last executing test programs: 9.640322083s ago: executing program 3 (id=2490): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) getegid() write$auto(0xffffffffffffffff, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) write$auto(0xffffffffffffffff, 0x0, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x1, 0x4000c, 0x9, 0x948b, 0x7, 0x15f4da0a, 0x8000003, 0xf, 0x8, 0x80000001, 0xb, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x1, 0x948b, 0x2000000000005, 0x15f4da0a, 0x6, 0x5, 0x6, 0x8000001f, 0x800000000000007, 0x3, 0xfffffffffffffffc, 0x2, 0x3]}, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x34204, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sysfs$auto(0x2, 0xa, 0xb) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x9, 0x800, 0x1}, &(0x7f0000000100)=0x6, &(0x7f00000001c0)=0x33, 0x0, 0xae5, 0x0, 0x5, 0x7, 0x200, 0x3, 0xf1, @raw=0x7649, @raw=0x5}) 9.075681745s ago: executing program 1 (id=2492): pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) close_range$auto(0xffffffffffffffff, r0, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x4d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) socket(0x1e, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x0, 0x40, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r1 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)=@token_create={0x10, r1}, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.736030377s ago: executing program 1 (id=2495): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)=""/216, 0xd8) prctl$auto(0x59616d61, 0x7, 0x1, 0x8, 0xfffffffffffffffb) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) msgctl$auto_IPC_STAT(0x25, 0x2, &(0x7f0000000180)={{0x7, 0xee00, 0x0, 0x7fffffff, 0x7fff, 0x5}, &(0x7f0000000000)=0x6, 0x0, 0x2, 0xff, 0x506, 0x2, 0x10001, 0x3b5d, 0x7ff, 0x2, @raw=0x8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x80002, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) socket(0x10, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x40404c8) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) sendfile$auto(r4, r4, 0x0, 0x1000010000001fd) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0xfffffffffffff54a, 0xffb, 0x8000000008011, 0x3, 0x0) io_uring_setup$auto(0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) 7.559465072s ago: executing program 2 (id=2496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000001140)={&(0x7f00000000c0)={0x14, r1, 0xb81, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 7.417928226s ago: executing program 2 (id=2497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x14, r1, 0xb81, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (fail_nth: 4) 6.774922389s ago: executing program 3 (id=2498): socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x33, 0x0, 0x0) 6.774001751s ago: executing program 2 (id=2499): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808) r4 = socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r4, 0x11c, 0x2, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) socket(0x10, 0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 6.506228512s ago: executing program 0 (id=2500): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x4004) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r4, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0xffffff9e, 0x0, 0x4000000}, 0x10) 6.435818789s ago: executing program 1 (id=2501): prctl$auto(0x1000000001c, 0x5, 0x8, 0x8, 0x80001) setfsuid$auto(0xee00) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) getsockopt$auto(0xffffffffffffffff, 0xd, 0x23, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x2000c880) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r4 = gettid() r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r5, 0x90006442, r5) process_vm_writev$auto(r4, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)=@link_create={@map_fd, @target_fd, 0x4, 0x3, @uprobe_multi={0x2, 0x7, 0x7, 0x3d, 0x2, 0x100, r4}}, 0xfffffff8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 6.300079965s ago: executing program 3 (id=2502): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0xd, 0x0) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x9b2, 0x1}, 0x2, 0x0, 0x0, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bpq2/mtu\x00', 0x143202, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000021, 0x400, 0x9}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000440)="bd9a", 0x2) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 5.658122599s ago: executing program 3 (id=2503): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, &(0x7f00000003c0)=0x4) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000040), 0x80901, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r1, 0x50009404, &(0x7f0000000080)={@inferred=r0, "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"}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x6, 0x2, 0x2) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0x3, 0x89e1, 0x91) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r3 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) ioperm$auto(0x2, 0x8000, 0x2b325536) epoll_create1$auto(0xe09) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x200402, 0x0) ioctl$auto(r0, 0x4, r6) 5.133612716s ago: executing program 0 (id=2504): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r1, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c0ae2c7", 0x30) ioctl$auto_SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000040)) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000240)={0xb, 0x3, 0x1, 0x9, 0x4, 0x9, r1, [0x4, 0x4, 0x4], {0x8, 0x13, 0xcf, 0x0, 0xfffff801, 0x6, 0x6, 0x6, 0x6}, {0x80, 0x8, 0x4, 0x5a1c, 0x0, 0x2, 0x8, 0x4, 0x3}}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8) fchmod$auto(r3, 0x9) setreuid$auto(0x4, 0x8) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044810}, 0x4c8d5) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, 0x0, 0x4d) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r5 = gettid() process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) 3.609940491s ago: executing program 0 (id=2505): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x30, 0x1, 0x0, 0x1, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0x0, 0xd, 0x101) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) futex$auto(0x0, 0xb, 0x5, &(0x7f00000000c0)={0x1, 0x9}, &(0x7f0000000100)=0x6, 0x7ff) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0xcf}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xb}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) writev$auto(r2, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) sendmsg$auto(r0, 0x0, 0xfff) capset$auto(0x0, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6c800, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) 3.503497554s ago: executing program 1 (id=2506): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setuid$auto(0xe) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0xa) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x2, 0x0) sched_setaffinity$auto(r0, 0x4, &(0x7f0000000240)=0x6) move_pages$auto(r0, 0x8, &(0x7f0000000040)=&(0x7f0000000000)="8d7a9b82b2bd25dee3b27a60a93cb2c0d8c24d0e1e3360527ae6d9f8d5fadcdc", &(0x7f00000000c0)=0x2, &(0x7f0000000180)=0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x2, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x6a200, 0x0) mmap$auto(0x6000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) flock$auto(0xffffffffffffffff, 0x2) flock$auto(0xffffffffffffffff, 0x2) bind$auto(0x3, 0x0, 0x406a) bind$auto(0x3, 0x0, 0x6a) madvise$auto(0x0, 0x200007, 0x19) 3.406745681s ago: executing program 3 (id=2507): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83", 0x9) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r1, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x29, 0x2, 0x0) setresuid$auto(0x0, 0x2, 0x0) ioctl$auto(r2, 0x8993, 0x24) ustat$auto(0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x1f00000000000000, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) r4 = bpf$auto(0x5, 0x0, 0x102) getpid() r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3b8, 0x0, 0x708, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_WME={0x44, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x10}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x84}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x83, 0xcd, "437866fb8f355c1bb8983d1f357d754cf4f9ce5bfe0b19b5cf3ed3c0ec75245a2ffb4e59485c459c46f68c723a1462fc79a0a8ef93337c4eeb4b10626a830d1e8fb77f9efff2c89011ad2aa45b04a7838d7e7a7219610e9b941ac25c37ff930a04be6d0a4f91131149faa08d6c5292c8dedeac49ff838db3c9f227233d2aa1"}, @NL80211_ATTR_NAN_FUNC={0x28a, 0xf0, 0x0, 0x1, [@nested={0x180, 0x76, 0x0, 0x1, [@nested={0x4, 0x102}, @generic="343d3d1aecef95fc34b15e95063490de4415ea116dbde65820cfd9dfc839a2c6e4", @typed={0x8, 0x41, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x1a}, @nested={0x4, 0x6}, @generic="a929c9314659dbbc6099a5124523092e49ff265ad45d2c554d36a96d1ba0d498c0532d278e022dae2e48b17d2537a1e71ce7a12c7dc1fb6d13da0d3f31047b2e5dea25dafee52bebcadeda59a44c465f76e80627054d40b5ab275904ca4a05f04152976310a219c782fb8ce648016fd8bc8286b845f3d97771edf6eada4f779a7ab83702e574b07e0d0be04f5c67b6205d0dc56b4d4ff92fc25213b41fcc66eda447edc03888b33513a8b457eb4d11f1b1856d63cd656f410e80fc8428334bd45801762702a641788f84356adb582ec86fe091fb424c5bf0b22edea32ed98fa1ee8d9c76ac6a52bb33888fd6ed8bf9935271f08168f2daa8a584", @generic="a23efd583ba26be53e937e1dda80a05081f85143807002cae8b739679f3234161d445c124f484b29f63af367a7a458c1fd582ce2144fcc660c", @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@private2}]}, @nested={0xc, 0x12f, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @fd}]}, @generic="7e7c067aee3a412bf3613fa8687ca3de562e3327196d41010702a72ba9fd839a3196fd722ee51e5fd40c5e9874cae7115ae524fe771b8f02d7b4b93747c00a1e94f72795190001164a6f39ef3422c0c65aa57e47284e80cd71c8b20ae2218f86ca6e336ec74ddf61f44f0ccffc56651b3890f5f3ac103d045b4041bd7b5217883c5a087e6f0a10b03715901a10626f56a7406577e4b32a3e5e6ab224a84afc02656ed00fd12757c4516dce01f99452ff6ad391da4b676cc2852f4f691548967f3b5b95562f76cba2bceceac4a37f5e3efef8ff22b6df67fc50d4", @nested={0x20, 0x3, 0x0, 0x1, [@generic="206d63d2e63dc9371bf8c4b08e5b9879e035b9befb02f21704e44905"]}]}, @NL80211_ATTR_FILS_KEK={0x17, 0xf2, "ad590482ae584618a8f36a7164db52c04757a1"}, @NL80211_ATTR_PMK={0x1a, 0xfe, "a67f67ffec1d10c0c9804df2e1303e263ac7c60eb590"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6213}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "0998fedd21372ef7e55571086c97a4ed"}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) fcntl$auto(0x3, 0x4, 0xa553) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r6, 0x0, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 3.219747716s ago: executing program 1 (id=2508): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) getegid() write$auto(0xffffffffffffffff, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) write$auto(0xffffffffffffffff, 0x0, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x1, 0x4000c, 0x9, 0x948b, 0x7, 0x15f4da0a, 0x8000003, 0xf, 0x8, 0x80000001, 0xb, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x1, 0x948b, 0x2000000000005, 0x15f4da0a, 0x6, 0x5, 0x6, 0x8000001f, 0x800000000000007, 0x3, 0xfffffffffffffffc, 0x2, 0x3]}, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x34204, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sysfs$auto(0x2, 0xa, 0xb) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x9, 0x800, 0x1}, &(0x7f0000000100)=0x6, &(0x7f00000001c0)=0x33, 0x0, 0xae5, 0x0, 0x5, 0x7, 0x200, 0x3, 0xf1, @raw=0x7649, @raw=0x5}) 2.515399035s ago: executing program 2 (id=2509): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) settimeofday$auto(&(0x7f0000000340)={0x2, 0xffffffffffffad6b}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x4e, 0x0, 0x9, 0x0, 0x20000000a0f1, 0x10b}, 0x800008}, 0x1, 0x20000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) 2.485131127s ago: executing program 0 (id=2510): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x9) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x184b01, 0x1f) 2.335029489s ago: executing program 2 (id=2511): r0 = socket(0xa, 0x1, 0x84) socket(0x10, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xffff59e7, 0x3, 0x100, 0x9df, 0x7fffffff, 0x3, 0x7, 0x3, 0xcb, 0x6b7, 0x0, 0xb4, 0x81, 0x8, 0x8, 0x101, 0x10001, 0x4, 0x100000001, 0x0, 0x0, 0x7, 0x7, 0x0, 0x10001, 0x40, 0x8, 0xf, 0x6, 0x10, [0x7fffffffffffffff, 0x1002, 0xffff, 0x1000003, 0x7, 0x200000003, 0x10000, 0x5, 0xe3f8, 0x9, 0x180, 0x1, 0x1000, 0x4, 0x4, 0x1, 0x100, 0x8, 0x9, 0x8000, 0xd1c7, 0x3, 0x8, 0xf36, 0x0, 0x6ba3, 0x3, 0x6, 0x7, 0x55ac, 0xbbb, 0xa, 0xfffffffffffffffd, 0x7, 0xa00, 0xfae9, 0x95, 0x0, 0x9, 0xfffffffffffffbff, 0x5, 0x7fff, 0x6], "d2fe"}, 0x4, 0xf) io_uring_setup$auto(0x59, &(0x7f0000000180)={0x7ffffffc, 0x1000008, 0x3000, 0x6, 0x7, 0x400a, r0, [0x0, 0xfffffffc, 0x10071], {0x6, 0x6, 0x8c48, 0x29b, 0x10001, 0x80, 0x104, 0x9, 0x6}, {0x4, 0x5, 0x1, 0x85, 0x2, 0x9, 0x76c5, 0xe, 0x1}}) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000d40)=""/16, 0x10) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') select$auto(0x8, 0x0, &(0x7f0000000340)={[0x9, 0x8000, 0xfffffffffffffffd, 0xd7d, 0x4, 0x9, 0x100, 0x8, 0x9, 0x7, 0x3, 0x4, 0x847, 0xffffffff7fffffff, 0x401, 0x6]}, 0x0, 0x0) open(0x0, 0x22240, 0x154) poll$auto(&(0x7f0000000480)={0xffffffffffffffff, 0xffff, 0x29}, 0x3, 0x8) unshare$auto(0x40000080) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) ioctl$auto(r2, 0x64c9, r2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x6e340, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x8, 0x2, 0xfffffffd) r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) bind$auto(r3, 0x0, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) 2.045612993s ago: executing program 3 (id=2512): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto_evm_xattr_ops_evm_secfs(r1, &(0x7f0000000240)="dc4246ea636b0381c1b3a7f023dd17fd3a52338712ffe933ec81a3dfb8cd68c2e642f46fd6d97f431a7c735cb51d9654a600628299cd063c5abb79895d87a86ed84186d31422f012d2f3ed86beaee0da3f90c31c53ce9430e0f88572f4", 0x5d) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240, 0x13) statx$auto(r2, &(0x7f0000004b00)='\x00', 0xbf02, 0x3, 0x0) socket(0xa, 0x1, 0x100) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x23, 0x6, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000001, 0x5, 0x5, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readahead$auto(0xffffffffffffffff, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x2, 0x78, 0x4, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video19\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff) init_module$auto(0x0, 0xffff9, 0x0) futex_wait$auto(0x0, 0x6, 0x2, 0x6, 0x0, 0xc3a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) (fail_nth: 4) madvise$auto(0x0, 0x2000000080000001, 0x3) 1.468119989s ago: executing program 0 (id=2513): syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r0, &(0x7f0000000640)=""/188, 0xbc) setsockopt$auto(0x4, 0x29, 0x35, 0x0, 0x10000) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000340)=0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) timerfd_create$auto(0x3, 0x677) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x570, 0x400, 0x2}]}) fstatfs$auto(0x3, 0x0) ioctl$auto(r2, 0x4b67, 0x1) 1.22797189s ago: executing program 2 (id=2514): mmap$auto(0x0, 0xfff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x0, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffff, 0xffffffffffff0001, 0x80, 0xffffffffffffffff, 0x100, 0x1}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x40000008000) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x204000000000df, 0x1000eb1, 0x404, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$auto(r2, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x30, 0x0, 0x56b) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x2b, 0x1, 0x1) select$auto(0x5, &(0x7f0000000200)={[0xffffffffffffffff, 0x7, 0x80000001, 0x2, 0x7fffffffffffffff, 0x68a74cb8, 0x7, 0x1, 0x4, 0x6, 0x9, 0x1, 0x8, 0xffffffffffff3f13, 0xfffffffffffffffd, 0x2]}, &(0x7f0000000280)={[0x5bcc, 0x6, 0x2, 0x1ff, 0x58dc, 0x7, 0x8, 0x8, 0x80000000, 0x0, 0x10, 0x800000000000ff, 0x81d, 0x70, 0x80000001, 0x9]}, &(0x7f0000000300)={[0x7fffffff, 0x72e, 0x54, 0x5, 0x2, 0x3, 0x3, 0xfffffffffffffffb, 0x3, 0x4f5e, 0x45c, 0x9, 0x2, 0x2, 0xee4d, 0x5]}, &(0x7f00000000c0)={0x7, 0x8001}) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c0a, 0x0) 798.883126ms ago: executing program 0 (id=2515): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83", 0x9) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r1, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x1f00000000000000, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (fail_nth: 4) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, 0x0, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 