last executing test programs: 6.507053342s ago: executing program 2 (id=301): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) socket(0xa, 0x1, 0x100) (async) r1 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0x7ff, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) (async) pread64$auto(r3, 0x0, 0x7ff, 0x400) socket(0x26, 0x6, 0x1) (async) r4 = socket(0x26, 0x6, 0x1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x800080000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x5, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r6, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000e40)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20048040}, 0x98) (async) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000e40)=ANY=[@ANYRESHEX=r0, @ANYBLOB="02002dbd7000fcdbdf251d0000004301188014002100fc0200000000000000000000000000003600bd0068f76224d76fcedd858a40d2e4daac3a906310b4882866e15a38c714c9301ed5c7bc670cf749f0cdf4d958ac4a46c983cc4f0000018afb34431813703fe999e41360aa2f78624f27b11e5a80a7355d38b6a4c7eca4adda34ea7b2c60ffec2b34de68f8ff238429af8ce6285ab588c4cbe1d1b9824702b1b3566b51eb0437240289d7fdcbf3ef53cadf457e49070342cb80a88f3f14dca7b272e3137c4e10ce76365024e974704d9a5595511d1f39495f2163c2230d709bd2265fdf2d1186082017d28e03ab27269c84a9209ad6f713d57101963260539b122401c9b87400fb6d4b3bc1372583932e221d8f717a5356013ff43bd8a3750baecad4d4d3deafe0a6cf783bfeaedc61d5f02142c3cd9d90bd596f2170c6488482f92288f2c3490acdd285c57f422cb30008000300", @ANYRESOCT, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20048040}, 0x98) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x14000000000e3, 0xeb1, r0, 0x7fff) (async) mmap$auto(0x0, 0x20009, 0x14000000000e3, 0xeb1, r0, 0x7fff) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x0) socket(0xa, 0x2, 0x3a) 5.666102228s ago: executing program 1 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x21, 0x2, 0x2) setsockopt$auto(r4, 0x1000000110, 0x3, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000400), r1) sendmsg$auto_NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r6, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x9}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ',:)//\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x74b}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x880) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd29, 0x27dfdbff, {}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x890) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=ANY=[@ANYBLOB="0552a2d4", @ANYRES16=r2, @ANYBLOB, @ANYBLOB], 0x231c}, 0x1, 0x0, 0x0, 0x10}, 0x40040c1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x80805, 0x0) getpeername$auto(0x200000003, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x801) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250400000014001a80100004800c0001800500070004000000289f6de4ba2804f1b7e01d98fe4b65c4e55d1ca8d5c8b2d4885f03e6d25473e9694788b62bea06e701c4e8fac1d4727de51c4c13de461bd16440ff4d0ce71a4ce82543e9ef30769753b66f16f11160dedf541a29fdebc44552d1d59b512c5ede0b62bcd0fadb5f877cc9f3bb73f924c8f709793137f9e7ee17de320801eb03894fa27b8c43ffa3cb6a0e4eb8753f2a3b6e95e4f4c923edfc49066c7b3e444b0a0cfcba0cb564d223ec19b6a83948677a91ed9893ba37b128ac3034f3ddc92bc112d31eab820ae4efbac3c5519cc05eaee079994f28a9a21c4ac614ad9a04cfa19b68746b551ee5c45028110cb8ce9b960aeb0dd75d7fdd1ea03e30e753d161e07b1f43530e8ef6df47953c7aac21e12f01acc3fba46fd2906977282bdd91146ce45fdf7b087b0526455b608af7cdfdfbb13e38ee3d604e6e54db1e5943acd5fde24339dd00543b3ce32db2acf27959d201e7f4878b8fe4b8ed87e74d633e63a583c05fe17ab6060ed1ead8768acabdad6696b8184a"], 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 5.321124409s ago: executing program 2 (id=307): sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x4801) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000280)="1e1efbb5c223d6dd7711379057cf117a3bf964acb25ab51d7d801132d4a489ed0046c93d0000000000000000000000f228f97e34dd5a5541f5de7c889413859fef3cceb70b6a6fe2b5ae9c5cc3dba3fc609817637ad36d76d8d45c6fa729dc327f795700"/114, 0x5c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0xf4ffffff, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdfa506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 5.278803618s ago: executing program 1 (id=308): mmap$auto(0xebb7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) mlock$auto(0xfbe8, 0x4) mlock$auto(0x837, 0x7) mlock$auto(0x3, 0x2) r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r0, &(0x7f0000000180)='1l80211\x00', 0x1) mlock$auto(0x10000, 0x5) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x401, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x0, 0x8, 0x9) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/247, 0xf7) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) semctl$auto_IPC_INFO(0x44, 0x200011, 0x3, 0xf7ffeffffffffdff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="9021a38aa22cbc35dad256304e7a6b70269bf0e69bd2d37b9e77db0c9ba511db57d6a7c7e58fb841cee83cebcd0b07791c91f1b55bd12fbcf5ecc602195151065a10f0d3c72e355fe8051c9ad1758e", @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000891) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) read$auto(0x3, 0x0, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x1f00, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x8000000000000, 0x0, 0x801}, 0x0) 5.036678468s ago: executing program 2 (id=310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='gt\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0xc, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0xffffffffffffffff, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004540), r2) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x240400c0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, 0x0, 0x20103, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.controllers\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/4111, 0x100f) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="281e000006aec20f9b600e57a2eab630e44618f0396d9c025de3757370b35e4b95f237a73692630994fce41ef400000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf254f00000008006100010000000500f6000100000004008e00"], 0x28}, 0x1, 0x0, 0x0, 0x440c1}, 0x800) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x2, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf, @raw=0x98}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r6, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.897561954s ago: executing program 1 (id=311): set_mempolicy$auto(0x82, &(0x7f0000000080)=0x7e, 0x4) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = syz_open_procfs$namespace(0x0, 0x0) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000240), 0x400) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001400", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24048081) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x8200, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1001, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x20003b46, 0x876b, 0x0, 0x0, 0xffffffff7ffffffe) 4.493695911s ago: executing program 3 (id=316): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x101000, 0x0) ppoll$auto(&(0x7f0000000080)={r0, 0x7, 0xf8}, 0x8, &(0x7f0000000140)={0x65e290fa, 0x2418}, &(0x7f0000000180)={0xffffffff}, 0x8) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) ioctl$auto(r2, 0x5100, 0xffffffffffffffff) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) shutdown$auto(0x200000003, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) ioctl$auto_PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000001c0)={0x8001, 0x2}) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0xc8, 0x400454c9, 0x5c8d) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40}, 0x2, 0x0, 0x0, 0x8) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r5, 0xae03, 0xd6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) 4.359392223s ago: executing program 0 (id=317): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/smaps\x00', 0x20040, 0x0) sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000000140), 0x3) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x1484, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x1460, 0x19, 0x0, 0x1, [@nested={0x1453, 0x11c, 0x0, 0x1, [@nested={0x1438, 0x127, 0x0, 0x1, [@typed={0x5c, 0x55, 0x0, 0x0, @binary="5255aa2f68e77489ba8394b4d18a20cb775f66043daf9010d11b2fce1b306fa6e0f29813264458bd99f8d6ee122eab99b2f33ffd5aba4cb214f56d77e5bddc8f3cc7fc8377be189a77b5283ba160acc9f38364996f852846"}, @nested={0x1ac, 0x5a, 0x0, 0x1, [@nested={0x4, 0x12c}, @generic="1de8fac277edfa83bb3e04b5d284483615da67439e7ff0a4f5aae7b0a78179fa294d26a2b625b73470bebe74128502ad665895f5b06cfa6ddeba8781b16d79a11aa336887155a7c7d813f142c09f64dd725b5d2f4eb0e5777bb7377f08e57e4d6c122fce28584c2dcee020b215d7f7eafdb0cd18be7619341482455dc26aa18b34284e1b075347f52cf72112939a1ff643a33bb03459733e8825f732dd82b2544916560e43a28a3d2be8587d", @typed={0x8, 0xb3, 0x0, 0x0, @uid=0xee01}, @generic="7b6e82ad679ee2d7cc8451d259da134c250bc3d87ada29679157dc6abc48f1eba6cd0cd4fb48908fae71fe0e0ba32e3ca87c54489bd673496be6c9b08c8ee7745b9173f5a0ddcfb0b6ee5f58fcfe9f6c7324571b921ddb7736ba9dd9022c7c5a831e2135b07db8bcff5c87d0cd2b82c5e91abb1b4daa710860d15ba0c87f2500030c4f669e2305693c379e8d42db8a4aa11559b5521a7a4355361566db0e3d6b27aa81db53e62433088558768d19e154d125b4eaa13d39aaa8361dead47f268bbbef1c1d66691b33b0a056f22df8be238a916a9a1269b2f1287e83302b68c3b3b8929eaaed491f39d2117d23458f221e"]}, @nested={0x67, 0xcb, 0x0, 0x1, [@generic="89094f46bcca852730788b3bb9c5436ae3496653dd8fa7e7f54f9529641bd35c570c", @generic="5848be17696d1578126009a6060c281d3e532396567672f7564225b6b091e143dec9cbeffe0841b4f1f87aa9b7d79213a96de54fe8923f3303", @typed={0x8, 0x137, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @generic="156f4606a8bfe4bc753d9d02379c9814f356d04cc89e6c2b404251dceb174e77853b97ccb5817f82c4b4bc9779895a25a860b14c2fabe484426a74d6f8b65cfad7edeb", @nested={0xce, 0x12b, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3f}}, @generic, @nested={0x4, 0xfd}, @generic="9cc5d7c41e25584d43d8f76bb27ab68d829404b647a56f0455e0b4158f83a02a008523594f046b3b4b2329b3001d31668da9ff031ce8bf09485661", @generic="ad9ba7f8f2eef9347b700d255cc061129002d001eaa655edb37c8737c603705d43400da929b78cc29168736942acebe3de0d42a667a0d8f4ae91ccc46e8ffc455dbe94bef83e5f9d0f4dd2dd4998b05cce9ea920e520fdf40817e0bb15a911278eb82b32cece060666776f57bd9dd5fb0d4dfef43ef796283c514d"]}, @generic="a4a7cf1a69111e8b4bad04676a77e3481cfb1edc5628043fb7844c20ad2345d2e7ab5d274701a9a5f23604c9f5bfbce5795d018657", @nested={0x1068, 0x14d, 0x0, 0x1, [@typed={0x56, 0x60, 0x0, 0x0, @binary="c272c8fda106e00b75bf7c4a7a3c971bf544e4509feb47f5dec529a030bda367ce22214a174aa55d2b61828f80db46480e9a209b4728420c42e5186f01361a97cce804f02d0f55ada4bb442b195dd1832ff9"}, @typed={0x8, 0x97, 0x0, 0x0, @u32=0xb}, @generic="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", @nested={0x4, 0x142}]}, @typed={0x14, 0xc1, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @generic="94236bc05bc9283f8e129cd0a4010a93e7c8fd", @nested={0x4, 0x138}]}, @nested={0x8, 0x42, 0x0, 0x1, [@nested={0x4, 0x12b}]}]}]}, 0x1484}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r1, 0x11) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x111800, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.936978201s ago: executing program 2 (id=318): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x800, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x40000000000000, 0xfffffffffffffffe]}, 0x1fe, 0xd) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008040) (async, rerun: 64) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async, rerun: 64) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f0000000140), 0x81, 0xa505}, 0x3}, 0x7, 0xda) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) (async, rerun: 32) mmap$auto(0x400000000000000, 0xfb1, 0xffffffff, 0x9b72, r0, 0x8000000000000001) (rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x26, 0xa, 0xfffffffc) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff03, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0x7ffffffff000) (async) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) socket(0x2b, 0x1, 0x1) (async) prctl$auto(0xffffffff, 0x28, 0x0, 0xffff, 0x2) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async, rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x200, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) 3.083208948s ago: executing program 3 (id=319): sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x4801) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000280)="1e1efbb5c223d6dd7711379057cf117a3bf964acb25ab51d7d801132d4a489ed0046c93d0000000000000000000000f228f97e34dd5a5541f5de7c889413859fef3cceb70b6a6fe2b5ae9c5cc3dba3fc609817637ad36d76d8d45c6fa729dc327f795700"/114, 0x5c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0xf5ffffff, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdfa506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2.612189342s ago: executing program 0 (id=320): sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x4801) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x403) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000280)="1e1efbb5c223d6dd7711379057cf117a3bf964acb25ab51d7d801132d4a489ed0046c93d0000000000000000000000f228f97e34dd5a5541f5de7c889413859fef3cceb70b6a6fe2b5ae9c5cc3dba3", 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc01f}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2.609120334s ago: executing program 3 (id=321): mmap$auto(0xebb7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) mlock$auto(0xfbe8, 0x4) mlock$auto(0x837, 0x7) mlock$auto(0x3, 0x2) r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r0, &(0x7f0000000180)='1l80211\x00', 0x1) mlock$auto(0x10000, 0x5) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x401, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x0, 0x8, 0x9) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/247, 0xf7) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) semctl$auto_IPC_INFO(0x44, 0x200011, 0x3, 0xf7ffeffffffffdff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="9021a38aa22cbc35dad256304e7a6b70269bf0e69bd2d37b9e77db0c9ba511db57d6a7c7e58fb841cee83cebcd0b07791c91f1b55bd12fbcf5ecc602195151065a10f0d3c72e355fe8051c9ad1758e", @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000891) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) read$auto(0x3, 0x0, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x1f00, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x40000000000000, 0x0, 0x801}, 0x0) 2.567478135s ago: executing program 1 (id=322): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x55, 0x9, r1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000000240)={{0x80020000, 0x0, 0xee01, 0x9, 0x8, 0x7, 0x8}, 0x0, &(0x7f0000000200)=0xd5, 0x6, 0xffffffffffbff90b, 0x81, 0x9, 0x1000, 0x598, 0xf, 0x3, @inferred, @raw=0xffffffff}) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0xffffffff, 0x2, 0x3ff, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4000c, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x1000000003b, 0x7, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x14) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) ioctl$auto_SG_GET_COMMAND_Q2(r1, 0x2270, &(0x7f0000000140)="086f0e926aa26f0554bd03361655258d84e6eb321d451ad8cd4336cbba9e46c9aa0359e2a1d4ef061f1500f30c19fa77f9b795080e585a5dd59a08736e564291c44bed99f1f62e6cac0ae7c76102c48b8e38cc95ec6862fdeccbaaa03d971323965daebc5be2355fdfaaccbe5fd882dfbf8b2402223ce9e549b265f7ad88e2e7f82d917d68a7320bf3e69329a761d5ce80b21b6b1a117f0e4c41999c02baeeb78d99036c6e6252a47433ae9d28115d0052e3b7b0cb3196298178bd235746a4") fstat$auto(r0, &(0x7f0000000080)={0x7ff, 0x200000, 0x2, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, 0x88c, 0x1, 0x8, 0x37, 0x8000000000000000, 0x9, 0x5, 0x0, 0xc06, 0x100}) socketcall$auto(0x907, 0x0) 1.799251378s ago: executing program 0 (id=323): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x48080) mmap$auto(0x1, 0x3, 0x3, 0xe31, r0, 0x6) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x480e80, 0x0) socket(0xf, 0x0, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r3, &(0x7f0000001a00)=""/4097, 0x1001) ioctl$auto_IMADDTIMER(r3, 0x80044940, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) 1.792192174s ago: executing program 3 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x21, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x601000000000000, 0x20040085}, 0x2800c88c) 1.231259783s ago: executing program 1 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf2501000000040007800c000200050000000000000008000100070000002de510d018d89735e8d902a973a6fc188841a02d7a0e5ae3c9e949c021d205f666c23cbd83e78ec6bc5d256422921cc3fb606f0f7ad77b18fc96e81ed35cd06699e7bc12a4c80503b1f782f6e14625cc1d43f5abb062cba50164ab625e594b792914b8b07359d0cb53e1fea8f82d3e9ee8ce3013f834303d0804caf6931be78910a0bd700b28696ce24846a1cc55c8e412e72e2f528216d27b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x54) r7 = socket(0xa, 0x5, 0x84) getsockopt$auto(r7, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) setsockopt$auto(r6, 0x10000000084, 0x9, 0x0, 0x9c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x80, 0x6, 0x5, 0x10, r3, 0x1) r8 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}, 0x1, 0x0, 0x1000000}, 0x40000) ioctl$auto_I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000140)) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01032abd7000fbdbd225000100000600010011000000"], 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4044040) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') ioperm$auto(0x5c1, 0xe8, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)={0x101000, 0x0, 0x12}, 0x18) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup/cgroup.freeze\x00', 0xb02, 0x0) write$auto(0x3, 0x0, 0x7fffffff) 1.230159789s ago: executing program 3 (id=326): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) open_by_handle_at$auto(r0, &(0x7f0000000080)={0x8, 0x100fe, "9700000000000000"}, 0x2) 834.886925ms ago: executing program 0 (id=327): mmap$auto(0x0, 0x400000, 0x7, 0x19b72, 0x5, 0x9000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x943, 0x1ffe0, 0x1, 0x6, 0x40, 0x9, 0xffffffff, 0x2, 0x7, 0x200, 0x8, 0x5, 0xffffffff, 0x5, 0x7, 0x0, 0x1, 0x0, 0x1, 0xfffff8ab, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd]}, 0x3, 0x9) r0 = socket(0x2a, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x24030000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 810.297312ms ago: executing program 3 (id=328): write$auto(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r1 = socket(0x2, 0x2, 0x1) getsockopt$auto(r1, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', &(0x7f0000000080)=0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r0}}, 0x58) msgctl$auto_MSG_STAT(0x3, 0xb, &(0x7f00000007c0)={{0x3, 0xee00, 0x0, 0x8, 0x4, 0xee, 0x1ff}, &(0x7f0000000740)=0x6, &(0x7f0000000780)=0x1, 0x2, 0x6, 0x7, 0xa, 0x4, 0x3ff, 0x1, 0x3, @raw=0x5, @raw=0x52}) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000011200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x4020004) setresuid$auto(0x2, 0x7, 0x8080) 594.327777ms ago: executing program 2 (id=329): sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x4801) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000280)="1e1efbb5c223d6dd7711379057cf117a3bf964acb25ab51d7d801132d4a489ed0046c93d0000000000000000000000f228f97e34dd5a5541f5de7c889413859fef3cceb70b6a6fe2b5ae9c5cc3dba3fc609817637ad36d76d8d45c6fa729dc327f795700"/114, 0x5c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0xfcffffff, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdfa506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 592.901663ms ago: executing program 0 (id=330): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x280, 0x400, 0x4}]}) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x280, 0x400, 0x4}]}) (async) 233.136244ms ago: executing program 0 (id=331): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop13/queue/wbt_lat_usec\x00', 0x206a1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/wg0/base_reachable_time\x00', 0xa0202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/orangefs/stats/reads\x00', 0x2000, 0x0) r2 = prctl$auto(0x15, 0x5, 0x4, 0x20000000009, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/229, 0xe5) writev$auto(0x3, &(0x7f0000000100)={&(0x7f00000001c0), 0x7111}, 0x8) ioctl$auto_TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)={0x3, 0xff, 0x0, @inferred=r0}}) 216.727321ms ago: executing program 2 (id=332): sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x4801) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x403) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000280)="1e1efbb5c223d6dd7711379057cf117a3bf964acb25ab51d7d801132d4a489ed0046c93d0000000000000000000000f228f97e34dd5a5541f5de7c889413859fef3cceb70b6a6fe2b5ae9c5cc3dba3", 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc02f}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 0s ago: executing program 1 (id=333): mmap$auto(0x80000000, 0x2020006, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(&(0x7f0000000100)={0x6ddb8b07, 0x2412}, 0x0) madvise$auto(0x7, 0x3, 0x8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32, @ANYBLOB="060006ff05000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x10001) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x3, 0xe983, 0xdf, 0x7ff, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r1) setsockopt$auto(r2, 0x80, 0xfffffffe, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x3ff) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8381, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 88.128522][ T5852] cgroup: Unknown subsys name 'net' [ 88.265814][ T5852] cgroup: Unknown subsys name 'cpuset' [ 88.275200][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.282563][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.486812][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.495017][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.503219][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.512007][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.520740][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.528685][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.536455][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.544882][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.553784][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.562274][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.626518][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.642204][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.650583][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.658903][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.667004][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.705550][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.715896][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.724580][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.733838][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.752575][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.317180][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 93.434653][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 93.599191][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 93.640224][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.647546][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.655918][ T5861] bridge_slave_0: entered allmulticast mode [ 93.664025][ T5861] bridge_slave_0: entered promiscuous mode [ 93.679797][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 93.719439][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.727120][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.735093][ T5861] bridge_slave_1: entered allmulticast mode [ 93.744295][ T5861] bridge_slave_1: entered promiscuous mode [ 93.780562][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.788000][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.795467][ T5863] bridge_slave_0: entered allmulticast mode [ 93.803887][ T5863] bridge_slave_0: entered promiscuous mode [ 93.864692][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.872013][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.879184][ T5863] bridge_slave_1: entered allmulticast mode [ 93.887337][ T5863] bridge_slave_1: entered promiscuous mode [ 93.911465][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.932009][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.010708][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.057188][ T5861] team0: Port device team_slave_0 added [ 94.066779][ T5861] team0: Port device team_slave_1 added [ 94.075733][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.106160][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.113484][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.120990][ T5872] bridge_slave_0: entered allmulticast mode [ 94.129072][ T5872] bridge_slave_0: entered promiscuous mode [ 94.176279][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.183883][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.191247][ T5872] bridge_slave_1: entered allmulticast mode [ 94.199441][ T5872] bridge_slave_1: entered promiscuous mode [ 94.235209][ T5863] team0: Port device team_slave_0 added [ 94.243385][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.250388][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.276894][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.319373][ T5863] team0: Port device team_slave_1 added [ 94.326175][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.335540][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.361649][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.373074][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.380360][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.388011][ T5875] bridge_slave_0: entered allmulticast mode [ 94.395445][ T5875] bridge_slave_0: entered promiscuous mode [ 94.405594][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.413188][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.420628][ T5875] bridge_slave_1: entered allmulticast mode [ 94.429151][ T5875] bridge_slave_1: entered promiscuous mode [ 94.438738][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.452092][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.583497][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.590586][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.617075][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.631526][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.633518][ T51] Bluetooth: hci0: command tx timeout [ 94.639357][ T5868] Bluetooth: hci1: command tx timeout [ 94.648593][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.676674][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.694264][ T5861] hsr_slave_0: entered promiscuous mode [ 94.701044][ T5861] hsr_slave_1: entered promiscuous mode [ 94.712789][ T5868] Bluetooth: hci2: command tx timeout [ 94.713943][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.732168][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.743568][ T5872] team0: Port device team_slave_0 added [ 94.789036][ T5872] team0: Port device team_slave_1 added [ 94.795305][ T5868] Bluetooth: hci3: command tx timeout [ 94.818044][ T5875] team0: Port device team_slave_0 added [ 94.865540][ T5875] team0: Port device team_slave_1 added [ 94.935041][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.942730][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.969484][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.987113][ T5863] hsr_slave_0: entered promiscuous mode [ 94.993582][ T5863] hsr_slave_1: entered promiscuous mode [ 95.000231][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 95.006208][ T5863] Cannot create hsr debugfs directory [ 95.049325][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.056458][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.083224][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.100959][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.109285][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.135471][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.171896][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.178914][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.206048][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.378369][ T5872] hsr_slave_0: entered promiscuous mode [ 95.385117][ T5872] hsr_slave_1: entered promiscuous mode [ 95.391144][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 95.397081][ T5872] Cannot create hsr debugfs directory [ 95.409840][ T5875] hsr_slave_0: entered promiscuous mode [ 95.416463][ T5875] hsr_slave_1: entered promiscuous mode [ 95.424006][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 95.429882][ T5875] Cannot create hsr debugfs directory [ 95.694801][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.735512][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.779786][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.812755][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.884150][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.900793][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.914597][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.939351][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.027747][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.039431][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.051069][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.067477][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.176116][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.203432][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.221148][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.243072][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.326563][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.360024][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.394602][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.401956][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.446774][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.454028][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.478344][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.529122][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.556462][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.564012][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.606988][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.614184][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.657438][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.711832][ T5868] Bluetooth: hci0: command tx timeout [ 96.717313][ T5868] Bluetooth: hci1: command tx timeout [ 96.785018][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.794876][ T5868] Bluetooth: hci2: command tx timeout [ 96.815296][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.834497][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.872511][ T5868] Bluetooth: hci3: command tx timeout [ 96.873727][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.885321][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.941034][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.948298][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.971634][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.978838][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.045788][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.053126][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.189296][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.345616][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.421103][ T5861] veth0_vlan: entered promiscuous mode [ 