372367][T16191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 913.381094][T16191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 913.390678][T16191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 913.566867][T16479] chnl_net:caif_netlink_parms(): no params data found [ 913.638549][T16479] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.645680][T16479] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.654410][T16479] bridge_slave_0: entered allmulticast mode [ 913.662825][T16479] bridge_slave_0: entered promiscuous mode [ 913.672893][T16479] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.680680][T16479] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.688292][T16479] bridge_slave_1: entered allmulticast mode [ 913.695392][T16479] bridge_slave_1: entered promiscuous mode [ 913.728772][T16479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.740707][T16479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.778598][T16479] team0: Port device team_slave_0 added [ 913.786727][T16479] team0: Port device team_slave_1 added [ 913.815105][T16479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.823101][T16479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.849406][T16479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.861595][T16479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.869197][T16479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.896272][T16479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.943092][T16479] hsr_slave_0: entered promiscuous mode [ 913.949715][T16479] hsr_slave_1: entered promiscuous mode [ 913.955827][T16479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 913.963643][T16479] Cannot create hsr debugfs directory [ 915.467120][T16213] Bluetooth: hci0: command tx timeout [ 916.367362][T16191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 916.376316][T16191] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 916.385785][T16191] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 916.394933][T16191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 916.402746][T16191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 916.592676][T16489] chnl_net:caif_netlink_parms(): no params data found [ 916.669376][T16489] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.676593][T16489] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.684037][T16489] bridge_slave_0: entered allmulticast mode [ 916.692107][T16489] bridge_slave_0: entered promiscuous mode [ 916.700378][T16489] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.707833][T16489] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.715107][T16489] bridge_slave_1: entered allmulticast mode [ 916.722573][T16489] bridge_slave_1: entered promiscuous mode [ 916.754719][T16489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.766543][T16489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.806243][T16489] team0: Port device team_slave_0 added [ 916.814563][T16489] team0: Port device team_slave_1 added [ 916.844551][T16489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.851675][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.877817][T16489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.890119][T16489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.898886][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.925018][T16489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.969439][T16489] hsr_slave_0: entered promiscuous mode [ 916.975863][T16489] hsr_slave_1: entered promiscuous mode [ 916.982637][T16489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 916.990292][T16489] Cannot create hsr debugfs directory [ 917.547100][T16191] Bluetooth: hci0: command tx timeout [ 918.427228][T16191] Bluetooth: hci6: command tx timeout [ 918.587074][T16191] Bluetooth: hci4: command 0x0406 tx timeout [ 919.627158][T16213] Bluetooth: hci0: command tx timeout [ 920.507085][T16213] Bluetooth: hci6: command tx timeout [ 921.707098][T16213] Bluetooth: hci0: command tx timeout [ 922.588398][T16213] Bluetooth: hci6: command tx timeout [ 924.668025][T16213] Bluetooth: hci6: command tx timeout [ 936.993581][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.000669][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 973.436465][T16191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 973.445924][T16191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 973.454605][T16191] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 973.465002][T16191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 973.475584][T16191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 973.650179][T16506] chnl_net:caif_netlink_parms(): no