last executing test programs: 16.391776671s ago: executing program 1 (id=1219): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, 0xffffffffffffffff, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000640), 0x4c4ac3, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r1, 0x0, 0xc70) pread64$auto(r0, 0x0, 0x7ff, 0x400) r2 = socket(0x1a, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, 0x0, 0x41) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x8800) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0xc805) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) madvise$auto(0x0, 0x2003f0, 0x17) 16.318709871s ago: executing program 2 (id=1220): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r0 = socket(0xa, 0x1, 0x100) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000038c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003880)={&(0x7f0000003900)=ANY=[@ANYBLOB="a4330000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1601c28008007c00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x33a4}, 0x1, 0x0, 0x0, 0x40000}, 0x28000084) ioperm$auto(0x4000007, 0x5ad8, 0x8) open(0x0, 0x161342, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000180)="7c85620f4a263773c8393b9112e834be2372fe4a054f27a66f40f019f571de850e8fdeed6313e42b8b368bae70d418481bac6b420be85d13b6244295e474775d550f281e2febc4a9a6086a43af1bf2fc77c810526c10e9c6e8a6f89c46486ef24c6b9021de5c54", 0x3ff, 0x73, &(0x7f0000000200)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, &(0x7f0000000240)=0xd0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r2, &(0x7f0000000280)=""/49, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x3) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r3, 0x8924, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 13.789331589s ago: executing program 3 (id=1224): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x2, 0x3) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r1 = open(0x0, 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r1, 0x1) ioctl$auto_TCSBRK2(r0, 0x5409, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x1, 0x84) fchmod$auto(r2, 0xffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd1\x00', 0x10040, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r2, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4008195) mmap$auto(0x3, 0x20009, 0xde, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) read$auto(r3, 0x0, 0x802) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r4) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x20008805}, 0x40c0) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1c_\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xee\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', 0x0, 0x0, 0x1001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000040)="5c7820d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) write$auto(0x3, 0x0, 0x100082) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r7, 0x8000450a, r7) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x5) 12.739626124s ago: executing program 1 (id=1227): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x80881, 0x0) ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TUNSETVNETLE(r0, 0x400454dc, 0x0) msgsnd$auto(0x0, 0x0, 0x1000, 0x20004) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r1 = socket(0x200000000000011, 0x2, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x8, 0xe3, 0x9b72, 0x2, 0x8000) gettimeofday$auto(&(0x7f0000000080)={0x0, 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) mlockall$auto(0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) clock_getres$auto(0xfffffffb, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x86, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @enumerated=@item=[0x100, 0xfffffff4, 0x1d24, 0x4, 0x3, 0x1, 0x0, 0x4, 0x78, 0x101, 0x7, 0x8001, 0x15, 0x9, 0xffff, 0xfff, 0xd000000, 0x9, 0x8aee, 0x1, 0x2792b724, 0x7, 0x9, 0x3, 0x7, 0x0, 0x1000, 0x0, 0x34fa, 0xbe, 0xa597, 0x5, 0x1, 0x6, 0x3318, 0x9, 0x2, 0x6, 0x49bd4055, 0x4000001, 0x3, 0x6d8, 0x7fffffff, 0x7, 0x3, 0x8, 0x56ae, 0x1, 0xfffffffd, 0xffffffff, 0xd340, 0x4, 0x965e, 0x40, 0xffffffff, 0x10001, 0x10001, 0xb8, 0x401, 0xd, 0x4000, 0x8000, 0x2, 0x3b7, 0x7, 0x0, 0x81, 0x6f, 0x8001, 0x0, 0x0, 0x0, 0xa, 0xf, 0x6, 0x80, 0x9, 0x2, 0xa50, 0x1, 0x8001, 0x9, 0xce3c57d, 0x2, 0xfffffff9, 0x1, 0x9, 0x4, 0x7f, 0xf, 0x1, 0x9, 0xd0, 0x7, 0x5, 0x7ff, 0xa, 0x9, 0x0, 0x2, 0x7ff, 0x4, 0x4001, 0xff8, 0x5, 0x9, 0x6, 0x3, 0x5, 0x2a, 0xfffffff9, 0x3, 0x3, 0x8, 0xef, 0x9, 0x401, 0x1000, 0xbd, 0x7, 0x7fff, 0x3ff, 0x0, 0x8, 0xa, 0x52, 0xefc9, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) mmap$auto(0x3, 0x0, 0x80000de, 0xc39, 0x2, 0x8) mlock$auto(0xfbe8, 0x4) fcntl$getown(r2, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = socket(0x18, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x40047459, 0x0) 12.670765378s ago: executing program 2 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f00000001c0)=')::%#(\'^\x02\x00', 0x2, 0x8, &(0x7f0000000240)={0x5, 0x5, 0x3, 0x5}) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffeffb, 0x2, 0x8e0, 0x300, 0x50b301a, 0xe4, 0x2c, 0x1, 0x5}) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffff9, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000140)=""/44, 0x2c) sendfile$auto(r4, r3, 0x0, 0x1000202) 11.634238376s ago: executing program 3 (id=1230): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) kcmp$auto(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="dfa6e3cc", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32, @ANYRES16=0xffffffffffffffff], 0x228}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001f00)=ANY=[@ANYBLOB="24190000", @ANYRES64=r3, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x1924}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = socket(0x22, 0x1, 0x100) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r5, 0xc0105702, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001, 0x7, 0x4000000d, 0x6, 0x948b, 0x3, 0x1180000000000000, 0x7fffffff, 0x3, 0x62, 0x80000001, 0x4, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r4) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r7, 0x0, 0x801) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) kill$auto(0x80000007, 0x24) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r8, 0x40186f40, 0x0) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r9, 0x4b41, 0x7) 11.078783538s ago: executing program 2 (id=1231): ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000200)={0x0, &(0x7f0000000000)={0xffff, 0x5, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x412100, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x6}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000100)=""/153, 0x99) madvise$auto(0x5, 0x81, 0x5) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) 9.587135488s ago: executing program 3 (id=1233): socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af13, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r5 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=r4}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r5, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) 9.459232573s ago: executing program 1 (id=1234): r0 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) r3 = socket(0x2b, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="010027bd7000fbdbeb252a00050020001180080003c1ff00020062617461647630000000372ee8410049c70ea3d8"], 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000140), 0x8401, 0x0) writev$auto(r5, &(0x7f0000003640)={0x0, 0x3}, 0x3) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket(0x2b, 0x1, 0x1) listen$auto(r7, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x408000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYRES8=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048840) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r10 = socket(0x2, 0x5, 0x0) getsockopt$auto(r10, 0x84, 0xf, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0x4138ae84, 0x0) 8.470522828s ago: executing program 1 (id=1235): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101c81, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) close_range$auto(0x2, 0x8, 0x0) 8.469981062s ago: executing program 2 (id=1236): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, 0xffffffffffffffff, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000640), 0x4c4ac3, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r1, 0x0, 0xc70) pread64$auto(r0, 0x0, 0x7ff, 0x400) r2 = socket(0x1a, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, 0x0, 0x41) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x8800) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0xc805) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) madvise$auto(0x0, 0x2003f0, 0x17) 5.408996305s ago: executing program 1 (id=1238): mmap$auto(0x0, 0x5, 0x8000000000002d5b, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x6) select$auto(0x85, 0x0, 0x0, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x3, 0x2020009, 0x3fffffffffff, 0x1f, 0xfffffffffffffffa, 0x8002) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x3f6f69b1b8a2b987) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000380)="c092634801979e790e000000000000005bb4103833df6294b84edf24bddb077a132530ff763399afc4af9305e1bba71be6e2d4a3301a339fe3", 0x2}, 0x8, 0x0, 0xfffffffffffffff7, 0x3}, 0x6}, 0x16d, 0x1001000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x14}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x6ffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep\x00', 0x16bd00, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x400000000000100) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.016252361s ago: executing program 2 (id=1240): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="010025bd700002dcdf2503000000050009000500000004000600040006003d1202805000a500c667d9d0cca65d36490648637f04abd8489cc9506022c8fdacd8c22e41b7d2fa985dddd4b2a5bc76074abe9f0f7649f33e5d77a8ea4c3b443b183ae146e3f9ca235415abb72b1863c0166ebb22114580bbb94c93b312191f84de52174ef5b9d6d59c8cc74f0058dded57a7a541a3008eb7fd96705f9056abb12127a7a862b213720a9138cc5e515206c2c67d96a85f4ed00755cfe9337a385153519e144b6a1b58dac5d963d89bb2577d048c71bc80aac3c8f21168defd407d32a5321443eeff8e5942c2f43bc93e0a8cb1dd317a9e8b1666edf829be42389b40da3cdd62d74927de8a89201eddd9a799cacaf4d1f69a7427eed9b3e7fc5555965125c44ee35d835ee3e1c3db437900c59e9531f473c9a25420a693b5a0a4230bdd74b2a3d9958215efa47728727a4b736b4f44b20800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff0500090001000000"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r5, 0x0, 0x594c, 0x9fffffffd) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r8, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) 4.987257744s ago: executing program 3 (id=1241): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) socket(0x25, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/info\x00', 0x1b04, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) read$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000140)=""/134, 0x86) fsopen$auto(0x0, 0x1) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xb, 0x3, 0xb) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x4e2940, 0x0) write$auto(r2, 0x0, 0x5cc) pread64$auto(0xffffffffffffffff, 0x0, 0x101, 0x800005c2b) 4.434435125s ago: executing program 0 (id=1242): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x80881, 0x0) ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TUNSETVNETLE(r0, 0x400454dc, 0x0) msgsnd$auto(0x0, 0x0, 0x1000, 0x20004) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r1 = socket(0x200000000000011, 0x2, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x8, 0xe3, 0x9b72, 0x2, 0x8000) gettimeofday$auto(&(0x7f0000000080)={0x0, 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) mlockall$auto(0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) clock_getres$auto(0xfffffffb, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x86, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @enumerated=@item=[0x100, 0xfffffff4, 0x1d24, 0x4, 0x3, 0x1, 0x0, 0x4, 0x78, 0x101, 0x7, 0x8001, 0x15, 0x9, 0xffff, 0xfff, 0xd000000, 0x9, 0x8aee, 0x1, 0x2792b724, 0x7, 0x9, 0x3, 0x7, 0x0, 0x1000, 0x0, 0x34fa, 0xbe, 0xa597, 0x5, 0x1, 0x6, 0x3318, 0x9, 0x2, 0x6, 0x49bd4055, 0x4000001, 0x3, 0x6d8, 0x7fffffff, 0x7, 0x3, 0x8, 0x56ae, 0x1, 0xfffffffd, 0xffffffff, 0xd340, 0x4, 0x965e, 0x40, 0xffffffff, 0x10001, 0x10001, 0xb8, 0x401, 0xd, 0x4000, 0x8000, 0x2, 0x3b7, 0x7, 0x0, 0x81, 0x6f, 0x8001, 0x0, 0x0, 0x0, 0xa, 0xf, 0x6, 0x80, 0x9, 0x2, 0xa50, 0x1, 0x8001, 0x9, 0xce3c57d, 0x2, 0xfffffff9, 0x1, 0x9, 0x4, 0x7f, 0xf, 0x1, 0x9, 0xd0, 0x7, 0x5, 0x7ff, 0xa, 0x9, 0x0, 0x2, 0x7ff, 0x4, 0x4001, 0xff8, 0x5, 0x9, 0x6, 0x3, 0x5, 0x2a, 0xfffffff9, 0x3, 0x3, 0x8, 0xef, 0x9, 0x401, 0x1000, 0xbd, 0x7, 0x7fff, 0x3ff, 0x0, 0x8, 0xa, 0x52, 0xefc9, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) mmap$auto(0x3, 0x0, 0x80000de, 0xc39, 0x2, 0x8) mlock$auto(0xfbe8, 0x4) fcntl$getown(r2, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = socket(0x18, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x40047459, 0x0) 3.560464513s ago: executing program 0 (id=1244): ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000200)={0x0, &(0x7f0000000000)={0xffff, 0x5, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x412100, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x6}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000100)=""/153, 0x99) madvise$auto(0x5, 0x81, 0x5) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) 2.828314141s ago: executing program 3 (id=1245): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x28, r3, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'vdpa\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) mmap$auto(0x0, 0x240009, 0x2df, 0x9b72, r1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x2, 0x1) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) read$auto(0x3, 0x0, 0x1f40) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r7 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000080)={@siginfo_0_0={0x7, 0x615, 0x3, @_sigchld={0x0, 0xffffffffffffffff, 0x1, 0x401, 0xfffffffffffffff8}}}, 0x3, &(0x7f0000000100)={{0x5, 0xd}, {0xe4, 0xffff}, 0x17c9, 0x1, 0x7fffffff, 0x9, 0x20000000000006, 0x0, 0x7, 0x1, 0x5, 0x4, 0x9d, 0xee, 0x5, 0x6}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000580)={{@inferred=r7, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6bfc1f64010043eeb0b0530300efffffff0d00", @raw=0xff}, 0x4, 0x966, 0x6, @raw=0x30, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0xffff}, 0x1) 2.370669128s ago: executing program 0 (id=1246): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) socket(0x25, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/info\x00', 0x1b04, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) read$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000140)=""/134, 0x86) fsopen$auto(0x0, 0x1) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xb, 0x3, 0xb) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x4e2940, 0x0) write$auto(r2, 0x0, 0x5cc) pread64$auto(0xffffffffffffffff, 0x0, 0x101, 0x800005c2b) 1.648931598s ago: executing program 0 (id=1247): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r2, @ANYBLOB="01002abd7000467f4b5be2f4e44ab30108f778d64b44fedbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x1003, 0x401, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7a=v^\x951\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeC\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95\a\xf5e\xfa\x94M\xb8%a\xa53fc\x95\'\xedc\xc5\xad\x7fM\xb4\xf39\x82\xdf8Y)\x8e\xa6\x0e[\xe1\x88\x1d\x0f[j\xe9\x83\x11\x1e\xca2\xba\xdb\xe4\b%\n\xcb\xbar\xf8\x84\xb0\x00$V\xa6`;\xfao\xe6A\x1b\xf2d\xfc\xb4}\xecP\x80h\xfb\x9f3e}\x8edq\x86\x00\xe0bb\x16\xb1kM\xc6GW#-\xf6\x17$BW\x83J\xd7g\xf1\xc0\xbf\x03>\xf2\xeb g\xb7\x14\xc6\xc7\xc9]\xce.