97.440462][ T1072] cfg80211: failed to load regulatory.db [ 97.504599][ T5861] veth1_vlan: entered promiscuous mode [ 97.646169][ T5861] veth0_macvtap: entered promiscuous mode [ 97.664202][ T5863] veth0_vlan: entered promiscuous mode [ 97.678202][ T5861] veth1_macvtap: entered promiscuous mode [ 97.720320][ T5863] veth1_vlan: entered promiscuous mode [ 97.754594][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.780038][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.797856][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.825831][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.854428][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.863677][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.888828][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.919038][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.970869][ T5863] veth0_macvtap: entered promiscuous mode [ 98.003626][ T5875] veth0_vlan: entered promiscuous mode [ 98.010513][ T5863] veth1_macvtap: entered promiscuous mode [ 98.087782][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.106213][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.119548][ T5875] veth1_vlan: entered promiscuous mode [ 98.159618][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.187550][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.207607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.218796][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.221417][ T5872] veth0_vlan: entered promiscuous mode [ 98.240392][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.250638][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.268499][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.278587][ T1060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.309340][ T5872] veth1_vlan: entered promiscuous mode [ 98.331024][ T5875] veth0_macvtap: entered promiscuous mode [ 98.352220][ T5875] veth1_macvtap: entered promiscuous mode [ 98.423961][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.430460][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.499528][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.546931][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.575918][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.612359][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.630775][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.660129][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.706435][ T5872] veth0_macvtap: entered promiscuous mode [ 98.748299][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.792478][ T5868] Bluetooth: hci1: command tx timeout [ 98.797963][ T51] Bluetooth: hci0: command tx timeout [ 98.810590][ T5872] veth1_macvtap: entered promiscuous mode [ 98.856146][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.872480][ T51] Bluetooth: hci2: command tx timeout [ 98.913498][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.954599][ T51] Bluetooth: hci3: command tx timeout [ 99.037626][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.078576][ T5958] random: crng reseeded on system resumption [ 99.162894][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.174169][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.324412][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.368696][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.386175][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.388477][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.583791][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.602788][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.654479][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.690037][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.718136][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.739068][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.046861][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.083175][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.221292][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.271159][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.752265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.882064][ T51] Bluetooth: hci0: command tx timeout [ 100.887576][ T51] Bluetooth: hci1: command tx timeout [ 100.953100][ T51] Bluetooth: hci2: command tx timeout [ 101.032032][ T51] Bluetooth: hci3: command tx timeout [ 101.145543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.235289][ T5994] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.442426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.451200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.548536][ T5998] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78406 [ 101.568868][ T5998] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 101.578079][ T5998] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 101.586944][ T5998] page_type: f5(slab) [ 101.599143][ T5998] raw: 00fff00000000040 ffff88801b891000 0000000000000000 dead000000000001 [ 101.612626][ T5998] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 101.624802][ T5998] head: 00fff00000000040 ffff88801b891000 0000000000000000 dead000000000001 [ 101.638577][ T5998] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 101.650105][ T5998] head: 00fff00000000001 ffffea0001e10181 00000000ffffffff 00000000ffffffff [ 101.662445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 101.670859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 101.751823][ T5998] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 101.785359][ T5998] page dumped because: unmovable page [ 101.797576][ T5998] page_owner tracks the page as allocated [ 101.809536][ T5998] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5303, tgid 5303 (v4l_id), ts 47932932540, free_ts 34329384768 [ 101.835349][ T5998] post_alloc_hook+0x1c0/0x230 [ 101.840221][ T5998] get_page_from_freelist+0x132b/0x38e0 [ 101.848576][ T5998] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 101.856288][ T5998] alloc_pages_mpol+0x1fb/0x550 [ 101.864364][ T5998] new_slab+0x247/0x330 [ 101.871122][ T5998] ___slab_alloc+0xcf2/0x1740 [ 101.880102][ T5998] __slab_alloc.constprop.0+0x56/0xb0 [ 101.891891][ T5998] kmem_cache_alloc_noprof+0xef/0x3b0 [ 101.901732][ T5998] mas_alloc_nodes+0x18b/0x8b0 [ 101.912772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.922020][ T5998] mas_node_count_gfp+0x105/0x130 [ 101.927231][ T5998] mas_preallocate+0x7e0/0xde0 [ 101.979294][ T5998] __split_vma+0x34a/0x1070 [ 101.984229][ T5998] vms_gather_munmap_vmas+0x3b1/0x1340 [ 101.991265][ T5998] __mmap_region+0x436/0x27b0 [ 101.992560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.004943][ T5998] mmap_region+0x1ab/0x3f0 [ 102.012851][ T5998] do_mmap+0xa3e/0x1210 [ 102.018290][ T5998] page last free pid 1 tgid 1 stack trace: [ 102.025998][ T5998] __free_frozen_pages+0x7d5/0x10f0 [ 102.034045][ T5998] free_contig_range+0x183/0x4b0 [ 102.049087][ T5998] destroy_args+0x7f6/0xa60 [ 102.058460][ T6001] FAULT_INJECTION: forcing a failure. [ 102.058460][ T6001] name failslab, interval 1, probability 0, space 0, times 1 [ 102.073403][ T5998] debug_vm_pgtable+0x1a32/0x3640 [ 102.078488][ T5998] do_one_initcall+0x120/0x6e0 [ 102.098263][ T5998] kernel_init_freeable+0x5c2/0x910 [ 102.124812][ T6001] CPU: 0 UID: 0 PID: 6001 Comm: syz.3.11 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 102.124845][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.124856][ T6001] Call Trace: [ 102.124862][ T6001] [ 102.124869][ T6001] dump_stack_lvl+0x16c/0x1f0 [ 102.124895][ T6001] should_fail_ex+0x512/0x640 [ 102.124916][ T6001] ? fs_reclaim_acquire+0xae/0x150 [ 102.124946][ T6001] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 102.124969][ T6001] should_failslab+0xc2/0x120 [ 102.125002][ T6001] __kmalloc_noprof+0xd2/0x510 [ 102.125029][ T6001] tomoyo_realpath_from_path+0xc2/0x6e0 [ 102.125055][ T6001] ? tomoyo_profile+0x47/0x60 [ 102.125082][ T6001] tomoyo_path_number_perm+0x245/0x580 [ 102.125101][ T6001] ? tomoyo_path_number_perm+0x237/0x580 [ 102.125122][ T6001] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.125140][ T6001] ? futex_wake+0x1ad/0x530 [ 102.125188][ T6001] ? find_held_lock+0x2b/0x80 [ 102.125206][ T6001] ? hook_file_ioctl_common+0x145/0x410 [ 102.125232][ T6001] ? __fget_files+0x20e/0x3c0 [ 102.125255][ T6001] security_file_ioctl+0x9b/0x240 [ 102.125276][ T6001] __x64_sys_ioctl+0xb7/0x210 [ 102.125305][ T6001] do_syscall_64+0xcd/0x490 [ 102.125328][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.125346][ T6001] RIP: 0033:0x7fc1d438ebe9 [ 102.125360][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.125377][ T6001] RSP: 002b:00007fc1d511a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.125394][ T6001] RAX: ffffffffffffffda RBX: 00007fc1d45b6090 RCX: 00007fc1d438ebe9 [ 102.125406][ T6001] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000003 [ 102.125416][ T6001] RBP: 00007fc1d4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.125426][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.125436][ T6001] R13: 00007fc1d45b6128 R14: 00007fc1d45b6090 R15: 00007ffe6012f088 [ 102.125459][ T6001] [ 102.125467][ T6001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.162347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.171831][ T5998] kernel_init+0x1c/0x2b0 [ 102.385221][ T5998] ret_from_fork+0x5d7/0x6f0 [ 102.397373][ T5998] ret_from_fork_asm+0x1a/0x30 [ 102.408016][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.750866][ T5999] random: crng reseeded on system resumption [ 102.855767][ T6010] nbd: nbd7 already in use syzkaller syzkaller login: [ 103.406309][ T6021] nbd: nbd7 already in use [ 103.670873][ T6019] vivid-003: ================= START STATUS ================= [ 103.730916][ T6019] vivid-003: Radio HW Seek Mode: Bounded [ 103.737008][ T6019] vivid-003: Radio Programmable HW Seek: false [ 103.743498][ T6019] vivid-003: RDS Rx I/O Mode: Block I/O [ 103.749204][ T6019] vivid-003: Generate RBDS Instead of RDS: false [ 103.756802][ T6019] vivid-003: RDS Reception: true [ 103.762140][ T6019] vivid-003: RDS Program Type: 0 inactive [ 103.770337][ T6019] vivid-003: RDS PS Name: inactive [ 103.801656][ T6019] vivid-003: RDS Radio Text: inactive [ 103.851760][ T6019] vivid-003: RDS Traffic Announcement: false inactive [ 103.858648][ T6019] vivid-003: RDS Traffic Program: false inactive [ 103.865479][ T6019] vivid-003: RDS Music: false inactive [ 103.871083][ T6019] vivid-003: ================== END STATUS ================== [ 103.893484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.895816][ T6024] netlink: 334 bytes leftover after parsing attributes in process `syz.1.17'. [ 103.976787][ T6011] netlink: 334 bytes leftover after parsing attributes in process `syz.2.14'. [ 105.563691][ T6047] HfR: entered promiscuous mode [ 105.611238][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'. [ 105.816506][ T6047] HfR: left promiscuous mode [ 105.895165][ T6051] HfR: entered promiscuous mode [ 106.296043][ T6061] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 106.361717][ T6061] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.439527][ T6061] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 106.476706][ T6061] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 106.486031][ T6065] Zero length message leads to an empty skb [ 106.546687][ T6061] page dumped because: unmovable page [ 106.570515][ T6061] page_owner tracks the page as allocated [ 106.597139][ T6061] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 106.654044][ T6061] register_dummy_stack+0x89/0xd0 [ 106.659171][ T6061] init_page_owner+0x48/0x7e0 [ 106.664527][ T6061] page_ext_init+0x703/0xb00 [ 106.669187][ T6061] mm_core_init+0x13c/0x220 [ 106.676388][ T6061] page last free pid 5975 tgid 5975 stack trace: [ 106.683528][ T6061] __free_frozen_pages+0x7d5/0x10f0 [ 106.688893][ T6061] qlist_free_all+0x4d/0x120 [ 106.694073][ T6061] kasan_quarantine_reduce+0x195/0x1e0 [ 106.699687][ T6061] __kasan_slab_alloc+0x69/0x90 [ 106.706025][ T6061] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 106.712518][ T6061] __alloc_skb+0x2b2/0x380 [ 106.717003][ T6061] mld_newpack.isra.0+0x18e/0xa20 [ 106.756173][ T6061] add_grhead+0x299/0x340 [ 106.760845][ T6061] add_grec+0x11b5/0x1720 [ 106.779767][ T6061] mld_send_initial_cr+0x151/0x320 [ 106.801782][ T6061] mld_dad_work+0x32/0x1f0 [ 106.811273][ T6061] process_one_work+0x9cc/0x1b70 [ 106.821928][ T6061] worker_thread+0x6c8/0xf10 [ 106.839219][ T6061] kthread+0x3c5/0x780 [ 106.874157][ T6061] ret_from_fork+0x5d7/0x6f0 [ 106.901835][ T6061] ret_from_fork_asm+0x1a/0x30 [ 107.611860][ T6062] i2c i2c-0: delete_device: Extra parameters [ 107.809869][ T6088] vivid-003: ================= START STATUS ================= [ 107.828167][ T6088] vivid-003: Radio HW Seek Mode: Bounded [ 107.835495][ T6088] vivid-003: Radio Programmable HW Seek: false [ 107.938306][ T6088] vivid-003: RDS Rx I/O Mode: Block I/O [ 107.944426][ T6088] vivid-003: Generate RBDS Instead of RDS: false [ 107.951361][ T6088] vivid-003: RDS Reception: true [ 107.956989][ T6088] vivid-003: RDS Program Type: 0 inactive [ 107.962953][ T6088] vivid-003: RDS PS Name: inactive [ 107.968357][ T6088] vivid-003: RDS Radio Text: inactive [ 107.975200][ T6088] vivid-003: RDS Traffic Announcement: false inactive [ 107.982389][ T6088] vivid-003: RDS Traffic Program: false inactive [ 107.988807][ T6088] vivid-003: RDS Music: false inactive [ 108.012643][ T6088] vivid-003: ================== END STATUS ================== [ 109.246377][ T6099] FAULT_INJECTION: forcing a failure. [ 109.246377][ T6099] name fail_futex, interval 1, probability 0, space 0, times 1 [ 109.292051][ T6099] CPU: 0 UID: 60929 PID: 6099 Comm: syz.0.32 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 109.292096][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.292113][ T6099] Call Trace: [ 109.292123][ T6099] [ 109.292135][ T6099] dump_stack_lvl+0x16c/0x1f0 [ 109.292173][ T6099] should_fail_ex+0x512/0x640 [ 109.292210][ T6099] ? is_bpf_text_address+0x94/0x1a0 [ 109.292253][ T6099] get_futex_key+0x1d0/0x1560 [ 109.292292][ T6099] ? __pfx_get_futex_key+0x10/0x10 [ 109.292342][ T6099] futex_wait_setup+0x9d/0x550 [ 109.292396][ T6099] __futex_wait+0x194/0x2f0 [ 109.292433][ T6099] ? __pfx___futex_wait+0x10/0x10 [ 109.292473][ T6099] ? __pfx_futex_wake_mark+0x10/0x10 [ 109.292511][ T6099] ? futex_private_hash_put+0x176/0x300 [ 109.292543][ T6099] ? futex_private_hash_put+0x18a/0x300 [ 109.292574][ T6099] futex_wait+0xe8/0x380 [ 109.292608][ T6099] ? __pfx_futex_wait+0x10/0x10 [ 109.292660][ T6099] do_futex+0x229/0x350 [ 109.292690][ T6099] ? __pfx_do_futex+0x10/0x10 [ 109.292718][ T6099] ? find_held_lock+0x2b/0x80 [ 109.292748][ T6099] __x64_sys_futex+0x1e0/0x4c0 [ 109.292779][ T6099] ? __do_sys_close_range+0x278/0x730 [ 109.292818][ T6099] ? __pfx___x64_sys_futex+0x10/0x10 [ 109.292848][ T6099] ? __pfx___do_sys_close_range+0x10/0x10 [ 109.292885][ T6099] do_syscall_64+0xcd/0x490 [ 109.292914][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.292938][ T6099] RIP: 0033:0x7f63df38ebe9 [ 109.292958][ T6099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.292981][ T6099] RSP: 002b:00007f63e02570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.293005][ T6099] RAX: ffffffffffffffda RBX: 00007f63df5b5fa8 RCX: 00007f63df38ebe9 [ 109.293022][ T6099] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f63df5b5fa8 [ 109.293036][ T6099] RBP: 00007f63df5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 109.293050][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.293063][ T6099] R13: 00007f63df5b6038 R14: 00007fff14e9ea30 R15: 00007fff14e9eb18 [ 109.293094][ T6099] [ 109.679311][ T6108] HfR: entered promiscuous mode [ 109.724997][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 109.734377][ T6108] HfR: left promiscuous mode [ 109.884742][ T6108] HfR: entered promiscuous