last executing test programs: 16.26905048s ago: executing program 3 (id=833): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r1, 0x4) r5 = open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r5, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = geteuid() keyctl$auto(0x1e, r6, r6, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000740)={0x214, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc7, 0x1, 0x0, 0x1, [@typed={0x8, 0x130, 0x0, 0x0, @uid}, @generic="072f3ac825449d92b88746be366184cf396e3f2fc9dee7ef3f977f66050480480556d2f966b5fc89368376205ef5bee808784cca6c2ec1eface9ef7e3faba3b1658765d1cb0715138a390ab75fd7a2e69a78d764fc3e8942ca420ffe71dcac9bc952d59e18a38eb8d2f394bb45cab3cd24a5af321a4f1955d2faf6d3a6287af71cd35eac11ac924a2b10d56f48a38ab78ea97879c838203810bfadd88f7b6563444911160d33f55dfd01dc28bb1fed775e7244dfec734222ba06d8"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x38, 0x1, 0x0, 0x1, [@generic="53f4ab34978188d1a6fb50088db2f01d7f5bfde3a16246b4573efa46", @typed={0xc, 0xd0, 0x0, 0x0, @u64}, @typed={0x8, 0x57, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0xb7}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x90, 0x1, 0x0, 0x1, [@nested={0x8b, 0x27, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x5e, 0x0, 0x0, @pid}, @generic, @nested={0x4, 0x1a}, @generic="d47951a0dc842493603473e2ae72c7276fa0799ea758802c23403fa7397564403285b312eb36ba450e39034a23887cac7bf7d31790d86e7ad464aabb815ad0006d4081fd6d5d8df2f1a2f3e2c3654d056658a41c3320ddcaac9809a2bf9f1dcefb6b8d", @typed={0x8, 0xbb, 0x0, 0x0, @pid}, @nested={0x4, 0x74}, @nested={0x4, 0xbd}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3a, 0x1, 0x0, 0x1, [@generic="5ffc97063175e686bcddb0e61fee6cfbedb67f3fa3829199f32444e5a471e8ef0d248620169ccb6fae6a549b2466a3f64c53232aacae"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x23, 0x1, 0x0, 0x1, [@generic="9c60ae270973d9bfaeddc883c9e1368f912d03b532d21831d5bc37b69499ca"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @uid=r6}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x120, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x78, 0xbe, "2851deffd25c1ad8570b3ccab61efec8b5287da5740b3f69513508f66478fa0a946f3a3d7266145466ac77c9ad2c8c402858f8ff080284b3fc289fccf971e084e9b8aec596b715aec67311f3932a1379544aff4f5b730bb2779cc29c75729120f7b386758524dc5054da379991cb65bc7a3a84c6"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e213626609000000b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}]}, 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x8002) sendmsg$auto_NL80211_CMD_GET_KEY(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000200000000fedbdf250900000004006700caf764fc58be11ae44bf3b04004a01"], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) 12.172203153s ago: executing program 3 (id=841): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) socket(0x29, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000008000) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, r0, 0x8001) r2 = socket(0x23, 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r3, 0x0, 0x1f40) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="d0100000", @ANYRES16=r4, @ANYBLOB="020026bd7000fcdbdf25200000000500130010000000050007000600000005002600000000000500080007000000911030800400ca800800a400", @ANYRES32=r2, @ANYBLOB="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"/4236], 0x10d0}, 0x1, 0x0, 0x0, 0x800}, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20b82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x14) 12.169790154s ago: executing program 1 (id=848): io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) unshare$auto(0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x7) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x2, 0x7f, 0x80010000000002, 0x3, 0x6, 0xefffffffffffffff, 0xa3f3, 0x62, 0x3, 0x10000000800004, 0x400008, 0x1, 0x2, 0xfffffffffffffffd]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x0, 0x1, 0x0, 0x1e) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x2, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r2, 0x5522, 0xf15) ioctl$auto(r2, 0x5523, r2) 10.034503748s ago: executing program 3 (id=842): socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af13, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r5 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=r4}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r5, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) 10.033094125s ago: executing program 1 (id=843): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x31) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x200040, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 7.930676872s ago: executing program 0 (id=849): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x31) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x200040, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto(r4, 0x4008af24, r3) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x25, 0x5, 0x6) 6.772662925s ago: executing program 2 (id=852): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0)) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0) ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r5 = socket(0x23, 0x5, 0x0) bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0) socket(0xa, 0x1, 0x84) r6 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x80002, 0x0) io_uring_setup$auto(0xfffffff9, &(0x7f0000000400)={0x80000001, 0x1, 0xb8a5, 0x9, 0x5, 0xf20, r6, [0x6, 0x1, 0x6], {0x3, 0xfffffffc, 0x7, 0x3, 0x3, 0x3, 0xffff, 0x7fffffff, 0x7fffffff}, {0x9, 0x9, 0x3, 0x6, 0x3, 0x874, 0x4, 0xaf2940}}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 6.247894418s ago: executing program 0 (id=853): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0xf42f, 0x7f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r2 = fcntl$auto(r1, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) mmap$auto(0x0, 0x20009, 0x809, 0xeb1, 0x401, 0x80000000008000) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES32, @ANYBLOB="0400028008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x801) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x5, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = prctl$auto_PR_SET_MM_ENV_START(0x4, 0xa, 0x0, 0xf9, 0x5) sendfile$auto(r5, r2, &(0x7f00000001c0)=0xac, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r6 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r6, 0x0, 0xc3) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mknod$auto(&(0x7f0000000040)='./file1\x00', 0x4, 0x7fff) r9 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) read$auto_supply_map_fops_(r1, &(0x7f0000000400)=""/4096, 0x1000) writev$auto(r9, &(0x7f0000003600)={0x0, 0x2}, 0x8) truncate$auto(&(0x7f0000000140)='./file0\x00', 0x9) ioctl$auto(r7, 0x541c, r8) 6.227895965s ago: executing program 1 (id=854): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/flush\x00', 0x2, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)="d2e9075df743aa70c45dd80b8ec420049b2ea633", 0x14) 5.96170871s ago: executing program 1 (id=855): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="010025bd700002dcdf2503000000050009000500000004000600040006003d1202805000a500c667d9d0cca65d36490648637f04abd8489cc9506022c8fdacd8c22e41b7d2fa985dddd4b2a5bc76074abe9f0f7649f33e5d77a8ea4c3b443b183ae146e3f9ca235415abb72b1863c0166ebb22114580bbb94c93b312191f84de52174ef5b9d6d59c8cc74f0058dded57a7a541a3008eb7fd96705f9056abb12127a7a862b213720a9138cc5e515206c2c67d96a85f4ed00755cfe9337a385153519e144b6a1b58dac5d963d89bb2577d048c71bc80aac3c8f21168defd407d32a5321443eeff8e5942c2f43bc93e0a8cb1dd317a9e8b1666edf829be42389b40da3cdd62d74927de8a89201eddd9a799cacaf4d1f69a7427eed9b3e7fc5555965125c44ee35d835ee3e1c3db437900c59e9531f473c9a25420a693b5a0a4230bdd74b2a3d9958215efa47728727a4b736b4f44b20800", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e60000000800"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r4, 0x0, 0x594c, 0x9fffffffd) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r2) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r7, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r8, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r9 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) 5.509132974s ago: executing program 3 (id=856): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000300)=0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000740)=ANY=[@ANYBLOB="095c9ae9e003000083d8e22c681914cba3730448f16f1355afee6615001b41d6ff592cec4179455fb1d13a723b71eda420eec05b6f14d80f1f3e0e355796d6f200b13da4169f2ca6ae544e2d35cbbc6b0085820f876a7f2bc20b2fe5627e182223fabaa6a2eba994ed259396624f9e495ed44c80865704bbb17ea5b3b58210d8c4f64ab55da0b57f098cf12b9df42523e2", @ANYRES16=r3, @ANYBLOB="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"], 0x3e0}, 0x1, 0x0, 0x0, 0xc000}, 0x4005) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x8001, 0x0, 0x0, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x3, 0xbef, 0x9, 0x8000000000000011, r4, 0x755c913d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x2419d6159e7d4f8a, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x1d, 0x3, 0x1) r7 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8}, 0x6a) write$auto(r6, &(0x7f00000002c0)='@*\x00', 0xf) sendfile$auto(r5, r2, 0x0, 0x8) sendfile$auto(0x1, r5, 0x0, 0x7ffff000) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32], 0x1ac}}, 0x810) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) 5.455486561s ago: executing program 2 (id=857): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) read$auto_bm_entry_operations_binfmt_misc(r0, &(0x7f0000000180)=""/190, 0xbe) 5.340475514s ago: executing program 0 (id=858): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r1, 0x57, r0) getgid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) 4.761738736s ago: executing program 1 (id=859): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r1, 0x4) r5 = open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r5, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = geteuid() keyctl$auto(0x1e, r6, r6, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000740)={0x214, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc7, 0x1, 0x0, 0x1, [@typed={0x8, 0x130, 0x0, 0x0, @uid}, @generic="072f3ac825449d92b88746be366184cf396e3f2fc9dee7ef3f977f66050480480556d2f966b5fc89368376205ef5bee808784cca6c2ec1eface9ef7e3faba3b1658765d1cb0715138a390ab75fd7a2e69a78d764fc3e8942ca420ffe71dcac9bc952d59e18a38eb8d2f394bb45cab3cd24a5af321a4f1955d2faf6d3a6287af71cd35eac11ac924a2b10d56f48a38ab78ea97879c838203810bfadd88f7b6563444911160d33f55dfd01dc28bb1fed775e7244dfec734222ba06d8"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x38, 0x1, 0x0, 0x1, [@generic="53f4ab34978188d1a6fb50088db2f01d7f5bfde3a16246b4573efa46", @typed={0xc, 0xd0, 0x0, 0x0, @u64}, @typed={0x8, 0x57, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0xb7}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x90, 0x1, 0x0, 0x1, [@nested={0x8b, 0x27, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x5e, 0x0, 0x0, @pid}, @generic, @nested={0x4, 0x1a}, @generic="d47951a0dc842493603473e2ae72c7276fa0799ea758802c23403fa7397564403285b312eb36ba450e39034a23887cac7bf7d31790d86e7ad464aabb815ad0006d4081fd6d5d8df2f1a2f3e2c3654d056658a41c3320ddcaac9809a2bf9f1dcefb6b8d", @typed={0x8, 0xbb, 0x0, 0x0, @pid}, @nested={0x4, 0x74}, @nested={0x4, 0xbd}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3a, 0x1, 0x0, 0x1, [@generic="5ffc97063175e686bcddb0e61fee6cfbedb67f3fa3829199f32444e5a471e8ef0d248620169ccb6fae6a549b2466a3f64c53232aacae"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x23, 0x1, 0x0, 0x1, [@generic="9c60ae270973d9bfaeddc883c9e1368f912d03b532d21831d5bc37b69499ca"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @uid=r6}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x120, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x78, 0xbe, "2851deffd25c1ad8570b3ccab61efec8b5287da5740b3f69513508f66478fa0a946f3a3d7266145466ac77c9ad2c8c402858f8ff080284b3fc289fccf971e084e9b8aec596b715aec67311f3932a1379544aff4f5b730bb2779cc29c75729120f7b386758524dc5054da379991cb65bc7a3a84c6"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e213626609000000b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}]}, 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x8002) sendmsg$auto_NL80211_CMD_GET_KEY(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000200000000fedbdf250900000004006700caf764fc58be11ae44bf3b04004a01"], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) 4.574755968s ago: executing program 2 (id=860): read$auto_fops_blob_file(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020006, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) read$auto(r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20040, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/record-tgid\x00', 0x121082, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, r1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20008, 0xdb, 0xeb1, 0x401, 0x6) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000002, 0x0, 0x3, 0x0, 0x27, 0x401}, 0x2}, 0x800, 0x80000000) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) statmount$auto(0x0, &(0x7f0000000600)={0x8, 0xc, 0x9, 0x3, 0x4323, 0x93f, 0x1fee0, 0x3, 0x7, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8003, 0x7, 0xb3, 0x9, 0x5, 0x10003, 0x100008, 0x4, 0x10, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x7, 0x7af9, 0x0, 0x0, [0x2, 0x200000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0e27fea", @ANYBLOB="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", @ANYRESDEC=r2, @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20008084}, 0x8000) socket(0x10, 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x10000, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) 4.258949743s ago: executing program 0 (id=861): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x31) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x200040, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 4.151273544s ago: executing program 2 (id=862): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x31) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x200040, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto(r4, 0x4008af24, r3) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x25, 0x5, 0x6) 2.779147312s ago: executing program 0 (id=863): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x31) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x200040, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto(r4, 0x4008af24, r3) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 2.56442684s ago: executing program 1 (id=864): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x8000000000000000, 0x3, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x3d, 0xe, 0x3, 0x101, 0x100000000000ff, 0x1000000002, 0x80080001]}, 0x0, 0x0) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x10000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 2.002472473s ago: executing program 3 (id=865): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f00000001c0)) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0) ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r5 = socket(0x23, 0x5, 0x0) bind$auto(r5, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r4, r5, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0) socket(0xa, 0x1, 0x84) r6 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x80002, 0x0) io_uring_setup$auto(0xfffffff9, &(0x7f0000000400)={0x80000001, 0x1, 0xb8a5, 0x9, 0x5, 0xf20, r6, [0x6, 0x1, 0x6], {0x3, 0xfffffffc, 0x7, 0x3, 0x3, 0x3, 0xffff, 0x7fffffff, 0x7fffffff}, {0x9, 0x9, 0x3, 0x6, 0x3, 0x874, 0x4, 0xaf2940}}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1.995682519s ago: executing program 2 (id=873): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x31) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x200040, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x25, 0x5, 0x6) 607.678172ms ago: executing program 3 (id=866): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) 43.675536ms ago: executing program 0 (id=867): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/bond0/arp_ignore\x00', 0x1181, 0x0) write$auto(r0, &(0x7f00000000c0)='[*-^\x00', 0x8) 0s ago: executing program 2 (id=868): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x985}, 0x4) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c", 0x3f8) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x248880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000600)='/Eev7audio1\x00VI\xa3\xaa\x01\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\x8eZ|\xffGP\x97)\xcf\a\xfb\\nD\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb\xd9\xce\xb3\xfa\xcd(\xa6\x9c\xc7I\xb65T\xa4Y8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x06k\xa2\xc2\xa7n\xf8>\"\xfd@\xee\xf9\xa4\xf4\xb4\x90\x95\f\xc2\xb6\x15\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xda\xe4\x15\xcbx\x01w\xeb\xf4R\x9663\x840\tL\xd2r\xf7\f#\xccR\xfc\xc0e~b\x99`S_\xba\a%Ta\xdf\xbc\x85\x99\xfe\xf8\x05n\xfa\xb9-ph\xf2\x87\x92\x9d\x10!