last executing test programs: 7.732396177s ago: executing program 1 (id=333): statx$auto(0xffffffffffffffff, 0x0, 0x2001003, 0x4005, 0x0) read$auto_snd_timer_f_ops_timer(0xffffffffffffffff, &(0x7f00000000c0)=""/169, 0xa9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x1ab101, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30008891}, 0xc040810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) 7.266385432s ago: executing program 0 (id=334): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80300, 0x0) socket(0x1d, 0x2, 0x2) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x2001, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x40000, 0x0) read$auto(r1, 0x0, 0x100000000) write$auto(r0, 0x0, 0x44) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x2, 0x4) setsockopt$auto(r4, 0x104000000000010e, 0x1, 0x0, 0x16) read$auto_proc_page_owner_threshold_(r0, &(0x7f0000000300)=""/75, 0x4b) 6.609230188s ago: executing program 1 (id=336): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) unshare$auto(0x40000080) unshare$auto(0x7fffffff) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x1, 0x16, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(0x0, 0x0) wait4$auto(0x0, 0x0, 0x8, 0x0) r0 = getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 6.191637741s ago: executing program 0 (id=338): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) r0 = semctl$auto(0x7, 0x5, 0x0, 0x6) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800c000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="80050000", @ANYRESDEC=r0, @ANYBLOB="02002bbd7000fcdbdf25010000000400e2000000002000328005000300020000000500030002000000040005000800040000000000000be24c183fde5b9d4eaa60152c220b90f9370ed909cb387efd44283302b1f53dcde4e9bc252c784fea90af25c968b063e49d0c7166e007d16e", @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRESHEX=r0], 0x580}, 0x1, 0x0, 0x0, 0x60008810}, 0x20000040) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(r1, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00', 0x7, 0x3) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid$auto(r2) sched_getattr$auto(r3, &(0x7f0000000000)={0x5, 0x80000001, 0x2, 0xc19, 0x1, 0x0, 0xfffffffffffffff8, 0x4, 0xfff, 0x1}, 0xfff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 4.585168513s ago: executing program 3 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r1, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) (fail_nth: 8) 4.43384586s ago: executing program 0 (id=344): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000400)='/l\x04\x1f\xf9\x9a !\xac\r\x95\x19', 0x100000a3d7) close_range$auto(0x2, 0xa, 0x0) 4.421669016s ago: executing program 3 (id=345): statx$auto(0xffffffffffffffff, 0x0, 0x2001003, 0x4005, 0x0) read$auto_snd_timer_f_ops_timer(0xffffffffffffffff, &(0x7f00000000c0)=""/169, 0xa9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x1ab101, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x30008891}, 0xc040810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) 3.468076623s ago: executing program 3 (id=348): capset$auto(0x0, 0x0) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x6, 0x5, "a2b8e85fc56865ba529faa000000000000000000000018f4ffffdeffff0000000000c7692a240000008000", @inferred=0xffffffffffffffff}, 0x6, 0x0, 0x7, @inferred, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050727bd7000fbdbdf25670000000502000140000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x143402, 0x0) 3.31222804s ago: executing program 0 (id=349): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) poll$auto(&(0x7f0000000380)={r0, 0x3, 0x7}, 0x80, 0xfffffff9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x5, 0x4020009, 0x4005f, 0x11, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x1000) r3 = io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$auto_FS_IOC_SET_ENCRYPTION_POLICY2(r3, 0x800c6613, 0x0) writev$auto(0x3, 0x0, 0xc) mmap$auto(0xfffffd, 0x2, 0x9, 0xeb1, 0xffffffffffffffff, 0x2) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r2, 0x1, 0xf, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) bind$auto(r0, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 0x7}, 0x72) socket(0x38, 0x3, 0x2000) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x400000, 0x7, 0x19b72, 0x5, 0x35023515) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1p\x00', 0x51b405, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000480)="f21a9a3c5c2d006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c76eed1672bb713aca465c9bbc23b50000000000000004c635fcd1410f37152ad1f7fa09270ce98f867fefbe147095e2928c0a5c516842c879c1d95cb259d6f9d41f61ca07abf17751e78a05499207ce", 0x75) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3, r4}) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) 2.8679298s ago: executing program 1 (id=351): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x2, 0x0) socket(0x2a, 0x2, 0x1) bind$auto(0x3, 0x0, 0x6b) sendmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x5}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x21e}, 0x7, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x7fffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000006c0)="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") r2 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim4/psample/out_tc\x00', 0x210000, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r2, 0x6, &(0x7f0000000580)={@_si_pad}, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2.610324792s ago: executing program 1 (id=353): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) madvise$auto(0x800000000000002, 0xffffff7fffff0004, 0x19) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x10442, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x6, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x7, 0x7ffffeffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000300)="0000e3813213b2008949", 0xa) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x24, 0xfffffffffffffffc, 0x0) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1, 0x0) shmget$auto(0x0, 0xfffffffffeffffdf, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) io_setup$auto(0x80000000, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000001600)="7d0ac4e5176e5e1c9ef1bd18f438120d9aa5beaac771c0384053af11bdf0231a450c4c67d2227d8c3631bbe16af0430d3b96204d3f630922f4c0f8dce895c683480c4a59b4ab26a8fe7bd69d6c8bfdf11f34673a2b57a3ba11fd93973f1eacbaa1181382c9f460", 0x9, 0x0, 0x0, 0x0, 0x8bed, 0xb}, 0x764}, 0xfffffffa, 0xc, 0x0) shmget$auto(0x80, 0xffff, 0x1) write$auto(0x3, 0x0, 0xfffffdef) 2.484570183s ago: executing program 3 (id=354): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x7c040, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af23, r0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) (async) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) r3 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) r4 = ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000200)=0x30) close_range$auto(r3, r4, 0x9) (async) close_range$auto(r3, r4, 0x9) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x366}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x800) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/set_event\x00', 0x34000, 0x0) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/set_event\x00', 0x34000, 0x0) 2.296681843s ago: executing program 3 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x50800, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r4, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) sendfile$auto(r5, r5, 0x0, 0x4f64a1d2) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x189040, 0x0) ioctl$auto(r6, 0x5646, r6) mmap$auto(0xa, 0x80000001, 0x80000000, 0xfffffffffffffff7, r5, 0x7) io_uring_setup$auto(0x6, 0x0) read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f00000000c0)=""/14, 0xe) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x5) ioctl$auto(r7, 0x4004af07, r7) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000140)={0x14, r1, 0xc, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x5) setitimer$auto_ITIMER_VIRTUAL(0x1, 0x0, 0x0) unshare$auto(0x40000080) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x40042, 0x0) sendfile$auto(r8, r8, 0x0, 0x1) 2.253973193s ago: executing program 0 (id=356): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="143742000b42587f2dc56a95cf4d9ce6bf1079b2c4f09ee06468a340f23079dc39fe62406bcc0714834a7d22a3e5d0ed7b2610201bf09ffded1190abb13515e8c7f03948759b3654d371333436218d9e0d1b9e141875a3cc9e6c6dd84e1bb665934bdf5a2b8737ebd836fbd0d1a9b8e99512075ec910885eb3650d43071e702299f8d2e7febc2ea9cd87f3022f0b5d2527024575c0b730fcffad6bda055109b6d9cebc20d449f9ed22fd78502fb51f68a2e4e14021e3bd985fc4525c05c9", @ANYRES16=r1, @ANYBLOB="01042bbd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x240018d0) r2 = socket(0x9, 0x2, 0xc) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) mmap$auto(0x0, 0x2000f, 0x4000000000df, 0xeb1, 0x404, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) (async) fsopen$auto(0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) socket(0x23, 0x3, 0x0) syslog$auto(0x4, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ptp/ptp0/n_alarms\x00', 0x42080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000240)=""/217, 0x115) 2.203975057s ago: executing program 2 (id=357): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x300) pwrite64$auto(0xc8, 0x0, 0x4c, 0x2) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000009, 0xa505}, 0x800}, 0xd5e7, 0x4008) r0 = socket(0x1f, 0x3, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4c041) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x42100, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc040) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xf2\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2.014839398s ago: executing program 0 (id=358): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x121002, 0x0) unshare$auto(0x40000080) socket(0x28, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/usb/drivers/iguanair/remove_id\x00', 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0xffffffffffffff80, 0x20009, 0xa3, 0xeb1, r3, 0x7ffc) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x8, 0x20005, 0x4000000000df, 0x11, r2, 0x7fff) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}}) socket(0xa, 0x3, 0x3a) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='7\x00\xa5\xa0\x04|\x02\xcb\xfa{\xa6\xb3\x03tv\x1b\xac\x96\x94q\xfd\xac\xe3\xcf:\x02E\xea\xe51s\x17\xb7t\xe7\xbbi\xa7\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xce\xc1\x1a\xbe0\'\x03\xcdb\x93\xaa\x92\xc2+\x95)|\xac\x05~\x02\x00\x00\x00\x00\x00\x00#\xeaQ\x98\x83e\x00\x00\x00\x00\x00\x00', 0x9a5f) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={r4, 0x1ff, 0x7fa, 0x100004, 0x9, 0x7, 0x7ff, 0x20010192}, 0x98) mmap$auto(0x9, 0x20009, 0x1, 0xeb1, r1, 0x8004) write$auto(0xffffffffffffffff, &(0x7f0000000140)='0[.[\x00', 0xcd04) 1.930723266s ago: executing program 3 (id=359): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) unshare$auto(0x40000080) unshare$auto(0x7fffffff) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x1, 0x16, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(0x0, 0x0) wait4$auto(0x0, 0x0, 0x8, 0x0) r0 = getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 1.870927136s ago: executing program 2 (id=360): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x2, 0x0) socket(0x2a, 0x2, 0x1) bind$auto(0x3, 0x0, 0x6b) sendmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x5}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x21e}, 0x7, 0x0) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000006c0)="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") pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r3, 0x6, &(0x7f0000000580)={@_si_pad}, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xad\x9eE\\\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 1.625679372s ago: executing program 2 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r1, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0xf000, 0x0, 0x4801}, 0x8080) 1.463636983s ago: executing program 1 (id=362): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = socket(0x11, 0x5, 0x5) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) 1.389509538s ago: executing program 1 (id=363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub3/sw_params\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0xc, 0x1000) adjtimex$auto(&(0x7f0000000000)={0xffffeff0, 0x0, 0x7, 0x21f8, 0xe1d, 0x3, 0x3, 0x0, 0xfffffffffffffff7, 0x8, 0x80000000000, {0x5, 0x2}, 0x8000000252, 0x5, 0x400000003, 0x1, 0x0, 0x4, 0x9, 0xc578, 0x6, 0x400, 0x7ff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event2\x00', 0x840, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x20) read$auto(r3, 0x0, 0x1) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x3) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x40000108, 0x400, 0x9}]}) r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000640)='/dev/binderfs/binder0\x00', 0x22800, 0x0) mmap$auto(0x1e9f, 0x7fff, 0x8, 0xfffffffffffffff9, r7, 0x7fffffff) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$auto_BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01003fbd7000fcdbdf250b000000d1e8734a42fc564201267e0258f3a1160eba06ea80bdf53b5a89bf03fb3cdb2cb9c31f4618ead53443bd502258731099f3804f73b39e3fc7086cbf7f8afc48b8850ade22f103fca49d6121a45f9038a23c"], 0x14}}, 0x800) 1.365089614s ago: executing program 2 (id=364): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x2, 0x0) socket(0x2a, 0x2, 0x1) bind$auto(0x3, 0x0, 0x6b) sendmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x5}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x21e}, 0x7, 0x0) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000006c0)="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") pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r3, 