mode [ 110.843634][ T1060] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.901769][ T6126] ALSA: mixer_oss: invalid OSS volume 'bcachefs' [ 111.535285][ T6131] FAULT_INJECTION: forcing a failure. [ 111.535285][ T6131] name failslab, interval 1, probability 0, space 0, times 0 [ 111.557016][ T6131] CPU: 1 UID: 0 PID: 6131 Comm: syz.2.40 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 111.557062][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.557080][ T6131] Call Trace: [ 111.557089][ T6131] [ 111.557101][ T6131] dump_stack_lvl+0x16c/0x1f0 [ 111.557138][ T6131] should_fail_ex+0x512/0x640 [ 111.557173][ T6131] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 111.557213][ T6131] should_failslab+0xc2/0x120 [ 111.557252][ T6131] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 111.557287][ T6131] ? security_file_alloc+0x34/0x2b0 [ 111.557326][ T6131] security_file_alloc+0x34/0x2b0 [ 111.557360][ T6131] init_file+0x93/0x4c0 [ 111.557400][ T6131] alloc_empty_file+0x73/0x1e0 [ 111.557437][ T6131] dentry_open+0x46/0xd0 [ 111.557476][ T6131] get_name+0x2ae/0x460 [ 111.557513][ T6131] ? __pfx_get_name+0x10/0x10 [ 111.557555][ T6131] ? __pfx_filldir_one+0x10/0x10 [ 111.557618][ T6131] ? __pfx_reconnect_path+0x10/0x10 [ 111.557655][ T6131] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 111.557698][ T6131] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 111.557738][ T6131] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 111.557773][ T6131] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 111.557877][ T6131] do_handle_open+0x6e3/0xc50 [ 111.557911][ T6131] ? __pfx_do_handle_open+0x10/0x10 [ 111.557940][ T6131] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.557989][ T6131] ? xfd_validate_state+0x61/0x180 [ 111.558048][ T6131] ? do_syscall_64+0xcd/0x490 [ 111.558081][ T6131] do_syscall_64+0xcd/0x490 [ 111.558119][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.558147][ T6131] RIP: 0033:0x7f700858ebe9 [ 111.558172][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.558199][ T6131] RSP: 002b:00007f7009337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 111.558226][ T6131] RAX: ffffffffffffffda RBX: 00007f70087b5fa0 RCX: 00007f700858ebe9 [ 111.558246][ T6131] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000006 [ 111.558263][ T6131] RBP: 00007f7008611e19 R08: 0000000000000000 R09: 0000000000000000 [ 111.558281][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.558298][ T6131] R13: 00007f70087b6038 R14: 00007f70087b5fa0 R15: 00007ffcd370e0c8 [ 111.558335][ T6131] [ 111.868974][ T6144] i2c i2c-0: delete_device: Extra parameters [ 112.990123][ T6159] FAULT_INJECTION: forcing a failure. [ 112.990123][ T6159] name fail_futex, interval 1, probability 0, space 0, times 0 [ 113.056768][ T6159] CPU: 0 UID: 60929 PID: 6159 Comm: syz.1.45 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 113.056814][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.056832][ T6159] Call Trace: [ 113.056842][ T6159] [ 113.056855][ T6159] dump_stack_lvl+0x16c/0x1f0 [ 113.056896][ T6159] should_fail_ex+0x512/0x640 [ 113.056933][ T6159] ? is_bpf_text_address+0x94/0x1a0 [ 113.056978][ T6159] get_futex_key+0x1d0/0x1560 [ 113.057033][ T6159] ? __pfx_get_futex_key+0x10/0x10 [ 113.057088][ T6159] futex_wait_setup+0x9d/0x550 [ 113.057148][ T6159] __futex_wait+0x194/0x2f0 [ 113.057195][ T6159] ? __pfx___futex_wait+0x10/0x10 [ 113.057249][ T6159] ? __pfx_futex_wake_mark+0x10/0x10 [ 113.057301][ T6159] ? futex_private_hash_put+0x176/0x300 [ 113.057343][ T6159] ? futex_private_hash_put+0x18a/0x300 [ 113.057383][ T6159] futex_wait+0xe8/0x380 [ 113.057428][ T6159] ? __pfx_futex_wait+0x10/0x10 [ 113.057517][ T6159] do_futex+0x229/0x350 [ 113.057559][ T6159] ? __pfx_do_futex+0x10/0x10 [ 113.057599][ T6159] ? find_held_lock+0x2b/0x80 [ 113.057639][ T6159] __x64_sys_futex+0x1e0/0x4c0 [ 113.057681][ T6159] ? __do_sys_close_range+0x278/0x730 [ 113.057720][ T6159] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.057759][ T6159] ? __pfx___do_sys_close_range+0x10/0x10 [ 113.057808][ T6159] do_syscall_64+0xcd/0x490 [ 113.057847][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.057878][ T6159] RIP: 0033:0x7f574e38ebe9 [ 113.057904][ T6159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.057932][ T6159] RSP: 002b:00007f574f1170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.057962][ T6159] RAX: ffffffffffffffda RBX: 00007f574e5b5fa8 RCX: 00007f574e38ebe9 [ 113.057981][ T6159] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f574e5b5fa8 [ 113.057999][ T6159] RBP: 00007f574e5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 113.058017][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.058034][ T6159] R13: 00007f574e5b6038 R14: 00007ffd07ba9d70 R15: 00007ffd07ba9e58 [ 113.058074][ T6159] [ 113.410451][ T6165] HfR: entered promiscuous mode [ 113.472365][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 113.527731][ T6165] HfR: left promiscuous mode [ 113.702641][ T6167] HfR: entered promiscuous mode [ 114.917748][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 114.926411][ T51] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 115.094105][ T6203] process 'syz.3.61' launched ':,' with NULL argv: empty string added [ 115.296034][ T6202] FAULT_INJECTION: forcing a failure. [ 115.296034][ T6202] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.380769][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.3.61 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 115.380810][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.380825][ T6202] Call Trace: [ 115.380833][ T6202] [ 115.380843][ T6202] dump_stack_lvl+0x16c/0x1f0 [ 115.380879][ T6202] should_fail_ex+0x512/0x640 [ 115.380917][ T6202] _copy_from_user+0x2e/0xd0 [ 115.380956][ T6202] get_timespec64+0x8b/0x1b0 [ 115.380990][ T6202] ? __pfx_get_timespec64+0x10/0x10 [ 115.381021][ T6202] ? ktime_get+0x200/0x310 [ 115.381061][ T6202] __x64_sys_futex+0x288/0x4c0 [ 115.381100][ T6202] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.381135][ T6202] ? xfd_validate_state+0x61/0x180 [ 115.381187][ T6202] do_syscall_64+0xcd/0x490 [ 115.381219][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.381244][ T6202] RIP: 0033:0x7fc1d438ebe9 [ 115.381266][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.381290][ T6202] RSP: 002b:00007ffe6012f1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.381316][ T6202] RAX: ffffffffffffffda RBX: 000000000001c222 RCX: 00007fc1d438ebe9 [ 115.381333][ T6202] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc1d45b618c [ 115.381349][ T6202] RBP: 0000000000000032 R08: 00007fc1d513c000 R09: 0000001d6012f4df [ 115.381365][ T6202] R10: 00007ffe6012f2e0 R11: 0000000000000246 R12: 00007fc1d45b618c [ 115.381381][ T6202] R13: 00007ffe6012f2e0 R14: 000000000001c254 R15: 00007ffe6012f300 [ 115.381415][ T6202] [ 115.817886][ T30] audit: type=1800 audit(1754675496.982:2): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.62" name="members" dev="configfs" ino=8438 res=0 errno=0 [ 116.824333][ T6208] kexec: Could not allocate control_code_buffer [ 119.509876][ T6276] FAULT_INJECTION: forcing a failure. [ 119.509876][ T6276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.590005][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.1.70 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 119.590048][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.590064][ T6276] Call Trace: [ 119.590074][ T6276] [ 119.590085][ T6276] dump_stack_lvl+0x16c/0x1f0 [ 119.590123][ T6276] should_fail_ex+0x512/0x640 [ 119.590163][ T6276] _copy_to_user+0x32/0xd0 [ 119.590206][ T6276] simple_read_from_buffer+0xcb/0x170 [ 119.590239][ T6276] proc_fail_nth_read+0x197/0x240 [ 119.590272][ T6276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.590307][ T6276] ? rw_verify_area+0xcf/0x6c0 [ 119.590337][ T6276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.590369][ T6276] vfs_read+0x1e4/0xc60 [ 119.590407][ T6276] ? __pfx___mutex_lock+0x10/0x10 [ 119.590439][ T6276] ? __pfx_vfs_read+0x10/0x10 [ 119.590475][ T6276] ? __fget_files+0x20e/0x3c0 [ 119.590511][ T6276] ksys_read+0x12a/0x250 [ 119.590543][ T6276] ? __pfx_ksys_read+0x10/0x10 [ 119.590575][ T6276] ? fput+0x9b/0xd0 [ 119.590623][ T6276] do_syscall_64+0xcd/0x490 [ 119.590659][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.590698][ T6276] RIP: 0033:0x7f574e38d5fc [ 119.590721][ T6276] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.590747][ T6276] RSP: 002b:00007f574f117030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.590775][ T6276] RAX: ffffffffffffffda RBX: 00007f574e5b5fa0 RCX: 00007f574e38d5fc [ 119.590793][ T6276] RDX: 000000000000000f RSI: 00007f574f1170a0 RDI: 0000000000000003 [ 119.590811][ T6276] RBP: 00007f574f117090 R08: 0000000000000000 R09: 0000000000000000 [ 119.590827][ T6276] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 119.590845][ T6276] R13: 00007f574e5b6038 R14: 00007f574e5b5fa0 R15: 00007ffd07ba9e58 [ 119.590885][ T6276] [ 120.011003][ T6277] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 120.095972][ T6277] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 120.114259][ T6283] openvswitch: HfR: Dropping previously announced user features [ 120.130632][ T6277] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 120.169807][ T6287] nbd: nbd7 already in use [ 120.176941][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 120.208220][ T6277] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 120.227210][ T6277] page dumped because: unmovable page [ 120.313275][ T6277] page_owner tracks the page as allocated [ 120.324706][ T6277] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 120.358903][ T6284] HfR: left promiscuous mode [ 120.370060][ T6277] register_dummy_stack+0x89/0xd0 [ 120.378997][ T6277] init_page_owner+0x48/0x7e0 [ 120.383962][ T6277] page_ext_init+0x703/0xb00 [ 120.388757][ T6277] mm_core_init+0x13c/0x220 [ 120.393823][ T6277] page last free pid 5975 tgid 5975 stack trace: [ 120.402625][ T6277] __free_frozen_pages+0x7d5/0x10f0 [ 120.408058][ T6277] qlist_free_all+0x4d/0x120 [ 120.412796][ T6277] kasan_quarantine_reduce+0x195/0x1e0 [ 120.418973][ T6277] __kasan_slab_alloc+0x69/0x90 [ 120.427845][ T6277] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 120.434462][ T6277] __alloc_skb+0x2b2/0x380 [ 120.440635][ T6277] mld_newpack.isra.0+0x18e/0xa20 [ 120.449809][ T6277] add_grhead+0x299/0x340 [ 120.458875][ T6277] add_grec+0x11b5/0x1720 [ 120.463478][ T6277] mld_send_initial_cr+0x151/0x320 [ 120.468885][ T6277] mld_dad_work+0x32/0x1f0 [ 120.475241][ T6277] process_one_work+0x9cc/0x1b70 [ 120.480466][ T6277] worker_thread+0x6c8/0xf10 [ 120.485162][ T6277] kthread+0x3c5/0x780 [ 120.489350][ T6277] ret_from_fork+0x5d7/0x6f0 [ 120.495594][ T6277] ret_from_fork_asm+0x1a/0x30 [ 120.947847][ T6283] HfR: entered promiscuous mode [ 121.484059][ T6303] syz.3.76 uses obsolete (PF_INET,SOCK_PACKET) g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&g&[ 123.711186][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 123.751020][ T6375] openvswitch: HfR: Dropping previously announced user features [ 123.759773][ T6377] HfR: left promiscuous mode [ 123.969998][ T6375] HfR: entered promiscuous mode [ 125.273393][ T6409] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.773788][ T6438] nbd: nbd7 already in use [ 127.828017][ T6434] FAULT_INJECTION: forcing a failure. [ 127.828017][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 127.914201][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.3.95 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 127.914242][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.914256][ T6434] Call Trace: [ 127.914264][ T6434] [ 127.914275][ T6434] dump_stack_lvl+0x16c/0x1f0 [ 127.914311][ T6434] should_fail_ex+0x512/0x640 [ 127.914343][ T6434] ? fs_reclaim_acquire+0xae/0x150 [ 127.914384][ T6434] ? tomoyo_encode2+0x100/0x3e0 [ 127.914417][ T6434] should_failslab+0xc2/0x120 [ 127.914451][ T6434] __kmalloc_noprof+0xd2/0x510 [ 127.914484][ T6434] ? d_absolute_path+0x136/0x1a0 [ 127.914529][ T6434] tomoyo_encode2+0x100/0x3e0 [ 127.914571][ T6434] tomoyo_encode+0x29/0x50 [ 127.914613][ T6434] tomoyo_realpath_from_path+0x18f/0x6e0 [ 127.914662][ T6434] tomoyo_path_number_perm+0x245/0x580 [ 127.914693][ T6434] ? tomoyo_path_number_perm+0x237/0x580 [ 127.914728][ T6434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.914822][ T6434] ? find_held_lock+0x2b/0x80 [ 127.914848][ T6434] ? hook_file_ioctl_common+0x145/0x410 [ 127.914889][ T6434] ? __fget_files+0x20e/0x3c0 [ 127.914938][ T6434] security_file_ioctl+0x9b/0x240 [ 127.914981][ T6434] __x64_sys_ioctl+0xb7/0x210 [ 127.915027][ T6434] do_syscall_64+0xcd/0x490 [ 127.915063][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.915091][ T6434] RIP: 0033:0x7fc1d438ebe9 [ 127.915114][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.915139][ T6434] RSP: 002b:00007fc1d25f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.915167][ T6434] RAX: ffffffffffffffda RBX: 00007fc1d45b6180 RCX: 00007fc1d438ebe9 [ 127.915186][ T6434] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 127.915202][ T6434] RBP: 00007fc1d4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 127.915219][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.915236][ T6434] R13: 00007fc1d45b6218 R14: 00007fc1d45b6180 R15: 00007ffe6012f088 [ 127.915276][ T6434] [ 127.915359][ T6434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.847436][ T6450] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 128.986852][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.100'. [ 129.059586][ T6452] hsr_slave_0: left promiscuous mode [ 129.070169][ T6452] hsr_slave_1: left promiscuous mode [ 129.536346][ T6461] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.361459][ T6476] FAULT_INJECTION: forcing a failure. [ 130.361459][ T6476] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 130.402756][ T6476] CPU: 0 UID: 0 PID: 6476 Comm: syz.2.103 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 130.402802][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.402821][ T6476] Call Trace: [ 130.402831][ T6476] [ 130.402843][ T6476] dump_stack_lvl+0x16c/0x1f0 [ 130.402883][ T6476] should_fail_ex+0x512/0x640 [ 130.402928][ T6476] should_fail_alloc_page+0xe7/0x130 [ 130.402972][ T6476] prepare_alloc_pages+0x3c2/0x610 [ 130.403024][ T6476] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 130.403066][ T6476] ? find_held_lock+0x2b/0x80 [ 130.403098][ T6476] ? page_table_check_set+0x627/0x750 [ 130.403142][ T6476] ? page_table_check_set+0x631/0x750 [ 130.403180][ T6476] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 130.403220][ T6476] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.403265][ T6476] ? const_folio_flags+0x5b/0x100 [ 130.403310][ T6476] ? const_folio_flags+0x5b/0x100 [ 130.403372][ T6476] ? folio_remove_rmap_pmd+0x2eb/0x7d0 [ 130.403412][ T6476] ? split_huge_pmd_locked+0x116/0x3a10 [ 130.403458][ T6476] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.403506][ T6476] ? policy_nodemask+0xea/0x4e0 [ 130.403552][ T6476] alloc_pages_mpol+0x1fb/0x550 [ 130.403596][ T6476] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 130.403636][ T6476] ? __split_huge_pmd+0x203/0x350 [ 130.403691][ T6476] folio_alloc_mpol_noprof+0x36/0x2f0 [ 130.403740][ T6476] vma_alloc_folio_noprof+0xed/0x1e0 [ 130.403785][ T6476] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 130.403832][ T6476] ? rcu_read_unlock+0x2d/0xb0 [ 130.403877][ T6476] do_wp_page+0x1e5b/0x4f00 [ 130.403938][ T6476] ? __pfx_do_wp_page+0x10/0x10 [ 130.403988][ T6476] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.404034][ T6476] ? ___pte_offset_map+0x2ad/0x4f0 [ 130.404087][ T6476] __handle_mm_fault+0x1b2d/0x2a50 [ 130.404134][ T6476] ? __pfx___handle_mm_fault+0x10/0x10 [ 130.404174][ T6476] ? __lock_acquire+0xb97/0x1ce0 [ 