last executing test programs: 1m13.242404896s ago: executing program 0 (id=725): r0 = socket(0x1d, 0x4, 0xffffffff) (async) mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0xa0) (async) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/set_event\x00', 0x80501, 0x0) write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r2) sendmsg$auto_CGROUPSTATS_CMD_GET(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf25040000000a09ea138ae2a8662c41949dff244d6d4c4088883dbc734e516614d22877bfa78c32f702cd1b534386aa84de68cd2441faf241252e3a4a84867f4b170c90f824b186cff29bbbf0ae3a2be520b2207e675a"], 0x14}}, 0x20000004) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="130026bd7000fcdbdf1e74abff0008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x51, 0x14e, "df08ffc7f49af23165943f52fd29ea54f01f4b00a54d60c497695de616ce2a9a090d169bd17882bd1796dee4e56192ee848ef7b9b5c8f8b3974920b9e50ab80151b93c3d32613bb5f7abb9bf59"}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000a3b80c80f37136c75114025ae7782ef12c1ac0f4b68e6c0873ce4ec602d082423bbf2500000000a7016766", @ANYRES16=0x0, @ANYBLOB="e0412abd7000fddbdf250b000000470000008d15b78b19f1b196f076047aa0d24979fb8bfcd5461730b62f1ec6dd1533162e5a31b4da865c58e47b438de271037a99e2bb92359aef17dac21fbab9b5b9e955f1471f00"], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) 1m12.980998899s ago: executing program 0 (id=726): lseek$auto(0xffffffffffffffff, 0x8001, 0x4) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) socket(0x2b, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x6, 0x80000001, 0x7, 0x6d3f, 0x1000, 0x2, 0xffdffffffbfffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) socket(0xa, 0x5, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) setreuid$auto(0x4, 0x8) mlockall$auto(0x8000000000000001) unshare$auto(0x40000080) 1m11.057355843s ago: executing program 0 (id=731): lseek$auto(0xffffffffffffffff, 0x8001, 0x4) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) socket(0x2b, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x6, 0x80000001, 0x7, 0x6d3f, 0x1000, 0x2, 0xffdffffffbfffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) socket(0xa, 0x5, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) setreuid$auto(0x4, 0x8) mlockall$auto(0x8000000000000001) unshare$auto(0x40000080) unshare$auto(0x40000080) 1m7.930046617s ago: executing program 0 (id=732): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='QU\xaa\xc0kN\x87\xb4\xf3N\xff\xff\xff\xa4\'\xff_\xa5\xb7\xe9HL\xf8le\xc9\xa6\xb3\x83V\xf3}|\xb7\xc3\xdc@f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x42, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 1m5.021680482s ago: executing program 0 (id=741): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x55) r2 = socket(0x2, 0x3, 0xa) keyctl$auto(0x5, 0xffffffffffffffff, 0x200008, 0x6, 0x3) keyctl$auto(0x3, 0xffffffffffffffff, 0x2, 0x3b, 0x9) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000340)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000340)={'sit0\x00', 0x0}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) ioctl$auto_NS_GET_PID_IN_PIDNS(r1, 0x8004b708, &(0x7f0000000280)) (async) ioctl$auto_NS_GET_PID_IN_PIDNS(r1, 0x8004b708, &(0x7f0000000280)) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffeffb, 0x2, 0x8e0, 0x300, 0x50b301a, 0xe4, 0x2c, 0x1, 0x5}) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r1) (async) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r1) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYBLOB="00031bd77000fedbdf250b0000007d55a870", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="a47843ee7d3fe4fd2253795608c7a6a076f0f214beb93d8113aeb8f82112c3b4f4a99da2e792a7f0c56b1f27b96a74a19457061b662e473126b9cf40dae321e2eb436f7bbb38e89734a118a5eece4d67f8d8"], 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 1m4.509073268s ago: executing program 0 (id=743): mmap$auto(0x1, 0x4000000003fff, 0xfffffffffffffffe, 0x18, 0x401, 0x300010000000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2ec, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1bc, 0x6e, 0x0, 0x1, [@generic="58b35f178a32ee0301526fdcc26e623b82c3a3e9f0e8b2c174a591bd45be0b17b53e387023ad79e7aa21a2330a983060fb3fa80ae1fda9b2f8e9f10de6d0204c983f9b21b5ec879241b793ba5d939b6de4fb96ba4eba78380093dba4a41241ceec1d963c9600630ed7416cb231dce41bd1455e2ed85f9091915f60ba5702644524cd9c6c874017f803494435e0e03f9c1d9ea0ea", @typed={0x4, 0x1a}, @nested={0xa6, 0xaa, 0x0, 0x1, [@nested={0x4, 0x10f}, @generic="acb7b8786b84be247fb0af747c3412cbe09d58df7e413bb612b85aa01c78cd0e8d19bd5477ed03ca204739b2d2d60e5950bd92c6a3dbd1acaa3d8deb8598cab694a7db8171ff4d08e597ea7d829d63290026260228bfe05c7da56808d9c7aa518a20d2c796e14114cf10118d4d7e346365adf7108feafbcc5f1123fe307036fca91a58b7dd204c3071dadde314049dda48082c026656630075e790b90289"]}, @typed={0xc, 0xc4, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0xed}, @generic="8a850f9e53d8eae40179f85a154f2695c8efb30338ca736fea8ac71faa272302af9e0bc09855b889965bbeb2f20f764863f8bd0ccedc0b9a6e6e1396ed26f15361c3e11d020e00af94be0299d3d35c1c198c3be4322ec4373186732ccd8b71fd", @typed={0x8, 0xd2, 0x0, 0x0, @uid}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd0}, @NL80211_ATTR_MBSSID_ELEMS={0x10b, 0x133, 0x0, 0x1, [@generic="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", @typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x280080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x7, r2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x1000000000002, 0x80, 0xffffffffffffff81, 0x14, r2, 0x2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) msgctl$auto(0x6, 0x8, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x416, 0x7ff, 0x0, 0x7}, &(0x7f0000000200)=0x1f, &(0x7f0000000240)=0xf8, 0xff, 0x80000000, 0x4, 0xfffffffffffffffa, 0x4, 0x8, 0x8001, 0x2, @inferred, @raw=0x101}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x3c, 0x2, 0x0, 0x7, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 49.267927118s ago: executing program 32 (id=743): mmap$auto(0x1, 0x4000000003fff, 0xfffffffffffffffe, 0x18, 0x401, 0x300010000000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2ec, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1bc, 0x6e, 0x0, 0x1, [@generic="58b35f178a32ee0301526fdcc26e623b82c3a3e9f0e8b2c174a591bd45be0b17b53e387023ad79e7aa21a2330a983060fb3fa80ae1fda9b2f8e9f10de6d0204c983f9b21b5ec879241b793ba5d939b6de4fb96ba4eba78380093dba4a41241ceec1d963c9600630ed7416cb231dce41bd1455e2ed85f9091915f60ba5702644524cd9c6c874017f803494435e0e03f9c1d9ea0ea", @typed={0x4, 0x1a}, @nested={0xa6, 0xaa, 0x0, 0x1, [@nested={0x4, 0x10f}, @generic="acb7b8786b84be247fb0af747c3412cbe09d58df7e413bb612b85aa01c78cd0e8d19bd5477ed03ca204739b2d2d60e5950bd92c6a3dbd1acaa3d8deb8598cab694a7db8171ff4d08e597ea7d829d63290026260228bfe05c7da56808d9c7aa518a20d2c796e14114cf10118d4d7e346365adf7108feafbcc5f1123fe307036fca91a58b7dd204c3071dadde314049dda48082c026656630075e790b90289"]}, @typed={0xc, 0xc4, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0xed}, @generic="8a850f9e53d8eae40179f85a154f2695c8efb30338ca736fea8ac71faa272302af9e0bc09855b889965bbeb2f20f764863f8bd0ccedc0b9a6e6e1396ed26f15361c3e11d020e00af94be0299d3d35c1c198c3be4322ec4373186732ccd8b71fd", @typed={0x8, 0xd2, 0x0, 0x0, @uid}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd0}, @NL80211_ATTR_MBSSID_ELEMS={0x10b, 0x133, 0x0, 0x1, [@generic="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", @typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x280080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x7, r2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x1000000000002, 0x80, 0xffffffffffffff81, 0x14, r2, 0x2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) msgctl$auto(0x6, 0x8, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x416, 0x7ff, 0x0, 0x7}, &(0x7f0000000200)=0x1f, &(0x7f0000000240)=0xf8, 0xff, 0x80000000, 0x4, 0xfffffffffffffffa, 0x4, 0x8, 0x8001, 0x2, @inferred, @raw=0x101}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x3c, 0x2, 0x0, 0x7, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 9.238249532s ago: executing program 3 (id=863): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r1) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1a58eb1e", @ANYRES16=r2, @ANYBLOB="000228bd7000fbdbdf251400000008002100080000000601288022b3ee3c76f086a9a163efab4fdd30898899bf94867a436eed7ea5f3d1fae2d7882db82b8173347fbaf9fb00ac0e002bdd1706397ca5b337a191e1af24843fc372c3f6bce30a2bf69d1065dc595226d09ff201bdac97508fb956a7ee790b16fd14000e00fe8000000000000000000000000000aa2400b4800c00d90001000000000000001400f500fe8000000000000000000000000000fa27685b045e42d0abde51c764c73a93283f492aca2d54f23c47a561f3e421b943e4a684b1685f9ff3972ffee6971097772b906187a613c2719d99e919aa8f588a9fc84a9c61d93c6dc643d97ab7640800cf00010000001400b68004000a800400318008003500", @ANYRES32=r3, @ANYBLOB="000008000c00000000000500020000000000"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x4c811) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0xff) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x8, 0x1, 0x13, 0x3, 0x110000000) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0xfffffffffffffffe, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0xa) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x1, 0x200, &(0x7f0000000140)={0x0, 0x2800000a}, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x59, 0x0) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=0x1, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e1, 0x91) poll$auto(&(0x7f0000000180)={r0, 0x1, 0x9816}, 0x7f, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto(0x3, 0x4008af03, 0x0) 9.123506564s ago: executing program 2 (id=865): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xe, 0x0, 0x4) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) 8.789761312s ago: executing program 4 (id=866): mmap$auto(0x0, 0x20009, 0x3, 0x18, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy3/hwflags\x00', 0x40081, 0x0) write$auto(0x3, 0x0, 0x704) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)={0xa, 0x4ccc0000000, 0x3, 0x9}) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x5, 0x4}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x68100, 0x0) ioctl$auto(r3, 0x545c, 0xffffffffffffffff) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) fallocate$auto(r3, 0x400, 0x100, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon3\x00', 0x100, 0x0) sendfile$auto(r2, r5, 0x0, 0x1000200) sysfs$auto(0x2, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) semctl$auto_SETALL(0x0, 0x2, 0x11, 0x4) 8.489544177s ago: executing program 2 (id=867): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x2d) 8.191140341s ago: executing program 2 (id=868): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='QU\xaa\xc0kN\x87\xb4\xf3N\xff\xff\xff\xa4\'\xff_\xa5\xb7\xe9HL\xf8le\xc9\xa6\xb3\x83V\xf3}|\xb7\xc3\xdc@f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r3, 0x0, r3, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x42, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 8.189415788s ago: executing program 3 (id=869): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2000000000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) socket(0x1a, 0x80c, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) acct$auto(0x0) io_uring_setup$auto(0xa00000, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) msgctl$auto_IPC_INFO(0x7fffffff, 0x3, 0x0) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0xc040) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) 7.817259115s ago: executing program 1 (id=871): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mknodat$auto(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x9ae) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x4d) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) bpf$auto(0x400, &(0x7f0000000000)=@bpf_attr_3={0xfffffc01, 0x2, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x4, 0x89, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0x40, 0x1, 0x57d, 0x1ff, 0x9}, 0xa3) r3 = socket(0x11, 0x3, 0x400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x5e8}, 0x2, &(0x7f0000000140), 0x7, 0x1000}, 0x5}, 0x2, 0x101) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7e, 0x0, 0x900}}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) gettid() 7.775405448s ago: executing program 4 (id=872): lseek$auto(0xffffffffffffffff, 0x8001, 0x4) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) socket(0x2b, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x6, 0x80000001, 0x7, 0x6d3f, 0x1000, 0x2, 0xffdffffffbfffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) socket(0xa, 0x5, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) setreuid$auto(0x4, 0x8) mlockall$auto(0x8000000000000001) unshare$auto(0x40000080) 7.729164954s ago: executing program 3 (id=880): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2000000000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) socket(0x1a, 0x80c, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) acct$auto(0x0) io_uring_setup$auto(0xa00000, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) msgctl$auto_IPC_INFO(0x7fffffff, 0x3, 0x0) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000340)={0x1d4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x220, 0x3, 0x0, 0x1, [@typed={0x8, 0x137, 0x0, 0x0, @pid=r1}, @nested={0xc, 0xa6, 0x0, 0x1, [@nested={0x4, 0xdb}, @nested={0x4, 0x1f}]}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x200, 0xc5, 0x0, 0x1, [@generic="3b01b1eb884f30478d5309509f405ccf4bd72370d7158b354c3c955d27d75a6fd6f533242ab05d9bec726152a12c3ae0f31d412022d531328ec411b3758587b0292679b2066710bbcf25b0d584181460f2a183c3d0307317cf9e1f0b3fb550519dbdac6a48a02e7d7473da436a976c576b416be0bd2e045cfd76c8b1fd3ed60b041f8f35011d8effc70db7f5c576156c3a4bde9ae7ccc68e1b71a986e6c512d9a82efc6f14b17282c00b65cf3689a05bd511ed8fe4bd37d401373fc917f099325390e06940ee6c43f18e6a0f81be9f32d2f1ecb6015dd72b1d94b7f3dd25a1be87152fe5ac0b496851baad00739d", @generic="d51f3bc82558a57567398fe1d569364eb2c545659f0ef188699cd28d499ad288bd5479d844879f17c693a95dc905b3e20d276412d0cd7f13a677629c3dba4ad3b0d2b5a87af9b0314c13f0f84e44308b65b85a3eb43e08eb3054b5698ead3387e9d77a68a1c1bd1d13854d4ed73ec698df23ade38a810e978a8dd8921fe51466ebf4bc938fca19ce101871010764d155dd6521f380affe131b24886ab62a444b64d7", @nested={0x4, 0x75}, @typed={0x66, 0xbd, 0x0, 0x0, @binary="e357fae06313ea204422d278f3ebfcb31c22bf93ecd99cd65a48c36edd25cca195c5136167750819ab98d2ff9658d9a8186a23279c0cf8ba573bf41ed51c8de59aadd61bcde456971e4fa436e82332520d467b49b94ba8b67f4444308e91c5ed626f"}]}]}, @IPVS_CMD_ATTR_DEST={0x1010, 0x2, 0x0, 0x1, [@generic="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", @nested={0xa, 0x1a, 0x0, 0x1, [@generic="6fc57c5f000f"]}]}, @IPVS_CMD_ATTR_DEST={0x735, 0x2, 0x0, 0x1, [@typed={0xc, 0x33, 0x0, 0x0, @u64=0x7fffffffffffffff}, @typed={0x27, 0xb9, 0x0, 0x0, @binary="7d2307927c56303703edb27150efbc7f7dbadd45586a1bd40c941da4ada742dcb9eb1c"}, @typed={0x8, 0xcb, 0x0, 0x0, @uid=r3}, @typed={0x5, 0x7, 0x0, 0x0, @str='\x00'}, @nested={0x265, 0xd0, 0x0, 0x1, [@typed={0x4, 0x107}, @typed={0x11, 0xc7, 0x0, 0x0, @str='802.15.4 MAC\x00'}, @nested={0x4, 0x11a}, @generic="263174406fd705ba3679da41fd7152d414c3749d7c0c783a7b3d0dc9fd2162b1fce1b66f6be71e879e4f5eaaa6592be57a4486b6655c857b736b296c441e993a01bf2110942d3a02f91315611e006cbd28505be29b0245bdd817a8a35add60daa065991f0b28bbbe61ee50e1ba425d363f8ddc843b6bbdaf915dae4e965082f83cae7538dfdd4e7f4512720ba7b5e354afa88a7fb6fbdbdf104cffba9f48888d8d8275fcb4307ecd5f22dec2f642aa907faaf09ce4abb6eb6545449f080bde79a9c42016c4726f8803cd1bc8f3b47f55e5c7f7aecfdb", @typed={0x8, 0x30, 0x0, 0x0, @uid}, @nested={0x4, 0x12d}, @typed={0xd3, 0xaa, 0x0, 0x0, @binary="8a94584af15a0f0a087055d5ea917e8df5809e7dcc2ca2ea2850e6b439915e2c6db219348f3b88f181fb4da687a14dd1f9c8379504082cef9d5233787aecd015b7dae964a29228abd8a15f7bff2b42a2e7dde2ada2729cad945a8098f6d235e67abcfbfed05b5a690bfc4d047c2d77c4523f79cf6f6322a6668b4778e3fe1ad0499a2ea98edc80caccf9e7b8420e99c0ae580ff2dd9aa6a5bdcbd7706a11717129a619e71767a044c0de38afd270a0be672bef77b71b5b1e4e047e03d4bc8c8995f667b47d06ee3d09b99194cb92e6"}, @generic="ff7886f038b066051f1305e44b6c0259c5a050eec423b6a80764a149f5510e2b63e0b73fb8aa45aae8c402feb429661eebfa7805370811b03f55fff3721135625f485d2cc092e5d9f99fa4e342250a5705058166dfad0323941cd1b88665145ad3ecec70cb79c5359ac3d354c3eda75e4c20bbca595778f32e7da9879de45a223c6e6681fc43b3", @nested={0x4, 0x10a}, @nested={0x4, 0x6c}]}, @typed={0xc, 0x10b, 0x0, 0x0, @u64=0x100000001}, @nested={0x3f3, 0x138, 0x0, 0x1, [@nested={0x4, 0xf3}, @generic="f68aaf70afcd323a2789ea18ad283a54819dff14d7b6b9860739e34a9a741e990e258fc0668e17da3dce3e21142411679f09dd0eec2fd0645fe575e95aa9c94df577c2f85d945050e12a5e0035be67cc61a58f794f75d946785eda52aee5344bd542669a5c0ab32d2c", @nested={0x4, 0x534}, @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@loopback}, @nested={0x278, 0xc8, 0x0, 0x1, [@generic="522b64af8d765a54d34a6878234fc8b52043d87565dfeaf1d353547419d0244a479633ab846524ebbd1dd89bd288424b34d4f1953b85fc861781fd2428cbee9898537e8cfd2ccf0c93964e3ca385b1c886c25ac2f994a337c5b002d5649747e020333652830fa7fd0d38fc39770b20eef47ec38c5f71d97782c5ae91a52aef056ee0a588d48c0654ae71ab01a3181871abf02fc2badc60ecc30049008759f92e381a37e9a034b728763b16a46164c66c96d66fbd293c0ddee72e3bc6c9cf902f83ea72ae0b1194fd5bcc2aeaf9db4d21f439cfb193b461080b", @nested={0xc4, 0x40, 0x0, 0x1, [@nested={0x4, 0x14b}, @generic="09994605c057ac2b2b001dcb79c2b5145766d6c6f8f2195f0b5a4889d3cd720a8546a2fe6a706d125991f9da2fd51031ba8f55d4e2f1654e201057f273412deaf4d5061edac07c837dd252e019f605dcab83b0f547638fb35186cc084ba3cb618f73b94d1691841afdeea6594414da87b21741e8b77a332104f253edfdb57dfc1ab29263bf3528dc8d49c1edba7259c77596cb948627a86f7c8af29d2ff85d677f5bb1ba40ae766af7409a57d945779471d732d2a997bf0d8f359cf6"]}, @generic="501e645c2fb5f8d19580b0", @nested={0x24, 0x7c, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x52}]}, @nested={0xa5, 0xd, 0x0, 0x1, [@nested={0x4, 0x4c}, @nested={0x4, 0xf8}, @nested={0x4, 0x64}, @generic="871086fb86b574cf35fbe42268266319a4755cfe978d3634f5c2b70def41003772d3301318807a7c1a4ff070b0f2fac72cb24ca68042e5231a7d1d8df32246c471e558646666caa90dc9fbcb8b8da7c7a26c067558666cbe2200c5924d5d16c8e321e6f965e49476fdbe8d9b672b071a82adc0f07aae1b691e90f5bbfde8aee610bb0a00467c3edc8b", @nested={0x4, 0x75}, @nested={0x4, 0x1b}, @nested={0x4, 0x35}]}]}, @generic="38f00dcf656ff694c58d6cc1d8875330a78d5e61188f8f29895d7293f7c6bf53b02d595988c21ffe3863427acb2e521e0d260babacc4a35b", @generic="cbf970bc10b7419c1856f87c3076a3e4a0c2a746a6d4", @typed={0x6, 0x10c, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0xaf}, @typed={0xa2, 0x8a, 0x0, 0x0, @binary="6915210eac51fc75701e097f1ccf7274e7d6d645d387d587468f2aec892e2e1ac3d926d683f1d17609fcb12c6c842488b27744d4a98c929f097949f76b702770881e7401eb09e2432c689648715633e40ff514d813801b02b9db1c923ec7adabedb491de85bd69c5e9de13b99e2c12c4c41e2b4c2f3783e5eeb8f5413ac09dc70ea27f46af34539bc7da30d71b54205f2f1a7039d62e9739214d537aa61e"}]}, @generic="e8c4c8724ddf8157310a49068c4af1682bacb74e20a23535499b9aa3434a3840f877c2e1ccfded47a22b9268d925d49cc8f6f9465d00e0403374570d07e193411fdae5525e7f948223a0be1adede0699c314bf7811c5d9375323ad657eedb3bd724d3394e012258e4856f07a3668803ee9e53c97cfb4b79346c8aac37ea420a791529fe7a2"]}, @IPVS_CMD_ATTR_DAEMON={0x3bf, 