last executing test programs: 13.840094709s ago: executing program 0 (id=654): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x20000000, 0xffffffffffff0001, 0x95) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) setgroups$auto(0x1e9, 0x0) r2 = socket(0x10, 0x3, 0xc) setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16) mmap$auto(0xc0a3, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4e8c, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x40d0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) 11.586277594s ago: executing program 0 (id=658): close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) read$auto(r0, 0x0, 0x4b) r1 = io_uring_setup$auto(0x4, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x153180, 0x0) mmap$auto(0x9, 0x6, 0x4000000000df, 0x800000000000eb1, r1, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop5/queue/scheduler\x00', 0x3a3180, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, r2, 0x10008000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) writev$auto(r4, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) socket(0x5, 0x5, 0xe) unshare$auto(0x40000080) 11.585518418s ago: executing program 2 (id=660): r0 = socket(0xa, 0x1, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xffff59e7, 0x3, 0x100, 0x9df, 0x7fffffff, 0x3, 0x7, 0x3, 0xcb, 0x6b7, 0x0, 0xb4, 0x81, 0x8, 0x800000000000008, 0x101, 0x10001, 0x4, 0x100000001, 0x0, 0x0, 0x7, 0x7, 0x1, 0x10001, 0x40, 0x8, 0x1000f, 0x6, 0x10, [0x6, 0x2, 0xffff, 0x3, 0x7, 0x200000003, 0x10000, 0x5, 0xe3f8, 0x9, 0x180, 0x1, 0x1000, 0x4, 0x4, 0x1, 0x100, 0x8, 0x7, 0x8000, 0xd1c7, 0x3, 0x8, 0xf36, 0x0, 0x6ba3, 0x3, 0x1, 0x7, 0x55ac, 0x4, 0xa, 0xfffffffffffffffd, 0x7, 0xa00, 0xfae9, 0x95, 0x0, 0x9, 0xfffffffffffffbff, 0x5, 0x7fff, 0x6]}, 0x4, 0xf) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/version\x00', 0x113a00, 0x0) poll$auto(&(0x7f0000000480)={0xffffffffffffffff, 0xffff, 0x29}, 0x3, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, &(0x7f00000001c0)={&(0x7f0000000000)="18d7f46b7d4d70d399330043a8b9b4031d48f35d", 0x800}, 0xd) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r2, 0x0, 0x80000000006) unshare$auto(0x3) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b72, 0xffffffffffffffff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000240)=0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, r3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) 11.376167799s ago: executing program 3 (id=661): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x40002, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r0, 0x40084149, &(0x7f0000000040)) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) write$auto_ppp_device_fops_ppp_generic(r1, &(0x7f0000000200)="c021", 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x2400, 0x0) read$auto(r2, 0x0, 0x9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x68001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 8.543581353s ago: executing program 1 (id=663): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83a4ebdb278754e15f", 0x11) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, 0x0, 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) bpf$auto(0x5, 0x0, 0x102) getpid() r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r3, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000140)={0x14, r4, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 8.542958943s ago: executing program 3 (id=664): unshare$auto(0x40000083) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0xfff, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) init_module$auto(&(0x7f0000000140)="226d5ef83de3a870ca2267f3b49f67be39c7fcdf4934dd38e281dec85bf0941e18ea8da7e35fe95205337843299a5b5374e3ba7c1158819e4c3c3636e00e4f156dc823278e645ede4a32dc78be168c59bd6300fbca4f3761ac370306d4", 0xff000, &(0x7f0000000040)='[*+\x00') write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) sendfile$auto(r3, r3, 0x0, 0xd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) init_module$auto(0x0, 0xffff9, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 8.513729054s ago: executing program 0 (id=665): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x4) r1 = prctl$auto_PR_SET_MM_START_DATA(0x9, 0x3, 0xffffffffffffffff, 0x6, 0x7) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8a62210}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x24000010) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1, 0x400000001, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) 7.940803531s ago: executing program 2 (id=666): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x6) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 7.224046557s ago: executing program 3 (id=667): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vicodec.0/video4linux/video2/uevent\x00', 0xa001, 0x0) mmap$auto(0x2, 0x400007, 0xe895, 0x16, r0, 0x401) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000007ea4b46f01ec4bc7334208de26cbe38cb6db4940875c63f639625f09c4d820e7b46a995c8c341b9f31acbbdaf42a3923faf3bd5fb7d0fbd040e5ab4caed4106b99fdc9e96e145727b677bf982cd86575257bc5", @ANYRES16=r1, @ANYBLOB="000326bd7000ffdbdf2588000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0xff, 0x5, 0x0, 0x7) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) 6.864341973s ago: executing program 1 (id=668): socket(0x26, 0x1, 0x300) pread64$auto(0xffffffffffffffff, 0x0, 0x10, 0x9) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) writev$auto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)="bf955582c6880b6636cb98e7fa8c9e6c893ff450af5f53573f343fc2f84a95fbff92436cc702c1c073b902b961ebdcc9bc4731f95068c8cbd8ce39552bfcc37fc2ff612de3c1c6799dbea4e9d5e1edbcdb9f9ead26d0d4199390b1a4bb38fd65dcb378ab0ba78379eccf48d5d689c362581791e138237b4cc44a6564665aaa0478e28362484d4e3438d5141f77b4ada9b7bcf9a40d74b2cd225982678da7fb1eaeeeedb9cf49f7b31ce7fde98839878e960a88bdda38e438f11044cd3b3b74889138eba5de9985f345fd51dca6ec7e4b9a19bed3834bfeab7854ba6e204b1f6d5c4afcfca3a02af554a6b2cd", 0x5bd}, 0xffffffffffffffc0) madvise$auto(0x0, 0x2003f0, 0x15) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf1\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x1004e, 0x6) 6.806134525s ago: executing program 0 (id=669): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/49, 0x31) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x8, [0x2, 0xffffffff, 0x80000000], [{0x80, 0x2, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x95, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0xfffffffe, 0x1, 0x1}, {0x1, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0xc12, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x6, 0x9, 0x80000000, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, &(0x7f00000001c0)={&(0x7f0000000100)="6044bb67f5459d8e4e1e504b25452ef3e83b0b52c8f49e50044485180830a1ed51282827b917476d5ad380335434bdb1c564508879b5e5d57f2e26b641f809355a93e70dbfaf2f0b63d20cbc16247dc38b5b9a471f4ae0e2e7ba7d1b81eb247c8f12d9dc892059ba5533480195d2cf6ae62b01db81c6a987ae4049f3c8a3792bfa2ffd7fe02e4488d3f8cb44073a7975173dbeb67b1bbce6f6dbdd6b06f4236720ac56b65894942276743116", 0x4}, 0x3) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000540)={0x0, 0x6, "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"}) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x27111}, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0) 5.356889947s ago: executing program 3 (id=670): getpid() mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) writev$auto(0x8, 0x0, 0xabc) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f0000000080)="a24048eb") readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) read$auto_mISDN_fops_timerdev(r3, &(0x7f0000000140)=""/168, 0xa8) write$auto_mousedev_fops_mousedev(r4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0xf3c) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) 5.285646078s ago: executing program 2 (id=671): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket(0xa, 0x801, 0x84) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rc/name\x00', 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x4000001) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r4) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c00}, 0x4000000) 5.166294604s ago: executing program 1 (id=672): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty8\x00', 0x2b7600, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x1ffffffff, 0xfffdfffffffffffa, 0x1, 0x0, 0x6, 0x0, 0x7, 0x1224578b, 0x2, {0x100000000, 0x5}, 0x5, 0x1, 0x10000000000009, 0x1008000, 0x0, 0x8, 0x7f, 0xdfffffffffff6295, 0x10000000000406, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x110c230000, 0x1, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r1, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r2) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.type\x00', 0x1016c1, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x400001, 0x1ff, 0x7, 0x22, 0x7185, 0x1ffd7, 0x7, 0x4, 0x9, 0x2, 0x3, 0x2, 0x6, 0xb4, 0x5, 0x8, 0x10003, 0x80, 0x4, 0x2, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 4.307991977s ago: executing program 2 (id=673): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) read$auto_sco_debugfs_fops_(r1, 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r2, &(0x7f0000000080)='..+*@sys\x00', 0x1) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto(r4, 0x4b68, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, 0x0) ioctl$auto_BLKTRACETEARDOWN(r5, 0x1276, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(r3, &(0x7f0000000000)='/proc/self/net/ip6_tables_targets\x00', 0x40) 4.142390901s ago: executing program 3 (id=674): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/unix\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x8000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.863183481s ago: executing program 1 (id=675): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x11, 0x80003, 0x300) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x1000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mq_open$auto(&(0x7f0000000000)='nlctrl\x00', 0x80, 0x8001, &(0x7f0000000040)={0x4, 0x1, 0x4c3, 0x28}) mmap$auto(0x0, 0x40006, 0xe2, 0x20009b72, 0x7, 0x28000) openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0x121980, 0x0) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) madvise$auto(0x3000, 0xffffffffffff0001, 0x15) 2.721573502s ago: executing program 0 (id=676): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) pselect6$auto(0x3, &(0x7f00000000c0)={[0xd4c, 0xffffffffffff0001, 0x400, 0x37e153a9, 0x3701, 0x0, 0x2, 0x9, 0x80000001, 0x8, 0x5c, 0x2, 0x3, 0x7, 0xc3fb, 0xffffffff]}, &(0x7f0000000140)={[0x1, 0x6, 0x40, 0x2f3, 0x8, 0x7fffffff, 0x8, 0x8, 0x4, 0x7, 0x40, 0x67a4ee2e, 0x6, 0x7, 0x9, 0x7]}, &(0x7f00000001c0)={[0x9, 0xb11, 0x3, 0xecd, 0x2, 0x8, 0x1000, 0x6, 0x7f, 0xfffffffffffffff2, 0xd30, 0x4, 0x8, 0x40, 0x74d, 0x10000]}, &(0x7f0000000240)={0x10000, 0x9}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x100, 0x0) ioctl$auto_BLKTRACESTOP2(r1, 0x1275, 0x0) socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 2.011103552s ago: executing program 2 (id=677): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83a4ebdb278754e15f", 0x11) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, 0x0, 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) bpf$auto(0x5, 0x0, 0x102) getpid() r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r3, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000140)={0x14, r4, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 2.009399132s ago: executing program 1 (id=685): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, r0, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value_ptr=&(0x7f0000000680)=0x4, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) r2 = socket(0x1a, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, 0x0, 0x41) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x8800) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) madvise$auto(0x0, 0x2003f0, 0x17) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(0xffffffffffffffff, 0x40084146, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/adsp1\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.19755637s ago: executing program 0 (id=678): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r1, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f389da21c9b7335def9a1e06c7211bc1d5406f760fb6ec2c40e12cc75b4cc40a4607993d4a772b27a3fa10548", 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) arch_prctl$auto_ARCH_GET_CPUID(0x1011, 0xa445) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) r3 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16, @ANYBLOB="4cb24518"], 0xf8}}, 0x10004010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) 61.381167ms ago: executing program 1 (id=679): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xd, 0xb979, 0x8000001f, 0x1000, 0x6d3d, 0xc, 0x2, 0x8]}, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$auto(r2, 0x0, 0x5) select$auto(0x9, &(0x7f00000000c0)={[0xeeca, 0x7, 0xb, 0x9, 0x6, 0x1fc, 0x6, 0x3, 0x2, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_IP6_SADDR={0x14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) mmap$auto(0x0, 0x80000002020009, 0x3, 0x410, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 58.02784ms ago: executing program 2 (id=680): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop13/queue/wbt_lat_usec\x00', 0xa801, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 0s ago: executing program 3 (id=681): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/pagemap\x00', 0x36200, 0x0) ioctl$auto(r0, 0x561b, 0xffffffffffffffff) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x270) socket(0x2a, 0x2, 0x9) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x2e4041, 0x44) fchdir$auto(r4) mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NL80211_CMD_SET_PMKSA(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x7ff) ptrace$auto(0x2, r5, 0x3, 0x4f) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r5, 0xe, 0x4) kernel console output (not intermixed with test programs): 3][ T6366] ? __pfx_do_filp_open+0x10/0x10 [ 127.608406][ T6366] ? alloc_fd+0x471/0x7d0 [ 127.608474][ T6366] do_sys_openat2+0x11b/0x1d0 [ 127.608519][ T6366] ? __pfx_do_sys_openat2+0x10/0x10 [ 127.608594][ T6366] __x64_sys_openat+0x174/0x210 [ 127.608660][ T6366] ? __pfx___x64_sys_openat+0x10/0x10 [ 127.608721][ T6366] do_syscall_64+0xcd/0x490 [ 127.608759][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.608792][ T6366] RIP: 0033:0x7fd073d8e9a9 [ 127.608820][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.608860][ T6366] RSP: 002b:00007fd074be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 127.608892][ T6366] RAX: ffffffffffffffda RBX: 00007fd073fb5fa0 RCX: 00007fd073d8e9a9 [ 127.608914][ T6366] RDX: 0000000000000042 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 127.608935][ T6366] RBP: 00007fd073e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 127.608955][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.608974][ T6366] R13: 0000000000000000 R14: 00007fd073fb5fa0 R15: 00007ffd2ffce508 [ 127.609018][ T6366] [ 128.548570][ T6383] netlink: 342 bytes leftover after parsing attributes in process `syz.3.163'. [ 129.240836][ T6393] netlink: 146 bytes leftover after parsing attributes in process `syz.3.166'. [ 129.794899][ T6396] FAULT_INJECTION: forcing a failure. [ 129.794899][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 129.851122][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.0.167 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 129.851161][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.851176][ T6396] Call Trace: [ 129.851185][ T6396] [ 129.851194][ T6396] dump_stack_lvl+0x16c/0x1f0 [ 129.851226][ T6396] should_fail_ex+0x512/0x640 [ 129.851252][ T6396] ? __kmalloc_noprof+0xbf/0x510 [ 129.851280][ T6396] ? __register_sysctl_table+0xea2/0x1900 [ 129.851310][ T6396] should_failslab+0xc2/0x120 [ 129.851382][ T6396] __kmalloc_noprof+0xd2/0x510 [ 129.851408][ T6396] ? __register_sysctl_table+0xe8e/0x1900 [ 129.851452][ T6396] __register_sysctl_table+0xea2/0x1900 [ 129.851490][ T6396] ? __pfx___register_sysctl_table+0x10/0x10 [ 129.851518][ T6396] ? is_module_address+0x69/0xf0 [ 129.851554][ T6396] ? register_net_sysctl_sz+0x228/0x3e0 [ 129.851587][ T6396] ? __asan_memcpy+0x3c/0x60 [ 129.851631][ T6396] sysctl_route_net_init+0x15e/0x2c0 [ 129.851669][ T6396] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 129.851705][ T6396] ops_init+0x1df/0x5f0 [ 129.851737][ T6396] setup_net+0x1ff/0x510 [ 129.851764][ T6396] ? lockdep_init_map_type+0x5c/0x280 [ 129.851802][ T6396] ? __pfx_setup_net+0x10/0x10 [ 129.851831][ T6396] ? debug_mutex_init+0x37/0x70 [ 129.851859][ T6396] copy_net_ns+0x2a6/0x5f0 [ 129.851895][ T6396] create_new_namespaces+0x3ea/0xa90 [ 129.851933][ T6396] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 129.851966][ T6396] ksys_unshare+0x45b/0xa40 [ 129.852020][ T6396] ? __pfx_ksys_unshare+0x10/0x10 [ 129.852059][ T6396] ? xfd_validate_state+0x61/0x180 [ 129.852106][ T6396] __x64_sys_unshare+0x31/0x40 [ 129.852143][ T6396] do_syscall_64+0xcd/0x490 [ 