last executing test programs: 7.471197082s ago: executing program 2 (id=2634): mmap$auto(0x0, 0xa020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) remap_file_pages$auto(0x3, 0x1000, 0x0, 0x3, 0x4) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) unshare$auto(0x40000080) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="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", 0xc83) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x48400, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa041, 0x0) 6.703797225s ago: executing program 2 (id=2640): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x500) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x100002020009, 0x3, 0x19, 0xfffffffffffffffa, 0x8000) prctl$auto(0x20047, 0xfffffffffffffff5, 0x0, 0xfffffffffff7fffd, 0x5) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x85f) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x100000000006) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r1 = socket(0x5, 0x2, 0x73) getsockname$auto(r1, 0x0, &(0x7f0000000280)=0xaea) mlockall$auto(0x7) mmap$auto(0xfffffffffffffffe, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) rseq$auto(0x0, 0x7, 0x0, 0x5) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/min_free_kbytes\x00', 0x202, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfffffffffffffff9}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a5, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='/proc/sys/user/max_fanotify_groups\x00', 0x8, 0xf) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 5.772531998s ago: executing program 0 (id=2647): shmat$auto(0x4000008, &(0x7f0000000180)='\x96\xe7\xf4\x1e\xa76\x9f2%', 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) r1 = socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x2, 0x1) r4 = bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r3, 0x4, r1}, 0x10) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x2000000000005c, 0x1, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0xea, 0xffffffffffffffff, 0x7, 0x5, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_btf_obj_fd=r2, 0x17e, 0x4, 0x1, 0x5, 0x3}, 0x5) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0xff, 0x0, 0x1, 0x4) mmap$auto(0x2, 0x1000e983, 0xdf, 0xeb1, r4, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r5, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') 5.334528234s ago: executing program 2 (id=2649): openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r2, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) clone$auto(0x7f, 0x40000006, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) 4.798999839s ago: executing program 0 (id=2650): openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0xa, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x5, 0xee2, 0xfffffffffffffffe, r1, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) 4.654231536s ago: executing program 1 (id=2651): close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000180)='./file0\x00', 0x30240, 0x154) socket(0x1d, 0x80003, 0x300) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/039/001\x00', 0x0, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) madvise$auto(0x0, 0x3, 0x66) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="52be875afe075cfdd8a26074d23fcd732e97e57f1bd76b93caf8e4958b0611de3d3cde2dc795c41e7ef12d8e929f7f97d9cf3e94a88a7cca0e72968f93fb27189612bc0d706b3f32d8884bce103c4f39898f11c56d1e5ff9fd9eac7c54c006da7f9ab6bec905d818742f198f36a5aac46bf8ce70d14731973378f56cd070e9277ec7d03e61adfb88643840d2af760ab1c66f9384000000000000000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) mq_getsetattr$auto(r1, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x129800, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 4.624978656s ago: executing program 2 (id=2652): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pppoe\x00', 0x20440, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0), 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 4.59457931s ago: executing program 3 (id=2653): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0x6, 0x80000, 0x800) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x800, &(0x7f0000000500)={[0x7, 0x80000001, 0x8, 0x7, 0x2, 0x4, 0x155, 0x8, 0x6, 0x5, 0x7, 0x5, 0x9ad, 0x3, 0x8, 0x6]}, &(0x7f0000000580)={[0x3, 0x3ff, 0x101, 0x5, 0x8, 0x40, 0xb7, 0x6e6, 0x9, 0x3ff, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0x7]}, &(0x7f0000000600)={[0x6, 0x0, 0x0, 0x4, 0x282, 0xb1, 0x8, 0x8, 0xfffffffffffffff9, 0x9, 0xfffffffffffffffc, 0x3, 0x3, 0x9f5, 0x0, 0x111]}, &(0x7f0000000340)={0x10000, 0x4}) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xd, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000040)=""/4099, 0xfd98) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) sendto$auto(r3, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, 0x0, 0x3f}, 0x36) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x40030000000000, 0x40000}, 0x50) 4.082293992s ago: executing program 2 (id=2654): shmat$auto(0x4000008, &(0x7f0000000180)='\x96\xe7\xf4\x1e\xa76\x9f2%', 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x2000000000005c, 0x1, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0xea, 0xffffffffffffffff, 0x7, 0x5, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_btf_obj_fd=r1, 0x17e, 0x4, 0x1, 0x5, 0x3}, 0x5) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0xff, 0x0, 0x1, 0x4) mmap$auto(0x2, 0x1000e983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r2, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 3.683123735s ago: executing program 1 (id=2655): shmat$auto(0x4000008, &(0x7f0000000180)='\x96\xe7\xf4\x1e\xa76\x9f2%', 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) r1 = socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x2, 0x1) r3 = bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r2, 0x4, r1}, 0x10) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0xff, 0x0, 0x1, 0x4) mmap$auto(0x2, 0x1000e983, 0xdf, 0xeb1, r3, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r4, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 3.549576108s ago: executing program 0 (id=2656): mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) mbind$auto(0x0, 0x2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) write$auto(r0, &(0x7f0000000000)='+@*#\x00', 0x1) r1 = socket(0x2, 0xa, 0x807) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ptrace$auto_PTRACE_INTERRUPT(0x4207, r2, 0x8, 0xf) r3 = getsockopt$auto(r1, 0x1, 0x8, 0xfffffffffffffffc, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x3, 0x8, 0xffffffffffffffff}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f0000000340)="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", 0x24a) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x401, 0x3, r4, 0x2000000e, 0x1) r6 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs1\x00', 0x200100, 0x0) lseek$auto(r6, 0x27, 0x8) 3.300522236s ago: executing program 3 (id=2657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010031bd7000fddbdf250c00000014000380100003800c007a0001000000000000001800018014000200776c616e300000"], 0x40}}, 0x24048084) 3.177421883s ago: executing program 0 (id=2658): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x181842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) write$auto(0xca, 0x0, 0x2d9) unshare$auto(0x40000080) r2 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000000c0)={@siginfo_0_0={0x0, 0xd, 0x7, @_sigchld={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x6, 0xdba}}}, 0x2, &(0x7f0000000140)={{0x7fffffffffffffff, 0x6}, {0x5, 0x3}, 0x6, 0x180, 0x15fa, 0x10000, 0x2, 