last executing test programs: 9.343893889s ago: executing program 1 (id=3379): adjtimex$auto(&(0x7f0000000000)={0x8, 0x0, 0x8, 0x8, 0x3, 0x5, 0x7fffffff, 0x0, 0x2951, 0x2, 0x4, {0x6, 0x2032}, 0x100000000, 0x8, 0x4, 0x4, 0x0, 0x8, 0x0, 0x8001, 0xa7, 0x10001, 0x5}) clock_adjtime$auto(0x2, &(0x7f0000000100)={0x3, 0x0, 0x8, 0x4, 0xffffffffffff0001, 0x4, 0x0, 0x0, 0x7, 0x2a, 0x40, {0xed, 0x6}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x7, 0x2, 0x6, 0x3, 0x6, 0x9}) clock_adjtime$auto(0x8, &(0x7f0000000200)={0x6e3c7063, 0x0, 0x10, 0x6, 0x8000000000000000, 0xc1, 0x0, 0x0, 0x8, 0x6, 0x7, {0x7, 0x7}, 0xf8, 0x1000, 0xa9, 0x9, 0x0, 0x1, 0x10, 0x7, 0x8, 0xd76, 0x2a5}) keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x40, 0x2, 0x1, 0x8000000000000001) adjtimex$auto(&(0x7f0000000300)={0xb, 0x0, 0x6ebf, 0xc, 0xaba, 0x8, 0x9, 0x0, 0x6a09, 0xfffffffffffff0f9, 0x1, {0x6, 0x6}, 0x85ff, 0x10001, 0xc43a, 0xc, 0x0, 0xc41, 0x4, 0x7fffffffffffffff, 0x4, 0x10001, 0x1ff}) adjtimex$auto(&(0x7f0000000400)={0x10000, 0x0, 0x2, 0x9, 0x80000001, 0x10001, 0x5, 0x0, 0x401, 0x5, 0x5, {0x9, 0xca1}, 0x2, 0x10001, 0x0, 0x5, 0x0, 0x7f, 0x7fffffffffffffff, 0x0, 0x8, 0x9, 0x9}) adjtimex$auto(&(0x7f0000000500)={0x2, 0x0, 0x81, 0x4, 0x2, 0xc3b, 0x9, 0x0, 0x4, 0xffffffff, 0x7, {0x7, 0x4}, 0x77d8, 0xfffffffffffff3c7, 0x4000000000000000, 0x4, 0x0, 0x4, 0x0, 0x5, 0x8000000000000000, 0xd89, 0xd5f40246}) adjtimex$auto(&(0x7f0000000600)={0x61, 0x0, 0x7, 0x40, 0x1, 0x8, 0x5, 0x0, 0xb090, 0x0, 0x1, {0x5, 0x10000}, 0x4, 0x5271, 0x7, 0x6, 0x0, 0x8000000000000000, 0x3, 0x10000, 0x3, 0x9, 0x4}) clock_adjtime$auto(0x4, &(0x7f0000000700)={0x4, 0x0, 0x6, 0x71, 0x1, 0x5, 0x7, 0x0, 0x5, 0x8, 0x263, {0x1, 0x100}, 0x8, 0x2, 0x0, 0x7, 0x0, 0xa, 0x10, 0x401, 0x80, 0x1, 0x1ff}) clock_adjtime$auto(0x8, &(0x7f0000000800)={0x5, 0x0, 0x5, 0x7, 0xff, 0x8, 0x68, 0x0, 0x2, 0x2, 0xfff, {0x7fff, 0x4}, 0x7, 0x7, 0x3, 0x2, 0x0, 0x9, 0x5, 0x81, 0xfffffffffffffc01, 0x7, 0xfffeffff}) clock_adjtime$auto(0x4, &(0x7f0000000900)={0x4, 0x0, 0x6, 0x80000000, 0x5, 0x5, 0x8796, 0x0, 0x4, 0x4, 0x2666, {0xff5, 0x100000000}, 0x6, 0x40b7, 0x0, 0x5, 0x0, 0xfffffffffffffffb, 0x8000000000000001, 0x8000, 0x8, 0x0, 0x5}) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000a00), 0x101002, 0x0) adjtimex$auto(&(0x7f0000000a40)={0xae, 0x0, 0x10000, 0xfe52, 0x7f, 0x9f6f, 0x3, 0x0, 0xc33, 0x80000000, 0x6, {0xd5fd, 0x101}, 0x10, 0x4, 0xa5, 0x4, 0x0, 0x6, 0xa, 0x3, 0x0, 0x83e, 0x1ff}) clock_adjtime$auto(0x7fff, &(0x7f0000000b40)={0x8, 0x0, 0xfc4, 0x5, 0x8000, 0xffffffff, 0x9, 0x0, 0x9, 0x8, 0xe8, {0x25e0977e, 0x5bb}, 0x1, 0x6, 0x100000001, 0xffd4, 0x0, 0x4, 0xcf, 0xe, 0x6, 0x9, 0x3}) bind$auto(r0, &(0x7f0000000c40)=@llc={0x1a, 0x323, 0xf4, 0x7, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x0) clock_adjtime$auto(0xd1, &(0x7f0000000c80)={0x400, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x5, 0x0, 0x100000000, 0x9, 0xf1f, {0x1, 0xe}, 0x200000000000000, 0x9, 0x7, 0x3, 0x0, 0x1, 0x8, 0xd, 0xc8e, 0x0, 0x9}) clock_adjtime$auto(0x3, &(0x7f0000000d80)={0x5, 0x0, 0x7ff, 0x4, 0x7, 0x98b, 0x3, 0x0, 0x1ff, 0x4, 0x3, {0x8000, 0xfff}, 0x9, 0x0, 0x1, 0x0, 0x0, 0x2, 0x100, 0x3, 0x1000, 0x80000001, 0xfffffffc}) clock_adjtime$auto(0x1, &(0x7f0000000e80)={0xb, 0x0, 0x0, 0x401, 0x101, 0xffff, 0x7, 0x0, 0xfffffffffffffffd, 0xe4c, 0xa5d3, {0x8, 0x3}, 0x0, 0x3, 0x7fffffff, 0x100, 0x0, 0xff, 0xfffffffffffffeff, 0x1, 0xfff, 0x10, 0x8}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/dsp1\x00', 0x101000, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, &(0x7f0000000fc0)="9131f9183aa510124dcf316f1875cf428710ed1ff482bd6ddd2c2be6a447be5221da96d55d1547d8b86222f4c0850a22981f1e3f34e0340ddd8ced42d1d1e4615119c9894dd4d8f9048e2b81c950d73e67a2f7c67d1eb6863d29c63b94923452ab451592289b20f7c1976feceb62428d258afba0ed8c3ae76db63b6db2b864141295424bb55a517d86d43e23b953d54ea6974c8fa9cbd0cfa635264572d66b79b08d9f208de0d0441fbb12b5f05f011958adf308514ac765c3d9d38afaf6df902931e5b9c6f4ff413abebd212123532d590d907b1b24c210ed8328808bbbdeacb92b") timerfd_create$auto(0x307, 0x5a) preadv2$auto(r0, &(0x7f0000001140)={&(0x7f00000010c0)="50e6362f7d57d895dd87a3e96a6f833316b5f0ea6d7f73cdb3a18f0f8ab5d3fe79728b5033fbf3dbc6022115d076fdfdc93a31d370a0ffa1f6c91685ee39363b73388be73cfa537b0d0b72", 0x7}, 0x9, 0x9, 0x3, 0x3) clock_adjtime$auto(0x2, &(0x7f0000001180)={0xc5, 0x0, 0x9, 0x61, 0x7, 0x8, 0x80ae, 0x0, 0x10001, 0x80000001, 0xfffffffffffffff9, {0x1, 0x7f}, 0x0, 0x564, 0x2, 0xffff8001, 0x0, 0x6, 0x7, 0x100000000, 0x7, 0xa, 0xffffffff}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/devices/platform/vivid.0/video4linux/radio23/name\x00', 0x80543, 0x0) keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x7, 0xeef, 0x0, 0xfffffffffffffff1) clock_adjtime$auto(0x5, &(0x7f00000012c0)={0x3, 0x0, 0x35, 0x5, 0x3, 0x3, 0x5, 0x0, 0x1, 0x7, 0x4ff8, {0x7, 0x9}, 0x8, 0x7fffffff, 0xa8b, 0x2, 0x0, 0x5, 0x7, 0x292d, 0xfe7, 0x8, 0x4}) r3 = io_uring_setup$auto(0xb5ba, &(0x7f00000013c0)={0xe5, 0x9a, 0x5, 0xfffffff4, 0x7, 0x3, r2, [0x0, 0x1, 0xffffffff], {0x2d69, 0x595c, 0x4, 0x1, 0x100, 0x7, 0xe, 0xfffffe00, 0x5}, {0xa, 0x71, 0x4, 0x40, 0x4, 0x3, 0x1000, 0x7, 0x281}}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), r3) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x134, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x40}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_PMKR0_NAME={0xcd, 0x102, "85fa83cb6f96ab00fc2f57fdbd726964f8b1fee6208546e4014276284e7d2fe033ad733603b68e13d49d07836e0ee3c55a0beb56d3602a97ff2ed405ac251901141510c7894e7ab774dcdfec251b96fb0ed797329149e58dcd08d1859c3e6b221c6c14d31da11ca3508207510bc6e0f49c02c4b0473623b70223cf1717e56bc2599051f2dcf34f4a6c90bffee8f06bd18031d13c37122740c5d833ee17477a6d40ad2d27fbf63926c7ba9716bffccad2bfd30e3466b67b29478c373fb69f8f03223461b22a63085a56"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_PMK={0x29, 0xfe, "b5a66cbf4895a9f515cc460b56b8ec343c37faf15df807117fa0a27ae0004d799a3968220a"}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) clock_adjtime$auto(0x2, &(0x7f0000001680)={0x2fe, 0x0, 0x9, 0x9, 0x2105, 0x3, 0x22c00, 0x0, 0x80000000, 0x3, 0x0, {0xfff, 0x8000}, 0x0, 0x0, 0x5, 0x0, 0x0, 0xe, 0x6, 0x6, 0x4, 0x5, 0x800}) 8.771817355s ago: executing program 3 (id=3381): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) write$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff050006000100", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x482, 0x400, 0x9}]}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8.391178733s ago: executing program 1 (id=3383): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/smart_scan\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) socket(0x2, 0x1, 0x100) pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "000c9700"}, 0x58) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) mq_open$auto(0x0, 0x400056a, 0x9, 0x0) keyctl$auto(0x17, 0x4, 0x7fffffffefff, 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x11000, 0x0, 0x0) read$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000001100)=""/89, 0x59) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) writev$auto(0xffffffffffffffff, 0x0, 0x5) close_range$auto(0x2, 0xa, 0x0) socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x1, 0x100000001, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) 8.059431632s ago: executing program 2 (id=3384): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macsec0\x00'}) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0) (async) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) (async) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x488102, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) fcntl$auto_F_GETPIPE_SZ(0xffffffffffffffff, 0x408, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) io_uring_setup$auto(0x6, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x100) (async, rerun: 32) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (rerun: 32) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r3, 0x5408, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000080)="f6af10") openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x400402, 0x0) 7.528086016s ago: executing program 2 (id=3386): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0x4) socket(0x10, 0x4, 0xfff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x18b802, 0x0) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x8) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) madvise$auto(0xf15, 0x2003f0, 0x15) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x82000, 0xf4) fchdir$auto(r3) mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xd66) inotify_init1$auto(0x3000000000000) socket(0x9, 0x801, 0x100) gettid() socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xe, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x7c1302, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) kill$auto(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r5) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) socket(0xa, 0x3, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) 7.500595599s ago: executing program 1 (id=3387): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x0) 6.88338762s ago: executing program 1 (id=3388): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r1) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket(0xa, 0x801, 0x106) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000003b80)='/proc/cmdline\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x1, 0x800, 0x502) close_range$auto(0x2, r3, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x3}, 0x1, 0x0, 0x4, 0x1060}, 0x5}, 0x2, 0x100) socket(0x10, 0x3, 0x6) 6.199342945s ago: executing program 3 (id=3389): r0 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x8200, 0x0) read$auto_bridges_fops_(r0, &(0x7f0000000040)=""/5, 0x5) r1 = socket(0x0, 0xa, 0x88) setsockopt$auto(r1, 0x88, 0xb134, &(0x7f0000000100)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xea\\#>v\xeb\xf1\xcb\xd4\xa9\v\xe1\xb3\x18', 0x80000a) 5.7851984s ago: executing program 3 (id=3390): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0x4) socket(0x10, 0x4, 0xfff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x18b802, 0x0) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x8) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) madvise$auto(0xf15, 0x2003f0, 0x15) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x82000, 0xf4) fchdir$auto(r3) mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xd66) inotify_init1$auto(0x3000000000000) socket(0x2, 0x801, 0x100) gettid() socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xe, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x7c1302, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) (fail_nth: 6) kill$auto(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r5) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) socket(0xa, 0x3, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) 5.753939149s ago: executing program 1 (id=3391): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) r0 = prctl$auto_SIGCONT(0x10, 0x12, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$auto_EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x0, 0xa]) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x800000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r2, 0x4018bc0e, &(0x7f00000000c0)={0x7ff, 0x0, 0x101, 0x9d75}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x8, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x3, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0x80, 0x0) mmap$auto(0x81, 0xa, 0xc5c7, 0x1a, r4, 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.238365772s ago: executing program 2 (id=3393): r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/radio_si470x_common/parameters/seek_timeout\x00', 0x2400, 0x0) mmap$auto(0x0, 0x2020009, 0x4000003, 0x8011, 0xfffffffffffffffa, 0x8000) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r1, 0x2, &(0x7f0000000000)='*[$\xff\xff\xff\xff', &(0x7f0000000040)="9024dce238f7601670ac692efca281c092321745b6e9a5376068bfdf3ae38488a70c7245eaab3ff1a14b8b5a085f9400cc54417e101ad2334a2beace0d577a36ea432c36dc5060f0a57472eead17426184f75088578e9a258b2fe8fe34f75762c4336e81fa4a1ec880ea10a924b402e305849da19ee91616af69399c58dc657401ca515a74b6721f44661ba3b7505fc035e6844ffdd2651c5f9b7f3a42327917b62335fc0e0527bbbe664ffd0440d21ee64794", 0x5) setsockopt$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/lowmem_reserve_ratio\x00', 0x101202, 0x0) sendfile$auto(0xffffffffffffffff, r0, 0x0, 0x8001) r2 = open(&(0x7f0000000000)='./file0\x00', 0x6ac2, 0xe1d2b27bdc14aba8) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1069c1, 0x43) write$auto(r3, 0x0, 0x100082) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) rseq$auto(&(0x7f0000000340)={0x4, 0x401, 0x3, 0x43c, 0x3, 0xffffff65, "c8a5b385477771d2b2c6ee6cf9ebbef79185870dc5bb7b20a1cfef45af65252f310e33e79bfac7d7b4e2f0fbb0e99044c0de255024080fe2a262ff40a0ba8bfb5be0b7340e4b9277cf44feaae5270d76e00fe6e0f9ae570d6eee71569615380f918647923b732171ebaccfc6ac0db0b52b7df87ab426526678e6278319d52be5fde755fd62458000000000"}, 0x36, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) write$auto_proc_timens_offsets_operations_base(r2, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x1, 0x0, 0x4bd, 0x1, 0xf1) close_range$auto(0x2, 0x8000, 0x8) read$auto(r1, 0x0, 0x9) writev$auto(r0, &(0x7f0000001900)={0x0, 0x108000000}, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x288481, 0x0) write$auto(r4, &(0x7f0000000280)='/dev/audio1\x00', 0x2000000002) readv$auto(r4, &(0x7f0000000200)={&(0x7f0000000100)="950aa67fc7afe38e4ad1e139109721597b190a9936ed7c3dd48325c20b58f77a69876b243ac977eb52a224c68747da814e110d6ff0518bd775df708db2a9815179d6872947675ad860da167f6e7841560a52d6b77d4c5ab09b91339b264d831e273adb595fc96b8c7d0ac21a06a3f7f165e2770d782f5b9306e34eb01d1b187ac64ca763ed00f4396a453fa6f121fbbe3d487c30edb3ea6df6d9a1c919e150ec74dcffdc7bdb35736fcc855cef6767524ad7fb67f98420874508a20cda0b53c95f70453bc4ad9f417a884f91446bb978034fa16f53436f8ac212863846364451", 0xc}, 0x9096) 4.328059665s ago: executing program 3 (id=3394): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4605, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/pcm0c/sub1/sw_params\x00', 0x63a2c3, 0x0) write$auto(r1, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0xfffffffffffffffe, 0x6c554ef0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200001, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) io_uring_setup$auto(0x52, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x4, 0x4, 0x4, 0xffffffffffffffff, 0xa, "1500", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) preadv$auto(r1, &(0x7f0000000180)={&(0x7f0000000140), 0x2602}, 0x6, 0x1000004, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b) 4.181834347s ago: executing program 2 (id=3396): socket(0x15, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) (async) bind$auto(0x3, 0x0, 0x6a) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) (async) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) r1 = dup$auto(r0) ioctl$auto_ECCGETLAYOUT(r1, 0x81484d11, &(0x7f0000000340)={0x101, [0x101, 0x1, 0x80000000, 0x400003, 0xa, 0x5, 0x1, 0x5, 0x808f, 0xe, 0x5, 0x7, 0x2, 0xf, 0x57, 0x8dbc, 0x8, 0x7, 0xd1, 0x72944006, 0x1, 0xfe54, 0x0, 0xfffff645, 0x9, 0x6, 0x9, 0x80, 0x80000000, 0x8dc, 0x4, 0x9, 0xfffff0bf, 0xa, 0x575e6e2c, 0x101, 0xff, 0x2, 0xffff0000, 0x3, 0x71c7, 0x1, 0x8, 0x90, 0xfffffffb, 0x7, 0x3, 0x5, 0x200, 0x100, 0x3, 0xffff, 0x9, 0x8, 0x8, 0x3, 0x2, 0x81, 0xe, 0x17, 0xe0b, 0x1, 0x0, 0x57a1], 0x6, [{0xff, 0x6e14}, {0x9, 0x8}, {0x4d1, 0xb9bc}, {0xe, 0x8}, {0x4, 0x24}, {0x5, 0x8}, {0x1, 0x1ff}, {0x4ef3, 0x40}]}) read$auto_component_list_fops_(r1, &(0x7f00000000c0)=""/146, 0x92) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0xb, 0x0, 0x800}, 0x9) (async) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0xb, 0x0, 0x800}, 0x9) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f34915766fca3fb72133618de834c1d0cbb0bcd7ff19baad4ec1b020bc78d852189f51aafd33a851c1e6de42e41b662cd9d878702c7", 0x39) (async) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f34915766fca3fb72133618de834c1d0cbb0bcd7ff19baad4ec1b020bc78d852189f51aafd33a851c1e6de42e41b662cd9d878702c7", 0x39) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) fspick$auto(0xffffffffffffffff, 0x0, 0x3) sendmsg$auto_WG_CMD_SET_DEVICE(r2, 0x0, 0x4000010) 4.124998827s ago: executing program 1 (id=3397): rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo$auto(r0, 0x0, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r1 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000005380)={0x0, 0xf4ff, &(0x7f0000005340)={&(0x7f0000000180)={0x28, r5, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_uring_setup$auto(0x85, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40000a, 0xdf, 0x11, 0xffffffffffffffff, 0xfb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0xb6d, 0x1, 0xfffffffffffffffe, 0x13, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x40146f2c, 0x0) 3.628027756s ago: executing program 2 (id=3398): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0xa, 0x4, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0xfae, 0x9, 0x4cbd5d) ptrace$auto(0x11, 0x0, 0x4, 0x0) ptrace$auto(0x100, 0x0, 0xffffeffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0x100000001, 0xfd5, 0x12, r2, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$auto(r3, 0x0, 0xa3d9) unshare$auto(0xa4) unshare$auto(0x40000080) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0) 3.202629784s ago: executing program 0 (id=3399): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) ioperm$auto(0x400, 0x7f, 0xd) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) mmap$auto(0x0, 0x40009, 0x7fffffff, 0x9b72, 0xffffffffffffffff, 0x100000000028000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0xffffffffffff8001, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b72, r3) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x408802, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) read$auto(r4, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b) socket(0x1e, 0x3, 0x5ef) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, 0x0, 0x100000a3d9) r6 = socket(0x2, 0x2, 0x88) setsockopt$auto(r6, 0x88, 0xb134, &(0x7f0000000100)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xea\\#>v\xeb\xf1\xcb\xd4\xa9\v\xe1\xb3\x18', 0x80000a) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r6) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd3/queue/wbt_lat_usec\x00', 0x2000, 0x0) read$auto(r8, 0x0, 0x20) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000008fffe17b39142b2b19ffacf537744b98dc855759c4c6ad512209", @ANYRES16=r7, @ANYBLOB="040025bd7000fbdbdf252900000008000b000800000008000e008000000005001f0002000000080027000200000008002c0003000000060009000700000006000a000400000005000f0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x80) 2.127044243s ago: executing program 0 (id=3400): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x80}, @OVS_VPORT_ATTR_UPCALL_PID={0xe, 0x5, "eecd71556377220471e7"}, @OVS_VPORT_ATTR_UPCALL_PID={0x2a, 0x5, "5416cf27fe10900ee223ed9f86da74b8a5140f6cc777764fb8f8c059d5a197525eeecd672128"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c994) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xe0, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0xcb, 