\x82Y\x98\tg\v\x11a\v\xb4\xab\x12\xc7', 0x8) socket(0x10, 0x2, 0x0) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) 1.402951791s ago: executing program 3 (id=1248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x100) r2 = eventfd2$auto(0x6af3, 0x800) r3 = socket(0x1e, 0x1, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r3, @new_map_fd=r0, 0x3, @old_prog_fd=r1}, 0x1) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x2901, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7440, 0x1, 0x9, 0x9, 0xdffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) r6 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000032c0), 0x1000, 0x0) preadv$auto(r6, &(0x7f0000003340)={&(0x7f0000003300), 0x40}, 0x9, 0x5, 0x100000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x40802, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r7, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r4, 0x7, &(0x7f0000000480)="6015b43a6a85408b6073c9fd54f812d15bdb2af7e71a113124c44fa871a0ac35083372233a4d132617996a4a6d3356ed6a95d66c1c6dc4f5c993aedc87133686052cf6b81b1cea7827178b796f59e5d653844180d7fb7117dfdf054d8c4f6770e8d958df184ea0e2274ff37a582f4c4dab8f02f526594bba6d879dd88b4c1263584e1ed3fa916d994ac452c7ec359c3a39690d6662985a6fe7a43bb1dc224f147abdf02633d901d8e1") unshare$auto(0x40000080) openat$dir(0xffffffffffffff9c, 0x0, 0x40140, 0x12d) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 835.593551ms ago: executing program 2 (id=1249): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x64842, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socketcall$auto_SYS_SOCKET(0x1, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffff001, 0xffffffffffff0001, 0x1d) socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) madvise$auto(0xab48, 0x68e3, 0x3c0) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000340)='3\x00', 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_active\x00', 0x200, 0x0) pread64$auto(r3, 0x0, 0x81, 0x4) timer_create$auto(0xfffffffd, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0x10080c, 0x18007}, {0x8}}, 0x0) timer_gettime$auto(0x8000000f, 0x0) getsockopt$auto(r0, 0x28, 0x2, 0x0, 0x0) io_uring_register$auto(0x2, 0x14, 0x0, 0x3) 819.747558ms ago: executing program 0 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f00000001c0)=')::%#(\'^\x02\x00', 0x2, 0x8, &(0x7f0000000240)={0x5, 0x5, 0x3, 0x5}) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40200, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffeffb, 0x2, 0x8e0, 0x300, 0x50b301a, 0xe4, 0x2c, 0x1, 0x5}) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffff9, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000140)=""/44, 0x2c) sendfile$auto(r4, r3, 0x0, 0x1000202) 229.418µs ago: executing program 0 (id=1250): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x985}, 0x4) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000600)='/Eev7audio1\x00VI\xa3\xaa\x01\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\x8eZ|\xffGP\x97)\xcf\a\xfb\\nD\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb\xd9\xce\xb3\xfa\xcd(\xa6\x9c\xc7I\xb65T\xa4Y8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x06k\xa2\xc2\xa7n\xf8>\"\xfd@\xee\xf9\xa4\xf4\xb4\x90\x95\f\xc2\xb6\x15\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xda\xe4\x15\xcbx\x01w\xeb\xf4R\x9663\x840\tL\xd2r\xf7\f#\xccR\xfc\xc0e~b\x99`S_\xba\a%Ta\xdf\xbc\x85\x99\xfe\xf8\x05n\xfa\xb9-ph\xf2\x87\x92\x9d\x10!\x83\xecV\x19\xd2\x96W\x9d\x8b\xd6bt\xea\xe4\x9c\xbf\x01t@\x85/D\xba\x14.w\xf57\xbe\x804\f\xeep\x9f\xa7\xc25\\\xe9m0\xcf\xbe;\x83E\x17C\xda||A\xe6R;\x00\x00', 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) 0s ago: executing program 1 (id=1251): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/napi_defer_hard_irqs\x00', 0xc2481, 0x0) openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/tx_filtered\x00', 0x40000, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x40e342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10, 0x2, 0x7fff) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x80000000000, 0xffffffffffff0005, 0x19) mseal$auto(0x0, 0x7dda, 0x0) mremap$auto(0x1, 0x4, 0x8, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000020c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(r0, 0x1, 0x2a, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/sctp/max_autoclose\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) kernel console output (not intermixed with test programs): egistering): Released all slaves [ 528.587294][ T51] Bluetooth: hci2: command tx timeout [ 529.036943][T11219] chnl_net:caif_netlink_parms(): no params data found [ 529.566756][ T6392] hsr_slave_0: left promiscuous mode [ 529.587538][ T6392] hsr_slave_1: left promiscuous mode [ 529.614387][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.667446][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.730281][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.767612][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.903682][ T6392] veth1_macvtap: left promiscuous mode [ 529.929854][ T6392] veth0_macvtap: left promiscuous mode [ 529.935970][ T6392] veth1_vlan: left promiscuous mode [ 530.007250][ T6392] veth0_vlan: left promiscuous mode [ 530.531623][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 530.545223][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 530.553537][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 530.563405][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 530.571168][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.667197][ T5867] Bluetooth: hci2: command tx timeout [ 531.537001][ T6392] team0 (unregistering): Port device team_slave_1 removed [ 531.635585][ T6392] team0 (unregistering): Port device team_slave_0 removed [ 532.667801][ T5867] Bluetooth: hci0: command tx timeout [ 532.751290][ T5867] Bluetooth: hci2: command tx timeout [ 532.946527][T11219] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.963961][T11219] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.987779][T11219] bridge_slave_0: entered allmulticast mode [ 533.007386][T11219] bridge_slave_0: entered promiscuous mode [ 533.121162][T11219] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.140104][T11219] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.167310][T11219] bridge_slave_1: entered allmulticast mode [ 533.187363][T11219] bridge_slave_1: entered promiscuous mode [ 533.414689][T11219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.463224][T11219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.691657][T11219] team0: Port device team_slave_0 added [ 533.723283][T11219] team0: Port device team_slave_1 added [ 533.887316][T11294] vhci_hcd: invalid port number 16 [ 533.901931][T11294] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 533.959650][T11219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.975803][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.053282][T11219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.271919][ T6392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.360220][T11219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.409463][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.549499][T11219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.752452][ T5867] Bluetooth: hci0: command tx timeout [ 534.765976][ T6392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.991906][ T6392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.172748][T11219] hsr_slave_0: entered promiscuous mode [ 535.201969][T11219] hsr_slave_1: entered promiscuous mode [ 535.224198][T11219] debugfs: 'hsr0' already exists in 'hsr' [ 535.261878][T11219] Cannot create hsr debugfs directory [ 535.421194][ T6392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.513437][T11315] zram: Added device: zram1 [ 535.564657][T11314] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 535.826563][T11283] chnl_net:caif_netlink_parms(): no params data found [ 536.310989][ T6392] bridge_slave_1: left allmulticast mode [ 536.358331][ T6392] bridge_slave_1: left promiscuous mode [ 536.387355][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.438214][ T6392] bridge_slave_0: left allmulticast mode [ 536.443920][ T6392] bridge_slave_0: left promiscuous mode [ 536.496406][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.827570][ T5867] Bluetooth: hci0: command tx timeout [ 537.376287][T11336] netlink: set zone limit has 8 unknown bytes [ 538.357696][ T6392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.400306][ T6392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.447801][ T6392] bond0 (unregistering): Released all slaves [ 538.907867][ T5867] Bluetooth: hci0: command tx timeout [ 539.285317][T11283] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.312604][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.340111][T11283] bridge_slave_0: entered allmulticast mode [ 539.356389][T11283] bridge_slave_0: entered promiscuous mode [ 539.378210][T11283] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.385381][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.424020][T11283] bridge_slave_1: entered allmulticast mode [ 539.441530][T11283] bridge_slave_1: entered promiscuous mode [ 539.799302][T11349] bond0: option all_slaves_active: invalid value () [ 539.982192][T11283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.122050][T11283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.160636][ T6392] hsr_slave_0: left promiscuous mode [ 540.167030][ T6392] hsr_slave_1: left promiscuous mode [ 540.180241][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.194666][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.204477][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.214694][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.240952][ T6392] veth1_macvtap: left promiscuous mode [ 540.246786][ T6392] veth0_macvtap: left promiscuous mode [ 540.254708][ T6392] veth1_vlan: left promiscuous mode [ 540.261649][ T6392] veth0_vlan: left promiscuous mode [ 540.825670][ T6392] team0 (unregistering): Port device team_slave_1 removed [ 540.883165][ T6392] team0 (unregistering): Port device team_slave_0 removed [ 541.536862][T11283] team0: Port device team_slave_0 added [ 541.622734][T11283] team0: Port device team_slave_1 added [ 541.791776][T11283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.836376][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.913145][T11283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.970954][T11283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.987707][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.045687][T11283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.148228][T11219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 542.191086][T11219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 542.242308][T11219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 542.275430][T11219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 542.469626][T11283] hsr_slave_0: entered promiscuous mode [ 542.476189][T11283] hsr_slave_1: entered promiscuous mode [ 543.307309][ T5867] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 543.575187][T11219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.764505][T11219] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.896793][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.904033][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.978888][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.986299][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.110676][T11401] FAULT_INJECTION: forcing a failure. [ 544.110676][T11401] name failslab, interval 1, probability 0, space 0, times 0 [ 544.188732][T11401] CPU: 1 UID: 0 PID: 11401 Comm: syz.3.819 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 544.188773][T11401] Tainted: [U]=USER [ 544.188781][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.188796][T11401] Call Trace: [ 544.188804][T11401] [ 544.188813][T11401] dump_stack_lvl+0x16c/0x1f0 [ 544.188842][T11401] should_fail_ex+0x512/0x640 [ 544.188871][T11401] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 544.188899][T11401] should_failslab+0xc2/0x120 [ 544.188931][T11401] __kmalloc_cache_noprof+0x6a/0x3e0 [ 544.188957][T11401] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 544.188989][T11401] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 544.189018][T11401] devlink_fmsg_arr_pair_nest_end+0xb4/0x180 [ 544.189050][T11401] nsim_dev_dummy_fmsg_put+0x151/0x1e0 [ 544.189078][T11401] devlink_health_do_dump+0x240/0x620 [ 544.189112][T11401] devlink_health_report+0x3c9/0x9c0 [ 544.189146][T11401] ? __pfx_devlink_health_report+0x10/0x10 [ 544.189177][T11401] ? _copy_from_user+0x59/0xd0 [ 544.189214][T11401] nsim_dev_health_break_write+0x166/0x210 [ 544.189242][T11401] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 544.189279][T11401] full_proxy_write+0x12e/0x1a0 [ 544.189314][T11401] ? __pfx_full_proxy_write+0x10/0x10 [ 544.189346][T11401] vfs_write+0x29d/0x1150 [ 544.189378][T11401] ? __pfx___mutex_lock+0x10/0x10 [ 544.189404][T11401] ? __pfx_vfs_write+0x10/0x10 [ 544.189440][T11401] ? __fget_files+0x20e/0x3c0 [ 544.189474][T11401] ksys_write+0x12a/0x250 [ 544.189501][T11401] ? __pfx_ksys_write+0x10/0x10 [ 544.189537][T11401] do_syscall_64+0xcd/0x490 [ 544.189566][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.189590][T11401] RIP: 0033:0x7fe5ebb8ebe9 [ 544.189608][T11401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.189632][T11401] RSP: 002b:00007fe5ec978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 544.189653][T11401] RAX: ffffffffffffffda RBX: 00007fe5ebdb6090 RCX: 00007fe5ebb8ebe9 [ 544.189669][T11401] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 544.189683][T11401] RBP: 00007fe5ebc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 544.189705][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.189719][T11401] R13: 00007fe5ebdb6128 R14: 00007fe5ebdb6090 R15: 00007ffdc0cfaa48 [ 544.189754][T11401] [ 544.996413][T11219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.029558][T11219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.810853][T11283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 545.904421][T11283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 545.976567][T11283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.034714][T11283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.095111][T11219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.323373][T11219] veth0_vlan: entered promiscuous mode [ 546.443929][T11219] veth1_vlan: entered promiscuous mode [ 546.646087][T11219] veth0_macvtap: entered promiscuous mode [ 546.716815][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.821'. [ 546.780191][T11283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.826058][T11219] veth1_macvtap: entered promiscuous mode [ 546.900998][T11431] veth0_macvtap: left promiscuous mode [ 547.093601][T11283] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.237630][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.244960][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.359598][T11219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.443086][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.450301][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.544493][T11219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.676907][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.761854][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.793944][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.863002][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.045191][T11283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.305445][ T6392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.371632][ T6392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.540952][ T6392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.602048][ T6392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.201425][T11283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.481122][T11283] veth0_vlan: entered promiscuous mode [ 549.565733][T11283] veth1_vlan: entered promiscuous mode [ 549.820176][T11283] veth0_macvtap: entered promiscuous mode [ 549.939145][T11283] veth1_macvtap: entered promiscuous mode [ 550.071357][T11283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.344692][T11283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.486531][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.542187][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.857258][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.909890][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.994593][T11488] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 551.344399][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.410925][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.570019][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.637487][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.091618][ T60] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.662004][T11516] Process accounting resumed [ 555.394029][T11548] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 556.577302][T11567] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 558.311571][T11534] kexec: Could not allocate control_code_buffer [ 560.394751][T11615] zswap: compressor not available [ 560.419623][T11581] kexec: Could not allocate control_code_buffer [ 563.032982][T11659] FAULT_INJECTION: forcing a failure. [ 563.032982][T11659] name failslab, interval 1, probability 0, space 0, times 0 [ 563.125298][T11659] CPU: 1 UID: 0 PID: 11659 Comm: syz.3.852 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 563.125339][T11659] Tainted: [U]=USER [ 563.125347][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.125362][T11659] Call Trace: [ 563.125369][T11659] [ 563.125378][T11659] dump_stack_lvl+0x16c/0x1f0 [ 563.125407][T11659] should_fail_ex+0x512/0x640 [ 563.125442][T11659] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 563.125470][T11659] should_failslab+0xc2/0x120 [ 563.125503][T11659] __kmalloc_cache_noprof+0x6a/0x3e0 [ 563.125529][T11659] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 563.125563][T11659] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 563.125593][T11659] devlink_fmsg_u32_pair_put+0x270/0x2f0 [ 563.125623][T11659] ? __pfx_devlink_fmsg_u32_pair_put+0x10/0x10 [ 563.125654][T11659] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 563.125687][T11659] nsim_dev_dummy_fmsg_put+0x4d/0x1e0 [ 563.125716][T11659] devlink_health_do_dump+0x240/0x620 [ 563.125749][T11659] devlink_health_report+0x3c9/0x9c0 [ 563.125783][T11659] ? __pfx_devlink_health_report+0x10/0x10 [ 563.125814][T11659] ? _copy_from_user+0x59/0xd0 [ 563.125850][T11659] nsim_dev_health_break_write+0x166/0x210 [ 563.125878][T11659] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 563.125915][T11659] full_proxy_write+0x12e/0x1a0 [ 563.125951][T11659] ? __pfx_full_proxy_write+0x10/0x10 [ 563.125982][T11659] vfs_write+0x29d/0x1150 [ 563.126014][T11659] ? __pfx___mutex_lock+0x10/0x10 [ 563.126041][T11659] ? __pfx_vfs_write+0x10/0x10 [ 563.126076][T11659] ? __fget_files+0x20e/0x3c0 [ 563.126111][T11659] ksys_write+0x12a/0x250 [ 563.126138][T11659] ? __pfx_ksys_write+0x10/0x10 [ 563.126174][T11659] do_syscall_64+0xcd/0x490 [ 563.126205][T11659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.126229][T11659] RIP: 0033:0x7fe5ebb8ebe9 [ 563.126247][T11659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.126270][T11659] RSP: 002b:00007fe5ec999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.126292][T11659] RAX: ffffffffffffffda RBX: 00007fe5ebdb5fa0 RCX: 00007fe5ebb8ebe9 [ 563.126307][T11659] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000008 [ 563.126321][T11659] RBP: 00007fe5ebc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 563.126335][T11659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.126349][T11659] R13: 00007fe5ebdb6038 R14: 00007fe5ebdb5fa0 R15: 00007ffdc0cfaa48 [ 563.126379][T11659] [ 564.234291][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 564.282029][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 564.296684][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 564.336825][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.355123][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 564.797687][T11680] netlink: 'syz.3.855': attribute type 1 has an invalid length. [ 565.055037][T11684] netlink: zone id is out of range [ 565.097408][T11684] netlink: zone id is out of range [ 565.177603][T11684] netlink: zone id is out of range [ 565.227251][T11684] netlink: zone id is out of range [ 565.368697][T11684] netlink: zone id is out of range [ 565.466140][T11684] netlink: zone id is out of range [ 565.576773][T11684] netlink: zone id is out of range [ 565.716196][T11684] netlink: zone id is out of range [ 565.779293][T11684] netlink: zone id is out of range [ 565.829894][T11684] netlink: zone id is out of range [ 566.183639][T11667] chnl_net:caif_netlink_parms(): no params data found [ 566.445327][ T5867] Bluetooth: hci1: command tx timeout [ 566.615574][T11707] tc_dump_action: action bad kind [ 566.821892][T11707] FAULT_INJECTION: forcing a failure. [ 566.821892][T11707] name failslab, interval 1, probability 0, space 0, times 0 [ 566.979286][T11707] CPU: 1 UID: 0 PID: 11707 Comm: syz.2.860 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 566.979326][T11707] Tainted: [U]=USER [ 566.979334][T11707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.979348][T11707] Call Trace: [ 566.979357][T11707] [ 566.979366][T11707] dump_stack_lvl+0x16c/0x1f0 [ 566.979397][T11707] should_fail_ex+0x512/0x640 [ 566.979425][T11707] ? __kmalloc_noprof+0xbf/0x510 [ 566.979463][T11707] ? kvm_io_bus_register_dev+0x1b9/0x7f0 [ 566.979489][T11707] should_failslab+0xc2/0x120 [ 566.979522][T11707] __kmalloc_noprof+0xd2/0x510 [ 566.979557][T11707] kvm_io_bus_register_dev+0x1b9/0x7f0 [ 566.979592][T11707] kvm_ioapic_init+0x429/0x590 [ 566.979623][T11707] kvm_arch_vm_ioctl+0x8c6/0x1860 [ 566.979658][T11707] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 566.979694][T11707] ? __lock_acquire+0x62e/0x1ce0 [ 566.979732][T11707] ? __lock_acquire+0x62e/0x1ce0 [ 566.979769][T11707] ? __lock_acquire+0x62e/0x1ce0 [ 566.979806][T11707] ? __lock_acquire+0x62e/0x1ce0 [ 566.979855][T11707] ? is_bpf_text_address+0x8a/0x1a0 [ 566.979893][T11707] ? bpf_ksym_find+0x124/0x1c0 [ 566.979917][T11707] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 566.979953][T11707] ? is_bpf_text_address+0x94/0x1a0 [ 566.979987][T11707] ? kernel_text_address+0x8d/0x100 [ 566.980009][T11707] ? __kernel_text_address+0xd/0x40 [ 566.980031][T11707] ? unwind_get_return_address+0x59/0xa0 [ 566.980057][T11707] ? arch_stack_walk+0xa6/0x100 [ 566.980094][T11707] ? stack_trace_save+0x8e/0xc0 [ 566.980122][T11707] ? __pfx_stack_trace_save+0x10/0x10 [ 566.980150][T11707] ? stack_depot_save_flags+0x29/0x9c0 [ 566.980179][T11707] ? __lock_acquire+0xb97/0x1ce0 [ 566.980214][T11707] ? kasan_save_stack+0x42/0x60 [ 566.980239][T11707] ? kasan_save_stack+0x33/0x60 [ 566.980265][T11707] ? kasan_save_track+0x14/0x30 [ 566.980292][T11707] ? kasan_save_free_info+0x3b/0x60 [ 566.980322][T11707] ? __kasan_slab_free+0x60/0x70 [ 566.980350][T11707] ? kfree+0x2b4/0x4d0 [ 566.980375][T11707] kvm_vm_ioctl+0x1a91/0x4000 [ 566.980410][T11707] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 566.980452][T11707] ? kasan_quarantine_put+0x10a/0x240 [ 566.980479][T11707] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.980507][T11707] ? find_held_lock+0x2b/0x80 [ 566.980531][T11707] ? tomoyo_path_number_perm+0x295/0x580 [ 566.980561][T11707] ? tomoyo_path_number_perm+0x18d/0x580 [ 566.980589][T11707] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 566.980625][T11707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.980664][T11707] ? do_vfs_ioctl+0x128/0x14f0 [ 566.980702][T11707] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 566.980748][T11707] ? find_held_lock+0x2b/0x80 [ 566.980770][T11707] ? hook_file_ioctl_common+0x145/0x410 [ 566.980804][T11707] ? __fget_files+0x20e/0x3c0 [ 566.980835][T11707] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 566.980859][T11707] __x64_sys_ioctl+0x18e/0x210 [ 566.980908][T11707] do_syscall_64+0xcd/0x490 [ 566.980937][T11707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.980962][T11707] RIP: 0033:0x7f821038ebe9 [ 566.980980][T11707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.981003][T11707] RSP: 002b:00007f8211220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.981025][T11707] RAX: ffffffffffffffda RBX: 00007f82105b5fa0 RCX: 00007f821038ebe9 [ 566.981041][T11707] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 566.981056][T11707] RBP: 00007f8210411e19 R08: 0000000000000000 R09: 0000000000000000 [ 566.981069][T11707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.981083][T11707] R13: 00007f82105b6038 R14: 00007f82105b5fa0 R15: 00007ffda69c73e8 [ 566.981113][T11707] [ 567.704280][T11667] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.716331][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.723857][T11667] bridge_slave_0: entered allmulticast mode [ 567.731638][T11667] bridge_slave_0: entered promiscuous mode [ 567.739664][T11667] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.746844][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.754196][T11667] bridge_slave_1: entered allmulticast mode [ 567.768669][T11667] bridge_slave_1: entered promiscuous mode [ 568.016847][T11667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.081683][T11667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.212689][T11667] team0: Port device team_slave_0 added [ 568.248468][T11667] team0: Port device team_slave_1 added [ 568.399732][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 568.415147][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 568.424834][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 568.438239][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 568.448156][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 568.508334][ T5867] Bluetooth: hci1: command tx timeout [ 568.575156][T11667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.600944][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.700640][T11667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.760689][T11667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.788369][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.859491][T11667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.176523][T11667] hsr_slave_0: entered promiscuous mode [ 569.201660][T11667] hsr_slave_1: entered promiscuous mode [ 569.230102][T11667] debugfs: 'hsr0' already exists in 'hsr' [ 569.235880][T11667] Cannot create hsr debugfs directory [ 570.507541][ T5867] Bluetooth: hci0: command tx timeout [ 570.597279][ T5867] Bluetooth: hci1: command tx timeout [ 570.782222][T11667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.884877][T11720] chnl_net:caif_netlink_parms(): no params data found [ 571.012096][T11667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.354150][T11667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.385572][T11740] sd 0:0:1:0: PR command failed: 1026 [ 571.438460][T11740] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 571.524786][T11667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.560862][T11740] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 571.805925][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.834062][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.871849][T11720] bridge_slave_0: entered allmulticast mode [ 571.901644][T11720] bridge_slave_0: entered promiscuous mode [ 571.942790][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.986258][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.016858][T11720] bridge_slave_1: entered allmulticast mode [ 572.048525][T11720] bridge_slave_1: entered promiscuous mode [ 572.075679][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.865'. [ 572.265876][T11740] veth0_macvtap: entered promiscuous mode [ 572.388926][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.444200][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.587370][ T5867] Bluetooth: hci0: command tx timeout [ 572.626174][T11720] team0: Port device team_slave_0 added [ 572.667838][ T5867] Bluetooth: hci1: command tx timeout [ 572.673923][T11720] team0: Port device team_slave_1 added [ 572.773891][T11667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.837805][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.837825][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.837854][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.839598][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.839614][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.839645][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.856657][T11667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.861079][T11667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 573.004463][T11667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 573.053797][T11720] hsr_slave_0: entered promiscuous mode [ 573.054637][T11720] hsr_slave_1: entered promiscuous mode [ 573.055147][T11720] debugfs: 'hsr0' already exists in 'hsr' [ 573.055166][T11720] Cannot create hsr debugfs directory [ 573.481529][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.481613][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.642569][T11720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.849820][T11720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.965382][T11667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.070560][T11720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.320654][T11720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.420246][T11667] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.496421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.503851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.562973][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.570336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.673636][ T5867] Bluetooth: hci0: command tx timeout [ 574.806581][T11667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.112901][T11720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.195827][T11720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.284470][T11720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.415242][T11720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.891659][T11667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.153837][T11720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.305650][T11667] veth0_vlan: entered promiscuous mode [ 576.374991][T11720] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.399281][T11667] veth1_vlan: entered promiscuous mode [ 576.432838][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.440055][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.553932][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.561330][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.748067][ T5867] Bluetooth: hci0: command tx timeout [ 576.755751][T11667] veth0_macvtap: entered promiscuous mode [ 576.813118][T11667] veth1_macvtap: entered promiscuous mode [ 576.935100][T11667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.004786][T11667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.138412][ T6392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.178968][ T6392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.301789][ T6392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.336145][ T6392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.669871][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.740502][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.846108][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.905607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.930972][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.152259][T11720] veth0_vlan: entered promiscuous mode [ 578.251593][T11720] veth1_vlan: entered promiscuous mode [ 578.383538][T11720] veth0_macvtap: entered promiscuous mode [ 578.489062][T11720] veth1_macvtap: entered promiscuous mode [ 578.664837][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.754505][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.874451][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.915203][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.979899][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.041460][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.337935][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.345815][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.584357][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.628391][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.791994][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 579.801731][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 579.810958][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 579.819419][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 579.827235][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 580.141080][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 580.890947][T11829] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 581.143200][T11814] chnl_net:caif_netlink_parms(): no params data found [ 581.387706][T11839] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 581.947661][ T51] Bluetooth: hci2: command tx timeout [ 582.038877][T11814] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.086599][T11814] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.137000][T11814] bridge_slave_0: entered allmulticast mode [ 582.184239][T11814] bridge_slave_0: entered promiscuous mode [ 582.223323][T11814] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.275230][T11814] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.320165][T11814] bridge_slave_1: entered allmulticast mode [ 582.328237][T11853] random: crng reseeded on system resumption [ 582.367368][T11814] bridge_slave_1: entered