0x7, 0x0, 0x1, 0x2c, 0xfff, 0x7fffffffffffffff, 0x8, 0x8f, 0xb707}) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={"425e181c2ff2131d5006f68e611e2a006bc6b0a28ea38e6794da73b1b3e1695e", 0xb04, 0x100, 0x6, 0x8, 0x3, r2}) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r3 = mq_open$auto(&(0x7f0000000000)='/dev/sequencer2\x00', 0x5, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv6/conf/sit0/max_desync_factor\x00', 0xa0000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r3) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="008028bd7000fedbb2540f002a9e822e30859def7056fbdbca21aac579097d39593bcf215c25e1cd882f77572d4f5197a4b7c8b0590e234233a8dacfa66850b918511d11a32254d45105c2abde3db7659cd5d80a856b7ff88c261e23ba688a0a08f552d10d040e5ca39fa7fc5a93ccef6a5f96215e461e47311e30788b17232ea3c742c0c15a41287935b59d541879eae41d52c2d975af8caaea9e4ab214e99a76fa5c65f7080871e881431398af16ae2a59a919bd804492274cf7b8b380b45de9769a6738f93aaf903392c6194f6bc2a2ba92a5d73e4d2728f8a80a908dca4825da5f50bf"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x855) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x11, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x5, 0x3, 0x6, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x7ff, 0x9b74, r3, 0x2008200) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 3.127397327s ago: executing program 3 (id=2659): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x2) r0 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x2, &(0x7f0000000040), 0x7) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c80"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x410802, 0x0) ioctl$auto(r2, 0x4b67, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0x4) 2.138761769s ago: executing program 1 (id=2660): fdatasync$auto(0xffffffffffffffff) semctl$auto_GETZCNT(0x78d9, 0x8001, 0xf, 0x8001) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x20000004, 0x4) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 2.040934773s ago: executing program 3 (id=2661): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0x6, 0x80000, 0x800) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x800, &(0x7f0000000500)={[0x7, 0x80000001, 0x8, 0x7, 0x2, 0x4, 0x155, 0x8, 0x6, 0x5, 0x7, 0x5, 0x9ad, 0x3, 0x8, 0x6]}, &(0x7f0000000580)={[0x3, 0x3ff, 0x101, 0x5, 0x8, 0x40, 0xb7, 0x6e6, 0x9, 0x3ff, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0x7]}, &(0x7f0000000600)={[0x6, 0x0, 0x0, 0x4, 0x282, 0xb1, 0x8, 0x8, 0xfffffffffffffff9, 0x9, 0xfffffffffffffffc, 0x3, 0x3, 0x9f5, 0x0, 0x111]}, &(0x7f0000000340)={0x10000, 0x4}) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xd, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x7) sendto$auto(r4, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, 0x0, 0x3f}, 0x36) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="d47b1cab1fd31e0d040047f1", @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf25060000000c001100657468746f6f6c000800060002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x440440d4) r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40300}, 0x50) 1.972299667s ago: executing program 1 (id=2662): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r0, 0xa0) lseek$auto(0x3, 0x2, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd=0xffffffffffffffff, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0x3, r2, [0x7ff, 0xfff, 0x1000], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x69, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) 1.956567797s ago: executing program 0 (id=2663): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x2400, 0x0) read$auto(r1, 0x0, 0x9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/version\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x68001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x3, 0xc24) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x94) unshare$auto(0x40000080) 1.657729342s ago: executing program 1 (id=2664): mmap$auto(0x6f6e724f, 0x40000000000007, 0xc000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone3(&(0x7f0000000580)={0x2a806cc40, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000), {0x30}, &(0x7f0000000100)=""/27, 0x1b, &(0x7f0000000440)=""/186, &(0x7f0000000080)}, 0x58) process_madvise$auto(r0, &(0x7f00000006c0)={&(0x7f0000000600)="9a222d40f19403d90305ca2bddb347a05257778023b001006a5663ae64d0770a95cde0f9f5a88905ef22b10ea1de119f153a290b0396ca92138fdca18e650e7c9af4c505cc8d6587930de482d23b5922ff3b14cca9958a7bf6749ba5a6b3f84069e7b3b3cdb05de85c29cbf00e198331d6d18120f4", 0xb}, 0x2, 0x7ff, 0xaf) (async, rerun: 32) getpid() (async, rerun: 32) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) (async) socket(0xa, 0x1, 0x100) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) (async) rt_sigaction$auto(0x1, 0x0, 0x0, 0x8) (async) rt_sigqueueinfo$auto(0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) futimesat$auto(0x2, 0x0, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) (async, rerun: 64) ioctl$auto(0x3, 0x4040ae77, 0x38) (async, rerun: 64) close_range$auto(r3, 0x8, 0xfffffffe) socket(0x26, 0xa, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, r0, 0x2) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) (async) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) (rerun: 32) 1.344616233s ago: executing program 2 (id=2665): openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0xa, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x5, 0xee2, 0xfffffffffffffffe, r1, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) 985.775355ms ago: executing program 3 (id=2666): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0x6, 0x80000, 0x800) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x800, &(0x7f0000000500)={[0x7, 0x80000001, 0x8, 0x7, 0x2, 0x4, 0x155, 0x8, 0x6, 0x5, 0x7, 0x5, 0x9ad, 0x3, 0x8, 0x6]}, &(0x7f0000000580)={[0x3, 0x3ff, 0x101, 0x5, 0x8, 0x40, 0xb7, 0x6e6, 0x9, 0x3ff, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0x7]}, &(0x7f0000000600)={[0x6, 0x0, 0x0, 0x4, 0x282, 0xb1, 0x8, 0x8, 0xfffffffffffffff9, 0x9, 0xfffffffffffffffc, 0x3, 0x3, 0x9f5, 0x0, 0x111]}, &(0x7f0000000340)={0x10000, 0x4}) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xd, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000040)=""/4099, 0xfd98) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) sendto$auto(r3, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, 0x0, 0x3f}, 0x36) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x40030000000000, 0x40000}, 0x50) 788.30252ms ago: executing program 1 (id=2667): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000100)=@in={0x2, 0x4e21, @rand_addr=0x640100fc}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x40025504, 0xea3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r2, 0xab07, r2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) semctl$auto(0x8, 0x806, 0x3, 0x46) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r4) 22.252792ms ago: executing program 0 (id=2668): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0x6, 0x80000, 0x800) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x800, &(0x7f0000000500)={[0x7, 0x80000001, 0x8, 0x7, 0x2, 0x4, 0x155, 0x8, 0x6, 0x5, 0x7, 0x5, 0x9ad, 0x3, 0x8, 0x6]}, &(0x7f0000000580)={[0x3, 0x3ff, 0x101, 0x5, 0x8, 0x40, 0xb7, 0x6e6, 0x9, 0x3ff, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0x7]}, &(0x7f0000000600)={[0x6, 0x0, 0x0, 0x4, 0x282, 0xb1, 0x8, 0x8, 0xfffffffffffffff9, 0x9, 0xfffffffffffffffc, 0x3, 0x3, 0x9f5, 0x0, 0x111]}, &(0x7f0000000340)={0x10000, 0x4}) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xd, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000040)=""/4099, 