0x129, "38e5d6833ff26d0f9ba139e6e6166c91bd0c2a33d32a0c427a6f870f34dc1122106494442bfea9631a62d3a8faab1cbc2589f6883aa083380a2c38d4573c848336c594e25ba7fef8ac40a975815019b6496fde01cdfda0f3b0b52e85820b29766c8b1835e182e0a0e0c2e9d5990186a0706df0df59521b9efcea5d1b98080a010ba2cde7e4f601f89504256b4510435e490a42757fb1bd99317f97ff3f4872642e95f2303fd658c18a6b575fb701856d156e2c8fe3ec6703204534be48956654b408814dec394f"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2400c000}, 0x60008840) semctl$auto(0x7, 0xffff, 0x100, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x158, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_COORDINATOR={0x134, 0x1e, 0x0, 0x1, [@generic="1f3c328cfad5d7fe22d5418bdd92d724516a465d80bd5088e65800d4c0790eb809692eb9e13c9c2b8b63feb830cad6b7d0cbc24c2516629328fb1f5e4182dc1e7f7e9f3ec5ff747a3efce9324a30a258cf1f3d3c32689ad83695a0e04b3b105cfebd65656e3b45fe8ef35c98070f7ad6b0227a1030025e83de13d92c035e6a1d0e7e2b6d3847cc8677ece1a565b3e43e5b2e581e9c4aa2232e18b8ec2a0ad6af678d50cf24b205b37e1b996ffa462979", @generic="d8a7c5ceffee46c26b616f0570d936d2920ba69d7372b5f607ee8fd0a32a0ab47f784c41036d87080caa1ff1570dc4b2fada028e503cbfe43a48f7936dc818a60eded9012d6a888f892211299875754b5bc9a00ab54c064389c353e74a96f5c0717e67e472a05cbb27a24a2495307c9e1a878dffcaf76e6834b0d19c1e1c9dae"]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040014) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.878359125s ago: executing program 3 (id=3401): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async, rerun: 32) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "6095a3ce835c59dc4fc38caf91cf4448592331b7c25cc5e3eda5eb9e2a7f48c7b122f392"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) (async, rerun: 64) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240048d0}, 0x400c080) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) (async, rerun: 32) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/smaps_rollup\x00', 0x40000, 0x0) (rerun: 32) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x420, 0x0) connect$auto(r5, 0x0, 0x9) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, 0x0, 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) (async, rerun: 64) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 1.837104765s ago: executing program 0 (id=3402): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0x814, 0x405, 0x8000) (async) userfaultfd$auto(0x1) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0x2, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) (async) ioctl$auto(r0, 0x541c, r1) (async) getxattrat$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000780)={0x9b0a38c, 0xf, 0x7fff}, 0x983) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000100)='/dev/media3\x00', 0x42, 0x0) (async) r3 = io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x55) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, 0x0, 0x2) mmap$auto(0x4400000000, 0xa9b1, 0x4000000ffffffc, 0x7ff, r0, 0x2) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x600800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyp2\x00', 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.717136622s ago: executing program 2 (id=3403): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x123a42, 0x0) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) mmap$auto(0x2, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r0, 0x0, 0x20) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_total_time_ms\x00', 0x0, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async, rerun: 32) r2 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000080), 0x501000, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000040)='\t', 0x1) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001080)=""/4076, 0xfec) 1.540103155s ago: executing program 0 (id=3404): r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) io_uring_register$auto(r0, 0x80000000, 0x0, 0x76a7ceb) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@link_detach={r0}, 0x9bd) read$auto_posix_clock_file_operations_posix_clock(r1, &(0x7f0000000140)=""/75, 0x4b) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={"0894b41f21a80da187880d7fdfadffc3fd3ae24e5e660ec3840888f8dda41d25", 0x4, 0x8, 0x8, 0xf9d3, 0x8, 0x0}) prctl$auto_SECCOMP_MODE_FILTER(0x10, 0x2, r2, 0x0, 0xeefc) 1.362348874s ago: executing program 0 (id=3405): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x2, 0x1, 0x0) epoll_ctl$auto(r0, 0x81, r1, &(0x7f0000000000)={0x4, 0x7}) (async) epoll_ctl$auto(r0, 0x81, r1, &(0x7f0000000000)={0x4, 0x7}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/drivers/amd5536udc-pci/new_id\x00', 0x1af280, 0x0) read$auto(r2, &(0x7f0000000ac0)='vlan1\x00', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) (async) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) epoll_pwait$auto(r3, &(0x7f0000000000)={0xfffffffb, 0x3}, 0x1000, 0xff, &(0x7f0000000100)={0x6}, 0x8) (async) epoll_pwait$auto(r3, &(0x7f0000000000)={0xfffffffb, 0x3}, 0x1000, 0xff, &(0x7f0000000100)={0x6}, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) (async) write$auto(0x3, 0x0, 0xffd8) sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8) (async) sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r4) connect$auto(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710}, 0x51) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) close_range$auto(0x2, 0x8, 0x0) 538.526314ms ago: executing program 0 (id=3406): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x349e41, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa4\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0xe) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0xafb7, 0x7, 0xbdce, 0x5c, r0, 0xf) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x10000, 0xd, 0x3, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x6, 0xe6, 0x5, 0xd, 0x20000000000, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x8, 0x86, 0x101, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045438, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(r2, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=3407): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x45441, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0) pread64$auto(r0, 0x0, 0xb69c, 0x6) pipe$auto(0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r1, 0x5405, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) mount$auto(0x0, 0x0, &(0x7f0000000080)='-/}@\x00', 0xc2, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x101802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x7, 0x400009, 0xdf, 0x1c, 0x8000000000000003, 0x8000) clone$auto(0x20003b46, 0x3, 0x0, 0x0, 0x10000002) kernel console output (not intermixed with test programs): deprecated and will be removed in 2030 [ 1166.527765][T16534] hsr_slave_0: left promiscuous mode [ 1166.572529][T16534] hsr_slave_1: left promiscuous mode [ 1166.609962][T16534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.647872][T16534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.706930][T16534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.755919][T16534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.904617][T16534] veth1_macvtap: left promiscuous mode [ 1166.941426][T16534] veth0_macvtap: left promiscuous mode [ 1166.970205][T16534] veth1_vlan: left promiscuous mode [ 1167.002559][T16534] veth0_vlan: left promiscuous mode [ 1168.734045][T16534] team0 (unregistering): Port device team_slave_1 removed [ 1168.787290][T16534] team0 (unregistering): Port device team_slave_0 removed [ 1169.764030][T18673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1169.862095][T18673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1169.909421][T18673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1169.993603][T18673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1170.807585][T18673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.918176][T18673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.063843][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.071170][T16539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.200115][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.207317][T16539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.526295][T18930] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1172.680687][T18673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.870521][ T31] audit: type=1800 audit(6049698824.500:10): pid=18951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2471" name="members" dev="configfs" ino=61569 res=0 errno=0 [ 1172.963431][T18673] veth0_vlan: entered promiscuous mode [ 1173.186843][T18673] veth1_vlan: entered promiscuous mode [ 1173.820786][T18673] veth0_macvtap: entered promiscuous mode [ 1173.874391][T18673] veth1_macvtap: entered promiscuous mode [ 1174.001884][T18673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.084145][T18673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.239770][T16535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.287517][T16535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.409385][T16539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.480496][T16539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.096539][T16539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.153382][T16539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.341429][T16540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.401246][T16540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.841370][T18996] ksmbd: Unknown IPC event: 14, ignore. [ 1176.168106][T18979] kexec: Could not allocate control_code_buffer [ 1176.988463][T19013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2481'. [ 1177.164375][T19013] team_slave_0: entered allmulticast mode [ 1178.224087][T18356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1178.234506][T18356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1178.243368][T18356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1178.251254][T18356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1178.268149][T18356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1180.217646][T19027] chnl_net:caif_netlink_parms(): no params data found [ 1180.441917][T18356] Bluetooth: hci0: command tx timeout [ 1181.832152][T16540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.200443][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.206859][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.510814][T18356] Bluetooth: hci0: command tx timeout [ 1182.586996][ T31] audit: type=1800 audit(6049698834.260:11): pid=19069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2489" name="lu_gp_id" dev="configfs" ino=62266 res=0 errno=0 [ 1182.974588][T16540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.231464][T16540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.643784][T19027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.682954][T19027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.727557][T19027] bridge_slave_0: entered allmulticast mode [ 1183.776681][T19027] bridge_slave_0: entered promiscuous mode [ 1183.822219][T19027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.866239][T19027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.873497][T19027] bridge_slave_1: entered allmulticast mode [ 1183.956951][T19027] bridge_slave_1: entered promiscuous mode [ 1184.279054][T19027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.388548][T19027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.581531][T18356] Bluetooth: hci0: command tx timeout [ 1184.612781][T19027] team0: Port device team_slave_0 added [ 1184.712445][T19027] team0: Port device team_slave_1 added [ 1184.996656][T19027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.031266][T19027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.158935][T19027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.278265][T19027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.318236][T19027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.482030][T19027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.579273][T16540] bridge_slave_1: left allmulticast mode [ 1185.614770][T16540] bridge_slave_1: left promiscuous mode [ 1185.645521][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.255843][T16540] bridge_slave_0: left allmulticast mode [ 1186.323130][T16540] bridge_slave_0: left promiscuous mode [ 1186.328913][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.651384][T18356] Bluetooth: hci0: command tx timeout [ 1187.002330][T19120] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1187.577312][T19121] svc: failed to register nfsdv3 RPC service (errno 111). [ 1187.740961][T19121] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1189.394668][T19134] FAULT_INJECTION: forcing a failure. [ 1189.394668][T19134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.453248][T19134] CPU: 1 UID: 0 PID: 19134 Comm: syz.3.2499 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1189.453281][T19134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1189.453295][T19134] Call Trace: [ 1189.453302][T19134] [ 1189.453311][T19134] dump_stack_lvl+0x16c/0x1f0 [ 1189.453340][T19134] should_fail_ex+0x512/0x640 [ 1189.453380][T19134] _copy_to_user+0x32/0xd0 [ 1189.453416][T19134] simple_read_from_buffer+0xcb/0x170 [ 1189.453442][T19134] proc_fail_nth_read+0x197/0x240 [ 1189.453469][T19134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1189.453496][T19134] ? rw_verify_area+0xcf/0x6c0 [ 1189.453520][T19134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1189.453545][T19134] vfs_read+0x1e1/0xc60 [ 1189.453575][T19134] ? __pfx___mutex_lock+0x10/0x10 [ 1189.453601][T19134] ? __pfx_vfs_read+0x10/0x10 [ 1189.453635][T19134] ? __fget_files+0x20e/0x3c0 [ 1189.453669][T19134] ksys_read+0x12a/0x250 [ 1189.453694][T19134] ? __pfx_ksys_read+0x10/0x10 [ 1189.453729][T19134] do_syscall_64+0xcd/0x490 [ 1189.453756][T19134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.453780][T19134] RIP: 0033:0x7fc54558d5fc [ 1189.453798][T19134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1189.453821][T19134] RSP: 002b:00007fc5464a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1189.453842][T19134] RAX: ffffffffffffffda RBX: 00007fc5457b5fa0 RCX: 00007fc54558d5fc [ 1189.453858][T19134] RDX: 000000000000000f RSI: 00007fc5464a30a0 RDI: 0000000000000007 [ 1189.453872][T19134] RBP: 00007fc5464a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.453886][T19134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.453899][T19134] R13: 00007fc5457b6038 R14: 00007fc5457b5fa0 R15: 00007ffea99943c8 [ 1189.453929][T19134] [ 1189.635611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.171306][T16540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.216406][T16540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.266571][T16540] bond0 (unregistering): Released all slaves [ 1190.781080][T19027] hsr_slave_0: entered promiscuous mode [ 1190.827956][T19027] hsr_slave_1: entered promiscuous mode [ 1193.077943][T16540] hsr_slave_0: left promiscuous mode [ 1193.127018][T16540] hsr_slave_1: left promiscuous mode [ 1193.160294][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.216138][T16540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.356963][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.401756][T16540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.751154][T16540] veth1_macvtap: left promiscuous mode [ 1193.832106][T16540] veth1_vlan: left promiscuous mode [ 1193.837451][T16540] veth0_vlan: left promiscuous mode [ 1194.205468][T19182] bcache: register_bcache() error : failed to open device [ 1194.748093][T19186] program syz.1.2510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1195.834711][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1195.841117][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1195.850363][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1195.867963][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1195.926555][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1195.933055][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1195.982585][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1195.990252][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1196.276237][T16540] team0 (unregistering): Port device team_slave_1 removed [ 1196.384632][T16540] team0 (unregistering): Port device team_slave_0 removed [ 1200.692231][T19231] ima: policy update failed [ 1200.720064][ T31] audit: type=1802 audit(6049698852.495:12): pid=19231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2516" res=0 errno=0 [ 1200.754320][T19027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1201.011180][T19027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1201.097499][T19027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1201.149901][T19027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1202.281122][T19027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.425244][T19027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.565807][T16535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.573047][T16535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.692925][T16535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.700146][T16535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.006887][T19027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.386591][T19027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.491834][T19262] random: crng reseeded on system resumption [ 1204.983513][T19027] veth0_vlan: entered promiscuous mode [ 1205.208098][T19299] bcache: register_bcache() error : failed to open device [ 1205.488520][T19027] veth1_vlan: entered promiscuous mode [ 1205.699856][T19027] veth0_macvtap: entered promiscuous mode [ 1205.770396][T19027] veth1_macvtap: entered promiscuous mode [ 1205.931252][T19027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.581537][T19027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.699263][T16534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.722085][T16534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.853297][T16534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.887493][T16534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.454059][T16537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.532124][T16537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.692853][T16537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.737091][T16537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.350006][T19358] FAULT_INJECTION: forcing a failure. [ 1209.350006][T19358] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.501790][T19358] CPU: 1 UID: 0 PID: 19358 Comm: syz.3.2535 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1209.501824][T19358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1209.501839][T19358] Call Trace: [ 1209.501846][T19358] [ 1209.501855][T19358] dump_stack_lvl+0x16c/0x1f0 [ 1209.501884][T19358] should_fail_ex+0x512/0x640 [ 1209.501912][T19358] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1209.501946][T19358] should_failslab+0xc2/0x120 [ 1209.501978][T19358] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1209.502010][T19358] ? register_bcache+0x180/0x4900 [ 1209.502045][T19358] kstrndup+0x6d/0x160 [ 1209.502074][T19358] ? __pfx_register_bcache+0x10/0x10 [ 1209.502103][T19358] register_bcache+0x180/0x4900 [ 1209.502147][T19358] ? __pfx_register_bcache+0x10/0x10 [ 1209.502181][T19358] ? find_held_lock+0x2b/0x80 [ 1209.502216][T19358] ? __pfx_register_bcache+0x10/0x10 [ 1209.502245][T19358] kobj_attr_store+0x55/0x80 [ 1209.502271][T19358] ? __pfx_kobj_attr_store+0x10/0x10 [ 1209.502296][T19358] sysfs_kf_write+0xef/0x150 [ 1209.502325][T19358] kernfs_fop_write_iter+0x351/0x510 [ 1209.502347][T19358] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1209.502376][T19358] vfs_write+0x6c7/0x1150 [ 1209.502404][T19358] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1209.502430][T19358] ? __pfx_vfs_write+0x10/0x10 [ 1209.502455][T19358] ? find_held_lock+0x2b/0x80 [ 1209.502496][T19358] __x64_sys_pwrite64+0x1eb/0x250 [ 1209.502526][T19358] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1209.502565][T19358] do_syscall_64+0xcd/0x490 [ 1209.502592][T19358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.502617][T19358] RIP: 0033:0x7fc54558ebe9 [ 1209.502635][T19358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.502658][T19358] RSP: 002b:00007fc5464a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1209.502680][T19358] RAX: ffffffffffffffda RBX: 00007fc5457b5fa0 RCX: 00007fc54558ebe9 [ 1209.502695][T19358] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 1209.502709][T19358] RBP: 00007fc5464a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.502723][T19358] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1209.502737][T19358] R13: 00007fc5457b6038 R14: 00007fc5457b5fa0 R15: 00007ffea99943c8 [ 1209.502766][T19358] [ 1209.502775][T19358] bcache: register_bcache() error : cannot allocate memory [ 1212.061690][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1212.072568][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1212.082447][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1212.091099][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1212.099714][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1212.128088][T16535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.538961][T16535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.185077][T16535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.195989][ T5877] Bluetooth: hci1: command tx timeout [ 1214.645020][T16535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.562544][T19394] chnl_net:caif_netlink_parms(): no params data found [ 1215.625724][T16535] bridge_slave_1: left allmulticast mode [ 1215.652275][T16535] bridge_slave_1: left promiscuous mode [ 1215.683871][T16535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.733487][T16535] bridge_slave_0: left allmulticast mode [ 1215.763984][T16535] bridge_slave_0: left promiscuous mode [ 1215.802498][T16535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.108525][T19447] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 1216.257456][ T5877] Bluetooth: hci1: command tx timeout [ 1216.349330][T19453] FAULT_INJECTION: forcing a failure. [ 1216.349330][T19453] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.480597][T19453] CPU: 1 UID: 0 PID: 19453 Comm: syz.2.2547 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1216.480631][T19453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1216.480645][T19453] Call Trace: [ 1216.480652][T19453] [ 1216.480661][T19453] dump_stack_lvl+0x16c/0x1f0 [ 1216.480690][T19453] should_fail_ex+0x512/0x640 [ 1216.480718][T19453] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1216.480745][T19453] should_failslab+0xc2/0x120 [ 1216.480776][T19453] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1216.480800][T19453] ? __asan_memcpy+0x3c/0x60 [ 1216.480821][T19453] ? register_bcache+0x1bf/0x4900 [ 1216.480853][T19453] ? __pfx_register_bcache+0x10/0x10 [ 1216.480883][T19453] register_bcache+0x1bf/0x4900 [ 1216.480926][T19453] ? __pfx_register_bcache+0x10/0x10 [ 1216.480960][T19453] ? find_held_lock+0x2b/0x80 [ 1216.480987][T19453] ? __pfx_register_bcache+0x10/0x10 [ 1216.481016][T19453] kobj_attr_store+0x55/0x80 [ 1216.481040][T19453] ? __pfx_kobj_attr_store+0x10/0x10 [ 1216.481065][T19453] sysfs_kf_write+0xef/0x150 [ 1216.481093][T19453] kernfs_fop_write_iter+0x351/0x510 [ 1216.481114][T19453] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1216.481143][T19453] vfs_write+0x6c7/0x1150 [ 1216.481170][T19453] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1216.481196][T19453] ? __pfx_vfs_write+0x10/0x10 [ 1216.481221][T19453] ? find_held_lock+0x2b/0x80 [ 1216.481261][T19453] __x64_sys_pwrite64+0x1eb/0x250 [ 1216.481291][T19453] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1216.481330][T19453] do_syscall_64+0xcd/0x490 [ 1216.481356][T19453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.481380][T19453] RIP: 0033:0x7f919a18ebe9 [ 1216.481398][T19453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1216.481420][T19453] RSP: 002b:00007f919afdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1216.481442][T19453] RAX: ffffffffffffffda RBX: 00007f919a3b5fa0 RCX: 00007f919a18ebe9 [ 1216.481457][T19453] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 1216.481471][T19453] RBP: 00007f919afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.481485][T19453] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1216.481499][T19453] R13: 00007f919a3b6038 R14: 00007f919a3b5fa0 R15: 00007ffe6078a5b8 [ 1216.481529][T19453] [ 1216.481563][T19453] bcache: register_bcache() error : cannot allocate memory [ 1217.127905][T19450] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 1217.997818][T16535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.126829][T16535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.189904][T16535] bond0 (unregistering): Released all slaves [ 1218.324843][ T5877] Bluetooth: hci1: command tx timeout [ 1218.871088][T19394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.919498][T19479] netlink: 'syz.2.2552': attribute type 4 has an invalid length. [ 1218.934522][T19394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.981176][T19394] bridge_slave_0: entered allmulticast mode [ 1219.046417][T19394] bridge_slave_0: entered promiscuous mode [ 1219.094615][T19479] netlink: 314 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1219.181139][T19479] IPv6: NLM_F_CREATE should be specified when creating new route [ 1219.574372][T19394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.645144][T19394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.700127][T19394] bridge_slave_1: entered allmulticast mode [ 1219.738921][T19394] bridge_slave_1: entered promiscuous mode [ 1220.394414][ T5877] Bluetooth: hci1: command tx timeout [ 1220.405634][T19394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.490334][T19394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.916073][T16535] hsr_slave_0: left promiscuous mode [ 1220.968277][T16535] hsr_slave_1: left promiscuous mode [ 1221.011060][T16535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.063843][T16535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.217521][T16535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.264235][T16535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.454007][T16535] veth1_macvtap: left promiscuous mode [ 1221.490951][T16535] veth0_macvtap: left promiscuous mode [ 1221.530460][T16535] veth1_vlan: left promiscuous mode [ 1221.535808][T16535] veth0_vlan: left promiscuous mode [ 1223.485111][T16535] team0 (unregistering): Port device team_slave_1 removed [ 1223.662324][T16535] team0 (unregistering): Port device team_slave_0 removed [ 1225.855650][T19394] team0: Port device team_slave_0 added [ 1225.906150][T19539] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1226.015510][T19394] team0: Port device team_slave_1 added [ 1226.095816][T19540] FAULT_INJECTION: forcing a failure. [ 1226.095816][T19540] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.139226][T19540] CPU: 1 UID: 0 PID: 19540 Comm: syz.0.2560 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1226.139260][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1226.139275][T19540] Call Trace: [ 1226.139283][T19540] [ 1226.139291][T19540] dump_stack_lvl+0x16c/0x1f0 [ 1226.139321][T19540] should_fail_ex+0x512/0x640 [ 1226.139349][T19540] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1226.139382][T19540] should_failslab+0xc2/0x120 [ 1226.139415][T19540] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1226.139443][T19540] ? lockdep_init_map_type+0x5c/0x280 [ 1226.139476][T19540] ? __d_alloc+0x32/0xae0 [ 1226.139510][T19540] __d_alloc+0x32/0xae0 [ 1226.139542][T19540] d_alloc_pseudo+0x1c/0xc0 [ 1226.139578][T19540] alloc_file_pseudo+0xcf/0x230 [ 1226.139616][T19540] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1226.139652][T19540] ? alloc_fd+0x471/0x7d0 [ 1226.139682][T19540] sock_alloc_file+0x50/0x210 [ 1226.139710][T19540] __sys_socket+0x1c0/0x260 [ 1226.139743][T19540] ? __pfx___sys_socket+0x10/0x10 [ 1226.139776][T19540] ? xfd_validate_state+0x61/0x180 [ 1226.139819][T19540] __x64_sys_socket+0x72/0xb0 [ 1226.139851][T19540] ? lockdep_hardirqs_on+0x7c/0x110 [ 1226.139874][T19540] do_syscall_64+0xcd/0x490 [ 1226.139901][T19540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.139925][T19540] RIP: 0033:0x7f4255f8ebe9 [ 1226.139956][T19540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.139979][T19540] RSP: 002b:00007f4256de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1226.140000][T19540] RAX: ffffffffffffffda RBX: 00007f42561b6090 RCX: 00007f4255f8ebe9 [ 1226.140022][T19540] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1226.140037][T19540] RBP: 00007f4256011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1226.140051][T19540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.140065][T19540] R13: 00007f42561b6128 R14: 00007f42561b6090 R15: 00007ffeeaa2b638 [ 1226.140094][T19540] [ 1226.345207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.533503][T19540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2560'. [ 1227.260153][T19394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.292956][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.319357][ C1] vkms_vblank_simulate: vblank timer overrun [ 1227.390175][T19394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.431449][T19394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.453670][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.546500][T19394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.093135][T19394] hsr_slave_0: entered promiscuous mode [ 1228.126485][T19394] hsr_slave_1: entered promiscuous mode [ 1228.132662][T19394] debugfs: 'hsr0' already exists in 'hsr' [ 1228.201179][T19394] Cannot create hsr debugfs directory [ 1231.103750][T19394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1231.153942][T19394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1231.250132][T19394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1231.381959][T19394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1231.586377][T19601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2567'. [ 1231.650669][T19608] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1232.028784][T19394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.145088][T19394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.476968][T16532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.484154][T16532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.532181][T19616] zram0: detected capacity change from 0 to 8 [ 1232.605717][T16532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.612931][T16532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.240216][T19644] FAULT_INJECTION: forcing a failure. [ 1234.240216][T19644] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.514564][T19644] CPU: 1 UID: 0 PID: 19644 Comm: syz.3.2569 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1234.514600][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1234.514614][T19644] Call Trace: [ 1234.514622][T19644] [ 1234.514631][T19644] dump_stack_lvl+0x16c/0x1f0 [ 1234.514661][T19644] should_fail_ex+0x512/0x640 [ 1234.514691][T19644] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1234.514727][T19644] should_failslab+0xc2/0x120 [ 1234.514760][T19644] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1234.514793][T19644] ? create_filter_start.constprop.0+0x16a/0x300 [ 1234.514829][T19644] kstrdup+0x53/0x100 [ 1234.514860][T19644] create_filter_start.constprop.0+0x16a/0x300 [ 1234.514894][T19644] apply_subsystem_event_filter+0x188/0x17e0 [ 1234.514931][T19644] ? __might_fault+0xe3/0x190 [ 1234.514958][T19644] ? __might_fault+0x13b/0x190 [ 1234.514995][T19644] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1234.515034][T19644] ? _copy_from_user+0x59/0xd0 [ 1234.515070][T19644] subsystem_filter_write+0x95/0x120 [ 1234.515103][T19644] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1234.515132][T19644] vfs_write+0x2a0/0x1150 [ 1234.515165][T19644] ? __pfx___mutex_lock+0x10/0x10 [ 1234.515191][T19644] ? __pfx_vfs_write+0x10/0x10 [ 1234.515226][T19644] ? __fget_files+0x20e/0x3c0 [ 1234.515260][T19644] ksys_write+0x12a/0x250 [ 1234.515287][T19644] ? __pfx_ksys_write+0x10/0x10 [ 1234.515323][T19644] do_syscall_64+0xcd/0x490 [ 1234.515351][T19644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.515375][T19644] RIP: 0033:0x7fc54558ebe9 [ 1234.515393][T19644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.515417][T19644] RSP: 002b:00007fc546461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1234.515438][T19644] RAX: ffffffffffffffda RBX: 00007fc5457b6180 RCX: 00007fc54558ebe9 [ 1234.515454][T19644] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 1234.515468][T19644] RBP: 00007fc545611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1234.515482][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1234.515495][T19644] R13: 00007fc5457b6218 R14: 00007fc5457b6180 R15: 00007ffea99943c8 [ 1234.515525][T19644] [ 1235.446269][T19394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.071914][T19394] veth0_vlan: entered promiscuous mode [ 1236.166016][T19394] veth1_vlan: entered promiscuous mode [ 1236.736513][T19394] veth0_macvtap: entered promiscuous mode [ 1236.794391][T19394] veth1_macvtap: entered promiscuous mode [ 1237.172170][T19394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.234471][T19394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1237.385883][T16540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.429805][T16540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.516501][T16540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.691476][T16540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.278235][T16532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.348653][T16532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.629139][T16532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.674624][T16532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.411073][T19718] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 1240.851803][T19736] zram: Cannot change disksize for initialized device [ 1241.494876][T19722] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 1242.143070][T19745] bcache: register_bcache() error : failed to open device [ 1243.324158][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.344356][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.825180][T19805] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1250.439110][T19858] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1251.136810][T19866] syz.0.2608 (19866) used obsolete PPPIOCDETACH ioctl [ 1251.181052][T19866] bcache: register_bcache() error : failed to open device [ 1252.753790][T19883] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2612'. [ 1253.930422][T19894] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 1255.571083][T18356] Bluetooth: hci2: command 0x0406 tx timeout [ 1256.760157][T19939] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 1257.630466][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 1257.774020][T19947] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2624'. [ 1257.966137][T19940] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 1261.955830][T19982] zswap: compressor not available [ 1261.985476][T20005] binder: 20004:20005 unknown command 4294967282 [ 1262.028916][T20005] binder: 20004:20005 ioctl c0306201 2000000000c0 returned -22 [ 1265.836283][T20061] svc: failed to register nfsdv3 RPC service (errno 111). [ 1265.856892][T20061] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1269.809356][T20123] bcache: register_bcache() error : failed to open device [ 1270.133393][ T31] audit: type=1800 audit(6049698922.265:13): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2659" name="trace_pipe" dev="tracefs" ino=1113 res=0 errno=0 [ 1279.316746][T20236] ICMPv6: process `syz.2.2681' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1281.041246][T18356] Bluetooth: hci4: command 0x0406 tx timeout [ 1286.673239][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1287.392979][T20322] ptrace attach of "./syz-executor exec"[18353] was attempted by "./syz-executor exec"[20322] [ 1291.806311][T20354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.129249][ T31] audit: type=1800 audit(6049698946.380:14): pid=20395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2713" name="lu_gp_id" dev="configfs" ino=69497 res=0 errno=0 [ 1295.374160][T20395] FAULT_INJECTION: forcing a failure. [ 1295.374160][T20395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1295.656627][T20395] CPU: 1 UID: 0 PID: 20395 Comm: syz.0.2713 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1295.656663][T20395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1295.656678][T20395] Call Trace: [ 1295.656687][T20395] [ 1295.656696][T20395] dump_stack_lvl+0x16c/0x1f0 [ 1295.656725][T20395] should_fail_ex+0x512/0x640 [ 1295.656759][T20395] should_fail_alloc_page+0xe7/0x130 [ 1295.656795][T20395] prepare_alloc_pages+0x3c2/0x610 [ 1295.656831][T20395] ? stack_trace_save+0x8e/0xc0 [ 1295.656862][T20395] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1295.656897][T20395] ? kasan_save_stack+0x42/0x60 [ 1295.656923][T20395] ? kasan_save_stack+0x33/0x60 [ 1295.656949][T20395] ? kasan_save_track+0x14/0x30 [ 1295.656974][T20395] ? __kasan_kmalloc+0xaa/0xb0 [ 1295.656999][T20395] ? fuse_dev_alloc+0x8e/0x280 [ 1295.657029][T20395] ? fuse_dev_alloc_install+0x13/0x40 [ 1295.657060][T20395] ? cuse_channel_open+0x100/0x7f0 [ 1295.657091][T20395] ? misc_open+0x35a/0x420 [ 1295.657126][T20395] ? chrdev_open+0x234/0x6a0 [ 1295.657155][T20395] ? do_dentry_open+0x982/0x1530 [ 1295.657184][T20395] ? vfs_open+0x82/0x3f0 [ 1295.657216][T20395] ? path_openat+0x1de4/0x2cb0 [ 1295.657241][T20395] ? look_up_lock_class+0x59/0x150 [ 1295.657265][T20395] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1295.657314][T20395] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1295.657358][T20395] ? policy_nodemask+0xea/0x4e0 [ 1295.657393][T20395] alloc_pages_mpol+0x1fb/0x550 [ 1295.657426][T20395] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1295.657458][T20395] ? fuse_dev_alloc_install+0x2b/0x40 [ 1295.657497][T20395] folio_alloc_noprof+0x20/0x2d0 [ 1295.657534][T20395] cuse_channel_open+0x198/0x7f0 [ 1295.657564][T20395] ? __pfx_cuse_channel_open+0x10/0x10 [ 1295.657595][T20395] misc_open+0x35a/0x420 [ 1295.657632][T20395] ? __pfx_misc_open+0x10/0x10 [ 1295.657668][T20395] chrdev_open+0x234/0x6a0 [ 1295.657697][T20395] ? __pfx_apparmor_file_open+0x10/0x10 [ 1295.657736][T20395] ? __pfx_chrdev_open+0x10/0x10 [ 1295.657769][T20395] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1295.657802][T20395] do_dentry_open+0x982/0x1530 [ 1295.657831][T20395] ? __pfx_chrdev_open+0x10/0x10 [ 1295.657868][T20395] vfs_open+0x82/0x3f0 [ 1295.657906][T20395] path_openat+0x1de4/0x2cb0 [ 1295.657944][T20395] ? __pfx_path_openat+0x10/0x10 [ 1295.657980][T20395] do_filp_open+0x20b/0x470 [ 1295.658009][T20395] ? __pfx_do_filp_open+0x10/0x10 [ 1295.658058][T20395] ? alloc_fd+0x471/0x7d0 [ 1295.658091][T20395] do_sys_openat2+0x11b/0x1d0 [ 1295.658127][T20395] ? __pfx_do_sys_openat2+0x10/0x10 [ 1295.658175][T20395] __x64_sys_openat+0x174/0x210 [ 1295.658213][T20395] ? __pfx___x64_sys_openat+0x10/0x10 [ 1295.658262][T20395] do_syscall_64+0xcd/0x490 [ 1295.658290][T20395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.658315][T20395] RIP: 0033:0x7f4255f8ebe9 [ 1295.658339][T20395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.658364][T20395] RSP: 002b:00007f4256de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1295.658386][T20395] RAX: ffffffffffffffda RBX: 00007f42561b6090 RCX: 00007f4255f8ebe9 [ 1295.658403][T20395] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1295.658418][T20395] RBP: 00007f4256011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1295.658433][T20395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.658447][T20395] R13: 00007f42561b6128 R14: 00007f42561b6090 R15: 00007ffeeaa2b638 [ 1295.658477][T20395] [ 1296.914240][T20391] kexec: Could not allocate control_code_buffer [ 1298.745487][T20421] FAULT_INJECTION: forcing a failure. [ 1298.745487][T20421] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.868489][T20421] CPU: 1 UID: 0 PID: 20421 Comm: syz.3.2719 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1298.868525][T20421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1298.868539][T20421] Call Trace: [ 1298.868547][T20421] [ 1298.868556][T20421] dump_stack_lvl+0x16c/0x1f0 [ 1298.868585][T20421] should_fail_ex+0x512/0x640 [ 1298.868614][T20421] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1298.868642][T20421] should_failslab+0xc2/0x120 [ 1298.868674][T20421] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1298.868699][T20421] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 1298.868731][T20421] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 1298.868760][T20421] devlink_fmsg_u8_pair_put+0x270/0x2f0 [ 1298.868789][T20421] ? __pfx_devlink_fmsg_u8_pair_put+0x10/0x10 [ 1298.868817][T20421] ? __kasan_kmalloc+0x70/0xb0 [ 1298.868844][T20421] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 1298.868874][T20421] nsim_dev_dummy_fmsg_put+0xf8/0x1e0 [ 1298.868902][T20421] devlink_health_do_dump+0x240/0x620 [ 1298.868935][T20421] devlink_health_report+0x3c9/0x9c0 [ 1298.868967][T20421] ? __pfx_devlink_health_report+0x10/0x10 [ 1298.868996][T20421] ? _copy_from_user+0x59/0xd0 [ 1298.869038][T20421] nsim_dev_health_break_write+0x166/0x210 [ 1298.869067][T20421] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1298.869103][T20421] full_proxy_write+0x131/0x1a0 [ 1298.869139][T20421] ? __pfx_full_proxy_write+0x10/0x10 [ 1298.869171][T20421] vfs_write+0x2a0/0x1150 [ 1298.869204][T20421] ? __pfx___mutex_lock+0x10/0x10 [ 1298.869230][T20421] ? __pfx_vfs_write+0x10/0x10 [ 1298.869265][T20421] ? __fget_files+0x20e/0x3c0 [ 1298.869300][T20421] ksys_write+0x12a/0x250 [ 1298.869326][T20421] ? __pfx_ksys_write+0x10/0x10 [ 1298.869363][T20421] do_syscall_64+0xcd/0x490 [ 1298.869390][T20421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.869415][T20421] RIP: 0033:0x7fc54558ebe9 [ 1298.869434][T20421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.869459][T20421] RSP: 002b:00007fc5464a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1298.869481][T20421] RAX: ffffffffffffffda RBX: 00007fc5457b5fa0 RCX: 00007fc54558ebe9 [ 1298.869497][T20421] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 1298.869511][T20421] RBP: 00007fc545611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1298.869525][T20421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.869539][T20421] R13: 00007fc5457b6038 R14: 00007fc5457b5fa0 R15: 00007ffea99943c8 [ 1298.869569][T20421] [ 1301.573604][T18356] Bluetooth: hci0: command 0x0406 tx timeout [ 1304.456927][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.463302][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.440775][T20518] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1309.004548][T20529] FAULT_INJECTION: forcing a failure. [ 1309.004548][T20529] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.172167][T20529] CPU: 1 UID: 0 PID: 20529 Comm: syz.1.2743 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1309.172203][T20529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1309.172221][T20529] Call Trace: [ 1309.172229][T20529] [ 1309.172237][T20529] dump_stack_lvl+0x16c/0x1f0 [ 1309.172266][T20529] should_fail_ex+0x512/0x640 [ 1309.172299][T20529] should_failslab+0xc2/0x120 [ 1309.172331][T20529] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1309.172360][T20529] ? skb_clone+0x190/0x3f0 [ 1309.172389][T20529] skb_clone+0x190/0x3f0 [ 1309.172414][T20529] netlink_deliver_tap+0xabd/0xd30 [ 1309.172444][T20529] netlink_unicast+0x64c/0x870 [ 1309.172473][T20529] ? __pfx_netlink_unicast+0x10/0x10 [ 1309.172499][T20529] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1309.172523][T20529] ? __lock_acquire+0xb97/0x1ce0 [ 1309.172562][T20529] netlink_sendmsg+0x8d1/0xdd0 [ 1309.172592][T20529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1309.172621][T20529] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1309.172664][T20529] ____sys_sendmsg+0xa98/0xc70 [ 1309.172695][T20529] ? copy_msghdr_from_user+0x10a/0x160 [ 1309.172719][T20529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1309.172763][T20529] ___sys_sendmsg+0x134/0x1d0 [ 1309.172789][T20529] ? __pfx____sys_sendmsg+0x10/0x10 [ 1309.172839][T20529] ? __mutex_unlock_slowpath+0x140/0x800 [ 1309.172873][T20529] __sys_sendmsg+0x16d/0x220 [ 1309.172897][T20529] ? __pfx___sys_sendmsg+0x10/0x10 [ 1309.172941][T20529] do_syscall_64+0xcd/0x490 [ 1309.172968][T20529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.172991][T20529] RIP: 0033:0x7fe5d2f8ebe9 [ 1309.173010][T20529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.173032][T20529] RSP: 002b:00007fe5d3e56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.173054][T20529] RAX: ffffffffffffffda RBX: 00007fe5d31b5fa0 RCX: 00007fe5d2f8ebe9 [ 1309.173069][T20529] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000000 [ 1309.173083][T20529] RBP: 00007fe5d3e56090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.173096][T20529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.173110][T20529] R13: 00007fe5d31b6038 R14: 00007fe5d31b5fa0 R15: 00007ffc9299e068 [ 1309.173145][T20529] [ 1309.406598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.095960][T20546] Setting dangerous option i915.mitigations - tainting kernel [ 1310.647064][T20551] random: crng reseeded on system resumption [ 1311.346270][T20568] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 1311.346270][T20568] [ 1312.186535][T20581] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1313.862052][T20596] syz.0.2757(20596): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1317.284278][T20647] [ 1317.720929][ T31] audit: type=1800 audit(6049698970.103:15): pid=20658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=71007 res=0 errno=0 [ 1317.742779][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.047958][T20669] openvswitch: netlink: Multiple metadata blocks provided [ 1319.023278][T20684] FAULT_INJECTION: forcing a failure. [ 1319.023278][T20684] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.098276][T20684] CPU: 1 UID: 0 PID: 20684 Comm: syz.1.2776 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1319.098316][T20684] Tainted: [U]=USER [ 1319.098324][T20684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1319.098338][T20684] Call Trace: [ 1319.098346][T20684] [ 1319.098354][T20684] dump_stack_lvl+0x16c/0x1f0 [ 1319.098383][T20684] should_fail_ex+0x512/0x640 [ 1319.098413][T20684] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1319.098446][T20684] should_failslab+0xc2/0x120 [ 1319.098479][T20684] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1319.098509][T20684] ? __alloc_skb+0x2b2/0x380 [ 1319.098535][T20684] __alloc_skb+0x2b2/0x380 [ 1319.098557][T20684] ? __pfx___alloc_skb+0x10/0x10 [ 1319.098584][T20684] ? __pfx___register_sysctl_table+0x10/0x10 [ 1319.098619][T20684] ? is_module_address+0x69/0xf0 [ 1319.098658][T20684] inet_netconf_notify_devconf+0x8b/0x1f0 [ 1319.098693][T20684] __devinet_sysctl_register+0x227/0x360 [ 1319.098727][T20684] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1319.098760][T20684] ? devinet_init_net+0xeb/0x910 [ 1319.098790][T20684] ? __asan_memcpy+0x3c/0x60 [ 1319.098816][T20684] devinet_init_net+0x347/0x910 [ 1319.098847][T20684] ? __pfx_devinet_init_net+0x10/0x10 [ 1319.098876][T20684] ops_init+0x1df/0x5f0 [ 1319.098904][T20684] setup_net+0x10f/0x380 [ 1319.098928][T20684] ? lockdep_init_map_type+0x5c/0x280 [ 1319.098961][T20684] ? __pfx_setup_net+0x10/0x10 [ 1319.098988][T20684] ? debug_mutex_init+0x37/0x70 [ 1319.099015][T20684] copy_net_ns+0x2a6/0x5f0 [ 1319.099046][T20684] create_new_namespaces+0x3ea/0xa90 [ 1319.099080][T20684] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1319.099111][T20684] ksys_unshare+0x45b/0xa40 [ 1319.099144][T20684] ? __pfx_ksys_unshare+0x10/0x10 [ 1319.099177][T20684] ? xfd_validate_state+0x61/0x180 [ 1319.099221][T20684] __x64_sys_unshare+0x31/0x40 [ 1319.099266][T20684] do_syscall_64+0xcd/0x490 [ 1319.099294][T20684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.099318][T20684] RIP: 0033:0x7fe5d2f8ebe9 [ 1319.099337][T20684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.099359][T20684] RSP: 002b:00007fe5d3e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1319.099381][T20684] RAX: ffffffffffffffda RBX: 00007fe5d31b5fa0 RCX: 00007fe5d2f8ebe9 [ 1319.099397][T20684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1319.099411][T20684] RBP: 00007fe5d3011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1319.099425][T20684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.099438][T20684] R13: 00007fe5d31b6038 R14: 00007fe5d31b5fa0 R15: 00007ffc9299e068 [ 1319.099467][T20684] [ 1319.365641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1320.223444][T20699] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14) [ 1320.610727][T20701] can: request_module (can-proto-0) failed. [ 1322.732015][T20747] random: crng reseeded on system resumption [ 1329.187701][T20837] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2801'. [ 1329.275548][T20839] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2801'. [ 1331.428089][T20869] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1331.664063][T20869] svc: failed to register nfsdv3 RPC service (errno 111). [ 1331.712944][T20869] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1332.504453][T20891] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2814'. [ 1337.069397][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 1341.790881][T20971] random: crng reseeded on system resumption [ 1341.928309][T20972] binder: 20970:20972 ioctl 1260 7fffffffffffffff returned -22 [ 1343.588273][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1345.061537][T20997] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 1346.717852][T21035] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2849'. [ 1346.935438][T21035] ›: renamed from hsr0 (while UP) [ 1347.501189][T21049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2854'. [ 1348.003071][T18356] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 1349.116692][T21083] FAULT_INJECTION: forcing a failure. [ 1349.116692][T21083] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.263736][T21083] CPU: 1 UID: 0 PID: 21083 Comm: syz.0.2862 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1349.263785][T21083] Tainted: [U]=USER [ 1349.263792][T21083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1349.263805][T21083] Call Trace: [ 1349.263813][T21083] [ 1349.263822][T21083] dump_stack_lvl+0x16c/0x1f0 [ 1349.263850][T21083] should_fail_ex+0x512/0x640 [ 1349.263879][T21083] ? fs_reclaim_acquire+0xae/0x150 [ 1349.263917][T21083] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1349.263948][T21083] should_failslab+0xc2/0x120 [ 1349.263980][T21083] __kmalloc_noprof+0xd2/0x510 [ 1349.264014][T21083] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1349.264047][T21083] ? tomoyo_profile+0x47/0x60 [ 1349.264083][T21083] tomoyo_path_number_perm+0x245/0x580 [ 1349.264107][T21083] ? tomoyo_path_number_perm+0x237/0x580 [ 1349.264135][T21083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1349.264162][T21083] ? find_held_lock+0x2b/0x80 [ 1349.264211][T21083] ? find_held_lock+0x2b/0x80 [ 1349.264233][T21083] ? hook_file_ioctl_common+0x145/0x410 [ 1349.264267][T21083] ? __fget_files+0x20e/0x3c0 [ 1349.264297][T21083] security_file_ioctl+0x9b/0x240 [ 1349.264325][T21083] __x64_sys_ioctl+0xb7/0x210 [ 1349.264365][T21083] do_syscall_64+0xcd/0x490 [ 1349.264393][T21083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.264417][T21083] RIP: 0033:0x7f4255f8ebe9 [ 1349.264435][T21083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.264458][T21083] RSP: 002b:00007f4256e08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.264480][T21083] RAX: ffffffffffffffda RBX: 00007f42561b5fa0 RCX: 00007f4255f8ebe9 [ 1349.264495][T21083] RDX: 0000000000000000 RSI: 0000000000004c09 RDI: 0000000000000003 [ 1349.264509][T21083] RBP: 00007f4256e08090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.264523][T21083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.264536][T21083] R13: 00007f42561b6038 R14: 00007f42561b5fa0 R15: 00007ffeeaa2b638 [ 1349.264565][T21083] [ 1349.264575][T21083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1349.489656][T21085] random: crng reseeded on system resumption [ 1349.728213][T21090] FAULT_INJECTION: forcing a failure. [ 1349.728213][T21090] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.783273][T21090] CPU: 1 UID: 0 PID: 21090 Comm: syz.2.2865 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1349.783313][T21090] Tainted: [U]=USER [ 1349.783320][T21090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1349.783335][T21090] Call Trace: [ 1349.783342][T21090] [ 1349.783351][T21090] dump_stack_lvl+0x16c/0x1f0 [ 1349.783380][T21090] should_fail_ex+0x512/0x640 [ 1349.783409][T21090] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1349.783453][T21090] should_failslab+0xc2/0x120 [ 1349.783486][T21090] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1349.783516][T21090] ? __kernfs_new_node+0xd2/0x8e0 [ 1349.783552][T21090] __kernfs_new_node+0xd2/0x8e0 [ 1349.783586][T21090] ? __pfx___kernfs_new_node+0x10/0x10 [ 1349.783624][T21090] ? find_held_lock+0x2b/0x80 [ 1349.783649][T21090] ? kernfs_root+0xee/0x2a0 [ 1349.783685][T21090] kernfs_new_node+0x13c/0x1e0 [ 1349.783725][T21090] __kernfs_create_file+0x53/0x350 [ 1349.783753][T21090] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1349.783789][T21090] sysfs_merge_group+0x1aa/0x340 [ 1349.783822][T21090] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1349.783858][T21090] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1349.783892][T21090] ? bus_to_subsys+0x131/0x160 [ 1349.783933][T21090] dpm_sysfs_add+0x237/0x280 [ 1349.783966][T21090] device_add+0x9a6/0x1aa0 [ 1349.784002][T21090] ? __pfx_device_add+0x10/0x10 [ 1349.784034][T21090] ? lockdep_init_map_type+0x5c/0x280 [ 1349.784067][T21090] ? __init_waitqueue_head+0xca/0x150 [ 1349.784113][T21090] rfkill_register+0x1ad/0xb40 [ 1349.784149][T21090] nfc_register_device+0x11f/0x3c0 [ 1349.784179][T21090] nci_register_device+0x7f1/0xb80 [ 1349.784217][T21090] ? __pfx_nci_register_device+0x10/0x10 [ 1349.784259][T21090] ? lockdep_init_map_type+0x5c/0x280 [ 1349.784298][T21090] virtual_ncidev_open+0x141/0x220 [ 1349.784336][T21090] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1349.784374][T21090] misc_open+0x35a/0x420 [ 1349.784412][T21090] ? __pfx_misc_open+0x10/0x10 [ 1349.784455][T21090] chrdev_open+0x234/0x6a0 [ 1349.784486][T21090] ? __pfx_apparmor_file_open+0x10/0x10 [ 1349.784526][T21090] ? __pfx_chrdev_open+0x10/0x10 [ 1349.784558][T21090] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1349.784591][T21090] do_dentry_open+0x982/0x1530 [ 1349.784622][T21090] ? __pfx_chrdev_open+0x10/0x10 [ 1349.784659][T21090] vfs_open+0x82/0x3f0 [ 1349.784697][T21090] path_openat+0x1de4/0x2cb0 [ 1349.784735][T21090] ? __pfx_path_openat+0x10/0x10 [ 1349.784772][T21090] do_filp_open+0x20b/0x470 [ 1349.784800][T21090] ? __pfx_do_filp_open+0x10/0x10 [ 1349.784851][T21090] ? alloc_fd+0x471/0x7d0 [ 1349.784884][T21090] do_sys_openat2+0x11b/0x1d0 [ 1349.784920][T21090] ? __pfx_do_sys_openat2+0x10/0x10 [ 1349.784968][T21090] __x64_sys_openat+0x174/0x210 [ 1349.785006][T21090] ? __pfx___x64_sys_openat+0x10/0x10 [ 1349.785056][T21090] do_syscall_64+0xcd/0x490 [ 1349.785084][T21090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.785108][T21090] RIP: 0033:0x7f919a18ebe9 [ 1349.785127][T21090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.785151][T21090] RSP: 002b:00007f919afdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1349.785173][T21090] RAX: ffffffffffffffda RBX: 00007f919a3b5fa0 RCX: 00007f919a18ebe9 [ 1349.785189][T21090] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1349.785204][T21090] RBP: 00007f919a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1349.785218][T21090] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 1349.785232][T21090] R13: 00007f919a3b6038 R14: 00007f919a3b5fa0 R15: 00007ffe6078a5b8 [ 1349.785262][T21090] [ 1351.630295][T21126] FAULT_INJECTION: forcing a failure. [ 1351.630295][T21126] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1351.856880][T21126] CPU: 1 UID: 0 PID: 21126 Comm: syz.0.2872 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1351.856919][T21126] Tainted: [U]=USER [ 1351.856927][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1351.856941][T21126] Call Trace: [ 1351.856949][T21126] [ 1351.856958][T21126] dump_stack_lvl+0x16c/0x1f0 [ 1351.856986][T21126] should_fail_ex+0x512/0x640 [ 1351.857019][T21126] get_futex_key+0x1d0/0x1560 [ 1351.857052][T21126] ? __pfx_get_futex_key+0x10/0x10 [ 1351.857081][T21126] ? __pick_eevdf+0x30a/0x670 [ 1351.857114][T21126] futex_wait_setup+0x9d/0x550 [ 1351.857158][T21126] __futex_wait+0x194/0x2f0 [ 1351.857194][T21126] ? __pfx___futex_wait+0x10/0x10 [ 1351.857227][T21126] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1351.857264][T21126] ? lockdep_hardirqs_on+0x7c/0x110 [ 