last executing test programs: 2m47.625352641s ago: executing program 0 (id=3166): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x1, 0x9, 0x3, 0x1f, 0x940, 0xa, 0x3, 0x2, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x37fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfff7fff7, 0x0, 0x3, [0xc, 0x2000000000000000, 0x0, 0x8, 0x0, 0x8000004, 0x0, 0x0, 0xffffffffffffff28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x7f, 0x200000000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x2, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x2000000000000000]}, 0x1ff, 0x7d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x6558, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m47.364078378s ago: executing program 0 (id=3167): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01057844a75c0ad518251f00000005000400e90000000500060009000000080003000b00000008000200f7000000180001801400020076657468305f766972745f77696679000800030000020000080003006b1a0000b23a9fa0eb219af3cdb6"], 0x5c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x21c000, 0x0) r3 = ioctl$auto_NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) shmctl$auto_SHM_LOCK(0x8, 0xb, &(0x7f0000000540)={{0x0, 0xee00, 0xee00, 0x7f, 0x5, 0x5, 0x5}, 0x1, 0xc, 0xff, 0x200, @inferred, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000500)="a36c7fa08bb91a4efda6b457727df3559fbac5dbb40b4826c387bd9b5d206d19f998d3169db56d20ef57c70956b41c4f0eef20d05612ad521be97db453"}) sendmsg$auto_NL80211_CMD_DISCONNECT(r3, &(0x7f0000000840)={&(0x7f0000000200), 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x214, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10c, 0x7d, 0x0, 0x1, [@nested={0x108, 0xd7, 0x0, 0x1, [@nested={0x4, 0x94}, @generic="e55e5dd6753667e56c89ee01e2224b2c659e653ec9bbc84dee99b82af5dc1813097905fe14c1a7576af09bce0a2ecfebe7660de2cdbd3769f4fb648dc89e5885cc170c9d24940923d45cf83d938661d72ce9827d20e236f7bccc1d21306d082769e4b29be0d93d31e4ebf5f5f73ecb2a2e7d86899b454f8df874acfece30c8be9b53a6477d3b134b2753fe80579ec14302eae13ba1781debc8c969bdb717a82c8a9e92da07f5b5e6dbaa68e65ee6d2e19514f06a9271e027e55900b07b7bc9249eb809eaa58d00c2df48cebaba78f6203625b9f1cf33f8413cab056efa018cc5", @typed={0x8, 0x123, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x38}, @nested={0x4, 0x1f}, @typed={0x8, 0xa2, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x82, 0x0, 0x0, @uid=r5}]}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x2}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xa}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xde, 0xbb, "12fe1a95d7b16cb32876b9a060177eec186331a2a4ee290faf89a1dc76aaf7dc1a2f7aeac4840a8cd6890fde459d713ca24f0921f1b4f648e7207e862874ee039334762dd106f7c89cb910f187a7e4b6a3f7e6be11e7d468cbf1fa016049b1f49f8ce2034dca052b18822ea01b8a9a593803a74415257db4763f03d3aa91d4c71cb57eab32ed1b4773f476facf0fdf8f0419950d7d18777b507fbb88bc0e5931fdc167fc1c9828ee1bc3ca37b10d8f53e6ad6d86d786679bafbb004691ad2486dde75130dd2fe75c1a939bb3f47ad0c4bc991bd64f56e7149426"}]}, 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xd5, "36a210d97d4c9f6bd4aafa4ed15fdb9c571daf044ae6ff089930def80ce28999", @raw=0x5}) ioctl$auto_SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) r7 = prctl$auto_SECCOMP_MODE_FILTER(0x8, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x5) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x108, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x6, 0x10d, "b55c"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SCAN_FREQ_KHZ={0xe0, 0x124, 0x0, 0x1, [@generic="6acaaf724b48df2576cdb088c57a6b7576c965162facc621ca7d4a04e2969bc7b99b7e91bd80cbbc48653d42fb321bbc0eb8dcb4ba526e2766578f10781496d49edd36918838692b760b619bdb203071f6d448d9b43b5399390342ac16b4ff164c2f772f41aac2f0645dac87dbb3e81274645b604f2fa40c69eedcfcc8e7b256dc2b4266d3dc1ef0e91245e1e1a0bab4871fa304dd2a5a3fd209aa81cfd4c5c3d415ba7b95fe03a955f0aaedf717428d48ac2db4765c3b94c5616164c97a094657d089fd1c18b8a1de464caa5035cd6e98a1f912", @typed={0x8, 0x11d, 0x0, 0x0, @fd=r7}]}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xc4}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x810) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x181280, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000001c0)="3b32891c") 2m46.622502388s ago: executing program 0 (id=3170): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_allowed_congestion_control\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x8001, 0x1964) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83a4ebdb278754e15f", 0x11) ioctl$auto(r1, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) bpf$auto(0x5, 0x0, 0x102) getpid() socket$nl_generic(0x10, 0x3, 0x10) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) 2m45.506581386s ago: executing program 0 (id=3174): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000009, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x40010}, 0x800, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x3, 0x0) 2m45.30705585s ago: executing program 0 (id=3175): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000009, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x40010}, 0x800, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) (fail_nth: 3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x3, 0x0) 2m44.692457298s ago: executing program 0 (id=3177): socket(0xa, 0x3, 0x3c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffb}, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(r0, 0x8922, 0x24) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/net/nr9/addr_len\x00', 0x2aa501, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x6) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/mounts\x00', 0x2042, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebf, 0x401, 0x8000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x1, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r3, 0x810c5701, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2m29.476945684s ago: executing program 32 (id=3177): socket(0xa, 0x3, 0x3c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffb}, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(r0, 0x8922, 0x24) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/net/nr9/addr_len\x00', 0x2aa501, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x6) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/mounts\x00', 0x2042, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebf, 0x401, 0x8000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x1, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r3, 0x810c5701, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 5.629831075s ago: executing program 4 (id=3605): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x0, 0x8010000, 0xffb, 0x8000000008011, 0x3, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/can/rcvlist_fil\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)=""/27, 0x1b) acct$auto(&(0x7f0000002a80)='/dev/binderfs/features/freeze_notification\x00') openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim6/fib/nexthop_bucket_activity\x00', 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x1d, 0x2, 0x7) (async) socket(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) (async) mmap$auto(0x0, 0x8010000, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/can/rcvlist_fil\x00', 0x100, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)=""/27, 0x1b) (async) acct$auto(&(0x7f0000002a80)='/dev/binderfs/features/freeze_notification\x00') (async) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim6/fib/nexthop_bucket_activity\x00', 0x101000, 0x0) (async) 5.564852535s ago: executing program 1 (id=3606): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffffff, 0x2447, 0xdf, 0x1e, 0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) r0 = pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0xb0c00, 0x0) write$auto(r1, 0x0, 0xfdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffe, 0xe983, 0xe0, 0x13, 0x401, 0x8000) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4000}, 0x55) close_range$auto(r1, r0, 0x0) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0xffffffffffffffff, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(r3, 0xfffffffffffff000, 0x1) unshare$auto(0x40000082) mmap$auto(0x0, 0x4020009, 0xdf, 0x14, 0xffffffffffffffff, 0x8000) 5.470927489s ago: executing program 4 (id=3608): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x7e1b, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(r1, 0x0, 0x2) 5.254850019s ago: executing program 4 (id=3609): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x124, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa48}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x72}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250400000070000180080003000180000008000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000080003003c0000001400020076657468305f746f5f62726964676500080003000900000014000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000004000180a000018014000200726f7365300000000000000000000000140002007767320000000000000000000000000008000300090000001400020070696d367265673000000000000000001400020076657468305f746f5f68737200000000080003000500000014000200776c616e30000000000000000000000014000200687372300000000000000000000000001400020069703665727370616e300000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000040001807c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000140002006261746164763000000000000000000014000200766c616e30000000000000000000000008000100", @ANYBLOB="080003000080ffff1400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="200001880800010084e0dbfb01f8c1414684152eaa8e9a91bfaeb1978023056835e51c8d1fd963711438811882ce0f01e7248f5e", @ANYRES32=0x0, @ANYBLOB="140002007465616d3000"/20], 0x1e4}}, 0x40000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) getsockopt$auto_SO_OOBINLINE(r0, 0xffff8001, 0xa, &(0x7f0000000340)='veth0_to_hsr\x00', &(0x7f0000000540)=0x2) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000440)="def698cc206caa184531776e1b06ce70f3c6adea0cf638d1b0de60d5f802b65cc7708b62ee08396d95f20bee34c5bc5fef70dc125fde98807c1776c265f01124653bb3f6e31b39be0ce8e1f579dbfef4c70dbd840f3da3d1d2505a2b715d440a75c96dd8f1a8aa7845848bc109125d1bba97cb9e26b331ffed989db89a9fca4bfa0266e20a593e51ece188f801c621a7ff1c6f7b885de0d7c323aaef68fceaf8c2e4fa897eb90db825892b702b9b27cab2f6467ec4cbcca06e367a1f3ec58d7e094793d8b8a683b591f404c3e7f4f4460000000000000000", 0xfff}, 0x3, 0x0, 0x80000000, 0x10}, 0x6}, 0x6, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRESOCT], 0x1ac}}, 0x7d0c1bdd234200c1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="840f0000", @ANYRES16=0x0, @ANYBLOB="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"/265, @ANYRES32, @ANYBLOB="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"], 0xf84}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000001580)) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) select$auto(0x9, &(0x7f00000000c0)={[0xe, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x2, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x80) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x2f) 5.147101402s ago: executing program 3 (id=3612): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x4d) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = gettid() process_vm_writev$auto(r3, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) io_uring_setup$auto(0x8, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x8, 0x8, r2, [], {0x6, 0x6, 0xf, 0x8, 0x100, 0x83, 0x101, 0x5, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 4.539771781s ago: executing program 1 (id=3614): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) open(0x0, 0x466303, 0x144) modify_ldt$auto(0x1, 0x0, 0x10) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xf4, 0xb0, @raw=0x89de}}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x101, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x100000007, 0xd, 0x1, 0x0, 0x2, 0x15f4da0a, 0x7, 0xffffffffffffffff, 0x7, 0x8000201f, 0x7, 0x6d3d, 0x9, 0x2, 0x8000006]}, 0x0) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000180), 0x3ff, 0x73, &(0x7f0000000200)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, &(0x7f0000000240)=0xd0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r2, &(0x7f0000000280)=""/49, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x2a, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r3, 0x8924, 0x0) 4.106897703s ago: executing program 2 (id=3615): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xdc803, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0x8, &(0x7f0000000180)="60fa021c") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0xc, 0x3, 0x55f4da0a, 0x3, 0x4, 0x64, 0x80000022, 0x8, 0x9, 0x0, 0x2, 0x200003]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/conf/hsr0/force_igmp_version\x00', 0x641, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_X32(0x2001, 0x7) pwrite64$auto(r4, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r4, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, r3, 0xffff) read$auto_dfs_cpu_ops_debugfs(0xffffffffffffffff, &(0x7f00000003c0)=""/213, 0xd5) r5 = io_uring_setup$auto(0x6, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r6, 0xc1205531, r5) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r7, r7, 0x0, 0x1) sysfs$auto(0x5, 0x100000074e, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.86228436s ago: executing program 3 (id=3616): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b63, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r1, 0x4004743c, 0x0) 3.130899296s ago: executing program 2 (id=3617): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x4d) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = gettid() process_vm_writev$auto(r3, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) io_uring_setup$auto(0x8, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x8, 0x8, r2, [], {0x6, 0x6, 0xf, 0x8, 0x100, 0x83, 0x101, 0x5, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0x10, 0x2, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x10001, 0x0, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) 3.130596992s ago: executing program 4 (id=3618): r0 = set_tid_address$auto(0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 64) socket(0x18, 0xa, 0x1) (async, rerun: 64) r1 = socket(0xa, 0x2, 0x3a) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) (async, rerun: 64) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) (rerun: 64) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) lstat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x12, 0x2, 0x1b56, 0x8, 0xee01, 0xffffffffffffffff, 0x0, 0x400, 0x8, 0x8, 0x7fffffff, 0x2, 0x8, 0x6, 0x5, 0x5, 0x5}) sendmsg$auto_NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="54010000", @ANYRES16=r2, @ANYBLOB="000126bd7000fedbdf25520000000400ff0038012280940066802e1d5b53f1168db2e58bdc8522f35e434dd4fb97bcdd072ec333bd1f161137e978803f1c944fc3ecad09bae086f887b4a7040072000500b80000000000040013800500060000000000b77f56016bceb08910022d051082aea2948853e171a5897cc6e459951e038609e23d0a15de9c026545cb5ae093e2a5e77791e0772f7308328b9ea6941d6b332abd26c2b40462ab08001200", @ANYRES32=r3, @ANYBLOB="0c000400fa000000000000000c008f009d000000000000000f003c007b5d2c5b9740295e2f2500006500dc807aa67f3ec79ac27d4c4c60b50be08faca1897e89e3e552c92ae0f95799eec24d6f258fc8ac9e9ee1275bfd17af395472bd8872e3b9daaab8c66dc331b8a01a0127ebc940877e015f85db4963f3a9e94d117591e4bd0400fa000800ca00010000000000000800e000", @ANYRES32=r0, @ANYBLOB="82b4bfc4"], 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x8004) prctl$auto(0xf, 0x80000000, r0, 0x3, 0x1) r4 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r4, 0x29, 0x46, 0x0, 0x18000112) (async) connect$auto(0x3, &(0x7f00000018c0)=@ax25={0x3, @bcast, 0x1}, 0x55) 3.128475196s ago: executing program 3 (id=3619): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) epoll_create$auto(0x3e) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x7e1b, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto(r0, 0x0, 0x2) 2.980629628s ago: executing program 1 (id=3620): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83a4ebdb278754e15f", 0x11) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x7ffe) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400dc34", @ANYRES16=r3, @ANYBLOB="79a327bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x8, 0x3, 0x8, 0x9, 0xc, 0x8, {[0x1212, 0x40]}, 0x9, 0x7ff, 0x9, [0x8001, 0x7, 0x6, 0x1]}) 2.784486014s ago: executing program 3 (id=3621): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/49, 0x31) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x8000008, [0x2, 0xffffffff, 0x80000004], [{0x80, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x9, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x6, 0xffffbffe, 0x1, 0x1}, {0x4, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0xfffff87e, 0x0, 0x1, 0x1}, {0xc14, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x800, 0x3, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x2, 0x7f69, 0x100000001, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x9, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x100000000, 0x40, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fa, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) close_range$auto(0x0, 0x5, 0x2000000) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) ioctl$auto(r2, 0x900064b7, r2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci2/rfkill29/hard\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x0, 0x0) 1.624031087s ago: executing program 1 (id=3622): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/delayed_allocation_blocks\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0) sendfile$auto(r1, r1, 0x0, 0x7) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/zoneinfo\x00', 0x10b402, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x158, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1\x00'}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8d9}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x933b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_MNTR_FLAGS={0xb8, 0x17, "419c0a220d007a1d2688f43d8aa58d036e9760d66ef2f65d76fc11f20677e651955a41edfe3ba3ca3f559d68340098397394dc24ee7f44240781ffe11a1b37a2c078238f64dda7ce4df238324b5fde04da60ce27fcc4d19125fde14684a531aa6cea21af0f6c1adbc33405437c8070c20c8c4bc0faee1a5069be020500b950a408cb03f3407626944506a559e7319bad8651b63a63bebf76a7c6cde935707b377e48d139773c1fea737f18391f121bb07e56a37e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x901a}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xf9}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x40, 0x5b, "4a39f2f89d9c13637905a81f75ed9814f7809848ea4836d900be22dd8e034f8b89c10f5bcd392c5d92621e0d84f4b867ef10e188d27af17317c5fddf"}]}, 0x158}, 0x1, 0x0, 0x0, 0x1000}, 0x8080) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) fcntl$auto_F_DUPFD_QUERY(r4, 