129.852180][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.852210][ T6396] RIP: 0033:0x7f9e8278e9a9 [ 129.852231][ T6396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.852258][ T6396] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 129.852284][ T6396] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 129.852302][ T6396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 129.852318][ T6396] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 129.852335][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.852350][ T6396] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 129.852385][ T6396] [ 129.852874][ T6396] sysctl could not get directory: /net/ipv4/route -12 [ 130.009836][ T6408] FAULT_INJECTION: forcing a failure. [ 130.009836][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 130.009878][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.3.171 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 130.009912][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.009929][ T6408] Call Trace: [ 130.009939][ T6408] [ 130.009949][ T6408] dump_stack_lvl+0x16c/0x1f0 [ 130.009982][ T6408] should_fail_ex+0x512/0x640 [ 130.010011][ T6408] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 130.010049][ T6408] should_failslab+0xc2/0x120 [ 130.010083][ T6408] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 130.010112][ T6408] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.010138][ T6408] ? __alloc_skb+0x2b2/0x380 [ 130.010169][ T6408] __alloc_skb+0x2b2/0x380 [ 130.010197][ T6408] ? __pfx___alloc_skb+0x10/0x10 [ 130.010226][ T6408] ? __pfx_preempt_schedule_thunk+0x10/0x10 [ 130.010266][ T6408] ? preempt_schedule_common+0x44/0xc0 [ 130.010320][ T6408] inet6_netconf_notify_devconf+0x87/0x180 [ 130.010357][ T6408] ip6_mroute_setsockopt+0x1253/0x20d0 [ 130.010405][ T6408] ? rcu_is_watching+0x12/0xc0 [ 130.010450][ T6408] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 130.010497][ T6408] ? rcu_read_unlock_trace_special+0x210/0x3f0 [ 130.010537][ T6408] ? trace_sched_exit_tp+0xde/0x130 [ 130.010569][ T6408] ? __schedule+0x1181/0x5dd0 [ 130.010604][ T6408] ? find_held_lock+0x2b/0x80 [ 130.010632][ T6408] ? __lock_acquire+0xb8a/0x1c90 [ 130.010690][ T6408] ? do_ipv6_setsockopt+0x7b1/0x4300 [ 130.010722][ T6408] do_ipv6_setsockopt+0x7b1/0x4300 [ 130.010759][ T6408] ? futex_unqueue+0x61/0x2c0 [ 130.010787][ T6408] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 130.010819][ T6408] ? __futex_wait+0x24c/0x2f0 [ 130.010855][ T6408] ? __pfx___futex_wait+0x10/0x10 [ 130.010889][ T6408] ? do_syscall_64+0xcd/0x490 [ 130.010912][ T6408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.010936][ T6408] ? aa_label_sk_perm+0x19b/0x5a0 [ 130.010974][ T6408] ? __pfx_futex_wake_mark+0x10/0x10 [ 130.011009][ T6408] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 130.011053][ T6408] ? __futex_hash.constprop.0+0x1e9/0x440 [ 130.011092][ T6408] ? __lock_acquire+0x622/0x1c90 [ 130.011125][ T6408] ? __pfx___might_resched+0x10/0x10 [ 130.011157][ T6408] ? ipv6_setsockopt+0xcb/0x170 [ 130.011186][ T6408] ? aa_sk_perm+0x2f4/0xb10 [ 130.011217][ T6408] ipv6_setsockopt+0xcb/0x170 [ 130.011252][ T6408] rawv6_setsockopt+0xc2/0x510 [ 130.011281][ T6408] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 130.011312][ T6408] ? sock_common_setsockopt+0x2e/0xf0 [ 130.011344][ T6408] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.011378][ T6408] do_sock_setsockopt+0xf0/0x1d0 [ 130.011413][ T6408] __sys_setsockopt+0x120/0x1a0 [ 130.011448][ T6408] __x64_sys_setsockopt+0xbd/0x160 [ 130.011471][ T6408] ? do_syscall_64+0x91/0x490 [ 130.011514][ T6408] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.011538][ T6408] do_syscall_64+0xcd/0x490 [ 130.011568][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.011594][ T6408] RIP: 0033:0x7fca1598e9a9 [ 130.011614][ T6408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.011639][ T6408] RSP: 002b:00007fca16881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.011662][ T6408] RAX: ffffffffffffffda RBX: 00007fca15bb5fa0 RCX: 00007fca1598e9a9 [ 130.011680][ T6408] RDX: 00000000000000c8 RSI: 0000000000000029 RDI: 0400000000000003 [ 130.011695][ T6408] RBP: 00007fca15a10d69 R08: 0000000000000567 R09: 0000000000000000 [ 130.011711][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.011726][ T6408] R13: 0000000000000000 R14: 00007fca15bb5fa0 R15: 00007ffd9145b908 [ 130.011758][ T6408] [ 130.535895][ T6421] FAULT_INJECTION: forcing a failure. [ 130.535895][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 130.535949][ T6421] CPU: 0 UID: 0 PID: 6421 Comm: syz.0.177 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 130.536009][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.536030][ T6421] Call Trace: [ 130.536040][ T6421] [ 130.536052][ T6421] dump_stack_lvl+0x16c/0x1f0 [ 130.536090][ T6421] should_fail_ex+0x512/0x640 [ 130.536132][ T6421] should_failslab+0xc2/0x120 [ 130.536172][ T6421] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 130.536209][ T6421] ? __alloc_skb+0x2b2/0x380 [ 130.536250][ T6421] __alloc_skb+0x2b2/0x380 [ 130.536283][ T6421] ? __pfx___alloc_skb+0x10/0x10 [ 130.536324][ T6421] ? do_raw_write_lock+0x11c/0x3a0 [ 130.536362][ T6421] tipc_buf_acquire+0x26/0xe0 [ 130.536410][ T6421] named_prepare_buf+0x29/0x170 [ 130.536466][ T6421] tipc_named_publish+0x1f2/0x770 [ 130.536525][ T6421] tipc_nametbl_publish+0x17d/0x280 [ 130.536570][ T6421] tipc_sk_publish+0x1d8/0x430 [ 130.536610][ T6421] ? __pfx_tipc_sk_publish+0x10/0x10 [ 130.536661][ T6421] ? __local_bh_enable_ip+0xa4/0x120 [ 130.536706][ T6421] tipc_sk_bind+0x16f/0x380 [ 130.536748][ T6421] tipc_bind+0x190/0x2a0 [ 130.536790][ T6421] __sys_bind+0x1a4/0x260 [ 130.536843][ T6421] ? __pfx___sys_bind+0x10/0x10 [ 130.536908][ T6421] ? xfd_validate_state+0x61/0x180 [ 130.536953][ T6421] ? __pfx_do_writev+0x10/0x10 [ 130.537015][ T6421] __x64_sys_bind+0x72/0xb0 [ 130.537062][ T6421] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.537094][ T6421] do_syscall_64+0xcd/0x490 [ 130.537132][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.537166][ T6421] RIP: 0033:0x7f9e8278e9a9 [ 130.537191][ T6421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.537222][ T6421] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 130.537251][ T6421] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 130.537273][ T6421] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000005 [ 130.537292][ T6421] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 130.537311][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.537330][ T6421] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 130.537372][ T6421] [ 130.537385][ T6421] tipc: Publication distribution failure [ 130.680850][ T6419] FAULT_INJECTION: forcing a failure. [ 130.680850][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 130.680927][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.3.176 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 130.680981][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.680998][ T6419] Call Trace: [ 130.681006][ T6419] [ 130.681031][ T6419] dump_stack_lvl+0x16c/0x1f0 [ 130.681063][ T6419] should_fail_ex+0x512/0x640 [ 130.681090][ T6419] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 130.681127][ T6419] should_failslab+0xc2/0x120 [ 130.681159][ T6419] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 130.681190][ T6419] ? __mutex_lock+0x1ca/0xb90 [ 130.681217][ T6419] ? quirks_param_set+0xa0/0x750 [ 130.681254][ T6419] ? __pfx___mutex_trylock_common+0x10/0x10 [ 130.681297][ T6419] kstrdup+0x53/0x100 [ 130.681326][ T6419] quirks_param_set+0xa0/0x750 [ 130.681372][ T6419] ? __pfx_quirks_param_set+0x10/0x10 [ 130.681425][ T6419] param_attr_store+0x199/0x300 [ 130.681459][ T6419] ? __pfx_param_attr_store+0x10/0x10 [ 130.681488][ T6419] module_attr_store+0x55/0x80 [ 130.681513][ T6419] ? __pfx_module_attr_store+0x10/0x10 [ 130.681538][ T6419] sysfs_kf_write+0xf2/0x150 [ 130.681581][ T6419] kernfs_fop_write_iter+0x354/0x510 [ 130.681614][ T6419] ? __pfx_sysfs_kf_write+0x10/0x10 [ 130.681657][ T6419] vfs_write+0x6c4/0x1150 [ 130.681683][ T6419] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 130.681720][ T6419] ? __pfx___mutex_lock+0x10/0x10 [ 130.681748][ T6419] ? __pfx_vfs_write+0x10/0x10 [ 130.681795][ T6419] ksys_write+0x12a/0x250 [ 130.681820][ T6419] ? __pfx_ksys_write+0x10/0x10 [ 130.681856][ T6419] do_syscall_64+0xcd/0x490 [ 130.681886][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.681913][ T6419] RIP: 0033:0x7fca1598e9a9 [ 130.681934][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.681959][ T6419] RSP: 002b:00007fca16881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.681984][ T6419] RAX: ffffffffffffffda RBX: 00007fca15bb5fa0 RCX: 00007fca1598e9a9 [ 130.682002][ T6419] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 130.682018][ T6419] RBP: 00007fca15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 130.682034][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.682049][ T6419] R13: 0000000000000000 R14: 00007fca15bb5fa0 R15: 00007ffd9145b908 [ 130.682083][ T6419] [ 132.135846][ T6458] netlink: 342 bytes leftover after parsing attributes in process `syz.0.189'. [ 132.170147][ T6402] tty tty45: ldisc open failed (-12), clearing slot 44 [ 132.977948][ T6477] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 133.212827][ T6483] KVM: debugfs: duplicate directory 6483-4 [ 133.356045][ T6489] FAULT_INJECTION: forcing a failure. [ 133.356045][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 133.422606][ T6489] CPU: 1 UID: 0 PID: 6489 Comm: syz.1.200 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 133.422647][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.422665][ T6489] Call Trace: [ 133.422674][ T6489] [ 133.422686][ T6489] dump_stack_lvl+0x16c/0x1f0 [ 133.422721][ T6489] should_fail_ex+0x512/0x640 [ 133.422758][ T6489] ? fs_reclaim_acquire+0xae/0x150 [ 133.422806][ T6489] should_failslab+0xc2/0x120 [ 133.422847][ T6489] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 133.422883][ T6489] ? ima_inode_get+0x120/0x580 [ 133.422928][ T6489] ima_inode_get+0x120/0x580 [ 133.422968][ T6489] process_measurement+0x585/0x23e0 [ 133.423016][ T6489] ? __pfx_process_measurement+0x10/0x10 [ 133.423054][ T6489] ? alloc_empty_file+0x73/0x1e0 [ 133.423093][ T6489] ? hugetlb_file_setup+0x4cd/0x620 [ 133.423133][ T6489] ? ksys_mmap_pgoff+0x189/0x5c0 [ 133.423178][ T6489] ? __x64_sys_mmap+0x125/0x190 [ 133.423278][ T6489] ima_file_mmap+0x1b1/0x1d0 [ 133.423321][ T6489] ? __pfx_ima_file_mmap+0x10/0x10 [ 133.423361][ T6489] security_mmap_file+0x88c/0x990 [ 133.423408][ T6489] vm_mmap_pgoff+0xec/0x450 [ 133.423448][ T6489] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 133.423481][ T6489] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 133.423521][ T6489] ? hugetlbfs_get_inode+0x31f/0x730 [ 133.423569][ T6489] ksys_mmap_pgoff+0x1c8/0x5c0 [ 133.423614][ T6489] __x64_sys_mmap+0x125/0x190 [ 133.423659][ T6489] do_syscall_64+0xcd/0x490 [ 133.423692][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.423739][ T6489] RIP: 0033:0x7f32bbf8e9a9 [ 133.423784][ T6489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.423813][ T6489] RSP: 002b:00007f32bce48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 133.423842][ T6489] RAX: ffffffffffffffda RBX: 00007f32bc1b5fa0 RCX: 00007f32bbf8e9a9 [ 133.423861][ T6489] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 133.423880][ T6489] RBP: 00007f32bc010d69 R08: 0000000000000401 R09: 0000300000000000 [ 133.423899][ T6489] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 133.423917][ T6489] R13: 0000000000000000 R14: 00007f32bc1b5fa0 R15: 00007ffc066abd58 [ 133.423955][ T6489] [ 133.986639][ T6503] netlink: 'syz.0.202': attribute type 33 has an invalid length. [ 136.241553][ T6558] syz.1.218 (6558) used greatest stack depth: 19784 bytes left [ 137.077178][ T6583] process 'syz.0.228' launched ':,' with NULL argv: empty string added [ 137.617557][ T6596] FAULT_INJECTION: forcing a failure. [ 137.617557][ T6596] name fail_futex, interval 1, probability 0, space 0, times 1 [ 137.630494][ T6596] CPU: 0 UID: 44458 PID: 6596 Comm: syz.0.233 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 137.630532][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.630549][ T6596] Call Trace: [ 137.630558][ T6596] [ 137.630568][ T6596] dump_stack_lvl+0x16c/0x1f0 [ 137.630602][ T6596] should_fail_ex+0x512/0x640 [ 137.630638][ T6596] get_futex_key+0x1d0/0x1540 [ 137.630678][ T6596] ? __pfx_get_futex_key+0x10/0x10 [ 137.630708][ T6596] ? __lock_acquire+0x622/0x1c90 [ 137.630761][ T6596] futex_wake+0xe7/0x4e0 [ 137.630800][ T6596] ? lock_acquire+0x179/0x350 [ 137.630842][ T6596] ? __pfx_futex_wake+0x10/0x10 [ 137.630891][ T6596] ? find_ucounts+0x222/0x3e0 [ 137.630933][ T6596] do_futex+0x1e3/0x350 [ 137.630969][ T6596] ? __pfx_do_futex+0x10/0x10 [ 137.631006][ T6596] ? dec_rlimit_ucounts+0x114/0x170 [ 137.631051][ T6596] __x64_sys_futex+0x1e0/0x4c0 [ 137.631099][ T6596] ? __pfx___x64_sys_futex+0x10/0x10 [ 137.631142][ T6596] ? __sys_setreuid+0x4cd/0xaf0 [ 137.631180][ T6596] do_syscall_64+0xcd/0x490 [ 137.631213][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.631242][ T6596] RIP: 0033:0x7f9e8278e9a9 [ 137.631264][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.631291][ T6596] RSP: 002b:00007f9e836b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.631317][ T6596] RAX: ffffffffffffffda RBX: 00007f9e829b5fa8 RCX: 00007f9e8278e9a9 [ 137.631336][ T6596] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9e829b5fac [ 137.631353][ T6596] RBP: 00007f9e829b5fa0 R08: 00007f9e836b8000 R09: 0000000000000000 [ 137.631371][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e829b5fac [ 137.631388][ T6596] R13: 0000000000000000 R14: 00007ffeb1a63dc0 R15: 00007ffeb1a63ea8 [ 137.631442][ T6596] [ 137.884747][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.891629][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.018108][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 138.631070][ T6619] FAULT_INJECTION: forcing a failure. [ 138.631070][ T6619] name failslab, interval 1, probability 0, space 0, times 0 [ 138.648565][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.3.242 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 138.648612][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.648632][ T6619] Call Trace: [ 138.648643][ T6619] [ 138.648656][ T6619] dump_stack_lvl+0x16c/0x1f0 [ 138.648697][ T6619] should_fail_ex+0x512/0x640 [ 138.648733][ T6619] ? __kmalloc_noprof+0xbf/0x510 [ 138.648771][ T6619] ? __do_sys_futex_waitv+0x127/0x2c0 [ 138.648814][ T6619] should_failslab+0xc2/0x120 [ 138.648853][ T6619] __kmalloc_noprof+0xd2/0x510 [ 138.648895][ T6619] __do_sys_futex_waitv+0x127/0x2c0 [ 138.648951][ T6619] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 138.649000][ T6619] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 138.649073][ T6619] do_syscall_64+0xcd/0x490 [ 138.649110][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.649142][ T6619] RIP: 0033:0x7fca1598e9a9 [ 138.649167][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.649197][ T6619] RSP: 002b:00007fca16881038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 138.649226][ T6619] RAX: ffffffffffffffda RBX: 00007fca15bb5fa0 RCX: 00007fca1598e9a9 [ 138.649247][ T6619] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000300 [ 138.649266][ T6619] RBP: 00007fca15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 138.649286][ T6619] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 138.649304][ T6619] R13: 0000000000000000 R14: 00007fca15bb5fa0 R15: 00007ffd9145b908 [ 138.649343][ T6619] [ 139.363084][ T6638] FAULT_INJECTION: forcing a failure. [ 139.363084][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 139.384805][ T6638] CPU: 1 UID: 0 PID: 6638 Comm: syz.0.246 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 139.384851][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.384871][ T6638] Call Trace: [ 139.384882][ T6638] [ 139.384893][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 139.384932][ T6638] should_fail_ex+0x512/0x640 [ 139.384965][ T6638] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 139.385030][ T6638] should_failslab+0xc2/0x120 [ 139.385069][ T6638] __kmalloc_cache_noprof+0x6a/0x3e0 [ 139.385121][ T6638] ? alloc_ucounts+0x13d/0x440 [ 139.385168][ T6638] alloc_ucounts+0x13d/0x440 [ 139.385208][ T6638] ? __pfx_alloc_ucounts+0x10/0x10 [ 139.385260][ T6638] set_cred_ucounts+0xcd/0x200 [ 139.385314][ T6638] __sys_setreuid+0x49c/0xaf0 [ 139.385356][ T6638] do_syscall_64+0xcd/0x490 [ 139.385394][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.385426][ T6638] RIP: 0033:0x7f9e8278e9a9 [ 139.385451][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.385482][ T6638] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 139.385512][ T6638] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 139.385533][ T6638] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000009 [ 139.385552][ T6638] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 139.385571][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.385590][ T6638] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 139.385631][ T6638] [ 140.941997][ T6671] FAULT_INJECTION: forcing a failure. [ 140.941997][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 141.000731][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.0.259 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 141.000773][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.000791][ T6671] Call Trace: [ 141.000801][ T6671] [ 141.000812][ T6671] dump_stack_lvl+0x16c/0x1f0 [ 141.000855][ T6671] should_fail_ex+0x512/0x640 [ 141.000886][ T6671] ? __kmalloc_noprof+0xbf/0x510 [ 141.000920][ T6671] ? xfrm_hash_alloc+0xd1/0x100 [ 141.000965][ T6671] should_failslab+0xc2/0x120 [ 141.001001][ T6671] __kmalloc_noprof+0xd2/0x510 [ 141.001030][ T6671] ? xfrm_state_init+0x377/0x630 [ 141.001074][ T6671] ? xfrm_state_init+0x3d3/0x630 [ 141.001122][ T6671] ? __pfx_xfrm_net_init+0x10/0x10 [ 141.001151][ T6671] xfrm_hash_alloc+0xd1/0x100 [ 141.001198][ T6671] xfrm_net_init+0x244/0xcc0 [ 141.001233][ T6671] ? __pfx_xfrm_net_init+0x10/0x10 [ 141.001261][ T6671] ops_init+0x1df/0x5f0 [ 141.001300][ T6671] setup_net+0x1ff/0x510 [ 141.001332][ T6671] ? lockdep_init_map_type+0x5c/0x280 [ 141.001376][ T6671] ? __pfx_setup_net+0x10/0x10 [ 141.001414][ T6671] ? debug_mutex_init+0x37/0x70 [ 141.001450][ T6671] copy_net_ns+0x2a6/0x5f0 [ 141.001492][ T6671] create_new_namespaces+0x3ea/0xa90 [ 141.001537][ T6671] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 141.001575][ T6671] ksys_unshare+0x45b/0xa40 [ 141.001619][ T6671] ? __pfx_ksys_unshare+0x10/0x10 [ 141.001662][ T6671] ? xfd_validate_state+0x61/0x180 [ 141.001715][ T6671] __x64_sys_unshare+0x31/0x40 [ 141.001757][ T6671] do_syscall_64+0xcd/0x490 [ 141.001792][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.001835][ T6671] RIP: 0033:0x7f9e8278e9a9 [ 141.001859][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.001886][ T6671] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 141.001912][ T6671] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 141.001931][ T6671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 141.001949][ T6671] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 141.001967][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.001984][ T6671] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 141.002022][ T6671] [ 141.759201][ T6686] FAULT_INJECTION: forcing a failure. [ 141.759201][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 141.791000][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.3.264 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 141.791048][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.791069][ T6686] Call Trace: [ 141.791079][ T6686] [ 141.791092][ T6686] dump_stack_lvl+0x16c/0x1f0 [ 141.791133][ T6686] should_fail_ex+0x512/0x640 [ 141.791168][ T6686] ? __kmalloc_noprof+0xbf/0x510 [ 141.791204][ T6686] ? iter_file_splice_write+0x1cc/0x1150 [ 141.791257][ T6686] should_failslab+0xc2/0x120 [ 141.791297][ T6686] __kmalloc_noprof+0xd2/0x510 [ 141.791341][ T6686] iter_file_splice_write+0x1cc/0x1150 [ 141.791402][ T6686] ? kfree+0x2b4/0x4d0 [ 141.791449][ T6686] ? copy_splice_read+0x897/0xba0 [ 141.791509][ T6686] ? __pfx_iter_file_splice_write+0x10/0x10 [ 141.791565][ T6686] ? __lock_acquire+0xb8a/0x1c90 [ 141.791614][ T6686] ? __pfx_copy_splice_read+0x10/0x10 [ 141.791687][ T6686] ? __pfx_iter_file_splice_write+0x10/0x10 [ 141.791744][ T6686] direct_splice_actor+0x18f/0x6c0 [ 141.791810][ T6686] splice_direct_to_actor+0x342/0xa30 [ 141.791865][ T6686] ? __pfx_direct_splice_actor+0x10/0x10 [ 141.791926][ T6686] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 141.791991][ T6686] do_splice_direct+0x174/0x240 [ 141.792045][ T6686] ? __pfx_do_splice_direct+0x10/0x10 [ 141.792098][ T6686] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 141.792156][ T6686] ? rw_verify_area+0xcf/0x680 [ 141.792211][ T6686] do_sendfile+0xb06/0xe50 [ 141.792271][ T6686] ? __pfx_do_sendfile+0x10/0x10 [ 141.792332][ T6686] ? __x64_sys_futex+0x1e0/0x4c0 [ 141.792371][ T6686] ? __x64_sys_futex+0x1e9/0x4c0 [ 141.792419][ T6686] __x64_sys_sendfile64+0x1d8/0x220 [ 141.792461][ T6686] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 141.792516][ T6686] do_syscall_64+0xcd/0x490 [ 141.792554][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.792587][ T6686] RIP: 0033:0x7fca1598e9a9 [ 141.792614][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.792646][ T6686] RSP: 002b:00007fca16881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 141.792678][ T6686] RAX: ffffffffffffffda RBX: 00007fca15bb5fa0 RCX: 00007fca1598e9a9 [ 141.792700][ T6686] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 141.792719][ T6686] RBP: 00007fca15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 141.792738][ T6686] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 141.792758][ T6686] R13: 0000000000000000 R14: 00007fca15bb5fa0 R15: 00007ffd9145b908 [ 141.792806][ T6686] [ 144.158770][ T6718] netlink: 338 bytes leftover after parsing attributes in process `syz.1.275'. [ 145.474520][ T6749] netlink: 342 bytes leftover after parsing attributes in process `syz.3.285'. [ 145.507803][ T6749] netlink: 274 bytes leftover after parsing attributes in process `syz.3.285'. [ 146.112361][ T6762] netlink: 338 bytes leftover after parsing attributes in process `syz.1.290'. [ 146.180182][ T6762] netlink: 338 bytes leftover after parsing attributes in process `syz.1.290'. [ 146.229882][ T6762] netlink: 338 bytes leftover after parsing attributes in process `syz.1.290'. [ 146.239096][ T6762] netlink: 338 bytes leftover after parsing attributes in process `syz.1.290'. [ 146.289574][ T6762] netlink: 338 bytes leftover after parsing attributes in process `syz.1.290'. [ 146.311662][ T6762] netlink: 338 bytes leftover after parsing attributes in process `syz.1.290'. [ 146.335549][ T6762] netlink: 338 bytes leftover after parsing attributes in process `syz.1.290'. [ 146.754537][ T6780] FAULT_INJECTION: forcing a failure. [ 146.754537][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 146.792447][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.1.295 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 146.792489][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.792507][ T6780] Call Trace: [ 146.792516][ T6780] [ 146.792527][ T6780] dump_stack_lvl+0x16c/0x1f0 [ 146.792563][ T6780] should_fail_ex+0x512/0x640 [ 146.792594][ T6780] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 146.792635][ T6780] should_failslab+0xc2/0x120 [ 146.792671][ T6780] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 146.792708][ T6780] ? bonding_sysfs_store_option+0x67/0x120 [ 146.792759][ T6780] kstrndup+0x6d/0x160 [ 146.792791][ T6780] ? __pfx_bonding_sysfs_store_option+0x10/0x10 [ 146.792832][ T6780] bonding_sysfs_store_option+0x67/0x120 [ 146.792877][ T6780] dev_attr_store+0x58/0x80 [ 146.792914][ T6780] ? __pfx_dev_attr_store+0x10/0x10 [ 146.792951][ T6780] sysfs_kf_write+0xf2/0x150 [ 146.792998][ T6780] kernfs_fop_write_iter+0x354/0x510 [ 146.793036][ T6780] ? __pfx_sysfs_kf_write+0x10/0x10 [ 146.793084][ T6780] do_iter_readv_writev+0x657/0x950 [ 146.793135][ T6780] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 146.793231][ T6780] vfs_writev+0x35f/0xde0 [ 146.793294][ T6780] ? __pfx_vfs_writev+0x10/0x10 [ 146.793388][ T6780] ? __fget_files+0x20e/0x3c0 [ 146.793447][ T6780] ? do_pwritev+0x1a6/0x270 [ 146.793514][ T6780] do_pwritev+0x1a6/0x270 [ 146.793566][ T6780] ? __pfx_do_pwritev+0x10/0x10 [ 146.793631][ T6780] do_syscall_64+0xcd/0x490 [ 146.793679][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.793709][ T6780] RIP: 0033:0x7f32bbf8e9a9 [ 146.793733][ T6780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.793761][ T6780] RSP: 002b:00007f32bce27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 146.793808][ T6780] RAX: ffffffffffffffda RBX: 00007f32bc1b6080 RCX: 00007f32bbf8e9a9 [ 146.793830][ T6780] RDX: 0000000000000005 RSI: 0000200000001000 RDI: 0000000000000003 [ 146.793849][ T6780] RBP: 00007f32bc010d69 R08: 0000000000000009 R09: 0000000000000000 [ 146.793868][ T6780] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 146.793887][ T6780] R13: 0000000000000000 R14: 00007f32bc1b6080 R15: 00007ffc066abd58 [ 146.793930][ T6780] [ 147.876383][ T6796] FAULT_INJECTION: forcing a failure. [ 147.876383][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 147.914030][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.0.302 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 147.914072][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.914090][ T6796] Call Trace: [ 147.914099][ T6796] [ 147.914111][ T6796] dump_stack_lvl+0x16c/0x1f0 [ 147.914147][ T6796] should_fail_ex+0x512/0x640 [ 147.914178][ T6796] ? fs_reclaim_acquire+0xae/0x150 [ 147.914224][ T6796] should_failslab+0xc2/0x120 [ 147.914260][ T6796] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 147.914292][ T6796] ? security_inode_alloc+0x3b/0x2b0 [ 147.914338][ T6796] security_inode_alloc+0x3b/0x2b0 [ 147.914388][ T6796] inode_init_always_gfp+0xce4/0x1030 [ 147.914446][ T6796] alloc_inode+0x86/0x240 [ 147.914484][ T6796] new_inode+0x22/0x1c0 [ 147.914525][ T6796] simple_fill_super+0x306/0x720 [ 147.914559][ T6796] ? __pfx_nfsd_fill_super+0x10/0x10 [ 147.914601][ T6796] nfsd_fill_super+0x90/0x530 [ 147.914658][ T6796] ? __pfx_set_anon_super_fc+0x10/0x10 [ 147.914707][ T6796] ? __pfx_nfsd_fill_super+0x10/0x10 [ 147.914751][ T6796] get_tree_keyed+0x10b/0x1d0 [ 147.914806][ T6796] vfs_get_tree+0x8e/0x340 [ 147.914851][ T6796] path_mount+0x1414/0x2020 [ 147.914889][ T6796] ? kmem_cache_free+0x2d1/0x4d0 [ 147.914919][ T6796] ? __pfx_path_mount+0x10/0x10 [ 147.914960][ T6796] ? putname+0x154/0x1a0 [ 147.915003][ T6796] __x64_sys_mount+0x28d/0x310 [ 147.915040][ T6796] ? __pfx___x64_sys_mount+0x10/0x10 [ 147.915087][ T6796] do_syscall_64+0xcd/0x490 [ 147.915121][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.915152][ T6796] RIP: 0033:0x7f9e8278e9a9 [ 147.915179][ T6796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.915213][ T6796] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.915244][ T6796] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 147.915265][ T6796] RDX: 0000200000000100 RSI: 0000200000000280 RDI: 0000000000000000 [ 147.915286][ T6796] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 147.915304][ T6796] R10: 0000000000000107 R11: 0000000000000246 R12: 0000000000000000 [ 147.915322][ T6796] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 147.915369][ T6796] [ 148.449749][ T6797] FAULT_INJECTION: forcing a failure. [ 148.449749][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 148.469831][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.2.303 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 148.469870][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.469887][ T6797] Call Trace: [ 148.469897][ T6797] [ 148.469907][ T6797] dump_stack_lvl+0x16c/0x1f0 [ 148.469940][ T6797] should_fail_ex+0x512/0x640 [ 148.469970][ T6797] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 148.470004][ T6797] should_failslab+0xc2/0x120 [ 148.470046][ T6797] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 148.470078][ T6797] ? acpi_ut_create_integer_object+0x64/0x180 [ 148.470122][ T6797] ? acpi_ds_init_aml_walk+0x2d3/0x590 [ 148.470158][ T6797] acpi_ut_create_integer_object+0x64/0x180 [ 148.470201][ T6797] acpi_ps_execute_method+0x516/0xb30 [ 148.470240][ T6797] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 148.470284][ T6797] acpi_ns_evaluate+0x76c/0xca0 [ 148.470323][ T6797] ? kasan_save_track+0x14/0x30 [ 148.470355][ T6797] acpi_evaluate_object+0x1fa/0xa90 [ 148.470407][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.470439][ T6797] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 148.470510][ T6797] ? __mutex_trylock_common+0xe9/0x250 [ 148.470560][ T6797] acpi_evaluate_integer+0xdd/0x200 [ 148.470608][ T6797] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 148.470671][ T6797] ? __pfx_status_show+0x10/0x10 [ 148.470701][ T6797] status_show+0xa0/0x120 [ 148.470732][ T6797] ? __pfx_status_show+0x10/0x10 [ 148.470774][ T6797] dev_attr_show+0x53/0xe0 [ 148.470813][ T6797] ? __pfx_dev_attr_show+0x10/0x10 [ 148.470850][ T6797] sysfs_kf_seq_show+0x216/0x3e0 [ 148.470901][ T6797] seq_read_iter+0x506/0x12c0 [ 148.470964][ T6797] kernfs_fop_read_iter+0x40f/0x5a0 [ 148.471002][ T6797] ? rw_verify_area+0xcf/0x680 [ 148.471069][ T6797] vfs_read+0x8bc/0xc60 [ 148.471100][ T6797] ? __pfx___mutex_lock+0x10/0x10 [ 148.471131][ T6797] ? __pfx_vfs_read+0x10/0x10 [ 148.471182][ T6797] ksys_read+0x12a/0x250 [ 148.471208][ T6797] ? __pfx_ksys_read+0x10/0x10 [ 148.471246][ T6797] do_syscall_64+0xcd/0x490 [ 148.471279][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.471307][ T6797] RIP: 0033:0x7fd073d8e9a9 [ 148.471330][ T6797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.471356][ T6797] RSP: 002b:00007fd074be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.471382][ T6797] RAX: ffffffffffffffda RBX: 00007fd073fb5fa0 RCX: 00007fd073d8e9a9 [ 148.471401][ T6797] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 148.471418][ T6797] RBP: 00007fd073e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 148.471435][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.471451][ T6797] R13: 0000000000000000 R14: 00007fd073fb5fa0 R15: 00007ffd2ffce508 [ 148.471488][ T6797] [ 148.471510][ T6797] ACPI Error: Could not allocate an object descriptor (20250404/utobject-180) [ 148.819539][ T6797] ACPI Error: ffff88807c133000 walk still has a scope list (20250404/dswstate-694) [ 150.045140][ T6831] sp0: Synchronizing with TNC [ 150.523642][ T5857] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 150.534309][ T5857] Bluetooth: hci1: Injecting HCI hardware error event [ 150.544362][ T5854] Bluetooth: hci1: hardware error 0x00 [ 151.070464][ T6853] could not allocate digest TFM handle binfmt_misc [ 151.628976][ T6872] FAULT_INJECTION: forcing a failure. [ 151.628976][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 151.642143][ T6872] CPU: 1 UID: 0 PID: 6872 Comm: syz.0.326 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 151.642186][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.642206][ T6872] Call Trace: [ 151.642217][ T6872] [ 151.642229][ T6872] dump_stack_lvl+0x16c/0x1f0 [ 151.642267][ T6872] should_fail_ex+0x512/0x640 [ 151.642300][ T6872] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 151.642355][ T6872] should_failslab+0xc2/0x120 [ 151.642394][ T6872] __kmalloc_cache_noprof+0x6a/0x3e0 [ 151.642442][ T6872] ? keyring_get_key_chunk+0x22d/0x280 [ 151.642496][ T6872] ? assoc_array_insert+0x10c/0x3970 [ 151.642544][ T6872] assoc_array_insert+0x10c/0x3970 [ 151.642582][ T6872] ? keyring_compare_object+0x72/0x210 [ 151.642619][ T6872] ? assoc_array_delete+0x2db/0xd10 [ 151.642674][ T6872] ? __pfx_assoc_array_insert+0x10/0x10 [ 151.642736][ T6872] __key_link_begin+0xf5/0x260 [ 151.642774][ T6872] key_move+0x122/0x6a0 [ 151.642811][ T6872] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 151.642861][ T6872] ? __pfx_key_move+0x10/0x10 [ 151.642913][ T6872] keyctl_keyring_move+0xed/0x150 [ 151.642958][ T6872] __do_sys_keyctl+0x171/0x590 [ 151.643004][ T6872] do_syscall_64+0xcd/0x490 [ 151.643050][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.643083][ T6872] RIP: 0033:0x7f9e8278e9a9 [ 151.643109][ T6872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.643140][ T6872] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 151.643170][ T6872] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 151.643192][ T6872] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 000000000000001e [ 151.643213][ T6872] RBP: 00007f9e82810d69 R08: 0000000000000001 R09: 0000000000000000 [ 151.643233][ T6872] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 151.643253][ T6872] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 151.643296][ T6872] [ 152.689565][ T5854] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 152.772209][ T6885] FAULT_INJECTION: forcing a failure. [ 152.772209][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.942089][ T6885] CPU: 1 UID: 0 PID: 6885 Comm: syz.0.330 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 152.942135][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.942153][ T6885] Call Trace: [ 152.942164][ T6885] [ 152.942176][ T6885] dump_stack_lvl+0x16c/0x1f0 [ 152.942215][ T6885] should_fail_ex+0x512/0x640 [ 152.942274][ T6885] _copy_from_user+0x2e/0xd0 [ 152.942314][ T6885] futex_parse_waitv+0x101/0x520 [ 152.942361][ T6885] ? __pfx_futex_wake_mark+0x10/0x10 [ 152.942413][ T6885] ? __pfx_futex_parse_waitv+0x10/0x10 [ 152.942488][ T6885] ? trace_kmalloc+0x2b/0xd0 [ 152.942528][ T6885] ? __kmalloc_noprof+0x242/0x510 [ 152.942571][ T6885] __do_sys_futex_waitv+0x14f/0x2c0 [ 152.942616][ T6885] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 152.942667][ T6885] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 152.942748][ T6885] do_syscall_64+0xcd/0x490 [ 152.942785][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.942819][ T6885] RIP: 0033:0x7f9e8278e9a9 [ 152.942845][ T6885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.942876][ T6885] RSP: 002b:00007f9e83696038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 152.942907][ T6885] RAX: ffffffffffffffda RBX: 00007f9e829b6080 RCX: 00007f9e8278e9a9 [ 152.942934][ T6885] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000300 [ 152.942954][ T6885] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 152.942973][ T6885] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 152.942993][ T6885] R13: 0000000000000000 R14: 00007f9e829b6080 R15: 00007ffeb1a63ea8 [ 152.943034][ T6885] [ 154.228427][ T6894] FAULT_INJECTION: forcing a failure. [ 154.228427][ T6894] name failslab, interval 1, probability 0, space 0, times 0 [ 154.283111][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.1.334 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 154.283157][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.283176][ T6894] Call Trace: [ 154.283187][ T6894] [ 154.283199][ T6894] dump_stack_lvl+0x16c/0x1f0 [ 154.283237][ T6894] should_fail_ex+0x512/0x640 [ 154.283271][ T6894] ? fs_reclaim_acquire+0xae/0x150 [ 154.283321][ T6894] should_failslab+0xc2/0x120 [ 154.283360][ T6894] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 154.283397][ T6894] ? security_inode_alloc+0x3b/0x2b0 [ 154.283458][ T6894] security_inode_alloc+0x3b/0x2b0 [ 154.283502][ T6894] inode_init_always_gfp+0xce4/0x1030 [ 154.283583][ T6894] alloc_inode+0x86/0x240 [ 154.283624][ T6894] new_inode+0x22/0x1c0 [ 154.283662][ T6894] ? trace_cap_capable+0x18d/0x200 [ 154.283707][ T6894] shmem_get_inode+0x19a/0xfb0 [ 154.283763][ T6894] ? __vm_enough_memory+0x184/0x3f0 [ 154.283806][ T6894] __shmem_file_setup+0x279/0x330 [ 154.283857][ T6894] shmem_zero_setup+0x93/0x1a0 [ 154.283890][ T6894] __mmap_region+0x1ece/0x25e0 [ 154.283928][ T6894] ? __pfx___mmap_region+0x10/0x10 [ 154.283959][ T6894] ? rcu_is_watching+0x12/0xc0 [ 154.283999][ T6894] ? rcu_is_watching+0x12/0xc0 [ 154.284031][ T6894] ? trace_sched_exit_tp+0xde/0x130 [ 154.284087][ T6894] ? __schedule+0x1181/0x5dd0 [ 154.284142][ T6894] ? __lock_acquire+0xb8a/0x1c90 [ 154.284207][ T6894] ? __pfx___schedule+0x10/0x10 [ 154.284307][ T6894] ? trace_cap_capable+0x18d/0x200 [ 154.284362][ T6894] mmap_region+0x1ab/0x3f0 [ 154.284396][ T6894] ? __get_unmapped_area+0x267/0x440 [ 154.284446][ T6894] do_mmap+0xa3e/0x1210 [ 154.284496][ T6894] ? __pfx_do_mmap+0x10/0x10 [ 154.284541][ T6894] ? __pfx_down_write_killable+0x10/0x10 [ 154.284598][ T6894] vm_mmap_pgoff+0x281/0x450 [ 154.284647][ T6894] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 154.284698][ T6894] ? __x64_sys_futex+0x1e0/0x4c0 [ 154.284738][ T6894] ? __x64_sys_futex+0x1e9/0x4c0 [ 154.284786][ T6894] ksys_mmap_pgoff+0x7d/0x5c0 [ 154.284828][ T6894] ? xfd_validate_state+0x61/0x180 [ 154.284882][ T6894] ? __pfx_do_writev+0x10/0x10 [ 154.284955][ T6894] __x64_sys_mmap+0x125/0x190 [ 154.285007][ T6894] do_syscall_64+0xcd/0x490 [ 154.285044][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.285076][ T6894] RIP: 0033:0x7f32bbf8e9a9 [ 154.285103][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.285134][ T6894] RSP: 002b:00007f32bce48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 154.285165][ T6894] RAX: ffffffffffffffda RBX: 00007f32bc1b5fa0 RCX: 00007f32bbf8e9a9 [ 154.285187][ T6894] RDX: 00004000000000df RSI: 0000000000000100 RDI: 0000000000000000 [ 154.285207][ T6894] RBP: 00007f32bc010d69 R08: 0000000000000401 R09: 0000000000008000 [ 154.285227][ T6894] R10: 0000080000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 154.285247][ T6894] R13: 0000000000000000 R14: 00007f32bc1b5fa0 R15: 00007ffc066abd58 [ 154.285289][ T6894] [ 154.659064][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed9b000: rx timeout, send abort [ 154.668677][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed99800: rx timeout, send abort [ 154.677441][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ed9b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.692795][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ed99800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 155.336717][ T6911] syz.1.340 (6911): /proc/6910/oom_adj is deprecated, please use /proc/6910/oom_score_adj instead. [ 155.400066][ T6914] FAULT_INJECTION: forcing a failure. [ 155.400066][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 155.417432][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.2.341 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 155.417476][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.417495][ T6914] Call Trace: [ 155.417504][ T6914] [ 155.417516][ T6914] dump_stack_lvl+0x16c/0x1f0 [ 155.417549][ T6914] should_fail_ex+0x512/0x640 [ 155.417581][ T6914] ? __kmalloc_noprof+0xbf/0x510 [ 155.417618][ T6914] ? kvm_io_bus_register_dev+0x1b9/0x7f0 [ 155.417651][ T6914] should_failslab+0xc2/0x120 [ 155.417686][ T6914] __kmalloc_noprof+0xd2/0x510 [ 155.417722][ T6914] kvm_io_bus_register_dev+0x1b9/0x7f0 [ 155.417773][ T6914] kvm_ioapic_init+0x3fa/0x550 [ 155.417823][ T6914] kvm_arch_vm_ioctl+0x91f/0x1cf0 [ 155.417865][ T6914] ? ima_match_policy+0x7f9/0x22e0 [ 155.417922][ T6914] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 155.417964][ T6914] ? __lock_acquire+0x622/0x1c90 [ 155.418017][ T6914] ? __lock_acquire+0x622/0x1c90 [ 155.418073][ T6914] ? __lock_acquire+0x622/0x1c90 [ 155.418128][ T6914] ? __lock_acquire+0x622/0x1c90 [ 155.418205][ T6914] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.418248][ T6914] ? is_bpf_text_address+0x94/0x1a0 [ 155.418294][ T6914] ? kernel_text_address+0x8d/0x100 [ 155.418349][ T6914] ? __kernel_text_address+0xd/0x40 [ 155.418397][ T6914] ? unwind_get_return_address+0x59/0xa0 [ 155.418446][ T6914] ? arch_stack_walk+0xa6/0x100 [ 155.418492][ T6914] ? stack_trace_save+0x8e/0xc0 [ 155.418528][ T6914] ? __pfx_stack_trace_save+0x10/0x10 [ 155.418564][ T6914] ? stack_depot_save_flags+0x28/0xa40 [ 155.418600][ T6914] ? __lock_acquire+0xb8a/0x1c90 [ 155.418642][ T6914] ? kasan_save_stack+0x42/0x60 [ 155.418667][ T6914] ? kasan_save_stack+0x33/0x60 [ 155.418694][ T6914] ? kasan_save_track+0x14/0x30 [ 155.418722][ T6914] ? kasan_save_free_info+0x3b/0x60 [ 155.418770][ T6914] ? __kasan_slab_free+0x51/0x70 [ 155.418803][ T6914] ? kfree+0x2b4/0x4d0 [ 155.418846][ T6914] ? tomoyo_path_number_perm+0x470/0x580 [ 155.418887][ T6914] ? security_file_ioctl+0x9b/0x240 [ 155.418927][ T6914] ? __x64_sys_ioctl+0xb7/0x210 [ 155.418968][ T6914] ? do_syscall_64+0xcd/0x490 [ 155.419008][ T6914] kvm_vm_ioctl+0x19d3/0x3dd0 [ 155.419079][ T6914] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 155.419155][ T6914] ? kasan_quarantine_put+0x10a/0x240 [ 155.419187][ T6914] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.419224][ T6914] ? find_held_lock+0x2b/0x80 [ 155.419259][ T6914] ? tomoyo_path_number_perm+0x295/0x580 [ 155.419314][ T6914] ? tomoyo_path_number_perm+0x18d/0x580 [ 155.419367][ T6914] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.419416][ T6914] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.419473][ T6914] ? do_vfs_ioctl+0x523/0x1a60 [ 155.419519][ T6914] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 155.419589][ T6914] ? find_held_lock+0x2b/0x80 [ 155.419618][ T6914] ? hook_file_ioctl_common+0x145/0x410 [ 155.419667][ T6914] ? __fget_files+0x20e/0x3c0 [ 155.419720][ T6914] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 155.419783][ T6914] __x64_sys_ioctl+0x18e/0x210 [ 155.419829][ T6914] do_syscall_64+0xcd/0x490 [ 155.419863][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.419895][ T6914] RIP: 0033:0x7fd073d8e9a9 [ 155.419924][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.419956][ T6914] RSP: 002b:00007fd074be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.419987][ T6914] RAX: ffffffffffffffda RBX: 00007fd073fb5fa0 RCX: 00007fd073d8e9a9 [ 155.420007][ T6914] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 155.420026][ T6914] RBP: 00007fd073e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 155.420045][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.420064][ T6914] R13: 0000000000000000 R14: 00007fd073fb5fa0 R15: 00007ffd2ffce508 [ 155.420104][ T6914] [ 155.959680][ T6923] __nla_validate_parse: 6 callbacks suppressed [ 155.959705][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 156.254598][ T6920] syz.1.343 uses obsolete (PF_INET,SOCK_PACKET) [ 156.589360][ T6943] netlink: 62 bytes leftover after parsing attributes in process `syz.2.350'. [ 157.297520][ T6955] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 157.380519][ T6955] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 157.388898][ T6955] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 157.458891][ T6955] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 157.468538][ T6955] page dumped because: unmovable page [ 157.479668][ T6955] page_owner info is not present (never set?) [ 157.538080][ T6961] FAULT_INJECTION: forcing a failure. [ 157.538080][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 157.550908][ T6961] CPU: 1 UID: 0 PID: 6961 Comm: syz.1.355 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 157.550954][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.550973][ T6961] Call Trace: [ 157.550986][ T6961] [ 157.550998][ T6961] dump_stack_lvl+0x16c/0x1f0 [ 157.551037][ T6961] should_fail_ex+0x512/0x640 [ 157.551071][ T6961] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 157.551139][ T6961] should_failslab+0xc2/0x120 [ 157.551175][ T6961] __kmalloc_cache_noprof+0x6a/0x3e0 [ 157.551223][ T6961] ? madvise_collapse+0x1cb/0xb20 [ 157.551270][ T6961] madvise_collapse+0x1cb/0xb20 [ 157.551311][ T6961] ? __schedule+0x1181/0x5dd0 [ 157.551355][ T6961] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 157.551399][ T6961] ? __pfx_madvise_collapse+0x10/0x10 [ 157.551444][ T6961] ? mtree_range_walk+0x718/0xc00 [ 157.551490][ T6961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.551543][ T6961] madvise_vma_behavior+0x118d/0x2420 [ 157.551582][ T6961] ? mas_prev_setup.constprop.0+0x81/0x830 [ 157.551645][ T6961] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 157.551687][ T6961] ? __pfx_mas_prev+0x10/0x10 [ 157.551729][ T6961] ? find_vma_prev+0xda/0x160 [ 157.551774][ T6961] ? __pfx_find_vma_prev+0x10/0x10 [ 157.551838][ T6961] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 157.551877][ T6961] madvise_walk_vmas+0x1d1/0x2c0 [ 157.551917][ T6961] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 157.551966][ T6961] madvise_do_behavior+0x15d/0x3f0 [ 157.552012][ T6961] ? __pfx_madvise_do_behavior+0x10/0x10 [ 157.552074][ T6961] do_madvise+0x161/0x230 [ 157.552112][ T6961] ? __pfx_do_madvise+0x10/0x10 [ 157.552169][ T6961] ? xfd_validate_state+0x61/0x180 [ 157.552221][ T6961] __x64_sys_madvise+0xa9/0x110 [ 157.552261][ T6961] ? lockdep_hardirqs_on+0x7c/0x110 [ 157.552292][ T6961] do_syscall_64+0xcd/0x490 [ 157.552327][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.552354][ T6961] RIP: 0033:0x7f32bbf8e9a9 [ 157.552377][ T6961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.552407][ T6961] RSP: 002b:00007f32bce48038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 157.552455][ T6961] RAX: ffffffffffffffda RBX: 00007f32bc1b5fa0 RCX: 00007f32bbf8e9a9 [ 157.552477][ T6961] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 157.552498][ T6961] RBP: 00007f32bc010d69 R08: 0000000000000000 R09: 0000000000000000 [ 157.552518][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.552538][ T6961] R13: 0000000000000000 R14: 00007f32bc1b5fa0 R15: 00007ffc066abd58 [ 157.552581][ T6961] [ 158.181791][ T6968] netlink: 338 bytes leftover after parsing attributes in process `syz.2.358'. [ 158.202070][ T6968] netlink: 338 bytes leftover after parsing attributes in process `syz.2.358'. [ 158.220798][ T6968] netlink: 290 bytes leftover after parsing attributes in process `syz.2.358'. [ 158.400980][ T6972] netlink: 342 bytes leftover after parsing attributes in process `syz.3.360'. [ 158.495137][ T6972] netlink: 342 bytes leftover after parsing attributes in process `syz.3.360'. [ 158.514857][ T6972] netlink: 342 bytes leftover after parsing attributes in process `syz.3.360'. [ 158.595558][ T6972] netlink: 342 bytes leftover after parsing attributes in process `syz.3.360'. [ 158.669719][ T6982] netlink: 218 bytes leftover after parsing attributes in process `syz.3.360'. [ 158.745582][ T6984] FAULT_INJECTION: forcing a failure. [ 158.745582][ T6984] name failslab, interval 1, probability 0, space 0, times 0 [ 158.833447][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.1.362 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 158.833496][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.833518][ T6984] Call Trace: [ 158.833529][ T6984] [ 158.833542][ T6984] dump_stack_lvl+0x16c/0x1f0 [ 158.833581][ T6984] should_fail_ex+0x512/0x640 [ 158.833616][ T6984] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 158.833675][ T6984] should_failslab+0xc2/0x120 [ 158.833715][ T6984] __kmalloc_cache_noprof+0x6a/0x3e0 [ 158.833770][ T6984] ? kvm_pic_init+0x4f/0x380 [ 158.833825][ T6984] kvm_pic_init+0x4f/0x380 [ 158.833876][ T6984] kvm_arch_vm_ioctl+0x8fd/0x1cf0 [ 158.833930][ T6984] ? ima_match_policy+0x7f9/0x22e0 [ 158.833974][ T6984] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 158.834017][ T6984] ? __lock_acquire+0x622/0x1c90 [ 158.834072][ T6984] ? __lock_acquire+0x622/0x1c90 [ 158.834127][ T6984] ? __lock_acquire+0x622/0x1c90 [ 158.834181][ T6984] ? __lock_acquire+0x622/0x1c90 [ 158.834266][ T6984] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 158.834327][ T6984] ? is_bpf_text_address+0x94/0x1a0 [ 158.834375][ T6984] ? kernel_text_address+0x8d/0x100 [ 158.834430][ T6984] ? __kernel_text_address+0xd/0x40 [ 158.834485][ T6984] ? unwind_get_return_address+0x59/0xa0 [ 158.834540][ T6984] ? arch_stack_walk+0xa6/0x100 [ 158.834589][ T6984] ? stack_trace_save+0x8e/0xc0 [ 158.834627][ T6984] ? __pfx_stack_trace_save+0x10/0x10 [ 158.834665][ T6984] ? stack_depot_save_flags+0x28/0xa40 [ 158.834705][ T6984] ? __lock_acquire+0xb8a/0x1c90 [ 158.834754][ T6984] ? kasan_save_stack+0x42/0x60 [ 158.834785][ T6984] ? kasan_save_stack+0x33/0x60 [ 158.834816][ T6984] ? kasan_save_track+0x14/0x30 [ 158.834847][ T6984] ? kasan_save_free_info+0x3b/0x60 [ 158.834894][ T6984] ? __kasan_slab_free+0x51/0x70 [ 158.834927][ T6984] ? kfree+0x2b4/0x4d0 [ 158.834973][ T6984] ? tomoyo_path_number_perm+0x470/0x580 [ 158.835021][ T6984] ? security_file_ioctl+0x9b/0x240 [ 158.835069][ T6984] ? __x64_sys_ioctl+0xb7/0x210 [ 158.835113][ T6984] ? do_syscall_64+0xcd/0x490 [ 158.835154][ T6984] kvm_vm_ioctl+0x19d3/0x3dd0 [ 158.835227][ T6984] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 158.835315][ T6984] ? kasan_quarantine_put+0x10a/0x240 [ 158.835347][ T6984] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.835386][ T6984] ? find_held_lock+0x2b/0x80 [ 158.835422][ T6984] ? tomoyo_path_number_perm+0x295/0x580 [ 158.835479][ T6984] ? tomoyo_path_number_perm+0x18d/0x580 [ 158.835533][ T6984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.835582][ T6984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.835650][ T6984] ? do_vfs_ioctl+0x523/0x1a60 [ 158.835696][ T6984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 158.835769][ T6984] ? find_held_lock+0x2b/0x80 [ 158.835801][ T6984] ? hook_file_ioctl_common+0x145/0x410 [ 158.835854][ T6984] ? __fget_files+0x20e/0x3c0 [ 158.835912][ T6984] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 158.835966][ T6984] __x64_sys_ioctl+0x18e/0x210 [ 158.836015][ T6984] do_syscall_64+0xcd/0x490 [ 158.836051][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.836083][ T6984] RIP: 0033:0x7f32bbf8e9a9 [ 158.836109][ T6984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.836141][ T6984] RSP: 002b:00007f32bce48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.836172][ T6984] RAX: ffffffffffffffda RBX: 00007f32bc1b5fa0 RCX: 00007f32bbf8e9a9 [ 158.836193][ T6984] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 158.836214][ T6984] RBP: 00007f32bc010d69 R08: 0000000000000000 R09: 0000000000000000 [ 158.836240][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.836260][ T6984] R13: 0000000000000000 R14: 00007f32bc1b5fa0 R15: 00007ffc066abd58 [ 158.836303][ T6984] [ 161.497539][ T7017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.373'. [ 161.528871][ T7017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.373'. [ 161.949122][ T7021] ima: policy update failed [ 162.012346][ T30] audit: type=1802 audit(1753659741.050:4): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.375" res=0 errno=0 [ 162.019904][ T7021] netlink: 25 bytes leftover after parsing attributes in process `syz.2.375'. [ 162.316573][ T7024] sp0: Synchronizing with TNC [ 163.055108][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 163.259305][ T7039] netlink: 194 bytes leftover after parsing attributes in process `syz.3.382'. [ 163.383238][ T30] audit: type=1800 audit(1753659742.420:5): pid=7035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.380" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 165.087102][ T7068] mmap: syz.2.390 (7068) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.098221][ T7074] netlink: 25 bytes leftover after parsing attributes in process `syz.3.391'. [ 165.835288][ T30] audit: type=1800 audit(1753659744.870:6): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.393" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 166.195561][ T7092] FAULT_INJECTION: forcing a failure. [ 166.195561][ T7092] name failslab, interval 1, probability 0, space 0, times 0 [ 166.216429][ T7092] CPU: 0 UID: 0 PID: 7092 Comm: syz.3.396 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 166.216471][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.216490][ T7092] Call Trace: [ 166.216501][ T7092] [ 166.216512][ T7092] dump_stack_lvl+0x16c/0x1f0 [ 166.216549][ T7092] should_fail_ex+0x512/0x640 [ 166.216581][ T7092] ? fs_reclaim_acquire+0xae/0x150 [ 166.216628][ T7092] should_failslab+0xc2/0x120 [ 166.216666][ T7092] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 166.216725][ T7092] ? security_inode_alloc+0x3b/0x2b0 [ 166.216796][ T7092] security_inode_alloc+0x3b/0x2b0 [ 166.216846][ T7092] inode_init_always_gfp+0xce4/0x1030 [ 166.216909][ T7092] alloc_inode+0x86/0x240 [ 166.216951][ T7092] path_from_stashed+0x2be/0xb00 [ 166.216985][ T7092] ? do_raw_spin_lock+0x12c/0x2b0 [ 166.217043][ T7092] ? __pfx_path_from_stashed+0x10/0x10 [ 166.217080][ T7092] ? do_raw_spin_unlock+0x172/0x230 [ 166.217142][ T7092] ns_get_path+0x5f/0x80 [ 166.217195][ T7092] proc_ns_get_link+0x121/0x260 [ 166.217251][ T7092] ? __pfx_proc_ns_get_link+0x10/0x10 [ 166.217309][ T7092] ? atime_needs_update+0x8b/0x710 [ 166.217356][ T7092] ? __pfx_proc_ns_get_link+0x10/0x10 [ 166.217411][ T7092] step_into+0x1a29/0x2270 [ 166.217471][ T7092] ? __pfx_step_into+0x10/0x10 [ 166.217522][ T7092] ? find_held_lock+0x2b/0x80 [ 166.217571][ T7092] path_openat+0x6db/0x2cb0 [ 166.217618][ T7092] ? __pfx_path_openat+0x10/0x10 [ 166.217654][ T7092] ? __lock_acquire+0xb8a/0x1c90 [ 166.217705][ T7092] do_filp_open+0x20b/0x470 [ 166.217745][ T7092] ? __pfx_do_filp_open+0x10/0x10 [ 166.217810][ T7092] ? alloc_fd+0x471/0x7d0 [ 166.217876][ T7092] do_sys_openat2+0x11b/0x1d0 [ 166.217933][ T7092] ? __pfx_do_sys_openat2+0x10/0x10 [ 166.217994][ T7092] __x64_sys_openat+0x174/0x210 [ 166.218040][ T7092] ? __pfx___x64_sys_openat+0x10/0x10 [ 166.218102][ T7092] do_syscall_64+0xcd/0x490 [ 166.218140][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.218173][ T7092] RIP: 0033:0x7fca1598d310 [ 166.218198][ T7092] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 166.218230][ T7092] RSP: 002b:00007fca16880f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 166.218261][ T7092] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fca1598d310 [ 166.218282][ T7092] RDX: 0000000000000002 RSI: 00007fca16880fa0 RDI: 00000000ffffff9c [ 166.218302][ T7092] RBP: 00007fca16880fa0 R08: 0000000000000000 R09: 0000000000000000 [ 166.218322][ T7092] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 166.218342][ T7092] R13: 0000000000000000 R14: 00007fca15bb5fa0 R15: 00007ffd9145b908 [ 166.218384][ T7092] [ 167.786931][ T7106] netlink: 338 bytes leftover after parsing attributes in process `syz.0.399'. [ 167.817747][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 167.840945][ T7109] netlink: 13 bytes leftover after parsing attributes in process `syz.2.402'. [ 167.865445][ T7106] netlink: 338 bytes leftover after parsing attributes in process `syz.0.399'. [ 167.962681][ T7106] netlink: 290 bytes leftover after parsing attributes in process `syz.0.399'. [ 168.053205][ T7106] netlink: 290 bytes leftover after parsing attributes in process `syz.0.399'. [ 169.053402][ T7120] [U]  [ 169.056466][ T7120] [U] [ 169.059204][ T7120] [U] [ 169.061935][ T7120] [U] [ 169.078393][ T7120] [U] [ 169.081187][ T7120] [U] [ 169.083941][ T7120] [U] [ 169.086681][ T7120] [U] [ 169.221881][ T7120] [U] [ 169.224670][ T7120] [U] [ 169.227437][ T7120] [U] [ 169.230191][ T7120] [U] [ 169.320825][ T7120] [U] [ 169.323624][ T7120] [U] [ 169.326388][ T7120] [U] [ 169.329159][ T7120] [U] [ 169.350960][ T7120] [U] [ 169.353765][ T7120] [U] [ 169.356536][ T7120] [U] [ 169.359294][ T7120] [U] [ 169.374133][ T7130] netlink: 25 bytes leftover after parsing attributes in process `syz.2.410'. [ 169.519718][ T7120] [U] [ 169.522622][ T7120] [U] [ 169.525436][ T7120] [U] [ 169.528210][ T7120] [U] [ 169.603893][ T7120] [U] [ 169.606716][ T7120] [U] [ 169.609481][ T7120] [U] [ 169.612246][ T7120] [U] [ 169.721731][ T7120] [U] [ 169.724541][ T7120] [U] [ 169.727326][ T7120] [U] [ 169.730103][ T7120] [U] [ 169.841481][ T7120] [U] [ 169.844374][ T7120] [U] [ 169.847137][ T7120] [U] [ 169.849909][ T7120] [U] [ 169.992326][ T7120] [U] [ 171.323434][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 171.379890][ T7150] netlink: 25 bytes leftover after parsing attributes in process `syz.3.415'. [ 172.968982][ T7169] netlink: 25 bytes leftover after parsing attributes in process `syz.2.419'. [ 173.461883][ T7180] binder: 7177:7180 ioctl c018620c 0 returned -1 [ 173.495402][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.423'. [ 174.026920][ T7192] netlink: 25 bytes leftover after parsing attributes in process `syz.2.427'. [ 174.046766][ T7193] random: crng reseeded on system resumption [ 174.805841][ T7208] erspan0: entered allmulticast mode [ 175.502731][ T30] audit: type=1800 audit(6048627050.536:7): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.434" name="members" dev="configfs" ino=13688 res=0 errno=0 [ 176.336963][ T7226] FAULT_INJECTION: forcing a failure. [ 176.336963][ T7226] name fail_futex, interval 1, probability 0, space 0, times 0 [ 176.419977][ T7226] CPU: 1 UID: 0 PID: 7226 Comm: syz.1.436 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 176.420025][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.420045][ T7226] Call Trace: [ 176.420056][ T7226] [ 176.420068][ T7226] dump_stack_lvl+0x16c/0x1f0 [ 176.420106][ T7226] should_fail_ex+0x512/0x640 [ 176.420147][ T7226] get_futex_key+0x1d0/0x1540 [ 176.420191][ T7226] ? __pfx_get_futex_key+0x10/0x10 [ 176.420233][ T7226] ? __pfx_proc_fill_cache+0x10/0x10 [ 176.420277][ T7226] futex_wake+0xe7/0x4e0 [ 176.420328][ T7226] ? __pfx_futex_wake+0x10/0x10 [ 176.420375][ T7226] ? __x64_sys_getdents+0x1a0/0x2b0 [ 176.420431][ T7226] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 176.420473][ T7226] do_futex+0x1e3/0x350 [ 176.420515][ T7226] ? __pfx_do_futex+0x10/0x10 [ 176.420552][ T7226] ? __might_fault+0xe3/0x190 [ 176.420596][ T7226] __x64_sys_futex+0x1e0/0x4c0 [ 176.420639][ T7226] ? __pfx___x64_sys_getdents+0x10/0x10 [ 176.420687][ T7226] ? __x64_sys_openat+0x174/0x210 [ 176.420732][ T7226] ? __pfx___x64_sys_futex+0x10/0x10 [ 176.420790][ T7226] do_syscall_64+0xcd/0x490 [ 176.420828][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.420861][ T7226] RIP: 0033:0x7f32bbf8e9a9 [ 176.420886][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.420928][ T7226] RSP: 002b:00007f32bce480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 176.420959][ T7226] RAX: ffffffffffffffda RBX: 00007f32bc1b5fa8 RCX: 00007f32bbf8e9a9 [ 176.420982][ T7226] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f32bc1b5fac [ 176.421006][ T7226] RBP: 00007f32bc1b5fa0 R08: 00007f32bce49000 R09: 0000000000000000 [ 176.421027][ T7226] R10: 00000000000003f0 R11: 0000000000000246 R12: 00007f32bc1b5fac [ 176.421047][ T7226] R13: 0000000000000000 R14: 00007ffc066abc70 R15: 00007ffc066abd58 [ 176.421090][ T7226] [ 177.886738][ T7246] netlink: 25 bytes leftover after parsing attributes in process `syz.2.443'. [ 178.381802][ T7252] random: crng reseeded on system resumption [ 179.832590][ T7267] FAULT_INJECTION: forcing a failure. [ 179.832590][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 179.849668][ T7267] CPU: 0 UID: 0 PID: 7267 Comm: syz.3.450 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 179.849713][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.849733][ T7267] Call Trace: [ 179.849743][ T7267] [ 179.849755][ T7267] dump_stack_lvl+0x16c/0x1f0 [ 179.849793][ T7267] should_fail_ex+0x512/0x640 [ 179.849825][ T7267] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 179.849865][ T7267] should_failslab+0xc2/0x120 [ 179.849910][ T7267] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 179.849946][ T7267] ? __d_alloc+0x31/0xaa0 [ 179.849986][ T7267] __d_alloc+0x31/0xaa0 [ 179.850024][ T7267] d_alloc_pseudo+0x1c/0xc0 [ 179.850066][ T7267] alloc_file_pseudo+0xcf/0x230 [ 179.850111][ T7267] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 179.850155][ T7267] ? _raw_spin_unlock+0x28/0x50 [ 179.850204][ T7267] ? alloc_fd+0x471/0x7d0 [ 179.850276][ T7267] __anon_inode_getfile+0xe8/0x280 [ 179.850336][ T7267] anon_inode_getfd+0x52/0xb0 [ 179.850393][ T7267] map_create+0xb68/0x1db0 [ 179.850451][ T7267] ? __pfx_map_create+0x10/0x10 [ 179.850491][ T7267] ? __might_fault+0xe3/0x190 [ 179.850516][ T7267] ? __might_fault+0xe3/0x190 [ 179.850542][ T7267] ? __might_fault+0x13b/0x190 [ 179.850594][ T7267] __sys_bpf+0x4d8d/0x4ea0 [ 179.850616][ T7267] ? __pfx_futex_wake+0x10/0x10 [ 179.850666][ T7267] ? __pfx___sys_bpf+0x10/0x10 [ 179.850694][ T7267] ? ksys_write+0x190/0x250 [ 179.850730][ T7267] ? do_futex+0x122/0x350 [ 179.850769][ T7267] ? __pfx_do_futex+0x10/0x10 [ 179.850825][ T7267] ? fput+0x70/0xf0 [ 179.850861][ T7267] ? xfd_validate_state+0x61/0x180 [ 179.850910][ T7267] ? __pfx_ksys_write+0x10/0x10 [ 179.850965][ T7267] __x64_sys_bpf+0x78/0xc0 [ 179.850995][ T7267] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.851027][ T7267] do_syscall_64+0xcd/0x490 [ 179.851079][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.851113][ T7267] RIP: 0033:0x7fca1598e9a9 [ 179.851139][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.851172][ T7267] RSP: 002b:00007fca16881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.851203][ T7267] RAX: ffffffffffffffda RBX: 00007fca15bb5fa0 RCX: 00007fca1598e9a9 [ 179.851225][ T7267] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 179.851245][ T7267] RBP: 00007fca15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 179.851266][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.851286][ T7267] R13: 0000000000000000 R14: 00007fca15bb5fa0 R15: 00007ffd9145b908 [ 179.851328][ T7267] [ 180.698893][ T30] audit: type=1800 audit(6048627055.726:8): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.453" name="members" dev="configfs" ino=13260 res=0 errno=0 [ 181.522981][ T7293] __vm_enough_memory: pid: 7293, comm: syz.0.455, bytes: 4398046511104 not enough memory for the allocation [ 181.907416][ T7296] ptrace attach of "./syz-executor exec"[5850] was attempted by ""[7296] [ 183.739597][ T7319] mkiss: ax0: crc mode is auto. [ 183.911319][ T7324] FAULT_INJECTION: forcing a failure. [ 183.911319][ T7324] name failslab, interval 1, probability 0, space 0, times 0 [ 183.950789][ T7324] CPU: 1 UID: 0 PID: 7324 Comm: syz.2.467 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 183.950838][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.950859][ T7324] Call Trace: [ 183.950870][ T7324] [ 183.950886][ T7324] dump_stack_lvl+0x16c/0x1f0 [ 183.950926][ T7324] should_fail_ex+0x512/0x640 [ 183.950961][ T7324] ? fs_reclaim_acquire+0xae/0x150 [ 183.951013][ T7324] should_failslab+0xc2/0x120 [ 183.951053][ T7324] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 183.951089][ T7324] ? security_inode_alloc+0x3b/0x2b0 [ 183.951141][ T7324] security_inode_alloc+0x3b/0x2b0 [ 183.951189][ T7324] inode_init_always_gfp+0xce4/0x1030 [ 183.951253][ T7324] alloc_inode+0x86/0x240 [ 183.951297][ T7324] iget_locked+0x2e4/0x830 [ 183.951345][ T7324] ? __pfx_iget_locked+0x10/0x10 [ 183.951392][ T7324] ? find_held_lock+0x2b/0x80 [ 183.951429][ T7324] ? kernfs_root+0xee/0x2a0 [ 183.951468][ T7324] kernfs_get_inode+0x48/0x460 [ 183.951524][ T7324] kernfs_iop_lookup+0x1a7/0x2d0 [ 183.951559][ T7324] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 183.951605][ T7324] lookup_open.isra.0+0x4da/0x1580 [ 183.951668][ T7324] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 183.951743][ T7324] ? __pfx_down_write+0x10/0x10 [ 183.951781][ T7324] ? mnt_get_write_access+0x20c/0x300 [ 183.951837][ T7324] path_openat+0x893/0x2cb0 [ 183.951887][ T7324] ? __pfx_path_openat+0x10/0x10 [ 183.951921][ T7324] ? __lock_acquire+0xb8a/0x1c90 [ 183.951976][ T7324] do_filp_open+0x20b/0x470 [ 183.952010][ T7324] ? __pfx_do_filp_open+0x10/0x10 [ 183.952079][ T7324] ? alloc_fd+0x471/0x7d0 [ 183.952146][ T7324] do_sys_openat2+0x11b/0x1d0 [ 183.952191][ T7324] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.952255][ T7324] __x64_sys_openat+0x174/0x210 [ 183.952302][ T7324] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.952366][ T7324] do_syscall_64+0xcd/0x490 [ 183.952406][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.952441][ T7324] RIP: 0033:0x7fd073d8e9a9 [ 183.952468][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.952500][ T7324] RSP: 002b:00007fd074be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.952531][ T7324] RAX: ffffffffffffffda RBX: 00007fd073fb5fa0 RCX: 00007fd073d8e9a9 [ 183.952553][ T7324] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 183.952575][ T7324] RBP: 00007fd073e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 183.952605][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.952629][ T7324] R13: 0000000000000000 R14: 00007fd073fb5fa0 R15: 00007ffd2ffce508 [ 183.952672][ T7324] [ 184.512142][ T7327] binder: 7326:7327 ioctl c018620c 0 returned -1 [ 184.569024][ T7328] can0: slcan on ttyS2. [ 184.632087][ T7327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'. [ 184.655342][ T7331] can0 (unregistered): slcan off ttyS2. [ 185.227972][ T7345] Invalid ELF header magic: != ELF [ 187.218440][ T7375] FAULT_INJECTION: forcing a failure. [ 187.218440][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 187.242973][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 187.279575][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.0.480 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 187.279618][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.279636][ T7375] Call Trace: [ 187.279645][ T7375] [ 187.279674][ T7375] dump_stack_lvl+0x16c/0x1f0 [ 187.279711][ T7375] should_fail_ex+0x512/0x640 [ 187.279744][ T7375] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 187.279781][ T7375] should_failslab+0xc2/0x120 [ 187.279818][ T7375] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 187.279867][ T7375] ? __proc_create+0xc3/0x8c0 [ 187.279902][ T7375] ? __proc_create+0x2ce/0x8c0 [ 187.279944][ T7375] __proc_create+0x2ce/0x8c0 [ 187.279982][ T7375] ? __pfx___proc_create+0x10/0x10 [ 187.280027][ T7375] ? _raw_write_unlock+0x28/0x50 [ 187.280062][ T7375] proc_create_reg+0x7d/0x180 [ 187.280109][ T7375] proc_create_net_data+0x8e/0x1b0 [ 187.280148][ T7375] ? __pfx_proc_create_net_data+0x10/0x10 [ 187.280188][ T7375] ? __pfx_uevent_net_rcv+0x10/0x10 [ 187.280237][ T7375] ? __pfx_dev_proc_net_init+0x10/0x10 [ 187.280289][ T7375] dev_proc_net_init+0x5a/0x220 [ 187.280342][ T7375] ops_init+0x1df/0x5f0 [ 187.280383][ T7375] setup_net+0x1ff/0x510 [ 187.280425][ T7375] ? lockdep_init_map_type+0x5c/0x280 [ 187.280474][ T7375] ? __pfx_setup_net+0x10/0x10 [ 187.280516][ T7375] ? debug_mutex_init+0x37/0x70 [ 187.280555][ T7375] copy_net_ns+0x2a6/0x5f0 [ 187.280602][ T7375] create_new_namespaces+0x3ea/0xa90 [ 187.280649][ T7375] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 187.280691][ T7375] ksys_unshare+0x45b/0xa40 [ 187.280737][ T7375] ? __pfx_ksys_unshare+0x10/0x10 [ 187.280785][ T7375] ? xfd_validate_state+0x61/0x180 [ 187.280842][ T7375] __x64_sys_unshare+0x31/0x40 [ 187.280887][ T7375] do_syscall_64+0xcd/0x490 [ 187.280926][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.280969][ T7375] RIP: 0033:0x7f9e8278e9a9 [ 187.280993][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.281023][ T7375] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 187.281052][ T7375] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 187.281072][ T7375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 187.281091][ T7375] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 187.281109][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.281127][ T7375] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 187.281178][ T7375] [ 187.584162][ T7373] HfR: entered promiscuous mode [ 190.183302][ T7417] ALSA: mixer_oss: invalid OSS volume '' [ 190.264739][ T7409] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 190.287955][ T7409] netlink: 230 bytes leftover after parsing attributes in process `syz.0.488'. [ 190.355474][ T7409] team0: Port device team_slave_1 removed [ 190.552921][ T5857] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 191.335407][ T7438] netlink: 25 bytes leftover after parsing attributes in process `syz.1.496'. [ 192.512073][ T7468] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 192.600598][ T7468] FAULT_INJECTION: forcing a failure. [ 192.600598][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 192.638691][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.0.505 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 192.638746][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.638764][ T7468] Call Trace: [ 192.638773][ T7468] [ 192.638783][ T7468] dump_stack_lvl+0x16c/0x1f0 [ 192.638819][ T7468] should_fail_ex+0x512/0x640 [ 192.638847][ T7468] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 192.638896][ T7468] should_failslab+0xc2/0x120 [ 192.638929][ T7468] __kmalloc_cache_noprof+0x6a/0x3e0 [ 192.638974][ T7468] ? device_create_groups_vargs+0x8a/0x270 [ 192.639022][ T7468] device_create_groups_vargs+0x8a/0x270 [ 192.639063][ T7468] device_create_with_groups+0xf4/0x130 [ 192.639106][ T7468] ? __pfx_device_create_with_groups+0x10/0x10 [ 192.639167][ T7468] led_classdev_register_ext+0x55f/0xa10 [ 192.639212][ T7468] ? __pfx_led_classdev_register_ext+0x10/0x10 [ 192.639263][ T7468] ? __pfx_kasprintf+0x10/0x10 [ 192.639308][ T7468] ? input_open_device+0x296/0x390 [ 192.639344][ T7468] input_leds_connect+0x552/0x8e0 [ 192.639405][ T7468] input_attach_handler.isra.0+0x184/0x260 [ 192.639464][ T7468] input_register_device+0xa84/0x1130 [ 192.639519][ T7468] ? atkbd_set_device_attrs+0x864/0xa90 [ 192.639561][ T7468] atkbd_do_set_scroll+0x3a7/0x530 [ 192.639607][ T7468] ? __pfx_atkbd_do_set_scroll+0x10/0x10 [ 192.639652][ T7468] ? find_held_lock+0x2b/0x80 [ 192.639705][ T7468] ? __pfx_atkbd_do_set_scroll+0x10/0x10 [ 192.639745][ T7468] dev_attr_store+0x58/0x80 [ 192.639786][ T7468] ? __pfx_dev_attr_store+0x10/0x10 [ 192.639822][ T7468] sysfs_kf_write+0xf2/0x150 [ 192.639871][ T7468] kernfs_fop_write_iter+0x354/0x510 [ 192.639912][ T7468] ? __pfx_sysfs_kf_write+0x10/0x10 [ 192.639965][ T7468] vfs_write+0x6c4/0x1150 [ 192.639999][ T7468] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 192.640044][ T7468] ? __pfx___mutex_lock+0x10/0x10 [ 192.640077][ T7468] ? __pfx_vfs_write+0x10/0x10 [ 192.640136][ T7468] ksys_write+0x12a/0x250 [ 192.640165][ T7468] ? __pfx_ksys_write+0x10/0x10 [ 192.640207][ T7468] do_syscall_64+0xcd/0x490 [ 192.640243][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.640274][ T7468] RIP: 0033:0x7f9e8278e9a9 [ 192.640300][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.640331][ T7468] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.640359][ T7468] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 192.640381][ T7468] RDX: 0000000000000081 RSI: 00002000000001c0 RDI: 0000000000000008 [ 192.640400][ T7468] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 192.640420][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.640438][ T7468] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 192.640481][ T7468] [ 192.921814][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.952074][ T7468] input input5: failed to register LED input5::scrolllock: -12 [ 193.046905][ T7468] input: failed to attach handler leds to device input5, error: -12 [ 193.670852][ T7474] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 193.687544][ T7474] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 193.888548][ T7488] device-mapper: ioctl: Unable to rename non-existent device,  to [ 194.386316][ T30] audit: type=1804 audit(6048627069.416:9): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.509" name="/newroot/124/file0" dev="tmpfs" ino=661 res=1 errno=0 [ 194.428802][ T30] audit: type=1800 audit(6048627069.416:10): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.509" name="file0" dev="tmpfs" ino=661 res=0 errno=0 [ 195.034701][ T7504] ALSA: mixer_oss: invalid OSS volume '' [ 195.270257][ T7500] bond0: option all_slaves_active: invalid value () [ 195.331347][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 195.444414][ T7510] FAULT_INJECTION: forcing a failure. [ 195.444414][ T7510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.444469][ T7510] CPU: 1 UID: 0 PID: 7510 Comm: syz.0.513 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 195.444513][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.444533][ T7510] Call Trace: [ 195.444542][ T7510] [ 195.444553][ T7510] dump_stack_lvl+0x16c/0x1f0 [ 195.444593][ T7510] should_fail_ex+0x512/0x640 [ 195.444635][ T7510] should_fail_alloc_page+0xe7/0x130 [ 195.444679][ T7510] prepare_alloc_pages+0x3c2/0x610 [ 195.444728][ T7510] ? rcu_is_watching+0x12/0xc0 [ 195.444777][ T7510] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 195.444820][ T7510] ? rcu_is_watching+0x12/0xc0 [ 195.444856][ T7510] ? trace_mm_page_alloc+0x11f/0x1a0 [ 195.444903][ T7510] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 195.444937][ T7510] ? lockdep_hardirqs_on+0x7c/0x110 [ 195.444970][ T7510] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 195.445026][ T7510] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.445077][ T7510] ? alloc_vmap_area+0x645/0x29c0 [ 195.445119][ T7510] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 195.445167][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.445214][ T7510] ? do_syscall_64+0xcd/0x490 [ 195.445247][ T7510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.445301][ T7510] alloc_pages_bulk_noprof+0x71c/0x1410 [ 195.445337][ T7510] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.445393][ T7510] ? policy_nodemask+0xea/0x4e0 [ 195.445437][ T7510] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 195.445475][ T7510] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 195.445535][ T7510] kasan_populate_vmalloc+0xf1/0x1f0 [ 195.445600][ T7510] alloc_vmap_area+0x959/0x29c0 [ 195.445662][ T7510] ? __pfx_alloc_vmap_area+0x10/0x10 [ 195.445718][ T7510] __get_vm_area_node+0x1ca/0x330 [ 195.445784][ T7510] __vmalloc_node_range_noprof+0x271/0x14b0 [ 195.445833][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.445894][ T7510] ? __lock_acquire+0xb8a/0x1c90 [ 195.445940][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.446003][ T7510] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.446058][ T7510] ? __alloc_pages_noprof+0xb/0x1b0 [ 195.446092][ T7510] ? ___kmalloc_large_node+0x84/0x1e0 [ 195.446137][ T7510] ? find_held_lock+0x2b/0x80 [ 195.446180][ T7510] __kvmalloc_node_noprof+0x30a/0x620 [ 195.446234][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.446286][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.446349][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.446398][ T7510] __do_sys_listmount+0x1c2/0xec0 [ 195.446457][ T7510] ? __x64_sys_futex+0x1e0/0x4c0 [ 195.446498][ T7510] ? __x64_sys_futex+0x1e9/0x4c0 [ 195.446541][ T7510] ? __pfx___do_sys_listmount+0x10/0x10 [ 195.446614][ T7510] do_syscall_64+0xcd/0x490 [ 195.446653][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.446688][ T7510] RIP: 0033:0x7f9e8278e9a9 [ 195.446715][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.446758][ T7510] RSP: 002b:00007f9e83696038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 195.446792][ T7510] RAX: ffffffffffffffda RBX: 00007f9e829b6080 RCX: 00007f9e8278e9a9 [ 195.446815][ T7510] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 195.446836][ T7510] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 195.446858][ T7510] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 195.446878][ T7510] R13: 0000000000000000 R14: 00007f9e829b6080 R15: 00007ffeb1a63ea8 [ 195.446921][ T7510] [ 195.498205][ T7510] syz.0.513: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.498454][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.0.513 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 195.498508][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.498529][ T7510] Call Trace: [ 195.498540][ T7510] [ 195.498552][ T7510] dump_stack_lvl+0x16c/0x1f0 [ 195.498591][ T7510] warn_alloc+0x248/0x3a0 [ 195.498628][ T7510] ? __pfx_warn_alloc+0x10/0x10 [ 195.498666][ T7510] ? kfree+0x2b4/0x4d0 [ 195.498726][ T7510] ? __get_vm_area_node+0x208/0x330 [ 195.498784][ T7510] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 195.498848][ T7510] ? __lock_acquire+0xb8a/0x1c90 [ 195.498893][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.498956][ T7510] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.499011][ T7510] ? __alloc_pages_noprof+0xb/0x1b0 [ 195.499045][ T7510] ? ___kmalloc_large_node+0x84/0x1e0 [ 195.499090][ T7510] ? find_held_lock+0x2b/0x80 [ 195.499134][ T7510] __kvmalloc_node_noprof+0x30a/0x620 [ 195.499191][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.499244][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.499303][ T7510] ? __do_sys_listmount+0x1c2/0xec0 [ 195.499352][ T7510] __do_sys_listmount+0x1c2/0xec0 [ 195.499413][ T7510] ? __x64_sys_futex+0x1e0/0x4c0 [ 195.499452][ T7510] ? __x64_sys_futex+0x1e9/0x4c0 [ 195.499502][ T7510] ? __pfx___do_sys_listmount+0x10/0x10 [ 195.499574][ T7510] do_syscall_64+0xcd/0x490 [ 195.499611][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.499645][ T7510] RIP: 0033:0x7f9e8278e9a9 [ 195.499672][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.499704][ T7510] RSP: 002b:00007f9e83696038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 195.499735][ T7510] RAX: ffffffffffffffda RBX: 00007f9e829b6080 RCX: 00007f9e8278e9a9 [ 195.499757][ T7510] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 195.499777][ T7510] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 195.499798][ T7510] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 195.499817][ T7510] R13: 0000000000000000 R14: 00007f9e829b6080 R15: 00007ffeb1a63ea8 [ 195.499857][ T7510] [ 195.500507][ T7510] Mem-Info: [ 195.500530][ T7510] active_anon:7174 inactive_anon:1 isolated_anon:0 [ 195.500530][ T7510] active_file:17475 inactive_file:43007 isolated_file:0 [ 195.500530][ T7510] unevictable:768 dirty:717 writeback:0 [ 195.500530][ T7510] slab_reclaimable:10520 slab_unreclaimable:93065 [ 195.500530][ T7510] mapped:26506 shmem:1422 pagetables:1105 [ 195.500530][ T7510] sec_pagetables:0 bounce:0 [ 195.500530][ T7510] kernel_misc_reclaimable:0 [ 195.500530][ T7510] free:806212 free_pcp:7198 free_cma:0 [ 195.500623][ T7510] Node 0 active_anon:28696kB inactive_anon:4kB active_file:69900kB inactive_file:171828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106024kB dirty:2864kB writeback:0kB shmem:4152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11476kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.500718][ T7510] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.500817][ T7510] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.500913][ T7510] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 195.500977][ T7510] Node 0 DMA32 free:1386516kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28648kB inactive_anon:4kB active_file:69900kB inactive_file:170504kB unevictable:1536kB writepending:2864kB present:3129332kB managed:2540444kB mlocked:0kB bounce:0kB free_pcp:28016kB local_pcp:18796kB free_cma:0kB [ 195.501074][ T7510] lowmem_reserve[]: 0 0 1 1 1 [ 195.501135][ T7510] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.501227][ T7510] lowmem_reserve[]: 0 0 0 0 0 [ 195.501287][ T7510] Node 1 Normal free:1822956kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:772kB local_pcp:0kB free_cma:0kB [ 195.501376][ T7510] lowmem_reserve[]: 0 0 0 0 0 [ 195.502802][ T7510] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 195.502982][ T7510] Node 0 DMA32: 1698*4kB (UM) 1427*8kB (UME) 1030*16kB (UM) 887*32kB (UM) 654*64kB (UM) 248*128kB (ME) 118*256kB (M) 58*512kB (ME) 30*1024kB (ME) 16*2048kB (ME) 275*4096kB (UM) = 1386464kB [ 195.503219][ T7510] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 195.503393][ T7510] Node 1 Normal: 195*4kB (UME) 62*8kB (UME) 51*16kB (UME) 250*32kB (UME) 94*64kB (UME) 32*128kB (UME) 16*256kB (UME) 1*512kB (M) 4*1024kB (UME) 2*2048kB (UE) 437*4096kB (UM) = 1822956kB [ 195.503669][ T7510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.503695][ T7510] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 195.503719][ T7510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.509768][ T7510] Node 1 hugepages_total=1026 hugepages_free=1026 hugepages_surp=0 hugepages_size=2048kB [ 195.509799][ T7510] 61883 total pagecache pages [ 195.509813][ T7510] 1 pages in swap cache [ 195.509825][ T7510] Free swap = 124976kB [ 195.509837][ T7510] Total swap = 124996kB [ 195.509852][ T7510] 2097051 pages RAM [ 195.509864][ T7510] 0 pages HighMem/MovableOnly [ 195.509876][ T7510] 429962 pages reserved [ 195.509889][ T7510] 0 pages cma reserved [ 195.725335][ T30] audit: type=1800 audit(6048627070.746:11): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.516" name="members" dev="configfs" ino=15489 res=0 errno=0 [ 198.257518][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.519'. [ 198.285148][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.326205][ T7539] bridge_slave_1 (unregistering): left allmulticast mode [ 198.351174][ T7539] bridge_slave_1 (unregistering): left promiscuous mode [ 198.352119][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.736690][ T7549] netlink: 25 bytes leftover after parsing attributes in process `syz.2.522'. [ 199.330092][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.336607][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.761470][ T7565] ALSA: mixer_oss: invalid OSS volume '' [ 200.739157][ T7571] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 200.748166][ T7571] netlink: 230 bytes leftover after parsing attributes in process `syz.2.528'. [ 200.828057][ T7571] team0: Port device team_slave_1 removed [ 203.138734][ T7610] FAULT_INJECTION: forcing a failure. [ 203.138734][ T7610] name failslab, interval 1, probability 0, space 0, times 0 [ 203.181222][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: syz.0.541 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 203.181266][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.181285][ T7610] Call Trace: [ 203.181296][ T7610] [ 203.181308][ T7610] dump_stack_lvl+0x16c/0x1f0 [ 203.181346][ T7610] should_fail_ex+0x512/0x640 [ 203.181377][ T7610] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 203.181429][ T7610] should_failslab+0xc2/0x120 [ 203.181466][ T7610] __kmalloc_cache_noprof+0x6a/0x3e0 [ 203.181515][ T7610] ? single_open+0x4d/0x1f0 [ 203.181557][ T7610] ? __pfx_show_smaps_rollup+0x10/0x10 [ 203.181601][ T7610] single_open+0x4d/0x1f0 [ 203.181656][ T7610] smaps_rollup_open+0x6f/0x170 [ 203.181705][ T7610] do_dentry_open+0x744/0x1c10 [ 203.181739][ T7610] ? __pfx_smaps_rollup_open+0x10/0x10 [ 203.181794][ T7610] vfs_open+0x82/0x3f0 [ 203.181841][ T7610] path_openat+0x1de4/0x2cb0 [ 203.181886][ T7610] ? __pfx_path_openat+0x10/0x10 [ 203.181922][ T7610] ? __lock_acquire+0xb8a/0x1c90 [ 203.181972][ T7610] do_filp_open+0x20b/0x470 [ 203.182005][ T7610] ? __pfx_do_filp_open+0x10/0x10 [ 203.182048][ T7610] ? __pfx_kfree_link+0x10/0x10 [ 203.182103][ T7610] ? alloc_fd+0x471/0x7d0 [ 203.182271][ T7610] do_sys_openat2+0x11b/0x1d0 [ 203.182320][ T7610] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.182382][ T7610] __x64_sys_openat+0x174/0x210 [ 203.182428][ T7610] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.182489][ T7610] do_syscall_64+0xcd/0x490 [ 203.182530][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.182568][ T7610] RIP: 0033:0x7f9e8278e9a9 [ 203.182594][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.182633][ T7610] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.182665][ T7610] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 203.182687][ T7610] RDX: 00000000001a3000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 203.182708][ T7610] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 203.182728][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.182748][ T7610] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 203.182789][ T7610] [ 203.415005][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.731660][ T7615] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 204.444748][ T7623] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 204.848310][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 204.892879][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'. [ 204.925978][ T7628] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.063557][ T7628] bridge_slave_1 (unregistering): left allmulticast mode [ 205.077330][ T7628] bridge_slave_1 (unregistering): left promiscuous mode [ 205.099702][ T7628] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.482273][ T5168] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 206.474011][ T7649] ubi0: attaching mtd0 [ 206.485759][ T7649] ubi0: scanning is finished [ 206.521931][ T7649] ubi0: empty MTD device detected [ 206.965405][ T7649] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 207.097509][ T7649] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 207.180973][ T7649] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 207.319605][ T7649] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 207.327168][ T7649] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 207.499638][ T7649] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 207.552305][ T7649] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 931746877 [ 207.620320][ T7649] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 207.676248][ T7669] FAULT_INJECTION: forcing a failure. [ 207.676248][ T7669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.676296][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.1.554 