0x6, &(0x7f0000000580)={@_si_pad}, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') (fail_nth: 9) 334.02113ms ago: executing program 2 (id=365): r0 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/features/extended_error\x00', 0x200200, 0x0) io_uring_register$auto_IORING_UNREGISTER_BUFFERS(r0, 0x1, &(0x7f0000000080)="edd78177f3bdbbfddf46ba654ac3c3ec1973976f98105a89d50305130e9f60c514e64366bbed52ced8d578902055a14aa654c3b24516831264d6413022befbc9b811f5da31e79f7eb15c92951fc84af9cebff1ebacf4d7eb6fa02a92ef103948b2c4a978d15da7809375cd25654609fc9b61471f131c8b1c8a265bd51c8b9ed2f6c84e56b3f80c54185c44eb68a121230017f376e56caa6dfb1f69a8f445239d08cc3f03c6e69eaa620ccde7bc1d461953", 0x10001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) io_uring_setup$auto(0x6, 0x0) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 2 (id=366): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/tx_lanes\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000500)=""/4096, 0x1000) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x1, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 90.390375][ T5824] cgroup: Unknown subsys name 'net' [ 90.527166][ T5824] cgroup: Unknown subsys name 'cpuset' [ 90.536726][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.627495][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.879905][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.888603][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.897323][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.905358][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.912831][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.923907][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.924217][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.942382][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.951517][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.959356][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.969713][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.973349][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.979747][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.003369][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.004390][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.019044][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.019190][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.033451][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.043872][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.051006][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.610825][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 95.650601][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 95.762504][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 95.898205][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.905899][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.913607][ T5837] bridge_slave_0: entered allmulticast mode [ 95.920783][ T5837] bridge_slave_0: entered promiscuous mode [ 95.955850][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 95.972311][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.979833][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.987735][ T5837] bridge_slave_1: entered allmulticast mode [ 95.995048][ T5837] bridge_slave_1: entered promiscuous mode [ 96.033937][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.041524][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.049189][ T5839] bridge_slave_0: entered allmulticast mode [ 96.056426][ T5839] bridge_slave_0: entered promiscuous mode [ 96.095611][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.103505][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.110698][ T5839] bridge_slave_1: entered allmulticast mode [ 96.118456][ T5839] bridge_slave_1: entered promiscuous mode [ 96.178278][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.222181][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.236454][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.248881][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.276918][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.284178][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.291319][ T5833] bridge_slave_0: entered allmulticast mode [ 96.300784][ T5833] bridge_slave_0: entered promiscuous mode [ 96.309105][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.317254][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.325220][ T5833] bridge_slave_1: entered allmulticast mode [ 96.332438][ T5833] bridge_slave_1: entered promiscuous mode [ 96.410926][ T5839] team0: Port device team_slave_0 added [ 96.420086][ T5837] team0: Port device team_slave_0 added [ 96.444789][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.468033][ T5839] team0: Port device team_slave_1 added [ 96.489140][ T5837] team0: Port device team_slave_1 added [ 96.502237][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.530536][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.539121][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.546702][ T5845] bridge_slave_0: entered allmulticast mode [ 96.555639][ T5845] bridge_slave_0: entered promiscuous mode [ 96.577864][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.585152][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.611503][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.650650][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.657913][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.665223][ T5845] bridge_slave_1: entered allmulticast mode [ 96.672547][ T5845] bridge_slave_1: entered promiscuous mode [ 96.680378][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.687632][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.714532][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.751942][ T5833] team0: Port device team_slave_0 added [ 96.793885][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.800870][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.828608][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.842001][ T5833] team0: Port device team_slave_1 added [ 96.869461][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.882773][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.912153][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.921037][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.947654][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.010335][ T5839] hsr_slave_0: entered promiscuous mode [ 97.016961][ T5156] Bluetooth: hci2: command tx timeout [ 97.025429][ T5839] hsr_slave_1: entered promiscuous mode [ 97.033234][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.040217][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.066250][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.093070][ T5156] Bluetooth: hci3: command tx timeout [ 97.095831][ T5845] team0: Port device team_slave_0 added [ 97.098702][ T5156] Bluetooth: hci0: command tx timeout [ 97.109933][ T5848] Bluetooth: hci1: command tx timeout [ 97.129668][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.136700][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.163078][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.190355][ T5845] team0: Port device team_slave_1 added [ 97.229790][ T5837] hsr_slave_0: entered promiscuous mode [ 97.236438][ T5837] hsr_slave_1: entered promiscuous mode [ 97.242670][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.250619][ T5837] Cannot create hsr debugfs directory [ 97.333133][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.340228][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.344651][ T9] cfg80211: failed to load regulatory.db [ 97.374168][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.434289][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.441274][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.467574][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.499657][ T5833] hsr_slave_0: entered promiscuous mode [ 97.506293][ T5833] hsr_slave_1: entered promiscuous mode [ 97.512562][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.520416][ T5833] Cannot create hsr debugfs directory [ 97.691722][ T5845] hsr_slave_0: entered promiscuous mode [ 97.699507][ T5845] hsr_slave_1: entered promiscuous mode [ 97.705897][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.713589][ T5845] Cannot create hsr debugfs directory [ 97.995652][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.009898][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.045576][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.076132][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.163946][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.194004][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.218070][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.239682][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.309586][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.336039][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.369822][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.398237][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.437248][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.450495][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.467714][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.478364][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.562448][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.632366][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.680848][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.688422][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.757335][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.764712][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.787764][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.832273][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.879006][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.900077][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.907305][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.936844][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.944023][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.998375][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.027803][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.097559][ T5156] Bluetooth: hci2: command tx timeout [ 99.107112][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.114325][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.139487][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.146650][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.171022][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.177890][ T5156] Bluetooth: hci3: command tx timeout [ 99.183887][ T5848] Bluetooth: hci1: command tx timeout [ 99.189401][ T5156] Bluetooth: hci0: command tx timeout [ 99.251280][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.258998][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.306168][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.313552][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.438750][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.667765][ T5839] veth0_vlan: entered promiscuous mode [ 99.719696][ T5839] veth1_vlan: entered promiscuous mode [ 99.869722][ T5839] veth0_macvtap: entered promiscuous mode [ 99.917729][ T5839] veth1_macvtap: entered promiscuous mode [ 99.970629][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.022198][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.042162][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.066543][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.080809][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.105984][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.115664][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.124978][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.135266][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.232649][ T5837] veth0_vlan: entered promiscuous mode [ 100.289527][ T5837] veth1_vlan: entered promiscuous mode [ 100.333772][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.341768][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.349935][ T5845] veth0_vlan: entered promiscuous mode [ 100.419651][ T5845] veth1_vlan: entered promiscuous mode [ 100.443175][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.445563][ T5837] veth0_macvtap: entered promiscuous mode [ 100.453425][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.475457][ T5833] veth0_vlan: entered promiscuous mode [ 100.486099][ T5837] veth1_macvtap: entered promiscuous mode [ 100.546365][ T5833] veth1_vlan: entered promiscuous mode [ 100.566809][ T5845] veth0_macvtap: entered promiscuous mode [ 100.589103][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.598407][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.637551][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.657863][ T5845] veth1_macvtap: entered promiscuous mode [ 100.715916][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.728009][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.738315][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.747418][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.795057][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.826089][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.862444][ T5927] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 100.870841][ T5833] veth0_macvtap: entered promiscuous mode [ 100.889468][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.901864][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.912330][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.924156][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.968607][ T5833] veth1_macvtap: entered promiscuous mode [ 101.150506][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.176920][ T5156] Bluetooth: hci2: command tx timeout [ 101.201858][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.220341][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.237262][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.247726][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.258571][ T5156] Bluetooth: hci0: command tx timeout [ 101.261574][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.264786][ T5848] Bluetooth: hci1: command tx timeout [ 101.271477][ T5846] Bluetooth: hci3: command tx timeout [ 101.277555][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.294745][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.490773][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.510112][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.623034][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.639172][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.680819][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.699067][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.763698][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.771592][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.819568][ T5934] syz.3.