\x83\xecV\x19\xd2\x96W\x9d\x8b\xd6bt\xea\xe4\x9c\xbf\x01t@\x85/D\xba\x14.w\xf57\xbe\x804\f\xeep\x9f\xa7\xc25\\\xe9m0\xcf\xbe;\x83E\x17C\xda||A\xe6R;\x00\x00', 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = userfaultfd$auto(0x1) statx$auto(r8, 0x0, 0x1000, 0x8, 0x0) kernel console output (not intermixed with test programs): [ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.871271][ T5872] bridge_slave_0: entered allmulticast mode [ 81.879739][ T5872] bridge_slave_0: entered promiscuous mode [ 81.909337][ T5865] hsr_slave_0: entered promiscuous mode [ 81.916511][ T5865] hsr_slave_1: entered promiscuous mode [ 81.923498][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.930893][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.938437][ T5872] bridge_slave_1: entered allmulticast mode [ 81.945549][ T5872] bridge_slave_1: entered promiscuous mode [ 82.000467][ T5859] hsr_slave_0: entered promiscuous mode [ 82.007055][ T5859] hsr_slave_1: entered promiscuous mode [ 82.013171][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 82.019076][ T5859] Cannot create hsr debugfs directory [ 82.073169][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.083159][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.090784][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.098221][ T5861] bridge_slave_0: entered allmulticast mode [ 82.105450][ T5861] bridge_slave_0: entered promiscuous mode [ 82.142732][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.152313][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.159632][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.167298][ T5861] bridge_slave_1: entered allmulticast mode [ 82.174276][ T5861] bridge_slave_1: entered promiscuous mode [ 82.266925][ T5869] Bluetooth: hci0: command tx timeout [ 82.290423][ T5872] team0: Port device team_slave_0 added [ 82.300737][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.324026][ T5872] team0: Port device team_slave_1 added [ 82.348136][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.410551][ T5861] team0: Port device team_slave_0 added [ 82.426491][ T5869] Bluetooth: hci1: command tx timeout [ 82.426523][ T5868] Bluetooth: hci2: command tx timeout [ 82.432247][ T5869] Bluetooth: hci3: command tx timeout [ 82.450663][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.458292][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.485388][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.499329][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.506912][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.533737][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.547419][ T5861] team0: Port device team_slave_1 added [ 82.626959][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.633929][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.661016][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.698108][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.705350][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.732458][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.807438][ T5872] hsr_slave_0: entered promiscuous mode [ 82.814053][ T5872] hsr_slave_1: entered promiscuous mode [ 82.820513][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 82.826328][ T5872] Cannot create hsr debugfs directory [ 82.867266][ T5861] hsr_slave_0: entered promiscuous mode [ 82.873943][ T5861] hsr_slave_1: entered promiscuous mode [ 82.880462][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 82.886747][ T5861] Cannot create hsr debugfs directory [ 83.001864][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.028466][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.062630][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.093240][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.184753][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.222208][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.246995][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.274644][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.367525][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.389050][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.402502][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.441624][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.508301][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.524668][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.537538][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.562528][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.649433][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.678160][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.728092][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.768810][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.776288][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.791082][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.798343][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.813660][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.868088][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.875507][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.895572][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.920416][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.938863][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.946366][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.975833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.983061][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.993525][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.000695][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.035441][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.150258][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.199787][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.207074][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.270784][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.277990][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.348613][ T5869] Bluetooth: hci0: command tx timeout [ 84.506591][ T5869] Bluetooth: hci3: command tx timeout [ 84.507624][ T5868] Bluetooth: hci2: command tx timeout [ 84.512201][ T5869] Bluetooth: hci1: command tx timeout [ 84.542454][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.613005][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.745710][ T5859] veth0_vlan: entered promiscuous mode [ 84.790105][ T5859] veth1_vlan: entered promiscuous mode [ 84.812056][ T5865] veth0_vlan: entered promiscuous mode [ 84.855628][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.867969][ T5865] veth1_vlan: entered promiscuous mode [ 84.905936][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.950864][ T5859] veth0_macvtap: entered promiscuous mode [ 84.963810][ T5859] veth1_macvtap: entered promiscuous mode [ 84.983142][ T5865] veth0_macvtap: entered promiscuous mode [ 85.005711][ T5865] veth1_macvtap: entered promiscuous mode [ 85.028298][ T5861] veth0_vlan: entered promiscuous mode [ 85.060371][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.071750][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.093235][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.103756][ T5861] veth1_vlan: entered promiscuous mode [ 85.115678][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.134966][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.157808][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.167657][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.193225][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.202867][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.212661][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.225628][ T5872] veth0_vlan: entered promiscuous mode [ 85.242028][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.251877][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.319061][ T5872] veth1_vlan: entered promiscuous mode [ 85.329133][ T5861] veth0_macvtap: entered promiscuous mode [ 85.360266][ T5861] veth1_macvtap: entered promiscuous mode [ 85.419367][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.429553][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.452060][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.496884][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.514232][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.518569][ T5872] veth0_macvtap: entered promiscuous mode [ 85.524361][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.555806][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.569770][ T5872] veth1_macvtap: entered promiscuous mode [ 85.589410][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.598533][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.622682][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.638449][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.646783][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.682075][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.690834][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.708319][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.734136][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.797653][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.804908][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.831107][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.891575][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.908460][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.933429][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.962431][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.117452][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.130317][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.228679][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.294014][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.376758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.436896][ T5869] Bluetooth: hci0: command tx timeout [ 86.484628][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.533779][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.593453][ T5869] Bluetooth: hci1: command tx timeout [ 86.593486][ T5869] Bluetooth: hci2: command tx timeout [ 86.593508][ T5869] Bluetooth: hci3: command tx timeout [ 86.756730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.766470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.006673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.136511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.846453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.855106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.877668][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.097573][ T5977] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 88.236443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.236995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.326345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 88.506353][ T5868] Bluetooth: hci0: command tx timeout [ 88.630286][ T5963] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 88.667212][ T5868] Bluetooth: hci3: command tx timeout [ 88.674290][ T5869] Bluetooth: hci2: command tx timeout [ 88.681008][ T51] Bluetooth: hci1: command tx timeout [ 89.159136][ T5996] FAULT_INJECTION: forcing a failure. [ 89.159136][ T5996] name failslab, interval 1, probability 0, space 0, times 1 [ 89.184383][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.2.9 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 89.184417][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.184435][ T5996] Call Trace: [ 89.184445][ T5996] [ 89.184454][ T5996] dump_stack_lvl+0x16c/0x1f0 [ 89.184491][ T5996] should_fail_ex+0x512/0x640 [ 89.184520][ T5996] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 89.184552][ T5996] should_failslab+0xc2/0x120 [ 89.184583][ T5996] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 89.184609][ T5996] ? alloc_inode+0x64/0x240 [ 89.184648][ T5996] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 89.184683][ T5996] alloc_inode+0x64/0x240 [ 89.184715][ T5996] new_inode+0x22/0x1c0 [ 89.184747][ T5996] __debugfs_create_file+0x11c/0x6b0 [ 89.184786][ T5996] debugfs_create_file_full+0x41/0x60 [ 89.184814][ T5996] kvm_dev_ioctl+0x153f/0x1af0 [ 89.184853][ T5996] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 89.184889][ T5996] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 89.184915][ T5996] __x64_sys_ioctl+0x18b/0x210 [ 89.184955][ T5996] do_syscall_64+0xcd/0x490 [ 89.184983][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.185006][ T5996] RIP: 0033:0x7fe05a78eb69 [ 89.185034][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.185063][ T5996] RSP: 002b:00007fe0585f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.185086][ T5996] RAX: ffffffffffffffda RBX: 00007fe05a9b5fa0 RCX: 00007fe05a78eb69 [ 89.185102][ T5996] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 89.185114][ T5996] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 89.185127][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.185139][ T5996] R13: 0000000000000000 R14: 00007fe05a9b5fa0 R15: 00007ffd8b97a858 [ 89.185172][ T5996] [ 89.185182][ T5996] debugfs: out of free dentries, can not create file 'mmu_pte_write' [ 90.431737][ T6011] bond0: option all_slaves_active: invalid value () [ 90.440957][ T6017] bond0: option all_slaves_active: invalid value () [ 90.829024][ T6016] random: crng reseeded on system resumption [ 91.157452][ T6018] sd 0:0:1:0: PR command failed: 1026 [ 91.166226][ T6018] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 91.178001][ T6018] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 92.122404][ T981] cfg80211: failed to load regulatory.db [ 92.542869][ T6040] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.118325][ T6028] syz.0.14 (6028) used greatest stack depth: 19224 bytes left [ 94.372558][ T6059] Zero length message leads to an empty skb [ 94.873359][ T6063] bond0: option all_slaves_active: invalid value () [ 95.206340][ T6063] bond0: option all_slaves_active: invalid value () [ 95.611364][ T6068] random: crng reseeded on system resumption [ 96.734599][ T6079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'. [ 96.789688][ T6081] i2c i2c-0: new_device: Extra parameters [ 96.871001][ T5980] Process accounting resumed [ 100.141065][ T6113] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.147868][ T6113] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.157781][ T6113] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.169070][ T6125] FAULT_INJECTION: forcing a failure. [ 100.169070][ T6125] name failslab, interval 1, probability 0, space 0, times 0 [ 100.182665][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.2.32 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 100.182709][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.182725][ T6125] Call Trace: [ 100.182734][ T6125] [ 100.182743][ T6125] dump_stack_lvl+0x16c/0x1f0 [ 100.182776][ T6125] should_fail_ex+0x512/0x640 [ 100.182807][ T6125] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 100.182845][ T6125] should_failslab+0xc2/0x120 [ 100.182879][ T6125] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 100.182910][ T6125] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.182935][ T6125] ? ip6_route_net_init+0xe2/0x8b0 [ 100.182965][ T6125] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 100.182997][ T6125] kmemdup_noprof+0x29/0x60 [ 100.183029][ T6125] ip6_route_net_init+0xe2/0x8b0 [ 100.183057][ T6125] ? inet_peer_base_init+0x76/0x120 [ 100.183095][ T6125] ? __pfx_ip6_route_net_init+0x10/0x10 [ 100.183124][ T6125] ops_init+0x1df/0x5f0 [ 100.183155][ T6125] setup_net+0x10f/0x380 [ 100.183179][ T6125] ? lockdep_init_map_type+0x5c/0x280 [ 100.183213][ T6125] ? __pfx_setup_net+0x10/0x10 [ 100.183242][ T6125] ? debug_mutex_init+0x37/0x70 [ 100.183271][ T6125] copy_net_ns+0x2a6/0x5f0 [ 100.183305][ T6125] create_new_namespaces+0x3ea/0xa90 [ 100.183343][ T6125] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 100.183391][ T6125] ksys_unshare+0x45b/0xa40 [ 100.183427][ T6125] ? __pfx_ksys_unshare+0x10/0x10 [ 100.183468][ T6125] ? xfd_validate_state+0x61/0x180 [ 100.183514][ T6125] __x64_sys_unshare+0x31/0x40 [ 100.183548][ T6125] do_syscall_64+0xcd/0x490 [ 100.183579][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.183605][ T6125] RIP: 0033:0x7fe05a78eb69 [ 100.183626][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.183649][ T6125] RSP: 002b:00007fe0585f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 100.183679][ T6125] RAX: ffffffffffffffda RBX: 00007fe05a9b5fa0 RCX: 00007fe05a78eb69 [ 100.183697][ T6125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 100.183712][ T6125] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 100.183728][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.183743][ T6125] R13: 0000000000000000 R14: 00007fe05a9b5fa0 R15: 00007ffd8b97a858 [ 100.183777][ T6125] [ 100.434051][ T6113] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.456327][ T6113] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.485421][ T6113] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.533797][ T6113] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.559986][ T6135] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 100.577869][ T6122] FAULT_INJECTION: forcing a failure. [ 100.577869][ T6122] name failslab, interval 1, probability 0, space 0, times 0 [ 100.603757][ T6113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.628136][ T6113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.638300][ T6113] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.644737][ T6113] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.653760][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.1.31 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 100.653794][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.653809][ T6122] Call Trace: [ 100.653817][ T6122] [ 100.653825][ T6122] dump_stack_lvl+0x16c/0x1f0 [ 100.653858][ T6122] should_fail_ex+0x512/0x640 [ 100.653885][ T6122] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 100.653916][ T6122] should_failslab+0xc2/0x120 [ 100.653948][ T6122] __kmalloc_cache_noprof+0x6a/0x3e0 [ 100.653973][ T6122] ? alloc_info_private+0xc4/0x1b0 [ 100.654010][ T6122] alloc_info_private+0xc4/0x1b0 [ 100.654043][ T6122] snd_info_text_entry_open+0xae/0x2e0 [ 100.654076][ T6122] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 100.654106][ T6122] ? trace_kmem_cache_alloc+0x28/0xc0 [ 100.654136][ T6122] ? __pfx_apparmor_file_open+0x10/0x10 [ 100.654172][ T6122] ? proc_reg_open+0x23f/0x5f0 [ 100.654202][ T6122] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 100.654234][ T6122] proc_reg_open+0x2a8/0x5f0 [ 100.654266][ T6122] do_dentry_open+0x982/0x1530 [ 100.654293][ T6122] ? __pfx_proc_reg_open+0x10/0x10 [ 100.654328][ T6122] vfs_open+0x82/0x3f0 [ 100.654366][ T6122] path_openat+0x1de4/0x2cb0 [ 100.654420][ T6122] ? __pfx_path_openat+0x10/0x10 [ 100.654459][ T6122] do_filp_open+0x20b/0x470 [ 100.654488][ T6122] ? __pfx_do_filp_open+0x10/0x10 [ 100.654538][ T6122] ? alloc_fd+0x471/0x7d0 [ 100.654570][ T6122] do_sys_openat2+0x11b/0x1d0 [ 100.654604][ T6122] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.654650][ T6122] __x64_sys_openat+0x174/0x210 [ 100.654681][ T6122] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.654713][ T6122] do_syscall_64+0xcd/0x490 [ 100.654730][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.654744][ T6122] RIP: 0033:0x7fe7a8f8eb69 [ 100.654757][ T6122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.654770][ T6122] RSP: 002b:00007fe7a9d5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.654783][ T6122] RAX: ffffffffffffffda RBX: 00007fe7a91b6160 RCX: 00007fe7a8f8eb69 [ 100.654798][ T6122] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 100.654810][ T6122] RBP: 00007fe7a9011df1 R08: 0000000000000000 R09: 0000000000000000 [ 100.654823][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.654835][ T6122] R13: 0000000000000000 R14: 00007fe7a91b6160 R15: 00007ffcea8c2d08 [ 100.654864][ T6122] [ 101.059280][ T6113] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.524878][ T6137] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 101.954034][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.204116][ T30] audit: type=1800 audit(1754412072.184:2): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.36" name="members" dev="configfs" ino=8578 res=0 errno=0 [ 102.517955][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.586487][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.666270][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.038194][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.587353][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.687297][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.755782][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.346734][ T36] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.536256][ T6195] bond0: option all_slaves_active: invalid value () [ 105.982473][ T6193] bond0: option all_slaves_active: invalid value () [ 106.112076][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.668684][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.746818][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.826277][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.899050][ T6215] kafs: addr_prefs: Too many elements in string [ 106.995058][ T6204] FAULT_INJECTION: forcing a failure. [ 106.995058][ T6204] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.008548][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.2.42 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 107.008572][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.008587][ T6204] Call Trace: [ 107.008593][ T6204] [ 107.008599][ T6204] dump_stack_lvl+0x16c/0x1f0 [ 107.008619][ T6204] should_fail_ex+0x512/0x640 [ 107.008640][ T6204] should_fail_alloc_page+0xe7/0x130 [ 107.008661][ T6204] prepare_alloc_pages+0x3c2/0x610 [ 107.008682][ T6204] ? rcu_is_watching+0x12/0xc0 [ 107.008699][ T6204] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 107.008718][ T6204] ? rcu_is_watching+0x12/0xc0 [ 107.008732][ T6204] ? trace_mm_page_alloc+0x11f/0x1a0 [ 107.008753][ T6204] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 107.008768][ T6204] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 107.008790][ T6204] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.008805][ T6204] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.008820][ T6204] ? stack_depot_save_flags+0x3de/0x9c0 [ 107.008842][ T6204] ? alloc_vmap_area+0x645/0x29c0 [ 107.008861][ T6204] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 107.008874][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.008888][ T6204] ? do_syscall_64+0xcd/0x490 [ 107.008901][ T6204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.008923][ T6204] alloc_pages_bulk_noprof+0x71c/0x1410 [ 107.008939][ T6204] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.008961][ T6204] ? policy_nodemask+0xea/0x4e0 [ 107.008981][ T6204] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 107.008998][ T6204] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 107.009024][ T6204] kasan_populate_vmalloc+0xf1/0x1f0 [ 107.009043][ T6204] alloc_vmap_area+0x959/0x29c0 [ 107.009070][ T6204] ? __pfx_alloc_vmap_area+0x10/0x10 [ 107.009094][ T6204] __get_vm_area_node+0x1ca/0x330 [ 107.009118][ T6204] __vmalloc_node_range_noprof+0x271/0x14b0 [ 107.009132][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.009145][ T6204] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.009166][ T6204] ? policy_nodemask+0xea/0x4e0 [ 107.009184][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.009202][ T6204] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.009218][ T6204] ? ___kmalloc_large_node+0xed/0x160 [ 107.009243][ T6204] __kvmalloc_node_noprof+0x30a/0x620 [ 107.009258][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.009272][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.009288][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.009301][ T6204] __do_sys_listmount+0x1c2/0xf80 [ 107.009317][ T6204] ? __x64_sys_futex+0x1e0/0x4c0 [ 107.009334][ T6204] ? __x64_sys_futex+0x1e9/0x4c0 [ 107.009352][ T6204] ? __pfx___do_sys_listmount+0x10/0x10 [ 107.009374][ T6204] do_syscall_64+0xcd/0x490 [ 107.009389][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.009405][ T6204] RIP: 0033:0x7fe05a78eb69 [ 107.009417][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.009430][ T6204] RSP: 002b:00007fe0585b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 107.009444][ T6204] RAX: ffffffffffffffda RBX: 00007fe05a9b6160 RCX: 00007fe05a78eb69 [ 107.009453][ T6204] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 107.009461][ T6204] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 107.009469][ T6204] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 107.009477][ T6204] R13: 0000000000000000 R14: 00007fe05a9b6160 R15: 00007ffd8b97a858 [ 107.009495][ T6204] [ 107.010295][ T6204] syz.2.42: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 107.492579][ T6204] ,cpuset=/,mems_allowed=0-1 [ 107.492884][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.2.42 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 107.492908][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.492919][ T6204] Call Trace: [ 107.492926][ T6204] [ 107.492935][ T6204] dump_stack_lvl+0x16c/0x1f0 [ 107.492958][ T6204] warn_alloc+0x248/0x3a0 [ 107.492986][ T6204] ? __pfx_warn_alloc+0x10/0x10 [ 107.493009][ T6204] ? kfree+0x2b4/0x4d0 [ 107.493039][ T6204] ? __get_vm_area_node+0x208/0x330 [ 107.493074][ T6204] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 107.493093][ T6204] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.493123][ T6204] ? policy_nodemask+0xea/0x4e0 [ 107.493149][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.493175][ T6204] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.493199][ T6204] ? ___kmalloc_large_node+0xed/0x160 [ 107.493231][ T6204] __kvmalloc_node_noprof+0x30a/0x620 [ 107.493251][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.493271][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.493294][ T6204] ? __do_sys_listmount+0x1c2/0xf80 [ 107.493312][ T6204] __do_sys_listmount+0x1c2/0xf80 [ 107.493339][ T6204] ? __x64_sys_futex+0x1e0/0x4c0 [ 107.493365][ T6204] ? __x64_sys_futex+0x1e9/0x4c0 [ 107.493393][ T6204] ? __pfx___do_sys_listmount+0x10/0x10 [ 107.493426][ T6204] do_syscall_64+0xcd/0x490 [ 107.493449][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.493471][ T6204] RIP: 0033:0x7fe05a78eb69 [ 107.493489][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.493509][ T6204] RSP: 002b:00007fe0585b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 107.493530][ T6204] RAX: ffffffffffffffda RBX: 00007fe05a9b6160 RCX: 00007fe05a78eb69 [ 107.493545][ T6204] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 107.493556][ T6204] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 107.493566][ T6204] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 107.493576][ T6204] R13: 0000000000000000 R14: 00007fe05a9b6160 R15: 00007ffd8b97a858 [ 107.493605][ T6204] [ 107.493612][ T6204] Mem-Info: [ 107.493629][ T6204] active_anon:8860 inactive_anon:0 isolated_anon:0 [ 107.493629][ T6204] active_file:880 inactive_file:40244 isolated_file:0 [ 107.493629][ T6204] unevictable:768 dirty:411 writeback:75 [ 107.493629][ T6204] slab_reclaimable:10250 slab_unreclaimable:92697 [ 107.493629][ T6204] mapped:29661 shmem:2618 pagetables:1102 [ 107.493629][ T6204] sec_pagetables:0 bounce:0 [ 107.493629][ T6204] kernel_misc_reclaimable:0 [ 107.493629][ T6204] free:1340228 free_pcp:13755 free_cma:0 [ 107.493679][ T6204] Node 0 active_anon:35440kB inactive_anon:0kB active_file:3448kB inactive_file:160768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118636kB dirty:1628kB writeback:300kB shmem:8936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11756kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.493727][ T6204] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.493789][ T6204] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.493845][ T6204] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 107.493891][ T6204] Node 0 DMA32 free:1457980kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35396kB inactive_anon:0kB active_file:3448kB inactive_file:159440kB unevictable:1536kB writepending:1824kB present:3129332kB managed:2539672kB mlocked:0kB bounce:0kB free_pcp:37220kB local_pcp:16168kB free_cma:0kB [ 107.493958][ T6204] lowmem_reserve[]: 0 0 1 1 1 [ 107.494004][ T6204] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 107.494065][ T6204] lowmem_reserve[]: 0 0 0 0 0 [ 107.494108][ T6204] Node 1 Normal free:3887564kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:208kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17792kB local_pcp:8672kB free_cma:0kB [ 107.494174][ T6204] lowmem_reserve[]: 0 0 0 0 0 [ 107.494217][ T6204] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.494366][ T6204] Node 0 DMA32: 1*4kB (E) 1*8kB (M) 3*16kB (UME) 2*32kB (UM) 3*64kB (E) 6*128kB (M) 11*256kB (ME) 6*512kB (UME) 5*1024kB (ME) 6*2048kB (UM) 350*4096kB (M) = 1457980kB [ 107.494576][ T6204] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 107.494716][ T6204] Node 1 Normal: 171*4kB (UE) 50*8kB (UME) 33*16kB (UE) 56*32kB (UME) 18*64kB (UE) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3887564kB [ 107.494916][ T6204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.494936][ T6204] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.494956][ T6204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.494974][ T6204] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.494990][ T6204] 43738 total pagecache pages [ 107.494997][ T6204] 0 pages in swap cache [ 107.495004][ T6204] Free swap = 124996kB [ 107.495011][ T6204] Total swap = 124996kB [ 107.495019][ T6204] 2097051 pages RAM [ 107.495026][ T6204] 0 pages HighMem/MovableOnly [ 107.495032][ T6204] 430171 pages reserved [ 107.495039][ T6204] 0 pages cma reserved [ 108.900919][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 110.076733][ T30] audit: type=1400 audit(1754412080.154:3): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6247 comm="syz.2.52" [ 111.879683][ T6267] random: crng reseeded on system resumption [ 114.751985][ T6305] ICMPv6: process `syz.2.60' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 117.644621][ T6376] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 117.718971][ T6358] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.719395][ T6358] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.013055][ T6376] usb usb24: usbfs: process 6376 (syz.1.67) did not claim interface 0 before use [ 120.063107][ T6405] ubi0: attaching mtd0 [ 120.105282][ T6405] ubi0: scanning is finished [ 120.192497][ T6405] ubi0: empty MTD device detected [ 120.202704][ T6405] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 120.262574][ T6409] bond0: option all_slaves_active: invalid value () [ 120.533884][ T6409] bond0: option all_slaves_active: invalid value () [ 121.929986][ T6405] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 123.628734][ T6453] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 124.804417][ T6467] input: jJǸ-9%vJ86 as /devices/virtual/input/input9 [ 124.978965][ T6464] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 125.138291][ T6467] usb usb24: usbfs: process 6467 (syz.0.79) did not claim interface 0 before use [ 125.184615][ T6475] random: crng reseeded on system resumption [ 126.541563][ T6490] netlink: 342 bytes leftover after parsing attributes in process `syz.3.82'. [ 126.568619][ T6490] netlink: 342 bytes leftover after parsing attributes in process `syz.3.82'. [ 129.955680][ T6550] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 134.086670][ T6616] ICMPv6: process `syz.3.100' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 134.430042][ T6617] netlink: set zone limit has 8 unknown bytes [ 136.068866][ T6654] ubi0: attaching mtd0 [ 136.074192][ T6654] ubi0: scanning is finished [ 136.079291][ T6654] ubi0: empty MTD device detected [ 136.084501][ T6654] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 136.330123][ T6654] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 136.688497][ T6657] random: crng reseeded on system resumption [ 137.544726][ T6667] [U] [ 137.733675][ T6676] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 138.064965][ T6676] svc: failed to register nfsdv3 RPC service (errno 111). [ 138.141083][ T6676] svc: failed to register nfsaclv3 RPC service (errno 111). [ 