0xfd98) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) sendto$auto(r3, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, 0x0, 0x3f}, 0x36) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0xffffff7f00000000, 0x40000}, 0x50) 0s ago: executing program 3 (id=2669): add_key$auto(&(0x7f0000000000)='\x00', &(0x7f0000000040)=']\x00', &(0x7f0000000080)="fce019bcacfb243b154edd9d3d401e5fcd9cc4655af60681d8f6d0724bb29539aee624", 0x54b2, 0xfff) add_key$auto(&(0x7f00000000c0)='\x00', &(0x7f0000000100)='\'\x00', &(0x7f0000000140)="ab28b0e67548187769f0b0afc119c4d651824be6483b7d4f544a01e792979c5ae5958c0fcfaf945efc4732e9ac53191918bf89011221575c6bd894ad8fa24145baefb8f5ba774e7daa61c132de69b41b4a8e566b70296c65397ceb0b92fd22967720303b3f39f6a27943a431be1f52ef0b3f8167cbc5577696e1e3f20ac577304060e8096339e91daf7b69e76047d9e79813377126ca2b0338e840401ff727486eb518db5a4f521ab6e69aaebed927eb759ec65624", 0x8000, 0xfff) add_key$auto(&(0x7f0000000200)=']\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)="bca1ca2bce1638164451519e5b2dd811eeeb25ba52959d67e9c9c7efed55e5b00264fdca519d1e651a2792c655a7a51a7c52129bc479e878174df4f81b9267e4a4fe08d7a21a5ade4e0050fc362c9972b718d34dfae422f005ad05c096a4c77a7f76f9fad3a286d35f5d16a6745cd28386e28894122ba39439146bf3555fe13f91d477d7266fad9936a775ad4f8a5795528740ab3e9815aef5e51fa87dc66b8940a609ee7cba76becd618c2f33c1aa472b90d59793a47e3d02a9e4dc3bd871bd3dbba011c2b46b3f3bb3d30973ce08b9a0f35e", 0x30000, 0x84) add_key$auto(&(0x7f0000000380)=']\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)="a36bd69e29c7582180c924dea1badba9c306aae7f05691962aa7781dff0240016e2e5e5063ff05537d71811f10ff0180093f8b7520289c29689404d8e8e0007d047449a7074b0a2c6a1538cfa6f8eeb516c948362692153fd0c3622b21b1fc7020e58be08517c4839e3e95f49cdded39764bf84053dd39a7f0eba3c8fc7d780c49390028", 0xfffffffffffffff9, 0x3347) add_key$auto(&(0x7f00000004c0)='\'\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)="48b5ae91c6c6f43dfc28bd9cb8c610a097255c11a41b6ca40a8c9287d492fd49302190105e07e4253b96fd4c690b1ccaa8be19e015c36043505f98a6c5d6", 0x2, 0x8) r0 = fcntl$auto_F_DUPFD(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$auto_BLKRASET(r0, 0x1262, 0x0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000005c0), r0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc4, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x3}, @NFC_ATTR_VENDOR_DATA={0x7e, 0x1f, "6c2862b50846e87636777a479c8558f940429f0067d4e3d5417884b8e61e8fce7bae3cde9c351ca51260502a07ec708fb1860e352d21879b9ab1c089239c2420c477c7f3a22cabb0e6dbbbb483e7463b381b128839e3650d2fce4457d46d90eb6acef1f93c652631eb92493842b9aa7b204873ceecc605273a01"}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x86e}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x800}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80000000}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000011}, 0x840) r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000780)=0x4) fanotify_mark$auto(r2, 0x80000001, 0x7ff8ffff, r0, &(0x7f00000007c0)='./file0\x00') unlink$auto(&(0x7f0000000800)='./file0\x00') ioctl$auto_SNAPSHOT_FREE(r2, 0x3305, 0x0) r3 = open(&(0x7f0000000840)='./file0\x00', 0x20000, 0x100) write$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000880)="1c56fba550270ef73a207b1483584f5f0215e5e53e610b5077d6f1ed0e521f19127cc5fd75c7922a7509a8a74b39758d", 0x30) socket(0x10, 0x80000, 0xffff7fff) r4 = prctl$auto(0x401, 0xfffffffffffff000, 0xffffffffffffffff, 0x1, 0x2) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000900), r3) r6 = socket(0x2a, 0x0, 0x74ae) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000001500)={&(0x7f00000008c0), 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb44, r5, 0x130, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_COORDINATOR={0x584, 0x1e, 0x0, 0x1, [@nested={0x2c9, 0x131, 0x0, 0x1, [@nested={0x4, 0xc5}, @generic="271d71de4e81876a3d33bb0f689e31fe4a82a38b6d807b2603f958f076c4af532f4ea22847217cce4003674be99faa5f72219877676519a79bd8e1e062491fea339efadaa3b215c5b64cf7da89f1f074bee4d441901f", @generic="59fe124073ecf1407d5a24480ee55f32d88dba4a5b9efaa08327d62d0e1e0e6e4060bf95e2d7d8272f4635b4d94c107e2b4519ecff0b94456eb8b42a28eace739d0a8d84e8ae6d2c7c62287eabe9c22c8c278a5c42c372e12f4d7abb514967bf8cc93ea54ddf70bde9c391ae81b06e7878631f3f6c3fdd8caef3cb2694e9eeb54f0f986f78", @generic="a1c2", @generic="0494b4dedc6ae9cdd7d12abd4147dd4c31c6d0c1284b07083bbdda760366951ba1cfe1f9541eb29f77245b4e5773cdb38f218f74970325df0af6fb5e21e6a3e7874288a0c7aae6fa20e493205313ddbffbbcd14ac92da2747e273d9331d1fc862d83db0cf5fccbc6e5c5d30b008516deb100cb1723cf4694fe77f08cb59df6a782222919be1fa628ff3107d63ea80e1805b8a5ecb1ce5cc5a784fd1a9e23e4b8e04e3136c3941b1fd22573682c3375e022168fcfe9bc575ec6440f7f82abbb64c72f37498c45bda03eaa127ca37020b8cb65d6afe576ea5e57a8581f9158ca33283a55cedee858b8caa56d33b056bc238a58", @nested={0x4, 0x147}, @typed={0x4, 0xae}, @generic="90c6987bfd9a1ec688cb31dd2df5daaa277cee14602a978e42a97f6e0ad3590e17238a8079298b2f6da48a7d76b563381f44be6bb01c1b30c736fcd2bdf65f6750562ae6d7770c47d4bfd0f60cb9476f35ffd0794e61d82cfa28c33f10df143011bdabb7b04bc6872a1c0de345ea4f069e49ef3387268c6e779348f99418221d72cd851c820a34e4567c2e7fa9ff85ca8ae645bb0c379a6e07251aa696920588fd607b26131625de3a0a05c46e43d0e68aa5d86387a973ae48d38429e4c012cb7c5b4d89365ccdb9aa917f286da1ec7f0518fe3d646a2fd28859f82b7ff6bf67e942977ab68e74cb3090"]}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}, @nested={0x1a2, 0x53, 0x0, 0x1, [@nested={0x4, 0xe8}, @generic="25a388f76189faac612aa7b12bf38f3b7add9fcfe56db26769329c82dabe869c03e39969f76f4a30397041dbf7210dfa0e7b498b930095399e955a49516ce50b08c24261d91ea6e98d37539793a0fbcf91a19969e068b8023942767530d2e09ea40ccefd65fe4f785c3ab8b70395bfd863cb8a4c6b796d8ea71b7abb09a4b45626e32df02f043a0f4fd2bddc44c546b88f8439da0fec2e62aed7678e8bb6813b871b0fe2ecc300de10c5f359af988a71ef8657f008acbfc311de81b6b94d9f8566475502f5b8db99566615af0584bdbeebef33c7f47a0d5613caa2da78473773cd3d4aa9949d56045a00e7de45511ec3d76d", @typed={0x8, 0x3, 0x0, 0x0, @u32=0xfac}, @generic="1564f4cdfcdd9e3a29a20a1a7255b93152ccf38372e4532ee40a59c5f888b012209a1a8858a565179c60b4bc456181cba0d61828663a332e9a1580be88214fd68eed44bc45da18046108a3e108e9a55083168211febe0f8f102fbc3927ac8ae8270d0c9c858d535d6118ce97fe6a0989ccee119ef1d748532b8980e6bb13a175404b9d7ae20c5fcf9a2d9eef74c5eed5301c081a2c114395", @typed={0x8, 0x141, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0xe7, 0x0, 0x0, @str='nfc\x00'}, @typed={0xa, 0x3e, 0x0, 0x0, @str='^}-\'&\x00'}, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r6}, @generic="4c02f69c778d0d39ecfbaeb15dd2c2b3ea5b26eaa99a98ce912818a1e7d4047fb760da6e9bf83d5293feee5097ae3123087568e1d832bd76e976233727ebc9698e192d0b2905909a4291e351b1aebe333df24d4b0aedcf8c1f955ef15159a98e764313f06045b1378e6db53ac23d30ed9513e44262a6d30b7abca8da13d5a6e7cc4ef26ad75c6fffc9936cd762686fa0adcd0d132762a05a3ece8d3ae8b1e9031c6b81e70544bbd047965c812c1edbb2188fb6d1eb8982627d3fd5299cd4d2e50a43ddddf99f3561ab3e9381352e003131a580a459fd04fd998efd7d438b5334"]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x3}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x59c, 0x19, 0x0, 0x1, [@nested={0x10f, 0x74, 0x0, 0x1, [@nested={0x4, 0x70}, @typed={0xc, 0x129, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="c5097f9e450810724f31fb8a9fe4684792b1b3cdd90e0f230d530f389c1cb8c6462d5356ad331f02effbc3361da53130189020325663b3c714cfa87f8c6be10234db5ab0501501f79810395511db659627c9417f58e2655b2dca9237c85891ecc2e45354727b3d77e86ee4efeee57a6e5fbd5c1e42e39bc806c8b7b447f54d6e9070c8e2ffd3dcb93a511f296f3ebccc8960e3e25b6b703e761fb515753a4fb4f16a12770b978faa279914c49d3e482d43753b41ac4a5a6bd2d13e6bf0d077ecd4a44291001d5c2dd358bdc7a0aef55fee79edb255311c68d98468f6eb5c05a1eea1a5", @nested={0x4, 