last executing test programs: 8.398429132s ago: executing program 1 (id=1097): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x802, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f00000000c0)=0x3ff) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)=@bpf_attr_1={r0, 0xb9, @value=0x3, 0xd}, 0xe7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(0xffffffffffffffff, 0x3, r1) setsockopt$auto(r2, 0x80, 0xfffffffe, 0x0, 0x3ff) socket(0xa, 0x3, 0x2f) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0x40000d3e, 0x1, 0x7, 0x3, 0x20000000000c0e, 0x1000010001, 0x3, 0x8, 0x80000001, 0x7, 0x6d3b, 0x9, 0x40000000000002, 0xfffffffffffffffe]}, 0x0) write$auto(r3, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) 7.257028153s ago: executing program 1 (id=1104): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x52141, 0x0) socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x20, 0x0, 0x4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 4.166139742s ago: executing program 1 (id=1115): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x4, 0x5, 0x7fc, 0x400007fb, &(0x7f00000002c0)}) 4.025651008s ago: executing program 1 (id=1116): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x52141, 0x0) socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x20, 0x0, 0x4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 4.023402063s ago: executing program 3 (id=1117): syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.874670854s ago: executing program 2 (id=1119): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x203, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_VERSION={0x8, 0x2, 0xdcd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x80000000, 0x23a8, 0x0, 0x9, 0xee00, 0x0, 0x0, 0x4, 0x8, 0x3, 0x8, 0x7, 0x4, 0x38c8216e, 0x7, 0x20000003, 0x6}, 0x3) sendmsg$auto_NL80211_CMD_FRAME(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={0x0, 0x233c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0xe6, 0x10, r5, 0x1) read$auto(0x3, 0x0, 0x80) write$auto(0x1, 0x0, 0x80000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x2) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x80, 0x0) read$auto(r7, 0x0, 0x200000fff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/o2cb/logmask/SOCKET\x00', 0x20102, 0x0) 3.854738999s ago: executing program 3 (id=1120): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = fcntl$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r3, 0x0, 0x2) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$auto_NL80211_CMD_EPCS_CFG(r2, 0x0, 0x11) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, 0x0, 0x51) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4610, 0x0) prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0) r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r4, &(0x7f0000000240)=""/80, 0x50) mknod$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2, 0xffffffff) 2.941953636s ago: executing program 0 (id=1121): socket(0x1b, 0x3, 0x76) 2.789979594s ago: executing program 2 (id=1122): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r2, 0x0, 0x2) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$auto_NL80211_CMD_EPCS_CFG(0xffffffffffffffff, 0x0, 0x11) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, 0x0, 0x51) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4610, 0x0) prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0) r3 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r3, &(0x7f0000000240)=""/80, 0x50) mknod$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2, 0xffffffff) 2.539030459s ago: executing program 3 (id=1123): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 2.400086195s ago: executing program 0 (id=1124): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb96"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f00000000c0)=0x3ff) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)=@bpf_attr_1={r1, 0xb9, @value=0x3, 0xd}, 0xe7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(0xffffffffffffffff, 0x3, r2) setsockopt$auto(r3, 0x80, 0xfffffffe, 0x0, 0x3ff) socket(0xa, 0x3, 0x2f) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0x40000d3e, 0x1, 0x7, 0x3, 0x20000000000c0e, 0x1000010001, 0x3, 0x8, 0x80000001, 0x7, 0x6d3b, 0x9, 0x40000000000002, 0xfffffffffffffffe]}, 0x0) write$auto(r4, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) 2.08715482s ago: executing program 3 (id=1125): r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$auto_VFIO_GET_API_VERSION(r0, 0x3b64, 0x0) 1.916898144s ago: executing program 2 (id=1126): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x802, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f00000000c0)=0x3ff) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)=@bpf_attr_1={r0, 0xb9, @value=0x3, 0xd}, 0xe7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(0xffffffffffffffff, 0x3, r1) setsockopt$auto(r2, 0x80, 0xfffffffe, 0x0, 0x3ff) socket(0xa, 0x3, 0x2f) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0x40000d3e, 0x1, 0x7, 0x3, 0x20000000000c0e, 0x1000010001, 0x3, 0x8, 0x80000001, 0x7, 0x6d3b, 0x9, 0x40000000000002, 0xfffffffffffffffe]}, 0x0) write$auto(r3, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) 1.873381942s ago: executing program 3 (id=1127): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r2, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) socket(0x10, 0x2, 0xffffffff) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) setresuid$auto(0x2, 0x7, 0x8080) socket(0x2b, 0x2, 0x20a) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x119) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x70a80, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x200300, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x8080, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x40001, 0x0) ioctl$auto(r4, 0x921064a4, 0x1000000000000003) 1.657274328s ago: executing program 0 (id=1128): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb96"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f00000000c0)=0x3ff) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)=@bpf_attr_1={r1, 0xb9, @value=0x3, 0xd}, 0xe7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(0xffffffffffffffff, 0x3, r2) setsockopt$auto(r3, 0x80, 0xfffffffe, 0x0, 0x3ff) socket(0xa, 0x3, 0x2f) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0x40000d3e, 0x1, 0x7, 0x3, 0x20000000000c0e, 0x1000010001, 0x3, 0x8, 0x80000001, 0x7, 0x6d3b, 0x9, 0x40000000000002, 0xfffffffffffffffe]}, 0x0) write$auto(r4, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) 581.270908ms ago: executing program 2 (id=1129): r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r0, 0x3a, 0x1, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\x87\x02\x1c\xfd\xac\xc7\xaa\n\xf9\x19\xc4#<^\x91\x1d\xda\xc4m\xef\xff(i\xc6@\x91_\vBj\x0eQ\xceV\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) 452.58096ms ago: executing program 0 (id=1130): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x88880, 0x0) lseek$auto(0x3, 0x2, 0x4) 450.246838ms ago: executing program 1 (id=1131): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x5) 408.668511ms ago: executing program 2 (id=1132): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000140)={{0x85, 0xee00, 0xee01, 0x2, 0xfffffff7, 0x1, 0x2}, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x1, 0x0, 0x73000000000, 0x0, 0x6, 0x7, 0x9, 0x6, 0x4, @inferred=0xffffffffffffffff}) r2 = ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x9, 0xfffffffffffffffd}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r2, 0x0, 0x40008f9) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), r3) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x3ff}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000400), r3) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x124, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SOCKETS={0xb9, 0x7, 0x0, 0x1, [@generic="977961b957adfecbba320f9883fa449640fcdb5a6b3ada4952e6365eff9d88c197915a1e38bc657e5f45165037529c987690e10687af33d9072a4037ce179c89d92bea11bc6ad60b41e8e07c7bb82c3042d033b64e86a2b18da7e5c34276f452614792f2b4994bfdedd6dbd6c747d0d4a3909a", @generic="49e914a4247eca4d4b99a11f50e28b08be5ed4120522f3bee44ceadf1bd5c660050df0ccc1e735fe038f6643f6ee55eb984b92b4f1af577e60a6e4cea4f799546c83"]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) r7 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000006c0), r2) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004801}, 0x4004000) ioctl$auto_XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000800)={0x8001, @raw=0x8, @raw=0x200, 0x5, 0x10000, '\x00', {0x8, 0x3, 0xffff, 0xee00, 0xee00, 0x0, 0x1, 0x7a6d141d, {0x80000000, 0x8}, {0x3, 0x401}, {0x5, 0xdc}, 0x5, 0x8, 0x5, 0x9, 0x3, 0x420, 0x8, 0x9, 0x4, 0x9, '\x00', 0x6, 0x2de, 0x4, 0xd}}) newfstatat$auto(r3, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000018c0)={0xf04b, 0x0, 0xd3, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x1, 0x10000, 0x7fff, 0xa, 0xfff, 0xfffffffffffffffb, 0x1, 0x8000000000000000, 0xb6, 0x5}, 0x5) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f00000029c0)={{0x5, 0xffffffffffffffff, 0x0, 0xffff, 0x1, 0x4}, 0x3, 0x0, 0xffffffffffffffff, 0xffff, @raw=0x6, @raw=0x1, 0x8, 0x0, &(0x7f0000001980)="0f597be452a5ac0ab062c52fee1f39d4184c8a55f3233f58644663abf660823d348253635e2a1133ac776a72f90741990888b2f1e691953d3957028db1e83cc5be3b90a997c52b98a282073b5ecff83ddda8a251fc5a026e1c1fe020304d42392cbe16b1855b99dd7d79a055ff5d1b9c7b8b82d1e0cf8232dfaed9fba85f636e77194b118e1d1868afed42ce67efc9ac335ec013383ea09875e6e39f8557e875ad41a8dad8aa22c9d117a80dd28744e3e6c93e89764462d4c9ba1be7c533d25ddbc1eed1d86d0e4bbc2580e81a87da0dc46b2b315921c89b7dc20b1dc9c384f94c6485d36c33debe7fe9633eba3c190adf34a9863ef454e379d286fc51af6e0f7c1c61f95de72e74a2a52e8d9e5c91571bfd7049a17b94b88342a30b7bc3adfe7d79359a8f44814bd5259ac7060b17e6a8c9c329cf121030f4c6b32574df7b87ba33dd53bee586ef4414d709b9323ad904e467456c7798be36864c05275c5a385d22267015fe99386b440ec75e5b8b4c1d8121752d4ef1dc9ea04b0e55a39bbc48dd2b6608c7479942eef2c9faf4086f05e2e33aee3fa5596d7d0943d16c4d7fc2968a8226c16b3f697cad05c3417ee22366616273e070a2ac894dbca86929693d125671ff8b90ab4fbe98f719aae7a3ffaa94ee92bd5b7b77ae1b9954e6d85b13f2fa47e917719659c324003c19985c5f120698eaba9286ad4f76bede3b6413940a901751d4643c90bec16efb46ace1e4599790e126cf5d1595ba93c3b25c48db6f4712ed2cd93836d02b05fe6d2f6c7e6ea34fb13a03d99d13ce2e15100ae131b4cda1082918ff3adf6ca8ef7d3c6aa766f53f4905cf86b9ff0d8b03533b4a337fc9baea18814820fbb63b2460317284e87719935556fe7fcfef0428e099bfce71e47fa03e829e5409124415963da445face12f79d0480f0457ba3b237bac6aa958c7bff19d847db75b86713caaa2a2765e886dd282f875e4a9cdd53067aaba13a17e7be0dbdee1b4ddf4c1ac405a5f5bfe3364181bd6f5a28ba40577c185ebd4bbb230baa250b68b97d82891e920cb9d306338589b0e77d3c62aa57258f469d07ecdf420c83639d565c4946231f4bdcd393065cb3a82df6aba587a2cda388a2d22b6ffef0728b83957dd41b9dbf20b407a1a134b5c757fa42edf5c983667cd0044110838ff983c30051886b2f1aea16da3a0c965c0d92d1c1dbbd575d8cb887085f52267779712be88cabe795ab5647a4c96a357fd0048ac40731ffd15eafebba82075e15a12c241996f6103fc64289919ab492b06f7764072f8624901ef7d7224e8df77d8d4995c84f34d6ec10bfab12dbf8f397d70ece287bdfc36d03074c4dd5fd8477609bcc6d11fa39de52982dc2af4435b0e95c8e675b34efb5814e822125ecfe881b005d4df2b4355fec1d41a085a962b003938871fc4fefd69d55a344562cf4f0c819632a4226ebd607b3acfe6a60bfb2af2fedeb1204b3708d5c5d33459292ec5ff7ec8ea3be318971a33237c0be2d5a6be93a9e2fd2baf3f9d312ae4e8ab9a64c211a1f42290e61dfc68ed79c2cca1516a6d23abf30c3cf42aff4a6f28be1fa989d519330d604033e71121f994079f5d48f06e57c4f5d43dd86c68fb7b7970eb707d5b6ca059f2f3edd1d8f0a344161ee3e3ff248ac061b21f8f75733a2ddaab0a956d1b01e0361fbc55dcc619792c6044748a25353881237443f74ccc51074dff80984639f3ff5df87efc4676953db76df6abb7139dbd39e210a11425083b84f3e66a0ac70cb2c5ac64851331d8903090c46d8f1a4ebef2696b3cd1c85c33af8df0940d80f1a9a01c4ba8bca3454247827640008952c6681a9edc4e5286d7da1ca7ccd372cc9b915821b416a8614505cb920a6cefa3b4ae82eefee5acc695365d3a3b821b8f04c00b2a719e2d414698dc95e7dc99a4f9da87cce7bb6de384d79b4fc2e830553e31b1f8288ad4e3f8a278f48f61bd2a4a88ce1433e8f9730eb81572584ba97ed1d64918e6731ec6d5f65b149c2ab938806ab0ee15f9f8dc43ae5b23f907bb3db210537d23163c9ffea3d826a328e077b901a82cebc1f880f0c382f2fd54d3be833687ee808df0144e1796abc11b662719ea4cb4272cbc57ef4079af901b28279a21527b3a4c5d400f22fb4469527d000ea2331e997de2b9b174d9ed4950dc791fcaed2a98ec50f1c9b49c70784209c7c1da24e1290894fabb5bf449475fb41747fffae6c9c091bd957da2f32d70227e24a0798a4412d680f2f50b906135b045a276729cf7498bd7c6de7ee45a007118f8da2a3f7fd45d7c5dd83f1f4a0a4b5705751557a38db7691e87d679f0f333676e03f7852c81a3f3a9e82141eebb54c5c154cbf1804fcbdf29bd5bbf65456748be6f07740ddf2ea92b98080d08becbaf567cc3ae57e8b69a3dae0b8ecfec13f831ed0faddc5bd45c498878e159a08930bba012ca268fd987de49b3f15ab25ab7fc6ba2f0da0bf7710fce84e2087175592b07cc15a4ca70d276d32468c41aeb89d9b9a0c7ee647a37fb19c8585f6b42b32fbb080fe4b2f71f19f5e954028e895d9c840ed467554d684fc93534b6b245f925ca5921279f9dc2b21952a0006afd71412a009c0aeec8cd4289540d0de48cd533c1150e9d75eb66b183c9692f7b846f380be1bf6ecf95cf8754cf02e1eb022ab90525c2ec2319afb3d05e7f2fd36d01bf1003e19606149f432b3f934d73cfdf08b635ab9bc4e2f8f9658a3baede6f09645443bad72d06511576f7873180d46c18b99979023b107542083defd9a253b589de49ab59c5cc4b71d8edde76f0415229e3d53838a13fcd0ec27d085316dad3c979b456b31002d84fe3cc0c3cf4312c8e35748973e8c2cd675ad3211cc1aa05b3dbe5d20fada6b470c1f71d708f589daa3d26c3ee2b0468dbc3307b814fd30bb4c7e7f3d1dd33e7d29cf8e6b8e63d0c8424729f6267799b7fd67506401ce96fe3627e705de3e78d033bb8e2bb28928792a3a53ad8683ed7f03dcdbd6f8af49b8776efae7c802f9cdb8b7112c9fbf4943a25267aabcfc16f7413c53754fba2c3f4ede64edb712dd50ba819a5dee3eaa501aa06ddb237c3aa0ce62e5d136fe1e47f723079ce7255d5fe0505eb616f14018fe6f13b046304dd3f845b5197b299dd4632e9195d6fa77e4d812787fa14f9692a9f25fd39113eeac34842dec1aa67af561178f1b9eca4e9b520045bc3a7ecac38856b44968eff2c959ba32151944cef9b95a982589291fe656f67ebdfe860f082877a4dbac637d4528c40b70994778a7aa9eb032fb2874df154b49a2c0a708eabd7920e73ab551221969e43a903ae297827154c9b69e8795a04c88d77c5660467af88134aceb66e5037a48cfda6a26c31337b93af529029f1b8961d28a23e14468f86c451639f4992c4ef83914349812839099ddfe9280138b9488be9aae4d89e4e0f1dee7943dffe5e581a10cc553bdf023601bc8b05062350f33c41a04525b58470cdffa9e91769b77e3566f5de4c0d71a66ffaaa328c21fe974d3c99dd52d27c05d53c671f6b4eac00475b5726b8793e70cbf34da07215f2eb8042918970659bcd14c6acd59e4f3f5bb32a22b150f07c304271ace004a39d22e4b236005599350