130.404245][ T6476] handle_mm_fault+0x589/0xd10 [ 130.404287][ T6476] __get_user_pages+0x551/0x34a0 [ 130.404363][ T6476] ? __pfx___get_user_pages+0x10/0x10 [ 130.404421][ T6476] __gup_longterm_locked+0xa92/0x17e0 [ 130.404481][ T6476] ? __pfx___gup_longterm_locked+0x10/0x10 [ 130.404536][ T6476] ? find_held_lock+0x2b/0x80 [ 130.404577][ T6476] gup_fast_fallback+0xf78/0x23f0 [ 130.404643][ T6476] ? __kasan_kmalloc+0xaa/0xb0 [ 130.404674][ T6476] ? __pfx_gup_fast_fallback+0x10/0x10 [ 130.404717][ T6476] ? __x64_sys_futex+0x1e0/0x4c0 [ 130.404752][ T6476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.404794][ T6476] get_user_pages_fast+0xa7/0xf0 [ 130.404836][ T6476] ? __pfx_get_user_pages_fast+0x10/0x10 [ 130.404888][ T6476] get_futex_key+0x2c6/0x1560 [ 130.404926][ T6476] ? __pfx_get_futex_key+0x10/0x10 [ 130.404964][ T6476] ? kasan_save_track+0x14/0x30 [ 130.404997][ T6476] ? __kasan_kmalloc+0xaa/0xb0 [ 130.405036][ T6476] futex_lock_pi+0x1cc/0x7c0 [ 130.405085][ T6476] ? __pfx_futex_lock_pi+0x10/0x10 [ 130.405119][ T6476] ? __futex_wait+0x24c/0x2f0 [ 130.405163][ T6476] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.405214][ T6476] ? futex_private_hash_put+0x18a/0x300 [ 130.405252][ T6476] ? __pfx_futex_wake_mark+0x10/0x10 [ 130.405302][ T6476] ? do_writev+0x218/0x340 [ 130.405339][ T6476] do_futex+0x11a/0x350 [ 130.405390][ T6476] ? __pfx_do_futex+0x10/0x10 [ 130.405423][ T6476] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.405472][ T6476] __x64_sys_futex+0x1e0/0x4c0 [ 130.405517][ T6476] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.405556][ T6476] ? xfd_validate_state+0x61/0x180 [ 130.405598][ T6476] ? __pfx_do_writev+0x10/0x10 [ 130.405640][ T6476] do_syscall_64+0xcd/0x490 [ 130.405679][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.405709][ T6476] RIP: 0033:0x7f700858ebe9 [ 130.405734][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.405761][ T6476] RSP: 002b:00007f70067f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.405790][ T6476] RAX: ffffffffffffffda RBX: 00007f70087b6180 RCX: 00007f700858ebe9 [ 130.405809][ T6476] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000000 [ 130.405826][ T6476] RBP: 00007f7008611e19 R08: 0000000000000000 R09: 0000000000000006 [ 130.405844][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.405861][ T6476] R13: 00007f70087b6218 R14: 00007f70087b6180 R15: 00007ffcd370e0c8 [ 130.405901][ T6476] [ 132.654522][ T6504] Invalid ELF header magic: != ELF [ 133.747100][ T6526] FAULT_INJECTION: forcing a failure. [ 133.747100][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 133.776856][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.3.116 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 133.776886][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.776897][ T6526] Call Trace: [ 133.776904][ T6526] [ 133.776911][ T6526] dump_stack_lvl+0x16c/0x1f0 [ 133.776937][ T6526] should_fail_ex+0x512/0x640 [ 133.776960][ T6526] ? fs_reclaim_acquire+0xae/0x150 [ 133.776990][ T6526] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 133.777012][ T6526] should_failslab+0xc2/0x120 [ 133.777037][ T6526] __kmalloc_noprof+0xd2/0x510 [ 133.777064][ T6526] tomoyo_realpath_from_path+0xc2/0x6e0 [ 133.777093][ T6526] tomoyo_check_open_permission+0x2ab/0x3c0 [ 133.777112][ T6526] ? security_file_alloc+0x34/0x2b0 [ 133.777133][ T6526] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 133.777152][ T6526] ? get_name+0x2ae/0x460 [ 133.777176][ T6526] ? do_syscall_64+0xcd/0x490 [ 133.777195][ T6526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.777242][ T6526] ? do_raw_spin_lock+0x12c/0x2b0 [ 133.777286][ T6526] tomoyo_file_open+0x6b/0x90 [ 133.777313][ T6526] security_file_open+0x84/0x1e0 [ 133.777335][ T6526] do_dentry_open+0x596/0x1530 [ 133.777361][ T6526] ? lockdep_init_map_type+0x5c/0x280 [ 133.777388][ T6526] vfs_open+0x82/0x3f0 [ 133.777418][ T6526] dentry_open+0x71/0xd0 [ 133.777445][ T6526] get_name+0x2ae/0x460 [ 133.777470][ T6526] ? __pfx_get_name+0x10/0x10 [ 133.777496][ T6526] ? __pfx_filldir_one+0x10/0x10 [ 133.777537][ T6526] ? __pfx_reconnect_path+0x10/0x10 [ 133.777563][ T6526] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 133.777588][ T6526] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 133.777613][ T6526] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 133.777635][ T6526] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 133.777688][ T6526] do_handle_open+0x6e3/0xc50 [ 133.777708][ T6526] ? __pfx_do_handle_open+0x10/0x10 [ 133.777725][ T6526] ? __x64_sys_futex+0x1e0/0x4c0 [ 133.777752][ T6526] ? xfd_validate_state+0x61/0x180 [ 133.777786][ T6526] ? do_syscall_64+0xcd/0x490 [ 133.777805][ T6526] do_syscall_64+0xcd/0x490 [ 133.777826][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.777845][ T6526] RIP: 0033:0x7fc1d438ebe9 [ 133.777860][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.777877][ T6526] RSP: 002b:00007fc1d513b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 133.777894][ T6526] RAX: ffffffffffffffda RBX: 00007fc1d45b5fa0 RCX: 00007fc1d438ebe9 [ 133.777906][ T6526] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000006 [ 133.777916][ T6526] RBP: 00007fc1d4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.777926][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.777936][ T6526] R13: 00007fc1d45b6038 R14: 00007fc1d45b5fa0 R15: 00007ffe6012f088 [ 133.777958][ T6526] [ 133.777996][ T6526] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.328617][ T6532] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 134.360985][ T6532] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.368889][ T6532] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 134.422843][ T6532] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 134.451285][ T6532] page dumped because: unmovable page [ 134.481753][ T6532] page_owner tracks the page as allocated [ 134.541488][ T6532] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 134.608757][ T6540] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 134.631268][ T6532] register_dummy_stack+0x89/0xd0 [ 134.642305][ T6541] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 134.700084][ T6532] init_page_owner+0x48/0x7e0 [ 134.710890][ T6532] page_ext_init+0x703/0xb00 [ 134.751801][ T6532] mm_core_init+0x13c/0x220 [ 134.764269][ T6532] page last free pid 5975 tgid 5975 stack trace: [ 134.780888][ T6532] __free_frozen_pages+0x7d5/0x10f0 [ 134.799485][ T6532] qlist_free_all+0x4d/0x120 [ 134.821338][ T6532] kasan_quarantine_reduce+0x195/0x1e0 [ 134.868397][ T6532] __kasan_slab_alloc+0x69/0x90 [ 134.889973][ T6532] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 134.896467][ T6532] __alloc_skb+0x2b2/0x380 [ 134.901109][ T6532] mld_newpack.isra.0+0x18e/0xa20 [ 134.907022][ T6532] add_grhead+0x299/0x340 [ 134.942078][ T6532] add_grec+0x11b5/0x1720 [ 134.947195][ T6532] mld_send_initial_cr+0x151/0x320 [ 134.956097][ T6532] mld_dad_work+0x32/0x1f0 [ 134.960715][ T6532] process_one_work+0x9cc/0x1b70 [ 134.972256][ T6532] worker_thread+0x6c8/0xf10 [ 134.977114][ T6532] kthread+0x3c5/0x780 [ 134.981402][ T6532] ret_from_fork+0x5d7/0x6f0 [ 134.986943][ T6532] ret_from_fork_asm+0x1a/0x30 [ 135.597755][ T6557] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.937245][ T6555] could not allocate digest TFM handle binfmt_misc [ 137.868969][ T6586] FAULT_INJECTION: forcing a failure. [ 137.868969][ T6586] name failslab, interval 1, probability 0, space 0, times 0 [ 137.914058][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.3.127 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 137.914104][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.914122][ T6586] Call Trace: [ 137.914133][ T6586] [ 137.914145][ T6586] dump_stack_lvl+0x16c/0x1f0 [ 137.914185][ T6586] should_fail_ex+0x512/0x640 [ 137.914221][ T6586] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 137.914261][ T6586] should_failslab+0xc2/0x120 [ 137.914312][ T6586] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 137.914349][ T6586] ? security_file_alloc+0x34/0x2b0 [ 137.914394][ T6586] security_file_alloc+0x34/0x2b0 [ 137.914431][ T6586] init_file+0x93/0x4c0 [ 137.914483][ T6586] alloc_empty_file+0x73/0x1e0 [ 137.914528][ T6586] dentry_open+0x46/0xd0 [ 137.914573][ T6586] get_name+0x2ae/0x460 [ 137.914616][ T6586] ? __pfx_get_name+0x10/0x10 [ 137.914661][ T6586] ? __pfx_filldir_one+0x10/0x10 [ 137.914734][ T6586] ? __pfx_reconnect_path+0x10/0x10 [ 137.914778][ T6586] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 137.914821][ T6586] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 137.914863][ T6586] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 137.914902][ T6586] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 137.914991][ T6586] do_handle_open+0x6e3/0xc50 [ 137.915025][ T6586] ? __pfx_do_handle_open+0x10/0x10 [ 137.915052][ T6586] ? __x64_sys_futex+0x1e0/0x4c0 [ 137.915095][ T6586] ? xfd_validate_state+0x61/0x180 [ 137.915150][ T6586] ? do_syscall_64+0xcd/0x490 [ 137.915180][ T6586] do_syscall_64+0xcd/0x490 [ 137.915214][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.915243][ T6586] RIP: 0033:0x7fc1d438ebe9 [ 137.915267][ T6586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.915308][ T6586] RSP: 002b:00007fc1d513b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 137.915336][ T6586] RAX: ffffffffffffffda RBX: 00007fc1d45b5fa0 RCX: 00007fc1d438ebe9 [ 137.915355][ T6586] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000006 [ 137.915371][ T6586] RBP: 00007fc1d4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 137.915387][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.915404][ T6586] R13: 00007fc1d45b6038 R14: 00007fc1d45b5fa0 R15: 00007ffe6012f088 [ 137.915439][ T6586] [ 138.337142][ T6595] netlink: 186 bytes leftover after parsing attributes in process `syz.0.131'. [ 138.398262][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.421161][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.682651][ T6611] nbd: nbd7 already in use [ 140.379636][ T6638] openvswitch: HfR: Dropping previously announced user features [ 140.394247][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 140.403760][ T6638] HfR: left promiscuous mode [ 140.471194][ T6647] HfR: entered promiscuous mode [ 140.546676][ T6636] FAULT_INJECTION: forcing a failure. [ 140.546676][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 140.618555][ T6636] CPU: 1 UID: 0 PID: 6636 Comm: syz.3.142 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 140.618599][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.618616][ T6636] Call Trace: [ 140.618626][ T6636] [ 140.618637][ T6636] dump_stack_lvl+0x16c/0x1f0 [ 140.618676][ T6636] should_fail_ex+0x512/0x640 [ 140.618709][ T6636] ? fs_reclaim_acquire+0xae/0x150 [ 140.618755][ T6636] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 140.618794][ T6636] should_failslab+0xc2/0x120 [ 140.618835][ T6636] __kmalloc_noprof+0xd2/0x510 [ 140.618881][ T6636] tomoyo_realpath_from_path+0xc2/0x6e0 [ 140.618929][ T6636] tomoyo_check_open_permission+0x2ab/0x3c0 [ 140.618957][ T6636] ? security_file_alloc+0x34/0x2b0 [ 140.618993][ T6636] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 140.619024][ T6636] ? get_name+0x2ae/0x460 [ 140.619063][ T6636] ? do_syscall_64+0xcd/0x490 [ 140.619094][ T6636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.619162][ T6636] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.619228][ T6636] tomoyo_file_open+0x6b/0x90 [ 140.619270][ T6636] security_file_open+0x84/0x1e0 [ 140.619305][ T6636] do_dentry_open+0x596/0x1530 [ 140.619345][ T6636] ? lockdep_init_map_type+0x5c/0x280 [ 140.619390][ T6636] vfs_open+0x82/0x3f0 [ 140.619440][ T6636] dentry_open+0x71/0xd0 [ 140.619484][ T6636] get_name+0x2ae/0x460 [ 140.619524][ T6636] ? __pfx_get_name+0x10/0x10 [ 140.619583][ T6636] ? __pfx_filldir_one+0x10/0x10 [ 140.619658][ T6636] ? __pfx_reconnect_path+0x10/0x10 [ 140.619697][ T6636] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 140.619741][ T6636] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 140.619779][ T6636] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 140.619818][ T6636] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 140.619912][ T6636] do_handle_open+0x6e3/0xc50 [ 140.619946][ T6636] ? __pfx_do_handle_open+0x10/0x10 [ 140.619972][ T6636] ? __x64_sys_futex+0x1e0/0x4c0 [ 140.620015][ T6636] ? xfd_validate_state+0x61/0x180 [ 140.620072][ T6636] ? do_syscall_64+0xcd/0x490 [ 140.620104][ T6636] do_syscall_64+0xcd/0x490 [ 140.620141][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.620170][ T6636] RIP: 0033:0x7fc1d438ebe9 [ 140.620196][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.620221][ T6636] RSP: 002b:00007fc1d513b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 140.620249][ T6636] RAX: ffffffffffffffda RBX: 00007fc1d45b5fa0 RCX: 00007fc1d438ebe9 [ 140.620269][ T6636] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000005 [ 140.620285][ T6636] RBP: 00007fc1d4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 140.620301][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.620316][ T6636] R13: 00007fc1d45b6038 R14: 00007fc1d45b5fa0 R15: 00007ffe6012f088 [ 140.620352][ T6636] [ 140.620438][ T6636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.895715][ T6654] netlink: 338 bytes leftover after parsing attributes in process `syz.2.145'. [ 141.213346][ T6660] ======================================================= [ 141.213346][ T6660] WARNING: The mand mount option has been deprecated and [ 141.213346][ T6660] and is ignored by this kernel. Remove the mand [ 141.213346][ T6660] option from the mount to silence this warning. [ 141.213346][ T6660] ======================================================= [ 141.624005][ T6670] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 142.482199][ T6681] FAULT_INJECTION: forcing a failure. [ 142.482199][ T6681] name failslab, interval 1, probability 0, space 0, times 0 [ 142.535682][ T6681] CPU: 0 UID: 0 PID: 6681 Comm: syz.2.155 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 142.535710][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.535720][ T6681] Call Trace: [ 142.535726][ T6681] [ 142.535734][ T6681] dump_stack_lvl+0x16c/0x1f0 [ 142.535759][ T6681] should_fail_ex+0x512/0x640 [ 142.535780][ T6681] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 142.535805][ T6681] should_failslab+0xc2/0x120 [ 142.535830][ T6681] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 142.535852][ T6681] ? security_file_alloc+0x34/0x2b0 [ 142.535877][ T6681] security_file_alloc+0x34/0x2b0 [ 142.535899][ T6681] init_file+0x93/0x4c0 [ 142.535925][ T6681] alloc_empty_file+0x73/0x1e0 [ 142.535961][ T6681] dentry_open+0x46/0xd0 [ 142.535989][ T6681] get_name+0x2ae/0x460 [ 142.536014][ T6681] ? __pfx_get_name+0x10/0x10 [ 142.536042][ T6681] ? __pfx_filldir_one+0x10/0x10 [ 142.536083][ T6681] ? __pfx_reconnect_path+0x10/0x10 [ 142.536109][ T6681] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 142.536135][ T6681] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 142.536168][ T6681] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 142.536190][ T6681] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 142.536242][ T6681] do_handle_open+0x6e3/0xc50 [ 142.536262][ T6681] ? __pfx_do_handle_open+0x10/0x10 [ 142.536279][ T6681] ? __x64_sys_futex+0x1e0/0x4c0 [ 142.536313][ T6681] ? xfd_validate_state+0x61/0x180 [ 142.536346][ T6681] ? do_syscall_64+0xcd/0x490 [ 142.536365][ T6681] do_syscall_64+0xcd/0x490 [ 142.536386][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.536404][ T6681] RIP: 0033:0x7f700858ebe9 [ 142.536419][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.536436][ T6681] RSP: 002b:00007f7009337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 142.536454][ T6681] RAX: ffffffffffffffda RBX: 00007f70087b5fa0 RCX: 00007f700858ebe9 [ 142.536465][ T6681] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000005 [ 142.536484][ T6681] RBP: 00007f7008611e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.536494][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.536505][ T6681] R13: 00007f70087b6038 R14: 00007f70087b5fa0 R15: 00007ffcd370e0c8 [ 142.536528][ T6681] [ 142.948894][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 143.162407][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.174566][ T6700] mmap: syz.0.159 (6700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.222898][ T6701] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 143.265679][ T6701] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 143.275148][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.411794][ T6701] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 143.437142][ T6701] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 143.449339][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.479524][ T6701] page dumped because: unmovable page [ 143.500951][ T6701] page_owner tracks the page as allocated [ 143.516323][ T6701] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 143.539542][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.574077][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.584518][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.602474][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.623588][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.646438][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.658944][ T6701] register_dummy_stack+0x89/0xd0 [ 143.674540][ T6701] init_page_owner+0x48/0x7e0 [ 143.679545][ T6701] page_ext_init+0x703/0xb00 [ 143.685841][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.703037][ T6701] mm_core_init+0x13c/0x220 [ 143.707852][ T6701] page last free pid 5975 tgid 5975 stack trace: [ 143.716616][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.726702][ T6701] __free_frozen_pages+0x7d5/0x10f0 [ 143.737071][ T6696] netlink: 330 bytes leftover after parsing attributes in process `syz.2.158'. [ 143.751793][ T6701] qlist_free_all+0x4d/0x120 [ 143.756601][ T6701] kasan_quarantine_reduce+0x195/0x1e0 [ 143.766111][ T6701] __kasan_slab_alloc+0x69/0x90 [ 143.777953][ T6701] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 143.790935][ T6701] __alloc_skb+0x2b2/0x380 [ 143.801093][ T6701] mld_newpack.isra.0+0x18e/0xa20 [ 143.815685][ T6701] add_grhead+0x299/0x340 [ 143.829684][ T6701] add_grec+0x11b5/0x1720 [ 143.856604][ T6701] mld_send_initial_cr+0x151/0x320 [ 143.875612][ T6701] mld_dad_work+0x32/0x1f0 [ 143.880130][ T6701] process_one_work+0x9cc/0x1b70 [ 143.908504][ T6701] worker_thread+0x6c8/0xf10 [ 143.930952][ T6701] kthread+0x3c5/0x780 [ 143.941251][ T6701] ret_from_fork+0x5d7/0x6f0 [ 143.950492][ T6701] ret_from_fork_asm+0x1a/0x30 [ 144.628067][ T6719] nbd: nbd7 already in use [ 144.899344][ T6720] FAULT_INJECTION: forcing a failure. [ 144.899344][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 144.969992][ T6720] CPU: 1 UID: 0 PID: 6720 Comm: syz.0.166 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 144.970022][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.970032][ T6720] Call Trace: [ 144.970039][ T6720] [ 144.970046][ T6720] dump_stack_lvl+0x16c/0x1f0 [ 144.970073][ T6720] should_fail_ex+0x512/0x640 [ 144.970095][ T6720] ? fs_reclaim_acquire+0xae/0x150 [ 144.970132][ T6720] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 144.970155][ T6720] should_failslab+0xc2/0x120 [ 144.970180][ T6720] __kmalloc_noprof+0xd2/0x510 [ 144.970206][ T6720] tomoyo_realpath_from_path+0xc2/0x6e0 [ 144.970236][ T6720] tomoyo_check_open_permission+0x2ab/0x3c0 [ 144.970255][ T6720] ? security_file_alloc+0x34/0x2b0 [ 144.970276][ T6720] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 144.970296][ T6720] ? get_name+0x2ae/0x460 [ 144.970320][ T6720] ? do_syscall_64+0xcd/0x490 [ 144.970338][ T6720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.970381][ T6720] ? do_raw_spin_lock+0x12c/0x2b0 [ 144.970415][ T6720] tomoyo_file_open+0x6b/0x90 [ 144.970442][ T6720] security_file_open+0x84/0x1e0 [ 144.970463][ T6720] do_dentry_open+0x596/0x1530 [ 144.970487][ T6720] ? lockdep_init_map_type+0x5c/0x280 [ 144.970515][ T6720] vfs_open+0x82/0x3f0 [ 144.970544][ T6720] dentry_open+0x71/0xd0 [ 144.970570][ T6720] get_name+0x2ae/0x460 [ 144.970595][ T6720] ? __pfx_get_name+0x10/0x10 [ 144.970621][ T6720] ? __pfx_filldir_one+0x10/0x10 [ 144.970662][ T6720] ? __pfx_reconnect_path+0x10/0x10 [ 144.970687][ T6720] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 144.970713][ T6720] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 144.970738][ T6720] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 144.970760][ T6720] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 144.970820][ T6720] do_handle_open+0x6e3/0xc50 [ 144.970840][ T6720] ? __pfx_do_handle_open+0x10/0x10 [ 144.970857][ T6720] ? __x64_sys_futex+0x1e0/0x4c0 [ 144.970884][ T6720] ? xfd_validate_state+0x61/0x180 [ 144.970918][ T6720] ? do_syscall_64+0xcd/0x490 [ 144.970936][ T6720] do_syscall_64+0xcd/0x490 [ 144.970958][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.970975][ T6720] RIP: 0033:0x7f63df38ebe9 [ 144.970991][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.971008][ T6720] RSP: 002b:00007f63e0257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 144.971026][ T6720] RAX: ffffffffffffffda RBX: 00007f63df5b5fa0 RCX: 00007f63df38ebe9 [ 144.971037][ T6720] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000005 [ 144.971047][ T6720] RBP: 00007f63df411e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.971058][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.971068][ T6720] R13: 00007f63df5b6038 R14: 00007f63df5b5fa0 R15: 00007fff14e9eb18 [ 144.971090][ T6720] [ 145.041647][ T6720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.742501][ T6738] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 145.772398][ T6738] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 145.797193][ T6738] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 145.836936][ T6738] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 145.845973][ T6738] page dumped because: unmovable page [ 145.851738][ T6738] page_owner tracks the page as allocated [ 145.859661][ T6738] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 145.883438][ T6738] register_dummy_stack+0x89/0xd0 [ 145.892434][ T6738] init_page_owner+0x48/0x7e0 [ 145.926843][ T6738] page_ext_init+0x703/0xb00 [ 145.951920][ T6738] mm_core_init+0x13c/0x220 [ 145.957070][ T6738] page last free pid 5975 tgid 5975 stack trace: [ 145.963892][ T6738] __free_frozen_pages+0x7d5/0x10f0 [ 145.974791][ T6738] qlist_free_all+0x4d/0x120 [ 145.984256][ T6738] kasan_quarantine_reduce+0x195/0x1e0 [ 145.997912][ T6738] __kasan_slab_alloc+0x69/0x90 [ 146.007483][ T6738] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 146.016719][ T6738] __alloc_skb+0x2b2/0x380 [ 146.023787][ T6738] mld_newpack.isra.0+0x18e/0xa20 [ 146.034311][ T6738] add_grhead+0x299/0x340 [ 146.049378][ T6738] add_grec+0x11b5/0x1720 [ 146.057867][ T6738] mld_send_initial_cr+0x151/0x320 [ 146.067011][ T6738] mld_dad_work+0x32/0x1f0 [ 146.075174][ T6738] process_one_work+0x9cc/0x1b70 [ 146.086460][ T6738] worker_thread+0x6c8/0xf10 [ 146.095800][ T6738] kthread+0x3c5/0x780 [ 146.104640][ T6738] ret_from_fork+0x5d7/0x6f0 [ 146.149276][ T6738] ret_from_fork_asm+0x1a/0x30 [ 146.735572][ T6756] ubi0: attaching mtd0 [ 146.739870][ T6756] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 147.903382][ T6779] openvswitch: HfR: Dropping previously announced user features [ 147.920689][ T6779] HfR: left promiscuous mode [ 147.950101][ T6775] FAULT_INJECTION: forcing a failure. [ 147.950101][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 147.969985][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.1.180 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 147.970031][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.970046][ T6775] Call Trace: [ 147.970056][ T6775] [ 147.970068][ T6775] dump_stack_lvl+0x16c/0x1f0 [ 147.970107][ T6775] should_fail_ex+0x512/0x640 [ 147.970138][ T6775] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 147.970177][ T6775] should_failslab+0xc2/0x120 [ 147.970215][ T6775] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 147.970251][ T6775] ? security_file_alloc+0x34/0x2b0 [ 147.970290][ T6775] security_file_alloc+0x34/0x2b0 [ 147.970325][ T6775] init_file+0x93/0x4c0 [ 147.970366][ T6775] alloc_empty_file+0x73/0x1e0 [ 147.970420][ T6775] dentry_open+0x46/0xd0 [ 147.970466][ T6775] get_name+0x2ae/0x460 [ 147.970507][ T6775] ? __pfx_get_name+0x10/0x10 [ 147.970546][ T6775] ? __pfx_filldir_one+0x10/0x10 [ 147.970607][ T6775] ? __pfx_reconnect_path+0x10/0x10 [ 147.970649][ T6775] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 147.970691][ T6775] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 147.970730][ T6775] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 147.970765][ T6775] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 147.970858][ T6775] do_handle_open+0x6e3/0xc50 [ 147.970890][ T6775] ? __pfx_do_handle_open+0x10/0x10 [ 147.970919][ T6775] ? __x64_sys_futex+0x1e0/0x4c0 [ 147.970966][ T6775] ? xfd_validate_state+0x61/0x180 [ 147.971023][ T6775] ? do_syscall_64+0xcd/0x490 [ 147.971055][ T6775] do_syscall_64+0xcd/0x490 [ 147.971091][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.971120][ T6775] RIP: 0033:0x7f574e38ebe9 [ 147.971145][ T6775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.971172][ T6775] RSP: 002b:00007f574f117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 147.971202][ T6775] RAX: ffffffffffffffda RBX: 00007f574e5b5fa0 RCX: 00007f574e38ebe9 [ 147.971219][ T6775] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000005 [ 147.971236][ T6775] RBP: 00007f574e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 147.971252][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.971268][ T6775] R13: 00007f574e5b6038 R14: 00007f574e5b5fa0 R15: 00007ffd07ba9e58 [ 147.971304][ T6775] [ 148.258409][ T6781] HfR: entered promiscuous mode [ 148.418583][ T6789] Malformed UNC in devname [ 148.418583][ T6789] [ 148.425698][ T6789] CIFS: VFS: Malformed UNC in devname [ 149.600927][ T51] Bluetooth: hci3: unexpected event 0x03 length: 725 > 11 [ 149.866287][ T6828] FAULT_INJECTION: forcing a failure. [ 149.866287][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 149.926493][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.0.194 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 149.926537][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.926554][ T6828] Call Trace: [ 149.926563][ T6828] [ 149.926573][ T6828] dump_stack_lvl+0x16c/0x1f0 [ 149.926613][ T6828] should_fail_ex+0x512/0x640 [ 149.926648][ T6828] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 149.926690][ T6828] should_failslab+0xc2/0x120 [ 149.926729][ T6828] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 149.926763][ T6828] ? mark_held_locks+0x49/0x80 [ 149.926797][ T6828] ? key_alloc+0x3e0/0x1330 [ 149.926835][ T6828] key_alloc+0x3e0/0x1330 [ 149.926884][ T6828] ? __pfx_key_alloc+0x10/0x10 [ 149.926918][ T6828] ? __pfx_key_default_cmp+0x10/0x10 [ 149.926958][ T6828] ? __pfx_keyring_search_iterator+0x10/0x10 [ 149.927004][ T6828] keyring_alloc+0x44/0xc0 [ 149.927041][ T6828] look_up_user_keyrings+0x510/0x760 [ 149.927311][ T6828] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 149.927691][ T6828] lookup_user_key+0x1a3/0x1300 [ 149.927732][ T6828] ? __pfx_lookup_user_key+0x10/0x10 [ 149.927761][ T6828] ? do_futex+0x122/0x350 [ 149.927812][ T6828] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 149.927853][ T6828] ? fput+0x9b/0xd0 [ 149.927905][ T6828] keyctl_keyring_clear+0x24/0x1a0 [ 149.927955][ T6828] __do_sys_keyctl+0x355/0x590 [ 149.927988][ T6828] do_syscall_64+0xcd/0x490 [ 149.928028][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.928059][ T6828] RIP: 0033:0x7f63df38ebe9 [ 149.928093][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.928121][ T6828] RSP: 002b:00007f63e0257038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 149.928149][ T6828] RAX: ffffffffffffffda RBX: 00007f63df5b5fa0 RCX: 00007f63df38ebe9 [ 149.928168][ T6828] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 149.928186][ T6828] RBP: 00007f63df411e19 R08: 0000000000000008 R09: 0000000000000000 [ 149.928203][ T6828] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 149.928220][ T6828] R13: 00007f63df5b6038 R14: 00007f63df5b5fa0 R15: 00007fff14e9eb18 [ 149.928261][ T6828] [ 150.455145][ T6839] openvswitch: HfR: Dropping previously announced user features [ 150.484259][ T6839] __nla_validate_parse: 21 callbacks suppressed [ 150.484284][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 150.522173][ T6839] HfR: left promiscuous mode [ 150.603185][ T6843] HfR: entered promiscuous mode [ 152.171153][ T6871] capability: warning: `syz.3.207' uses 32-bit capabilities (legacy support in use) [ 152.756156][ T6880] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 152.782806][ T6880] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 152.800227][ T6880] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 152.814081][ T6885] nbd: nbd7 already in use [ 152.855655][ T6880] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 152.881723][ T6880] page dumped because: unmovable page [ 152.887537][ T6880] page_owner tracks the page as allocated [ 152.893940][ T6880] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 152.933815][ T6880] register_dummy_stack+0x89/0xd0 [ 152.939151][ T6880] init_page_owner+0x48/0x7e0 [ 152.951748][ T6880] page_ext_init+0x703/0xb00 [ 152.983089][ T6880] mm_core_init+0x13c/0x220 [ 153.007952][ T6880] page last free pid 5975 tgid 5975 stack trace: [ 153.008613][ T6880] __free_frozen_pages+0x7d5/0x10f0 [ 153.009521][ T6880] qlist_free_all+0x4d/0x120 [ 153.009715][ T6880] kasan_quarantine_reduce+0x195/0x1e0 [ 153.010246][ T6880] __kasan_slab_alloc+0x69/0x90 [ 153.011734][ T6880] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 153.011776][ T6880] __alloc_skb+0x2b2/0x380 [ 153.011807][ T6880] mld_newpack.isra.0+0x18e/0xa20 [ 153.011843][ T6880] add_grhead+0x299/0x340 [ 153.011873][ T6880] add_grec+0x11b5/0x1720 [ 153.011902][ T6880] mld_send_initial_cr+0x151/0x320 [ 153.011937][ T6880] mld_dad_work+0x32/0x1f0 [ 153.011972][ T6880] process_one_work+0x9cc/0x1b70 [ 153.012013][ T6880] worker_thread+0x6c8/0xf10 [ 153.012138][ T6880] kthread+0x3c5/0x780 [ 153.012178][ T6880] ret_from_fork+0x5d7/0x6f0 [ 153.012217][ T6880] ret_from_fork_asm+0x1a/0x30 [ 153.767015][ T6907] sctp: [Deprecated]: syz.0.217 (pid 6907) Use of int in max_burst socket option deprecated. [ 153.767015][ T6907] Use struct sctp_assoc_value instead [ 154.167353][ T6919] nbd: nbd7 already in use [ 156.421888][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 157.043985][ T6958] FAULT_INJECTION: forcing a failure. [ 157.043985][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 157.057615][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.1.231 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 157.057659][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.057677][ T6958] Call Trace: [ 157.057687][ T6958] [ 157.057698][ T6958] dump_stack_lvl+0x16c/0x1f0 [ 157.057740][ T6958] should_fail_ex+0x512/0x640 [ 157.057776][ T6958] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 157.057818][ T6958] should_failslab+0xc2/0x120 [ 157.057858][ T6958] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 157.057895][ T6958] ? security_file_alloc+0x34/0x2b0 [ 157.057937][ T6958] security_file_alloc+0x34/0x2b0 [ 157.057973][ T6958] init_file+0x93/0x4c0 [ 157.058031][ T6958] alloc_empty_file+0x73/0x1e0 [ 157.058079][ T6958] dentry_open+0x46/0xd0 [ 157.058123][ T6958] get_name+0x2ae/0x460 [ 157.058165][ T6958] ? __pfx_get_name+0x10/0x10 [ 157.058210][ T6958] ? __pfx_filldir_one+0x10/0x10 [ 157.058279][ T6958] ? __pfx_reconnect_path+0x10/0x10 [ 157.058322][ T6958] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 157.058360][ T6958] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 157.058400][ T6958] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 157.058438][ T6958] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 157.058532][ T6958] do_handle_open+0x6e3/0xc50 [ 157.058566][ T6958] ? __pfx_do_handle_open+0x10/0x10 [ 157.058594][ T6958] ? __x64_sys_futex+0x1e0/0x4c0 [ 157.058641][ T6958] ? xfd_validate_state+0x61/0x180 [ 157.058696][ T6958] ? do_syscall_64+0xcd/0x490 [ 157.058729][ T6958] do_syscall_64+0xcd/0x490 [ 157.058766][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.058796][ T6958] RIP: 0033:0x7f574e38ebe9 [ 157.058820][ T6958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.058845][ T6958] RSP: 002b:00007f574f117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 157.058873][ T6958] RAX: ffffffffffffffda RBX: 00007f574e5b5fa0 RCX: 00007f574e38ebe9 [ 157.058892][ T6958] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000004 [ 157.058910][ T6958] RBP: 00007f574e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 157.058927][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.058943][ T6958] R13: 00007f574e5b6038 R14: 00007f574e5b5fa0 R15: 00007ffd07ba9e58 [ 157.058983][ T6958] [ 158.269476][ T6980] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 158.311803][ T6980] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 158.344091][ T6980] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 158.353091][ T6980] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 158.365723][ T6980] page dumped because: unmovable page [ 158.371292][ T6980] page_owner tracks the page as allocated [ 158.377351][ T6980] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 158.521815][ T6980] register_dummy_stack+0x89/0xd0 [ 158.575250][ T6980] init_page_owner+0x48/0x7e0 [ 158.636577][ T6980] page_ext_init+0x703/0xb00 [ 158.648749][ T6980] mm_core_init+0x13c/0x220 [ 158.681933][ T6980] page last free pid 5975 tgid 5975 stack trace: [ 158.701069][ T6980] __free_frozen_pages+0x7d5/0x10f0 [ 158.707945][ T6980] qlist_free_all+0x4d/0x120 [ 158.721714][ T6980] kasan_quarantine_reduce+0x195/0x1e0 [ 158.727451][ T6980] __kasan_slab_alloc+0x69/0x90 [ 158.741772][ T6980] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 158.761965][ T6980] __alloc_skb+0x2b2/0x380 [ 158.820513][ T6994] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 158.911687][ T6980] mld_newpack.isra.0+0x18e/0xa20 [ 158.934646][ T6980] add_grhead+0x299/0x340 [ 158.939034][ T6980] add_grec+0x11b5/0x1720 [ 159.059021][ T6980] mld_send_initial_cr+0x151/0x320 [ 159.112760][ T6980] mld_dad_work+0x32/0x1f0 [ 159.117292][ T6980] process_one_work+0x9cc/0x1b70 [ 159.160551][ T6980] worker_thread+0x6c8/0xf10 [ 159.161006][ T6996] nbd: nbd7 already in use [ 159.184109][ T6980] kthread+0x3c5/0x780 [ 159.188437][ T6980] ret_from_fork+0x5d7/0x6f0 [ 159.209163][ T6998] FAULT_INJECTION: forcing a failure. [ 159.209163][ T6998] name failslab, interval 1, probability 0, space 0, times 0 [ 159.221595][ T6980] ret_from_fork_asm+0x1a/0x30 [ 159.356863][ T6998] CPU: 1 UID: 0 PID: 6998 Comm: syz.2.242 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 159.356907][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.356923][ T6998] Call Trace: [ 159.356932][ T6998] [ 159.356943][ T6998] dump_stack_lvl+0x16c/0x1f0 [ 159.356980][ T6998] should_fail_ex+0x512/0x640 [ 159.357014][ T6998] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 159.357066][ T6998] should_failslab+0xc2/0x120 [ 159.357108][ T6998] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 159.357147][ T6998] ? security_file_alloc+0x34/0x2b0 [ 159.357191][ T6998] security_file_alloc+0x34/0x2b0 [ 159.357229][ T6998] init_file+0x93/0x4c0 [ 159.357273][ T6998] alloc_empty_file+0x73/0x1e0 [ 159.357319][ T6998] dentry_open+0x46/0xd0 [ 159.357364][ T6998] get_name+0x2ae/0x460 [ 159.357404][ T6998] ? __pfx_get_name+0x10/0x10 [ 159.357447][ T6998] ? __pfx_filldir_one+0x10/0x10 [ 159.357518][ T6998] ? __pfx_reconnect_path+0x10/0x10 [ 159.357563][ T6998] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 159.357607][ T6998] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 159.357650][ T6998] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 159.357689][ T6998] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 159.357791][ T6998] do_handle_open+0x6e3/0xc50 [ 159.357826][ T6998] ? __pfx_do_handle_open+0x10/0x10 [ 159.357855][ T6998] ? __x64_sys_futex+0x1e0/0x4c0 [ 159.357901][ T6998] ? __pfx___x64_sys_futex+0x10/0x10 [ 159.357938][ T6998] ? ksys_write+0x1ac/0x250 [ 159.357987][ T6998] ? do_syscall_64+0xcd/0x490 [ 159.358020][ T6998] do_syscall_64+0xcd/0x490 [ 159.358067][ T6998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.358098][ T6998] RIP: 0033:0x7f700858ebe9 [ 159.358123][ T6998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.358152][ T6998] RSP: 002b:00007f7009337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 159.358183][ T6998] RAX: ffffffffffffffda RBX: 00007f70087b5fa0 RCX: 00007f700858ebe9 [ 159.358203][ T6998] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000004 [ 159.358222][ T6998] RBP: 00007f7008611e19 R08: 0000000000000000 R09: 0000000000000000 [ 159.358240][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.358258][ T6998] R13: 00007f70087b6038 R14: 00007f70087b5fa0 R15: 00007ffcd370e0c8 [ 159.358297][ T6998] [ 160.358930][ T7020] openvswitch: HfR: Dropping previously announced user features [ 160.394339][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 160.475373][ T7021] HfR: left promiscuous mode [ 160.848437][ T7020] HfR: entered promiscuous mode [ 161.920781][ T7037] block nbd0: Unsupported socket: shutdown callout must be supported. [ 162.080335][ T7040] Unable to find swap-space signature [ 162.230614][ T7043] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 162.273870][ T7043] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.301506][ T7043] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 162.310710][ T7043] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 162.332562][ T7043] page dumped because: unmovable page [ 162.340593][ T7043] page_owner tracks the page as allocated [ 162.347207][ T7043] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 162.367951][ T7043] register_dummy_stack+0x89/0xd0 [ 162.373386][ T7046] FAULT_INJECTION: forcing a failure. [ 162.373386][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 162.373807][ T7043] init_page_owner+0x48/0x7e0 [ 162.396131][ T7043] page_ext_init+0x703/0xb00 [ 162.400991][ T7043] mm_core_init+0x13c/0x220 [ 162.409708][ T7043] page last free pid 5975 tgid 5975 stack trace: [ 162.416597][ T7043] __free_frozen_pages+0x7d5/0x10f0 [ 162.422066][ T7046] CPU: 1 UID: 0 PID: 7046 Comm: syz.1.254 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 162.422108][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.422126][ T7046] Call Trace: [ 162.422136][ T7046] [ 162.422147][ T7046] dump_stack_lvl+0x16c/0x1f0 [ 162.422186][ T7046] should_fail_ex+0x512/0x640 [ 162.422221][ T7046] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 162.422272][ T7046] should_failslab+0xc2/0x120 [ 162.422312][ T7046] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 162.422350][ T7046] ? security_file_alloc+0x34/0x2b0 [ 162.422393][ T7046] security_file_alloc+0x34/0x2b0 [ 162.422430][ T7046] init_file+0x93/0x4c0 [ 162.422474][ T7046] alloc_empty_file+0x73/0x1e0 [ 162.422514][ T7046] dentry_open+0x46/0xd0 [ 162.422541][ T7046] get_name+0x2ae/0x460 [ 162.422565][ T7046] ? __pfx_get_name+0x10/0x10 [ 162.422591][ T7046] ? __pfx_filldir_one+0x10/0x10 [ 162.422632][ T7046] ? __pfx_reconnect_path+0x10/0x10 [ 162.422657][ T7046] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 162.422683][ T7046] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 162.422708][ T7046] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 162.422733][ T7046] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 162.422818][ T7046] do_handle_open+0x6e3/0xc50 [ 162.422845][ T7046] ? __pfx_do_handle_open+0x10/0x10 [ 162.422861][ T7046] ? __x64_sys_futex+0x1e0/0x4c0 [ 162.422889][ T7046] ? xfd_validate_state+0x61/0x180 [ 162.422922][ T7046] ? do_syscall_64+0xcd/0x490 [ 162.422940][ T7046] do_syscall_64+0xcd/0x490 [ 162.422961][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.422980][ T7046] RIP: 0033:0x7f574e38ebe9 [ 162.422995][ T7046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.423014][ T7046] RSP: 002b:00007f574f117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 162.423032][ T7046] RAX: ffffffffffffffda RBX: 00007f574e5b5fa0 RCX: 00007f574e38ebe9 [ 162.423043][ T7046] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000004 [ 162.423053][ T7046] RBP: 00007f574e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 162.423063][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.423073][ T7046] R13: 00007f574e5b6038 R14: 00007f574e5b5fa0 R15: 00007ffd07ba9e58 [ 162.423095][ T7046] [ 162.444190][ T7043] qlist_free_all+0x4d/0x120 [ 162.681755][ T7043] kasan_quarantine_reduce+0x195/0x1e0 [ 162.688175][ T7043] __kasan_slab_alloc+0x69/0x90 [ 162.693925][ T7043] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 162.700032][ T7043] __alloc_skb+0x2b2/0x380 [ 162.706260][ T7043] mld_newpack.isra.0+0x18e/0xa20 [ 162.721039][ T7043] add_grhead+0x299/0x340 [ 162.728489][ T7043] add_grec+0x11b5/0x1720 [ 162.743222][ T7043] mld_send_initial_cr+0x151/0x320 [ 162.751669][ T7043] mld_dad_work+0x32/0x1f0 [ 162.758849][ T7043] process_one_work+0x9cc/0x1b70 [ 162.767462][ T7043] worker_thread+0x6c8/0xf10 [ 162.779469][ T7043] kthread+0x3c5/0x780 [ 162.786233][ T7043] ret_from_fork+0x5d7/0x6f0 [ 162.797204][ T7043] ret_from_fork_asm+0x1a/0x30 [ 163.329868][ T7065] binder: 7058:7065 ioctl c00c620f 200000000180 returned -22 [ 163.471740][ T7070] random: crng reseeded on system resumption [ 163.672610][ T7074] FAULT_INJECTION: forcing a failure. [ 163.672610][ T7074] name failslab, interval 1, probability 0, space 0, times 0 [ 163.738135][ T7074] CPU: 1 UID: 0 PID: 7074 Comm: syz.1.263 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 163.738190][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.738209][ T7074] Call Trace: [ 163.738219][ T7074] [ 163.738232][ T7074] dump_stack_lvl+0x16c/0x1f0 [ 163.738273][ T7074] should_fail_ex+0x512/0x640 [ 163.738310][ T7074] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 163.738352][ T7074] should_failslab+0xc2/0x120 [ 163.738393][ T7074] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 163.738431][ T7074] ? security_file_alloc+0x34/0x2b0 [ 163.738474][ T7074] security_file_alloc+0x34/0x2b0 [ 163.738511][ T7074] init_file+0x93/0x4c0 [ 163.738555][ T7074] alloc_empty_file+0x73/0x1e0 [ 163.738601][ T7074] dentry_open+0x46/0xd0 [ 163.738646][ T7074] get_name+0x2ae/0x460 [ 163.738689][ T7074] ? __pfx_get_name+0x10/0x10 [ 163.738736][ T7074] ? __pfx_filldir_one+0x10/0x10 [ 163.738810][ T7074] ? __pfx_reconnect_path+0x10/0x10 [ 163.738855][ T7074] ? __pfx_kernfs_fh_to_parent+0x10/0x10 [ 163.738899][ T7074] exportfs_decode_fh_raw+0x6c7/0x7d0 [ 163.738940][ T7074] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 163.738979][ T7074] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 163.739075][ T7074] do_handle_open+0x6e3/0xc50 [ 163.739110][ T7074] ? __pfx_do_handle_open+0x10/0x10 [ 163.739139][ T7074] ? __x64_sys_futex+0x1e0/0x4c0 [ 163.739197][ T7074] ? xfd_validate_state+0x61/0x180 [ 163.739255][ T7074] ? do_syscall_64+0xcd/0x490 [ 163.739289][ T7074] do_syscall_64+0xcd/0x490 [ 163.739325][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.739356][ T7074] RIP: 0033:0x7f574e38ebe9 [ 163.739383][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.739412][ T7074] RSP: 002b:00007f574f117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 163.739442][ T7074] RAX: ffffffffffffffda RBX: 00007f574e5b5fa0 RCX: 00007f574e38ebe9 [ 163.739461][ T7074] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 163.739479][ T7074] RBP: 00007f574e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 163.739497][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.739513][ T7074] R13: 00007f574e5b6038 R14: 00007f574e5b5fa0 R15: 00007ffd07ba9e58 [ 163.739553][ T7074] [ 165.502735][ T7099] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 165.538923][ T7099] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 165.550041][ T7099] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 165.576794][ T7099] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 165.585804][ T7099] page dumped because: unmovable page [ 165.591316][ T7099] page_owner tracks the page as allocated [ 165.625403][ T7099] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 165.711028][ T7099] register_dummy_stack+0x89/0xd0 [ 165.721704][ T7099] init_page_owner+0x48/0x7e0 [ 165.736981][ T7099] page_ext_init+0x703/0xb00 [ 165.752644][ T7099] mm_core_init+0x13c/0x220 [ 165.757386][ T7099] page last free pid 5975 tgid 5975 stack trace: [ 165.764799][ T7099] __free_frozen_pages+0x7d5/0x10f0 [ 165.770065][ T7099] qlist_free_all+0x4d/0x120 [ 165.775497][ T7099] kasan_quarantine_reduce+0x195/0x1e0 [ 165.781131][ T7099] __kasan_slab_alloc+0x69/0x90 [ 165.786281][ T7099] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 165.792304][ T7099] __alloc_skb+0x2b2/0x380 [ 165.797604][ T7099] mld_newpack.isra.0+0x18e/0xa20 [ 165.802822][ T7099] add_grhead+0x299/0x340 [ 165.807402][ T7099] add_grec+0x11b5/0x1720 [ 165.812258][ T7099] mld_send_initial_cr+0x151/0x320 [ 165.817459][ T7099] mld_dad_work+0x32/0x1f0 [ 165.829331][ T7099] process_one_work+0x9cc/0x1b70 [ 165.834632][ T7099] worker_thread+0x6c8/0xf10 [ 165.839273][ T7099] kthread+0x3c5/0x780 [ 165.844055][ T7099] ret_from_fork+0x5d7/0x6f0 [ 165.848985][ T7099] ret_from_fork_asm+0x1a/0x30 [ 167.583532][ T7145] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 167.636911][ T7145] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 167.644907][ T7145] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 167.656926][ T7145] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 167.666046][ T7145] page dumped because: unmovable page [ 167.674224][ T7145] page_owner tracks the page as allocated [ 167.685795][ T7145] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 167.708481][ T7145] register_dummy_stack+0x89/0xd0 [ 167.713869][ T7145] init_page_owner+0x48/0x7e0 [ 167.718933][ T7145] page_ext_init+0x703/0xb00 [ 167.724650][ T7145] mm_core_init+0x13c/0x220 [ 167.731229][ T7145] page last free pid 5975 tgid 5975 stack trace: [ 167.738946][ T7145] __free_frozen_pages+0x7d5/0x10f0 [ 167.749017][ T7145] qlist_free_all+0x4d/0x120 [ 167.756352][ T7145] kasan_quarantine_reduce+0x195/0x1e0 [ 167.765140][ T7145] __kasan_slab_alloc+0x69/0x90 [ 167.770613][ T7145] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 167.777744][ T7145] __alloc_skb+0x2b2/0x380 [ 167.784341][ T7145] mld_newpack.isra.0+0x18e/0xa20 [ 167.820735][ T7145] add_grhead+0x299/0x340 [ 167.849881][ T7145] add_grec+0x11b5/0x1720 [ 167.879050][ T7145] mld_send_initial_cr+0x151/0x320 [ 167.885351][ T7145] mld_dad_work+0x32/0x1f0 [ 167.890486][ T7145] process_one_work+0x9cc/0x1b70 [ 167.898163][ T7145] worker_thread+0x6c8/0xf10 [ 167.903515][ T7145] kthread+0x3c5/0x780 [ 167.907812][ T7145] ret_from_fork+0x5d7/0x6f0 [ 167.917360][ T7145] ret_from_fork_asm+0x1a/0x30 [ 168.213299][ T7152] FAULT_INJECTION: forcing a failure. [ 168.213299][ T7152] name fail_futex, interval 1, probability 0, space 0, times 0 [ 168.228661][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.1.284 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 168.228704][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.228720][ T7152] Call Trace: [ 168.228730][ T7152] [ 168.228741][ T7152] dump_stack_lvl+0x16c/0x1f0 [ 168.228781][ T7152] should_fail_ex+0x512/0x640 [ 168.228822][ T7152] get_futex_key+0x1d0/0x1560 [ 168.228859][ T7152] ? __pfx_get_futex_key+0x10/0x10 [ 168.228892][ T7152] ? __mutex_trylock_common+0xe9/0x250 [ 168.228936][ T7152] futex_wake+0xea/0x530 [ 168.228978][ T7152] ? __pfx_futex_wake+0x10/0x10 [ 168.229030][ T7152] do_futex+0x1e3/0x350 [ 168.229062][ T7152] ? __pfx_do_futex+0x10/0x10 [ 168.229100][ T7152] ? __might_fault+0xe3/0x190 [ 168.229138][ T7152] mm_release+0x24e/0x300 [ 168.229166][ T7152] do_exit+0x68e/0x2bf0 [ 168.229208][ T7152] ? __pfx_do_exit+0x10/0x10 [ 168.229244][ T7152] ? do_raw_spin_lock+0x12c/0x2b0 [ 168.229285][ T7152] ? find_held_lock+0x2b/0x80 [ 168.229320][ T7152] do_group_exit+0xd3/0x2a0 [ 168.229362][ T7152] get_signal+0x2673/0x26d0 [ 168.229403][ T7152] ? find_held_lock+0x2b/0x80 [ 168.229431][ T7152] ? __might_fault+0xe3/0x190 [ 168.229464][ T7152] ? __pfx_get_signal+0x10/0x10 [ 168.229495][ T7152] ? do_futex+0x122/0x350 [ 168.229531][ T7152] ? __pfx_do_futex+0x10/0x10 [ 168.229570][ T7152] arch_do_signal_or_restart+0x8f/0x790 [ 168.229610][ T7152] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 168.229656][ T7152] ? xfd_validate_state+0x61/0x180 [ 168.229704][ T7152] exit_to_user_mode_loop+0x84/0x110 [ 168.229744][ T7152] do_syscall_64+0x3f6/0x490 [ 168.229781][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.229807][ T7152] RIP: 0033:0x7f574e38ebe9 [ 168.229829][ T7152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.229854][ T7152] RSP: 002b:00007f574f1170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 168.229881][ T7152] RAX: fffffffffffffe00 RBX: 00007f574e5b5fa8 RCX: 00007f574e38ebe9 [ 168.229899][ T7152] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f574e5b5fa8 [ 168.229917][ T7152] RBP: 00007f574e5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 168.229933][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.229948][ T7152] R13: 00007f574e5b6038 R14: 00007ffd07ba9d70 R15: 00007ffd07ba9e58 [ 168.229978][ T7152] [ 170.005478][ T7181] nbd: nbd7 already in use [ 170.363805][ T7186] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078400200 pfn:0x78400 [ 170.378383][ T7186] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 170.399900][ T7186] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 170.409217][ T7186] raw: ffff888078400200 0000000000000000 00000001ffffffff 0000000000000000 [ 170.420537][ T7186] page dumped because: unmovable page [ 170.426604][ T7186] page_owner tracks the page as allocated [ 170.434754][ T7186] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 103785333555, free_ts 100636811076 [ 170.457071][ T7186] register_dummy_stack+0x89/0xd0 [ 170.462949][ T7186] init_page_owner+0x48/0x7e0 [ 170.467733][ T7186] page_ext_init+0x703/0xb00 [ 170.478038][ T7186] mm_core_init+0x13c/0x220 [ 170.482753][ T7186] page last free pid 5975 tgid 5975 stack trace: [ 170.489443][ T7186] __free_frozen_pages+0x7d5/0x10f0 [ 170.495340][ T7186] qlist_free_all+0x4d/0x120 [ 170.500180][ T7186] kasan_quarantine_reduce+0x195/0x1e0 [ 170.505834][ T7186] __kasan_slab_alloc+0x69/0x90 [ 170.523534][ T7186] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 170.536224][ T7186] __alloc_skb+0x2b2/0x380 [ 170.540861][ T7186] mld_newpack.isra.0+0x18e/0xa20 [ 170.546484][ T7186] add_grhead+0x299/0x340 [ 170.551030][ T7186] add_grec+0x11b5/0x1720 [ 170.559177][ T7186] mld_send_initial_cr+0x151/0x320 [ 170.564907][ T7186] mld_dad_work+0x32/0x1f0 [ 170.569740][ T7186] process_one_work+0x9cc/0x1b70 [ 170.577141][ T7186] worker_thread+0x6c8/0xf10 [ 170.587303][ T7186] kthread+0x3c5/0x780 [ 170.591998][ T7186] ret_from_fork+0x5d7/0x6f0 [ 170.597535][ T7186] ret_from_fork_asm+0x1a/0x30 [ 170.701002][ T7189] FAULT_INJECTION: forcing a failure. [ 170.701002][ T7189] name fail_futex, interval 1, probability 0, space 0, times 0 [ 170.807063][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.0.294 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 170.807092][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.807103][ T7189] Call Trace: [ 170.807109][ T7189] [ 170.807116][ T7189] dump_stack_lvl+0x16c/0x1f0 [ 170.807145][ T7189] should_fail_ex+0x512/0x640 [ 170.807171][ T7189] get_futex_key+0x1d0/0x1560 [ 170.807196][ T7189] ? __pfx_get_futex_key+0x10/0x10 [ 170.807218][ T7189] ? __mutex_trylock_common+0xe9/0x250 [ 170.807249][ T7189] futex_wake+0xea/0x530 [ 170.807280][ T7189] ? __pfx_futex_wake+0x10/0x10 [ 170.807319][ T7189] do_futex+0x1e3/0x350 [ 170.807343][ T7189] ? __pfx_do_futex+0x10/0x10 [ 170.807364][ T7189] ? __might_fault+0xe3/0x190 [ 170.807391][ T7189] mm_release+0x24e/0x300 [ 170.807413][ T7189] do_exit+0x68e/0x2bf0 [ 170.807443][ T7189] ? __pfx_do_exit+0x10/0x10 [ 170.807468][ T7189] ? do_raw_spin_lock+0x12c/0x2b0 [ 170.807495][ T7189] ? find_held_lock+0x2b/0x80 [ 170.807517][ T7189] do_group_exit+0xd3/0x2a0 [ 170.807544][ T7189] get_signal+0x2673/0x26d0 [ 170.807570][ T7189] ? find_held_lock+0x2b/0x80 [ 170.807587][ T7189] ? __might_fault+0xe3/0x190 [ 170.807608][ T7189] ? __pfx_get_signal+0x10/0x10 [ 170.807629][ T7189] ? do_futex+0x122/0x350 [ 170.807652][ T7189] ? __pfx_do_futex+0x10/0x10 [ 170.807677][ T7189] arch_do_signal_or_restart+0x8f/0x790 [ 170.807703][ T7189] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 170.807733][ T7189] ? xfd_validate_state+0x61/0x180 [ 170.807765][ T7189] exit_to_user_mode_loop+0x84/0x110 [ 170.807794][ T7189] do_syscall_64+0x3f6/0x490 [ 170.807831][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.807850][ T7189] RIP: 0033:0x7f63df38ebe9 [ 170.807864][ T7189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.807882][ T7189] RSP: 002b:00007f63e02570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.807900][ T7189] RAX: fffffffffffffe00 RBX: 00007f63df5b5fa8 RCX: 00007f63df38ebe9 [ 170.807912][ T7189] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f63df5b5fa8 [ 170.807922][ T7189] RBP: 00007f63df5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 170.807933][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.807943][ T7189] R13: 00007f63df5b6038 R14: 00007fff14e9ea30 R15: 00007fff14e9eb18 [ 170.807965][ T7189] [ 171.157644][ T7191] HfR: entered promiscuous mode [ 171.196699][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 171.233456][ T7191] HfR: left promiscuous mode [ 171.514296][ T7201] HfR: entered promiscuous mode [ 172.002086][ T7208] random: crng reseeded on system resumption [ 172.597293][ T7212] Unrecognized hibernate image header format! [ 172.611773][ T7212] PM: hibernation: Image mismatch: architecture specific data [ 174.426128][ T7224] nfs: Unknown parameter '0 [ 174.426128][ T7224] ' [ 175.119090][ T7249] openvswitch: HfR: Dropping previously announced user features [ 175.131369][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 175.161369][ T7249] HfR: left promiscuous mode [ 175.297635][ T7251] HfR: entered promiscuous mode [ 177.925691][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 178.028959][ T7298] openvswitch: HfR: Dropping previously announced user features [ 178.072643][ T7302] HfR: left promiscuous mode [ 178.258271][ T7304] HfR: entered promiscuous mode [ 179.360104][ T7321] nbd: nbd7 already in use [ 179.551366][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.327'. [ 179.614030][ T7324] caif0: entered promiscuous mode [ 179.854955][ T7331] netlink: 334 bytes leftover after parsing attributes in process `syz.0.330'. [ 180.243008][ T7339] [ 180.245417][ T7339] ====================================================== [ 180.252610][ T7339] WARNING: possible circular locking dependency detected [ 180.259657][ T7339] 6.16.0-syzkaller-12016-gbec077162bd0 #0 Not tainted [ 180.266423][ T7339] ------------------------------------------------------ [ 180.273448][ T7339] syz.0.331/7339 is trying to acquire lock: [ 180.279423][ T7339] ffffffff8e727808 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 180.289102][ T7339] [ 180.289102][ T7339] but task is already holding lock: [ 180.296466][ T7339] ffff888142b87668 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 180.307712][ T7339] [ 180.307712][ T7339] which lock already depends on the new lock. [ 180.307712][ T7339] [ 180.318301][ T7339] [ 180.318301][ T7339] the existing dependency chain (in reverse order) is: [ 180.327419][ T7339] [ 180.327419][ T7339] -> #2 (&q->q_usage_counter(io)#30){++++}-{0:0}: [ 180.336038][ T7339] blk_alloc_queue+0x619/0x760 [ 180.341441][ T7339] blk_mq_alloc_queue+0x172/0x280 [ 180.347005][ T7339] __blk_mq_alloc_disk+0x29/0x120 [ 180.352695][ T7339] loop_add+0x490/0xb70 [ 180.357442][ T7339] loop_init+0x164/0x270 [ 180.362304][ T7339] do_one_initcall+0x120/0x6e0 [ 180.367594][ T7339] kernel_init_freeable+0x5c2/0x910 [ 180.373605][ T7339] kernel_init+0x1c/0x2b0 [ 180.378488][ T7339] ret_from_fork+0x5d7/0x6f0 [ 180.383616][ T7339] ret_from_fork_asm+0x1a/0x30 [ 180.388918][ T7339] [ 180.388918][ T7339] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 180.396134][ T7339] fs_reclaim_acquire+0x102/0x150 [ 180.401782][ T7339] prepare_alloc_pages+0x162/0x610 [ 180.407455][ T7339] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 180.414059][ T7339] __alloc_pages_noprof+0xb/0x1b0 [ 180.419620][ T7339] pcpu_populate_chunk+0x110/0xb00 [ 180.425256][ T7339] pcpu_alloc_noprof+0x86a/0x1470 [ 180.430811][ T7339] bpf_map_alloc_percpu+0x9a/0x4b0 [ 180.436544][ T7339] htab_map_alloc+0x10ca/0x1570 [ 180.441929][ T7339] map_create+0x58f/0x1f80 [ 180.446900][ T7339] __sys_bpf+0x44d2/0x4de0 [ 180.451926][ T7339] __x64_sys_bpf+0x78/0xc0 [ 180.456888][ T7339] do_syscall_64+0xcd/0x490 [ 180.461941][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.468383][ T7339] [ 180.468383][ T7339] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 180.476216][ T7339] __lock_acquire+0x12a6/0x1ce0 [ 180.481704][ T7339] lock_acquire+0x179/0x350 [ 180.486751][ T7339] __mutex_lock+0x193/0x10b0 [ 180.491880][ T7339] pcpu_alloc_noprof+0xb4c/0x1470 [ 180.497640][ T7339] blk_stat_alloc_callback+0xc8/0x280 [ 180.503673][ T7339] wbt_init+0xac/0x540 [ 180.508289][ T7339] queue_wb_lat_store+0x354/0x3d0 [ 180.513852][ T7339] queue_attr_store+0x26b/0x310 [ 180.519442][ T7339] sysfs_kf_write+0xf2/0x150 [ 180.524570][ T7339] kernfs_fop_write_iter+0x354/0x510 [ 180.530484][ T7339] do_iter_readv_writev+0x657/0x950 [ 180.536394][ T7339] vfs_writev+0x35f/0xde0 [ 180.541268][ T7339] do_writev+0x132/0x340 [ 180.546125][ T7339] do_syscall_64+0xcd/0x490 [ 180.551213][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.557683][ T7339] [ 180.557683][ T7339] other info that might help us debug this: [ 180.557683][ T7339] [ 180.568028][ T7339] Chain exists of: [ 180.568028][ T7339] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#30 [ 180.568028][ T7339] [ 180.582139][ T7339] Possible unsafe locking scenario: [ 180.582139][ T7339] [ 180.589705][ T7339] CPU0 CPU1 [ 180.595439][ T7339] ---- ---- [ 180.600810][ T7339] lock(&q->q_usage_counter(io)#30); [ 180.606225][ T7339] lock(fs_reclaim); [ 180.612823][ T7339] lock(&q->q_usage_counter(io)#30); [ 180.620796][ T7339] lock(pcpu_alloc_mutex); [ 180.625313][ T7339] [ 180.625313][ T7339] *** DEADLOCK *** [ 180.625313][ T7339] [ 180.633543][ T7339] 6 locks held by syz.0.331/7339: [ 180.638582][ T7339] #0: ffff88807aba1278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 180.648472][ T7339] #1: ffff88807d64a428 (sb_writers#7){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 180.657668][ T7339] #2: ffff88805bc21488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 180.667583][ T7339] #3: ffff8880254015a8 (kn->active#102){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 180.677828][ T7339] #4: ffff888142b87668 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 180.689602][ T7339] #5: ffff888142b876a0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 180.701836][ T7339] [ 180.701836][ T7339] stack backtrace: [ 180.707786][ T7339] CPU: 0 UID: 0 PID: 7339 Comm: syz.0.331 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 180.707824][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.707834][ T7339] Call Trace: [ 180.707842][ T7339] [ 180.707849][ T7339] dump_stack_lvl+0x116/0x1f0 [ 180.707873][ T7339] print_circular_bug+0x275/0x350 [ 180.707897][ T7339] check_noncircular+0x14c/0x170 [ 180.707921][ T7339] __lock_acquire+0x12a6/0x1ce0 [ 180.707948][ T7339] lock_acquire+0x179/0x350 [ 180.707971][ T7339] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 180.707993][ T7339] ? __pfx___might_resched+0x10/0x10 [ 180.708014][ T7339] ? kernfs_fop_write_iter+0x354/0x510 [ 180.708031][ T7339] ? do_iter_readv_writev+0x657/0x950 [ 180.708049][ T7339] ? vfs_writev+0x35f/0xde0 [ 180.708068][ T7339] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 180.708087][ T7339] __mutex_lock+0x193/0x10b0 [ 180.708107][ T7339] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 180.708129][ T7339] ? __pfx___mutex_lock+0x10/0x10 [ 180.708154][ T7339] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 180.708173][ T7339] pcpu_alloc_noprof+0xb4c/0x1470 [ 180.708196][ T7339] ? __pfx_wbt_data_dir+0x10/0x10 [ 180.708217][ T7339] ? __pfx_wb_timer_fn+0x10/0x10 [ 180.708242][ T7339] blk_stat_alloc_callback+0xc8/0x280 [ 180.708267][ T7339] ? kasan_save_track+0x14/0x30 [ 180.708288][ T7339] wbt_init+0xac/0x540 [ 180.708314][ T7339] queue_wb_lat_store+0x354/0x3d0 [ 180.708337][ T7339] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 180.708359][ T7339] ? __mutex_trylock_common+0xe9/0x250 [ 180.708384][ T7339] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 180.708406][ T7339] queue_attr_store+0x26b/0x310 [ 180.708428][ T7339] ? __pfx_queue_attr_store+0x10/0x10 [ 180.708454][ T7339] ? find_held_lock+0x2b/0x80 [ 180.708471][ T7339] ? sysfs_file_kobj+0xe4/0x290 [ 180.708496][ T7339] ? __pfx_queue_attr_store+0x10/0x10 [ 180.708530][ T7339] sysfs_kf_write+0xf2/0x150 [ 180.708561][ T7339] kernfs_fop_write_iter+0x354/0x510 [ 180.708579][ T7339] ? __pfx_sysfs_kf_write+0x10/0x10 [ 180.708598][ T7339] do_iter_readv_writev+0x657/0x950 [ 180.708618][ T7339] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 180.708641][ T7339] vfs_writev+0x35f/0xde0 [ 180.708662][ T7339] ? __pfx_vfs_writev+0x10/0x10 [ 180.708679][ T7339] ? __mutex_lock+0x1c4/0x10b0 [ 180.708701][ T7339] ? __pfx___mutex_lock+0x10/0x10 [ 180.708724][ T7339] ? __fget_files+0x20e/0x3c0 [ 180.708751][ T7339] ? do_writev+0x132/0x340 [ 180.708768][ T7339] do_writev+0x132/0x340 [ 180.708787][ T7339] ? __pfx_do_writev+0x10/0x10 [ 180.708808][ T7339] do_syscall_64+0xcd/0x490 [ 180.708829][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.708848][ T7339] RIP: 0033:0x7f63df38ebe9 [ 180.708869][ T7339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.708896][ T7339] RSP: 002b:00007f63e0257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 180.708921][ T7339] RAX: ffffffffffffffda RBX: 00007f63df5b5fa0 RCX: 00007f63df38ebe9 [ 180.708933][ T7339] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 180.708943][ T7339] RBP: 00007f63df411e19 R08: 0000000000000000 R09: 0000000000000000 [ 180.708954][ T7339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.708964][ T7339] R13: 00007f63df5b6038 R14: 00007f63df5b5fa0 R15: 00007fff14e9eb18 [ 180.708980][ T7339] [ 181.164938][ T7346] vhci_hcd: invalid port number 16 [ 181.170447][ T7346] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 181.257379][ T7338] random: crng reseeded on system resumption [ 181.270470][ T7338] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 181.278926][ T7338] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 181.287274][ T7338] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 181.301265][ T7338] PM: hibernation: Basic memory bitmaps created [ 181.439832][ T7325] PM: hibernation: Basic memory bitmaps freed