0x3, 0x0, 0x1, [@generic="f9c05f37f7063f642ff503ffb70386f3b9b366ceb8d7f5f5fc9a5139c47b01d249e2241b86b4d696dfe8825639ca533cde8b38ab8bcba6b495a0b2fa3d53bfbe89b028a8d3635c882394b7c13574ec5e8756c06dfe9ce03096bc5e9ddbe65938cdb76d36e6614f4e702a79af1f96a9871314fdd65b367164e14628614cc9d3b2e1", @generic="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", @generic="17b7b277c9b02c8ef11516dea859704bbf1fd9e5d70f68ad99be3955b40d8d5f110b7e2222b0768acbe9674232bfb0", @nested={0x205, 0x43, 0x0, 0x1, [@generic="c8acc1734a9f8ac587fc00b3f1c3ebec65f1074e294ec5a3deaa9295fad38a9ae08a0eccff35af6fcfafeeffc568532c212da8e9125f8eb37e112f87670ab533bdc7fb0ebe8e412d79cc5b93708b19a28d38704efe066acf3b2dfeeecf51", @generic="fb28bb6b6b22bb1d9735b8f93332571ba6a987e8681de8ee4975d9abf5bc8faac91bf22e612e3ed0d15ee8aaf8972414f18eb4476b44651e225798e8909c5bd692e524030f921e38e5eac0bd1047d36dbf6d024950e8aea1dc3d90e6f2f7f061bd22302766cb814e741288a827fb4853f8704c4840daa282582c5e50de892e68d59d310999f49382356efaa41f6fce3226b33b634dcd10a75f53b86dd427a6d0c07bff771d1344bf44ca6deee3e651f57134d5874776", @nested={0x4, 0x35}, @generic="485f4997c150e62d6af3eeb402bde0ebf81bfcdc504564db04a02c161831aa32aba97ad9d92627475b96b7f1bc59e2035f62c8eab3869f9b40804d282d41123a2bdd1ca214f1a67a475fe7ac873809f63f2e8383897a2668c28ab9bcbcb97fc81d24234d4b78c437edb3201bb194b30d6b66e0b43c6361aacdd82ec28d825c53ff3cc120058d5d269c4d897da6b3f7b783aa6db0422b04e69ef27e87ff07f317ade40b9d436862a4041fad46d6eb6b45767ffa0511816778da04912858631f34ff5bbf15583a8810220b545d9293184c8c30cb991913fe7b42c189a8477bbc9d555a17b5573babf476"]}, @typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x53f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1d4c}, 0x1, 0x0, 0x0, 0x81}, 0xc040) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) 5.989745515s ago: executing program 4 (id=873): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='QU\xaa\xc0kN\x87\xb4\xf3N\xff\xff\xff\xa4\'\xff_\xa5\xb7\xe9HL\xf8le\xc9\xa6\xb3\x83V\xf3}|\xb7\xc3\xdc@f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x42, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5.989617598s ago: executing program 1 (id=874): capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) fanotify_init$auto(0x5, 0x2000000000002) ioctl$auto(0xffffffffffffffff, 0x40246f4c, 0x38) r0 = prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x10dc00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) dup3$auto(r0, r1, 0x5) write$auto(0x3, 0x0, 0x81) 5.989427412s ago: executing program 3 (id=875): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x40, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fa, 0xd) futex_requeue$auto(&(0x7f00000000c0)={0xfffffffffffffffa, 0x1, 0x7f}, 0x0, 0xfffffffe, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x4, 0x7, 0x67, 0x400, 0x0, 0x0, 0x80f0c8, 0x0, "2fc1d5cbcb9f6b5e511f0dd8d6068f65", r2, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x81, 0xfffffffe}, 0x4a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x7187, 0x1, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) ioctl$auto_NVRAM_SETCKS(r0, 0x7041, 0x0) ioctl$auto_NVRAM_SETCKS(r0, 0x7041, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) 4.278139398s ago: executing program 4 (id=876): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x173406, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) unshare$auto(0x40000080) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x450002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio\xe8\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14\x03\x00\x00\x00U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\x03\x00\x00\x00\x00\x00\x00\x00E\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="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"], 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c840) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x21009, 0x4000000000df, 0x15, r2, 0x8003) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0xf, 0x8, 0x0, 0xfffffffffffffffb, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/active_time_ms\x00', 0x8400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000001c0)=""/176, 0xb0) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x18, 0x5, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x10000}, 0x1, 0x0) listen$auto(0x3, 0x81) 4.085848042s ago: executing program 1 (id=877): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x2d) 3.704587767s ago: executing program 1 (id=878): mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r0, &(0x7f0000000200)='\\*)A\x00', 0x2, 0x6, &(0x7f0000000240)={0x3, 0x101}) (async) write$auto_force_suspend_fops_hci_vhci(r0, &(0x7f0000000040)="dc68587989e886872c9a3b9a4bcb322848e033c312cfa32ef4374bb1e76421559deb880e5c468c46ca77d2049e3b645236c296fc8436ffbdf28bf79f3be43990d8ac00266f19c4ae550900e8dcccd7c3d58793e7e5dccde018e94114af344f09ac", 0x61) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq/4/type\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x20) 3.424377942s ago: executing program 2 (id=879): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x8, 0x400) signalfd$auto(r0, &(0x7f0000000040)={0x3}, 0x9) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/printk_formats\x00', 0x2, 0x0) flock$auto(r1, 0x8) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000009000), 0x101181, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) 3.373183751s ago: executing program 1 (id=881): mmap$auto(0x0, 0x20009, 0x3, 0x18, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010022bd7200ffdbdb25040000002faa7503f096223e88ae982b07732a0b001600db306d9a06000000f2e2e7dd4011935d53b8b2971a3c8288430d11ea44e81f409c471943593a8fd055b220924546a3e09f1c05f820f7edc4bc6148a2fd94f6a38e93cfc7259318ba77fa1d799edbb7b638a308a6d8f493513fde4f9c4a36fed357c31086bb166a646821c59583677a9cedad936f46f24936ca85a7242d68c5fa460124219cefdffb7c4074875479ddd3dacc6c14c8ef57ec62ec49075d5e47f7e8d151ccb7a35af2394b547802a88b8d8a2b764b3d975daa4a2e9145b6cc40136a39573740c3823bc823171d3746614096bc7fdfe1ad07883efb3be5be5c2aef951fc5c9d537e370e13329ac51f3ef4cdfaeb1edea5c55"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy3/hwflags\x00', 0x40081, 0x0) write$auto(0x3, 0x0, 0x704) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)={0xa, 0x4ccc0000000, 0x3, 0x9}) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x5, 0x4}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x68100, 0x0) ioctl$auto(r3, 0x545c, 0xffffffffffffffff) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) fallocate$auto(r3, 0x400, 0x100, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon3\x00', 0x100, 0x0) sendfile$auto(r2, r5, 0x0, 0x1000200) sysfs$auto(0x2, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) semctl$auto_SETALL(0x0, 0x2, 0x11, 0x4) 3.014936844s ago: executing program 4 (id=882): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='QU\xaa\xc0kN\x87\xb4\xf3N\xff\xff\xff\xa4\'\xff_\xa5\xb7\xe9HL\xf8le\xc9\xa6\xb3\x83V\xf3}|\xb7\xc3\xdc@f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x42, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.872349846s ago: executing program 3 (id=883): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mknodat$auto(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x9ae) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x4d) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) bpf$auto(0x400, &(0x7f0000000000)=@bpf_attr_3={0xfffffc01, 0x2, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x4, 0x89, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0x40, 0x1, 0x57d, 0x1ff, 0x9}, 0xa3) r3 = socket(0x11, 0x3, 0x400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x5e8}, 0x2, &(0x7f0000000140), 0x7, 0x1000}, 0x5}, 0x2, 0x101) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7e, 0x0, 0x900}}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) gettid() 2.801109659s ago: executing program 1 (id=884): lseek$auto(0xffffffffffffffff, 0x8001, 0x4) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) socket(0x2b, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x6, 0x80000001, 0x7, 0x6d3f, 0x1000, 0x2, 0xffdffffffbfffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) socket(0xa, 0x5, 0x4) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) setreuid$auto(0x4, 0x8) mlockall$auto(0x8000000000000001) unshare$auto(0x40000080) 1.759086153s ago: executing program 2 (id=885): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000009000), 0x101181, 0x0) madvise$auto(0x0, 0x200007, 0x8) 164.288172ms ago: executing program 2 (id=886): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='QU\xaa\xc0kN\x87\xb4\xf3N\xff\xff\xff\xa4\'\xff_\xa5\xb7\xe9HL\xf8le\xc9\xa6\xb3\x83V\xf3}|\xb7\xc3\xdc@f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x42, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 164.128369ms ago: executing program 3 (id=887): capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) fanotify_init$auto(0x5, 0x2000000000002) ioctl$auto(0xffffffffffffffff, 0x40246f4c, 0x38) r0 = prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x10dc00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) dup3$auto(r0, r1, 0x5) write$auto(0x3, 0x0, 0x81) 0s ago: executing program 4 (id=888): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x2d) kernel console output (not intermixed with test programs): 07.462251][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.469898][ T5831] Cannot create hsr debugfs directory [ 107.938814][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.957707][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.969301][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.993520][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.065500][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.078152][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.092540][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.122112][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.189993][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.212277][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.226921][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.255566][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.350374][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.379033][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.404025][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.421446][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.534368][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.587278][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.611513][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.640705][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.648225][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.678309][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.705780][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.713010][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.721458][ T51] Bluetooth: hci2: command tx timeout [ 108.750332][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.772419][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.796667][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.804504][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.835111][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.842633][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.860810][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.868376][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.898978][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.906372][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.961900][ T51] Bluetooth: hci0: command tx timeout [ 108.967395][ T51] Bluetooth: hci3: command tx timeout [ 108.971337][ T5836] Bluetooth: hci1: command tx timeout [ 108.995074][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.027500][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.090799][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.098517][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.140710][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.148092][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.694798][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.721835][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.878522][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.924445][ T5830] veth0_vlan: entered promiscuous mode [ 109.940799][ T5831] veth0_vlan: entered promiscuous mode [ 109.977799][ T5832] veth0_vlan: entered promiscuous mode [ 109.989426][ T5830] veth1_vlan: entered promiscuous mode [ 110.007855][ T5831] veth1_vlan: entered promiscuous mode [ 110.047774][ T5832] veth1_vlan: entered promiscuous mode [ 110.078272][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.130314][ T5830] veth0_macvtap: entered promiscuous mode [ 110.147772][ T5832] veth0_macvtap: entered promiscuous mode [ 110.160469][ T5831] veth0_macvtap: entered promiscuous mode [ 110.174001][ T5832] veth1_macvtap: entered promiscuous mode [ 110.184461][ T5830] veth1_macvtap: entered promiscuous mode [ 110.194701][ T5831] veth1_macvtap: entered promiscuous mode [ 110.227003][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.265454][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.282491][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.293120][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.322877][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.331966][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.340777][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.350431][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.367628][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.376804][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.385817][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.396273][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.412163][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.452817][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.468411][ T5829] veth0_vlan: entered promiscuous mode [ 110.479081][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.489312][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.499072][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.507975][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.587745][ T5829] veth1_vlan: entered promiscuous mode [ 110.684037][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.707165][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.764694][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.778078][ T5829] veth0_macvtap: entered promiscuous mode [ 110.785494][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.801560][ T5836] Bluetooth: hci2: command tx timeout [ 110.814738][ T5829] veth1_macvtap: entered promiscuous mode [ 110.827222][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.840628][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.864134][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.878428][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.914528][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.924783][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.934130][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.943059][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.990347][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.008523][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.025270][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.034450][ T5836] Bluetooth: hci1: command tx timeout [ 111.040013][ T5836] Bluetooth: hci3: command tx timeout [ 111.046601][ T51] Bluetooth: hci0: command tx timeout [ 111.099789][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.130391][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.273592][ T4486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.290098][ T4486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.344711][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.377001][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.485494][ T5926] Zero length message leads to an empty skb [ 111.517437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.538116][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.742887][ T5928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.767697][ T5934] sp0: Synchronizing with TNC [ 112.813940][ T5937] sp0: Found TNC [ 112.821197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.873587][ T51] Bluetooth: hci2: command tx timeout [ 112.901642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.111854][ T51] Bluetooth: hci0: command tx timeout [ 113.117409][ T5836] Bluetooth: hci3: command tx timeout [ 113.123053][ T5835] Bluetooth: hci1: command tx timeout [ 113.507067][ T5951] random: crng reseeded on system resumption [ 113.672254][ T5954] mmap: syz.0.8 (5954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.894204][ T5970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.900757][ T5970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.964037][ T5970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.027950][ T5970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.066811][ T5970] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.110409][ T5970] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.182117][ T5970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.188345][ T5970] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.269439][ T5970] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.308734][ T5970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.334533][ T5970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.366190][ T5970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.804412][ T5989] process 'syz.3.15' launched ':,' with NULL argv: empty string added [ 116.901935][ T5989] FAULT_INJECTION: forcing a failure. [ 116.901935][ T5989] name failslab, interval 1, probability 0, space 0, times 1 [ 116.967537][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.3.15 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 116.967584][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.967608][ T5989] Call Trace: [ 116.967618][ T5989] [ 116.967634][ T5989] dump_stack_lvl+0x16c/0x1f0 [ 116.967695][ T5989] should_fail_ex+0x512/0x640 [ 116.967739][ T5989] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 116.967792][ T5989] should_failslab+0xc2/0x120 [ 116.967831][ T5989] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 116.967879][ T5989] ? getname_flags.part.0+0x4c/0x550 [ 116.967923][ T5989] getname_flags.part.0+0x4c/0x550 [ 116.967966][ T5989] getname_flags+0x93/0xf0 [ 116.968010][ T5989] user_path_at+0x24/0x60 [ 116.968055][ T5989] do_utimes+0x102/0x2a0 [ 116.968104][ T5989] ? __pfx_do_utimes+0x10/0x10 [ 116.968156][ T5989] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.968212][ T5989] do_futimesat+0x18e/0x200 [ 116.968258][ T5989] ? __pfx_do_futimesat+0x10/0x10 [ 116.968322][ T5989] do_syscall_64+0xcd/0x490 [ 116.968375][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.968407][ T5989] RIP: 0033:0x7ff14218e929 [ 116.968440][ T5989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.968473][ T5989] RSP: 002b:00007ff142f2a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 116.968505][ T5989] RAX: ffffffffffffffda RBX: 00007ff1423b5fa0 RCX: 00007ff14218e929 [ 116.968525][ T5989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 116.968544][ T5989] RBP: 00007ff142210b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.968564][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.968582][ T5989] R13: 0000000000000000 R14: 00007ff1423b5fa0 R15: 00007ffc56991c88 [ 116.968622][ T5989] [ 117.155520][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.592154][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.983334][ T6007] FAULT_INJECTION: forcing a failure. [ 117.983334][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 118.008000][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.1.18 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 118.008045][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.008063][ T6007] Call Trace: [ 118.008074][ T6007] [ 118.008086][ T6007] dump_stack_lvl+0x16c/0x1f0 [ 118.008143][ T6007] should_fail_ex+0x512/0x640 [ 118.008188][ T6007] ? fs_reclaim_acquire+0xae/0x150 [ 118.008233][ T6007] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 118.008276][ T6007] should_failslab+0xc2/0x120 [ 118.008306][ T6007] __kmalloc_noprof+0xd2/0x510 [ 118.008354][ T6007] ? trace_kmalloc+0x2b/0xd0 [ 118.008383][ T6007] ? __kmalloc_noprof+0x242/0x510 [ 118.008435][ T6007] tomoyo_realpath_from_path+0xc2/0x6e0 [ 118.008492][ T6007] ? tomoyo_fill_path_info+0x233/0x420 [ 118.008531][ T6007] tomoyo_mount_acl+0x1ae/0x850 [ 118.008568][ T6007] ? kernel_text_address+0x8d/0x100 [ 118.008619][ T6007] ? __kernel_text_address+0xd/0x40 [ 118.008668][ T6007] ? unwind_get_return_address+0x59/0xa0 [ 118.008718][ T6007] ? arch_stack_walk+0xa6/0x100 [ 118.008771][ T6007] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 118.008821][ T6007] ? stack_trace_save+0x8e/0xc0 [ 118.008890][ T6007] ? tomoyo_domain+0xbb/0x150 [ 118.008936][ T6007] ? tomoyo_profile+0x47/0x60 [ 118.008988][ T6007] tomoyo_mount_permission+0x16d/0x420 [ 118.009029][ T6007] ? tomoyo_mount_permission+0x14f/0x420 [ 118.009071][ T6007] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 118.009139][ T6007] security_sb_mount+0x9b/0x260 [ 118.009175][ T6007] path_mount+0x128/0x2020 [ 118.009226][ T6007] ? kmem_cache_free+0x2d1/0x4d0 [ 118.009271][ T6007] ? __pfx_path_mount+0x10/0x10 [ 118.009327][ T6007] ? putname+0x154/0x1a0 [ 118.009362][ T6007] __x64_sys_mount+0x28d/0x310 [ 118.009412][ T6007] ? __pfx___x64_sys_mount+0x10/0x10 [ 118.009482][ T6007] do_syscall_64+0xcd/0x490 [ 118.009537][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.009570][ T6007] RIP: 0033:0x7f821538e929 [ 118.009596][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.009627][ T6007] RSP: 002b:00007f8216164038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.009658][ T6007] RAX: ffffffffffffffda RBX: 00007f82155b5fa0 RCX: 00007f821538e929 [ 118.009678][ T6007] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 118.009698][ T6007] RBP: 00007f8215410b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.009716][ T6007] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 118.009734][ T6007] R13: 0000000000000000 R14: 00007f82155b5fa0 R15: 00007ffc94c8a828 [ 118.009776][ T6007] [ 118.009885][ T6007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.093697][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.232256][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.251340][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.311299][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.336846][ T6010] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 118.481298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.731613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.762440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.766871][ T6002] sp0: Synchronizing with TNC [ 118.771527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.794558][ T6005] sp0: Found TNC [ 118.862283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 118.871165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 118.879614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 119.391591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.668642][ T6023] sp0: Synchronizing with TNC [ 119.674769][ T6013] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.681446][ T6027] sp0: Found TNC [ 120.343438][ T6013] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.394094][ T6013] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.402333][ T6013] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.674530][ T6036] netlink: 7 bytes leftover after parsing attributes in process `syz.1.23'. [ 121.024761][ T6044] FAULT_INJECTION: forcing a failure. [ 121.024761][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 121.053102][ T6029] could not allocate digest TFM handle [ 121.101701][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.1.26 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 121.101749][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.101769][ T6044] Call Trace: [ 121.101779][ T6044] [ 121.101792][ T6044] dump_stack_lvl+0x16c/0x1f0 [ 121.101847][ T6044] should_fail_ex+0x512/0x640 [ 121.101893][ T6044] ? fs_reclaim_acquire+0xae/0x150 [ 121.101935][ T6044] should_failslab+0xc2/0x120 [ 121.101965][ T6044] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 121.102016][ T6044] ? security_inode_alloc+0x3b/0x2b0 [ 121.102058][ T6044] security_inode_alloc+0x3b/0x2b0 [ 121.102094][ T6044] inode_init_always_gfp+0xce4/0x1030 [ 121.102145][ T6044] ? __pfx_nfsd_fill_super+0x10/0x10 [ 121.102181][ T6044] alloc_inode+0x86/0x240 [ 121.102214][ T6044] new_inode+0x22/0x1c0 [ 121.102244][ T6044] ? find_held_lock+0x2b/0x80 [ 121.102276][ T6044] ? __pfx_nfsd_fill_super+0x10/0x10 [ 121.102317][ T6044] simple_fill_super+0xff/0x720 [ 121.102369][ T6044] ? __pfx_nfsd_fill_super+0x10/0x10 [ 121.102404][ T6044] nfsd_fill_super+0x90/0x530 [ 121.102437][ T6044] ? __pfx_set_anon_super_fc+0x10/0x10 [ 121.102479][ T6044] ? __pfx_nfsd_fill_super+0x10/0x10 [ 121.102513][ T6044] get_tree_keyed+0x10b/0x1d0 [ 121.102561][ T6044] vfs_get_tree+0x8b/0x340 [ 121.102598][ T6044] path_mount+0x1414/0x2020 [ 121.102652][ T6044] ? kmem_cache_free+0x2d1/0x4d0 [ 121.102697][ T6044] ? __pfx_path_mount+0x10/0x10 [ 121.102754][ T6044] ? putname+0x154/0x1a0 [ 121.102790][ T6044] __x64_sys_mount+0x28d/0x310 [ 121.102841][ T6044] ? __pfx___x64_sys_mount+0x10/0x10 [ 121.102907][ T6044] do_syscall_64+0xcd/0x490 [ 121.102961][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.102993][ T6044] RIP: 0033:0x7f821538e929 [ 121.103021][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.103052][ T6044] RSP: 002b:00007f8216164038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.103090][ T6044] RAX: ffffffffffffffda RBX: 00007f82155b5fa0 RCX: 00007f821538e929 [ 121.103111][ T6044] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 121.103130][ T6044] RBP: 00007f8215410b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.103148][ T6044] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 121.103167][ T6044] R13: 0000000000000000 R14: 00007f82155b5fa0 R15: 00007ffc94c8a828 [ 121.103208][ T6044] [ 121.355230][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.751304][ T6033] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.085746][ T6055] syz.0.27 (6055) used greatest stack depth: 19720 bytes left [ 122.391232][ T6033] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.472589][ T6033] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.479242][ T6033] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.029433][ T6085] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.107484][ T6079] sp0: Synchronizing with TNC [ 123.178994][ T6083] sp0: Found TNC [ 123.447115][ T6086] FAULT_INJECTION: forcing a failure. [ 123.447115][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.509340][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.2.34 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 123.509376][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.509390][ T6086] Call Trace: [ 123.509398][ T6086] [ 123.509407][ T6086] dump_stack_lvl+0x16c/0x1f0 [ 123.509449][ T6086] should_fail_ex+0x512/0x640 [ 123.509493][ T6086] _copy_from_iter+0x29f/0x16f0 [ 123.509538][ T6086] ? __pfx__copy_from_iter+0x10/0x10 [ 123.509582][ T6086] ? __pfx___might_resched+0x10/0x10 [ 123.509606][ T6086] ? file_tty_write.constprop.0+0x735/0x9b0 [ 123.509652][ T6086] file_tty_write.constprop.0+0x488/0x9b0 [ 123.509700][ T6086] vfs_write+0x6c7/0x1150 [ 123.509737][ T6086] ? __pfx_tty_write+0x10/0x10 [ 123.509777][ T6086] ? __pfx_vfs_write+0x10/0x10 [ 123.509809][ T6086] ? find_held_lock+0x2b/0x80 [ 123.509851][ T6086] ksys_write+0x12a/0x250 [ 123.509885][ T6086] ? __pfx_ksys_write+0x10/0x10 [ 123.509929][ T6086] do_syscall_64+0xcd/0x490 [ 123.509970][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.509994][ T6086] RIP: 0033:0x7f8714b8e929 [ 123.510012][ T6086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.510035][ T6086] RSP: 002b:00007f87159ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.510057][ T6086] RAX: ffffffffffffffda RBX: 00007f8714db5fa0 RCX: 00007f8714b8e929 [ 123.510073][ T6086] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 123.510087][ T6086] RBP: 00007f8714c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 123.510101][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.510120][ T6086] R13: 0000000000000000 R14: 00007f8714db5fa0 R15: 00007ffd358c9b68 [ 123.510150][ T6086] [ 123.689980][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.531525][ T6094] FAULT_INJECTION: forcing a failure. [ 124.531525][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 124.567801][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.2.37 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 124.567849][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.567869][ T6094] Call Trace: [ 124.567880][ T6094] [ 124.567892][ T6094] dump_stack_lvl+0x16c/0x1f0 [ 124.567950][ T6094] should_fail_ex+0x512/0x640 [ 124.567997][ T6094] ? fs_reclaim_acquire+0xae/0x150 [ 124.568040][ T6094] ? tomoyo_get_condition+0xf4b/0x1ca0 [ 124.568092][ T6094] should_failslab+0xc2/0x120 [ 124.568123][ T6094] __kmalloc_noprof+0xd2/0x510 [ 124.568171][ T6094] ? find_held_lock+0x2b/0x80 [ 124.568224][ T6094] tomoyo_get_condition+0xf4b/0x1ca0 [ 124.568304][ T6094] ? __pfx_tomoyo_get_condition+0x10/0x10 [ 124.568366][ T6094] ? tomoyo_fill_path_info+0x233/0x420 [ 124.568406][ T6094] tomoyo_update_domain+0x484/0x870 [ 124.568440][ T6094] ? __pfx_tomoyo_same_path_acl+0x10/0x10 [ 124.568475][ T6094] ? __pfx_tomoyo_merge_path_acl+0x10/0x10 [ 124.568517][ T6094] tomoyo_write_file+0x4fa/0x8e0 [ 124.568556][ T6094] ? __pfx_tomoyo_write_file+0x10/0x10 [ 124.568606][ T6094] ? vsnprintf+0x318/0x1160 [ 124.568662][ T6094] ? __pfx_vsnprintf+0x10/0x10 [ 124.568728][ T6094] tomoyo_write_domain2+0x128/0x1e0 [ 124.568775][ T6094] ? __pfx_tomoyo_write_domain2+0x10/0x10 [ 124.568826][ T6094] ? __kmalloc_noprof+0x242/0x510 [ 124.568870][ T6094] ? tomoyo_profile+0x47/0x60 [ 124.568929][ T6094] tomoyo_supervisor+0x7dd/0x13b0 [ 124.568988][ T6094] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 124.569068][ T6094] ? rcu_is_watching+0x12/0xc0 [ 124.569103][ T6094] ? trace_kmalloc+0x2b/0xd0 [ 124.569136][ T6094] ? tomoyo_check_acl+0x1f7/0x410 [ 124.569176][ T6094] tomoyo_path_permission+0x270/0x3b0 [ 124.569217][ T6094] tomoyo_path_perm+0x3d4/0x460 [ 124.569268][ T6094] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 124.569328][ T6094] ? d_add+0x47a/0x780 [ 124.569380][ T6094] ? __pfx_current_check_access_path+0x10/0x10 [ 124.569423][ T6094] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 124.569459][ T6094] ? lookup_dcache+0x66/0x170 [ 124.569503][ T6094] tomoyo_path_symlink+0x97/0xe0 [ 124.569552][ T6094] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 124.569601][ T6094] ? find_held_lock+0x2b/0x80 [ 124.569632][ T6094] ? __might_fault+0xe3/0x190 [ 124.569686][ T6094] security_path_symlink+0x152/0x2e0 [ 124.569726][ T6094] do_symlinkat+0x10d/0x310 [ 124.569781][ T6094] ? __pfx_do_symlinkat+0x10/0x10 [ 124.569834][ T6094] ? getname_flags.part.0+0x1c5/0x550 [ 124.569880][ T6094] __x64_sys_symlinkat+0x93/0xc0 [ 124.569933][ T6094] do_syscall_64+0xcd/0x490 [ 124.569988][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.570021][ T6094] RIP: 0033:0x7f8714b8e929 [ 124.570048][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.570080][ T6094] RSP: 002b:00007f87159ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 124.570111][ T6094] RAX: ffffffffffffffda RBX: 00007f8714db5fa0 RCX: 00007f8714b8e929 [ 124.570132][ T6094] RDX: 0000200000000040 RSI: ffffffffffffff9c RDI: 0000200000000000 [ 124.570153][ T6094] RBP: 00007f8714c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 124.570172][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.570190][ T6094] R13: 0000000000000000 R14: 00007f8714db5fa0 R15: 00007ffd358c9b68 [ 124.570240][ T6094] [ 124.902746][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.982939][ T6114] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 126.456630][ T6118] FAULT_INJECTION: forcing a failure. [ 126.456630][ T6118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.483399][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.3.43 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 126.483443][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.483462][ T6118] Call Trace: [ 126.483473][ T6118] [ 126.483486][ T6118] dump_stack_lvl+0x16c/0x1f0 [ 126.483538][ T6118] should_fail_ex+0x512/0x640 [ 126.483595][ T6118] strncpy_from_user+0x3b/0x2e0 [ 126.483642][ T6118] getname_flags.part.0+0x8f/0x550 [ 126.483682][ T6118] getname_flags+0x93/0xf0 [ 126.483722][ T6118] user_path_at+0x24/0x60 [ 126.483760][ T6118] do_utimes+0x102/0x2a0 [ 126.483802][ T6118] ? __pfx_do_utimes+0x10/0x10 [ 126.483845][ T6118] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.483894][ T6118] do_futimesat+0x18e/0x200 [ 126.483937][ T6118] ? __pfx_do_futimesat+0x10/0x10 [ 126.484010][ T6118] do_syscall_64+0xcd/0x490 [ 126.484066][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.484112][ T6118] RIP: 0033:0x7ff14218e929 [ 126.484138][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.484170][ T6118] RSP: 002b:00007ff142f2a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 126.484200][ T6118] RAX: ffffffffffffffda RBX: 00007ff1423b5fa0 RCX: 00007ff14218e929 [ 126.484220][ T6118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.484237][ T6118] RBP: 00007ff142210b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.484255][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.484273][ T6118] R13: 0000000000000000 R14: 00007ff1423b5fa0 R15: 00007ffc56991c88 [ 126.484312][ T6118] [ 126.987024][ T6124] FAULT_INJECTION: forcing a failure. [ 126.987024][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 126.987063][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: syz.0.42 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 126.987094][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.987109][ T6124] Call Trace: [ 126.987116][ T6124] [ 126.987125][ T6124] dump_stack_lvl+0x16c/0x1f0 [ 126.987166][ T6124] should_fail_ex+0x512/0x640 [ 126.987200][ T6124] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 126.987241][ T6124] should_failslab+0xc2/0x120 [ 126.987263][ T6124] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 126.987302][ T6124] ? security_file_alloc+0x34/0x2b0 [ 126.987338][ T6124] security_file_alloc+0x34/0x2b0 [ 126.987369][ T6124] init_file+0x93/0x4c0 [ 126.987393][ T6124] alloc_empty_file+0x73/0x1e0 [ 126.987419][ T6124] path_openat+0xda/0x2cb0 [ 126.987451][ T6124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.987486][ T6124] ? __pfx_path_openat+0x10/0x10 [ 126.987522][ T6124] ? __lock_acquire+0xb8a/0x1c90 [ 126.987558][ T6124] do_filp_open+0x20b/0x470 [ 126.987595][ T6124] ? __pfx_do_filp_open+0x10/0x10 [ 126.987652][ T6124] ? alloc_fd+0x471/0x7d0 [ 126.987692][ T6124] do_sys_openat2+0x11b/0x1d0 [ 126.987718][ T6124] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.987747][ T6124] ? __pfx___might_resched+0x10/0x10 [ 126.987779][ T6124] __x64_sys_openat+0x174/0x210 [ 126.987807][ T6124] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.987846][ T6124] do_syscall_64+0xcd/0x490 [ 126.987894][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.987919][ T6124] RIP: 0033:0x7f178f58e929 [ 126.987937][ T6124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.987961][ T6124] RSP: 002b:00007f178d3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.987983][ T6124] RAX: ffffffffffffffda RBX: 00007f178f7b6080 RCX: 00007f178f58e929 [ 126.987998][ T6124] RDX: 00000000000e0180 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 126.988014][ T6124] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.988028][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.988043][ T6124] R13: 0000000000000000 R14: 00007f178f7b6080 R15: 00007fffde6fc978 [ 126.988072][ T6124] [ 127.762139][ T6133] FAULT_INJECTION: forcing a failure. [ 127.762139][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 127.762198][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.3.45 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 127.762240][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.762259][ T6133] Call Trace: [ 127.762269][ T6133] [ 127.762282][ T6133] dump_stack_lvl+0x16c/0x1f0 [ 127.762338][ T6133] should_fail_ex+0x512/0x640 [ 127.762385][ T6133] ? fs_reclaim_acquire+0xae/0x150 [ 127.762427][ T6133] ? tomoyo_encode2+0x100/0x3e0 [ 127.762470][ T6133] should_failslab+0xc2/0x120 [ 127.762501][ T6133] __kmalloc_noprof+0xd2/0x510 [ 127.762548][ T6133] ? d_absolute_path+0x136/0x1a0 [ 127.762588][ T6133] tomoyo_encode2+0x100/0x3e0 [ 127.762639][ T6133] tomoyo_encode+0x29/0x50 [ 127.762681][ T6133] tomoyo_realpath_from_path+0x18f/0x6e0 [ 127.762770][ T6133] tomoyo_path_perm+0x274/0x460 [ 127.762806][ T6133] ? tomoyo_path_perm+0x260/0x460 [ 127.762862][ T6133] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 127.762940][ T6133] ? d_add+0x47a/0x780 [ 127.763008][ T6133] ? __pfx_current_check_access_path+0x10/0x10 [ 127.763051][ T6133] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 127.763093][ T6133] ? lookup_dcache+0x66/0x170 [ 127.763137][ T6133] tomoyo_path_symlink+0x97/0xe0 [ 127.763193][ T6133] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 127.763245][ T6133] ? find_held_lock+0x2b/0x80 [ 127.763283][ T6133] ? __might_fault+0xe3/0x190 [ 127.763345][ T6133] security_path_symlink+0x152/0x2e0 [ 127.763384][ T6133] do_symlinkat+0x10d/0x310 [ 127.763432][ T6133] ? __pfx_do_symlinkat+0x10/0x10 [ 127.763479][ T6133] ? getname_flags.part.0+0x1c5/0x550 [ 127.763525][ T6133] __x64_sys_symlinkat+0x93/0xc0 [ 127.763593][ T6133] do_syscall_64+0xcd/0x490 [ 127.763648][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.763679][ T6133] RIP: 0033:0x7ff14218e929 [ 127.763705][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.763735][ T6133] RSP: 002b:00007ff142f2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 127.763774][ T6133] RAX: ffffffffffffffda RBX: 00007ff1423b5fa0 RCX: 00007ff14218e929 [ 127.763795][ T6133] RDX: 0000200000000040 RSI: ffffffffffffff9c RDI: 0000200000000000 [ 127.763816][ T6133] RBP: 00007ff142210b39 R08: 0000000000000000 R09: 0000000000000000 [ 127.763843][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.763862][ T6133] R13: 0000000000000000 R14: 00007ff1423b5fa0 R15: 00007ffc56991c88 [ 127.763903][ T6133] [ 127.763938][ T6133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.319139][ T6141] FAULT_INJECTION: forcing a failure. [ 128.319139][ T6141] name failslab, interval 1, probability 0, space 0, times 0 [ 128.319184][ T6141] CPU: 1 UID: 0 PID: 6141 Comm: syz.3.47 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 128.319219][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.319236][ T6141] Call Trace: [ 128.319245][ T6141] [ 128.319256][ T6141] dump_stack_lvl+0x16c/0x1f0 [ 128.319303][ T6141] should_fail_ex+0x512/0x640 [ 128.319342][ T6141] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 128.319383][ T6141] should_failslab+0xc2/0x120 [ 128.319409][ T6141] __kmalloc_cache_noprof+0x6a/0x3e0 [ 128.319447][ T6141] ? copy_net_ns+0x135/0x5f0 [ 128.319481][ T6141] copy_net_ns+0x135/0x5f0 [ 128.319507][ T6141] ? copy_cgroup_ns+0x71/0x700 [ 128.319541][ T6141] create_new_namespaces+0x3ea/0xa90 [ 128.319579][ T6141] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 128.319612][ T6141] ksys_unshare+0x45b/0xa40 [ 128.319649][ T6141] ? __pfx_ksys_unshare+0x10/0x10 [ 128.319687][ T6141] ? xfd_validate_state+0x61/0x180 [ 128.319744][ T6141] __x64_sys_unshare+0x31/0x40 [ 128.319781][ T6141] do_syscall_64+0xcd/0x490 [ 128.319828][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.319855][ T6141] RIP: 0033:0x7ff14218e929 [ 128.319877][ T6141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.319903][ T6141] RSP: 002b:00007ff142f2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 128.319929][ T6141] RAX: ffffffffffffffda RBX: 00007ff1423b5fa0 RCX: 00007ff14218e929 [ 128.319948][ T6141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 128.319965][ T6141] RBP: 00007ff142210b39 R08: 0000000000000000 R09: 0000000000000000 [ 128.319983][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.320000][ T6141] R13: 0000000000000000 R14: 00007ff1423b5fa0 R15: 00007ffc56991c88 [ 128.320038][ T6141] [ 129.363434][ T6153] ERROR: Out of memory at tomoyo_memory_ok. [ 129.729665][ T6145] tty tty12: ldisc open failed (-12), clearing slot 11 [ 130.736517][ T6171] FAULT_INJECTION: forcing a failure. [ 130.736517][ T6171] name failslab, interval 1, probability 0, space 0, times 0 [ 130.775407][ T6171] CPU: 1 UID: 0 PID: 6171 Comm: syz.1.56 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 130.775455][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.775475][ T6171] Call Trace: [ 130.775486][ T6171] [ 130.775498][ T6171] dump_stack_lvl+0x16c/0x1f0 [ 130.775555][ T6171] should_fail_ex+0x512/0x640 [ 130.775611][ T6171] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 130.775667][ T6171] should_failslab+0xc2/0x120 [ 130.775698][ T6171] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 130.775762][ T6171] ? __d_alloc+0x31/0xaa0 [ 130.775820][ T6171] __d_alloc+0x31/0xaa0 [ 130.775869][ T6171] ? do_raw_spin_lock+0x12c/0x2b0 [ 130.775924][ T6171] d_alloc+0x4a/0x1e0 [ 130.775976][ T6171] d_alloc_name+0x83/0xb0 [ 130.776025][ T6171] ? __pfx_d_alloc_name+0x10/0x10 [ 130.776086][ T6171] simple_fill_super+0x2eb/0x720 [ 130.776137][ T6171] ? __pfx_nfsd_fill_super+0x10/0x10 [ 130.776173][ T6171] nfsd_fill_super+0x90/0x530 [ 130.776207][ T6171] ? __pfx_set_anon_super_fc+0x10/0x10 [ 130.776252][ T6171] ? __pfx_nfsd_fill_super+0x10/0x10 [ 130.776287][ T6171] get_tree_keyed+0x10b/0x1d0 [ 130.776334][ T6171] vfs_get_tree+0x8b/0x340 [ 130.776373][ T6171] path_mount+0x1414/0x2020 [ 130.776445][ T6171] ? kmem_cache_free+0x2d1/0x4d0 [ 130.776491][ T6171] ? __pfx_path_mount+0x10/0x10 [ 130.776548][ T6171] ? putname+0x154/0x1a0 [ 130.776592][ T6171] __x64_sys_mount+0x28d/0x310 [ 130.776645][ T6171] ? __pfx___x64_sys_mount+0x10/0x10 [ 130.776707][ T6171] do_syscall_64+0xcd/0x490 [ 130.776760][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.776794][ T6171] RIP: 0033:0x7f821538e929 [ 130.776820][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.776853][ T6171] RSP: 002b:00007f8216164038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.776884][ T6171] RAX: ffffffffffffffda RBX: 00007f82155b5fa0 RCX: 00007f821538e929 [ 130.776904][ T6171] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 130.776924][ T6171] RBP: 00007f8215410b39 R08: 0000000000000000 R09: 0000000000000000 [ 130.776942][ T6171] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 130.776960][ T6171] R13: 0000000000000000 R14: 00007f82155b5fa0 R15: 00007ffc94c8a828 [ 130.777001][ T6171] [ 131.494950][ T6180] FAULT_INJECTION: forcing a failure. [ 131.494950][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 131.569794][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.0.58 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 131.569837][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.569854][ T6180] Call Trace: [ 131.569865][ T6180] [ 131.569877][ T6180] dump_stack_lvl+0x16c/0x1f0 [ 131.569933][ T6180] should_fail_ex+0x512/0x640 [ 131.569977][ T6180] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 131.570033][ T6180] should_failslab+0xc2/0x120 [ 131.570065][ T6180] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 131.570115][ T6180] ? __d_alloc+0x31/0xaa0 [ 131.570170][ T6180] __d_alloc+0x31/0xaa0 [ 131.570217][ T6180] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 131.570272][ T6180] d_alloc+0x4a/0x1e0 [ 131.570323][ T6180] d_alloc_name+0x83/0xb0 [ 131.570368][ T6180] ? __pfx_d_alloc_name+0x10/0x10 [ 131.570411][ T6180] ? _raw_spin_unlock+0x28/0x50 [ 131.570447][ T6180] ? d_instantiate+0x77/0x90 [ 131.570493][ T6180] simple_fill_super+0x2eb/0x720 [ 131.570535][ T6180] ? __pfx_nfsd_fill_super+0x10/0x10 [ 131.570565][ T6180] nfsd_fill_super+0x90/0x530 [ 131.570592][ T6180] ? __pfx_set_anon_super_fc+0x10/0x10 [ 131.570628][ T6180] ? __pfx_nfsd_fill_super+0x10/0x10 [ 131.570656][ T6180] get_tree_keyed+0x10b/0x1d0 [ 131.570695][ T6180] vfs_get_tree+0x8b/0x340 [ 131.570738][ T6180] path_mount+0x1414/0x2020 [ 131.570784][ T6180] ? kmem_cache_free+0x2d1/0x4d0 [ 131.570823][ T6180] ? __pfx_path_mount+0x10/0x10 [ 131.570871][ T6180] ? putname+0x154/0x1a0 [ 131.570907][ T6180] __x64_sys_mount+0x28d/0x310 [ 131.570954][ T6180] ? __pfx___x64_sys_mount+0x10/0x10 [ 131.571007][ T6180] do_syscall_64+0xcd/0x490 [ 131.571055][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.571085][ T6180] RIP: 0033:0x7f178f58e929 [ 131.571107][ T6180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.571133][ T6180] RSP: 002b:00007f1790313038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.571159][ T6180] RAX: ffffffffffffffda RBX: 00007f178f7b5fa0 RCX: 00007f178f58e929 [ 131.571177][ T6180] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 131.571193][ T6180] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.571210][ T6180] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 131.571227][ T6180] R13: 0000000000000000 R14: 00007f178f7b5fa0 R15: 00007fffde6fc978 [ 131.571261][ T6180] [ 132.617944][ T6184] FAULT_INJECTION: forcing a failure. [ 132.617944][ T6184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.631948][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.1.59 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 132.631986][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.632000][ T6184] Call Trace: [ 132.632007][ T6184] [ 132.632016][ T6184] dump_stack_lvl+0x16c/0x1f0 [ 132.632058][ T6184] should_fail_ex+0x512/0x640 [ 132.632096][ T6184] should_fail_alloc_page+0xe7/0x130 [ 132.632120][ T6184] prepare_alloc_pages+0x3c2/0x610 [ 132.632154][ T6184] ? rcu_is_watching+0x12/0xc0 [ 132.632185][ T6184] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 132.632222][ T6184] ? __lock_acquire+0xb8a/0x1c90 [ 132.632264][ T6184] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.632299][ T6184] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.632335][ T6184] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.632370][ T6184] ? find_held_lock+0x2b/0x80 [ 132.632401][ T6184] ? __lock_acquire+0xb8a/0x1c90 [ 132.632441][ T6184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.632482][ T6184] ? policy_nodemask+0xea/0x4e0 [ 132.632526][ T6184] alloc_pages_mpol+0x1fb/0x550 [ 132.632550][ T6184] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 132.632581][ T6184] folio_alloc_mpol_noprof+0x36/0x2f0 [ 132.632610][ T6184] shmem_alloc_folio+0x135/0x160 [ 132.632642][ T6184] shmem_alloc_and_add_folio+0x499/0xc20 [ 132.632685][ T6184] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 132.632724][ T6184] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 132.632765][ T6184] shmem_get_folio_gfp+0x67f/0x1600 [ 132.632807][ T6184] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 132.632845][ T6184] ? filemap_map_pages+0xf6f/0x1680 [ 132.632887][ T6184] shmem_fault+0x1fe/0xa30 [ 132.632924][ T6184] ? __pfx_shmem_fault+0x10/0x10 [ 132.632976][ T6184] ? __pfx_filemap_map_pages+0x10/0x10 [ 132.633042][ T6184] __do_fault+0x10d/0x490 [ 132.633084][ T6184] __handle_mm_fault+0x3c2a/0x5490 [ 132.633125][ T6184] ? __pfx___handle_mm_fault+0x10/0x10 [ 132.633155][ T6184] ? __pfx_mt_find+0x10/0x10 [ 132.633194][ T6184] ? find_vma+0xbf/0x140 [ 132.633218][ T6184] ? __pfx_find_vma+0x10/0x10 [ 132.633245][ T6184] handle_mm_fault+0x589/0xd10 [ 132.633278][ T6184] ? __pkru_allows_pkey+0x41/0xb0 [ 132.633313][ T6184] do_user_addr_fault+0x7a6/0x1370 [ 132.633349][ T6184] ? rcu_is_watching+0x12/0xc0 [ 132.633376][ T6184] exc_page_fault+0x5c/0xb0 [ 132.633418][ T6184] asm_exc_page_fault+0x26/0x30 [ 132.633441][ T6184] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 132.633471][ T6184] Code: 10 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 10 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 132.633494][ T6184] RSP: 0018:ffffc900052dfb78 EFLAGS: 00050206 [ 132.633512][ T6184] RAX: 0000000000000001 RBX: 0000000000000800 RCX: 0000000000000800 [ 132.633527][ T6184] RDX: 0000000000000000 RSI: 0000000000011000 RDI: ffff888031ca4000 [ 132.633542][ T6184] RBP: 0000000000011000 R08: 0000000000000001 R09: ffffed10063948ff [ 132.633556][ T6184] R10: ffff888031ca47ff R11: 0000000000000000 R12: ffffc900052dfda0 [ 132.633572][ T6184] R13: 0000000000011800 R14: ffff888031ca4000 R15: 00007ffffffff000 [ 132.633603][ T6184] _copy_from_iter+0x383/0x16f0 [ 132.633649][ T6184] ? __pfx__copy_from_iter+0x10/0x10 [ 132.633694][ T6184] ? __pfx___might_resched+0x10/0x10 [ 132.633717][ T6184] ? file_tty_write.constprop.0+0x735/0x9b0 [ 132.633763][ T6184] file_tty_write.constprop.0+0x488/0x9b0 [ 132.633810][ T6184] vfs_write+0x6c7/0x1150 [ 132.633847][ T6184] ? __pfx_tty_write+0x10/0x10 [ 132.633887][ T6184] ? __pfx_vfs_write+0x10/0x10 [ 132.633919][ T6184] ? find_held_lock+0x2b/0x80 [ 132.633961][ T6184] ksys_write+0x12a/0x250 [ 132.633995][ T6184] ? __pfx_ksys_write+0x10/0x10 [ 132.634039][ T6184] do_syscall_64+0xcd/0x490 [ 132.634089][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.634122][ T6184] RIP: 0033:0x7f821538e929 [ 132.634147][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.634173][ T6184] RSP: 002b:00007f8216164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.634194][ T6184] RAX: ffffffffffffffda RBX: 00007f82155b5fa0 RCX: 00007f821538e929 [ 132.634209][ T6184] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 132.634224][ T6184] RBP: 00007f8215410b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.634238][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.634252][ T6184] R13: 0000000000000000 R14: 00007f82155b5fa0 R15: 00007ffc94c8a828 [ 132.634282][ T6184] [ 133.799070][ T6195] FAULT_INJECTION: forcing a failure. [ 133.799070][ T6195] name fail_futex, interval 1, probability 0, space 0, times 1 [ 133.799117][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.2.61 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 133.799158][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.799176][ T6195] Call Trace: [ 133.799186][ T6195] [ 133.799197][ T6195] dump_stack_lvl+0x16c/0x1f0 [ 133.799247][ T6195] should_fail_ex+0x512/0x640 [ 133.799294][ T6195] get_futex_key+0x1d0/0x1540 [ 133.799340][ T6195] ? __pfx_get_futex_key+0x10/0x10 [ 133.799380][ T6195] ? rcu_is_watching+0x12/0xc0 [ 133.799423][ T6195] futex_wait_setup+0x9d/0x550 [ 133.799483][ T6195] __futex_wait+0x194/0x2f0 [ 133.799531][ T6195] ? __pfx___futex_wait+0x10/0x10 [ 133.799583][ T6195] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.799630][ T6195] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.799682][ T6195] ? __pfx_futex_wake_mark+0x10/0x10 [ 133.799753][ T6195] futex_wait+0xe8/0x380 [ 133.799800][ T6195] ? __pfx_futex_wait+0x10/0x10 [ 133.799870][ T6195] do_futex+0x229/0x350 [ 133.799912][ T6195] ? __pfx_do_futex+0x10/0x10 [ 133.799954][ T6195] ? __pfx___might_resched+0x10/0x10 [ 133.799992][ T6195] __x64_sys_futex+0x1e0/0x4c0 [ 133.800033][ T6195] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 133.800076][ T6195] ? __pfx___x64_sys_futex+0x10/0x10 [ 133.800119][ T6195] ? __pfx___do_sys_close_range+0x10/0x10 [ 133.800183][ T6195] do_syscall_64+0xcd/0x490 [ 133.800234][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.800266][ T6195] RIP: 0033:0x7f8714b8e929 [ 133.800292][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.800323][ T6195] RSP: 002b:00007f87159ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.800353][ T6195] RAX: ffffffffffffffda RBX: 00007f8714db6088 RCX: 00007f8714b8e929 [ 133.800373][ T6195] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8714db6088 [ 133.800393][ T6195] RBP: 00007f8714db6080 R08: 0000000000000000 R09: 0000000000000000 [ 133.800412][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8714db608c [ 133.800431][ T6195] R13: 0000000000000000 R14: 00007ffd358c9a80 R15: 00007ffd358c9b68 [ 133.800472][ T6195] [ 135.181442][ T6192] tty tty17: ldisc open failed (-12), clearing slot 16 [ 135.805233][ T6204] sp0: Synchronizing with TNC [ 135.832168][ T6204] sp0: Found TNC [ 136.073973][ T6213] netlink: 7 bytes leftover after parsing attributes in process `syz.0.63'. [ 137.314206][ T6223] FAULT_INJECTION: forcing a failure. [ 137.314206][ T6223] name failslab, interval 1, probability 0, space 0, times 0 [ 137.421459][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.2.68 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 137.421506][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.421526][ T6223] Call Trace: [ 137.421537][ T6223] [ 137.421549][ T6223] dump_stack_lvl+0x16c/0x1f0 [ 137.421604][ T6223] should_fail_ex+0x512/0x640 [ 137.421651][ T6223] ? fs_reclaim_acquire+0xae/0x150 [ 137.421695][ T6223] should_failslab+0xc2/0x120 [ 137.421727][ T6223] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 137.421781][ T6223] ? security_inode_alloc+0x3b/0x2b0 [ 137.421825][ T6223] security_inode_alloc+0x3b/0x2b0 [ 137.421863][ T6223] inode_init_always_gfp+0xce4/0x1030 [ 137.421917][ T6223] alloc_inode+0x86/0x240 [ 137.421951][ T6223] new_inode+0x22/0x1c0 [ 137.421990][ T6223] simple_fill_super+0x306/0x720 [ 137.422041][ T6223] ? __pfx_nfsd_fill_super+0x10/0x10 [ 137.422077][ T6223] nfsd_fill_super+0x90/0x530 [ 137.422111][ T6223] ? __pfx_set_anon_super_fc+0x10/0x10 [ 137.422154][ T6223] ? __pfx_nfsd_fill_super+0x10/0x10 [ 137.422190][ T6223] get_tree_keyed+0x10b/0x1d0 [ 137.422240][ T6223] vfs_get_tree+0x8b/0x340 [ 137.422278][ T6223] path_mount+0x1414/0x2020 [ 137.422340][ T6223] ? kmem_cache_free+0x2d1/0x4d0 [ 137.422393][ T6223] ? __pfx_path_mount+0x10/0x10 [ 137.422451][ T6223] ? putname+0x154/0x1a0 [ 137.422488][ T6223] __x64_sys_mount+0x28d/0x310 [ 137.422541][ T6223] ? __pfx___x64_sys_mount+0x10/0x10 [ 137.422608][ T6223] do_syscall_64+0xcd/0x490 [ 137.422662][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.422695][ T6223] RIP: 0033:0x7f8714b8e929 [ 137.422722][ T6223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.422752][ T6223] RSP: 002b:00007f87159ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.422784][ T6223] RAX: ffffffffffffffda RBX: 00007f8714db5fa0 RCX: 00007f8714b8e929 [ 137.422805][ T6223] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 137.422824][ T6223] RBP: 00007f8714c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 137.422843][ T6223] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 137.422862][ T6223] R13: 0000000000000000 R14: 00007f8714db5fa0 R15: 00007ffd358c9b68 [ 137.422904][ T6223] [ 137.427209][ T6219] sp0: Synchronizing with TNC [ 137.675232][ T6220] sp0: Found TNC [ 137.835454][ T6210] could not allocate digest TFM handle [ 140.112089][ T6257] FAULT_INJECTION: forcing a failure. [ 140.112089][ T6257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 140.229670][ T6256] FAULT_INJECTION: forcing a failure. [ 140.229670][ T6256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.249896][ T6256] CPU: 1 UID: 0 PID: 6256 Comm: syz.0.73 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 140.249938][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.249956][ T6256] Call Trace: [ 140.249966][ T6256] [ 140.249978][ T6256] dump_stack_lvl+0x16c/0x1f0 [ 140.250033][ T6256] should_fail_ex+0x512/0x640 [ 140.250100][ T6256] should_fail_alloc_page+0xe7/0x130 [ 140.250135][ T6256] prepare_alloc_pages+0x3c2/0x610 [ 140.250174][ T6256] ? rcu_is_watching+0x12/0xc0 [ 140.250213][ T6256] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 140.250266][ T6256] ? __lock_acquire+0xb8a/0x1c90 [ 140.250327][ T6256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.250378][ T6256] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.250428][ T6256] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.250479][ T6256] ? find_held_lock+0x2b/0x80 [ 140.250524][ T6256] ? __lock_acquire+0xb8a/0x1c90 [ 140.250565][ T6256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.250616][ T6256] ? policy_nodemask+0xea/0x4e0 [ 140.250699][ T6256] alloc_pages_mpol+0x1fb/0x550 [ 140.250734][ T6256] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.250779][ T6256] folio_alloc_mpol_noprof+0x36/0x2f0 [ 140.250819][ T6256] shmem_alloc_folio+0x135/0x160 [ 140.250863][ T6256] shmem_alloc_and_add_folio+0x499/0xc20 [ 140.250923][ T6256] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 140.250972][ T6256] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 140.251025][ T6256] shmem_get_folio_gfp+0x67f/0x1600 [ 140.251087][ T6256] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 140.251136][ T6256] ? filemap_map_pages+0xf6f/0x1680 [ 140.251189][ T6256] shmem_fault+0x1fe/0xa30 [ 140.251237][ T6256] ? __pfx_shmem_fault+0x10/0x10 [ 140.251292][ T6256] ? __pfx_filemap_map_pages+0x10/0x10 [ 140.251354][ T6256] __do_fault+0x10d/0x490 [ 140.251407][ T6256] __handle_mm_fault+0x3c2a/0x5490 [ 140.251462][ T6256] ? __pfx___handle_mm_fault+0x10/0x10 [ 140.251502][ T6256] ? __pfx_mt_find+0x10/0x10 [ 140.251558][ T6256] ? find_vma+0xbf/0x140 [ 140.251589][ T6256] ? __pfx_find_vma+0x10/0x10 [ 140.251626][ T6256] handle_mm_fault+0x589/0xd10 [ 140.251671][ T6256] ? __pkru_allows_pkey+0x41/0xb0 [ 140.251719][ T6256] do_user_addr_fault+0x7a6/0x1370 [ 140.251767][ T6256] ? rcu_is_watching+0x12/0xc0 [ 140.251805][ T6256] exc_page_fault+0x5c/0xb0 [ 140.251854][ T6256] asm_exc_page_fault+0x26/0x30 [ 140.251887][ T6256] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 140.251926][ T6256] Code: 10 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 10 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 140.251957][ T6256] RSP: 0018:ffffc90005427b78 EFLAGS: 00050206 [ 140.251983][ T6256] RAX: 0000000000000001 RBX: 0000000000000800 RCX: 0000000000000800 [ 140.252002][ T6256] RDX: 0000000000000000 RSI: 0000000000011000 RDI: ffff88807f744000 [ 140.252021][ T6256] RBP: 0000000000011000 R08: 0000000000000001 R09: ffffed100fee88ff [ 140.252039][ T6256] R10: ffff88807f7447ff R11: 0000000000000000 R12: ffffc90005427da0 [ 140.252059][ T6256] R13: 0000000000011800 R14: ffff88807f744000 R15: 00007ffffffff000 [ 140.252110][ T6256] _copy_from_iter+0x383/0x16f0 [ 140.252174][ T6256] ? __pfx__copy_from_iter+0x10/0x10 [ 140.252233][ T6256] ? __pfx___might_resched+0x10/0x10 [ 140.252264][ T6256] ? file_tty_write.constprop.0+0x735/0x9b0 [ 140.252322][ T6256] file_tty_write.constprop.0+0x488/0x9b0 [ 140.252386][ T6256] vfs_write+0x6c7/0x1150 [ 140.252435][ T6256] ? __pfx_tty_write+0x10/0x10 [ 140.252488][ T6256] ? __pfx_vfs_write+0x10/0x10 [ 140.252531][ T6256] ? find_held_lock+0x2b/0x80 [ 140.252590][ T6256] ksys_write+0x12a/0x250 [ 140.252637][ T6256] ? __pfx_ksys_write+0x10/0x10 [ 140.252695][ T6256] do_syscall_64+0xcd/0x490 [ 140.252750][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.252782][ T6256] RIP: 0033:0x7f178f58e929 [ 140.252807][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.252837][ T6256] RSP: 002b:00007f1790313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.252866][ T6256] RAX: ffffffffffffffda RBX: 00007f178f7b5fa0 RCX: 00007f178f58e929 [ 140.252887][ T6256] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 140.252905][ T6256] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 140.252922][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.252939][ T6256] R13: 0000000000000000 R14: 00007f178f7b5fa0 R15: 00007fffde6fc978 [ 140.252980][ T6256] [ 140.771115][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.3.72 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 140.771164][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.771183][ T6257] Call Trace: [ 140.771194][ T6257] [ 140.771206][ T6257] dump_stack_lvl+0x16c/0x1f0 [ 140.771260][ T6257] should_fail_ex+0x512/0x640 [ 140.771313][ T6257] get_futex_key+0x1d0/0x1540 [ 140.771357][ T6257] ? __pfx_get_futex_key+0x10/0x10 [ 140.771391][ T6257] ? __kernel_text_address+0xd/0x40 [ 140.771440][ T6257] ? unwind_get_return_address+0x59/0xa0 [ 140.771490][ T6257] ? arch_stack_walk+0xa6/0x100 [ 140.771552][ T6257] futex_wait_setup+0x9d/0x550 [ 140.771612][ T6257] __futex_wait+0x194/0x2f0 [ 140.771660][ T6257] ? __pfx___futex_wait+0x10/0x10 [ 140.771705][ T6257] ? kasan_save_stack+0x42/0x60 [ 140.771759][ T6257] ? __pfx_futex_wake_mark+0x10/0x10 [ 140.771844][ T6257] futex_wait+0xe8/0x380 [ 140.771891][ T6257] ? __pfx_futex_wait+0x10/0x10 [ 140.771954][ T6257] ? rcu_is_watching+0x12/0xc0 [ 140.771999][ T6257] do_futex+0x229/0x350 [ 140.772038][ T6257] ? __pfx_do_futex+0x10/0x10 [ 140.772075][ T6257] ? putname+0x154/0x1a0 [ 140.772113][ T6257] __x64_sys_futex+0x1e0/0x4c0 [ 140.772163][ T6257] ? __pfx___x64_sys_futex+0x10/0x10 [ 140.772203][ T6257] ? getname_flags.part.0+0x1c5/0x550 [ 140.772253][ T6257] do_syscall_64+0xcd/0x490 [ 140.772307][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.772340][ T6257] RIP: 0033:0x7ff14218e929 [ 140.772365][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.772396][ T6257] RSP: 002b:00007ff142f2a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.772426][ T6257] RAX: ffffffffffffffda RBX: 00007ff1423b5fa8 RCX: 00007ff14218e929 [ 140.772446][ T6257] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff1423b5fa8 [ 140.772465][ T6257] RBP: 00007ff1423b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 140.772483][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff1423b5fac [ 140.772502][ T6257] R13: 0000000000000000 R14: 00007ffc56991ba0 R15: 00007ffc56991c88 [ 140.772542][ T6257] [ 143.417920][ T6293] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 143.442600][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.449317][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.509074][ T6290] sp0: Synchronizing with TNC [ 143.529445][ T6291] sp0: Found TNC [ 143.538807][ T6293] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 143.586507][ T6293] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 143.595636][ T6293] page_type: f5(slab) [ 143.599836][ T6293] raw: 00fff00000000040 ffff88801b84b3c0 dead000000000122 0000000000000000 [ 143.614717][ T6293] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 143.799743][ T6293] head: 00fff00000000040 ffff88801b84b3c0 dead000000000122 0000000000000000 [ 143.850071][ T6293] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 143.859604][ T6293] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 143.869358][ T6293] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 143.880501][ T6293] page dumped because: unmovable page [ 143.889167][ T6293] page_owner tracks the page as allocated [ 143.895883][ T6293] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 107657369353, free_ts 71159627211 [ 143.919713][ T6293] post_alloc_hook+0x1c0/0x230 [ 143.928515][ T6293] get_page_from_freelist+0x1321/0x3890 [ 143.935222][ T6293] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 143.941523][ T6293] alloc_pages_mpol+0x1fb/0x550 [ 143.946596][ T6293] new_slab+0x23b/0x330 [ 143.975818][ T6293] ___slab_alloc+0xd9c/0x1940 [ 144.024395][ T6293] __slab_alloc.constprop.0+0x56/0xb0 [ 144.031728][ T6293] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 144.045258][ T6293] kmemdup_noprof+0x29/0x60 [ 144.050122][ T6293] neigh_sysctl_register+0xb2/0x670 [ 144.060086][ T6293] addrconf_sysctl_register+0xb9/0x1f0 [ 144.067954][ T6293] ipv6_add_dev+0xb39/0x15f0 [ 144.077385][ T6293] addrconf_notify+0x53e/0x19e0 [ 144.086386][ T6293] notifier_call_chain+0xb9/0x410 [ 144.190057][ T6293] call_netdevice_notifiers_info+0xbe/0x140 [ 144.208318][ T6293] register_netdevice+0x182e/0x2270 [ 144.216315][ T6293] page last free pid 5529 tgid 5529 stack trace: [ 144.371574][ T6293] __free_frozen_pages+0x7fe/0x1180 [ 144.453482][ T6293] qlist_free_all+0x4d/0x120 [ 144.470118][ T6293] kasan_quarantine_reduce+0x195/0x1e0 [ 144.486054][ T6293] __kasan_slab_alloc+0x69/0x90 [ 144.519559][ T6293] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 144.532379][ T6293] vm_area_alloc+0x1f/0x160 [ 144.539992][ T6293] __mmap_region+0xf0a/0x25e0 [ 144.557997][ T6293] mmap_region+0x1ab/0x3f0 [ 144.571223][ T6293] do_mmap+0xa3e/0x1210 [ 144.581334][ T6293] vm_mmap_pgoff+0x281/0x450 [ 144.594067][ T6293] ksys_mmap_pgoff+0x32c/0x5c0 [ 144.612260][ T6293] __x64_sys_mmap+0x125/0x190 [ 144.621647][ T6293] do_syscall_64+0xcd/0x490 [ 144.631867][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.009823][ T6309] Invalid ELF header magic: != ELF [ 145.052871][ T6308] Invalid ELF header magic: != ELF [ 146.415786][ T6327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'. [ 148.026513][ T6358] netlink: 'syz.1.93': attribute type 21 has an invalid length. [ 148.054469][ T6358] netlink: 326 bytes leftover after parsing attributes in process `syz.1.93'. [ 148.839473][ T6375] QAT: Device 250 not found [ 150.747804][ T6418] random: crng reseeded on system resumption [ 152.091852][ T6444] FAULT_INJECTION: forcing a failure. [ 152.091852][ T6444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.105879][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.2.117 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 152.105923][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.105941][ T6444] Call Trace: [ 152.105951][ T6444] [ 152.105964][ T6444] dump_stack_lvl+0x16c/0x1f0 [ 152.106030][ T6444] should_fail_ex+0x512/0x640 [ 152.106082][ T6444] should_fail_alloc_page+0xe7/0x130 [ 152.106116][ T6444] prepare_alloc_pages+0x3c2/0x610 [ 152.106164][ T6444] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 152.106221][ T6444] ? lock_acquire+0x179/0x350 [ 152.106276][ T6444] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.106328][ T6444] ? weighted_interleave_nid+0x3e6/0x5a0 [ 152.106395][ T6444] ? __pfx_weighted_interleave_nid+0x10/0x10 [ 152.106453][ T6444] ? __lock_acquire+0x622/0x1c90 [ 152.106501][ T6444] ? policy_nodemask+0xea/0x4e0 [ 152.106557][ T6444] alloc_pages_mpol+0x1fb/0x550 [ 152.106590][ T6444] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.106633][ T6444] folio_alloc_mpol_noprof+0x36/0x2f0 [ 152.106673][ T6444] vma_alloc_folio_noprof+0xed/0x1e0 [ 152.106709][ T6444] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 152.106745][ T6444] ? find_held_lock+0x2b/0x80 [ 152.106784][ T6444] ? __handle_mm_fault+0x1092/0x5490 [ 152.106830][ T6444] __handle_mm_fault+0x2f21/0x5490 [ 152.106876][ T6444] ? __pfx___handle_mm_fault+0x10/0x10 [ 152.106914][ T6444] ? __pte_offset_map_lock+0x174/0x310 [ 152.106941][ T6444] ? find_held_lock+0x2b/0x80 [ 152.106965][ T6444] ? find_held_lock+0x2b/0x80 [ 152.107104][ T6444] ? follow_page_pte+0x3af/0x14c0 [ 152.107147][ T6444] handle_mm_fault+0x589/0xd10 [ 152.107196][ T6444] __get_user_pages+0x589/0x3b80 [ 152.107241][ T6444] ? __pfx_mt_find+0x10/0x10 [ 152.107270][ T6444] ? __pfx___get_user_pages+0x10/0x10 [ 152.107328][ T6444] populate_vma_page_range+0x278/0x3a0 [ 152.107367][ T6444] ? __pfx_populate_vma_page_range+0x10/0x10 [ 152.107402][ T6444] ? __pfx_find_vma_intersection+0x10/0x10 [ 152.107440][ T6444] ? do_mmap+0x69c/0x1210 [ 152.107476][ T6444] __mm_populate+0x1d8/0x380 [ 152.107512][ T6444] ? __pfx___mm_populate+0x10/0x10 [ 152.107553][ T6444] ? up_write+0x1b2/0x520 [ 152.107598][ T6444] vm_mmap_pgoff+0x362/0x450 [ 152.107632][ T6444] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 152.107661][ T6444] ? do_set_mempolicy+0x220/0x480 [ 152.107712][ T6444] ? __x64_sys_futex+0x1e0/0x4c0 [ 152.107746][ T6444] ? __x64_sys_futex+0x1e9/0x4c0 [ 152.107785][ T6444] ksys_mmap_pgoff+0x7d/0x5c0 [ 152.107814][ T6444] ? xfd_validate_state+0x61/0x180 [ 152.107849][ T6444] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 152.107902][ T6444] __x64_sys_mmap+0x125/0x190 [ 152.107946][ T6444] do_syscall_64+0xcd/0x490 [ 152.107995][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.108025][ T6444] RIP: 0033:0x7f8714b8e929 [ 152.108051][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.108079][ T6444] RSP: 002b:00007f87159ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 152.108107][ T6444] RAX: ffffffffffffffda RBX: 00007f8714db5fa0 RCX: 00007f8714b8e929 [ 152.108126][ T6444] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 152.108143][ T6444] RBP: 00007f8714c10b39 R08: 0000000000000002 R09: 0000000000008000 [ 152.108160][ T6444] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 152.108177][ T6444] R13: 0000000000000000 R14: 00007f8714db5fa0 R15: 00007ffd358c9b68 [ 152.108214][ T6444] [ 153.967718][ T6462] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 153.976325][ T6462] netlink: 330 bytes leftover after parsing attributes in process `syz.0.122'. [ 154.008677][ T6462] syz.0.122 uses obsolete (PF_INET,SOCK_PACKET) [ 154.194346][ T6465] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.154671][ T6033] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 156.154729][ T6033] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 156.170254][ T6033] Bluetooth: hci0: Dropping invalid advertising data [ 156.177815][ T6033] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 156.177873][ T6033] Bluetooth: hci0: Dropping invalid advertising data [ 156.192307][ T6033] Bluetooth: hci0: Malformed LE Event: 0x02 [ 159.390357][ T6552] nvme_fcloop: unknown parameter or missing value '7' [ 160.879166][ T6587] netlink: 'syz.2.149': attribute type 10 has an invalid length. [ 160.896206][ T6587] netlink: 330 bytes leftover after parsing attributes in process `syz.2.149'. [ 163.965770][ T6650] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 163.994128][ T6650] netlink: 330 bytes leftover after parsing attributes in process `syz.1.162'. [ 166.213149][ T6688] FAULT_INJECTION: forcing a failure. [ 166.213149][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 166.296309][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.0.170 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 166.296349][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.296366][ T6688] Call Trace: [ 166.296374][ T6688] [ 166.296384][ T6688] dump_stack_lvl+0x16c/0x1f0 [ 166.296432][ T6688] should_fail_ex+0x512/0x640 [ 166.296472][ T6688] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 166.296512][ T6688] should_failslab+0xc2/0x120 [ 166.296539][ T6688] __kmalloc_cache_noprof+0x6a/0x3e0 [ 166.296578][ T6688] ? open_substream+0xec/0x9b0 [ 166.296608][ T6688] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.296647][ T6688] open_substream+0xec/0x9b0 [ 166.296681][ T6688] rawmidi_open_priv+0x543/0x6e0 [ 166.296725][ T6688] snd_rawmidi_open+0x4cc/0xbf0 [ 166.296774][ T6688] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 166.296813][ T6688] ? __pfx_default_wake_function+0x10/0x10 [ 166.296845][ T6688] ? kobject_get_unless_zero+0x156/0x1e0 [ 166.296898][ T6688] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 166.296935][ T6688] snd_open+0x1fe/0x450 [ 166.296986][ T6688] ? __pfx_snd_open+0x10/0x10 [ 166.297034][ T6688] chrdev_open+0x231/0x6a0 [ 166.297084][ T6688] ? __pfx_apparmor_file_open+0x10/0x10 [ 166.297138][ T6688] ? __pfx_chrdev_open+0x10/0x10 [ 166.297192][ T6688] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 166.297243][ T6688] do_dentry_open+0x744/0x1c10 [ 166.297292][ T6688] ? __pfx_chrdev_open+0x10/0x10 [ 166.297362][ T6688] vfs_open+0x82/0x3f0 [ 166.297402][ T6688] path_openat+0x1de4/0x2cb0 [ 166.297467][ T6688] ? __pfx_path_openat+0x10/0x10 [ 166.297515][ T6688] ? __lock_acquire+0xb8a/0x1c90 [ 166.297562][ T6688] do_filp_open+0x20b/0x470 [ 166.297609][ T6688] ? __pfx_do_filp_open+0x10/0x10 [ 166.297687][ T6688] ? alloc_fd+0x471/0x7d0 [ 166.297740][ T6688] do_sys_openat2+0x11b/0x1d0 [ 166.297775][ T6688] ? __pfx_do_sys_openat2+0x10/0x10 [ 166.297829][ T6688] __x64_sys_openat+0x174/0x210 [ 166.297866][ T6688] ? __pfx___x64_sys_openat+0x10/0x10 [ 166.297919][ T6688] do_syscall_64+0xcd/0x490 [ 166.297972][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.298008][ T6688] RIP: 0033:0x7f178f58e929 [ 166.298036][ T6688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.298067][ T6688] RSP: 002b:00007f1790313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.298099][ T6688] RAX: ffffffffffffffda RBX: 00007f178f7b5fa0 RCX: 00007f178f58e929 [ 166.298119][ T6688] RDX: 0000000000080102 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 166.298149][ T6688] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 166.298169][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.298188][ T6688] R13: 0000000000000000 R14: 00007f178f7b5fa0 R15: 00007fffde6fc978 [ 166.298230][ T6688] [ 168.460567][ T6717] netlink: 'syz.1.178': attribute type 11 has an invalid length. [ 170.235621][ T6745] FAULT_INJECTION: forcing a failure. [ 170.235621][ T6745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.300387][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.1.183 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 170.300434][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.300454][ T6745] Call Trace: [ 170.300464][ T6745] [ 170.300476][ T6745] dump_stack_lvl+0x16c/0x1f0 [ 170.300533][ T6745] should_fail_ex+0x512/0x640 [ 170.300595][ T6745] core_sys_select+0x4c5/0xc10 [ 170.300641][ T6745] ? __pfx_core_sys_select+0x10/0x10 [ 170.300682][ T6745] ? futex_wait+0x120/0x380 [ 170.300744][ T6745] ? __pfx_do_futex+0x10/0x10 [ 170.300789][ T6745] kern_select+0x15d/0x1e0 [ 170.300823][ T6745] ? __pfx_kern_select+0x10/0x10 [ 170.300865][ T6745] ? xfd_validate_state+0x61/0x180 [ 170.300909][ T6745] ? __pfx_ksys_write+0x10/0x10 [ 170.300962][ T6745] __x64_sys_select+0xbd/0x160 [ 170.301003][ T6745] ? do_syscall_64+0x91/0x490 [ 170.301052][ T6745] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.301100][ T6745] do_syscall_64+0xcd/0x490 [ 170.301154][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.301185][ T6745] RIP: 0033:0x7f821538e929 [ 170.301211][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.301240][ T6745] RSP: 002b:00007f8216122038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 170.301270][ T6745] RAX: ffffffffffffffda RBX: 00007f82155b6160 RCX: 00007f821538e929 [ 170.301290][ T6745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 170.301308][ T6745] RBP: 00007f8215410b39 R08: 0000000000000000 R09: 0000000000000000 [ 170.301326][ T6745] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 170.301344][ T6745] R13: 0000000000000000 R14: 00007f82155b6160 R15: 00007ffc94c8a828 [ 170.301384][ T6745] [ 170.480008][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.407817][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.188'. [ 171.651140][ T6771] hsr_slave_0: left promiscuous mode [ 171.751244][ T6771] hsr_slave_1: left promiscuous mode [ 179.201085][ T6880] FAULT_INJECTION: forcing a failure. [ 179.201085][ T6880] name failslab, interval 1, probability 0, space 0, times 0 [ 179.213856][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.0.218 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 179.213899][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.213918][ T6880] Call Trace: [ 179.213936][ T6880] [ 179.213950][ T6880] dump_stack_lvl+0x16c/0x1f0 [ 179.214007][ T6880] should_fail_ex+0x512/0x640 [ 179.214053][ T6880] ? __kvmalloc_node_noprof+0x124/0x620 [ 179.214104][ T6880] should_failslab+0xc2/0x120 [ 179.214135][ T6880] __kvmalloc_node_noprof+0x137/0x620 [ 179.214185][ T6880] ? io_alloc_cache_init+0x33/0x170 [ 179.214240][ T6880] ? io_alloc_cache_init+0x33/0x170 [ 179.214285][ T6880] io_alloc_cache_init+0x33/0x170 [ 179.214336][ T6880] io_uring_setup+0x675/0x2080 [ 179.214382][ T6880] ? __pfx_io_uring_setup+0x10/0x10 [ 179.214422][ T6880] ? do_futex+0x122/0x350 [ 179.214462][ T6880] ? __pfx_do_futex+0x10/0x10 [ 179.214506][ T6880] ? __pfx___might_resched+0x10/0x10 [ 179.214558][ T6880] ? xfd_validate_state+0x61/0x180 [ 179.214612][ T6880] __x64_sys_io_uring_setup+0xc2/0x170 [ 179.214658][ T6880] do_syscall_64+0xcd/0x490 [ 179.214711][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.214744][ T6880] RIP: 0033:0x7f178f58e929 [ 179.214771][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.214802][ T6880] RSP: 002b:00007f1790313038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 179.214833][ T6880] RAX: ffffffffffffffda RBX: 00007f178f7b5fa0 RCX: 00007f178f58e929 [ 179.214854][ T6880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 179.214872][ T6880] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 179.214891][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.214909][ T6880] R13: 0000000000000000 R14: 00007f178f7b5fa0 R15: 00007fffde6fc978 [ 179.214957][ T6880] [ 179.411867][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.676234][ T6860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.706837][ T6860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.754609][ T6860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.760741][ T6860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.471131][ T6017] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.751732][ T6017] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.831283][ T6017] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.837402][ T6033] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.882625][ T6941] input: f as /devices/virtual/input/input6 [ 183.964183][ T6944] Format for deleting device is "id" (uint). [ 186.302288][ T7019] input: f as /devices/virtual/input/input7 [ 186.623764][ T5824] udevd[5824]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 187.882126][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.250'. [ 188.046084][ T7043] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 188.061044][ T7043] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 188.116057][ T7043] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 188.124037][ T7043] page_type: f5(slab) [ 188.128360][ T7043] raw: 00fff00000000040 ffff88801b84b3c0 dead000000000122 0000000000000000 [ 188.137416][ T7043] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 188.147192][ T7043] head: 00fff00000000040 ffff88801b84b3c0 dead000000000122 0000000000000000 [ 188.191068][ T7043] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 188.200712][ T7043] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 188.209548][ T7043] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 188.218638][ T7043] page dumped because: unmovable page [ 188.224166][ T7043] page_owner tracks the page as allocated [ 188.230115][ T7043] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 107657369353, free_ts 71159627211 [ 188.253238][ T7043] post_alloc_hook+0x1c0/0x230 [ 188.258103][ T7043] get_page_from_freelist+0x1321/0x3890 [ 188.264508][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 188.275203][ T7054] netlink: 17 bytes leftover after parsing attributes in process `syz.0.252'. [ 188.354748][ T7043] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 188.362251][ T7043] alloc_pages_mpol+0x1fb/0x550 [ 188.367398][ T7043] new_slab+0x23b/0x330 [ 188.372510][ T7043] ___slab_alloc+0xd9c/0x1940 [ 188.377609][ T7043] __slab_alloc.constprop.0+0x56/0xb0 [ 188.384679][ T7043] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 188.394639][ T7043] kmemdup_noprof+0x29/0x60 [ 188.399503][ T7043] neigh_sysctl_register+0xb2/0x670 [ 188.407369][ T7043] addrconf_sysctl_register+0xb9/0x1f0 [ 188.414341][ T7043] ipv6_add_dev+0xb39/0x15f0 [ 188.419308][ T7043] addrconf_notify+0x53e/0x19e0 [ 188.425575][ T7043] notifier_call_chain+0xb9/0x410 [ 188.431639][ T7043] call_netdevice_notifiers_info+0xbe/0x140 [ 188.439010][ T7043] register_netdevice+0x182e/0x2270 [ 188.445648][ T7043] page last free pid 5529 tgid 5529 stack trace: [ 188.453379][ T7043] __free_frozen_pages+0x7fe/0x1180 [ 188.459093][ T7043] qlist_free_all+0x4d/0x120 [ 188.467725][ T7043] kasan_quarantine_reduce+0x195/0x1e0 [ 188.476697][ T7043] __kasan_slab_alloc+0x69/0x90 [ 188.482021][ T7043] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 188.487767][ T7043] vm_area_alloc+0x1f/0x160 [ 188.493624][ T7043] __mmap_region+0xf0a/0x25e0 [ 188.501896][ T7043] mmap_region+0x1ab/0x3f0 [ 188.507494][ T7043] do_mmap+0xa3e/0x1210 [ 188.512497][ T7043] vm_mmap_pgoff+0x281/0x450 [ 188.518711][ T7043] ksys_mmap_pgoff+0x32c/0x5c0 [ 188.524402][ T7043] __x64_sys_mmap+0x125/0x190 [ 188.530976][ T7043] do_syscall_64+0xcd/0x490 [ 188.535734][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.250360][ T6914] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 189.740749][ T7087] HfR: entered promiscuous mode [ 189.837990][ T7094] block nbd6: not configured, cannot reconfigure [ 191.438712][ T7126] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967293.4294967295.4294967293), cmd(2) [ 192.342099][ T7140] ======================================================= [ 192.342099][ T7140] WARNING: The mand mount option has been deprecated and [ 192.342099][ T7140] and is ignored by this kernel. Remove the mand [ 192.342099][ T7140] option from the mount to silence this warning. [ 192.342099][ T7140] ======================================================= [ 192.377195][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.512504][ T7157] syz.1.274 (7157): attempted to duplicate a private mapping with mremap. This is not supported. [ 194.159352][ T7171] zswap: compressor not available [ 194.657790][ T7183] HfR: entered promiscuous mode [ 194.667220][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 194.676870][ T7183] HfR: left promiscuous mode [ 196.617472][ T7223] FAULT_INJECTION: forcing a failure. [ 196.617472][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 196.690052][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.0.289 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 196.690097][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.690115][ T7223] Call Trace: [ 196.690125][ T7223] [ 196.690142][ T7223] dump_stack_lvl+0x16c/0x1f0 [ 196.690196][ T7223] should_fail_ex+0x512/0x640 [ 196.690240][ T7223] ? __kvmalloc_node_noprof+0x124/0x620 [ 196.690290][ T7223] should_failslab+0xc2/0x120 [ 196.690320][ T7223] __kvmalloc_node_noprof+0x137/0x620 [ 196.690365][ T7223] ? __pfx___mutex_lock+0x10/0x10 [ 196.690411][ T7223] ? nf_hook_entries_grow+0x22b/0x860 [ 196.690454][ T7223] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 196.690507][ T7223] ? nf_hook_entries_grow+0x22b/0x860 [ 196.690553][ T7223] nf_hook_entries_grow+0x22b/0x860 [ 196.690615][ T7223] __nf_register_net_hook+0x1cd/0x730 [ 196.690676][ T7223] nf_register_net_hook+0x109/0x160 [ 196.690743][ T7223] nf_register_net_hooks+0x5d/0xd0 [ 196.690799][ T7223] ? __pfx_apparmor_nf_register+0x10/0x10 [ 196.690852][ T7223] ops_init+0x1e2/0x5f0 [ 196.690904][ T7223] setup_net+0x1ff/0x510 [ 196.690932][ T7223] ? lockdep_init_map_type+0x5c/0x280 [ 196.690980][ T7223] ? __pfx_setup_net+0x10/0x10 [ 196.691013][ T7223] ? debug_mutex_init+0x37/0x70 [ 196.691047][ T7223] copy_net_ns+0x2a6/0x5f0 [ 196.691086][ T7223] create_new_namespaces+0x3ea/0xa90 [ 196.691130][ T7223] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 196.691169][ T7223] ksys_unshare+0x45b/0xa40 [ 196.691212][ T7223] ? __pfx_ksys_unshare+0x10/0x10 [ 196.691256][ T7223] ? xfd_validate_state+0x61/0x180 [ 196.691306][ T7223] __x64_sys_unshare+0x31/0x40 [ 196.691347][ T7223] do_syscall_64+0xcd/0x490 [ 196.691400][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.691433][ T7223] RIP: 0033:0x7f178f58e929 [ 196.691459][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.691490][ T7223] RSP: 002b:00007f178d3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 196.691521][ T7223] RAX: ffffffffffffffda RBX: 00007f178f7b6080 RCX: 00007f178f58e929 [ 196.691542][ T7223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 196.691560][ T7223] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 196.691578][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.691596][ T7223] R13: 0000000000000000 R14: 00007f178f7b6080 R15: 00007fffde6fc978 [ 196.691636][ T7223] [ 197.912553][ T7247] input: f as /devices/virtual/input/input9 [ 198.412347][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.297'. [ 199.395192][ T7264] ubi0: attaching mtd0 [ 199.417365][ T7264] ubi0: scanning is finished [ 199.434665][ T7264] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 199.766467][ T7264] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 199.823022][ T7274] netlink: 'syz.2.302': attribute type 11 has an invalid length. [ 201.963297][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 203.849740][ T7341] HfR: entered promiscuous mode [ 204.880137][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.886808][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.678109][ T30] audit: type=1804 audit(6045984675.479:2): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.314" name="/newroot/81/file0" dev="tmpfs" ino=450 res=1 errno=0 [ 209.329522][ T7386] sysfs_service_op_show: Client not running :-5: [ 210.272942][ T7391] input: f as /devices/virtual/input/input10 [ 212.076035][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 212.101045][ T7410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.108747][ T7410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.313550][ T7410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.380120][ T7410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.414075][ T7453] Invalid ELF header magic: != ELF [ 215.657390][ T7457] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 218.260029][ T7470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.342'. [ 218.342764][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.384113][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.452210][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.483708][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.725511][ T7481] netlink: 504 bytes leftover after parsing attributes in process `syz.0.349'. [ 221.462091][ T7511] ubi0: attaching mtd0 [ 221.469541][ T7511] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 222.340031][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 222.391122][ T7521] ipvlan1: entered allmulticast mode [ 222.396522][ T7521] veth0_vlan: entered allmulticast mode [ 222.430527][ T7522] netlink: 338 bytes leftover after parsing attributes in process `syz.3.352'. [ 223.173899][ T7528] random: crng reseeded on system resumption [ 223.654462][ T6914] Bluetooth: hci2: Malformed LE Event: 0x1d [ 224.144257][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.355'. [ 224.161127][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.181677][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.322098][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.329614][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.091370][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 228.168190][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'. [ 228.211054][ T7604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.218807][ T7604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.402934][ T7604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.410479][ T7604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.206082][ T7646] random: crng reseeded on system resumption [ 232.268938][ T7651] Invalid ELF header magic: != ELF [ 233.621153][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 235.310165][ T7684] FAULT_INJECTION: forcing a failure. [ 235.310165][ T7684] name failslab, interval 1, probability 0, space 0, times 0 [ 235.371049][ T7684] CPU: 0 UID: 0 PID: 7684 Comm: syz.2.391 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 235.371092][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.371112][ T7684] Call Trace: [ 235.371121][ T7684] [ 235.371133][ T7684] dump_stack_lvl+0x16c/0x1f0 [ 235.371188][ T7684] should_fail_ex+0x512/0x640 [ 235.371235][ T7684] ? fs_reclaim_acquire+0xae/0x150 [ 235.371278][ T7684] should_failslab+0xc2/0x120 [ 235.371309][ T7684] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 235.371360][ T7684] ? security_inode_alloc+0x3b/0x2b0 [ 235.371403][ T7684] security_inode_alloc+0x3b/0x2b0 [ 235.371440][ T7684] inode_init_always_gfp+0xce4/0x1030 [ 235.371494][ T7684] alloc_inode+0x86/0x240 [ 235.371527][ T7684] new_inode+0x22/0x1c0 [ 235.371564][ T7684] __debugfs_create_file+0x11c/0x6b0 [ 235.371614][ T7684] debugfs_create_file_full+0x41/0x60 [ 235.371661][ T7684] kvm_dev_ioctl+0x14ff/0x1ad0 [ 235.371725][ T7684] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 235.371791][ T7684] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 235.371858][ T7684] __x64_sys_ioctl+0x18b/0x210 [ 235.371902][ T7684] do_syscall_64+0xcd/0x490 [ 235.371958][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.371991][ T7684] RIP: 0033:0x7f8714b8e929 [ 235.372023][ T7684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.372053][ T7684] RSP: 002b:00007f87159ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.372083][ T7684] RAX: ffffffffffffffda RBX: 00007f8714db5fa0 RCX: 00007f8714b8e929 [ 235.372103][ T7684] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 235.372122][ T7684] RBP: 00007f8714c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 235.372141][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.372159][ T7684] R13: 0000000000000000 R14: 00007f8714db5fa0 R15: 00007ffd358c9b68 [ 235.372201][ T7684] [ 235.372244][ T7684] debugfs: out of free dentries, can not create file 'remote_tlb_flush' [ 239.782054][ T6914] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 243.649971][ T7802] netlink: 342 bytes leftover after parsing attributes in process `syz.1.418'. [ 244.239231][ T7820] program syz.2.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.248898][ T7820] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 245.802735][ T7843] netlink: 342 bytes leftover after parsing attributes in process `syz.3.429'. [ 246.259612][ T6914] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 249.118927][ T7891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.147758][ T7891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.161317][ T7891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.177907][ T7891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.448351][ T7905] netlink: 342 bytes leftover after parsing attributes in process `syz.0.440'. [ 250.472403][ T6914] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.525129][ T6914] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 251.211898][ T6914] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.218005][ T6914] Bluetooth: hci0: command 0x0c1a tx timeout [ 251.229142][ T6013] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.392776][ T7961] netlink: zone id is out of range [ 253.524429][ T7961] sd 0:0:1:0: PR command failed: 1026 [ 253.530274][ T7961] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 253.537761][ T7961] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 254.677653][ T7978] overlayfs: missing 'lowerdir' [ 254.972645][ T6914] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 255.841588][ T7994] program syz.0.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.864494][ T7994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 258.933383][ T8037] netlink: zone id is out of range [ 259.734212][ T8037] sd 0:0:1:0: PR command failed: 1026 [ 259.760130][ T8037] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 259.837161][ T8037] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 260.484746][ T8051] ubi0: attaching mtd0 [ 260.513885][ T8051] ubi0: scanning is finished [ 260.544778][ T8051] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 260.772975][ T8051] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 261.499335][ T8082] netlink: zone id is out of range [ 261.581709][ T8080] overlayfs: missing 'lowerdir' [ 261.962591][ T8082] sd 0:0:1:0: PR command failed: 1026 [ 261.968176][ T8082] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 261.981597][ T8082] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 265.302018][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.489'. [ 266.037457][ T8169] netlink: zone id is out of range [ 266.315464][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.330942][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.339993][ T8169] sd 0:0:1:0: PR command failed: 1026 [ 266.371610][ T8169] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 266.391052][ T8169] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 266.633943][ T8162] ubi0: attaching mtd0 [ 266.639492][ T8162] ubi0: scanning is finished [ 266.684855][ T8162] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 267.513819][ T8162] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 267.608722][ T8183] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 267.862939][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 267.938298][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 268.332819][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.499'. [ 269.946562][ T8228] ubi0: attaching mtd0 [ 269.958358][ T8228] ubi0: scanning is finished [ 269.984907][ T8228] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 270.348573][ T8228] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 270.477913][ T8242] FAULT_INJECTION: forcing a failure. [ 270.477913][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 270.501264][ T8242] CPU: 1 UID: 0 PID: 8242 Comm: syz.3.508 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 270.501309][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.501342][ T8242] Call Trace: [ 270.501354][ T8242] [ 270.501367][ T8242] dump_stack_lvl+0x16c/0x1f0 [ 270.501423][ T8242] should_fail_ex+0x512/0x640 [ 270.501467][ T8242] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 270.501528][ T8242] should_failslab+0xc2/0x120 [ 270.501560][ T8242] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 270.501622][ T8242] ? vmap_small_pages_range_noflush+0x88d/0xca0 [ 270.501661][ T8242] ? kasprintf+0xc7/0x100 [ 270.501698][ T8242] kvasprintf+0xbc/0x160 [ 270.501728][ T8242] ? __pfx_kvasprintf+0x10/0x10 [ 270.501765][ T8242] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 270.501811][ T8242] kasprintf+0xc7/0x100 [ 270.501839][ T8242] ? __pfx_kasprintf+0x10/0x10 [ 270.501874][ T8242] ? __pfx_vmap+0x10/0x10 [ 