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.854955][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.876768][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.506446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.651148][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.653711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.671978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.873313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.074683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.223002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 103.243976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.252488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.260907][ T5846] Bluetooth: hci2: command tx timeout [ 103.261143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 103.340534][ T5846] Bluetooth: hci3: command tx timeout [ 103.340917][ T5156] Bluetooth: hci0: command tx timeout [ 103.355265][ T5848] Bluetooth: hci1: command tx timeout [ 103.783510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.104076][ T5978] ubi0: attaching mtd0 [ 104.117192][ T5978] ubi0: scanning is finished [ 104.192974][ T5978] ubi0: empty MTD device detected [ 105.011086][ T5978] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 105.032049][ T5978] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 105.042217][ T5978] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 105.049496][ T5978] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 105.057210][ T5978] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 105.064196][ T5978] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 105.073356][ T5978] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2915504769 [ 105.083511][ T5978] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 105.109400][ T5983] ubi0: background thread "ubi_bgt0d" started, PID 5983 [ 105.846471][ T5990] FAULT_INJECTION: forcing a failure. [ 105.846471][ T5990] name failslab, interval 1, probability 0, space 0, times 1 [ 105.889386][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: syz.2.15 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 105.889429][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.889446][ T5990] Call Trace: [ 105.889456][ T5990] [ 105.889467][ T5990] dump_stack_lvl+0x16c/0x1f0 [ 105.889517][ T5990] should_fail_ex+0x512/0x640 [ 105.889555][ T5990] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 105.889604][ T5990] should_failslab+0xc2/0x120 [ 105.889631][ T5990] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 105.889676][ T5990] ? security_file_alloc+0x34/0x2b0 [ 105.889717][ T5990] security_file_alloc+0x34/0x2b0 [ 105.889754][ T5990] init_file+0x93/0x4c0 [ 105.889783][ T5990] alloc_empty_file+0x73/0x1e0 [ 105.889815][ T5990] path_openat+0xda/0x2cb0 [ 105.889852][ T5990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.889898][ T5990] ? __pfx_path_openat+0x10/0x10 [ 105.889942][ T5990] ? __lock_acquire+0xb8a/0x1c90 [ 105.889985][ T5990] do_filp_open+0x20b/0x470 [ 105.890027][ T5990] ? __pfx_do_filp_open+0x10/0x10 [ 105.890097][ T5990] ? alloc_fd+0x471/0x7d0 [ 105.890147][ T5990] do_sys_openat2+0x11b/0x1d0 [ 105.890176][ T5990] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.890223][ T5990] __x64_sys_openat+0x174/0x210 [ 105.890256][ T5990] ? __pfx___x64_sys_openat+0x10/0x10 [ 105.890321][ T5990] do_syscall_64+0xcd/0x490 [ 105.890359][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.890388][ T5990] RIP: 0033:0x7f6ff458e929 [ 105.890412][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.890439][ T5990] RSP: 002b:00007f6ff534c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.890468][ T5990] RAX: ffffffffffffffda RBX: 00007f6ff47b5fa0 RCX: 00007f6ff458e929 [ 105.890488][ T5990] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 105.890506][ T5990] RBP: 00007f6ff4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 105.890522][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.890538][ T5990] R13: 0000000000000000 R14: 00007f6ff47b5fa0 R15: 00007fff6db47ed8 [ 105.890576][ T5990] [ 106.218547][ T5993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 107.235443][ T5997] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 110.265739][ T6050] ubi: mtd0 is already attached to ubi0 [ 111.545285][ T6063] FAULT_INJECTION: forcing a failure. [ 111.545285][ T6063] name failslab, interval 1, probability 0, space 0, times 0 [ 111.571240][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.0.27 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 111.571293][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.571310][ T6063] Call Trace: [ 111.571320][ T6063] [ 111.571331][ T6063] dump_stack_lvl+0x16c/0x1f0 [ 111.571383][ T6063] should_fail_ex+0x512/0x640 [ 111.571425][ T6063] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 111.571473][ T6063] should_failslab+0xc2/0x120 [ 111.571500][ T6063] __kmalloc_cache_node_noprof+0x6d/0x420 [ 111.571541][ T6063] ? lockdep_init_map_type+0x5c/0x280 [ 111.571579][ T6063] ? __alloc_workqueue+0x694/0x1810 [ 111.571622][ T6063] __alloc_workqueue+0x694/0x1810 [ 111.571666][ T6063] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.571714][ T6063] alloc_workqueue+0xd2/0x200 [ 111.571750][ T6063] ? __pfx_alloc_workqueue+0x10/0x10 [ 111.571799][ T6063] ? __pfx___debug_object_init+0x10/0x10 [ 111.571844][ T6063] nci_register_device+0x21e/0xb80 [ 111.571889][ T6063] ? __pfx_nci_register_device+0x10/0x10 [ 111.571939][ T6063] ? lockdep_init_map_type+0x5c/0x280 [ 111.571988][ T6063] virtual_ncidev_open+0x141/0x220 [ 111.572026][ T6063] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 111.572061][ T6063] misc_open+0x35d/0x420 [ 111.572099][ T6063] ? __pfx_misc_open+0x10/0x10 [ 111.572134][ T6063] chrdev_open+0x231/0x6a0 [ 111.572182][ T6063] ? __pfx_chrdev_open+0x10/0x10 [ 111.572231][ T6063] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 111.572286][ T6063] do_dentry_open+0x744/0x1c10 [ 111.572330][ T6063] ? __pfx_chrdev_open+0x10/0x10 [ 111.572385][ T6063] vfs_open+0x82/0x3f0 [ 111.572423][ T6063] path_openat+0x1de4/0x2cb0 [ 111.572481][ T6063] ? __pfx_path_openat+0x10/0x10 [ 111.572530][ T6063] ? __lock_acquire+0xb8a/0x1c90 [ 111.572574][ T6063] do_filp_open+0x20b/0x470 [ 111.572617][ T6063] ? __pfx_do_filp_open+0x10/0x10 [ 111.572697][ T6063] ? alloc_fd+0x471/0x7d0 [ 111.572752][ T6063] do_sys_openat2+0x11b/0x1d0 [ 111.572784][ T6063] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.572837][ T6063] __x64_sys_openat+0x174/0x210 [ 111.572866][ T6063] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.572912][ T6063] do_syscall_64+0xcd/0x490 [ 111.572940][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.572966][ T6063] RIP: 0033:0x7f2e3198e929 [ 111.572991][ T6063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.573016][ T6063] RSP: 002b:00007f2e32786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.573043][ T6063] RAX: ffffffffffffffda RBX: 00007f2e31bb5fa0 RCX: 00007f2e3198e929 [ 111.573061][ T6063] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 111.573078][ T6063] RBP: 00007f2e31a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 111.573095][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.573112][ T6063] R13: 0000000000000000 R14: 00007f2e31bb5fa0 R15: 00007fff13618128 [ 111.573152][ T6063] [ 112.295959][ T6063] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 113.015921][ T6058] mmap: syz.2.26 (6058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.148972][ T6070] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 117.256731][ T6138] random: crng reseeded on system resumption [ 118.681238][ T6156] Zero length message leads to an empty skb [ 119.105495][ T6164] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.906158][ T6172] netlink: zone id is out of range [ 119.911573][ T6172] netlink: del zone limit has 4 unknown bytes [ 119.995906][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.49'. [ 120.327531][ T6185] netlink: zone id is out of range [ 120.341779][ T6185] netlink: del zone limit has 4 unknown bytes [ 120.363778][ T6182] netlink: set zone limit has 8 unknown bytes [ 121.828511][ T6206] FAULT_INJECTION: forcing a failure. [ 121.828511][ T6206] name failslab, interval 1, probability 0, space 0, times 0 [ 121.892053][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: syz.3.57 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 121.892110][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.892128][ T6206] Call Trace: [ 121.892138][ T6206] [ 121.892150][ T6206] dump_stack_lvl+0x16c/0x1f0 [ 121.892205][ T6206] should_fail_ex+0x512/0x640 [ 121.892248][ T6206] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 121.892293][ T6206] ? __pfx_rescuer_thread+0x10/0x10 [ 121.892336][ T6206] should_failslab+0xc2/0x120 [ 121.892364][ T6206] __kmalloc_cache_noprof+0x6a/0x3e0 [ 121.892403][ T6206] ? lockdep_init_map_type+0x5c/0x280 [ 121.892443][ T6206] ? __kthread_create_on_node+0xce/0x3f0 [ 121.892486][ T6206] ? __pfx_rescuer_thread+0x10/0x10 [ 121.892530][ T6206] __kthread_create_on_node+0xce/0x3f0 [ 121.892571][ T6206] ? __pfx___kthread_create_on_node+0x10/0x10 [ 121.892620][ T6206] ? __pfx_vsnprintf+0x10/0x10 [ 121.892672][ T6206] ? __pfx_rescuer_thread+0x10/0x10 [ 121.892717][ T6206] kthread_create_on_node+0xc7/0x100 [ 121.892755][ T6206] ? __pfx_kthread_create_on_node+0x10/0x10 [ 121.892791][ T6206] ? __pfx_scnprintf+0x10/0x10 [ 121.892863][ T6206] init_rescuer+0x320/0x640 [ 121.892899][ T6206] ? __pfx_init_rescuer+0x10/0x10 [ 121.892954][ T6206] ? wq_adjust_max_active+0x39d/0x4a0 [ 121.893006][ T6206] __alloc_workqueue+0xc37/0x1810 [ 121.893053][ T6206] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.893109][ T6206] alloc_workqueue+0xd2/0x200 [ 121.893145][ T6206] ? __pfx_alloc_workqueue+0x10/0x10 [ 121.893193][ T6206] ? __pfx___debug_object_init+0x10/0x10 [ 121.893237][ T6206] nci_register_device+0x21e/0xb80 [ 121.893281][ T6206] ? __pfx_nci_register_device+0x10/0x10 [ 121.893336][ T6206] ? lockdep_init_map_type+0x5c/0x280 [ 121.893384][ T6206] virtual_ncidev_open+0x141/0x220 [ 121.893423][ T6206] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 121.893457][ T6206] misc_open+0x35d/0x420 [ 121.893495][ T6206] ? __pfx_misc_open+0x10/0x10 [ 121.893531][ T6206] chrdev_open+0x231/0x6a0 [ 121.893576][ T6206] ? __pfx_apparmor_file_open+0x10/0x10 [ 121.893613][ T6206] ? __pfx_chrdev_open+0x10/0x10 [ 121.893658][ T6206] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 121.893706][ T6206] do_dentry_open+0x744/0x1c10 [ 121.893751][ T6206] ? __pfx_chrdev_open+0x10/0x10 [ 121.893806][ T6206] vfs_open+0x82/0x3f0 [ 121.893845][ T6206] path_openat+0x1de4/0x2cb0 [ 121.893903][ T6206] ? __pfx_path_openat+0x10/0x10 [ 121.893949][ T6206] ? __lock_acquire+0xb8a/0x1c90 [ 121.893994][ T6206] do_filp_open+0x20b/0x470 [ 121.894038][ T6206] ? __pfx_do_filp_open+0x10/0x10 [ 121.894123][ T6206] ? alloc_fd+0x471/0x7d0 [ 121.894179][ T6206] do_sys_openat2+0x11b/0x1d0 [ 121.894213][ T6206] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.894267][ T6206] __x64_sys_openat+0x174/0x210 [ 121.894302][ T6206] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.894356][ T6206] do_syscall_64+0xcd/0x490 [ 121.894390][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.894420][ T6206] RIP: 0033:0x7f37ae38e929 [ 121.894446][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.894473][ T6206] RSP: 002b:00007f37af134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.894502][ T6206] RAX: ffffffffffffffda RBX: 00007f37ae5b5fa0 RCX: 00007f37ae38e929 [ 121.894521][ T6206] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 121.894539][ T6206] RBP: 00007f37ae410b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.894557][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.894574][ T6206] R13: 0000000000000000 R14: 00007f37ae5b5fa0 R15: 00007ffdd80b6c78 [ 121.894618][ T6206] [ 122.262953][ T6206] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 122.285214][ T6206] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 123.420564][ T6211] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 123.617612][ T6219] netlink: 334 bytes leftover after parsing attributes in process `syz.0.59'. [ 123.651768][ T6224] netlink: zone id is out of range [ 123.698658][ T6224] netlink: del zone limit has 4 unknown bytes [ 123.946683][ T6223] netlink: set zone limit has 8 unknown bytes [ 125.241694][ T6249] syz.1.65 uses obsolete (PF_INET,SOCK_PACKET) [ 125.657449][ T6256] netlink: set zone limit has 8 unknown bytes [ 125.783798][ T6256] netlink: zone id is out of range [ 125.858919][ T6256] netlink: del zone limit has 4 unknown bytes [ 128.576040][ T6277] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 