promiscuous mode [ 582.476349][T11855] vivid-009: ================= START STATUS ================= [ 582.539154][T11855] vivid-009: Enable Output Cropping: true [ 582.569792][T11855] vivid-009: Enable Output Composing: true [ 582.624006][T11855] vivid-009: Enable Output Scaler: true [ 582.656146][T11855] vivid-009: Tx RGB Quantization Range: Automatic [ 582.734209][T11855] vivid-009: Transmit Mode: HDMI [ 582.741477][T11814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.821954][T11855] vivid-009: Hotplug Present: 0x00000000 [ 582.833707][T11814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.875343][T11855] vivid-009: RxSense Present: 0x00000000 [ 582.924389][T11855] vivid-009: EDID Present: 0x00000000 [ 583.030235][T11855] vivid-009: ================== END STATUS ================== [ 583.255757][T11814] team0: Port device team_slave_0 added [ 583.310937][T11814] team0: Port device team_slave_1 added [ 583.366131][T11855] synth uevent: /module/orangefs: unknown uevent action string [ 583.602211][T11814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.642519][T11814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.794520][T11814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.845980][T11814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.868223][T11814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.978933][T11814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.027992][ T51] Bluetooth: hci2: command tx timeout [ 584.481362][T11814] hsr_slave_0: entered promiscuous mode [ 584.520537][T11814] hsr_slave_1: entered promiscuous mode [ 584.560786][T11814] debugfs: 'hsr0' already exists in 'hsr' [ 584.600403][T11814] Cannot create hsr debugfs directory [ 585.242450][T11814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.463089][T11814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.891848][T11814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.108450][ T51] Bluetooth: hci2: command tx timeout [ 586.189914][T11814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.925665][T11814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 586.956910][T11814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 587.008396][T11814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 587.043526][T11814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.443957][T11814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.543943][T11814] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.599008][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.606500][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.731716][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.739210][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.191869][ T51] Bluetooth: hci2: command tx timeout [ 588.248894][T11898] ubi0: attaching mtd0 [ 588.319499][T11898] ubi0: scanning is finished [ 588.361992][T11898] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 588.656059][T11898] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 588.689057][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.703640][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.712535][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.721074][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.729073][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.030281][T11814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.377013][T11814] veth0_vlan: entered promiscuous mode [ 589.482765][T11814] veth1_vlan: entered promiscuous mode [ 589.709718][T11814] veth0_macvtap: entered promiscuous mode [ 589.826537][T11814] veth1_macvtap: entered promiscuous mode [ 590.153581][T11814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.178998][T11895] random: crng reseeded on system resumption [ 590.214900][T11814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.368383][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.414933][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.475636][T11903] chnl_net:caif_netlink_parms(): no params data found [ 590.519037][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.561250][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.832287][ T5867] Bluetooth: hci1: command tx timeout [ 591.038117][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.077191][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.110099][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.133737][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.159213][T11903] bridge_slave_0: entered allmulticast mode [ 591.199018][T11903] bridge_slave_0: entered promiscuous mode [ 591.239515][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.246781][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.319523][T11903] bridge_slave_1: entered allmulticast mode [ 591.357718][T11903] bridge_slave_1: entered promiscuous mode [ 591.814440][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.851335][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.892485][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.954426][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.214291][T11903] team0: Port device team_slave_0 added [ 592.453591][T11903] team0: Port device team_slave_1 added [ 592.822027][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.862814][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.926823][ T5867] Bluetooth: hci1: command tx timeout [ 593.046240][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.136847][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.210017][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.345118][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.682732][T11903] hsr_slave_0: entered promiscuous mode [ 593.738768][T11903] hsr_slave_1: entered promiscuous mode [ 593.745197][T11903] debugfs: 'hsr0' already exists in 'hsr' [ 593.823559][T11903] Cannot create hsr debugfs directory [ 594.091705][T11920] bridge_slave_1: left allmulticast mode [ 594.113360][T11920] bridge_slave_1: left promiscuous mode [ 594.142621][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.258934][T11920] bridge_slave_0: left allmulticast mode [ 594.300830][T11920] bridge_slave_0: left promiscuous mode [ 594.329304][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.987727][ T5867] Bluetooth: hci1: command tx timeout [ 596.604133][T11920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.692580][T11920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.769518][T11920] bond0 (unregistering): Released all slaves [ 597.071315][ T5867] Bluetooth: hci1: command tx timeout [ 598.349811][T11920] hsr_slave_0: left promiscuous mode [ 598.412464][T11920] hsr_slave_1: left promiscuous mode [ 598.453403][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.548557][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.608852][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.647324][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.768757][T11920] veth1_macvtap: left promiscuous mode [ 598.796142][T11920] veth0_macvtap: left promiscuous mode [ 598.834145][T11920] veth1_vlan: left promiscuous mode [ 598.868235][T11920] veth0_vlan: left promiscuous mode [ 599.809293][T11987] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 600.332551][T11920] team0 (unregistering): Port device team_slave_1 removed [ 600.454356][T11920] team0 (unregistering): Port device team_slave_0 removed [ 602.161920][T11903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.383398][T11903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.569341][T11903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.842009][T11999] FAULT_INJECTION: forcing a failure. [ 602.842009][T11999] name failslab, interval 1, probability 0, space 0, times 0 [ 602.888450][T11903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.923409][T11999] CPU: 1 UID: 0 PID: 11999 Comm: syz.3.904 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 602.923450][T11999] Tainted: [U]=USER [ 602.923458][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.923473][T11999] Call Trace: [ 602.923482][T11999] [ 602.923491][T11999] dump_stack_lvl+0x16c/0x1f0 [ 602.923522][T11999] should_fail_ex+0x512/0x640 [ 602.923552][T11999] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 602.923580][T11999] should_failslab+0xc2/0x120 [ 602.923612][T11999] __kmalloc_cache_noprof+0x6a/0x3e0 [ 602.923637][T11999] ? percpu_ref_init+0xec/0x410 [ 602.923664][T11999] ? __pfx_blkg_release+0x10/0x10 [ 602.923696][T11999] percpu_ref_init+0xec/0x410 [ 602.923719][T11999] ? kasan_save_track+0x14/0x30 [ 602.923749][T11999] blkg_alloc+0xea/0xb00 [ 602.923788][T11999] blkcg_init_disk+0x51/0x160 [ 602.923827][T11999] __alloc_disk_node+0x299/0x630 [ 602.923859][T11999] __blk_mq_alloc_disk+0x89/0x120 [ 602.923887][T11999] nbd_dev_add+0x492/0xbb0 [ 602.923913][T11999] ? find_held_lock+0x2b/0x80 [ 602.923937][T11999] ? __pfx_nbd_dev_add+0x10/0x10 [ 602.923962][T11999] ? nbd_genl_connect+0x98e/0x1c60 [ 602.924009][T11999] ? bpf_lsm_capable+0x9/0x10 [ 602.924031][T11999] ? __radix_tree_lookup+0x21f/0x2c0 [ 602.924074][T11999] nbd_genl_connect+0x8b0/0x1c60 [ 602.924110][T11999] ? __pfx_nbd_genl_connect+0x10/0x10 [ 602.924140][T11999] ? __nla_parse+0x40/0x60 [ 602.924177][T11999] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 602.924211][T11999] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 602.924257][T11999] genl_family_rcv_msg_doit+0x209/0x2f0 [ 602.924292][T11999] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 602.924324][T11999] ? genl_get_cmd+0x194/0x580 [ 602.924362][T11999] ? __radix_tree_lookup+0x21f/0x2c0 [ 602.924405][T11999] genl_rcv_msg+0x55c/0x800 [ 602.924447][T11999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.924478][T11999] ? __pfx_nbd_genl_connect+0x10/0x10 [ 602.924520][T11999] netlink_rcv_skb+0x158/0x420 [ 602.924546][T11999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.924579][T11999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.924618][T11999] ? netlink_deliver_tap+0x1ae/0xd30 [ 602.924648][T11999] genl_rcv+0x28/0x40 [ 602.924675][T11999] netlink_unicast+0x5a7/0x870 [ 602.924706][T11999] ? __pfx_netlink_unicast+0x10/0x10 [ 602.924732][T11999] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 602.924757][T11999] ? __lock_acquire+0xb97/0x1ce0 [ 602.924796][T11999] netlink_sendmsg+0x8d1/0xdd0 [ 602.924827][T11999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.924857][T11999] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 602.924900][T11999] ____sys_sendmsg+0xa98/0xc70 [ 602.924933][T11999] ? copy_msghdr_from_user+0x10a/0x160 [ 602.924958][T11999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.925004][T11999] ___sys_sendmsg+0x134/0x1d0 [ 602.925031][T11999] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.925093][T11999] __sys_sendmsg+0x16d/0x220 [ 602.925119][T11999] ? __pfx___sys_sendmsg+0x10/0x10 [ 602.925144][T11999] ? __x64_sys_futex+0x1e0/0x4c0 [ 602.925193][T11999] do_syscall_64+0xcd/0x490 [ 602.925222][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.925251][T11999] RIP: 0033:0x7fe5ebb8ebe9 [ 602.925270][T11999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.925293][T11999] RSP: 002b:00007fe5ec999038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.925315][T11999] RAX: ffffffffffffffda RBX: 00007fe5ebdb5fa0 RCX: 00007fe5ebb8ebe9 [ 602.925331][T11999] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 000000000000000c [ 602.925346][T11999] RBP: 00007fe5ebc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 602.925359][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.925373][T11999] R13: 00007fe5ebdb6038 R14: 00007fe5ebdb5fa0 R15: 00007ffdc0cfaa48 [ 602.925404][T11999] [ 603.308543][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.494317][T11999] nbd: failed to add new device [ 603.649224][T11903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 603.658837][T11903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 603.662363][T11903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 603.665544][T11903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.378787][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.492630][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.643979][T12019] sd 0:0:1:0: PR command failed: 1026 [ 604.702015][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.709265][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.720416][T12019] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 604.823346][T12019] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 604.844381][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.851898][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.224428][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.523146][ T31] audit: type=1800 audit(4294967317.680:10): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.908" name="features" dev="configfs" ino=46226 res=0 errno=0 [ 606.555624][T12040] mkiss: ax0: crc mode is auto. [ 606.603448][T11903] veth0_vlan: entered promiscuous mode [ 606.644086][T12044] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 606.794455][T11903] veth1_vlan: entered promiscuous mode [ 607.285725][T11903] veth0_macvtap: entered promiscuous mode [ 607.476507][T11903] veth1_macvtap: entered promiscuous mode [ 607.923507][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.150395][T12057] FAULT_INJECTION: forcing a failure. [ 608.150395][T12057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 608.150447][T12057] CPU: 1 UID: 0 PID: 12057 Comm: syz.1.911 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 608.150483][T12057] Tainted: [U]=USER [ 608.150490][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 608.150504][T12057] Call Trace: [ 608.150512][T12057] [ 608.150520][T12057] dump_stack_lvl+0x16c/0x1f0 [ 608.150549][T12057] should_fail_ex+0x512/0x640 [ 608.150583][T12057] should_fail_alloc_page+0xe7/0x130 [ 608.150618][T12057] prepare_alloc_pages+0x3c2/0x610 [ 608.150654][T12057] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 608.150687][T12057] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 608.150719][T12057] ? arch_stack_walk+0xa6/0x100 [ 608.150766][T12057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 608.150796][T12057] ? stack_trace_save+0x8e/0xc0 [ 608.150837][T12057] ? fb_var_to_videomode+0x4c9/0x690 [ 608.150867][T12057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 608.150906][T12057] ? policy_nodemask+0xea/0x4e0 [ 608.150940][T12057] alloc_pages_mpol+0x1fb/0x550 [ 608.150973][T12057] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 608.151005][T12057] ? lockdep_hardirqs_on+0x7c/0x110 [ 608.151035][T12057] ? vc_allocate+0x489/0x880 [ 608.151059][T12057] ___kmalloc_large_node+0xed/0x160 [ 608.151095][T12057] ? con_is_visible+0x65/0x150 [ 608.151132][T12057] ? vc_allocate+0x489/0x880 [ 608.151156][T12057] __kmalloc_large_node_noprof+0x1c/0x70 [ 608.151196][T12057] __kmalloc_noprof.cold+0xc/0x61 [ 608.151240][T12057] vc_allocate+0x489/0x880 [ 608.151266][T12057] ? __pfx_vc_allocate+0x10/0x10 [ 608.151301][T12057] con_install+0xa1/0x600 [ 608.151329][T12057] ? __pfx_con_install+0x10/0x10 [ 608.151361][T12057] ? __pfx_con_install+0x10/0x10 [ 608.151388][T12057] tty_init_dev.part.0+0x9c/0x500 [ 608.151421][T12057] tty_open+0xa50/0xf90 [ 608.151455][T12057] ? __pfx_tty_open+0x10/0x10 [ 608.151485][T12057] ? chrdev_open+0x58c/0x6a0 [ 608.151520][T12057] ? __pfx_tty_open+0x10/0x10 [ 608.151548][T12057] chrdev_open+0x231/0x6a0 [ 608.151580][T12057] ? __pfx_chrdev_open+0x10/0x10 [ 608.151613][T12057] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 608.151646][T12057] do_dentry_open+0x97f/0x1530 [ 608.151676][T12057] ? __pfx_chrdev_open+0x10/0x10 [ 608.151720][T12057] vfs_open+0x82/0x3f0 [ 608.151765][T12057] path_openat+0x1de4/0x2cb0 [ 608.151804][T12057] ? __pfx_path_openat+0x10/0x10 [ 608.151841][T12057] do_filp_open+0x20b/0x470 [ 608.151870][T12057] ? __pfx_do_filp_open+0x10/0x10 [ 608.151921][T12057] ? alloc_fd+0x471/0x7d0 [ 608.151955][T12057] do_sys_openat2+0x11b/0x1d0 [ 608.151991][T12057] ? __pfx_do_sys_openat2+0x10/0x10 [ 608.152039][T12057] __x64_sys_openat+0x174/0x210 [ 608.152076][T12057] ? __pfx___x64_sys_openat+0x10/0x10 [ 608.152126][T12057] do_syscall_64+0xcd/0x490 [ 608.152155][T12057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.152178][T12057] RIP: 0033:0x7fa20278ebe9 [ 608.152196][T12057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.152220][T12057] RSP: 002b:00007fa20355b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 608.152242][T12057] RAX: ffffffffffffffda RBX: 00007fa2029b6180 RCX: 00007fa20278ebe9 [ 608.152257][T12057] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 608.152272][T12057] RBP: 