0x403, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000001680)='*\x00', 0x7, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001540), r2) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80001500}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) mmap$auto(0x0, 0x428, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0) madvise$auto_MADV_HUGEPAGE(0x0, 0x80000001, 0xe) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000340)=""/4099, 0x1003) 1.613972186s ago: executing program 4 (id=3630): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b45, 0x3) pread64$auto(r0, 0x0, 0x40000000f42c, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0xffffffffffffffff, 0x0, 0x39b8) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x8000, 0x80000004, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) 1.5640123s ago: executing program 3 (id=3623): r0 = io_uring_setup$auto(0x59, 0x0) r1 = epoll_create1$auto(0x1ff) inotify_add_watch$auto(r1, &(0x7f0000000040)='./file0\x00', 0x0) ioperm$auto(0x7, 0x800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x11, 0xffffffffffffffff, 0x7ffd) socket(0x6, 0x5, 0x80000000) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x5, &(0x7f0000000440)={@_si_pad}, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1e, 0x2, 0x0) semtimedop$auto(0x53e, &(0x7f00000002c0)={0x4ba1, 0x5, 0x98}, 0x6, &(0x7f0000000300)={0x12000000000, 0x1}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/209, 0xd1) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywc\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20082, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) close_range$auto(r3, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) r6 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r6, &(0x7f0000000080)=""/81, 0x51) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20901, 0x0) 844.542359ms ago: executing program 2 (id=3624): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0xc0b00, 0x0) pread64$auto(r0, 0x0, 0xc404, 0x1000) 842.427505ms ago: executing program 3 (id=3625): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x4d) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = gettid() process_vm_writev$auto(r3, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) io_uring_setup$auto(0x8, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x8, 0x8, r2, [], {0x6, 0x6, 0xf, 0x8, 0x100, 0x83, 0x101, 0x5, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0x10, 0x2, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x10001, 0x0, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) 779.390758ms ago: executing program 2 (id=3626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000001280)={0x0, 0x30000, &(0x7f0000001240)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) 677.68045ms ago: executing program 1 (id=3627): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x21, 0x0, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyda\x00', 0x2c0000, 0x0) (async) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyda\x00', 0x2c0000, 0x0) ioctl$auto_TIOCMBIC(r1, 0x5417, &(0x7f0000000180)="fcbfc4811683f005b6d38a943ac27c41fa96a9721721de25eb9177dd9e18d9ffa2ad71d0026a6fb42d79868b7317b2919f0f353775e96ba460cb9de307dd4cbbf90068388522daf426ff039c6fecececfbfdd7ddf6e7bb21f88b57d5b2b6dc2d460cf634a57d1e7de9c2a5ff7262eb2768d132d7d52f76b6933df224cad403e6c6e04dcfec6d0037927316bffdcb6fbd90de133c9c3d59b0c6f639e6c6f12debb6c0ba6ee5c207f61a07cabb7686f4baf01d1afe4af52dc449295ede7385de7c26e22db84bbd0afedb4940af574fb81897a448aa44bf4125") setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20) openat$auto(r2, &(0x7f0000000100)='./file0\x00', 0x5, 0x2008) (async) openat$auto(r2, &(0x7f0000000100)='./file0\x00', 0x5, 0x2008) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004895}, 0x20000800) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffd, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x2, 0x801, 0x100) (async) r4 = socket(0x2, 0x801, 0x100) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20007, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyx8\x00', 0x400182, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0xfffffffd) (async) close_range$auto(0x2, 0x8, 0xfffffffd) ioctl$auto(r3, 0x758, r3) open(0x0, 0x163340, 0x6a) (async) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r4, r5, 0x0, 0x7fffe000) (async) sendfile$auto(r4, r5, 0x0, 0x7fffe000) 575.869605ms ago: executing program 2 (id=3628): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(r0, &(0x7f0000000240)='5\x00\\\x1cj\xf0\xa4\x9cje\xdc\"F\x12', 0x81) 389.736201ms ago: executing program 1 (id=3629): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) 388.744516ms ago: executing program 2 (id=3631): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x408c2, 0x3f47a4eada317936, 0x8}, 0x18) pselect6$auto(0xe6d8, &(0x7f0000000000)={[0x77d8, 0x7f, 0x10001, 0x7ff, 0x0, 0x6, 0x9, 0x5, 0x8001, 0xa4, 0x8, 0x8001, 0x8, 0xffffffffffffffff, 0x2, 0x200000000b5]}, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x0, 0xe) keyctl$auto(0xe, 0x2, 0x76f, 0x9, 0xf13) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x109041, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) socket(0x11, 0x80003, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto(r0, 0x8983, 0x4) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r1, 0x545c, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x10001, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) io_uring_setup$auto(0x101, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20044000) r2 = socket(0x28, 0xa, 0x0) sendmmsg$auto(r2, 0x0, 0x7, 0x4008) r3 = wait4$auto(0xffffffffffffffff, &(0x7f0000000140)=0x118b, 0xf55, &(0x7f0000000380)={{0xc687, 0xc3f}, {0x1, 0x8}, 0x8, 0x400, 0x1, 0x4, 0x7091c377, 0x5, 0x9, 0x1, 0x5, 0x4, 0x5, 0x5, 0x67d, 0x9}) get_robust_list$auto(r3, &(0x7f0000000540)=&(0x7f0000000500)={{&(0x7f00000002c0)={&(0x7f0000000280)}}, 0x4, 0x0}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) 0s ago: executing program 4 (id=3632): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0xc0b00, 0x0) pread64$auto(r0, 0x0, 0xc404, 0x1000) (fail_nth: 2) kernel console output (not intermixed with test programs): OS Google 05/07/2025 [ 1112.480514][T20703] Call Trace: [ 1112.480525][T20703] [ 1112.480538][T20703] dump_stack_lvl+0x16c/0x1f0 [ 1112.480593][T20703] should_fail_ex+0x512/0x640 [ 1112.480640][T20703] ? fs_reclaim_acquire+0xae/0x150 [ 1112.480683][T20703] ? tomoyo_encode2+0x100/0x3e0 [ 1112.480724][T20703] should_failslab+0xc2/0x120 [ 1112.480756][T20703] __kmalloc_noprof+0xd2/0x510 [ 1112.480803][T20703] ? d_absolute_path+0x136/0x1a0 [ 1112.480843][T20703] tomoyo_encode2+0x100/0x3e0 [ 1112.480893][T20703] tomoyo_encode+0x29/0x50 [ 1112.480937][T20703] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1112.480992][T20703] tomoyo_path_number_perm+0x245/0x580 [ 1112.481030][T20703] ? tomoyo_path_number_perm+0x237/0x580 [ 1112.481072][T20703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1112.481112][T20703] ? find_held_lock+0x2b/0x80 [ 1112.481187][T20703] ? find_held_lock+0x2b/0x80 [ 1112.481219][T20703] ? hook_file_ioctl_common+0x145/0x410 [ 1112.481263][T20703] ? __fget_files+0x20e/0x3c0 [ 1112.481315][T20703] security_file_ioctl+0x9b/0x240 [ 1112.481356][T20703] __x64_sys_ioctl+0xb7/0x210 [ 1112.481398][T20703] do_syscall_64+0xcd/0x490 [ 1112.481449][T20703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.481488][T20703] RIP: 0033:0x7f31c5f8e929 [ 1112.481515][T20703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.481542][T20703] RSP: 002b:00007f31c6e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1112.481573][T20703] RAX: ffffffffffffffda RBX: 00007f31c61b6080 RCX: 00007f31c5f8e929 [ 1112.481595][T20703] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 1112.481613][T20703] RBP: 00007f31c6e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.481633][T20703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.481653][T20703] R13: 0000000000000000 R14: 00007f31c61b6080 R15: 00007fff3f3189d8 [ 1112.481695][T20703] [ 1112.483162][T20703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1112.827298][T20655] team0: Port device team_slave_0 added [ 1112.862506][T20655] team0: Port device team_slave_1 added [ 1113.330206][T20655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.345977][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.455280][T20655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.500117][T20655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.528184][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.628256][T20655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.217450][T20656] Bluetooth: hci2: command tx timeout [ 1114.459248][T20713] zswap: compressor 000 not available [ 1114.475575][T20655] hsr_slave_0: entered promiscuous mode [ 1114.486886][T20655] hsr_slave_1: entered promiscuous mode [ 1116.277033][T20656] Bluetooth: hci2: command tx timeout [ 1116.756039][T20729] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3228'. [ 1117.621763][T20655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1117.761476][T20655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1117.896193][T20655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1118.067222][T20655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1118.132362][T20748] CIFS mount error: No usable UNC path provided in device string! [ 1118.132362][T20748] [ 1118.176756][T20748] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1118.659031][T20655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.788223][T20760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3240'. [ 1118.813205][T20655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.847280][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.854557][T14633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.215582][T20760] team_slave_0 (unregistering): left promiscuous mode [ 1119.289281][T20760] team_slave_0 (unregistering): left allmulticast mode [ 1119.347749][T20760] team0: Port device team_slave_0 removed [ 1119.629359][T14626] bridge0: port 3(team0) entered disabled state [ 1119.683716][T14626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.691056][T14626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.709548][T20786] zswap: compressor 000 not available [ 1121.236388][T20655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.523697][T20815] netlink: 'syz.2.3243': attribute type 1 has an invalid length. [ 1122.472180][T20655] veth0_vlan: entered promiscuous mode [ 1122.676493][T20835] FAULT_INJECTION: forcing a failure. [ 1122.676493][T20835] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.767883][T20835] CPU: 0 UID: 0 PID: 20835 Comm: syz.1.3246 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1122.767928][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1122.767969][T20835] Call Trace: [ 1122.767980][T20835] [ 1122.767993][T20835] dump_stack_lvl+0x16c/0x1f0 [ 1122.768056][T20835] should_fail_ex+0x512/0x640 [ 1122.768104][T20835] ? fs_reclaim_acquire+0xae/0x150 [ 1122.768148][T20835] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1122.768194][T20835] should_failslab+0xc2/0x120 [ 1122.768229][T20835] __kmalloc_noprof+0xd2/0x510 [ 1122.768290][T20835] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1122.768341][T20835] ? tomoyo_profile+0x47/0x60 [ 1122.768377][T20835] tomoyo_path_number_perm+0x245/0x580 [ 1122.768416][T20835] ? tomoyo_path_number_perm+0x237/0x580 [ 1122.768462][T20835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1122.768506][T20835] ? find_held_lock+0x2b/0x80 [ 1122.768583][T20835] ? hook_file_ioctl_common+0x145/0x410 [ 1122.768641][T20835] security_file_ioctl+0x9b/0x240 [ 1122.768691][T20835] __x64_sys_ioctl+0xb7/0x210 [ 1122.768736][T20835] do_syscall_64+0xcd/0x490 [ 1122.768787][T20835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.768818][T20835] RIP: 0033:0x7f29d018e929 [ 1122.768842][T20835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.768872][T20835] RSP: 002b:00007f29d0fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.768899][T20835] RAX: ffffffffffffffda RBX: 00007f29d03b5fa0 RCX: 00007f29d018e929 [ 1122.768919][T20835] RDX: 0000000000000003 RSI: 00000000c0205647 RDI: 0000000000000004 [ 1122.768938][T20835] RBP: 00007f29d0fb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.768956][T20835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.768974][T20835] R13: 0000000000000000 R14: 00007f29d03b5fa0 R15: 00007ffd8ba34ce8 [ 1122.769013][T20835] [ 1122.769149][T20835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1123.096440][T20655] veth1_vlan: entered promiscuous mode [ 1123.346774][T20655] veth0_macvtap: entered promiscuous mode [ 1123.354527][T20852] FAULT_INJECTION: forcing a failure. [ 1123.354527][T20852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.390213][T20852] CPU: 0 UID: 0 PID: 20852 Comm: syz.2.3248 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1123.390257][T20852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1123.390272][T20852] Call Trace: [ 1123.390280][T20852] [ 1123.390290][T20852] dump_stack_lvl+0x16c/0x1f0 [ 1123.390331][T20852] should_fail_ex+0x512/0x640 [ 1123.390374][T20852] _copy_from_user+0x2e/0xd0 [ 1123.390397][T20852] copy_msghdr_from_user+0x98/0x160 [ 1123.390438][T20852] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1123.390480][T20852] ? __pfx__kstrtoull+0x10/0x10 [ 1123.390515][T20852] ___sys_sendmsg+0xfe/0x1d0 [ 1123.390552][T20852] ? __pfx____sys_sendmsg+0x10/0x10 [ 1123.390602][T20852] ? find_held_lock+0x2b/0x80 [ 1123.390645][T20852] __sys_sendmmsg+0x200/0x420 [ 1123.390685][T20852] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1123.390737][T20852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1123.390787][T20852] ? fput+0x70/0xf0 [ 1123.390811][T20852] ? ksys_write+0x1ac/0x250 [ 1123.390846][T20852] ? __pfx_ksys_write+0x10/0x10 [ 1123.390886][T20852] __x64_sys_sendmmsg+0x9c/0x100 [ 1123.390922][T20852] ? lockdep_hardirqs_on+0x7c/0x110 [ 1123.390958][T20852] do_syscall_64+0xcd/0x490 [ 1123.390996][T20852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.391020][T20852] RIP: 0033:0x7f0027b8e929 [ 1123.391039][T20852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.391061][T20852] RSP: 002b:00007f002892c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1123.391082][T20852] RAX: ffffffffffffffda RBX: 00007f0027db5fa0 RCX: 00007f0027b8e929 [ 1123.391097][T20852] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1123.391111][T20852] RBP: 00007f002892c090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.391125][T20852] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1123.391140][T20852] R13: 0000000000000000 R14: 00007f0027db5fa0 R15: 00007ffd23fb0dc8 [ 1123.391170][T20852] [ 1123.504962][T20655] veth1_macvtap: entered promiscuous mode [ 1123.506524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1123.609933][ C0] vkms_vblank_simulate: vblank timer overrun [ 1123.716001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1123.729727][T20655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.909378][T20655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.952154][T20655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.003803][T20655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.032226][T20655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.041739][T20655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.318372][T20860] mkiss: ax0: crc mode is auto. [ 1124.367221][T20860] FAULT_INJECTION: forcing a failure. [ 1124.367221][T20860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.401367][T20860] CPU: 0 UID: 0 PID: 20860 Comm: syz.1.3251 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1124.401414][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1124.401433][T20860] Call Trace: [ 1124.401444][T20860] [ 1124.401456][T20860] dump_stack_lvl+0x16c/0x1f0 [ 1124.401512][T20860] should_fail_ex+0x512/0x640 [ 1124.401567][T20860] _copy_from_user+0x2e/0xd0 [ 1124.401608][T20860] do_sys_poll+0x1d5/0xdf0 [ 1124.401657][T20860] ? kernel_text_address+0x8d/0x100 [ 1124.401693][T20860] ? arch_stack_walk+0xa6/0x100 [ 1124.401728][T20860] ? __pfx_do_sys_poll+0x10/0x10 [ 1124.401775][T20860] ? __lock_acquire+0x622/0x1c90 [ 1124.401858][T20860] ? __lock_acquire+0x622/0x1c90 [ 1124.401979][T20860] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1124.402034][T20860] ? ktime_get_ts64+0x2d2/0x400 [ 1124.402077][T20860] ? read_tsc+0x9/0x20 [ 1124.402112][T20860] ? ktime_get_ts64+0x256/0x400 [ 1124.402166][T20860] __x64_sys_poll+0x1a6/0x450 [ 1124.402214][T20860] ? __pfx___x64_sys_poll+0x10/0x10 [ 1124.402275][T20860] do_syscall_64+0xcd/0x490 [ 1124.402328][T20860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.402362][T20860] RIP: 0033:0x7f29d018e929 [ 1124.402390][T20860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.402422][T20860] RSP: 002b:00007f29d0fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1124.402452][T20860] RAX: ffffffffffffffda RBX: 00007f29d03b5fa0 RCX: 00007f29d018e929 [ 1124.402473][T20860] RDX: 00000000000003fc RSI: 0000000000000005 RDI: 0000200000000d40 [ 1124.402492][T20860] RBP: 00007f29d0fb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.402510][T20860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.402528][T20860] R13: 0000000000000000 R14: 00007f29d03b5fa0 R15: 00007ffd8ba34ce8 [ 1124.402567][T20860] [ 1124.591758][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.822132][T20840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.842180][T20840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.842996][T20839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.882854][T20839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.620699][T20876] netlink: zone id is out of range [ 1125.625932][T20876] netlink: zone id is out of range [ 1125.648830][T20876] netlink: get zone limit has 4 unknown bytes [ 1126.156923][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.163357][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.181609][T20932] Invalid ELF header magic: != ELF [ 1129.452721][T20935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.176385][T20958] usb usb36: usbfs: process 20958 (syz.4.3267) did not claim interface 0 before use [ 1131.645126][T20995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3272'. [ 1132.300670][T21005] FAULT_INJECTION: forcing a failure. [ 1132.300670][T21005] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.382499][T21005] CPU: 1 UID: 0 PID: 21005 Comm: syz.2.3273 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1132.382548][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1132.382569][T21005] Call Trace: [ 1132.382579][T21005] [ 1132.382593][T21005] dump_stack_lvl+0x16c/0x1f0 [ 1132.382653][T21005] should_fail_ex+0x512/0x640 [ 1132.382701][T21005] ? __kvmalloc_node_noprof+0x124/0x620 [ 