129.530975][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 129.690894][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 129.713138][ T6315] hub 8-0:1.0: USB hub found [ 129.753507][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 129.804254][ T6315] hub 8-0:1.0: 1 port detected [ 130.042793][ T6321] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 132.279222][ T6358] netlink: zone id is out of range [ 132.284809][ T6358] netlink: del zone limit has 4 unknown bytes [ 133.280984][ T6364] Invalid ELF header magic: != ELF [ 133.504661][ T6379] FAULT_INJECTION: forcing a failure. [ 133.504661][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 133.560731][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: syz.3.91 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 133.560759][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.560769][ T6379] Call Trace: [ 133.560775][ T6379] [ 133.560783][ T6379] dump_stack_lvl+0x16c/0x1f0 [ 133.560815][ T6379] should_fail_ex+0x512/0x640 [ 133.560839][ T6379] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 133.560864][ T6379] ? __pfx_rescuer_thread+0x10/0x10 [ 133.560887][ T6379] should_failslab+0xc2/0x120 [ 133.560903][ T6379] __kmalloc_cache_noprof+0x6a/0x3e0 [ 133.560924][ T6379] ? lockdep_init_map_type+0x5c/0x280 [ 133.560947][ T6379] ? __kthread_create_on_node+0xce/0x3f0 [ 133.560970][ T6379] ? __pfx_rescuer_thread+0x10/0x10 [ 133.560993][ T6379] __kthread_create_on_node+0xce/0x3f0 [ 133.561015][ T6379] ? __pfx___kthread_create_on_node+0x10/0x10 [ 133.561048][ T6379] ? __pfx_vsnprintf+0x10/0x10 [ 133.561075][ T6379] ? __pfx_rescuer_thread+0x10/0x10 [ 133.561100][ T6379] kthread_create_on_node+0xc7/0x100 [ 133.561120][ T6379] ? __pfx_kthread_create_on_node+0x10/0x10 [ 133.561139][ T6379] ? __pfx_scnprintf+0x10/0x10 [ 133.561173][ T6379] init_rescuer+0x320/0x640 [ 133.561196][ T6379] ? __pfx_init_rescuer+0x10/0x10 [ 133.561224][ T6379] ? wq_adjust_max_active+0x39d/0x4a0 [ 133.561251][ T6379] __alloc_workqueue+0xc37/0x1810 [ 133.561277][ T6379] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 133.561302][ T6379] alloc_workqueue+0xd2/0x200 [ 133.561322][ T6379] ? __pfx_alloc_workqueue+0x10/0x10 [ 133.561347][ T6379] ? __pfx___debug_object_init+0x10/0x10 [ 133.561371][ T6379] nci_register_device+0x21e/0xb80 [ 133.561395][ T6379] ? __pfx_nci_register_device+0x10/0x10 [ 133.561421][ T6379] ? lockdep_init_map_type+0x5c/0x280 [ 133.561447][ T6379] virtual_ncidev_open+0x141/0x220 [ 133.561468][ T6379] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 133.561487][ T6379] misc_open+0x35d/0x420 [ 133.561508][ T6379] ? __pfx_misc_open+0x10/0x10 [ 133.561527][ T6379] chrdev_open+0x231/0x6a0 [ 133.561551][ T6379] ? __pfx_apparmor_file_open+0x10/0x10 [ 133.561572][ T6379] ? __pfx_chrdev_open+0x10/0x10 [ 133.561604][ T6379] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 133.561645][ T6379] do_dentry_open+0x744/0x1c10 [ 133.561684][ T6379] ? __pfx_chrdev_open+0x10/0x10 [ 133.561731][ T6379] vfs_open+0x82/0x3f0 [ 133.561768][ T6379] path_openat+0x1de4/0x2cb0 [ 133.561804][ T6379] ? __pfx_path_openat+0x10/0x10 [ 133.561828][ T6379] ? __lock_acquire+0xb8a/0x1c90 [ 133.561851][ T6379] do_filp_open+0x20b/0x470 [ 133.561875][ T6379] ? __pfx_do_filp_open+0x10/0x10 [ 133.561913][ T6379] ? alloc_fd+0x471/0x7d0 [ 133.561941][ T6379] do_sys_openat2+0x11b/0x1d0 [ 133.561959][ T6379] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.561985][ T6379] __x64_sys_openat+0x174/0x210 [ 133.562004][ T6379] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.562038][ T6379] do_syscall_64+0xcd/0x490 [ 133.562056][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.562073][ T6379] RIP: 0033:0x7f37ae38e929 [ 133.562088][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.562105][ T6379] RSP: 002b:00007f37af134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.562122][ T6379] RAX: ffffffffffffffda RBX: 00007f37ae5b5fa0 RCX: 00007f37ae38e929 [ 133.562133][ T6379] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 133.562144][ T6379] RBP: 00007f37ae410b39 R08: 0000000000000000 R09: 0000000000000000 [ 133.562154][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.562164][ T6379] R13: 0000000000000000 R14: 00007f37ae5b5fa0 R15: 00007ffdd80b6c78 [ 133.562186][ T6379] [ 133.562193][ T6379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 134.243323][ T6379] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 134.674181][ T6386] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.298133][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.305647][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.564790][ T6461] netlink: zone id is out of range [ 141.569989][ T6461] netlink: del zone limit has 4 unknown bytes [ 141.688297][ T6467] FAULT_INJECTION: forcing a failure. [ 141.688297][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 141.710228][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.3.110 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 141.710271][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.710287][ T6467] Call Trace: [ 141.710296][ T6467] [ 141.710307][ T6467] dump_stack_lvl+0x16c/0x1f0 [ 141.710359][ T6467] should_fail_ex+0x512/0x640 [ 141.710399][ T6467] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 141.710436][ T6467] should_failslab+0xc2/0x120 [ 141.710462][ T6467] __kmalloc_cache_noprof+0x6a/0x3e0 [ 141.710497][ T6467] ? vsnprintf+0x318/0x1160 [ 141.710534][ T6467] ? __alloc_workqueue+0xda2/0x1810 [ 141.710576][ T6467] __alloc_workqueue+0xda2/0x1810 [ 141.710610][ T6467] ? __pfx_vsnprintf+0x10/0x10 [ 141.710651][ T6467] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.710694][ T6467] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 141.710739][ T6467] alloc_workqueue+0xd2/0x200 [ 141.710773][ T6467] ? __pfx_alloc_workqueue+0x10/0x10 [ 141.710814][ T6467] ? __pfx___debug_object_init+0x10/0x10 [ 141.710851][ T6467] nci_register_device+0x394/0xb80 [ 141.710892][ T6467] ? __pfx_nci_register_device+0x10/0x10 [ 141.710951][ T6467] ? lockdep_init_map_type+0x5c/0x280 [ 141.711000][ T6467] virtual_ncidev_open+0x141/0x220 [ 141.711039][ T6467] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 141.711075][ T6467] misc_open+0x35d/0x420 [ 141.711114][ T6467] ? __pfx_misc_open+0x10/0x10 [ 141.711149][ T6467] chrdev_open+0x231/0x6a0 [ 141.711187][ T6467] ? __pfx_apparmor_file_open+0x10/0x10 [ 141.711223][ T6467] ? __pfx_chrdev_open+0x10/0x10 [ 141.711270][ T6467] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 141.711317][ T6467] do_dentry_open+0x744/0x1c10 [ 141.711360][ T6467] ? __pfx_chrdev_open+0x10/0x10 [ 141.711411][ T6467] vfs_open+0x82/0x3f0 [ 141.711453][ T6467] path_openat+0x1de4/0x2cb0 [ 141.711509][ T6467] ? __pfx_path_openat+0x10/0x10 [ 141.711554][ T6467] ? __lock_acquire+0xb8a/0x1c90 [ 141.711597][ T6467] do_filp_open+0x20b/0x470 [ 141.711638][ T6467] ? __pfx_do_filp_open+0x10/0x10 [ 141.711695][ T6467] ? alloc_fd+0x471/0x7d0 [ 141.711745][ T6467] do_sys_openat2+0x11b/0x1d0 [ 141.711777][ T6467] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.711826][ T6467] __x64_sys_openat+0x174/0x210 [ 141.711856][ T6467] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.711912][ T6467] do_syscall_64+0xcd/0x490 [ 141.711942][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.711970][ T6467] RIP: 0033:0x7f37ae38e929 [ 141.711993][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.712017][ T6467] RSP: 002b:00007f37af134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.712045][ T6467] RAX: ffffffffffffffda RBX: 00007f37ae5b5fa0 RCX: 00007f37ae38e929 [ 141.712061][ T6467] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 141.712078][ T6467] RBP: 00007f37ae410b39 R08: 0000000000000000 R09: 0000000000000000 [ 141.712095][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.712111][ T6467] R13: 0000000000000000 R14: 00007f37ae5b5fa0 R15: 00007ffdd80b6c78 [ 141.712148][ T6467] [ 142.156441][ T6467] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 142.208300][ T6478] netlink: zone id is out of range [ 142.213645][ T6478] netlink: del zone limit has 4 unknown bytes [ 142.815235][ T6480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 144.505709][ T6508] ubi: mtd0 is already attached to ubi0 [ 144.996881][ T6493] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 145.073245][ T6493] File: /dev/ram7 PID: 6493 Comm: syz.1.113 [ 145.077133][ T6494] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 145.091336][ T6494] File: /dev/ram7 PID: 6494 Comm: syz.1.113 [ 147.616835][ T6549] ubi: mtd0 is already attached to ubi0 [ 150.585957][ T6585] ubi: mtd0 is already attached to ubi0 [ 154.087034][ T6622] ubi: mtd0 is already attached to ubi0 [ 155.059467][ T6630] FAULT_INJECTION: forcing a failure. [ 155.059467][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 155.072668][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.3.137 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 155.072710][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.072728][ T6630] Call Trace: [ 155.072739][ T6630] [ 155.072750][ T6630] dump_stack_lvl+0x16c/0x1f0 [ 155.072805][ T6630] should_fail_ex+0x512/0x640 [ 155.072847][ T6630] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 155.072888][ T6630] should_failslab+0xc2/0x120 [ 155.072914][ T6630] __kmalloc_cache_noprof+0x6a/0x3e0 [ 155.072950][ T6630] ? netdev_create_hash+0x3c/0xc0 [ 155.072985][ T6630] ? __pfx_netdev_init+0x10/0x10 [ 155.073018][ T6630] netdev_create_hash+0x3c/0xc0 [ 155.073052][ T6630] ? __pfx_netdev_init+0x10/0x10 [ 155.073090][ T6630] netdev_init+0x70/0x230 [ 155.073123][ T6630] ops_init+0x1df/0x5f0 [ 155.073156][ T6630] setup_net+0x1ff/0x510 [ 155.073182][ T6630] ? lockdep_init_map_type+0x5c/0x280 [ 155.073223][ T6630] ? __pfx_setup_net+0x10/0x10 [ 155.073255][ T6630] ? debug_mutex_init+0x37/0x70 [ 155.073290][ T6630] copy_net_ns+0x2a6/0x5f0 [ 155.073329][ T6630] create_new_namespaces+0x3ea/0xa90 [ 155.073373][ T6630] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 155.073410][ T6630] ksys_unshare+0x45b/0xa40 [ 155.073450][ T6630] ? __pfx_ksys_unshare+0x10/0x10 [ 155.073490][ T6630] ? xfd_validate_state+0x61/0x180 [ 155.073540][ T6630] __x64_sys_unshare+0x31/0x40 [ 155.073578][ T6630] do_syscall_64+0xcd/0x490 [ 155.073609][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.073638][ T6630] RIP: 0033:0x7f37ae38e929 [ 155.073662][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.073689][ T6630] RSP: 002b:00007f37af113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 155.073716][ T6630] RAX: ffffffffffffffda RBX: 00007f37ae5b6080 RCX: 00007f37ae38e929 [ 155.073735][ T6630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 155.073751][ T6630] RBP: 00007f37ae410b39 R08: 0000000000000000 R09: 0000000000000000 [ 155.073768][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.073785][ T6630] R13: 0000000000000000 R14: 00007f37ae5b6080 R15: 00007ffdd80b6c78 [ 155.073823][ T6630] [ 155.984163][ T6641] FAULT_INJECTION: forcing a failure. [ 155.984163][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 156.001662][ T6641] CPU: 0 UID: 0 PID: 6641 Comm: syz.1.140 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 156.001690][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.001700][ T6641] Call Trace: [ 156.001706][ T6641] [ 156.001714][ T6641] dump_stack_lvl+0x16c/0x1f0 [ 156.001750][ T6641] should_fail_ex+0x512/0x640 [ 156.001775][ T6641] ? fs_reclaim_acquire+0xae/0x150 [ 156.001796][ T6641] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 156.001819][ T6641] should_failslab+0xc2/0x120 [ 156.001835][ T6641] __kmalloc_noprof+0xd2/0x510 [ 156.001866][ T6641] tomoyo_realpath_from_path+0xc2/0x6e0 [ 156.001895][ T6641] tomoyo_check_open_permission+0x2ab/0x3c0 [ 156.001916][ T6641] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 156.001958][ T6641] ? do_raw_spin_lock+0x12c/0x2b0 [ 156.001992][ T6641] tomoyo_file_open+0x6b/0x90 [ 156.002019][ T6641] security_file_open+0x84/0x1e0 [ 156.002041][ T6641] do_dentry_open+0x596/0x1c10 [ 156.002072][ T6641] vfs_open+0x82/0x3f0 [ 156.002092][ T6641] path_openat+0x1de4/0x2cb0 [ 156.002122][ T6641] ? __pfx_path_openat+0x10/0x10 [ 156.002146][ T6641] ? __lock_acquire+0xb8a/0x1c90 [ 156.002169][ T6641] do_filp_open+0x20b/0x470 [ 156.002193][ T6641] ? __pfx_do_filp_open+0x10/0x10 [ 156.002232][ T6641] ? alloc_fd+0x471/0x7d0 [ 156.002259][ T6641] do_sys_openat2+0x11b/0x1d0 [ 156.002277][ T6641] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.002303][ T6641] __x64_sys_openat+0x174/0x210 [ 156.002322][ T6641] ? __pfx___x64_sys_openat+0x10/0x10 [ 156.002349][ T6641] do_syscall_64+0xcd/0x490 [ 156.002366][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.002383][ T6641] RIP: 0033:0x7f023eb8e929 [ 156.002397][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.002412][ T6641] RSP: 002b:00007f023fa19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.002429][ T6641] RAX: ffffffffffffffda RBX: 00007f023edb5fa0 RCX: 00007f023eb8e929 [ 156.002439][ T6641] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 156.002449][ T6641] RBP: 00007f023ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.002459][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.002468][ T6641] R13: 0000000000000000 R14: 00007f023edb5fa0 R15: 00007ffeed714958 [ 156.002489][ T6641] [ 156.002495][ T6641] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.406998][ T6646] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 157.417157][ T6641] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 158.069663][ T6673] FAULT_INJECTION: forcing a failure. [ 158.069663][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 158.096560][ T6673] CPU: 1 UID: 0 PID: 6673 Comm: syz.0.144 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 158.096606][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.096625][ T6673] Call