1351.857289][T21126] ? __pfx_futex_wake_mark+0x10/0x10 [ 1351.857329][T21126] ? futex_private_hash_put+0x176/0x300 [ 1351.857366][T21126] ? futex_private_hash_put+0x18a/0x300 [ 1351.857396][T21126] futex_wait+0xe8/0x380 [ 1351.857431][T21126] ? __pfx_futex_wait+0x10/0x10 [ 1351.857480][T21126] ? __lock_acquire+0x62e/0x1ce0 [ 1351.857519][T21126] do_futex+0x229/0x350 [ 1351.857550][T21126] ? __pfx_do_futex+0x10/0x10 [ 1351.857582][T21126] ? find_held_lock+0x2b/0x80 [ 1351.857608][T21126] __x64_sys_futex+0x1e0/0x4c0 [ 1351.857641][T21126] ? __fget_files+0x20e/0x3c0 [ 1351.857667][T21126] ? __pfx___x64_sys_futex+0x10/0x10 [ 1351.857702][T21126] ? fdget+0x187/0x210 [ 1351.857731][T21126] do_syscall_64+0xcd/0x490 [ 1351.857758][T21126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.857782][T21126] RIP: 0033:0x7f4255f8ebe9 [ 1351.857800][T21126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1351.857823][T21126] RSP: 002b:00007f4256dc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1351.857845][T21126] RAX: ffffffffffffffda RBX: 00007f42561b6188 RCX: 00007f4255f8ebe9 [ 1351.857860][T21126] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f42561b6188 [ 1351.857874][T21126] RBP: 00007f42561b6180 R08: 0000000000000000 R09: 0000000000000000 [ 1351.857888][T21126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.857902][T21126] R13: 00007f42561b6218 R14: 00007ffeeaa2b550 R15: 00007ffeeaa2b638 [ 1351.857931][T21126] [ 1355.400859][T21172] ptp ptp0: only physical clock in use now [ 1356.355504][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 1360.618997][T21246] Invalid ELF header magic: != ELF [ 1360.767829][T21246] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2899'. [ 1360.822985][T21249] Format for adding new port is "id [perm_addr]" (uint MAC). [ 1360.867389][ T31] audit: type=1804 audit(6049699013.477:16): pid=21253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2901" name="/newroot/111/file0" dev="tmpfs" ino=596 res=1 errno=0 [ 1361.027968][ T31] audit: type=1800 audit(6049699013.528:17): pid=21253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2901" name="file0" dev="tmpfs" ino=596 res=0 errno=0 [ 1362.519777][T21289] can: request_module (can-proto-0) failed. [ 1365.580314][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.586649][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.687384][T21339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2918'. [ 1367.462648][T21341] FAULT_INJECTION: forcing a failure. [ 1367.462648][T21341] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.617803][T21341] CPU: 1 UID: 0 PID: 21341 Comm: syz.0.2919 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1367.617844][T21341] Tainted: [U]=USER [ 1367.617852][T21341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1367.617867][T21341] Call Trace: [ 1367.617874][T21341] [ 1367.617882][T21341] dump_stack_lvl+0x16c/0x1f0 [ 1367.617913][T21341] should_fail_ex+0x512/0x640 [ 1367.617946][T21341] ? fs_reclaim_acquire+0xae/0x150 [ 1367.617985][T21341] ? tomoyo_encode2+0x100/0x3e0 [ 1367.618014][T21341] should_failslab+0xc2/0x120 [ 1367.618054][T21341] __kmalloc_noprof+0xd2/0x510 [ 1367.618083][T21341] ? d_absolute_path+0x136/0x1a0 [ 1367.618123][T21341] tomoyo_encode2+0x100/0x3e0 [ 1367.618156][T21341] tomoyo_encode+0x29/0x50 [ 1367.618184][T21341] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1367.618224][T21341] tomoyo_path_number_perm+0x245/0x580 [ 1367.618248][T21341] ? tomoyo_path_number_perm+0x237/0x580 [ 1367.618276][T21341] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1367.618302][T21341] ? __lock_acquire+0xb97/0x1ce0 [ 1367.618360][T21341] ? _raw_spin_unlock+0x28/0x50 [ 1367.618396][T21341] ? current_check_access_path+0x33c/0x460 [ 1367.618429][T21341] ? __pfx_current_check_access_path+0x10/0x10 [ 1367.618461][T21341] ? simple_lookup+0x105/0x1d0 [ 1367.618487][T21341] ? lookup_one_qstr_excl+0xb3/0x250 [ 1367.618529][T21341] tomoyo_path_mkdir+0x9b/0xe0 [ 1367.618563][T21341] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 1367.618606][T21341] security_path_mkdir+0x154/0x2f0 [ 1367.618632][T21341] do_mkdirat+0x175/0x3e0 [ 1367.618663][T21341] ? __pfx_do_mkdirat+0x10/0x10 [ 1367.618694][T21341] ? getname_flags.part.0+0x1c5/0x550 [ 1367.618735][T21341] __x64_sys_mkdir+0xef/0x140 [ 1367.618764][T21341] do_syscall_64+0xcd/0x490 [ 1367.618792][T21341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.618816][T21341] RIP: 0033:0x7f4255f8ebe9 [ 1367.618834][T21341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1367.618858][T21341] RSP: 002b:00007f4256e08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1367.618879][T21341] RAX: ffffffffffffffda RBX: 00007f42561b5fa0 RCX: 00007f4255f8ebe9 [ 1367.618895][T21341] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000100 [ 1367.618909][T21341] RBP: 00007f4256011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1367.618923][T21341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.618937][T21341] R13: 00007f42561b6038 R14: 00007f42561b5fa0 R15: 00007ffeeaa2b638 [ 1367.618967][T21341] [ 1367.869885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.277383][T21341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1369.349998][T21341] FAULT_INJECTION: forcing a failure. [ 1369.349998][T21341] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1369.363317][T21341] CPU: 1 UID: 0 PID: 21341 Comm: syz.0.2919 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1369.363357][T21341] Tainted: [U]=USER [ 1369.363365][T21341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1369.363380][T21341] Call Trace: [ 1369.363388][T21341] [ 1369.363397][T21341] dump_stack_lvl+0x16c/0x1f0 [ 1369.363427][T21341] should_fail_ex+0x512/0x640 [ 1369.363462][T21341] should_fail_futex+0x4c/0x60 [ 1369.363491][T21341] futex_lock_pi_atomic+0x101/0xd50 [ 1369.363533][T21341] futex_lock_pi+0x23f/0x7c0 [ 1369.363573][T21341] ? __pfx_futex_lock_pi+0x10/0x10 [ 1369.363606][T21341] ? __futex_wait+0x24c/0x2f0 [ 1369.363671][T21341] ? futex_private_hash_put+0x18a/0x300 [ 1369.363705][T21341] ? __pfx_futex_wake_mark+0x10/0x10 [ 1369.363750][T21341] ? ksys_write+0x190/0x250 [ 1369.363784][T21341] do_futex+0x11a/0x350 [ 1369.363814][T21341] ? __pfx_do_futex+0x10/0x10 [ 1369.363853][T21341] __x64_sys_futex+0x1e0/0x4c0 [ 1369.363885][T21341] ? fput+0x9b/0xd0 [ 1369.363918][T21341] ? __pfx___x64_sys_futex+0x10/0x10 [ 1369.363949][T21341] ? xfd_validate_state+0x61/0x180 [ 1369.363984][T21341] ? __pfx_ksys_write+0x10/0x10 [ 1369.364020][T21341] do_syscall_64+0xcd/0x490 [ 1369.364049][T21341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.364072][T21341] RIP: 0033:0x7f4255f8ebe9 [ 1369.364091][T21341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.364114][T21341] RSP: 002b:00007f4256e08038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1369.364136][T21341] RAX: ffffffffffffffda RBX: 00007f42561b5fa0 RCX: 00007f4255f8ebe9 [ 1369.364151][T21341] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1369.364165][T21341] RBP: 00007f4256011e19 R08: 0000000000000000 R09: 000000008000fff2 [ 1369.364180][T21341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.364194][T21341] R13: 00007f42561b6038 R14: 00007f42561b5fa0 R15: 00007ffeeaa2b638 [ 1369.364223][T21341] [ 1369.570055][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.874802][T21403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2935'. [ 1374.409380][T21425] vhci_hcd: invalid port number 16 [ 1374.464231][T21425] vhci_hcd: invalid port number 16 [ 1374.951921][T21439] blktrace: Concurrent blktraces are not allowed on loop2 [ 1375.121087][T21433] FAULT_INJECTION: forcing a failure. [ 1375.121087][T21433] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.312745][T21433] CPU: 1 UID: 0 PID: 21433 Comm: syz.3.2943 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1375.312786][T21433] Tainted: [U]=USER [ 1375.312793][T21433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1375.312807][T21433] Call Trace: [ 1375.312814][T21433] [ 1375.312826][T21433] dump_stack_lvl+0x16c/0x1f0 [ 1375.312855][T21433] should_fail_ex+0x512/0x640 [ 1375.312883][T21433] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1375.312914][T21433] should_failslab+0xc2/0x120 [ 1375.312946][T21433] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1375.312975][T21433] ? __kernfs_new_node+0xd2/0x8e0 [ 1375.313009][T21433] __kernfs_new_node+0xd2/0x8e0 [ 1375.313043][T21433] ? __pfx___kernfs_new_node+0x10/0x10 [ 1375.313080][T21433] ? find_held_lock+0x2b/0x80 [ 1375.313111][T21433] ? kernfs_root+0xee/0x2a0 [ 1375.313146][T21433] kernfs_new_node+0x13c/0x1e0 [ 1375.313186][T21433] __kernfs_create_file+0x53/0x350 [ 1375.313213][T21433] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1375.313248][T21433] internal_create_group+0x578/0xf30 [ 1375.313287][T21433] ? __pfx_internal_create_group+0x10/0x10 [ 1375.313322][T21433] ? kernfs_create_link+0x1bd/0x240 [ 1375.313350][T21433] internal_create_groups+0x9d/0x150 [ 1375.313385][T21433] device_add+0x6d1/0x1aa0 [ 1375.313421][T21433] ? __pfx_device_add+0x10/0x10 [ 1375.313453][T21433] ? lockdep_init_map_type+0x5c/0x280 [ 1375.313486][T21433] ? __init_waitqueue_head+0xca/0x150 [ 1375.313530][T21433] netdev_register_kobject+0x1a9/0x3d0 [ 1375.313564][T21433] register_netdevice+0x13dc/0x2270 [ 1375.313598][T21433] ? __pfx_register_netdevice+0x10/0x10 [ 1375.313634][T21433] br_add_bridge+0x9a/0xf0 [ 1375.313658][T21433] br_ioctl_stub+0x482/0x4c0 [ 1375.313686][T21433] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1375.313711][T21433] ? __pfx___mutex_lock+0x10/0x10 [ 1375.313753][T21433] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1375.313780][T21433] br_ioctl_call+0x53/0xa0 [ 1375.313813][T21433] sock_ioctl+0x365/0x6b0 [ 1375.313846][T21433] ? __pfx_sock_ioctl+0x10/0x10 [ 1375.313876][T21433] ? hook_file_ioctl_common+0x145/0x410 [ 1375.313910][T21433] ? __fget_files+0x20e/0x3c0 [ 1375.313939][T21433] ? __pfx_sock_ioctl+0x10/0x10 [ 1375.313973][T21433] __x64_sys_ioctl+0x18b/0x210 [ 1375.314012][T21433] do_syscall_64+0xcd/0x490 [ 1375.314039][T21433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.314064][T21433] RIP: 0033:0x7fc54558ebe9 [ 1375.314091][T21433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1375.314114][T21433] RSP: 002b:00007fc5464a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1375.314136][T21433] RAX: ffffffffffffffda RBX: 00007fc5457b5fa0 RCX: 00007fc54558ebe9 [ 1375.314152][T21433] RDX: 0000000000000004 RSI: 00000000000089a0 RDI: 0000000000000006 [ 1375.314166][T21433] RBP: 00007fc545611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1375.314180][T21433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.314194][T21433] R13: 00007fc5457b6038 R14: 00007fc5457b5fa0 R15: 00007ffea99943c8 [ 1375.314224][T21433] [ 1378.046489][T21471] random: crng reseeded on system resumption [ 1381.264566][T21514] random: crng reseeded on system resumption [ 1382.441221][T21527] FAULT_INJECTION: forcing a failure. [ 1382.441221][T21527] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.681035][T21527] CPU: 1 UID: 0 PID: 21527 Comm: syz.1.2965 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1382.681077][T21527] Tainted: [U]=USER [ 1382.681084][T21527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1382.681098][T21527] Call Trace: [ 1382.681107][T21527] [ 1382.681115][T21527] dump_stack_lvl+0x16c/0x1f0 [ 1382.681145][T21527] should_fail_ex+0x512/0x640 [ 1382.681174][T21527] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1382.681202][T21527] should_failslab+0xc2/0x120 [ 1382.681234][T21527] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1382.681259][T21527] ? sctp_auth_shkey_create+0x9e/0x210 [ 1382.681287][T21527] sctp_auth_shkey_create+0x9e/0x210 [ 1382.681312][T21527] sctp_endpoint_new+0x562/0xcd0 [ 1382.681340][T21527] sctp_init_sock+0xe2d/0x1330 [ 1382.681384][T21527] ? sock_init_data_uid+0x7f6/0xa00 [ 1382.681419][T21527] ? __pfx_sctp_init_sock+0x10/0x10 [ 1382.681457][T21527] inet_create+0x939/0x1040 [ 1382.681491][T21527] ? inet_create+0x93/0x1040 [ 1382.681529][T21527] __sock_create+0x338/0x8d0 [ 1382.681567][T21527] __sys_socket+0x14d/0x260 [ 1382.681600][T21527] ? __pfx___sys_socket+0x10/0x10 [ 1382.681632][T21527] ? xfd_validate_state+0x61/0x180 [ 1382.681667][T21527] ? __pfx_do_writev+0x10/0x10 [ 1382.681699][T21527] __x64_sys_socket+0x72/0xb0 [ 1382.681730][T21527] ? lockdep_hardirqs_on+0x7c/0x110 [ 1382.681754][T21527] do_syscall_64+0xcd/0x490 [ 1382.681781][T21527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.681805][T21527] RIP: 0033:0x7fe5d2f8ebe9 [ 1382.681824][T21527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1382.681848][T21527] RSP: 002b:00007fe5d3e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1382.681870][T21527] RAX: ffffffffffffffda RBX: 00007fe5d31b5fa0 RCX: 00007fe5d2f8ebe9 [ 1382.681886][T21527] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 1382.681899][T21527] RBP: 00007fe5d3011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1382.681914][T21527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.681928][T21527] R13: 00007fe5d31b6038 R14: 00007fe5d31b5fa0 R15: 00007ffc9299e068 [ 1382.681957][T21527] [ 1386.212448][T21588] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2980'. [ 1386.288525][T21593] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2980'. [ 1386.858073][ T31] audit: type=1800 audit(6049699039.572:18): pid=21601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2986" name="members" dev="configfs" ino=76512 res=0 errno=0 [ 1388.271184][T21623] [U] [ 1388.274041][T21623] [U] [ 1388.276755][T21623] [U] [ 1388.279481][T21623] [U] [ 1388.344327][T21623] [U] [ 1388.347105][T21623] [U] [ 1388.349831][T21623] [U] [ 1388.352550][T21623] [U] [ 1388.399263][T21623] [U] [ 1388.402058][T21623] [U] [ 1388.404772][T21623] [U] [ 1388.407483][T21623] [U] [ 1388.522748][T21623] [U] [ 1388.525524][T21623] [U] [ 1388.528247][T21623] [U] [ 1388.530963][T21623] [U] [ 1388.641609][T21623] [U] [ 1388.644373][T21623] [U] [ 1388.647108][T21623] [U] [ 1388.649819][T21623] [U] [ 1388.744442][T21623] [U] [ 1388.747194][T21623] [U] [ 1388.749912][T21623] [U] [ 1388.752623][T21623] [U] [ 1388.766317][T21628] can: request_module (can-proto-0) failed. [ 1388.792947][T21623] [U] [ 1388.795708][T21623] [U] [ 1388.798422][T21623] [U] [ 1388.801132][T21623] [U] [ 1388.842488][T21623] [U] [ 1388.845263][T21623] [U] [ 1388.847994][T21623] [U] [ 1388.850702][T21623] [U] [ 1388.883612][T21623] [U] [ 1388.886374][T21623] [U] [ 1388.889121][T21623] [U] [ 1388.891857][T21623] [U] [ 1388.932200][T21623] [U] [ 1388.934963][T21623] [U] [ 1388.937679][T21623] [U] [ 1388.940389][T21623] [U] [ 1388.973934][T21623] [U] [ 1388.976782][T21623] [U] [ 1388.979501][T21623] [U] [ 1388.982233][T21623] [U] [ 1389.014478][T21623] [U] [ 1389.017238][T21623] [U] [ 1389.019956][T21623] [U] [ 1389.022668][T21623] [U] [ 1389.062039][T21623] [U] [ 1389.064803][T21623] [U] [ 1389.067518][T21623] [U] [ 1389.070230][T21623] [U] [ 1389.111729][T21623] [U] [ 1389.114510][T21623] [U] [ 1389.117307][T21623] [U] [ 1389.120032][T21623] [U] [ 1389.172113][T21623] [U] [ 1390.268951][T21608] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1391.751142][T21682] aoe: invalid device specification [ 1392.809173][ T31] audit: type=1804 audit(6049699045.584:19): pid=21705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3010" name="/newroot/sys/kernel/debug/tracing/timestamp_mode" dev="tracefs" ino=1072 res=1 errno=0 [ 1393.098252][T21657] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1395.978199][T21743] can: request_module (can-proto-4) failed. [ 1396.381032][T21755] ACPI: Can not change Invalid GPE/Fixed Event status [ 1397.599882][T21763] hub 8-0:1.0: USB hub found [ 1397.632833][T21763] hub 8-0:1.0: 1 port detected [ 1399.950812][T21795] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1403.045742][T21852] FAULT_INJECTION: forcing a failure. [ 1403.045742][T21852] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.200557][T21852] CPU: 1 UID: 0 PID: 21852 Comm: syz.2.3038 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1403.200605][T21852] Tainted: [U]=USER [ 1403.200612][T21852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1403.200627][T21852] Call Trace: [ 1403.200634][T21852] [ 1403.200642][T21852] dump_stack_lvl+0x16c/0x1f0 [ 1403.200671][T21852] should_fail_ex+0x512/0x640 [ 1403.200699][T21852] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1403.200730][T21852] should_failslab+0xc2/0x120 [ 1403.200761][T21852] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1403.200789][T21852] ? getname_flags.part.0+0x4c/0x550 [ 1403.200830][T21852] getname_flags.part.0+0x4c/0x550 [ 1403.200869][T21852] getname_flags+0x93/0xf0 [ 1403.200895][T21852] do_sys_openat2+0xb8/0x1d0 [ 1403.200931][T21852] ? __pfx_do_sys_openat2+0x10/0x10 [ 1403.200970][T21852] ? __fget_files+0x20e/0x3c0 [ 1403.201000][T21852] __x64_sys_openat+0x174/0x210 [ 1403.201036][T21852] ? __pfx___x64_sys_openat+0x10/0x10 [ 1403.201072][T21852] ? ksys_write+0x1ac/0x250 [ 1403.201108][T21852] do_syscall_64+0xcd/0x490 [ 1403.201136][T21852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.201159][T21852] RIP: 0033:0x7f919a18ebe9 [ 1403.201177][T21852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.201199][T21852] RSP: 002b:00007f919afdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1403.201220][T21852] RAX: ffffffffffffffda RBX: 00007f919a3b5fa0 RCX: 00007f919a18ebe9 [ 1403.201236][T21852] RDX: 0000000000301000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1403.201251][T21852] RBP: 00007f919afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.201265][T21852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.201279][T21852] R13: 00007f919a3b6038 R14: 00007f919a3b5fa0 R15: 00007ffe6078a5b8 [ 1403.201308][T21852] [ 1404.720023][T21859] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3040'. [ 1405.483598][T21868] hub 8-0:1.0: USB hub found [ 1405.569720][T21868] hub 8-0:1.0: 1 port detected [ 1405.604184][T21866] random: crng reseeded on system resumption [ 1406.235783][T21880] FAULT_INJECTION: forcing a failure. [ 1406.235783][T21880] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.434928][T21880] CPU: 1 UID: 0 PID: 21880 Comm: syz.2.3046 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1406.434967][T21880] Tainted: [U]=USER [ 1406.434975][T21880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1406.434989][T21880] Call Trace: [ 1406.434996][T21880] [ 1406.435004][T21880] dump_stack_lvl+0x16c/0x1f0 [ 1406.435033][T21880] should_fail_ex+0x512/0x640 [ 1406.435061][T21880] ? fs_reclaim_acquire+0xae/0x150 [ 1406.435098][T21880] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1406.435128][T21880] should_failslab+0xc2/0x120 [ 1406.435159][T21880] __kmalloc_noprof+0xd2/0x510 [ 1406.435193][T21880] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1406.435233][T21880] ? tomoyo_profile+0x47/0x60 [ 1406.435269][T21880] tomoyo_path_number_perm+0x245/0x580 [ 1406.435292][T21880] ? tomoyo_path_number_perm+0x237/0x580 [ 1406.435320][T21880] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1406.435346][T21880] ? find_held_lock+0x2b/0x80 [ 1406.435395][T21880] ? find_held_lock+0x2b/0x80 [ 