1132.382758][T21005] should_failslab+0xc2/0x120 [ 1132.382793][T21005] __kvmalloc_node_noprof+0x137/0x620 [ 1132.382842][T21005] ? alloc_fdtable+0xee/0x2b0 [ 1132.382892][T21005] ? alloc_fdtable+0xee/0x2b0 [ 1132.382935][T21005] alloc_fdtable+0xee/0x2b0 [ 1132.382982][T21005] dup_fd+0x83b/0xb90 [ 1132.383046][T21005] ? find_held_lock+0x2b/0x80 [ 1132.383093][T21005] ksys_unshare+0x831/0xa40 [ 1132.383141][T21005] ? __pfx_ksys_unshare+0x10/0x10 [ 1132.383191][T21005] ? xfd_validate_state+0x61/0x180 [ 1132.383251][T21005] __x64_sys_unshare+0x31/0x40 [ 1132.383297][T21005] do_syscall_64+0xcd/0x490 [ 1132.383351][T21005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.383385][T21005] RIP: 0033:0x7f0027b8e929 [ 1132.383414][T21005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.383447][T21005] RSP: 002b:00007f002892c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1132.383481][T21005] RAX: ffffffffffffffda RBX: 00007f0027db5fa0 RCX: 00007f0027b8e929 [ 1132.383504][T21005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1132.383526][T21005] RBP: 00007f0027c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1132.383547][T21005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.383567][T21005] R13: 0000000000000000 R14: 00007f0027db5fa0 R15: 00007ffd23fb0dc8 [ 1132.383610][T21005] [ 1133.464586][T21021] serio: Serial port pty238 [ 1133.588527][T21021] FAULT_INJECTION: forcing a failure. [ 1133.588527][T21021] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.649990][T21021] CPU: 0 UID: 0 PID: 21021 Comm: syz.1.3276 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1133.650041][T21021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1133.650062][T21021] Call Trace: [ 1133.650073][T21021] [ 1133.650087][T21021] dump_stack_lvl+0x16c/0x1f0 [ 1133.650146][T21021] should_fail_ex+0x512/0x640 [ 1133.650198][T21021] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1133.650259][T21021] should_failslab+0xc2/0x120 [ 1133.650294][T21021] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1133.650345][T21021] ? security_file_alloc+0x34/0x2b0 [ 1133.650397][T21021] security_file_alloc+0x34/0x2b0 [ 1133.650441][T21021] init_file+0x93/0x4c0 [ 1133.650477][T21021] alloc_empty_file+0x73/0x1e0 [ 1133.650517][T21021] path_openat+0xda/0x2cb0 [ 1133.650566][T21021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.650617][T21021] ? __pfx_path_openat+0x10/0x10 [ 1133.650669][T21021] ? __lock_acquire+0xb8a/0x1c90 [ 1133.650723][T21021] do_filp_open+0x20b/0x470 [ 1133.650776][T21021] ? __pfx_do_filp_open+0x10/0x10 [ 1133.650858][T21021] ? alloc_fd+0x471/0x7d0 [ 1133.650926][T21021] do_sys_openat2+0x11b/0x1d0 [ 1133.650968][T21021] ? __pfx_do_sys_openat2+0x10/0x10 [ 1133.651012][T21021] ? __sys_sendmsg+0x18c/0x220 [ 1133.651076][T21021] __x64_sys_openat+0x174/0x210 [ 1133.651127][T21021] ? __pfx___x64_sys_openat+0x10/0x10 [ 1133.651188][T21021] do_syscall_64+0xcd/0x490 [ 1133.651245][T21021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.651280][T21021] RIP: 0033:0x7f29d018e929 [ 1133.651308][T21021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.651343][T21021] RSP: 002b:00007f29d0fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1133.651376][T21021] RAX: ffffffffffffffda RBX: 00007f29d03b5fa0 RCX: 00007f29d018e929 [ 1133.651399][T21021] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1133.651421][T21021] RBP: 00007f29d0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1133.651442][T21021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.651463][T21021] R13: 0000000000000000 R14: 00007f29d03b5fa0 R15: 00007ffd8ba34ce8 [ 1133.651506][T21021] [ 1135.257533][T21046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3282'. [ 1135.694720][T21046] : (slave bond_slave_1): Releasing backup interface [ 1136.434946][T21059] zero sized request [ 1136.659269][T21049] netlink: set zone limit has 8 unknown bytes [ 1136.830874][T21065] serio: Serial port pty238 [ 1136.986443][T21073] FAULT_INJECTION: forcing a failure. [ 1136.986443][T21073] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.038737][T21073] CPU: 0 UID: 0 PID: 21073 Comm: syz.3.3287 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1137.038789][T21073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1137.038816][T21073] Call Trace: [ 1137.038827][T21073] [ 1137.038841][T21073] dump_stack_lvl+0x16c/0x1f0 [ 1137.038902][T21073] should_fail_ex+0x512/0x640 [ 1137.038953][T21073] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1137.039015][T21073] should_failslab+0xc2/0x120 [ 1137.039049][T21073] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1137.039106][T21073] ? __d_alloc+0x31/0xaa0 [ 1137.039136][T21073] ? stack_trace_save+0x8e/0xc0 [ 1137.039180][T21073] __d_alloc+0x31/0xaa0 [ 1137.039217][T21073] d_alloc+0x4a/0x1e0 [ 1137.039251][T21073] d_alloc_parallel+0xe3/0x12e0 [ 1137.039305][T21073] ? find_held_lock+0x2b/0x80 [ 1137.039345][T21073] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1137.039392][T21073] ? __d_lookup+0x266/0x4a0 [ 1137.039444][T21073] lookup_open.isra.0+0x665/0x1580 [ 1137.039500][T21073] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1137.039580][T21073] ? mnt_get_write_access+0x20c/0x300 [ 1137.039630][T21073] path_openat+0x893/0x2cb0 [ 1137.039696][T21073] ? __pfx_path_openat+0x10/0x10 [ 1137.039752][T21073] ? __lock_acquire+0xb8a/0x1c90 [ 1137.039806][T21073] do_filp_open+0x20b/0x470 [ 1137.039859][T21073] ? __pfx_do_filp_open+0x10/0x10 [ 1137.039946][T21073] ? alloc_fd+0x471/0x7d0 [ 1137.040007][T21073] do_sys_openat2+0x11b/0x1d0 [ 1137.040049][T21073] ? __pfx_do_sys_openat2+0x10/0x10 [ 1137.040108][T21073] __x64_sys_openat+0x174/0x210 [ 1137.040151][T21073] ? __pfx___x64_sys_openat+0x10/0x10 [ 1137.040212][T21073] do_syscall_64+0xcd/0x490 [ 1137.040269][T21073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.040303][T21073] RIP: 0033:0x7f31c5f8e929 [ 1137.040331][T21073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.040365][T21073] RSP: 002b:00007f31c6e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1137.040403][T21073] RAX: ffffffffffffffda RBX: 00007f31c61b6080 RCX: 00007f31c5f8e929 [ 1137.040425][T21073] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1137.040447][T21073] RBP: 00007f31c6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1137.040467][T21073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.040488][T21073] R13: 0000000000000000 R14: 00007f31c61b6080 R15: 00007fff3f3189d8 [ 1137.040537][T21073] [ 1138.188125][T14144] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1138.196582][T14144] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1138.285409][T14144] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1138.370713][T14144] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1138.454875][T14144] rtc rtc0: __rtc_set_alarm: err=-22 [ 1140.932908][T21149] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3298'. [ 1141.164200][T21146] CIFS mount error: No usable UNC path provided in device string! [ 1141.164200][T21146] [ 1141.174582][T21146] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1141.764732][T21153] serio: Serial port pty238 [ 1141.837756][T21157] FAULT_INJECTION: forcing a failure. [ 1141.837756][T21157] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.861202][T21157] CPU: 1 UID: 0 PID: 21157 Comm: syz.4.3299 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1141.861257][T21157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1141.861278][T21157] Call Trace: [ 1141.861290][T21157] [ 1141.861306][T21157] dump_stack_lvl+0x16c/0x1f0 [ 1141.861369][T21157] should_fail_ex+0x512/0x640 [ 1141.861420][T21157] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1141.861482][T21157] should_failslab+0xc2/0x120 [ 1141.861517][T21157] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1141.861572][T21157] ? __d_alloc+0x31/0xaa0 [ 1141.861603][T21157] ? stack_trace_save+0x8e/0xc0 [ 1141.861646][T21157] __d_alloc+0x31/0xaa0 [ 1141.861683][T21157] d_alloc+0x4a/0x1e0 [ 1141.861716][T21157] d_alloc_parallel+0xe3/0x12e0 [ 1141.861768][T21157] ? find_held_lock+0x2b/0x80 [ 1141.861819][T21157] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1141.861866][T21157] ? __d_lookup+0x266/0x4a0 [ 1141.861918][T21157] lookup_open.isra.0+0x665/0x1580 [ 1141.861973][T21157] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1141.862044][T21157] ? mnt_get_write_access+0x20c/0x300 [ 1141.862090][T21157] path_openat+0x893/0x2cb0 [ 1141.862155][T21157] ? __pfx_path_openat+0x10/0x10 [ 1141.862210][T21157] ? __lock_acquire+0xb8a/0x1c90 [ 1141.862263][T21157] do_filp_open+0x20b/0x470 [ 1141.862315][T21157] ? __pfx_do_filp_open+0x10/0x10 [ 1141.862398][T21157] ? alloc_fd+0x471/0x7d0 [ 1141.862460][T21157] do_sys_openat2+0x11b/0x1d0 [ 1141.862501][T21157] ? __pfx_do_sys_openat2+0x10/0x10 [ 1141.862560][T21157] __x64_sys_openat+0x174/0x210 [ 1141.862602][T21157] ? __pfx___x64_sys_openat+0x10/0x10 [ 1141.862663][T21157] do_syscall_64+0xcd/0x490 [ 1141.862720][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.862756][T21157] RIP: 0033:0x7fd18e98e929 [ 1141.862795][T21157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.862830][T21157] RSP: 002b:00007fd18f72f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1141.862861][T21157] RAX: ffffffffffffffda RBX: 00007fd18ebb6160 RCX: 00007fd18e98e929 [ 1141.862882][T21157] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1141.862903][T21157] RBP: 00007fd18ea10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1141.862922][T21157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.862939][T21157] R13: 0000000000000000 R14: 00007fd18ebb6160 R15: 00007ffed3365388 [ 1141.862977][T21157] [ 1142.482619][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3302'. [ 1142.565027][T21162] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3302'. [ 1142.808691][T21170] FAULT_INJECTION: forcing a failure. [ 1142.808691][T21170] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1142.826191][T21170] CPU: 0 UID: 0 PID: 21170 Comm: syz.2.3303 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1142.826235][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1142.826253][T21170] Call Trace: [ 1142.826263][T21170] [ 1142.826274][T21170] dump_stack_lvl+0x16c/0x1f0 [ 1142.826324][T21170] should_fail_ex+0x512/0x640 [ 1142.826373][T21170] get_futex_key+0x1d0/0x1540 [ 1142.826412][T21170] ? __pfx_get_futex_key+0x10/0x10 [ 1142.826458][T21170] futex_wake+0xea/0x530 [ 1142.826502][T21170] ? __pfx_futex_wake+0x10/0x10 [ 1142.826543][T21170] ? __sys_sendmmsg+0x35f/0x420 [ 1142.826607][T21170] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1142.826655][T21170] do_futex+0x1e3/0x350 [ 1142.826699][T21170] ? __pfx_do_futex+0x10/0x10 [ 1142.826756][T21170] __x64_sys_futex+0x1e0/0x4c0 [ 1142.826801][T21170] ? __sys_socket+0xac/0x260 [ 1142.826831][T21170] ? fdget_pos+0x2b8/0x370 [ 1142.826872][T21170] ? __pfx___x64_sys_futex+0x10/0x10 [ 1142.826908][T21170] ? xfd_validate_state+0x61/0x180 [ 1142.826950][T21170] ? __pfx_ksys_write+0x10/0x10 [ 1142.827002][T21170] do_syscall_64+0xcd/0x490 [ 1142.827047][T21170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.827074][T21170] RIP: 0033:0x7f0027b8e929 [ 1142.827097][T21170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.827125][T21170] RSP: 002b:00007f00259f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1142.827151][T21170] RAX: ffffffffffffffda RBX: 00007f0027db6088 RCX: 00007f0027b8e929 [ 1142.827170][T21170] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0027db608c [ 1142.827187][T21170] RBP: 00007f0027db6080 R08: 00007f002892d000 R09: 0000000000000000 [ 1142.827204][T21170] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f0027db608c [ 1142.827221][T21170] R13: 0000000000000000 R14: 00007ffd23fb0ce0 R15: 00007ffd23fb0dc8 [ 1142.827256][T21170] [ 1143.443425][T21179] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3305'. [ 1143.511640][T21176] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3305'. [ 1143.569549][T21176] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3305'. [ 1143.609844][T21176] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3305'. [ 1143.623247][T21176] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3305'. [ 1143.818076][T21176] CIFS mount error: No usable UNC path provided in device string! [ 1143.818076][T21176] [ 1143.897236][T21176] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1144.485368][T21199] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3308'. [ 1144.597035][T21193] FAULT_INJECTION: forcing a failure. [ 1144.597035][T21193] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.644607][T21193] CPU: 1 UID: 0 PID: 21193 Comm: syz.2.3307 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1144.644643][T21193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1144.644658][T21193] Call Trace: [ 1144.644666][T21193] [ 1144.644675][T21193] dump_stack_lvl+0x16c/0x1f0 [ 1144.644723][T21193] should_fail_ex+0x512/0x640 [ 1144.644758][T21193] ? fs_reclaim_acquire+0xae/0x150 [ 1144.644790][T21193] ? tomoyo_encode2+0x100/0x3e0 [ 1144.644821][T21193] should_failslab+0xc2/0x120 [ 1144.644845][T21193] __kmalloc_noprof+0xd2/0x510 [ 1144.644881][T21193] ? d_absolute_path+0x136/0x1a0 [ 1144.644911][T21193] tomoyo_encode2+0x100/0x3e0 [ 1144.644948][T21193] tomoyo_encode+0x29/0x50 [ 1144.644979][T21193] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1144.645022][T21193] tomoyo_path_number_perm+0x245/0x580 [ 1144.645050][T21193] ? tomoyo_path_number_perm+0x237/0x580 [ 1144.645081][T21193] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1144.645112][T21193] ? find_held_lock+0x2b/0x80 [ 1144.645162][T21193] ? find_held_lock+0x2b/0x80 [ 1144.645185][T21193] ? hook_file_ioctl_common+0x145/0x410 [ 1144.645218][T21193] ? __fget_files+0x20e/0x3c0 [ 1144.645257][T21193] security_file_ioctl+0x9b/0x240 [ 1144.645289][T21193] __x64_sys_ioctl+0xb7/0x210 [ 1144.645321][T21193] do_syscall_64+0xcd/0x490 [ 1144.645359][T21193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.645383][T21193] RIP: 0033:0x7f0027b8e929 [ 1144.645403][T21193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.645426][T21193] RSP: 002b:00007f00259f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1144.645449][T21193] RAX: ffffffffffffffda RBX: 00007f0027db6080 RCX: 00007f0027b8e929 [ 1144.645480][T21193] RDX: 0000000000000000 RSI: 0000000040046f41 RDI: 0000000000000008 [ 1144.645495][T21193] RBP: 00007f00259f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.645509][T21193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.645524][T21193] R13: 0000000000000000 R14: 00007f0027db6080 R15: 00007ffd23fb0dc8 [ 1144.645570][T21193] [ 1144.645592][T21193] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1144.697691][T21200] CIFS mount error: No usable UNC path provided in device string! [ 1144.697691][T21200] [ 1144.877256][T21199] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3308'. [ 1144.877461][T21200] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1144.974298][T21193] ubi0: detaching mtd0 [ 1145.025316][T21193] ubi0: mtd0 is detached [ 1147.190525][T21253] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1147.525431][T21251] CIFS mount error: No usable UNC path provided in device string! [ 1147.525431][T21251] [ 1147.535717][T21251] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1147.704713][T21259] openvswitch: netlink: Flow key attr not present in new flow. [ 1148.820843][T21271] serio: Serial port pty238 [ 1151.673616][T21308] FAULT_INJECTION: forcing a failure. [ 1151.673616][T21308] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.735661][T21308] CPU: 1 UID: 0 PID: 21308 Comm: syz.1.3324 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1151.735708][T21308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1151.735727][T21308] Call Trace: [ 1151.735743][T21308] [ 1151.735756][T21308] dump_stack_lvl+0x16c/0x1f0 [ 1151.735813][T21308] should_fail_ex+0x512/0x640 [ 1151.735871][T21308] should_failslab+0xc2/0x120 [ 1151.735906][T21308] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1151.735958][T21308] ? skb_clone+0x190/0x3f0 [ 1151.736013][T21308] skb_clone+0x190/0x3f0 [ 1151.736076][T21308] netlink_deliver_tap+0xabd/0xd30 [ 1151.736119][T21308] netlink_unicast+0x5df/0x7f0 [ 1151.736159][T21308] ? __pfx_netlink_unicast+0x10/0x10 [ 1151.736207][T21308] netlink_sendmsg+0x8d1/0xdd0 [ 1151.736250][T21308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.736301][T21308] ____sys_sendmsg+0xa98/0xc70 [ 1151.736339][T21308] ? copy_msghdr_from_user+0x10a/0x160 [ 1151.736393][T21308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1151.736451][T21308] ___sys_sendmsg+0x134/0x1d0 [ 1151.736502][T21308] ? __pfx____sys_sendmsg+0x10/0x10 [ 1151.736548][T21308] ? __lock_acquire+0x622/0x1c90 [ 1151.736645][T21308] __sys_sendmsg+0x16d/0x220 [ 1151.736695][T21308] ? __pfx___sys_sendmsg+0x10/0x10 [ 1151.736773][T21308] do_syscall_64+0xcd/0x490 [ 1151.736828][T21308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.736862][T21308] RIP: 0033:0x7f29d018e929 [ 1151.736888][T21308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.736920][T21308] RSP: 002b:00007f29d0fb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.736951][T21308] RAX: ffffffffffffffda RBX: 00007f29d03b5fa0 RCX: 00007f29d018e929 [ 1151.736973][T21308] RDX: 0000000000040040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1151.736995][T21308] RBP: 00007f29d0fb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.737015][T21308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.737035][T21308] R13: 0000000000000000 R14: 00007f29d03b5fa0 R15: 00007ffd8ba34ce8 [ 1151.737084][T21308] [ 1151.959752][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'. [ 1152.023939][T21312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3325'. [ 1152.629204][T21319] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3327'. [ 1152.644868][T21319] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3327'. [ 1152.665907][T21319] CIFS mount error: No usable UNC path provided in device string! [ 1152.665907][T21319] [ 1152.676208][T21319] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1152.885749][T21324] FAULT_INJECTION: forcing a failure. [ 1152.885749][T21324] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.060901][T21324] CPU: 0 UID: 0 PID: 21324 Comm: syz.2.3329 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1153.060947][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1153.060967][T21324] Call Trace: [ 1153.060978][T21324] [ 1153.060991][T21324] dump_stack_lvl+0x16c/0x1f0 [ 1153.061047][T21324] should_fail_ex+0x512/0x640 [ 1153.061095][T21324] ? fs_reclaim_acquire+0xae/0x150 [ 1153.061139][T21324] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1153.061188][T21324] should_failslab+0xc2/0x120 [ 1153.061221][T21324] __kmalloc_noprof+0xd2/0x510 [ 