0s ago: executing program 1 (id=2516): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, &(0x7f00000003c0)=0x4) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000040), 0x80901, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r1, 0x50009404, &(0x7f0000000080)={@inferred=r0, "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"}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x6, 0x2, 0x2) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0x3, 0x89e1, 0x91) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r3 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) ioperm$auto(0x2, 0x8000, 0x2b325536) epoll_create1$auto(0xe09) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x200402, 0x0) ioctl$auto(r0, 0x4, r6) kernel console output (not intermixed with test programs): 1] [U] [ 369.644281][ T9591] [U] [ 369.647182][ T9591] [U] [ 369.650082][ T9591] [U] [ 369.680826][ T9591] [U] [ 369.683565][ T9591] [U] [ 369.686248][ T9591] [U] [ 369.688928][ T9591] [U] [ 369.784493][ T9591] [U] [ 369.787247][ T9591] [U] [ 369.789960][ T9591] [U] [ 369.792643][ T9591] [U] [ 369.815190][ T9591] [U] [ 369.817923][ T9591] [U] [ 369.820611][ T9591] [U] [ 369.823296][ T9591] [U] [ 369.876593][ T9591] [U] [ 369.880244][ T9591] [U] [ 369.883028][ T9591] [U] [ 369.885762][ T9591] [U] [ 369.925193][ T9591] [U] [ 369.928085][ T9591] [U] [ 369.930851][ T9591] [U] [ 369.933553][ T9591] [U] [ 370.024162][ T9591] [U] [ 370.026986][ T9591] [U] [ 370.029682][ T9591] [U] [ 370.032453][ T9591] [U] [ 370.266264][ T9591] [U] [ 370.268987][ T9591] [U] [ 370.271661][ T9591] [U] [ 370.274331][ T9591] [U] [ 370.332367][ T9591] [U] [ 370.335197][ T9591] [U] [ 370.337879][ T9591] [U] [ 370.340653][ T9591] [U] [ 370.381087][ T9591] [U] [ 370.383861][ T9591] [U] [ 370.386692][ T9591] [U] [ 370.389587][ T9591] [U] [ 370.499308][ T9591] [U] [ 370.502078][ T9591] [U] [ 370.504852][ T9591] [U] [ 370.507545][ T9591] [U] [ 370.539792][ T9591] [U] [ 371.590597][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.597089][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.985423][ T9733] bridge0: port 3(netdevsim1) entered blocking state [ 377.003959][ T9733] bridge0: port 3(netdevsim1) entered disabled state [ 377.027721][ T9733] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 377.037643][ T9733] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 377.045433][ T9733] bridge0: port 3(netdevsim1) entered blocking state [ 377.052241][ T9733] bridge0: port 3(netdevsim1) entered forwarding state [ 378.590652][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.600757][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.735913][ T30] audit: type=1804 audit(1750965368.963:11): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.777" name="/newroot/196/file0" dev="tmpfs" ino=1065 res=1 errno=0 [ 380.839135][ T30] audit: type=1800 audit(1750965368.963:12): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.777" name="file0" dev="tmpfs" ino=1065 res=0 errno=0 [ 381.099263][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 381.110708][ T9833] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 381.119159][ T9833] netlink: 13 bytes leftover after parsing attributes in process `syz.3.785'. [ 382.540110][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 382.575371][ T9859] netlink: 354 bytes leftover after parsing attributes in process `syz.0.792'. [ 382.615180][ T9861] nbd: must specify at least one socket [ 384.540808][ T9897] Invalid ELF header magic: != ELF [ 384.853684][ T9897] could not allocate digest TFM handle [ 385.484765][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 385.503088][ T9912] netlink: 354 bytes leftover after parsing attributes in process `syz.0.805'. [ 388.685630][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 388.737321][ T9973] netlink: 354 bytes leftover after parsing attributes in process `syz.2.819'. [ 391.638370][T10018] FAULT_INJECTION: forcing a failure. [ 391.638370][T10018] name failslab, interval 1, probability 0, space 0, times 0 [ 391.666072][T10018] CPU: 0 UID: 0 PID: 10018 Comm: syz.1.828 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 391.666112][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.666129][T10018] Call Trace: [ 391.666138][T10018] [ 391.666149][T10018] dump_stack_lvl+0x16c/0x1f0 [ 391.666196][T10018] should_fail_ex+0x512/0x640 [ 391.666245][T10018] ? __kmalloc_noprof+0xbf/0x510 [ 391.666287][T10018] ? snd_pcm_plugin_build+0x434/0x650 [ 391.666318][T10018] should_failslab+0xc2/0x120 [ 391.666344][T10018] __kmalloc_noprof+0xd2/0x510 [ 391.666381][T10018] ? __mutex_unlock_slowpath+0x91/0x6a0 [ 391.666427][T10018] snd_pcm_plugin_build+0x434/0x650 [ 391.666457][T10018] ? snd_pcm_plugin_build+0x4b7/0x650 [ 391.666489][T10018] snd_pcm_plugin_build_linear+0x29d/0x850 [ 391.666527][T10018] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 391.666567][T10018] ? snd_pcm_hw_params+0xcd/0x1b40 [ 391.666604][T10018] snd_pcm_plug_format_plugins+0x614/0x1430 [ 391.666642][T10018] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 391.666681][T10018] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 391.666724][T10018] snd_pcm_oss_change_params_locked+0x2dec/0x3a30 [ 391.666782][T10018] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 391.666845][T10018] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 391.666883][T10018] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 391.666917][T10018] ? hook_file_ioctl_common+0x145/0x410 [ 391.666947][T10018] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 391.666983][T10018] ? __fget_files+0x20e/0x3c0 [ 391.667029][T10018] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 391.667063][T10018] __x64_sys_ioctl+0x18b/0x210 [ 391.667097][T10018] do_syscall_64+0xcd/0x490 [ 391.667137][T10018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.667164][T10018] RIP: 0033:0x7f838198e929 [ 391.667186][T10018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.667281][T10018] RSP: 002b:00007f8382768038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.667309][T10018] RAX: ffffffffffffffda RBX: 00007f8381bb6080 RCX: 00007f838198e929 [ 391.667327][T10018] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 391.667342][T10018] RBP: 00007f8381a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 391.667358][T10018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.667374][T10018] R13: 0000000000000000 R14: 00007f8381bb6080 R15: 00007ffce90c0d28 [ 391.667413][T10018] [ 391.921282][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.459803][T10104] FAULT_INJECTION: forcing a failure. [ 397.459803][T10104] name fail_futex, interval 1, probability 0, space 0, times 0 [ 397.519083][T10104] CPU: 1 UID: 0 PID: 10104 Comm: syz.2.847 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 397.519122][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.519136][T10104] Call Trace: [ 397.519146][T10104] [ 397.519156][T10104] dump_stack_lvl+0x16c/0x1f0 [ 397.519199][T10104] should_fail_ex+0x512/0x640 [ 397.519239][T10104] get_futex_key+0x1d0/0x1540 [ 397.519270][T10104] ? find_held_lock+0x2b/0x80 [ 397.519295][T10104] ? __pfx_get_futex_key+0x10/0x10 [ 397.519325][T10104] ? __mutex_trylock_common+0xe9/0x250 [ 397.519366][T10104] futex_wake+0xea/0x530 [ 397.519413][T10104] ? __pfx_futex_wake+0x10/0x10 [ 397.519444][T10104] ? __lock_acquire+0xb8a/0x1c90 [ 397.519492][T10104] do_futex+0x1e3/0x350 [ 397.519522][T10104] ? __pfx_do_futex+0x10/0x10 [ 397.519549][T10104] ? __might_fault+0xe3/0x190 [ 397.519594][T10104] mm_release+0x24e/0x300 [ 397.519676][T10104] do_exit+0x68b/0x2bd0 [ 397.519714][T10104] ? __pfx_do_exit+0x10/0x10 [ 397.519750][T10104] ? do_raw_spin_lock+0x12c/0x2b0 [ 397.519785][T10104] ? find_held_lock+0x2b/0x80 [ 397.519815][T10104] do_group_exit+0xd3/0x2a0 [ 397.519849][T10104] get_signal+0x2673/0x26d0 [ 397.519881][T10104] ? __pfx___up_read+0x10/0x10 [ 397.519923][T10104] ? __pfx_get_signal+0x10/0x10 [ 397.519951][T10104] ? do_futex+0x122/0x350 [ 397.519981][T10104] ? __pfx_do_futex+0x10/0x10 [ 397.520014][T10104] arch_do_signal_or_restart+0x8f/0x790 [ 397.520046][T10104] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 397.520086][T10104] ? xfd_validate_state+0x61/0x180 [ 397.520116][T10104] ? __pfx_do_writev+0x10/0x10 [ 397.520156][T10104] exit_to_user_mode_loop+0x84/0x110 [ 397.520197][T10104] do_syscall_64+0x3f6/0x490 [ 397.520237][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.520265][T10104] RIP: 0033:0x7f993a38e929 [ 397.520288][T10104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.520312][T10104] RSP: 002b:00007f99381f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 397.520336][T10104] RAX: fffffffffffffe00 RBX: 00007f993a5b5fa8 RCX: 00007f993a38e929 [ 397.520354][T10104] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f993a5b5fa8 [ 397.520369][T10104] RBP: 00007f993a5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 397.520385][T10104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f993a5b5fac [ 397.520400][T10104] R13: 0000000000000000 R14: 00007ffec2bd7af0 R15: 00007ffec2bd7bd8 [ 397.520436][T10104] [ 400.356031][T10151] [U]  [ 400.358889][T10151] [U] [ 400.361620][T10151] [U] [ 400.364449][T10151] [U] [ 400.396146][T10151] [U] [ 400.398926][T10151] [U] [ 400.401670][T10151] [U] [ 400.404513][T10151] [U] [ 400.426147][T10151] [U] [ 400.428962][T10151] [U] [ 400.431698][T10151] [U] [ 400.434518][T10151] [U] [ 400.466054][T10151] [U] [ 400.468839][T10151] [U] [ 400.471568][T10151] [U] [ 400.474292][T10151] [U] [ 400.488210][T10151] [U] [ 400.491130][T10151] [U] [ 400.493949][T10151] [U] [ 400.496657][T10151] [U] [ 400.589419][T10151] [U] [ 400.592229][T10151] [U] [ 400.595023][T10151] [U] [ 400.597756][T10151] [U] [ 400.657509][T10151] [U] [ 400.660306][T10151] [U] [ 400.663015][T10151] [U] [ 400.665734][T10151] [U] [ 400.702765][T10151] [U] [ 400.705553][T10151] [U] [ 400.708310][T10151] [U] [ 400.711054][T10151] [U] [ 400.767978][T10151] [U] [ 400.770751][T10151] [U] [ 400.773488][T10151] [U] [ 400.776226][T10151] [U] [ 400.824468][T10151] [U] [ 400.827247][T10151] [U] [ 400.829977][T10151] [U] [ 400.832702][T10151] [U] [ 400.880655][T10151] [U] [ 400.883440][T10151] [U] [ 400.886177][T10151] [U] [ 400.888921][T10151] [U] [ 400.953042][T10151] [U] [ 400.955830][T10151] [U] [ 400.958990][T10151] [U] [ 400.961742][T10151] [U] [ 401.046164][T10151] [U] [ 401.048945][T10151] [U] [ 401.051666][T10151] [U] [ 401.054391][T10151] [U] [ 401.106052][T10151] [U] [ 401.108822][T10151] [U] [ 401.111566][T10151] [U] [ 401.114290][T10151] [U] [ 401.173102][T10151] [U] [ 401.175831][T10151] [U] [ 401.178511][T10151] [U] [ 401.181188][T10151] [U] [ 401.236717][T10151] [U] [ 401.239499][T10151] [U] [ 401.242229][T10151] [U] [ 401.244944][T10151] [U] [ 401.305938][T10151] [U] [ 401.605653][T10165] bridge0: port 3(netdevsim1) entered blocking state [ 401.612712][T10165] bridge0: port 3(netdevsim1) entered disabled state [ 401.619695][T10165] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 401.632320][T10165] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 401.640111][T10165] bridge0: port 3(netdevsim1) entered blocking state [ 401.646906][T10165] bridge0: port 3(netdevsim1) entered forwarding state [ 404.049837][T10201] [U]  [ 404.052705][T10201] [U] [ 404.055472][T10201] [U] [ 404.058227][T10201] [U] [ 404.093428][T10201] [U] [ 404.096230][T10201] [U] [ 404.098968][T10201] [U] [ 404.101691][T10201] [U] [ 404.125369][T10201] [U] [ 404.128138][T10201] [U] [ 404.130873][T10201] [U] [ 404.133626][T10201] [U] [ 404.186383][T10201] [U] [ 404.189161][T10201] [U] [ 404.191987][T10201] [U] [ 404.195020][T10201] [U] [ 404.396356][T10201] [U] [ 404.399307][T10201] [U] [ 404.402122][T10201] [U] [ 404.404848][T10201] [U] [ 404.419723][T10201] [U] [ 404.422480][T10201] [U] [ 404.425167][T10201] [U] [ 404.427843][T10201] [U] [ 404.506254][T10201] [U] [ 404.509020][T10201] [U] [ 404.511749][T10201] [U] [ 404.514465][T10201] [U] [ 404.559306][T10201] [U] [ 404.562079][T10201] [U] [ 404.564787][T10201] [U] [ 404.567492][T10201] [U] [ 404.571132][T10201] [U] [ 404.573872][T10201] [U] [ 404.576594][T10201] [U] [ 404.579313][T10201] [U] [ 404.620063][T10201] [U] [ 404.622832][T10201] [U] [ 404.625556][T10201] [U] [ 404.628295][T10201] [U] [ 404.633428][T10201] [U] [ 404.636146][T10201] [U] [ 404.638829][T10201] [U] [ 404.641545][T10201] [U] [ 404.644550][T10201] [U] [ 404.647299][T10201] [U] [ 404.650026][T10201] [U] [ 404.652754][T10201] [U] [ 404.658577][T10201] [U] [ 404.661283][T10201] [U] [ 404.663961][T10201] [U] [ 404.666668][T10201] [U] [ 404.670141][T10201] [U] [ 404.672882][T10201] [U] [ 404.675570][T10201] [U] [ 404.678247][T10201] [U] [ 404.682056][T10201] [U] [ 404.684792][T10201] [U] [ 404.687500][T10201] [U] [ 404.690191][T10201] [U] [ 404.693431][T10201] [U] [ 404.696150][T10201] [U] [ 404.698886][T10201] [U] [ 404.701582][T10201] [U] [ 404.704531][T10201] [U] [ 404.707229][T10201] [U] [ 404.709944][T10201] [U] [ 404.712739][T10201] [U] [ 404.715612][T10201] [U] [ 404.718329][T10201] [U] [ 404.721045][T10201] [U] [ 404.723742][T10201] [U] [ 404.726804][T10201] [U] [ 404.729501][T10201] [U] [ 404.732181][T10201] [U] [ 404.734867][T10201] [U] [ 404.742531][T10201] [U] [ 404.745295][T10201] [U] [ 404.748005][T10201] [U] [ 404.750753][T10201] [U] [ 404.754134][T10201] [U] [ 404.756873][T10201] [U] [ 404.759603][T10201] [U] [ 404.762384][T10201] [U] [ 404.796024][T10201] [U] [ 404.798838][T10201] [U] [ 404.801665][T10201] [U] [ 404.804380][T10201] [U] [ 404.906333][T10201] [U] [ 405.214454][T10216] bridge0: port 3(netdevsim1) entered blocking state [ 405.230721][T10216] bridge0: port 3(netdevsim1) entered disabled state [ 405.252439][T10216] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 405.283281][T10216] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 405.312100][T10216] bridge0: port 3(netdevsim1) entered blocking state [ 405.319026][T10216] bridge0: port 3(netdevsim1) entered forwarding state [ 405.367992][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 405.388061][T10221] netlink: 354 bytes leftover after parsing attributes in process `syz.3.874'. [ 405.960442][T10237] can: request_module (can-proto-3) failed. [ 408.707585][T10273] [U]  [ 408.710525][T10273] [U] [ 408.713252][T10273] [U] [ 408.715985][T10273] [U] [ 408.798180][T10273] [U] [ 408.800945][T10273] [U] [ 408.803655][T10273] [U] [ 408.806368][T10273] [U] [ 408.833318][T10273] [U] [ 408.836086][T10273] [U] [ 408.838815][T10273] [U] [ 408.841542][T10273] [U] [ 408.912161][T10273] [U] [ 408.914972][T10273] [U] [ 408.917672][T10273] [U] [ 408.920450][T10273] [U] [ 408.972194][T10273] [U] [ 408.974974][T10273] [U] [ 408.977688][T10273] [U] [ 408.980376][T10273] [U] [ 409.032695][T10273] [U] [ 409.036091][T10273] [U] [ 409.038842][T10273] [U] [ 409.041648][T10273] [U] [ 409.045285][T10273] [U] [ 409.048036][T10273] [U] [ 409.050766][T10273] [U] [ 409.053490][T10273] [U] [ 409.058656][T10273] [U] [ 409.061460][T10273] [U] [ 409.064184][T10273] [U] [ 409.066883][T10273] [U] [ 409.070952][T10273] [U] [ 409.073692][T10273] [U] [ 409.076401][T10273] [U] [ 409.079109][T10273] [U] [ 409.086014][T10273] [U] [ 409.088759][T10273] [U] [ 409.091446][T10273] [U] [ 409.094124][T10273] [U] [ 409.106732][T10273] [U] [ 409.109488][T10273] [U] [ 409.112165][T10273] [U] [ 409.114844][T10273] [U] [ 409.147582][T10273] [U] [ 409.150341][T10273] [U] [ 409.153059][T10273] [U] [ 409.155769][T10273] [U] [ 409.159240][T10273] [U] [ 409.161988][T10273] [U] [ 409.164707][T10273] [U] [ 409.167487][T10273] [U] [ 409.170720][T10273] [U] [ 409.173458][T10273] [U] [ 409.176187][T10273] [U] [ 409.178904][T10273] [U] [ 409.182152][T10273] [U] [ 409.184882][T10273] [U] [ 409.187584][T10273] [U] [ 409.190301][T10273] [U] [ 409.193713][T10273] [U] [ 409.196422][T10273] [U] [ 409.199136][T10273] [U] [ 409.201817][T10273] [U] [ 409.207553][T10273] [U] [ 409.210264][T10273] [U] [ 409.212938][T10273] [U] [ 409.215611][T10273] [U] [ 409.241817][T10273] [U] [ 409.244537][T10273] [U] [ 409.247223][T10273] [U] [ 409.249899][T10273] [U] [ 409.351677][T10273] [U] [ 409.354453][T10273] [U] [ 409.357179][T10273] [U] [ 409.359913][T10273] [U] [ 409.377979][T10273] [U] [ 409.380742][T10273] [U] [ 409.383466][T10273] [U] [ 409.386192][T10273] [U] [ 409.398597][T10273] [U] [ 409.401353][T10273] [U] [ 409.404083][T10273] [U] [ 409.406801][T10273] [U] [ 409.409847][T10273] [U] [ 409.412587][T10273] [U] [ 409.415312][T10273] [U] [ 409.418133][T10273] [U] [ 409.422121][T10273] [U] [ 409.424858][T10273] [U] [ 409.427763][T10273] [U] [ 409.430490][T10273] [U] [ 409.433566][T10273] [U] [ 409.436296][T10273] [U] [ 409.439015][T10273] [U] [ 409.441742][T10273] [U] [ 409.454981][T10273] [U] [ 409.457744][T10273] [U] [ 409.460467][T10273] [U] [ 409.463187][T10273] [U] [ 409.505351][T10273] [U] [ 409.508119][T10273] [U] [ 409.510860][T10273] [U] [ 409.513582][T10273] [U] [ 