270.501908][ T8242] ? trace_kmalloc+0x2b/0xd0 [ 270.501941][ T8242] ? relay_open_buf.part.0+0x194/0xc80 [ 270.501997][ T8242] relay_open_buf.part.0+0x76a/0xc80 [ 270.502056][ T8242] relay_open+0x653/0xad0 [ 270.502099][ T8242] ? debugfs_create_file_full+0x41/0x60 [ 270.502148][ T8242] do_blk_trace_setup+0x503/0xb50 [ 270.502191][ T8242] blk_trace_setup+0xed/0x1b0 [ 270.502239][ T8242] ? __pfx_blk_trace_setup+0x10/0x10 [ 270.502276][ T8242] ? __pfx_snprintf+0x10/0x10 [ 270.502346][ T8242] blk_trace_ioctl+0x146/0x280 [ 270.502385][ T8242] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 270.502429][ T8242] ? find_held_lock+0x2b/0x80 [ 270.502460][ T8242] ? hook_file_ioctl_common+0x145/0x410 [ 270.502502][ T8242] blkdev_ioctl+0x108/0x6d0 [ 270.502541][ T8242] ? __pfx_blkdev_ioctl+0x10/0x10 [ 270.502584][ T8242] ? __pfx_blkdev_ioctl+0x10/0x10 [ 270.502624][ T8242] __x64_sys_ioctl+0x18b/0x210 [ 270.502665][ T8242] do_syscall_64+0xcd/0x490 [ 270.502719][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.502752][ T8242] RIP: 0033:0x7ff14218e929 [ 270.502778][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.502810][ T8242] RSP: 002b:00007ff142f2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.502845][ T8242] RAX: ffffffffffffffda RBX: 00007ff1423b5fa0 RCX: 00007ff14218e929 [ 270.502866][ T8242] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 270.502885][ T8242] RBP: 00007ff142210b39 R08: 0000000000000000 R09: 0000000000000000 [ 270.502904][ T8242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.502922][ T8242] R13: 0000000000000000 R14: 00007ff1423b5fa0 R15: 00007ffc56991c88 [ 270.502965][ T8242] [ 272.605094][ T8267] IPVS: length: 256 != 24 [ 272.873104][ T8271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.515'. [ 272.901305][ T8271] veth0_macvtap: entered allmulticast mode [ 273.952597][ T8289] FAULT_INJECTION: forcing a failure. [ 273.952597][ T8289] name failslab, interval 1, probability 0, space 0, times 0 [ 273.965778][ T8289] CPU: 1 UID: 0 PID: 8289 Comm: syz.2.518 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 273.965819][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.965838][ T8289] Call Trace: [ 273.965849][ T8289] [ 273.965860][ T8289] dump_stack_lvl+0x16c/0x1f0 [ 273.965918][ T8289] should_fail_ex+0x512/0x640 [ 273.965963][ T8289] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 273.966024][ T8289] should_failslab+0xc2/0x120 [ 273.966057][ T8289] __kmalloc_cache_noprof+0x6a/0x3e0 [ 273.966102][ T8289] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 273.966150][ T8289] ? kasan_save_track+0x14/0x30 [ 273.966205][ T8289] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 273.966247][ T8289] ? rcu_is_watching+0x12/0xc0 [ 273.966286][ T8289] ? __mutex_lock+0x1ca/0xb90 [ 273.966341][ T8289] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 273.966383][ T8289] ? __pfx___mutex_lock+0x10/0x10 [ 273.966454][ T8289] ? __fsnotify_parent+0x24b/0xc40 [ 273.966509][ T8289] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 273.966550][ T8289] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 273.966585][ T8289] snd_pcm_oss_sync+0x1de/0x840 [ 273.966627][ T8289] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 273.966664][ T8289] snd_pcm_oss_release+0x28b/0x310 [ 273.966703][ T8289] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 273.966737][ T8289] __fput+0x3ff/0xb70 [ 273.966779][ T8289] task_work_run+0x14d/0x240 [ 273.966832][ T8289] ? __pfx_task_work_run+0x10/0x10 [ 273.966882][ T8289] ? __pfx___do_sys_close_range+0x10/0x10 [ 273.966940][ T8289] exit_to_user_mode_loop+0xeb/0x110 [ 273.966993][ T8289] do_syscall_64+0x3f6/0x490 [ 273.967045][ T8289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.967079][ T8289] RIP: 0033:0x7f8714b8e929 [ 273.967105][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.967142][ T8289] RSP: 002b:00007f871596b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 273.967174][ T8289] RAX: 0000000000000000 RBX: 00007f8714db6240 RCX: 00007f8714b8e929 [ 273.967194][ T8289] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 273.967213][ T8289] RBP: 00007f8714c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 273.967233][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.967251][ T8289] R13: 0000000000000000 R14: 00007f8714db6240 R15: 00007ffd358c9b68 [ 273.967293][ T8289] [ 274.209547][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.724803][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 277.897536][ T8354] could not allocate digest TFM handle [ 279.652222][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.533'. [ 279.668033][ T8382] ipvlan0: entered allmulticast mode [ 279.698901][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 279.940182][ T8389] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 280.102750][ T8395] openvswitch: netlink: Key type 29 is not supported [ 281.396522][ T8417] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 281.411066][ T8417] netlink: 314 bytes leftover after parsing attributes in process `syz.1.544'. [ 281.471182][ T8417] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.483101][ T8417] IPv6: Can't replace route, no match found [ 283.403888][ T8439] debugfs: File 'trace0' in directory 'ram7' already present! [ 283.454845][ T8439] FAULT_INJECTION: forcing a failure. [ 283.454845][ T8439] name failslab, interval 1, probability 0, space 0, times 0 [ 283.503343][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.1.554 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 283.503389][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.503406][ T8439] Call Trace: [ 283.503414][ T8439] [ 283.503430][ T8439] dump_stack_lvl+0x16c/0x1f0 [ 283.503473][ T8439] should_fail_ex+0x512/0x640 [ 283.503508][ T8439] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 283.503544][ T8439] should_failslab+0xc2/0x120 [ 283.503568][ T8439] __kmalloc_cache_noprof+0x6a/0x3e0 [ 283.503600][ T8439] ? snd_ctl_get_preferred_subdevice+0x16c/0x1f0 [ 283.503633][ T8439] ? snd_pcm_attach_substream+0x441/0xd60 [ 283.503671][ T8439] snd_pcm_attach_substream+0x441/0xd60 [ 283.503711][ T8439] snd_pcm_open_substream+0x8d/0x17f0 [ 283.503745][ T8439] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 283.503786][ T8439] snd_pcm_oss_open+0x735/0x1400 [ 283.503823][ T8439] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 283.503850][ T8439] ? __lock_acquire+0xb8a/0x1c90 [ 283.503883][ T8439] ? __pfx_default_wake_function+0x10/0x10 [ 283.503910][ T8439] ? __lock_acquire+0xb8a/0x1c90 [ 283.503948][ T8439] ? do_raw_spin_lock+0x12c/0x2b0 [ 283.503988][ T8439] ? soundcore_open+0x35a/0x580 [ 283.504027][ T8439] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 283.504053][ T8439] soundcore_open+0x409/0x580 [ 283.504093][ T8439] ? __pfx_soundcore_open+0x10/0x10 [ 283.504131][ T8439] chrdev_open+0x231/0x6a0 [ 283.504169][ T8439] ? __pfx_apparmor_file_open+0x10/0x10 [ 283.504201][ T8439] ? __pfx_chrdev_open+0x10/0x10 [ 283.504239][ T8439] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 283.504275][ T8439] do_dentry_open+0x744/0x1c10 [ 283.504311][ T8439] ? __pfx_chrdev_open+0x10/0x10 [ 283.504363][ T8439] vfs_open+0x82/0x3f0 [ 283.504401][ T8439] path_openat+0x1de4/0x2cb0 [ 283.504469][ T8439] ? __pfx_path_openat+0x10/0x10 [ 283.504522][ T8439] ? __lock_acquire+0xb8a/0x1c90 [ 283.504570][ T8439] do_filp_open+0x20b/0x470 [ 283.504621][ T8439] ? __pfx_do_filp_open+0x10/0x10 [ 283.504702][ T8439] ? alloc_fd+0x471/0x7d0 [ 283.504760][ T8439] do_sys_openat2+0x11b/0x1d0 [ 283.504798][ T8439] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.504852][ T8439] __x64_sys_openat+0x174/0x210 [ 283.504891][ T8439] ? __pfx___x64_sys_openat+0x10/0x10 [ 283.504949][ T8439] do_syscall_64+0xcd/0x490 [ 283.505004][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.505048][ T8439] RIP: 0033:0x7f821538e929 [ 283.505082][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.505122][ T8439] RSP: 002b:00007f8216164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 283.505155][ T8439] RAX: ffffffffffffffda RBX: 00007f82155b5fa0 RCX: 00007f821538e929 [ 283.505176][ T8439] RDX: 0000000000080502 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 283.505197][ T8439] RBP: 00007f8215410b39 R08: 0000000000000000 R09: 0000000000000000 [ 283.505216][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.505234][ T8439] R13: 0000000000000000 R14: 00007f82155b5fa0 R15: 00007ffc94c8a828 [ 283.505291][ T8439] [ 285.365976][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.549'. [ 285.553285][ T8468] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 285.601879][ T8465] ipvlan0: entered allmulticast mode [ 285.666030][ T8465] veth0_vlan: entered allmulticast mode [ 288.913628][ T8519] netlink: 326 bytes leftover after parsing attributes in process `syz.1.561'. [ 290.720547][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.565'. [ 290.753547][ T8547] ipvlan0: entered allmulticast mode [ 290.780270][ T8547] veth0_vlan: entered allmulticast mode [ 291.216240][ T8554] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 292.625524][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 292.944900][ T8574] veth0_macvtap: entered allmulticast mode [ 294.325916][ T8599] can: request_module (can-proto-0) failed. [ 297.280656][ T6914] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 297.597211][ T8641] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 302.467962][ T6032] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 303.236704][ T8746] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 303.951217][ T8801] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 306.227944][ T8832] i2c i2c-0: new_device: Can't parse I2C address [ 306.237658][ T8832] i2c i2c-0: new_device: Missing parameters [ 306.834264][ T8842] can: request_module (can-proto-0) failed. [ 308.405874][ T8877] can: request_module (can-proto-0) failed. [ 310.191762][ T8901] FAULT_INJECTION: forcing a failure. [ 310.191762][ T8901] name failslab, interval 1, probability 0, space 0, times 0 [ 310.239568][ T8901] CPU: 0 UID: 0 PID: 8901 Comm: syz.2.625 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 310.239603][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.239618][ T8901] Call Trace: [ 310.239625][ T8901] [ 310.239635][ T8901] dump_stack_lvl+0x16c/0x1f0 [ 310.239678][ T8901] should_fail_ex+0x512/0x640 [ 310.239713][ T8901] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 310.239753][ T8901] should_failslab+0xc2/0x120 [ 310.239776][ T8901] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 310.239811][ T8901] ? __proc_create+0xc3/0x8c0 [ 310.239849][ T8901] ? __proc_create+0x2ce/0x8c0 [ 310.239890][ T8901] __proc_create+0x2ce/0x8c0 [ 310.239930][ T8901] ? __pfx___proc_create+0x10/0x10 [ 310.239974][ T8901] ? _raw_write_unlock+0x28/0x50 [ 310.240012][ T8901] proc_create_reg+0x7d/0x180 [ 310.240037][ T8901] proc_create_data+0x86/0x110 [ 310.240059][ T8901] ? __pfx_proc_create_data+0x10/0x10 [ 310.240084][ T8901] ? cache_register_net+0x137/0x5e0 [ 310.240114][ T8901] cache_register_net+0x1e0/0x5e0 [ 310.240142][ T8901] nfsd_export_init+0x16e/0x250 [ 310.240168][ T8901] ? __pfx_nfsd_net_init+0x10/0x10 [ 310.240200][ T8901] nfsd_net_init+0x33/0x3d0 [ 310.240226][ T8901] ? __pfx_nfsd_net_init+0x10/0x10 [ 310.240251][ T8901] ops_init+0x1e2/0x5f0 [ 310.240294][ T8901] setup_net+0x1ff/0x510 [ 310.240314][ T8901] ? lockdep_init_map_type+0x5c/0x280 [ 310.240349][ T8901] ? __pfx_setup_net+0x10/0x10 [ 310.240372][ T8901] ? debug_mutex_init+0x37/0x70 [ 310.240398][ T8901] copy_net_ns+0x2a6/0x5f0 [ 310.240425][ T8901] create_new_namespaces+0x3ea/0xa90 [ 310.240458][ T8901] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 310.240488][ T8901] ksys_unshare+0x45b/0xa40 [ 310.240520][ T8901] ? __pfx_ksys_unshare+0x10/0x10 [ 310.240553][ T8901] ? xfd_validate_state+0x61/0x180 [ 310.240599][ T8901] __x64_sys_unshare+0x31/0x40 [ 310.240630][ T8901] do_syscall_64+0xcd/0x490 [ 310.240670][ T8901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.240696][ T8901] RIP: 0033:0x7f8714b8e929 [ 310.240715][ T8901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.240737][ T8901] RSP: 002b:00007f87159ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 310.240760][ T8901] RAX: ffffffffffffffda RBX: 00007f8714db5fa0 RCX: 00007f8714b8e929 [ 310.240776][ T8901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 310.240790][ T8901] RBP: 00007f8714c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 310.240804][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.240818][ T8901] R13: 0000000000000000 R14: 00007f8714db5fa0 R15: 00007ffd358c9b68 [ 310.240848][ T8901] [ 313.788871][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 317.852599][ T30] audit: type=1804 audit(6045993609.579:3): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.642" name="/newroot/156/file0" dev="tmpfs" ino=854 res=1 errno=0 [ 317.988892][ T30] audit: type=1800 audit(6045993609.579:4): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.642" name="file0" dev="tmpfs" ino=854 res=0 errno=0 [ 318.089298][ T6914] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 318.098197][ T8990] WARNING! power/level is deprecated; use power/control instead [ 319.704719][ T9025] netlink: 330 bytes leftover after parsing attributes in process `syz.1.650'. [ 319.760828][ T9028] netlink: 330 bytes leftover after parsing attributes in process `syz.1.650'. [ 320.865379][ T9041] usbcore.quirks: string doesn't fit in 127 chars. [ 321.181861][ T9053] netlink: 342 bytes leftover after parsing attributes in process `syz.0.656'. [ 323.675767][ T30] audit: type=1400 audit(6045993615.456:5): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9076 comm="syz.3.662" [ 327.779816][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.796050][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.963271][ T9137] kexec: Could not allocate control_code_buffer [ 329.382367][ T9177] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 330.630716][ T9211] zswap: compressor not available [ 330.703834][ T9193] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 334.270075][ T9259] FAULT_INJECTION: forcing a failure. [ 334.270075][ T9259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.439602][ T9259] CPU: 0 UID: 0 PID: 9259 Comm: syz.0.686 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 334.439655][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.439673][ T9259] Call Trace: [ 334.439683][ T9259] [ 334.439695][ T9259] dump_stack_lvl+0x16c/0x1f0 [ 334.439748][ T9259] should_fail_ex+0x512/0x640 [ 334.439800][ T9259] should_fail_alloc_page+0xe7/0x130 [ 334.439833][ T9259] prepare_alloc_pages+0x3c2/0x610 [ 334.439872][ T9259] ? rcu_is_watching+0x12/0xc0 [ 334.439909][ T9259] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 334.439959][ T9259] ? __lock_acquire+0xb8a/0x1c90 [ 334.440016][ T9259] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.440065][ T9259] ? do_raw_spin_lock+0x12c/0x2b0 [ 334.440113][ T9259] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 334.440163][ T9259] ? find_held_lock+0x2b/0x80 [ 334.440207][ T9259] ? __lock_acquire+0xb8a/0x1c90 [ 334.440248][ T9259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.440304][ T9259] ? policy_nodemask+0xea/0x4e0 [ 334.440356][ T9259] alloc_pages_mpol+0x1fb/0x550 [ 334.440387][ T9259] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 334.440429][ T9259] folio_alloc_mpol_noprof+0x36/0x2f0 [ 334.440468][ T9259] shmem_alloc_folio+0x135/0x160 [ 334.440506][ T9259] shmem_alloc_and_add_folio+0x499/0xc20 [ 334.440561][ T9259] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 334.440612][ T9259] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 334.440672][ T9259] shmem_get_folio_gfp+0x67f/0x1600 [ 334.440724][ T9259] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 334.440769][ T9259] ? do_raw_read_unlock+0x44/0xe0 [ 334.440823][ T9259] shmem_write_begin+0x160/0x300 [ 334.440871][ T9259] ? __pfx_shmem_write_begin+0x10/0x10 [ 334.440920][ T9259] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 334.440970][ T9259] generic_perform_write+0x3cd/0x930 [ 334.441029][ T9259] ? __pfx_generic_perform_write+0x10/0x10 [ 334.441078][ T9259] ? inode_needs_update_time.part.0+0x191/0x270 [ 334.441139][ T9259] shmem_file_write_iter+0x10e/0x140 [ 334.441174][ T9259] vfs_write+0x6c7/0x1150 [ 334.441219][ T9259] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 334.441251][ T9259] ? __pfx___mutex_lock+0x10/0x10 [ 334.441298][ T9259] ? __pfx_vfs_write+0x10/0x10 [ 334.441372][ T9259] ksys_write+0x12a/0x250 [ 334.441417][ T9259] ? __pfx_ksys_write+0x10/0x10 [ 334.441476][ T9259] do_syscall_64+0xcd/0x490 [ 334.441528][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.441560][ T9259] RIP: 0033:0x7f178f58e929 [ 334.441586][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.441615][ T9259] RSP: 002b:00007f178d3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.441653][ T9259] RAX: ffffffffffffffda RBX: 00007f178f7b6080 RCX: 00007f178f58e929 [ 334.441673][ T9259] RDX: 000000000000b8c5 RSI: 0000200000000280 RDI: 0000000000000006 [ 334.441691][ T9259] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 334.441708][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.441724][ T9259] R13: 0000000000000000 R14: 00007f178f7b6080 R15: 00007fffde6fc978 [ 334.441764][ T9259] [ 338.057385][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 345.641049][ T9395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.647578][ T9395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.653785][ T9395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.659925][ T9395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.102787][ T9404] vhci_hcd: invalid port number 255 [ 346.133590][ T9404] vhci_hcd: default hub control req: 5903 v0001 i00ff l1 [ 346.662707][ T6013] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 347.624942][ T6013] Bluetooth: hci2: command 0x0c1a tx timeout [ 347.704322][ T6013] Bluetooth: hci3: command 0x0c1a tx timeout [ 347.715059][ T6013] Bluetooth: hci0: command 0x0c1a tx timeout [ 347.722093][ T6914] Bluetooth: hci1: command 0x0c1a tx timeout [ 352.504539][ T6914] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 353.344178][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 355.661418][ T9531] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 356.732428][ T9532] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 358.697363][ T9565] openvswitch: netlink: Key type 29 is not supported [ 360.465513][ T9589] udc dummy_udc.0: soft-connect without a gadget driver [ 361.624611][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.741'. [ 361.633918][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.741'. [ 362.165861][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.742'. [ 362.837083][ T9623] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 363.485237][ T30] audit: type=1800 