0x3c}]}, @nested={0x2eb, 0x96, 0x0, 0x1, [@nested={0x4, 0xa4}, @generic="9c4b0e2502d0999099b9884cb13402e9c7ead7ef1f53210bae45eddb5da77a69", @typed={0x8, 0x63, 0x0, 0x0, @u32=0xff}, @typed={0x14, 0xea, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x87, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x3f}, @generic="15584ed15002b92291c12005efef7d5903168009ccc0969ead19b761ad09660b116fba5d65b9080df184c3b2a4602928b10a6a27f08ce2679f2b52e06ea245882e77ebfa1efac9eb1c221c03e4d5ead37a96593e9371772d0ddef6fa518862a34ca498395f0b271cd9d49357558b48d6bbeea4c430daeae57b600defa54bd83bd89399a8afae04cbbd410fe4cb7f9e8e8d2f376a44ec6a7607c6451d7076f43584a88af19fc53e46459e5181cd173f6ab7", @generic="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", @generic="7b5b2f0bb50fbd3173f6c45f175dc6e536f4b8d01f326f557eb3dcf2638027f41358b3239fe32aae620065fd05d1158635752968ff100dcb48b570c070fd230831e36ec194dd3f1def87420ffacffcc156974307da063097bf62d7e49657e990efd719111daefb5b65edc739c6b339666d9ddeb14542d3e0214418252a581e8503a428ee0bbc93eb6a71c34cac4efc03c8b1fa9538d65f8857c8e903fc3da6be9e2adc324ae0bb3b42e3c63a9f10803c5cf5b7467954e29d0dd3f1d4914b7c91fc4c88b8210d765eddeabdbe7addb5f972101af92144a12dfb086348603c261d9c1982c5c1e953f32858101710d5bb"]}, @generic="3f613775174fe21605cd7675ea43f6359688b52f5b43bb546fe32829db6656278fe35188c9810c36d34b6aa967cea2b59b927c4424feb42d3c14c19dc206b8ee5c243a932e80038b93004cf1796194de06d753e9b82c64f6f4a6aefad1a9ac08d97c919ebd9e827ab23298bc6017c781d0966a86ff7026f02291bcdb1c8aa0372a225a1b739acbc3213844598d975ba9999bb6b6a9366a58cfe7b9f809479b3689381739894bf7fd5f7f927536fb670c", @nested={0x4, 0xc9}, @generic="b86a4b5c00404b62604ae7df3d7f561c54aceaeb67188e850b51820dc94f65f3f1eba9a65eca1d8839b6398378f55f6d10385acd085c14878ae4ca98fd5f1f838f1fa70e4a460b3ffe5f5f4c9d7e75472d474538cc50974828f84c3e986ea352dd12c56987ca0e0193848e891aefb97391d84754a8020c28e94875608dc118cb57e47cea17aba5f8da521e7afa8729f708cf58b48b710b39a9cb571d7082ea3d9d3be00e42694fa387e3210929dd5fbbc60bef87621cb6e04097688c753137f9f026151d62f2d4a71717a4158e3f2a8361d9855b8071a09cd8a86eb983f5966bb765e36c276aa667"]}]}, 0xb44}}, 0x8880) socket(0x21, 0x5, 0xf35) r7 = eventfd$auto(0x7f) getrandom$auto(&(0x7f0000001540)='\'\x00', 0x4, 0x4) add_key$auto(&(0x7f0000001580)='\x00', &(0x7f00000015c0)='*,*#}$]-{/\x00', &(0x7f0000001600)="d585e51cbf3bbb5504e3f7c92acb551829a0e1e2c5baf499c75090b1c93cf0b0274545ebb78cf79fa31310fe14bfd350b8f062494f06e48ee25383011f4a0dd4fb2ebc7ab37163462e2138695840446f036d8811062041426066b881c5526a3c51fdbebf87b00cfc708004ee9f1793b9086e52892bab40cf5a18e7d28c6d6b3a1c161f10bbd8b4661b47", 0x6, 0x100) futex_wake$auto(&(0x7f00000016c0)="d39d430a4e9c988c619b0e2ad2eb4612d3b5f40744e53c", 0x7f, 0x8, 0x6) r8 = ioctl$auto_TUNSETVNETHDRSZ2(r0, 0x400454d8, &(0x7f0000001700)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC0\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000017c0), r8) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x5c, r9, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x44}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10000}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, ']\x00'}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, ']\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x80}, @NFSD_A_SERVER_SCOPE={0x7, 0x4, ' \x01\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000010) setsockopt$auto(r4, 0x923, 0x4, &(0x7f0000001900)='*\v.\x00', 0xb) kernel console output (not intermixed with test programs): f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.068325][T14499] RSP: 002b:00007fa0eb3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 505.068356][T14499] RAX: ffffffffffffffda RBX: 00007fa0ea7b5fa0 RCX: 00007fa0ea58e929 [ 505.068377][T14499] RDX: 00000000000000df RSI: 0000000000400408 RDI: 0000000000000000 [ 505.068397][T14499] RBP: 00007fa0ea610b39 R08: 0000000000000002 R09: 0000000000008000 [ 505.068417][T14499] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 505.068435][T14499] R13: 0000000000000000 R14: 00007fa0ea7b5fa0 R15: 00007fff38593c08 [ 505.068465][T14499] [ 506.139349][T14501] PM: Image not found (code -6) [ 506.787290][T14509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 506.801566][T14509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 506.810245][T14509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 506.816491][T14509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 507.198802][T14537] FAULT_INJECTION: forcing a failure. [ 507.198802][T14537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.255863][T14537] CPU: 1 UID: 0 PID: 14537 Comm: syz.2.2126 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 507.255909][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.255928][T14537] Call Trace: [ 507.255938][T14537] [ 507.255949][T14537] dump_stack_lvl+0x16c/0x1f0 [ 507.256004][T14537] should_fail_ex+0x512/0x640 [ 507.256053][T14537] _copy_from_iter+0x29f/0x16f0 [ 507.256105][T14537] ? __alloc_skb+0x200/0x380 [ 507.256151][T14537] ? __pfx__copy_from_iter+0x10/0x10 [ 507.256201][T14537] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 507.256243][T14537] netlink_sendmsg+0x829/0xdd0 [ 507.256282][T14537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.256326][T14537] ____sys_sendmsg+0xa98/0xc70 [ 507.256365][T14537] ? copy_msghdr_from_user+0x10a/0x160 [ 507.256416][T14537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.256463][T14537] ? __pfx__kstrtoull+0x10/0x10 [ 507.256499][T14537] ? aa_file_perm+0x4c7/0xfb0 [ 507.256545][T14537] ___sys_sendmsg+0x134/0x1d0 [ 507.256595][T14537] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.256654][T14537] ? rcu_is_watching+0x12/0xc0 [ 507.256699][T14537] __sys_sendmmsg+0x200/0x420 [ 507.256750][T14537] ? __pfx___sys_sendmmsg+0x10/0x10 [ 507.256796][T14537] ? lock_release+0x201/0x2f0 [ 507.256842][T14537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 507.256901][T14537] ? fput+0x70/0xf0 [ 507.256930][T14537] ? ksys_write+0x1ac/0x250 [ 507.256972][T14537] ? __pfx_ksys_write+0x10/0x10 [ 507.257020][T14537] __x64_sys_sendmmsg+0x9c/0x100 [ 507.257068][T14537] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 507.257118][T14537] do_syscall_64+0xcd/0x490 [ 507.257147][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.257180][T14537] RIP: 0033:0x7f1b0e38e929 [ 507.257204][T14537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.257236][T14537] RSP: 002b:00007f1b0f269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 507.257267][T14537] RAX: ffffffffffffffda RBX: 00007f1b0e5b6160 RCX: 00007f1b0e38e929 [ 507.257289][T14537] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 507.257310][T14537] RBP: 00007f1b0f269090 R08: 0000000000000000 R09: 0000000000000000 [ 507.257332][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.257352][T14537] R13: 0000000000000000 R14: 00007f1b0e5b6160 R15: 00007ffd8e135d08 [ 507.257385][T14537] [ 507.340907][T14538] CIFS mount error: No usable UNC path provided in device string! [ 507.340907][T14538] [ 507.342144][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.346945][T14538] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 508.120761][T14560] netlink: 94 bytes leftover after parsing attributes in process `syz.2.2134'. [ 508.608810][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 508.849087][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 508.853145][T14582] FAULT_INJECTION: forcing a failure. [ 508.853145][T14582] name failslab, interval 1, probability 0, space 0, times 0 [ 