409.517334][T10273] [U] [ 409.520067][T10273] [U] [ 409.522791][T10273] [U] [ 409.525513][T10273] [U] [ 409.529328][T10273] [U] [ 409.532084][T10273] [U] [ 409.534797][T10273] [U] [ 409.537531][T10273] [U] [ 409.542122][T10273] [U] [ 409.544868][T10273] [U] [ 409.547591][T10273] [U] [ 409.550313][T10273] [U] [ 409.559786][T10273] [U] [ 409.562553][T10273] [U] [ 409.565275][T10273] [U] [ 409.567993][T10273] [U] [ 409.615199][T10273] [U] [ 413.450756][T10345] can: request_module (can-proto-3) failed. [ 419.359442][T10433] can: request_module (can-proto-3) failed. [ 420.411286][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 420.489720][T10454] netlink: 354 bytes leftover after parsing attributes in process `syz.1.920'. [ 423.380969][T10503] can: request_module (can-proto-3) failed. [ 423.831312][T10508] can: request_module (can-proto-3) failed. [ 425.313128][T10533] can: request_module (can-proto-3) failed. [ 425.444259][T10525] can: request_module (can-proto-3) failed. [ 426.198741][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 426.220774][T10546] netlink: 354 bytes leftover after parsing attributes in process `syz.3.938'. [ 427.020067][T10547] can: request_module (can-proto-3) failed. [ 428.106679][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 428.121477][T10588] netlink: 354 bytes leftover after parsing attributes in process `syz.0.950'. [ 428.570626][T10596] can: request_module (can-proto-3) failed. [ 430.191501][T10615] can: request_module (can-proto-3) failed. [ 431.947340][T10647] [U]  [ 431.950209][T10647] [U] [ 431.952935][T10647] [U] [ 431.955662][T10647] [U] [ 431.986448][T10647] [U] [ 431.989217][T10647] [U] [ 431.991956][T10647] [U] [ 431.994677][T10647] [U] [ 432.074364][T10647] [U] [ 432.077144][T10647] [U] [ 432.079873][T10647] [U] [ 432.082598][T10647] [U] [ 432.136143][T10647] [U] [ 432.138915][T10647] [U] [ 432.141648][T10647] [U] [ 432.144379][T10647] [U] [ 432.147810][T10647] [U] [ 432.150555][T10647] [U] [ 432.153299][T10647] [U] [ 432.156023][T10647] [U] [ 432.177696][T10647] [U] [ 432.180469][T10647] [U] [ 432.183199][T10647] [U] [ 432.186020][T10647] [U] [ 432.222735][T10647] [U] [ 432.225507][T10647] [U] [ 432.228318][T10647] [U] [ 432.231042][T10647] [U] [ 432.252056][T10647] [U] [ 432.254807][T10647] [U] [ 432.257540][T10647] [U] [ 432.260267][T10647] [U] [ 432.264464][T10647] [U] [ 432.267191][T10647] [U] [ 432.269917][T10647] [U] [ 432.272638][T10647] [U] [ 432.289898][T10647] [U] [ 432.292560][T10643] FAULT_INJECTION: forcing a failure. [ 432.292560][T10643] name failslab, interval 1, probability 0, space 0, times 0 [ 432.292618][T10643] CPU: 1 UID: 0 PID: 10643 Comm: syz.2.952 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 432.292651][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.292666][T10643] Call Trace: [ 432.292675][T10643] [ 432.292684][T10643] dump_stack_lvl+0x16c/0x1f0 [ 432.292729][T10643] should_fail_ex+0x512/0x640 [ 432.292764][T10643] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 432.292807][T10643] should_failslab+0xc2/0x120 [ 432.292832][T10643] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 432.292868][T10643] ? __kernfs_new_node+0xd2/0x8e0 [ 432.292907][T10643] __kernfs_new_node+0xd2/0x8e0 [ 432.292946][T10643] ? __pfx___kernfs_new_node+0x10/0x10 [ 432.292988][T10643] ? find_held_lock+0x2b/0x80 [ 432.293014][T10643] ? kernfs_root+0xee/0x2a0 [ 432.293063][T10643] kernfs_new_node+0x13c/0x1e0 [ 432.293110][T10643] __kernfs_create_file+0x53/0x350 [ 432.293143][T10643] sysfs_add_file_mode_ns+0x207/0x3c0 [ 432.293185][T10643] internal_create_group+0x578/0xf30 [ 432.293232][T10643] ? __pfx_internal_create_group+0x10/0x10 [ 432.293273][T10643] ? kernfs_create_link+0x1bd/0x240 [ 432.293306][T10643] internal_create_groups+0x9d/0x150 [ 432.293344][T10643] device_add+0x6d1/0x1a70 [ 432.293374][T10643] ? __pfx_device_add+0x10/0x10 [ 432.293401][T10643] ? lockdep_init_map_type+0x5c/0x280 [ 432.293435][T10643] ? __init_waitqueue_head+0xca/0x150 [ 432.293481][T10643] netdev_register_kobject+0x182/0x3a0 [ 432.293517][T10643] register_netdevice+0x13dc/0x2270 [ 432.293547][T10643] ? idr_alloc+0xdd/0x130 [ 432.293579][T10643] ? __pfx_register_netdevice+0x10/0x10 [ 432.293614][T10643] ppp_dev_configure+0x99b/0xc80 [ 432.293651][T10643] ppp_ioctl+0x17e0/0x2660 [ 432.293683][T10643] ? find_held_lock+0x2b/0x80 [ 432.293706][T10643] ? __pfx_ppp_ioctl+0x10/0x10 [ 432.293742][T10643] ? __fget_files+0x20e/0x3c0 [ 432.293780][T10643] ? __pfx_ppp_ioctl+0x10/0x10 [ 432.293810][T10643] __x64_sys_ioctl+0x18b/0x210 [ 432.293843][T10643] do_syscall_64+0xcd/0x490 [ 432.293882][T10643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.293908][T10643] RIP: 0033:0x7f993a38e929 [ 432.293928][T10643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.293952][T10643] RSP: 002b:00007f99381f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.293976][T10643] RAX: ffffffffffffffda RBX: 00007f993a5b5fa0 RCX: 00007f993a38e929 [ 432.293993][T10643] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 432.294008][T10643] RBP: 00007f993a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 432.294024][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.294045][T10643] R13: 0000000000000000 R14: 00007f993a5b5fa0 R15: 00007ffec2bd7bd8 [ 432.294079][T10643] [ 432.581748][T10647] [U] [ 432.584445][T10647] [U] [ 432.587318][T10647] [U] [ 432.702859][T10647] [U] [ 432.705643][T10647] [U] [ 432.708390][T10647] [U] [ 432.711207][T10647] [U] [ 432.718858][T10647] [U] [ 432.721631][T10647] [U] [ 432.724369][T10647] [U] [ 432.727117][T10647] [U] [ 432.730369][T10647] [U] [ 432.733113][T10647] [U] [ 432.735822][T10647] [U] [ 432.738526][T10647] [U] [ 432.741441][T10647] [U] [ 432.744176][T10647] [U] [ 432.746900][T10647] [U] [ 432.749619][T10647] [U] [ 432.756360][T10647] [U] [ 432.759112][T10647] [U] [ 432.761856][T10647] [U] [ 432.764659][T10647] [U] [ 432.784993][T10647] [U] [ 433.039339][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 433.067239][T10657] netlink: 354 bytes leftover after parsing attributes in process `syz.2.956'. [ 433.855177][T10651] can: request_module (can-proto-3) failed. [ 434.801575][T10683] can: request_module (can-proto-3) failed. [ 435.100717][T10689] can: request_module (can-proto-3) failed. [ 435.759630][T10702] can: request_module (can-proto-3) failed. [ 436.356946][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 436.422009][T10710] netlink: 354 bytes leftover after parsing attributes in process `syz.1.967'. [ 437.044851][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 437.058573][T10726] netlink: 354 bytes leftover after parsing attributes in process `syz.1.979'. [ 438.175334][T10748] can: request_module (can-proto-3) failed. [ 439.613374][T10771] can: request_module (can-proto-3) failed. [ 440.048520][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.054905][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.317685][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 440.366868][T10785] netlink: 354 bytes leftover after parsing attributes in process `syz.0.982'. [ 442.195048][T10821] can: request_module (can-proto-3) failed. [ 444.005425][T10839] can: request_module (can-proto-3) failed. [ 444.720308][T10854] can: request_module (can-proto-3) failed. [ 445.430840][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 445.440700][T10860] netlink: 354 bytes leftover after parsing attributes in process `syz.0.995'. [ 445.874666][T10848] kexec: Could not allocate control_code_buffer [ 448.521882][T10896] can: request_module (can-proto-3) failed. [ 448.769673][T10898] can: request_module (can-proto-3) failed. [ 452.490816][T10923] kexec: Could not allocate control_code_buffer [ 453.526434][T10966] can: request_module (can-proto-3) failed. [ 453.947016][T10964] can: request_module (can-proto-3) failed. [ 456.016655][T10992] can: request_module (can-proto-3) failed. [ 457.572643][T11031] can: request_module (can-proto-3) failed. [ 457.844222][T11033] can: request_module (can-proto-3) failed. [ 458.278937][T11042] can: request_module (can-proto-3) failed. [ 462.908824][T11089] can: request_module (can-proto-3) failed. [ 463.060896][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 463.071518][T11103] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1045'. [ 464.902060][T11127] can: request_module (can-proto-3) failed. [ 465.895850][T11130] can: request_module (can-proto-3) failed. [ 467.572653][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 467.601470][T11163] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1056'. [ 469.216008][T11189] can: request_module (can-proto-3) failed. [ 469.282728][T11177] can: request_module (can-proto-3) failed. [ 475.512755][T11284] can: request_module (can-proto-3) failed. [ 478.717077][T11322] can: request_module (can-proto-3) failed. [ 480.502598][T11353] can: request_module (can-proto-3) failed. [ 486.382498][T11423] can: request_module (can-proto-3) failed. [ 488.690878][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 488.709868][T11453] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1104'. [ 490.740935][T11473] can: request_module (can-proto-3) failed. [ 491.410294][T11490] can: request_module (can-proto-3) failed. [ 492.497707][T11509] can: request_module (can-proto-3) failed. [ 493.561995][T11523] can: request_module (can-proto-3) failed. [ 494.361844][T11518] can: request_module (can-proto-3) failed. [ 496.173201][T11553] can: request_module (can-proto-3) failed. [ 501.496681][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.503190][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.320030][T11649] can: request_module (can-proto-3) failed. [ 506.898503][T11693] can: request_module (can-proto-3) failed. [ 507.812842][T11716] can: request_module (can-proto-3) failed. [ 508.867292][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 508.902047][T11742] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1155'. [ 509.400605][T11756] FAULT_INJECTION: forcing a failure. [ 509.400605][T11756] name fail_futex, interval 1, probability 0, space 0, times 0 [ 509.428314][T11756] CPU: 0 UID: 0 PID: 11756 Comm: syz.3.1159 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 509.428353][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.428369][T11756] Call Trace: [ 509.428378][T11756] [ 509.428388][T11756] dump_stack_lvl+0x16c/0x1f0 [ 509.428436][T11756] should_fail_ex+0x512/0x640 [ 509.428477][T11756] get_futex_key+0x1d0/0x1540 [ 509.428512][T11756] ? __pfx_get_futex_key+0x10/0x10 [ 509.428538][T11756] ? rcu_is_watching+0x12/0xc0 [ 509.428565][T11756] ? trace_mm_page_alloc+0x11f/0x1a0 [ 509.428596][T11756] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 509.428641][T11756] futex_wake+0xea/0x530 [ 509.428674][T11756] ? futex_wait+0x120/0x380 [ 509.428709][T11756] ? __pfx_futex_wait+0x10/0x10 [ 509.428745][T11756] ? __pfx_futex_wake+0x10/0x10 [ 509.428785][T11756] ? fd_install+0x225/0x750 [ 509.428816][T11756] ? putname+0x154/0x1a0 [ 509.428846][T11756] do_futex+0x1e3/0x350 [ 509.428877][T11756] ? __pfx_do_futex+0x10/0x10 [ 509.428907][T11756] ? rcu_read_unlock+0x17/0x60 [ 509.428932][T11756] ? __pfx_aa_get_newest_label+0x10/0x10 [ 509.428965][T11756] __x64_sys_futex+0x1e0/0x4c0 [ 509.429007][T11756] ? __pfx___x64_sys_futex+0x10/0x10 [ 509.429053][T11756] do_syscall_64+0xcd/0x490 [ 509.429103][T11756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.429126][T11756] RIP: 0033:0x7f6be7f8e929 [ 509.429146][T11756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.429168][T11756] RSP: 002b:00007f6be8d650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 509.429192][T11756] RAX: ffffffffffffffda RBX: 00007f6be81b5fa8 RCX: 00007f6be7f8e929 [ 509.429209][T11756] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6be81b5fac [ 509.429225][T11756] RBP: 00007f6be81b5fa0 R08: 00007f6be8d66000 R09: 0000000000000000 [ 509.429241][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6be81b5fac [ 509.429257][T11756] R13: 0000000000000000 R14: 00007ffcac1bb4e0 R15: 00007ffcac1bb5c8 [ 509.429289][T11756] [ 511.307167][T11778] can: request_module (can-proto-3) failed. [ 512.242231][T11791] can: request_module (can-proto-3) failed. [ 512.742472][T11806] can: request_module (can-proto-3) failed. [ 513.285588][T11810] can: request_module (can-proto-3) failed. [ 513.568531][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 516.477179][T11862] can: request_module (can-proto-3) failed. [ 518.140138][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 519.222791][T11901] can: request_module (can-proto-3) failed. [ 522.469142][T11929] can: request_module (can-proto-3) failed. [ 522.846399][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 526.983183][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 527.911581][T12041] can: request_module (can-proto-3) failed. [ 535.338026][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 535.350887][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 538.117610][T12193] can: request_module (can-proto-3) failed. [ 539.196670][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 539.207425][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 539.886159][T12213] can: request_module (can-proto-3) failed. [ 541.070465][T12232] can: request_module (can-proto-3) failed. [ 552.281044][T12396] FAULT_INJECTION: forcing a failure. [ 552.281044][T12396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.313873][T12396] CPU: 1 UID: 0 PID: 12396 Comm: syz.0.1273 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 552.313913][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.313928][T12396] Call Trace: [ 552.313937][T12396] [ 552.313947][T12396] dump_stack_lvl+0x16c/0x1f0 [ 552.313993][T12396] should_fail_ex+0x512/0x640 [ 552.314034][T12396] should_fail_alloc_page+0xe7/0x130 [ 552.314063][T12396] prepare_alloc_pages+0x3c2/0x610 [ 552.314098][T12396] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 552.314140][T12396] ? futex_wait+0x120/0x380 [ 552.314171][T12396] ? __pfx_futex_wait+0x10/0x10 [ 552.314208][T12396] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.314246][T12396] ? trace_sched_exit_tp+0xde/0x130 [ 552.314273][T12396] ? __schedule+0x1181/0x5de0 [ 552.314308][T12396] ? do_futex+0x122/0x350 [ 552.314336][T12396] ? aa_get_newest_label+0x375/0x680 [ 552.314359][T12396] ? __pfx_do_futex+0x10/0x10 [ 552.314389][T12396] ? __pfx_aa_get_newest_label+0x10/0x10 [ 552.314414][T12396] ? rcu_is_watching+0x12/0xc0 [ 552.314444][T12396] __alloc_pages_noprof+0xb/0x1b0 [ 552.314480][T12396] ___kmalloc_large_node+0x84/0x1e0 [ 552.314515][T12396] __kmalloc_large_noprof+0x1c/0x70 [ 552.314542][T12396] ? bpf_lsm_locked_down+0x9/0x10 [ 552.314575][T12396] ksys_ioperm+0x3c9/0x4f0 [ 552.314611][T12396] do_syscall_64+0xcd/0x490 [ 552.314662][T12396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.314690][T12396] RIP: 0033:0x7f0c5eb8e929 [ 552.314712][T12396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.314737][T12396] RSP: 002b:00007f0c5f98f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 552.314762][T12396] RAX: ffffffffffffffda RBX: 00007f0c5edb5fa0 RCX: 00007f0c5eb8e929 [ 552.314780][T12396] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000007 [ 552.314795][T12396] RBP: 00007f0c5ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 552.314811][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.314827][T12396] R13: 0000000000000000 R14: 00007f0c5edb5fa0 R15: 00007ffca2375b28 [ 552.314860][T12396] [ 553.906258][T12405] can: request_module (can-proto-3) failed. [ 555.782275][T12460] can: request_module (can-proto-3) failed. [ 558.747365][T12505] can: request_module (can-proto-3) failed. [ 560.475995][T12534] can: request_module (can-proto-3) failed. [ 560.892172][T12540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1297'. [ 562.909862][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.916494][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.107354][T12581] can: request_module (can-proto-3) failed. [ 563.762241][T12599] kAFS: No cell specified [ 567.017176][T12672] can: request_module (can-proto-3) failed. [ 574.026032][T12782] can: request_module (can-proto-3) failed. [ 574.704184][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 574.786734][T12795] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1342'. [ 578.319503][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 578.336203][T12858] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1353'. [ 579.766004][T12875] can: request_module (can-proto-3) failed. [ 582.099991][T12905] can: request_module (can-proto-3) failed. [ 582.319081][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 582.328676][T12914] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1363'. [ 585.173417][T12951] can: request_module (can-proto-3) failed. [ 589.362578][T13030] can: request_module (can-proto-3) failed. [ 