last executing test programs: 4m1.908628575s ago: executing program 2 (id=1585): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vt/parameters/default_grn\x00', 0x2062, 0x0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0xe8, 0x1, 0x5, 0x6}) write$auto(r1, &(0x7f0000000180)='\xd3\xb8\x02\xa5ur\xab\x04#\xdf\xf6\xe31\x03=\x1c\x00\x00\x00\x00\x00\x00\x00\x80\x12\xfa\b\x1c\xc7k\thb\xf1\xf2g\x0e\xde\xb76\x84\r\xff\aN4\xfc\x15\xa323\x89*\x84o\xc92\x82\x7f5\xb2\xed\xf5\x1bbx\xa6\xc3\x02\xc5\x05L\xafKl\x86\x8bUg\xdc(\x8e]^\x1cX4\x92!\xa0\x82\x93\x8b\xe6_\x16\xae[[%\x0e\x02s\xec\x06\xcc\xe7}\x0e\xd3q\xec\xc2\xe0\xd00\xe5\x96\xdf\xd5\x19X\x93L\x82\xc0\xb5\xf0\x12\xf0\x11\xff?SV}\t\x17\xcc\x18\xeb\xf2T\x92\xd4|\xf2\x9fQb\xd1\xef\x81K\nT)\r\xc5\x1ah0x0, @ANYBLOB="08000400f3f2c2"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b23c407a7adde5c972327d2993ddeef312215c5d8873c0884fdabfc25a1bc27fa7d375b6375779dd42350829ec4fbb326a62d2244d5f8c30907dbf34f53d7163fdef8b0fe3fe50f3bfba1f", @ANYRES8=r0, @ANYBLOB="00082bbd7000fedbdf250f0000000c000680080045800400e98004000780"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) alarm$auto(0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto(r2, 0x0, 0x300001000000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x8008b705, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x10008, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r3, 0x4018bc13, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1) sendmsg$auto_NET_SHAPER_CMD_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="337f1eb0", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25020000000c000180080001006d940000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) 3m50.385006913s ago: executing program 3 (id=1620): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffff9, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0x8) sendfile$auto(r2, r1, 0x0, 0x1000202) close_range$auto(0x2, 0x8, 0x0) 3m50.045377508s ago: executing program 33 (id=1620): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffff9, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0x8) sendfile$auto(r2, r1, 0x0, 0x1000202) close_range$auto(0x2, 0x8, 0x0) 3m47.248188489s ago: executing program 1 (id=1627): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080004000900000008000200", @ANYRES32=0x0, @ANYBLOB="08000400f3f2c2"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b23c407a7adde5c972327d2993ddeef312215c5d8873c0884fdabfc25a1bc27fa7d375b6375779dd42350829ec4fbb326a62d2244d5f8c30907dbf34f53d7163fdef8b0fe3fe50f3bfba1f", @ANYRES8=r0, @ANYBLOB="00082bbd7000fedbdf250f0000000c000680080045800400e98004000780"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) alarm$auto(0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto(r2, 0x0, 0x300001000000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x8008b705, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x10008, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r3, 0x4018bc13, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1) sendmsg$auto_NET_SHAPER_CMD_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="337f1eb0", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25020000000c000180080001006d940000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) 3m46.313870348s ago: executing program 1 (id=1631): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x5}, @HSR_A_IF1_AGE={0x8, 0x3, 0x7ff}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xf}, @HSR_A_IF1_AGE={0x8, 0x3, 0x8}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getpid() ioctl$auto(0x3, 0x800005411, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050725bd7000fbdbdf25093e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r2 = socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9ebd1dc9010028bd7000fcdb01000000d640ce00000010000000000000000004000000000000000000000000000000dd00"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) (async) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9ebd1dc9010028bd7000fcdb01000000d640ce00000010000000000000000004000000000000000000000000000000dd00"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000280)="b5883b968bfc530875dbe7a5553633a297047a32d24dfd111d307e19becc8ce9a58188c9f77ff5") shmctl$auto_SHM_STAT_ANY(0x80000001, 0xf, &(0x7f0000000400)={{0xffffffff, 0xee00, 0xee01, 0x3, 0x1ff, 0x2, 0xffff}, 0x3, 0x6, 0xec4, 0x6, @raw=0x1, @raw=0x1, 0x81, 0x0, &(0x7f0000000340)="b13e5a0de12fa1ebe640c6d8f24b2e54905bdf8bd60a3233ed49a674665c9b90e87b3c", &(0x7f0000000380)="78912bb24c2ba79db9f3ea894f46c1e1d38d8f373c1730494ed632137da82e7486c294d4fa57ffed315e4d6a7f3daa7a127f4ed818e94dc99cc129b5f1b37a0ef15ae72717c4e3da403d49032e041e423b15d2b905d6a5316bc49d7eaf"}) timer_create$auto(0x9, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/cpumask_isolated\x00', 0x80100, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'nr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'nr0\x00', 0x0}) bpf$auto(0x6, &(0x7f0000000100)=@bpf_attr_0={0x8, 0xb, 0x8, 0x100, 0x5, 0xffffffffffffffff, 0x9, "014395beb4448c00", r4, 0xffffffffffffffff, 0xf1c, 0x4, 0x2, 0x48}, 0x3) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) 3m45.448553384s ago: executing program 1 (id=1634): madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x8, 0x5, 0x0) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000280)=@bpf_attr_1={r0, 0xaf, @value=0x3, 0x200}, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xdf) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) fadvise64$auto(0xffffffffffffffff, 0x80005, 0x9, 0xa1a0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf2504000000080013000180000008000a00010000002c011c80780005806c00008004000100630001006b074ccd6dcf38a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a0875b718ca14a40df6c9f813f017212cd32804fad90d3dc0000400008004000080b0000580b80000800c0004800800020001000000200004800c00030003000000000000000400050008000200040000000400050077000100e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b000400ece5f746d8dcebb9689b49cc0a65223364e234ba2bb31d49b174a48ff34f6c1b6c007e8b7a18670000000000000000000000ea7771e27b7d7887dc171820a6c9b3f13e28ac24d066f5b9c593cc2e5b"], 0x150}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) keyctl$auto(0x11, 0xdfffffffffffffff, 0x69c9, 0x0, 0xbcd) socket(0x10, 0x2, 0xc) 3m44.718828838s ago: executing program 1 (id=1636): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x9, 0x0, 0xffffffffffff7fff, 0x7f, 0xffffffffffffffff, 0x40000007ffe) mmap$auto(0x0, 0x20009, 0x40000000005f, 0xeb1, 0x401, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8094}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x23, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@l2tp={0x2, 0x0, @loopback}, 0x6a) connect$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0x7, 0x9, 0x9, 0xd4}, 0x54) fsconfig$auto_HIDEPID_OFF(r0, 0x3ff, &(0x7f0000000280)='/sys/devices/virtual/net/nr12/address\x00', &(0x7f0000000380)="d06dcecd5b21824cba9e7ba66a3bc2fb9a1edf72dd77bb162f6c2df60e4417e2a9d33deb35d03f15a78958adc02a2a57bda02db8f9e74df611cb", 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/macvlan1/shared_media\x00', 0x50b780, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x274441, 0xc4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr12/address\x00', 0x101800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x200}, 0x800000007) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x1, 0xfffffffe) getsockopt$auto(0x6, 0x11b, 0x8, 0xfffffffffffffffd, 0x0) 3m44.36996788s ago: executing program 1 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0xee01, 0xffffffffffffffff, 0x0, 0x8000000000000000) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_options\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8400) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000180)='/sys/kernel/tracing/trace_options\x00', 0xa, 0x10000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip_vs_conn\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x0, 0x0) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a9e127bd7000ffdbdf2501ecd000050006000700000008000300010001000700040096e300000500050003000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) 3m41.98204429s ago: executing program 1 (id=1644): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x109002, 0x0) sendfile$auto(r0, r0, 0x0, 0x10000800000003) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty7\x00', 0x101681, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyde\x00', 0xa0102, 0x0) read$auto(0x3, 0x0, 0x30) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r2 = open(0x0, 0xeee00, 0x31) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r2, 0x0) socket(0x2, 0x1, 0x106) syz_clone(0x200a0080, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x10000008, &(0x7f0000000380)=@enable_stats={0xf}, 0x92) 3m26.539345658s ago: executing program 34 (id=1644): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x109002, 0x0) sendfile$auto(r0, r0, 0x0, 0x10000800000003) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty7\x00', 0x101681, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyde\x00', 0xa0102, 0x0) read$auto(0x3, 0x0, 0x30) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r2 = open(0x0, 0xeee00, 0x31) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r2, 0x0) socket(0x2, 0x1, 0x106) syz_clone(0x200a0080, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x10000008, &(0x7f0000000380)=@enable_stats={0xf}, 0x92) 7.976686804s ago: executing program 5 (id=2313): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x80800, 0x0) shmctl$auto_SHM_STAT_ANY(0xc, 0xf, &(0x7f0000000340)={{0x4, 0xee01, 0xee01, 0x80, 0x80, 0xfffffff8, 0x7fff}, 0x6, 0x6, 0x9, 0xcd, @raw=0x1000, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), &(0x7f00000001c0)="87206c8b1b7fb37ea771ea589f1cc62e50c829c4f476b9a871da5fa138fc6a8e9d3abf7923207febe7156f057d500ce28e1d6e85afd5dda59cc211366f02e34e48cb0cc453875ba6170dcf5fac74747d7abd0c42e078a66dc862672efa45dc431117ee473f0585befeab640e2f4a7db1"}) fstat$auto(r0, &(0x7f0000000440)={0x2, 0x7, 0xffffffffffff2073, 0x4, 0xee01, r1, 0x0, 0x401, 0x2, 0x10000, 0x5a5b, 0x10000, 0x1, 0x1, 0x6, 0x800, 0xffffffff}) socket(0xa, 0x6, 0x3f) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) connect$auto(r0, 0x0, 0x58) gettid() r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) setresuid$auto(0x909b, 0x1, 0x0) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = gettid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) fchdir$auto(r4) r5 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r5, 0x0, 0x400) 7.805191955s ago: executing program 4 (id=2314): r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) shmat$auto(0x0, &(0x7f00000010c0)='[\x00', 0x98ca) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) statmount$auto(&(0x7f0000000080)={0x7e, @raw, 0x80000028, 0xe864, 0x7}, 0x0, 0x40, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r2, 0x4b31, r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x125540, 0x100) socket(0xa, 0x3, 0x3a) write$auto(r0, &(0x7f0000001100)='/proc/thread-self/net/ip6_mr_vif\x00', 0x1) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/4087, 0xff7) 6.789756875s ago: executing program 5 (id=2317): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/cx2341x/parameters/debug\x00', 0x181842, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x1000, 0xd, 0x8eb3, r0, 0x1000000000008000) r2 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r2, &(0x7f0000000080)='/sys/kernel/debug/kfence/objects\x00', 0x7, 0x800) sendfile$auto(r1, 0x3, 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x3, 0x2) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r3 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7}, 0x5, 0x7) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 6.545275139s ago: executing program 4 (id=2319): write$auto(0xca, &(0x7f00000000c0)='\x04>\x00\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\xf9y\xc7p\xf1w\xbe\xde\xe8\xc3\x01#\xcc\tF\xb6\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1\xd5\x1e\x8f\t\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x85\x00\x00\x00\xe2E\x00\x00-a\xb6n\xbc\xb4=\xf8\xce\x01\x1f]\x85|\xce\xd7\xff\xff\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\x00\x80\x00\x00\xe9e\xe5\x80\x1c\x02\"\xa7&8U\xfd\xdc\x15\xae\xfa5\xb8}\x0e\xb4:\x91\xbb5\xd3{\xb2\xd0\xc0\x93=\xf8E\xceO\x1e\xd5\x8f\xdf\xaa\x1c\xfd\xb0h\xd8\xbc\xecA\xa6\xde\xd1=\xfd)d\x8f\vk\x1c+\xf7, \xf8]\xb3\xe9B\x02\f\'\xcf0\x06', 0x1ff) (async) setrlimit$auto(0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (rerun: 64) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x84) (rerun: 64) setsockopt$auto(r2, 0x9, 0x8, &(0x7f0000000080)='/dev/rtc0\x00', 0x9) (async) mmap$auto(0x0, 0xa, 0xdb, 0x400000000009b74, 0x5, 0x800000008000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$auto_RTC_SET_TIME(r3, 0x4024700a, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async, rerun: 64) getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0) (rerun: 64) 6.296442834s ago: executing program 4 (id=2320): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x40, 0x1000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/cx2341x/parameters/debug\x00', 0x181842, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89a3, 0x24) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x1000, 0xd, 0x8eb3, r0, 0x1000000000008000) sendfile$auto(r3, 0x3, 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x3, 0x2) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84800, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) 5.448088309s ago: executing program 6 (id=2323): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x20000800000000e, 0x800100, 0x0, 0xfffffffffffffffd) write$auto(0x1, 0x0, 0x80000000) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x12ba7e, 0x10) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x4, 0x3, 0x4, 0xeb1, r0, 0x8000) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2000000000004, 0x8, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x10, 0xffff, 0x4, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 4.666207267s ago: executing program 0 (id=2324): ioctl$auto(0x4000000000000c8, 0x400454da, 0x3) (fail_nth: 1) 4.351293642s ago: executing program 6 (id=2325): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x6) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram3/queue/read_ahead_kb\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 4.303312415s ago: executing program 4 (id=2326): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x80800, 0x0) shmctl$auto_SHM_STAT_ANY(0xc, 0xf, &(0x7f0000000340)={{0x4, 0xee01, 0xee01, 0x80, 0x80, 0xfffffff8, 0x7fff}, 0x6, 0x6, 0x9, 0xcd, @raw=0x1000, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), &(0x7f00000001c0)="87206c8b1b7fb37ea771ea589f1cc62e50c829c4f476b9a871da5fa138fc6a8e9d3abf7923207febe7156f057d500ce28e1d6e85afd5dda59cc211366f02e34e48cb0cc453875ba6170dcf5fac74747d7abd0c42e078a66dc862672efa45dc431117ee473f0585befeab640e2f4a7db1"}) fstat$auto(r0, &(0x7f0000000440)={0x2, 0x7, 0xffffffffffff2073, 0x4, 0xee01, r1, 0x0, 0x401, 0x2, 0x10000, 0x5a5b, 0x10000, 0x1, 0x1, 0x6, 0x800, 0xffffffff}) socket(0xa, 0x6, 0x3f) connect$auto(r0, 0x0, 