1153.061281][T21324] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1153.061336][T21324] ? tomoyo_profile+0x47/0x60 [ 1153.061371][T21324] tomoyo_path_number_perm+0x245/0x580 [ 1153.061413][T21324] ? tomoyo_path_number_perm+0x237/0x580 [ 1153.061459][T21324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1153.061504][T21324] ? find_held_lock+0x2b/0x80 [ 1153.061578][T21324] ? find_held_lock+0x2b/0x80 [ 1153.061612][T21324] ? hook_file_ioctl_common+0x145/0x410 [ 1153.061672][T21324] ? __fget_files+0x20e/0x3c0 [ 1153.061729][T21324] security_file_ioctl+0x9b/0x240 [ 1153.061773][T21324] __x64_sys_ioctl+0xb7/0x210 [ 1153.061819][T21324] do_syscall_64+0xcd/0x490 [ 1153.061873][T21324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.061907][T21324] RIP: 0033:0x7f0027b8e929 [ 1153.061934][T21324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.061966][T21324] RSP: 002b:00007f002892c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.061997][T21324] RAX: ffffffffffffffda RBX: 00007f0027db5fa0 RCX: 00007f0027b8e929 [ 1153.062019][T21324] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000009 [ 1153.062040][T21324] RBP: 00007f002892c090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.062062][T21324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.062081][T21324] R13: 0000000000000000 R14: 00007f0027db5fa0 R15: 00007ffd23fb0dc8 [ 1153.062124][T21324] [ 1153.266853][T21324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1153.543906][T21331] program syz.4.3330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1153.817178][T21334] Ignoring unsupported numa_zonelist_order value: [ 1153.817178][T21334] [ 1155.212751][T21359] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1155.283242][T21359] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1155.418369][T21359] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1155.532702][T21359] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1155.595884][T21359] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1155.610319][T21357] CIFS mount error: No usable UNC path provided in device string! [ 1155.610319][T21357] [ 1155.620630][T21357] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1156.068606][T21362] serio: Serial port pty238 [ 1156.116300][T21369] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1156.235752][T21367] CIFS mount error: No usable UNC path provided in device string! [ 1156.235752][T21367] [ 1156.264058][T21367] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1157.103088][T21375] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 1157.364802][T21377] serio: Serial port pty238 [ 1157.467206][T21378] FAULT_INJECTION: forcing a failure. [ 1157.467206][T21378] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.539208][T21378] CPU: 1 UID: 0 PID: 21378 Comm: syz.2.3341 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1157.539262][T21378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1157.539284][T21378] Call Trace: [ 1157.539297][T21378] [ 1157.539311][T21378] dump_stack_lvl+0x16c/0x1f0 [ 1157.539372][T21378] should_fail_ex+0x512/0x640 [ 1157.539423][T21378] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1157.539497][T21378] should_failslab+0xc2/0x120 [ 1157.539533][T21378] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1157.539590][T21378] ? __d_alloc+0x31/0xaa0 [ 1157.539621][T21378] ? stack_trace_save+0x8e/0xc0 [ 1157.539665][T21378] __d_alloc+0x31/0xaa0 [ 1157.539702][T21378] d_alloc+0x4a/0x1e0 [ 1157.539735][T21378] d_alloc_parallel+0xe3/0x12e0 [ 1157.539789][T21378] ? find_held_lock+0x2b/0x80 [ 1157.539828][T21378] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1157.539876][T21378] ? __d_lookup+0x266/0x4a0 [ 1157.539929][T21378] lookup_open.isra.0+0x665/0x1580 [ 1157.539986][T21378] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1157.540056][T21378] ? mnt_get_write_access+0x20c/0x300 [ 1157.540103][T21378] path_openat+0x893/0x2cb0 [ 1157.540170][T21378] ? __pfx_path_openat+0x10/0x10 [ 1157.540225][T21378] ? __lock_acquire+0xb8a/0x1c90 [ 1157.540277][T21378] do_filp_open+0x20b/0x470 [ 1157.540330][T21378] ? __pfx_do_filp_open+0x10/0x10 [ 1157.540414][T21378] ? alloc_fd+0x471/0x7d0 [ 1157.540482][T21378] do_sys_openat2+0x11b/0x1d0 [ 1157.540523][T21378] ? __pfx_do_sys_openat2+0x10/0x10 [ 1157.540567][T21378] ? __sys_sendmsg+0x18c/0x220 [ 1157.540630][T21378] __x64_sys_openat+0x174/0x210 [ 1157.540671][T21378] ? __pfx___x64_sys_openat+0x10/0x10 [ 1157.540731][T21378] do_syscall_64+0xcd/0x490 [ 1157.540788][T21378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.540824][T21378] RIP: 0033:0x7f0027b8e929 [ 1157.540852][T21378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.540887][T21378] RSP: 002b:00007f00259f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1157.540921][T21378] RAX: ffffffffffffffda RBX: 00007f0027db6080 RCX: 00007f0027b8e929 [ 1157.540945][T21378] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1157.540968][T21378] RBP: 00007f0027c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1157.540989][T21378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.541010][T21378] R13: 0000000000000000 R14: 00007f0027db6080 R15: 00007ffd23fb0dc8 [ 1157.541054][T21378] [ 1158.033524][T21388] FAULT_INJECTION: forcing a failure. [ 1158.033524][T21388] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.109131][T21388] CPU: 1 UID: 0 PID: 21388 Comm: syz.3.3342 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1158.109182][T21388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1158.109203][T21388] Call Trace: [ 1158.109214][T21388] [ 1158.109229][T21388] dump_stack_lvl+0x16c/0x1f0 [ 1158.109287][T21388] should_fail_ex+0x512/0x640 [ 1158.109339][T21388] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1158.109411][T21388] should_failslab+0xc2/0x120 [ 1158.109447][T21388] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1158.109504][T21388] ? __d_alloc+0x31/0xaa0 [ 1158.109535][T21388] ? stack_trace_save+0x8e/0xc0 [ 1158.109580][T21388] __d_alloc+0x31/0xaa0 [ 1158.109616][T21388] d_alloc+0x4a/0x1e0 [ 1158.109649][T21388] d_alloc_parallel+0xe3/0x12e0 [ 1158.109705][T21388] ? find_held_lock+0x2b/0x80 [ 1158.109744][T21388] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1158.109792][T21388] ? __d_lookup+0x266/0x4a0 [ 1158.109844][T21388] lookup_open.isra.0+0x665/0x1580 [ 1158.109900][T21388] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1158.109972][T21388] ? mnt_get_write_access+0x20c/0x300 [ 1158.110019][T21388] path_openat+0x893/0x2cb0 [ 1158.110086][T21388] ? __pfx_path_openat+0x10/0x10 [ 1158.110140][T21388] ? __lock_acquire+0xb8a/0x1c90 [ 1158.110194][T21388] do_filp_open+0x20b/0x470 [ 1158.110246][T21388] ? __pfx_do_filp_open+0x10/0x10 [ 1158.110330][T21388] ? alloc_fd+0x471/0x7d0 [ 1158.110390][T21388] do_sys_openat2+0x11b/0x1d0 [ 1158.110442][T21388] ? __pfx_do_sys_openat2+0x10/0x10 [ 1158.110500][T21388] __x64_sys_openat+0x174/0x210 [ 1158.110542][T21388] ? __pfx___x64_sys_openat+0x10/0x10 [ 1158.110602][T21388] do_syscall_64+0xcd/0x490 [ 1158.110656][T21388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.110689][T21388] RIP: 0033:0x7f31c5f8e929 [ 1158.110718][T21388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.110753][T21388] RSP: 002b:00007f31c6e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1158.110787][T21388] RAX: ffffffffffffffda RBX: 00007f31c61b6080 RCX: 00007f31c5f8e929 [ 1158.110810][T21388] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1158.110833][T21388] RBP: 00007f31c6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1158.110855][T21388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.110875][T21388] R13: 0000000000000000 R14: 00007f31c61b6080 R15: 00007fff3f3189d8 [ 1158.110918][T21388] [ 1158.970238][T21402] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 1159.119629][T21398] FAULT_INJECTION: forcing a failure. [ 1159.119629][T21398] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.329109][T21398] CPU: 0 UID: 0 PID: 21398 Comm: syz.2.3345 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1159.329145][T21398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1159.329160][T21398] Call Trace: [ 1159.329168][T21398] [ 1159.329177][T21398] dump_stack_lvl+0x16c/0x1f0 [ 1159.329218][T21398] should_fail_ex+0x512/0x640 [ 1159.329259][T21398] should_failslab+0xc2/0x120 [ 1159.329284][T21398] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1159.329323][T21398] ? skb_clone+0x190/0x3f0 [ 1159.329363][T21398] skb_clone+0x190/0x3f0 [ 1159.329400][T21398] netlink_deliver_tap+0xabd/0xd30 [ 1159.329431][T21398] netlink_unicast+0x5df/0x7f0 [ 1159.329459][T21398] ? __pfx_netlink_unicast+0x10/0x10 [ 1159.329493][T21398] netlink_sendmsg+0x8d1/0xdd0 [ 1159.329523][T21398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.329559][T21398] ____sys_sendmsg+0xa98/0xc70 [ 1159.329590][T21398] ? copy_msghdr_from_user+0x10a/0x160 [ 1159.329626][T21398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1159.329667][T21398] ___sys_sendmsg+0x134/0x1d0 [ 1159.329704][T21398] ? __pfx____sys_sendmsg+0x10/0x10 [ 1159.329738][T21398] ? __lock_acquire+0x622/0x1c90 [ 1159.329806][T21398] __sys_sendmsg+0x16d/0x220 [ 1159.329844][T21398] ? __pfx___sys_sendmsg+0x10/0x10 [ 1159.329904][T21398] do_syscall_64+0xcd/0x490 [ 1159.329944][T21398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.329969][T21398] RIP: 0033:0x7f0027b8e929 [ 1159.329988][T21398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.330011][T21398] RSP: 002b:00007f002892c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1159.330040][T21398] RAX: ffffffffffffffda RBX: 00007f0027db5fa0 RCX: 00007f0027b8e929 [ 1159.330057][T21398] RDX: 000000002000c840 RSI: 0000200000000100 RDI: 0000000000000003 [ 1159.330072][T21398] RBP: 00007f002892c090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.330087][T21398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.330102][T21398] R13: 0000000000000000 R14: 00007f0027db5fa0 R15: 00007ffd23fb0dc8 [ 1159.330136][T21398] [ 1159.816377][T21405] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1160.095133][T21406] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 1160.710373][T21412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.719574][T21412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.557085][T21429] FAULT_INJECTION: forcing a failure. [ 1161.557085][T21429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1161.573340][T21429] CPU: 1 UID: 0 PID: 21429 Comm: syz.1.3354 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1161.573386][T21429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1161.573406][T21429] Call Trace: [ 1161.573417][T21429] [ 1161.573431][T21429] dump_stack_lvl+0x16c/0x1f0 [ 1161.573489][T21429] should_fail_ex+0x512/0x640 [ 1161.573550][T21429] should_fail_alloc_page+0xe7/0x130 [ 1161.573588][T21429] prepare_alloc_pages+0x3c2/0x610 [ 1161.573632][T21429] ? rcu_is_watching+0x12/0xc0 [ 1161.573672][T21429] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1161.573712][T21429] ? kasan_save_stack+0x42/0x60 [ 1161.573753][T21429] ? __lock_acquire+0x622/0x1c90 [ 1161.573797][T21429] ? __vmf_anon_prepare+0x11c/0x240 [ 1161.573829][T21429] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1161.573868][T21429] ? __lock_acquire+0x622/0x1c90 [ 1161.573912][T21429] ? __lock_acquire+0x622/0x1c90 [ 1161.573948][T21429] ? __lock_acquire+0x622/0x1c90 [ 1161.573980][T21429] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.574021][T21429] ? policy_nodemask+0xea/0x4e0 [ 1161.574048][T21429] alloc_pages_mpol+0x1fb/0x550 [ 1161.574074][T21429] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1161.574107][T21429] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1161.574139][T21429] vma_alloc_folio_noprof+0xed/0x1e0 [ 1161.574168][T21429] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1161.574197][T21429] ? find_held_lock+0x2b/0x80 [ 1161.574222][T21429] ? __handle_mm_fault+0x1092/0x5490 [ 1161.574260][T21429] __handle_mm_fault+0x2f21/0x5490 [ 1161.574303][T21429] ? __pfx___handle_mm_fault+0x10/0x10 [ 1161.574338][T21429] ? __pte_offset_map_lock+0x174/0x310 [ 1161.574364][T21429] ? find_held_lock+0x2b/0x80 [ 1161.574388][T21429] ? find_held_lock+0x2b/0x80 [ 1161.574420][T21429] ? follow_page_pte+0x3af/0x14c0 [ 1161.574456][T21429] handle_mm_fault+0x589/0xd10 [ 1161.574495][T21429] __get_user_pages+0x589/0x3b80 [ 1161.574533][T21429] ? __pfx_mt_find+0x10/0x10 [ 1161.574556][T21429] ? __pfx___get_user_pages+0x10/0x10 [ 1161.574597][T21429] populate_vma_page_range+0x278/0x3a0 [ 1161.574631][T21429] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1161.574662][T21429] ? __pfx_find_vma_intersection+0x10/0x10 [ 1161.574693][T21429] ? do_mmap+0x69c/0x1210 [ 1161.574724][T21429] __mm_populate+0x1d8/0x380 [ 1161.574756][T21429] ? __pfx___mm_populate+0x10/0x10 [ 1161.574797][T21429] ? up_write+0x1b2/0x520 [ 1161.574838][T21429] vm_mmap_pgoff+0x362/0x450 [ 1161.574869][T21429] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1161.574902][T21429] ? __x64_sys_futex+0x1e0/0x4c0 [ 1161.574933][T21429] ? __x64_sys_futex+0x1e9/0x4c0 [ 1161.574968][T21429] ksys_mmap_pgoff+0x7d/0x5c0 [ 1161.574995][T21429] ? xfd_validate_state+0x61/0x180 [ 1161.575028][T21429] ? __pfx_do_writev+0x10/0x10 [ 1161.575066][T21429] __x64_sys_mmap+0x125/0x190 [ 1161.575104][T21429] do_syscall_64+0xcd/0x490 [ 1161.575145][T21429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.575169][T21429] RIP: 0033:0x7f29d018e929 [ 1161.575189][T21429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.575213][T21429] RSP: 002b:00007f29d0fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1161.575236][T21429] RAX: ffffffffffffffda RBX: 00007f29d03b5fa0 RCX: 00007f29d018e929 [ 1161.575253][T21429] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1161.575268][T21429] RBP: 00007f29d0210b39 R08: 0000000000000002 R09: 0000000000008000 [ 1161.575283][T21429] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1161.575298][T21429] R13: 0000000000000000 R14: 00007f29d03b5fa0 R15: 00007ffd8ba34ce8 [ 1161.575328][T21429] [ 1161.935341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.542135][T21458] FAULT_INJECTION: forcing a failure. [ 1164.542135][T21458] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.786593][T21458] CPU: 1 UID: 0 PID: 21458 Comm: syz.1.3358 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1164.786645][T21458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1164.786667][T21458] Call Trace: [ 1164.786678][T21458] [ 1164.786691][T21458] dump_stack_lvl+0x16c/0x1f0 [ 1164.786761][T21458] should_fail_ex+0x512/0x640 [ 1164.786814][T21458] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1164.786875][T21458] should_failslab+0xc2/0x120 [ 1164.786911][T21458] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1164.786969][T21458] ? __d_alloc+0x31/0xaa0 [ 1164.787011][T21458] __d_alloc+0x31/0xaa0 [ 1164.787044][T21458] ? __pfx_pidfs_register_pid+0x10/0x10 [ 1164.787095][T21458] d_alloc_pseudo+0x1c/0xc0 [ 1164.787137][T21458] alloc_file_pseudo+0xcf/0x230 [ 1164.787181][T21458] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1164.787223][T21458] ? __pfx_unix_socketpair+0x10/0x10 [ 1164.787280][T21458] sock_alloc_file+0x50/0x210 [ 1164.787315][T21458] __sys_socketpair+0x31c/0x5a0 [ 1164.787362][T21458] ? __pfx___sys_socketpair+0x10/0x10 [ 1164.787402][T21458] ? fput+0x70/0xf0 [ 1164.787441][T21458] ? xfd_validate_state+0x61/0x180 [ 1164.787490][T21458] ? __pfx_do_writev+0x10/0x10 [ 1164.787547][T21458] __x64_sys_socketpair+0x96/0x100 [ 1164.787598][T21458] ? lockdep_hardirqs_on+0x7c/0x110 [ 1164.787651][T21458] do_syscall_64+0xcd/0x490 [ 1164.787717][T21458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.787756][T21458] RIP: 0033:0x7f29d018e929 [ 1164.787786][T21458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.787821][T21458] RSP: 002b:00007f29d0fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1164.787855][T21458] RAX: ffffffffffffffda RBX: 00007f29d03b5fa0 RCX: 00007f29d018e929 [ 1164.787880][T21458] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1164.787901][T21458] RBP: 00007f29d0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1164.787922][T21458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.787941][T21458] R13: 0000000000000000 R14: 00007f29d03b5fa0 R15: 00007ffd8ba34ce8 [ 1164.787984][T21458] [ 1165.007659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.969156][T14626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.592254][T14626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.716947][T21479] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3362'. [ 1166.809492][T21478] CIFS mount error: No usable UNC path provided in device string! [ 1166.809492][T21478] [ 1166.819895][T21478] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1167.169175][T14626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.411844][T21483] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 1168.691745][T14626] team0: left allmulticast mode [ 1168.733489][T14626] team_slave_0: left allmulticast mode [ 1168.781832][T14626] team_slave_1: left allmulticast mode [ 1168.855571][T14626] team0: left promiscuous mode [ 1168.900305][T14626] team_slave_0: left promiscuous mode [ 1168.945552][T14626] team_slave_1: left promiscuous mode [ 1168.951619][T14626] bridge0: port 2(team0) entered disabled state [ 1169.030514][T14626] bridge_slave_0: left allmulticast mode [ 1169.060845][T14626] bridge_slave_0: left promiscuous mode [ 1169.083613][T14626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.359381][T21505] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1170.049335][T21524] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3369'. [ 1171.197632][T14626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.220079][T14626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.240473][T14626] bond0 (unregistering): Released all slaves [ 1172.649905][T14626] hsr_slave_0: left promiscuous mode [ 1172.671021][T14626] hsr_slave_1: left promiscuous mode [ 1172.680752][T14626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.700424][T14626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.719453][T14626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.739845][T14626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.873085][T14626] veth1_macvtap: left promiscuous mode [ 1172.892672][T14626] veth0_macvtap: left promiscuous mode [ 1172.912120][T14626] veth1_vlan: left promiscuous mode [ 1172.912846][T21562] serio: Serial port pty238 [ 1172.939164][T14626] veth0_vlan: left promiscuous mode [ 1173.075577][T21568] FAULT_INJECTION: forcing a failure. [ 1173.075577][T21568] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.180712][T21568] CPU: 1 UID: 0 PID: 21568 Comm: syz.1.3375 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1173.180765][T21568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1173.180787][T21568] Call Trace: [ 1173.180799][T21568] [ 