592.998113][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 593.047902][T13086] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1391'. [ 595.228641][T13130] can: request_module (can-proto-3) failed. [ 597.286405][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 597.296184][T13162] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1404'. [ 600.741686][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 600.781565][T13223] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1416'. [ 601.309889][T13237] kAFS: No cell specified [ 601.693698][T13248] can: request_module (can-proto-3) failed. [ 602.221529][T13253] can: request_module (can-proto-3) failed. [ 602.908904][T13269] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 603.966213][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 603.976221][T13294] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1431'. [ 604.604566][T13301] kAFS: No cell specified [ 605.203619][T13312] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 606.277346][T13329] kAFS: No cell specified [ 606.358536][T13325] can: request_module (can-proto-3) failed. [ 607.160832][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 607.173380][T13348] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1443'. [ 607.880656][T13370] can: request_module (can-proto-3) failed. [ 611.949504][T13415] can: request_module (can-proto-3) failed. [ 612.608612][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 612.636875][T13426] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1455'. [ 616.745139][T13488] can: request_module (can-proto-3) failed. [ 616.824057][T13506] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6713442.4294967295.4294967295), cmd(1) [ 619.906929][T13563] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6713442.50.0), cmd(1) [ 620.157756][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 620.184753][T13569] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1482'. [ 624.454790][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.464341][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.396939][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'. [ 625.414707][T13638] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1493'. [ 631.540386][T13750] can: request_module (can-proto-3) failed. [ 635.337478][T13831] can: request_module (can-proto-3) failed. [ 641.835000][T13918] can: request_module (can-proto-3) failed. [ 642.311017][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 642.321052][T13932] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1540'. [ 643.958515][T13961] can: request_module (can-proto-3) failed. [ 646.795628][T13994] can: request_module (can-proto-3) failed. [ 647.836585][T14012] can: request_module (can-proto-3) failed. [ 648.843331][T14022] can: request_module (can-proto-3) failed. [ 649.383633][T14031] can: request_module (can-proto-3) failed. [ 650.301513][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 650.336409][T14045] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1562'. [ 651.629755][T14068] can: request_module (can-proto-3) failed. [ 653.042239][T14093] can: request_module (can-proto-3) failed. [ 655.275245][T14130] can: request_module (can-proto-3) failed. [ 656.844464][T14145] can: request_module (can-proto-3) failed. [ 659.782955][T14197] can: request_module (can-proto-3) failed. [ 660.899343][T14220] can: request_module (can-proto-3) failed. [ 664.131417][T14263] can: request_module (can-proto-3) failed. [ 664.718589][T14272] can: request_module (can-proto-3) failed. [ 668.094120][T14336] can: request_module (can-proto-3) failed. [ 671.131984][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 671.296946][T14387] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1623'. [ 672.472729][T14410] can: request_module (can-proto-3) failed. [ 673.334671][T14433] can: request_module (can-proto-3) failed. [ 675.120776][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 675.226929][T14456] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1636'. [ 678.804323][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 678.814028][T14520] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1647'. [ 682.703593][T14568] can: request_module (can-proto-3) failed. [ 685.798709][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.805382][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.197151][T14650] can: request_module (can-proto-3) failed. [ 689.351177][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 689.431919][T14673] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1674'. [ 694.518718][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 694.621031][T14767] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1687'. [ 698.033986][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 698.046801][T14821] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1696'. [ 698.385597][T14826] can: request_module (can-proto-3) failed. [ 701.718384][T14884] can: request_module (can-proto-3) failed. [ 702.207271][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 702.260220][T14892] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1709'. [ 706.019219][T14956] can: request_module (can-proto-3) failed. [ 706.127180][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 706.267016][T14959] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1719'. [ 706.949246][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 706.969772][T14974] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1722'. [ 711.582948][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 711.666573][T15053] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1734'. [ 714.794044][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 714.810116][T15086] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1741'. [ 719.507234][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 719.547429][T15156] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1753'. [ 722.862519][T15210] can: request_module (can-proto-3) failed. [ 725.409207][T15254] can: request_module (can-proto-3) failed. [ 735.343451][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 735.406798][T15387] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1791'. [ 736.994476][T15411] can: request_module (can-proto-3) failed. [ 739.579532][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 739.673958][T15445] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1801'. [ 742.237653][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1810'. [ 742.266231][T15479] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1810'. [ 745.554462][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 745.586988][T15531] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1819'. [ 747.055777][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 747.130680][T15551] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1824'. [ 747.239274][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.309778][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.744328][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 759.825190][T15735] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1851'. [ 760.426416][T15744] can: request_module (can-proto-3) failed. [ 765.981650][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 765.995921][T15851] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1865'. [ 766.518125][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 766.567244][T15856] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1867'. [ 771.182724][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'. [ 771.195240][T15921] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1877'. [ 773.494552][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 773.559731][T15962] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1882'. [ 776.619748][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 776.644830][T16030] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1891'. [ 779.208074][T16062] can: request_module (can-proto-3) failed. [ 781.161714][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 781.187733][T16091] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1902'. [ 783.178431][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 783.227510][T16114] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1913'. [ 784.814779][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 784.872100][T16129] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1908'. [ 786.669113][T16148] can: request_module (can-proto-3) failed. [ 787.346708][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'. [ 787.445902][T16169] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1917'. [ 796.867197][T16315] can: request_module (can-proto-3) failed. [ 801.443033][T16393] can: request_module (can-proto-3) failed. [ 807.831955][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'. [ 808.677918][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.684256][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.102863][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1966'. [ 809.928189][T16538] can: request_module (can-proto-3) failed. [ 813.059163][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 815.410865][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 815.456670][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 816.085844][T16638] can: request_module (can-proto-3) failed. [ 816.922915][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 816.955828][T16645] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1985'. [ 817.403995][T16657] can: request_module (can-proto-3) failed. [ 822.992668][T16751] can: request_module (can-proto-3) failed. [ 828.303209][T16823] can: request_module (can-proto-3) failed. [ 831.817964][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2017'. [ 831.831729][T16878] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2017'. [ 836.455436][T16969] can: request_module (can-proto-3) failed. [ 838.074884][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 838.147048][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 842.171169][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2046'. [ 842.199664][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2046'. [ 842.529413][T17073] can: request_module (can-proto-3) failed. [ 848.170238][T17148] can: request_module (can-proto-3) failed. [ 849.604669][T17175] can: request_module (can-proto-3) failed. [ 853.566647][T17250] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 854.410203][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 854.467939][T17259] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2073'. [ 854.834489][T17265] can: request_module (can-proto-3) failed. [ 857.719395][T17317] can: request_module (can-proto-3) failed. [ 861.520219][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 861.541441][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 863.439637][T17405] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 865.906088][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 865.920574][T17443] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2100'. [ 869.497084][T17511] can: request_module (can-proto-3) failed. [ 870.107946][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.114312][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.721505][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'. [ 870.739613][T17531] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2113'. [ 871.962925][T17546] can: request_module (can-proto-3) failed. [ 878.635664][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 878.716185][T17652] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2134'. [ 879.552001][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 879.596628][T17663] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2135'. [ 881.071126][T17671] can: request_module (can-proto-3) failed. [ 883.327069][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 883.382151][T17726] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2148'. [ 884.267304][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 884.277990][T17739] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2150'. [ 887.353533][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 887.380437][T17798] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2158'. [ 890.561377][T17848] can: request_module (can-proto-3) failed. [ 891.217377][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2168'. [ 891.228262][T17867] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2168'. [ 895.067714][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2177'. [ 895.080543][T17928] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2177'. [ 896.833592][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'. [ 896.877451][T17961] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2183'. [ 897.591813][T17963] can: request_module (can-proto-3) failed. [ 901.612804][T18045] can: request_module (can-proto-3) failed. [ 902.202565][T18038] can: request_module (can-proto-3) failed. [ 902.797525][T18060] can: request_module (can-proto-3) failed. [ 906.256424][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 906.272787][T18105] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2209'. [ 907.678534][T18126] can: request_module (can-proto-3) failed. [ 908.640283][T18145] can: request_module (can-proto-3) failed. [ 910.842956][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 910.895300][T18188] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2220'. [ 910.959289][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 911.027462][T18191] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2221'. [ 911.505290][T18204] can: request_module (can-proto-3) failed. [ 912.418781][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2224'. [ 912.430552][T18223] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2224'. [ 913.047450][T18233] can: request_module (can-proto-3) failed. [ 914.213948][T18243] can: request_module (can-proto-3) failed. [ 914.747175][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'. [ 914.841621][T18258] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2229'. [ 916.623446][T18283] can: request_module (can-proto-3) failed. [ 917.768798][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2235'. [ 917.874620][T18305] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2235'. [ 922.405768][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'. [ 922.425755][T18382] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2247'. [ 922.786492][T18390] can: request_module (can-proto-3) failed. [ 923.395493][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 923.428066][T18397] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2249'. [ 924.097277][T18409] can: request_module (can-proto-3) failed. [ 931.343194][T18499] can: request_module (can-proto-3) failed. [ 931.550063][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.556544][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.787331][T18526] can: request_module (can-proto-3) failed. [ 937.680351][T18591] can: request_module (can-proto-3) failed. [ 940.087347][T18642] can: request_module (can-proto-3) failed. [ 946.837790][T18716] can: request_module (can-proto-3) failed. [ 950.248548][T18755] can: request_module (can-proto-3) failed. [ 951.497562][T18784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 952.027887][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 952.043387][T18791] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2303'. [ 953.070135][T18811] can: request_module (can-proto-3) failed. [ 954.317401][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2310'. [ 954.374775][T18831] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2310'. [ 954.482668][T18842] can: request_module (can-proto-3) failed. [ 955.217694][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 956.033070][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'. [ 956.084946][T18876] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2315'. [ 960.367776][T18934] can: request_module (can-proto-3) failed. [ 962.090045][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 963.561595][T18978] can: request_module (can-proto-3) failed. [ 964.956627][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2332'. [ 964.966779][T19006] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2332'. [ 965.761614][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 965.797986][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 967.134545][T19033] can: request_module (can-proto-3) failed. [ 969.717852][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 969.803290][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 970.343828][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'. [ 971.019893][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 971.107105][T19091] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2346'. [ 