138.211196][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.224331][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.261791][ T30] audit: type=1800 audit(1754412113.344:4): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.116" name="members" dev="configfs" ino=10906 res=0 errno=0 [ 146.360186][ T6821] bond0: option all_slaves_active: invalid value () [ 146.370730][ T6821] bond0: option all_slaves_active: invalid value () [ 147.133849][ T6855] FAULT_INJECTION: forcing a failure. [ 147.133849][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 147.188813][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.1.126 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 147.188838][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.188847][ T6855] Call Trace: [ 147.188853][ T6855] [ 147.188859][ T6855] dump_stack_lvl+0x16c/0x1f0 [ 147.188879][ T6855] should_fail_ex+0x512/0x640 [ 147.188896][ T6855] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 147.188917][ T6855] should_failslab+0xc2/0x120 [ 147.188936][ T6855] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 147.188954][ T6855] ? alloc_inode+0x64/0x240 [ 147.188975][ T6855] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 147.188997][ T6855] alloc_inode+0x64/0x240 [ 147.189016][ T6855] new_inode+0x22/0x1c0 [ 147.189043][ T6855] debugfs_create_dir+0xdd/0x5f0 [ 147.189059][ T6855] kvm_dev_ioctl+0x1264/0x1af0 [ 147.189079][ T6855] ? find_held_lock+0x2b/0x80 [ 147.189094][ T6855] ? hook_file_ioctl_common+0x145/0x410 [ 147.189111][ T6855] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 147.189131][ T6855] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 147.189146][ T6855] __x64_sys_ioctl+0x18b/0x210 [ 147.189169][ T6855] do_syscall_64+0xcd/0x490 [ 147.189186][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.189200][ T6855] RIP: 0033:0x7fe7a8f8eb69 [ 147.189211][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.189224][ T6855] RSP: 002b:00007fe7a9d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.189243][ T6855] RAX: ffffffffffffffda RBX: 00007fe7a91b5fa0 RCX: 00007fe7a8f8eb69 [ 147.189252][ T6855] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 147.189259][ T6855] RBP: 00007fe7a9011df1 R08: 0000000000000000 R09: 0000000000000000 [ 147.189268][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.189275][ T6855] R13: 0000000000000000 R14: 00007fe7a91b5fa0 R15: 00007ffcea8c2d08 [ 147.189293][ T6855] [ 147.189300][ T6855] debugfs: out of free dentries, can not create directory '6855-3' [ 150.214962][ T6877] sd 0:0:1:0: PR command failed: 1026 [ 150.220675][ T6877] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 150.227957][ T6877] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 152.356388][ T6937] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 152.502068][ T6937] svc: failed to register nfsdv3 RPC service (errno 111). [ 152.564122][ T6937] svc: failed to register nfsaclv3 RPC service (errno 111). [ 153.710215][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 153.736350][ T6953] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 155.090012][ T6969] bond0: option all_slaves_active: invalid value () [ 155.687721][ T6983] netlink: 342 bytes leftover after parsing attributes in process `syz.1.142'. [ 155.796393][ T6966] bond0: option all_slaves_active: invalid value () [ 156.038766][ T6963] bond0: option all_slaves_active: invalid value () [ 156.082743][ T6964] bond0: option all_slaves_active: invalid value () [ 159.569494][ T7024] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 160.025602][ T7024] svc: failed to register nfsdv3 RPC service (errno 111). [ 160.113382][ T7024] svc: failed to register nfsaclv3 RPC service (errno 111). [ 160.817891][ T7040] random: crng reseeded on system resumption [ 162.603774][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 162.630228][ T7056] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 163.532624][ T7063] random: crng reseeded on system resumption [ 164.302407][ T7079] netlink: 342 bytes leftover after parsing attributes in process `syz.0.155'. [ 164.638257][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 164.647794][ T7070] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 166.839913][ T7089] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 170.636907][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 170.657913][ T30] audit: type=1800 audit(1754412140.734:5): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.171" name="members" dev="configfs" ino=12038 res=0 errno=0 [ 170.703375][ T7162] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 171.873724][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 171.978458][ T7179] netlink: 13 bytes leftover after parsing attributes in process `syz.1.174'. [ 172.559036][ T7191] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 172.615514][ T7192] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 173.608733][ T7210] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 176.010126][ T7233] random: crng reseeded on system resumption [ 179.031615][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 179.045705][ T7269] netlink: 13 bytes leftover after parsing attributes in process `syz.2.186'. [ 179.311414][ T7274] FAULT_INJECTION: forcing a failure. [ 179.311414][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 179.355620][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.1.189 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 179.355661][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.355677][ T7274] Call Trace: [ 179.355686][ T7274] [ 179.355697][ T7274] dump_stack_lvl+0x16c/0x1f0 [ 179.355732][ T7274] should_fail_ex+0x512/0x640 [ 179.355763][ T7274] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 179.355797][ T7274] should_failslab+0xc2/0x120 [ 179.355826][ T7274] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 179.355850][ T7274] ? __proc_create+0xc3/0x8e0 [ 179.355880][ T7274] ? __proc_create+0x2ce/0x8e0 [ 179.355912][ T7274] __proc_create+0x2ce/0x8e0 [ 179.355954][ T7274] ? __pfx___proc_create+0x10/0x10 [ 179.355997][ T7274] proc_create_reg+0x7d/0x180 [ 179.356030][ T7274] proc_create_net_data+0x8e/0x1c0 [ 179.356058][ T7274] ? __pfx_proc_create_net_data+0x10/0x10 [ 179.356094][ T7274] ? fib_default_rule_add+0x341/0x420 [ 179.356121][ T7274] ? __pfx_ip6_route_net_init_late+0x10/0x10 [ 179.356150][ T7274] ip6_route_net_init_late+0x55/0x110 [ 179.356169][ T7274] ops_init+0x1df/0x5f0 [ 179.356187][ T7274] setup_net+0x10f/0x380 [ 179.356202][ T7274] ? lockdep_init_map_type+0x5c/0x280 [ 179.356222][ T7274] ? __pfx_setup_net+0x10/0x10 [ 179.356238][ T7274] ? debug_mutex_init+0x37/0x70 [ 179.356255][ T7274] copy_net_ns+0x2a6/0x5f0 [ 179.356274][ T7274] create_new_namespaces+0x3ea/0xa90 [ 179.356295][ T7274] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 179.356312][ T7274] ksys_unshare+0x45b/0xa40 [ 179.356332][ T7274] ? __pfx_ksys_unshare+0x10/0x10 [ 179.356351][ T7274] ? xfd_validate_state+0x61/0x180 [ 179.356377][ T7274] __x64_sys_unshare+0x31/0x40 [ 179.356395][ T7274] do_syscall_64+0xcd/0x490 [ 179.356412][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.356426][ T7274] RIP: 0033:0x7fe7a8f8eb69 [ 179.356439][ T7274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.356453][ T7274] RSP: 002b:00007fe7a9d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 179.356468][ T7274] RAX: ffffffffffffffda RBX: 00007fe7a91b5fa0 RCX: 00007fe7a8f8eb69 [ 179.356477][ T7274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 179.356486][ T7274] RBP: 00007fe7a9011df1 R08: 0000000000000000 R09: 0000000000000000 [ 179.356495][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.356503][ T7274] R13: 0000000000000000 R14: 00007fe7a91b5fa0 R15: 00007ffcea8c2d08 [ 179.356522][ T7274] [ 181.220152][ T7298] FAULT_INJECTION: forcing a failure. [ 181.220152][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 181.220215][ T7298] CPU: 0 UID: 0 PID: 7298 Comm: syz.3.201 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 181.220247][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.220262][ T7298] Call Trace: [ 181.220270][ T7298] [ 181.220280][ T7298] dump_stack_lvl+0x16c/0x1f0 [ 181.220312][ T7298] should_fail_ex+0x512/0x640 [ 181.220341][ T7298] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 181.220370][ T7298] should_failslab+0xc2/0x120 [ 181.220404][ T7298] __kmalloc_cache_noprof+0x6a/0x3e0 [ 181.220427][ T7298] ? ip6addrlbl_add+0x69c/0xc40 [ 181.220451][ T7298] ? ip6addrlbl_add+0xbb/0xc40 [ 181.220480][ T7298] ip6addrlbl_add+0xbb/0xc40 [ 181.220514][ T7298] ip6addrlbl_net_init+0x10a/0x380 [ 181.220542][ T7298] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 181.220566][ T7298] ops_init+0x1df/0x5f0 [ 181.220597][ T7298] setup_net+0x10f/0x380 [ 181.220619][ T7298] ? lockdep_init_map_type+0x5c/0x280 [ 181.220676][ T7298] ? __pfx_setup_net+0x10/0x10 [ 181.220704][ T7298] ? debug_mutex_init+0x37/0x70 [ 181.220732][ T7298] copy_net_ns+0x2a6/0x5f0 [ 181.220765][ T7298] create_new_namespaces+0x3ea/0xa90 [ 181.220798][ T7298] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 181.220831][ T7298] ksys_unshare+0x45b/0xa40 [ 181.220864][ T7298] ? __pfx_ksys_unshare+0x10/0x10 [ 181.220896][ T7298] ? xfd_validate_state+0x61/0x180 [ 181.220939][ T7298] __x64_sys_unshare+0x31/0x40 [ 181.220967][ T7298] do_syscall_64+0xcd/0x490 [ 181.220996][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.221020][ T7298] RIP: 0033:0x7fab77f8eb69 [ 181.221041][ T7298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.221061][ T7298] RSP: 002b:00007fab78d91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 181.221084][ T7298] RAX: ffffffffffffffda RBX: 00007fab781b5fa0 RCX: 00007fab77f8eb69 [ 181.221100][ T7298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 181.221113][ T7298] RBP: 00007fab78011df1 R08: 0000000000000000 R09: 0000000000000000 [ 181.221128][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.221142][ T7298] R13: 0000000000000000 R14: 00007fab781b5fa0 R15: 00007fffea87cf98 [ 181.221176][ T7298] [ 181.714195][ T7311] ubi0: attaching mtd0 [ 181.719908][ T7311] ubi0: scanning is finished [ 181.719983][ T7311] ubi0: empty MTD device detected [ 181.720039][ T7311] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 182.085368][ T7311] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 183.367523][ T7342] program syz.1.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.407081][ T7342] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 183.913931][ T7350] ubi0: attaching mtd0 [ 183.922043][ T7350] ubi0: scanning is finished [ 183.926968][ T7350] ubi0: empty MTD device detected [ 183.932347][ T7350] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 184.296869][ T7350] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 184.810320][ T7363] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 185.581263][ T7367] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 186.832403][ T7390] random: crng reseeded on system resumption [ 188.076042][ T7406] zram0: detected capacity change from 0 to 8 [ 190.029142][ T7426] FAULT_INJECTION: forcing a failure. [ 190.029142][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 190.029180][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.2.210 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 190.029198][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.029207][ T7426] Call Trace: [ 190.029212][ T7426] [ 190.029218][ T7426] dump_stack_lvl+0x16c/0x1f0 [ 190.029237][ T7426] should_fail_ex+0x512/0x640 [ 190.029256][ T7426] ? __kmalloc_noprof+0xbf/0x510 [ 190.029274][ T7426] ? vc_allocate+0x489/0x880 [ 190.029289][ T7426] should_failslab+0xc2/0x120 [ 190.029307][ T7426] __kmalloc_noprof+0xd2/0x510 [ 190.029328][ T7426] vc_allocate+0x489/0x880 [ 190.029343][ T7426] ? __pfx_vc_allocate+0x10/0x10 [ 190.029364][ T7426] con_install+0xa1/0x600 [ 190.029380][ T7426] ? __pfx_con_install+0x10/0x10 [ 190.029399][ T7426] ? __pfx_con_install+0x10/0x10 [ 190.029434][ T7426] tty_init_dev.part.0+0x9c/0x500 [ 190.029454][ T7426] tty_open+0xa50/0xf90 [ 190.029476][ T7426] ? __pfx_tty_open+0x10/0x10 [ 190.029494][ T7426] ? chrdev_open+0x58c/0x6a0 [ 190.029515][ T7426] ? __pfx_tty_open+0x10/0x10 [ 190.029532][ T7426] chrdev_open+0x234/0x6a0 [ 190.029550][ T7426] ? __pfx_chrdev_open+0x10/0x10 [ 190.029569][ T7426] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 190.029588][ T7426] do_dentry_open+0x982/0x1530 [ 190.029606][ T7426] ? __pfx_chrdev_open+0x10/0x10 [ 190.029627][ T7426] vfs_open+0x82/0x3f0 [ 190.029656][ T7426] path_openat+0x1de4/0x2cb0 [ 190.029681][ T7426] ? __pfx_path_openat+0x10/0x10 [ 190.029703][ T7426] do_filp_open+0x20b/0x470 [ 190.029721][ T7426] ? __pfx_do_filp_open+0x10/0x10 [ 190.029752][ T7426] ? alloc_fd+0x471/0x7d0 [ 190.029774][ T7426] do_sys_openat2+0x11b/0x1d0 [ 190.029795][ T7426] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.029824][ T7426] __x64_sys_openat+0x174/0x210 [ 190.029844][ T7426] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.029873][ T7426] do_syscall_64+0xcd/0x490 [ 190.029889][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.029904][ T7426] RIP: 0033:0x7fe05a78eb69 [ 190.029916][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.029929][ T7426] RSP: 002b:00007fe0585f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.029943][ T7426] RAX: ffffffffffffffda RBX: 00007fe05a9b5fa0 RCX: 00007fe05a78eb69 [ 190.029952][ T7426] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 190.029960][ T7426] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 190.029968][ T7426] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 190.029976][ T7426] R13: 0000000000000000 R14: 00007fe05a9b5fa0 R15: 00007ffd8b97a858 [ 190.029994][ T7426] [ 191.603494][ T7447] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 192.223884][ T30] audit: type=1800 audit(1754412162.304:6): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.218" name="features" dev="configfs" ino=13669 res=0 errno=0 [ 196.174195][ T7508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'. [ 196.185761][ T7508] ipvlan0: entered allmulticast mode [ 196.191701][ T7508] veth0_vlan: entered allmulticast mode [ 196.856208][ T7518] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 197.853933][ T7530] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 199.636249][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.642802][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.048796][ T7556] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 200.092257][ T7556] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 200.119647][ T7556] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 200.190108][ T7556] page_type: f5(slab) [ 200.217341][ T7556] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 200.282384][ T7556] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 200.306217][ T7556] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 200.316622][ T7556] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 200.325579][ T7556] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 200.334461][ T7556] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 200.453457][ T7556] page dumped because: unmovable page [ 200.460002][ T7556] page_owner tracks the page as allocated [ 200.467706][ T7556] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5233, tgid 5233 (udevd), ts 37652871688, free_ts 37641348675 [ 200.492450][ T7556] post_alloc_hook+0x1c0/0x230 [ 200.492524][ T7556] get_page_from_freelist+0x132b/0x38e0 [ 200.492555][ T7556] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 200.492585][ T7556] alloc_pages_mpol+0x1fb/0x550 [ 200.492615][ T7556] new_slab+0x247/0x330 [ 200.492636][ T7556] ___slab_alloc+0xcf2/0x1740 [ 200.492658][ T7556] __slab_alloc.constprop.0+0x56/0xb0 [ 200.492682][ T7556] __kmalloc_cache_noprof+0xfb/0x3e0 [ 200.492706][ T7556] uevent_show+0x165/0x3a0 [ 200.492731][ T7556] dev_attr_show+0x53/0xe0 [ 200.492760][ T7556] sysfs_kf_seq_show+0x213/0x3e0 [ 200.492787][ T7556] seq_read_iter+0x509/0x12c0 [ 200.492809][ T7556] kernfs_fop_read_iter+0x40f/0x5a0 [ 200.492832][ T7556] vfs_read+0x8bf/0xc60 [ 200.492857][ T7556] ksys_read+0x12a/0x250 [ 200.492882][ T7556] do_syscall_64+0xcd/0x490 [ 200.492909][ T7556] page last free pid 5244 tgid 5244 stack trace: [ 200.492925][ T7556] __free_frozen_pages+0x7d5/0x10f0 [ 200.492948][ T7556] __put_partials+0x165/0x1c0 [ 200.492972][ T7556] qlist_free_all+0x4d/0x120 [ 200.492998][ T7556] kasan_quarantine_reduce+0x195/0x1e0 [ 200.493026][ T7556] __kasan_slab_alloc+0x69/0x90 [ 200.493053][ T7556] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 