ebbbd7917e3f6935f319e339deacecc22d4138701b9ad305ab7b75ae6917e5fe213b45f8f86106e5d07b0f6ee4a08602e452e86839505fda2cb47da302c6efca099355e374fd43d25e54f21cb29e05d7197b0e17337205755150c46344ca9680759beb3cb7bfd3234175cfbbdf2dc3e735891955b71e68baba869ce5fddb59ad86c054984a7e7bdcf9898c30ac84b0cce5d01c5f6470bb7310332a353f7df744d1e79eb62f533f11e62c7363bccaca532ed4e2f46b4a2daca38315b8a086133fc422fbc19a6aff735fc48ef6dd230b8bad1465a4c1b136841df3b460c2852800c22f3c6f7ad6844500ee03485f8e296159b871c82c393552acd124e244137e1a734a5767a1f890eeeba974c035698724e6c2b64f765651e2b4956879cc879f4b96be54271c501f01f2c622f0a4cb2e741abf0593944b614ca10bf9da316cf63b4c4d42db31930a91f046f84b9dbc2087f092bd75c9cbf3c2905cdb0124da15aab3c5df8c5d5b3711e5eb983d0bef6847b271c4601bcd0a1dc5021dd8a59ca7e4cf703f6a77d0874df44ac07f7c7f4dae763d5edb2debcb03b475e0ed77277c310191bb834568ea0343ea9e51f952b4b07ec711a0554bdda1e3704f55a824c23698450ed68e989826e5b8b8aecb2417ac1cc3b57cd426ff8732f972db7fc103fd6a94a9a2a3a796b7252ab8071eb3a9891c8bdf8cd1b0e6b8091af255a3b8d636415356023fc8b018a81b2e08a31b2ee41a1eed802ac0e205c1b5474aed5c29e577ad33ad03601656576a08d301606fab0bca995c487c7fd7061bdeb9f6fd8800c1848c5f7887411c7f44370eea3830fa62661b42256b6638dc13a7fea5300c0c43c8243bb43300e7db7496baae119d43ebec35fb273061e38d5b990154f1ee8983f869bcc122b3db98d57001782c9f8b37b7d879bbd6aab40172eec3456b4a5641cc20d2d971be2958a692938b7cfe96ad10a9eff54bdd3c54074ee31b90d32a4c6903c860296e1e16b32b2e836b0bf8c0b29ac5f5f65253ad829db58925d19e6d715b00fa5002f810bf2a1f5f2f8ee9cd87f40d135e1ba7eb505ff78516f77b70ba410fe011c2cce47d7eaf206e0b040b2348c24c6d74549bbed4ce8fb65bf20716df88ea293441c950ab246df9e8d6f9dd51f55e39e534490bcbca592a6032db47391333cdc17fc609633e48205fe1b8324db999aedaedeea3267b226853a445bacdbc3bb65952e251d3dc672d55f3cefa179a910616b47c44ee63424e5c33024013524b463153aab04b3dcc83650849888bfd07226e55e791afa16e6f67ebd879920a0cc5689bfbf9be8b7f66f33be9fe41ea9dcc334f8534a8b76da126b25b8d9c064a2d5cc327ec455ad383d7859b10c91f966b463421348bd1cb2a4fda68001c12967c43479d6d011a35d6d348dbcb4d88ebc553b76ef1aca146dc618f7b890a3976fe625e918aa1594a3ac67542815b975bbeb2a53d33d226d3e2a5a44919fad65be5935a0c536ca0f3a66378b5bc92b4afe9b0663a3c2b2ae671f7526ba280f49df4f10a5e0213e97d03b37dbdbbd40bc41985ca9ab95f07f61e56a0340f348c814ac683091cacc997504d6dc2333af77d1dbb1b072a9bc1399012cda002a71bfba85c6d1e8517f0c3b2f968fe9b9d5cceca1e376f896a423b5483268dd6e80485483fee991ea099da9e6aca51f4bbb87573fe45aea3f763bc8c7237040d3af61e9db40fc31bee56c80be5129f9188c437ab10ea1ec1ee994bc20d5a7d05cd8a414946df09913604fe6ab687924079d7e9413144ba8b3147867f2c1514fc9e26faaaefac5d0084381d45720e9f2478ff84533ab766e06ebce91d6413df464abcc0cadcc95868625591dfda6556e4dfefcdad3840ddaa09f5c5c444d0e911bd8d04b2e2c126645b8b59745ac4d95fb09353b89bdc5abdf998ff747e2337ffcab51c86e5694818687f76012362c3", &(0x7f0000002980)="d4ad"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a40)={'vxcan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r2, &(0x7f0000002d00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002a80)={0x170, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0xb, 0x129, "11b2bfda042a60"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x11e, 0x124, 0x0, 0x1, [@nested={0x15, 0x6d, 0x0, 0x1, [@generic="fcbc8311fb43b6c989fb7ebcbb4ae6c68b"]}, @generic="9be9a618b0ab3f5b72a18027", @generic="e1adfdca98c42f88e1b67785d12e736845c5595e517781f66bbd7f17fa75b23c9b0b6e8f0e67fd3af084e6cc88b045a91eff3977c72fdb0d69d975daaed0a9ad2544664e6f75455fe6fd0c320b44dfda0ffc499f6f7e2f8949f210505b597223d00c6bee4942cecebe4dee9a2f62f672397001626e561fc8425d8ad5ce35b471d45622aca69630ba48c83006716efa45c0e740ebaee913e7a06f9d09ee5209ea2a8cb80e07777bda8b970d5478ea0b6fb21e33f36e87bcbc3bbe26f0e92addd0274c23214dd68d0c6b0f75557a562510658307794412f5776f0efccb956a1634a94f269941f5c9e7068e46ac5d55c240f27e6df73d78"]}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x101}, @NL80211_ATTR_MBSSID_CONFIG={0xc, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x10) r9 = set_tid_address$auto(0x0) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, 0x0) r10 = setfsuid$auto(0xee01) keyctl$auto(0x1d, 0xffffffffffffffff, r10, 0x0, 0x6) sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)={0x1974, 0x0, 0x6, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc7c}, @IPVS_CMD_ATTR_DEST={0x439, 0x2, 0x0, 0x1, [@nested={0x114, 0x148, 0x0, 0x1, [@nested={0x4, 0xbf}, @typed={0xc, 0xb3, 0x0, 0x0, @u64=0x8}, @generic="0d40a8818e759d16e14934c91496181db7e4724a80fd863524d3186cde970c9898b6aa07df5379b62d794ff428d46e8dd5b3e50f46c0e09eefc7fd3acb91bb70ca0dccaf5b12b0db219b87a3a02a3942953607d31b664d1857c2f4a9b8c11a0cc5a2861761a659ac34833d5694c5cad78bc5f0795c37c254aaadb48a6c07c6637a43b8a61e1b", @typed={0x14, 0x84, 0x0, 0x0, @ipv6=@remote}, @generic="96779fa95045af647148b9d655e4bc4fef32f7f3130c971191ef38a53eb304b79ee9c2b8a1dd809a57d72c767a1d56a1a396d4953269bf18f5a0f90807d7646e91cd7456bc60829e52eccbd197c7", @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @nested={0x4, 0xf4}]}, @generic="8df72d7184490cf4709e522d4d958d9607a1c3adccb3394d918c95a02a96099ce87bfe0327e87eb7b6847ae2edd6c30aff8d61ccb9598848e5840b97c87f6bf6914c94fd7e42ed8dfc4b1e7e930f8de8caedf5aca4a9943763e9a1e39d318891fa34c1d0c185514b93cf3953737dbbc95ac48438b09cbb5b8d610dcfbf0a748fc86ac05a9c32ea3ae9ff46b36138bc9a39b49e78639a5057c9d9684ee97398aefb37a16d16868095a196425ec125ba4498ad0bbee2e61daaf9b615c37d5ff27a653863c3301f1890b5d7c8353f62fc79bcff7915b7e7a35a8afa4fa41180b8b719", @nested={0x1c, 0xca, 0x0, 0x1, [@nested={0x4, 0x6d}, @typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x3c}, @nested={0x4, 0x126}, @nested={0x4, 0xab}]}, @generic="d2c213a0a45bf37a662dced4", @typed={0x8, 0x122, 0x0, 0x0, @uid=r1}, @typed={0xca, 0xf7, 0x0, 0x0, @binary="53fa9516ce479aa26638c97622cb14f1cc30481576abe782847b053cda96b4cf0fe6184e9c26def32f1a80db5e7ea8edbf04be41a5c590d6844d31cd14cf4e2eb8d3b6d9f494d4f837eb8f7f8a81cfb96061b1f0bbfbdf65b061a2d132ebe66c95a616830fa296e48a3666c5af244359f5da500987f4ba5ac0b72516b2a045092e41eacd58c6f8c3d8a35adb75df8969769fa5aead3db5f5f56a10bdfba711788e6f4bb2b06cdb8227501283fbb27353241934d90078341b6637d95d8db88dccc25903ddaf06"}, @nested={0x142, 0xf3, 0x0, 0x1, [@generic="bb57d3e35e0e72ba1e5dd0c2e254f72db52156aef3f9de734afc5ca0c2b5b00082f5c0f1c9329f22f0a5155a6b07f4d0b03b28733b43ada1aa96d4198823bc1b681ada6adbbaac4731ec25d87505e0e5d0d2384990543a10b0695e1f8f6a834a38d70fdd3ae27cb998f9b75c8c37685892fd8f693fd237a465c2cb86cf26e93c5989356b3b96acb439cf1a7cc41f44970e66f5957a74de01c3ad511fd059d6369ca0576eadc076c8c228e043d20a9237ade17fb5a964c8a6ce69b96f6fc2851b300944", @generic="728cbbfc49f7075bc38ffc22b5705a139943057f7bffee34fd53f1bdcb9a6ed0a99423bed3b872c4e1109db93fe339a6850a11c97278fa2f2f2a838612a4fcfd5c9c052c347db794f533d9c7745f6dfe1b03e7c97ffef0df0c5130cbbb0d2ad94daf59a6f2045051a834c5ff09ca7d9032c1a8", @typed={0x8, 0x11a, 0x0, 0x0, @pid=r9}]}]}, @IPVS_CMD_ATTR_DAEMON={0x1391, 0x3, 0x0, 0x1, [@generic="11fcd224249ad53a7d5d25bd046dc8727d89836fe00253c5f24885bbd5af5a41959f8ffa458358113d24f709846a47dd9dc96fde22fcc536b2855e624ff0e291f4c5d3a64463cdcf259aba12e426e7ed9718e168b0647b7fc193acdb99d8488524b021230fd4035bd27494f373c43c4923aae333dfee1416532ce6803009295800c079f49547c3d4fa3ff97e17138f56b490fb917a15453dae1f00b99c7746acf1eefb2fff025757d95c71dae31c55", @generic="41bcb659dbb7d37e5f3ca854405bb7cc89b2a5a847c15364373013cd21714f5699d9552d6493f4a6dd1813f7fb88f69077a54f0ff62f64876e77e9e1546167ba9b3ae57452495f564a8ad968da716481b0d0b0f57e", @generic="d2", @nested={0x16a, 0x114, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0xee, 0xc5, 0x0, 0x0, @binary="7a518e34f152e21c751d41e1157754a79c8a2e289cb59643211e97e8d02c8186de6a474e19826a2adbc43cae03010ecd6469b4161db1aa965f13c2f949195815241b71955a95b5b8468537c1e5e174b2b9de070cd551b239a588c6d59c9c8db603eaf627e47a84f50a5ab4b02d47cd8f2ef01f6eb99e70f3d5c9516e33fb2e81cda38cf33fc29245987269f2b3b38f649ec8410a95d1d30a4bd135279f1e6cbb0a416cf14dff7803decb71d5f5b75e772e70f96bbb57239db2874a3e950d59d61c3ce4af1730fa305eb19b29ca7fb81034ecaad1a7fd860aab67b1c6c9f7f62bc9edc8d868efb70a2b43"}, @nested={0x4, 0xb}, @nested={0x4, 0x26}, @generic="fa0e3681420fea383c8640aea25a357e46fed7c4e6b6e1166240d99e6cf24ed06d328480d0bc149498a2d8b835f06619723e1d3f655822626b086ed63fe2f23786feb4fd5c515c48b51fc8b256b9ba0090a0190dca83aa2eca6a"]}, @nested={0x106f, 0x50, 0x0, 0x1, [@nested={0x4, 0x7a}, @typed={0xc, 0x91, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x7}, @generic="78ccaec173253d75c0e8209ffe1ba8d02796130a02e5e5e3463cd8d80b6b530ccaedcee300f5", @typed={0x7, 0x91, 0x0, 0x0, @str='[$\x00'}, @generic="0d04ae9c0e5d0042eb8e5e5761", @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @typed={0xd, 0x133, 0x0, 0x0, @str='/dev/kvm\x00'}]}, @generic="621813546e80a700b797cfccb8218f4c6b9376f3695765bfeda0f3da811b12d313c540462ad6a011739da0a3a54ca503a066dfec3ccf6b1eb76bb5647c4f41b9ab285269b075858487054b952c751f2badf07f02a47d2d1c30bb7ac11084b1c124249746325882713d9dc8c65a00dbd6736658967d317cef7fd6d693130186945d41e072c288e2c5649b04", @typed={0x8, 0x7f, 0x0, 0x0, @uid=r10}, @typed={0x8, 0x9b, 0x0, 0x0, @u32=0x9}, @generic="c5c953877f08b6c6e028efb307c6725350"]}, @IPVS_CMD_ATTR_DAEMON={0x185, 0x3, 0x0, 0x1, [@nested={0xd2, 0xa8, 0x0, 0x1, [@generic="8e372e3623a25124b7cb47b3fa78208aae3139a2080986189ab8318bd2bdc2b6786fc3c64e35f40064ff8d2c2a9adba063dfb42bfb131dfd10e83a519252f53a44bd0be0b5c6f10ab370b7b2aba244cbce593eecdfc9b029880f813df2f0e6b8c6944c5926bed18ca6ed70e66434fac985288c3000156f71cd7fba980ffe0b2fcc74231d218a6efd7f2a71ccadf0da2fd1654ec8f29c83612a92e976922b2436a88dffd8508f981c514d36a9b5f93da4bd02cfdc756998d5195dfe6e8d0d1de5cef8953b7f009db488dac25696c3"]}, @generic="7148c4c7ef972c80f78c263816c0e385448588259f56f4513e37ee0edfc2a6b9d384e4af9e682d5ac4975a7a40af0b29db4103b9721aef51b7075e24e3895769e83f59cb13c6c17dd01839f52fe9d964299bf8d5319cb0ffb7f246cb4d3e19ef84ee173f653034bd9a233e73d092b8b830872f7f1fbdea7c6d29cb27d8a46e2cac7fa6b4e43b71e8513eb610eb1b53d1206fac1ad4", @generic="054d008de1c969bb2d64e6ba593d1d381514d48b", @typed={0x4, 0x15}]}]}, 0x1974}, 0x1, 0x0, 0x0, 0x801}, 0x8010) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r11, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000083, 0x400, 0x9}]}) 306.641017ms ago: executing program 2 (id=1133): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(0x100000006, 0x0, 0x50, 0x0, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f00000001c0)='/tev/nSWe\xd7\xfa-\xabx\x00\xd5\xeb}', 0x17, 0x400000000000005) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000400)={0x341b44900, 0x0, 0x0, 0x0, {0x800031}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r0, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 305.824129ms ago: executing program 1 (id=1134): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x81) 279.143071ms ago: executing program 0 (id=1135): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/button/parameters/lid_init_state\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) 160.511474ms ago: executing program 0 (id=1136): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000000400"}, 0x100058) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0x0, 0x2}, 0x0, 0xf4240, 0x0) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) ustat$auto(0x801, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x4) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4000007, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xa}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r2, &(0x7f0000000080)=""/228, 0xe4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) truncate$auto(0x0, 0xa) futimesat$auto(0xffffffffffffffff, 0x0, 0x0) tgkill$auto(0x0, 0x0, 0x6) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000340)=@link_create={@prog_fd, @target_ifindex, 0x8, 0x0, @perf_event={0x100}}, 0x0) msgctl$auto_MSG_STAT(0xf, 0xb, &(0x7f0000000480)={{0x5, 0xee00, 0xee01, 0x2, 0x8000, 0x4}, 0x0, 0x0, 0x9, 0x5, 0x66, 0x1ff, 0x1, 0xffff, 0x3, 0x57a}) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x3, 0xffffffffffffffff, 0xee01, 0xfff, 0x8, 0x3, 0x401}, &(0x7f0000000500)=0x8, 0x0, 0xc3, 0x7, 0xfffffffffffffffc, 0x8, 0x1, 0x95, 0x5, 0x1, @inferred, @raw=0x8}) 0s ago: executing program 3 (id=1137): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) write$auto(0x3, 0x0, 0xfffffdef) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = fcntl$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r3, 0x0, 0x2) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$auto_NL80211_CMD_EPCS_CFG(r2, 0x0, 0x11) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, 0x0, 0x51) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4610, 0x0) prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0) r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r4, &(0x7f0000000240)=""/80, 0x50) mknod$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2, 0xffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 87.619723][ T5831] cgroup: Unknown subsys name 'net' [ 87.730108][ T5831] cgroup: Unknown subsys name 'cpuset' [ 87.739358][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.603746][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.769601][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.779114][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.806388][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.837291][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.845814][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.853548][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.861996][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.870688][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.878910][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.887029][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.894803][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.896342][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.919391][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.948982][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.966626][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.967219][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.982837][ T5163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.999046][ T5163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.008452][ T5163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.017191][ T5163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.740410][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 