972.602314][T19123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 972.634639][T19123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 972.647986][T19123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 972.679253][T19123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 972.705845][T19123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 972.834197][T19106] can: request_module (can-proto-3) failed. [ 974.755559][T19123] Bluetooth: hci4: command tx timeout [ 975.264544][T19118] chnl_net:caif_netlink_parms(): no params data found [ 975.444513][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 975.794434][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.897461][T19118] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.920000][T19118] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.935945][T19118] bridge_slave_0: entered allmulticast mode [ 975.954386][T19118] bridge_slave_0: entered promiscuous mode [ 976.021555][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.083289][T19118] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.113636][T19118] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.123379][T19118] bridge_slave_1: entered allmulticast mode [ 976.134805][T19118] bridge_slave_1: entered promiscuous mode [ 976.226042][ T44] bridge0: port 3(netdevsim1) entered disabled state [ 976.268723][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 976.294185][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 976.315363][ T44] bridge0: port 3(netdevsim1) entered disabled state [ 976.376357][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.518983][T19118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.708713][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.826157][T19123] Bluetooth: hci4: command tx timeout [ 977.183320][T19118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.485351][T19174] can: request_module (can-proto-3) failed. [ 977.910554][T19118] team0: Port device team_slave_0 added [ 978.141942][T19118] team0: Port device team_slave_1 added [ 978.905742][T19123] Bluetooth: hci4: command tx timeout [ 978.949213][T19118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.975849][T19118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.003004][T19118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.018252][T19118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.029930][T19118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.069488][T19118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.803995][T19118] hsr_slave_0: entered promiscuous mode [ 979.816847][T19118] hsr_slave_1: entered promiscuous mode [ 979.845539][T19118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.854387][T19118] Cannot create hsr debugfs directory [ 979.885087][ T44] bridge_slave_1: left allmulticast mode [ 979.926530][ T44] bridge_slave_1: left promiscuous mode [ 979.933962][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.014110][ T44] bridge_slave_0: left allmulticast mode [ 980.026443][ T44] bridge_slave_0: left promiscuous mode [ 980.036724][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.703748][T19215] can: request_module (can-proto-3) failed. [ 980.987200][T19123] Bluetooth: hci4: command tx timeout [ 981.052056][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.066723][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.096242][ T44] bond0 (unregistering): Released all slaves [ 981.335705][ T44] HfR: left promiscuous mode [ 982.931011][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2363'. [ 983.073871][T19230] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2363'. [ 984.736089][ T44] hsr_slave_0: left promiscuous mode [ 984.754638][ T44] hsr_slave_1: left promiscuous mode [ 984.822998][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.936059][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.948616][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.997610][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.098481][ T44] veth1_macvtap: left promiscuous mode [ 985.148233][ T44] veth0_macvtap: left promiscuous mode [ 985.162936][ T44] veth1_vlan: left promiscuous mode [ 985.179998][ T44] veth0_vlan: left promiscuous mode [ 986.483813][ T44] team0 (unregistering): Port device team_slave_1 removed [ 986.548027][ T44] team0 (unregistering): Port device team_slave_0 removed [ 988.324414][T19118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 988.405342][T19118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 988.498941][T19118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 988.549907][T19118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 988.983371][T19118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.224020][T19118] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.313841][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.320991][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.391120][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.399391][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.444259][T19118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.012940][T19118] veth0_vlan: entered promiscuous mode [ 992.230539][T19118] veth1_vlan: entered promiscuous mode [ 992.351069][T19118] veth0_macvtap: entered promiscuous mode [ 992.386719][T19118] veth1_macvtap: entered promiscuous mode [ 992.519422][T19118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.554911][T19118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.602746][T19118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.629464][T19118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.831862][T19118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.843007][T19118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.006147][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.012510][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.233989][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.254674][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.488715][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.515101][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.639333][T19415] can: request_module (can-proto-3) failed. [ 996.452663][T19444] can: request_module (can-proto-3) failed. [ 998.133595][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'. [ 998.158864][T19463] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2383'. [ 998.348420][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 998.360842][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 998.374849][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 998.396529][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 998.417239][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 998.520481][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.053520][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.329359][ T12] bridge0: port 3(netdevsim1) entered disabled state [ 999.444799][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 999.507760][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 999.526532][ T12] bridge0: port 3(netdevsim1) entered disabled state [ 999.735148][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.034252][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.505658][ T5150] Bluetooth: hci1: command tx timeout [ 1000.594067][T19471] chnl_net:caif_netlink_parms(): no params data found [ 1001.076367][T19519] can: request_module (can-proto-3) failed. [ 1001.476698][T19471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.493084][T19471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.500880][T19471] bridge_slave_0: entered allmulticast mode [ 1001.511412][T19471] bridge_slave_0: entered promiscuous mode [ 1001.523717][T19471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.533905][T19471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.546400][T19471] bridge_slave_1: entered allmulticast mode [ 1001.563814][T19471] bridge_slave_1: entered promiscuous mode [ 1001.699784][ T12] bridge_slave_1: left allmulticast mode [ 1001.707361][ T12] bridge_slave_1: left promiscuous mode [ 1001.713315][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.736228][ T12] bridge_slave_0: left allmulticast mode [ 1001.775383][ T12] bridge_slave_0: left promiscuous mode [ 1001.782398][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.494788][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.507248][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.517527][ T12] bond0 (unregistering): Released all slaves [ 1002.556614][T19471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.589525][T19471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.595732][ T5150] Bluetooth: hci1: command tx timeout [ 1002.611039][ T12] HfR: left promiscuous mode [ 1002.886565][T19471] team0: Port device team_slave_0 added [ 1002.913372][T19471] team0: Port device team_slave_1 added [ 1003.044974][T19471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.053417][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.108999][T19471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.176084][T19471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.193005][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.255539][T19471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.480657][T19471] hsr_slave_0: entered promiscuous mode [ 1003.497614][T19471] hsr_slave_1: entered promiscuous mode [ 1003.533898][T19471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.551808][T19471] Cannot create hsr debugfs directory [ 1004.164749][ T12] hsr_slave_0: left promiscuous mode [ 1004.172310][ T12] hsr_slave_1: left promiscuous mode [ 1004.179047][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.187841][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.212068][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.223604][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.233110][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'. [ 1004.234700][T19562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'. [ 1004.288465][ T12] veth1_macvtap: left promiscuous mode [ 1004.302773][ T12] veth0_macvtap: left promiscuous mode [ 1004.311447][T19562] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2395'. [ 1004.320924][ T12] veth1_vlan: left promiscuous mode [ 1004.321096][ T12] veth0_vlan: left promiscuous mode [ 1004.669074][ T5150] Bluetooth: hci1: command tx timeout [ 1005.675962][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1005.722828][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1006.750853][ T5150] Bluetooth: hci1: command tx timeout [ 1008.297431][T19606] can: request_module (can-proto-3) failed. [ 1009.485938][T19640] can: request_module (can-proto-3) failed. [ 1009.495564][T19471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1009.619827][T19471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1009.676227][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 1009.676304][T19471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1009.710008][T19471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1011.670273][T19471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.694420][T19471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.767167][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.774360][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.836041][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.843226][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.040299][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 1012.596279][T19471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.967871][T19471] veth0_vlan: entered promiscuous mode [ 1012.978521][T19471] veth1_vlan: entered promiscuous mode [ 1013.371553][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'. [ 1013.389651][T19701] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2409'. [ 1013.410034][T19471] veth0_macvtap: entered promiscuous mode [ 1013.449722][T19471] veth1_macvtap: entered promiscuous mode [ 1014.081477][T19471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.130544][T19471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.391920][T19471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.424575][T19471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.559735][T19471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.583565][T19471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.165624][T19447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.173494][T19447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.200335][T19752] can: request_module (can-proto-3) failed. [ 1016.687586][T19447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.729297][T19447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.278330][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2415'. [ 1018.867328][T19123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1018.878614][T19123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1018.886852][T19123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1018.909322][T19123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1018.930157][T19123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1020.277134][T19810] chnl_net:caif_netlink_parms(): no params data found [ 1020.549578][ T2995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.001515][ T2995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.065599][T19123] Bluetooth: hci0: command tx timeout [ 1021.158342][ T2995] bridge0: port 3(netdevsim1) entered disabled state [ 1021.199697][ T2995] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 1021.231887][ T2995] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 1021.251280][ T2995] bridge0: port 3(netdevsim1) entered disabled state [ 1021.272041][ T2995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.414378][ T2995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.477380][T19810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.486919][T19810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.494700][T19810] bridge_slave_0: entered allmulticast mode [ 1021.504575][T19810] bridge_slave_0: entered promiscuous mode [ 1021.523824][T19810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.537989][T19810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.548616][T19810] bridge_slave_1: entered allmulticast mode [ 1021.558059][T19810] bridge_slave_1: entered promiscuous mode [ 1021.620487][T19810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.666681][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 1021.679155][T19838] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2419'. [ 1021.703360][T19810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.882267][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2426'. [ 1021.896461][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2426'. [ 1022.007423][T19810] team0: Port device team_slave_0 added [ 1022.092851][T19810] team0: Port device team_slave_1 added [ 1022.426332][T19810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.434000][T19810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.460096][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.563905][T19810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.621724][T19810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.628830][T19810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.655742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.697634][T19810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.832688][ T2995] bridge_slave_1: left allmulticast mode [ 1022.839236][ T2995] bridge_slave_1: left promiscuous mode [ 1022.848850][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.923734][ T2995] bridge_slave_0: left allmulticast mode [ 1022.935750][ T2995] bridge_slave_0: left promiscuous mode [ 1022.942089][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.145679][T19123] Bluetooth: hci0: command tx timeout [ 1024.216422][ T2995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.311295][ T2995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.339122][ T2995] bond0 (unregistering): Released all slaves [ 1024.594124][T19810] hsr_slave_0: entered promiscuous mode [ 1024.601884][T19810] hsr_slave_1: entered promiscuous mode [ 1024.616180][T19810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.624423][T19810] Cannot create hsr debugfs directory [ 1025.185766][T19906] binder: 19904:19906 ioctl 600004 4 returned -22 [ 1025.221572][ T2995] hsr_slave_0: left promiscuous mode [ 1025.232125][T19123] Bluetooth: hci0: command tx timeout [ 1025.243516][ T2995] hsr_slave_1: left promiscuous mode [ 1025.260020][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'. [ 1025.260898][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.277914][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.300712][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.310725][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.367400][ T2995] veth1_macvtap: left promiscuous mode [ 1025.386882][ T2995] veth0_macvtap: left promiscuous mode [ 1025.393115][ T2995] veth1_vlan: left promiscuous mode [ 1025.439968][ T2995] veth0_vlan: left promiscuous mode [ 1026.734779][ T2995] team0 (unregistering): Port device team_slave_1 removed [ 1026.778592][ T2995] team0 (unregistering): Port device team_slave_0 removed [ 1027.305636][T19123] Bluetooth: hci0: command tx timeout [ 1027.665038][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 1027.684687][T19930] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2429'. [ 1028.675985][T19810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1028.694257][T19810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1028.762420][T19810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1028.822471][T19810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1029.494090][T19810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.772095][T19810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.836486][T19447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.843733][T19447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.911831][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1030.020583][T19447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.027832][T19447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.482757][T20016] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 1031.853656][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 1031.958586][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 1032.202806][T19810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.551161][T19810] veth0_vlan: entered promiscuous mode [ 1032.596162][T19810] veth1_vlan: entered promiscuous mode [ 1032.694427][T19810] veth0_macvtap: entered promiscuous mode [ 1032.708620][T20038] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2440'. [ 1032.715637][T19810] veth1_macvtap: entered promiscuous mode [ 1032.778790][T19810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.814318][T19810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.849025][T19810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.860340][T19810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.873773][T19810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.896287][T19810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.449862][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.484124][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.725639][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.774584][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.345973][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1035.356143][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1035.366110][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1035.376362][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1035.385116][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1035.579604][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.761654][ T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.774281][T20108] FAULT_INJECTION: forcing a failure. [ 1035.774281][T20108] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.787370][T20108] CPU: 0 UID: 0 PID: 20108 Comm: syz.0.2451 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1035.787406][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1035.787421][T20108] Call Trace: [ 1035.787430][T20108] [ 1035.787439][T20108] dump_stack_lvl+0x16c/0x1f0 [ 1035.787482][T20108] should_fail_ex+0x512/0x640 [ 1035.787516][T20108] ? __kmalloc_noprof+0xbf/0x510 [ 1035.787555][T20108] ? constrain_params_by_rules+0x175/0xca0 [ 1035.787583][T20108] should_failslab+0xc2/0x120 [ 1035.787608][T20108] __kmalloc_noprof+0xd2/0x510 [ 1035.787642][T20108] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1035.787679][T20108] constrain_params_by_rules+0x175/0xca0 [ 1035.787707][T20108] ? arch_stack_walk+0xa6/0x100 [ 1035.787756][T20108] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1035.787785][T20108] ? stack_trace_save+0x8e/0xc0 [ 1035.787812][T20108] ? __pfx_stack_trace_save+0x10/0x10 [ 1035.787854][T20108] ? snd_pcm_oss_change_params_locked+0x9cd/0x3a30 [ 1035.787882][T20108] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1035.787909][T20108] ? snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1035.787947][T20108] ? __x64_sys_ioctl+0x18b/0x210 [ 1035.787974][T20108] ? do_syscall_64+0xcd/0x490 [ 1035.788007][T20108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.788032][T20108] ? snd_interval_refine+0x2fa/0x580 [ 1035.788071][T20108] snd_pcm_hw_refine+0x7de/0xad0 [ 1035.788106][T20108] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1035.788159][T20108] snd_pcm_hw_param_first+0x334/0x6f0 [ 1035.788194][T20108] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 1035.788228][T20108] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1035.788257][T20108] ? kfree+0x2b4/0x4d0 [ 1035.788287][T20108] ? snd_pcm_oss_change_params_locked+0x958/0x3a30 [ 1035.788322][T20108] snd_pcm_oss_change_params_locked+0x9cd/0x3a30 [ 1035.788368][T20108] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1035.788401][T20108] ? __pfx___mutex_lock+0x10/0x10 [ 1035.788461][T20108] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1035.788496][T20108] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1035.788527][T20108] ? hook_file_ioctl_common+0x145/0x410 [ 1035.788556][T20108] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1035.788588][T20108] ? __fget_files+0x20e/0x3c0 [ 1035.788626][T20108] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1035.788657][T20108] __x64_sys_ioctl+0x18b/0x210 [ 1035.788688][T20108] do_syscall_64+0xcd/0x490 [ 1035.788726][T20108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.788751][T20108] RIP: 0033:0x7f19c0d8e929 [ 1035.788773][T20108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.788797][T20108] RSP: 002b:00007f19bebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.788831][T20108] RAX: ffffffffffffffda RBX: 00007f19c0fb6080 RCX: 00007f19c0d8e929 [ 1035.788849][T20108] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1035.788864][T20108] RBP: 00007f19bebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.788880][T20108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.788896][T20108] R13: 0000000000000000 R14: 00007f19c0fb6080 R15: 00007ffc14e39cc8 [ 1035.788936][T20108] [ 1036.138531][T20104] ubi0: attaching mtd0 [ 1036.144796][T20104] ubi0: scanning is finished [ 1036.152954][T20104] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1036.319965][ T44] bridge0: port 3(netdevsim1) entered disabled state [ 1036.391703][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 1036.425825][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 1036.436369][ T44] bridge0: port 3(netdevsim1) entered disabled state [ 1036.456750][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.585079][ T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.597326][T20104] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1036.820395][T20116] FAULT_INJECTION: forcing a failure. [ 1036.820395][T20116] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.849014][T20116] CPU: 1 UID: 0 PID: 20116 Comm: syz.0.2453 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1036.849039][T20116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1036.849048][T20116] Call Trace: [ 1036.849053][T20116] [ 1036.849059][T20116] dump_stack_lvl+0x16c/0x1f0 [ 1036.849084][T20116] should_fail_ex+0x512/0x640 [ 1036.849106][T20116] ? __kmalloc_noprof+0xbf/0x510 [ 1036.849128][T20116] ? constrain_params_by_rules+0x175/0xca0 [ 1036.849143][T20116] should_failslab+0xc2/0x120 [ 1036.849157][T20116] __kmalloc_noprof+0xd2/0x510 [ 1036.849175][T20116] ? kasan_quarantine_put+0x10a/0x240 [ 1036.849193][T20116] ? constrain_params_by_rules+0xa09/0xca0 [ 1036.849212][T20116] constrain_params_by_rules+0x175/0xca0 [ 1036.849236][T20116] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1036.849255][T20116] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1036.849269][T20116] ? trace_event_raw_event_cq_modify+0x1de/0x290 [ 1036.849294][T20116] ? __mutex_trylock_common+0xe9/0x250 [ 1036.849315][T20116] ? snd_interval_refine+0x2fa/0x580 [ 1036.849335][T20116] snd_pcm_hw_refine+0x7de/0xad0 [ 1036.849353][T20116] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1036.849371][T20116] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1036.849389][T20116] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 1036.849405][T20116] snd_pcm_hw_param_first+0x334/0x6f0 [ 1036.849442][T20116] snd_pcm_hw_params+0x5ad/0x1b40 [ 1036.849463][T20116] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1036.849481][T20116] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1036.849500][T20116] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1036.849516][T20116] ? __asan_memset+0x23/0x50 [ 1036.849535][T20116] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1036.849553][T20116] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1036.849577][T20116] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1036.849607][T20116] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1036.849626][T20116] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1036.849642][T20116] ? hook_file_ioctl_common+0x145/0x410 [ 1036.849658][T20116] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1036.849675][T20116] ? __fget_files+0x20e/0x3c0 [ 1036.849696][T20116] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1036.849712][T20116] __x64_sys_ioctl+0x18b/0x210 [ 1036.849728][T20116] do_syscall_64+0xcd/0x490 [ 1036.849750][T20116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.849764][T20116] RIP: 0033:0x7f19c0d8e929 [ 1036.849776][T20116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.849790][T20116] RSP: 002b:00007f19bebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.849805][T20116] RAX: ffffffffffffffda RBX: 00007f19c0fb6080 RCX: 00007f19c0d8e929 [ 1036.849814][T20116] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 1036.849831][T20116] RBP: 00007f19c0e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1036.849840][T20116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.849849][T20116] R13: 0000000000000000 R14: 00007f19c0fb6080 R15: 00007ffc14e39cc8 [ 1036.849867][T20116] [ 1037.160003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.401782][ T44] bridge_slave_1: left allmulticast mode [ 1037.416801][ T44] bridge_slave_1: left promiscuous mode [ 1037.422635][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.438665][ T44] bridge_slave_0: left allmulticast mode [ 1037.444390][ T44] bridge_slave_0: left promiscuous mode [ 1037.451060][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.465544][ T5150] Bluetooth: hci2: command tx timeout [ 1038.327560][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.358437][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.381745][ T44] bond0 (unregistering): Released all slaves [ 1038.423126][T20095] chnl_net:caif_netlink_parms(): no params data found [ 1038.999612][T20095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.008522][T20095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.016103][T20095] bridge_slave_0: entered allmulticast mode [ 1039.026827][T20095] bridge_slave_0: entered promiscuous mode [ 1039.100938][T20095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.111744][T20095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.122207][T20095] bridge_slave_1: entered allmulticast mode [ 1039.136819][T20095] bridge_slave_1: entered promiscuous mode [ 1039.147895][ T44] hsr_slave_0: left promiscuous mode [ 1039.153910][ T44] hsr_slave_1: left promiscuous mode [ 1039.160396][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.167877][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.176007][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.183448][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.202848][ T44] veth1_macvtap: left promiscuous mode [ 1039.208560][ T44] veth0_macvtap: left promiscuous mode [ 1039.214218][ T44] veth1_vlan: left promiscuous mode [ 1039.219769][ T44] veth0_vlan: left promiscuous mode [ 1039.561293][ T5150] Bluetooth: hci2: command tx timeout [ 1039.668739][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1039.712582][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1040.201152][T20095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.222605][T20095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.328301][T20095] team0: Port device team_slave_0 added [ 1040.379217][T20095] team0: Port device team_slave_1 added [ 1040.577378][T20095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.595487][T20095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.621887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.669271][T20095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.715575][T20095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.749969][T20095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.793982][T20159] FAULT_INJECTION: forcing a failure. [ 1040.793982][T20159] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1040.835533][T20095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.837244][T20159] CPU: 0 UID: 0 PID: 20159 Comm: syz.0.2462 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1040.837280][T20159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1040.837293][T20159] Call Trace: [ 1040.837303][T20159] [ 1040.837313][T20159] dump_stack_lvl+0x16c/0x1f0 [ 1040.837353][T20159] should_fail_ex+0x512/0x640 [ 1040.837392][T20159] _copy_from_user+0x2e/0xd0 [ 1040.837437][T20159] copy_msghdr_from_user+0x98/0x160 [ 1040.837473][T20159] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1040.837515][T20159] ? kfree+0x24f/0x4d0 [ 1040.837544][T20159] ? __lock_acquire+0x622/0x1c90 [ 1040.837581][T20159] ___sys_recvmsg+0xdb/0x1a0 [ 1040.837616][T20159] ? __pfx____sys_recvmsg+0x10/0x10 [ 1040.837670][T20159] ? __pfx___might_resched+0x10/0x10 [ 1040.837703][T20159] do_recvmmsg+0x2fe/0x750 [ 1040.837742][T20159] ? __pfx_do_recvmmsg+0x10/0x10 [ 1040.837784][T20159] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1040.837831][T20159] ? __fget_files+0x20e/0x3c0 [ 1040.837871][T20159] __x64_sys_recvmmsg+0x22a/0x280 [ 1040.837909][T20159] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1040.837956][T20159] do_syscall_64+0xcd/0x490 [ 1040.837993][T20159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.838019][T20159] RIP: 0033:0x7f19c0d8e929 [ 1040.838039][T20159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.838062][T20159] RSP: 002b:00007f19bebf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1040.838086][T20159] RAX: ffffffffffffffda RBX: 00007f19c0fb6080 RCX: 00007f19c0d8e929 [ 1040.838103][T20159] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1040.838118][T20159] RBP: 00007f19bebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.838133][T20159] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1040.838148][T20159] R13: 0000000000000000 R14: 00007f19c0fb6080 R15: 00007ffc14e39cc8 [ 1040.838180][T20159] [ 1041.483262][T20095] hsr_slave_0: entered promiscuous mode [ 1041.497869][T20095] hsr_slave_1: entered promiscuous mode [ 1041.626109][ T5150] Bluetooth: hci2: command tx timeout [ 1043.711429][ T5150] Bluetooth: hci2: command tx timeout [ 1044.032536][T20212] FAULT_INJECTION: forcing a failure. [ 1044.032536][T20212] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.074067][T20212] CPU: 0 UID: 0 PID: 20212 Comm: syz.0.2471 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1044.074116][T20212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.074133][T20212] Call Trace: [ 1044.074143][T20212] [ 1044.074154][T20212] dump_stack_lvl+0x16c/0x1f0 [ 1044.074199][T20212] should_fail_ex+0x512/0x640 [ 1044.074236][T20212] ? __kvmalloc_node_noprof+0x124/0x620 [ 1044.074277][T20212] should_failslab+0xc2/0x120 [ 1044.074303][T20212] __kvmalloc_node_noprof+0x137/0x620 [ 1044.074340][T20212] ? io_uring_setup+0x377/0x2080 [ 1044.074379][T20212] ? io_uring_setup+0x377/0x2080 [ 1044.074409][T20212] io_uring_setup+0x377/0x2080 [ 1044.074445][T20212] ? __pfx_io_uring_setup+0x10/0x10 [ 1044.074476][T20212] ? do_futex+0x122/0x350 [ 1044.074507][T20212] ? __pfx_do_futex+0x10/0x10 [ 1044.074560][T20212] ? syscall_user_dispatch+0x78/0x140 [ 1044.074607][T20212] __x64_sys_io_uring_setup+0xc2/0x170 [ 1044.074642][T20212] do_syscall_64+0xcd/0x490 [ 1044.074683][T20212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.074710][T20212] RIP: 0033:0x7f19c0d8e929 [ 1044.074732][T20212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.074757][T20212] RSP: 002b:00007f19c1b1b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1044.074784][T20212] RAX: ffffffffffffffda RBX: 00007f19c0fb5fa0 RCX: 00007f19c0d8e929 [ 1044.074803][T20212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1044.074818][T20212] RBP: 