00007fa202811e19 R08: 0000000000000000 R09: 0000000000000000 [ 608.152286][T12057] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 608.152300][T12057] R13: 00007fa2029b6218 R14: 00007fa2029b6180 R15: 00007ffd09db9eb8 [ 608.152331][T12057] [ 608.285898][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.670613][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.670938][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.670980][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.671028][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.703991][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.912'. [ 608.783424][T12059] i2c i2c-0: new_device: Extra parameters [ 609.323977][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.324034][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.510755][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.510780][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.299277][T12080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 611.688433][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.011002][T12080] bridge_slave_1 (unregistering): left allmulticast mode [ 612.041870][T12080] bridge_slave_1 (unregistering): left promiscuous mode [ 612.083308][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.095452][T12100] netlink: 350 bytes leftover after parsing attributes in process `syz.3.919'. [ 613.852595][ T5914] Process accounting resumed [ 617.905115][T12166] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input13 [ 618.380992][T12170] [U] [ 620.133046][T11920] bridge_slave_1: left allmulticast mode [ 620.160031][T11920] bridge_slave_1: left promiscuous mode [ 620.183120][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.243600][T11920] bridge_slave_0: left allmulticast mode [ 620.280311][T11920] bridge_slave_0: left promiscuous mode [ 620.286134][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.220614][T12187] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 621.732675][T11920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.781568][T11920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.835865][T11920] bond0 (unregistering): Released all slaves [ 621.853431][T12201] ubi0: attaching mtd0 [ 621.876870][T12201] ubi0: scanning is finished [ 622.025534][T12201] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 622.695300][T12201] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 622.989433][T11920] hsr_slave_0: left promiscuous mode [ 623.031378][T11920] hsr_slave_1: left promiscuous mode [ 623.064218][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.122985][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.208317][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.251335][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.412299][T11920] veth1_macvtap: left promiscuous mode [ 623.454141][T11920] veth0_macvtap: left promiscuous mode [ 623.498584][T11920] veth1_vlan: left promiscuous mode [ 623.504210][T11920] veth0_vlan: left promiscuous mode [ 623.679452][T12209] random: crng reseeded on system resumption [ 625.433235][T11920] team0 (unregistering): Port device team_slave_1 removed [ 625.591202][T11920] team0 (unregistering): Port device team_slave_0 removed [ 625.834519][T12227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 626.008380][T12228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'. [ 626.944521][T12228] bond0: (slave bond_slave_1): Releasing backup interface [ 632.334455][T12284] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 634.917458][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.923917][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.445408][T11920] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.078852][ T5914] Process accounting resumed [ 636.767344][T11920] bridge_slave_1: left allmulticast mode [ 636.773226][T11920] bridge_slave_1: left promiscuous mode [ 636.886118][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.980634][T11920] bridge_slave_0: left allmulticast mode [ 637.060686][T11920] bridge_slave_0: left promiscuous mode [ 637.109424][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.331600][T12329] net_ratelimit: 270 callbacks suppressed [ 637.331621][T12329] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 637.538072][T12341] ptrace attach of "./syz-executor exec"[11814] was attempted by "./syz-executor exec"[12341] [ 639.643799][T11920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.672050][T11920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.700755][T11920] bond0 (unregistering): Released all slaves [ 639.764944][T12337] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 639.859486][T12337] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 639.917749][T12337] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 640.846379][T11920] hsr_slave_0: left promiscuous mode [ 640.906743][T11920] hsr_slave_1: left promiscuous mode [ 640.956097][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.007287][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.045692][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.091852][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.125554][T12378] openvswitch: netlink: IPv4 tunnel dst address is zero [ 641.223847][T11920] veth1_macvtap: left promiscuous mode [ 641.267265][T11920] veth0_macvtap: left promiscuous mode [ 641.293771][T11920] veth1_vlan: left promiscuous mode [ 641.319797][T11920] veth0_vlan: left promiscuous mode [ 641.447973][T12384] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 643.189725][T11920] team0 (unregistering): Port device team_slave_1 removed [ 643.333430][T11920] team0 (unregistering): Port device team_slave_0 removed [ 644.332357][T12382] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 644.395677][T12382] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 644.473304][T12382] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 645.662315][T11920] bridge_slave_1: left allmulticast mode [ 645.716381][T11920] bridge_slave_1: left promiscuous mode [ 645.752098][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.811084][ T31] audit: type=1800 audit(4294967356.990:11): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.966" name="features" dev="configfs" ino=48437 res=0 errno=0 [ 645.908864][T11920] bridge_slave_0: left allmulticast mode [ 645.914594][T11920] bridge_slave_0: left promiscuous mode [ 645.992603][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.133354][T12412] random: crng reseeded on system resumption [ 650.369205][T11920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.391744][T11920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.415762][T11920] bond0 (unregistering): Released all slaves [ 651.779285][T11920] hsr_slave_0: left promiscuous mode [ 651.836228][T11920] hsr_slave_1: left promiscuous mode [ 651.881773][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.922948][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.951086][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.951112][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.043168][T11920] veth1_macvtap: left promiscuous mode [ 652.043257][T11920] veth0_macvtap: left promiscuous mode [ 652.043401][T11920] veth1_vlan: left promiscuous mode [ 652.043500][T11920] veth0_vlan: left promiscuous mode [ 652.974934][T12471] sysfs_service_op_show: Client not running :-5: [ 655.043423][T11920] team0 (unregistering): Port device team_slave_1 removed [ 655.235270][T11920] team0 (unregistering): Port device team_slave_0 removed [ 656.877705][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 656.892367][T12506] netlink: 354 bytes leftover after parsing attributes in process `syz.0.979'. [ 659.652547][T12524] random: crng reseeded on system resumption [ 660.358471][T12527] ima: policy update failed [ 660.369350][ T31] audit: type=1802 audit(4294967371.540:12): pid=12527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.984" res=0 errno=0 [ 660.781678][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 660.793278][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 660.802707][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 660.814894][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 660.831733][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 662.907546][ T51] Bluetooth: hci4: command tx timeout [ 663.135439][T12535] chnl_net:caif_netlink_parms(): no params data found [ 663.789832][T12535] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.857263][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.937356][T12535] bridge_slave_0: entered allmulticast mode [ 664.005128][T12535] bridge_slave_0: entered promiscuous mode [ 664.111263][T12578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.989'. [ 664.138414][T12535] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.239177][T12535] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.246552][T12535] bridge_slave_1: entered allmulticast mode [ 664.320992][T12535] bridge_slave_1: entered promiscuous mode [ 664.365389][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.373499][T12578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.394877][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.402940][T12578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.544762][T12577] ptp ptp0: only physical clock in use now [ 664.764151][T12535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.997066][ T51] Bluetooth: hci4: command tx timeout [ 665.087811][T12535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.847648][T12535] team0: Port device team_slave_0 added [ 665.965960][T12535] team0: Port device team_slave_1 added [ 666.899170][T12535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.906360][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.085795][ T51] Bluetooth: hci4: command tx timeout [ 667.299954][T12535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.323215][T12616] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 667.452661][T12535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.474455][ T31] audit: type=1800 audit(4294967378.640:13): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.993" name="features" dev="configfs" ino=49396 res=0 errno=0 [ 667.596460][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.881306][T12535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.635014][T12535] hsr_slave_0: entered promiscuous mode [ 668.679107][T12630] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input14 [ 668.789934][T12535] hsr_slave_1: entered promiscuous mode [ 669.150024][ T51] Bluetooth: hci4: command tx timeout [ 670.209620][T12535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.657881][T12535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.761912][T12535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.098725][T12535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.308666][T12535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 673.534096][T12535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 673.759327][T12535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 673.822088][T12535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 675.024025][T12535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.276803][ T31] audit: type=1804 audit(4294967386.450:14): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1005" name="/newroot/38/file0" dev="tmpfs" ino=223 res=1 errno=0 [ 675.340981][T12535] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.520797][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.528137][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.693476][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.700758][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.047959][T12535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.585511][T12759] ubi0: attaching mtd0 [ 678.686017][T12759] ubi0: scanning is finished [ 678.712948][T12759] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 678.951709][T12759] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 679.529528][T12535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.728437][T12535] veth0_vlan: entered promiscuous mode [ 679.785182][T12535] veth1_vlan: entered promiscuous mode [ 679.918613][T12535] veth0_macvtap: entered promiscuous mode [ 679.966646][T12535] veth1_macvtap: entered promiscuous mode [ 680.059684][T12535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.165371][T12535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.616294][ T6392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.747959][ T6392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.856657][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.964323][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.110930][ T60] bridge_slave_1: left allmulticast mode [ 681.116720][ T60] bridge_slave_1: left promiscuous mode [ 681.180296][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.230940][ T60] bridge_slave_0: left allmulticast mode [ 681.236678][ T60] bridge_slave_0: left promiscuous mode [ 681.272489][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.936786][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.971626][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.993223][ T60] bond0 (unregistering): Released all slaves [ 684.183946][ T6392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.283141][ T6392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.616122][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.720663][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.685904][ T60] hsr_slave_0: left promiscuous mode [ 685.785119][ T60] hsr_slave_1: left promiscuous mode [ 685.817481][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.872263][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.939209][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.987517][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.125479][ T60] veth1_macvtap: left promiscuous mode [ 686.161588][ T60] veth0_macvtap: left promiscuous mode [ 686.195052][ T60] veth1_vlan: left promiscuous mode [ 686.226283][ T60] veth0_vlan: left promiscuous mode [ 688.921505][ T60] team0 (unregistering): Port device team_slave_1 removed [ 689.095033][ T60] team0 (unregistering): Port device team_slave_0 removed [ 690.236610][T12823] FAULT_INJECTION: forcing a failure. [ 690.236610][T12823] name failslab, interval 1, probability 0, space 0, times 0 [ 690.259619][T12823] CPU: 1 UID: 0 PID: 12823 Comm: syz.0.1020 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 690.259660][T12823] Tainted: [U]=USER [ 690.259667][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.259682][T12823] Call Trace: [ 690.259690][T12823] [ 690.259699][T12823] dump_stack_lvl+0x16c/0x1f0 [ 690.259730][T12823] should_fail_ex+0x512/0x640 [ 690.259759][T12823] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 690.259798][T12823] should_failslab+0xc2/0x120 [ 690.259834][T12823] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 690.259867][T12823] ? ipv4_sysctl_init_net+0x3e/0x350 [ 690.259903][T12823] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 690.259937][T12823] kmemdup_noprof+0x29/0x60 [ 690.259967][T12823] ipv4_sysctl_init_net+0x3e/0x350 [ 690.260001][T12823] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 690.260036][T12823] ops_init+0x1df/0x5f0 [ 690.260066][T12823] setup_net+0x10f/0x380 [ 690.260091][T12823] ? lockdep_init_map_type+0x5c/0x280 [ 690.260125][T12823] ? __pfx_setup_net+0x10/0x10 [ 690.260153][T12823] ? debug_mutex_init+0x37/0x70 [ 690.260180][T12823] copy_net_ns+0x2a6/0x5f0 [ 690.260214][T12823] create_new_namespaces+0x3ea/0xa90 [ 690.260248][T12823] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 690.260279][T12823] ksys_unshare+0x45b/0xa40 [ 690.260312][T12823] ? __pfx_ksys_unshare+0x10/0x10 [ 690.260346][T12823] ? xfd_validate_state+0x61/0x180 [ 690.260390][T12823] __x64_sys_unshare+0x31/0x40 [ 690.260422][T12823] do_syscall_64+0xcd/0x490 [ 690.260451][T12823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.260486][T12823] RIP: 0033:0x7f6eebd8ebe9 [ 690.260505][T12823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.260528][T12823] RSP: 002b:00007f6eecc57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 690.260550][T12823] RAX: ffffffffffffffda RBX: 00007f6eebfb6090 RCX: 00007f6eebd8ebe9 [ 690.260566][T12823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 690.260580][T12823] RBP: 00007f6eebe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 690.260594][T12823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.260608][T12823] R13: 00007f6eebfb6128 R14: 00007f6eebfb6090 R15: 00007ffe811c0728 [ 