92.823649][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 92.864052][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 92.936921][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 93.091880][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.099417][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.107633][ T5845] bridge_slave_0: entered allmulticast mode [ 93.115433][ T5845] bridge_slave_0: entered promiscuous mode [ 93.158433][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.165677][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.173488][ T5845] bridge_slave_1: entered allmulticast mode [ 93.181093][ T5845] bridge_slave_1: entered promiscuous mode [ 93.205389][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.213029][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.221070][ T5849] bridge_slave_0: entered allmulticast mode [ 93.229330][ T5849] bridge_slave_0: entered promiscuous mode [ 93.238435][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.245747][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.253420][ T5849] bridge_slave_1: entered allmulticast mode [ 93.261996][ T5849] bridge_slave_1: entered promiscuous mode [ 93.300671][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.308107][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.315504][ T5840] bridge_slave_0: entered allmulticast mode [ 93.323264][ T5840] bridge_slave_0: entered promiscuous mode [ 93.361684][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.383676][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.391546][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.399122][ T5840] bridge_slave_1: entered allmulticast mode [ 93.408788][ T5840] bridge_slave_1: entered promiscuous mode [ 93.429805][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.456522][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.464286][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.472102][ T5852] bridge_slave_0: entered allmulticast mode [ 93.480287][ T5852] bridge_slave_0: entered promiscuous mode [ 93.503269][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.517750][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.540496][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.548132][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.555390][ T5852] bridge_slave_1: entered allmulticast mode [ 93.563161][ T5852] bridge_slave_1: entered promiscuous mode [ 93.587193][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.613276][ T5845] team0: Port device team_slave_0 added [ 93.621668][ T5845] team0: Port device team_slave_1 added [ 93.659005][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.684303][ T5849] team0: Port device team_slave_0 added [ 93.706903][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.733663][ T5849] team0: Port device team_slave_1 added [ 93.757182][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.797203][ T5840] team0: Port device team_slave_0 added [ 93.832367][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.840530][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.867498][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.895313][ T5840] team0: Port device team_slave_1 added [ 93.902024][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.909647][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.936772][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.950166][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.957323][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.984648][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.997310][ T5850] Bluetooth: hci2: command tx timeout [ 93.997314][ T5163] Bluetooth: hci0: command tx timeout [ 93.997704][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.015723][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.042530][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.056330][ T5852] team0: Port device team_slave_0 added [ 94.076570][ T5163] Bluetooth: hci3: command tx timeout [ 94.076576][ T5850] Bluetooth: hci1: command tx timeout [ 94.094457][ T5852] team0: Port device team_slave_1 added [ 94.116104][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.123861][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.150667][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.163932][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.171187][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.198627][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.304002][ T5849] hsr_slave_0: entered promiscuous mode [ 94.310705][ T5849] hsr_slave_1: entered promiscuous mode [ 94.331891][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.339260][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.365755][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.379419][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.386872][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.413831][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.447241][ T5845] hsr_slave_0: entered promiscuous mode [ 94.453682][ T5845] hsr_slave_1: entered promiscuous mode [ 94.460421][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 94.466445][ T5845] Cannot create hsr debugfs directory [ 94.477845][ T5840] hsr_slave_0: entered promiscuous mode [ 94.484208][ T5840] hsr_slave_1: entered promiscuous mode [ 94.491310][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 94.497497][ T5840] Cannot create hsr debugfs directory [ 94.625489][ T5852] hsr_slave_0: entered promiscuous mode [ 94.632058][ T5852] hsr_slave_1: entered promiscuous mode [ 94.639518][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 94.645287][ T5852] Cannot create hsr debugfs directory [ 95.097887][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.111237][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.123022][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.146080][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.211770][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.233729][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.268799][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.287239][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.348515][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.381098][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.417862][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.431308][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.485656][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.500532][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.511731][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.525219][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.685726][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.703455][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.760411][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.777924][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.805691][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.813105][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.839521][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.846841][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.881557][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.891123][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.898469][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.915743][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.922960][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.971051][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.013548][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.020952][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.042860][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.060455][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.067729][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.079596][ T5163] Bluetooth: hci2: command tx timeout [ 96.079608][ T5850] Bluetooth: hci0: command tx timeout [ 96.150795][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.158140][ T5163] Bluetooth: hci1: command tx timeout [ 96.158393][ T5850] Bluetooth: hci3: command tx timeout [ 96.203497][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.210758][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.244021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.251282][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.862871][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.928847][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.950766][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.022493][ T5845] veth0_vlan: entered promiscuous mode [ 97.041865][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.099675][ T5845] veth1_vlan: entered promiscuous mode [ 97.148705][ T5840] veth0_vlan: entered promiscuous mode [ 97.184315][ T5840] veth1_vlan: entered promiscuous mode [ 97.243249][ T5849] veth0_vlan: entered promiscuous mode [ 97.250333][ T5852] veth0_vlan: entered promiscuous mode [ 97.261350][ T5845] veth0_macvtap: entered promiscuous mode [ 97.274350][ T5845] veth1_macvtap: entered promiscuous mode [ 97.290013][ T1214] cfg80211: failed to load regulatory.db [ 97.303999][ T5852] veth1_vlan: entered promiscuous mode [ 97.329628][ T5849] veth1_vlan: entered promiscuous mode [ 97.372487][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.400832][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.433883][ T5840] veth0_macvtap: entered promiscuous mode [ 97.448497][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.458828][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.478937][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.488544][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.509959][ T5840] veth1_macvtap: entered promiscuous mode [ 97.545109][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.559904][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.575814][ T5852] veth0_macvtap: entered promiscuous mode [ 97.599263][ T5849] veth0_macvtap: entered promiscuous mode [ 97.610134][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.619088][ T1169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.645345][ T5849] veth1_macvtap: entered promiscuous mode [ 97.653093][ T1169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.662732][ T1169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.687174][ T5852] veth1_macvtap: entered promiscuous mode [ 97.742092][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.785338][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.799715][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.849840][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.858964][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.874809][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.883684][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.893083][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.921433][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.934707][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.985670][ T3555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.994911][ T3555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.009283][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.021868][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.053961][ T3555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.062958][ T3555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.092684][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.114346][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.158071][ T5850] Bluetooth: hci0: command tx timeout [ 98.158899][ T5163] Bluetooth: hci2: command tx timeout [ 98.220804][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.237304][ T5163] Bluetooth: hci3: command tx timeout [ 98.237323][ T5850] Bluetooth: hci1: command tx timeout [ 98.259115][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.292213][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.369892][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.390705][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.486213][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.494522][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.623728][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.644537][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.711049][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.736036][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.033262][ T5942] random: crng reseeded on system resumption [ 99.383137][ T5947] Restarting kernel threads ... [ 99.403173][ T5947] Done restarting kernel threads. [ 99.448735][ T5948] FAULT_INJECTION: forcing a failure. [ 99.448735][ T5948] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.582850][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.2.3 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 99.582877][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.582887][ T5948] Call Trace: [ 99.582893][ T5948] [ 99.582900][ T5948] dump_stack_lvl+0x16c/0x1f0 [ 99.582922][ T5948] should_fail_ex+0x512/0x640 [ 99.582952][ T5948] should_fail_alloc_page+0xe7/0x130 [ 99.582979][ T5948] prepare_alloc_pages+0x3c2/0x610 [ 99.583008][ T5948] ? rcu_is_watching+0x12/0xc0 [ 99.583027][ T5948] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 99.583050][ T5948] ? kasan_save_stack+0x33/0x60 [ 99.583069][ T5948] ? kasan_save_track+0x14/0x30 [ 99.583088][ T5948] ? __kasan_kmalloc+0xaa/0xb0 [ 99.583106][ T5948] ? __kvmalloc_node_noprof+0x27b/0x620 [ 99.583124][ T5948] ? relay_open_buf.part.0+0x194/0xc80 [ 99.583146][ T5948] ? relay_open+0x653/0xad0 [ 99.583165][ T5948] ? do_blk_trace_setup+0x503/0xb50 [ 99.583181][ T5948] ? blk_trace_setup+0xed/0x1b0 [ 99.583197][ T5948] ? blk_trace_ioctl+0x146/0x280 [ 99.583215][ T5948] ? blkdev_ioctl+0x108/0x6d0 [ 99.583235][ T5948] ? __x64_sys_ioctl+0x18e/0x210 [ 99.583258][ T5948] ? do_syscall_64+0xcd/0x490 [ 99.583274][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.583295][ T5948] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.583331][ T5948] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.583358][ T5948] ? policy_nodemask+0xea/0x4e0 [ 99.583384][ T5948] alloc_pages_mpol+0x1fb/0x550 [ 99.583408][ T5948] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 99.583431][ T5948] ? __kvmalloc_node_noprof+0x298/0x620 [ 99.583450][ T5948] ? trace_kmalloc+0x2b/0xd0 [ 99.583474][ T5948] ? __kvmalloc_node_noprof.cold+0x25/0x65 [ 99.583497][ T5948] ? relay_open_buf.part.0+0x194/0xc80 [ 99.583522][ T5948] alloc_pages_noprof+0x131/0x390 [ 99.583548][ T5948] relay_open_buf.part.0+0x262/0xc80 [ 99.583578][ T5948] relay_open+0x653/0xad0 [ 99.583600][ T5948] ? debugfs_create_file_full+0x41/0x60 [ 99.583631][ T5948] do_blk_trace_setup+0x503/0xb50 [ 99.583652][ T5948] blk_trace_setup+0xed/0x1b0 [ 99.583672][ T5948] ? __pfx_blk_trace_setup+0x10/0x10 [ 99.583690][ T5948] ? __pfx_snprintf+0x10/0x10 [ 99.583734][ T5948] ? do_vfs_ioctl+0x128/0x14f0 [ 99.583762][ T5948] blk_trace_ioctl+0x146/0x280 [ 99.583782][ T5948] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 99.583808][ T5948] ? find_held_lock+0x2b/0x80 [ 99.583824][ T5948] ? hook_file_ioctl_common+0x145/0x410 [ 99.583852][ T5948] blkdev_ioctl+0x108/0x6d0 [ 99.583872][ T5948] ? __pfx_blkdev_ioctl+0x10/0x10 [ 99.583895][ T5948] ? __pfx_blkdev_ioctl+0x10/0x10 [ 99.583917][ T5948] __x64_sys_ioctl+0x18e/0x210 [ 99.583943][ T5948] do_syscall_64+0xcd/0x490 [ 99.583962][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.583979][ T5948] RIP: 0033:0x7fe08358e9a9 [ 99.583994][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.584011][ T5948] RSP: 002b:00007fe0843b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.584029][ T5948] RAX: ffffffffffffffda RBX: 00007fe0837b6160 RCX: 00007fe08358e9a9 [ 99.584040][ T5948] RDX: 0000200000000140 RSI: 00000000c0481273 RDI: 0000000000000009 [ 99.584050][ T5948] RBP: 00007fe083610d69 R08: 0000000000000000 R09: 0000000000000000 [ 99.584060][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.584070][ T5948] R13: 0000000000000000 R14: 00007fe0837b6160 R15: 00007ffd6081b778 [ 99.584096][ T5948] [ 100.347135][ T5850] Bluetooth: hci2: command tx timeout [ 100.353966][ T5850] Bluetooth: hci1: command tx timeout [ 100.359997][ T5847] Bluetooth: hci3: command tx timeout [ 100.376668][ T5163] Bluetooth: hci0: command tx timeout [ 100.765431][ T5940] mmap: syz.2.3 (5940) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.197177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.197613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.198722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.729574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.926610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.107120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.116566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 103.027474][ T5977] Zero length message leads to an empty skb [ 103.133277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 103.202992][ T5977] hub 8-0:1.0: USB hub found [ 103.222046][ T5977] hub 8-0:1.0: 1 port detected [ 103.252004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.262938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.729354][ T5983] FAULT_INJECTION: forcing a failure. [ 103.729354][ T5983] name failslab, interval 1, probability 0, space 0, times 1 [ 103.742768][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.1.11 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 103.742796][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.742805][ T5983] Call Trace: [ 103.742812][ T5983] [ 103.742818][ T5983] dump_stack_lvl+0x16c/0x1f0 [ 103.742840][ T5983] should_fail_ex+0x512/0x640 [ 103.742866][ T5983] ? __kmalloc_noprof+0xbf/0x510 [ 103.742890][ T5983] ? devlink_fmsg_put_name+0xf0/0x3f0 [ 103.742907][ T5983] should_failslab+0xc2/0x120 [ 103.742931][ T5983] __kmalloc_noprof+0xd2/0x510 [ 103.742957][ T5983] devlink_fmsg_put_name+0xf0/0x3f0 [ 103.742976][ T5983] devlink_fmsg_u32_pair_put+0xff/0x2f0 [ 103.742996][ T5983] ? __pfx_devlink_fmsg_u32_pair_put+0x10/0x10 [ 103.743028][ T5983] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 103.743052][ T5983] nsim_dev_dummy_fmsg_put+0x4d/0x1e0 [ 103.743075][ T5983] devlink_health_do_dump+0x240/0x620 [ 103.743098][ T5983] devlink_health_report+0x3c9/0x9c0 [ 103.743122][ T5983] ? __pfx_devlink_health_report+0x10/0x10 [ 103.743143][ T5983] ? _copy_from_user+0x59/0xd0 [ 103.743163][ T5983] nsim_dev_health_break_write+0x166/0x210 [ 103.743184][ T5983] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 103.743214][ T5983] full_proxy_write+0x12e/0x1a0 [ 103.743237][ T5983] ? __pfx_full_proxy_write+0x10/0x10 [ 103.743257][ T5983] vfs_write+0x2a0/0x1150 [ 103.743280][ T5983] ? __pfx___mutex_lock+0x10/0x10 [ 103.743297][ T5983] ? __pfx_vfs_write+0x10/0x10 [ 103.743321][ T5983] ? __fget_files+0x20e/0x3c0 [ 103.743345][ T5983] ksys_write+0x12a/0x250 [ 103.743363][ T5983] ? __pfx_ksys_write+0x10/0x10 [ 103.743388][ T5983] do_syscall_64+0xcd/0x490 [ 103.743407][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.743424][ T5983] RIP: 0033:0x7fad2d98e9a9 [ 103.743439][ T5983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.743455][ T5983] RSP: 002b:00007fad2e78a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.743479][ T5983] RAX: ffffffffffffffda RBX: 00007fad2dbb5fa0 RCX: 00007fad2d98e9a9 [ 103.743490][ T5983] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000009 [ 103.743500][ T5983] RBP: 00007fad2da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 103.743509][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.743519][ T5983] R13: 0000000000000000 R14: 00007fad2dbb5fa0 R15: 00007ffe5e8c8d28 [ 103.743541][ T5983] [ 105.721311][ T30] audit: type=1804 audit(1753964087.906:2): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.18" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 107.235774][ T6037] FAULT_INJECTION: forcing a failure. [ 107.235774][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 107.272115][ T6037] CPU: 1 UID: 0 PID: 6037 Comm: syz.0.19 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 107.272153][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.272179][ T6037] Call Trace: [ 107.272189][ T6037] [ 107.272199][ T6037] dump_stack_lvl+0x16c/0x1f0 [ 107.272233][ T6037] should_fail_ex+0x512/0x640 [ 107.272275][ T6037] ? __kvmalloc_node_noprof+0x124/0x620 [ 107.272313][ T6037] should_failslab+0xc2/0x120 [ 107.272351][ T6037] __kvmalloc_node_noprof+0x137/0x620 [ 107.272387][ T6037] ? dm_create+0x9a/0x1160 [ 107.272425][ T6037] ? dm_create+0x9a/0x1160 [ 107.272451][ T6037] dm_create+0x9a/0x1160 [ 107.272486][ T6037] dev_create+0x121/0x290 [ 107.272523][ T6037] ? __pfx_dev_create+0x10/0x10 [ 107.272553][ T6037] ? __might_fault+0x13b/0x190 [ 107.272597][ T6037] ctl_ioctl+0x798/0xd60 [ 107.272630][ T6037] ? __pfx_dev_create+0x10/0x10 [ 107.272676][ T6037] ? __pfx_ctl_ioctl+0x10/0x10 [ 107.272763][ T6037] ? __fget_files+0x20e/0x3c0 [ 107.272801][ T6037] dm_ctl_ioctl+0x22/0x30 [ 107.272836][ T6037] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 107.272881][ T6037] __x64_sys_ioctl+0x18e/0x210 [ 107.272929][ T6037] do_syscall_64+0xcd/0x490 [ 107.272962][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.272992][ T6037] RIP: 0033:0x7f1cabd8e9a9 [ 107.273015][ T6037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.273044][ T6037] RSP: 002b:00007f1cacb25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.273072][ T6037] RAX: ffffffffffffffda RBX: 00007f1cabfb5fa0 RCX: 00007f1cabd8e9a9 [ 107.273091][ T6037] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000003 [ 107.273109][ T6037] RBP: 00007f1cabe10d69 R08: 0000000000000000 R09: 0000000000000000 [ 107.273133][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.273151][ T6037] R13: 0000000000000000 R14: 00007f1cabfb5fa0 R15: 00007ffeaafdab98 [ 107.273193][ T6037] [ 107.273205][ T6037] device-mapper: core: unable to allocate device, out of memory. [ 107.750066][ T6039] mkiss: ax0: crc mode is auto. [ 109.405023][ T6075] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.541482][ T6080] dyndbg: bad flag-op /, at start of /proc/sel [ 109.563779][ T6080] dyndbg: flags parse failed [ 109.898338][ T6083] process 'syz.0.26' launched './file0' with NULL argv: empty string added [ 114.329607][ T6111] kexec: Could not allocate control_code_buffer [ 115.540646][ T6127] syz.0.33 (6127) used greatest stack depth: 17048 bytes left [ 116.064189][ T6053] Bluetooth: hci0: unexpected event 0x1d length: 10 > 5 [ 116.104982][ T6152] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 116.150535][ T6149] FAULT_INJECTION: forcing a failure. [ 116.150535][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 116.216246][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.0.37 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 116.216290][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.216308][ T6149] Call Trace: [ 116.216319][ T6149] [ 116.216331][ T6149] dump_stack_lvl+0x16c/0x1f0 [ 116.216365][ T6149] should_fail_ex+0x512/0x640 [ 116.216407][ T6149] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 116.216444][ T6149] should_failslab+0xc2/0x120 [ 116.216484][ T6149] __kmalloc_cache_noprof+0x6a/0x3e0 [ 116.216517][ T6149] ? nf_nat_masq_schedule.part.0+0x285/0x5f0 [ 116.216570][ T6149] nf_nat_masq_schedule.part.0+0x285/0x5f0 [ 116.216623][ T6149] ? __pfx_device_cmp+0x10/0x10 [ 116.216669][ T6149] ? __pfx_nf_nat_masq_schedule.part.0+0x10/0x10 [ 116.216714][ T6149] ? nfqnl_rcv_dev_event+0x35/0x5e0 [ 116.216755][ T6149] ? __pfx_failover_event+0x10/0x10 [ 116.216791][ T6149] ? __pfx_virt_wifi_event+0x10/0x10 [ 116.216847][ T6149] masq_device_event+0xf7/0x120 [ 116.216893][ T6149] notifier_call_chain+0xbc/0x410 [ 116.216928][ T6149] ? __pfx_masq_device_event+0x10/0x10 [ 116.216984][ T6149] call_netdevice_notifiers_info+0xbe/0x140 [ 116.217027][ T6149] __dev_notify_flags+0x1f7/0x2e0 [ 116.217075][ T6149] ? __pfx___dev_notify_flags+0x10/0x10 [ 116.217131][ T6149] ? __pfx___dev_change_flags+0x10/0x10 [ 116.217173][ T6149] netif_change_flags+0x108/0x160 [ 116.217208][ T6149] dev_change_flags+0xba/0x250 [ 116.217248][ T6149] flags_store+0x187/0x1e0 [ 116.217293][ T6149] ? __pfx_flags_store+0x10/0x10 [ 116.217340][ T6149] ? find_held_lock+0x2b/0x80 [ 116.217377][ T6149] ? __pfx_flags_store+0x10/0x10 [ 116.217420][ T6149] dev_attr_store+0x58/0x80 [ 116.217462][ T6149] ? __pfx_dev_attr_store+0x10/0x10 [ 116.217502][ T6149] sysfs_kf_write+0xef/0x150 [ 116.217534][ T6149] kernfs_fop_write_iter+0x351/0x510 [ 116.217576][ T6149] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.217620][ T6149] iter_file_splice_write+0x91f/0x1150 [ 116.217678][ T6149] ? __pfx_iter_file_splice_write+0x10/0x10 [ 116.217718][ T6149] ? __pfx_copy_splice_read+0x10/0x10 [ 116.217790][ T6149] ? __pfx_iter_file_splice_write+0x10/0x10 [ 116.217824][ T6149] direct_splice_actor+0x18f/0x6c0 [ 116.217860][ T6149] splice_direct_to_actor+0x342/0xa30 [ 116.217913][ T6149] ? __pfx_direct_splice_actor+0x10/0x10 [ 116.217952][ T6149] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 116.218016][ T6149] do_splice_direct+0x174/0x240 [ 116.218067][ T6149] ? __pfx_do_splice_direct+0x10/0x10 [ 116.218116][ T6149] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 116.218172][ T6149] ? rw_verify_area+0xcf/0x680 [ 116.218225][ T6149] do_sendfile+0xb06/0xe50 [ 116.218262][ T6149] ? __pfx_do_sendfile+0x10/0x10 [ 116.218298][ T6149] ? __x64_sys_futex+0x1e0/0x4c0 [ 116.218334][ T6149] ? __x64_sys_futex+0x1e9/0x4c0 [ 116.218375][ T6149] __x64_sys_sendfile64+0x1d8/0x220 [ 116.218415][ T6149] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 116.218479][ T6149] do_syscall_64+0xcd/0x490 [ 116.218515][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.218545][ T6149] RIP: 0033:0x7f1cabd8e9a9 [ 116.218571][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.218609][ T6149] RSP: 002b:00007f1cacb25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 116.218638][ T6149] RAX: ffffffffffffffda RBX: 00007f1cabfb5fa0 RCX: 00007f1cabd8e9a9 [ 116.218658][ T6149] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 116.218676][ T6149] RBP: 00007f1cabe10d69 R08: 0000000000000000 R09: 0000000000000000 [ 116.218694][ T6149] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 116.218711][ T6149] R13: 0000000000000000 R14: 00007f1cabfb5fa0 R15: 00007ffeaafdab98 [ 116.218755][ T6149] [ 116.741287][ T6152] .SR: entered promiscuous mode [ 117.239842][ T6152] Invalid ELF header magic: != ELF [ 117.595742][ T6153] bond0: option all_slaves_active: invalid value () [ 118.300432][ T6152] could not allocate digest TFM handle [ 118.307780][ T6157] could not allocate digest TFM handle [ 118.797331][ T6180] FAULT_INJECTION: forcing a failure. [ 118.797331][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 118.851130][ T6198] could not allocate digest TFM handle binfmt_misc [ 118.870481][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.0.41 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 118.870533][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.870551][ T6180] Call Trace: [ 118.870561][ T6180] [ 118.870573][ T6180] dump_stack_lvl+0x16c/0x1f0 [ 118.870608][ T6180] should_fail_ex+0x512/0x640 [ 118.870652][ T6180] ? __kmalloc_node_noprof+0xc5/0x500 [ 118.870693][ T6180] should_failslab+0xc2/0x120 [ 118.870731][ T6180] __kmalloc_node_noprof+0xd8/0x500 [ 118.870769][ T6180] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 118.870816][ T6180] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 118.870849][ T6180] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 118.870891][ T6180] crypto_create_tfm_node+0x85/0x350 [ 118.870937][ T6180] crypto_alloc_tfm_node+0x102/0x260 [ 118.870975][ T6180] ? kasan_save_track+0x14/0x30 [ 118.871011][ T6180] sctp_auth_init_hmacs+0x1e1/0x440 [ 118.871057][ T6180] ? kasan_save_track+0x14/0x30 [ 118.871097][ T6180] sctp_auth_init+0x90/0x570 [ 118.871143][ T6180] sctp_setsockopt+0xa371/0xb870 [ 118.871188][ T6180] ? __pfx_sctp_setsockopt+0x10/0x10 [ 118.871220][ T6180] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.871270][ T6180] ? __fget_files+0x204/0x3c0 [ 118.871303][ T6180] ? sock_common_setsockopt+0x2e/0xf0 [ 118.871335][ T6180] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 118.871375][ T6180] do_sock_setsockopt+0xf0/0x1d0 [ 118.871417][ T6180] __sys_setsockopt+0x120/0x1a0 [ 118.871472][ T6180] __x64_sys_setsockopt+0xbd/0x160 [ 118.871515][ T6180] ? do_syscall_64+0x91/0x490 [ 118.871543][ T6180] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.871590][ T6180] do_syscall_64+0xcd/0x490 [ 