00007f19c0e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1044.074834][T20212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.074850][T20212] R13: 0000000000000000 R14: 00007f19c0fb5fa0 R15: 00007ffc14e39cc8 [ 1044.074885][T20212] [ 1045.023472][T20241] random: crng reseeded on system resumption [ 1045.089934][T20241] FAULT_INJECTION: forcing a failure. [ 1045.089934][T20241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1045.145918][T20241] CPU: 0 UID: 0 PID: 20241 Comm: syz.0.2476 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1045.145958][T20241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1045.145974][T20241] Call Trace: [ 1045.145983][T20241] [ 1045.145993][T20241] dump_stack_lvl+0x16c/0x1f0 [ 1045.146039][T20241] should_fail_ex+0x512/0x640 [ 1045.146081][T20241] should_fail_alloc_page+0xe7/0x130 [ 1045.146109][T20241] prepare_alloc_pages+0x3c2/0x610 [ 1045.146141][T20241] ? rcu_is_watching+0x12/0xc0 [ 1045.146171][T20241] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1045.146222][T20241] ? stack_trace_save+0x8e/0xc0 [ 1045.146251][T20241] ? __pfx_stack_trace_save+0x10/0x10 [ 1045.146279][T20241] ? stack_depot_save_flags+0x28/0xa40 [ 1045.146315][T20241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1045.146358][T20241] ? kasan_save_stack+0x42/0x60 [ 1045.146392][T20241] ? kasan_save_stack+0x33/0x60 [ 1045.146433][T20241] ? do_dentry_open+0x744/0x1c10 [ 1045.146467][T20241] ? vfs_open+0x82/0x3f0 [ 1045.146491][T20241] ? path_openat+0x1de4/0x2cb0 [ 1045.146524][T20241] ? do_filp_open+0x20b/0x470 [ 1045.146557][T20241] ? do_sys_openat2+0x11b/0x1d0 [ 1045.146583][T20241] ? __x64_sys_openat+0x174/0x210 [ 1045.146610][T20241] ? do_syscall_64+0xcd/0x490 [ 1045.146646][T20241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.146676][T20241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1045.146714][T20241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1045.146762][T20241] ? policy_nodemask+0xea/0x4e0 [ 1045.146805][T20241] alloc_pages_mpol+0x1fb/0x550 [ 1045.146832][T20241] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1045.146868][T20241] alloc_pages_noprof+0x131/0x390 [ 1045.146895][T20241] get_zeroed_page_noprof+0x18/0xb0 [ 1045.146924][T20241] get_image_page+0x18/0x190 [ 1045.146947][T20241] alloc_rtree_node+0x3c/0xb0 [ 1045.146973][T20241] memory_bm_create+0x519/0x810 [ 1045.147014][T20241] create_basic_memory_bitmaps+0x10b/0x320 [ 1045.147050][T20241] snapshot_open+0x235/0x2b0 [ 1045.147080][T20241] ? __pfx_snapshot_open+0x10/0x10 [ 1045.147111][T20241] misc_open+0x35d/0x420 [ 1045.147144][T20241] ? __pfx_misc_open+0x10/0x10 [ 1045.147174][T20241] chrdev_open+0x231/0x6a0 [ 1045.147212][T20241] ? __pfx_apparmor_file_open+0x10/0x10 [ 1045.147244][T20241] ? __pfx_chrdev_open+0x10/0x10 [ 1045.147287][T20241] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1045.147328][T20241] do_dentry_open+0x744/0x1c10 [ 1045.147365][T20241] ? __pfx_chrdev_open+0x10/0x10 [ 1045.147411][T20241] vfs_open+0x82/0x3f0 [ 1045.147445][T20241] path_openat+0x1de4/0x2cb0 [ 1045.147495][T20241] ? __pfx_path_openat+0x10/0x10 [ 1045.147534][T20241] ? __lock_acquire+0xb8a/0x1c90 [ 1045.147573][T20241] do_filp_open+0x20b/0x470 [ 1045.147610][T20241] ? __pfx_do_filp_open+0x10/0x10 [ 1045.147675][T20241] ? alloc_fd+0x471/0x7d0 [ 1045.147720][T20241] do_sys_openat2+0x11b/0x1d0 [ 1045.147756][T20241] ? __pfx_do_sys_openat2+0x10/0x10 [ 1045.147801][T20241] __x64_sys_openat+0x174/0x210 [ 1045.147833][T20241] ? __pfx___x64_sys_openat+0x10/0x10 [ 1045.147879][T20241] do_syscall_64+0xcd/0x490 [ 1045.147921][T20241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.147949][T20241] RIP: 0033:0x7f19c0d8e929 [ 1045.147971][T20241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.147996][T20241] RSP: 002b:00007f19c1b1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1045.148022][T20241] RAX: ffffffffffffffda RBX: 00007f19c0fb5fa0 RCX: 00007f19c0d8e929 [ 1045.148041][T20241] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1045.148060][T20241] RBP: 00007f19c0e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1045.148077][T20241] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 1045.148094][T20241] R13: 0000000000000000 R14: 00007f19c0fb5fa0 R15: 00007ffc14e39cc8 [ 1045.148133][T20241] [ 1045.669985][T20095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1045.792355][T20095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1045.806802][T20095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1045.818154][T20095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1045.901452][T20095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.916916][T20095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.943876][T20095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1045.954487][T20095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1045.980283][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.987960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.067775][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.074931][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.986467][T20095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.250582][T20296] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1048.321680][T20296] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1048.406108][T20296] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1048.421017][T20095] veth0_vlan: entered promiscuous mode [ 1048.478195][T20095] veth1_vlan: entered promiscuous mode [ 1048.494509][T20296] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1048.531194][T20296] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1048.643660][T20095] veth0_macvtap: entered promiscuous mode [ 1048.687195][T20095] veth1_macvtap: entered promiscuous mode [ 1048.762072][T20095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.831085][T20095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.849541][T20095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.859477][T20095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.868674][T20095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.877937][T20095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.134282][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.208032][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.294044][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.315472][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.405222][T20308] __vm_enough_memory: pid: 20308, comm: syz.2.2483, bytes: 4398046511104 not enough memory for the allocation [ 1049.475057][T20305] FAULT_INJECTION: forcing a failure. [ 1049.475057][T20305] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.495638][T20305] CPU: 0 UID: 0 PID: 20305 Comm: syz.2.2483 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1049.495678][T20305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1049.495695][T20305] Call Trace: [ 1049.495704][T20305] [ 1049.495714][T20305] dump_stack_lvl+0x16c/0x1f0 [ 1049.495759][T20305] should_fail_ex+0x512/0x640 [ 1049.495795][T20305] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1049.495838][T20305] should_failslab+0xc2/0x120 [ 1049.495864][T20305] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1049.495902][T20305] ? kmem_cache_free+0x2d1/0x4d0 [ 1049.495938][T20305] ? getname_kernel+0x52/0x370 [ 1049.495968][T20305] getname_kernel+0x52/0x370 [ 1049.495993][T20305] do_file_open_root+0x19d/0x610 [ 1049.496031][T20305] ? __pfx_do_file_open_root+0x10/0x10 [ 1049.496097][T20305] ? vsnprintf+0x318/0x1160 [ 1049.496133][T20305] file_open_root+0x2a7/0x450 [ 1049.496167][T20305] ? __pfx_file_open_root+0x10/0x10 [ 1049.496197][T20305] ? find_held_lock+0x2b/0x80 [ 1049.496222][T20305] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 1049.496254][T20305] kernel_read_file_from_path_initns+0x189/0x260 [ 1049.496302][T20305] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 1049.496328][T20305] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1049.496357][T20305] ? _request_firmware+0x503/0x1470 [ 1049.496397][T20305] _request_firmware+0x744/0x1470 [ 1049.496444][T20305] ? __pfx__request_firmware+0x10/0x10 [ 1049.496490][T20305] request_firmware+0x35/0x50 [ 1049.496523][T20305] valid_regdb+0x188/0x590 [ 1049.496550][T20305] ? __pfx___mutex_lock+0x10/0x10 [ 1049.496590][T20305] ? __pfx_valid_regdb+0x10/0x10 [ 1049.496626][T20305] reg_reload_regdb+0x11e/0x460 [ 1049.496659][T20305] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1049.496691][T20305] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1049.496727][T20305] ? nl80211_pre_doit+0x1b0/0xb10 [ 1049.496768][T20305] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1049.496805][T20305] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1049.496836][T20305] ? rcu_is_watching+0x12/0xc0 [ 1049.496875][T20305] ? bpf_lsm_capable+0x9/0x10 [ 1049.496905][T20305] ? security_capable+0x7e/0x260 [ 1049.496954][T20305] genl_rcv_msg+0x55c/0x800 [ 1049.496990][T20305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1049.497017][T20305] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1049.497052][T20305] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1049.497079][T20305] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1049.497129][T20305] netlink_rcv_skb+0x158/0x420 [ 1049.497157][T20305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1049.497190][T20305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1049.497234][T20305] ? netlink_deliver_tap+0x1ae/0xd30 [ 1049.497270][T20305] genl_rcv+0x28/0x40 [ 1049.497299][T20305] netlink_unicast+0x53a/0x7f0 [ 1049.497332][T20305] ? __pfx_netlink_unicast+0x10/0x10 [ 1049.497371][T20305] netlink_sendmsg+0x8d1/0xdd0 [ 1049.497407][T20305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.497449][T20305] ____sys_sendmsg+0xa98/0xc70 [ 1049.497481][T20305] ? copy_msghdr_from_user+0x10a/0x160 [ 1049.497517][T20305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1049.497557][T20305] ? __pfx_futex_wake_mark+0x10/0x10 [ 1049.497600][T20305] ___sys_sendmsg+0x134/0x1d0 [ 1049.497640][T20305] ? __pfx____sys_sendmsg+0x10/0x10 [ 1049.497676][T20305] ? __lock_acquire+0x622/0x1c90 [ 1049.497755][T20305] __sys_sendmsg+0x16d/0x220 [ 1049.497794][T20305] ? __pfx___sys_sendmsg+0x10/0x10 [ 1049.497832][T20305] ? __x64_sys_futex+0x1e0/0x4c0 [ 1049.497885][T20305] do_syscall_64+0xcd/0x490 [ 1049.497927][T20305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.497954][T20305] RIP: 0033:0x7f068518e929 [ 1049.497977][T20305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.498003][T20305] RSP: 002b:00007f068604d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.498030][T20305] RAX: ffffffffffffffda RBX: 00007f06853b5fa0 RCX: 00007f068518e929 [ 1049.498049][T20305] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 1049.498066][T20305] RBP: 00007f0685210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1049.498082][T20305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.498099][T20305] R13: 0000000000000000 R14: 00007f06853b5fa0 R15: 00007ffe2f160bc8 [ 1049.498135][T20305] [ 1049.498157][T20305] platform regulatory.0: loading /lib/firmware/updates/regulatory.db.p7s failed with error -12 [ 1050.192636][T20305] syz.2.2483 (20305) used greatest stack depth: 19800 bytes left [ 1050.875324][T20329] FAULT_INJECTION: forcing a failure. [ 1050.875324][T20329] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.930457][T20329] CPU: 0 UID: 0 PID: 20329 Comm: syz.2.2484 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1050.930500][T20329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1050.930516][T20329] Call Trace: [ 1050.930525][T20329] [ 1050.930536][T20329] dump_stack_lvl+0x16c/0x1f0 [ 1050.930580][T20329] should_fail_ex+0x512/0x640 [ 1050.930618][T20329] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1050.930657][T20329] should_failslab+0xc2/0x120 [ 1050.930684][T20329] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1050.930719][T20329] ? io_uring_setup+0x24f/0x2080 [ 1050.930756][T20329] io_uring_setup+0x24f/0x2080 [ 1050.930793][T20329] ? __pfx_io_uring_setup+0x10/0x10 [ 1050.930824][T20329] ? do_futex+0x122/0x350 [ 1050.930857][T20329] ? __pfx_do_futex+0x10/0x10 [ 1050.930908][T20329] ? xfd_validate_state+0x61/0x180 [ 1050.930940][T20329] ? __pfx_ksys_write+0x10/0x10 [ 1050.930984][T20329] __x64_sys_io_uring_setup+0xc2/0x170 [ 1050.931019][T20329] do_syscall_64+0xcd/0x490 [ 1050.931061][T20329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.931087][T20329] RIP: 0033:0x7f068518e929 [ 1050.931109][T20329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.931135][T20329] RSP: 002b:00007f068602c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1050.931160][T20329] RAX: ffffffffffffffda RBX: 00007f06853b6080 RCX: 00007f068518e929 [ 1050.931178][T20329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1050.931194][T20329] RBP: 00007f0685210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1050.931211][T20329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.931228][T20329] R13: 0000000000000000 R14: 00007f06853b6080 R15: 00007ffe2f160bc8 [ 1050.931263][T20329] [ 1051.607213][ T30] audit: type=1804 audit(1750966039.811:13): pid=20349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2487" name="/newroot/21/file0" dev="tmpfs" ino=129 res=1 errno=0 [ 1051.670359][ T30] audit: type=1800 audit(1750966039.811:14): pid=20349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2487" name="file0" dev="tmpfs" ino=129 res=0 errno=0 [ 1051.729955][T20351] ubi0: attaching mtd0 [ 1051.813570][T20351] ubi0: scanning is finished [ 1051.888579][T20356] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 1051.906943][T20351] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1052.298069][T20351] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1053.202664][T20382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2492'. [ 1053.242141][T20382] bridge_slave_1: left allmulticast mode [ 1053.251471][T20382] bridge_slave_1: left promiscuous mode [ 1053.281648][T20385] FAULT_INJECTION: forcing a failure. [ 1053.281648][T20385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1053.297304][T20382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.312154][T20385] CPU: 0 UID: 0 PID: 20385 Comm: syz.0.2493 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1053.312201][T20385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.312216][T20385] Call Trace: [ 1053.312225][T20385] [ 1053.312235][T20385] dump_stack_lvl+0x16c/0x1f0 [ 1053.312277][T20385] should_fail_ex+0x512/0x640 [ 1053.312317][T20385] should_fail_alloc_page+0xe7/0x130 [ 1053.312345][T20385] prepare_alloc_pages+0x3c2/0x610 [ 1053.312382][T20385] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1053.312421][T20385] ? __lock_acquire+0xb8a/0x1c90 [ 1053.312469][T20385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1053.312506][T20385] ? do_raw_spin_lock+0x12c/0x2b0 [ 1053.312543][T20385] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1053.312579][T20385] ? find_held_lock+0x2b/0x80 [ 1053.312615][T20385] ? __lock_acquire+0xb8a/0x1c90 [ 1053.312646][T20385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1053.312684][T20385] ? policy_nodemask+0xea/0x4e0 [ 1053.312726][T20385] alloc_pages_mpol+0x1fb/0x550 [ 1053.312753][T20385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1053.312789][T20385] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1053.312821][T20385] shmem_alloc_folio+0x135/0x160 [ 1053.312850][T20385] shmem_alloc_and_add_folio+0x499/0xc20 [ 1053.312889][T20385] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1053.312923][T20385] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1053.312962][T20385] shmem_get_folio_gfp+0x67f/0x1600 [ 1053.313003][T20385] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1053.313039][T20385] ? __pfx___might_resched+0x10/0x10 [ 1053.313070][T20385] shmem_fallocate+0x795/0xf50 [ 1053.313118][T20385] ? __pfx_shmem_fallocate+0x10/0x10 [ 1053.313150][T20385] ? aa_file_perm+0x4d6/0xfb0 [ 1053.313195][T20385] ? __lock_acquire+0xb8a/0x1c90 [ 1053.313225][T20385] ? __lock_acquire+0x622/0x1c90 [ 1053.313269][T20385] ? __pfx_shmem_fallocate+0x10/0x10 [ 1053.313301][T20385] vfs_fallocate+0x60b/0x10c0 [ 1053.313337][T20385] ? __pfx_vfs_fallocate+0x10/0x10 [ 1053.313380][T20385] __x64_sys_fallocate+0xd5/0x150 [ 1053.313415][T20385] do_syscall_64+0xcd/0x490 [ 1053.313449][T20385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.313473][T20385] RIP: 0033:0x7f19c0d8e929 [ 1053.313493][T20385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.313514][T20385] RSP: 002b:00007f19bebf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1053.313537][T20385] RAX: ffffffffffffffda RBX: 00007f19c0fb6080 RCX: 00007f19c0d8e929 [ 1053.313554][T20385] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 8000000000000003 [ 1053.313567][T20385] RBP: 