200.493080][ T7556] getname_flags.part.0+0x4c/0x550 [ 200.493115][ T7556] getname_flags+0x93/0xf0 [ 200.493139][ T7556] do_sys_openat2+0xb8/0x1d0 [ 200.493173][ T7556] __x64_sys_openat+0x174/0x210 [ 200.493207][ T7556] do_syscall_64+0xcd/0x490 [ 200.493231][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.460337][ T7583] netlink: zone id is out of range [ 202.504162][ T30] audit: type=1804 audit(4294967300.130:7): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.239" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=45 res=1 errno=0 [ 202.622893][ T7583] netlink: zone id is out of range [ 202.795866][ T7583] netlink: set zone limit has 8 unknown bytes [ 203.019080][ T7580] random: crng reseeded on system resumption [ 205.068936][ T30] audit: type=1804 audit(4294967302.700:8): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.244" name="/newroot/66/file0" dev="tmpfs" ino=359 res=1 errno=0 [ 205.554925][ T7620] zram: Cannot change disksize for initialized device [ 206.275370][ T7611] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 210.567840][ T7675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.766968][ T7681] mmap: syz.3.257 (7681) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 211.225004][ T7688] sp0: Synchronizing with TNC [ 211.373880][ T7689] ptp ptp0: new virtual clock ptp1 [ 211.427339][ T7689] ptp ptp0: new virtual clock ptp2 [ 211.466298][ T7689] ptp ptp0: new virtual clock ptp3 [ 211.491443][ T7689] ptp ptp0: guarantee physical clock free running [ 211.510897][ T7697] FAULT_INJECTION: forcing a failure. [ 211.510897][ T7697] name failslab, interval 1, probability 0, space 0, times 0 [ 211.530929][ T7697] CPU: 0 UID: 0 PID: 7697 Comm: syz.2.260 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 211.530967][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.530982][ T7697] Call Trace: [ 211.530991][ T7697] [ 211.531001][ T7697] dump_stack_lvl+0x16c/0x1f0 [ 211.531033][ T7697] should_fail_ex+0x512/0x640 [ 211.531061][ T7697] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 211.531096][ T7697] should_failslab+0xc2/0x120 [ 211.531126][ T7697] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 211.531153][ T7697] ? __pfx_map_id_range_down+0x10/0x10 [ 211.531185][ T7697] ? __x64_sys_futex+0x1e0/0x4c0 [ 211.531222][ T7697] ? __x64_sys_futex+0x1e9/0x4c0 [ 211.531251][ T7697] ? prepare_creds+0x2c/0x7d0 [ 211.531291][ T7697] prepare_creds+0x2c/0x7d0 [ 211.531329][ T7697] __sys_setreuid+0x101/0xaf0 [ 211.531356][ T7697] ? rcu_is_watching+0x12/0xc0 [ 211.531384][ T7697] do_syscall_64+0xcd/0x490 [ 211.531413][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.531437][ T7697] RIP: 0033:0x7fe05a78eb69 [ 211.531457][ T7697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.531480][ T7697] RSP: 002b:00007fe0585b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 211.531504][ T7697] RAX: ffffffffffffffda RBX: 00007fe05a9b6160 RCX: 00007fe05a78eb69 [ 211.531520][ T7697] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 211.531535][ T7697] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 211.531549][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.531563][ T7697] R13: 0000000000000000 R14: 00007fe05a9b6160 R15: 00007ffd8b97a858 [ 211.531596][ T7697] [ 212.087356][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 216.918772][ T7757] netlink: 342 bytes leftover after parsing attributes in process `syz.0.271'. [ 216.954481][ T7757] netlink: 342 bytes leftover after parsing attributes in process `syz.0.271'. [ 217.624895][ T7766] binder: 7765:7766 unknown command 3 [ 217.630597][ T7766] binder: 7765:7766 ioctl c0306201 0 returned -22 [ 218.574152][ T7784] delete_channel: no stack [ 222.022510][ T7805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.126517][ T7816] random: crng reseeded on system resumption [ 223.483480][ T7824] FAULT_INJECTION: forcing a failure. [ 223.483480][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 223.536163][ T7824] CPU: 1 UID: 0 PID: 7824 Comm: syz.2.284 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 223.536200][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.536214][ T7824] Call Trace: [ 223.536222][ T7824] [ 223.536232][ T7824] dump_stack_lvl+0x16c/0x1f0 [ 223.536266][ T7824] should_fail_ex+0x512/0x640 [ 223.536296][ T7824] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 223.536330][ T7824] should_failslab+0xc2/0x120 [ 223.536362][ T7824] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 223.536389][ T7824] ? __proc_create+0xc3/0x8e0 [ 223.536422][ T7824] ? __proc_create+0x2ce/0x8e0 [ 223.536461][ T7824] __proc_create+0x2ce/0x8e0 [ 223.536496][ T7824] ? __pfx___proc_create+0x10/0x10 [ 223.536538][ T7824] ? proc_register+0x30f/0x5f0 [ 223.536579][ T7824] ? _raw_write_unlock+0x28/0x50 [ 223.536607][ T7824] proc_create_reg+0x7d/0x180 [ 223.536645][ T7824] proc_create_net_data+0x8e/0x1c0 [ 223.536681][ T7824] ? __pfx_proc_create_net_data+0x10/0x10 [ 223.536714][ T7824] ? __pfx___netlink_kernel_create+0x10/0x10 [ 223.536741][ T7824] ? fib4_semantics_init+0x25/0x100 [ 223.536782][ T7824] fib_proc_init+0xf4/0x1b0 [ 223.536809][ T7824] fib_net_init+0x2af/0x3f0 [ 223.536834][ T7824] ? __pfx___register_sysctl_table+0x10/0x10 [ 223.536870][ T7824] ? __pfx_fib_net_init+0x10/0x10 [ 223.536905][ T7824] ? lockdep_init_map_type+0x5c/0x280 [ 223.536938][ T7824] ? __pfx_nl_fib_input+0x10/0x10 [ 223.536969][ T7824] ? devinet_init_net+0x5c2/0x910 [ 223.537002][ T7824] ? __pfx_fib_net_init+0x10/0x10 [ 223.537027][ T7824] ops_init+0x1df/0x5f0 [ 223.537059][ T7824] setup_net+0x10f/0x380 [ 223.537083][ T7824] ? lockdep_init_map_type+0x5c/0x280 [ 223.537116][ T7824] ? __pfx_setup_net+0x10/0x10 [ 223.537145][ T7824] ? debug_mutex_init+0x37/0x70 [ 223.537174][ T7824] copy_net_ns+0x2a6/0x5f0 [ 223.537208][ T7824] create_new_namespaces+0x3ea/0xa90 [ 223.537246][ T7824] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 223.537277][ T7824] ksys_unshare+0x45b/0xa40 [ 223.537310][ T7824] ? __pfx_ksys_unshare+0x10/0x10 [ 223.537344][ T7824] ? xfd_validate_state+0x61/0x180 [ 223.537387][ T7824] __x64_sys_unshare+0x31/0x40 [ 223.537419][ T7824] do_syscall_64+0xcd/0x490 [ 223.537449][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.537474][ T7824] RIP: 0033:0x7fe05a78eb69 [ 223.537494][ T7824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.537517][ T7824] RSP: 002b:00007fe0585f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 223.537551][ T7824] RAX: ffffffffffffffda RBX: 00007fe05a9b5fa0 RCX: 00007fe05a78eb69 [ 223.537568][ T7824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 223.537584][ T7824] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 223.537599][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.537614][ T7824] R13: 0000000000000000 R14: 00007fe05a9b5fa0 R15: 00007ffd8b97a858 [ 223.537646][ T7824] [ 224.455073][ T7832] can: request_module (can-proto-0) failed. [ 224.612282][ T7841] can: request_module (can-proto-0) failed. [ 225.829301][ T7863] FAULT_INJECTION: forcing a failure. [ 225.829301][ T7863] name fail_futex, interval 1, probability 0, space 0, times 1 [ 225.842513][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.2.289 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 225.842547][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.842562][ T7863] Call Trace: [ 225.842569][ T7863] [ 225.842577][ T7863] dump_stack_lvl+0x16c/0x1f0 [ 225.842617][ T7863] should_fail_ex+0x512/0x640 [ 225.842654][ T7863] get_futex_key+0x1d0/0x1560 [ 225.842689][ T7863] ? __pfx_get_futex_key+0x10/0x10 [ 225.842732][ T7863] futex_wake+0xea/0x530 [ 225.842771][ T7863] ? __pfx_futex_wake+0x10/0x10 [ 225.842809][ T7863] ? errseq_sample+0x53/0x70 [ 225.842841][ T7863] ? file_init_path+0x4fe/0x760 [ 225.842881][ T7863] do_futex+0x1e3/0x350 [ 225.842912][ T7863] ? __pfx_do_futex+0x10/0x10 [ 225.842940][ T7863] ? fd_install+0x225/0x750 [ 225.842973][ T7863] __x64_sys_futex+0x1e0/0x4c0 [ 225.843002][ T7863] ? __sys_socket+0xac/0x260 [ 225.843029][ T7863] ? __x64_sys_openat+0x174/0x210 [ 225.843067][ T7863] ? __pfx___x64_sys_futex+0x10/0x10 [ 225.843093][ T7863] ? xfd_validate_state+0x61/0x180 [ 225.843122][ T7863] do_syscall_64+0xcd/0x490 [ 225.843139][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.843153][ T7863] RIP: 0033:0x7fe05a78eb69 [ 225.843166][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.843179][ T7863] RSP: 002b:00007fe0585f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.843192][ T7863] RAX: ffffffffffffffda RBX: 00007fe05a9b5fa8 RCX: 00007fe05a78eb69 [ 225.843201][ T7863] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe05a9b5fac [ 225.843210][ T7863] RBP: 00007fe05a9b5fa0 R08: 00007fe05b50a000 R09: 0000000000000000 [ 225.843218][ T7863] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fe05a9b5fac [ 225.843226][ T7863] R13: 0000000000000000 R14: 00007ffd8b97a770 R15: 00007ffd8b97a858 [ 225.843244][ T7863] [ 228.493639][ T7892] FAULT_INJECTION: forcing a failure. [ 228.493639][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 228.636614][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.1.294 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 228.636651][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.636666][ T7892] Call Trace: [ 228.636674][ T7892] [ 228.636683][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 228.636714][ T7892] should_fail_ex+0x512/0x640 [ 228.636744][ T7892] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 228.636776][ T7892] should_failslab+0xc2/0x120 [ 228.636809][ T7892] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 228.636837][ T7892] ? __proc_create+0xc3/0x8e0 [ 228.636870][ T7892] ? __proc_create+0x2ce/0x8e0 [ 228.636908][ T7892] __proc_create+0x2ce/0x8e0 [ 228.636943][ T7892] ? __pfx___proc_create+0x10/0x10 [ 228.636989][ T7892] proc_create_reg+0x7d/0x180 [ 228.637043][ T7892] proc_create_net_data+0x8e/0x1c0 [ 228.637078][ T7892] ? __pfx_proc_create_net_data+0x10/0x10 [ 228.637111][ T7892] ? fib_default_rule_add+0x341/0x420 [ 228.637135][ T7892] ? __pfx_ip6_route_net_init_late+0x10/0x10 [ 228.637160][ T7892] ip6_route_net_init_late+0x55/0x110 [ 228.637185][ T7892] ops_init+0x1df/0x5f0 [ 228.637215][ T7892] setup_net+0x10f/0x380 [ 228.637247][ T7892] ? lockdep_init_map_type+0x5c/0x280 [ 228.637281][ T7892] ? __pfx_setup_net+0x10/0x10 [ 228.637307][ T7892] ? debug_mutex_init+0x37/0x70 [ 228.637335][ T7892] copy_net_ns+0x2a6/0x5f0 [ 228.637368][ T7892] create_new_namespaces+0x3ea/0xa90 [ 228.637405][ T7892] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 228.637437][ T7892] ksys_unshare+0x45b/0xa40 [ 228.637470][ T7892] ? __pfx_ksys_unshare+0x10/0x10 [ 228.637504][ T7892] ? xfd_validate_state+0x61/0x180 [ 228.637550][ T7892] __x64_sys_unshare+0x31/0x40 [ 228.637581][ T7892] do_syscall_64+0xcd/0x490 [ 228.637608][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.637633][ T7892] RIP: 0033:0x7fe7a8f8eb69 [ 228.637655][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.637678][ T7892] RSP: 002b:00007fe7a9d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 228.637703][ T7892] RAX: ffffffffffffffda RBX: 00007fe7a91b5fa0 RCX: 00007fe7a8f8eb69 [ 228.637719][ T7892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 228.637735][ T7892] RBP: 00007fe7a9011df1 R08: 0000000000000000 R09: 0000000000000000 [ 228.637750][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.637765][ T7892] R13: 0000000000000000 R14: 00007fe7a91b5fa0 R15: 00007ffcea8c2d08 [ 228.637801][ T7892] [ 230.627908][ T7931] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 231.422704][ T7932] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 232.484490][ T7948] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 232.577350][ T7948] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 232.667865][ T7948] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 232.687861][ T7948] page_type: f5(slab) [ 232.691922][ T7948] raw: 00fff00000000040 ffff88801b842140 ffffea0001df4000 dead000000000002 [ 232.781928][ T7948] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 232.874428][ T7948] head: 00fff00000000040 ffff88801b842140 ffffea0001df4000 dead000000000002 [ 232.938071][ T7948] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 233.112524][ T7948] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 233.124196][ T7948] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 233.133872][ T7948] page dumped because: unmovable page [ 233.139687][ T7948] page_owner tracks the page as allocated [ 233.145616][ T7948] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5233, tgid 5233 (udevd), ts 37652871688, free_ts 37641348675 [ 233.167769][ T7948] post_alloc_hook+0x1c0/0x230 [ 233.172761][ T7948] get_page_from_freelist+0x132b/0x38e0 [ 233.234703][ T7948] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 233.336992][ T7948] alloc_pages_mpol+0x1fb/0x550 [ 233.342074][ T7948] new_slab+0x247/0x330 [ 233.436171][ T7948] ___slab_alloc+0xcf2/0x1740 [ 233.553373][ T7948] __slab_alloc.constprop.0+0x56/0xb0 [ 233.609062][ T7948] __kmalloc_cache_noprof+0xfb/0x3e0 [ 233.846334][ T7948] uevent_show+0x165/0x3a0 [ 233.856854][ T7948] dev_attr_show+0x53/0xe0 [ 233.862945][ T7948] sysfs_kf_seq_show+0x213/0x3e0 [ 233.872292][ T7948] seq_read_iter+0x509/0x12c0 [ 233.877551][ T7948] kernfs_fop_read_iter+0x40f/0x5a0 [ 233.883102][ T7948] vfs_read+0x8bf/0xc60 [ 233.893134][ T7948] ksys_read+0x12a/0x250 [ 233.898174][ T7948] do_syscall_64+0xcd/0x490 [ 233.902758][ T7948] page last free pid 5244 tgid 5244 stack trace: [ 233.925323][ T7948] __free_frozen_pages+0x7d5/0x10f0 [ 233.961147][ T7948] __put_partials+0x165/0x1c0 [ 233.966027][ T7948] qlist_free_all+0x4d/0x120 [ 233.972012][ T7948] kasan_quarantine_reduce+0x195/0x1e0 [ 233.991734][ T7948] __kasan_slab_alloc+0x69/0x90 [ 234.026559][ T7948] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 234.043045][ T7948] getname_flags.part.0+0x4c/0x550 [ 234.057342][ T7983] random: crng reseeded on system resumption [ 234.090542][ T7948] getname_flags+0x93/0xf0 [ 234.166789][ T7948] do_sys_openat2+0xb8/0x1d0 [ 234.211515][ T7948] __x64_sys_openat+0x174/0x210 [ 234.223575][ T7948] do_syscall_64+0xcd/0x490 [ 234.293548][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.314755][ T7973] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 235.713511][ T8004] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 237.162363][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 237.919399][ T8041] netlink: 13 bytes leftover after parsing attributes in process `syz.1.322'. [ 238.870396][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.316'. [ 239.094284][ T8052] hub 8-0:1.0: USB hub found [ 239.126557][ T8052] hub 8-0:1.0: 1 port detected [ 240.318176][ T8070] netlink: 186 bytes leftover after parsing attributes in process `syz.0.317'. [ 245.142499][ T8116] kexec: Could not allocate control_code_buffer [ 245.754349][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 245.757117][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 245.875939][ T8153] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 245.901919][ T8145] netlink: 13 bytes leftover after parsing attributes in process `syz.0.333'. [ 245.917067][ T8148] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 246.210939][ T8158] netlink: 13 bytes leftover after parsing attributes in process `syz.3.334'. [ 247.433424][ T30] audit: type=1804 audit(1843104560.950:9): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.338" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=45 res=1 errno=0 [ 247.801560][ T8190] delete_channel: no stack [ 247.974450][ T8186] random: crng reseeded on system resumption [ 249.620114][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 249.647388][ T8202] netlink: 13 bytes leftover after parsing attributes in process `syz.1.342'. [ 250.383709][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 250.412480][ T8220] netlink: 13 bytes leftover after parsing attributes in process `syz.3.346'. [ 250.499417][ T8222] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 251.289213][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 251.302241][ T8229] netlink: 13 bytes leftover after parsing attributes in process `syz.0.348'. [ 251.596218][ T8233] sp0: Synchronizing with TNC [ 251.677361][ T8239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 251.744857][ T8233] ptp ptp0: guarantee physical clock free running [ 252.231568][ T8242] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 254.477518][ T8277] random: crng reseeded on system resumption [ 254.942284][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 