1406.435417][T21880] ? hook_file_ioctl_common+0x145/0x410 [ 1406.435450][T21880] ? __fget_files+0x20e/0x3c0 [ 1406.435480][T21880] security_file_ioctl+0x9b/0x240 [ 1406.435508][T21880] __x64_sys_ioctl+0xb7/0x210 [ 1406.435547][T21880] do_syscall_64+0xcd/0x490 [ 1406.435574][T21880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.435598][T21880] RIP: 0033:0x7f919a18ebe9 [ 1406.435616][T21880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.435639][T21880] RSP: 002b:00007f919afdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.435662][T21880] RAX: ffffffffffffffda RBX: 00007f919a3b5fa0 RCX: 00007f919a18ebe9 [ 1406.435677][T21880] RDX: 0000000000000000 RSI: 0000000000004c09 RDI: 0000000000000003 [ 1406.435691][T21880] RBP: 00007f919afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.435705][T21880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.435719][T21880] R13: 00007f919a3b6038 R14: 00007f919a3b5fa0 R15: 00007ffe6078a5b8 [ 1406.435752][T21880] [ 1406.435777][T21880] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1410.022777][T21926] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1413.984732][T21961] blktrace: Concurrent blktraces are not allowed on ram7 [ 1415.324047][T21974] ======================================================= [ 1415.324047][T21974] WARNING: The mand mount option has been deprecated and [ 1415.324047][T21974] and is ignored by this kernel. Remove the mand [ 1415.324047][T21974] option from the mount to silence this warning. [ 1415.324047][T21974] ======================================================= [ 1415.586691][T21975] random: crng reseeded on system resumption [ 1417.341801][T21999] Setting dangerous option i915.mitigations - tainting kernel [ 1420.787369][T22033] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1422.443832][T22055] FAULT_INJECTION: forcing a failure. [ 1422.443832][T22055] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1422.537582][T22055] CPU: 1 UID: 0 PID: 22055 Comm: syz.2.3092 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1422.537640][T22055] Tainted: [U]=USER [ 1422.537649][T22055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1422.537663][T22055] Call Trace: [ 1422.537670][T22055] [ 1422.537679][T22055] dump_stack_lvl+0x16c/0x1f0 [ 1422.537709][T22055] should_fail_ex+0x512/0x640 [ 1422.537753][T22055] get_futex_key+0x1d0/0x1560 [ 1422.537793][T22055] ? __pfx_get_futex_key+0x10/0x10 [ 1422.537831][T22055] futex_wake+0xea/0x530 [ 1422.537870][T22055] ? __pfx_futex_wake+0x10/0x10 [ 1422.537904][T22055] ? rcu_is_watching+0x12/0xc0 [ 1422.537939][T22055] do_futex+0x1e3/0x350 [ 1422.537970][T22055] ? __pfx_do_futex+0x10/0x10 [ 1422.538002][T22055] ? __pfx___might_resched+0x10/0x10 [ 1422.538030][T22055] __x64_sys_futex+0x1e0/0x4c0 [ 1422.538062][T22055] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1422.538104][T22055] ? __pfx___x64_sys_futex+0x10/0x10 [ 1422.538146][T22055] do_syscall_64+0xcd/0x490 [ 1422.538174][T22055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.538198][T22055] RIP: 0033:0x7f919a18ebe9 [ 1422.538216][T22055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1422.538239][T22055] RSP: 002b:00007f919afdf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1422.538260][T22055] RAX: ffffffffffffffda RBX: 00007f919a3b5fa8 RCX: 00007f919a18ebe9 [ 1422.538276][T22055] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f919a3b5fac [ 1422.538290][T22055] RBP: 00007f919a3b5fa0 R08: 00007f919afe0000 R09: 0000000000000000 [ 1422.538305][T22055] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1422.538319][T22055] R13: 00007f919a3b6038 R14: 00007ffe6078a4d0 R15: 00007ffe6078a5b8 [ 1422.538353][T22055] [ 1422.735509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.402355][T22075] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1426.669158][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1426.676662][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.728796][T22066] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3094'. [ 1426.859267][T22076] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3094'. [ 1427.485586][T22115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 1428.482574][T22131] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1428.733150][T22135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3111'. [ 1428.850908][T22135] nbd: must specify at least one socket [ 1431.670150][T22187] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1432.587884][ T31] audit: type=1800 audit(6049699085.581:20): pid=22196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3127" name="lu_gp_id" dev="configfs" ino=80430 res=0 errno=0 [ 1435.753172][T22227] __vm_enough_memory: pid: 22227, comm: syz.1.3135, bytes: 4398046511104 not enough memory for the allocation [ 1437.341953][T22249] sysfs_service_op_store: Client not running :-5: [ 1437.953411][T22257] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1438.745834][T22269] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1439.464861][T22286] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 1441.787896][T22305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1441.828260][T22305] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1441.927660][T22305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1441.935423][T22305] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1442.015253][T22305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1442.042711][T22305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1442.066081][T22305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1442.087635][T22305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1442.124756][T22305] CPU0 is offline. [ 1442.283902][T18356] Bluetooth: hci4: unexpected event 0x03 length: 725 > 11 [ 1442.700214][ T31] audit: type=1800 audit(6049699095.759:21): pid=22331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3158" name="members" dev="configfs" ino=81072 res=0 errno=0 [ 1443.218958][T18356] Bluetooth: hci2: command 0x0406 tx timeout [ 1443.928360][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 1444.004709][ T5877] Bluetooth: hci0: command 0x0406 tx timeout [ 1444.085769][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 1445.277336][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 1445.993201][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 1446.075835][ T5877] Bluetooth: hci0: command 0x0406 tx timeout [ 1446.152300][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 1446.309714][T22376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3166'. [ 1446.714684][T22392] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1448.317178][T22420] program syz.1.3180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1450.632568][T22464] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3190'. [ 1451.668861][T22477] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 1453.564380][T22509] hugetlbfs: syz.1.3202 (22509): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1453.665146][T22510] random: crng reseeded on system resumption [ 1457.433751][T22558] [U] [ 1457.436611][T22558] [U] [ 1457.439319][T22558] [U] [ 1457.442026][T22558] [U] [ 1457.560912][T22558] [U] [ 1457.563671][T22558] [U] [ 1457.566380][T22558] [U] [ 1457.569082][T22558] [U] [ 1457.666009][T22558] [U] [ 1457.668782][T22558] [U] [ 1457.671522][T22558] [U] [ 1457.674234][T22558] [U] [ 1457.869859][T22558] [U] [ 1457.872665][T22558] [U] [ 1457.875391][T22558] [U] [ 1457.878097][T22558] [U] [ 1457.978727][T22545] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3209'. [ 1458.116287][T22543] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3209'. [ 1458.245343][T22562] [U] [ 1460.197527][T22628] netlink: zone id is out of range [ 1460.292208][T22628] netlink: zone id is out of range [ 1460.421440][T22628] netlink: zone id is out of range [ 1460.498756][T22628] netlink: zone id is out of range [ 1460.584960][T22628] netlink: zone id is out of range [ 1460.754355][T22628] netlink: zone id is out of range [ 1460.796816][T22628] netlink: zone id is out of range [ 1460.939671][T22628] netlink: zone id is out of range [ 1460.944835][T22628] netlink: zone id is out of range [ 1461.199646][T22628] netlink: zone id is out of range [ 1462.154934][T22640] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3225'. [ 1462.214006][T22640] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3225'. [ 1462.839549][T22660] FAULT_INJECTION: forcing a failure. [ 1462.839549][T22660] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.940427][T22660] CPU: 1 UID: 0 PID: 22660 Comm: syz.0.3231 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1462.940468][T22660] Tainted: [U]=USER [ 1462.940475][T22660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1462.940490][T22660] Call Trace: [ 1462.940498][T22660] [ 1462.940507][T22660] dump_stack_lvl+0x16c/0x1f0 [ 1462.940536][T22660] should_fail_ex+0x512/0x640 [ 1462.940565][T22660] ? fs_reclaim_acquire+0xae/0x150 [ 1462.940603][T22660] ? tomoyo_encode2+0x100/0x3e0 [ 1462.940631][T22660] should_failslab+0xc2/0x120 [ 1462.940663][T22660] __kmalloc_noprof+0xd2/0x510 [ 1462.940691][T22660] ? d_absolute_path+0x136/0x1a0 [ 1462.940730][T22660] tomoyo_encode2+0x100/0x3e0 [ 1462.940763][T22660] tomoyo_encode+0x29/0x50 [ 1462.940791][T22660] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1462.940830][T22660] tomoyo_path_number_perm+0x245/0x580 [ 1462.940854][T22660] ? tomoyo_path_number_perm+0x237/0x580 [ 1462.940882][T22660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1462.940909][T22660] ? find_held_lock+0x2b/0x80 [ 1462.940957][T22660] ? find_held_lock+0x2b/0x80 [ 1462.940979][T22660] ? hook_file_ioctl_common+0x145/0x410 [ 1462.941019][T22660] ? __fget_files+0x20e/0x3c0 [ 1462.941050][T22660] security_file_ioctl+0x9b/0x240 [ 1462.941077][T22660] __x64_sys_ioctl+0xb7/0x210 [ 1462.941117][T22660] do_syscall_64+0xcd/0x490 [ 1462.941145][T22660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.941168][T22660] RIP: 0033:0x7f4255f8ebe9 [ 1462.941186][T22660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.941210][T22660] RSP: 002b:00007f4256e08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.941232][T22660] RAX: ffffffffffffffda RBX: 00007f42561b5fa0 RCX: 00007f4255f8ebe9 [ 1462.941248][T22660] RDX: 0000000000000000 RSI: 0000000000004c08 RDI: 0000000000000003 [ 1462.941264][T22660] RBP: 00007f4256e08090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.941278][T22660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.941292][T22660] R13: 00007f42561b6038 R14: 00007f42561b5fa0 R15: 00007ffeeaa2b638 [ 1462.941322][T22660] [ 1462.941341][T22660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1464.444332][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1466.125749][T22698] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1467.842721][T22706] lo: entered allmulticast mode [ 1468.018980][T22706] lo: left allmulticast mode [ 1469.610569][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1471.419624][T22746] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1472.404596][ T5877] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1472.404629][ T5877] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 1472.421085][ T5877] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1474.613972][T22773] zswap: compressor not available [ 1475.359049][T22789] ALSA: mixer_oss: invalid OSS volume '0' [ 1475.364834][T22789] ALSA: mixer_oss: invalid OSS volume '' [ 1476.110758][T22801] FAULT_INJECTION: forcing a failure. [ 1476.110758][T22801] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.176112][T22799] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1476.222841][T22801] CPU: 1 UID: 0 PID: 22801 Comm: syz.3.3269 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1476.222881][T22801] Tainted: [U]=USER [ 1476.222888][T22801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1476.222913][T22801] Call Trace: [ 1476.222920][T22801] [ 1476.222928][T22801] dump_stack_lvl+0x16c/0x1f0 [ 1476.222957][T22801] should_fail_ex+0x512/0x640 [ 1476.222990][T22801] should_failslab+0xc2/0x120 [ 1476.223021][T22801] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1476.223050][T22801] ? skb_clone+0x190/0x3f0 [ 1476.223078][T22801] skb_clone+0x190/0x3f0 [ 1476.223103][T22801] netlink_deliver_tap+0xabd/0xd30 [ 1476.223133][T22801] netlink_unicast+0x64c/0x870 [ 1476.223162][T22801] ? __pfx_netlink_unicast+0x10/0x10 [ 1476.223187][T22801] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1476.223210][T22801] ? __lock_acquire+0xb97/0x1ce0 [ 1476.223249][T22801] netlink_sendmsg+0x8d1/0xdd0 [ 1476.223278][T22801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.223307][T22801] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1476.223349][T22801] ____sys_sendmsg+0xa98/0xc70 [ 1476.223381][T22801] ? copy_msghdr_from_user+0x10a/0x160 [ 1476.223404][T22801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1476.223449][T22801] ___sys_sendmsg+0x134/0x1d0 [ 1476.223474][T22801] ? __pfx____sys_sendmsg+0x10/0x10 [ 1476.223524][T22801] ? __mutex_unlock_slowpath+0x140/0x800 [ 1476.223558][T22801] __sys_sendmsg+0x16d/0x220 [ 1476.223582][T22801] ? __pfx___sys_sendmsg+0x10/0x10 [ 1476.223625][T22801] do_syscall_64+0xcd/0x490 [ 1476.223652][T22801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.223675][T22801] RIP: 0033:0x7fc54558ebe9 [ 1476.223692][T22801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1476.223715][T22801] RSP: 002b:00007fc5464a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.223737][T22801] RAX: ffffffffffffffda RBX: 00007fc5457b5fa0 RCX: 00007fc54558ebe9 [ 1476.223752][T22801] RDX: 0000000000000000 RSI: 0000200000007b00 RDI: 0000000000000003 [ 1476.223766][T22801] RBP: 00007fc5464a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.223780][T22801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.223794][T22801] R13: 00007fc5457b6038 R14: 00007fc5457b5fa0 R15: 00007ffea99943c8 [ 1476.223824][T22801] [ 1479.403329][T22838] FAULT_INJECTION: forcing a failure. [ 1479.403329][T22838] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.416354][T22838] CPU: 1 UID: 0 PID: 22838 Comm: syz.2.3278 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1479.416393][T22838] Tainted: [U]=USER [ 1479.416400][T22838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1479.416415][T22838] Call Trace: [ 1479.416423][T22838] [ 1479.416432][T22838] dump_stack_lvl+0x16c/0x1f0 [ 1479.416462][T22838] should_fail_ex+0x512/0x640 [ 1479.416489][T22838] ? __kernel_text_address+0xd/0x40 [ 1479.416514][T22838] should_failslab+0xc2/0x120 [ 1479.416545][T22838] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1479.416573][T22838] ? skb_clone+0x190/0x3f0 [ 1479.416601][T22838] skb_clone+0x190/0x3f0 [ 1479.416625][T22838] dev_queue_xmit_nit+0x3e7/0xca0 [ 1479.416658][T22838] dev_hard_start_xmit+0x5c3/0x740 [ 1479.416692][T22838] ? skb_clone+0x190/0x3f0 [ 1479.416717][T22838] __dev_queue_xmit+0xa46/0x4490 [ 1479.416763][T22838] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1479.416819][T22838] ? __asan_memcpy+0x3c/0x60 [ 1479.416849][T22838] ? __asan_memcpy+0x3c/0x60 [ 1479.416873][T22838] ? __skb_clone+0x570/0x760 [ 1479.416915][T22838] netlink_deliver_tap+0xa87/0xd30 [ 1479.416945][T22838] netlink_unicast+0x64c/0x870 [ 1479.416975][T22838] ? __pfx_netlink_unicast+0x10/0x10 [ 1479.417000][T22838] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1479.417025][T22838] ? __lock_acquire+0xb97/0x1ce0 [ 1479.417063][T22838] netlink_sendmsg+0x8d1/0xdd0 [ 1479.417093][T22838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1479.417122][T22838] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1479.417165][T22838] ____sys_sendmsg+0xa98/0xc70 [ 1479.417197][T22838] ? copy_msghdr_from_user+0x10a/0x160 [ 1479.417221][T22838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1479.417266][T22838] ___sys_sendmsg+0x134/0x1d0 [ 1479.417292][T22838] ? __pfx____sys_sendmsg+0x10/0x10 [ 1479.417342][T22838] ? __mutex_unlock_slowpath+0x140/0x800 [ 1479.417377][T22838] __sys_sendmsg+0x16d/0x220 [ 1479.417401][T22838] ? __pfx___sys_sendmsg+0x10/0x10 [ 1479.417445][T22838] do_syscall_64+0xcd/0x490 [ 1479.417473][T22838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.417496][T22838] RIP: 0033:0x7f919a18ebe9 [ 1479.417515][T22838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1479.417538][T22838] RSP: 002b:00007f919afdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1479.417560][T22838] RAX: ffffffffffffffda RBX: 00007f919a3b5fa0 RCX: 00007f919a18ebe9 [ 1479.417575][T22838] RDX: 0000000000000000 RSI: 0000200000007b00 RDI: 0000000000000003 [ 1479.417589][T22838] RBP: 00007f919afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1479.417604][T22838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1479.417617][T22838] R13: 00007f919a3b6038 R14: 00007f919a3b5fa0 R15: 00007ffe6078a5b8 [ 1479.417647][T22838] [ 1480.211770][T22842] CIFS: VFS: Invalid SecurityFlags: 5 [ 1481.648959][T22855] ubi: mtd0 is already attached to ubi0 [ 1482.460272][T22876] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [37335]. [ 1482.472818][T22874] FAULT_INJECTION: forcing a failure. [ 1482.472818][T22874] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.621288][T22874] CPU: 1 UID: 0 PID: 22874 Comm: syz.2.3286 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1482.621327][T22874] Tainted: [U]=USER [ 1482.621335][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1482.621349][T22874] Call Trace: [ 1482.621356][T22874] [ 1482.621365][T22874] dump_stack_lvl+0x16c/0x1f0 [ 1482.621395][T22874] should_fail_ex+0x512/0x640 [ 1482.621423][T22874] ? fs_reclaim_acquire+0xae/0x150 [ 1482.621461][T22874] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1482.621491][T22874] should_failslab+0xc2/0x120 [ 1482.621523][T22874] __kmalloc_noprof+0xd2/0x510 [ 1482.621557][T22874] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1482.621589][T22874] ? tomoyo_profile+0x47/0x60 [ 1482.621625][T22874] tomoyo_path_number_perm+0x245/0x580 [ 1482.621648][T22874] ? tomoyo_path_number_perm+0x237/0x580 [ 1482.621675][T22874] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1482.621701][T22874] ? find_held_lock+0x2b/0x80 [ 1482.621749][T22874] ? find_held_lock+0x2b/0x80 [ 1482.621771][T22874] ? hook_file_ioctl_common+0x145/0x410 [ 1482.621804][T22874] ? __fget_files+0x20e/0x3c0 [ 1482.621835][T22874] security_file_ioctl+0x9b/0x240 [ 1482.621862][T22874] __x64_sys_ioctl+0xb7/0x210 [ 1482.621901][T22874] do_syscall_64+0xcd/0x490 [ 1482.621928][T22874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.621953][T22874] RIP: 0033:0x7f919a18ebe9 [ 1482.621970][T22874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1482.621994][T22874] RSP: 002b:00007f919afdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1482.622016][T22874] RAX: ffffffffffffffda RBX: 00007f919a3b5fa0 RCX: 00007f919a18ebe9 [ 1482.622031][T22874] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000003 [ 1482.622045][T22874] RBP: 00007f919afdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.622060][T22874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.622073][T22874] R13: 00007f919a3b6038 R14: 00007f919a3b5fa0 R15: 00007ffe6078a5b8 [ 1482.622108][T22874] [ 