00007f19bebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.313580][T20385] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000001 [ 1053.313595][T20385] R13: 0000000000000000 R14: 00007f19c0fb6080 R15: 00007ffc14e39cc8 [ 1053.313627][T20385] [ 1053.606997][T20382] bridge_slave_0: left allmulticast mode [ 1053.612974][T20382] bridge_slave_0: left promiscuous mode [ 1053.633997][T20382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.925564][ T30] audit: type=1804 audit(1750966042.151:15): pid=20385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2493" name="/newroot/21/file0" dev="tmpfs" ino=130 res=1 errno=0 [ 1053.978614][ T30] audit: type=1800 audit(1750966042.151:16): pid=20385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2493" name="file0" dev="tmpfs" ino=130 res=0 errno=0 [ 1054.433782][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.440224][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.831086][T20401] FAULT_INJECTION: forcing a failure. [ 1054.831086][T20401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.988930][T20401] CPU: 1 UID: 0 PID: 20401 Comm: syz.2.2497 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1054.988975][T20401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.988990][T20401] Call Trace: [ 1054.988999][T20401] [ 1054.989009][T20401] dump_stack_lvl+0x16c/0x1f0 [ 1054.989051][T20401] should_fail_ex+0x512/0x640 [ 1054.989092][T20401] _copy_from_iter+0x29f/0x16f0 [ 1054.989132][T20401] ? __alloc_skb+0x200/0x380 [ 1054.989168][T20401] ? __pfx__copy_from_iter+0x10/0x10 [ 1054.989208][T20401] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1054.989246][T20401] netlink_sendmsg+0x829/0xdd0 [ 1054.989280][T20401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1054.989320][T20401] ____sys_sendmsg+0xa98/0xc70 [ 1054.989350][T20401] ? copy_msghdr_from_user+0x10a/0x160 [ 1054.989386][T20401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1054.989432][T20401] ___sys_sendmsg+0x134/0x1d0 [ 1054.989470][T20401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1054.989503][T20401] ? __lock_acquire+0x622/0x1c90 [ 1054.989579][T20401] __sys_sendmsg+0x16d/0x220 [ 1054.989616][T20401] ? __pfx___sys_sendmsg+0x10/0x10 [ 1054.989676][T20401] do_syscall_64+0xcd/0x490 [ 1054.989714][T20401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.989740][T20401] RIP: 0033:0x7f068518e929 [ 1054.989761][T20401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.989786][T20401] RSP: 002b:00007f068604d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.989811][T20401] RAX: ffffffffffffffda RBX: 00007f06853b5fa0 RCX: 00007f068518e929 [ 1054.989828][T20401] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1054.989844][T20401] RBP: 00007f068604d090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.989860][T20401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.989876][T20401] R13: 0000000000000000 R14: 00007f06853b5fa0 R15: 00007ffe2f160bc8 [ 1054.989911][T20401] [ 1059.956716][T20465] random: crng reseeded on system resumption [ 1059.984448][T20465] FAULT_INJECTION: forcing a failure. [ 1059.984448][T20465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1060.046015][T20465] CPU: 0 UID: 0 PID: 20465 Comm: syz.0.2510 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1060.046056][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.046072][T20465] Call Trace: [ 1060.046081][T20465] [ 1060.046092][T20465] dump_stack_lvl+0x16c/0x1f0 [ 1060.046136][T20465] should_fail_ex+0x512/0x640 [ 1060.046179][T20465] should_fail_alloc_page+0xe7/0x130 [ 1060.046206][T20465] prepare_alloc_pages+0x3c2/0x610 [ 1060.046248][T20465] ? rcu_is_watching+0x12/0xc0 [ 1060.046280][T20465] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1060.046333][T20465] ? stack_trace_save+0x8e/0xc0 [ 1060.046363][T20465] ? __pfx_stack_trace_save+0x10/0x10 [ 1060.046391][T20465] ? stack_depot_save_flags+0x28/0xa40 [ 1060.046430][T20465] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1060.046474][T20465] ? kasan_save_stack+0x42/0x60 [ 1060.046507][T20465] ? kasan_save_stack+0x33/0x60 [ 1060.046549][T20465] ? do_dentry_open+0x744/0x1c10 [ 1060.046583][T20465] ? vfs_open+0x82/0x3f0 [ 1060.046607][T20465] ? path_openat+0x1de4/0x2cb0 [ 1060.046641][T20465] ? do_filp_open+0x20b/0x470 [ 1060.046673][T20465] ? do_sys_openat2+0x11b/0x1d0 [ 1060.046699][T20465] ? __x64_sys_openat+0x174/0x210 [ 1060.046726][T20465] ? do_syscall_64+0xcd/0x490 [ 1060.046762][T20465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.046792][T20465] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1060.046828][T20465] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1060.046868][T20465] ? policy_nodemask+0xea/0x4e0 [ 1060.046911][T20465] alloc_pages_mpol+0x1fb/0x550 [ 1060.046939][T20465] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1060.046976][T20465] alloc_pages_noprof+0x131/0x390 [ 1060.047004][T20465] get_zeroed_page_noprof+0x18/0xb0 [ 1060.047049][T20465] get_image_page+0x18/0x190 [ 1060.047077][T20465] alloc_rtree_node+0x3c/0xb0 [ 1060.047105][T20465] memory_bm_create+0x519/0x810 [ 1060.047149][T20465] create_basic_memory_bitmaps+0x10b/0x320 [ 1060.047186][T20465] snapshot_open+0x235/0x2b0 [ 1060.047216][T20465] ? __pfx_snapshot_open+0x10/0x10 [ 1060.047281][T20465] misc_open+0x35d/0x420 [ 1060.047317][T20465] ? __pfx_misc_open+0x10/0x10 [ 1060.047350][T20465] chrdev_open+0x231/0x6a0 [ 1060.047386][T20465] ? __pfx_apparmor_file_open+0x10/0x10 [ 1060.047419][T20465] ? __pfx_chrdev_open+0x10/0x10 [ 1060.047459][T20465] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1060.047501][T20465] do_dentry_open+0x744/0x1c10 [ 1060.047538][T20465] ? __pfx_chrdev_open+0x10/0x10 [ 1060.047584][T20465] vfs_open+0x82/0x3f0 [ 1060.047618][T20465] path_openat+0x1de4/0x2cb0 [ 1060.047666][T20465] ? __pfx_path_openat+0x10/0x10 [ 1060.047705][T20465] ? __lock_acquire+0xb8a/0x1c90 [ 1060.047743][T20465] do_filp_open+0x20b/0x470 [ 1060.047781][T20465] ? __pfx_do_filp_open+0x10/0x10 [ 1060.047846][T20465] ? alloc_fd+0x471/0x7d0 [ 1060.047892][T20465] do_sys_openat2+0x11b/0x1d0 [ 1060.047921][T20465] ? __pfx_do_sys_openat2+0x10/0x10 [ 1060.047965][T20465] __x64_sys_openat+0x174/0x210 [ 1060.047994][T20465] ? __pfx___x64_sys_openat+0x10/0x10 [ 1060.048040][T20465] do_syscall_64+0xcd/0x490 [ 1060.048082][T20465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.048109][T20465] RIP: 0033:0x7f19c0d8e929 [ 1060.048131][T20465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.048157][T20465] RSP: 002b:00007f19c1b1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1060.048183][T20465] RAX: ffffffffffffffda RBX: 00007f19c0fb5fa0 RCX: 00007f19c0d8e929 [ 1060.048202][T20465] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1060.048221][T20465] RBP: 00007f19c0e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1060.048245][T20465] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 1060.048262][T20465] R13: 0000000000000000 R14: 00007f19c0fb5fa0 R15: 00007ffc14e39cc8 [ 1060.048299][T20465] [ 1061.153561][T20487] Invalid ELF header magic: != ELF [ 1061.327229][T20489] FAULT_INJECTION: forcing a failure. [ 1061.327229][T20489] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.347662][T20489] CPU: 0 UID: 0 PID: 20489 Comm: syz.3.2512 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1061.347699][T20489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1061.347713][T20489] Call Trace: [ 1061.347721][T20489] [ 1061.347730][T20489] dump_stack_lvl+0x16c/0x1f0 [ 1061.347756][T20489] should_fail_ex+0x512/0x640 [ 1061.347780][T20489] should_failslab+0xc2/0x120 [ 1061.347794][T20489] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1061.347816][T20489] ? xas_split_alloc+0x11c/0x490 [ 1061.347838][T20489] xas_split_alloc+0x11c/0x490 [ 1061.347863][T20489] __folio_split+0xca8/0x48d0 [ 1061.347888][T20489] ? find_held_lock+0x2b/0x80 [ 1061.347903][T20489] ? shmem_writeout+0x59f/0x13b0 [ 1061.347923][T20489] ? __pfx___folio_split+0x10/0x10 [ 1061.347938][T20489] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1061.347965][T20489] ? folio_alloc_swap+0x96b/0xca0 [ 1061.347988][T20489] split_folio_to_list+0x9b/0x180 [ 1061.348007][T20489] shmem_writeout+0x608/0x13b0 [ 1061.348026][T20489] ? __pfx_shmem_writeout+0x10/0x10 [ 1061.348049][T20489] ? inode_to_bdi+0x9e/0x160 [ 1061.348069][T20489] ? folio_clear_dirty_for_io+0x112/0x810 [ 1061.348087][T20489] ? __pfx_shmem_writeout+0x10/0x10 [ 1061.348104][T20489] pageout+0x38f/0xa50 [ 1061.348121][T20489] ? __pfx_pageout+0x10/0x10 [ 1061.348158][T20489] ? __pfx_try_to_unmap_one+0x10/0x10 [ 1061.348176][T20489] ? __pfx_folio_not_mapped+0x10/0x10 [ 1061.348191][T20489] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 1061.348215][T20489] shrink_folio_list+0x2f4d/0x3fc0 [ 1061.348239][T20489] ? __pfx_shrink_folio_list+0x10/0x10 [ 1061.348291][T20489] ? __lock_acquire+0x622/0x1c90 [ 1061.348312][T20489] ? __lock_acquire+0x622/0x1c90 [ 1061.348331][T20489] reclaim_folio_list+0xda/0x5d0 [ 1061.348347][T20489] ? __lock_acquire+0x622/0x1c90 [ 1061.348364][T20489] ? css_rstat_updated+0x9d/0xd30 [ 1061.348380][T20489] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1061.348405][T20489] ? lru_gen_update_size+0x543/0xe10 [ 1061.348426][T20489] ? lru_gen_del_folio+0x32b/0x540 [ 1061.348443][T20489] reclaim_pages+0x47b/0x650 [ 1061.348463][T20489] ? __pfx_reclaim_pages+0x10/0x10 [ 1061.348481][T20489] ? madvise_cold_or_pageout_pte_range+0x1ee3/0x2180 [ 1061.348501][T20489] madvise_cold_or_pageout_pte_range+0x16d5/0x2180 [ 1061.348524][T20489] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1061.348540][T20489] ? __lock_acquire+0x622/0x1c90 [ 1061.348562][T20489] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1061.348578][T20489] walk_pgd_range+0xc53/0x1f60 [ 1061.348611][T20489] ? __pfx_walk_pgd_range+0x10/0x10 [ 1061.348637][T20489] __walk_page_range+0x163/0x820 [ 1061.348658][T20489] ? find_vma+0xbf/0x140 [ 1061.348671][T20489] ? __pfx_find_vma+0x10/0x10 [ 1061.348686][T20489] ? walk_page_test+0x9b/0x180 [ 1061.348707][T20489] walk_page_range_mm+0x54d/0x8a0 [ 1061.348730][T20489] ? __pfx_walk_page_range_mm+0x10/0x10 [ 1061.348753][T20489] ? find_held_lock+0x2b/0x80 [ 1061.348766][T20489] ? mlock_drain_local+0x22d/0x4f0 [ 1061.348788][T20489] walk_page_range+0x63/0x90 [ 1061.348810][T20489] madvise_pageout+0x254/0x540 [ 1061.348825][T20489] ? __pfx_madvise_pageout+0x10/0x10 [ 1061.348847][T20489] ? mtree_range_walk+0x718/0xc00 [ 1061.348864][T20489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1061.348887][T20489] madvise_vma_behavior+0x460/0x2420 [ 1061.348902][T20489] ? mas_prev_setup.constprop.0+0x81/0x830 [ 1061.348922][T20489] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1061.348937][T20489] ? __pfx_mas_prev+0x10/0x10 [ 1061.348961][T20489] ? find_vma_prev+0xda/0x160 [ 1061.348976][T20489] ? __pfx_find_vma_prev+0x10/0x10 [ 1061.349000][T20489] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1061.349014][T20489] madvise_walk_vmas+0x1d1/0x2c0 [ 1061.349028][T20489] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1061.349048][T20489] madvise_do_behavior+0x15d/0x3f0 [ 1061.349065][T20489] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1061.349090][T20489] do_madvise+0x161/0x230 [ 1061.349104][T20489] ? __pfx_do_madvise+0x10/0x10 [ 1061.349126][T20489] ? ksys_write+0x1ac/0x250 [ 1061.349145][T20489] ? __pfx_ksys_write+0x10/0x10 [ 1061.349166][T20489] __x64_sys_madvise+0xa9/0x110 [ 1061.349180][T20489] ? lockdep_hardirqs_on+0x7c/0x110 [ 1061.349199][T20489] do_syscall_64+0xcd/0x490 [ 1061.349219][T20489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.349234][T20489] RIP: 0033:0x7f43fe98e929 [ 1061.349245][T20489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.349258][T20489] RSP: 002b:00007f43fc772038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1061.349272][T20489] RAX: ffffffffffffffda RBX: 00007f43febb6400 RCX: 00007f43fe98e929 [ 1061.349281][T20489] RDX: 0000000000000015 RSI: 8000000000000000 RDI: 0000000000000000 [ 1061.349295][T20489] RBP: 00007f43fc772090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.349304][T20489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.349311][T20489] R13: 0000000000000001 R14: 00007f43febb6400 R15: 00007fffaf8039a8 [ 1061.349329][T20489] [ 1062.113138][ T5150] ================================================================== [ 1062.121432][ T5150] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 1062.129289][ T5150] Read of size 140 at addr ffffc90003090000 by task kworker/u9:1/5150 [ 1062.137473][ T5150] [ 1062.139812][ T5150] CPU: 1 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1062.139848][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1062.139866][ T5150] Workqueue: hci0 hci_devcd_timeout [ 1062.139902][ T5150] Call Trace: [ 1062.139911][ T5150] [ 1062.139921][ T5150] dump_stack_lvl+0x116/0x1f0 [ 1062.139959][ T5150] print_report+0xcd/0x680 [ 1062.139996][ T5150] ? __virt_addr_valid+0x81/0x610 [ 1062.140024][ T5150] ? hci_devcd_dump+0x142/0x240 [ 1062.140053][ T5150] kasan_report+0xe0/0x110 [ 1062.140076][ T5150] ? hci_devcd_dump+0x142/0x240 [ 1062.140111][ T5150] kasan_check_range+0x100/0x1b0 [ 1062.140139][ T5150] __asan_memcpy+0x23/0x60 [ 1062.140171][ T5150] hci_devcd_dump+0x142/0x240 [ 1062.140203][ T5150] hci_devcd_timeout+0xb5/0x2e0 [ 1062.140233][ T5150] ? rcu_is_watching+0x12/0xc0 [ 1062.140261][ T5150] process_one_work+0x9cc/0x1b70 [ 1062.140309][ T5150] ? __pfx_process_one_work+0x10/0x10 [ 1062.140349][ T5150] ? assign_work+0x1a0/0x250 [ 1062.140383][ T5150] worker_thread+0x6c8/0xf10 [ 1062.140423][ T5150] ? __kthread_parkme+0x19e/0x250 [ 1062.140451][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 1062.140486][ T5150] kthread+0x3c5/0x780 [ 1062.140519][ T5150] ? __pfx_kthread+0x10/0x10 [ 1062.140552][ T5150] ? rcu_is_watching+0x12/0xc0 [ 1062.140576][ T5150] ? __pfx_kthread+0x10/0x10 [ 1062.140608][ T5150] ret_from_fork+0x5d4/0x6f0 [ 1062.140640][ T5150] ? __pfx_kthread+0x10/0x10 [ 1062.140672][ T5150] ret_from_fork_asm+0x1a/0x30 [ 1062.140706][ T5150] [ 1062.140715][ T5150] [ 1062.293382][ T5150] The buggy address ffffc90003090000 belongs to a vmalloc virtual mapping [ 1062.301909][ T5150] Memory state around the buggy address: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1062.307569][ T5150] ffffc9000308ff00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1062.315926][ T5150] ffffc9000308ff80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1062.324030][ T5150] >ffffc90003090000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1062.332217][ T5150] ^ [ 1062.336398][ T5150] ffffc90003090080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1062.344484][ T5150] ffffc90003090100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1062.352660][ T5150] ================================================================== [ 1062.386764][ T5150] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1062.394041][ T5150] CPU: 1 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1062.406225][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1062.416311][ T5150] Workqueue: hci0 hci_devcd_timeout [ 1062.421552][ T5150] Call Trace: [ 1062.424847][ T5150] [ 1062.427794][ T5150] dump_stack_lvl+0x3d/0x1f0 [ 1062.432428][ T5150] panic+0x71c/0x800 [ 1062.436353][ T5150] ? __pfx_panic+0x10/0x10 [ 1062.440799][ T5150] ? mark_held_locks+0x49/0x80 [ 1062.445616][ T5150] ? preempt_schedule_thunk+0x16/0x30 [ 1062.451136][ T5150] ? hci_devcd_dump+0x142/0x240 [ 1062.456021][ T5150] ? preempt_schedule_common+0x44/0xc0 [ 1062.461516][ T5150] ? check_panic_on_warn+0x1f/0xb0 [ 1062.466673][ T5150] ? hci_devcd_dump+0x142/0x240 [ 1062.471585][ T5150] check_panic_on_warn+0xab/0xb0 [ 1062.477029][ T5150] end_report+0x107/0x170 [ 1062.481798][ T5150] kasan_report+0xee/0x110 [ 1062.486237][ T5150] ? hci_devcd_dump+0x142/0x240 [ 1062.491114][ T5150] kasan_check_range+0x100/0x1b0 [ 1062.496081][ T5150] __asan_memcpy+0x23/0x60 [ 1062.500780][ T5150] hci_devcd_dump+0x142/0x240 [ 1062.505484][ T5150] hci_devcd_timeout+0xb5/0x2e0 [ 1062.510349][ T5150] ? rcu_is_watching+0x12/0xc0 [ 1062.515127][ T5150] process_one_work+0x9cc/0x1b70 [ 1062.520188][ T5150] ? __pfx_process_one_work+0x10/0x10 [ 1062.525843][ T5150] ? assign_work+0x1a0/0x250 [ 1062.530647][ T5150] worker_thread+0x6c8/0xf10 [ 1062.535398][ T5150] ? __kthread_parkme+0x19e/0x250 [ 1062.540520][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 1062.545755][ T5150] kthread+0x3c5/0x780 [ 1062.550104][ T5150] ? __pfx_kthread+0x10/0x10 [ 1062.554801][ T5150] ? rcu_is_watching+0x12/0xc0 [ 1062.559791][ T5150] ? __pfx_kthread+0x10/0x10 [ 1062.564976][ T5150] ret_from_fork+0x5d4/0x6f0 [ 1062.569938][ T5150] ? __pfx_kthread+0x10/0x10 [ 1062.574559][ T5150] ret_from_fork_asm+0x1a/0x30 [ 1062.579361][ T5150] [ 1062.582809][ T5150] Kernel Offset: disabled [ 1062.587260][ T5150] Rebooting in 86400 seconds..