690.260641][T12823] [ 693.262743][T12854] FAULT_INJECTION: forcing a failure. [ 693.262743][T12854] name failslab, interval 1, probability 0, space 0, times 0 [ 693.307298][T12854] CPU: 1 UID: 0 PID: 12854 Comm: syz.0.1027 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 693.307340][T12854] Tainted: [U]=USER [ 693.307347][T12854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.307362][T12854] Call Trace: [ 693.307370][T12854] [ 693.307379][T12854] dump_stack_lvl+0x16c/0x1f0 [ 693.307408][T12854] should_fail_ex+0x512/0x640 [ 693.307436][T12854] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 693.307464][T12854] should_failslab+0xc2/0x120 [ 693.307496][T12854] __kmalloc_cache_noprof+0x6a/0x3e0 [ 693.307521][T12854] ? do_eventfd+0x67/0x2c0 [ 693.307558][T12854] do_eventfd+0x67/0x2c0 [ 693.307590][T12854] ? rcu_is_watching+0x12/0xc0 [ 693.307615][T12854] __x64_sys_eventfd+0x32/0x50 [ 693.307661][T12854] do_syscall_64+0xcd/0x490 [ 693.307690][T12854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.307715][T12854] RIP: 0033:0x7f6eebd8ebe9 [ 693.307733][T12854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.307757][T12854] RSP: 002b:00007f6eecc78038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 693.307779][T12854] RAX: ffffffffffffffda RBX: 00007f6eebfb5fa0 RCX: 00007f6eebd8ebe9 [ 693.307795][T12854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 693.307809][T12854] RBP: 00007f6eebe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 693.307823][T12854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.307836][T12854] R13: 00007f6eebfb6038 R14: 00007f6eebfb5fa0 R15: 00007ffe811c0728 [ 693.307865][T12854] [ 693.796687][T12855] random: crng reseeded on system resumption [ 694.094359][T12863] Process accounting resumed [ 696.360139][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.375601][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.931218][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.281358][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.534476][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.237140][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.423897][ T60] bridge_slave_1: left allmulticast mode [ 703.452859][ T60] bridge_slave_1: left promiscuous mode [ 703.486784][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.541908][ T60] bridge_slave_0: left allmulticast mode [ 703.561764][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 703.622824][ T60] bridge_slave_0: left promiscuous mode [ 703.638095][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 703.652810][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 703.662880][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 703.673918][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 703.682479][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 703.723874][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.638248][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.666872][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.709736][ T60] bond0 (unregistering): Released all slaves [ 705.787168][T12937] Bluetooth: hci4: command tx timeout [ 705.797604][ T60] hsr_slave_0: left promiscuous mode [ 705.854544][ T60] hsr_slave_1: left promiscuous mode [ 705.898610][T12981] ima: policy update failed [ 705.903430][ T31] audit: type=1802 audit(4294967417.080:15): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1049" res=0 errno=0 [ 705.927726][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.978791][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.012333][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.037331][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.077185][ T60] veth1_macvtap: left promiscuous mode [ 706.082825][ T60] veth0_macvtap: left promiscuous mode [ 706.097260][ T60] veth1_vlan: left promiscuous mode [ 706.102620][ T60] veth0_vlan: left promiscuous mode [ 706.429248][T12986] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1050'. [ 707.083086][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 707.093754][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 707.104278][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 707.113881][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 707.137275][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 707.355250][ T60] team0 (unregistering): Port device team_slave_1 removed [ 707.409965][ T60] team0 (unregistering): Port device team_slave_0 removed [ 707.868003][ T51] Bluetooth: hci4: command tx timeout [ 708.195095][T12997] ACPI: Can not change Invalid GPE/Fixed Event status [ 709.228677][ T51] Bluetooth: hci2: command tx timeout [ 709.241083][T12962] chnl_net:caif_netlink_parms(): no params data found [ 709.841750][T11920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.947100][ T51] Bluetooth: hci4: command tx timeout [ 710.502623][T11920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.825352][T12990] chnl_net:caif_netlink_parms(): no params data found [ 711.164403][T11920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.307340][ T51] Bluetooth: hci2: command tx timeout [ 711.440812][T11920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.861112][T12962] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.892817][T12962] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.920904][T12962] bridge_slave_0: entered allmulticast mode [ 711.952695][T12962] bridge_slave_0: entered promiscuous mode [ 711.978326][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.016196][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.030721][T12937] Bluetooth: hci4: command tx timeout [ 712.049156][T12962] bridge_slave_1: entered allmulticast mode [ 712.069054][T12962] bridge_slave_1: entered promiscuous mode [ 712.137948][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.160808][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.189304][T12990] bridge_slave_0: entered allmulticast mode [ 712.216575][T12990] bridge_slave_0: entered promiscuous mode [ 712.253281][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.285448][T12990] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.317919][T12990] bridge_slave_1: entered allmulticast mode [ 712.345769][T12990] bridge_slave_1: entered promiscuous mode [ 712.741018][T12962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.031032][T12990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.123054][T12962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.182704][T12990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.221201][T11920] bridge_slave_1: left allmulticast mode [ 713.241782][T11920] bridge_slave_1: left promiscuous mode [ 713.265219][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.297917][T11920] bridge_slave_0: left allmulticast mode [ 713.332867][T11920] bridge_slave_0: left promiscuous mode [ 713.359177][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.388417][T12937] Bluetooth: hci2: command tx timeout [ 713.790162][T12937] Bluetooth: hci1: command 0x0406 tx timeout [ 714.074639][T13071] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 715.008082][T11920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.023029][T11920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.035531][T11920] bond0 (unregistering): Released all slaves [ 715.424666][T12962] team0: Port device team_slave_0 added [ 715.467441][ T51] Bluetooth: hci2: command tx timeout [ 715.526665][T12990] team0: Port device team_slave_0 added [ 715.551724][T13063] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 715.682271][T12962] team0: Port device team_slave_1 added [ 715.705670][T12990] team0: Port device team_slave_1 added [ 715.964558][T12962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.982389][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.043698][T12962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.129172][T12990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.154060][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.215325][T12990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.292906][T12962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.319891][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.416284][T12962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.536291][T12990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.576239][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.660956][T12990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.734326][T11920] hsr_slave_0: left promiscuous mode [ 716.756512][T11920] hsr_slave_1: left promiscuous mode [ 716.772182][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.791564][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.811566][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.833554][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.889600][T11920] veth1_macvtap: left promiscuous mode [ 716.905442][T11920] veth0_macvtap: left promiscuous mode [ 716.925792][T11920] veth1_vlan: left promiscuous mode [ 716.933179][T11920] veth0_vlan: left promiscuous mode [ 717.836147][T11920] team0 (unregistering): Port device team_slave_1 removed [ 717.893834][T11920] team0 (unregistering): Port device team_slave_0 removed [ 718.603317][T12962] hsr_slave_0: entered promiscuous mode [ 718.696801][T12962] hsr_slave_1: entered promiscuous mode [ 719.592523][T12990] hsr_slave_0: entered promiscuous mode [ 719.722768][T12990] hsr_slave_1: entered promiscuous mode [ 719.801956][T12990] debugfs: 'hsr0' already exists in 'hsr' [ 719.901334][T12990] Cannot create hsr debugfs directory [ 720.298120][T13120] Process accounting resumed [ 721.432457][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1066'. [ 721.811367][T13131] ipvlan0: entered allmulticast mode [ 721.833464][T13131] veth0_vlan: entered allmulticast mode [ 723.531923][T12962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 723.784919][T12962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 723.912771][T12962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 724.079482][T12962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.191135][T13165] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 724.205217][T13165] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 724.219084][T13165] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 724.244155][T13165] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 724.271345][T13165] page dumped because: unmovable page [ 724.300318][T13165] page_owner tracks the page as allocated [ 724.306081][T13165] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 12931, tgid 12931 (syz-executor), ts 702000329871, free_ts 700999015967 [ 724.350715][T13165] post_alloc_hook+0x1c0/0x230 [ 724.355542][T13165] get_page_from_freelist+0x132b/0x38e0 [ 724.361731][T13165] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 724.377148][T13165] alloc_pages_bulk_noprof+0x71c/0x1410 [ 724.384139][T13165] kasan_populate_vmalloc+0xf1/0x1f0 [ 724.398166][T13165] alloc_vmap_area+0x959/0x29c0 [ 724.403767][T13165] __get_vm_area_node+0x1ca/0x330 [ 724.411288][T13165] __vmalloc_node_range_noprof+0x271/0x14b0 [ 724.417852][T13165] vmalloc_user_noprof+0x9e/0xe0 [ 724.423190][T13165] kcov_ioctl+0x4c/0x730 [ 724.437303][T13165] __x64_sys_ioctl+0x18e/0x210 [ 724.442413][T13165] do_syscall_64+0xcd/0x490 [ 724.468886][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.485460][T13165] page last free pid 12518 tgid 12518 stack trace: [ 724.506272][T13165] __free_frozen_pages+0x7d5/0x10f0 [ 724.539125][T13165] vfree+0x1fd/0xb50 [ 724.543128][T13165] kcov_close+0x34/0x60 [ 724.567534][T13165] __fput+0x3ff/0xb70 [ 724.577093][T13165] task_work_run+0x150/0x240 [ 724.586682][T13165] do_exit+0x86f/0x2bf0 [ 724.604583][T13165] do_group_exit+0xd3/0x2a0 [ 724.612045][T13165] __x64_sys_exit_group+0x3e/0x50 [ 724.637653][T13165] x64_sys_call+0x14fa/0x1720 [ 724.648806][T13165] do_syscall_64+0xcd/0x490 [ 724.665170][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.391087][T13178] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1072'. [ 726.799196][T13191] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 726.843767][T12990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 726.945196][T12990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 727.014286][T12990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 727.105637][T12962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.144196][T12990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 727.290570][T12962] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.329196][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.336704][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.426255][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.433739][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.674225][T12962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 727.847128][T12962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.869505][ T31] audit: type=1804 audit(4294967302.930:16): pid=13208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1076" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=1142 res=1 errno=0 [ 728.161449][T12990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.586645][T12990] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.782004][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.789265][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.910933][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.918174][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.864969][T12962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.313403][T12962] veth0_vlan: entered promiscuous mode [ 730.495412][T12962] veth1_vlan: entered promiscuous mode [ 730.916287][T12962] veth0_macvtap: entered promiscuous mode [ 731.089608][T12962] veth1_macvtap: entered promiscuous mode [ 731.142740][T13253] random: crng reseeded on system resumption [ 731.413590][T12990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.568032][T12962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.655497][T12962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.263952][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.368031][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.452495][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.486064][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.692577][T12990] veth0_vlan: entered promiscuous mode [ 732.823830][T12990] veth1_vlan: entered promiscuous mode [ 732.884946][T13268] FAULT_INJECTION: forcing a failure. [ 732.884946][T13268] name failslab, interval 1, probability 0, space 0, times 0 [ 732.915671][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.963452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.989757][T13268] CPU: 1 UID: 0 PID: 13268 Comm: syz.3.1083 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 732.989795][T13268] Tainted: [U]=USER [ 732.989803][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.989817][T13268] Call Trace: [ 732.989824][T13268] [ 732.989833][T13268] dump_stack_lvl+0x16c/0x1f0 [ 732.989863][T13268] should_fail_ex+0x512/0x640 [ 732.989901][T13268] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 732.989932][T13268] should_failslab+0xc2/0x120 [ 732.989964][T13268] __kmalloc_cache_node_noprof+0x6d/0x420 [ 732.989992][T13268] ? bdi_alloc+0x44/0x170 [ 732.990028][T13268] bdi_alloc+0x44/0x170 [ 732.990059][T13268] __alloc_disk_node+0xac/0x630 [ 732.990086][T13268] ? blk_alloc_queue+0x1a3/0x760 [ 732.990126][T13268] __blk_alloc_disk+0xd0/0x160 [ 732.990154][T13268] ? __pfx___blk_alloc_disk+0x10/0x10 [ 732.990199][T13268] ? lockdep_init_map_type+0x5c/0x280 [ 732.990233][T13268] ? lockdep_init_map_type+0x5c/0x280 [ 732.990277][T13268] dm_create+0x4bf/0x1160 [ 732.990307][T13268] dev_create+0x121/0x290 [ 732.990340][T13268] ? __pfx_dev_create+0x10/0x10 [ 732.990371][T13268] ? __might_fault+0x13b/0x190 [ 732.990406][T13268] ctl_ioctl+0x798/0xd60 [ 732.990437][T13268] ? __pfx_dev_create+0x10/0x10 [ 732.990469][T13268] ? __pfx_ctl_ioctl+0x10/0x10 [ 732.990528][T13268] ? __fget_files+0x20e/0x3c0 [ 732.990559][T13268] dm_ctl_ioctl+0x22/0x30 [ 732.990587][T13268] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 732.990617][T13268] __x64_sys_ioctl+0x18e/0x210 [ 732.990657][T13268] do_syscall_64+0xcd/0x490 [ 732.990685][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.990709][T13268] RIP: 0033:0x7fe5ebb8ebe9 [ 732.990728][T13268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.990751][T13268] RSP: 002b:00007fe5ec999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.990772][T13268] RAX: ffffffffffffffda RBX: 00007fe5ebdb5fa0 RCX: 00007fe5ebb8ebe9 [ 