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 207.676324][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.676338][ T7669] Call Trace: [ 207.676345][ T7669] [ 207.676354][ T7669] dump_stack_lvl+0x16c/0x1f0 [ 207.676381][ T7669] should_fail_ex+0x512/0x640 [ 207.676410][ T7669] should_fail_alloc_page+0xe7/0x130 [ 207.676439][ T7669] prepare_alloc_pages+0x3c2/0x610 [ 207.676476][ T7669] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 207.676506][ T7669] ? stack_trace_save+0x8e/0xc0 [ 207.676541][ T7669] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 207.676570][ T7669] ? fb_var_to_videomode+0x4c9/0x690 [ 207.676606][ T7669] ? __pfx_fb_match_mode+0x10/0x10 [ 207.676639][ T7669] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 207.676687][ T7669] ? vc_allocate+0x489/0x880 [ 207.676727][ T7669] __alloc_pages_noprof+0xb/0x1b0 [ 207.676751][ T7669] ___kmalloc_large_node+0x84/0x1e0 [ 207.676794][ T7669] ? vc_allocate+0x489/0x880 [ 207.676817][ T7669] __kmalloc_large_node_noprof+0x1c/0x70 [ 207.676862][ T7669] __kmalloc_noprof.cold+0xc/0x61 [ 207.676906][ T7669] vc_allocate+0x489/0x880 [ 207.676931][ T7669] ? __pfx_vc_allocate+0x10/0x10 [ 207.676966][ T7669] con_install+0xa1/0x600 [ 207.676994][ T7669] ? __pfx_con_install+0x10/0x10 [ 207.677025][ T7669] ? __pfx_con_install+0x10/0x10 [ 207.677052][ T7669] tty_init_dev.part.0+0x99/0x500 [ 207.677085][ T7669] tty_open+0xa50/0xf90 [ 207.677119][ T7669] ? __pfx_tty_open+0x10/0x10 [ 207.677148][ T7669] ? chrdev_open+0x58c/0x6a0 [ 207.677178][ T7669] ? __pfx_tty_open+0x10/0x10 [ 207.677206][ T7669] chrdev_open+0x231/0x6a0 [ 207.677233][ T7669] ? __pfx_chrdev_open+0x10/0x10 [ 207.677261][ T7669] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 207.677305][ T7669] do_dentry_open+0x744/0x1c10 [ 207.677330][ T7669] ? __pfx_chrdev_open+0x10/0x10 [ 207.677361][ T7669] vfs_open+0x82/0x3f0 [ 207.677396][ T7669] path_openat+0x1de4/0x2cb0 [ 207.677429][ T7669] ? __pfx_path_openat+0x10/0x10 [ 207.677454][ T7669] ? __lock_acquire+0xb8a/0x1c90 [ 207.677490][ T7669] do_filp_open+0x20b/0x470 [ 207.677514][ T7669] ? __pfx_do_filp_open+0x10/0x10 [ 207.677559][ T7669] ? alloc_fd+0x471/0x7d0 [ 207.677605][ T7669] do_sys_openat2+0x11b/0x1d0 [ 207.677637][ T7669] ? __pfx_do_sys_openat2+0x10/0x10 [ 207.677681][ T7669] __x64_sys_openat+0x174/0x210 [ 207.677714][ T7669] ? __pfx___x64_sys_openat+0x10/0x10 [ 207.677760][ T7669] do_syscall_64+0xcd/0x490 [ 207.677787][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.677811][ T7669] RIP: 0033:0x7f32bbf8e9a9 [ 207.677835][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.677859][ T7669] RSP: 002b:00007f32bce27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 207.677881][ T7669] RAX: ffffffffffffffda RBX: 00007f32bc1b6080 RCX: 00007f32bbf8e9a9 [ 207.677897][ T7669] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 207.677924][ T7669] RBP: 00007f32bc010d69 R08: 0000000000000000 R09: 0000000000000000 [ 207.677939][ T7669] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 207.677953][ T7669] R13: 0000000000000000 R14: 00007f32bc1b6080 R15: 00007ffc066abd58 [ 207.677982][ T7669] [ 207.732097][ T7658] ubi0: background thread "ubi_bgt0d" started, PID 7658 [ 208.959775][ T7679] ima: policy update failed [ 208.964546][ T30] audit: type=1802 audit(6048627083.996:12): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.557" res=0 errno=0 [ 209.004751][ T7679] netlink: 25 bytes leftover after parsing attributes in process `syz.0.557'. [ 210.011710][ T7695] block nbd9: NBD_DISCONNECT [ 210.411337][ T7692] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 210.419296][ T7692] netlink: 230 bytes leftover after parsing attributes in process `syz.3.559'. [ 210.633460][ T7692] team0: Port device team_slave_1 removed [ 212.639701][ T7722] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 212.971229][ T7733] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 214.798028][ T7740] FAULT_INJECTION: forcing a failure. [ 214.798028][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 214.838830][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.3.570 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 214.838876][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.838895][ T7740] Call Trace: [ 214.838905][ T7740] [ 214.838917][ T7740] dump_stack_lvl+0x16c/0x1f0 [ 214.838955][ T7740] should_fail_ex+0x512/0x640 [ 214.838987][ T7740] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 214.839026][ T7740] should_failslab+0xc2/0x120 [ 214.839063][ T7740] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 214.839098][ T7740] ? __d_alloc+0x31/0xaa0 [ 214.839137][ T7740] __d_alloc+0x31/0xaa0 [ 214.839175][ T7740] d_alloc+0x4a/0x1e0 [ 214.839210][ T7740] d_alloc_parallel+0xe3/0x12e0 [ 214.839263][ T7740] ? find_held_lock+0x2b/0x80 [ 214.839298][ T7740] ? __pfx_d_alloc_parallel+0x10/0x10 [ 214.839353][ T7740] ? __d_lookup+0x266/0x4a0 [ 214.839408][ T7740] lookup_open.isra.0+0x665/0x1580 [ 214.839461][ T7740] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 214.839530][ T7740] ? mnt_get_write_access+0x20c/0x300 [ 214.839577][ T7740] path_openat+0x893/0x2cb0 [ 214.839640][ T7740] ? __pfx_path_openat+0x10/0x10 [ 214.839671][ T7740] ? __lock_acquire+0xb8a/0x1c90 [ 214.839718][ T7740] do_filp_open+0x20b/0x470 [ 214.839747][ T7740] ? __pfx_do_filp_open+0x10/0x10 [ 214.839790][ T7740] ? __pfx_kfree_link+0x10/0x10 [ 214.839840][ T7740] ? alloc_fd+0x471/0x7d0 [ 214.839897][ T7740] do_sys_openat2+0x11b/0x1d0 [ 214.839939][ T7740] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.839991][ T7740] ? find_held_lock+0x2b/0x80 [ 214.840030][ T7740] __x64_sys_openat+0x174/0x210 [ 214.840070][ T7740] ? __pfx___x64_sys_openat+0x10/0x10 [ 214.840125][ T7740] do_syscall_64+0xcd/0x490 [ 214.840158][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.840187][ T7740] RIP: 0033:0x7fca1598d310 [ 214.840210][ T7740] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 214.840239][ T7740] RSP: 002b:00007fca16880f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 214.840266][ T7740] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fca1598d310 [ 214.840283][ T7740] RDX: 0000000000000002 RSI: 00007fca16880fa0 RDI: 00000000ffffff9c [ 214.840301][ T7740] RBP: 00007fca16880fa0 R08: 0000000000000000 R09: 0000000000000000 [ 214.840327][ T7740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 214.840344][ T7740] R13: 0000000000000000 R14: 00007fca15bb5fa0 R15: 00007ffd9145b908 [ 214.840382][ T7740] [ 215.718268][ T7751] FAULT_INJECTION: forcing a failure. [ 215.718268][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 215.755538][ T7751] CPU: 1 UID: 0 PID: 7751 Comm: syz.3.574 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 215.755584][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.755603][ T7751] Call Trace: [ 215.755614][ T7751] [ 215.755626][ T7751] dump_stack_lvl+0x16c/0x1f0 [ 215.755663][ T7751] should_fail_ex+0x512/0x640 [ 215.755697][ T7751] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 215.755736][ T7751] should_failslab+0xc2/0x120 [ 215.755776][ T7751] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 215.755811][ T7751] ? security_file_alloc+0x34/0x2b0 [ 215.755869][ T7751] security_file_alloc+0x34/0x2b0 [ 215.755921][ T7751] init_file+0x93/0x4c0 [ 215.755971][ T7751] alloc_empty_file+0x73/0x1e0 [ 215.756014][ T7751] alloc_file_pseudo+0x13a/0x230 [ 215.756059][ T7751] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 215.756104][ T7751] ? _raw_spin_unlock+0x28/0x50 [ 215.756151][ T7751] ? alloc_fd+0x471/0x7d0 [ 215.756206][ T7751] __anon_inode_getfile+0xe8/0x280 [ 215.756266][ T7751] anon_inode_getfd+0x52/0xb0 [ 215.756324][ T7751] __x64_sys_fsopen+0x18b/0x240 [ 215.756366][ T7751] do_syscall_64+0xcd/0x490 [ 215.756403][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.756438][ T7751] RIP: 0033:0x7fca1598e9a9 [ 215.756463][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.756496][ T7751] RSP: 002b:00007fca16860038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 215.756527][ T7751] RAX: ffffffffffffffda RBX: 00007fca15bb6080 RCX: 00007fca1598e9a9 [ 215.756549][ T7751] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 215.756569][ T7751] RBP: 00007fca15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 215.756590][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.756610][ T7751] R13: 0000000000000000 R14: 00007fca15bb6080 R15: 00007ffd9145b908 [ 215.756651][ T7751] [ 216.568694][ T7767] block nbd9: NBD_DISCONNECT [ 218.852759][ T7790] FAULT_INJECTION: forcing a failure. [ 218.852759][ T7790] name failslab, interval 1, probability 0, space 0, times 0 [ 218.909758][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.0.591 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 218.909808][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.909829][ T7790] Call Trace: [ 218.909839][ T7790] [ 218.909852][ T7790] dump_stack_lvl+0x16c/0x1f0 [ 218.909893][ T7790] should_fail_ex+0x512/0x640 [ 218.909927][ T7790] ? fs_reclaim_acquire+0xae/0x150 [ 218.909987][ T7790] ? tomoyo_encode2+0x100/0x3e0 [ 218.910018][ T7790] should_failslab+0xc2/0x120 [ 218.910058][ T7790] __kmalloc_noprof+0xd2/0x510 [ 218.910101][ T7790] tomoyo_encode2+0x100/0x3e0 [ 218.910138][ T7790] tomoyo_encode+0x29/0x50 [ 218.910167][ T7790] tomoyo_realpath_from_path+0x18f/0x6e0 [ 218.910213][ T7790] tomoyo_check_open_permission+0x2ab/0x3c0 [ 218.910264][ T7790] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 218.910356][ T7790] ? do_raw_spin_lock+0x12c/0x2b0 [ 218.910422][ T7790] tomoyo_file_open+0x6b/0x90 [ 218.910474][ T7790] security_file_open+0x84/0x1e0 [ 218.910525][ T7790] do_dentry_open+0x596/0x1c10 [ 218.910569][ T7790] vfs_open+0x82/0x3f0 [ 218.910614][ T7790] path_openat+0x1de4/0x2cb0 [ 218.910658][ T7790] ? __pfx_path_openat+0x10/0x10 [ 218.910691][ T7790] ? __lock_acquire+0xb8a/0x1c90 [ 218.910739][ T7790] do_filp_open+0x20b/0x470 [ 218.910770][ T7790] ? __pfx_do_filp_open+0x10/0x10 [ 218.910836][ T7790] ? alloc_fd+0x471/0x7d0 [ 218.910911][ T7790] do_sys_openat2+0x11b/0x1d0 [ 218.910967][ T7790] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.911022][ T7790] __x64_sys_openat+0x174/0x210 [ 218.911064][ T7790] ? __pfx___x64_sys_openat+0x10/0x10 [ 218.911119][ T7790] do_syscall_64+0xcd/0x490 [ 218.911154][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.911184][ T7790] RIP: 0033:0x7f9e8278e9a9 [ 218.911207][ T7790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.911235][ T7790] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.911262][ T7790] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 218.911282][ T7790] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 218.911301][ T7790] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 218.911319][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.911336][ T7790] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 218.911373][ T7790] [ 218.911400][ T7790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.884522][ T7807] Bluetooth: hci3: command 0x0406 tx timeout [ 221.890818][ T7806] Bluetooth: hci0: command 0x0406 tx timeout [ 221.892404][ T7807] Bluetooth: hci2: command 0x0406 tx timeout [ 224.097221][ T7841] FAULT_INJECTION: forcing a failure. [ 224.097221][ T7841] name failslab, interval 1, probability 0, space 0, times 0 [ 224.110550][ T7841] CPU: 0 UID: 0 PID: 7841 Comm: syz.1.595 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 224.110605][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.110626][ T7841] Call Trace: [ 224.110636][ T7841] [ 224.110649][ T7841] dump_stack_lvl+0x16c/0x1f0 [ 224.110690][ T7841] should_fail_ex+0x512/0x640 [ 224.110724][ T7841] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 224.110784][ T7841] should_failslab+0xc2/0x120 [ 224.110824][ T7841] __kmalloc_cache_noprof+0x6a/0x3e0 [ 224.110875][ T7841] ? drm_atomic_helper_setup_commit+0x73c/0x15d0 [ 224.110917][ T7841] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 224.110967][ T7841] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 224.111027][ T7841] drm_atomic_helper_commit+0xa9/0x380 [ 224.111069][ T7841] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 224.111114][ T7841] drm_atomic_commit+0x234/0x300 [ 224.111159][ T7841] ? __pfx_drm_atomic_commit+0x10/0x10 [ 224.111203][ T7841] ? __pfx___drm_printfn_info+0x10/0x10 [ 224.111264][ T7841] ? drm_client_rotation+0x4da/0x6a0 [ 224.111316][ T7841] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 224.111378][ T7841] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 224.111468][ T7841] drm_client_modeset_commit_locked+0x14d/0x580 [ 224.111523][ T7841] drm_client_modeset_commit+0x4f/0x80 [ 224.111579][ T7841] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 224.111625][ T7841] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 224.111694][ T7841] drm_fbdev_client_restore+0x2c/0x40 [ 224.111764][ T7841] drm_client_dev_restore+0x1f3/0x2a0 [ 224.111816][ T7841] drm_release+0x2c4/0x360 [ 224.111861][ T7841] ? __pfx_drm_release+0x10/0x10 [ 224.111900][ T7841] __fput+0x402/0xb70 [ 224.111951][ T7841] task_work_run+0x14d/0x240 [ 224.112007][ T7841] ? __pfx_task_work_run+0x10/0x10 [ 224.112061][ T7841] ? __pfx___do_sys_close_range+0x10/0x10 [ 224.112105][ T7841] exit_to_user_mode_loop+0xeb/0x110 [ 224.112161][ T7841] do_syscall_64+0x3f6/0x490 [ 224.112200][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.112234][ T7841] RIP: 0033:0x7f32bbf8e9a9 [ 224.112260][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.112293][ T7841] RSP: 002b:00007f32bce48038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 224.112324][ T7841] RAX: 0000000000000000 RBX: 00007f32bc1b5fa0 RCX: 00007f32bbf8e9a9 [ 224.112345][ T7841] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 224.112364][ T7841] RBP: 00007f32bc010d69 R08: 0000000000000000 R09: 0000000000000000 [ 224.112384][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.112404][ T7841] R13: 0000000000000000 R14: 00007f32bc1b5fa0 R15: 00007ffc066abd58 [ 224.112448][ T7841] [ 225.481929][ T7861] tipc: Started in network mode [ 225.487147][ T7861] tipc: Node identity ee00, cluster identity 4711 [ 225.493792][ T7861] tipc: Node number set to 60928 [ 225.642495][ T7856] Process accounting resumed [ 225.826976][ T7865] FAULT_INJECTION: forcing a failure. [ 225.826976][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 225.855906][ T7865] CPU: 0 UID: 0 PID: 7865 Comm: syz.0.601 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 225.855954][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.855975][ T7865] Call Trace: [ 225.855986][ T7865] [ 225.855998][ T7865] dump_stack_lvl+0x16c/0x1f0 [ 225.856037][ T7865] should_fail_ex+0x512/0x640 [ 225.856071][ T7865] ? __kmalloc_noprof+0xbf/0x510 [ 225.856108][ T7865] ? sk_prot_alloc+0x1a8/0x2a0 [ 225.856149][ T7865] should_failslab+0xc2/0x120 [ 225.856182][ T7865] __kmalloc_noprof+0xd2/0x510 [ 225.856213][ T7865] ? evm_inode_alloc_security+0x49/0xc0 [ 225.856279][ T7865] sk_prot_alloc+0x1a8/0x2a0 [ 225.856327][ T7865] sk_alloc+0x36/0xc20 [ 225.856372][ T7865] __netlink_create+0x5e/0x2c0 [ 225.856410][ T7865] __netlink_kernel_create+0xed/0x750 [ 225.856463][ T7865] ? __pfx___netlink_kernel_create+0x10/0x10 [ 225.856517][ T7865] ? __pfx_genl_pernet_init+0x10/0x10 [ 225.856576][ T7865] genl_pernet_init+0xbd/0x170 [ 225.856623][ T7865] ? __pfx_genl_pernet_init+0x10/0x10 [ 225.856667][ T7865] ? lockdep_init_map_type+0x5c/0x280 [ 225.856733][ T7865] ? __pfx_genl_rcv+0x10/0x10 [ 225.856776][ T7865] ? __pfx_genl_bind+0x10/0x10 [ 225.856818][ T7865] ? __pfx_genl_unbind+0x10/0x10 [ 225.856860][ T7865] ? __pfx_genl_release+0x10/0x10 [ 225.856908][ T7865] ? debug_mutex_init+0x37/0x70 [ 225.856949][ T7865] ops_init+0x1df/0x5f0 [ 225.856992][ T7865] setup_net+0x1ff/0x510 [ 225.857029][ T7865] ? lockdep_init_map_type+0x5c/0x280 [ 225.857079][ T7865] ? __pfx_setup_net+0x10/0x10 [ 225.857122][ T7865] ? debug_mutex_init+0x37/0x70 [ 225.857161][ T7865] copy_net_ns+0x2a6/0x5f0 [ 225.857210][ T7865] create_new_namespaces+0x3ea/0xa90 [ 225.857259][ T7865] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 225.857304][ T7865] ksys_unshare+0x45b/0xa40 [ 225.857352][ T7865] ? __pfx_ksys_unshare+0x10/0x10 [ 225.857402][ T7865] ? xfd_validate_state+0x61/0x180 [ 225.857472][ T7865] __x64_sys_unshare+0x31/0x40 [ 225.857519][ T7865] do_syscall_64+0xcd/0x490 [ 225.857559][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.857593][ T7865] RIP: 0033:0x7f9e8278e9a9 [ 225.857621][ T7865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.857655][ T7865] RSP: 002b:00007f9e836b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 225.857690][ T7865] RAX: ffffffffffffffda RBX: 00007f9e829b5fa0 RCX: 00007f9e8278e9a9 [ 225.857713][ T7865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 225.857734][ T7865] RBP: 00007f9e82810d69 R08: 0000000000000000 R09: 0000000000000000 [ 225.857756][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.857776][ T7865] R13: 0000000000000000 R14: 00007f9e829b5fa0 R15: 00007ffeb1a63ea8 [ 225.857820][ T7865] [ 226.684629][ T7863] FAULT_INJECTION: forcing a failure. [ 226.684629][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 