0x58) gettid() r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) setresuid$auto(0x909b, 0x1, 0x0) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = gettid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) fchdir$auto(r4) r5 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r5, 0x0, 0x400) 4.119653368s ago: executing program 0 (id=2327): ioctl$auto(0x4000000000000c8, 0x400454da, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xf8}, @IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "dbfcddde4b19d1b0cad9cbe0610ac74ba96822463fe0de18c75b3a232e03d8658e9ed243a23162d451c85717f483ee7a70cca94742f4b8315f7079ed4e6ed0ff253fabcfbbf8449f01e8075e350432a6f48b7429ea14319419c681ac1901352abd5fe98840b37c04ff31f947d9740dfd5c11809e8d87ea1d4604195284ec78ff"}]}, 0xa0}}, 0x40) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xfffffffffffffffe, 0x81, 0x6, 0x9, 0xee00, 0xee00, 0x0, 0x7, 0xc964, 0x6, 0x8, 0x7, 0x7, 0x0, 0x4, 0xfffffffffffffff8, 0x3}, 0x6) r2 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000300)={@siginfo_0_0={0x5, 0x1, 0xbb, @_sigchld={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x5f8, 0x7}}}, 0x10000, &(0x7f0000000380)={{0x3, 0xc}, {0x20d89afa, 0x3}, 0x3ff, 0x200, 0x8001, 0x6, 0x1820, 0x2, 0x8, 0x9, 0x4c32, 0x4, 0xffff, 0x8001, 0x7, 0x7}) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000440)={0x8, 0x3, 0x469ee4cc, 0x0, 0x4, 0xffffffffffffffff}) msgctl$auto(0xfe, 0x10, &(0x7f0000000480)={{0xbf, 0x0, r1, 0x3f1, 0xffff, 0x0, 0x2}, &(0x7f0000000280)=0xf9, &(0x7f00000002c0), 0xff, 0x6, 0xc, 0x9, 0x2, 0x32ac, 0x8d5d, 0x9, @inferred=r2, @inferred=r3}) r4 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000500), 0x240, 0x0) write$auto_severities_coverage_fops_severity(r4, &(0x7f0000000540)="dafc7358d4ba3393cc61aa2f78548436dde4508f5b3954b927d1d3e29f1eed450b6f3ba0c99162e5d06b262bf39bb039c42b476419c2b3ba949544f104ffc279aabfbdd36942029e024fe3a4dcd380b013839dfaf62a85a90cfabbe538f33fa41f5b09cf231f02a5c4d6c60c63adb4aaecc2f49539a50258a5217f10000fca84", 0x80) 3.828370156s ago: executing program 0 (id=2328): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/virtual/block/nbd12/queue/max_hw_sectors_kb\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000500)=""/4127, 0x101f) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x9659, 0x0, [0x7, 0x5]}) fadvise64$auto_POSIX_FADV_NOREUSE(r0, 0x0, 0x6, 0x5) 3.816933058s ago: executing program 5 (id=2329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000ffff", @ANYRES16=r1, @ANYBLOB="036c25bd7000fddbdf2504006a00080017000200000004001d00"], 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) 3.599379376s ago: executing program 4 (id=2330): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x200007, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) prctl$auto(0x59616d61, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) madvise$auto(0x2, 0xfffffffffffff0cd, 0x88) socket(0x10, 0x2, 0xffffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r2, 0x0, 0x8, 0xffff) madvise$auto(0xffdffffffffffffc, 0x200006, 0x0) setresuid$auto(0x2, 0x7, 0x8080) socket(0x2b, 0x2, 0x20a) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000000c0)="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", 0x119) shmdt$auto(&(0x7f0000000080)='-\x00') openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x70a80, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x200300, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x8080, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) 3.57784476s ago: executing program 0 (id=2331): sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.317967975s ago: executing program 0 (id=2332): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x20000800000000e, 0x800100, 0x0, 0xfffffffffffffffd) write$auto(0x1, 0x0, 0x80000000) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x12ba7e, 0x10) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x4, 0x3, 0x4, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000000000004, 0x8, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x10, 0xffff, 0x4, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 3.163161461s ago: executing program 5 (id=2333): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/i8042/serio0/softraw\x00', 0x141042, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/gid_map\x00', 0x3, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x7, 0xd, 0x1, 0xc5e1, 0x3, 0x88, 0x3, 0x0, 0x62, 0x8, 0x10, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x10, 0x8000000}, 0xed7138c}, 0x6, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 2.04897056s ago: executing program 6 (id=2334): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x20000800000000e, 0x800100, 0x0, 0xfffffffffffffffd) write$auto(0x1, 0x0, 0x80000000) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x12ba7e, 0x10) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2000000000004, 0x8, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x10, 0xffff, 0x4, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 1.685587513s ago: executing program 0 (id=2335): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) signalfd4$auto(0xffffffffffffffff, 0x0, 0xa, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0) write$auto(0x3, 0x0, 0x100082) (fail_nth: 2) 1.173114657s ago: executing program 4 (id=2336): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) madvise$auto(0x0, 0x3, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) madvise$auto(0xaf2, 0x1, 0x1) madvise$auto(0x0, 0x200007, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) getsockopt$auto(0x6, 0x11b, 0x1d05, 0xfffffffffffffffd, 0x0) setsockopt$auto(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(r1, 0x5522, 0xf15) ioctl$auto(r1, 0x5521, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) write$auto(r3, 0x0, 0x100) 898.368394ms ago: executing program 6 (id=2337): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r1, 0x5459, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000200)={@sival_ptr=0x0, @inferred=r2, 0x2, @_tid}) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/4087, 0xff7) 857.900242ms ago: executing program 6 (id=2338): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) shmctl$auto_IPC_RMID(0x7ff, 0x0, &(0x7f0000000180)={{0xd, 0x0, 0xee01, 0x4, 0x6, 0x1000, 0x8}, 0x4, 0xfffffffffffff442, 0x623, 0x6f, @raw=0x64c00, @raw=0x3, 0x9, 0x0, &(0x7f0000000000), &(0x7f0000000080)="2e09797b02c71d269bebf65915b62bfaf30a965ba2fc7ebae9aa2e2cdf29378ecd159348d099c15f231d6ba2feb3fae1fbc918973b2bc4a793c77c5aae30fa7b35cfff0a3ed4583688e422d98bbb7472cf52d712756dd94d10efbb980eb8536ebfc951380fe5167f3f6110b1a4da9236ec8ad2ef9b186e4ab2f5eb86f742012819c015fb055f034140b6834bdb6545cbdd2acc4182649b1d17940c89964fe76af821b54463efbd70e8fe106524706e98cfa5191d322cbb1a466c77bf054808a6f9d9a15c2132fe06aab3a0798989ab4f8b9ec9ef730228762e787a11391ed913ae9225d1fa88"}) setresgid$auto(r0, r0, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x1, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x40045532, 0x38) (async, rerun: 64) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) r1 = socket(0x2, 0x2, 0x1) close_range$auto(r1, 0x8, 0x3) 440.192514ms ago: executing program 5 (id=2340): sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 77.661717ms ago: executing program 5 (id=2341): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_conn\x00', 0x62240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)=""/7, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 0s ago: executing program 6 (id=2342): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181842, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x1000, 0xd, 0x8eb3, r0, 0x1000000000008000) sendfile$auto(r1, 0x3, 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x3, 0x2) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x84000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) r2 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7}, 0x5, 0x7) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) kernel console output (not intermixed with test programs): X: 00000000000001b3 [ 515.453581][T13205] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe5acb8e929 [ 515.453599][T13205] RDX: 00007fe5ad9bbf20 RSI: 0000000000000058 RDI: 00007fe5ad9bbf20 [ 515.453618][T13205] RBP: 00007fe5acc10b39 R08: 0000000000000000 R09: 0000000000000058 [ 515.453635][T13205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.453651][T13205] R13: 0000000000000000 R14: 00007fe5acdb6080 R15: 00007fff677d2368 [ 515.453686][T13205] [ 516.450579][T13218] Process accounting paused [ 518.314462][T13250] Invalid ELF header magic: != ELF [ 518.502645][T13253] can: request_module (can-proto-0) failed. [ 519.624818][T13272] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 519.731884][T13273] bridge0: port 2(vlan1) entered blocking state [ 519.748461][T13273] bridge0: port 2(vlan1) entered disabled state [ 519.788868][T13273] vlan1: entered allmulticast mode [ 519.848708][T13273] veth0_vlan: entered allmulticast mode [ 519.858485][T13273] vlan1: entered promiscuous mode [ 519.864608][T13273] bridge0: port 2(vlan1) entered blocking state [ 519.871107][T13273] bridge0: port 2(vlan1) entered forwarding state [ 520.762846][T13292] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1440'. [ 521.195943][T13308] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 521.278993][T13311] program syz.0.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.295055][T13311] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 521.716591][T13309] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 522.040633][T13316] syz.1.1443 (13316): /proc/13304/oom_adj is deprecated, please use /proc/13304/oom_score_adj instead. [ 522.079411][T13324] program syz.2.1445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.146748][T13324] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 524.879699][T13375] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1455'. [ 525.169101][T13378] FAULT_INJECTION: forcing a failure. [ 525.169101][T13378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.210066][T13378] CPU: 1 UID: 0 PID: 13378 Comm: syz.2.1456 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 525.210100][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.210114][T13378] Call Trace: [ 525.210122][T13378] [ 525.210131][T13378] dump_stack_lvl+0x16c/0x1f0 [ 525.210169][T13378] should_fail_ex+0x512/0x640 [ 525.210207][T13378] should_fail_alloc_page+0xe7/0x130 [ 525.210233][T13378] prepare_alloc_pages+0x3c2/0x610 [ 525.210265][T13378] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 525.210308][T13378] ? __lock_acquire+0x622/0x1c90 [ 525.210347][T13378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 525.210394][T13378] ? is_bpf_text_address+0x8a/0x1a0 [ 525.210428][T13378] ? bpf_ksym_find+0x124/0x1c0 [ 525.210465][T13378] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 525.210495][T13378] ? is_bpf_text_address+0x94/0x1a0 [ 525.210527][T13378] ? kernel_text_address+0x8d/0x100 [ 525.210567][T13378] ? __kernel_text_address+0xd/0x40 [ 525.210587][T13378] ? unwind_get_return_address+0x59/0xa0 [ 525.210630][T13378] ? wiphy_new_nm+0x701/0x2160 [ 525.210650][T13378] __alloc_pages_noprof+0xb/0x1b0 [ 525.210685][T13378] ___kmalloc_large_node+0x84/0x1e0 [ 525.210717][T13378] ? wiphy_new_nm+0x701/0x2160 [ 525.210737][T13378] __kmalloc_large_node_noprof+0x1c/0x70 [ 525.210767][T13378] __kmalloc_noprof.cold+0xc/0x61 [ 525.210807][T13378] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 525.210850][T13378] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 525.210878][T13378] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 525.210926][T13378] wiphy_new_nm+0x701/0x2160 [ 525.210950][T13378] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 525.210978][T13378] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 525.211007][T13378] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 525.211037][T13378] ieee80211_alloc_hw_nm+0x495/0x2260 [ 525.211061][T13378] ? __local_bh_enable_ip+0xa4/0x120 [ 525.211092][T13378] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 525.211139][T13378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 525.211178][T13378] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 525.211222][T13378] hwsim_new_radio_nl+0xb51/0x12c0 [ 525.211260][T13378] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 525.211303][T13378] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 525.211333][T13378] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 525.211369][T13378] genl_family_rcv_msg_doit+0x209/0x2f0 [ 525.211399][T13378] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 525.211427][T13378] ? trace_cap_capable+0x18d/0x200 [ 525.211462][T13378] ? bpf_lsm_capable+0x9/0x10 [ 525.211491][T13378] ? security_capable+0x7e/0x260 [ 525.211514][T13378] ? ns_capable+0xd7/0x110 [ 525.211540][T13378] genl_rcv_msg+0x55c/0x800 [ 525.211571][T13378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.211600][T13378] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 525.211645][T13378] netlink_rcv_skb+0x158/0x420 [ 525.211669][T13378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.211698][T13378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.211734][T13378] ? netlink_deliver_tap+0x1ae/0xd30 [ 525.211776][T13378] genl_rcv+0x28/0x40 [ 525.211800][T13378] netlink_unicast+0x53a/0x7f0 [ 525.211827][T13378] ? __pfx_netlink_unicast+0x10/0x10 [ 525.211859][T13378] netlink_sendmsg+0x8d1/0xdd0 [ 525.211887][T13378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.211921][T13378] ____sys_sendmsg+0xa98/0xc70 [ 525.211948][T13378] ? copy_msghdr_from_user+0x10a/0x160 [ 525.211982][T13378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.212021][T13378] ___sys_sendmsg+0x134/0x1d0 [ 525.212057][T13378] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.212088][T13378] ? __lock_acquire+0x622/0x1c90 [ 525.212155][T13378] __sys_sendmsg+0x16d/0x220 [ 525.212190][T13378] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.212243][T13378] do_syscall_64+0xcd/0x490 [ 525.212280][T13378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.212303][T13378] RIP: 0033:0x7fe5acb8e929 [ 525.212321][T13378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.212343][T13378] RSP: 002b:00007fe5ad9dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.212364][T13378] RAX: ffffffffffffffda RBX: 00007fe5acdb5fa0 RCX: 00007fe5acb8e929 [ 525.212379][T13378] RDX: 0000000064004890 RSI: 0000200000000640 RDI: 0000000000000003 [ 525.212393][T13378] RBP: 00007fe5ad9dd090 R08: 0000000000000000 R09: 0000000000000000 [ 525.212407][T13378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.212420][T13378] R13: 0000000000000000 R14: 00007fe5acdb5fa0 R15: 00007fff677d2368 [ 525.212499][T13378] [ 526.661835][T13394] program syz.1.1459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.688865][T13394] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 526.713072][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1460'. [ 526.770929][T13393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1460'. [ 526.874818][ T5858] bt_warn_ratelimited: 23 callbacks suppressed [ 526.874842][ T5858] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 526.907516][T13393] bond0: (slave bond_slave_0): Releasing backup interface [ 528.666177][T13410] sg_write: data in/out 476/16086 bytes for SCSI command 0x0-- guessing data in; [ 528.666177][T13410] program syz.2.1462 not setting count and/or reply_len properly [ 528.943181][T13425] FAULT_INJECTION: forcing a failure. [ 528.943181][T13425] name failslab, interval 1, probability 0, space 0, times 0 [ 528.972233][T13425] CPU: 1 UID: 0 PID: 13425 Comm: syz.1.1466 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 528.972290][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.972315][T13425] Call Trace: [ 528.972325][T13425] [ 528.972336][T13425] dump_stack_lvl+0x16c/0x1f0 [ 528.972385][T13425] should_fail_ex+0x512/0x640 [ 528.972426][T13425] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 528.972479][T13425] should_failslab+0xc2/0x120 [ 528.972507][T13425] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 528.972556][T13425] ? kvasprintf_const+0x66/0x1a0 [ 528.972590][T13425] kvasprintf+0xbc/0x160 [ 528.972616][T13425] ? __pfx_kvasprintf+0x10/0x10 [ 528.972646][T13425] ? rcu_read_unlock+0x17/0x60 [ 528.972686][T13425] ? kernel_text_address+0x8d/0x100 [ 528.972738][T13425] kvasprintf_const+0x66/0x1a0 [ 528.972766][T13425] kobject_set_name_vargs+0x5a/0x140 [ 528.972796][T13425] dev_set_name+0xc7/0x100 [ 528.972830][T13425] ? __pfx_dev_set_name+0x10/0x10 [ 528.972883][T13425] ? rcu_is_watching+0x12/0xc0 [ 528.972915][T13425] ? trace_kmalloc+0x2b/0xd0 [ 528.972943][T13425] ? __kmalloc_noprof.cold+0x5c/0x61 [ 528.972989][T13425] ? wiphy_new_nm+0x797/0x2160 [ 528.973022][T13425] wiphy_new_nm+0x811/0x2160 [ 528.973052][T13425] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 528.973087][T13425] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 528.973125][T13425] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 528.973162][T13425] ieee80211_alloc_hw_nm+0x495/0x2260 [ 528.973192][T13425] ? __local_bh_enable_ip+0xa4/0x120 [ 528.973232][T13425] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 528.973297][T13425] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.973348][T13425] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 528.973406][T13425] hwsim_new_radio_nl+0xb51/0x12c0 [ 528.973455][T13425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 528.973511][T13425] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 528.973551][T13425] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 528.973596][T13425] genl_family_rcv_msg_doit+0x209/0x2f0 [ 528.973635][T13425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 528.973672][T13425] ? trace_cap_capable+0x18d/0x200 [ 528.973710][T13425] ? bpf_lsm_capable+0x9/0x10 [ 528.973746][T13425] ? security_capable+0x7e/0x260 [ 528.973775][T13425] ? ns_capable+0xd7/0x110 [ 528.973809][T13425] genl_rcv_msg+0x55c/0x800 [ 528.973850][T13425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.973886][T13425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 528.973945][T13425] netlink_rcv_skb+0x158/0x420 [ 528.973976][T13425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.974015][T13425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 528.974111][T13425] ? netlink_deliver_tap+0x1ae/0xd30 [ 528.974171][T13425] genl_rcv+0x28/0x40 [ 528.974205][T13425] netlink_unicast+0x53a/0x7f0 [ 528.974243][T13425] ? __pfx_netlink_unicast+0x10/0x10 [ 528.974289][T13425] netlink_sendmsg+0x8d1/0xdd0 [ 528.974338][T13425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.974391][T13425] ____sys_sendmsg+0xa98/0xc70 [ 528.974428][T13425] ? copy_msghdr_from_user+0x10a/0x160 [ 528.974477][T13425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.974534][T13425] ___sys_sendmsg+0x134/0x1d0 [ 528.974586][T13425] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.974632][T13425] ? __lock_acquire+0x622/0x1c90 [ 528.974733][T13425] __sys_sendmsg+0x16d/0x220 [ 528.974783][T13425] ? __pfx___sys_sendmsg+0x10/0x10 [ 528.974859][T13425] do_syscall_64+0xcd/0x490 [ 528.974912][T13425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.974945][T13425] RIP: 0033:0x7faa5a38e929 [ 528.974970][T13425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.975001][T13425] RSP: 002b:00007faa5b1f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.975031][T13425] RAX: ffffffffffffffda RBX: 00007faa5a5b5fa0 RCX: 00007faa5a38e929 [ 528.975053][T13425] RDX: 0000000064004890 RSI: 0000200000000640 RDI: 0000000000000003 [ 528.975072][T13425] RBP: 00007faa5b1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 528.975092][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.975110][T13425] R13: 0000000000000000 R14: 00007faa5a5b5fa0 R15: 00007ffca5b5d3e8 [ 528.975164][T13425] [ 529.489853][T13425] Process accounting paused [ 530.148073][T13449] program syz.2.1470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.178834][T13449] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 530.277773][T13453] random: crng reseeded on system resumption [ 530.654074][T13455] can: request_module (can-proto-0) failed. [ 530.937025][T13462] FAULT_INJECTION: forcing a failure. [ 530.937025][T13462] name fail_futex, interval 1, probability 0, space 0, times 0 [ 530.992615][T13462] CPU: 1 UID: 0 PID: 13462 Comm: syz.3.1473 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 530.992647][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.992661][T13462] Call Trace: [ 530.992668][T13462] [ 530.992676][T13462] dump_stack_lvl+0x16c/0x1f0 [ 530.992713][T13462] should_fail_ex+0x512/0x640 [ 530.992750][T13462] get_futex_key+0x1d0/0x1540 [ 530.992779][T13462] ? __pfx_get_futex_key+0x10/0x10 [ 530.992809][T13462] ? __pfx___might_resched+0x10/0x10 [ 530.992836][T13462] futex_wake+0xe7/0x4e0 [ 530.992877][T13462] ? __pfx_futex_wake+0x10/0x10 [ 530.992915][T13462] ? lock_acquire+0x179/0x350 [ 530.992949][T13462] do_futex+0x1e3/0x350 [ 530.992976][T13462] ? __pfx_do_futex+0x10/0x10 [ 530.993004][T13462] ? fd_install+0x244/0x750 [ 530.993037][T13462] __x64_sys_futex+0x1e0/0x4c0 [ 530.993068][T13462] ? __pfx___x64_sys_futex+0x10/0x10 [ 530.993095][T13462] ? xfd_validate_state+0x61/0x180 [ 530.993124][T13462] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 530.993154][T13462] do_syscall_64+0xcd/0x490 [ 530.993189][T13462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.993211][T13462] RIP: 0033:0x7f0a8df8e929 [ 530.993228][T13462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.993250][T13462] RSP: 002b:00007f0a8ee890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 530.993270][T13462] RAX: ffffffffffffffda RBX: 00007f0a8e1b5fa8 RCX: 00007f0a8df8e929 [ 530.993284][T13462] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a8e1b5fac [ 530.993298][T13462] RBP: 00007f0a8e1b5fa0 R08: 00007f0a8ee8a000 R09: 0000000000000000 [ 530.993311][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a8e1b5fac [ 530.993324][T13462] R13: 0000000000000000 R14: 00007fff88f67910 R15: 00007fff88f679f8 [ 530.993350][T13462] [ 533.440943][T13500] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 533.447491][T13500] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 534.034270][T13510] blktrace: Concurrent blktraces are not allowed on loop2 [ 534.576420][T13521] program syz.3.1483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.588369][T13521] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 535.150639][T13532] vhci_hcd: invalid port number 16 [ 535.168938][T13532] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 536.191288][T13550] random: crng reseeded on system resumption [ 536.274582][T13558] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1495'. [ 536.288399][T13562] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1495'. [ 536.423831][T13550] Unrecognized hibernate image header format! [ 536.445721][T13550] PM: hibernation: Image mismatch: architecture specific data [ 537.985108][ T30] audit: type=1806 audit(4294966411.655:16): xattr="." res=0 [ 538.615299][T13599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 538.640599][T13599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 538.662460][T13599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 538.674841][T13599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 540.113421][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 540.661730][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 540.696368][T13643] ubi: mtd0 is already attached to ubi0 [ 540.739928][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 540.746072][ T5167] Bluetooth: hci2: command 0x0c1a tx timeout [ 542.094580][T13676] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1520'. [ 544.398268][T13724] FAULT_INJECTION: forcing a failure. [ 544.398268][T13724] name failslab, interval 1, probability 0, space 0, times 0 [ 544.510556][T13724] CPU: 1 UID: 0 PID: 13724 Comm: syz.3.1532 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 544.510595][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.510609][T13724] Call Trace: [ 544.510616][T13724] [ 544.510624][T13724] dump_stack_lvl+0x16c/0x1f0 [ 544.510663][T13724] should_fail_ex+0x512/0x640 [ 544.510695][T13724] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 544.510729][T13724] should_failslab+0xc2/0x120 [ 544.510750][T13724] __kmalloc_cache_noprof+0x6a/0x3e0 [ 544.510780][T13724] ? evm_inode_alloc_security+0x49/0xc0 [ 544.510815][T13724] ? alloc_pipe_info+0x10e/0x590 [ 544.510854][T13724] alloc_pipe_info+0x10e/0x590 [ 544.510892][T13724] create_pipe_files+0x8c/0x930 [ 544.510926][T13724] ? fd_install+0x244/0x750 [ 544.510958][T13724] do_pipe2+0xaf/0x1c0 [ 544.510991][T13724] ? __pfx_do_pipe2+0x10/0x10 [ 544.511027][T13724] ? xfd_validate_state+0x61/0x180 [ 544.511065][T13724] __x64_sys_pipe2+0x54/0x80 [ 544.511101][T13724] do_syscall_64+0xcd/0x490 [ 544.511136][T13724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.511159][T13724] RIP: 0033:0x7f0a8df8e929 [ 544.511196][T13724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.511219][T13724] RSP: 002b:00007f0a8ee47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 544.511241][T13724] RAX: ffffffffffffffda RBX: 00007f0a8e1b6160 RCX: 00007f0a8df8e929 [ 544.511257][T13724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 544.511271][T13724] RBP: 00007f0a8e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 544.511285][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.511298][T13724] R13: 0000000000000000 R14: 00007f0a8e1b6160 R15: 00007fff88f679f8 [ 544.511327][T13724] [ 544.517483][T13719] can: request_module (can-proto-0) failed. [ 545.077045][T13730] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input24 [ 545.657123][T13713] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[13713] [ 546.000952][T13713] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[13713] [ 546.378592][ T30] audit: type=1804 audit(4294966420.045:17): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1535" name="/newroot/384/file0" dev="tmpfs" ino=2042 res=1 errno=0 [ 546.411429][ T30] audit: type=1800 audit(4294966420.085:18): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1535" name="file0" dev="tmpfs" ino=2042 res=0 errno=0 [ 547.507816][T13765] program syz.1.1539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.520515][T13765] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 547.531702][T13740] Process accounting resumed [ 548.763223][T13800] program syz.0.1546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.775038][T13800] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 549.172322][T13808] program syz.2.1547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.182719][T13808] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 549.859052][T13817] program syz.1.1548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.892269][T13817] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 551.159103][T13838] zswap: compressor 000 not available [ 551.325754][T13848] block nbd7: not configured, cannot reconfigure [ 551.577366][T13855] vhci_hcd: invalid port number 16 [ 551.776210][T13855] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 553.797571][T13901] FAULT_INJECTION: forcing a failure. [ 553.797571][T13901] name failslab, interval 1, probability 0, space 0, times 0 [ 553.797630][T13901] CPU: 1 UID: 0 PID: 13901 Comm: syz.2.1563 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 553.797660][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.797674][T13901] Call Trace: [ 553.797681][T13901] [ 553.797690][T13901] dump_stack_lvl+0x16c/0x1f0 [ 553.797733][T13901] should_fail_ex+0x512/0x640 [ 553.797767][T13901] ? __kmalloc_noprof+0xbf/0x510 [ 553.797804][T13901] ? __register_sysctl_table+0xb3/0x1900 [ 553.797840][T13901] should_failslab+0xc2/0x120 [ 553.797862][T13901] __kmalloc_noprof+0xd2/0x510 [ 553.797903][T13901] __register_sysctl_table+0xb3/0x1900 [ 553.797946][T13901] ? is_module_address+0x5f/0xf0 [ 553.798000][T13901] ? __pfx___register_sysctl_table+0x10/0x10 [ 553.798038][T13901] ? is_module_address+0x69/0xf0 [ 553.798071][T13901] ? register_net_sysctl_sz+0x228/0x3e0 [ 553.798095][T13901] ? __asan_memcpy+0x3c/0x60 [ 553.798128][T13901] __ip_vs_lblc_init+0x159/0x340 [ 553.798164][T13901] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 553.798198][T13901] ops_init+0x1df/0x5f0 [ 553.798245][T13901] setup_net+0x1ff/0x510 [ 553.798299][T13901] ? lockdep_init_map_type+0x5c/0x280 [ 553.798335][T13901] ? __pfx_setup_net+0x10/0x10 [ 553.798375][T13901] ? debug_mutex_init+0x37/0x70 [ 553.798402][T13901] copy_net_ns+0x2a6/0x5f0 [ 553.798429][T13901] create_new_namespaces+0x3ea/0xa90 [ 553.798464][T13901] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 553.798494][T13901] ksys_unshare+0x45b/0xa40 [ 553.798528][T13901] ? __pfx_ksys_unshare+0x10/0x10 [ 553.798562][T13901] ? xfd_validate_state+0x61/0x180 [ 553.798603][T13901] __x64_sys_unshare+0x31/0x40 [ 553.798636][T13901] do_syscall_64+0xcd/0x490 [ 553.798675][T13901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.798700][T13901] RIP: 0033:0x7fe5acb8e929 [ 553.798718][T13901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.798742][T13901] RSP: 002b:00007fe5ad9bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 553.798764][T13901] RAX: ffffffffffffffda RBX: 00007fe5acdb6080 RCX: 00007fe5acb8e929 [ 553.798780][T13901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 553.798794][T13901] RBP: 00007fe5acc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 553.798809][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.798823][T13901] R13: 0000000000000000 R14: 00007fe5acdb6080 R15: 00007fff677d2368 [ 553.798852][T13901] [ 554.567983][T13910] program syz.3.1564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.568365][T13910] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 554.706032][T13913] program syz.0.