118.871623][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.871655][ T6180] RIP: 0033:0x7f1cabd8e9a9 [ 118.871681][ T6180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.871709][ T6180] RSP: 002b:00007f1cacb25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.871737][ T6180] RAX: ffffffffffffffda RBX: 00007f1cabfb5fa0 RCX: 00007f1cabd8e9a9 [ 118.871756][ T6180] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 118.871773][ T6180] RBP: 00007f1cabe10d69 R08: 0000000000000008 R09: 0000000000000000 [ 118.871791][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.871808][ T6180] R13: 0000000000000000 R14: 00007f1cabfb5fa0 R15: 00007ffeaafdab98 [ 118.871849][ T6180] [ 119.123513][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.551987][ T6253] block nbd9: NBD_DISCONNECT [ 121.588392][ T6253] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 123.330475][ T6284] zram: Removed device: zram0 [ 123.552996][ T6287] FAULT_INJECTION: forcing a failure. [ 123.552996][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 123.576223][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.2.52 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 123.576266][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.576283][ T6287] Call Trace: [ 123.576293][ T6287] [ 123.576305][ T6287] dump_stack_lvl+0x16c/0x1f0 [ 123.576340][ T6287] should_fail_ex+0x512/0x640 [ 123.576385][ T6287] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 123.576421][ T6287] should_failslab+0xc2/0x120 [ 123.576472][ T6287] __kmalloc_cache_noprof+0x6a/0x3e0 [ 123.576506][ T6287] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 123.576546][ T6287] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 123.576580][ T6287] devlink_fmsg_u32_pair_put+0x270/0x2f0 [ 123.576611][ T6287] ? __pfx_devlink_fmsg_u32_pair_put+0x10/0x10 [ 123.576644][ T6287] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 123.576681][ T6287] nsim_dev_dummy_fmsg_put+0x4d/0x1e0 [ 123.576717][ T6287] devlink_health_do_dump+0x240/0x620 [ 123.576753][ T6287] devlink_health_report+0x3c9/0x9c0 [ 123.576791][ T6287] ? __pfx_devlink_health_report+0x10/0x10 [ 123.576822][ T6287] ? _copy_from_user+0x59/0xd0 [ 123.576854][ T6287] nsim_dev_health_break_write+0x166/0x210 [ 123.576888][ T6287] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 123.576936][ T6287] full_proxy_write+0x12e/0x1a0 [ 123.576973][ T6287] ? __pfx_full_proxy_write+0x10/0x10 [ 123.577004][ T6287] vfs_write+0x2a0/0x1150 [ 123.577040][ T6287] ? __pfx___mutex_lock+0x10/0x10 [ 123.577077][ T6287] ? __pfx_vfs_write+0x10/0x10 [ 123.577119][ T6287] ? __fget_files+0x20e/0x3c0 [ 123.577162][ T6287] ksys_write+0x12a/0x250 [ 123.577190][ T6287] ? __pfx_ksys_write+0x10/0x10 [ 123.577231][ T6287] do_syscall_64+0xcd/0x490 [ 123.577261][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.577287][ T6287] RIP: 0033:0x7fe08358e9a9 [ 123.577310][ T6287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.577336][ T6287] RSP: 002b:00007fe0843fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.577362][ T6287] RAX: ffffffffffffffda RBX: 00007fe0837b5fa0 RCX: 00007fe08358e9a9 [ 123.577380][ T6287] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000009 [ 123.577396][ T6287] RBP: 00007fe083610d69 R08: 0000000000000000 R09: 0000000000000000 [ 123.577412][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.577427][ T6287] R13: 0000000000000000 R14: 00007fe0837b5fa0 R15: 00007ffd6081b778 [ 123.577478][ T6287] [ 123.616595][ T6295] ======================================================= [ 123.616595][ T6295] WARNING: The mand mount option has been deprecated and [ 123.616595][ T6295] and is ignored by this kernel. Remove the mand [ 123.616595][ T6295] option from the mount to silence this warning. [ 123.616595][ T6295] ======================================================= [ 124.318299][ T6299] warning: `syz.2.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.750275][ T6355] could not allocate digest TFM handle binfmt_misc [ 128.660597][ T6393] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 129.824013][ T6405] capability: warning: `syz.0.68' uses 32-bit capabilities (legacy support in use) [ 130.286898][ T6053] Bluetooth: hci3: unexpected event 0x1d length: 10 > 5 [ 130.459771][ T6425] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 130.808066][ T6401] kexec: Could not allocate control_code_buffer [ 132.396900][ T6452] Device name cannot be null; rc = [-22] [ 134.446661][ T6470] netlink: 22784 bytes leftover after parsing attributes in process `syz.3.81'. [ 134.519276][ T30] audit: type=1800 audit(1753964116.706:3): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.81" name="file1" dev="tmpfs" ino=133 res=0 errno=0 [ 135.185035][ T6467] kexec: Could not allocate control_code_buffer [ 135.272693][ T6478] could not allocate digest TFM handle binfmt_misc [ 138.240312][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.249655][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.984067][ T6053] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 139.545229][ T6543] could not allocate digest TFM handle binfmt_misc [ 140.817106][ T6574] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 141.995409][ T6584] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 145.618279][ T6621] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 148.123846][ T6638] random: crng reseeded on system resumption [ 148.561255][ T6053] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 149.303837][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.327734][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.406280][ T6669] could not allocate digest TFM handle binfmt_misc [ 154.161058][ T6716] phram: not enough arguments [ 154.173249][ T6716] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 156.668775][ T6742] Device name cannot be null; rc = [-22] [ 157.944400][ T6755] bridge0: port 3(team0) entered blocking state [ 157.953856][ T6755] bridge0: port 3(team0) entered disabled state [ 157.962363][ T6755] team0: entered allmulticast mode [ 157.968926][ T6755] team_slave_0: entered allmulticast mode [ 157.975115][ T6755] team_slave_1: entered allmulticast mode [ 158.009995][ T6755] team0: entered promiscuous mode [ 158.047044][ T6755] team_slave_0: entered promiscuous mode [ 158.053008][ T6755] team_slave_1: entered promiscuous mode [ 158.209536][ T6755] bridge0: port 3(team0) entered blocking state [ 158.216268][ T6755] bridge0: port 3(team0) entered forwarding state [ 159.938858][ T6789] syz.3.131 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 164.584231][ T6819] random: crng reseeded on system resumption [ 165.488039][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'. [ 166.405443][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 166.568828][ T6843] ipvlan0: entered allmulticast mode [ 166.634038][ T6843] veth0_vlan: entered allmulticast mode [ 166.798856][ T6851] busy [ 171.421755][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.146'. [ 172.800115][ T6915] syz.2.154 uses obsolete (PF_INET,SOCK_PACKET) [ 172.879076][ T6053] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 173.116394][ T6919] i2c i2c-0: delete_device: Can't parse I2C address [ 173.198817][ T6919] vmstat_refresh: nr_hugetlb -512 [ 173.484496][ T6931] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.878755][ T6934] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 174.777662][ T6958] ubi0: attaching mtd0 [ 174.783702][ T6958] ubi0: scanning is finished [ 174.876721][ T6958] ubi0: empty MTD device detected [ 175.997354][ T6958] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 176.011156][ T6958] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 176.156566][ T6958] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 176.252629][ T6958] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 176.265960][ T6958] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 176.273937][ T6958] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 176.282728][ T6958] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1606209405 [ 176.294013][ T6958] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 176.306022][ T6976] ubi0: background thread "ubi_bgt0d" started, PID 6976 [ 176.960262][ T6053] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 177.620014][ T6999] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.973035][ T7052] could not allocate digest TFM handle binfmt_misc [ 184.089635][ T7076] FAULT_INJECTION: forcing a failure. [ 184.089635][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 184.106389][ T7076] CPU: 1 UID: 0 PID: 7076 Comm: syz.0.181 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 184.106431][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.106448][ T7076] Call Trace: [ 184.106457][ T7076] [ 184.106468][ T7076] dump_stack_lvl+0x16c/0x1f0 [ 184.106500][ T7076] should_fail_ex+0x512/0x640 [ 184.106535][ T7076] ? fs_reclaim_acquire+0xae/0x150 [ 184.106580][ T7076] should_failslab+0xc2/0x120 [ 184.106616][ T7076] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 184.106651][ T7076] ? security_inode_alloc+0x3b/0x2b0 [ 184.106697][ T7076] security_inode_alloc+0x3b/0x2b0 [ 184.106735][ T7076] inode_init_always_gfp+0xce4/0x1030 [ 184.106768][ T7076] ? __pfx_mqueue_fill_super+0x10/0x10 [ 184.106801][ T7076] alloc_inode+0x86/0x240 [ 184.106838][ T7076] new_inode+0x22/0x1c0 [ 184.106882][ T7076] ? __pfx_mqueue_fill_super+0x10/0x10 [ 184.106912][ T7076] mqueue_get_inode+0x2e/0xdd0 [ 184.106941][ T7076] ? sget_fc+0x808/0xc20 [ 184.106971][ T7076] ? __pfx_mqueue_fill_super+0x10/0x10 [ 184.107002][ T7076] mqueue_fill_super+0x14d/0x260 [ 184.107036][ T7076] get_tree_nodev+0xda/0x190 [ 184.107067][ T7076] mqueue_get_tree+0xf1/0x130 [ 184.107109][ T7076] vfs_get_tree+0x8b/0x340 [ 184.107147][ T7076] fc_mount_longterm+0x18/0x160 [ 184.107185][ T7076] mq_init_ns+0x426/0x620 [ 184.107226][ T7076] copy_ipcs+0x383/0x610 [ 184.107260][ T7076] ? copy_utsname+0xab/0x470 [ 184.107299][ T7076] create_new_namespaces+0x20a/0xa90 [ 184.107329][ T7076] ? security_capable+0x7e/0x260 [ 184.107370][ T7076] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 184.107405][ T7076] ksys_unshare+0x45b/0xa40 [ 184.107440][ T7076] ? __pfx_ksys_unshare+0x10/0x10 [ 184.107477][ T7076] ? xfd_validate_state+0x61/0x180 [ 184.107528][ T7076] __x64_sys_unshare+0x31/0x40 [ 184.107574][ T7076] do_syscall_64+0xcd/0x490 [ 184.107605][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.107633][ T7076] RIP: 0033:0x7f1cabd8e9a9 [ 184.107657][ T7076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.107682][ T7076] RSP: 002b:00007f1ca9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 184.107710][ T7076] RAX: ffffffffffffffda RBX: 00007f1cabfb6080 RCX: 00007f1cabd8e9a9 [ 184.107728][ T7076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 184.107744][ T7076] RBP: 00007f1cabe10d69 R08: 0000000000000000 R09: 0000000000000000 [ 184.107760][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.107775][ T7076] R13: 0000000000000000 R14: 00007f1cabfb6080 R15: 00007ffeaafdab98 [ 184.107812][ T7076] [ 186.047328][ T6053] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 187.769592][ T7123] random: crng reseeded on system resumption [ 190.878725][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.196'. [ 190.889357][ T7173] ipvlan0: entered allmulticast mode [ 190.895016][ T7173] veth0_vlan: entered allmulticast mode [ 193.166325][ T30] audit: type=1800 audit(6048931600.318:4): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.198" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 193.697958][ T7218] busy [ 194.479585][ T7225] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 199.679731][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.686534][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.827898][ T7311] netlink: zone id is out of range [ 199.837288][ T7311] netlink: zone id is out of range [ 199.922441][ T7311] netlink: set zone limit has 8 unknown bytes [ 203.063025][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 203.119079][ T7374] HfR: entered promiscuous mode [ 203.269313][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'. [ 203.358882][ T7380] Invalid ELF header magic: != ELF [ 204.646848][ T7401] could not allocate digest TFM handle [ 204.687554][ T7393] could not allocate digest TFM handle [ 206.250032][ T6053] Bluetooth: hci0: unexpected event 0x1d length: 10 > 5 [ 212.594102][ T7506] could not allocate digest TFM handle binfmt_misc [ 215.801172][ T7578] Invalid ELF header magic: != ELF [ 216.060170][ T7582] could not allocate digest TFM handle binfmt_misc [ 216.184645][ T7568] could not allocate digest TFM handle binfmt_misc [ 216.343038][ T7575] sctp: failed to load transform for md5: -2 [ 217.155339][ T7555] Bluetooth: hci0: command 0x0406 tx timeout [ 217.161570][ T7555] Bluetooth: hci2: command 0x0406 tx timeout [ 217.168004][ T7555] Bluetooth: hci1: command 0x0406 tx timeout [ 217.174103][ T7555] Bluetooth: hci3: command 0x0406 tx timeout [ 221.685412][ T30] audit: type=1800 audit(6048931628.818:5): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.287" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 223.268156][ T7692] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 225.195615][ T6510] Bluetooth: hci3: unexpected event 0x1d length: 10 > 5 [ 225.748747][ T7735] Invalid ELF header magic: != ELF [ 226.859311][ T7743] could not allocate digest TFM handle binfmt_misc [ 228.135695][ T7776] netlink: 342 bytes leftover after parsing attributes in process `syz.0.309'. [ 228.181672][ T7779] netlink: 342 bytes leftover after parsing attributes in process `syz.0.309'. [ 228.207762][ T7779] netlink: 342 bytes leftover after parsing attributes in process `syz.0.309'. [ 230.901095][ T7808] Invalid ELF header magic: != ELF [ 231.155951][ T7812] could not allocate digest TFM handle binfmt_misc [ 231.728009][ T7833] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[7833] [ 232.113052][ T7808] FAULT_INJECTION: forcing a failure. [ 232.113052][ T7808] name fail_futex, interval 1, probability 0, space 0, times 1 [ 232.128495][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.1.315 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 232.128540][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.128558][ T7808] Call Trace: [ 232.128568][ T7808] [ 232.128579][ T7808] dump_stack_lvl+0x16c/0x1f0 [ 232.128615][ T7808] should_fail_ex+0x512/0x640 [ 232.128667][ T7808] get_futex_key+0x1d0/0x1540 [ 232.128708][ T7808] ? __pfx_get_futex_key+0x10/0x10 [ 232.128746][ T7808] ? mmap_region+0x1ee/0x3f0 [ 232.128782][ T7808] ? __get_unmapped_area+0x267/0x440 [ 232.128833][ T7808] futex_wake+0xea/0x530 [ 232.128879][ T7808] ? __pfx_futex_wake+0x10/0x10 [ 232.128929][ T7808] ? up_write+0x1b2/0x520 [ 232.128978][ T7808] do_futex+0x1e3/0x350 [ 232.129016][ T7808] ? __pfx_do_futex+0x10/0x10 [ 232.129076][ T7808] __x64_sys_futex+0x1e0/0x4c0 [ 232.129120][ T7808] ? __pfx___x64_sys_futex+0x10/0x10 [ 232.129156][ T7808] ? xfd_validate_state+0x61/0x180 [ 232.129216][ T7808] do_syscall_64+0xcd/0x490 [ 232.129249][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.129277][ T7808] RIP: 0033:0x7fad2d98e9a9 [ 232.129301][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.129330][ T7808] RSP: 002b:00007fad2e78a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.129358][ T7808] RAX: ffffffffffffffda RBX: 00007fad2dbb5fa8 RCX: 00007fad2d98e9a9 [ 232.129378][ T7808] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fad2dbb5fac [ 232.129395][ T7808] RBP: 00007fad2dbb5fa0 R08: 00007fad2e78b000 R09: 0000000000000000 [ 232.129414][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad2dbb5fac [ 232.129431][ T7808] R13: 0000000000000000 R14: 00007ffe5e8c8c40 R15: 00007ffe5e8c8d28 [ 232.129469][ T7808] [ 233.483037][ T7843] could not allocate digest TFM handle binfmt_misc [ 235.302939][ T7895] Invalid ELF header magic: != ELF [ 237.332869][ T7908] can: request_module (can-proto-0) failed. [ 240.180427][ T30] audit: type=1800 audit(6048931647.278:6): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.346" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 242.970457][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 244.125733][ T8033] can: request_module (can-proto-0) failed. [ 245.710050][ T8067] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.290821][ T8079] could not allocate digest TFM handle binfmt_misc [ 246.755917][ T8090] netlink: 25520 bytes leftover after parsing attributes in process `syz.0.368'. [ 246.776628][ T8090] netlink: zone id is out of range [ 246.781908][ T8090] netlink: zone id is out of range [ 246.788389][ T8090] netlink: zone id is out of range [ 246.793566][ T8090] netlink: zone id is out of range [ 246.799443][ T8090] netlink: zone id is out of range [ 246.804702][ T8090] netlink: zone id is out of range [ 246.810456][ T8090] netlink: zone id is out of range [ 246.819119][ T8090] netlink: zone id is out of range [ 246.824720][ T8090] netlink: zone id is out of range [ 246.850878][ T8090] netlink: zone id is out of range [ 248.120026][ T8101] netlink: 330 bytes leftover after parsing attributes in process `syz.2.370'. [ 248.215400][ T8101] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 248.978044][ T8113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 249.455297][ T8107] could not allocate digest TFM handle binfmt_misc [ 250.432230][ T8123] could not allocate digest TFM handle binfmt_misc [ 256.140966][ T8213] netlink: 25520 bytes leftover after parsing attributes in process `syz.3.393'. [ 256.150565][ T8213] net_ratelimit: 228 callbacks suppressed [ 256.150590][ T8213] netlink: zone id is out of range [ 256.175620][ T8213] netlink: zone id is out of range [ 256.182883][ T8213] netlink: zone id is out of range [ 256.191107][ T8213] netlink: zone id is out of range [ 256.196556][ T8213] netlink: zone id is out of range [ 256.201921][ T8213] netlink: zone id is out of range [ 256.207096][ T8213] netlink: zone id is out of range [ 256.212252][ T8213] netlink: zone id is out of range [ 256.217528][ T8213] netlink: zone id is out of range [ 256.222854][ T8213] netlink: zone id is out of range [ 261.155544][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.162487][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.339736][ T8305] could not allocate digest TFM handle binfmt_misc [ 264.239548][ T8332] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 264.850853][ T8333] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 271.177698][ T8425] net_ratelimit: 228 callbacks suppressed [ 271.177724][ T8425] sctp: failed to load transform for md5: -4 [ 272.069411][ T8465] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 272.093573][ T8443] sp0: Synchronizing with TNC [ 272.137499][ T8465] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 272.169128][ T8465] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 272.180645][ T8465] page_type: f8(unknown) [ 272.221616][ T8465] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 272.260603][ T8465] raw: ffff888078006000 0000000000000000 00000000f8000000 0000000000000000 [ 272.270824][ T8465] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 272.311840][ T8465] head: ffff888078006000 0000000000000000 00000000f8000000 0000000000000000 [ 272.325838][ T8465] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 272.535415][ T8465] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 272.694520][ T8465] page dumped because: unmovable page [ 272.984321][ T8465] page_owner tracks the page as allocated [ 272.993160][ T8465] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 6707, tgid 6704 (syz.1.118), ts 153439754112, free_ts 153354345907 [ 273.011907][ T8465] post_alloc_hook+0x1c0/0x230 [ 273.017115][ T8465] get_page_from_freelist+0x1321/0x3890 [ 273.022981][ T8465] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 273.043604][ T8465] alloc_pages_mpol+0x1fb/0x550 [ 273.049522][ T8465] ___kmalloc_large_node+0xed/0x160 [ 273.055117][ T8465] __kmalloc_large_node_noprof+0x1c/0x70 [ 273.061792][ T8465] __kmalloc_noprof.cold+0xc/0x61 [ 273.068703][ T8465] snd_ctl_new+0x56/0x1a0 [ 273.077423][ T8465] snd_ctl_elem_add+0x510/0x14c0 [ 273.088693][ T8465] snd_ctl_elem_add_user+0xc3/0x170 [ 273.100942][ T8465] snd_ctl_ioctl+0x981/0x1320 [ 273.111448][ T8465] __x64_sys_ioctl+0x18e/0x210 [ 273.185641][ T8465] do_syscall_64+0xcd/0x490 [ 273.222538][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.230068][ T8465] page last free pid 6594 tgid 6594 stack trace: [ 273.239022][ T8465] __free_frozen_pages+0x7fe/0x1180 [ 273.244412][ T8465] __put_partials+0x165/0x1c0 [ 273.254058][ T8465] qlist_free_all+0x4d/0x120 [ 273.266018][ T8465] kasan_quarantine_reduce+0x195/0x1e0 [ 273.278898][ T8465] __kasan_slab_alloc+0x69/0x90 [ 273.289715][ T8465] __kmalloc_noprof+0x1d4/0x510 [ 273.302876][ T8465] tomoyo_realpath_from_path+0xc2/0x6e0 [ 273.327525][ T8465] tomoyo_path_perm+0x274/0x460 [ 273.340775][ T8465] security_inode_getattr+0x116/0x290 [ 273.348673][ T8484] could not allocate digest TFM handle binfmt_misc [ 273.421553][ T8465] vfs_fstat+0x4b/0xe0 [ 273.438739][ T8465] __do_sys_newfstat+0x87/0x100 [ 273.448543][ T8465] do_syscall_64+0xcd/0x490 [ 273.454180][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.257723][ T8496] could not allocate digest TFM handle binfmt_misc [ 276.270945][ T8530] .SR: entered promiscuous mode [ 276.807606][ T8528] Invalid ELF header magic: != ELF [ 278.231318][ T8530] could not allocate digest TFM handle [ 278.291807][ T8528] could not allocate digest TFM handle [ 281.125961][ T8596] could not allocate digest TFM handle binfmt_misc [ 281.172561][ T8602] could not allocate digest TFM handle binfmt_misc [ 281.519887][ T8613] could not allocate digest TFM handle binfmt_misc [ 281.537661][ T8610] could not allocate digest TFM handle binfmt_misc [ 284.273655][ T8671] could not allocate digest TFM handle binfmt_misc [ 284.825259][ T8675] netlink: 338 bytes leftover after parsing attributes in process `syz.3.484'. [ 284.876969][ T8685] netlink: 338 bytes leftover after parsing attributes in process `syz.3.484'. [ 284.893109][ T8675] netlink: 290 bytes leftover after parsing attributes in process `syz.3.484'. [ 284.906501][ T8675] netlink: 290 bytes leftover after parsing attributes in process `syz.3.484'. [ 286.072762][ T8701] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 287.526443][ T8723] netlink: 330 bytes leftover after parsing attributes in process `syz.3.495'. [ 287.536131][ T8723] mac80211_hwsim hwsim7 : renamed from wlan0 (while UP) [ 291.047977][ T8757] could not allocate digest TFM handle binfmt_misc [ 293.386862][ T8789] netlink: 330 bytes leftover after parsing attributes in process `syz.1.507'. [ 293.670968][ T8789] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 294.090786][ T8798] could not allocate digest TFM handle binfmt_misc [ 296.599959][ T8841] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 297.908067][ T8844] could not allocate digest TFM handle binfmt_misc [ 299.212646][ T8868] netlink: 330 bytes leftover after parsing attributes in process `syz.0.525'. [ 299.221883][ T8868] mac80211_hwsim hwsim3 : renamed from wlan0 (while UP) [ 300.184238][ T8881] Invalid ELF header magic: != ELF [ 300.404956][ T8879] .SR: entered promiscuous mode [ 301.196757][ T8891] FAULT_INJECTION: forcing a failure. [ 301.196757][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 301.295578][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.1.530 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 301.295623][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.295641][ T8891] Call Trace: [ 301.295651][ T8891] [ 301.295663][ T8891] dump_stack_lvl+0x16c/0x1f0 [ 301.295698][ T8891] should_fail_ex+0x512/0x640 [ 301.295740][ T8891] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 301.295779][ T8891] should_failslab+0xc2/0x120 [ 301.295819][ T8891] __kmalloc_cache_noprof+0x6a/0x3e0 [ 301.295848][ T8891] ? do_eventfd+0x67/0x2c0 [ 301.295891][ T8891] do_eventfd+0x67/0x2c0 [ 301.295925][ T8891] ? rcu_is_watching+0x12/0xc0 [ 301.295957][ T8891] __x64_sys_eventfd+0x32/0x50 [ 301.295997][ T8891] do_syscall_64+0xcd/0x490 [ 301.296028][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.296060][ T8891] RIP: 0033:0x7fad2d98e9a9 [ 301.296082][ T8891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.296109][ T8891] RSP: 002b:00007fad2e78a038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 301.296138][ T8891] RAX: ffffffffffffffda RBX: 00007fad2dbb5fa0 RCX: 00007fad2d98e9a9 [ 301.296157][ T8891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 301.296183][ T8891] RBP: 00007fad2da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 301.296200][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.296218][ T8891] R13: 0000000000000000 R14: 00007fad2dbb5fa0 R15: 00007ffe5e8c8d28 [ 301.296260][ T8891] [ 301.635885][ T8879] could not allocate digest TFM handle [ 301.641952][ T8881] could not allocate digest TFM handle [ 302.056649][ T8908] could not allocate digest TFM handle binfmt_misc [ 305.506278][ T8960] could not allocate digest TFM handle binfmt_misc [ 305.699827][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 308.771689][ T9011] could not allocate digest TFM handle binfmt_misc [ 309.047127][ T9026] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 310.866848][ T9061] mkiss: ax0: crc mode is auto. [ 312.989163][ T9089] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 313.303227][ T9092] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 313.858846][ T9098] could not allocate digest TFM handle binfmt_misc [ 314.841556][ T9116] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.970969][ T9128] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 315.694086][ T9132] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 315.801178][ T9142] ovs_: entered promiscuous mode [ 318.462028][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 318.509296][ T9188] vcan0: entered promiscuous mode [ 318.737362][ T9197] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 318.744999][ T9197] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 318.819444][ T9197] FAULT_INJECTION: forcing a failure. [ 318.819444][ T9197] name failslab, interval 1, probability 0, space 0, times 0 [ 318.834392][ T9197] CPU: 1 UID: 0 PID: 9197 Comm: syz.1.592 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 318.834436][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.834454][ T9197] Call Trace: [ 318.834463][ T9197] [ 318.834475][ T9197] dump_stack_lvl+0x16c/0x1f0 [ 318.834509][ T9197] should_fail_ex+0x512/0x640 [ 318.834549][ T9197] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 318.834583][ T9197] should_failslab+0xc2/0x120 [ 318.834614][ T9197] __kmalloc_cache_noprof+0x6a/0x3e0 [ 318.834640][ T9197] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 318.834670][ T9197] ? trace_kmalloc+0x2b/0xd0 [ 318.834706][ T9197] vb2_vmalloc_alloc+0xf9/0x3f0 [ 318.834737][ T9197] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 318.834766][ T9197] __vb2_queue_alloc+0x8c9/0x1280 [ 318.834809][ T9197] vb2_core_reqbufs+0xa90/0xfe0 [ 318.834843][ T9197] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 318.834889][ T9197] __vb2_init_fileio+0x3f1/0x1100 [ 318.834916][ T9197] ? __mutex_lock+0x1c2/0x1070 [ 318.834948][ T9197] __vb2_perform_fileio+0x9c2/0x1660 [ 318.834986][ T9197] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 318.835025][ T9197] vb2_fop_write+0x207/0x3f0 [ 318.835055][ T9197] v4l2_write+0x226/0x360 [ 318.835091][ T9197] ? __pfx_v4l2_write+0x10/0x10 [ 318.835122][ T9197] vfs_write+0x2a0/0x1150 [ 318.835153][ T9197] ? __pfx_vfs_write+0x10/0x10 [ 318.835174][ T9197] ? find_held_lock+0x2b/0x80 [ 318.835196][ T9197] ? __fget_files+0x204/0x3c0 [ 318.835223][ T9197] ? __fget_files+0x20e/0x3c0 [ 318.835254][ T9197] ksys_write+0x12a/0x250 [ 318.835277][ T9197] ? __pfx_ksys_write+0x10/0x10 [ 318.835320][ T9197] do_syscall_64+0xcd/0x490 [ 318.835345][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.835373][ T9197] RIP: 0033:0x7fad2d98e9a9 [ 318.835392][ T9197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.835415][ T9197] RSP: 002b:00007fad2e78a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.835437][ T9197] RAX: ffffffffffffffda RBX: 00007fad2dbb5fa0 RCX: 00007fad2d98e9a9 [ 318.835452][ T9197] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000b [ 318.835465][ T9197] RBP: 00007fad2da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 318.835478][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.835491][ T9197] R13: 0000000000000000 R14: 00007fad2dbb5fa0 R15: 00007ffe5e8c8d28 [ 318.835524][ T9197] [ 