508.855295][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 508.874488][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 508.946137][T14582] CPU: 1 UID: 0 PID: 14582 Comm: syz.1.2139 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 508.946183][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.946203][T14582] Call Trace: [ 508.946213][T14582] [ 508.946225][T14582] dump_stack_lvl+0x16c/0x1f0 [ 508.946279][T14582] should_fail_ex+0x512/0x640 [ 508.946328][T14582] should_failslab+0xc2/0x120 [ 508.946358][T14582] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 508.946417][T14582] ? skb_clone+0x190/0x3f0 [ 508.946448][T14582] skb_clone+0x190/0x3f0 [ 508.946476][T14582] netlink_deliver_tap+0xabd/0xd30 [ 508.946512][T14582] netlink_unicast+0x5df/0x7f0 [ 508.946550][T14582] ? __pfx_netlink_unicast+0x10/0x10 [ 508.946591][T14582] netlink_sendmsg+0x8d1/0xdd0 [ 508.946629][T14582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.946672][T14582] ____sys_sendmsg+0xa98/0xc70 [ 508.946710][T14582] ? copy_msghdr_from_user+0x10a/0x160 [ 508.946761][T14582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.946801][T14582] ? __pfx__kstrtoull+0x10/0x10 [ 508.946838][T14582] ? aa_file_perm+0x4c7/0xfb0 [ 508.946882][T14582] ___sys_sendmsg+0x134/0x1d0 [ 508.946931][T14582] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.946987][T14582] ? rcu_is_watching+0x12/0xc0 [ 508.947031][T14582] __sys_sendmmsg+0x200/0x420 [ 508.947081][T14582] ? __pfx___sys_sendmmsg+0x10/0x10 [ 508.947129][T14582] ? lock_release+0x201/0x2f0 [ 508.947176][T14582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 508.947236][T14582] ? fput+0x70/0xf0 [ 508.947263][T14582] ? ksys_write+0x1ac/0x250 [ 508.947304][T14582] ? __pfx_ksys_write+0x10/0x10 [ 508.947351][T14582] __x64_sys_sendmmsg+0x9c/0x100 [ 508.947406][T14582] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 508.947455][T14582] do_syscall_64+0xcd/0x490 [ 508.947485][T14582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.947517][T14582] RIP: 0033:0x7fa0ea58e929 [ 508.947542][T14582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.947574][T14582] RSP: 002b:00007fa0eb3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 508.947606][T14582] RAX: ffffffffffffffda RBX: 00007fa0ea7b6160 RCX: 00007fa0ea58e929 [ 508.947627][T14582] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 508.947648][T14582] RBP: 00007fa0eb3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 508.947667][T14582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.947688][T14582] R13: 0000000000000000 R14: 00007fa0ea7b6160 R15: 00007fff38593c08 [ 508.947719][T14582] [ 509.200256][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.667744][T14589] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 511.157080][T14626] CIFS mount error: No usable UNC path provided in device string! [ 511.157080][T14626] [ 511.167855][T14626] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 511.624592][T14631] Invalid ELF header magic: != ELF [ 511.631676][T14641] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 512.053939][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.060601][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.221683][T14652] FAULT_INJECTION: forcing a failure. [ 512.221683][T14652] name failslab, interval 1, probability 0, space 0, times 0 [ 512.244908][T14652] CPU: 0 UID: 0 PID: 14652 Comm: syz.0.2158 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 512.244955][T14652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.244975][T14652] Call Trace: [ 512.244985][T14652] [ 512.244997][T14652] dump_stack_lvl+0x16c/0x1f0 [ 512.245049][T14652] should_fail_ex+0x512/0x640 [ 512.245098][T14652] should_failslab+0xc2/0x120 [ 512.245129][T14652] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 512.245181][T14652] ? lock_release+0x201/0x2f0 [ 512.245217][T14652] ? __proc_create+0x2ce/0x8c0 [ 512.245263][T14652] __proc_create+0x2ce/0x8c0 [ 512.245305][T14652] ? __pfx___proc_create+0x10/0x10 [ 512.245347][T14652] ? lock_release+0x201/0x2f0 [ 512.245383][T14652] ? _raw_write_unlock+0x28/0x50 [ 512.245429][T14652] ? proc_register+0x314/0x5f0 [ 512.245479][T14652] proc_create_reg+0x7d/0x180 [ 512.245510][T14652] proc_create_data+0x86/0x110 [ 512.245540][T14652] ? __pfx_proc_create_data+0x10/0x10 [ 512.245570][T14652] ? cache_register_net+0x137/0x5e0 [ 512.245607][T14652] ? lock_release+0x201/0x2f0 [ 512.245650][T14652] cache_register_net+0x25a/0x5e0 [ 512.245687][T14652] nfsd_export_init+0xb6/0x250 [ 512.245721][T14652] ? __pfx_nfsd_net_init+0x10/0x10 [ 512.245753][T14652] nfsd_net_init+0x33/0x3d0 [ 512.245784][T14652] ? nfs4blocklayout_net_init+0x1a4/0x240 [ 512.245839][T14652] ? __pfx_nfsd_net_init+0x10/0x10 [ 512.245873][T14652] ops_init+0x1e2/0x5f0 [ 512.245904][T14652] setup_net+0x1ff/0x510 [ 512.245934][T14652] ? lockdep_init_map_type+0x5c/0x280 [ 512.245975][T14652] ? __pfx_setup_net+0x10/0x10 [ 512.246004][T14652] ? __raw_spin_lock_init+0x3a/0x110 [ 512.246056][T14652] ? debug_mutex_init+0x37/0x70 [ 512.246088][T14652] copy_net_ns+0x2a6/0x5f0 [ 512.246124][T14652] create_new_namespaces+0x3ea/0xa90 [ 512.246174][T14652] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 512.246206][T14652] ksys_unshare+0x45b/0xa40 [ 512.246244][T14652] ? __pfx_ksys_unshare+0x10/0x10 [ 512.246288][T14652] ? xfd_validate_state+0x61/0x180 [ 512.246335][T14652] __x64_sys_unshare+0x31/0x40 [ 512.246376][T14652] do_syscall_64+0xcd/0x490 [ 512.246406][T14652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.246438][T14652] RIP: 0033:0x7f1dfc78e929 [ 512.246462][T14652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.246494][T14652] RSP: 002b:00007f1dfd621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 512.246525][T14652] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78e929 [ 512.246547][T14652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 512.246571][T14652] RBP: 00007f1dfc810b39 R08: 0000000000000000 R09: 0000000000000000 [ 512.246590][T14652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.246610][T14652] R13: 0000000000000000 R14: 00007f1dfc9b5fa0 R15: 00007fff81822608 [ 512.246638][T14652] [ 513.242815][T14666] ubi: mtd0 is already attached to ubi0 [ 513.480195][T14677] vcan0: tx drop: invalid da for name 0x000000000000003f [ 514.569205][T14690] CIFS mount error: No usable UNC path provided in device string! [ 514.569205][T14690] [ 514.644138][T14690] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 517.057119][T14748] CIFS mount error: No usable UNC path provided in device string! [ 517.057119][T14748] [ 517.068195][T14748] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 517.106042][T14738] vcan0: tx drop: invalid da for name 0x000000000000003f [ 517.551557][T14760] FAULT_INJECTION: forcing a failure. [ 517.551557][T14760] name failslab, interval 1, probability 0, space 0, times 0 [ 517.561362][T14762] FAULT_INJECTION: forcing a failure. [ 517.561362][T14762] name failslab, interval 1, probability 0, space 0, times 0 [ 517.565462][T14760] CPU: 1 UID: 0 PID: 14760 Comm: syz.3.2182 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 517.565515][T14760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.565539][T14760] Call Trace: [ 517.565553][T14760] [ 517.565566][T14760] dump_stack_lvl+0x16c/0x1f0 [ 517.565630][T14760] should_fail_ex+0x512/0x640 [ 517.565688][T14760] ? sk_prot_alloc+0x1a8/0x2a0 [ 517.565730][T14760] should_failslab+0xc2/0x120 [ 517.565777][T14760] __kmalloc_noprof+0xd2/0x510 [ 517.565833][T14760] ? evm_inode_alloc_security+0x49/0xc0 [ 517.565899][T14760] sk_prot_alloc+0x1a8/0x2a0 [ 517.565942][T14760] sk_alloc+0x36/0xc20 [ 517.565997][T14760] __netlink_create+0x5e/0x2c0 [ 517.566057][T14760] __netlink_kernel_create+0xed/0x750 [ 517.566100][T14760] ? __pfx___netlink_kernel_create+0x10/0x10 [ 517.566140][T14760] ? __pfx_static_key_fast_inc_not_disabled+0x10/0x10 [ 517.566194][T14760] ? static_key_slow_inc+0x21/0x30 [ 517.566244][T14760] ? rcu_is_watching+0x12/0xc0 [ 517.566282][T14760] ? lock_release+0x201/0x2f0 [ 517.566330][T14760] ? __pfx_crypto_netlink_init+0x10/0x10 [ 517.566388][T14760] crypto_netlink_init+0xb7/0x140 [ 517.566443][T14760] ? cpus_read_unlock+0x83/0x150 [ 517.566481][T14760] ? __pfx_crypto_netlink_init+0x10/0x10 [ 517.566536][T14760] ? __nf_register_net_hook+0x371/0x730 [ 517.566573][T14760] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 517.566631][T14760] ? nf_register_net_hook+0x117/0x160 [ 517.566666][T14760] ? nf_register_net_hooks+0xb1/0xd0 [ 517.566703][T14760] ops_init+0x1e2/0x5f0 [ 517.566749][T14760] setup_net+0x1ff/0x510 [ 517.566784][T14760] ? lockdep_init_map_type+0x5c/0x280 [ 517.566835][T14760] ? __pfx_setup_net+0x10/0x10 [ 517.566870][T14760] ? __raw_spin_lock_init+0x3a/0x110 [ 517.566931][T14760] ? debug_mutex_init+0x37/0x70 [ 517.566966][T14760] copy_net_ns+0x2a6/0x5f0 [ 517.567006][T14760] create_new_namespaces+0x3ea/0xa90 [ 517.567052][T14760] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 517.567094][T14760] ksys_unshare+0x45b/0xa40 [ 517.567141][T14760] ? __pfx_ksys_unshare+0x10/0x10 [ 517.567189][T14760] ? xfd_validate_state+0x61/0x180 [ 517.567245][T14760] __x64_sys_unshare+0x31/0x40 [ 517.567295][T14760] do_syscall_64+0xcd/0x490 [ 517.567333][T14760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.567372][T14760] RIP: 0033:0x7f11b798e929 [ 517.567401][T14760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.567440][T14760] RSP: 002b:00007f11b87bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 517.567477][T14760] RAX: ffffffffffffffda RBX: 00007f11b7bb5fa0 RCX: 00007f11b798e929 [ 517.567505][T14760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 517.567528][T14760] RBP: 00007f11b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 517.567554][T14760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.567580][T14760] R13: 0000000000000000 R14: 00007f11b7bb5fa0 R15: 00007ffdeee53b68 [ 517.567617][T14760] [ 517.883433][T14762] CPU: 1 UID: 0 PID: 14762 Comm: syz.0.2183 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 517.883484][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.883503][T14762] Call Trace: [ 517.883512][T14762] [ 517.883523][T14762] dump_stack_lvl+0x16c/0x1f0 [ 517.883572][T14762] should_fail_ex+0x512/0x640 [ 517.883616][T14762] should_failslab+0xc2/0x120 [ 517.883642][T14762] __kvmalloc_node_noprof+0x137/0x620 [ 517.883683][T14762] ? __pfx___mutex_lock+0x10/0x10 [ 517.883709][T14762] ? nf_hook_entries_grow+0x22b/0x860 [ 517.883756][T14762] ? nf_hook_entries_grow+0x22b/0x860 [ 517.883799][T14762] nf_hook_entries_grow+0x22b/0x860 [ 517.883844][T14762] ? rcu_is_watching+0x12/0xc0 [ 517.883881][T14762] ? lock_release+0x201/0x2f0 [ 517.883916][T14762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 517.883970][T14762] __nf_register_net_hook+0x1cd/0x730 [ 517.884000][T14762] nf_register_net_hook+0x109/0x160 [ 517.884027][T14762] nf_register_net_hooks+0x5d/0xd0 [ 517.884055][T14762] ? __pfx_apparmor_nf_register+0x10/0x10 [ 517.884106][T14762] ops_init+0x1e2/0x5f0 [ 517.884135][T14762] setup_net+0x1ff/0x510 [ 517.884160][T14762] ? lockdep_init_map_type+0x5c/0x280 [ 517.884197][T14762] ? __pfx_setup_net+0x10/0x10 [ 517.884221][T14762] ? __raw_spin_lock_init+0x3a/0x110 [ 517.884270][T14762] ? debug_mutex_init+0x37/0x70 [ 517.884297][T14762] copy_net_ns+0x2a6/0x5f0 [ 517.884328][T14762] create_new_namespaces+0x3ea/0xa90 [ 517.884362][T14762] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 517.884393][T14762] ksys_unshare+0x45b/0xa40 [ 517.884429][T14762] ? __pfx_ksys_unshare+0x10/0x10 [ 517.884470][T14762] ? xfd_validate_state+0x61/0x180 [ 517.884510][T14762] __x64_sys_unshare+0x31/0x40 [ 517.884545][T14762] do_syscall_64+0xcd/0x490 [ 517.884570][T14762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.884598][T14762] RIP: 0033:0x7f1dfc78e929 [ 517.884619][T14762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.884647][T14762] RSP: 002b:00007f1dfd621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 517.884674][T14762] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78e929 [ 517.884694][T14762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 517.884712][T14762] RBP: 00007f1dfc810b39 R08: 0000000000000000 R09: 0000000000000000 [ 517.884730][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.884747][T14762] R13: 0000000000000000 R14: 00007f1dfc9b5fa0 R15: 00007fff81822608 [ 517.884772][T14762] [ 518.493848][ T5845] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 518.493890][ T5845] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 518.509059][ T5845] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 518.509091][ T5845] Bluetooth: hci2: adv larger than maximum supported [ 518.516560][ T5845] Bluetooth: hci2: adv larger than maximum supported [ 518.523481][ T5845] Bluetooth: hci2: Malformed LE Event: 0x0d [ 518.895238][T14796] CIFS mount error: No usable UNC path provided in device string! [ 518.895238][T14796] [ 518.907565][T14796] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 519.094320][T14803] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2192'. [ 520.138696][T14824] FAULT_INJECTION: forcing a failure. [ 520.138696][T14824] name fail_futex, interval 1, probability 0, space 0, times 0 [ 520.205804][T14824] CPU: 0 UID: 0 PID: 14824 Comm: syz.2.2198 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 520.205861][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.205881][T14824] Call Trace: [ 520.205892][T14824] [ 520.205905][T14824] dump_stack_lvl+0x16c/0x1f0 [ 520.205963][T14824] should_fail_ex+0x512/0x640 [ 520.206017][T14824] get_futex_key+0x1d0/0x1540 [ 520.206057][T14824] ? madvise_walk_vmas+0x238/0x2c0 [ 520.206089][T14824] ? __pfx_get_futex_key+0x10/0x10 [ 520.206124][T14824] ? __pfx___blk_flush_plug+0x10/0x10 [ 520.206164][T14824] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 520.206190][T14824] ? lock_release+0x201/0x2f0 [ 520.206230][T14824] futex_wake+0xea/0x530 [ 520.206268][T14824] ? __pfx_futex_wait+0x10/0x10 [ 520.206307][T14824] ? __pfx_futex_wake+0x10/0x10 [ 520.206348][T14824] ? __pfx___up_read+0x10/0x10 [ 520.206387][T14824] ? madvise_unlock+0xf6/0x190 [ 520.206412][T14824] ? lock_release+0x201/0x2f0 [ 520.206449][T14824] do_futex+0x1e3/0x350 [ 520.206481][T14824] ? __pfx_do_futex+0x10/0x10 [ 520.206513][T14824] ? __pfx_do_madvise+0x10/0x10 [ 520.206541][T14824] ? __pfx___might_resched+0x10/0x10 [ 520.206570][T14824] __x64_sys_futex+0x1e0/0x4c0 [ 520.206608][T14824] ? __pfx___x64_sys_futex+0x10/0x10 [ 520.206641][T14824] ? xfd_validate_state+0x61/0x180 [ 520.206682][T14824] do_syscall_64+0xcd/0x490 [ 520.206707][T14824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.206736][T14824] RIP: 0033:0x7f1b0e38e929 [ 520.206763][T14824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.206793][T14824] RSP: 002b:00007f1b0f2ab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 520.206820][T14824] RAX: ffffffffffffffda RBX: 00007f1b0e5b5fa8 RCX: 00007f1b0e38e929 [ 520.206845][T14824] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1b0e5b5fac [ 520.206862][T14824] RBP: 00007f1b0e5b5fa0 R08: 00007f1b0f2ac000 R09: 0000000000000000 [ 520.206880][T14824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1b0e5b5fac [ 520.206897][T14824] R13: 