1173.180812][T21568] dump_stack_lvl+0x16c/0x1f0 [ 1173.180870][T21568] should_fail_ex+0x512/0x640 [ 1173.180922][T21568] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1173.180982][T21568] should_failslab+0xc2/0x120 [ 1173.181017][T21568] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1173.181071][T21568] ? __d_alloc+0x31/0xaa0 [ 1173.181100][T21568] ? stack_trace_save+0x8e/0xc0 [ 1173.181143][T21568] __d_alloc+0x31/0xaa0 [ 1173.181181][T21568] d_alloc+0x4a/0x1e0 [ 1173.181215][T21568] d_alloc_parallel+0xe3/0x12e0 [ 1173.181269][T21568] ? find_held_lock+0x2b/0x80 [ 1173.181307][T21568] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1173.181356][T21568] ? __d_lookup+0x266/0x4a0 [ 1173.181408][T21568] lookup_open.isra.0+0x665/0x1580 [ 1173.181464][T21568] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1173.181534][T21568] ? mnt_get_write_access+0x20c/0x300 [ 1173.181591][T21568] path_openat+0x893/0x2cb0 [ 1173.181659][T21568] ? __pfx_path_openat+0x10/0x10 [ 1173.181716][T21568] ? __lock_acquire+0xb8a/0x1c90 [ 1173.181770][T21568] do_filp_open+0x20b/0x470 [ 1173.181822][T21568] ? __pfx_do_filp_open+0x10/0x10 [ 1173.181906][T21568] ? alloc_fd+0x471/0x7d0 [ 1173.181966][T21568] do_sys_openat2+0x11b/0x1d0 [ 1173.182006][T21568] ? __pfx_do_sys_openat2+0x10/0x10 [ 1173.182061][T21568] __x64_sys_openat+0x174/0x210 [ 1173.182103][T21568] ? __pfx___x64_sys_openat+0x10/0x10 [ 1173.182164][T21568] do_syscall_64+0xcd/0x490 [ 1173.182221][T21568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.182257][T21568] RIP: 0033:0x7f29d018e929 [ 1173.182285][T21568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.182319][T21568] RSP: 002b:00007f29d0f8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1173.182350][T21568] RAX: ffffffffffffffda RBX: 00007f29d03b6080 RCX: 00007f29d018e929 [ 1173.182373][T21568] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1173.182394][T21568] RBP: 00007f29d0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1173.182416][T21568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.182436][T21568] R13: 0000000000000000 R14: 00007f29d03b6080 R15: 00007ffd8ba34ce8 [ 1173.182480][T21568] [ 1173.432950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.129416][T21578] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 1174.715971][T21584] serio: Serial port pty238 [ 1174.837254][T21584] FAULT_INJECTION: forcing a failure. [ 1174.837254][T21584] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.902384][T21584] CPU: 1 UID: 0 PID: 21584 Comm: syz.2.3378 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1174.902434][T21584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1174.902455][T21584] Call Trace: [ 1174.902466][T21584] [ 1174.902480][T21584] dump_stack_lvl+0x16c/0x1f0 [ 1174.902537][T21584] should_fail_ex+0x512/0x640 [ 1174.902586][T21584] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1174.902650][T21584] should_failslab+0xc2/0x120 [ 1174.902684][T21584] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1174.902736][T21584] ? alloc_inode+0xc3/0x240 [ 1174.902777][T21584] alloc_inode+0xc3/0x240 [ 1174.902815][T21584] iget_locked+0x2e4/0x830 [ 1174.902856][T21584] ? __pfx_iget_locked+0x10/0x10 [ 1174.902899][T21584] ? find_held_lock+0x2b/0x80 [ 1174.902936][T21584] ? kernfs_root+0xee/0x2a0 [ 1174.902994][T21584] kernfs_get_inode+0x48/0x460 [ 1174.903041][T21584] kernfs_iop_lookup+0x1a7/0x2d0 [ 1174.903094][T21584] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 1174.903146][T21584] lookup_open.isra.0+0x4d7/0x1580 [ 1174.903201][T21584] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1174.903271][T21584] ? mnt_get_write_access+0x20c/0x300 [ 1174.903317][T21584] path_openat+0x893/0x2cb0 [ 1174.903382][T21584] ? __pfx_path_openat+0x10/0x10 [ 1174.903559][T21584] ? __lock_acquire+0xb8a/0x1c90 [ 1174.903628][T21584] do_filp_open+0x20b/0x470 [ 1174.903702][T21584] ? __pfx_do_filp_open+0x10/0x10 [ 1174.903788][T21584] ? alloc_fd+0x471/0x7d0 [ 1174.903853][T21584] do_sys_openat2+0x11b/0x1d0 [ 1174.903896][T21584] ? __pfx_do_sys_openat2+0x10/0x10 [ 1174.903940][T21584] ? __sys_sendmsg+0x18c/0x220 [ 1174.904006][T21584] __x64_sys_openat+0x174/0x210 [ 1174.904049][T21584] ? __pfx___x64_sys_openat+0x10/0x10 [ 1174.904111][T21584] do_syscall_64+0xcd/0x490 [ 1174.904167][T21584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.904205][T21584] RIP: 0033:0x7f0027b8e929 [ 1174.904235][T21584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.904270][T21584] RSP: 002b:00007f002892c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1174.904304][T21584] RAX: ffffffffffffffda RBX: 00007f0027db5fa0 RCX: 00007f0027b8e929 [ 1174.904329][T21584] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1174.904351][T21584] RBP: 00007f0027c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1174.904372][T21584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.904392][T21584] R13: 0000000000000000 R14: 00007f0027db5fa0 R15: 00007ffd23fb0dc8 [ 1174.904438][T21584] [ 1176.850795][T14626] team0 (unregistering): Port device team_slave_1 removed [ 1177.158977][T14626] team0 (unregistering): Port device team_slave_0 removed [ 1177.524296][T21626] serio: Serial port pty238 [ 1177.648720][T21628] FAULT_INJECTION: forcing a failure. [ 1177.648720][T21628] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.676994][T21628] CPU: 0 UID: 0 PID: 21628 Comm: syz.2.3388 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1177.677046][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1177.677068][T21628] Call Trace: [ 1177.677089][T21628] [ 1177.677103][T21628] dump_stack_lvl+0x16c/0x1f0 [ 1177.677164][T21628] should_fail_ex+0x512/0x640 [ 1177.677215][T21628] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1177.677275][T21628] should_failslab+0xc2/0x120 [ 1177.677310][T21628] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1177.677364][T21628] ? __d_alloc+0x31/0xaa0 [ 1177.677393][T21628] ? stack_trace_save+0x8e/0xc0 [ 1177.677436][T21628] __d_alloc+0x31/0xaa0 [ 1177.677473][T21628] d_alloc+0x4a/0x1e0 [ 1177.677507][T21628] d_alloc_parallel+0xe3/0x12e0 [ 1177.677560][T21628] ? find_held_lock+0x2b/0x80 [ 1177.677600][T21628] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1177.677651][T21628] ? __d_lookup+0x266/0x4a0 [ 1177.677705][T21628] lookup_open.isra.0+0x665/0x1580 [ 1177.677762][T21628] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1177.677833][T21628] ? mnt_get_write_access+0x20c/0x300 [ 1177.677880][T21628] path_openat+0x893/0x2cb0 [ 1177.677946][T21628] ? __pfx_path_openat+0x10/0x10 [ 1177.678001][T21628] ? __lock_acquire+0xb8a/0x1c90 [ 1177.678054][T21628] do_filp_open+0x20b/0x470 [ 1177.678117][T21628] ? __pfx_do_filp_open+0x10/0x10 [ 1177.678203][T21628] ? alloc_fd+0x471/0x7d0 [ 1177.678263][T21628] do_sys_openat2+0x11b/0x1d0 [ 1177.678303][T21628] ? __pfx_do_sys_openat2+0x10/0x10 [ 1177.678361][T21628] __x64_sys_openat+0x174/0x210 [ 1177.678404][T21628] ? __pfx___x64_sys_openat+0x10/0x10 [ 1177.678443][T21628] ? ksys_write+0x1ac/0x250 [ 1177.678507][T21628] do_syscall_64+0xcd/0x490 [ 1177.678564][T21628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.678599][T21628] RIP: 0033:0x7f0027b8e929 [ 1177.678627][T21628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1177.678662][T21628] RSP: 002b:00007f00259f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1177.678696][T21628] RAX: ffffffffffffffda RBX: 00007f0027db6080 RCX: 00007f0027b8e929 [ 1177.678721][T21628] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1177.678744][T21628] RBP: 00007f0027c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1177.678766][T21628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1177.678787][T21628] R13: 0000000000000000 R14: 00007f0027db6080 R15: 00007ffd23fb0dc8 [ 1177.678832][T21628] [ 1177.924898][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.583242][T21646] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1179.628714][T21646] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1179.674996][T21646] CIFS mount error: No usable UNC path provided in device string! [ 1179.674996][T21646] [ 1179.685477][T21646] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1180.467567][T21655] serio: Serial port pty238 [ 1180.582489][T21655] FAULT_INJECTION: forcing a failure. [ 1180.582489][T21655] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.606494][T21655] CPU: 1 UID: 0 PID: 21655 Comm: syz.3.3392 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1180.606549][T21655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1180.606571][T21655] Call Trace: [ 1180.606583][T21655] [ 1180.606597][T21655] dump_stack_lvl+0x16c/0x1f0 [ 1180.606657][T21655] should_fail_ex+0x512/0x640 [ 1180.606709][T21655] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1180.606769][T21655] should_failslab+0xc2/0x120 [ 1180.606813][T21655] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1180.606870][T21655] ? __d_alloc+0x31/0xaa0 [ 1180.606899][T21655] ? lockdep_hardirqs_on+0x7c/0x110 [ 1180.606954][T21655] __d_alloc+0x31/0xaa0 [ 1180.606992][T21655] d_alloc+0x4a/0x1e0 [ 1180.607025][T21655] d_alloc_parallel+0xe3/0x12e0 [ 1180.607077][T21655] ? find_held_lock+0x2b/0x80 [ 1180.607117][T21655] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1180.607165][T21655] ? __d_lookup+0x266/0x4a0 [ 1180.607218][T21655] lookup_open.isra.0+0x665/0x1580 [ 1180.607273][T21655] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1180.607344][T21655] ? mnt_get_write_access+0x20c/0x300 [ 1180.607391][T21655] path_openat+0x893/0x2cb0 [ 1180.607457][T21655] ? __pfx_path_openat+0x10/0x10 [ 1180.607518][T21655] ? __lock_acquire+0xb8a/0x1c90 [ 1180.607572][T21655] do_filp_open+0x20b/0x470 [ 1180.607624][T21655] ? __pfx_do_filp_open+0x10/0x10 [ 1180.607706][T21655] ? alloc_fd+0x471/0x7d0 [ 1180.607767][T21655] do_sys_openat2+0x11b/0x1d0 [ 1180.607818][T21655] ? __pfx_do_sys_openat2+0x10/0x10 [ 1180.607862][T21655] ? __sys_sendmsg+0x18c/0x220 [ 1180.607927][T21655] __x64_sys_openat+0x174/0x210 [ 1180.607970][T21655] ? __pfx___x64_sys_openat+0x10/0x10 [ 1180.608031][T21655] do_syscall_64+0xcd/0x490 [ 1180.608088][T21655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.608123][T21655] RIP: 0033:0x7f31c5f8e929 [ 1180.608152][T21655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.608186][T21655] RSP: 002b:00007f31c6e62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1180.608219][T21655] RAX: ffffffffffffffda RBX: 00007f31c61b5fa0 RCX: 00007f31c5f8e929 [ 1180.608242][T21655] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1180.608263][T21655] RBP: 00007f31c6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1180.608284][T21655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.608303][T21655] R13: 0000000000000000 R14: 00007f31c61b5fa0 R15: 00007fff3f3189d8 [ 1180.608347][T21655] [ 1181.298269][T21667] random: crng reseeded on system resumption [ 1181.637387][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3399'. [ 1183.036099][T21704] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1183.099990][T21710] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1183.112425][T21710] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1183.168913][T21710] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1183.180222][T21710] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1183.257099][T21704] CIFS mount error: No usable UNC path provided in device string! [ 1183.257099][T21704] [ 1183.267573][T21704] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1183.335917][ T30] audit: type=1326 audit(17113.954:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21713 comm="syz.2.3404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0027b8e929 code=0x0 [ 1184.249729][T21732] serio: Serial port pty238 [ 1184.398564][T21740] FAULT_INJECTION: forcing a failure. [ 1184.398564][T21740] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.508054][T21740] CPU: 1 UID: 0 PID: 21740 Comm: syz.4.3406 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1184.508090][T21740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1184.508105][T21740] Call Trace: [ 1184.508113][T21740] [ 1184.508123][T21740] dump_stack_lvl+0x16c/0x1f0 [ 1184.508165][T21740] should_fail_ex+0x512/0x640 [ 1184.508202][T21740] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1184.508246][T21740] should_failslab+0xc2/0x120 [ 1184.508271][T21740] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1184.508311][T21740] ? __d_alloc+0x31/0xaa0 [ 1184.508333][T21740] ? stack_trace_save+0x8e/0xc0 [ 1184.508364][T21740] __d_alloc+0x31/0xaa0 [ 1184.508389][T21740] d_alloc+0x4a/0x1e0 [ 1184.508420][T21740] d_alloc_parallel+0xe3/0x12e0 [ 1184.508458][T21740] ? find_held_lock+0x2b/0x80 [ 1184.508486][T21740] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1184.508520][T21740] ? __d_lookup+0x266/0x4a0 [ 1184.508557][T21740] lookup_open.isra.0+0x665/0x1580 [ 1184.508596][T21740] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1184.508645][T21740] ? mnt_get_write_access+0x20c/0x300 [ 1184.508678][T21740] path_openat+0x893/0x2cb0 [ 1184.508724][T21740] ? __pfx_path_openat+0x10/0x10 [ 1184.508763][T21740] ? __lock_acquire+0xb8a/0x1c90 [ 1184.508801][T21740] do_filp_open+0x20b/0x470 [ 1184.508838][T21740] ? __pfx_do_filp_open+0x10/0x10 [ 1184.508897][T21740] ? alloc_fd+0x471/0x7d0 [ 1184.508939][T21740] do_sys_openat2+0x11b/0x1d0 [ 1184.508969][T21740] ? __pfx_do_sys_openat2+0x10/0x10 [ 1184.509010][T21740] __x64_sys_openat+0x174/0x210 [ 1184.509039][T21740] ? __pfx___x64_sys_openat+0x10/0x10 [ 1184.509081][T21740] do_syscall_64+0xcd/0x490 [ 1184.509120][T21740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.509145][T21740] RIP: 0033:0x7fd18e98e929 [ 1184.509164][T21740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.509188][T21740] RSP: 002b:00007fd18f72f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1184.509210][T21740] RAX: ffffffffffffffda RBX: 00007fd18ebb6160 RCX: 00007fd18e98e929 [ 1184.509226][T21740] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1184.509242][T21740] RBP: 00007fd18ea10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1184.509257][T21740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.509271][T21740] R13: 0000000000000000 R14: 00007fd18ebb6160 R15: 00007ffed3365388 [ 1184.509302][T21740] [ 1185.324756][T21743] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 1187.247550][T21784] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1187.273041][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.280115][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.369521][T21784] CIFS mount error: No usable UNC path provided in device string! [ 1187.369521][T21784] [ 1187.380351][T21784] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1188.880305][T21789] sysfs_service_op_show: Client not running :-5: [ 1189.469281][T21814] serio: Serial port pty238 [ 1189.588048][T21820] FAULT_INJECTION: forcing a failure. [ 1189.588048][T21820] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.636021][T21820] CPU: 1 UID: 0 PID: 21820 Comm: syz.1.3419 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1189.636073][T21820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1189.636094][T21820] Call Trace: [ 1189.636107][T21820] [ 1189.636120][T21820] dump_stack_lvl+0x16c/0x1f0 [ 1189.636178][T21820] should_fail_ex+0x512/0x640 [ 1189.636231][T21820] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1189.636292][T21820] should_failslab+0xc2/0x120 [ 1189.636329][T21820] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1189.636393][T21820] ? __d_alloc+0x31/0xaa0 [ 1189.636425][T21820] ? stack_trace_save+0x8e/0xc0 [ 1189.636470][T21820] __d_alloc+0x31/0xaa0 [ 1189.636508][T21820] d_alloc+0x4a/0x1e0 [ 1189.636543][T21820] d_alloc_parallel+0xe3/0x12e0 [ 1189.636598][T21820] ? find_held_lock+0x2b/0x80 [ 1189.636637][T21820] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1189.636685][T21820] ? __d_lookup+0x266/0x4a0 [ 1189.636737][T21820] lookup_open.isra.0+0x665/0x1580 [ 1189.636794][T21820] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1189.636872][T21820] ? mnt_get_write_access+0x20c/0x300 [ 1189.636921][T21820] path_openat+0x893/0x2cb0 [ 1189.636989][T21820] ? __pfx_path_openat+0x10/0x10 [ 1189.637043][T21820] ? __lock_acquire+0xb8a/0x1c90 [ 1189.637094][T21820] do_filp_open+0x20b/0x470 [ 1189.637147][T21820] ? __pfx_do_filp_open+0x10/0x10 [ 1189.637232][T21820] ? alloc_fd+0x471/0x7d0 [ 1189.637292][T21820] do_sys_openat2+0x11b/0x1d0 [ 1189.637333][T21820] ? __pfx_do_sys_openat2+0x10/0x10 [ 1189.637392][T21820] __x64_sys_openat+0x174/0x210 [ 1189.637434][T21820] ? __pfx___x64_sys_openat+0x10/0x10 [ 1189.637495][T21820] do_syscall_64+0xcd/0x490 [ 1189.637553][T21820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.637588][T21820] RIP: 0033:0x7f29d018e929 [ 1189.637616][T21820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1189.637650][T21820] RSP: 002b:00007f29d0f8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1189.637683][T21820] RAX: ffffffffffffffda RBX: 00007f29d03b6080 RCX: 00007f29d018e929 [ 1189.637706][T21820] RDX: 000000000000a022 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1189.637728][T21820] RBP: 00007f29d0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1189.637746][T21820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.637765][T21820] R13: 0000000000000000 R14: 00007f29d03b6080 R15: 00007ffd8ba34ce8 [ 1189.637809][T21820] [ 1190.812049][T21834] random: crng reseeded on system resumption [ 1191.015264][T21845] FAULT_INJECTION: forcing a failure. [ 1191.015264][T21845] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1191.067229][T21845] CPU: 0 UID: 0 PID: 21845 Comm: syz.1.3425 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1191.067281][T21845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1191.067303][T21845] Call Trace: [ 1191.067314][T21845] [ 1191.067327][T21845] dump_stack_lvl+0x16c/0x1f0 [ 1191.067383][T21845] should_fail_ex+0x512/0x640 [ 1191.067441][T21845] get_futex_key+0x1d0/0x1540 [ 1191.067485][T21845] ? __pfx_get_futex_key+0x10/0x10 [ 1191.067542][T21845] futex_wake+0xea/0x530 [ 1191.067596][T21845] ? __pfx_futex_wake+0x10/0x10 [ 1191.067651][T21845] ? errseq_sample+0x53/0x70 [ 1191.067680][T21845] ? file_init_path+0x4fe/0x760 [ 1191.067725][T21845] do_futex+0x1e3/0x350 [ 1191.067768][T21845] ? __pfx_do_futex+0x10/0x10 [ 1191.067810][T21845] ? fd_install+0x225/0x750 [ 1191.067866][T21845] __x64_sys_futex+0x1e0/0x4c0 [ 1191.067911][T21845] ? __sys_socket+0xac/0x260 [ 1191.067951][T21845] ? __pfx___x64_sys_futex+0x10/0x10 [ 1191.068005][T21845] ? xfd_validate_state+0x61/0x180 [ 1191.068049][T21845] ? __pfx_do_writev+0x10/0x10 [ 1191.068107][T21845] do_syscall_64+0xcd/0x490 [ 1191.068162][T21845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.068194][T21845] RIP: 0033:0x7f29d018e929 [ 1191.068222][T21845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1191.068256][T21845] RSP: 