322.596819][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.603211][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.391885][ T9304] could not allocate digest TFM handle [ 324.526638][ T9312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 324.883820][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 327.205951][ T9367] could not allocate digest TFM handle [ 328.050713][ T9381] could not allocate digest TFM handle [ 329.434628][ T9419] random: crng reseeded on system resumption [ 330.636714][ T9424] could not allocate digest TFM handle [ 336.982941][ T9536] could not allocate digest TFM handle binfmt_misc [ 338.542333][ T9572] could not allocate digest TFM handle binfmt_misc [ 338.763934][ T9603] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.770559][ T9603] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 341.062561][ T6510] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 344.306194][ T9732] [U] - [ 344.319772][ T9732] [U] [ 344.422253][ T9732] [U] [ 346.650914][ T9779] ERROR: Out of memory at tomoyo_memory_ok. [ 346.657605][ T9779] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/197/file0' not defined. [ 347.980275][ T9786] could not allocate digest TFM handle binfmt_misc [ 348.190521][ T9783] ERROR: Out of memory at tomoyo_memory_ok. [ 349.003956][ T9817] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 349.455262][ T9820] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 350.939224][ T9843] could not allocate digest TFM handle binfmt_misc [ 353.651740][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 355.351631][ T9935] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 355.437442][ T9937] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 355.481136][ T9939] ERROR: Out of memory at tomoyo_memory_ok. [ 356.929466][ T9943] could not allocate digest TFM handle binfmt_misc [ 357.660384][ T9967] could not allocate digest TFM handle binfmt_misc [ 358.865245][T10011] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 363.957215][T10100] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 364.124412][T10102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 364.472482][T10094] could not allocate digest TFM handle binfmt_misc [ 365.814480][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 366.588744][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 367.319362][T10170] ERROR: Out of memory at tomoyo_memory_ok. [ 369.394418][T10199] could not allocate digest TFM handle binfmt_misc [ 370.696716][T10238] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 372.040702][T10242] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 375.383746][T10341] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 375.390843][T10341] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 375.785050][T10336] FAULT_INJECTION: forcing a failure. [ 375.785050][T10336] name fail_futex, interval 1, probability 0, space 0, times 0 [ 375.849518][T10336] CPU: 1 UID: 0 PID: 10336 Comm: syz.1.813 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 375.849546][T10336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.849556][T10336] Call Trace: [ 375.849563][T10336] [ 375.849569][T10336] dump_stack_lvl+0x16c/0x1f0 [ 375.849592][T10336] should_fail_ex+0x512/0x640 [ 375.849622][T10336] get_futex_key+0x1d0/0x1540 [ 375.849645][T10336] ? __pfx_get_futex_key+0x10/0x10 [ 375.849665][T10336] ? __up_read+0x1f8/0x750 [ 375.849700][T10336] futex_wake+0xea/0x530 [ 375.849726][T10336] ? __pfx_futex_wake+0x10/0x10 [ 375.849755][T10336] ? up_write+0x1b2/0x520 [ 375.849784][T10336] do_futex+0x1e3/0x350 [ 375.849805][T10336] ? __pfx_do_futex+0x10/0x10 [ 375.849833][T10336] __x64_sys_futex+0x1e0/0x4c0 [ 375.849857][T10336] ? __pfx___x64_sys_futex+0x10/0x10 [ 375.849877][T10336] ? ksys_mmap_pgoff+0x85/0x5c0 [ 375.849903][T10336] ? xfd_validate_state+0x61/0x180 [ 375.849927][T10336] ? __pfx_ksys_write+0x10/0x10 [ 375.849951][T10336] do_syscall_64+0xcd/0x490 [ 375.849970][T10336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.849987][T10336] RIP: 0033:0x7fad2d98e9a9 [ 375.850001][T10336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.850018][T10336] RSP: 002b:00007fad2e7480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 375.850035][T10336] RAX: ffffffffffffffda RBX: 00007fad2dbb6168 RCX: 00007fad2d98e9a9 [ 375.850046][T10336] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fad2dbb616c [ 375.850056][T10336] RBP: 00007fad2dbb6160 R08: 00007fad2e78b000 R09: 0000000000000000 [ 375.850066][T10336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad2dbb616c [ 375.850076][T10336] R13: 0000000000000000 R14: 00007ffe5e8c8c40 R15: 00007ffe5e8c8d28 [ 375.850097][T10336] [ 376.309472][T10336] zswap: compressor not available [ 376.730810][T10362] could not allocate digest TFM handle binfmt_misc [ 377.597721][T10383] FAULT_INJECTION: forcing a failure. [ 377.597721][T10383] name failslab, interval 1, probability 0, space 0, times 0 [ 377.628339][T10383] CPU: 1 UID: 0 PID: 10383 Comm: syz.1.823 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 377.628367][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.628377][T10383] Call Trace: [ 377.628384][T10383] [ 377.628391][T10383] dump_stack_lvl+0x16c/0x1f0 [ 377.628413][T10383] should_fail_ex+0x512/0x640 [ 377.628447][T10383] ? __kmalloc_noprof+0xbf/0x510 [ 377.628469][T10383] ? ima_write_template_field_data+0x5d/0x1f0 [ 377.628496][T10383] should_failslab+0xc2/0x120 [ 377.628520][T10383] __kmalloc_noprof+0xd2/0x510 [ 377.628546][T10383] ima_write_template_field_data+0x5d/0x1f0 [ 377.628615][T10383] ima_eventname_init_common+0x1b8/0x260 [ 377.628645][T10383] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 377.628680][T10383] ? trace_kmalloc+0x2b/0xd0 [ 377.628705][T10383] ? __kmalloc_noprof+0x242/0x510 [ 377.628730][T10383] ima_alloc_init_template+0x3a0/0x720 [ 377.628756][T10383] ? rcu_is_watching+0x12/0xc0 [ 377.628775][T10383] ima_store_measurement+0x1eb/0x5c0 [ 377.628801][T10383] ? __pfx_ima_store_measurement+0x10/0x10 [ 377.628825][T10383] ? vfs_getxattr_alloc+0xec/0x340 [ 377.628849][T10383] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 377.628872][T10383] process_measurement+0x1ddb/0x23e0 [ 377.628900][T10383] ? __mutex_trylock_common+0xe9/0x250 [ 377.628923][T10383] ? __pfx_process_measurement+0x10/0x10 [ 377.628945][T10383] ? __pfx___might_resched+0x10/0x10 [ 377.628964][T10383] ? rcu_is_watching+0x12/0xc0 [ 377.628982][T10383] ? tracing_check_open_get_tr.part.0+0xad/0x130 [ 377.629026][T10383] ? tracing_check_open_get_tr.part.0+0xb2/0x130 [ 377.629049][T10383] ? inode_to_bdi+0x9e/0x160 [ 377.629075][T10383] ima_file_check+0xc5/0x110 [ 377.629095][T10383] ? __pfx_ima_file_check+0x10/0x10 [ 377.629121][T10383] security_file_post_open+0x8e/0x210 [ 377.629150][T10383] path_openat+0x1404/0x2cb0 [ 377.629176][T10383] ? __pfx_path_openat+0x10/0x10 [ 377.629196][T10383] ? __lock_acquire+0xb8a/0x1c90 [ 377.629220][T10383] do_filp_open+0x20b/0x470 [ 377.629239][T10383] ? __pfx_do_filp_open+0x10/0x10 [ 377.629274][T10383] ? alloc_fd+0x471/0x7d0 [ 377.629297][T10383] do_sys_openat2+0x11b/0x1d0 [ 377.629322][T10383] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.629355][T10383] __x64_sys_openat+0x174/0x210 [ 377.629381][T10383] ? __pfx___x64_sys_openat+0x10/0x10 [ 377.629415][T10383] do_syscall_64+0xcd/0x490 [ 377.629442][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.629460][T10383] RIP: 0033:0x7fad2d98e9a9 [ 377.629475][T10383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.629492][T10383] RSP: 002b:00007fad2e78a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.629510][T10383] RAX: ffffffffffffffda RBX: 00007fad2dbb5fa0 RCX: 00007fad2d98e9a9 [ 377.629522][T10383] RDX: 0000000000080100 RSI: 0000200000008140 RDI: ffffffffffffff9c [ 377.629532][T10383] RBP: 00007fad2da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 377.629543][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.629553][T10383] R13: 0000000000000000 R14: 00007fad2dbb5fa0 R15: 00007ffe5e8c8d28 [ 377.629576][T10383] [ 377.629744][ T30] audit: type=1804 audit(4294975125.405:7): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.823" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb" dev="tracefs" ino=83 res=0 errno=0 [ 381.238519][T10437] could not allocate digest TFM handle binfmt_misc [ 381.288116][T10456] vivid-007: ================= START STATUS ================= [ 381.319097][T10456] vivid-007: Generate PTS: true [ 381.324415][T10456] vivid-007: Generate SCR: true [ 381.434641][T10456] tpg source WxH: 320x240 (Y'CbCr) [ 381.653935][T10456] tpg field: 1 [ 381.661969][T10456] tpg crop: (0,0)/320x240 [ 381.674260][T10456] tpg compose: (0,0)/320x240 [ 381.679784][T10456] tpg colorspace: 8 [ 381.683820][T10456] tpg transfer function: 0/0 [ 381.691960][T10456] tpg Y'CbCr encoding: 0/0 [ 381.706213][T10456] tpg quantization: 0/0 [ 381.711230][T10456] tpg RGB range: 0/2 [ 381.735340][T10456] vivid-007: ================== END STATUS ================== [ 382.386300][T10473] could not allocate digest TFM handle binfmt_misc [ 383.344319][T10502] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 384.008291][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.015110][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.140251][T10512] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 384.618315][T10503] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 385.350935][T10520] could not allocate digest TFM handle binfmt_misc [ 385.475604][T10541] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 385.482713][T10541] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 385.669621][T10536] could not allocate digest TFM handle binfmt_misc [ 385.957823][T10545] could not allocate digest TFM handle binfmt_misc [ 388.165381][T10613] could not allocate digest TFM handle binfmt_misc [ 388.563653][T10618] could not allocate digest TFM handle binfmt_misc [ 388.764144][T10628] Invalid ELF header magic: != ELF [ 390.626414][T10651] could not allocate digest TFM handle binfmt_misc [ 391.225515][T10669] could not allocate digest TFM handle binfmt_misc [ 391.468582][T10685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.879'. [ 393.038297][T10717] busy [ 393.795065][T10732] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 393.802360][T10732] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 393.978522][T10723] could not allocate digest TFM handle binfmt_misc [ 394.502625][T10745] could not allocate digest TFM handle binfmt_misc [ 394.836323][T10763] FAULT_INJECTION: forcing a failure. [ 394.836323][T10763] name failslab, interval 1, probability 0, space 0, times 0 [ 394.868194][T10763] CPU: 0 UID: 0 PID: 10763 Comm: syz.1.894 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 394.868223][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.868233][T10763] Call Trace: [ 394.868240][T10763] [ 394.868247][T10763] dump_stack_lvl+0x16c/0x1f0 [ 394.868270][T10763] should_fail_ex+0x512/0x640 [ 394.868296][T10763] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 394.868318][T10763] should_failslab+0xc2/0x120 [ 394.868343][T10763] __kmalloc_cache_noprof+0x6a/0x3e0 [ 394.868360][T10763] ? lockdep_init_map_type+0x5c/0x280 [ 394.868384][T10763] ? nci_hci_allocate+0x45/0x330 [ 394.868404][T10763] nci_hci_allocate+0x45/0x330 [ 394.868421][T10763] nci_allocate_device+0x26f/0x430 [ 394.868447][T10763] virtual_ncidev_open+0x6f/0x220 [ 394.868466][T10763] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 394.868492][T10763] misc_open+0x35d/0x420 [ 394.868511][T10763] ? __pfx_misc_open+0x10/0x10 [ 394.868530][T10763] chrdev_open+0x234/0x6a0 [ 394.868551][T10763] ? __pfx_apparmor_file_open+0x10/0x10 [ 394.868568][T10763] ? __pfx_chrdev_open+0x10/0x10 [ 394.868591][T10763] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 394.868615][T10763] do_dentry_open+0x744/0x1c10 [ 394.868635][T10763] ? __pfx_chrdev_open+0x10/0x10 [ 394.868660][T10763] vfs_open+0x82/0x3f0 [ 394.868686][T10763] path_openat+0x1de4/0x2cb0 [ 394.868713][T10763] ? __pfx_path_openat+0x10/0x10 [ 394.868732][T10763] ? __lock_acquire+0xb8a/0x1c90 [ 394.868756][T10763] do_filp_open+0x20b/0x470 [ 394.868775][T10763] ? __pfx_do_filp_open+0x10/0x10 [ 394.868810][T10763] ? alloc_fd+0x471/0x7d0 [ 394.868833][T10763] do_sys_openat2+0x11b/0x1d0 [ 394.868858][T10763] ? __pfx_do_sys_openat2+0x10/0x10 [ 394.868891][T10763] __x64_sys_openat+0x174/0x210 [ 394.868916][T10763] ? __pfx___x64_sys_openat+0x10/0x10 [ 394.868951][T10763] do_syscall_64+0xcd/0x490 [ 394.868970][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.868987][T10763] RIP: 0033:0x7fad2d98e9a9 [ 394.869002][T10763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.869018][T10763] RSP: 002b:00007fad2e769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.869036][T10763] RAX: ffffffffffffffda RBX: 00007fad2dbb6080 RCX: 00007fad2d98e9a9 [ 394.869047][T10763] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 394.869058][T10763] RBP: 00007fad2da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 394.869068][T10763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.869077][T10763] R13: 0000000000000000 R14: 00007fad2dbb6080 R15: 00007ffe5e8c8d28 [ 394.869099][T10763] [ 395.936552][T10780] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.943346][T10780] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 396.678919][T10788] raw_sendmsg: syz.2.898 forgot to set AF_INET. Fix it! [ 396.842948][T10797] could not allocate digest TFM handle binfmt_misc [ 397.992395][T10820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 399.306619][T10841] could not allocate digest TFM handle binfmt_misc [ 399.934912][T10858] could not allocate digest TFM handle binfmt_misc [ 401.290038][T10893] could not allocate digest TFM handle binfmt_misc [ 401.884825][T10908] could not allocate digest TFM handle binfmt_misc [ 402.190403][T10929] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 402.405545][T10927] could not allocate digest TFM handle binfmt_misc [ 404.030430][T10931] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 404.875203][T10974] could not allocate digest TFM handle binfmt_misc [ 405.955555][T11003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.935'. [ 406.008418][T10988] could not allocate digest TFM handle binfmt_misc [ 406.398997][T11010] could not allocate digest TFM handle binfmt_misc [ 408.331241][T11047] could not allocate digest TFM