Trace: [ 158.096636][ T6673] [ 158.096647][ T6673] dump_stack_lvl+0x16c/0x1f0 [ 158.096699][ T6673] should_fail_ex+0x512/0x640 [ 158.096741][ T6673] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 158.096796][ T6673] should_failslab+0xc2/0x120 [ 158.096826][ T6673] __kmalloc_cache_noprof+0x6a/0x3e0 [ 158.096866][ T6673] ? vsnprintf+0x318/0x1160 [ 158.096906][ T6673] ? __alloc_workqueue+0xda2/0x1810 [ 158.096950][ T6673] __alloc_workqueue+0xda2/0x1810 [ 158.096987][ T6673] ? __pfx_vsnprintf+0x10/0x10 [ 158.097026][ T6673] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.097069][ T6673] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 158.097115][ T6673] alloc_workqueue+0xd2/0x200 [ 158.097152][ T6673] ? __pfx_alloc_workqueue+0x10/0x10 [ 158.097199][ T6673] ? __pfx___debug_object_init+0x10/0x10 [ 158.097242][ T6673] nci_register_device+0x394/0xb80 [ 158.097288][ T6673] ? __pfx_nci_register_device+0x10/0x10 [ 158.097336][ T6673] ? lockdep_init_map_type+0x5c/0x280 [ 158.097384][ T6673] virtual_ncidev_open+0x141/0x220 [ 158.097422][ T6673] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 158.097458][ T6673] misc_open+0x35d/0x420 [ 158.097495][ T6673] ? __pfx_misc_open+0x10/0x10 [ 158.097532][ T6673] chrdev_open+0x231/0x6a0 [ 158.097574][ T6673] ? __pfx_apparmor_file_open+0x10/0x10 [ 158.097613][ T6673] ? __pfx_chrdev_open+0x10/0x10 [ 158.097659][ T6673] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 158.097704][ T6673] do_dentry_open+0x744/0x1c10 [ 158.097848][ T6673] ? __pfx_chrdev_open+0x10/0x10 [ 158.097909][ T6673] vfs_open+0x82/0x3f0 [ 158.097962][ T6673] path_openat+0x1de4/0x2cb0 [ 158.098022][ T6673] ? __pfx_path_openat+0x10/0x10 [ 158.098068][ T6673] ? __lock_acquire+0xb8a/0x1c90 [ 158.098114][ T6673] do_filp_open+0x20b/0x470 [ 158.098159][ T6673] ? __pfx_do_filp_open+0x10/0x10 [ 158.098238][ T6673] ? alloc_fd+0x471/0x7d0 [ 158.098295][ T6673] do_sys_openat2+0x11b/0x1d0 [ 158.098328][ T6673] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.098381][ T6673] __x64_sys_openat+0x174/0x210 [ 158.098416][ T6673] ? __pfx___x64_sys_openat+0x10/0x10 [ 158.098471][ T6673] do_syscall_64+0xcd/0x490 [ 158.098505][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.098535][ T6673] RIP: 0033:0x7f2e3198e929 [ 158.098560][ T6673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.098589][ T6673] RSP: 002b:00007f2e32786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.098619][ T6673] RAX: ffffffffffffffda RBX: 00007f2e31bb5fa0 RCX: 00007f2e3198e929 [ 158.098638][ T6673] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 158.098656][ T6673] RBP: 00007f2e31a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 158.098673][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.098690][ T6673] R13: 0000000000000000 R14: 00007f2e31bb5fa0 R15: 00007fff13618128 [ 158.098727][ T6673] [ 158.530939][ T6672] kAFS: No cell specified [ 158.668157][ T6675] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 159.543310][ T6682] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 160.055017][ T6680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 160.537823][ T6677] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 160.979484][ T6711] ubi: mtd0 is already attached to ubi0 [ 162.078780][ T6720] svc: failed to register nfsdv3 RPC service (errno 111). [ 162.088808][ T6720] svc: failed to register nfsaclv3 RPC service (errno 111). [ 163.661552][ T6758] ubi: mtd0 is already attached to ubi0 [ 164.402678][ T6768] snd_aloop snd_aloop.0: control 16781581:65535:512:'?F/zF˷fC:1037 is already present [ 166.758275][ T6802] lo: entered allmulticast mode [ 166.795172][ T6802] lo: left allmulticast mode [ 168.338043][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.171'. [ 168.526735][ T6824] ipvlan0: entered allmulticast mode [ 168.532065][ T6824] veth0_vlan: entered allmulticast mode [ 172.472375][ T6880] svc: failed to register nfsdv3 RPC service (errno 111). [ 172.496803][ T6880] svc: failed to register nfsaclv3 RPC service (errno 111). [ 173.394225][ T6888] lo: entered allmulticast mode [ 173.519708][ T6888] lo: left allmulticast mode [ 178.219861][ T6944] FAULT_INJECTION: forcing a failure. [ 178.219861][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 178.269299][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz.3.190 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 178.269343][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.269360][ T6944] Call Trace: [ 178.269370][ T6944] [ 178.269381][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 178.269429][ T6944] should_fail_ex+0x512/0x640 [ 178.269471][ T6944] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 178.269520][ T6944] should_failslab+0xc2/0x120 [ 178.269549][ T6944] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 178.269595][ T6944] ? __kthread_create_on_node+0x186/0x3f0 [ 178.269640][ T6944] kvasprintf+0xbc/0x160 [ 178.269664][ T6944] ? __pfx_kvasprintf+0x10/0x10 [ 178.269706][ T6944] ? __pfx_rescuer_thread+0x10/0x10 [ 178.269756][ T6944] __kthread_create_on_node+0x186/0x3f0 [ 178.269797][ T6944] ? __pfx___kthread_create_on_node+0x10/0x10 [ 178.269846][ T6944] ? __pfx_vsnprintf+0x10/0x10 [ 178.269899][ T6944] ? __pfx_rescuer_thread+0x10/0x10 [ 178.269945][ T6944] kthread_create_on_node+0xc7/0x100 [ 178.269982][ T6944] ? __pfx_kthread_create_on_node+0x10/0x10 [ 178.270017][ T6944] ? __pfx_scnprintf+0x10/0x10 [ 178.270081][ T6944] init_rescuer+0x320/0x640 [ 178.270119][ T6944] ? __pfx_init_rescuer+0x10/0x10 [ 178.270175][ T6944] ? wq_adjust_max_active+0x39d/0x4a0 [ 178.270221][ T6944] __alloc_workqueue+0xc37/0x1810 [ 178.270269][ T6944] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 178.270316][ T6944] alloc_workqueue+0xd2/0x200 [ 178.270350][ T6944] ? __pfx_alloc_workqueue+0x10/0x10 [ 178.270401][ T6944] ? __pfx___debug_object_init+0x10/0x10 [ 178.270447][ T6944] nci_register_device+0x21e/0xb80 [ 178.270493][ T6944] ? __pfx_nci_register_device+0x10/0x10 [ 178.270539][ T6944] ? lockdep_init_map_type+0x5c/0x280 [ 178.270591][ T6944] virtual_ncidev_open+0x141/0x220 [ 178.270628][ T6944] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 178.270665][ T6944] misc_open+0x35d/0x420 [ 178.270704][ T6944] ? __pfx_misc_open+0x10/0x10 [ 178.270741][ T6944] chrdev_open+0x231/0x6a0 [ 178.270793][ T6944] ? __pfx_apparmor_file_open+0x10/0x10 [ 178.270830][ T6944] ? __pfx_chrdev_open+0x10/0x10 [ 178.270881][ T6944] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 178.270929][ T6944] do_dentry_open+0x744/0x1c10 [ 178.270974][ T6944] ? __pfx_chrdev_open+0x10/0x10 [ 178.271026][ T6944] vfs_open+0x82/0x3f0 [ 178.271062][ T6944] path_openat+0x1de4/0x2cb0 [ 178.271119][ T6944] ? __pfx_path_openat+0x10/0x10 [ 178.271160][ T6944] ? __lock_acquire+0xb8a/0x1c90 [ 178.271202][ T6944] do_filp_open+0x20b/0x470 [ 178.271243][ T6944] ? __pfx_do_filp_open+0x10/0x10 [ 178.271317][ T6944] ? alloc_fd+0x471/0x7d0 [ 178.271369][ T6944] do_sys_openat2+0x11b/0x1d0 [ 178.271399][ T6944] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.271452][ T6944] __x64_sys_openat+0x174/0x210 [ 178.271486][ T6944] ? __pfx___x64_sys_openat+0x10/0x10 [ 178.271540][ T6944] do_syscall_64+0xcd/0x490 [ 178.271571][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.271601][ T6944] RIP: 0033:0x7f37ae38e929 [ 178.271625][ T6944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.271652][ T6944] RSP: 002b:00007f37af134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.271679][ T6944] RAX: ffffffffffffffda RBX: 00007f37ae5b5fa0 RCX: 00007f37ae38e929 [ 178.271698][ T6944] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 178.271716][ T6944] RBP: 00007f37ae410b39 R08: 0000000000000000 R09: 0000000000000000 [ 178.271732][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.271758][ T6944] R13: 0000000000000000 R14: 00007f37ae5b5fa0 R15: 00007ffdd80b6c78 [ 178.271802][ T6944] [ 178.271838][ T6944] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 178.946431][ T6944] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 180.675965][ T6949] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 180.952550][ T6972] FAULT_INJECTION: forcing a failure. [ 180.952550][ T6972] name failslab, interval 1, probability 0, space 0, times 0 [ 180.987095][ T6972] CPU: 0 UID: 0 PID: 6972 Comm: syz.2.196 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 180.987139][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.987156][ T6972] Call Trace: [ 180.987166][ T6972] [ 180.987177][ T6972] dump_stack_lvl+0x16c/0x1f0 [ 180.987231][ T6972] should_fail_ex+0x512/0x640 [ 180.987274][ T6972] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 180.987328][ T6972] should_failslab+0xc2/0x120 [ 180.987357][ T6972] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 180.987407][ T6972] ? kasprintf+0xc7/0x100 [ 180.987442][ T6972] kvasprintf+0xbc/0x160 [ 180.987470][ T6972] ? __pfx_kvasprintf+0x10/0x10 [ 180.987523][ T6972] kasprintf+0xc7/0x100 [ 180.987551][ T6972] ? __pfx_kasprintf+0x10/0x10 [ 180.987581][ T6972] ? __is_module_percpu_address+0x1e0/0x440 [ 180.987635][ T6972] alloc_workqueue+0x114/0x200 [ 180.987673][ T6972] ? __pfx_alloc_workqueue+0x10/0x10 [ 180.987722][ T6972] ? __pfx___debug_object_init+0x10/0x10 [ 180.987765][ T6972] nci_register_device+0x21e/0xb80 [ 180.987810][ T6972] ? __pfx_nci_register_device+0x10/0x10 [ 180.987859][ T6972] ? lockdep_init_map_type+0x5c/0x280 [ 180.987908][ T6972] virtual_ncidev_open+0x141/0x220 [ 180.987947][ T6972] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 180.987983][ T6972] misc_open+0x35d/0x420 [ 180.988021][ T6972] ? __pfx_misc_open+0x10/0x10 [ 180.988057][ T6972] chrdev_open+0x231/0x6a0 [ 180.988102][ T6972] ? __pfx_apparmor_file_open+0x10/0x10 [ 180.988141][ T6972] ? __pfx_chrdev_open+0x10/0x10 [ 180.988186][ T6972] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 180.988226][ T6972] do_dentry_open+0x744/0x1c10 [ 180.988266][ T6972] ? __pfx_chrdev_open+0x10/0x10 [ 180.988321][ T6972] vfs_open+0x82/0x3f0 [ 180.988358][ T6972] path_openat+0x1de4/0x2cb0 [ 180.988415][ T6972] ? __pfx_path_openat+0x10/0x10 [ 180.988461][ T6972] ? __lock_acquire+0xb8a/0x1c90 [ 180.988505][ T6972] do_filp_open+0x20b/0x470 [ 180.988558][ T6972] ? __pfx_do_filp_open+0x10/0x10 [ 180.988638][ T6972] ? alloc_fd+0x471/0x7d0 [ 180.988694][ T6972] do_sys_openat2+0x11b/0x1d0 [ 180.988728][ T6972] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.988778][ T6972] __x64_sys_openat+0x174/0x210 [ 180.988813][ T6972] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.988865][ T6972] do_syscall_64+0xcd/0x490 [ 180.988897][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.988927][ T6972] RIP: 0033:0x7f6ff458e929 [ 180.988952][ T6972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.988980][ T6972] RSP: 002b:00007f6ff534c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.989009][ T6972] RAX: ffffffffffffffda RBX: 00007f6ff47b5fa0 RCX: 00007f6ff458e929 [ 180.989029][ T6972] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 180.989047][ T6972] RBP: 00007f6ff4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 180.989064][ T6972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.989081][ T6972] R13: 0000000000000000 R14: 00007f6ff47b5fa0 R15: 00007fff6db47ed8 [ 180.989121][ T6972] [ 181.647361][ T6980] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 182.507840][ T6982] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 186.877566][ T7047] FAULT_INJECTION: forcing a failure. [ 186.877566][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 186.926851][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.2.210 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 186.926895][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.926911][ T7047] Call Trace: [ 186.926921][ T7047] [ 186.926933][ T7047] dump_stack_lvl+0x16c/0x1f0 [ 186.926983][ T7047] should_fail_ex+0x512/0x640 [ 186.927021][ T7047] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 186.927062][ T7047] ? __pfx_rescuer_thread+0x10/0x10 [ 186.927099][ T7047] should_failslab+0xc2/0x120 [ 186.927128][ T7047] __kmalloc_cache_noprof+0x6a/0x3e0 [ 186.927163][ T7047] ? lockdep_init_map_type+0x5c/0x280 [ 186.927202][ T7047] ? __kthread_create_on_node+0xce/0x3f0 [ 186.927242][ T7047] ? __pfx_rescuer_thread+0x10/0x10 [ 186.927283][ T7047] __kthread_create_on_node+0xce/0x3f0 [ 186.927321][ T7047] ? __pfx___kthread_create_on_node+0x10/0x10 [ 186.927362][ T7047] ? __pfx_vsnprintf+0x10/0x10 [ 186.927404][ T7047] ? __pfx_rescuer_thread+0x10/0x10 [ 186.927455][ T7047] kthread_create_on_node+0xc7/0x100 [ 186.927488][ T7047] ? __pfx_kthread_create_on_node+0x10/0x10 [ 186.927518][ T7047] ? __pfx_scnprintf+0x10/0x10 [ 186.927579][ T7047] init_rescuer+0x320/0x640 [ 186.927615][ T7047] ? __pfx_init_rescuer+0x10/0x10 [ 186.927663][ T7047] ? wq_adjust_max_active+0x39d/0x4a0 [ 186.927709][ T7047] __alloc_workqueue+0xc37/0x1810 [ 186.927754][ T7047] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 186.927801][ T7047] alloc_workqueue+0xd2/0x200 [ 186.927835][ T7047] ? __pfx_alloc_workqueue+0x10/0x10 [ 186.927884][ T7047] ? __pfx___debug_object_init+0x10/0x10 [ 186.927929][ T7047] nci_register_device+0x21e/0xb80 [ 186.927970][ T7047] ? __pfx_nci_register_device+0x10/0x10 [ 186.928016][ T7047] ? lockdep_init_map_type+0x5c/0x280 [ 186.928062][ T7047] virtual_ncidev_open+0x141/0x220 [ 186.928096][ T7047] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 186.928131][ T7047] misc_open+0x35d/0x420 [ 186.928167][ T7047] ? __pfx_misc_open+0x10/0x10 [ 186.928199][ T7047] chrdev_open+0x231/0x6a0 [ 186.928242][ T7047] ? __pfx_apparmor_file_open+0x10/0x10 [ 186.928278][ T7047] ? __pfx_chrdev_open+0x10/0x10 [ 186.928324][ T7047] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 186.928368][ T7047] do_dentry_open+0x744/0x1c10 [ 186.928406][ T7047] ? __pfx_chrdev_open+0x10/0x10 [ 186.928464][ T7047] vfs_open+0x82/0x3f0 [ 