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.706286][T13913] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 555.438728][T13922] program syz.3.1566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.438953][T13922] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 555.956711][T13896] tty tty17: ldisc open failed (-12), clearing slot 16 [ 558.681471][T13931] vhci_hcd: invalid port number 16 [ 558.725036][T13931] vhci_hcd: invalid port number 16 [ 559.537215][T13993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 559.730701][T13992] Process accounting resumed [ 561.923354][T14036] program syz.0.1590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.934828][T14036] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 563.772249][T14072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1601'. [ 565.206834][ T3015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.477471][ T3015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.619115][ T3015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.820351][ T3015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.204489][ T3015] vlan1: left allmulticast mode [ 566.240840][ T3015] vlan1: left promiscuous mode [ 566.247997][ T3015] bridge0: port 3(vlan1) entered disabled state [ 566.381592][ T3015] bridge_slave_1: left allmulticast mode [ 566.408856][ T3015] bridge_slave_1: left promiscuous mode [ 566.428824][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.486145][ T3015] bridge_slave_0: left allmulticast mode [ 566.508970][ T3015] bridge_slave_0: left promiscuous mode [ 566.538309][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.552772][ T5167] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.562947][ T5167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.573962][ T5167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.588239][ T5167] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.597896][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 567.522428][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.537314][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.550769][ T3015] bond0 (unregistering): Released all slaves [ 568.027021][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.035145][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.605935][T14140] FAULT_INJECTION: forcing a failure. [ 568.605935][T14140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.658557][T14140] CPU: 0 UID: 0 PID: 14140 Comm: syz.3.1613 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 568.658607][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.658628][T14140] Call Trace: [ 568.658638][T14140] [ 568.658651][T14140] dump_stack_lvl+0x16c/0x1f0 [ 568.658710][T14140] should_fail_ex+0x512/0x640 [ 568.658767][T14140] should_fail_alloc_page+0xe7/0x130 [ 568.658804][T14140] prepare_alloc_pages+0x3c2/0x610 [ 568.658844][T14140] ? find_held_lock+0x2b/0x80 [ 568.658886][T14140] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 568.658950][T14140] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 568.658994][T14140] ? is_bpf_text_address+0x94/0x1a0 [ 568.659043][T14140] ? kernel_text_address+0x8d/0x100 [ 568.659100][T14140] ? __kernel_text_address+0xd/0x40 [ 568.659130][T14140] ? unwind_get_return_address+0x59/0xa0 [ 568.659184][T14140] ? arch_stack_walk+0xa6/0x100 [ 568.659218][T14140] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 568.659272][T14140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 568.659333][T14140] ? trace_ma_write+0x183/0x200 [ 568.659378][T14140] ? mas_wr_store_entry+0xee8/0x2550 [ 568.659411][T14140] ? mas_destroy+0x5de/0xa20 [ 568.659454][T14140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 568.659500][T14140] ? policy_nodemask+0xea/0x4e0 [ 568.659531][T14140] alloc_pages_mpol+0x1fb/0x550 [ 568.659560][T14140] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 568.659598][T14140] folio_alloc_mpol_noprof+0x36/0x2f0 [ 568.659634][T14140] shmem_alloc_folio+0x135/0x160 [ 568.659671][T14140] shmem_alloc_and_add_folio+0x499/0xc20 [ 568.659717][T14140] ? __pfx_filemap_get_entry+0x10/0x10 [ 568.659745][T14140] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 568.659789][T14140] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 568.659838][T14140] shmem_get_folio_gfp+0x67f/0x1600 [ 568.659887][T14140] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 568.659934][T14140] ? __pfx_simple_offset_add+0x10/0x10 [ 568.659984][T14140] shmem_symlink+0x623/0x9f0 [ 568.660037][T14140] ? __pfx_shmem_symlink+0x10/0x10 [ 568.660080][T14140] ? bpf_lsm_inode_permission+0x9/0x10 [ 568.660106][T14140] ? security_inode_permission+0xbf/0x260 [ 568.660142][T14140] ? inode_permission+0x156/0x630 [ 568.660178][T14140] vfs_symlink+0x403/0x680 [ 568.660215][T14140] do_symlinkat+0x261/0x310 [ 568.660260][T14140] ? __pfx_do_symlinkat+0x10/0x10 [ 568.660305][T14140] ? getname_flags.part.0+0x1c5/0x550 [ 568.660344][T14140] __x64_sys_symlink+0x75/0x90 [ 568.660389][T14140] do_syscall_64+0xcd/0x490 [ 568.660434][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.660463][T14140] RIP: 0033:0x7f0a8df8e929 [ 568.660486][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.660515][T14140] RSP: 002b:00007f0a8ee89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 568.660541][T14140] RAX: ffffffffffffffda RBX: 00007f0a8e1b5fa0 RCX: 00007f0a8df8e929 [ 568.660560][T14140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 568.660577][T14140] RBP: 00007f0a8e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 568.660594][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.660611][T14140] R13: 0000000000000000 R14: 00007f0a8e1b5fa0 R15: 00007fff88f679f8 [ 568.660652][T14140] [ 568.660794][ T5167] Bluetooth: hci2: command tx timeout [ 569.008952][T14105] chnl_net:caif_netlink_parms(): no params data found [ 569.295343][T14156] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1615'. [ 569.781232][ T3015] veth1_macvtap: left promiscuous mode [ 569.787156][ T3015] veth0_macvtap: left promiscuous mode [ 569.851294][ T3015] veth1_vlan: left promiscuous mode [ 569.877462][ T3015] veth0_vlan: left promiscuous mode [ 570.695124][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 570.737202][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 571.058433][ T5167] Bluetooth: hci2: command tx timeout [ 571.263500][T14105] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.271140][T14105] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.281331][T14105] bridge_slave_0: entered allmulticast mode [ 571.289530][T14105] bridge_slave_0: entered promiscuous mode [ 571.306633][T14105] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.314190][T14105] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.321516][T14105] bridge_slave_1: entered allmulticast mode [ 571.330687][T14105] bridge_slave_1: entered promiscuous mode [ 571.451797][T14105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.491208][T14105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.669645][T14105] team0: Port device team_slave_0 added [ 571.690124][T14105] team0: Port device team_slave_1 added [ 571.844894][T14105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.859125][T14105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.918022][T14105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.957013][T14105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.978034][T14105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.038324][T14105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.264993][ T3015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.514863][T14105] hsr_slave_0: entered promiscuous mode [ 572.562854][T14105] hsr_slave_1: entered promiscuous mode [ 572.570657][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.583943][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.594348][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.603911][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.612764][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.628772][T14105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.637273][T14105] Cannot create hsr debugfs directory [ 572.698360][ T3015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.912156][ T3015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.103263][ T3015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.148761][ T5858] Bluetooth: hci2: command tx timeout [ 573.654516][ T3015] bridge_slave_1: left allmulticast mode [ 573.663212][ T3015] bridge_slave_1: left promiscuous mode [ 573.680111][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.712023][ T3015] bridge_slave_0: left allmulticast mode [ 573.717759][ T3015] bridge_slave_0: left promiscuous mode [ 573.741879][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.579268][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.595100][ T3015] bond0 (unregistering): Released all slaves [ 574.658163][ T5858] Bluetooth: hci1: command tx timeout [ 574.664950][ T5858] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 574.664992][ T5858] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 574.680311][ T5858] Bluetooth: hci0: Dropping invalid advertising data [ 574.694264][ T5858] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 574.694307][ T5858] Bluetooth: hci0: Dropping invalid advertising data [ 574.708659][ T5858] Bluetooth: hci0: Dropping invalid advertising data [ 574.715388][ T5858] Bluetooth: hci0: Malformed LE Event: 0x02 [ 574.716312][ T3015] HfR: left promiscuous mode [ 574.766394][T14105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 574.865624][T14105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 574.975952][T14105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 575.018198][T14248] Process accounting resumed [ 575.057834][T14105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 575.162764][T14205] chnl_net:caif_netlink_parms(): no params data found [ 575.218267][ T5858] Bluetooth: hci2: command tx timeout [ 576.234650][T14205] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.248655][T14205] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.256008][T14205] bridge_slave_0: entered allmulticast mode [ 576.298584][T14205] bridge_slave_0: entered promiscuous mode [ 576.325238][T14205] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.360609][T14205] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.367901][T14205] bridge_slave_1: entered allmulticast mode [ 576.403575][T14205] bridge_slave_1: entered promiscuous mode [ 576.460992][ T3015] hsr_slave_0: left promiscuous mode [ 576.476698][ T3015] hsr_slave_1: left promiscuous mode [ 576.483370][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.496656][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.550648][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.576361][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.738359][ T5858] Bluetooth: hci1: command tx timeout [ 576.784501][ T3015] veth1_macvtap: left promiscuous mode [ 576.790345][ T3015] veth0_macvtap: left promiscuous mode [ 578.326657][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 578.376926][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 578.531379][T14311] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1639'. [ 578.542053][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 578.821563][ T5858] Bluetooth: hci1: command tx timeout [ 578.852978][T14205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.867854][T14205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.069383][T14205] team0: Port device team_slave_0 added [ 579.081228][T14205] team0: Port device team_slave_1 added [ 579.228794][T14205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.242692][T14205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.272917][T14205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.352310][T14205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.365372][T14205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.396867][T14205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.523266][T14205] hsr_slave_0: entered promiscuous mode [ 579.533347][T14205] hsr_slave_1: entered promiscuous mode [ 579.540299][T14205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.547961][T14205] Cannot create hsr debugfs directory [ 579.819201][T14105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.065286][T14105] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.141607][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.148863][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.209517][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.216728][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.899113][ T5858] Bluetooth: hci1: command tx timeout [ 581.042734][T14205] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 581.116148][T14205] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 581.175037][T14205] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 581.205549][T14205] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 581.560831][T14205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.653871][T14205] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.687138][T14105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.825332][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.832565][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.905136][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.912423][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.397221][T14105] veth0_vlan: entered promiscuous mode [ 583.447679][T14105] veth1_vlan: entered promiscuous mode [ 583.497003][T14205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.658562][T14105] veth0_macvtap: entered promiscuous mode [ 583.695963][T14105] veth1_macvtap: entered promiscuous mode [ 583.762312][T14105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.819246][T14105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.179652][T14105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.208030][T14105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.216798][T14105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.268299][T14105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.565767][T11654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.588384][T11654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.648907][ T8240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.656821][ T8240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.891131][T14205] veth0_vlan: entered promiscuous mode [ 584.945763][T14205] veth1_vlan: entered promiscuous mode [ 585.071103][T14205] veth0_macvtap: entered promiscuous mode [ 585.109580][T14205] veth1_macvtap: entered promiscuous mode [ 585.206296][T14205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.255737][T14205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.320827][T14205] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.344031][T14205] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.367132][T14205] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.380441][T14205] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.722772][T11654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.768000][T11654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.788255][T14438] ip6gretap0: entered allmulticast mode [ 585.912272][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.947900][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.414559][T14494] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 589.674479][T14505] program syz.0.1659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.702984][T14505] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 590.811655][T14531] program