handle binfmt_misc [ 408.679065][T11069] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 408.685608][T11069] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 408.758736][T11060] could not allocate digest TFM handle binfmt_misc [ 409.368844][T11092] ERROR: Out of memory at tomoyo_memory_ok. [ 410.664492][T11098] ERROR: Out of memory at tomoyo_memory_ok. [ 411.222167][T11114] random: crng reseeded on system resumption [ 413.018203][T11134] could not allocate digest TFM handle binfmt_misc [ 413.395009][T11164] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 414.174327][T11166] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 415.761521][T11194] could not allocate digest TFM handle binfmt_misc [ 417.949356][T11238] IPVS: length: 131 != 8 [ 418.373415][T11247] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 418.379964][T11247] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.471855][T11345] could not allocate digest TFM handle binfmt_misc [ 424.654256][T11394] could not allocate digest TFM handle binfmt_misc [ 425.138439][T11415] ERROR: Out of memory at tomoyo_memory_ok. [ 425.587523][T11401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 425.611647][T11401] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 425.807717][T11421] ERROR: Out of memory at tomoyo_memory_ok. [ 425.836233][T11401] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 426.128633][T11401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 426.135809][T11401] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 426.166555][T11401] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 426.176554][T11401] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 426.250338][T11401] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 426.277652][T11401] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 426.286400][T11401] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 426.354445][T11401] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 427.092619][T11450] could not allocate digest TFM handle binfmt_misc [ 427.676359][ T6510] Bluetooth: hci0: command 0x0406 tx timeout [ 428.321112][ T6510] Bluetooth: hci1: command 0x0406 tx timeout [ 428.327353][ T6510] Bluetooth: hci2: command 0x0406 tx timeout [ 428.333379][ T6047] Bluetooth: hci3: command 0x0406 tx timeout [ 429.756481][ T6047] Bluetooth: hci0: command 0x0406 tx timeout [ 430.399508][ T6510] Bluetooth: hci2: command 0x0406 tx timeout [ 430.405909][ T7553] Bluetooth: hci1: command 0x0406 tx timeout [ 430.416250][ T6047] Bluetooth: hci3: command 0x0406 tx timeout [ 431.854039][ T6047] Bluetooth: hci0: command 0x0406 tx timeout [ 432.478174][ T6047] Bluetooth: hci3: command 0x0406 tx timeout [ 432.484642][ T6510] Bluetooth: hci2: command 0x0406 tx timeout [ 432.954353][T11572] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.961160][T11572] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.044331][T11572] FAULT_INJECTION: forcing a failure. [ 433.044331][T11572] name failslab, interval 1, probability 0, space 0, times 0 [ 433.070217][T11572] CPU: 1 UID: 0 PID: 11572 Comm: syz.1.1053 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 433.070263][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.070281][T11572] Call Trace: [ 433.070292][T11572] [ 433.070304][T11572] dump_stack_lvl+0x16c/0x1f0 [ 433.070338][T11572] should_fail_ex+0x512/0x640 [ 433.070381][T11572] ? __kmalloc_noprof+0xbf/0x510 [ 433.070422][T11572] ? __vb2_queue_alloc+0x23e/0x1280 [ 433.070455][T11572] should_failslab+0xc2/0x120 [ 433.070495][T11572] __kmalloc_noprof+0xd2/0x510 [ 433.070532][T11572] ? bitmap_find_next_zero_area_off+0xb4/0xd0 [ 433.070578][T11572] __vb2_queue_alloc+0x23e/0x1280 [ 433.070615][T11572] ? __kmalloc_noprof+0x242/0x510 [ 433.070666][T11572] vb2_core_reqbufs+0xa90/0xfe0 [ 433.070712][T11572] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 433.070775][T11572] __vb2_init_fileio+0x3f1/0x1100 [ 433.070821][T11572] ? __mutex_lock+0x1c2/0x1070 [ 433.070854][T11572] ? __pfx___futex_wait+0x10/0x10 [ 433.070894][T11572] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 433.070945][T11572] __vb2_perform_fileio+0x9c2/0x1660 [ 433.070996][T11572] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 433.071048][T11572] vb2_fop_write+0x207/0x3f0 [ 433.071091][T11572] v4l2_write+0x226/0x360 [ 433.071138][T11572] ? __pfx_v4l2_write+0x10/0x10 [ 433.071188][T11572] vfs_write+0x2a0/0x1150 [ 433.071232][T11572] ? __pfx_vfs_write+0x10/0x10 [ 433.071260][T11572] ? find_held_lock+0x2b/0x80 [ 433.071302][T11572] ? __fget_files+0x204/0x3c0 [ 433.071342][T11572] ? __fget_files+0x20e/0x3c0 [ 433.071386][T11572] ksys_write+0x12a/0x250 [ 433.071419][T11572] ? __pfx_ksys_write+0x10/0x10 [ 433.071467][T11572] do_syscall_64+0xcd/0x490 [ 433.071502][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.071532][T11572] RIP: 0033:0x7fad2d98e9a9 [ 433.071558][T11572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.071586][T11572] RSP: 002b:00007fad2e78a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.071615][T11572] RAX: ffffffffffffffda RBX: 00007fad2dbb5fa0 RCX: 00007fad2d98e9a9 [ 433.071634][T11572] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 433.071651][T11572] RBP: 00007fad2da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 433.071668][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.071697][T11572] R13: 0000000000000000 R14: 00007fad2dbb5fa0 R15: 00007ffe5e8c8d28 [ 433.071739][T11572] [ 433.559896][T11578] usb usb24: usbfs: process 11578 (syz.3.1056) did not claim interface 0 before use [ 438.073505][T11657] could not allocate digest TFM handle binfmt_misc [ 444.248602][T11825] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 445.442554][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.449054][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.619348][T11828] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 448.519272][T11911] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 449.766948][T11914] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 450.389116][T11943] [ 450.391538][T11943] ====================================================== [ 450.398574][T11943] WARNING: possible circular locking dependency detected [ 450.405598][T11943] 6.16.0-syzkaller-08685-g260f6f4fda93 #0 Not tainted [ 450.412451][T11943] ------------------------------------------------------ [ 450.419557][T11943] syz.1.1134/11943 is trying to acquire lock: [ 450.425928][T11943] ffff888026112d28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 450.435376][T11943] [ 450.435376][T11943] but task is already holding lock: [ 450.442745][T11943] ffff8880261127e8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 450.454008][T11943] [ 450.454008][T11943] which lock already depends on the new lock. [ 450.454008][T11943] [ 450.464502][T11943] [ 450.464502][T11943] the existing dependency chain (in reverse order) is: [ 450.473733][T11943] [ 450.473733][T11943] -> #3 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 450.482363][T11943] blk_alloc_queue+0x619/0x760 [ 450.487664][T11943] blk_mq_alloc_queue+0x172/0x280 [ 450.493231][T11943] __blk_mq_alloc_disk+0x29/0x120 [ 450.498902][T11943] loop_add+0x490/0xb70 [ 450.503592][T11943] loop_init+0x164/0x270 [ 450.508610][T11943] do_one_initcall+0x120/0x6e0 [ 450.513997][T11943] kernel_init_freeable+0x5c2/0x900 [ 450.519822][T11943] kernel_init+0x1c/0x2b0 [ 450.524687][T11943] ret_from_fork+0x5d7/0x6f0 [ 450.529820][T11943] ret_from_fork_asm+0x1a/0x30 [ 450.535118][T11943] [ 450.535118][T11943] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 450.542349][T11943] fs_reclaim_acquire+0x102/0x150 [ 450.548098][T11943] prepare_alloc_pages+0x162/0x610 [ 450.553848][T11943] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 450.560274][T11943] __alloc_pages_noprof+0xb/0x1b0 [ 450.565876][T11943] pcpu_populate_chunk+0x110/0xb00 [ 450.571636][T11943] pcpu_alloc_noprof+0x86a/0x1470 [ 450.577288][T11943] bpf_map_alloc_percpu+0x9a/0x4b0 [ 450.583388][T11943] htab_map_alloc+0x10ca/0x1570 [ 450.588960][T11943] map_create+0x592/0x1db0 [ 450.594005][T11943] __sys_bpf+0x44d2/0x4de0 [ 450.599049][T11943] __x64_sys_bpf+0x78/0xc0 [ 450.604104][T11943] do_syscall_64+0xcd/0x490 [ 450.609148][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.615749][T11943] [ 450.615749][T11943] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 450.623519][T11943] __mutex_lock+0x191/0x1070 [ 450.628834][T11943] pcpu_alloc_noprof+0xb4c/0x1470 [ 450.634393][T11943] sbitmap_init_node+0x2fd/0x770 [ 450.639949][T11943] sbitmap_queue_init_node+0x41/0x560 [ 450.646141][T11943] blk_mq_init_tags+0x12d/0x2b0 [ 450.651540][T11943] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 450.657892][T11943] blk_mq_init_sched+0x30c/0x610 [ 450.663575][T11943] elevator_switch+0x1e1/0x7f0 [ 450.669130][T11943] elevator_change+0x2ac/0x400 [ 450.674426][T11943] elevator_set_default+0x2c4/0x360 [ 450.680417][T11943] blk_register_queue+0x393/0x4f0 [ 450.686143][T11943] __add_disk+0x74a/0xf00 [ 450.691186][T11943] add_disk_fwnode+0x13f/0x5d0 [ 450.696672][T11943] nbd_dev_add+0x783/0xbb0 [ 450.701665][T11943] nbd_init+0x181/0x320 [ 450.706444][T11943] do_one_initcall+0x120/0x6e0 [ 450.712015][T11943] kernel_init_freeable+0x5c2/0x900 [ 450.717837][T11943] kernel_init+0x1c/0x2b0 [ 450.722796][T11943] ret_from_fork+0x5d7/0x6f0 [ 450.728012][T11943] ret_from_fork_asm+0x1a/0x30 [ 450.733322][T11943] [ 450.733322][T11943] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 450.741337][T11943] __lock_acquire+0x126f/0x1c90 [ 450.746906][T11943] lock_acquire+0x179/0x350 [ 450.752032][T11943] __mutex_lock+0x191/0x1070 [ 450.757150][T11943] elevator_change+0x103/0x400 [ 450.762692][T11943] elv_iosched_store+0x2eb/0x3a0 [ 450.768346][T11943] queue_attr_store+0x268/0x310 [ 450.773830][T11943] sysfs_kf_write+0xef/0x150 [ 450.779136][T11943] kernfs_fop_write_iter+0x351/0x510 [ 450.785225][T11943] vfs_write+0x6c7/0x1150 [ 450.790169][T11943] ksys_write+0x12a/0x250 [ 450.795048][T11943] do_syscall_64+0xcd/0x490 [ 450.800111][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.806629][T11943] [ 450.806629][T11943] other info that might help us debug this: [ 450.806629][T11943] [ 450.817292][T11943] Chain exists of: [ 450.817292][T11943] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 450.817292][T11943] [ 450.831161][T11943] Possible unsafe locking scenario: [ 450.831161][T11943] [ 450.838801][T11943] CPU0 CPU1 [ 450.844177][T11943] ---- ---- [ 450.849638][T11943] lock(&q->q_usage_counter(io)#18); [ 450.855202][T11943] lock(fs_reclaim); [ 450.861798][T11943] lock(&q->q_usage_counter(io)#18); [ 450.869791][T11943] lock(&q->elevator_lock); [ 450.874392][T11943] [ 450.874392][T11943] *** DEADLOCK *** [ 450.874392][T11943] [ 450.882623][T11943] 7 locks held by syz.1.1134/11943: [ 450.887825][T11943] #0: ffff888029bd69b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 450.897425][T11943] #1: ffff8880468c0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 450.906522][T11943] #2: ffff88805bbcc488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 450.916776][T11943] #3: ffff888142f30e18 (kn->active#143){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 450.927013][T11943] #4: ffff888026127368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 450.937724][T11943] #5: ffff8880261127e8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 450.949628][T11943] #6: ffff888026112820 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 450.961842][T11943] [ 450.961842][T11943] stack backtrace: [ 450.967834][T11943] CPU: 0 UID: 0 PID: 11943 Comm: syz.1.1134 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 450.967863][T11943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.967876][T11943] Call Trace: [ 450.967884][T11943] [ 450.967893][T11943] dump_stack_lvl+0x116/0x1f0 [ 450.967917][T11943] print_circular_bug+0x275/0x350 [ 450.967946][T11943] check_noncircular+0x14c/0x170 [ 450.967976][T11943] __lock_acquire+0x126f/0x1c90 [ 450.968008][T11943] lock_acquire+0x179/0x350 [ 450.968034][T11943] ? elevator_change+0x103/0x400 [ 450.968058][T11943] ? __pfx___might_resched+0x10/0x10 [ 450.968081][T11943] ? elevator_change+0x103/0x400 [ 450.968103][T11943] __mutex_lock+0x191/0x1070 [ 450.968124][T11943] ? elevator_change+0x103/0x400 [ 450.968148][T11943] ? __pfx___mutex_lock+0x10/0x10 [ 450.968172][T11943] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 450.968203][T11943] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 450.968237][T11943] ? elevator_change+0x103/0x400 [ 450.968258][T11943] elevator_change+0x103/0x400 [ 450.968282][T11943] elv_iosched_store+0x2eb/0x3a0 [ 450.968306][T11943] ? __pfx_elv_iosched_store+0x10/0x10 [ 450.968335][T11943] ? __mutex_trylock_common+0xe9/0x250 [ 450.968363][T11943] ? __pfx_elv_iosched_store+0x10/0x10 [ 450.968388][T11943] queue_attr_store+0x268/0x310 [ 450.968422][T11943] ? __pfx_queue_attr_store+0x10/0x10 [ 450.968454][T11943] ? __lock_acquire+0x622/0x1c90 [ 450.968486][T11943] ? find_held_lock+0x2b/0x80 [ 450.968507][T11943] ? sysfs_file_kobj+0xe4/0x290 [ 450.968529][T11943] ? __pfx_queue_attr_store+0x10/0x10 [ 450.968562][T11943] sysfs_kf_write+0xef/0x150 [ 450.968583][T11943] kernfs_fop_write_iter+0x351/0x510 [ 450.968615][T11943] ? __pfx_sysfs_kf_write+0x10/0x10 [ 450.968636][T11943] vfs_write+0x6c7/0x1150 [ 450.968659][T11943] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 450.968693][T11943] ? __pfx___mutex_lock+0x10/0x10 [ 450.968713][T11943] ? __pfx_vfs_write+0x10/0x10 [ 450.968743][T11943] ksys_write+0x12a/0x250 [ 450.968771][T11943] ? __pfx_ksys_write+0x10/0x10 [ 450.968797][T11943] do_syscall_64+0xcd/0x490 [ 450.968818][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.968841][T11943] RIP: 0033:0x7fad2d98e9a9 [ 450.968859][T11943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.968881][T11943] RSP: 002b:00007fad2e78a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.968901][T11943] RAX: ffffffffffffffda RBX: 00007fad2dbb5fa0 RCX: 00007fad2d98e9a9 [ 450.968915][T11943] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000003 [ 450.968929][T11943] RBP: 00007fad2da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 450.968942][T11943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.968956][T11943] R13: 0000000000000000 R14: 00007fad2dbb5fa0 R15: 00007ffe5e8c8d28 [ 450.968975][T11943]