audit(6045993663.243:6): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.744" name="dbroot" dev="configfs" ino=22282 res=0 errno=0 [ 364.152098][ T9633] could not allocate digest TFM handle [ 368.620342][ T9682] netlink: 186 bytes leftover after parsing attributes in process `syz.1.757'. [ 372.624649][ T9724] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 372.995352][ T9725] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 373.706780][ T9729] can0: slcan on pty238. [ 374.515379][ T9728] can0 (unregistered): slcan off pty238. [ 378.024792][ T9804] Process accounting resumed [ 378.531609][ T6013] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.540957][ T6013] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.549611][ T6013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.565118][ T6013] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.574652][ T6013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.589831][ T9820] chnl_net:caif_netlink_parms(): no params data found [ 380.530411][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.542521][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.552703][ T9820] bridge_slave_0: entered allmulticast mode [ 380.566629][ T9820] bridge_slave_0: entered promiscuous mode [ 380.636297][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.648766][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.658114][ T9820] bridge_slave_1: entered allmulticast mode [ 380.666667][ T9820] bridge_slave_1: entered promiscuous mode [ 380.673687][ T6013] Bluetooth: hci4: command tx timeout [ 381.037111][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.169880][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.494939][ T9820] team0: Port device team_slave_0 added [ 381.641509][ T9820] team0: Port device team_slave_1 added [ 382.752606][ T6013] Bluetooth: hci4: command tx timeout [ 382.784646][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.793143][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.843906][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.088082][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.100468][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.211969][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.467346][ T9820] hsr_slave_0: entered promiscuous mode [ 383.483570][ T9820] hsr_slave_1: entered promiscuous mode [ 383.494191][ T9820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.512239][ T9820] Cannot create hsr debugfs directory [ 384.832040][ T6013] Bluetooth: hci4: command tx timeout [ 385.931764][ T9820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.078742][ T9820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.161082][ T9820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.440964][ T9820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.682770][ T9903] ubi0: attaching mtd0 [ 386.774393][ T9903] ubi0: scanning is finished [ 386.779077][ T9903] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 386.914954][ T6013] Bluetooth: hci4: command tx timeout [ 387.083236][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.114744][ T9820] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.131246][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.138437][ T6863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.195560][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.202761][ T6863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.377744][ T9820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.401151][ T9903] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 388.379796][ T9820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.887431][ T9924] sctp: [Deprecated]: syz.2.790 (pid 9924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.887431][ T9924] Use struct sctp_sack_info instead [ 389.236919][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.244337][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.767717][ T9820] veth0_vlan: entered promiscuous mode [ 390.499149][ T9957] zswap: compressor not available [ 390.898823][ T9820] veth1_vlan: entered promiscuous mode [ 391.334299][ T9820] veth0_macvtap: entered promiscuous mode [ 391.356819][ T9820] veth1_macvtap: entered promiscuous mode [ 391.422473][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.468413][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.494723][ T9820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.532120][ T9820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.540910][ T9820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.585979][ T9820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.874883][ T9976] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 260 [ 394.993402][ T6013] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 395.008451][ T6013] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 395.478572][T10023] could not allocate digest TFM handle [ 396.206532][T10033] could not allocate digest TFM handle [ 396.691080][T10047] netlink: 186 bytes leftover after parsing attributes in process `syz.1.808'. [ 396.762493][T10039] zswap: compressor 000 not available [ 397.147954][T10053] FAULT_INJECTION: forcing a failure. [ 397.147954][T10053] name fail_futex, interval 1, probability 0, space 0, times 0 [ 397.182551][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.3.809 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 397.182594][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.182611][T10053] Call Trace: [ 397.182621][T10053] [ 397.182632][T10053] dump_stack_lvl+0x16c/0x1f0 [ 397.182682][T10053] should_fail_ex+0x512/0x640 [ 397.182742][T10053] get_futex_key+0x1d0/0x1540 [ 397.182784][T10053] ? __pfx_get_futex_key+0x10/0x10 [ 397.182832][T10053] futex_wake+0xea/0x530 [ 397.182881][T10053] ? __pfx_futex_wake+0x10/0x10 [ 397.182924][T10053] ? rcu_is_watching+0x12/0xc0 [ 397.182973][T10053] do_futex+0x1e3/0x350 [ 397.183012][T10053] ? __pfx_do_futex+0x10/0x10 [ 397.183055][T10053] ? __pfx___might_resched+0x10/0x10 [ 397.183093][T10053] __x64_sys_futex+0x1e0/0x4c0 [ 397.183134][T10053] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 397.183177][T10053] ? __pfx___x64_sys_futex+0x10/0x10 [ 397.183213][T10053] ? ksys_mmap_pgoff+0x85/0x5c0 [ 397.183246][T10053] ? xfd_validate_state+0x61/0x180 [ 397.183301][T10053] do_syscall_64+0xcd/0x490 [ 397.183352][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.183384][T10053] RIP: 0033:0x7ff14218e929 [ 397.183408][T10053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.183440][T10053] RSP: 002b:00007ff13fff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 397.183470][T10053] RAX: ffffffffffffffda RBX: 00007ff1423b6088 RCX: 00007ff14218e929 [ 397.183490][T10053] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff1423b608c [ 397.183509][T10053] RBP: 00007ff1423b6080 R08: 00007ff142f2b000 R09: 0000000000000000 [ 397.183527][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff1423b608c [ 397.183546][T10053] R13: 0000000000000000 R14: 00007ffc56991ba0 R15: 00007ffc56991c88 [ 397.183586][T10053] [ 397.565237][T10059] sd 0:0:1:0: PR command failed: 1026 [ 397.570781][T10059] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 397.589025][T10059] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 398.273067][T10069] bridge0: port 3(gretap0) entered blocking state [ 398.279830][T10069] bridge0: port 3(gretap0) entered disabled state [ 398.287317][T10069] gretap0: entered allmulticast mode [ 398.295460][T10069] gretap0: entered promiscuous mode [ 398.303223][T10069] bridge0: port 3(gretap0) entered blocking state [ 398.310055][T10069] bridge0: port 3(gretap0) entered forwarding state [ 398.820275][T10033] kexec: Could not allocate control_code_buffer [ 401.563616][T10109] could not allocate digest TFM handle [ 403.733150][T10144] netlink: 342 bytes leftover after parsing attributes in process `syz.3.827'. [ 406.478210][T10162] could not allocate digest TFM handle [ 407.257462][T10181] bridge0: port 3(gretap0) entered blocking state [ 407.267125][T10181] bridge0: port 3(gretap0) entered disabled state [ 407.273973][T10181] gretap0: entered allmulticast mode [ 407.281555][T10181] gretap0: entered promiscuous mode [ 407.288664][T10181] bridge0: port 3(gretap0) entered blocking state [ 407.296299][T10181] bridge0: port 3(gretap0) entered forwarding state [ 408.857449][T10205] tipc: Started in network mode [ 408.862627][T10205] tipc: Node identity ee00, cluster identity 4711 [ 408.869154][T10205] tipc: Node number set to 60928 [ 409.029332][T10196] zswap: compressor not available [ 409.182406][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.331705][T10223] could not allocate digest TFM handle [ 411.030317][T10246] netlink: 'syz.1.846': attribute type 22 has an invalid length. [ 412.244096][ T6013] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 412.244138][ T6013] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 412.259663][ T6013] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 412.259710][ T6013] Bluetooth: hci4: adv larger than maximum supported [ 412.267279][ T6013] Bluetooth: hci4: adv larger than maximum supported [ 412.274982][ T6013] Bluetooth: hci4: Malformed LE Event: 0x0d [ 414.509908][T10298] zswap: compressor 000 not available [ 417.512437][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 417.794159][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.866'. [ 418.058857][T10356] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 418.160653][T10360] zswap: compressor 000 not available [ 423.171682][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 423.653807][T10431] could not allocate digest TFM handle [ 425.455944][T10465] could not allocate digest TFM handle [ 426.397260][ T9620] ------------[ cut here ]------------ [ 426.403348][ T9620] ODEBUG: free active (active state 0) object: ffff88803539d318 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 426.449515][ T9620] WARNING: CPU: 0 PID: 9620 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 426.459402][ T9620] Modules linked in: [ 426.463432][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.0.743 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 426.475661][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.485871][ T9620] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 426.492026][ T9620] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 80 76 15 8c 4c 89 e6 48 c7 c7 00 6b 15 8c e8 9f 6b 9c fc 90 <0f> 0b 90 90 58 83 05 b6 2b ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 426.511962][ T9620] RSP: 0018:ffffc9000e0e7768 EFLAGS: 00010286 [ 426.519563][ T9620] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aa1a8 [ 426.528498][ T9620] RDX: ffff88807d053c00 RSI: ffffffff817aa1b5 RDI: 0000000000000001 [ 426.536966][ T9620] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 426.545054][ T9620] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1571a0 [ 426.553280][ T9620] R13: ffffffff8bafe840 R14: ffffffff8a8823c0 R15: ffffc9000e0e7868 [ 426.561303][ T9620] FS: 0000000000000000(0000) GS:ffff88812475e000(0000) knlGS:0000000000000000 [ 426.570346][ T9620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.577048][ T9620] CR2: 00007ff13fff5f98 CR3: 000000005e704000 CR4: 00000000003526f0 [ 426.585605][ T9620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 426.593941][ T9620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 426.602106][ T9620] Call Trace: [ 426.605438][ T9620] [ 426.608408][ T9620] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 426.614046][ T9620] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 426.620741][ T9620] debug_check_no_obj_freed+0x4b7/0x600 [ 426.626965][ T9620] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 426.633189][ T9620] ? rcu_is_watching+0x12/0xc0 [ 426.638022][ T9620] ? kmem_cache_free+0x2d1/0x4d0 [ 426.643120][ T9620] kfree+0x28f/0x4d0 [ 426.647078][ T9620] ? hci_release_dev+0x4d8/0x600 [ 426.652182][ T9620] hci_release_dev+0x4d8/0x600 [ 426.657010][ T9620] ? __pfx_hci_release_dev+0x10/0x10 [ 426.662444][ T9620] ? rcu_is_watching+0x12/0xc0 [ 426.667263][ T9620] ? kfree+0x24f/0x4d0 [ 426.671411][ T9620] bt_host_release+0x6a/0xb0 [ 426.676178][ T9620] ? __pfx_bt_host_release+0x10/0x10 [ 426.681526][ T9620] device_release+0xa1/0x240 [ 426.686275][ T9620] kobject_put+0x1e7/0x5a0 [ 426.690844][ T9620] ? __pfx_vhci_release+0x10/0x10 [ 426.696091][ T9620] put_device+0x1f/0x30 [ 426.700277][ T9620] vhci_release+0x81/0xf0 [ 426.704691][ T9620] __fput+0x3ff/0xb70 [ 426.708768][ T9620] task_work_run+0x14d/0x240 [ 426.713610][ T9620] ? __pfx_task_work_run+0x10/0x10 [ 426.719592][ T9620] do_exit+0x86c/0x2bd0 [ 426.724255][ T9620] ? __pfx___might_resched+0x10/0x10 [ 426.729603][ T9620] ? __pfx_do_exit+0x10/0x10 [ 426.734330][ T9620] ? do_raw_spin_lock+0x12c/0x2b0 [ 426.739425][ T9620] ? find_held_lock+0x2b/0x80 [ 426.744262][ T9620] do_group_exit+0xd3/0x2a0 [ 426.748838][ T9620] get_signal+0x2673/0x26d0 [ 426.753473][ T9620] ? __mmput+0x374/0x410 [ 426.757787][ T9620] ? kernel_move_pages+0xd06/0x13b0 [ 426.763112][ T9620] ? __pfx_get_signal+0x10/0x10 [ 426.768020][ T9620] ? do_futex+0x122/0x350 [ 426.772502][ T9620] ? __pfx_do_futex+0x10/0x10 [ 426.777232][ T9620] arch_do_signal_or_restart+0x8f/0x790 [ 426.782870][ T9620] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 426.789175][ T9620] ? xfd_validate_state+0x61/0x180 [ 426.794401][ T9620] exit_to_user_mode_loop+0x84/0x110 [ 426.799987][ T9620] do_syscall_64+0x3f6/0x490 [ 426.804724][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.810751][ T9620] RIP: 0033:0x7f178f58e929 [ 426.815271][ T9620] Code: Unable to access opcode bytes at 0x7f178f58e8ff. [ 426.822953][ T9620] RSP: 002b:00007f1790313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 426.831391][ T9620] RAX: fffffffffffffff2 RBX: 00007f178f7b5fa0 RCX: 00007f178f58e929 [ 426.839831][ T9620] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 426.848207][ T9620] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 8000400000000000 [ 426.856254][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.864276][ T9620] R13: 0000000000000000 R14: 00007f178f7b5fa0 R15: 00007fffde6fc978 [ 426.872341][ T9620] [ 426.875389][ T9620] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 426.882685][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.0.743 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 426.894586][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.904660][ T9620] Call Trace: [ 426.907953][ T9620] [ 426.910933][ T9620] dump_stack_lvl+0x3d/0x1f0 [ 426.915569][ T9620] panic+0x71c/0x800 [ 426.919528][ T9620] ? __pfx_panic+0x10/0x10 [ 426.924057][ T9620] ? show_trace_log_lvl+0x29b/0x3e0 [ 426.929301][ T9620] ? check_panic_on_warn+0x1f/0xb0 [ 426.934456][ T9620] ? debug_print_object+0x1a2/0x2b0 [ 426.939694][ T9620] check_panic_on_warn+0xab/0xb0 [ 426.944676][ T9620] __warn+0xf6/0x3c0 [ 426.948593][ T9620] ? debug_print_object+0x1a2/0x2b0 [ 426.953802][ T9620] report_bug+0x3c3/0x580 [ 426.958156][ T9620] ? debug_print_object+0x1a2/0x2b0 [ 426.963368][ T9620] handle_bug+0x184/0x210 [ 426.967737][ T9620] exc_invalid_op+0x17/0x50 [ 426.972264][ T9620] asm_exc_invalid_op+0x1a/0x20 [ 426.977235][ T9620] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 426.983067][ T9620] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 80 76 15 8c 4c 89 e6 48 c7 c7 00 6b 15 8c e8 9f 6b 9c fc 90 <0f> 0b 90 90 58 83 05 b6 2b ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 427.002697][ T9620] RSP: 0018:ffffc9000e0e7768 EFLAGS: 00010286 [ 427.008864][ T9620] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aa1a8 [ 427.016843][ T9620] RDX: ffff88807d053c00 RSI: ffffffff817aa1b5 RDI: 0000000000000001 [ 427.024836][ T9620] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 427.032838][ T9620] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1571a0 [ 427.040910][ T9620] R13: ffffffff8bafe840 R14: ffffffff8a8823c0 R15: ffffc9000e0e7868 [ 427.048897][ T9620] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 427.054412][ T9620] ? __warn_printk+0x198/0x350 [ 427.059210][ T9620] ? __warn_printk+0x1a5/0x350 [ 427.064018][ T9620] ? debug_print_object+0x1a1/0x2b0 [ 427.069323][ T9620] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 427.074824][ T9620] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 427.080659][ T9620] debug_check_no_obj_freed+0x4b7/0x600 [ 427.086230][ T9620] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 427.092344][ T9620] ? rcu_is_watching+0x12/0xc0 [ 427.097149][ T9620] ? kmem_cache_free+0x2d1/0x4d0 [ 427.102132][ T9620] kfree+0x28f/0x4d0 [ 427.106055][ T9620] ? hci_release_dev+0x4d8/0x600 [ 427.111028][ T9620] hci_release_dev+0x4d8/0x600 [ 427.115836][ T9620] ? __pfx_hci_release_dev+0x10/0x10 [ 427.121155][ T9620] ? rcu_is_watching+0x12/0xc0 [ 427.125940][ T9620] ? kfree+0x24f/0x4d0 [ 427.130044][ T9620] bt_host_release+0x6a/0xb0 [ 427.134669][ T9620] ? __pfx_bt_host_release+0x10/0x10 [ 427.139972][ T9620] device_release+0xa1/0x240 [ 427.144594][ T9620] kobject_put+0x1e7/0x5a0 [ 427.149048][ T9620] ? __pfx_vhci_release+0x10/0x10 [ 427.154106][ T9620] put_device+0x1f/0x30 [ 427.158287][ T9620] vhci_release+0x81/0xf0 [ 427.162733][ T9620] __fput+0x3ff/0xb70 [ 427.166733][ T9620] task_work_run+0x14d/0x240 [ 427.171359][ T9620] ? __pfx_task_work_run+0x10/0x10 [ 427.176507][ T9620] do_exit+0x86c/0x2bd0 [ 427.180785][ T9620] ? __pfx___might_resched+0x10/0x10 [ 427.186092][ T9620] ? __pfx_do_exit+0x10/0x10 [ 427.190705][ T9620] ? do_raw_spin_lock+0x12c/0x2b0 [ 427.195843][ T9620] ? find_held_lock+0x2b/0x80 [ 427.200533][ T9620] do_group_exit+0xd3/0x2a0 [ 427.205149][ T9620] get_signal+0x2673/0x26d0 [ 427.209669][ T9620] ? __mmput+0x374/0x410 [ 427.213936][ T9620] ? kernel_move_pages+0xd06/0x13b0 [ 427.219148][ T9620] ? __pfx_get_signal+0x10/0x10 [ 427.224022][ T9620] ? do_futex+0x122/0x350 [ 427.228367][ T9620] ? __pfx_do_futex+0x10/0x10 [ 427.233067][ T9620] arch_do_signal_or_restart+0x8f/0x790 [ 427.238654][ T9620] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 427.244874][ T9620] ? xfd_validate_state+0x61/0x180 [ 427.250055][ T9620] exit_to_user_mode_loop+0x84/0x110 [ 427.255409][ T9620] do_syscall_64+0x3f6/0x490 [ 427.260047][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.265964][ T9620] RIP: 0033:0x7f178f58e929 [ 427.270395][ T9620] Code: Unable to access opcode bytes at 0x7f178f58e8ff. [ 427.277422][ T9620] RSP: 002b:00007f1790313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 427.285867][ T9620] RAX: fffffffffffffff2 RBX: 00007f178f7b5fa0 RCX: 00007f178f58e929 [ 427.293859][ T9620] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 427.301874][ T9620] RBP: 00007f178f610b39 R08: 0000000000000000 R09: 8000400000000000 [ 427.309878][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.317869][ T9620] R13: 0000000000000000 R14: 00007f178f7b5fa0 R15: 00007fffde6fc978 [ 427.325898][ T9620] [ 427.329309][ T9620] Kernel Offset: disabled [ 427.333684][ T9620] Rebooting in 86400 seconds..