226.770535][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.2.600 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 226.770583][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.770604][ T7863] Call Trace: [ 226.770615][ T7863] [ 226.770629][ T7863] dump_stack_lvl+0x16c/0x1f0 [ 226.770667][ T7863] should_fail_ex+0x512/0x640 [ 226.770702][ T7863] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 226.770760][ T7863] should_failslab+0xc2/0x120 [ 226.770801][ T7863] __kmalloc_cache_noprof+0x6a/0x3e0 [ 226.770853][ T7863] ? lockdep_init_map_type+0x5c/0x280 [ 226.770904][ T7863] ? io_uring_alloc_task_context+0x96/0x650 [ 226.770949][ T7863] ? lockdep_init_map_type+0x5c/0x280 [ 226.771000][ T7863] io_uring_alloc_task_context+0x96/0x650 [ 226.771044][ T7863] ? file_init_path+0x4fe/0x760 [ 226.771088][ T7863] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 226.771143][ T7863] ? alloc_file_pseudo+0x1b3/0x230 [ 226.771194][ T7863] __io_uring_add_tctx_node+0x2dd/0x500 [ 226.771239][ T7863] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 226.771288][ T7863] ? __anon_inode_getfile+0x17c/0x280 [ 226.771349][ T7863] io_uring_setup+0x1579/0x2080 [ 226.771408][ T7863] ? __pfx_io_uring_setup+0x10/0x10 [ 226.771493][ T7863] ? xfd_validate_state+0x61/0x180 [ 226.771536][ T7863] ? __pfx___do_sys_close_range+0x10/0x10 [ 226.771581][ T7863] __x64_sys_io_uring_setup+0xc2/0x170 [ 226.771637][ T7863] do_syscall_64+0xcd/0x490 [ 226.771676][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.771710][ T7863] RIP: 0033:0x7fd073d8e9a9 [ 226.771736][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.771770][ T7863] RSP: 002b:00007fd074be5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 226.771802][ T7863] RAX: ffffffffffffffda RBX: 00007fd073fb5fa0 RCX: 00007fd073d8e9a9 [ 226.771825][ T7863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 226.771845][ T7863] RBP: 00007fd073e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 226.771865][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.771886][ T7863] R13: 0000000000000000 R14: 00007fd073fb5fa0 R15: 00007ffd2ffce508 [ 226.771930][ T7863] [ 230.072408][ T7913] warning: `syz.0.611' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 231.774554][ T7923] vivid-009: ================= START STATUS ================= [ 231.838879][ T7923] vivid-009: Enable Output Cropping: true grabbed [ 231.889019][ T7923] vivid-009: Enable Output Composing: true grabbed [ 231.938403][ T7923] vivid-009: Enable Output Scaler: true grabbed [ 231.957506][ T7923] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 232.049683][ T7923] vivid-009: Transmit Mode: HDMI grabbed [ 232.097580][ T7923] vivid-009: Hotplug Present: 0x00000000 [ 232.163757][ T7923] vivid-009: RxSense Present: 0x00000000 [ 232.324923][ T7923] vivid-009: EDID Present: 0x00000000 [ 232.330744][ T7929] block nbd7: not configured, cannot reconfigure [ 232.409706][ T7923] vivid-009: ================== END STATUS ================== [ 233.831272][ T30] audit: type=1804 audit(6048627237.863:13): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.617" name="/newroot/149/file0" dev="tmpfs" ino=793 res=1 errno=0 [ 235.719792][ T7972] netlink: 13 bytes leftover after parsing attributes in process `syz.1.622'. [ 237.516975][ T7994] tipc: Started in network mode [ 237.761833][ T7994] tipc: Node identity ee00, cluster identity 4711 [ 237.813424][ T7994] tipc: Node number set to 60928 [ 238.131908][ T7993] Process accounting resumed [ 240.793483][ T8019] FAULT_INJECTION: forcing a failure. [ 240.793483][ T8019] name failslab, interval 1, probability 0, space 0, times 0 [ 240.806797][ T8019] CPU: 0 UID: 0 PID: 8019 Comm: syz.2.632 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 240.806831][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.806846][ T8019] Call Trace: [ 240.806853][ T8019] [ 240.806862][ T8019] dump_stack_lvl+0x16c/0x1f0 [ 240.806891][ T8019] should_fail_ex+0x512/0x640 [ 240.806915][ T8019] ? fs_reclaim_acquire+0xae/0x150 [ 240.806951][ T8019] should_failslab+0xc2/0x120 [ 240.806980][ T8019] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 240.807005][ T8019] ? security_inode_alloc+0x3b/0x2b0 [ 240.807042][ T8019] security_inode_alloc+0x3b/0x2b0 [ 240.807082][ T8019] inode_init_always_gfp+0xce4/0x1030 [ 240.807128][ T8019] alloc_inode+0x86/0x240 [ 240.807158][ T8019] sock_alloc+0x40/0x280 [ 240.807187][ T8019] __sock_create+0xc1/0x8d0 [ 240.807226][ T8019] __sys_socketpair+0x1d8/0x5a0 [ 240.807263][ T8019] ? __pfx___sys_socketpair+0x10/0x10 [ 240.807297][ T8019] ? __sys_socket+0xac/0x260 [ 240.807335][ T8019] ? xfd_validate_state+0x61/0x180 [ 240.807374][ T8019] __x64_sys_socketpair+0x96/0x100 [ 240.807409][ T8019] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.807432][ T8019] do_syscall_64+0xcd/0x490 [ 240.807458][ T8019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.807482][ T8019] RIP: 0033:0x7fd073d8e9a9 [ 240.807500][ T8019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.807524][ T8019] RSP: 002b:00007fd074be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 240.807546][ T8019] RAX: ffffffffffffffda RBX: 00007fd073fb5fa0 RCX: 00007fd073d8e9a9 [ 240.807562][ T8019] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 240.807576][ T8019] RBP: 00007fd073e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 240.807591][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.807605][ T8019] R13: 0000000000000000 R14: 00007fd073fb5fa0 R15: 00007ffd2ffce508 [ 240.807634][ T8019] [ 240.807664][ T8019] socket: no more sockets [ 246.285648][ T8097] input: jJǸ-9%vJ86 as /devices/virtual/input/input8 [ 248.784276][ T8119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.802873][ T8119] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 248.840779][ T8119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.849849][ T8119] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 248.872175][ T8119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.890634][ T8119] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 249.935789][ T8141] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 250.679572][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 250.919638][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 250.927193][ T5168] Bluetooth: hci2: command 0x0406 tx timeout [ 252.029367][ T8170] input: jJǸ-9%vJ86 as /devices/virtual/input/input9 [ 252.809504][ T5168] Bluetooth: hci0: command 0x0406 tx timeout [ 253.009712][ T5168] Bluetooth: hci3: command 0x0406 tx timeout [ 253.015896][ T5168] Bluetooth: hci2: command 0x0406 tx timeout [ 253.075276][ T5848] udevd[5848]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 254.660784][ T8186] Invalid ELF header magic: != ELF [ 254.769585][ T5849] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 256.224463][ T8195] Process accounting paused [ 258.124669][ T8234] FAULT_INJECTION: forcing a failure. [ 258.124669][ T8234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.138594][ T8234] CPU: 1 UID: 0 PID: 8234 Comm: syz.2.671 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 258.138635][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.138654][ T8234] Call Trace: [ 258.138663][ T8234] [ 258.138674][ T8234] dump_stack_lvl+0x16c/0x1f0 [ 258.138709][ T8234] should_fail_ex+0x512/0x640 [ 258.138795][ T8234] _copy_from_iter+0x29f/0x16f0 [ 258.138833][ T8234] ? __alloc_skb+0x200/0x380 [ 258.138863][ T8234] ? __pfx__copy_from_iter+0x10/0x10 [ 258.138901][ T8234] ? __lock_acquire+0xb8a/0x1c90 [ 258.138950][ T8234] netlink_sendmsg+0x829/0xdd0 [ 258.138993][ T8234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.139045][ T8234] ____sys_sendmsg+0xa95/0xc70 [ 258.139086][ T8234] ? copy_msghdr_from_user+0x10a/0x160 [ 258.139116][ T8234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.139164][ T8234] ? __pfx_futex_wake_mark+0x10/0x10 [ 258.139212][ T8234] ___sys_sendmsg+0x134/0x1d0 [ 258.139245][ T8234] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.139273][ T8234] ? __lock_acquire+0x622/0x1c90 [ 258.139355][ T8234] __sys_sendmsg+0x16d/0x220 [ 258.139392][ T8234] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.139428][ T8234] ? __x64_sys_futex+0x1e0/0x4c0 [ 258.139491][ T8234] do_syscall_64+0xcd/0x490 [ 258.139530][ T8234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.139566][ T8234] RIP: 0033:0x7fd073d8e9a9 [ 258.139594][ T8234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.139629][ T8234] RSP: 002b:00007fd074be5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.139662][ T8234] RAX: ffffffffffffffda RBX: 00007fd073fb5fa0 RCX: 00007fd073d8e9a9 [ 258.139685][ T8234] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 258.139707][ T8234] RBP: 00007fd073e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 258.139728][ T8234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.139757][ T8234] R13: 0000000000000000 R14: 00007fd073fb5fa0 R15: 00007ffd2ffce508 [ 258.139801][ T8234] [ 260.820954][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.838547][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.141075][ T8283] [ 263.143486][ T8283] ====================================================== [ 263.150538][ T8283] WARNING: possible circular locking dependency detected [ 263.157605][ T8283] 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 Not tainted [ 263.164737][ T8283] ------------------------------------------------------ [ 263.171772][ T8283] syz.2.680/8283 is trying to acquire lock: [ 263.177678][ T8283] ffffffff8e72a5a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 263.187302][ T8283] [ 263.187302][ T8283] but task is already holding lock: [ 263.194689][ T8283] ffff8880268c1e00 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 263.205999][ T8283] [ 263.205999][ T8283] which lock already depends on the new lock. [ 263.205999][ T8283] [ 263.216421][ T8283] [ 263.216421][ T8283] the existing dependency chain (in reverse order) is: [ 263.225451][ T8283] [ 263.225451][ T8283] -> #2 (&q->q_usage_counter(io)#30){++++}-{0:0}: [ 263.234116][ T8283] blk_alloc_queue+0x619/0x760 [ 263.239448][ T8283] blk_mq_alloc_queue+0x175/0x290 [ 263.245026][ T8283] __blk_mq_alloc_disk+0x29/0x120 [ 263.250612][ T8283] loop_add+0x49e/0xb70 [ 263.255322][ T8283] loop_init+0x164/0x270 [ 263.260122][ T8283] do_one_initcall+0x120/0x6e0 [ 263.265434][ T8283] kernel_init_freeable+0x5c2/0x900 [ 263.271196][ T8283] kernel_init+0x1c/0x2b0 [ 263.276091][ T8283] ret_from_fork+0x5d4/0x6f0 [ 263.281242][ T8283] ret_from_fork_asm+0x1a/0x30 [ 263.286557][ T8283] [ 263.286557][ T8283] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 263.293808][ T8283] fs_reclaim_acquire+0x102/0x150 [ 263.299443][ T8283] prepare_alloc_pages+0x162/0x610 [ 263.305121][ T8283] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 263.311563][ T8283] __alloc_pages_noprof+0xb/0x1b0 [ 263.317143][ T8283] pcpu_populate_chunk+0x110/0xb00 [ 263.322830][ T8283] pcpu_alloc_noprof+0x86a/0x1470 [ 263.328405][ T8283] xt_percpu_counter_alloc+0x13e/0x1b0 [ 263.334422][ T8283] find_check_entry.constprop.0+0xbc/0x9b0 [ 263.340789][ T8283] translate_table+0xc98/0x1720 [ 263.346254][ T8283] ipt_register_table+0x102/0x430 [ 263.351838][ T8283] iptable_security_table_init+0x40/0x60 [ 263.358027][ T8283] xt_find_table_lock+0x2e1/0x520 [ 263.363615][ T8283] xt_request_find_table_lock+0x28/0xf0 [ 263.369721][ T8283] get_info+0x190/0x610 [ 263.374434][ T8283] do_ipt_get_ctl+0x169/0xa10 [ 263.379670][ T8283] nf_getsockopt+0x79/0xe0 [ 263.384640][ T8283] ip_getsockopt+0x18c/0x1e0 [ 263.389787][ T8283] tcp_getsockopt+0x9e/0x100 [ 263.394923][ T8283] do_sock_getsockopt+0x34a/0x440 [ 263.400509][ T8283] __sys_getsockopt+0x123/0x1b0 [ 263.405904][ T8283] __x64_sys_getsockopt+0xbd/0x160 [ 263.411578][ T8283] do_syscall_64+0xcd/0x490 [ 263.416646][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.423096][ T8283] [ 263.423096][ T8283] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 263.430868][ T8283] __lock_acquire+0x126f/0x1c90 [ 263.436282][ T8283] lock_acquire+0x179/0x350 [ 263.441345][ T8283] __mutex_lock+0x199/0xb90 [ 263.446398][ T8283] pcpu_alloc_noprof+0xb4c/0x1470 [ 263.451967][ T8283] blk_stat_alloc_callback+0xc8/0x280 [ 263.457898][ T8283] wbt_init+0xac/0x540 [ 263.462538][ T8283] queue_wb_lat_store+0x354/0x3d0 [ 263.468122][ T8283] queue_attr_store+0x276/0x320 [ 263.473523][ T8283] sysfs_kf_write+0xf2/0x150 [ 263.478678][ T8283] kernfs_fop_write_iter+0x354/0x510 [ 263.484521][ T8283] vfs_write+0x6c4/0x1150 [ 263.489406][ T8283] ksys_write+0x12a/0x250 [ 263.494288][ T8283] do_syscall_64+0xcd/0x490 [ 263.499346][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.505807][ T8283] [ 263.505807][ T8283] other info that might help us debug this: [ 263.505807][ T8283] [ 263.516094][ T8283] Chain exists of: [ 263.516094][ T8283] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#30 [ 263.516094][ T8283] [ 263.529801][ T8283] Possible unsafe locking scenario: [ 263.529801][ T8283] [ 263.537269][ T8283] CPU0 CPU1 [ 263.542652][ T8283] ---- ---- [ 263.548030][ T8283] lock(&q->q_usage_counter(io)#30); [ 263.553448][ T8283] lock(fs_reclaim); [ 263.559970][ T8283] lock(&q->q_usage_counter(io)#30); [ 263.567903][ T8283] lock(pcpu_alloc_mutex); [ 263.572444][ T8283] [ 263.572444][ T8283] *** DEADLOCK *** [ 263.572444][ T8283] [ 263.580608][ T8283] 6 locks held by syz.2.680/8283: [ 263.585636][ T8283] #0: ffff888034e349b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 263.594741][ T8283] #1: ffff8880365a2428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 263.603763][ T8283] #2: ffff88804f3efc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 263.613560][ T8283] #3: ffff88802688dd28 (kn->active#130){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 263.623754][ T8283] #4: ffff8880268c1e00 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 263.635467][ T8283] #5: ffff8880268c1e38 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 263.647450][ T8283] [ 263.647450][ T8283] stack backtrace: [ 263.653355][ T8283] CPU: 0 UID: 0 PID: 8283 Comm: syz.2.680 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 263.653390][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.653407][ T8283] Call Trace: [ 263.653415][ T8283] [ 263.653425][ T8283] dump_stack_lvl+0x116/0x1f0 [ 263.653454][ T8283] print_circular_bug+0x275/0x350 [ 263.653493][ T8283] check_noncircular+0x14c/0x170 [ 263.653533][ T8283] __lock_acquire+0x126f/0x1c90 [ 263.653586][ T8283] lock_acquire+0x179/0x350 [ 263.653622][ T8283] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 263.653649][ T8283] ? __pfx___might_resched+0x10/0x10 [ 263.653677][ T8283] ? ksys_write+0x12a/0x250 [ 263.653700][ T8283] ? do_syscall_64+0xcd/0x490 [ 263.653746][ T8283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.653776][ T8283] __mutex_lock+0x199/0xb90 [ 263.653804][ T8283] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 263.653830][ T8283] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 263.653856][ T8283] ? __pfx___mutex_lock+0x10/0x10 [ 263.653894][ T8283] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 263.653918][ T8283] pcpu_alloc_noprof+0xb4c/0x1470 [ 263.653949][ T8283] ? __pfx_wbt_data_dir+0x10/0x10 [ 263.653976][ T8283] ? __pfx_wb_timer_fn+0x10/0x10 [ 263.654009][ T8283] blk_stat_alloc_callback+0xc8/0x280 [ 263.654042][ T8283] ? kasan_save_track+0x14/0x30 [ 263.654071][ T8283] wbt_init+0xac/0x540 [ 263.654107][ T8283] queue_wb_lat_store+0x354/0x3d0 [ 263.654138][ T8283] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 263.654170][ T8283] ? __mutex_trylock_common+0xe9/0x250 [ 263.654211][ T8283] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 263.654241][ T8283] queue_attr_store+0x276/0x320 [ 263.654271][ T8283] ? __pfx_queue_attr_store+0x10/0x10 [ 263.654301][ T8283] ? __lock_acquire+0x622/0x1c90 [ 263.654347][ T8283] ? find_held_lock+0x2b/0x80 [ 263.654375][ T8283] ? sysfs_file_kobj+0xe4/0x290 [ 263.654416][ T8283] ? __pfx_queue_attr_store+0x10/0x10 [ 263.654447][ T8283] sysfs_kf_write+0xf2/0x150 [ 263.654487][ T8283] kernfs_fop_write_iter+0x354/0x510 [ 263.654522][ T8283] ? __pfx_sysfs_kf_write+0x10/0x10 [ 263.654562][ T8283] vfs_write+0x6c4/0x1150 [ 263.654594][ T8283] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 263.654631][ T8283] ? __pfx___mutex_lock+0x10/0x10 [ 263.654658][ T8283] ? __pfx_vfs_write+0x10/0x10 [ 263.654694][ T8283] ksys_write+0x12a/0x250 [ 263.654719][ T8283] ? __pfx_ksys_write+0x10/0x10 [ 263.654749][ T8283] do_syscall_64+0xcd/0x490 [ 263.654778][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.654805][ T8283] RIP: 0033:0x7fd073d8e9a9 [ 263.654826][ T8283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.654854][ T8283] RSP: 002b:00007fd074be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.654879][ T8283] RAX: ffffffffffffffda RBX: 00007fd073fb5fa0 RCX: 00007fd073d8e9a9 [ 263.654898][ T8283] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000003 [ 263.654915][ T8283] RBP: 00007fd073e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 263.654932][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.654949][ T8283] R13: 0000000000000000 R14: 00007fd073fb5fa0 R15: 00007ffd2ffce508 [ 263.654974][ T8283]