0000000000000000 R14: 00007ffd8e135c20 R15: 00007ffd8e135d08 [ 520.206924][T14824] [ 520.630806][T14825] vcan0: tx drop: invalid da for name 0x000000000000003f [ 521.527910][T14851] loop6: detected capacity change from 0 to 8192 [ 522.713716][T14876] vcan0: tx drop: invalid da for name 0x000000000000003f [ 523.834404][T14911] FAULT_INJECTION: forcing a failure. [ 523.834404][T14911] name failslab, interval 1, probability 0, space 0, times 0 [ 523.847905][T14911] CPU: 0 UID: 0 PID: 14911 Comm: syz.3.2216 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 523.847951][T14911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.847971][T14911] Call Trace: [ 523.847982][T14911] [ 523.847996][T14911] dump_stack_lvl+0x16c/0x1f0 [ 523.848051][T14911] should_fail_ex+0x512/0x640 [ 523.848095][T14911] ? sk_prot_alloc+0x1a8/0x2a0 [ 523.848126][T14911] should_failslab+0xc2/0x120 [ 523.848154][T14911] __kmalloc_noprof+0xd2/0x510 [ 523.848198][T14911] ? evm_inode_alloc_security+0x49/0xc0 [ 523.848249][T14911] sk_prot_alloc+0x1a8/0x2a0 [ 523.848281][T14911] sk_alloc+0x36/0xc20 [ 523.848321][T14911] __netlink_create+0x5e/0x2c0 [ 523.848368][T14911] __netlink_kernel_create+0xed/0x750 [ 523.848400][T14911] ? __pfx___netlink_kernel_create+0x10/0x10 [ 523.848430][T14911] ? __pfx_static_key_fast_inc_not_disabled+0x10/0x10 [ 523.848470][T14911] ? static_key_slow_inc+0x21/0x30 [ 523.848505][T14911] ? rcu_is_watching+0x12/0xc0 [ 523.848533][T14911] ? lock_release+0x201/0x2f0 [ 523.848567][T14911] ? __pfx_crypto_netlink_init+0x10/0x10 [ 523.848620][T14911] crypto_netlink_init+0xb7/0x140 [ 523.848662][T14911] ? cpus_read_unlock+0x83/0x150 [ 523.848692][T14911] ? __pfx_crypto_netlink_init+0x10/0x10 [ 523.848736][T14911] ? __nf_register_net_hook+0x371/0x730 [ 523.848763][T14911] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 523.848805][T14911] ? nf_register_net_hook+0x117/0x160 [ 523.848831][T14911] ? nf_register_net_hooks+0xb1/0xd0 [ 523.848858][T14911] ops_init+0x1e2/0x5f0 [ 523.848885][T14911] setup_net+0x1ff/0x510 [ 523.848910][T14911] ? lockdep_init_map_type+0x5c/0x280 [ 523.848948][T14911] ? __pfx_setup_net+0x10/0x10 [ 523.848972][T14911] ? __raw_spin_lock_init+0x3a/0x110 [ 523.849014][T14911] ? debug_mutex_init+0x37/0x70 [ 523.849041][T14911] copy_net_ns+0x2a6/0x5f0 [ 523.849077][T14911] create_new_namespaces+0x3ea/0xa90 [ 523.849117][T14911] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 523.849155][T14911] ksys_unshare+0x45b/0xa40 [ 523.849197][T14911] ? __pfx_ksys_unshare+0x10/0x10 [ 523.849238][T14911] ? xfd_validate_state+0x61/0x180 [ 523.849283][T14911] __x64_sys_unshare+0x31/0x40 [ 523.849323][T14911] do_syscall_64+0xcd/0x490 [ 523.849355][T14911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.849388][T14911] RIP: 0033:0x7f11b798e929 [ 523.849414][T14911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.849448][T14911] RSP: 002b:00007f11b87bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 523.849480][T14911] RAX: ffffffffffffffda RBX: 00007f11b7bb5fa0 RCX: 00007f11b798e929 [ 523.849501][T14911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 523.849521][T14911] RBP: 00007f11b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 523.849540][T14911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.849559][T14911] R13: 0000000000000000 R14: 00007f11b7bb5fa0 R15: 00007ffdeee53b68 [ 523.849597][T14911] [ 524.152281][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.005677][T14927] vcan0: tx drop: invalid da for name 0x000000000000003f [ 525.379894][T14943] vcan0: tx drop: invalid da for name 0x000000000000003f [ 526.565752][T14976] FAULT_INJECTION: forcing a failure. [ 526.565752][T14976] name failslab, interval 1, probability 0, space 0, times 0 [ 526.584175][T14976] CPU: 1 UID: 0 PID: 14976 Comm: syz.0.2228 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 526.584222][T14976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 526.584241][T14976] Call Trace: [ 526.584252][T14976] [ 526.584263][T14976] dump_stack_lvl+0x16c/0x1f0 [ 526.584318][T14976] should_fail_ex+0x512/0x640 [ 526.584370][T14976] should_failslab+0xc2/0x120 [ 526.584410][T14976] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 526.584458][T14976] ? lock_release+0x201/0x2f0 [ 526.584500][T14976] ? __proc_create+0x2ce/0x8c0 [ 526.584550][T14976] __proc_create+0x2ce/0x8c0 [ 526.584599][T14976] ? __pfx___proc_create+0x10/0x10 [ 526.584648][T14976] ? lock_release+0x201/0x2f0 [ 526.584692][T14976] ? _raw_write_unlock+0x28/0x50 [ 526.584737][T14976] ? proc_register+0x314/0x5f0 [ 526.584786][T14976] proc_create_reg+0x7d/0x180 [ 526.584819][T14976] proc_create_data+0x86/0x110 [ 526.584849][T14976] ? __pfx_proc_create_data+0x10/0x10 [ 526.584879][T14976] ? cache_register_net+0x137/0x5e0 [ 526.584916][T14976] ? lock_release+0x201/0x2f0 [ 526.584959][T14976] cache_register_net+0x2d6/0x5e0 [ 526.584997][T14976] nfsd_idmap_init+0x16e/0x250 [ 526.585038][T14976] ? __pfx_nfsd_net_init+0x10/0x10 [ 526.585071][T14976] nfsd_net_init+0x69/0x3d0 [ 526.585100][T14976] ? nfs4blocklayout_net_init+0x1a4/0x240 [ 526.585154][T14976] ? __pfx_nfsd_net_init+0x10/0x10 [ 526.585187][T14976] ops_init+0x1e2/0x5f0 [ 526.585221][T14976] setup_net+0x1ff/0x510 [ 526.585249][T14976] ? lockdep_init_map_type+0x5c/0x280 [ 526.585293][T14976] ? __pfx_setup_net+0x10/0x10 [ 526.585323][T14976] ? __raw_spin_lock_init+0x3a/0x110 [ 526.585372][T14976] ? debug_mutex_init+0x37/0x70 [ 526.585416][T14976] copy_net_ns+0x2a6/0x5f0 [ 526.585454][T14976] create_new_namespaces+0x3ea/0xa90 [ 526.585494][T14976] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 526.585532][T14976] ksys_unshare+0x45b/0xa40 [ 526.585573][T14976] ? __pfx_ksys_unshare+0x10/0x10 [ 526.585614][T14976] ? xfd_validate_state+0x61/0x180 [ 526.585661][T14976] __x64_sys_unshare+0x31/0x40 [ 526.585702][T14976] do_syscall_64+0xcd/0x490 [ 526.585733][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.585767][T14976] RIP: 0033:0x7f1dfc78e929 [ 526.585795][T14976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.585830][T14976] RSP: 002b:00007f1dfd621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 526.585863][T14976] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78e929 [ 526.585886][T14976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 526.585906][T14976] RBP: 00007f1dfc810b39 R08: 0000000000000000 R09: 0000000000000000 [ 526.585927][T14976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.585947][T14976] R13: 0000000000000000 R14: 00007f1dfc9b5fa0 R15: 00007fff81822608 [ 526.585978][T14976] [ 527.202276][T14988] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2233'. [ 528.022342][T15002] vcan0: tx drop: invalid da for name 0x000000000000003f [ 528.486447][T15028] FAULT_INJECTION: forcing a failure. [ 528.486447][T15028] name failslab, interval 1, probability 0, space 0, times 0 [ 528.572212][T15028] CPU: 1 UID: 0 PID: 15028 Comm: syz.2.2239 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 528.572258][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.572277][T15028] Call Trace: [ 528.572288][T15028] [ 528.572301][T15028] dump_stack_lvl+0x16c/0x1f0 [ 528.572356][T15028] should_fail_ex+0x512/0x640 [ 528.572407][T15028] should_failslab+0xc2/0x120 [ 528.572439][T15028] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 528.572488][T15028] ? lock_release+0x201/0x2f0 [ 528.572530][T15028] ? __proc_create+0x2ce/0x8c0 [ 528.572584][T15028] __proc_create+0x2ce/0x8c0 [ 528.572633][T15028] ? __pfx___proc_create+0x10/0x10 [ 528.572681][T15028] ? lock_release+0x201/0x2f0 [ 528.572724][T15028] ? _raw_write_unlock+0x28/0x50 [ 