186.928499][ T7047] path_openat+0x1de4/0x2cb0 [ 186.928554][ T7047] ? __pfx_path_openat+0x10/0x10 [ 186.928595][ T7047] ? __lock_acquire+0xb8a/0x1c90 [ 186.928635][ T7047] do_filp_open+0x20b/0x470 [ 186.928673][ T7047] ? __pfx_do_filp_open+0x10/0x10 [ 186.928744][ T7047] ? alloc_fd+0x471/0x7d0 [ 186.928795][ T7047] do_sys_openat2+0x11b/0x1d0 [ 186.928826][ T7047] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.928875][ T7047] __x64_sys_openat+0x174/0x210 [ 186.928908][ T7047] ? __pfx___x64_sys_openat+0x10/0x10 [ 186.928957][ T7047] do_syscall_64+0xcd/0x490 [ 186.928987][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.929014][ T7047] RIP: 0033:0x7f6ff458e929 [ 186.929040][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.929067][ T7047] RSP: 002b:00007f6ff534c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.929096][ T7047] RAX: ffffffffffffffda RBX: 00007f6ff47b5fa0 RCX: 00007f6ff458e929 [ 186.929115][ T7047] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 186.929133][ T7047] RBP: 00007f6ff4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 186.929150][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.929165][ T7047] R13: 0000000000000000 R14: 00007f6ff47b5fa0 R15: 00007fff6db47ed8 [ 186.929206][ T7047] [ 186.929218][ T7047] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 187.355707][ T7053] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 188.213257][ T7047] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 195.745017][ T7161] FAULT_INJECTION: forcing a failure. [ 195.745017][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 195.803089][ T7161] CPU: 1 UID: 0 PID: 7161 Comm: syz.0.231 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 195.803115][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.803125][ T7161] Call Trace: [ 195.803131][ T7161] [ 195.803139][ T7161] dump_stack_lvl+0x16c/0x1f0 [ 195.803170][ T7161] should_fail_ex+0x512/0x640 [ 195.803194][ T7161] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 195.803223][ T7161] should_failslab+0xc2/0x120 [ 195.803238][ T7161] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 195.803265][ T7161] ? kasprintf+0xc7/0x100 [ 195.803284][ T7161] kvasprintf+0xbc/0x160 [ 195.803299][ T7161] ? __pfx_kvasprintf+0x10/0x10 [ 195.803323][ T7161] kasprintf+0xc7/0x100 [ 195.803338][ T7161] ? __pfx_kasprintf+0x10/0x10 [ 195.803357][ T7161] ? __is_module_percpu_address+0x1e0/0x440 [ 195.803386][ T7161] alloc_workqueue+0x114/0x200 [ 195.803407][ T7161] ? __pfx_alloc_workqueue+0x10/0x10 [ 195.803432][ T7161] ? __pfx___debug_object_init+0x10/0x10 [ 195.803455][ T7161] nci_register_device+0x21e/0xb80 [ 195.803479][ T7161] ? __pfx_nci_register_device+0x10/0x10 [ 195.803505][ T7161] ? lockdep_init_map_type+0x5c/0x280 [ 195.803531][ T7161] virtual_ncidev_open+0x141/0x220 [ 195.803552][ T7161] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 195.803572][ T7161] misc_open+0x35d/0x420 [ 195.803593][ T7161] ? __pfx_misc_open+0x10/0x10 [ 195.803620][ T7161] chrdev_open+0x231/0x6a0 [ 195.803645][ T7161] ? __pfx_apparmor_file_open+0x10/0x10 [ 195.803666][ T7161] ? __pfx_chrdev_open+0x10/0x10 [ 195.803693][ T7161] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 195.803720][ T7161] do_dentry_open+0x744/0x1c10 [ 195.803744][ T7161] ? __pfx_chrdev_open+0x10/0x10 [ 195.803773][ T7161] vfs_open+0x82/0x3f0 [ 195.803794][ T7161] path_openat+0x1de4/0x2cb0 [ 195.803824][ T7161] ? __pfx_path_openat+0x10/0x10 [ 195.803849][ T7161] ? __lock_acquire+0xb8a/0x1c90 [ 195.803874][ T7161] do_filp_open+0x20b/0x470 [ 195.803897][ T7161] ? __pfx_do_filp_open+0x10/0x10 [ 195.803936][ T7161] ? alloc_fd+0x471/0x7d0 [ 195.803972][ T7161] do_sys_openat2+0x11b/0x1d0 [ 195.804001][ T7161] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.804045][ T7161] __x64_sys_openat+0x174/0x210 [ 195.804077][ T7161] ? __pfx___x64_sys_openat+0x10/0x10 [ 195.804126][ T7161] do_syscall_64+0xcd/0x490 [ 195.804154][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.804183][ T7161] RIP: 0033:0x7f2e3198e929 [ 195.804207][ T7161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.804232][ T7161] RSP: 002b:00007f2e32786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.804259][ T7161] RAX: ffffffffffffffda RBX: 00007f2e31bb5fa0 RCX: 00007f2e3198e929 [ 195.804277][ T7161] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 195.804293][ T7161] RBP: 00007f2e31a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 195.804310][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.804327][ T7161] R13: 0000000000000000 R14: 00007f2e31bb5fa0 R15: 00007fff13618128 [ 195.804366][ T7161] [ 196.370456][ T7168] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 197.014605][ T7169] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 197.874952][ T7196] mtrr: base(0x100000000) is not aligned on a size(0x0000) boundary [ 198.089505][ T7199] warning: `syz.0.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 199.742188][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.750071][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.415407][ T7307] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 205.892648][ T7316] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 208.322918][ T30] audit: type=1800 audit(6045425491.354:2): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.271" name="dbroot" dev="configfs" ino=12666 res=0 errno=0 [ 208.368190][ T7363] db_root: not a directory: /dev/audio1 [ 208.399590][ T7359] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 208.453346][ T7359] CPU: 1 UID: 0 PID: 7359 Comm: syz.2.270 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 208.453388][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.453404][ T7359] Call Trace: [ 208.453414][ T7359] [ 208.453425][ T7359] dump_stack_lvl+0x16c/0x1f0 [ 208.453477][ T7359] sysfs_warn_dup+0x7f/0xa0 [ 208.453516][ T7359] sysfs_do_create_link_sd+0x124/0x140 [ 208.453561][ T7359] sysfs_create_link+0x61/0xc0 [ 208.453600][ T7359] device_add+0x62c/0x1a70 [ 208.453636][ T7359] ? __pfx_device_add+0x10/0x10 [ 208.453665][ T7359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.453712][ T7359] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 208.453772][ T7359] wiphy_register+0x1c9c/0x2850 [ 208.453806][ T7359] ? netdev_run_todo+0x864/0x1320 [ 208.453851][ T7359] ? __pfx_wiphy_register+0x10/0x10 [ 208.453900][ T7359] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 208.453939][ T7359] ieee80211_register_hw+0x24ac/0x4140 [ 208.453989][ T7359] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 208.454035][ T7359] ? find_held_lock+0x2b/0x80 [ 208.454066][ T7359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.454111][ T7359] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 208.454144][ T7359] ? __hrtimer_setup+0x176/0x280 [ 208.454192][ T7359] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 208.454273][ T7359] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 208.454336][ T7359] hwsim_new_radio_nl+0xb51/0x12c0 [ 208.454386][ T7359] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.454442][ T7359] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 208.454482][ T7359] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 208.454526][ T7359] genl_family_rcv_msg_doit+0x209/0x2f0 [ 208.454566][ T7359] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 208.454600][ T7359] ? trace_cap_capable+0x18d/0x200 [ 208.454637][ T7359] ? bpf_lsm_capable+0x9/0x10 [ 208.454672][ T7359] ? security_capable+0x7e/0x260 [ 208.454701][ T7359] ? ns_capable+0xd7/0x110 [ 208.454732][ T7359] genl_rcv_msg+0x55c/0x800 [ 208.454774][ T7359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.454815][ T7359] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.454875][ T7359] netlink_rcv_skb+0x158/0x420 [ 208.454905][ T7359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.454943][ T7359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.454992][ T7359] ? netlink_deliver_tap+0x1ae/0xd30 [ 208.455027][ T7359] genl_rcv+0x28/0x40 [ 208.455058][ T7359] netlink_unicast+0x53a/0x7f0 [ 208.455099][ T7359] ? __pfx_netlink_unicast+0x10/0x10 [ 208.455145][ T7359] netlink_sendmsg+0x8d1/0xdd0 [ 208.455186][ T7359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.455236][ T7359] ____sys_sendmsg+0xa98/0xc70 [ 208.455284][ T7359] ? copy_msghdr_from_user+0x10a/0x160 [ 208.455328][ T7359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.455357][ T7359] ? preempt_schedule_thunk+0x16/0x30 [ 208.455399][ T7359] ? try_to_wake_up+0xa2f/0x1680 [ 208.455436][ T7359] ___sys_sendmsg+0x134/0x1d0 [ 208.455481][ T7359] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.455518][ T7359] ? __lock_acquire+0x622/0x1c90 [ 208.455614][ T7359] __sys_sendmsg+0x16d/0x220 [ 208.455658][ T7359] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.455699][ T7359] ? __x64_sys_futex+0x1e0/0x4c0 [ 208.455764][ T7359] do_syscall_64+0xcd/0x490 [ 208.455794][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.455821][ T7359] RIP: 0033:0x7f6ff458e929 [ 208.455845][ T7359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.455871][ T7359] RSP: 002b:00007f6ff532b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.455899][ T7359] RAX: ffffffffffffffda RBX: 00007f6ff47b6080 RCX: 00007f6ff458e929 [ 208.455917][ T7359] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 208.455934][ T7359] RBP: 00007f6ff4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 208.455950][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.455965][ T7359] R13: 0000000000000000 R14: 00007f6ff47b6080 R15: 00007fff6db47ed8 [ 208.456003][ T7359] [ 208.856922][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.477152][ T7379] FAULT_INJECTION: forcing a failure. [ 209.477152][ T7379] name failslab, interval 1, probability 0, space 0, times 0 [ 209.539783][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.3.275 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 209.539829][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.539846][ T7379] Call Trace: [ 209.539856][ T7379] [ 209.539868][ T7379] dump_stack_lvl+0x16c/0x1f0 [ 209.539919][ T7379] should_fail_ex+0x512/0x640 [ 209.539960][ T7379] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 209.540002][ T7379] ? __pfx_rescuer_thread+0x10/0x10 [ 209.540043][ T7379] should_failslab+0xc2/0x120 [ 209.540071][ T7379] __kmalloc_cache_noprof+0x6a/0x3e0 [ 209.540108][ T7379] ? lockdep_init_map_type+0x5c/0x280 [ 209.540145][ T7379] ? __kthread_create_on_node+0xce/0x3f0 [ 209.540177][ T7379] ? __pfx_rescuer_thread+0x10/0x10 [ 209.540210][ T7379] __kthread_create_on_node+0xce/0x3f0 [ 209.540248][ T7379] ? __pfx___kthread_create_on_node+0x10/0x10 [ 209.540296][ T7379] ? __pfx_vsnprintf+0x10/0x10 [ 209.540347][ T7379] ? __pfx_rescuer_thread+0x10/0x10 [ 209.540400][ T7379] kthread_create_on_node+0xc7/0x100 [ 209.540437][ T7379] ? __pfx_kthread_create_on_node+0x10/0x10 [ 209.540471][ T7379] ? __pfx_scnprintf+0x10/0x10 [ 209.540535][ T7379] init_rescuer+0x320/0x640 [ 209.540572][ T7379] ? __pfx_init_rescuer+0x10/0x10 [ 209.540666][ T7379] ? wq_adjust_max_active+0x39d/0x4a0 [ 209.540718][ T7379] __alloc_workqueue+0xc37/0x1810 [ 209.540764][ T7379] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 209.540813][ T7379] alloc_workqueue+0xd2/0x200 [ 209.540850][ T7379] ? __pfx_alloc_workqueue+0x10/0x10 [ 209.540901][ T7379] ? __pfx___debug_object_init+0x10/0x10 [ 209.540947][ T7379] nci_register_device+0x21e/0xb80 [ 209.540991][ T7379] ? __pfx_nci_register_device+0x10/0x10 [ 209.541038][ T7379] ? lockdep_init_map_type+0x5c/0x280 [ 209.541089][ T7379] virtual_ncidev_open+0x141/0x220 [ 209.541126][ T7379] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 209.541159][ T7379] misc_open+0x35d/0x420 [ 209.541197][ T7379] ? __pfx_misc_open+0x10/0x10 [ 209.541233][ T7379] chrdev_open+0x231/0x6a0 [ 209.541276][ T7379] ? __pfx_apparmor_file_open+0x10/0x10 [ 209.541315][ T7379] ? __pfx_chrdev_open+0x10/0x10 [ 209.541364][ T7379] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 209.541423][ T7379] do_dentry_open+0x744/0x1c10 [ 209.541468][ T7379] ? __pfx_chrdev_open+0x10/0x10 [ 209.541524][ T7379] vfs_open+0x82/0x3f0 [ 209.541563][ T7379] path_openat+0x1de4/0x2cb0 [ 209.541623][ T7379] ? __pfx_path_openat+0x10/0x10 [ 209.541665][ T7379] ? __lock_acquire+0xb8a/0x1c90 [ 209.541706][ T7379] do_filp_open+0x20b/0x470 [ 209.541744][ T7379] ? __pfx_do_filp_open+0x10/0x10 [ 209.541816][ T7379] ? alloc_fd+0x471/0x7d0 [ 209.541868][ T7379] do_sys_openat2+0x11b/0x1d0 [ 209.541897][ T7379] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.541942][ T7379] __x64_sys_openat+0x174/0x210 [ 209.541976][ T7379] ? __pfx___x64_sys_openat+0x10/0x10 [ 209.542024][ T7379] do_syscall_64+0xcd/0x490 [ 209.542054][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.542080][ T7379] RIP: 0033:0x7f37ae38e929 [ 209.542104][ T7379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.542130][ T7379] RSP: 002b:00007f37af134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 209.542157][ T7379] RAX: ffffffffffffffda RBX: 00007f37ae5b5fa0 RCX: 00007f37ae38e929 [ 209.542175][ T7379] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 209.542193][ T7379] RBP: 00007f37ae410b39 R08: 0000000000000000 R09: 0000000000000000 [ 209.542211][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.542227][ T7379] R13: 0000000000000000 R14: 00007f37ae5b5fa0 R15: 00007ffdd80b6c78 [ 209.542268][ T7379] [ 209.903865][ T7379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 210.002660][ T7380] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 210.321987][ T7383] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 211.087141][ T7391] netlink: 16 bytes leftover after parsing attributes in process `'. [ 211.540826][ T7403] FAULT_INJECTION: forcing a failure. [ 211.540826][ T7403] name failslab, interval 1, probability 0, space 0, times 0 [ 211.610065][ T7403] CPU: 1 UID: 0 PID: 