732.990787][T13268] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000003 [ 732.990802][T13268] RBP: 00007fe5ebc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 732.990815][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.990829][T13268] R13: 00007fe5ebdb6038 R14: 00007fe5ebdb5fa0 R15: 00007ffdc0cfaa48 [ 732.990857][T13268] [ 733.308783][T12990] veth0_macvtap: entered promiscuous mode [ 733.318686][T12990] veth1_macvtap: entered promiscuous mode [ 733.336494][T12990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.348754][T12990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.461451][T11920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.470160][T11920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.485511][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.511923][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.561912][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.605490][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.719347][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.777467][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.875854][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.899601][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.606805][T13294] bond0: option all_slaves_active: invalid value () [ 735.040491][T13294] bond0: option all_slaves_active: invalid value () [ 735.705701][T13311] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 737.328380][T13314] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 737.409758][T13317] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 739.963488][T13361] mkiss: ax0: crc mode is auto. [ 743.741284][T13401] kexec: Could not allocate control_code_buffer [ 744.203988][T13413] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 744.450501][T13412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 744.459294][T13412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 744.482432][T13412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 744.512202][T13412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 744.525197][T13412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 744.536246][T13412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 744.561309][T13412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 744.576648][T13412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 744.597959][T13412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 744.608935][T13412] CPU0 is offline. [ 745.173919][T13427] ptrace attach of "./syz-executor exec"[11903] was attempted by "./syz-executor exec"[13427] [ 746.507228][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 746.513426][T12937] Bluetooth: hci3: command 0x0c1a tx timeout [ 746.587128][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 746.593288][T12937] Bluetooth: hci4: command 0x0c1a tx timeout [ 746.646490][T13439] sd 0:0:1:0: PR command failed: 1026 [ 746.666257][T13439] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 746.695100][T13439] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 746.878793][T13439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1102'. [ 747.302144][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1105'. [ 747.320787][T13462] binder: 13460:13462 ioctl c0046209 ffffffffffffffff returned -22 [ 747.833999][T13472] tc_dump_action: action bad kind [ 747.874463][T13472] FAULT_INJECTION: forcing a failure. [ 747.874463][T13472] name failslab, interval 1, probability 0, space 0, times 0 [ 747.891697][T13472] CPU: 1 UID: 0 PID: 13472 Comm: syz.0.1107 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 747.891738][T13472] Tainted: [U]=USER [ 747.891746][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 747.891761][T13472] Call Trace: [ 747.891768][T13472] [ 747.891777][T13472] dump_stack_lvl+0x16c/0x1f0 [ 747.891809][T13472] should_fail_ex+0x512/0x640 [ 747.891838][T13472] ? __kmalloc_noprof+0xbf/0x510 [ 747.891869][T13472] ? kvm_set_irq_routing+0xf3/0x970 [ 747.891901][T13472] should_failslab+0xc2/0x120 [ 747.891939][T13472] __kmalloc_noprof+0xd2/0x510 [ 747.891975][T13472] kvm_set_irq_routing+0xf3/0x970 [ 747.892011][T13472] ? kvm_ioapic_init+0x445/0x590 [ 747.892042][T13472] kvm_arch_vm_ioctl+0x8e8/0x1860 [ 747.892078][T13472] ? register_lock_class+0x41/0x4c0 [ 747.892123][T13472] ? find_held_lock+0x2b/0x80 [ 747.892148][T13472] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 747.892187][T13472] ? __lock_acquire+0x62e/0x1ce0 [ 747.892224][T13472] ? __lock_acquire+0x62e/0x1ce0 [ 747.892263][T13472] ? __lock_acquire+0x62e/0x1ce0 [ 747.892300][T13472] ? __lock_acquire+0x62e/0x1ce0 [ 747.892350][T13472] ? is_bpf_text_address+0x8a/0x1a0 [ 747.892379][T13472] ? bpf_ksym_find+0x124/0x1c0 [ 747.892401][T13472] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 747.892431][T13472] ? is_bpf_text_address+0x94/0x1a0 [ 747.892461][T13472] ? kernel_text_address+0x8d/0x100 [ 747.892483][T13472] ? __kernel_text_address+0xd/0x40 [ 747.892504][T13472] ? unwind_get_return_address+0x59/0xa0 [ 747.892529][T13472] ? arch_stack_walk+0xa6/0x100 [ 747.892565][T13472] ? stack_trace_save+0x8e/0xc0 [ 747.892592][T13472] ? __pfx_stack_trace_save+0x10/0x10 [ 747.892619][T13472] ? stack_depot_save_flags+0x29/0x9c0 [ 747.892648][T13472] ? __lock_acquire+0xb97/0x1ce0 [ 747.892682][T13472] ? kasan_save_stack+0x42/0x60 [ 747.892708][T13472] ? kasan_save_stack+0x33/0x60 [ 747.892733][T13472] ? kasan_save_track+0x14/0x30 [ 747.892759][T13472] ? kasan_save_free_info+0x3b/0x60 [ 747.892779][T13472] ? __kasan_slab_free+0x60/0x70 [ 747.892806][T13472] ? kfree+0x2b4/0x4d0 [ 747.892830][T13472] kvm_vm_ioctl+0x1a91/0x4000 [ 747.892865][T13472] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 747.892906][T13472] ? kasan_quarantine_put+0x10a/0x240 [ 747.892932][T13472] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.892961][T13472] ? find_held_lock+0x2b/0x80 [ 747.892984][T13472] ? tomoyo_path_number_perm+0x295/0x580 [ 747.893015][T13472] ? tomoyo_path_number_perm+0x18d/0x580 [ 747.893042][T13472] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 747.893078][T13472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 747.893123][T13472] ? do_vfs_ioctl+0x128/0x14f0 [ 747.893162][T13472] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 747.893208][T13472] ? find_held_lock+0x2b/0x80 [ 747.893231][T13472] ? hook_file_ioctl_common+0x145/0x410 [ 747.893265][T13472] ? __fget_files+0x20e/0x3c0 [ 747.893295][T13472] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 747.893319][T13472] __x64_sys_ioctl+0x18e/0x210 [ 747.893359][T13472] do_syscall_64+0xcd/0x490 [ 747.893388][T13472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.893412][T13472] RIP: 0033:0x7f6eebd8ebe9 [ 747.893430][T13472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.893454][T13472] RSP: 002b:00007f6eecc78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.893486][T13472] RAX: ffffffffffffffda RBX: 00007f6eebfb5fa0 RCX: 00007f6eebd8ebe9 [ 747.893502][T13472] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 747.893516][T13472] RBP: 00007f6eebe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 747.893531][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.893544][T13472] R13: 00007f6eebfb6038 R14: 00007f6eebfb5fa0 R15: 00007ffe811c0728 [ 747.893574][T13472] [ 748.279205][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.695537][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 748.702626][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 748.709137][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 750.172501][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 750.340270][T13484] kexec: Could not allocate control_code_buffer [ 750.751110][T12937] Bluetooth: hci4: command 0x0c1a tx timeout [ 750.757459][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 752.584289][T13535] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 752.829020][T13535] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 752.836804][T13535] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1116'. [ 756.547820][T11920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.820795][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.835392][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.849363][T11920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.937412][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.962713][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.971396][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.980285][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.998133][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.081473][T11920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.534169][T11920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.761339][T13615] Console: switching to colour VGA+ 80x25 [ 761.067440][ T51] Bluetooth: hci2: command tx timeout [ 761.173279][T11920] bridge_slave_1: left allmulticast mode [ 761.235862][T11920] bridge_slave_1: left promiscuous mode [ 761.323551][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.422014][T11920] bridge_slave_0: left allmulticast mode [ 761.448956][T11920] bridge_slave_0: left promiscuous mode [ 761.479456][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.189000][T13639] random: crng reseeded on system resumption [ 763.148913][ T51] Bluetooth: hci2: command tx timeout [ 763.509992][T11920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.539333][T11920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.563638][T11920] bond0 (unregistering): Released all slaves [ 765.142454][T13594] chnl_net:caif_netlink_parms(): no params data found [ 765.227623][ T51] Bluetooth: hci2: command tx timeout [ 765.416221][T13663] Invalid ELF header magic: != ELF [ 765.671909][T11920] hsr_slave_0: left promiscuous mode [ 765.731540][T11920] hsr_slave_1: left promiscuous mode [ 765.797584][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.867297][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.953162][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.040626][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.095447][T13666] can: request_module (can-proto-0) failed. [ 766.186388][T11920] veth1_macvtap: left promiscuous mode [ 766.309220][T11920] veth0_macvtap: left promiscuous mode [ 766.362215][T11920] veth1_vlan: left promiscuous mode [ 766.405591][T11920] veth0_vlan: left promiscuous mode [ 767.313519][ T51] Bluetooth: hci2: command tx timeout [ 768.344189][T11920] team0 (unregistering): Port device team_slave_1 removed [ 768.401854][T11920] team0 (unregistering): Port device team_slave_0 removed [ 770.216273][T13594] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.323819][T13594] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.417804][T13594] bridge_slave_0: entered allmulticast mode [ 770.497160][T13594] bridge_slave_0: entered promiscuous mode [ 770.564433][T13594] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.645311][T13594] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.729493][T13594] bridge_slave_1: entered allmulticast mode [ 770.820429][T13594] bridge_slave_1: entered promiscuous mode [ 771.692209][T13594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.814192][T13594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.492663][T13594] team0: Port device team_slave_0 added [ 772.549771][T13594] team0: Port device team_slave_1 added [ 772.850012][T13594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.879591][T13594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.997095][T13594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.202067][T11920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.333161][T13594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.374336][T13594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.501989][T13594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.700519][T11920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.081796][T11920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.239080][T13594] hsr_slave_0: entered promiscuous mode [ 774.285305][T13594] hsr_slave_1: entered promiscuous mode [ 774.303096][T13594] debugfs: 'hsr0' already exists in 'hsr' [ 774.342290][T12937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 774.354711][T12937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 774.364144][T12937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 774.375923][T12937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 774.383972][T12937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 774.416884][T13594] Cannot create hsr debugfs directory [ 774.515622][T11920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.427121][T12937] Bluetooth: hci4: command tx timeout [ 777.280390][T13759] kexec: Could not allocate control_code_buffer [ 777.609470][T11920] bridge_slave_1: left allmulticast mode [ 777.674847][T11920] bridge_slave_1: left promiscuous mode [ 777.761959][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.891489][T11920] bridge_slave_0: left allmulticast mode [ 777.965839][T11920] bridge_slave_0: left promiscuous mode [ 777.983393][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.507191][T12937] Bluetooth: hci4: command tx timeout [ 778.938420][T11920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.951693][T11920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.964811][T11920] bond0 (unregistering): Released all slaves [ 780.593462][T12937] Bluetooth: hci4: command tx timeout [ 780.900464][T11920] hsr_slave_0: left promiscuous mode [ 780.920222][T11920] hsr_slave_1: left promiscuous mode [ 780.931924][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.949743][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.048656][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.056275][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.117706][T11920] veth1_macvtap: left promiscuous mode [ 781.133560][T11920] veth0_macvtap: left promiscuous mode [ 781.143754][T11920] veth1_vlan: left promiscuous mode [ 781.165419][T11920] veth0_vlan: left promiscuous mode [ 782.150014][T11920] team0 (unregistering): Port device team_slave_1 removed [ 782.209479][T11920] team0 (unregistering): Port device team_slave_0 removed [ 782.671811][T12937] Bluetooth: hci4: command tx timeout [ 782.755021][T13733] chnl_net:caif_netlink_parms(): no params data found [ 783.512765][T13733] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.570230][T13733] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.650580][T13733] bridge_slave_0: entered allmulticast mode [ 783.683532][T13733] bridge_slave_0: entered promiscuous mode [ 783.712713][T13733] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.748608][T13733] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.766159][T13733] bridge_slave_1: entered allmulticast mode [ 783.876813][T13733] bridge_slave_1: entered promiscuous mode [ 784.152668][T13733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.202811][T13733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.656596][T13733] team0: Port device team_slave_0 added [ 784.985369][T13733] team0: Port device team_slave_1 added [ 785.186288][T13594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 785.340100][T13834] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1158'. [ 785.368654][T13834] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1158'. [ 785.554889][T13733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.658805][T13733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.841869][T13840] FAULT_INJECTION: forcing a failure. [ 785.841869][T13840] name failslab, interval 1, probability 0, space 0, times 0 [ 785.859970][T13840] CPU: 1 UID: 0 PID: 13840 Comm: syz.0.1160 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 785.860010][T13840] Tainted: [U]=USER [ 785.860017][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 785.860032][T13840] Call Trace: [ 785.860040][T13840] [ 785.860048][T13840] dump_stack_lvl+0x16c/0x1f0 [ 785.860079][T13840] should_fail_ex+0x512/0x640 [ 785.860109][T13840] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 785.860140][T13840] should_failslab+0xc2/0x120 [ 785.860179][T13840] __kmalloc_cache_node_noprof+0x6d/0x420 [ 785.860210][T13840] ? __alloc_disk_node+0x5a/0x630 [ 785.860257][T13840] __alloc_disk_node+0x5a/0x630 [ 785.860293][T13840] __blk_mq_alloc_disk+0x89/0x120 [ 785.860323][T13840] nbd_dev_add+0x492/0xbb0 [ 785.860350][T13840] ? find_held_lock+0x2b/0x80 [ 785.860376][T13840] ? __pfx_nbd_dev_add+0x10/0x10 [ 785.860402][T13840] ? nbd_genl_connect+0x98e/0x1c60 [ 785.860455][T13840] ? bpf_lsm_capable+0x9/0x10 [ 785.860479][T13840] ? __radix_tree_lookup+0x21f/0x2c0 [ 