syz.0.1663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.852757][T14531] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 592.424504][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1665'. [ 592.546846][T14543] team0: Port device team_slave_0 removed [ 594.837274][T14594] Invalid ELF header magic: != ELF [ 594.851080][T14592] .SR: entered promiscuous mode [ 595.238564][ T5859] Process accounting paused [ 597.060950][ T5167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.093317][ T5167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.102225][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.187861][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.204767][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.063372][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c186000: rx timeout, send abort [ 599.071971][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c186000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 599.307981][ T5858] Bluetooth: hci3: command tx timeout [ 599.420516][T14641] chnl_net:caif_netlink_parms(): no params data found [ 599.866068][T14679] zram: Added device: zram2 [ 601.085974][T14641] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.093186][T14641] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.109286][T14641] bridge_slave_0: entered allmulticast mode [ 601.117074][T14641] bridge_slave_0: entered promiscuous mode [ 601.183536][T14641] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.212083][T14641] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.238321][T14641] bridge_slave_1: entered allmulticast mode [ 601.277182][T14641] bridge_slave_1: entered promiscuous mode [ 601.397966][ T5858] Bluetooth: hci3: command tx timeout [ 601.601305][T14641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.787872][T14641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.167828][T14641] team0: Port device team_slave_0 added [ 602.380459][T14641] team0: Port device team_slave_1 added [ 602.827496][T14641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.850033][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.901385][T14641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.964906][T14641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.985679][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.050714][T14641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.270311][T14641] hsr_slave_0: entered promiscuous mode [ 603.286053][T14641] hsr_slave_1: entered promiscuous mode [ 603.302755][T14641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.325399][T14641] Cannot create hsr debugfs directory [ 603.470811][ T5858] Bluetooth: hci3: command tx timeout [ 604.543073][T14641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 604.589387][T14641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 604.632387][T14641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 604.789056][T14641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 605.485748][T14641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.546177][ T5858] Bluetooth: hci3: command tx timeout [ 605.590855][T14641] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.731654][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.738842][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.849025][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.856354][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.072746][T14774] random: crng reseeded on system resumption [ 607.602749][T14641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.979920][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1697'. [ 610.474149][T14641] veth0_vlan: entered promiscuous mode [ 610.743654][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1701'. [ 611.134522][T14641] veth1_vlan: entered promiscuous mode [ 611.339083][T14641] veth0_macvtap: entered promiscuous mode [ 611.357507][T14641] veth1_macvtap: entered promiscuous mode [ 611.573498][T14641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.608108][T14641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.704689][T14862] program syz.5.1705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 611.721297][T14862] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 611.735633][T14641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.829599][T14641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.859004][T14641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.879293][T14641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.492915][T11654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.563680][T11654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.993681][ T8243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.008168][ T8243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.972128][T14895] FAULT_INJECTION: forcing a failure. [ 613.972128][T14895] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 614.079332][T14895] CPU: 0 UID: 0 PID: 14895 Comm: syz.5.1709 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 614.079393][T14895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.079412][T14895] Call Trace: [ 614.079422][T14895] [ 614.079435][T14895] dump_stack_lvl+0x16c/0x1f0 [ 614.079489][T14895] should_fail_ex+0x512/0x640 [ 614.079542][T14895] should_fail_alloc_page+0xe7/0x130 [ 614.079576][T14895] prepare_alloc_pages+0x3c2/0x610 [ 614.079614][T14895] ? rcu_is_watching+0x12/0xc0 [ 614.079660][T14895] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 614.079727][T14895] ? __lock_acquire+0xb8a/0x1c90 [ 614.079778][T14895] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 614.079826][T14895] ? __lock_acquire+0x622/0x1c90 [ 614.079884][T14895] ? __lock_acquire+0x622/0x1c90 [ 614.079930][T14895] ? __lock_acquire+0x622/0x1c90 [ 614.079973][T14895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 614.080025][T14895] ? policy_nodemask+0xea/0x4e0 [ 614.080058][T14895] alloc_pages_mpol+0x1fb/0x550 [ 614.080092][T14895] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 614.080134][T14895] folio_alloc_mpol_noprof+0x36/0x2f0 [ 614.080173][T14895] vma_alloc_folio_noprof+0xed/0x1e0 [ 614.080212][T14895] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 614.080248][T14895] ? find_held_lock+0x2b/0x80 [ 614.080286][T14895] ? __handle_mm_fault+0x1092/0x5490 [ 614.080336][T14895] __handle_mm_fault+0x2f21/0x5490 [ 614.080392][T14895] ? __pfx___handle_mm_fault+0x10/0x10 [ 614.080437][T14895] ? __pte_offset_map_lock+0x174/0x310 [ 614.080472][T14895] ? find_held_lock+0x2b/0x80 [ 614.080504][T14895] ? find_held_lock+0x2b/0x80 [ 614.080559][T14895] ? follow_page_pte+0x3af/0x14c0 [ 614.080603][T14895] handle_mm_fault+0x589/0xd10 [ 614.080652][T14895] __get_user_pages+0x589/0x3b80 [ 614.080702][T14895] ? __pfx_mt_find+0x10/0x10 [ 614.080730][T14895] ? __pfx___get_user_pages+0x10/0x10 [ 614.080780][T14895] populate_vma_page_range+0x278/0x3a0 [ 614.080819][T14895] ? __pfx_populate_vma_page_range+0x10/0x10 [ 614.080855][T14895] ? __pfx_find_vma_intersection+0x10/0x10 [ 614.080891][T14895] ? do_mmap+0x69c/0x1210 [ 614.080928][T14895] __mm_populate+0x1d8/0x380 [ 614.080966][T14895] ? __pfx___mm_populate+0x10/0x10 [ 614.081005][T14895] ? up_write+0x1b2/0x520 [ 614.081054][T14895] vm_mmap_pgoff+0x362/0x450 [ 614.081095][T14895] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 614.081135][T14895] ? __x64_sys_futex+0x1e0/0x4c0 [ 614.081170][T14895] ? __x64_sys_futex+0x1e9/0x4c0 [ 614.081211][T14895] ksys_mmap_pgoff+0x7d/0x5c0 [ 614.081242][T14895] ? xfd_validate_state+0x61/0x180 [ 614.081288][T14895] __x64_sys_mmap+0x125/0x190 [ 614.081336][T14895] do_syscall_64+0xcd/0x490 [ 614.081384][T14895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.081415][T14895] RIP: 0033:0x7fcd1198e929 [ 614.081439][T14895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.081468][T14895] RSP: 002b:00007fcd12743038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 614.081496][T14895] RAX: ffffffffffffffda RBX: 00007fcd11bb6080 RCX: 00007fcd1198e929 [ 614.081515][T14895] RDX: 000000000000000b RSI: 0000000000400008 RDI: 0000000000000000 [ 614.081532][T14895] RBP: 00007fcd11a10b39 R08: 0000000000000002 R09: 0000000000008000 [ 614.081550][T14895] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 614.081566][T14895] R13: 0000000000000000 R14: 00007fcd11bb6080 R15: 00007ffcd6102488 [ 614.081604][T14895] [ 614.085276][T14904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1711'. [ 614.532753][T14895] FAULT_INJECTION: forcing a failure. [ 614.532753][T14895] name failslab, interval 1, probability 0, space 0, times 0 [ 614.858703][T14910] openvswitch: netlink: Message has 4 unknown bytes. [ 615.051083][T14916] openvswitch: netlink: Message has 4 unknown bytes. [ 615.216931][T14895] CPU: 1 UID: 0 PID: 14895 Comm: syz.5.1709 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 615.216973][T14895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.216992][T14895] Call Trace: [ 615.217001][T14895] [ 615.217012][T14895] dump_stack_lvl+0x16c/0x1f0 [ 615.217062][T14895] should_fail_ex+0x512/0x640 [ 615.217106][T14895] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 615.217155][T14895] should_failslab+0xc2/0x120 [ 615.217184][T14895] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 615.217231][T14895] ? alloc_empty_file+0x55/0x1e0 [ 615.217287][T14895] alloc_empty_file+0x55/0x1e0 [ 615.217330][T14895] path_openat+0xda/0x2cb0 [ 615.217385][T14895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.217430][T14895] ? __pfx_path_openat+0x10/0x10 [ 615.217497][T14895] ? __lock_acquire+0xb8a/0x1c90 [ 615.217547][T14895] do_filp_open+0x20b/0x470 [ 615.217595][T14895] ? __pfx_do_filp_open+0x10/0x10 [ 615.217670][T14895] ? alloc_fd+0x471/0x7d0 [ 615.217723][T14895] do_sys_openat2+0x11b/0x1d0 [ 615.217758][T14895] ? __pfx_do_sys_openat2+0x10/0x10 [ 615.217811][T14895] __x64_sys_openat+0x174/0x210 [ 615.217847][T14895] ? __pfx___x64_sys_openat+0x10/0x10 [ 615.217901][T14895] do_syscall_64+0xcd/0x490 [ 615.217953][T14895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.217985][T14895] RIP: 0033:0x7fcd1198e929 [ 615.218009][T14895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.218041][T14895] RSP: 002b:00007fcd12743038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 615.218070][T14895] RAX: ffffffffffffffda RBX: 00007fcd11bb6080 RCX: 00007fcd1198e929 [ 615.218091][T14895] RDX: 000000000014f602 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 615.218110][T14895] RBP: 00007fcd11a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 615.218134][T14895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.218153][T14895] R13: 0000000000000000 R14: 00007fcd11bb6080 R15: 00007ffcd6102488 [ 615.218194][T14895] [ 615.748272][T14913] synth uevent: /devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0: unknown uevent action string [ 615.845722][T14913] net wpan0: uevent: failed to send synthetic uevent: -22 [ 615.981189][T14894] kexec: Could not allocate control_code_buffer [ 616.162443][T14930] random: crng reseeded on system resumption [ 616.638184][ T5858] Bluetooth: hci0: ISO packet too small [ 618.075660][ T30] audit: type=1326 audit(4294966491.741:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.1721" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1b138e929 code=0x0 [ 618.193265][ T3015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.714480][ T3015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.227094][T14992] mkiss: ax0: crc mode is auto. [ 619.409516][ T3015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.748914][ T3015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.587266][ T3015] vlan1: left allmulticast mode [ 620.592221][ T3015] veth0_vlan: left allmulticast mode [ 620.627824][ T3015] vlan1: left promiscuous mode [ 620.634660][ T3015] bridge0: port 2(vlan1) entered disabled state [ 620.691791][ T3015] bridge_slave_0: left allmulticast mode [ 620.691867][ T3015] bridge_slave_0: left promiscuous mode [ 620.692129][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.249637][ T3015] ip6tnl0 (unregistering): left allmulticast mode [ 622.053812][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.088798][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.125917][ T3015] bond0 (unregistering): Released all slaves [ 622.163373][T15042] program syz.6.1732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.181987][T15042] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 622.342386][ T3015] tipc: Left network mode [ 624.050039][T15063] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 625.830072][ T3015] hsr_slave_1: left promiscuous mode [ 625.856886][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.918061][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.066562][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.119558][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.204007][ T3015] veth1_macvtap: left promiscuous mode [ 626.229204][ T3015] veth0_macvtap: left promiscuous mode [ 626.246650][ T3015] veth1_vlan: left promiscuous mode [ 626.252043][ T3015] veth0_vlan: left promiscuous mode [ 627.034871][T15127] FAULT_INJECTION: forcing a failure. [ 627.034871][T15127] name failslab, interval 1, probability 0, space 0, times 0 [ 627.078384][T15127] CPU: 0 UID: 5 PID: 15127 Comm: syz.5.1746 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 627.078430][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.078449][T15127] Call Trace: [ 627.078460][T15127] [ 627.078472][T15127] dump_stack_lvl+0x16c/0x1f0 [ 627.078524][T15127] should_fail_ex+0x512/0x640 [ 627.078569][T15127] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 627.078639][T15127] should_failslab+0xc2/0x120 [ 627.078684][T15127] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 627.078730][T15127] ? __proc_create+0xc3/0x8c0 [ 627.078777][T15127] ? __proc_create+0x2ce/0x8c0 [ 627.078832][T15127] __proc_create+0x2ce/0x8c0 [ 627.078882][T15127] ? __pfx___proc_create+0x10/0x10 [ 627.078948][T15127] _proc_mkdir+0xb9/0x200 [ 627.078978][T15127] ? __pfx__proc_mkdir+0x10/0x10 [ 627.079006][T15127] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 627.079063][T15127] proc_net_ns_init+0x265/0x410 [ 627.079094][T15127] ? __pfx_proc_net_ns_init+0x10/0x10 [ 627.079122][T15127] ops_init+0x1df/0x5f0 [ 627.079175][T15127] setup_net+0x1ff/0x510 [ 627.079221][T15127] ? lockdep_init_map_type+0x5c/0x280 [ 627.079276][T15127] ? __pfx_setup_net+0x10/0x10 [ 627.079329][T15127] ? debug_mutex_init+0x37/0x70 [ 627.079383][T15127] copy_net_ns+0x2a6/0x5f0 [ 627.079422][T15127] create_new_namespaces+0x3ea/0xa90 [ 627.079473][T15127] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 627.079518][T15127] ksys_unshare+0x45b/0xa40 [ 627.079566][T15127] ? __pfx_ksys_unshare+0x10/0x10 [ 627.079615][T15127] ? xfd_validate_state+0x61/0x180 [ 627.079676][T15127] __x64_sys_unshare+0x31/0x40 [ 627.079723][T15127] do_syscall_64+0xcd/0x490 [ 627.079779][T15127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.079814][T15127] RIP: 0033:0x7fcd1198e929 [ 627.079842][T15127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.079875][T15127] RSP: 002b:00007fcd12743038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 627.079908][T15127] RAX: ffffffffffffffda RBX: 00007fcd11bb6080 RCX: 00007fcd1198e929 [ 627.079931][T15127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 627.079951][T15127] RBP: 00007fcd11a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 627.079972][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.079992][T15127] R13: 0000000000000000 R14: 00007fcd11bb6080 R15: 00007ffcd6102488 [ 627.080036][T15127] [ 627.095281][T15131] random: crng reseeded on system resumption [ 628.107809][T15136] random: crng reseeded on system resumption [ 628.436118][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 628.537691][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 629.498616][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.505003][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.416887][T15201] ip6gretap0: entered allmulticast mode [ 632.412232][T15220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1761'. [ 637.988005][T15315] random: crng reseeded on system resumption                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        syzkaller syzkaller login: [ 705.309313][T16613] FAULT_INJECTION: forcing a failure. [ 705.309313][T16613] name failslab, interval 1, probability 0, space 0, times 0 [ 705.322084][T16613] CPU: 1 UID: 0 PID: 16613 Comm: syz.5.1978 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 705.322131][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.322151][T16613] Call Trace: [ 705.322162][T16613] [ 705.322174][T16613] dump_stack_lvl+0x16c/0x1f0 [ 705.322231][T16613] should_fail_ex+0x512/0x640 [ 705.322281][T16613] ? fs_reclaim_acquire+0xae/0x150 [ 705.322327][T16613] ? tomoyo_open_control+0x51f/0xa30 [ 705.322381][T16613] should_failslab+0xc2/0x120 [ 705.322416][T16613] __kmalloc_noprof+0xd2/0x510 [ 705.322477][T16613] tomoyo_open_control+0x51f/0xa30 [ 705.322548][T16613] do_dentry_open+0x741/0x1c10 [ 705.322600][T16613] ? __pfx_tomoyo_open+0x10/0x10 [ 705.322658][T16613] vfs_open+0x82/0x3f0 [ 705.322700][T16613] path_openat+0x1de4/0x2cb0 [ 705.322781][T16613] ? __pfx_path_openat+0x10/0x10 [ 705.322835][T16613] ? __lock_acquire+0xb8a/0x1c90 [ 705.322889][T16613] do_filp_open+0x20b/0x470 [ 705.322941][T16613] ? __pfx_do_filp_open+0x10/0x10 [ 705.323024][T16613] ? alloc_fd+0x471/0x7d0 [ 705.323082][T16613] do_sys_openat2+0x11b/0x1d0 [ 705.323121][T16613] ? __pfx_do_sys_openat2+0x10/0x10 [ 705.323177][T16613] __x64_sys_openat+0x174/0x210 [ 705.323218][T16613] ? __pfx___x64_sys_openat+0x10/0x10 [ 705.323277][T16613] do_syscall_64+0xcd/0x490 [ 705.323334][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.323370][T16613] RIP: 0033:0x7fcd1198e929 [ 705.323397][T16613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.323430][T16613] RSP: 002b:00007fcd0f3f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 705.323462][T16613] RAX: ffffffffffffffda RBX: 00007fcd11bb6240 RCX: 00007fcd1198e929 [ 705.323485][T16613] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 705.323517][T16613] RBP: 00007fcd11a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 705.323538][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.323558][T16613] R13: 0000000000000000 R14: 00007fcd11bb6240 R15: 00007ffcd6102488 [ 705.323601][T16613] [ 706.255347][T16623] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 706.814549][T16639] FAULT_INJECTION: forcing a failure. [ 706.814549][T16639] name failslab, interval 1, probability 0, space 0, times 0 [ 706.863013][T16639] CPU: 0 UID: 0 PID: 16639 Comm: syz.5.1983 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 706.863048][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 706.863060][T16639] Call Trace: [ 706.863066][T16639] [ 706.863074][T16639] dump_stack_lvl+0x16c/0x1f0 [ 706.863109][T16639] should_fail_ex+0x512/0x640 [ 706.863139][T16639] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 706.863170][T16639] should_failslab+0xc2/0x120 [ 706.863190][T16639] __kmalloc_cache_noprof+0x6a/0x3e0 [ 706.863216][T16639] ? drm_atomic_helper_setup_commit+0x73c/0x15d0 [ 706.863251][T16639] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 706.863297][T16639] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 706.863341][T16639] drm_atomic_helper_commit+0xa9/0x380 [ 706.863377][T16639] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 706.863412][T16639] drm_atomic_commit+0x231/0x300 [ 706.863435][T16639] ? __pfx_drm_atomic_commit+0x10/0x10 [ 706.863457][T16639] ? __pfx___drm_printfn_info+0x10/0x10 [ 706.863489][T16639] ? drm_client_rotation+0x4da/0x6a0 [ 706.863514][T16639] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 706.863546][T16639] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 706.863595][T16639] drm_client_modeset_commit_locked+0x14d/0x580 [ 706.863627][T16639] drm_client_modeset_commit+0x4f/0x80 [ 706.863660][T16639] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 706.863710][T16639] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 706.863751][T16639] drm_fbdev_client_restore+0x2c/0x40 [ 706.863790][T16639] drm_client_dev_restore+0x1f3/0x2a0 [ 706.863828][T16639] drm_release+0x2c4/0x360 [ 706.863858][T16639] ? __pfx_drm_release+0x10/0x10 [ 706.863886][T16639] __fput+0x402/0xb70 [ 706.863970][T16639] task_work_run+0x150/0x240 [ 706.864024][T16639] ? __pfx_task_work_run+0x10/0x10 [ 706.864079][T16639] ? __pfx___do_sys_close_range+0x10/0x10 [ 706.864140][T16639] exit_to_user_mode_loop+0xeb/0x110 [ 706.864198][T16639] do_syscall_64+0x3f6/0x490 [ 706.864253][T16639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.864295][T16639] RIP: 0033:0x7fcd1198e929 [ 706.864322][T16639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.864354][T16639] RSP: 002b:00007fcd12764038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 706.864385][T16639] RAX: 0000000000000000 RBX: 00007fcd11bb5fa0 RCX: 00007fcd1198e929 [ 706.864406][T16639] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 706.864424][T16639] RBP: 00007fcd11a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 706.864443][T16639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.864462][T16639] R13: 0000000000000000 R14: 00007fcd11bb5fa0 R15: 00007ffcd6102488 [ 706.864505][T16639] [ 707.478578][T16634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 709.559924][T16690] FAULT_INJECTION: forcing a failure. [ 709.559924][T16690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.637058][T16690] CPU: 1 UID: 0 PID: 16690 Comm: syz.5.1992 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 709.637101][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 709.637118][T16690] Call Trace: [ 709.637128][T16690] [ 709.637139][T16690] dump_stack_lvl+0x16c/0x1f0 [ 709.637199][T16690] should_fail_ex+0x512/0x640 [ 709.637246][T16690] strncpy_from_user+0x3b/0x2e0 [ 709.637289][T16690] getname_flags.part.0+0x8f/0x550 [ 709.637327][T16690] getname_flags+0x93/0xf0 [ 709.637366][T16690] do_sys_openat2+0xb8/0x1d0 [ 709.637397][T16690] ? __pfx_do_sys_openat2+0x10/0x10 [ 709.637431][T16690] ? __fget_files+0x20e/0x3c0 [ 709.637477][T16690] __x64_sys_open+0x153/0x1e0 [ 709.637508][T16690] ? __pfx___x64_sys_open+0x10/0x10 [ 709.637548][T16690] ? rcu_is_watching+0x12/0xc0 [ 709.637582][T16690] do_syscall_64+0xcd/0x490 [ 709.637626][T16690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.637654][T16690] RIP: 0033:0x7fcd1198e929 [ 709.637676][T16690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.637703][T16690] RSP: 002b:00007fcd12764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 709.637728][T16690] RAX: ffffffffffffffda RBX: 00007fcd11bb5fa0 RCX: 00007fcd1198e929 [ 709.637762][T16690] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 709.637781][T16690] RBP: 00007fcd12764090 R08: 0000000000000000 R09: 0000000000000000 [ 709.637799][T16690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.637816][T16690] R13: 0000000000000000 R14: 00007fcd11bb5fa0 R15: 00007ffcd6102488 [ 709.637854][T16690] [ 709.805462][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.968086][T16756] FAULT_INJECTION: forcing a failure. [ 712.968086][T16756] name failslab, interval 1, probability 0, space 0, times 0 [ 713.012542][T16756] CPU: 0 UID: 0 PID: 16756 Comm: syz.0.2002 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 713.012602][T16756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.012620][T16756] Call Trace: [ 713.012629][T16756] [ 713.012641][T16756] dump_stack_lvl+0x16c/0x1f0 [ 713.012694][T16756] should_fail_ex+0x512/0x640 [ 713.012741][T16756] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 713.012799][T16756] should_failslab+0xc2/0x120 [ 713.012827][T16756] __kmalloc_cache_noprof+0x6a/0x3e0 [ 713.012885][T16756] ? getname_flags.part.0+0x292/0x550 [ 713.012929][T16756] getname_flags.part.0+0x292/0x550 [ 713.012969][T16756] getname_flags+0x93/0xf0 [ 713.013012][T16756] do_sys_openat2+0xb8/0x1d0 [ 713.013047][T16756] ? __pfx_do_sys_openat2+0x10/0x10 [ 713.013087][T16756] ? __fget_files+0x20e/0x3c0 [ 713.013140][T16756] __x64_sys_open+0x153/0x1e0 [ 713.013177][T16756] ? __pfx___x64_sys_open+0x10/0x10 [ 713.013221][T16756] ? rcu_is_watching+0x12/0xc0 [ 713.013259][T16756] do_syscall_64+0xcd/0x490 [ 713.013311][T16756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.013351][T16756] RIP: 0033:0x7fcbd398e929 [ 713.013376][T16756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.013407][T16756] RSP: 002b:00007fcbd4774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 713.013437][T16756] RAX: ffffffffffffffda RBX: 00007fcbd3bb5fa0 RCX: 00007fcbd398e929 [ 713.013457][T16756] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 713.013476][T16756] RBP: 00007fcbd4774090 R08: 0000000000000000 R09: 0000000000000000 [ 713.013495][T16756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.013512][T16756] R13: 0000000000000000 R14: 00007fcbd3bb5fa0 R15: 00007ffd6a533a08 [ 713.013552][T16756] [ 713.293246][T16759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2004'. [ 713.707355][T16780] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 714.173032][T16788] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 714.472631][T16781] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 716.832545][T16828] random: crng reseeded on system resumption [ 718.113832][ T5858] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 719.153741][T16821] kexec: Could not allocate control_code_buffer [ 720.021192][T16870] FAULT_INJECTION: forcing a failure. [ 720.021192][T16870] name failslab, interval 1, probability 0, space 0, times 0 [ 720.043932][T16870] CPU: 0 UID: 0 PID: 16870 Comm: syz.5.2027 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 720.043962][T16870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.043975][T16870] Call Trace: [ 720.043982][T16870] [ 720.043990][T16870] dump_stack_lvl+0x16c/0x1f0 [ 720.044027][T16870] should_fail_ex+0x512/0x640 [ 720.044057][T16870] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 720.044091][T16870] should_failslab+0xc2/0x120 [ 720.044114][T16870] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 720.044147][T16870] ? alloc_empty_file+0x55/0x1e0 [ 720.044173][T16870] alloc_empty_file+0x55/0x1e0 [ 720.044196][T16870] path_openat+0xda/0x2cb0 [ 720.044227][T16870] ? kasan_save_stack+0x42/0x60 [ 720.044257][T16870] ? kasan_save_stack+0x33/0x60 [ 720.044286][T16870] ? kasan_save_track+0x14/0x30 [ 720.044316][T16870] ? getname_flags.part.0+0x292/0x550 [ 720.044338][T16870] ? getname_flags+0x93/0xf0 [ 720.044364][T16870] ? do_sys_openat2+0xb8/0x1d0 [ 720.044386][T16870] ? do_syscall_64+0xcd/0x490 [ 720.044416][T16870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.044439][T16870] ? __pfx_path_openat+0x10/0x10 [ 720.044476][T16870] do_filp_open+0x20b/0x470 [ 720.044507][T16870] ? __pfx_do_filp_open+0x10/0x10 [ 720.044555][T16870] ? _raw_spin_unlock+0x28/0x50 [ 720.044581][T16870] ? alloc_fd+0x471/0x7d0 [ 720.044616][T16870] do_sys_openat2+0x11b/0x1d0 [ 720.044651][T16870] ? __pfx_do_sys_openat2+0x10/0x10 [ 720.044675][T16870] ? __fget_files+0x20e/0x3c0 [ 720.044706][T16870] __x64_sys_open+0x153/0x1e0 [ 720.044729][T16870] ? __pfx___x64_sys_open+0x10/0x10 [ 720.044756][T16870] ? rcu_is_watching+0x12/0xc0 [ 720.044780][T16870] do_syscall_64+0xcd/0x490 [ 720.044811][T16870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.044830][T16870] RIP: 0033:0x7fcd1198e929 [ 720.044846][T16870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.044865][T16870] RSP: 002b:00007fcd12764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 720.044883][T16870] RAX: ffffffffffffffda RBX: 00007fcd11bb5fa0 RCX: 00007fcd1198e929 [ 720.044897][T16870] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 720.044915][T16870] RBP: 00007fcd12764090 R08: 0000000000000000 R09: 0000000000000000 [ 720.044926][T16870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.044938][T16870] R13: 0000000000000000 R14: 00007fcd11bb5fa0 R15: 00007ffcd6102488 [ 720.044962][T16870] [ 722.372429][T16901] vhci_hcd: invalid port number 16 [ 722.404128][T16901] vhci_hcd: invalid port number 16 [ 724.000466][T16915] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2039'. [ 724.917159][T16933] FAULT_INJECTION: forcing a failure. [ 724.917159][T16933] name failslab, interval 1, probability 0, space 0, times 0 [ 724.959474][T16933] CPU: 1 UID: 0 PID: 16933 Comm: syz.4.2044 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 724.959521][T16933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 724.959541][T16933] Call Trace: [ 724.959551][T16933] [ 724.959564][T16933] dump_stack_lvl+0x16c/0x1f0 [ 724.959616][T16933] should_fail_ex+0x512/0x640 [ 724.959656][T16933] ? __kvmalloc_node_noprof+0x124/0x620 [ 724.959700][T16933] should_failslab+0xc2/0x120 [ 724.959727][T16933] __kvmalloc_node_noprof+0x137/0x620 [ 724.959769][T16933] ? seq_read_iter+0x826/0x12c0 [ 724.959811][T16933] ? seq_read_iter+0x826/0x12c0 [ 724.959843][T16933] seq_read_iter+0x826/0x12c0 [ 724.959880][T16933] ? aa_file_perm+0x4d6/0xfb0 [ 724.959928][T16933] seq_read+0x39e/0x4e0 [ 724.959962][T16933] ? __pfx_seq_read+0x10/0x10 [ 724.959993][T16933] ? __lock_acquire+0xb8a/0x1c90 [ 724.960038][T16933] ? get_pid_task+0xfc/0x250 [ 724.960101][T16933] ? __pfx_seq_read+0x10/0x10 [ 724.960135][T16933] proc_reg_read+0x23d/0x330 [ 724.960176][T16933] ? __pfx_proc_reg_read+0x10/0x10 [ 724.960218][T16933] vfs_read+0x1e1/0xc60 [ 724.960262][T16933] ? __pfx___mutex_lock+0x10/0x10 [ 724.960305][T16933] ? __pfx_vfs_read+0x10/0x10 [ 724.960353][T16933] ? __fget_files+0x20e/0x3c0 [ 724.960402][T16933] ksys_read+0x12a/0x250 [ 724.960440][T16933] ? __pfx_ksys_read+0x10/0x10 [ 724.960490][T16933] do_syscall_64+0xcd/0x490 [ 724.960535][T16933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.960563][T16933] RIP: 0033:0x7fb1b138e929 [ 724.960584][T16933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.960612][T16933] RSP: 002b:00007fb1b2227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.960650][T16933] RAX: ffffffffffffffda RBX: 00007fb1b15b5fa0 RCX: 00007fb1b138e929 [ 724.960668][T16933] RDX: 0000000000000ff7 RSI: 00002000000000c0 RDI: 0000000000000003 [ 724.960683][T16933] RBP: 00007fb1b2227090 R08: 0000000000000000 R09: 0000000000000000 [ 724.960699][T16933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.960715][T16933] R13: 0000000000000000 R14: 00007fb1b15b5fa0 R15: 00007fff23cf4388 [ 