7403 Comm: syz.3.281 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 211.610107][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.610123][ T7403] Call Trace: [ 211.610133][ T7403] [ 211.610144][ T7403] dump_stack_lvl+0x16c/0x1f0 [ 211.610192][ T7403] should_fail_ex+0x512/0x640 [ 211.610233][ T7403] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 211.610269][ T7403] should_failslab+0xc2/0x120 [ 211.610289][ T7403] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 211.610319][ T7403] ? is_bpf_text_address+0x94/0x1a0 [ 211.610349][ T7403] ? alloc_empty_file+0x55/0x1e0 [ 211.610376][ T7403] alloc_empty_file+0x55/0x1e0 [ 211.610400][ T7403] path_openat+0xda/0x2cb0 [ 211.610439][ T7403] ? stack_trace_save+0x8e/0xc0 [ 211.610463][ T7403] ? __pfx_path_openat+0x10/0x10 [ 211.610492][ T7403] ? stack_depot_save_flags+0x28/0xa40 [ 211.610533][ T7403] do_filp_open+0x20b/0x470 [ 211.610561][ T7403] ? kasan_save_track+0x14/0x30 [ 211.610593][ T7403] ? __pfx_do_filp_open+0x10/0x10 [ 211.610621][ T7403] ? __x64_sys_execve+0x74/0xb0 [ 211.610648][ T7403] ? do_syscall_64+0xcd/0x490 [ 211.610667][ T7403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.610729][ T7403] do_open_execat+0xf9/0x450 [ 211.610755][ T7403] ? __pfx_do_open_execat+0x10/0x10 [ 211.610795][ T7403] alloc_bprm+0x2d/0x6f0 [ 211.610826][ T7403] do_execveat_common.isra.0+0x1ce/0x610 [ 211.610862][ T7403] __x64_sys_execve+0x8e/0xb0 [ 211.610893][ T7403] do_syscall_64+0xcd/0x490 [ 211.610915][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.610935][ T7403] RIP: 0033:0x7f37ae38e929 [ 211.610953][ T7403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.610973][ T7403] RSP: 002b:00007f37af134038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 211.610994][ T7403] RAX: ffffffffffffffda RBX: 00007f37ae5b5fa0 RCX: 00007f37ae38e929 [ 211.611008][ T7403] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 211.611021][ T7403] RBP: 00007f37af134090 R08: 0000000000000000 R09: 0000000000000000 [ 211.611033][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.611046][ T7403] R13: 0000000000000000 R14: 00007f37ae5b5fa0 R15: 00007ffdd80b6c78 [ 211.611085][ T7403] [ 211.841138][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.635737][ T7427] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 213.655257][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.2.286 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 213.655299][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.655315][ T7427] Call Trace: [ 213.655324][ T7427] [ 213.655335][ T7427] dump_stack_lvl+0x16c/0x1f0 [ 213.655385][ T7427] sysfs_warn_dup+0x7f/0xa0 [ 213.655422][ T7427] sysfs_do_create_link_sd+0x124/0x140 [ 213.655467][ T7427] sysfs_create_link+0x61/0xc0 [ 213.655508][ T7427] device_add+0x62c/0x1a70 [ 213.655548][ T7427] ? __pfx_device_add+0x10/0x10 [ 213.655577][ T7427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.655626][ T7427] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 213.655688][ T7427] wiphy_register+0x1c9c/0x2850 [ 213.655722][ T7427] ? netdev_run_todo+0x864/0x1320 [ 213.655770][ T7427] ? __pfx_wiphy_register+0x10/0x10 [ 213.655823][ T7427] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 213.655863][ T7427] ieee80211_register_hw+0x24ac/0x4140 [ 213.655918][ T7427] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 213.655960][ T7427] ? find_held_lock+0x2b/0x80 [ 213.655991][ T7427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.656037][ T7427] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 213.656070][ T7427] ? __hrtimer_setup+0x176/0x280 [ 213.656120][ T7427] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 213.656202][ T7427] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 213.656259][ T7427] hwsim_new_radio_nl+0xb51/0x12c0 [ 213.656309][ T7427] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 213.656368][ T7427] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 213.656409][ T7427] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 213.656459][ T7427] genl_family_rcv_msg_doit+0x209/0x2f0 [ 213.656503][ T7427] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 213.656542][ T7427] ? trace_cap_capable+0x18d/0x200 [ 213.656583][ T7427] ? bpf_lsm_capable+0x9/0x10 [ 213.656619][ T7427] ? security_capable+0x7e/0x260 [ 213.656649][ T7427] ? ns_capable+0xd7/0x110 [ 213.656683][ T7427] genl_rcv_msg+0x55c/0x800 [ 213.656728][ T7427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.656767][ T7427] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 213.656828][ T7427] netlink_rcv_skb+0x158/0x420 [ 213.656861][ T7427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.656901][ T7427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.656954][ T7427] ? netlink_deliver_tap+0x1ae/0xd30 [ 213.656992][ T7427] genl_rcv+0x28/0x40 [ 213.657025][ T7427] netlink_unicast+0x53a/0x7f0 [ 213.657064][ T7427] ? __pfx_netlink_unicast+0x10/0x10 [ 213.657110][ T7427] netlink_sendmsg+0x8d1/0xdd0 [ 213.657152][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.657208][ T7427] ____sys_sendmsg+0xa98/0xc70 [ 213.657245][ T7427] ? copy_msghdr_from_user+0x10a/0x160 [ 213.657291][ T7427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.657323][ T7427] ? preempt_schedule_thunk+0x16/0x30 [ 213.657369][ T7427] ? try_to_wake_up+0xa2f/0x1680 [ 213.657406][ T7427] ___sys_sendmsg+0x134/0x1d0 [ 213.657453][ T7427] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.657496][ T7427] ? __lock_acquire+0x622/0x1c90 [ 213.657592][ T7427] __sys_sendmsg+0x16d/0x220 [ 213.657639][ T7427] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.657684][ T7427] ? __x64_sys_futex+0x1e0/0x4c0 [ 213.657748][ T7427] do_syscall_64+0xcd/0x490 [ 213.657779][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.657808][ T7427] RIP: 0033:0x7f6ff458e929 [ 213.657832][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.657860][ T7427] RSP: 002b:00007f6ff532b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.657888][ T7427] RAX: ffffffffffffffda RBX: 00007f6ff47b6080 RCX: 00007f6ff458e929 [ 213.657907][ T7427] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 213.657925][ T7427] RBP: 00007f6ff4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 213.657942][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.657960][ T7427] R13: 0000000000000000 R14: 00007f6ff47b6080 R15: 00007fff6db47ed8 [ 213.658002][ T7427] [ 214.497434][ T7438] FAULT_INJECTION: forcing a failure. [ 214.497434][ T7438] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 214.588217][ T7438] CPU: 1 UID: 0 PID: 7438 Comm: syz.3.288 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 214.588258][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.588274][ T7438] Call Trace: [ 214.588283][ T7438] [ 214.588293][ T7438] dump_stack_lvl+0x16c/0x1f0 [ 214.588342][ T7438] should_fail_ex+0x512/0x640 [ 214.588397][ T7438] _copy_from_iter+0x29f/0x16f0 [ 214.588445][ T7438] ? __alloc_skb+0x200/0x380 [ 214.588488][ T7438] ? __pfx__copy_from_iter+0x10/0x10 [ 214.588534][ T7438] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 214.588578][ T7438] netlink_sendmsg+0x829/0xdd0 [ 214.588618][ T7438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.588666][ T7438] ____sys_sendmsg+0xa98/0xc70 [ 214.588702][ T7438] ? copy_msghdr_from_user+0x10a/0x160 [ 214.588745][ T7438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.588798][ T7438] ___sys_sendmsg+0x134/0x1d0 [ 214.588845][ T7438] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.588885][ T7438] ? __lock_acquire+0x622/0x1c90 [ 214.588972][ T7438] __sys_sendmsg+0x16d/0x220 [ 214.589017][ T7438] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.589087][ T7438] do_syscall_64+0xcd/0x490 [ 214.589118][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.589144][ T7438] RIP: 0033:0x7f37ae38e929 [ 214.589168][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.589193][ T7438] RSP: 002b:00007f37af134038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.589220][ T7438] RAX: ffffffffffffffda RBX: 00007f37ae5b5fa0 RCX: 00007f37ae38e929 [ 214.589238][ T7438] RDX: 0000000000008080 RSI: 00002000000083c0 RDI: 0000000000000003 [ 214.589256][ T7438] RBP: 00007f37af134090 R08: 0000000000000000 R09: 0000000000000000 [ 214.589272][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.589288][ T7438] R13: 0000000000000000 R14: 00007f37ae5b5fa0 R15: 00007ffdd80b6c78 [ 214.589325][ T7438] [ 216.388268][ T7459] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input32 [ 217.183339][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 217.190150][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 217.191793][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 217.197965][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.542765][ T7473] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 217.619560][ T7473] CPU: 1 UID: 0 PID: 7473 Comm: syz.1.297 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 217.619591][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.619601][ T7473] Call Trace: [ 217.619607][ T7473] [ 217.619614][ T7473] dump_stack_lvl+0x16c/0x1f0 [ 217.619645][ T7473] sysfs_warn_dup+0x7f/0xa0 [ 217.619672][ T7473] sysfs_do_create_link_sd+0x124/0x140 [ 217.619697][ T7473] sysfs_create_link+0x61/0xc0 [ 217.619720][ T7473] device_add+0x62c/0x1a70 [ 217.619740][ T7473] ? __pfx_device_add+0x10/0x10 [ 217.619757][ T7473] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.619791][ T7473] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 217.619846][ T7473] wiphy_register+0x1c9c/0x2850 [ 217.619879][ T7473] ? netdev_run_todo+0x864/0x1320 [ 217.619927][ T7473] ? __pfx_wiphy_register+0x10/0x10 [ 217.619980][ T7473] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 217.620020][ T7473] ieee80211_register_hw+0x24ac/0x4140 [ 217.620071][ T7473] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 217.620111][ T7473] ? find_held_lock+0x2b/0x80 [ 217.620152][ T7473] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.620199][ T7473] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 217.620232][ T7473] ? __hrtimer_setup+0x176/0x280 [ 217.620281][ T7473] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 217.620366][ T7473] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 217.620429][ T7473] hwsim_new_radio_nl+0xb51/0x12c0 [ 217.620479][ T7473] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 217.620542][ T7473] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 217.620584][ T7473] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 217.620639][ T7473] genl_family_rcv_msg_doit+0x209/0x2f0 [ 217.620683][ T7473] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 217.620723][ T7473] ? trace_cap_capable+0x18d/0x200 [ 217.620768][ T7473] ? bpf_lsm_capable+0x9/0x10 [ 217.620804][ T7473] ? security_capable+0x7e/0x260 [ 217.620836][ T7473] ? ns_capable+0xd7/0x110 [ 217.620871][ T7473] genl_rcv_msg+0x55c/0x800 [ 217.620917][ T7473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.620958][ T7473] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 217.621022][ T7473] netlink_rcv_skb+0x158/0x420 [ 217.621057][ T7473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.621098][ T7473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.621154][ T7473] ? netlink_deliver_tap+0x1ae/0xd30 [ 217.621196][ T7473] genl_rcv+0x28/0x40 [ 217.621230][ T7473] netlink_unicast+0x53a/0x7f0 [ 217.621272][ T7473] ? __pfx_netlink_unicast+0x10/0x10 [ 217.621322][ T7473] netlink_sendmsg+0x8d1/0xdd0 [ 217.621374][ T7473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.621430][ T7473] ____sys_sendmsg+0xa98/0xc70 [ 217.621468][ T7473] ? copy_msghdr_from_user+0x10a/0x160 [ 217.621515][ T7473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.621547][ T7473] ? preempt_schedule_thunk+0x16/0x30 [ 217.621594][ T7473] ? try_to_wake_up+0xa2f/0x1680 [ 217.621636][ T7473] ___sys_sendmsg+0x134/0x1d0 [ 217.621687][ T7473] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.621731][ T7473] ? __lock_acquire+0x622/0x1c90 [ 217.621831][ T7473] __sys_sendmsg+0x16d/0x220 [ 217.621879][ T7473] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.621925][ T7473] ? __x64_sys_futex+0x1e0/0x4c0 [ 217.622024][ T7473] do_syscall_64+0xcd/0x490 [ 217.622082][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.622127][ T7473] RIP: 0033:0x7f023eb8e929 [ 217.622165][ T7473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.622199][ T7473] RSP: 002b:00007f023f9f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.622227][ T7473] RAX: ffffffffffffffda RBX: 00007f023edb6080 RCX: 00007f023eb8e929 [ 217.622247][ T7473] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 217.622265][ T7473] RBP: 00007f023ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 217.622282][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.622299][ T7473] R13: 0000000000000000 R14: 00007f023edb6080 R15: 00007ffeed714958 [ 217.622348][ T7473] [ 219.529042][ T7492] zswap: compressor not available [ 219.795802][ T7514] random: crng reseeded on system resumption [ 221.689221][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 223.212656][ T7543] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 224.286706][ T7537] delete_channel: no stack [ 224.464727][ T7563] netlink: 266 bytes leftover after parsing attributes in process `syz.0.317'. [ 224.510042][ T7563] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.565044][ T7565] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 225.045395][ T7572] FAULT_INJECTION: forcing a failure. [ 225.045395][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 225.099426][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.2.320 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 225.099466][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.099482][ T7572] Call Trace: [ 225.099490][ T7572] [ 225.099501][ T7572] dump_stack_lvl+0x16c/0x1f0 [ 225.099548][ T7572] should_fail_ex+0x512/0x640 [ 225.099586][ T7572] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 225.099625][ T7572] should_failslab+0xc2/0x120 [ 225.099651][ T7572] __kmalloc_cache_noprof+0x6a/0x3e0 [ 225.099687][ T7572] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 225.099725][ T7572] ? genl_start+0x1e8/0x980 [ 225.099762][ T7572] genl_start+0x1e8/0x980 [ 225.099800][ T7572] __netlink_dump_start+0x60b/0x990 [ 225.099836][ T7572] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 225.099875][ T7572] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 225.099910][ T7572] ? genl_rcv_msg+0x577/0x800 [ 225.099954][ T7572] ? __pfx_genl_get_cmd+0x10/0x10 [ 225.099980][ T7572] ? __pfx_genl_start+0x10/0x10 [ 225.100009][ T7572] ? __pfx_genl_dumpit+0x10/0x10 [ 225.100039][ T7572] ? __pfx_genl_done+0x10/0x10 [ 225.100087][ T7572] ? __radix_tree_lookup+0x21f/0x2c0 [ 225.100131][ T7572] genl_rcv_msg+0x46e/0x800 [ 225.100171][ T7572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.100206][ T7572] ? __pfx_tipc_nl_node_dump_monitor+0x10/0x10 [ 225.100264][ T7572] netlink_rcv_skb+0x158/0x420 [ 225.100294][ T7572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.100330][ T7572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.100377][ T7572] ? netlink_deliver_tap+0x1ae/0xd30 [ 225.100412][ T7572] genl_rcv+0x28/0x40 [ 225.100441][ T7572] netlink_unicast+0x53a/0x7f0 [ 225.100481][ T7572] ? __pfx_netlink_unicast+0x10/0x10 [ 225.100523][ T7572] netlink_sendmsg+0x8d1/0xdd0 [ 225.100560][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.100606][ T7572] ____sys_sendmsg+0xa98/0xc70 [ 225.100641][ T7572] ? copy_msghdr_from_user+0x10a/0x160 [ 225.100682][ T7572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.100733][ T7572] ___sys_sendmsg+0x134/0x1d0 [ 225.100778][ T7572] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.100816][ T7572] ? __lock_acquire+0x622/0x1c90 [ 225.100901][ T7572] __sys_sendmsg+0x16d/0x220 [ 225.100943][ T7572] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.101013][ T7572] do_syscall_64+0xcd/0x490 [ 225.101041][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.101077][ T7572] RIP: 0033:0x7f6ff458e929 [ 225.101098][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.101123][ T7572] RSP: 002b:00007f6ff534c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.101148][ T7572] RAX: ffffffffffffffda RBX: 00007f6ff47b5fa0 RCX: 00007f6ff458e929 [ 225.101165][ T7572] RDX: 0000000000008080 RSI: 00002000000083c0 RDI: 0000000000000003 [ 225.101181][ T7572] RBP: 00007f6ff534c090 R08: 0000000000000000 R09: 0000000000000000 [ 225.101195][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.101211][ T7572] R13: 0000000000000000 R14: 00007f6ff47b5fa0 R15: 00007fff6db47ed8 [ 225.101249][ T7572] [ 226.405531][ T7588] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 226.438266][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.1.324 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 226.438311][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.438327][ T7588] Call Trace: [ 226.438336][ T7588] [ 226.438348][ T7588] dump_stack_lvl+0x16c/0x1f0 [ 226.438398][ T7588] sysfs_warn_dup+0x7f/0xa0 [ 226.438438][ T7588] sysfs_do_create_link_sd+0x124/0x140 [ 226.438481][ T7588] sysfs_create_link+0x61/0xc0 [ 226.438520][ T7588] device_add+0x62c/0x1a70 [ 226.438556][ T7588] ? __pfx_device_add+0x10/0x10 [ 226.438584][ T7588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.438631][ T7588] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 226.438690][ T7588] wiphy_register+0x1c9c/0x2850 [ 226.438725][ T7588] ? netdev_run_todo+0x864/0x1320 [ 226.438769][ T7588] ? __pfx_wiphy_register+0x10/0x10 [ 226.438819][ T7588] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 226.438876][ T7588] ieee80211_register_hw+0x24ac/0x4140 [ 226.438932][ T7588] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 226.438974][ T7588] ? find_held_lock+0x2b/0x80 [ 226.439005][ T7588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.439051][ T7588] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 226.439084][ T7588] ? __hrtimer_setup+0x176/0x280 [ 226.439134][ T7588] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 226.439217][ T7588] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 226.439279][ T7588] hwsim_new_radio_nl+0xb51/0x12c0 [ 226.439329][ T7588] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 226.439392][ T7588] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 226.439434][ T7588] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 226.439488][ T7588] genl_family_rcv_msg_doit+0x209/0x2f0 [ 226.439532][ T7588] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.439572][ T7588] ? trace_cap_capable+0x18d/0x200 [ 226.439616][ T7588] ? bpf_lsm_capable+0x9/0x10 [ 226.439650][ T7588] ? security_capable+0x7e/0x260 [ 226.439682][ T7588] ? ns_capable+0xd7/0x110 [ 226.439718][ T7588] genl_rcv_msg+0x55c/0x800 [ 226.439764][ T7588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.439804][ T7588] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 226.439869][ T7588] netlink_rcv_skb+0x158/0x420 [ 226.439902][ T7588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.439943][ T7588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.439995][ T7588] ? netlink_deliver_tap+0x1ae/0xd30 [ 226.440034][ T7588] genl_rcv+0x28/0x40 [ 226.440066][ T7588] netlink_unicast+0x53a/0x7f0 [ 226.440106][ T7588] ? __pfx_netlink_unicast+0x10/0x10 [ 226.440152][ T7588] netlink_sendmsg+0x8d1/0xdd0 [ 226.440194][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.440254][ T7588] ____sys_sendmsg+0xa98/0xc70 [ 226.440290][ T7588] ? copy_msghdr_from_user+0x10a/0x160 [ 226.440336][ T7588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.440383][ T7588] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.440431][ T7588] ___sys_sendmsg+0x134/0x1d0 [ 226.440481][ T7588] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.440523][ T7588] ? __lock_acquire+0x622/0x1c90 [ 226.440613][ T7588] __sys_sendmsg+0x16d/0x220 [ 226.440660][ T7588] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.440706][ T7588] ? __x64_sys_futex+0x1e0/0x4c0 [ 226.440770][ T7588] do_syscall_64+0xcd/0x490 [ 226.440802][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.440832][ T7588] RIP: 0033:0x7f023eb8e929 [ 226.440856][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.440884][ T7588] RSP: 002b:00007f023f9f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.440913][ T7588] RAX: ffffffffffffffda RBX: 00007f023edb6080 RCX: 00007f023eb8e929 [ 226.440932][ T7588] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 226.440950][ T7588] RBP: 00007f023ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 226.440965][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.440983][ T7588] R13: 0000000000000000 R14: 00007f023edb6080 R15: 00007ffeed714958 [ 226.441024][ T7588] [ 227.134809][ T7595] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 227.633175][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 229.141832][ T7621] HfR: entered promiscuous mode [ 229.151311][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'. [ 229.179635][ T7621] HfR: left promiscuous mode [ 230.419599][ T7637] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 232.701086][ T7677] Scaler: ================= START STATUS ================= [ 232.725081][ T7677] Scaler: ================== END STATUS ================== [ 233.448824][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 233.646432][ T30] audit: type=1806 audit(6045425516.694:3): xattr="." res=0 [ 234.069703][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 236.202231][ T7747] FAULT_INJECTION: forcing a failure. [ 236.202231][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 236.386923][ T7747] CPU: 0 UID: 0 PID: 7747 Comm: syz.2.364 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 236.386950][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.386960][ T7747] Call Trace: [ 236.386966][ T7747] [ 236.386972][ T7747] dump_stack_lvl+0x16c/0x1f0 [ 236.387004][ T7747] should_fail_ex+0x512/0x640 [ 236.387029][ T7747] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 236.387056][ T7747] should_failslab+0xc2/0x120 [ 236.387073][ T7747] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 236.387098][ T7747] ? vm_area_alloc+0x1f/0x160 [ 236.387123][ T7747] vm_area_alloc+0x1f/0x160 [ 236.387153][ T7747] create_init_stack_vma+0x29/0x700 [ 236.387183][ T7747] alloc_bprm+0x420/0x6f0 [ 236.387207][ T7747] do_execveat_common.isra.0+0x1ce/0x610 [ 236.387234][ T7747] __x64_sys_execve+0x8e/0xb0 [ 236.387258][ T7747] do_syscall_64+0xcd/0x490 [ 236.387275][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.387293][ T7747] RIP: 0033:0x7f6ff458e929 [ 236.387307][ T7747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.387324][ T7747] RSP: 002b:00007f6ff534c038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 236.387340][ T7747] RAX: ffffffffffffffda RBX: 00007f6ff47b5fa0 RCX: 00007f6ff458e929 [ 236.387351][ T7747] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 236.387361][ T7747] RBP: 00007f6ff534c090 R08: 0000000000000000 R09: 0000000000000000 [ 236.387370][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.387380][ T7747] R13: 0000000000000000 R14: 00007f6ff47b5fa0 R15: 00007fff6db47ed8 [ 236.387400][ T7747] [ 237.487505][ T7755] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 237.495390][ T7755] #PF: supervisor instruction fetch in kernel mode [ 237.501932][ T7755] #PF: error_code(0x0010) - not-present page [ 237.507969][ T7755] PGD 80000000226a6067 P4D 80000000226a6067 PUD 0 [ 237.514541][ T7755] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 237.519981][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.2.366 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 237.531952][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.542046][ T7755] RIP: 0010:0x0 [ 237.545532][ T7755] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 237.552907][ T7755] RSP: 0018:ffffc9000f9a79c8 EFLAGS: 00010283 [ 237.558994][ T7755] RAX: 000000000000090b RBX: 0000000000000000 RCX: ffffc9000cbc9000 [ 237.566987][ T7755] RDX: 0000000000080000 RSI: ffffea000147a700 RDI: ffff88807d146a80 [ 237.574979][ T7755] RBP: ffffea000147a700 R08: 0000000000000007 R09: 0000000000000000 [ 237.583083][ T7755] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001f34f3a [ 237.591099][ T7755] R13: ffff88807d146a80 R14: 0000000000000000 R15: dffffc0000000000 [ 237.599107][ T7755] FS: 00007f6ff534c6c0(0000) GS:ffff88812485f000(0000) knlGS:0000000000000000 [ 237.608068][ T7755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.614681][ T7755] CR2: ffffffffffffffd6 CR3: 0000000035e8e000 CR4: 00000000003526f0 [ 237.622686][ T7755] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.630689][ T7755] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.638696][ T7755] Call Trace: [ 237.642008][ T7755] [ 237.644961][ T7755] filemap_read_folio+0xc8/0x2a0 [ 237.649956][ T7755] ? __pfx_filemap_read_folio+0x10/0x10 [ 237.655533][ T7755] ? __filemap_get_folio+0x32b/0xc30 [ 237.660839][ T7755] ? down_read+0x13d/0x480 [ 237.665284][ T7755] do_read_cache_folio+0x263/0x5c0 [ 237.670420][ T7755] freader_get_folio+0x337/0x930 [ 237.675388][ T7755] freader_fetch+0xc2/0x5e0 [ 237.679918][ T7755] ? mt_find+0x3ef/0xa30 [ 237.684183][ T7755] __build_id_parse.isra.0+0xec/0x7a0 [ 237.689591][ T7755] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 237.695608][ T7755] ? __pfx_find_vma+0x10/0x10 [ 237.700308][ T7755] do_procmap_query+0xd96/0x1090 [ 237.705362][ T7755] ? __pfx_do_procmap_query+0x10/0x10 [ 237.710950][ T7755] ? __fget_files+0x20e/0x3c0 [ 237.715653][ T7755] procfs_procmap_ioctl+0x7d/0xb0 [ 237.720699][ T7755] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 237.726442][ T7755] __x64_sys_ioctl+0x18b/0x210 [ 237.731227][ T7755] do_syscall_64+0xcd/0x490 [ 237.735748][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.741754][ T7755] RIP: 0033:0x7f6ff458e929 [ 237.746188][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.765815][ T7755] RSP: 002b:00007f6ff534c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.774247][ T7755] RAX: ffffffffffffffda RBX: 00007f6ff47b5fa0 RCX: 00007f6ff458e929 [ 237.782232][ T7755] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000003 [ 237.790218][ T7755] RBP: 00007f6ff4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 237.798208][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.806199][ T7755] R13: 0000000000000000 R14: 00007f6ff47b5fa0 R15: 00007fff6db47ed8 [ 237.814193][ T7755] [ 237.817223][ T7755] Modules linked in: [ 237.821131][ T7755] CR2: 0000000000000000 [ 237.825290][ T7755] ---[ end trace 0000000000000000 ]--- [ 237.830759][ T7755] RIP: 0010:0x0 [ 237.834238][ T7755] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 237.841609][ T7755] RSP: 0018:ffffc9000f9a79c8 EFLAGS: 00010283 [ 237.847691][ T7755] RAX: 000000000000090b RBX: 0000000000000000 RCX: ffffc9000cbc9000 [ 237.855675][ T7755] RDX: 0000000000080000 RSI: ffffea000147a700 RDI: ffff88807d146a80 [ 237.863658][ T7755] RBP: ffffea000147a700 R08: 0000000000000007 R09: 0000000000000000 [ 237.871647][ T7755] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001f34f3a [ 237.879715][ T7755] R13: ffff88807d146a80 R14: 0000000000000000 R15: dffffc0000000000 [ 237.887710][ T7755] FS: 00007f6ff534c6c0(0000) GS:ffff88812485f000(0000) knlGS:0000000000000000 [ 237.896663][ T7755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.903269][ T7755] CR2: ffffffffffffffd6 CR3: 0000000035e8e000 CR4: 00000000003526f0 [ 237.911256][ T7755] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.919240][ T7755] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.927226][ T7755] Kernel panic - not syncing: Fatal exception [ 237.933443][ T7755] Kernel Offset: disabled [ 237.937764][ T7755] Rebooting in 86400 seconds..