002b:00007f29d0fb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1191.068288][T21845] RAX: ffffffffffffffda RBX: 00007f29d03b5fa8 RCX: 00007f29d018e929 [ 1191.068312][T21845] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f29d03b5fac [ 1191.068334][T21845] RBP: 00007f29d03b5fa0 R08: 00007f29d0fb1000 R09: 0000000000000000 [ 1191.068355][T21845] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f29d03b5fac [ 1191.068376][T21845] R13: 0000000000000000 R14: 00007ffd8ba34c00 R15: 00007ffd8ba34ce8 [ 1191.068419][T21845] [ 1196.084030][T21929] serio: Serial port pty238 [ 1196.667390][T21938] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1196.717127][T21937] CIFS mount error: No usable UNC path provided in device string! [ 1196.717127][T21937] [ 1196.727734][T21937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1197.334635][T21952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3442'. [ 1197.444885][T21952] FAULT_INJECTION: forcing a failure. [ 1197.444885][T21952] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.494611][T21952] CPU: 0 UID: 0 PID: 21952 Comm: syz.1.3442 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1197.494658][T21952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1197.494680][T21952] Call Trace: [ 1197.494691][T21952] [ 1197.494704][T21952] dump_stack_lvl+0x16c/0x1f0 [ 1197.494761][T21952] should_fail_ex+0x512/0x640 [ 1197.494818][T21952] should_failslab+0xc2/0x120 [ 1197.494853][T21952] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1197.494907][T21952] ? skb_clone+0x190/0x3f0 [ 1197.494965][T21952] skb_clone+0x190/0x3f0 [ 1197.495017][T21952] netlink_deliver_tap+0xabd/0xd30 [ 1197.495061][T21952] netlink_unicast+0x6b2/0x7f0 [ 1197.495102][T21952] ? __pfx_netlink_unicast+0x10/0x10 [ 1197.495137][T21952] ? genl_rcv_msg+0x4bb/0x800 [ 1197.495189][T21952] netlink_ack+0x696/0xb80 [ 1197.495245][T21952] netlink_rcv_skb+0x332/0x420 [ 1197.495282][T21952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1197.495326][T21952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1197.495381][T21952] ? netlink_deliver_tap+0x1ae/0xd30 [ 1197.495422][T21952] genl_rcv+0x28/0x40 [ 1197.495457][T21952] netlink_unicast+0x53a/0x7f0 [ 1197.495498][T21952] ? __pfx_netlink_unicast+0x10/0x10 [ 1197.495548][T21952] netlink_sendmsg+0x8d1/0xdd0 [ 1197.495592][T21952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.495646][T21952] ____sys_sendmsg+0xa98/0xc70 [ 1197.495685][T21952] ? copy_msghdr_from_user+0x10a/0x160 [ 1197.495736][T21952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.495796][T21952] ___sys_sendmsg+0x134/0x1d0 [ 1197.495850][T21952] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.495898][T21952] ? __lock_acquire+0x622/0x1c90 [ 1197.495998][T21952] __sys_sendmsg+0x16d/0x220 [ 1197.496051][T21952] ? __pfx___sys_sendmsg+0x10/0x10 [ 1197.496129][T21952] do_syscall_64+0xcd/0x490 [ 1197.496185][T21952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.496220][T21952] RIP: 0033:0x7f29d018e929 [ 1197.496253][T21952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.496287][T21952] RSP: 002b:00007f29d0fb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.496318][T21952] RAX: ffffffffffffffda RBX: 00007f29d03b5fa0 RCX: 00007f29d018e929 [ 1197.496340][T21952] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 1197.496360][T21952] RBP: 00007f29d0fb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.496380][T21952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.496404][T21952] R13: 0000000000000000 R14: 00007f29d03b5fa0 R15: 00007ffd8ba34ce8 [ 1197.496447][T21952] [ 1198.085868][T21956] FAULT_INJECTION: forcing a failure. [ 1198.085868][T21956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.166063][T21956] CPU: 1 UID: 0 PID: 21956 Comm: syz.2.3443 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1198.166106][T21956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.166125][T21956] Call Trace: [ 1198.166136][T21956] [ 1198.166149][T21956] dump_stack_lvl+0x16c/0x1f0 [ 1198.166204][T21956] should_fail_ex+0x512/0x640 [ 1198.166269][T21956] _copy_to_user+0x32/0xd0 [ 1198.166305][T21956] simple_read_from_buffer+0xcb/0x170 [ 1198.166356][T21956] proc_fail_nth_read+0x197/0x270 [ 1198.166405][T21956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1198.166449][T21956] ? rw_verify_area+0xcf/0x680 [ 1198.166493][T21956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1198.166534][T21956] vfs_read+0x1e4/0xc60 [ 1198.166589][T21956] ? __pfx___mutex_lock+0x10/0x10 [ 1198.166641][T21956] ? __pfx_vfs_read+0x10/0x10 [ 1198.166702][T21956] ? __fget_files+0x20e/0x3c0 [ 1198.166766][T21956] ksys_read+0x12a/0x250 [ 1198.166810][T21956] ? __pfx_ksys_read+0x10/0x10 [ 1198.166869][T21956] do_syscall_64+0xcd/0x490 [ 1198.166923][T21956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.166955][T21956] RIP: 0033:0x7f0027b8d33c [ 1198.166981][T21956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1198.167014][T21956] RSP: 002b:00007f002892c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1198.167045][T21956] RAX: ffffffffffffffda RBX: 00007f0027db5fa0 RCX: 00007f0027b8d33c [ 1198.167066][T21956] RDX: 000000000000000f RSI: 00007f002892c0a0 RDI: 0000000000000004 [ 1198.167086][T21956] RBP: 00007f002892c090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.167106][T21956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.167127][T21956] R13: 0000000000000000 R14: 00007f0027db5fa0 R15: 00007ffd23fb0dc8 [ 1198.167168][T21956] [ 1198.352815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.098948][T20656] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1201.748208][T21999] FAULT_INJECTION: forcing a failure. [ 1201.748208][T21999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.871564][T21999] CPU: 1 UID: 0 PID: 21999 Comm: syz.4.3450 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1201.871612][T21999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.871632][T21999] Call Trace: [ 1201.871644][T21999] [ 1201.871659][T21999] dump_stack_lvl+0x16c/0x1f0 [ 1201.871720][T21999] should_fail_ex+0x512/0x640 [ 1201.871784][T21999] _copy_to_user+0x32/0xd0 [ 1201.871820][T21999] simple_read_from_buffer+0xcb/0x170 [ 1201.871870][T21999] proc_fail_nth_read+0x197/0x270 [ 1201.871914][T21999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1201.871959][T21999] ? rw_verify_area+0xcf/0x680 [ 1201.872004][T21999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1201.872045][T21999] vfs_read+0x1e4/0xc60 [ 1201.872101][T21999] ? __pfx___mutex_lock+0x10/0x10 [ 1201.872154][T21999] ? __pfx_vfs_read+0x10/0x10 [ 1201.872215][T21999] ? __fget_files+0x20e/0x3c0 [ 1201.872276][T21999] ksys_read+0x12a/0x250 [ 1201.872325][T21999] ? __pfx_ksys_read+0x10/0x10 [ 1201.872388][T21999] do_syscall_64+0xcd/0x490 [ 1201.872443][T21999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.872477][T21999] RIP: 0033:0x7fd18e98d33c [ 1201.872503][T21999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1201.872536][T21999] RSP: 002b:00007fd18f750030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1201.872568][T21999] RAX: ffffffffffffffda RBX: 00007fd18ebb6080 RCX: 00007fd18e98d33c [ 1201.872590][T21999] RDX: 000000000000000f RSI: 00007fd18f7500a0 RDI: 0000000000000008 [ 1201.872610][T21999] RBP: 00007fd18f750090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.872630][T21999] R10: 000000000000026c R11: 0000000000000246 R12: 0000000000000002 [ 1201.872649][T21999] R13: 0000000000000000 R14: 00007fd18ebb6080 R15: 00007ffed3365388 [ 1201.872692][T21999] [ 1202.063859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.644483][T22018] serio: Serial port pty238 [ 1203.754174][T22023] FAULT_INJECTION: forcing a failure. [ 1203.754174][T22023] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.889970][T22023] CPU: 0 UID: 0 PID: 22023 Comm: syz.3.3453 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1203.890024][T22023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1203.890047][T22023] Call Trace: [ 1203.890059][T22023] [ 1203.890074][T22023] dump_stack_lvl+0x16c/0x1f0 [ 1203.890136][T22023] should_fail_ex+0x512/0x640 [ 1203.890189][T22023] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1203.890250][T22023] should_failslab+0xc2/0x120 [ 1203.890286][T22023] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1203.890343][T22023] ? alloc_empty_file+0x55/0x1e0 [ 1203.890387][T22023] alloc_empty_file+0x55/0x1e0 [ 1203.890428][T22023] path_openat+0xda/0x2cb0 [ 1203.890482][T22023] ? kasan_save_stack+0x42/0x60 [ 1203.890534][T22023] ? kasan_save_stack+0x33/0x60 [ 1203.890585][T22023] ? kasan_save_track+0x14/0x30 [ 1203.890645][T22023] ? getname_flags.part.0+0x292/0x550 [ 1203.890685][T22023] ? getname_flags+0x93/0xf0 [ 1203.890731][T22023] ? do_sys_openat2+0xb8/0x1d0 [ 1203.890772][T22023] ? do_syscall_64+0xcd/0x490 [ 1203.890827][T22023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.890863][T22023] ? __pfx_path_openat+0x10/0x10 [ 1203.890928][T22023] do_filp_open+0x20b/0x470 [ 1203.890982][T22023] ? __pfx_do_filp_open+0x10/0x10 [ 1203.891066][T22023] ? _raw_spin_unlock+0x28/0x50 [ 1203.891110][T22023] ? alloc_fd+0x471/0x7d0 [ 1203.891172][T22023] do_sys_openat2+0x11b/0x1d0 [ 1203.891213][T22023] ? __pfx_do_sys_openat2+0x10/0x10 [ 1203.891271][T22023] __x64_sys_open+0x153/0x1e0 [ 1203.891313][T22023] ? __pfx___x64_sys_open+0x10/0x10 [ 1203.891364][T22023] ? rcu_is_watching+0x12/0xc0 [ 1203.891407][T22023] do_syscall_64+0xcd/0x490 [ 1203.891481][T22023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.891517][T22023] RIP: 0033:0x7f31c5f8e929 [ 1203.891545][T22023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.891580][T22023] RSP: 002b:00007f31c6e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1203.891613][T22023] RAX: ffffffffffffffda RBX: 00007f31c61b6080 RCX: 00007f31c5f8e929 [ 1203.891645][T22023] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 1203.891668][T22023] RBP: 00007f31c6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1203.891690][T22023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1203.891710][T22023] R13: 0000000000000000 R14: 00007f31c61b6080 R15: 00007fff3f3189d8 [ 1203.891754][T22023] [ 1204.215483][T22028] futex_wake_op: syz.4.3455 tries to shift op by -9; fix this program [ 1206.399390][T22057] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1206.449995][T22055] CIFS mount error: No usable UNC path provided in device string! [ 1206.449995][T22055] [ 1206.527264][T22055] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1208.554309][T22075] random: crng reseeded on system resumption [ 1208.667270][T22078] FAULT_INJECTION: forcing a failure. [ 1208.667270][T22078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1208.744340][T22078] CPU: 1 UID: 0 PID: 22078 Comm: syz.4.3464 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1208.744383][T22078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1208.744403][T22078] Call Trace: [ 1208.744415][T22078] [ 1208.744428][T22078] dump_stack_lvl+0x16c/0x1f0 [ 1208.744481][T22078] should_fail_ex+0x512/0x640 [ 1208.744536][T22078] _copy_from_iter+0x29f/0x16f0 [ 1208.744596][T22078] ? __alloc_skb+0x200/0x380 [ 1208.744645][T22078] ? __pfx__copy_from_iter+0x10/0x10 [ 1208.744703][T22078] ? __lock_acquire+0xb8a/0x1c90 [ 1208.744758][T22078] netlink_sendmsg+0x829/0xdd0 [ 1208.744802][T22078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.744854][T22078] ____sys_sendmsg+0xa98/0xc70 [ 1208.744894][T22078] ? copy_msghdr_from_user+0x10a/0x160 [ 1208.744944][T22078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.745002][T22078] ___sys_sendmsg+0x134/0x1d0 [ 1208.745055][T22078] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.745109][T22078] ? __lock_acquire+0x622/0x1c90 [ 1208.745205][T22078] __sys_sendmsg+0x16d/0x220 [ 1208.745257][T22078] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.745337][T22078] do_syscall_64+0xcd/0x490 [ 1208.745398][T22078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.745431][T22078] RIP: 0033:0x7fd18e98e929 [ 1208.745457][T22078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.745487][T22078] RSP: 002b:00007fd18f771038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.745518][T22078] RAX: ffffffffffffffda RBX: 00007fd18ebb5fa0 RCX: 00007fd18e98e929 [ 1208.745540][T22078] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1208.745560][T22078] RBP: 00007fd18f771090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.745578][T22078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.745599][T22078] R13: 0000000000000000 R14: 00007fd18ebb5fa0 R15: 00007ffed3365388 [ 1208.745639][T22078] [ 1211.641692][T22108] binder: 22106:22108 ioctl 400c620e 0 returned -22 [ 1212.805330][T22116] raw_sendmsg: syz.4.3471 forgot to set AF_INET. Fix it! [ 1213.135566][T22126] binder: 22125:22126 ioctl c00c620f 200000000180 returned -22 [ 1214.686199][T22146] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.3474: iget: checksum invalid [ 1214.722327][T22162] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1214.764646][T22146] platform regulatory.0: loading /lib/firmware/updates/6.16.0-rc4-syzkaller-00123-g4c06e63b9203/regulatory.db failed with error -74 [ 1214.807759][T22146] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.3474: iget: checksum invalid [ 1214.854582][T22146] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1214.868932][T22146] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.3474: iget: checksum invalid [ 1214.896797][T22164] FAULT_INJECTION: forcing a failure. [ 1214.896797][T22164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.918209][T22159] CIFS mount error: No usable UNC path provided in device string! [ 1214.918209][T22159] [ 1214.935669][T22146] platform regulatory.0: loading /lib/firmware/6.16.0-rc4-syzkaller-00123-g4c06e63b9203/regulatory.db failed with error -74 [ 1214.955402][T22164] CPU: 0 UID: 0 PID: 22164 Comm: syz.4.3478 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1214.955445][T22164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1214.955465][T22164] Call Trace: [ 1214.955476][T22164] [ 1214.955488][T22164] dump_stack_lvl+0x16c/0x1f0 [ 1214.955544][T22164] should_fail_ex+0x512/0x640 [ 1214.955599][T22164] _copy_to_iter+0x463/0x16f0 [ 1214.955640][T22164] ? __pfx__copy_to_iter+0x10/0x10 [ 1214.955672][T22164] ? proto_seq_show+0x723/0x8d0 [ 1214.955730][T22164] seq_read_iter+0xcf8/0x12c0 [ 1214.955791][T22164] seq_read+0x39e/0x4e0 [ 1214.955834][T22164] ? __pfx_seq_read+0x10/0x10 [ 1214.955886][T22164] ? get_pid_task+0xfc/0x250 [ 1214.955949][T22164] ? __pfx_seq_read+0x10/0x10 [ 1214.955988][T22164] proc_reg_read+0x23d/0x330 [ 1214.956037][T22164] ? __pfx_proc_reg_read+0x10/0x10 [ 1214.956090][T22164] vfs_read+0x1e4/0xc60 [ 1214.956145][T22164] ? __pfx_vfs_read+0x10/0x10 [ 1214.956197][T22164] ? find_held_lock+0x2b/0x80 [ 1214.956233][T22164] ? __fget_files+0x204/0x3c0 [ 1214.956286][T22164] ? __fget_files+0x20e/0x3c0 [ 1214.956330][T22164] ? __fget_files+0x140/0x3c0 [ 1214.956388][T22164] __x64_sys_pread64+0x1eb/0x250 [ 1214.956444][T22164] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1214.956508][T22164] do_syscall_64+0xcd/0x490 [ 1214.956560][T22164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.956594][T22164] RIP: 0033:0x7fd18e98e929 [ 1214.956619][T22164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1214.956653][T22164] RSP: 002b:00007fd18f750038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1214.956683][T22164] RAX: ffffffffffffffda RBX: 00007fd18ebb6080 RCX: 00007fd18e98e929 [ 1214.956704][T22164] RDX: 000040000000f42c RSI: 0000000000000000 RDI: 0000000000000003 [ 1214.956723][T22164] RBP: 00007fd18f750090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.956743][T22164] R10: 0000000000000585 R11: 0000000000000246 R12: 0000000000000001 [ 1214.956762][T22164] R13: 0000000000000001 R14: 00007fd18ebb6080 R15: 00007ffed3365388 [ 1214.956804][T22164] [ 1215.184731][T22159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1215.199805][T22146] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.3474: iget: checksum invalid [ 1215.211241][T22146] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 1215.220835][T22146] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 1215.230549][T22146] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1216.814222][T22189] ubi0: attaching mtd0 [ 1216.822583][T22189] ubi0: scanning is finished [ 1217.191309][T22189] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1217.205890][T22189] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1217.231889][T22189] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1217.267838][T22189] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1217.284456][T22189] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1217.302109][T22189] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1217.375331][T22189] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2083775656 [ 1217.410627][T22189] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1217.494814][T22204] ubi0: background thread "ubi_bgt0d" started, PID 22204 [ 1219.112676][T22233] serio: Serial port pty238 [ 1219.639314][T22241] vivid-007: ================= START STATUS ================= [ 1219.669076][T22241] vivid-007: Generate PTS: true [ 1219.706571][T22241] vivid-007: Generate SCR: true [ 1219.716943][T22241] tpg source WxH: 320x240 (Y'CbCr) [ 1219.736860][T22241] tpg field: 1 [ 1219.766356][T22241] tpg crop: (0,0)/320x240 [ 1219.805406][T22241] tpg compose: (0,0)/320x240 [ 1219.845438][T22241] tpg colorspace: 8 [ 1219.907620][T22241] tpg transfer function: 0/0 [ 1219.912872][T22241] tpg Y'CbCr encoding: 0/0 [ 1219.917723][T22241] tpg quantization: 0/0 [ 1219.922127][T22241] tpg RGB range: 0/2 [ 1219.926289][T22241] vivid-007: ================== END STATUS ================== [ 1220.859636][T22268] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input43 [ 1221.947706][T22284] binder: 22283:22284 ioctl 400c620e 0 returned -22 [ 1223.457324][T22311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3496'. [ 1224.300700][T22327] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3499'. [ 1224.489587][T22325] CIFS mount error: No usable UNC path provided in device string! [ 1224.489587][T22325] [ 1224.503869][T22325] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1225.549891][T22342] serio: Serial port pty238 [ 1225.660355][T22345] ubi: mtd0 is already attached to ubi0 [ 1226.333690][T22351] random: crng reseeded on system resumption [ 1227.247674][T22338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.256711][T22365] openvswitch: netlink: Missing valid actions attribute. [ 1227.307949][T22338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.665443][T20656] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1228.642500][T22380] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3510'. [ 