1482.622116][T22874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1483.389886][ T31] audit: type=1800 audit(6049699136.600:22): pid=22879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3287" name="trace_pipe" dev="tracefs" ino=1107 res=0 errno=0 [ 1484.663213][T22897] FAULT_INJECTION: forcing a failure. [ 1484.663213][T22897] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.762320][T22897] CPU: 1 UID: 0 PID: 22897 Comm: syz.3.3289 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1484.762361][T22897] Tainted: [U]=USER [ 1484.762369][T22897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1484.762383][T22897] Call Trace: [ 1484.762390][T22897] [ 1484.762399][T22897] dump_stack_lvl+0x16c/0x1f0 [ 1484.762428][T22897] should_fail_ex+0x512/0x640 [ 1484.762456][T22897] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1484.762489][T22897] should_failslab+0xc2/0x120 [ 1484.762521][T22897] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1484.762549][T22897] ? genl_start+0x1e8/0x980 [ 1484.762576][T22897] ? __netlink_dump_start+0x60e/0x990 [ 1484.762599][T22897] ? __alloc_skb+0x2b2/0x380 [ 1484.762625][T22897] __alloc_skb+0x2b2/0x380 [ 1484.762646][T22897] ? __pfx___alloc_skb+0x10/0x10 [ 1484.762679][T22897] netlink_dump+0x19b/0xd30 [ 1484.762706][T22897] ? __pfx_netlink_dump+0x10/0x10 [ 1484.762742][T22897] ? __asan_memset+0x23/0x50 [ 1484.762765][T22897] ? genl_start+0x67f/0x980 [ 1484.762797][T22897] __netlink_dump_start+0x6d6/0x990 [ 1484.762827][T22897] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1484.762860][T22897] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1484.762890][T22897] ? genl_op_from_small+0x357/0x440 [ 1484.762923][T22897] ? __pfx_genl_get_cmd+0x10/0x10 [ 1484.762949][T22897] ? __pfx_genl_start+0x10/0x10 [ 1484.762975][T22897] ? __pfx_genl_dumpit+0x10/0x10 [ 1484.763002][T22897] ? __pfx_genl_done+0x10/0x10 [ 1484.763034][T22897] ? __radix_tree_lookup+0x21f/0x2c0 [ 1484.763083][T22897] genl_rcv_msg+0x46e/0x800 [ 1484.763116][T22897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1484.763146][T22897] ? __pfx_psample_nl_cmd_get_group_dumpit+0x10/0x10 [ 1484.763194][T22897] netlink_rcv_skb+0x158/0x420 [ 1484.763219][T22897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1484.763250][T22897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1484.763288][T22897] ? netlink_deliver_tap+0x1ae/0xd30 [ 1484.763316][T22897] genl_rcv+0x28/0x40 [ 1484.763346][T22897] netlink_unicast+0x5a7/0x870 [ 1484.763376][T22897] ? __pfx_netlink_unicast+0x10/0x10 [ 1484.763401][T22897] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1484.763424][T22897] ? __lock_acquire+0xb97/0x1ce0 [ 1484.763462][T22897] netlink_sendmsg+0x8d1/0xdd0 [ 1484.763493][T22897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1484.763522][T22897] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1484.763565][T22897] ____sys_sendmsg+0xa98/0xc70 [ 1484.763597][T22897] ? copy_msghdr_from_user+0x10a/0x160 [ 1484.763621][T22897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1484.763666][T22897] ___sys_sendmsg+0x134/0x1d0 [ 1484.763691][T22897] ? __pfx____sys_sendmsg+0x10/0x10 [ 1484.763741][T22897] ? __mutex_unlock_slowpath+0x140/0x800 [ 1484.763775][T22897] __sys_sendmsg+0x16d/0x220 [ 1484.763800][T22897] ? __pfx___sys_sendmsg+0x10/0x10 [ 1484.763843][T22897] do_syscall_64+0xcd/0x490 [ 1484.763871][T22897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.763895][T22897] RIP: 0033:0x7fc54558ebe9 [ 1484.763912][T22897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1484.763934][T22897] RSP: 002b:00007fc5464a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1484.763955][T22897] RAX: ffffffffffffffda RBX: 00007fc5457b5fa0 RCX: 00007fc54558ebe9 [ 1484.763970][T22897] RDX: 0000000000000000 RSI: 0000200000007b00 RDI: 0000000000000003 [ 1484.763984][T22897] RBP: 00007fc5464a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1484.763998][T22897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.764011][T22897] R13: 00007fc5457b6038 R14: 00007fc5457b5fa0 R15: 00007ffea99943c8 [ 1484.764040][T22897] [ 1486.068947][T22907] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1486.375047][T22916] delete_channel: no stack [ 1486.500433][T22916] delete_channel: no stack [ 1486.576886][T22916] delete_channel: no stack [ 1486.701374][T22916] delete_channel: no stack [ 1486.812783][T22916] delete_channel: no stack [ 1486.817395][T22916] delete_channel: no stack [ 1487.154672][T22916] delete_channel: no stack [ 1487.292854][T22916] delete_channel: no stack [ 1487.376721][T22916] delete_channel: no stack [ 1487.509690][T22916] delete_channel: no stack [ 1487.628885][T22916] delete_channel: no stack [ 1487.743227][T22916] delete_channel: no stack [ 1487.762044][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.770247][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.049923][T22916] delete_channel: no stack [ 1488.127055][T22916] delete_channel: no stack [ 1488.131641][T22916] delete_channel: no stack [ 1488.390417][T22916] delete_channel: no stack [ 1489.177193][T22916] delete_channel: no stack [ 1489.181813][T22916] delete_channel: no stack [ 1489.186452][T22916] delete_channel: no stack [ 1489.475695][T22916] delete_channel: no stack [ 1489.582487][T22916] delete_channel: no stack [ 1489.724089][T22916] delete_channel: no stack [ 1489.879363][T22916] delete_channel: no stack [ 1489.989027][T22916] delete_channel: no stack [ 1490.095165][T22916] delete_channel: no stack [ 1490.223833][T22916] delete_channel: no stack [ 1490.308663][T22916] delete_channel: no stack [ 1490.443992][T22916] delete_channel: no stack [ 1490.448614][T22916] delete_channel: no stack [ 1490.586462][T22916] delete_channel: no stack [ 1490.706992][T22916] delete_channel: no stack [ 1490.802681][T22916] delete_channel: no stack [ 1490.807320][T22916] delete_channel: no stack [ 1491.748170][T22994] FAULT_INJECTION: forcing a failure. [ 1491.748170][T22994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1491.831786][T22994] CPU: 1 UID: 0 PID: 22994 Comm: syz.2.3312 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1491.831828][T22994] Tainted: [U]=USER [ 1491.831836][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1491.831850][T22994] Call Trace: [ 1491.831858][T22994] [ 1491.831867][T22994] dump_stack_lvl+0x16c/0x1f0 [ 1491.831896][T22994] should_fail_ex+0x512/0x640 [ 1491.831928][T22994] _copy_from_user+0x2e/0xd0 [ 1491.831962][T22994] move_addr_to_kernel+0x65/0x170 [ 1491.831997][T22994] __sys_sendto+0x1be/0x520 [ 1491.832034][T22994] ? __pfx___sys_sendto+0x10/0x10 [ 1491.832080][T22994] ? fd_install+0x225/0x750 [ 1491.832117][T22994] ? __pfx___sys_socket+0x10/0x10 [ 1491.832149][T22994] ? xfd_validate_state+0x61/0x180 [ 1491.832182][T22994] ? __pfx_do_writev+0x10/0x10 [ 1491.832211][T22994] __x64_sys_sendto+0xe0/0x1c0 [ 1491.832247][T22994] ? do_syscall_64+0x91/0x490 [ 1491.832271][T22994] ? lockdep_hardirqs_on+0x7c/0x110 [ 1491.832294][T22994] do_syscall_64+0xcd/0x490 [ 1491.832320][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.832343][T22994] RIP: 0033:0x7f919a190a7c [ 1491.832361][T22994] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1491.832385][T22994] RSP: 002b:00007f919afddec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1491.832414][T22994] RAX: ffffffffffffffda RBX: 00007f919afddfc0 RCX: 00007f919a190a7c [ 1491.832429][T22994] RDX: 0000000000000020 RSI: 00007f919afde010 RDI: 0000000000000005 [ 1491.832444][T22994] RBP: 0000000000000000 R08: 00007f919afddf14 R09: 000000000000000c [ 1491.832458][T22994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 1491.832472][T22994] R13: 00007f919afddf68 R14: 00007f919afde010 R15: 0000000000000000 [ 1491.832501][T22994] [ 1492.650818][T23002] FAULT_INJECTION: forcing a failure. [ 1492.650818][T23002] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.663555][T23002] CPU: 1 UID: 0 PID: 23002 Comm: syz.3.3314 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1492.663593][T23002] Tainted: [U]=USER [ 1492.663600][T23002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1492.663613][T23002] Call Trace: [ 1492.663623][T23002] [ 1492.663632][T23002] dump_stack_lvl+0x16c/0x1f0 [ 1492.663665][T23002] should_fail_ex+0x512/0x640 [ 1492.663694][T23002] ? bpf_ksym_find+0x124/0x1c0 [ 1492.663719][T23002] should_failslab+0xc2/0x120 [ 1492.663751][T23002] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1492.663780][T23002] ? skb_clone+0x190/0x3f0 [ 1492.663809][T23002] skb_clone+0x190/0x3f0 [ 1492.663835][T23002] dev_queue_xmit_nit+0x3e7/0xca0 [ 1492.663868][T23002] dev_hard_start_xmit+0x5c3/0x740 [ 1492.663903][T23002] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1492.663935][T23002] __dev_queue_xmit+0xa46/0x4490 [ 1492.663982][T23002] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1492.664040][T23002] ? __asan_memcpy+0x3c/0x60 [ 1492.664065][T23002] ? __asan_memcpy+0x3c/0x60 [ 1492.664088][T23002] ? __skb_clone+0x570/0x760 [ 1492.664130][T23002] netlink_deliver_tap+0xa87/0xd30 [ 1492.664161][T23002] netlink_unicast+0x64c/0x870 [ 1492.664191][T23002] ? __pfx_netlink_unicast+0x10/0x10 [ 1492.664216][T23002] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1492.664251][T23002] netlink_sendmsg+0x8d1/0xdd0 [ 1492.664281][T23002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.664311][T23002] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1492.664353][T23002] __sys_sendto+0x4a3/0x520 [ 1492.664391][T23002] ? __pfx___sys_sendto+0x10/0x10 [ 1492.664437][T23002] ? find_held_lock+0x2b/0x80 [ 1492.664481][T23002] __x64_sys_sendto+0xe0/0x1c0 [ 1492.664517][T23002] ? do_syscall_64+0x91/0x490 [ 1492.664542][T23002] ? lockdep_hardirqs_on+0x7c/0x110 [ 1492.664565][T23002] do_syscall_64+0xcd/0x490 [ 1492.664592][T23002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.664615][T23002] RIP: 0033:0x7fc545590a7c [ 1492.664634][T23002] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1492.664662][T23002] RSP: 002b:00007fc5464a1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1492.664684][T23002] RAX: ffffffffffffffda RBX: 00007fc5464a1fc0 RCX: 00007fc545590a7c [ 1492.664699][T23002] RDX: 0000000000000024 RSI: 00007fc5464a2010 RDI: 0000000000000026 [ 1492.664713][T23002] RBP: 0000000000000000 R08: 00007fc5464a1f14 R09: 000000000000000c [ 1492.664727][T23002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000026 [ 1492.664740][T23002] R13: 00007fc5464a1f68 R14: 00007fc5464a2010 R15: 0000000000000000 [ 1492.664769][T23002] [ 1493.264413][T23002] FAULT_INJECTION: forcing a failure. [ 1493.264413][T23002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.400762][T23002] CPU: 1 UID: 0 PID: 23002 Comm: syz.3.3314 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1493.400802][T23002] Tainted: [U]=USER [ 1493.400809][T23002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1493.400823][T23002] Call Trace: [ 1493.400831][T23002] [ 1493.400839][T23002] dump_stack_lvl+0x16c/0x1f0 [ 1493.400868][T23002] should_fail_ex+0x512/0x640 [ 1493.400901][T23002] strncpy_from_user+0x3b/0x2e0 [ 1493.400929][T23002] getname_flags.part.0+0x8f/0x550 [ 1493.400970][T23002] getname_flags+0x93/0xf0 [ 1493.400995][T23002] do_sys_openat2+0xb8/0x1d0 [ 1493.401031][T23002] ? __pfx_do_sys_openat2+0x10/0x10 [ 1493.401067][T23002] ? __sys_connect+0xe0/0x160 [ 1493.401110][T23002] __x64_sys_openat+0x174/0x210 [ 1493.401147][T23002] ? __pfx___x64_sys_openat+0x10/0x10 [ 1493.401195][T23002] do_syscall_64+0xcd/0x490 [ 1493.401222][T23002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.401246][T23002] RIP: 0033:0x7fc54558ebe9 [ 1493.401264][T23002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1493.401288][T23002] RSP: 002b:00007fc5464a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1493.401309][T23002] RAX: ffffffffffffffda RBX: 00007fc5457b5fa0 RCX: 00007fc54558ebe9 [ 1493.401332][T23002] RDX: 0000000000008001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1493.401347][T23002] RBP: 00007fc545611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1493.401361][T23002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.401375][T23002] R13: 00007fc5457b6038 R14: 00007fc5457b5fa0 R15: 00007ffea99943c8 [ 1493.401405][T23002] [ 1493.979422][T23008] FAULT_INJECTION: forcing a failure. [ 1493.979422][T23008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.148133][T23008] CPU: 1 UID: 0 PID: 23008 Comm: syz.0.3315 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1494.148200][T23008] Tainted: [U]=USER [ 1494.148208][T23008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1494.148222][T23008] Call Trace: [ 1494.148230][T23008] [ 1494.148245][T23008] dump_stack_lvl+0x16c/0x1f0 [ 1494.148275][T23008] should_fail_ex+0x512/0x640 [ 1494.148309][T23008] _copy_from_user+0x2e/0xd0 [ 1494.148344][T23008] get_bitmap+0x6d/0x110 [ 1494.148374][T23008] get_nodes+0x1df/0x210 [ 1494.148405][T23008] ? __pfx_get_nodes+0x10/0x10 [ 1494.148435][T23008] ? __x64_sys_futex+0x1e0/0x4c0 [ 1494.148470][T23008] kernel_set_mempolicy+0x129/0x1e0 [ 1494.148503][T23008] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 1494.148543][T23008] do_syscall_64+0xcd/0x490 [ 1494.148571][T23008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.148594][T23008] RIP: 0033:0x7f4255f8ebe9 [ 1494.148612][T23008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.148635][T23008] RSP: 002b:00007f4256e08038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 1494.148657][T23008] RAX: ffffffffffffffda RBX: 00007f42561b5fa0 RCX: 00007f4255f8ebe9 [ 1494.148672][T23008] RDX: 0000000000000021 RSI: 0000200000000000 RDI: 0000000000000006 [ 1494.148686][T23008] RBP: 00007f4256011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1494.148701][T23008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1494.148714][T23008] R13: 00007f42561b6038 R14: 00007f42561b5fa0 R15: 00007ffeeaa2b638 [ 1494.148743][T23008] [ 1499.742891][ T31] audit: type=1326 audit(6049699153.124:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23070 comm="syz.1.3325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5d2f8ebe9 code=0x0 [ 1501.353175][T16528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.794462][T16528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.187763][T16528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.805074][T16528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.899490][T23103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1502.904089][T23103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1502.904868][T23103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1502.905676][T23103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1502.906332][T23103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1503.338873][T23106] FAULT_INJECTION: forcing a failure. [ 1503.338873][T23106] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.338939][T23106] CPU: 1 UID: 0 PID: 23106 Comm: syz.0.3334 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1503.338976][T23106] Tainted: [U]=USER [ 1503.338983][T23106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1503.338997][T23106] Call Trace: [ 1503.339004][T23106] [ 1503.339013][T23106] dump_stack_lvl+0x16c/0x1f0 [ 1503.339042][T23106] should_fail_ex+0x512/0x640 [ 1503.339071][T23106] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1503.339098][T23106] should_failslab+0xc2/0x120 [ 1503.339132][T23106] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1503.339157][T23106] ? snd_seq_port_connect+0x61/0x580 [ 1503.339191][T23106] snd_seq_port_connect+0x61/0x580 [ 1503.339218][T23106] ? _raw_read_unlock+0x28/0x50 [ 1503.339239][T23106] ? check_subscription_permission.isra.0+0xf5/0x240 [ 1503.339274][T23106] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 1503.339308][T23106] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1503.339353][T23106] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 1503.339396][T23106] snd_seq_oss_midi_open+0x442/0x660 [ 1503.339436][T23106] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1503.339482][T23106] ? rcu_is_watching+0x12/0xc0 [ 1503.339507][T23106] ? trace_contention_end+0xdd/0x130 [ 1503.339545][T23106] snd_seq_oss_synth_reset+0x437/0x880 [ 1503.339584][T23106] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 1503.339622][T23106] ? __pfx___fsnotify_parent+0x10/0x10 [ 1503.339654][T23106] snd_seq_oss_reset+0x73/0x290 [ 1503.339686][T23106] ? __pfx_odev_release+0x10/0x10 [ 1503.339713][T23106] snd_seq_oss_release+0x7c/0x180 [ 1503.339745][T23106] odev_release+0x4c/0x70 [ 1503.339770][T23106] __fput+0x402/0xb70 [ 1503.339811][T23106] task_work_run+0x150/0x240 [ 1503.339850][T23106] ? __pfx_task_work_run+0x10/0x10 [ 1503.339887][T23106] ? __pfx___do_sys_close_range+0x10/0x10 [ 1503.339923][T23106] exit_to_user_mode_loop+0xeb/0x110 [ 1503.339961][T23106] do_syscall_64+0x3f6/0x490 [ 1503.339988][T23106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.340013][T23106] RIP: 0033:0x7f4255f8ebe9 [ 1503.340031][T23106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1503.340055][T23106] RSP: 002b:00007f4256de7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1503.340078][T23106] RAX: 0000000000000000 RBX: 00007f42561b6090 RCX: 00007f4255f8ebe9 [ 1503.340093][T23106] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1503.340107][T23106] RBP: 00007f4256011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1503.340121][T23106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1503.340135][T23106] R13: 00007f42561b6128 R14: 00007f42561b6090 R15: 00007ffeeaa2b638 [ 1503.340165][T23106] [ 1504.378435][T23102] chnl_net:caif_netlink_parms(): no params data found [ 1504.453761][T16528] bridge_slave_1: left allmulticast mode [ 1504.453820][T16528] bridge_slave_1: left promiscuous mode [ 1504.453995][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.458504][T16528] bridge_slave_0: left allmulticast mode [ 1504.458527][T16528] bridge_slave_0: left promiscuous mode [ 1504.458689][T16528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.938508][T23103] Bluetooth: hci1: command tx timeout [ 1506.592210][T23125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1507.015230][ T5877] Bluetooth: hci1: command tx timeout [ 1508.579097][T16528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.616749][T16528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.657845][T16528] bond0 (unregistering): Released all slaves [ 1508.807222][T23125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.075476][ T5877] Bluetooth: hci1: command tx timeout [ 1509.197615][T23125] bridge_slave_1 (unregistering): left allmulticast mode [ 1509.294975][T23125] bridge_slave_1 (unregistering): left promiscuous mode [ 1509.303365][T23125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.048581][T23102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.084974][T23102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.128743][T23102] bridge_slave_0: entered allmulticast mode [ 1511.142149][ T5877] Bluetooth: hci1: command tx timeout [ 1511.173461][T23102] bridge_slave_0: entered promiscuous mode [ 1511.216234][T23102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.290903][T23102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.298133][T23102] bridge_slave_1: entered allmulticast mode [ 1511.393681][T23102] bridge_slave_1: entered promiscuous mode [ 1512.492690][T23102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.556441][T23102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.839003][T23102] team0: Port device team_slave_0 added [ 1513.868202][T23102] team0: Port device team_slave_1 added [ 1514.266978][T16528] hsr_slave_0: left promiscuous mode [ 1514.299112][T16528] hsr_slave_1: left promiscuous mode [ 1514.324562][T16528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.331997][T16528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.416745][T16528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.452928][T16528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.636667][T16528] veth1_macvtap: left promiscuous mode [ 1514.659081][T16528] veth0_macvtap: left promiscuous mode [ 1514.681636][T16528] veth1_vlan: left promiscuous mode [ 1514.701493][T16528] veth0_vlan: left promiscuous mode [ 1515.567435][T23208] ptp ptp0: new virtual clock ptp2 [ 1515.677675][T23208] ptp ptp0: new virtual clock ptp3 [ 1515.772027][T23208] ptp ptp0: new virtual clock ptp4 [ 1515.874686][T23208] ptp ptp0: guarantee physical clock free running [ 1517.359695][T16528] team0 (unregistering): Port device team_slave_1 removed [ 1517.598562][T16528] team0 (unregistering): Port device team_slave_0 removed [ 1520.355132][T23102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1520.389040][T23102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.458589][T23102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1520.542092][T23102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.570792][T23102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.652783][T23102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.042491][T23102] hsr_slave_0: entered promiscuous mode [ 1521.065962][T23102] hsr_slave_1: entered promiscuous mode [ 1523.851732][T23263] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1523.881485][T23263] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1523.925062][T23263] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1523.994445][T23263] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1524.051658][T23263] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 1524.096561][T23263] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1524.140276][T23263] head: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 1524.186878][T23263] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1524.229632][T23263] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1524.277589][T23263] page dumped because: unmovable page [ 1524.283018][T23263] page_owner tracks the page as allocated [ 1524.336893][T23263] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5711, tgid 5711 (sftp-server), ts 79893879358, free_ts 36837088597 [ 1524.428039][T23263] post_alloc_hook+0x1c0/0x230 [ 1524.433103][T23263] get_page_from_freelist+0x132b/0x38e0 [ 1524.496580][T23263] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1524.545284][T23263] alloc_pages_mpol+0x1fb/0x550 [ 1524.558281][T23263] alloc_pages_noprof+0x131/0x390 [ 1524.601568][T23263] skb_page_frag_refill+0x186/0x5c0 [ 1524.624988][T23263] try_fill_recv+0x7e4/0x2930 [ 1524.629962][T23263] virtnet_poll+0x1e11/0x3c10 [ 1524.699412][T23263] __napi_poll.constprop.0+0xba/0x550 [ 1524.717401][T23263] net_rx_action+0xa9f/0xfe0 [ 1524.722771][T23263] handle_softirqs+0x219/0x8e0 [ 1524.765439][T23263] __irq_exit_rcu+0x109/0x170 [ 1524.788139][T23263] irq_exit_rcu+0x9/0x30 [ 1524.823338][T23263] common_interrupt+0xbf/0xe0 [ 1524.853547][T23263] asm_common_interrupt+0x26/0x40 [ 1524.875850][T23263] page last free pid 1 tgid 1 stack trace: [ 1524.915860][T23263] __free_frozen_pages+0x7d5/0x10f0 [ 1524.928172][T23263] free_contig_range+0x183/0x4b0 [ 1524.956975][T23263] destroy_args+0x7f6/0xa60 [ 1524.985205][T23263] debug_vm_pgtable+0x1a32/0x3640 [ 1524.990293][T23263] do_one_initcall+0x120/0x6e0 [ 1525.037956][T23263] kernel_init_freeable+0x5c2/0x910 [ 1525.054744][T23263] kernel_init+0x1c/0x2b0 [ 1525.059149][T23263] ret_from_fork+0x5d7/0x6f0 [ 1525.102262][T23263] ret_from_fork_asm+0x1a/0x30 [ 1527.432284][T23102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1527.514324][T23102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1527.596668][T23285] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1527.733437][T23292] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1528.166331][T23102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1528.244347][T23102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1530.816829][T23102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.931371][T23102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.017896][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.025118][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.124399][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.131634][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.401082][T23102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1532.547696][T23102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.101937][T23102] veth0_vlan: entered promiscuous mode [ 1533.193337][T23102] veth1_vlan: entered promiscuous mode [ 1533.711361][T23102] veth0_macvtap: entered promiscuous mode [ 1533.814579][T23102] veth1_macvtap: entered promiscuous mode [ 1534.348943][T23102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1534.452142][T23102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1534.552375][T16538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.599695][T16538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.692412][T16538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.772599][T16538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.170725][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.237959][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.420409][T16538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.479618][T16538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.166186][T23451] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3372'. [ 1537.250221][T23451] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3372'. [ 1537.265117][T23435] kexec: Could not allocate control_code_buffer [ 1538.913692][T23490] sp0: Synchronizing with TNC [ 1539.891721][T23512] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3380'. [ 1540.003702][T23512] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3380'. [ 1545.055285][ T31] audit: type=1804 audit(4294967302.362:24): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3398" name="/newroot/249/file0" dev="tmpfs" ino=1315 res=1 errno=0 [ 1548.466525][T23651] [ 1548.468894][T23651] ====================================================== [ 1548.475912][T23651] WARNING: possible circular locking dependency detected [ 1548.482940][T23651] 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 Tainted: G U [ 1548.491271][T23651] ------------------------------------------------------ [ 1548.498290][T23651] syz.3.3407/23651 is trying to acquire lock: [ 1548.504389][T23651] ffff88802f9fe870 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: ptp_clock_adjtime+0x527/0x760 [ 1548.514172][T23651] [ 1548.514172][T23651] but task is already holding lock: [ 1548.521552][T23651] ffff88802f9fe130 (&clk->rwsem){++++}-{4:4}, at: get_clock_desc+0x125/0x240 [ 1548.530373][T23651] [ 1548.530373][T23651] which lock already depends on the new lock. [ 1548.530373][T23651] [ 1548.540794][T23651] [ 1548.540794][T23651] the existing dependency chain (in reverse order) is: [ 1548.549826][T23651] [ 1548.549826][T23651] -> #1 (&clk->rwsem){++++}-{4:4}: [ 1548.557239][T23651] down_write+0x92/0x200 [ 1548.562038][T23651] posix_clock_unregister+0x4d/0xd0 [ 1548.567781][T23651] ptp_clock_unregister+0x14f/0x250 [ 1548.573519][T23651] ptp_vclock_unregister+0x11a/0x160 [ 1548.579340][T23651] unregister_vclock+0x108/0x1a0 [ 1548.584818][T23651] device_for_each_child_reverse+0x133/0x1a0 [ 1548.591347][T23651] n_vclocks_store+0x4b6/0x6d0 [ 1548.596658][T23651] dev_attr_store+0x58/0x80 [ 1548.601700][T23651] sysfs_kf_write+0xef/0x150 [ 1548.606839][T23651] kernfs_fop_write_iter+0x351/0x510 [ 1548.612654][T23651] vfs_write+0x6c7/0x1150 [ 1548.617520][T23651] ksys_write+0x12a/0x250 [ 1548.622398][T23651] do_syscall_64+0xcd/0x490 [ 1548.627450][T23651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.633877][T23651] [ 1548.633877][T23651] -> #0 (&ptp->n_vclocks_mux){+.+.}-{4:4}: [ 1548.641884][T23651] __lock_acquire+0x12a6/0x1ce0 [ 1548.647286][T23651] lock_acquire+0x179/0x350 [ 1548.652341][T23651] __mutex_lock+0x193/0x10b0 [ 1548.657470][T23651] ptp_clock_adjtime+0x527/0x760 [ 1548.662968][T23651] pc_clock_adjtime+0x118/0x1e0 [ 1548.668386][T23651] __do_sys_clock_adjtime+0x175/0x290 [ 1548.674304][T23651] do_syscall_64+0xcd/0x490 [ 1548.679341][T23651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.685765][T23651] [ 1548.685765][T23651] other info that might help us debug this: [ 1548.685765][T23651] [ 1548.695996][T23651] Possible unsafe locking scenario: [ 1548.695996][T23651] [ 1548.703617][T23651] CPU0 CPU1 [ 1548.709006][T23651] ---- ---- [ 1548.714387][T23651] rlock(&clk->rwsem); [ 1548.718573][T23651] lock(&ptp->n_vclocks_mux); [ 1548.725864][T23651] lock(&clk->rwsem); [ 1548.732455][T23651] lock(&ptp->n_vclocks_mux); [ 1548.737224][T23651] [ 1548.737224][T23651] *** DEADLOCK *** [ 1548.737224][T23651] [ 1548.745383][T23651] 1 lock held by syz.3.3407/23651: [ 1548.750512][T23651] #0: ffff88802f9fe130 (&clk->rwsem){++++}-{4:4}, at: get_clock_desc+0x125/0x240 [ 1548.759768][T23651] [ 1548.759768][T23651] stack backtrace: [ 1548.765661][T23651] CPU: 1 UID: 0 PID: 23651 Comm: syz.3.3407 Tainted: G U 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 1548.765698][T23651] Tainted: [U]=USER [ 1548.765706][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1548.765721][T23651] Call Trace: [ 1548.765731][T23651] [ 1548.765740][T23651] dump_stack_lvl+0x116/0x1f0 [ 1548.765768][T23651] print_circular_bug+0x275/0x350 [ 1548.765800][T23651] check_noncircular+0x14c/0x170 [ 1548.765833][T23651] __lock_acquire+0x12a6/0x1ce0 [ 1548.765870][T23651] lock_acquire+0x179/0x350 [ 1548.765901][T23651] ? ptp_clock_adjtime+0x527/0x760 [ 1548.765934][T23651] ? __pfx___might_resched+0x10/0x10 [ 1548.765960][T23651] ? ptp_clock_adjtime+0x527/0x760 [ 1548.765990][T23651] __mutex_lock+0x193/0x10b0 [ 1548.766014][T23651] ? ptp_clock_adjtime+0x527/0x760 [ 1548.766048][T23651] ? __pfx___mutex_lock+0x10/0x10 [ 1548.766071][T23651] ? __pfx___might_resched+0x10/0x10 [ 1548.766097][T23651] ? down_read+0x13d/0x480 [ 1548.766123][T23651] ? __pfx_down_read+0x10/0x10 [ 1548.766152][T23651] ? __pfx_ptp_clock_adjtime+0x10/0x10 [ 1548.766188][T23651] ? ptp_clock_adjtime+0x527/0x760 [ 1548.766218][T23651] ptp_clock_adjtime+0x527/0x760 [ 1548.766252][T23651] ? __pfx_ptp_clock_adjtime+0x10/0x10 [ 1548.766282][T23651] pc_clock_adjtime+0x118/0x1e0 [ 1548.766310][T23651] ? __pfx_pc_clock_adjtime+0x10/0x10 [ 1548.766340][T23651] ? __pfx_pc_clock_adjtime+0x10/0x10 [ 1548.766367][T23651] __do_sys_clock_adjtime+0x175/0x290 [ 1548.766400][T23651] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 1548.766433][T23651] ? __pfx_do_futex+0x10/0x10 [ 1548.766470][T23651] ? xfd_validate_state+0x61/0x180 [ 1548.766508][T23651] ? rcu_is_watching+0x12/0xc0 [ 1548.766532][T23651] do_syscall_64+0xcd/0x490 [ 1548.766559][T23651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.766583][T23651] RIP: 0033:0x7fc54558ebe9 [ 1548.766601][T23651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.766636][T23651] RSP: 002b:00007fc5464a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1548.766658][T23651] RAX: ffffffffffffffda RBX: 00007fc5457b5fa0 RCX: 00007fc54558ebe9 [ 1548.766674][T23651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffffb [ 1548.766689][T23651] RBP: 00007fc545611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1548.766703][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.766718][T23651] R13: 00007fc5457b6038 R14: 00007fc5457b5fa0 R15: 00007ffea99943c8 [ 1548.766740][T23651] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1549.448597][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.455018][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.152680][T23079] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1550.205996][T23079] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1550.375101][T16540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.505260][T23651] ptp: physical clock is free running [ 1550.588566][T16540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.681296][T23651] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1550.784110][T16540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.846110][T16540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.889334][T23651] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1550.985043][T23648] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1550.999472][T23620] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1551.032343][T16540] bridge_slave_1: left allmulticast mode [ 1551.050401][T16540] bridge_slave_1: left promiscuous mode [ 1551.056119][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.156122][T16540] bridge_slave_0: left allmulticast mode [ 1551.174995][T23648] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1551.203762][T23620] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1551.212412][T16540] bridge_slave_0: left promiscuous mode [ 1551.218104][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.481406][T16540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.510286][T16540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.534407][T23651] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1551.552570][T16540] bond0 (unregistering): Released all slaves [ 1551.729596][T16540] hsr_slave_0: left promiscuous mode [ 1551.744366][T16540] hsr_slave_1: left promiscuous mode [ 1551.757724][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1551.765144][T16540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.795125][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1551.817170][T16540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.841475][T16540] veth1_macvtap: left promiscuous mode [ 1551.848888][T16540] veth0_macvtap: left promiscuous mode [ 1551.854543][T16540] veth1_vlan: left promiscuous mode [ 1551.870054][T16540] veth0_vlan: left promiscuous mode [ 1552.058733][T16540] team0 (unregistering): Port device team_slave_1 removed [ 1552.084789][T16540] team0 (unregistering): Port device team_slave_0 removed [ 1552.366529][T16540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.430638][T16540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.499286][T16540] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.549211][T16540] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.680628][T16540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.737684][T16540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.788312][T16540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.911960][T16540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.954752][T16540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.006950][T16540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.055158][T16540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.171411][T16540] bridge_slave_1: left allmulticast mode [ 1553.177103][T16540] bridge_slave_1: left promiscuous mode [ 1553.196933][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.213144][T16540] bridge_slave_0: left allmulticast mode [ 1553.227092][T16540] bridge_slave_0: left promiscuous mode [ 1553.240641][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.251385][T16540] bridge_slave_0: left allmulticast mode [ 1553.257051][T16540] bridge_slave_0: left promiscuous mode [ 1553.279256][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.301877][T16540] bridge_slave_1: left allmulticast mode [ 1553.307566][T16540] bridge_slave_1: left promiscuous mode [ 1553.338305][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.352196][T16540] bridge_slave_0: left allmulticast mode [ 1553.368983][T16540] bridge_slave_0: left promiscuous mode [ 1553.378691][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.593559][T16540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.604486][T16540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.614323][T16540] bond0 (unregistering): Released all slaves [ 1553.700062][T16540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.710828][T16540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.721168][T16540] bond0 (unregistering): Released all slaves [ 1553.789563][T16540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.800530][T16540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.810939][T16540] bond0 (unregistering): Released all slaves [ 1554.325213][T16540] hsr_slave_0: left promiscuous mode [ 1554.343195][T16540] hsr_slave_1: left promiscuous mode [ 1554.349007][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.373635][T16540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.395205][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.402853][T16540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.434531][T16540] hsr_slave_0: left promiscuous mode [ 1554.453462][T16540] hsr_slave_1: left promiscuous mode [ 1554.459467][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.481967][T16540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.490523][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.499080][T16540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.513219][T16540] hsr_slave_0: left promiscuous mode [ 1554.519014][T16540] hsr_slave_1: left promiscuous mode [ 1554.525389][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.536804][T16540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.545528][T16540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.553926][T16540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.569017][T16540] veth1_macvtap: left promiscuous mode [ 1554.575414][T16540] veth0_macvtap: left promiscuous mode [ 1554.580967][T16540] veth1_vlan: left promiscuous mode [ 1554.587288][T16540] veth0_vlan: left promiscuous mode [ 1554.594365][T16540] veth1_macvtap: left promiscuous mode [ 1554.600161][T16540] veth0_macvtap: left promiscuous mode [ 1554.606193][T16540] veth1_vlan: left promiscuous mode [ 1554.612361][T16540] veth0_vlan: left promiscuous mode [ 1554.618114][T16540] veth1_macvtap: left promiscuous mode [ 1554.624045][T16540] veth0_macvtap: left promiscuous mode [ 1554.629600][T16540] veth1_vlan: left promiscuous mode [ 1554.636330][T16540] veth0_vlan: left promiscuous mode [ 1554.866166][T16540] team0 (unregistering): Port device team_slave_1 removed [ 1554.892570][T16540] team0 (unregistering): Port device team_slave_0 removed [ 1555.086447][T16540] team0 (unregistering): Port device team_slave_1 removed [ 1555.121374][T16540] team0 (unregistering): Port device team_slave_0 removed [ 1555.321903][T16540] team0 (unregistering): Port device team_slave_1 removed [ 1555.346287][T16540] team0 (unregistering): Port device team_slave_0 removed