785.860523][T13840] nbd_genl_connect+0x8b0/0x1c60 [ 785.860561][T13840] ? __pfx_nbd_genl_connect+0x10/0x10 [ 785.860593][T13840] ? __nla_parse+0x40/0x60 [ 785.860631][T13840] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 785.860665][T13840] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 785.860705][T13840] genl_family_rcv_msg_doit+0x209/0x2f0 [ 785.860739][T13840] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 785.860771][T13840] ? genl_get_cmd+0x194/0x580 [ 785.860808][T13840] ? __radix_tree_lookup+0x21f/0x2c0 [ 785.860851][T13840] genl_rcv_msg+0x55c/0x800 [ 785.860885][T13840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.860916][T13840] ? __pfx_nbd_genl_connect+0x10/0x10 [ 785.860957][T13840] netlink_rcv_skb+0x158/0x420 [ 785.860983][T13840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.861016][T13840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 785.861054][T13840] ? netlink_deliver_tap+0x1ae/0xd30 [ 785.861083][T13840] genl_rcv+0x28/0x40 [ 785.861110][T13840] netlink_unicast+0x5a7/0x870 [ 785.861140][T13840] ? __pfx_netlink_unicast+0x10/0x10 [ 785.861167][T13840] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 785.861191][T13840] ? __lock_acquire+0xb97/0x1ce0 [ 785.861232][T13840] netlink_sendmsg+0x8d1/0xdd0 [ 785.861263][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.861293][T13840] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 785.861338][T13840] ____sys_sendmsg+0xa98/0xc70 [ 785.861371][T13840] ? copy_msghdr_from_user+0x10a/0x160 [ 785.861396][T13840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.861449][T13840] ___sys_sendmsg+0x134/0x1d0 [ 785.861481][T13840] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.861548][T13840] __sys_sendmsg+0x16d/0x220 [ 785.861574][T13840] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.861599][T13840] ? __x64_sys_futex+0x1e0/0x4c0 [ 785.861648][T13840] do_syscall_64+0xcd/0x490 [ 785.861676][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.861701][T13840] RIP: 0033:0x7f6eebd8ebe9 [ 785.861720][T13840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.861744][T13840] RSP: 002b:00007f6eecc78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.861771][T13840] RAX: ffffffffffffffda RBX: 00007f6eebfb5fa0 RCX: 00007f6eebd8ebe9 [ 785.861786][T13840] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 000000000000000c [ 785.861801][T13840] RBP: 00007f6eebe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 785.861815][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.861829][T13840] R13: 00007f6eebfb6038 R14: 00007f6eebfb5fa0 R15: 00007ffe811c0728 [ 785.861859][T13840] [ 786.327544][T13733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.392898][T13594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 786.412645][T13594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 786.424390][T13594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 786.504375][T13733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.511563][T13733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.538537][T13733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.664853][T13733] hsr_slave_0: entered promiscuous mode [ 786.690747][T13840] nbd: failed to add new device [ 786.729336][T13733] hsr_slave_1: entered promiscuous mode [ 786.967748][ T31] audit: type=1400 audit(4294967362.030:17): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13846 comm="syz.0.1161" [ 787.951190][T13865] binder: 13864:13865 unknown command 3 [ 788.062135][T13865] binder: 13864:13865 ioctl c0306201 0 returned -22 [ 788.998977][T13594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.633062][T13594] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.135014][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.142360][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.355914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.363388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.656222][T13594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.893038][T13896] mkiss: ax0: crc mode is auto. [ 791.602689][T13733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 791.661607][T13733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 791.708558][T13733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 791.773287][T13733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 792.362111][T13733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.414693][T13594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.502389][T13733] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.583096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.590424][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.681821][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.689021][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.792143][T13594] veth0_vlan: entered promiscuous mode [ 792.864337][T13594] veth1_vlan: entered promiscuous mode [ 792.975762][T13733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 793.473503][ T31] audit: type=1400 audit(4294967368.520:18): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13927 comm="syz.3.1169" [ 793.855514][T13594] veth0_macvtap: entered promiscuous mode [ 794.052177][T13594] veth1_macvtap: entered promiscuous mode [ 794.183357][T13594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.261200][T13594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.358975][ T1014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.388990][ T1014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.493963][ T1014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.556464][ T1014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.683587][T13733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.899063][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.920700][T13733] veth0_vlan: entered promiscuous mode [ 794.939845][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.973941][T13733] veth1_vlan: entered promiscuous mode [ 795.049375][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.100416][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.128953][T13733] veth0_macvtap: entered promiscuous mode [ 795.174288][T13733] veth1_macvtap: entered promiscuous mode [ 795.244255][T13733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.298265][T13733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.380077][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.418839][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.465634][ T1014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.488063][T13953] can: request_module (can-proto-0) failed. [ 795.541127][ T1014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.735358][T11920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.780053][T11920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.913895][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.961558][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.241815][T13993] FAULT_INJECTION: forcing a failure. [ 798.241815][T13993] name failslab, interval 1, probability 0, space 0, times 0 [ 798.241855][T13993] CPU: 1 UID: 0 PID: 13993 Comm: syz.0.1174 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 798.241901][T13993] Tainted: [U]=USER [ 798.241909][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.241923][T13993] Call Trace: [ 798.241930][T13993] [ 798.241939][T13993] dump_stack_lvl+0x16c/0x1f0 [ 798.241968][T13993] should_fail_ex+0x512/0x640 [ 798.241997][T13993] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 798.242025][T13993] should_failslab+0xc2/0x120 [ 798.242058][T13993] __kmalloc_cache_noprof+0x6a/0x3e0 [ 798.242083][T13993] ? con_set_default_unimap+0x534/0x6d0 [ 798.242120][T13993] con_set_default_unimap+0x534/0x6d0 [ 798.242158][T13993] vc_allocate+0x6a6/0x880 [ 798.242185][T13993] ? __pfx_vc_allocate+0x10/0x10 [ 798.242219][T13993] con_install+0xa1/0x600 [ 798.242257][T13993] ? __pfx_con_install+0x10/0x10 [ 798.242290][T13993] ? __pfx_con_install+0x10/0x10 [ 798.242317][T13993] tty_init_dev.part.0+0x9c/0x500 [ 798.242350][T13993] tty_open+0xa50/0xf90 [ 798.242385][T13993] ? __pfx_tty_open+0x10/0x10 [ 798.242414][T13993] ? chrdev_open+0x10b/0x6a0 [ 798.242449][T13993] ? __pfx_tty_open+0x10/0x10 [ 798.242477][T13993] chrdev_open+0x231/0x6a0 [ 798.242507][T13993] ? __pfx_apparmor_file_open+0x10/0x10 [ 798.242546][T13993] ? __pfx_chrdev_open+0x10/0x10 [ 798.242578][T13993] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 798.242611][T13993] do_dentry_open+0x97f/0x1530 [ 798.242641][T13993] ? __pfx_chrdev_open+0x10/0x10 [ 798.242678][T13993] vfs_open+0x82/0x3f0 [ 798.242716][T13993] path_openat+0x1de4/0x2cb0 [ 798.242754][T13993] ? __pfx_path_openat+0x10/0x10 [ 798.242790][T13993] do_filp_open+0x20b/0x470 [ 798.242819][T13993] ? __pfx_do_filp_open+0x10/0x10 [ 798.242869][T13993] ? alloc_fd+0x471/0x7d0 [ 798.242908][T13993] do_sys_openat2+0x11b/0x1d0 [ 798.242945][T13993] ? __pfx_do_sys_openat2+0x10/0x10 [ 798.242993][T13993] __x64_sys_openat+0x174/0x210 [ 798.243030][T13993] ? __pfx___x64_sys_openat+0x10/0x10 [ 798.243081][T13993] do_syscall_64+0xcd/0x490 [ 798.243110][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.243133][T13993] RIP: 0033:0x7f6eebd8ebe9 [ 798.243152][T13993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.243175][T13993] RSP: 002b:00007f6eecc78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 798.243198][T13993] RAX: ffffffffffffffda RBX: 00007f6eebfb5fa0 RCX: 00007f6eebd8ebe9 [ 798.243213][T13993] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 798.243228][T13993] RBP: 00007f6eebe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 798.243248][T13993] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 798.243263][T13993] R13: 00007f6eebfb6038 R14: 00007f6eebfb5fa0 R15: 00007ffe811c0728 [ 798.243294][T13993] [ 798.984889][T13993] tty tty26: ldisc open failed (-12), clearing slot 25 [ 799.584731][ T31] audit: type=1800 audit(4294967374.630:19): pid=14018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1177" name="features" dev="configfs" ino=58579 res=0 errno=0 [ 800.359460][T14022] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 804.422804][T14092] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 805.566059][ T31] audit: type=1800 audit(4294967380.620:20): pid=14112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1190" name="features" dev="configfs" ino=58822 res=0 errno=0 [ 810.885469][T14174] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1203'. [ 811.356055][T14182] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 811.378930][T14185] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 811.507988][T14186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'. [ 813.642538][T14207] kexec: Could not allocate control_code_buffer [ 814.143011][T14217] ubi0: attaching mtd0 [ 814.163165][T14217] ubi0: scanning is finished [ 814.173471][T14217] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 814.398294][T14217] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 818.361806][T14264] mkiss: ax0: crc mode is auto. [ 819.236310][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.244474][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.167193][T14325] ubi0: attaching mtd0 [ 823.172796][T14325] ubi0: scanning is finished [ 823.317179][T14325] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 824.001336][T14336] can0: slcan on ttyS2. [ 824.060538][T14336] can0 (unregistered): slcan off ttyS2. [ 824.217893][T14325] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 824.627632][T14343] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 825.123155][T14346] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 830.298362][T14386] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 831.592720][T14405] can0: slcan on ttyS2. [ 831.822454][T14409] can0 (unregistered): slcan off ttyS2. [ 831.971966][T14409] snd_virmidi snd_virmidi.0: control 61678:131081:3:yªƒ>oÆ[küd:255 is already present [ 834.038499][T14441] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI [ 834.050447][T14441] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 834.059322][T14441] CPU: 1 UID: 0 PID: 14441 Comm: syz.0.1250 Tainted: G U 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 834.072628][T14441] Tainted: [U]=USER [ 834.076444][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 834.086623][T14441] RIP: 0010:__mutex_lock+0x14d/0x10b0 [ 834.092108][T14441] Code: 08 84 d2 0f 85 70 0b 00 00 44 8b 05 ed 9f 53 0f 45 85 c0 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 56 0b 00 00 48 3b 5b 60 0f 85 e7 01 00 00 bf 01 [ 834.111769][T14441] RSP: 0018:ffffc9000b067a70 EFLAGS: 00010202 [ 834.118000][T14441] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: 1ffffffff35c9610 [ 834.126171][T14441] RDX: 0000000000000016 RSI: ffffffff8de23985 RDI: 00000000000000b0 [ 834.134255][T14441] RBP: ffffc9000b067bc0 R08: 0000000000000000 R09: ffffed100c41f000 [ 834.142340][T14441] R10: ffffc9000b067be0 R11: 0000000000000000 R12: dffffc0000000000 [ 834.150426][T14441] R13: 0000000000000000 R14: 1ffff9200160cf5a R15: ffffffff8a9926d7 [ 834.158412][T14441] FS: 00007f6eecc786c0(0000) GS:ffff8881247cc000(0000) knlGS:0000000000000000 [ 834.167358][T14441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.173981][T14441] CR2: 0000000000000000 CR3: 000000007f7ae000 CR4: 00000000003526f0 [ 834.182066][T14441] Call Trace: [ 834.185457][T14441] [ 834.188402][T14441] ? rcu_is_watching+0x12/0xc0 [ 834.193180][T14441] ? trace_kmem_cache_alloc+0x28/0xc0 [ 834.198663][T14441] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 834.204833][T14441] ? kmalloc_reserve+0x18b/0x2c0 [ 834.209792][T14441] ? __pfx___mutex_lock+0x10/0x10 [ 834.214864][T14441] ? __asan_memset+0x23/0x50 [ 834.219475][T14441] ? __build_skb_around+0x278/0x3b0 [ 834.224804][T14441] ? __alloc_skb+0x200/0x380 [ 834.229437][T14441] ? __pfx___alloc_skb+0x10/0x10 [ 834.234644][T14441] ? __pfx_vhci_coredump_hdr+0x10/0x10 [ 834.240136][T14441] ? __pfx_vhci_coredump+0x10/0x10 [ 834.245363][T14441] ? hci_devcd_register+0x47/0x170 [ 834.250522][T14441] hci_devcd_register+0x47/0x170 [ 834.255510][T14441] force_devcd_write+0x16c/0x340 [ 834.260490][T14441] ? __pfx_force_devcd_write+0x10/0x10 [ 834.265975][T14441] full_proxy_write+0x12e/0x1a0 [ 834.270936][T14441] ? __pfx_full_proxy_write+0x10/0x10 [ 834.276340][T14441] vfs_write+0x29d/0x1150 [ 834.280695][T14441] ? __pfx___mutex_lock+0x10/0x10 [ 834.285738][T14441] ? __pfx_vfs_write+0x10/0x10 [ 834.290641][T14441] ? __fget_files+0x20e/0x3c0 [ 834.295963][T14441] ksys_write+0x12a/0x250 [ 834.300436][T14441] ? __pfx_ksys_write+0x10/0x10 [ 834.305315][T14441] do_syscall_64+0xcd/0x490 [ 834.309927][T14441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.315846][T14441] RIP: 0033:0x7f6eebd8ebe9 [ 834.320386][T14441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.340551][T14441] RSP: 002b:00007f6eecc78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.349089][T14441] RAX: ffffffffffffffda RBX: 00007f6eebfb5fa0 RCX: 00007f6eebd8ebe9 [ 834.357441][T14441] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 834.365691][T14441] RBP: 00007f6eebe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 834.373770][T14441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.381951][T14441] R13: 00007f6eebfb6038 R14: 00007f6eebfb5fa0 R15: 00007ffe811c0728 [ 834.390060][T14441] [ 834.393112][T14441] Modules linked in: [ 834.398174][T14441] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 834.691842][T14441] RIP: 0010:__mutex_lock+0x14d/0x10b0 [ 834.707007][T14441] Code: 08 84 d2 0f 85 70 0b 00 00 44 8b 05 ed 9f 53 0f 45 85 c0 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 56 0b 00 00 48 3b 5b 60 0f 85 e7 01 00 00 bf 01 [ 834.768919][T14450] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 834.787842][T14441] RSP: 0018:ffffc9000b067a70 EFLAGS: 00010202 [ 834.807740][T14441] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: 1ffffffff35c9610 [ 834.850476][T14441] RDX: 0000000000000016 RSI: ffffffff8de23985 RDI: 00000000000000b0 [ 834.850499][T14441] RBP: ffffc9000b067bc0 R08: 0000000000000000 R09: ffffed100c41f000 [ 834.850515][T14441] R10: ffffc9000b067be0 R11: 0000000000000000 R12: dffffc0000000000 [ 834.850531][T14441] R13: 0000000000000000 R14: 1ffff9200160cf5a R15: ffffffff8a9926d7 [ 834.850547][T14441] FS: 00007f6eecc786c0(0000) GS:ffff8881247cc000(0000) knlGS:0000000000000000 [ 834.850571][T14441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.850588][T14441] CR2: 00007f9f4a85b890 CR3: 000000007f7ae000 CR4: 00000000003526f0 [ 834.850606][T14441] Kernel panic - not syncing: Fatal exception [ 834.850677][T14441] Kernel Offset: disabled