1228.674369][T22380] CIFS mount error: No usable UNC path provided in device string! [ 1228.674369][T22380] [ 1228.684569][T22380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1228.800723][T22379] serio: Serial port pty238 [ 1229.644441][T22403] i2c i2c-0: delete_device: Can't find device in list [ 1230.090933][T20656] Bluetooth: hci2: command 0x0406 tx timeout [ 1230.277103][T22401] FAULT_INJECTION: forcing a failure. [ 1230.277103][T22401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.301054][T22401] CPU: 1 UID: 0 PID: 22401 Comm: syz.2.3516 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1230.301100][T22401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1230.301120][T22401] Call Trace: [ 1230.301131][T22401] [ 1230.301144][T22401] dump_stack_lvl+0x16c/0x1f0 [ 1230.301200][T22401] should_fail_ex+0x512/0x640 [ 1230.301257][T22401] core_sys_select+0x4c5/0xc10 [ 1230.301317][T22401] ? __pfx_core_sys_select+0x10/0x10 [ 1230.301373][T22401] ? proc_fail_nth_write+0x9f/0x250 [ 1230.301452][T22401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1230.301518][T22401] kern_select+0x15d/0x1e0 [ 1230.301565][T22401] ? __pfx_kern_select+0x10/0x10 [ 1230.301618][T22401] ? __pfx_ksys_write+0x10/0x10 [ 1230.301675][T22401] __x64_sys_select+0xbd/0x160 [ 1230.301720][T22401] ? do_syscall_64+0x91/0x490 [ 1230.301771][T22401] ? lockdep_hardirqs_on+0x7c/0x110 [ 1230.301828][T22401] do_syscall_64+0xcd/0x490 [ 1230.301883][T22401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.301916][T22401] RIP: 0033:0x7f0027b8e929 [ 1230.301943][T22401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1230.301977][T22401] RSP: 002b:00007f00259b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1230.302006][T22401] RAX: ffffffffffffffda RBX: 00007f0027db6240 RCX: 00007f0027b8e929 [ 1230.302027][T22401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 1230.302045][T22401] RBP: 00007f00259b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.302064][T22401] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1230.302083][T22401] R13: 0000000000000001 R14: 00007f0027db6240 R15: 00007ffd23fb0dc8 [ 1230.302124][T22401] [ 1230.891546][T22414] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3518'. [ 1230.972238][T22413] CIFS mount error: No usable UNC path provided in device string! [ 1230.972238][T22413] [ 1230.994676][T22413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1232.378688][T22439] FAULT_INJECTION: forcing a failure. [ 1232.378688][T22439] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.407965][T22437] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3524'. [ 1232.455624][T22439] CPU: 0 UID: 0 PID: 22439 Comm: syz.4.3525 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1232.455671][T22439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1232.455690][T22439] Call Trace: [ 1232.455701][T22439] [ 1232.455714][T22439] dump_stack_lvl+0x16c/0x1f0 [ 1232.455770][T22439] should_fail_ex+0x512/0x640 [ 1232.455820][T22439] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1232.455876][T22439] should_failslab+0xc2/0x120 [ 1232.455909][T22439] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1232.455962][T22439] ? __alloc_skb+0x2b2/0x380 [ 1232.456017][T22439] __alloc_skb+0x2b2/0x380 [ 1232.456060][T22439] ? __pfx___alloc_skb+0x10/0x10 [ 1232.456114][T22439] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1232.456157][T22439] netlink_alloc_large_skb+0x69/0x130 [ 1232.456196][T22439] netlink_sendmsg+0x6a1/0xdd0 [ 1232.456239][T22439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.456291][T22439] ____sys_sendmsg+0xa98/0xc70 [ 1232.456342][T22439] ? copy_msghdr_from_user+0x10a/0x160 [ 1232.456393][T22439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1232.456439][T22439] ? __pfx__kstrtoull+0x10/0x10 [ 1232.456488][T22439] ___sys_sendmsg+0x134/0x1d0 [ 1232.456540][T22439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1232.456619][T22439] ? find_held_lock+0x2b/0x80 [ 1232.456682][T22439] __sys_sendmmsg+0x200/0x420 [ 1232.456736][T22439] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1232.456801][T22439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1232.456871][T22439] ? fput+0x70/0xf0 [ 1232.456905][T22439] ? ksys_write+0x1ac/0x250 [ 1232.456953][T22439] ? __pfx_ksys_write+0x10/0x10 [ 1232.457006][T22439] __x64_sys_sendmmsg+0x9c/0x100 [ 1232.457053][T22439] ? lockdep_hardirqs_on+0x7c/0x110 [ 1232.457102][T22439] do_syscall_64+0xcd/0x490 [ 1232.457156][T22439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.457190][T22439] RIP: 0033:0x7fd18e98e929 [ 1232.457217][T22439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.457249][T22439] RSP: 002b:00007fd18f771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1232.457280][T22439] RAX: ffffffffffffffda RBX: 00007fd18ebb5fa0 RCX: 00007fd18e98e929 [ 1232.457302][T22439] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1232.457322][T22439] RBP: 00007fd18f771090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.457343][T22439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.457362][T22439] R13: 0000000000000000 R14: 00007fd18ebb5fa0 R15: 00007ffed3365388 [ 1232.457403][T22439] [ 1232.499564][T22437] CIFS mount error: No usable UNC path provided in device string! [ 1232.499564][T22437] [ 1232.731180][T22437] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1232.781045][ T5853] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1233.115705][T22444] FAULT_INJECTION: forcing a failure. [ 1233.115705][T22444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.218648][T22444] CPU: 1 UID: 0 PID: 22444 Comm: syz.4.3526 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1233.218695][T22444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1233.218714][T22444] Call Trace: [ 1233.218725][T22444] [ 1233.218734][T22444] dump_stack_lvl+0x16c/0x1f0 [ 1233.218776][T22444] should_fail_ex+0x512/0x640 [ 1233.218816][T22444] _copy_from_user+0x2e/0xd0 [ 1233.218839][T22444] generic_map_update_batch+0x380/0x610 [ 1233.218887][T22444] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1233.218930][T22444] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1233.218969][T22444] bpf_map_do_batch+0x5b4/0x680 [ 1233.219004][T22444] __sys_bpf+0x15f3/0x4d80 [ 1233.219030][T22444] ? __pfx___sys_bpf+0x10/0x10 [ 1233.219052][T22444] ? ksys_write+0x190/0x250 [ 1233.219092][T22444] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1233.219145][T22444] ? fput+0x70/0xf0 [ 1233.219168][T22444] ? ksys_write+0x1ac/0x250 [ 1233.219201][T22444] ? __pfx_ksys_write+0x10/0x10 [ 1233.219240][T22444] __x64_sys_bpf+0x78/0xc0 [ 1233.219263][T22444] ? lockdep_hardirqs_on+0x7c/0x110 [ 1233.219298][T22444] do_syscall_64+0xcd/0x490 [ 1233.219337][T22444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.219361][T22444] RIP: 0033:0x7fd18e98e929 [ 1233.219382][T22444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.219404][T22444] RSP: 002b:00007fd18f771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1233.219426][T22444] RAX: ffffffffffffffda RBX: 00007fd18ebb5fa0 RCX: 00007fd18e98e929 [ 1233.219442][T22444] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a [ 1233.219456][T22444] RBP: 00007fd18f771090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.219470][T22444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.219484][T22444] R13: 0000000000000000 R14: 00007fd18ebb5fa0 R15: 00007ffed3365388 [ 1233.219514][T22444] [ 1233.263781][T22433] syz.2.3522 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1233.505595][T22448] random: crng reseeded on system resumption [ 1233.885536][T22449] Unrecognized hibernate image header format! [ 1233.895571][T22449] PM: hibernation: Image mismatch: architecture specific data [ 1234.021081][T22455] serio: Serial port pty238 [ 1234.073253][ T30] audit: type=1806 audit(17164.958:8): xattr="" res=-22 [ 1234.574851][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 1236.270616][ T5853] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1236.298629][T22499] FAULT_INJECTION: forcing a failure. [ 1236.298629][T22499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.312400][T22499] CPU: 0 UID: 0 PID: 22499 Comm: syz.2.3543 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1236.312443][T22499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1236.312462][T22499] Call Trace: [ 1236.312472][T22499] [ 1236.312485][T22499] dump_stack_lvl+0x16c/0x1f0 [ 1236.312540][T22499] should_fail_ex+0x512/0x640 [ 1236.312595][T22499] _copy_from_user+0x2e/0xd0 [ 1236.312628][T22499] dev_ifconf+0xe3/0x310 [ 1236.312677][T22499] ? __pfx_dev_ifconf+0x10/0x10 [ 1236.312738][T22499] sock_ioctl+0x388/0x6b0 [ 1236.312778][T22499] ? __pfx_sock_ioctl+0x10/0x10 [ 1236.312814][T22499] ? hook_file_ioctl_common+0x145/0x410 [ 1236.312861][T22499] ? __fget_files+0x20e/0x3c0 [ 1236.312914][T22499] ? __pfx_sock_ioctl+0x10/0x10 [ 1236.312955][T22499] __x64_sys_ioctl+0x18b/0x210 [ 1236.313000][T22499] do_syscall_64+0xcd/0x490 [ 1236.313054][T22499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.313087][T22499] RIP: 0033:0x7f0027b8e929 [ 1236.313113][T22499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.313145][T22499] RSP: 002b:00007f002892c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.313173][T22499] RAX: ffffffffffffffda RBX: 00007f0027db5fa0 RCX: 00007f0027b8e929 [ 1236.313194][T22499] RDX: 0000000000000038 RSI: 0000000000008912 RDI: 0000000000000006 [ 1236.313213][T22499] RBP: 00007f002892c090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.313244][T22499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.313264][T22499] R13: 0000000000000000 R14: 00007f0027db5fa0 R15: 00007ffd23fb0dc8 [ 1236.313306][T22499] [ 1236.480032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.575317][T22547] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3555'. [ 1238.669390][T22547] CIFS mount error: No usable UNC path provided in device string! [ 1238.669390][T22547] [ 1238.680573][T22547] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1239.952494][T22577] random: crng reseeded on system resumption [ 1240.955539][T22599] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1240.975726][T22599] CIFS mount error: No usable UNC path provided in device string! [ 1240.975726][T22599] [ 1240.986672][T22599] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1241.325741][T22610] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3573'. [ 1241.616173][T22609] CIFS mount error: No usable UNC path provided in device string! [ 1241.616173][T22609] [ 1241.626706][T22609] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1241.650148][T22612] serio: Serial port pty238 [ 1241.875149][T22614] syz.1.3576: vmalloc error: size 1490944, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1241.895596][T22614] CPU: 1 UID: 0 PID: 22614 Comm: syz.1.3576 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1241.895633][T22614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1241.895648][T22614] Call Trace: [ 1241.895657][T22614] [ 1241.895667][T22614] dump_stack_lvl+0x16c/0x1f0 [ 1241.895711][T22614] warn_alloc+0x248/0x3a0 [ 1241.895752][T22614] ? __pfx_warn_alloc+0x10/0x10 [ 1241.895793][T22614] ? alloc_pages_mpol+0x25a/0x550 [ 1241.895820][T22614] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1241.895858][T22614] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 1241.895902][T22614] ? __snd_dma_alloc_pages+0x53/0x90 [ 1241.895944][T22614] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1241.895983][T22614] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1241.896026][T22614] ? __snd_dma_alloc_pages+0x53/0x90 [ 1241.896058][T22614] __vmalloc_node_noprof+0xad/0xf0 [ 1241.896091][T22614] ? __snd_dma_alloc_pages+0x53/0x90 [ 1241.896123][T22614] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1241.896160][T22614] __snd_dma_alloc_pages+0x53/0x90 [ 1241.896193][T22614] snd_dma_alloc_dir_pages+0x151/0x240 [ 1241.896230][T22614] do_alloc_pages+0x115/0x280 [ 1241.896263][T22614] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1241.896300][T22614] snd_pcm_hw_params+0x15e1/0x1b40 [ 1241.896339][T22614] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1241.896372][T22614] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1241.896406][T22614] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1241.896436][T22614] ? __asan_memset+0x23/0x50 [ 1241.896473][T22614] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1241.896513][T22614] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1241.896573][T22614] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1241.896627][T22614] ? __pfx___mutex_lock+0x10/0x10 [ 1241.896689][T22614] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1241.896719][T22614] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 1241.896747][T22614] ? lockdep_hardirqs_on+0x7c/0x110 [ 1241.896787][T22614] snd_pcm_oss_poll+0x549/0xaf0 [ 1241.896812][T22614] ? __pfx___pollwait+0x10/0x10 [ 1241.896847][T22614] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1241.896872][T22614] ? __fget_files+0x20e/0x3c0 [ 1241.896912][T22614] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1241.896940][T22614] do_select+0xd3a/0x17e0 [ 1241.896996][T22614] ? __pfx_do_select+0x10/0x10 [ 1241.897026][T22614] ? find_held_lock+0x2b/0x80 [ 1241.897052][T22614] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1241.897079][T22614] ? __pfx___pollwait+0x10/0x10 [ 1241.897115][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897150][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897185][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897219][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897255][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897289][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897324][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897363][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897398][T22614] ? __pfx_pollwake+0x10/0x10 [ 1241.897432][T22614] ? find_held_lock+0x2b/0x80 [ 1241.897455][T22614] ? __might_fault+0xe3/0x190 [ 1241.897491][T22614] ? __might_fault+0xe3/0x190 [ 1241.897526][T22614] ? __might_fault+0x13b/0x190 [ 1241.897573][T22614] ? core_sys_select+0x453/0xc10 [ 1241.897620][T22614] core_sys_select+0x453/0xc10 [ 1241.897671][T22614] ? __pfx_core_sys_select+0x10/0x10 [ 1241.897728][T22614] ? futex_wait+0x120/0x380 [ 1241.897811][T22614] ? __pfx_do_futex+0x10/0x10 [ 1241.897859][T22614] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1241.897906][T22614] kern_select+0x15d/0x1e0 [ 1241.897957][T22614] ? __pfx_kern_select+0x10/0x10 [ 1241.898012][T22614] ? xfd_validate_state+0x61/0x180 [ 1241.898071][T22614] __x64_sys_select+0xbd/0x160 [ 1241.898118][T22614] ? do_syscall_64+0x91/0x490 [ 1241.898170][T22614] ? lockdep_hardirqs_on+0x7c/0x110 [ 1241.898221][T22614] do_syscall_64+0xcd/0x490 [ 1241.898279][T22614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.898314][T22614] RIP: 0033:0x7f29d018e929 [ 1241.898342][T22614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1241.898377][T22614] RSP: 002b:00007f29d0fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1241.898411][T22614] RAX: ffffffffffffffda RBX: 00007f29d03b5fa0 RCX: 00007f29d018e929 [ 1241.898434][T22614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1241.898455][T22614] RBP: 00007f29d0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1241.898476][T22614] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 1241.898504][T22614] R13: 0000000000000000 R14: 00007f29d03b5fa0 R15: 00007ffd8ba34ce8 [ 1241.898549][T22614] [ 1242.452593][T22614] Mem-Info: [ 1242.457153][T22614] active_anon:12183 inactive_anon:0 isolated_anon:0 [ 1242.457153][T22614] active_file:8630 inactive_file:53680 isolated_file:0 [ 1242.457153][T22614] unevictable:768 dirty:669 writeback:0 [ 1242.457153][T22614] slab_reclaimable:11373 slab_unreclaimable:95933 [ 1242.457153][T22614] mapped:28732 shmem:1562 pagetables:1325 [ 1242.457153][T22614] sec_pagetables:0 bounce:0 [ 1242.457153][T22614] kernel_misc_reclaimable:0 [ 1242.457153][T22614] free:1308463 free_pcp:12683 free_cma:0 [ 1242.504185][T22614] Node 0 active_anon:51932kB inactive_anon:0kB active_file:34520kB inactive_file:214140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114860kB dirty:2668kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11916kB pagetables:5168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1242.537920][T22614] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:8kB writeback:0kB shmem:1280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1242.570060][T22614] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.599648][T22614] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 1242.605516][T22614] Node 0 DMA32 free:1306212kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52784kB inactive_anon:0kB active_file:34520kB inactive_file:212828kB unevictable:1536kB writepending:2668kB present:3129332kB managed:2540344kB mlocked:0kB bounce:0kB free_pcp:34256kB local_pcp:21088kB free_cma:0kB [ 1242.637970][T22614] lowmem_reserve[]: 0 0 1 1 1 [ 1242.642788][T22614] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1242.672619][T22614] lowmem_reserve[]: 0 0 0 0 0 [ 1242.677427][T22614] Node 1 Normal free:3908572kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16032kB local_pcp:8760kB free_cma:0kB [ 1242.709935][T22614] lowmem_reserve[]: 0 0 0 0 0 [ 1242.714751][T22614] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1242.727525][T22614] Node 0 DMA32: 2835*4kB (UME) 2263*8kB (UME) 2031*16kB (UME) 1668*32kB (UME) 965*64kB (UME) 289*128kB (UME) 200*256kB (UME) 127*512kB (UM) 19*1024kB (UM) 9*2048kB (UM) 229*4096kB (UM) = 1306164kB [ 1242.747103][T22614] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1242.759302][T22614] Node 1 Normal: 137*4kB (UE) 53*8kB (UME) 43*16kB (UME) 229*32kB (UE) 77*64kB (UME) 27*128kB (UME) 6*256kB (UME) 5*512kB (ME) 4*1024kB (UME) 2*2048kB (UM) 947*4096kB (M) = 3908572kB [ 1242.778112][T22614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1242.788294][T22614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1242.797671][T22614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1242.811607][T22614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1242.829105][T22614] 63879 total pagecache pages [ 1242.834289][T22614] 11 pages in swap cache [ 1242.839355][T22614] Free swap = 124952kB [ 1242.843701][T22614] Total swap = 124996kB [ 1242.848111][T22614] 2097051 pages RAM [ 1242.968194][T22614] 0 pages HighMem/MovableOnly [ 1243.031116][T22614] 429987 pages reserved [ 1243.035446][T22614] 0 pages cma reserved [ 1243.127349][T22625] zram: Added device: zram3 [ 1243.473694][T22635] FAULT_INJECTION: forcing a failure. [ 1243.473694][T22635] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.487168][T22635] CPU: 1 UID: 0 PID: 22635 Comm: syz.4.3582 