params data found [ 973.727574][T16506] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.734763][T16506] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.742240][T16506] bridge_slave_0: entered allmulticast mode [ 973.749446][T16506] bridge_slave_0: entered promiscuous mode [ 973.758628][T16506] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.765732][T16506] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.773632][T16506] bridge_slave_1: entered allmulticast mode [ 973.781389][T16506] bridge_slave_1: entered promiscuous mode [ 973.814262][T16506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.825975][T16506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.861324][T16506] team0: Port device team_slave_0 added [ 973.870585][T16506] team0: Port device team_slave_1 added [ 973.899451][T16506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.906421][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.933564][T16506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.945844][T16506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.953200][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.979768][T16506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.023819][T16506] hsr_slave_0: entered promiscuous mode [ 974.030350][T16506] hsr_slave_1: entered promiscuous mode [ 974.037715][T16506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.045310][T16506] Cannot create hsr debugfs directory [ 975.547133][T16213] Bluetooth: hci7: command tx timeout [ 976.918350][T16191] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 976.927672][T16191] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 976.935533][T16191] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 976.944445][T16191] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 976.953596][T16191] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 977.132156][T16518] chnl_net:caif_netlink_parms(): no params data found [ 977.207044][T16518] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.214236][T16518] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.221684][T16518] bridge_slave_0: entered allmulticast mode [ 977.229550][T16518] bridge_slave_0: entered promiscuous mode [ 977.237649][T16518] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.244817][T16518] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.252614][T16518] bridge_slave_1: entered allmulticast mode [ 977.260550][T16518] bridge_slave_1: entered promiscuous mode [ 977.293001][T16518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.304836][T16518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.341185][T16518] team0: Port device team_slave_0 added [ 977.351163][T16518] team0: Port device team_slave_1 added [ 977.380686][T16518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.389045][T16518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.415851][T16518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.428317][T16518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.435271][T16518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.461515][T16518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.508305][T16518] hsr_slave_0: entered promiscuous mode [ 977.515746][T16518] hsr_slave_1: entered promiscuous mode [ 977.522192][T16518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.530242][T16518] Cannot create hsr debugfs directory [ 977.627220][T16213] Bluetooth: hci7: command tx timeout [ 978.987077][T16213] Bluetooth: hci8: command tx timeout [ 979.706999][T16213] Bluetooth: hci7: command tx timeout [ 980.033630][T16329] Bluetooth: hci5: command 0x0406 tx timeout [ 980.044188][T16213] Bluetooth: hci1: command 0x0406 tx timeout [ 981.067095][T16213] Bluetooth: hci8: command tx timeout [ 981.787123][T16213] Bluetooth: hci7: command tx timeout [ 983.147047][T16213] Bluetooth: hci8: command tx timeout [ 985.227162][T16213] Bluetooth: hci8: command tx timeout [ 988.827108][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 988.835199][ T31] Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 988.843535][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 988.852314][ T31] task:kworker/u8:2 state:D stack:23384 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 988.864400][ T31] Workqueue: netns cleanup_net [ 988.869259][ T31] Call Trace: [ 988.872547][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 988.875488][ T31] __schedule+0x116a/0x5de0 [ 988.880794][ T31] ? __pfx___schedule+0x10/0x10 [ 988.885744][ T31] ? find_held_lock+0x2b/0x80 [ 988.891038][ T31] ? schedule+0x2d7/0x3a0 [ 988.895755][ T31] schedule+0xe7/0x3a0 [ 988.899958][ T31] schedule_timeout+0x257/0x290 [ 988.904877][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 988.910453][ T31] ? mark_held_locks+0x49/0x80 [ 988.915277][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 988.920720][ T31] __wait_for_common+0x2ff/0x4e0 [ 988.925729][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 988.931234][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 988.937022][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 988.942504][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 988.948920][ T31] __flush_workqueue+0x3e2/0x1230 [ 988.954047][ T31] ? find_held_lock+0x2b/0x80 [ 988.959246][ T31] ? find_held_lock+0x2b/0x80 [ 988.963993][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 988.969968][ T31] ? __queue_work+0x431/0x10f0 [ 988.974825][ T31] ? queue_work_on+0x12a/0x1f0 [ 988.980090][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 988.986100][ T31] rxrpc_destroy_all_connections+0xed/0x440 [ 988.992586][ T31] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 988.999460][ T31] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 989.005519][ T31] rxrpc_exit_net+0x7b/0xc0 [ 989.011368][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 989.016643][ T31] ops_undo_list+0x2eb/0xab0 [ 989.021775][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 989.027237][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 989.032595][ T31] cleanup_net+0x408/0x890 [ 989.037962][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 989.042971][ T31] ? rcu_is_watching+0x12/0xc0 [ 989.048306][ T31] process_one_work+0x9cc/0x1b70 [ 989.053328][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 989.058824][ T31] ? __pfx_process_one_work+0x10/0x10 [ 989.064291][ T31] ? assign_work+0x1a0/0x250 [ 989.069584][ T31] worker_thread+0x6c8/0xf10 [ 989.074291][ T31] ? __pfx_worker_thread+0x10/0x10 [ 989.080004][ T31] kthread+0x3c5/0x780 [ 989.084810][ T31] ? __pfx_kthread+0x10/0x10 [ 989.090067][ T31] ? rcu_is_watching+0x12/0xc0 [ 989.094901][ T31] ? __pfx_kthread+0x10/0x10 [ 989.100155][ T31] ret_from_fork+0x5d7/0x6f0 [ 989.104812][ T31] ? __pfx_kthread+0x10/0x10 [ 989.109970][ T31] ret_from_fork_asm+0x1a/0x30 [ 989.114822][ T31] [ 989.118487][ T31] INFO: task syz.5.2152:16219 blocked for more than 143 seconds. [ 989.126252][ T31] Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 989.135695][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 989.187160][ T31] task:syz.5.2152 state:D stack:26696 pid:16219 tgid:16215 ppid:15773 task_flags:0x400140 flags:0x00004006 [ 989.227049][ T31] Call Trace: [ 989.235921][ T31] [ 989.239769][ T31] __schedule+0x116a/0x5de0 [ 989.243491][ T7830] Process accounting resumed [ 989.244356][ T31] ? __pfx___schedule+0x10/0x10 [ 989.276943][ T31] ? find_held_lock+0x2b/0x80 [ 989.281735][ T31] ? schedule+0x2d7/0x3a0 [ 989.286167][ T31] schedule+0xe7/0x3a0 [ 989.295604][ T31] schedule_timeout+0x257/0x290 [ 989.300953][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 989.306419][ T31] ? mark_held_locks+0x49/0x80 [ 989.311764][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 989.317377][ T31] __wait_for_common+0x2ff/0x4e0 [ 989.322398][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 989.328319][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 989.333862][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 989.339676][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 989.345947][ T31] __flush_workqueue+0x3e2/0x1230 [ 989.351577][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 989.357486][ T31] ? rxrpc_discard_prealloc+0xb6/0x9b0 [ 989.363006][ T31] ? rxrpc_release_calls_on_socket+0x18a/0x300 [ 989.369754][ T31] rxrpc_release+0x27a/0x670 [ 989.374415][ T31] sock_release+0x91/0x1d0 [ 989.379255][ T31] afs_open_socket+0x334/0x400 [ 989.384083][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 989.390048][ T31] ? proc_create_net_single_write+0x141/0x1b0 [ 989.397309][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 989.403820][ T31] afs_net_init+0x825/0xb00 [ 989.408888][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 989.413971][ T31] ops_init+0x1df/0x5f0 [ 989.418793][ T31] setup_net+0x1ff/0x510 [ 989.423110][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 989.429046][ T31] ? __pfx_setup_net+0x10/0x10 [ 989.433886][ T31] ? debug_mutex_init+0x37/0x70 [ 989.439306][ T31] copy_net_ns+0x2a6/0x5f0 [ 989.443971][ T31] create_new_namespaces+0x3ea/0xa90 [ 989.450949][ T31] copy_namespaces+0x468/0x560 [ 989.455793][ T31] copy_process+0x2822/0x76a0 [ 989.461035][ T31] ? page_table_check_set+0x627/0x750 [ 989.466506][ T31] ? __pfx_copy_process+0x10/0x10 [ 989.472467][ T31] ? find_held_lock+0x2b/0x80 [ 989.477684][ T31] ? __handle_mm_fault+0x27cd/0x5490 [ 989.483076][ T31] kernel_clone+0xfc/0x960 [ 989.488093][ T31] ? __pfx_kernel_clone+0x10/0x10 [ 989.493225][ T31] ? css_rstat_updated+0x9d/0xd30 [ 989.499554][ T31] __do_sys_clone+0xce/0x120 [ 989.504223][ T31] ? __pfx___do_sys_clone+0x10/0x10 [ 989.510050][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 989.515080][ T31] ? do_user_addr_fault+0x843/0x1370 [ 989.520960][ T31] do_syscall_64+0xcd/0x490 [ 989.525530][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.531991][ T31] RIP: 0033:0x7f93c318e929 [ 989.536462][ T31] RSP: 002b:00007f93c4008fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 989.545490][ T31] RAX: ffffffffffffffda RBX: 00007f93c33b6160 RCX: 00007f93c318e929 [ 989.554367][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000000 [ 989.563797][ T31] RBP: 00007f93c3210b39 R08: 0000000000000000 R09: 0000000000000000 [ 989.572151][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 989.580604][ T31] R13: 0000000000000001 R14: 00007f93c33b6160 R15: 00007ffe32f61118 [ 989.589313][ T31] [ 989.605155][ T31] [ 989.605155][ T31] Showing all locks held in the system: [ 989.624316][ T31] 2 locks held by ksoftirqd/0/15: [ 989.646957][ T31] 1 lock held by khungtaskd/31: [ 989.652254][ T31] #0: ffffffff8e5c4700 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 989.677291][ T31] 3 locks held by kworker/u8:2/36: [ 989.682490][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 989.706980][ T31] #1: ffffc90000ac7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 989.727191][ T31] #2: ffffffff90338810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 989.736673][ T31] 1 lock held by syz-executor/5837: [ 989.756842][ T31] 3 locks held by syz.4.761/9800: [ 989.761939][ T31] 2 locks held by getty/12507: [ 989.766741][ T31] #0: ffff8880323550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 989.786739][ T31] #1: ffffc9000f57b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 989.826935][ T31] 1 lock held by syz.5.2152/16219: [ 989.832119][ T31] #0: ffffffff90338810 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 989.857414][ T31] 7 locks held by syz-executor/16327: [ 989.862867][ T31] #0: ffff8880361e0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 989.886889][ T31] #1: ffff888026947c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 989.906898][ T31] #2: ffff888028e410f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 989.926957][ T31] #3: ffffffff8f8eb5a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 989.958428][ T31] #4: ffff888023f7a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 989.976864][ T31] #5: ffff888023f7b250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 989.993104][ T31] #6: ffffffff8e5cfbc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 990.034053][ T31] 4 locks held by syz-executor/16343: [ 990.041494][ T31] #0: ffff8880361e0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 990.050783][ T31] #1: ffff88805aa70c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 990.061793][ T31] #2: ffff888028e410f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 990.074443][ T31] #3: ffffffff8f8eb5a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 990.084925][ T31] 4 locks held by syz-executor/16479: [ 990.090496][ T31] #0: ffff8880361e0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 990.100268][ T31] #1: ffff88814436c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 990.115950][ T31] #2: ffff888028e410f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 990.129084][ T31] #3: ffffffff8f8eb5a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 990.139586][ T31] 4 locks held by syz-executor/16489: [ 990.145003][ T31] #0: ffff8880361e0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 990.154257][ T31] #1: ffff8880509c3088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 990.164962][ T31] #2: ffff888028e410f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 990.176713][ T31] #3: ffffffff8f8eb5a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 990.188836][ T31] 4 locks held by syz-executor/16506: [ 990.194250][ T31] #0: ffff8880361e0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 990.204740][ T31] #1: ffff8880331fc088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 990.219277][ T31] #2: ffff888028e410f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 990.229837][ T31] #3: ffffffff8f8eb5a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 990.243257][ T31] 4 locks held by syz-executor/16518: [ 990.248842][ T31] #0: ffff8880361e0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 