254.987337][ T8273] netlink: 13 bytes leftover after parsing attributes in process `syz.0.356'. [ 255.690963][ T8289] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 256.928711][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 256.970167][ T8291] netlink: 13 bytes leftover after parsing attributes in process `syz.2.359'. [ 257.035335][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 257.082588][ T8299] netlink: 13 bytes leftover after parsing attributes in process `syz.0.362'. [ 257.362499][ T8308] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 257.662985][ T8315] netlink: zone id is out of range [ 257.743243][ T8315] netlink: zone id is out of range [ 257.988035][ T8315] netlink: set zone limit has 8 unknown bytes [ 258.058456][ T8309] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 259.832803][ T8330] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 260.105533][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 260.117372][ T8340] netlink: 13 bytes leftover after parsing attributes in process `syz.2.368'. [ 260.501523][ T8354] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 261.070689][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.078302][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.925599][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 261.936036][ T8363] netlink: 13 bytes leftover after parsing attributes in process `syz.1.373'. [ 262.115392][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 262.178639][ T8365] netlink: 13 bytes leftover after parsing attributes in process `syz.3.374'. [ 262.364668][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'. [ 263.172022][ T8383] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 263.254586][ T8384] input: jJǸ-9%vJ86 as /devices/virtual/input/input27 [ 263.480357][ T8385] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 267.497607][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 267.725697][ T8435] netlink: 13 bytes leftover after parsing attributes in process `syz.2.386'. [ 268.431270][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 268.459780][ T8438] netlink: 13 bytes leftover after parsing attributes in process `syz.2.387'. [ 269.120503][ T8436] bond0: option all_slaves_active: invalid value () [ 269.139111][ T8436] bond0: option all_slaves_active: invalid value () [ 270.312774][ T8467] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 270.990685][ T8468] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 272.306573][ T8488] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 274.157590][ T8524] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 275.028022][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 275.048312][ T8538] netlink: 13 bytes leftover after parsing attributes in process `syz.1.401'. [ 275.789921][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 275.799846][ T8552] ipvlan0: entered allmulticast mode [ 275.847317][ T8552] veth0_vlan: entered allmulticast mode [ 277.096536][ T8568] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 277.914093][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 277.974608][ T8553] netlink: 13 bytes leftover after parsing attributes in process `syz.0.411'. [ 281.188471][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 281.227509][ T8610] netlink: 13 bytes leftover after parsing attributes in process `syz.3.412'. [ 281.377577][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 281.389229][ T8608] netlink: 13 bytes leftover after parsing attributes in process `syz.2.413'. [ 281.735746][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 281.745732][ T8617] netlink: 13 bytes leftover after parsing attributes in process `syz.1.426'. [ 282.892373][ T8645] delete_channel: no stack [ 284.149225][ T8657] bond0: option all_slaves_active: invalid value () [ 284.176790][ T8658] bond0: option all_slaves_active: invalid value () [ 284.971944][ T8667] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 285.197965][ T8673] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 287.531850][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 287.557845][ T8709] netlink: 13 bytes leftover after parsing attributes in process `syz.3.431'. [ 288.291478][ T8710] random: crng reseeded on system resumption [ 289.194472][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 289.257490][ T8727] netlink: 13 bytes leftover after parsing attributes in process `syz.3.436'. [ 289.552799][ T8732] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 290.593297][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 290.603497][ T8742] netlink: 13 bytes leftover after parsing attributes in process `syz.3.438'. [ 292.369871][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 292.390189][ T8771] netlink: 13 bytes leftover after parsing attributes in process `syz.0.443'. [ 292.890027][ T8777] snd_virmidi snd_virmidi.0: control 5:9:1:IA>?[k [ 303.314813][ T8901] dump_stack_lvl+0x16c/0x1f0 [ 303.314845][ T8901] should_fail_ex+0x512/0x640 [ 303.314875][ T8901] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 303.314910][ T8901] should_failslab+0xc2/0x120 [ 303.314943][ T8901] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 303.314973][ T8901] ? xfrm_sysctl_init+0x10a/0x2d0 [ 303.315006][ T8901] kmemdup_noprof+0x29/0x60 [ 303.315034][ T8901] xfrm_sysctl_init+0x10a/0x2d0 [ 303.315075][ T8901] xfrm_net_init+0x842/0xcc0 [ 303.315108][ T8901] ? __pfx_xfrm_net_init+0x10/0x10 [ 303.315136][ T8901] ops_init+0x1df/0x5f0 [ 303.315167][ T8901] setup_net+0x10f/0x380 [ 303.315193][ T8901] ? lockdep_init_map_type+0x5c/0x280 [ 303.315228][ T8901] ? __pfx_setup_net+0x10/0x10 [ 303.315257][ T8901] ? debug_mutex_init+0x37/0x70 [ 303.315287][ T8901] copy_net_ns+0x2a6/0x5f0 [ 303.315320][ T8901] create_new_namespaces+0x3ea/0xa90 [ 303.315357][ T8901] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 303.315389][ T8901] ksys_unshare+0x45b/0xa40 [ 303.315423][ T8901] ? __pfx_ksys_unshare+0x10/0x10 [ 303.315461][ T8901] ? xfd_validate_state+0x61/0x180 [ 303.315508][ T8901] __x64_sys_unshare+0x31/0x40 [ 303.315541][ T8901] do_syscall_64+0xcd/0x490 [ 303.315571][ T8901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.315596][ T8901] RIP: 0033:0x7fab77f8eb69 [ 303.315617][ T8901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.315640][ T8901] RSP: 002b:00007fab78d91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 303.315661][ T8901] RAX: ffffffffffffffda RBX: 00007fab781b5fa0 RCX: 00007fab77f8eb69 [ 303.315677][ T8901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 303.315690][ T8901] RBP: 00007fab78011df1 R08: 0000000000000000 R09: 0000000000000000 [ 303.315704][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.315717][ T8901] R13: 0000000000000000 R14: 00007fab781b5fa0 R15: 00007fffea87cf98 [ 303.315749][ T8901] [ 303.587911][ T8903] snd_virmidi snd_virmidi.0: control 5:9:1:IA>?[k [ 334.154764][ T9321] dump_stack_lvl+0x16c/0x1f0 [ 334.154795][ T9321] should_fail_ex+0x512/0x640 [ 334.154825][ T9321] ? __kmalloc_noprof+0xbf/0x510 [ 334.154858][ T9321] ? vc_allocate+0x489/0x880 [ 334.154882][ T9321] should_failslab+0xc2/0x120 [ 334.154916][ T9321] __kmalloc_noprof+0xd2/0x510 [ 334.154956][ T9321] vc_allocate+0x489/0x880 [ 334.154983][ T9321] ? __pfx_vc_allocate+0x10/0x10 [ 334.155022][ T9321] con_install+0xa1/0x600 [ 334.155052][ T9321] ? __pfx_con_install+0x10/0x10 [ 334.155086][ T9321] ? __pfx_con_install+0x10/0x10 [ 334.155114][ T9321] tty_init_dev.part.0+0x9c/0x500 [ 334.155148][ T9321] tty_open+0xa50/0xf90 [ 334.155186][ T9321] ? __pfx_tty_open+0x10/0x10 [ 334.155216][ T9321] ? chrdev_open+0x10b/0x6a0 [ 334.155252][ T9321] ? __pfx_tty_open+0x10/0x10 [ 334.155281][ T9321] chrdev_open+0x234/0x6a0 [ 334.155316][ T9321] ? __pfx_apparmor_file_open+0x10/0x10 [ 334.155367][ T9321] ? __pfx_chrdev_open+0x10/0x10 [ 334.155402][ T9321] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 334.155439][ T9321] do_dentry_open+0x982/0x1530 [ 334.155470][ T9321] ? __pfx_chrdev_open+0x10/0x10 [ 334.155509][ T9321] vfs_open+0x82/0x3f0 [ 334.155549][ T9321] path_openat+0x1de4/0x2cb0 [ 334.155591][ T9321] ? __pfx_path_openat+0x10/0x10 [ 334.155630][ T9321] do_filp_open+0x20b/0x470 [ 334.155660][ T9321] ? __pfx_do_filp_open+0x10/0x10 [ 334.155718][ T9321] ? alloc_fd+0x471/0x7d0 [ 334.155755][ T9321] do_sys_openat2+0x11b/0x1d0 [ 334.155791][ T9321] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.155842][ T9321] __x64_sys_openat+0x174/0x210 [ 334.155878][ T9321] ? __pfx___x64_sys_openat+0x10/0x10 [ 334.155930][ T9321] do_syscall_64+0xcd/0x490 [ 334.155961][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.155987][ T9321] RIP: 0033:0x7fab77f8eb69 [ 334.156007][ T9321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.156030][ T9321] RSP: 002b:00007fab78d70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.156058][ T9321] RAX: ffffffffffffffda RBX: 00007fab781b6080 RCX: 00007fab77f8eb69 [ 334.156072][ T9321] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 334.156086][ T9321] RBP: 00007fab78011df1 R08: 0000000000000000 R09: 0000000000000000 [ 334.156101][ T9321] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 334.156114][ T9321] R13: 0000000000000000 R14: 00007fab781b6080 R15: 00007fffea87cf98 [ 334.156147][ T9321] [ 335.382348][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 335.620822][ T9344] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 336.022746][ T9353] netlink: 13 bytes leftover after parsing attributes in process `syz.1.531'. [ 336.413639][ T9356] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 340.098016][ T9405] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 341.395706][ T9434] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 341.679478][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 341.972770][ T9438] netlink: 13 bytes leftover after parsing attributes in process `syz.1.543'. [ 345.130555][ T9465] netlink: 186 bytes leftover after parsing attributes in process `syz.0.550'. [ 346.731349][ T9492] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 347.502798][ T9504] zram: Cannot change disksize for initialized device [ 347.517071][ T9506] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 347.980799][ T9509] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 348.488808][ T7670] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.504261][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 352.791200][ T9574] binder: 9573:9574 unknown command 3 [ 352.828667][ T9574] binder: 9573:9574 ioctl c0306201 0 returned -22 [ 354.998076][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 355.229002][ T9590] FAULT_INJECTION: forcing a failure. [ 355.229002][ T9590] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.229052][ T9590] CPU: 1 UID: 0 PID: 9590 Comm: syz.3.570 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 355.229085][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.229100][ T9590] Call Trace: [ 355.229108][ T9590] [ 355.229117][ T9590] dump_stack_lvl+0x16c/0x1f0 [ 355.229149][ T9590] should_fail_ex+0x512/0x640 [ 355.229184][ T9590] should_fail_alloc_page+0xe7/0x130 [ 355.229221][ T9590] prepare_alloc_pages+0x3c2/0x610 [ 355.229259][ T9590] ? rcu_is_watching+0x12/0xc0 [ 355.229289][ T9590] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 355.229325][ T9590] ? rcu_is_watching+0x12/0xc0 [ 355.229349][ T9590] ? trace_mm_page_alloc+0x11f/0x1a0 [ 355.229384][ T9590] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 355.229415][ T9590] ? __pfx_stack_trace_save+0x10/0x10 [ 355.229444][ T9590] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.229469][ T9590] ? stack_depot_save_flags+0x29/0x9c0 [ 355.229506][ T9590] ? alloc_vmap_area+0x645/0x29c0 [ 355.229538][ T9590] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 355.229562][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.229606][ T9590] ? do_syscall_64+0xcd/0x490 [ 355.229632][ T9590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.229672][ T9590] alloc_pages_bulk_noprof+0x71c/0x1410 [ 355.229701][ T9590] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.229737][ T9590] ? policy_nodemask+0xea/0x4e0 [ 355.229771][ T9590] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 355.229801][ T9590] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 355.229848][ T9590] kasan_populate_vmalloc+0xf1/0x1f0 [ 355.229882][ T9590] alloc_vmap_area+0x959/0x29c0 [ 355.229928][ T9590] ? __pfx_alloc_vmap_area+0x10/0x10 [ 355.229970][ T9590] __get_vm_area_node+0x1ca/0x330 [ 355.230010][ T9590] __vmalloc_node_range_noprof+0x271/0x14b0 [ 355.230042][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.230067][ T9590] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.230103][ T9590] ? policy_nodemask+0xea/0x4e0 [ 355.230137][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.230170][ T9590] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.230196][ T9590] ? ___kmalloc_large_node+0xed/0x160 [ 355.230238][ T9590] __kvmalloc_node_noprof+0x30a/0x620 [ 355.230266][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.230289][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.230317][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.230336][ T9590] __do_sys_listmount+0x1c2/0xf80 [ 355.230363][ T9590] ? __x64_sys_futex+0x1e0/0x4c0 [ 355.230387][ T9590] ? __x64_sys_futex+0x1e9/0x4c0 [ 355.230414][ T9590] ? __pfx___do_sys_listmount+0x10/0x10 [ 355.230452][ T9590] do_syscall_64+0xcd/0x490 [ 355.230478][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.230501][ T9590] RIP: 0033:0x7fab77f8eb69 [ 355.230522][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.230545][ T9590] RSP: 002b:00007fab78d4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 355.230569][ T9590] RAX: ffffffffffffffda RBX: 00007fab781b6160 RCX: 00007fab77f8eb69 [ 355.230587][ T9590] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 355.230603][ T9590] RBP: 00007fab78011df1 R08: 0000000000000000 R09: 0000000000000000 [ 355.230618][ T9590] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 355.230632][ T9590] R13: 0000000000000000 R14: 00007fab781b6160 R15: 00007fffea87cf98 [ 355.230665][ T9590] [ 355.231865][ T9590] syz.3.570: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.231946][ T9590] CPU: 1 UID: 0 PID: 9590 Comm: syz.3.570 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 355.231979][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.231994][ T9590] Call Trace: [ 355.232002][ T9590] [ 355.232011][ T9590] dump_stack_lvl+0x16c/0x1f0 [ 355.232049][ T9590] warn_alloc+0x248/0x3a0 [ 355.232083][ T9590] ? __pfx_warn_alloc+0x10/0x10 [ 355.232115][ T9590] ? kfree+0x2b4/0x4d0 [ 355.232146][ T9590] ? __get_vm_area_node+0x208/0x330 [ 355.232189][ T9590] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 355.232216][ T9590] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.232253][ T9590] ? policy_nodemask+0xea/0x4e0 [ 355.232286][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.232320][ T9590] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.232351][ T9590] ? ___kmalloc_large_node+0xed/0x160 [ 355.232393][ T9590] __kvmalloc_node_noprof+0x30a/0x620 [ 355.232420][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.232450][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.232482][ T9590] ? __do_sys_listmount+0x1c2/0xf80 [ 355.232505][ T9590] __do_sys_listmount+0x1c2/0xf80 [ 355.232537][ T9590] ? __x64_sys_futex+0x1e0/0x4c0 [ 355.232566][ T9590] ? __x64_sys_futex+0x1e9/0x4c0 [ 355.232597][ T9590] ? __pfx___do_sys_listmount+0x10/0x10 [ 355.232639][ T9590] do_syscall_64+0xcd/0x490 [ 355.232668][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.232694][ T9590] RIP: 0033:0x7fab77f8eb69 [ 355.232715][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.232737][ T9590] RSP: 002b:00007fab78d4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 355.232761][ T9590] RAX: ffffffffffffffda RBX: 00007fab781b6160 RCX: 00007fab77f8eb69 [ 355.232778][ T9590] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 355.232793][ T9590] RBP: 00007fab78011df1 R08: 0000000000000000 R09: 0000000000000000 [ 355.232808][ T9590] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 355.232822][ T9590] R13: 0000000000000000 R14: 00007fab781b6160 R15: 00007fffea87cf98 [ 355.232856][ T9590] [ 355.232865][ T9590] Mem-Info: [ 355.232876][ T9590] active_anon:4744 inactive_anon:2991 isolated_anon:250 [ 355.232876][ T9590] active_file:14336 inactive_file:41375 isolated_file:0 [ 355.232876][ T9590] unevictable:768 dirty:822 writeback:0 [ 355.232876][ T9590] slab_reclaimable:11165 slab_unreclaimable:92806 [ 355.232876][ T9590] mapped:27054 shmem:1361 pagetables:1128 [ 355.232876][ T9590] sec_pagetables:0 bounce:0 [ 355.232876][ T9590] kernel_misc_reclaimable:0 [ 355.232876][ T9590] free:1324987 free_pcp:13523 free_cma:0 [ 355.232943][ T9590] Node 0 active_anon:18976kB inactive_anon:11964kB active_file:57324kB inactive_file:165320kB unevictable:1536kB isolated(anon):1000kB isolated(file):0kB mapped:108216kB dirty:3288kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11548kB pagetables:4400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.233010][ T9590] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.233077][ T9590] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.233148][ T9590] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 355.233201][ T9590] Node 0 DMA32 free:1390100kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18932kB inactive_anon:11964kB active_file:56104kB inactive_file:165212kB unevictable:1536kB writepending:3288kB present:3129332kB managed:2539672kB mlocked:0kB bounce:0kB free_pcp:42912kB local_pcp:24032kB free_cma:0kB [ 355.233275][ T9590] lowmem_reserve[]: 0 0 1 1 1 [ 355.233324][ T9590] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1220kB inactive_file:108kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 355.233394][ T9590] lowmem_reserve[]: 0 0 0 0 0 [ 355.233442][ T9590] Node 1 Normal free:3894480kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:180kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11172kB local_pcp:5732kB free_cma:0kB [ 355.233517][ T9590] lowmem_reserve[]: 0 0 0 0 0 [ 355.233564][ T9590] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 355.233726][ T9590] Node 0 DMA32: 1319*4kB (UME) 897*8kB (UME) 691*16kB (UME) 1239*32kB (UME) 504*64kB (UME) 180*128kB (UME) 89*256kB (UME) 55*512kB (UME) 24*1024kB (UME) 6*2048kB (UM) 289*4096kB (M) = 1390004kB [ 355.233949][ T9590] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 355.234103][ T9590] Node 1 Normal: 176*4kB (UME) 56*8kB (UME) 33*16kB (UME) 184*32kB (UME) 57*64kB (UME) 16*128kB (UME) 5*256kB (UME) 2*512kB (M) 4*1024kB (UME) 2*2048kB (ME) 945*4096kB (M) = 3894480kB [ 355.234330][ T9590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.234351][ T9590] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.234371][ T9590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.234392][ T9590] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.234412][ T9590] 57322 total pagecache pages [ 355.234422][ T9590] 254 pages in swap cache [ 355.234431][ T9590] Free swap = 121888kB [ 355.234441][ T9590] Total swap = 124996kB [ 355.234450][ T9590] 2097051 pages RAM [ 355.234460][ T9590] 0 pages HighMem/MovableOnly [ 355.234469][ T9590] 430171 pages reserved [ 355.234478][ T9590] 0 pages cma reserved [ 355.569110][ T9611] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 356.945121][ T9626] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 358.578156][ T9606] tty tty12: ldisc open failed (-12), clearing slot 11 [ 358.607291][ T9615] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 358.829510][ T9629] kexec: Could not allocate control_code_buffer [ 358.881905][ T30] audit: type=1400 audit(1843104672.390:10): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9639 comm="syz.1.580" [ 359.511079][ T9649] netlink: 342 bytes leftover after parsing attributes in process `syz.2.582'. [ 359.668792][ T9649] netlink: 342 bytes leftover after parsing attributes in process `syz.2.582'. [ 359.869140][ T9655] binder: 9654:9655 unknown command 3 [ 359.874653][ T9655] binder: 9654:9655 ioctl c0306201 0 returned -22 [ 360.016625][ T9651] FAULT_INJECTION: forcing a failure. [ 360.016625][ T9651] name failslab, interval 1, probability 0, space 0, times 0 [ 360.096648][ T9651] CPU: 1 UID: 0 PID: 9651 Comm: syz.0.583 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 360.096686][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.096701][ T9651] Call Trace: [ 360.096710][ T9651] [ 360.096720][ T9651] dump_stack_lvl+0x16c/0x1f0 [ 360.096753][ T9651] should_fail_ex+0x512/0x640 [ 360.096783][ T9651] ? fs_reclaim_acquire+0xae/0x150 [ 360.096835][ T9651] ? tomoyo_init_log+0x1385/0x2140 [ 360.096863][ T9651] should_failslab+0xc2/0x120 [ 360.096895][ T9651] __kmalloc_noprof+0xd2/0x510 [ 360.096921][ T9651] ? __pfx_from_kuid+0x10/0x10 [ 360.096966][ T9651] tomoyo_init_log+0x1385/0x2140 [ 360.097017][ T9651] ? __pfx_tomoyo_init_log+0x10/0x10 [ 360.097047][ T9651] ? tomoyo_profile+0x47/0x60 [ 360.097081][ T9651] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 360.097111][ T9651] tomoyo_supervisor+0x302/0x13b0 [ 360.097163][ T9651] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 360.097197][ T9651] ? __pfx_vsnprintf+0x10/0x10 [ 360.097236][ T9651] ? tomoyo_encode2+0x329/0x3e0 [ 360.097270][ T9651] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 360.097308][ T9651] tomoyo_path_number_perm+0x448/0x580 [ 360.097338][ T9651] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 360.097403][ T9651] ? find_held_lock+0x2b/0x80 [ 360.097427][ T9651] ? hook_file_ioctl_common+0x145/0x410 [ 360.097463][ T9651] ? __fget_files+0x20e/0x3c0 [ 360.097496][ T9651] security_file_ioctl+0x9b/0x240 [ 360.097523][ T9651] __x64_sys_ioctl+0xb7/0x210 [ 360.097562][ T9651] do_syscall_64+0xcd/0x490 [ 360.097593][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.097618][ T9651] RIP: 0033:0x7f47ea78eb69 [ 360.097639][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.097664][ T9651] RSP: 002b:00007f47eb695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.097688][ T9651] RAX: ffffffffffffffda RBX: 00007f47ea9b5fa0 RCX: 00007f47ea78eb69 [ 360.097705][ T9651] RDX: 00002000000011c0 RSI: 0000000000005404 RDI: 000000000000000d [ 360.097721][ T9651] RBP: 00007f47ea811df1 R08: 0000000000000000 R09: 0000000000000000 [ 360.097734][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.097748][ T9651] R13: 0000000000000000 R14: 00007f47ea9b5fa0 R15: 00007ffd2ee754f8 [ 360.097783][ T9651] [ 363.962062][ T9702] kexec: Could not allocate control_code_buffer [ 369.797485][ T9765] random: crng reseeded on system resumption [ 371.263556][ T9804] netlink: 342 bytes leftover after parsing attributes in process `syz.3.607'. [ 371.350966][ T9805] netlink: 342 bytes leftover after parsing attributes in process `syz.3.607'. [ 372.092451][ T9796] kexec: Could not allocate control_code_buffer [ 374.601390][ T9847] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 376.500257][ T9843] ptrace attach of "./syz-executor exec"[5861] was attempted by "./syz-executor exec"[9843] [ 382.046628][ T9940] random: crng reseeded on system resumption [ 383.258537][ T9937] ptrace attach of "./syz-executor exec"[5872] was attempted by "./syz-executor exec"[9937] [ 383.952451][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.959700][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.296456][ T9993] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 386.981317][ T7657] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.868880][T10015] ptrace attach of "./syz-executor exec"[5865] was attempted by "./syz-executor exec"[10015] [ 388.727417][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 395.957397][T10164] random: crng reseeded on system resumption [ 396.299699][T10173] syz.3.682 uses obsolete (PF_INET,SOCK_PACKET) [ 397.979640][T10179] kexec: Could not allocate control_code_buffer [ 402.474033][T10222] ptrace attach of "./syz-executor exec"[5861] was attempted by "./syz-executor exec"[10222] [ 402.507766][T10264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 404.577846][T10305] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 407.481626][T10355] ptrace attach of "./syz-executor exec"[5872] was attempted by "./syz-executor exec"[10355] [ 408.186041][T10360] zram: Cannot change disksize for initialized device [ 408.583874][T10370] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 408.889383][T10372] FAULT_INJECTION: forcing a failure. [ 408.889383][T10372] name failslab, interval 1, probability 0, space 0, times 0 [ 408.930996][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.2.717 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 408.931034][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.931050][T10372] Call Trace: [ 408.931058][T10372] [ 408.931068][T10372] dump_stack_lvl+0x16c/0x1f0 [ 408.931100][T10372] should_fail_ex+0x512/0x640 [ 408.931129][T10372] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 408.931157][T10372] should_failslab+0xc2/0x120 [ 408.931181][T10372] __kmalloc_cache_noprof+0x6a/0x3e0 [ 408.931200][T10372] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 408.931226][T10372] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 408.931255][T10372] devlink_fmsg_bool_pair_put+0x284/0x2f0 [ 408.931285][T10372] ? __pfx_devlink_fmsg_bool_pair_put+0x10/0x10 [ 408.931314][T10372] ? __kasan_kmalloc+0xaa/0xb0 [ 408.931343][T10372] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 408.931385][T10372] nsim_dev_dummy_fmsg_put+0xe7/0x1e0 [ 408.931417][T10372] devlink_health_do_dump+0x240/0x620 [ 408.931453][T10372] devlink_health_report+0x3c9/0x9c0 [ 408.931489][T10372] ? __pfx_devlink_health_report+0x10/0x10 [ 408.931530][T10372] nsim_dev_health_break_write+0x166/0x210 [ 408.931558][T10372] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 408.931600][T10372] full_proxy_write+0x131/0x1a0 [ 408.931635][T10372] ? __pfx_full_proxy_write+0x10/0x10 [ 408.931666][T10372] vfs_write+0x2a0/0x1150 [ 408.931700][T10372] ? __pfx___mutex_lock+0x10/0x10 [ 408.931727][T10372] ? __pfx_vfs_write+0x10/0x10 [ 408.931766][T10372] ? __fget_files+0x20e/0x3c0 [ 408.931804][T10372] ksys_write+0x12a/0x250 [ 408.931832][T10372] ? __pfx_ksys_write+0x10/0x10 [ 408.931871][T10372] do_syscall_64+0xcd/0x490 [ 408.931901][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.931927][T10372] RIP: 0033:0x7fe05a78eb69 [ 408.931948][T10372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.931972][T10372] RSP: 002b:00007fe0585f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.931996][T10372] RAX: ffffffffffffffda RBX: 00007fe05a9b5fa0 RCX: 00007fe05a78eb69 [ 408.932011][T10372] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000008 [ 408.932024][T10372] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 408.932036][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.932049][T10372] R13: 0000000000000000 R14: 00007fe05a9b5fa0 R15: 00007ffd8b97a858 [ 408.932078][T10372] [ 409.650046][T10373] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 412.307611][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 414.431916][T10428] ptrace attach of "./syz-executor exec"[5865] was attempted by "./syz-executor exec"[10428] [ 415.498688][T10467] FAULT_INJECTION: forcing a failure. [ 415.498688][T10467] name failslab, interval 1, probability 0, space 0, times 0 [ 415.536557][T10467] CPU: 0 UID: 0 PID: 10467 Comm: syz.3.733 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 415.536587][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.536596][T10467] Call Trace: [ 415.536602][T10467] [ 415.536608][T10467] dump_stack_lvl+0x16c/0x1f0 [ 415.536629][T10467] should_fail_ex+0x512/0x640 [ 415.536647][T10467] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 415.536675][T10467] should_failslab+0xc2/0x120 [ 415.536699][T10467] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 415.536715][T10467] ? __pfx_map_id_range_down+0x10/0x10 [ 415.536737][T10467] ? __x64_sys_futex+0x1e0/0x4c0 [ 415.536763][T10467] ? __x64_sys_futex+0x1e9/0x4c0 [ 415.536780][T10467] ? prepare_creds+0x2c/0x7d0 [ 415.536803][T10467] prepare_creds+0x2c/0x7d0 [ 415.536825][T10467] __sys_setreuid+0x101/0xaf0 [ 415.536842][T10467] ? rcu_is_watching+0x12/0xc0 [ 415.536858][T10467] do_syscall_64+0xcd/0x490 [ 415.536874][T10467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.536889][T10467] RIP: 0033:0x7fab77f8eb69 [ 415.536900][T10467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.536914][T10467] RSP: 002b:00007fab78d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 415.536928][T10467] RAX: ffffffffffffffda RBX: 00007fab781b6160 RCX: 00007fab77f8eb69 [ 415.536937][T10467] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 415.536945][T10467] RBP: 00007fab78011df1 R08: 0000000000000000 R09: 0000000000000000 [ 415.536953][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.536962][T10467] R13: 0000000000000000 R14: 00007fab781b6160 R15: 00007fffea87cf98 [ 415.536979][T10467] [ 415.832204][T10470] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 416.292410][ T30] audit: type=1804 audit(1843104729.810:11): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.735" name="/newroot/180/file0" dev="tmpfs" ino=957 res=1 errno=0 [ 419.107767][T10520] kAFS: No cell specified [ 419.129826][T10524] random: crng reseeded on system resumption [ 420.182545][T10540] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 423.653642][T10596] FAULT_INJECTION: forcing a failure. [ 423.653642][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 423.706558][T10596] CPU: 0 UID: 0 PID: 10596 Comm: syz.1.757 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 423.706582][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.706592][T10596] Call Trace: [ 423.706598][T10596] [ 423.706605][T10596] dump_stack_lvl+0x16c/0x1f0 [ 423.706627][T10596] should_fail_ex+0x512/0x640 [ 423.706645][T10596] ? fs_reclaim_acquire+0xae/0x150 [ 423.706668][T10596] should_failslab+0xc2/0x120 [ 423.706687][T10596] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 423.706705][T10596] ? security_inode_alloc+0x3b/0x2b0 [ 423.706722][T10596] security_inode_alloc+0x3b/0x2b0 [ 423.706736][T10596] inode_init_always_gfp+0xce4/0x1030 [ 423.706755][T10596] alloc_inode+0x86/0x240 [ 423.706776][T10596] sock_alloc+0x40/0x280 [ 423.706793][T10596] __sock_create+0xc1/0x8d0 [ 423.706815][T10596] __sys_socket+0x14d/0x260 [ 423.706832][T10596] ? __x64_sys_openat+0x174/0x210 [ 423.706862][T10596] ? __pfx___sys_socket+0x10/0x10 [ 423.706881][T10596] ? xfd_validate_state+0x61/0x180 [ 423.706908][T10596] __x64_sys_socket+0x72/0xb0 [ 423.706927][T10596] ? lockdep_hardirqs_on+0x7c/0x110 [ 423.706941][T10596] do_syscall_64+0xcd/0x490 [ 423.706957][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.706971][T10596] RIP: 0033:0x7fe7a8f8eb69 [ 423.706983][T10596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.706997][T10596] RSP: 002b:00007fe7a9d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 423.707011][T10596] RAX: ffffffffffffffda RBX: 00007fe7a91b5fa0 RCX: 00007fe7a8f8eb69 [ 423.707020][T10596] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 423.707028][T10596] RBP: 00007fe7a9011df1 R08: 0000000000000000 R09: 0000000000000000 [ 423.707036][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.707044][T10596] R13: 0000000000000000 R14: 00007fe7a91b5fa0 R15: 00007ffcea8c2d08 [ 423.707062][T10596] [ 423.707089][T10596] socket: no more sockets [ 427.573883][T10637] random: crng reseeded on system resumption [ 429.384169][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.772'. [ 429.429367][T10682] HfR: entered promiscuous mode [ 432.960460][T10731] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 433.279671][T10734] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 436.782863][T10787] FAULT_INJECTION: forcing a failure. [ 436.782863][T10787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.888895][T10787] CPU: 1 UID: 0 PID: 10787 Comm: syz.2.791 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 436.888940][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.888955][T10787] Call Trace: [ 436.888964][T10787] [ 436.888975][T10787] dump_stack_lvl+0x16c/0x1f0 [ 436.889008][T10787] should_fail_ex+0x512/0x640 [ 436.889044][T10787] should_fail_alloc_page+0xe7/0x130 [ 436.889080][T10787] prepare_alloc_pages+0x3c2/0x610 [ 436.889123][T10787] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 436.889156][T10787] ? __pfx_stack_trace_save+0x10/0x10 [ 436.889187][T10787] ? stack_depot_save_flags+0x29/0x9c0 [ 436.889217][T10787] ? find_held_lock+0x2b/0x80 [ 436.889244][T10787] ? kasan_save_stack+0x42/0x60 [ 436.889262][T10787] ? kasan_save_stack+0x33/0x60 [ 436.889287][T10787] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 436.889316][T10787] ? alloc_vmap_area+0xdc8/0x29c0 [ 436.889348][T10787] ? get_vm_area_caller+0x71/0xa0 [ 436.889381][T10787] ? relay_open_buf.part.0+0x440/0xc30 [ 436.889410][T10787] ? relay_open+0x653/0xad0 [ 436.889433][T10787] ? do_blk_trace_setup+0x4c5/0xb00 [ 436.889456][T10787] ? blk_trace_setup+0xed/0x1b0 [ 436.889478][T10787] ? blk_trace_ioctl+0x146/0x280 [ 436.889502][T10787] ? blkdev_ioctl+0x108/0x6d0 [ 436.889531][T10787] ? __x64_sys_ioctl+0x18b/0x210 [ 436.889573][T10787] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.889610][T10787] ? policy_nodemask+0xea/0x4e0 [ 436.889643][T10787] alloc_pages_mpol+0x1fb/0x550 [ 436.889676][T10787] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 436.889719][T10787] alloc_pages_noprof+0x131/0x390 [ 436.889751][T10787] get_free_pages_noprof+0x10/0xb0 [ 436.889784][T10787] kasan_populate_vmalloc+0x89/0x1f0 [ 436.889820][T10787] alloc_vmap_area+0x959/0x29c0 [ 436.889872][T10787] ? __pfx_alloc_vmap_area+0x10/0x10 [ 436.889929][T10787] __get_vm_area_node+0x1ca/0x330 [ 436.889972][T10787] ? relay_open_buf.part.0+0x440/0xc30 [ 436.890005][T10787] get_vm_area_caller+0x71/0xa0 [ 436.890041][T10787] ? relay_open_buf.part.0+0x440/0xc30 [ 436.890071][T10787] vmap+0x135/0x320 [ 436.890107][T10787] ? __pfx_vmap+0x10/0x10 [ 436.890141][T10787] ? __kmalloc_noprof.cold+0x20/0x61 [ 436.890183][T10787] relay_open_buf.part.0+0x440/0xc30 [ 436.890228][T10787] relay_open+0x653/0xad0 [ 436.890260][T10787] ? debugfs_create_file_full+0x41/0x60 [ 436.890291][T10787] do_blk_trace_setup+0x4c5/0xb00 [ 436.890324][T10787] blk_trace_setup+0xed/0x1b0 [ 436.890352][T10787] ? __pfx_blk_trace_setup+0x10/0x10 [ 436.890378][T10787] ? __pfx_snprintf+0x10/0x10 [ 436.890413][T10787] ? do_vfs_ioctl+0x128/0x14f0 [ 436.890455][T10787] blk_trace_ioctl+0x146/0x280 [ 436.890484][T10787] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 436.890518][T10787] ? find_held_lock+0x2b/0x80 [ 436.890543][T10787] ? hook_file_ioctl_common+0x145/0x410 [ 436.890577][T10787] blkdev_ioctl+0x108/0x6d0 [ 436.890615][T10787] ? __pfx_blkdev_ioctl+0x10/0x10 [ 436.890657][T10787] ? __pfx_blkdev_ioctl+0x10/0x10 [ 436.890696][T10787] __x64_sys_ioctl+0x18b/0x210 [ 436.890736][T10787] do_syscall_64+0xcd/0x490 [ 436.890766][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.890793][T10787] RIP: 0033:0x7fe05a78eb69 [ 436.890814][T10787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.890839][T10787] RSP: 002b:00007fe0585d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.890864][T10787] RAX: ffffffffffffffda RBX: 00007fe05a9b6080 RCX: 00007fe05a78eb69 [ 436.890882][T10787] RDX: 0000200000000140 RSI: 00000000c0481273 RDI: 0000000000000009 [ 436.890898][T10787] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 436.890921][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.890936][T10787] R13: 0000000000000000 R14: 00007fe05a9b6080 R15: 00007ffd8b97a858 [ 436.890972][T10787] [ 439.944786][T10829] syz.2.804 (10829): /proc/10819/oom_adj is deprecated, please use /proc/10819/oom_score_adj instead. [ 442.389190][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 442.447259][T10861] netlink: 13 bytes leftover after parsing attributes in process `syz.3.800'. [ 443.288021][T10870] kAFS: No cell specified [ 445.392318][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.399440][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.432600][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 447.477485][T10925] netlink: 13 bytes leftover after parsing attributes in process `syz.1.813'. [ 447.486655][T10924] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.507399][T10924] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 447.532711][T10924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.556322][T10924] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.669578][T10924] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 448.440316][T10935] FAULT_INJECTION: forcing a failure. [ 448.440316][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 448.453684][T10935] CPU: 1 UID: 0 PID: 10935 Comm: syz.0.824 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 448.453707][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.453716][T10935] Call Trace: [ 448.453722][T10935] [ 448.453727][T10935] dump_stack_lvl+0x16c/0x1f0 [ 448.453747][T10935] should_fail_ex+0x512/0x640 [ 448.453765][T10935] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 448.453787][T10935] should_failslab+0xc2/0x120 [ 448.453806][T10935] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 448.453824][T10935] ? vmap_small_pages_range_noflush+0x892/0xc90 [ 448.453845][T10935] ? kasprintf+0xc7/0x100 [ 448.453867][T10935] kvasprintf+0xbc/0x160 [ 448.453897][T10935] ? __pfx_kvasprintf+0x10/0x10 [ 448.453921][T10935] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 448.453945][T10935] kasprintf+0xc7/0x100 [ 448.453964][T10935] ? __pfx_kasprintf+0x10/0x10 [ 448.453987][T10935] ? __pfx_vmap+0x10/0x10 [ 448.454007][T10935] ? __kmalloc_noprof.cold+0x20/0x61 [ 448.454032][T10935] relay_open_buf.part.0+0x73a/0xc30 [ 448.454058][T10935] relay_open+0x653/0xad0 [ 448.454075][T10935] ? debugfs_create_file_full+0x41/0x60 [ 448.454093][T10935] do_blk_trace_setup+0x4c5/0xb00 [ 448.454111][T10935] blk_trace_setup+0xed/0x1b0 [ 448.454126][T10935] ? __pfx_blk_trace_setup+0x10/0x10 [ 448.454141][T10935] ? __pfx_snprintf+0x10/0x10 [ 448.454160][T10935] ? do_vfs_ioctl+0x128/0x14f0 [ 448.454184][T10935] blk_trace_ioctl+0x146/0x280 [ 448.454200][T10935] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 448.454219][T10935] ? find_held_lock+0x2b/0x80 [ 448.454233][T10935] ? hook_file_ioctl_common+0x145/0x410 [ 448.454251][T10935] blkdev_ioctl+0x108/0x6d0 [ 448.454273][T10935] ? __pfx_blkdev_ioctl+0x10/0x10 [ 448.454297][T10935] ? __pfx_blkdev_ioctl+0x10/0x10 [ 448.454319][T10935] __x64_sys_ioctl+0x18b/0x210 [ 448.454342][T10935] do_syscall_64+0xcd/0x490 [ 448.454359][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.454373][T10935] RIP: 0033:0x7f47ea78eb69 [ 448.454385][T10935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.454399][T10935] RSP: 002b:00007f47eb674038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.454413][T10935] RAX: ffffffffffffffda RBX: 00007f47ea9b6080 RCX: 00007f47ea78eb69 [ 448.454422][T10935] RDX: 0000200000000140 RSI: 00000000c0481273 RDI: 0000000000000009 [ 448.454430][T10935] RBP: 00007f47ea811df1 R08: 0000000000000000 R09: 0000000000000000 [ 448.454439][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.454447][T10935] R13: 0000000000000000 R14: 00007f47ea9b6080 R15: 00007ffd2ee754f8 [ 448.454465][T10935] [ 449.556386][ T7658] Bluetooth: hci2: command 0x0c1a tx timeout [ 449.563508][ T7658] Bluetooth: hci1: command 0x0c1a tx timeout [ 449.570224][ T7658] Bluetooth: hci0: command 0x0c1a tx timeout [ 449.632235][T10950] Bluetooth: hci3: command 0x0c1a tx timeout [ 450.882332][T10965] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 451.325274][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 451.848140][T10985] netlink: 13 bytes leftover after parsing attributes in process `syz.2.825'. [ 452.397202][T10996] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 455.545861][T11017] debugfs: 'trace0' already exists in 'ram7' [ 461.385228][T11093] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 461.617234][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 461.747998][T11096] netlink: 13 bytes leftover after parsing attributes in process `syz.2.845'. [ 462.157522][T11095] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 463.086515][T11109] random: crng reseeded on system resumption [ 464.362018][T11124] random: crng reseeded on system resumption [ 469.178675][T11194] random: crng reseeded on system resumption [ 471.258892][T11212] ================================================================== [ 471.267237][T11212] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 471.275390][T11212] Read of size 8 at addr ffff888028cb0000 by task syz.2.868/11212 [ 471.283459][T11212] [ 471.285873][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.2.868 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 471.285893][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.285903][T11212] Call Trace: [ 471.285912][T11212] [ 471.285918][T11212] dump_stack_lvl+0x116/0x1f0 [ 471.285938][T11212] print_report+0xcd/0x630 [ 471.285958][T11212] ? __virt_addr_valid+0x81/0x610 [ 471.285977][T11212] ? __phys_addr+0xe8/0x180 [ 471.285994][T11212] ? force_devcd_write+0x312/0x340 [ 471.286010][T11212] kasan_report+0xe0/0x110 [ 471.286028][T11212] ? force_devcd_write+0x312/0x340 [ 471.286045][T11212] force_devcd_write+0x312/0x340 [ 471.286059][T11212] ? __pfx_force_devcd_write+0x10/0x10 [ 471.286079][T11212] ? __debugfs_file_get+0x1fe/0x840 [ 471.286108][T11212] ? __pfx___debugfs_file_get+0x10/0x10 [ 471.286139][T11212] full_proxy_write+0x131/0x1a0 [ 471.286167][T11212] ? __pfx_full_proxy_write+0x10/0x10 [ 471.286192][T11212] vfs_write+0x2a0/0x1150 [ 471.286210][T11212] ? __pfx___mutex_lock+0x10/0x10 [ 471.286225][T11212] ? __pfx_vfs_write+0x10/0x10 [ 471.286242][T11212] ? __fget_files+0x20e/0x3c0 [ 471.286260][T11212] ksys_write+0x12a/0x250 [ 471.286275][T11212] ? __pfx_ksys_write+0x10/0x10 [ 471.286293][T11212] do_syscall_64+0xcd/0x490 [ 471.286308][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.286323][T11212] RIP: 0033:0x7fe05a78eb69 [ 471.286336][T11212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.286350][T11212] RSP: 002b:00007fe0585f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.286363][T11212] RAX: ffffffffffffffda RBX: 00007fe05a9b5fa0 RCX: 00007fe05a78eb69 [ 471.286373][T11212] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 471.286381][T11212] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 471.286390][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.286399][T11212] R13: 0000000000000000 R14: 00007fe05a9b5fa0 R15: 00007ffd8b97a858 [ 471.286412][T11212] [ 471.286417][T11212] [ 471.497086][T11212] Allocated by task 5859: [ 471.501396][T11212] kasan_save_stack+0x33/0x60 [ 471.506153][T11212] kasan_save_track+0x14/0x30 [ 471.510834][T11212] __kasan_kmalloc+0xaa/0xb0 [ 471.515428][T11212] vhci_open+0x4c/0x430 [ 471.519603][T11212] misc_open+0x35a/0x420 [ 471.523863][T11212] chrdev_open+0x234/0x6a0 [ 471.528284][T11212] do_dentry_open+0x982/0x1530 [ 471.533162][T11212] vfs_open+0x82/0x3f0 [ 471.537329][T11212] path_openat+0x1de4/0x2cb0 [ 471.541941][T11212] do_filp_open+0x20b/0x470 [ 471.546433][T11212] do_sys_openat2+0x11b/0x1d0 [ 471.551105][T11212] __x64_sys_openat+0x174/0x210 [ 471.555966][T11212] do_syscall_64+0xcd/0x490 [ 471.560613][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.566589][T11212] [ 471.568900][T11212] Freed by task 11206: [ 471.572982][T11212] kasan_save_stack+0x33/0x60 [ 471.577652][T11212] kasan_save_track+0x14/0x30 [ 471.582320][T11212] kasan_save_free_info+0x3b/0x60 [ 471.587336][T11212] __kasan_slab_free+0x60/0x70 [ 471.592105][T11212] kfree+0x2b4/0x4d0 [ 471.595979][T11212] vhci_release+0xbb/0xf0 [ 471.600289][T11212] __fput+0x402/0xb70 [ 471.604534][T11212] task_work_run+0x150/0x240 [ 471.609219][T11212] do_exit+0x86f/0x2bf0 [ 471.613389][T11212] do_group_exit+0xd3/0x2a0 [ 471.617980][T11212] __x64_sys_exit_group+0x3e/0x50 [ 471.623141][T11212] x64_sys_call+0x14fa/0x1720 [ 471.627853][T11212] do_syscall_64+0xcd/0x490 [ 471.632533][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.638877][T11212] [ 471.641193][T11212] The buggy address belongs to the object at ffff888028cb0000 [ 471.641193][T11212] which belongs to the cache kmalloc-1k of size 1024 [ 471.655424][T11212] The buggy address is located 0 bytes inside of [ 471.655424][T11212] freed 1024-byte region [ffff888028cb0000, ffff888028cb0400) [ 471.669303][T11212] [ 471.671625][T11212] The buggy address belongs to the physical page: [ 471.678230][T11212] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28cb0 [ 471.687085][T11212] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 471.695624][T11212] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 471.703184][T11212] page_type: f5(slab) [ 471.707272][T11212] raw: 00fff00000000040 ffff88801b841dc0 ffffea0000aa1600 dead000000000002 [ 471.716116][T11212] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 471.724711][T11212] head: 00fff00000000040 ffff88801b841dc0 ffffea0000aa1600 dead000000000002 [ 471.733388][T11212] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 471.742064][T11212] head: 00fff00000000003 ffffea0000a32c01 00000000ffffffff 00000000ffffffff [ 471.750925][T11212] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 471.759680][T11212] page dumped because: kasan: bad access detected [ 471.766088][T11212] page_owner tracks the page as allocated [ 471.771965][T11212] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 36, tgid 36 (kworker/u8:2), ts 11972076524, free_ts 0 [ 471.790357][T11212] post_alloc_hook+0x1c0/0x230 [ 471.795112][T11212] get_page_from_freelist+0x132b/0x38e0 [ 471.800659][T11212] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 471.806720][T11212] new_slab+0x94/0x330 [ 471.810860][T11212] ___slab_alloc+0xcf2/0x1740 [ 471.815521][T11212] __slab_alloc.constprop.0+0x56/0xb0 [ 471.821349][T11212] __kmalloc_cache_node_noprof+0x100/0x420 [ 471.827298][T11212] blk_mq_alloc_and_init_hctx+0x639/0x11c0 [ 471.833093][T11212] __blk_mq_realloc_hw_ctxs+0x495/0x610 [ 471.838886][T11212] blk_mq_init_allocated_queue+0x3af/0x1240 [ 471.845039][T11212] blk_mq_alloc_queue+0x1bb/0x280 [ 471.850153][T11212] scsi_alloc_sdev+0x888/0xd70 [ 471.854943][T11212] scsi_probe_and_add_lun+0x76b/0xd80 [ 471.860318][T11212] __scsi_scan_target+0x1e8/0x580 [ 471.865337][T11212] scsi_scan_channel+0x149/0x1e0 [ 471.870276][T11212] scsi_scan_host_selected+0x302/0x400 [ 471.875736][T11212] page_owner free stack trace missing [ 471.881117][T11212] [ 471.883439][T11212] Memory state around the buggy address: [ 471.889150][T11212] ffff888028caff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 471.897328][T11212] ffff888028caff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 471.905567][T11212] >ffff888028cb0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 471.913712][T11212] ^ [ 471.917779][T11212] ffff888028cb0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 471.926220][T11212] ffff888028cb0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 471.934365][T11212] ================================================================== [ 471.946409][T11212] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 471.953651][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.2.868 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 471.965534][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.975703][T11212] Call Trace: [ 471.979037][T11212] [ 471.981962][T11212] dump_stack_lvl+0x3d/0x1f0 [ 471.987073][T11212] vpanic+0x6e8/0x7a0 [ 471.991083][T11212] ? __pfx_vpanic+0x10/0x10 [ 471.995595][T11212] ? __pfx_vprintk_emit+0x10/0x10 [ 472.000620][T11212] ? force_devcd_write+0x312/0x340 [ 472.005819][T11212] panic+0xca/0xd0 [ 472.009565][T11212] ? __pfx_panic+0x10/0x10 [ 472.013988][T11212] ? force_devcd_write+0x312/0x340 [ 472.019110][T11212] ? preempt_schedule_common+0x44/0xc0 [ 472.024685][T11212] ? preempt_schedule_thunk+0x16/0x30 [ 472.030105][T11212] check_panic_on_warn+0xab/0xb0 [ 472.035058][T11212] end_report+0x107/0x170 [ 472.039384][T11212] kasan_report+0xee/0x110 [ 472.043809][T11212] ? force_devcd_write+0x312/0x340 [ 472.049118][T11212] force_devcd_write+0x312/0x340 [ 472.054146][T11212] ? __pfx_force_devcd_write+0x10/0x10 [ 472.059784][T11212] ? __debugfs_file_get+0x1fe/0x840 [ 472.064979][T11212] ? __pfx___debugfs_file_get+0x10/0x10 [ 472.070520][T11212] full_proxy_write+0x131/0x1a0 [ 472.075488][T11212] ? __pfx_full_proxy_write+0x10/0x10 [ 472.080953][T11212] vfs_write+0x2a0/0x1150 [ 472.085367][T11212] ? __pfx___mutex_lock+0x10/0x10 [ 472.090393][T11212] ? __pfx_vfs_write+0x10/0x10 [ 472.095200][T11212] ? __fget_files+0x20e/0x3c0 [ 472.100488][T11212] ksys_write+0x12a/0x250 [ 472.104904][T11212] ? __pfx_ksys_write+0x10/0x10 [ 472.110004][T11212] do_syscall_64+0xcd/0x490 [ 472.114499][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.120393][T11212] RIP: 0033:0x7fe05a78eb69 [ 472.124838][T11212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.144705][T11212] RSP: 002b:00007fe0585f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 472.153383][T11212] RAX: ffffffffffffffda RBX: 00007fe05a9b5fa0 RCX: 00007fe05a78eb69 [ 472.161528][T11212] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 472.169674][T11212] RBP: 00007fe05a811df1 R08: 0000000000000000 R09: 0000000000000000 [ 472.177816][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.185827][T11212] R13: 0000000000000000 R14: 00007fe05a9b5fa0 R15: 00007ffd8b97a858 [ 472.193797][T11212] [ 472.197185][T11212] Kernel Offset: disabled [ 472.201522][T11212] Rebooting in 86400 seconds..