724.960749][T16933] [ 725.956012][T16945] HfR: entered promiscuous mode [ 727.145250][T16964] ptrace attach of "./syz-executor exec"[16965] was attempted by "./syz-executor exec"[16964] [ 727.326771][T16974] vhci_hcd: invalid port number 16 [ 727.407079][T16974] vhci_hcd: invalid port number 16 [ 732.538121][T17054] FAULT_INJECTION: forcing a failure. [ 732.538121][T17054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.601667][T17054] CPU: 1 UID: 0 PID: 17054 Comm: syz.4.2071 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 732.601699][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 732.601713][T17054] Call Trace: [ 732.601719][T17054] [ 732.601728][T17054] dump_stack_lvl+0x16c/0x1f0 [ 732.601767][T17054] should_fail_ex+0x512/0x640 [ 732.601804][T17054] _copy_to_user+0x32/0xd0 [ 732.601842][T17054] simple_read_from_buffer+0xcb/0x170 [ 732.601874][T17054] proc_fail_nth_read+0x197/0x270 [ 732.601902][T17054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.601930][T17054] ? rw_verify_area+0xcf/0x680 [ 732.601959][T17054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.601986][T17054] vfs_read+0x1e1/0xc60 [ 732.602021][T17054] ? __pfx___mutex_lock+0x10/0x10 [ 732.602055][T17054] ? __pfx_vfs_read+0x10/0x10 [ 732.602094][T17054] ? __fget_files+0x20e/0x3c0 [ 732.602133][T17054] ksys_read+0x12a/0x250 [ 732.602171][T17054] ? __pfx_ksys_read+0x10/0x10 [ 732.602222][T17054] do_syscall_64+0xcd/0x490 [ 732.602266][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.602287][T17054] RIP: 0033:0x7fb1b138d33c [ 732.602303][T17054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 732.602322][T17054] RSP: 002b:00007fb1b2227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 732.602339][T17054] RAX: ffffffffffffffda RBX: 00007fb1b15b5fa0 RCX: 00007fb1b138d33c [ 732.602353][T17054] RDX: 000000000000000f RSI: 00007fb1b22270a0 RDI: 0000000000000004 [ 732.602365][T17054] RBP: 00007fb1b2227090 R08: 0000000000000000 R09: 0000000000000000 [ 732.602377][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.602388][T17054] R13: 0000000000000000 R14: 00007fb1b15b5fa0 R15: 00007fff23cf4388 [ 732.602413][T17054] [ 733.562434][T17029] ima: policy update failed [ 733.567094][ T30] audit: type=1802 audit(4294967353.743:21): pid=17029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2066" res=0 errno=0 [ 734.392913][T17078] program syz.6.2077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 738.525612][T17151] random: crng reseeded on system resumption [ 740.704993][T17181] FAULT_INJECTION: forcing a failure. [ 740.704993][T17181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.807087][T17181] CPU: 1 UID: 0 PID: 17181 Comm: syz.0.2100 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 740.807132][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.807151][T17181] Call Trace: [ 740.807161][T17181] [ 740.807173][T17181] dump_stack_lvl+0x16c/0x1f0 [ 740.807227][T17181] should_fail_ex+0x512/0x640 [ 740.807280][T17181] _copy_to_iter+0x29f/0x16f0 [ 740.807353][T17181] ? __pfx__copy_to_iter+0x10/0x10 [ 740.807407][T17181] ? const_folio_flags+0x5b/0x100 [ 740.807456][T17181] ? folio_mark_accessed+0xc1/0xc00 [ 740.807487][T17181] ? __pfx_folio_mark_accessed+0x10/0x10 [ 740.807526][T17181] copy_page_to_iter+0x12a/0x1e0 [ 740.807584][T17181] filemap_read+0x6b1/0xe40 [ 740.807636][T17181] ? __pfx_filemap_read+0x10/0x10 [ 740.807700][T17181] ? __pfx_down_read+0x10/0x10 [ 740.807744][T17181] blkdev_read_iter+0x1ac/0x500 [ 740.807801][T17181] do_iter_readv_writev+0x738/0x950 [ 740.807851][T17181] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 740.807904][T17181] ? bpf_lsm_file_permission+0x9/0x10 [ 740.807939][T17181] ? security_file_permission+0x71/0x210 [ 740.807984][T17181] ? rw_verify_area+0xcf/0x680 [ 740.808031][T17181] vfs_readv+0x4cb/0x8b0 [ 740.808084][T17181] ? __pfx_vfs_readv+0x10/0x10 [ 740.808161][T17181] ? __fget_files+0x20e/0x3c0 [ 740.808204][T17181] ? __fget_files+0x1a0/0x3c0 [ 740.808259][T17181] ? do_readv+0x132/0x340 [ 740.808306][T17181] do_readv+0x132/0x340 [ 740.808348][T17181] ? __pfx_do_readv+0x10/0x10 [ 740.808404][T17181] do_syscall_64+0xcd/0x490 [ 740.808456][T17181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.808491][T17181] RIP: 0033:0x7fcbd398e929 [ 740.808517][T17181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.808550][T17181] RSP: 002b:00007fcbd4753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 740.808581][T17181] RAX: ffffffffffffffda RBX: 00007fcbd3bb6080 RCX: 00007fcbd398e929 [ 740.808602][T17181] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 740.808621][T17181] RBP: 00007fcbd4753090 R08: 0000000000000000 R09: 0000000000000000 [ 740.808640][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.808658][T17181] R13: 0000000000000000 R14: 00007fcbd3bb6080 R15: 00007ffd6a533a08 [ 740.808697][T17181] [ 745.949209][T17277] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 749.440152][T17329] hub 1-0:1.0: USB hub found [ 749.449752][T17329] hub 1-0:1.0: 1 port detected [ 750.065194][T17345] syz_tun: entered allmulticast mode [ 750.676437][T17356] mtrr: base(0x4000000) is not aligned on a size(0x0000) boundary [ 750.871466][T17364] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2141'. [ 751.978414][T17377] Invalid ELF header magic: != ELF [ 752.093833][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2146'. [ 752.146542][T17389] netlink: 354 bytes leftover after parsing attributes in process `syz.6.2146'. [ 752.426024][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.432765][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.096881][T17401] hub 1-0:1.0: USB hub found [ 753.107906][T17401] hub 1-0:1.0: 1 port detected [ 753.511540][T17408] ptp: physical clock is free running [ 754.197475][T17419] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 754.470056][T17422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 754.772409][T17431] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2155'. [ 754.888112][T17431] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x147 pfn:0x78000 [ 754.922037][T17431] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 755.020373][T17431] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 755.029613][T17431] raw: 0000000000000147 0000000000000000 00000001ffffffff 0000000000000000 [ 755.038663][T17431] page dumped because: unmovable page [ 755.044597][T17431] page_owner tracks the page as allocated [ 755.053524][T17431] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 14088, tgid 14088 (syz-executor), ts 565878792501, free_ts 542810481508 [ 755.071309][T17431] post_alloc_hook+0x1c0/0x230 [ 755.076256][T17431] get_page_from_freelist+0x1321/0x3890 [ 755.083049][T17431] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 755.089116][T17431] alloc_pages_bulk_noprof+0x71c/0x1410 [ 755.095527][T17431] kasan_populate_vmalloc+0xf1/0x1f0 [ 755.101219][T17431] alloc_vmap_area+0x959/0x29c0 [ 755.106343][T17431] __get_vm_area_node+0x1ca/0x330 [ 755.112337][T17431] __vmalloc_node_range_noprof+0x271/0x14b0 [ 755.118669][T17431] vmalloc_user_noprof+0x9e/0xe0 [ 755.124592][T17431] kcov_ioctl+0x4c/0x730 [ 755.129155][T17431] __x64_sys_ioctl+0x18e/0x210 [ 755.134447][T17431] do_syscall_64+0xcd/0x490 [ 755.139328][T17431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.146310][T17431] page last free pid 13687 tgid 13682 stack trace: [ 755.163358][T17431] __free_frozen_pages+0x7fe/0x1180 [ 755.168767][T17431] vfree+0x1fd/0xb50 [ 755.190922][T17431] snd_dma_free_pages+0x51/0x70 [ 755.196246][T17431] snd_pcm_lib_free_pages+0x172/0x390 [ 755.201876][T17431] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 755.208294][T17431] snd_pcm_release_substream+0x5b/0x70 [ 755.214007][T17431] snd_pcm_oss_release+0x135/0x310 [ 755.219298][T17431] __fput+0x402/0xb70 [ 755.223561][T17431] task_work_run+0x150/0x240 [ 755.228424][T17431] exit_to_user_mode_loop+0xeb/0x110 [ 755.234128][T17431] do_syscall_64+0x3f6/0x490 [ 755.238957][T17431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.828671][T17605] ip6tnl0: entered allmulticast mode [ 765.868389][T17621] blktrace: Concurrent blktraces are not allowed on loop2 [ 767.803081][T17663] ip6tnl0: entered allmulticast mode [ 772.986700][T17734] sit0: entered allmulticast mode [ 773.638926][T17748] netlink: 'syz.6.2229': attribute type 4 has an invalid length. [ 773.944708][T17748] netlink: 'syz.6.2229': attribute type 1 has an invalid length. [ 778.371836][T17829] FAULT_INJECTION: forcing a failure. [ 778.371836][T17829] name failslab, interval 1, probability 0, space 0, times 0 [ 778.593114][T17829] CPU: 0 UID: 0 PID: 17829 Comm: syz.0.2248 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 778.593144][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.593156][T17829] Call Trace: [ 778.593163][T17829] [ 778.593170][T17829] dump_stack_lvl+0x16c/0x1f0 [ 778.593205][T17829] should_fail_ex+0x512/0x640 [ 778.593241][T17829] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 778.593274][T17829] should_failslab+0xc2/0x120 [ 778.593293][T17829] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 778.593323][T17829] ? security_file_alloc+0x34/0x2b0 [ 778.593353][T17829] security_file_alloc+0x34/0x2b0 [ 778.593379][T17829] init_file+0x93/0x4c0 [ 778.593399][T17829] alloc_empty_file+0x73/0x1e0 [ 778.593421][T17829] alloc_file_pseudo+0x13a/0x230 [ 778.593443][T17829] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 778.593465][T17829] ? alloc_fd+0x471/0x7d0 [ 778.593496][T17829] sock_alloc_file+0x50/0x210 [ 778.593529][T17829] __sys_socket+0x1c0/0x260 [ 778.593551][T17829] ? __pfx___sys_socket+0x10/0x10 [ 778.593576][T17829] ? do_user_addr_fault+0x843/0x1370 [ 778.593609][T17829] __x64_sys_socket+0x72/0xb0 [ 778.593630][T17829] ? lockdep_hardirqs_on+0x7c/0x110 [ 778.593662][T17829] do_syscall_64+0xcd/0x490 [ 778.593694][T17829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.593714][T17829] RIP: 0033:0x7fcbd3990847 [ 778.593730][T17829] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.593749][T17829] RSP: 002b:00007fcbd4772fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 778.593768][T17829] RAX: ffffffffffffffda RBX: 00007fcbd3bb5fa0 RCX: 00007fcbd3990847 [ 778.593781][T17829] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 778.593793][T17829] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 778.593805][T17829] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 778.593817][T17829] R13: 0000000000000000 R14: 00007fcbd3bb5fa0 R15: 00007ffd6a533a08 [ 778.593841][T17829] [ 780.251304][T17875] FAULT_INJECTION: forcing a failure. [ 780.251304][T17875] name failslab, interval 1, probability 0, space 0, times 0 [ 780.301937][T17875] CPU: 1 UID: 0 PID: 17875 Comm: syz.5.2257 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 780.301974][T17875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 780.301989][T17875] Call Trace: [ 780.301996][T17875] [ 780.302006][T17875] dump_stack_lvl+0x16c/0x1f0 [ 780.302057][T17875] should_fail_ex+0x512/0x640 [ 780.302096][T17875] ? __kvmalloc_node_noprof+0x124/0x620 [ 780.302138][T17875] should_failslab+0xc2/0x120 [ 780.302165][T17875] __kvmalloc_node_noprof+0x137/0x620 [ 780.302206][T17875] ? seq_read_iter+0x826/0x12c0 [ 780.302248][T17875] ? seq_read_iter+0x826/0x12c0 [ 780.302281][T17875] seq_read_iter+0x826/0x12c0 [ 780.302318][T17875] ? aa_file_perm+0x4d6/0xfb0 [ 780.302366][T17875] seq_read+0x39e/0x4e0 [ 780.302400][T17875] ? __pfx_seq_read+0x10/0x10 [ 780.302431][T17875] ? __lock_acquire+0xb8a/0x1c90 [ 780.302476][T17875] ? get_pid_task+0xfc/0x250 [ 780.302530][T17875] ? __pfx_seq_read+0x10/0x10 [ 780.302564][T17875] proc_reg_read+0x23d/0x330 [ 780.302606][T17875] ? __pfx_proc_reg_read+0x10/0x10 [ 780.302649][T17875] vfs_read+0x1e1/0xc60 [ 780.302694][T17875] ? __pfx___mutex_lock+0x10/0x10 [ 780.302735][T17875] ? __pfx_vfs_read+0x10/0x10 [ 780.302785][T17875] ? __fget_files+0x20e/0x3c0 [ 780.302832][T17875] ksys_read+0x12a/0x250 [ 780.302869][T17875] ? __pfx_ksys_read+0x10/0x10 [ 780.302915][T17875] do_syscall_64+0xcd/0x490 [ 780.302962][T17875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.302990][T17875] RIP: 0033:0x7fcd1198e929 [ 780.303012][T17875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.303038][T17875] RSP: 002b:00007fcd12764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.303070][T17875] RAX: ffffffffffffffda RBX: 00007fcd11bb5fa0 RCX: 00007fcd1198e929 [ 780.303088][T17875] RDX: 0000000000000ff7 RSI: 00002000000000c0 RDI: 0000000000000003 [ 780.303105][T17875] RBP: 00007fcd12764090 R08: 0000000000000000 R09: 0000000000000000 [ 780.303121][T17875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.303137][T17875] R13: 0000000000000000 R14: 00007fcd11bb5fa0 R15: 00007ffcd6102488 [ 780.303171][T17875] [ 783.242663][T17933] FAULT_INJECTION: forcing a failure. [ 783.242663][T17933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.264517][T17933] CPU: 0 UID: 0 PID: 17933 Comm: syz.4.2271 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 783.264553][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 783.264568][T17933] Call Trace: [ 783.264577][T17933] [ 783.264587][T17933] dump_stack_lvl+0x16c/0x1f0 [ 783.264634][T17933] should_fail_ex+0x512/0x640 [ 783.264679][T17933] _copy_to_iter+0x463/0x16f0 [ 783.264738][T17933] ? __pfx__copy_to_iter+0x10/0x10 [ 783.264788][T17933] ? find_held_lock+0x2b/0x80 [ 783.264818][T17933] ? ip6mr_vif_seq_stop+0x31/0xb0 [ 783.264854][T17933] ? mr_vif_seq_next+0x1bd/0x3c0 [ 783.264892][T17933] seq_read_iter+0xcf8/0x12c0 [ 783.264945][T17933] seq_read+0x39e/0x4e0 [ 783.264979][T17933] ? __pfx_seq_read+0x10/0x10 [ 783.265010][T17933] ? __lock_acquire+0xb8a/0x1c90 [ 783.265055][T17933] ? get_pid_task+0xfc/0x250 [ 783.265108][T17933] ? __pfx_seq_read+0x10/0x10 [ 783.265143][T17933] proc_reg_read+0x23d/0x330 [ 783.265184][T17933] ? __pfx_proc_reg_read+0x10/0x10 [ 783.265226][T17933] vfs_read+0x1e1/0xc60 [ 783.265272][T17933] ? __pfx___mutex_lock+0x10/0x10 [ 783.265314][T17933] ? __pfx_vfs_read+0x10/0x10 [ 783.265363][T17933] ? __fget_files+0x20e/0x3c0 [ 783.265413][T17933] ksys_read+0x12a/0x250 [ 783.265452][T17933] ? __pfx_ksys_read+0x10/0x10 [ 783.265503][T17933] do_syscall_64+0xcd/0x490 [ 783.265549][T17933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.265577][T17933] RIP: 0033:0x7fb1b138e929 [ 783.265599][T17933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.265627][T17933] RSP: 002b:00007fb1b2227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.265654][T17933] RAX: ffffffffffffffda RBX: 00007fb1b15b5fa0 RCX: 00007fb1b138e929 [ 783.265672][T17933] RDX: 0000000000000ff7 RSI: 00002000000000c0 RDI: 0000000000000003 [ 783.265694][T17933] RBP: 00007fb1b2227090 R08: 0000000000000000 R09: 0000000000000000 [ 783.265710][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.265726][T17933] R13: 0000000000000000 R14: 00007fb1b15b5fa0 R15: 00007fff23cf4388 [ 783.265761][T17933] [ 785.618397][ T30] audit: type=1800 audit(4294967405.777:22): pid=17975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2283" name="dbroot" dev="configfs" ino=61616 res=0 errno=0 [ 786.852016][T17994] binder: 17992:17994 unknown command 4294967282 [ 787.000800][T17994] binder: 17992:17994 ioctl c0306201 2000000000c0 returned -22 [ 788.251788][T18025] netlink: 'syz.4.2291': attribute type 1 has an invalid length. [ 788.407829][T18032] netlink: zone id is out of range [ 788.413051][T18032] netlink: zone id is out of range [ 788.438593][T18032] netlink: zone id is out of range [ 788.443752][T18032] netlink: zone id is out of range [ 788.499121][T18032] netlink: zone id is out of range [ 788.504662][T18032] netlink: zone id is out of range [ 788.573298][T18032] netlink: zone id is out of range [ 788.587964][T18032] netlink: zone id is out of range [ 788.593218][T18032] netlink: zone id is out of range [ 788.668811][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 788.835200][T18032] netlink: zone id is out of range [ 788.953807][T18038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2293'. [ 789.021856][T18038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.029539][T18038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.435849][T18038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.452335][T18038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.820121][T18064] netlink: 'syz.6.2299': attribute type 1 has an invalid length. [ 790.841662][T18067] netlink: 'syz.6.2299': attribute type 1 has an invalid length. [ 792.585393][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 792.621638][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 793.233417][ T30] audit: type=1800 audit(4294967413.383:23): pid=18112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2310" name="dbroot" dev="configfs" ino=62989 res=0 errno=0 [ 794.941700][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2315'. [ 795.237112][T16851] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 795.237162][T16851] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 795.253629][T16851] Bluetooth: hci2: Dropping invalid advertising data [ 795.261802][T16851] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 797.100729][T18182] FAULT_INJECTION: forcing a failure. [ 797.100729][T18182] name failslab, interval 1, probability 0, space 0, times 0 [ 797.131493][T18182] CPU: 0 UID: 0 PID: 18182 Comm: syz.0.2324 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 797.131542][T18182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 797.131554][T18182] Call Trace: [ 797.131561][T18182] [ 797.131569][T18182] dump_stack_lvl+0x16c/0x1f0 [ 797.131605][T18182] should_fail_ex+0x512/0x640 [ 797.131635][T18182] ? fs_reclaim_acquire+0xae/0x150 [ 797.131661][T18182] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 797.131690][T18182] should_failslab+0xc2/0x120 [ 797.131712][T18182] __kmalloc_noprof+0xd2/0x510 [ 797.131769][T18182] tomoyo_realpath_from_path+0xc2/0x6e0 [ 797.131806][T18182] ? tomoyo_profile+0x47/0x60 [ 797.131841][T18182] tomoyo_path_number_perm+0x245/0x580 [ 797.131865][T18182] ? tomoyo_path_number_perm+0x237/0x580 [ 797.131892][T18182] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 797.131921][T18182] ? find_held_lock+0x2b/0x80 [ 797.131992][T18182] ? find_held_lock+0x2b/0x80 [ 797.132013][T18182] ? hook_file_ioctl_common+0x145/0x410 [ 797.132042][T18182] ? __fget_files+0x20e/0x3c0 [ 797.132076][T18182] security_file_ioctl+0x9b/0x240 [ 797.132103][T18182] __x64_sys_ioctl+0xb7/0x210 [ 797.132131][T18182] do_syscall_64+0xcd/0x490 [ 797.132170][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.132192][T18182] RIP: 0033:0x7fcbd398e929 [ 797.132208][T18182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.132229][T18182] RSP: 002b:00007fcbd4774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.132249][T18182] RAX: ffffffffffffffda RBX: 00007fcbd3bb5fa0 RCX: 00007fcbd398e929 [ 797.132263][T18182] RDX: 0000000000000003 RSI: 00000000400454da RDI: 04000000000000c8 [ 797.132276][T18182] RBP: 00007fcbd4774090 R08: 0000000000000000 R09: 0000000000000000 [ 797.132290][T18182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.132302][T18182] R13: 0000000000000001 R14: 00007fcbd3bb5fa0 R15: 00007ffd6a533a08 [ 797.132329][T18182] [ 797.388940][T18182] ERROR: Out of memory at tomoyo_realpath_from_path. [ 798.298036][T18207] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 799.022170][T18208] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 800.515621][T18229] FAULT_INJECTION: forcing a failure. [ 800.515621][T18229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.567400][T18229] CPU: 0 UID: 0 PID: 18229 Comm: syz.0.2335 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 800.567441][T18229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.567458][T18229] Call Trace: [ 800.567467][T18229] [ 800.567477][T18229] dump_stack_lvl+0x16c/0x1f0 [ 800.567535][T18229] should_fail_ex+0x512/0x640 [ 800.567581][T18229] _copy_from_iter+0x29f/0x16f0 [ 800.567633][T18229] ? __pfx__copy_from_iter+0x10/0x10 [ 800.567694][T18229] ? rcu_is_watching+0x12/0xc0 [ 800.567725][T18229] ? trace_kmalloc+0x2b/0xd0 [ 800.567753][T18229] ? __kmalloc_noprof+0x242/0x510 [ 800.567816][T18229] kernfs_fop_write_iter+0x19a/0x510 [ 800.567854][T18229] vfs_write+0x6c4/0x1150 [ 800.567893][T18229] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 800.567922][T18229] ? __pfx___mutex_lock+0x10/0x10 [ 800.567960][T18229] ? __pfx_vfs_write+0x10/0x10 [ 800.568017][T18229] ksys_write+0x12a/0x250 [ 800.568053][T18229] ? __pfx_ksys_write+0x10/0x10 [ 800.568098][T18229] do_syscall_64+0xcd/0x490 [ 800.568138][T18229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.568163][T18229] RIP: 0033:0x7fcbd398e929 [ 800.568183][T18229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.568208][T18229] RSP: 002b:00007fcbd4753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.568232][T18229] RAX: ffffffffffffffda RBX: 00007fcbd3bb6080 RCX: 00007fcbd398e929 [ 800.568248][T18229] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 800.568263][T18229] RBP: 00007fcbd4753090 R08: 0000000000000000 R09: 0000000000000000 [ 800.568278][T18229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.568293][T18229] R13: 0000000000000000 R14: 00007fcbd3bb6080 R15: 00007ffd6a533a08 [ 800.568329][T18229] [ 801.354169][T18243] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 801.417260][T18243] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 801.459403][T18243] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 801.609781][T18247] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 801.725015][ T5850] ------------[ cut here ]------------ [ 801.730568][ T5850] ODEBUG: free active (active state 0) object: ffff88803519d318 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 801.780443][ T5850] WARNING: CPU: 1 PID: 5850 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 801.790402][ T5850] Modules linked in: [ 801.794438][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 801.806743][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.816914][ T5850] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 801.822775][ T5850] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 89 15 8c 4c 89 e6 48 c7 c7 40 7e 15 8c e8 1f 68 9c fc 90 <0f> 0b 90 90 58 83 05 d6 84 cb 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 801.842509][ T5850] RSP: 0018:ffffc900041ff768 EFLAGS: 00010286 [ 801.848675][ T5850] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 801.856752][ T5850] RDX: ffff888026913c00 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 801.864822][ T5850] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 801.872840][ T5850] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1584e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 801.881135][ T5850] R13: ffffffff8baff080 R14: ffffffff8a8fb0c0 R15: ffffc900041ff868 [ 801.889460][ T5850] FS: 0000000000000000(0000) GS:ffff888124821000(0000) knlGS:0000000000000000 [ 801.898532][ T5850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.905218][ T5850] CR2: 00007fd2155ff090 CR3: 0000000077e86000 CR4: 00000000003526f0 [ 801.913248][ T5850] Call Trace: [ 801.916636][ T5850] [ 801.919601][ T5850] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 801.925157][ T5850] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 801.931028][ T5850] debug_check_no_obj_freed+0x4b7/0x600 [ 801.936693][ T5850] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 801.942821][ T5850] ? rcu_is_watching+0x12/0xc0 [ 801.947681][ T5850] ? kmem_cache_free+0x2d1/0x4d0 [ 801.952685][ T5850] kfree+0x28f/0x4d0 [ 801.956691][ T5850] ? hci_release_dev+0x4d8/0x600 [ 801.961687][ T5850] hci_release_dev+0x4d8/0x600 [ 801.966917][ T5850] ? __pfx_hci_release_dev+0x10/0x10 [ 801.972258][ T5850] ? rcu_is_watching+0x12/0xc0 [ 801.977130][ T5850] ? kfree+0x24f/0x4d0 [ 801.981587][ T5850] bt_host_release+0x6a/0xb0 [ 801.986497][ T5850] ? __pfx_bt_host_release+0x10/0x10 [ 801.991837][ T5850] device_release+0xa4/0x240 [ 801.996559][ T5850] kobject_put+0x1e7/0x5a0 [ 802.001035][ T5850] ? __pfx_vhci_release+0x10/0x10 [ 802.006147][ T5850] put_device+0x1f/0x30 [ 802.010367][ T5850] vhci_release+0x81/0xf0 [ 802.014840][ T5850] __fput+0x402/0xb70 [ 802.018876][ T5850] task_work_run+0x150/0x240 [ 802.023526][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 802.028760][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 802.034018][ T5850] do_exit+0x86c/0x2bd0 [ 802.038301][ T5850] ? __pfx_do_exit+0x10/0x10 [ 802.042975][ T5850] ? do_raw_spin_lock+0x12c/0x2b0 [ 802.048382][ T5850] ? find_held_lock+0x2b/0x80 [ 802.053121][ T5850] do_group_exit+0xd3/0x2a0 [ 802.057761][ T5850] get_signal+0x2673/0x26d0 [ 802.062424][ T5850] ? __pfx_get_signal+0x10/0x10 [ 802.067820][ T5850] arch_do_signal_or_restart+0x8f/0x790 [ 802.073440][ T5850] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 802.080095][ T5850] ? ksys_read+0x1ac/0x250 [ 802.085266][ T5850] ? __pfx_ksys_read+0x10/0x10 [ 802.090104][ T5850] exit_to_user_mode_loop+0x84/0x110 [ 802.096187][ T5850] do_syscall_64+0x3f6/0x490 [ 802.100836][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.107162][ T5850] RIP: 0033:0x7fcbd398d33c [ 802.111643][ T5850] Code: Unable to access opcode bytes at 0x7fcbd398d312. [ 802.119054][ T5850] RSP: 002b:00007ffd6a533d60 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 802.127670][ T5850] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fcbd398d33c [ 802.135705][ T5850] RDX: 0000000000000030 RSI: 00007ffd6a533e20 RDI: 00000000000000f9 [ 802.143730][ T5850] RBP: 00007ffd6a533dcc R08: 0000000000000000 R09: 0079746972756365 [ 802.151795][ T5850] R10: 00007fcbd3b827e0 R11: 0000000000000246 R12: 0000000000000258 [ 802.159845][ T5850] R13: 00000000000927c0 R14: 00000000000c378c R15: 00007ffd6a533e20 [ 802.167946][ T5850] [ 802.171011][ T5850] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 802.178321][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 802.190523][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 802.200650][ T5850] Call Trace: [ 802.203968][ T5850] [ 802.206932][ T5850] dump_stack_lvl+0x3d/0x1f0 [ 802.211579][ T5850] panic+0x71c/0x800 [ 802.215547][ T5850] ? __pfx_panic+0x10/0x10 [ 802.220025][ T5850] ? show_trace_log_lvl+0x29b/0x3e0 [ 802.225300][ T5850] ? check_panic_on_warn+0x1f/0xb0 [ 802.230508][ T5850] ? debug_print_object+0x1a2/0x2b0 [ 802.235766][ T5850] check_panic_on_warn+0xab/0xb0 [ 802.240747][ T5850] __warn+0xf6/0x3c0 [ 802.244694][ T5850] ? debug_print_object+0x1a2/0x2b0 [ 802.249919][ T5850] report_bug+0x3c3/0x580 [ 802.254296][ T5850] ? debug_print_object+0x1a2/0x2b0 [ 802.259547][ T5850] handle_bug+0x184/0x210 [ 802.263910][ T5850] exc_invalid_op+0x17/0x50 [ 802.268451][ T5850] asm_exc_invalid_op+0x1a/0x20 [ 802.273335][ T5850] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 802.279175][ T5850] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 89 15 8c 4c 89 e6 48 c7 c7 40 7e 15 8c e8 1f 68 9c fc 90 <0f> 0b 90 90 58 83 05 d6 84 cb 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 802.298809][ T5850] RSP: 0018:ffffc900041ff768 EFLAGS: 00010286 [ 802.304912][ T5850] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 802.312904][ T5850] RDX: ffff888026913c00 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 802.320980][ T5850] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 802.328966][ T5850] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1584e0 [ 802.336954][ T5850] R13: ffffffff8baff080 R14: ffffffff8a8fb0c0 R15: ffffc900041ff868 [ 802.344948][ T5850] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 802.350452][ T5850] ? __warn_printk+0x198/0x350 [ 802.355256][ T5850] ? __warn_printk+0x1a5/0x350 [ 802.360072][ T5850] ? debug_print_object+0x1a1/0x2b0 [ 802.365310][ T5850] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 802.370817][ T5850] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 802.376651][ T5850] debug_check_no_obj_freed+0x4b7/0x600 [ 802.382223][ T5850] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 802.388316][ T5850] ? rcu_is_watching+0x12/0xc0 [ 802.394669][ T5850] ? kmem_cache_free+0x2d1/0x4d0 [ 802.399643][ T5850] kfree+0x28f/0x4d0 [ 802.403573][ T5850] ? hci_release_dev+0x4d8/0x600 [ 802.408556][ T5850] hci_release_dev+0x4d8/0x600 [ 802.413350][ T5850] ? __pfx_hci_release_dev+0x10/0x10 [ 802.418668][ T5850] ? rcu_is_watching+0x12/0xc0 [ 802.423453][ T5850] ? kfree+0x24f/0x4d0 [ 802.427557][ T5850] bt_host_release+0x6a/0xb0 [ 802.432194][ T5850] ? __pfx_bt_host_release+0x10/0x10 [ 802.437529][ T5850] device_release+0xa4/0x240 [ 802.442170][ T5850] kobject_put+0x1e7/0x5a0 [ 802.446647][ T5850] ? __pfx_vhci_release+0x10/0x10 [ 802.451743][ T5850] put_device+0x1f/0x30 [ 802.455942][ T5850] vhci_release+0x81/0xf0 [ 802.460326][ T5850] __fput+0x402/0xb70 [ 802.464354][ T5850] task_work_run+0x150/0x240 [ 802.468990][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 802.474141][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 802.479372][ T5850] do_exit+0x86c/0x2bd0 [ 802.483592][ T5850] ? __pfx_do_exit+0x10/0x10 [ 802.488217][ T5850] ? do_raw_spin_lock+0x12c/0x2b0 [ 802.493307][ T5850] ? find_held_lock+0x2b/0x80 [ 802.498039][ T5850] do_group_exit+0xd3/0x2a0 [ 802.502576][ T5850] get_signal+0x2673/0x26d0 [ 802.507110][ T5850] ? __pfx_get_signal+0x10/0x10 [ 802.511998][ T5850] arch_do_signal_or_restart+0x8f/0x790 [ 802.517578][ T5850] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 802.523760][ T5850] ? ksys_read+0x1ac/0x250 [ 802.528210][ T5850] ? __pfx_ksys_read+0x10/0x10 [ 802.533018][ T5850] exit_to_user_mode_loop+0x84/0x110 [ 802.538337][ T5850] do_syscall_64+0x3f6/0x490 [ 802.542963][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.548874][ T5850] RIP: 0033:0x7fcbd398d33c [ 802.553321][ T5850] Code: Unable to access opcode bytes at 0x7fcbd398d312. [ 802.560355][ T5850] RSP: 002b:00007ffd6a533d60 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 802.568800][ T5850] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fcbd398d33c [ 802.576786][ T5850] RDX: 0000000000000030 RSI: 00007ffd6a533e20 RDI: 00000000000000f9 [ 802.584772][ T5850] RBP: 00007ffd6a533dcc R08: 0000000000000000 R09: 0079746972756365 [ 802.592764][ T5850] R10: 00007fcbd3b827e0 R11: 0000000000000246 R12: 0000000000000258 [ 802.600763][ T5850] R13: 00000000000927c0 R14: 00000000000c378c R15: 00007ffd6a533e20 [ 802.608765][ T5850] [ 802.612181][ T5850] Kernel Offset: disabled [ 802.616527][ T5850] Rebooting in 86400 seconds..