990.258027][ T31] #1: ffff8880509c5c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 990.275535][ T31] #2: ffff888028e410f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 990.288556][ T31] #3: ffffffff8f8eb5a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 990.299214][ T31] [ 990.302301][ T31] ============================================= [ 990.302301][ T31] [ 990.318033][ T31] NMI backtrace for cpu 0 [ 990.318057][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 990.318090][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.318106][ T31] Call Trace: [ 990.318114][ T31] [ 990.318126][ T31] dump_stack_lvl+0x116/0x1f0 [ 990.318170][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 990.318201][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 990.318266][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 990.318305][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 990.318344][ T31] watchdog+0xf70/0x12c0 [ 990.318391][ T31] ? __pfx_watchdog+0x10/0x10 [ 990.318432][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 990.318479][ T31] ? __kthread_parkme+0x19e/0x250 [ 990.318517][ T31] ? __pfx_watchdog+0x10/0x10 [ 990.318559][ T31] kthread+0x3c5/0x780 [ 990.318599][ T31] ? __pfx_kthread+0x10/0x10 [ 990.318651][ T31] ? rcu_is_watching+0x12/0xc0 [ 990.318679][ T31] ? __pfx_kthread+0x10/0x10 [ 990.318719][ T31] ret_from_fork+0x5d7/0x6f0 [ 990.318755][ T31] ? __pfx_kthread+0x10/0x10 [ 990.318794][ T31] ret_from_fork_asm+0x1a/0x30 [ 990.318841][ T31] [ 990.318853][ T31] Sending NMI from CPU 0 to CPUs 1: [ 990.445167][ C1] NMI backtrace for cpu 1 [ 990.445188][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 990.445216][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.445229][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 990.445265][ C1] Code: bb 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 bf 2d 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 990.445287][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 990.445306][ C1] RAX: 0000000000678fa9 RBX: 0000000000000001 RCX: ffffffff8b7c4be9 [ 990.445320][ C1] RDX: 0000000000000000 RSI: ffffffff8de13d3d RDI: ffffffff8c156360 [ 990.445335][ C1] RBP: ffffed1003d59b40 R08: 0000000000000001 R09: ffffed10170a6645 [ 990.445349][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 990.445363][ C1] R13: ffff88801eacda00 R14: ffffffff90a83350 R15: 0000000000000000 [ 990.445377][ C1] FS: 0000000000000000(0000) GS:ffff88812485f000(0000) knlGS:0000000000000000 [ 990.445415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 990.445431][ C1] CR2: 00007ffe5dff3ca8 CR3: 0000000035126000 CR4: 00000000003526f0 [ 990.445447][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 990.445461][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 990.445475][ C1] Call Trace: [ 990.445484][ C1] [ 990.445492][ C1] default_idle+0x13/0x20 [ 990.445515][ C1] default_idle_call+0x6d/0xb0 [ 990.445537][ C1] do_idle+0x391/0x510 [ 990.445563][ C1] ? __pfx_do_idle+0x10/0x10 [ 990.445585][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 990.445614][ C1] cpu_startup_entry+0x4f/0x60 [ 990.445636][ C1] start_secondary+0x21d/0x2b0 [ 990.445727][ C1] ? __pfx_start_secondary+0x10/0x10 [ 990.445758][ C1] common_startup_64+0x13e/0x148 [ 990.445802][ C1] [ 990.462350][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 990.462376][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 990.462409][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.462425][ T31] Call Trace: [ 990.462435][ T31] [ 990.462446][ T31] dump_stack_lvl+0x3d/0x1f0 [ 990.462490][ T31] panic+0x71c/0x800 [ 990.462525][ T31] ? __pfx_panic+0x10/0x10 [ 990.462559][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 990.462595][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 990.462627][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 990.462668][ T31] ? watchdog+0xdda/0x12c0 [ 990.462704][ T31] ? watchdog+0xdcd/0x12c0 [ 990.462743][ T31] watchdog+0xdeb/0x12c0 [ 990.462785][ T31] ? __pfx_watchdog+0x10/0x10 [ 990.717560][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 990.722808][ T31] ? __kthread_parkme+0x19e/0x250 [ 990.727869][ T31] ? __pfx_watchdog+0x10/0x10 [ 990.732576][ T31] kthread+0x3c5/0x780 [ 990.736679][ T31] ? __pfx_kthread+0x10/0x10 [ 990.741301][ T31] ? rcu_is_watching+0x12/0xc0 [ 990.746087][ T31] ? __pfx_kthread+0x10/0x10 [ 990.750708][ T31] ret_from_fork+0x5d7/0x6f0 [ 990.755330][ T31] ? __pfx_kthread+0x10/0x10 [ 990.759951][ T31] ret_from_fork_asm+0x1a/0x30 [ 990.764765][ T31] [ 990.767953][ T31] Kernel Offset: disabled [ 990.772294][ T31] Rebooting in 86400 seconds..