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1243.487209][T22635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1243.487227][T22635] Call Trace: [ 1243.487238][T22635] [ 1243.487250][T22635] dump_stack_lvl+0x16c/0x1f0 [ 1243.487304][T22635] should_fail_ex+0x512/0x640 [ 1243.487345][T22635] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1243.487385][T22635] should_failslab+0xc2/0x120 [ 1243.487409][T22635] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1243.487456][T22635] ? d_instantiate+0x77/0x90 [ 1243.487477][T22635] ? alloc_empty_file+0x55/0x1e0 [ 1243.487507][T22635] alloc_empty_file+0x55/0x1e0 [ 1243.487534][T22635] alloc_file_pseudo+0x13a/0x230 [ 1243.487561][T22635] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1243.487590][T22635] ? hugetlbfs_get_inode+0x31f/0x730 [ 1243.487619][T22635] hugetlb_file_setup+0x4cd/0x620 [ 1243.487649][T22635] __do_sys_memfd_create+0x3fc/0x8a0 [ 1243.487681][T22635] do_syscall_64+0xcd/0x490 [ 1243.487719][T22635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.487742][T22635] RIP: 0033:0x7fd18e98e929 [ 1243.487761][T22635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.487783][T22635] RSP: 002b:00007fd18f750038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1243.487805][T22635] RAX: ffffffffffffffda RBX: 00007fd18ebb6080 RCX: 00007fd18e98e929 [ 1243.487820][T22635] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000040 [ 1243.487835][T22635] RBP: 00007fd18f750090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.487849][T22635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.487862][T22635] R13: 0000000000000000 R14: 00007fd18ebb6080 R15: 00007ffed3365388 [ 1243.487891][T22635] [ 1244.468939][T22647] serio: Serial port pty238 [ 1246.285747][T22679] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1246.674604][T22684] FAULT_INJECTION: forcing a failure. [ 1246.674604][T22684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.760852][T22684] CPU: 1 UID: 0 PID: 22684 Comm: syz.2.3593 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1246.760886][T22684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1246.760901][T22684] Call Trace: [ 1246.760908][T22684] [ 1246.760918][T22684] dump_stack_lvl+0x16c/0x1f0 [ 1246.760959][T22684] should_fail_ex+0x512/0x640 [ 1246.761001][T22684] _copy_to_user+0x32/0xd0 [ 1246.761025][T22684] simple_read_from_buffer+0xcb/0x170 [ 1246.761059][T22684] proc_fail_nth_read+0x197/0x270 [ 1246.761089][T22684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.761127][T22684] ? rw_verify_area+0xcf/0x680 [ 1246.761159][T22684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.761189][T22684] vfs_read+0x1e4/0xc60 [ 1246.761227][T22684] ? __pfx___mutex_lock+0x10/0x10 [ 1246.761264][T22684] ? __pfx_vfs_read+0x10/0x10 [ 1246.761307][T22684] ? __fget_files+0x20e/0x3c0 [ 1246.761350][T22684] ksys_read+0x12a/0x250 [ 1246.761384][T22684] ? __pfx_ksys_read+0x10/0x10 [ 1246.761419][T22684] ? fput+0x70/0xf0 [ 1246.761447][T22684] do_syscall_64+0xcd/0x490 [ 1246.761487][T22684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.761511][T22684] RIP: 0033:0x7f0027b8d33c [ 1246.761531][T22684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1246.761554][T22684] RSP: 002b:00007f002892c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1246.761576][T22684] RAX: ffffffffffffffda RBX: 00007f0027db5fa0 RCX: 00007f0027b8d33c [ 1246.761592][T22684] RDX: 000000000000000f RSI: 00007f002892c0a0 RDI: 0000000000000004 [ 1246.761607][T22684] RBP: 00007f002892c090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.761622][T22684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.761636][T22684] R13: 0000000000000000 R14: 00007f0027db5fa0 R15: 00007ffd23fb0dc8 [ 1246.761666][T22684] [ 1247.246497][T22680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 1247.667608][T22694] serio: Serial port pty238 [ 1248.397462][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.403907][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.823320][T22747] serio: Serial port pty238 [ 1251.221322][T22763] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3609'. [ 1251.367792][T22762] CIFS mount error: No usable UNC path provided in device string! [ 1251.367792][T22762] [ 1251.389787][T22762] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1252.112593][T22774] mkiss: ax0: crc mode is auto. [ 1253.277688][T22789] serio: Serial port pty238 [ 1254.035336][T22807] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 1254.792624][T22817] FAULT_INJECTION: forcing a failure. [ 1254.792624][T22817] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.806291][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.3.3623 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1254.806339][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1254.806358][T22817] Call Trace: [ 1254.806369][T22817] [ 1254.806381][T22817] dump_stack_lvl+0x16c/0x1f0 [ 1254.806441][T22817] should_fail_ex+0x512/0x640 [ 1254.806491][T22817] ? __kmalloc_noprof+0xbf/0x510 [ 1254.806545][T22817] ? create_ruleset+0x21/0x140 [ 1254.806579][T22817] should_failslab+0xc2/0x120 [ 1254.806611][T22817] __kmalloc_noprof+0xd2/0x510 [ 1254.806670][T22817] create_ruleset+0x21/0x140 [ 1254.806704][T22817] landlock_merge_ruleset+0xbb/0x870 [ 1254.806741][T22817] ? prepare_creds+0x583/0x7d0 [ 1254.806794][T22817] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 1254.806856][T22817] do_syscall_64+0xcd/0x490 [ 1254.806912][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.806948][T22817] RIP: 0033:0x7f31c5f8e929 [ 1254.806974][T22817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1254.807007][T22817] RSP: 002b:00007f31c6e62038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1254.807039][T22817] RAX: ffffffffffffffda RBX: 00007f31c61b5fa0 RCX: 00007f31c5f8e929 [ 1254.807070][T22817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1254.807090][T22817] RBP: 00007f31c6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1254.807111][T22817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.807130][T22817] R13: 0000000000000000 R14: 00007f31c61b5fa0 R15: 00007fff3f3189d8 [ 1254.807170][T22817] [ 1254.979630][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.502604][T22829] openvswitch: netlink: Flow key attr not present in new flow. [ 1256.266797][T22849] FAULT_INJECTION: forcing a failure. [ 1256.266797][T22849] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.336334][T22849] CPU: 1 UID: 0 PID: 22849 Comm: syz.4.3632 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1256.336377][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1256.336395][T22849] Call Trace: [ 1256.336405][T22849] [ 1256.336416][T22849] dump_stack_lvl+0x16c/0x1f0 [ 1256.336465][T22849] should_fail_ex+0x512/0x640 [ 1256.336508][T22849] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1256.336552][T22849] should_failslab+0xc2/0x120 [ 1256.336580][T22849] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1256.336617][T22849] ? rcu_is_watching+0x12/0xc0 [ 1256.336646][T22849] ? s_start+0x7b/0x320 [ 1256.336690][T22849] s_start+0x7b/0x320 [ 1256.336734][T22849] traverse.part.0.constprop.0+0xac/0x640 [ 1256.336784][T22849] seq_read_iter+0x932/0x12c0 [ 1256.336848][T22849] seq_read+0x39e/0x4e0 [ 1256.336884][T22849] ? __pfx_seq_read+0x10/0x10 [ 1256.336921][T22849] ? get_pid_task+0xfc/0x250 [ 1256.336977][T22849] ? rw_verify_area+0xcf/0x680 [ 1256.337014][T22849] ? __pfx_seq_read+0x10/0x10 [ 1256.337049][T22849] vfs_read+0x1e4/0xc60 [ 1256.337098][T22849] ? __pfx_vfs_read+0x10/0x10 [ 1256.337135][T22849] ? find_held_lock+0x2b/0x80 [ 1256.337164][T22849] ? __fget_files+0x204/0x3c0 [ 1256.337208][T22849] ? __fget_files+0x20e/0x3c0 [ 1256.337244][T22849] ? __fget_files+0x140/0x3c0 [ 1256.337292][T22849] __x64_sys_pread64+0x1eb/0x250 [ 1256.337335][T22849] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1256.337393][T22849] do_syscall_64+0xcd/0x490 [ 1256.337437][T22849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.337465][T22849] RIP: 0033:0x7fd18e98e929 [ 1256.337488][T22849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.337516][T22849] RSP: 002b:00007fd18f771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1256.337542][T22849] RAX: ffffffffffffffda RBX: 00007fd18ebb5fa0 RCX: 00007fd18e98e929 [ 1256.337561][T22849] RDX: 000000000000c404 RSI: 0000000000000000 RDI: 0000000000000003 [ 1256.337578][T22849] RBP: 00007fd18f771090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.337595][T22849] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.337611][T22849] R13: 0000000000000000 R14: 00007fd18ebb5fa0 R15: 00007ffed3365388 [ 1256.337647][T22849] [ 1256.564625][T22849] [ 1256.567014][T22849] ===================================== [ 1256.572591][T22849] WARNING: bad unlock balance detected! [ 1256.578158][T22849] 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 Not tainted [ 1256.585292][T22849] ------------------------------------- [ 1256.590856][T22849] syz.4.3632/22849 is trying to release lock (event_mutex) at: [ 1256.598445][T22849] [] traverse.part.0.constprop.0+0x2c0/0x640 [ 1256.606045][T22849] but there are no more locks to release! [ 1256.611793][T22849] [ 1256.611793][T22849] other info that might help us debug this: [ 1256.619876][T22849] 1 lock held by syz.4.3632/22849: [ 1256.625008][T22849] #0: ffff8880281dec30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 1256.633954][T22849] [ 1256.633954][T22849] stack backtrace: [ 1256.639864][T22849] CPU: 1 UID: 0 PID: 22849 Comm: syz.4.3632 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1256.639899][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1256.639916][T22849] Call Trace: [ 1256.639926][T22849] [ 1256.639936][T22849] dump_stack_lvl+0x116/0x1f0 [ 1256.639979][T22849] ? traverse.part.0.constprop.0+0x2c0/0x640 [ 1256.640017][T22849] print_unlock_imbalance_bug+0x11b/0x130 [ 1256.640055][T22849] ? traverse.part.0.constprop.0+0x2c0/0x640 [ 1256.640091][T22849] lock_release+0x242/0x2f0 [ 1256.640129][T22849] __mutex_unlock_slowpath+0xa2/0x6a0 [ 1256.640172][T22849] ? rcu_is_watching+0x12/0xc0 [ 1256.640200][T22849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1256.640243][T22849] ? __kmalloc_cache_noprof+0x249/0x3e0 [ 1256.640288][T22849] ? rcu_is_watching+0x12/0xc0 [ 1256.640322][T22849] ? kfree+0x24f/0x4d0 [ 1256.640362][T22849] ? s_start+0x28c/0x320 [ 1256.640411][T22849] traverse.part.0.constprop.0+0x2c0/0x640 [ 1256.640463][T22849] seq_read_iter+0x932/0x12c0 [ 1256.640512][T22849] seq_read+0x39e/0x4e0 [ 1256.640553][T22849] ? __pfx_seq_read+0x10/0x10 [ 1256.640593][T22849] ? get_pid_task+0xfc/0x250 [ 1256.640648][T22849] ? rw_verify_area+0xcf/0x680 [ 1256.640687][T22849] ? __pfx_seq_read+0x10/0x10 [ 1256.640721][T22849] vfs_read+0x1e4/0xc60 [ 1256.640762][T22849] ? __pfx_vfs_read+0x10/0x10 [ 1256.640806][T22849] ? find_held_lock+0x2b/0x80 [ 1256.640834][T22849] ? __fget_files+0x204/0x3c0 [ 1256.640874][T22849] ? __fget_files+0x20e/0x3c0 [ 1256.640910][T22849] ? __fget_files+0x140/0x3c0 [ 1256.640952][T22849] __x64_sys_pread64+0x1eb/0x250 [ 1256.640994][T22849] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1256.641041][T22849] do_syscall_64+0xcd/0x490 [ 1256.641085][T22849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.641112][T22849] RIP: 0033:0x7fd18e98e929 [ 1256.641133][T22849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1256.641160][T22849] RSP: 002b:00007fd18f771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1256.641184][T22849] RAX: ffffffffffffffda RBX: 00007fd18ebb5fa0 RCX: 00007fd18e98e929 [ 1256.641203][T22849] RDX: 000000000000c404 RSI: 0000000000000000 RDI: 0000000000000003 [ 1256.641219][T22849] RBP: 00007fd18f771090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.641236][T22849] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.641253][T22849] R13: 0000000000000000 R14: 00007fd18ebb5fa0 R15: 00007ffed3365388 [ 1256.641279][T22849] [ 1257.877682][T16172] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz-executor: Error -117 reading block bitmap for 2 [ 1257.947113][T19913] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1258.015335][T17059] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1258.061082][T17059] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1258.067542][T16172] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1258.099523][T16172] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1258.126719][T20841] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.176664][T19913] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1258.321386][T20841] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.322548][T19913] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1258.383842][T20655] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1258.392970][T20655] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz-executor: Error -117 reading block bitmap for 2 [ 1258.411486][T20841] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.482518][T20841] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.567156][T20841] bridge_slave_0: left allmulticast mode [ 1258.572909][T20841] bridge_slave_0: left promiscuous mode [ 1258.580868][T20841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.684741][T20841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.696519][T20841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.706356][T20841] bond0 (unregistering): Released all slaves [ 1258.959947][T20841] hsr_slave_0: left promiscuous mode [ 1258.968207][T20841] hsr_slave_1: left promiscuous mode [ 1258.974235][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.983976][T20841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.998412][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.009079][T20841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.022650][T20841] veth1_macvtap: left promiscuous mode [ 1259.029657][T20841] veth0_macvtap: left promiscuous mode [ 1259.036450][T20841] veth1_vlan: left promiscuous mode [ 1259.041839][T20841] veth0_vlan: left promiscuous mode [ 1259.244307][T20841] team0 (unregistering): Port device team_slave_1 removed [ 1259.274747][T20841] team0 (unregistering): Port device team_slave_0 removed [ 1259.705160][T20841] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.766027][T20841] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.824302][T20841] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.873113][T20841] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.990971][T20841] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.056754][T20841] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.095744][T20841] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.157185][T20841] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.323163][T20841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.384294][T20841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.432733][T20841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.493727][T20841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.573471][T20841] team0: left allmulticast mode [ 1260.580001][T20841] team0: left promiscuous mode [ 1260.585045][T20841] bridge0: port 3(team0) entered disabled state [ 1260.594438][T20841] bridge_slave_1: left allmulticast mode [ 1260.602677][T20841] bridge_slave_1: left promiscuous mode [ 1260.608542][T20841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.618271][T20841] bridge_slave_0: left allmulticast mode [ 1260.623987][T20841] bridge_slave_0: left promiscuous mode [ 1260.632465][T20841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.643362][T20841] bridge_slave_1: left allmulticast mode [ 1260.650352][T20841] bridge_slave_1: left promiscuous mode [ 1260.656174][T20841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.665082][T20841] bridge_slave_0: left allmulticast mode [ 1260.672322][T20841] bridge_slave_0: left promiscuous mode [ 1260.678156][T20841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.690023][T20841] team0: left allmulticast mode [ 1260.694978][T20841] team_slave_0: left allmulticast mode [ 1260.701155][T20841] team0: left promiscuous mode [ 1260.706047][T20841] team_slave_0: left promiscuous mode [ 1260.711650][T20841] bridge0: port 2(team0) entered disabled state [ 1260.719744][T20841] bridge_slave_0: left allmulticast mode [ 1260.726341][T20841] bridge_slave_0: left promiscuous mode [ 1260.732091][T20841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.010027][T20841]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.019723][T20841]  (unregistering): Released all slaves [ 1261.120797][T20841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.131182][T20841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.141728][T20841] bond0 (unregistering): Released all slaves [ 1261.218193][T20841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.228599][T20841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.238420][T20841] bond0 (unregistering): Released all slaves [ 1261.797100][T20841] hsr_slave_0: left promiscuous mode [ 1261.803123][T20841] hsr_slave_1: left promiscuous mode [ 1261.809085][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.818123][T20841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.827897][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.836853][T20841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.848460][T20841] hsr_slave_0: left promiscuous mode [ 1261.855727][T20841] hsr_slave_1: left promiscuous mode [ 1261.865965][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.874940][T20841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.890241][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.897747][T20841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.910371][T20841] hsr_slave_0: left promiscuous mode [ 1261.916333][T20841] hsr_slave_1: left promiscuous mode [ 1261.923441][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.931285][T20841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.941784][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.949722][T20841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.967799][T20841] veth1_macvtap: left promiscuous mode [ 1261.973691][T20841] veth1_vlan: left promiscuous mode [ 1261.979701][T20841] veth0_vlan: left promiscuous mode [ 1261.985823][T20841] veth1_macvtap: left promiscuous mode [ 1261.992126][T20841] veth0_macvtap: left promiscuous mode [ 1261.997796][T20841] veth1_vlan: left promiscuous mode [ 1262.004282][T20841] veth0_vlan: left promiscuous mode [ 1262.010723][T20841] veth1_macvtap: left promiscuous mode [ 1262.016322][T20841] veth0_macvtap: left promiscuous mode [ 1262.023575][T20841] veth1_vlan: left promiscuous mode [ 1262.029003][T20841] veth0_vlan: left promiscuous mode [ 1262.635058][T20841] team0 (unregistering): Port device team_slave_1 removed [ 1262.653043][T20841] team0 (unregistering): Port device team_slave_0 removed [ 1262.862196][T20841] team0 (unregistering): Port device team_slave_0 removed