528.572769][T15028] ? proc_register+0x314/0x5f0 [ 528.572821][T15028] proc_create_reg+0x7d/0x180 [ 528.572853][T15028] proc_create_data+0x86/0x110 [ 528.572882][T15028] ? __pfx_proc_create_data+0x10/0x10 [ 528.572912][T15028] ? cache_register_net+0x137/0x5e0 [ 528.572949][T15028] ? lock_release+0x201/0x2f0 [ 528.572994][T15028] cache_register_net+0x2d6/0x5e0 [ 528.573030][T15028] nfsd_idmap_init+0x16e/0x250 [ 528.573071][T15028] ? __pfx_nfsd_net_init+0x10/0x10 [ 528.573104][T15028] nfsd_net_init+0x69/0x3d0 [ 528.573136][T15028] ? nfs4blocklayout_net_init+0x1a4/0x240 [ 528.573190][T15028] ? __pfx_nfsd_net_init+0x10/0x10 [ 528.573234][T15028] ops_init+0x1e2/0x5f0 [ 528.573267][T15028] setup_net+0x1ff/0x510 [ 528.573297][T15028] ? lockdep_init_map_type+0x5c/0x280 [ 528.573343][T15028] ? __pfx_setup_net+0x10/0x10 [ 528.573372][T15028] ? __raw_spin_lock_init+0x3a/0x110 [ 528.573425][T15028] ? debug_mutex_init+0x37/0x70 [ 528.573457][T15028] copy_net_ns+0x2a6/0x5f0 [ 528.573493][T15028] create_new_namespaces+0x3ea/0xa90 [ 528.573531][T15028] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 528.573569][T15028] ksys_unshare+0x45b/0xa40 [ 528.573610][T15028] ? __pfx_ksys_unshare+0x10/0x10 [ 528.573654][T15028] ? xfd_validate_state+0x61/0x180 [ 528.573702][T15028] __x64_sys_unshare+0x31/0x40 [ 528.573743][T15028] do_syscall_64+0xcd/0x490 [ 528.573774][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.573808][T15028] RIP: 0033:0x7f1b0e38e929 [ 528.573834][T15028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.573868][T15028] RSP: 002b:00007f1b0f2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 528.573901][T15028] RAX: ffffffffffffffda RBX: 00007f1b0e5b5fa0 RCX: 00007f1b0e38e929 [ 528.573923][T15028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 528.573943][T15028] RBP: 00007f1b0e410b39 R08: 0000000000000000 R09: 0000000000000000 [ 528.573962][T15028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.573979][T15028] R13: 0000000000000000 R14: 00007f1b0e5b5fa0 R15: 00007ffd8e135d08 [ 528.574010][T15028] [ 528.956145][T15038] vcan0: tx drop: invalid da for name 0x000000000000003f [ 529.709709][T15034] vcan0: tx drop: invalid da for name 0x000000000000003f [ 530.517734][ T5845] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 530.517780][ T5845] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 530.532996][ T5845] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 530.533032][ T5845] Bluetooth: hci0: adv larger than maximum supported [ 530.540329][ T5845] Bluetooth: hci0: adv larger than maximum supported [ 530.547081][ T5845] Bluetooth: hci0: Malformed LE Event: 0x0d [ 531.386435][T15079] vcan0: tx drop: invalid da for name 0x000000000000003f [ 532.028284][T15102] FAULT_INJECTION: forcing a failure. [ 532.028284][T15102] name failslab, interval 1, probability 0, space 0, times 0 [ 532.072117][T15102] CPU: 1 UID: 0 PID: 15102 Comm: syz.3.2254 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 532.072165][T15102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.072185][T15102] Call Trace: [ 532.072195][T15102] [ 532.072207][T15102] dump_stack_lvl+0x16c/0x1f0 [ 532.072266][T15102] should_fail_ex+0x512/0x640 [ 532.072317][T15102] should_failslab+0xc2/0x120 [ 532.072348][T15102] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 532.072400][T15102] ? sock_alloc_inode+0x25/0x1c0 [ 532.072439][T15102] ? __pfx_sock_alloc_inode+0x10/0x10 [ 532.072475][T15102] sock_alloc_inode+0x25/0x1c0 [ 532.072511][T15102] alloc_inode+0x64/0x240 [ 532.072544][T15102] sock_alloc+0x40/0x280 [ 532.072576][T15102] sock_create_lite+0x82/0x120 [ 532.072610][T15102] __netlink_kernel_create+0xbd/0x750 [ 532.072649][T15102] ? __pfx___netlink_kernel_create+0x10/0x10 [ 532.072685][T15102] ? __pfx_static_key_fast_inc_not_disabled+0x10/0x10 [ 532.072732][T15102] ? static_key_slow_inc+0x21/0x30 [ 532.072775][T15102] ? rcu_is_watching+0x12/0xc0 [ 532.072808][T15102] ? lock_release+0x201/0x2f0 [ 532.072849][T15102] ? __pfx_crypto_netlink_init+0x10/0x10 [ 532.072900][T15102] crypto_netlink_init+0xb7/0x140 [ 532.072951][T15102] ? cpus_read_unlock+0x83/0x150 [ 532.072985][T15102] ? __pfx_crypto_netlink_init+0x10/0x10 [ 532.073047][T15102] ? __nf_register_net_hook+0x371/0x730 [ 532.073080][T15102] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 532.073131][T15102] ? nf_register_net_hook+0x117/0x160 [ 532.073163][T15102] ? nf_register_net_hooks+0xb1/0xd0 [ 532.073196][T15102] ops_init+0x1e2/0x5f0 [ 532.073229][T15102] setup_net+0x1ff/0x510 [ 532.073259][T15102] ? lockdep_init_map_type+0x5c/0x280 [ 532.073303][T15102] ? __pfx_setup_net+0x10/0x10 [ 532.073333][T15102] ? __raw_spin_lock_init+0x3a/0x110 [ 532.073385][T15102] ? debug_mutex_init+0x37/0x70 [ 532.073418][T15102] copy_net_ns+0x2a6/0x5f0 [ 532.073455][T15102] create_new_namespaces+0x3ea/0xa90 [ 532.073495][T15102] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 532.073534][T15102] ksys_unshare+0x45b/0xa40 [ 532.073577][T15102] ? __pfx_ksys_unshare+0x10/0x10 [ 532.073619][T15102] ? xfd_validate_state+0x61/0x180 [ 532.073667][T15102] __x64_sys_unshare+0x31/0x40 [ 532.073709][T15102] do_syscall_64+0xcd/0x490 [ 532.073740][T15102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.073774][T15102] RIP: 0033:0x7f11b798e929 [ 532.073800][T15102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.073832][T15102] RSP: 002b:00007f11b87bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 532.073864][T15102] RAX: ffffffffffffffda RBX: 00007f11b7bb5fa0 RCX: 00007f11b798e929 [ 532.073886][T15102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 532.073905][T15102] RBP: 00007f11b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 532.073924][T15102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.073942][T15102] R13: 0000000000000000 R14: 00007f11b7bb5fa0 R15: 00007ffdeee53b68 [ 532.073973][T15102] [ 532.787214][T15116] FAULT_INJECTION: forcing a failure. [ 532.787214][T15116] name failslab, interval 1, probability 0, space 0, times 0 [ 532.992734][T15116] CPU: 0 UID: 0 PID: 15116 Comm: syz.1.2256 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 532.992770][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.992786][T15116] Call Trace: [ 532.992794][T15116] [ 532.992804][T15116] dump_stack_lvl+0x16c/0x1f0 [ 532.992847][T15116] should_fail_ex+0x512/0x640 [ 532.992887][T15116] should_failslab+0xc2/0x120 [ 532.992910][T15116] __kvmalloc_node_noprof+0x137/0x620 [ 532.992945][T15116] ? __pfx___mutex_lock+0x10/0x10 [ 532.992967][T15116] ? rcu_is_watching+0x12/0xc0 [ 532.992990][T15116] ? nf_hook_entries_grow+0x22b/0x860 [ 532.993033][T15116] ? nf_hook_entries_grow+0x22b/0x860 [ 532.993071][T15116] nf_hook_entries_grow+0x22b/0x860 [ 532.993110][T15116] ? __pfx___debug_object_init+0x10/0x10 [ 532.993137][T15116] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.993177][T15116] __nf_register_net_hook+0x1cd/0x730 [ 532.993203][T15116] nf_register_net_hook+0x109/0x160 [ 532.993233][T15116] nf_register_net_hooks+0x5d/0xd0 [ 532.993264][T15116] ? __pfx_apparmor_nf_register+0x10/0x10 [ 532.993316][T15116] ops_init+0x1e2/0x5f0 [ 532.993348][T15116] setup_net+0x1ff/0x510 [ 532.993377][T15116] ? lockdep_init_map_type+0x5c/0x280 [ 532.993420][T15116] ? __pfx_setup_net+0x10/0x10 [ 532.993448][T15116] ? __raw_spin_lock_init+0x3a/0x110 [ 532.993496][T15116] ? debug_mutex_init+0x37/0x70 [ 532.993525][T15116] copy_net_ns+0x2a6/0x5f0 [ 532.993562][T15116] create_new_namespaces+0x3ea/0xa90 [ 532.993615][T15116] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 532.993654][T15116] ksys_unshare+0x45b/0xa40 [ 532.993696][T15116] ? __pfx_ksys_unshare+0x10/0x10 [ 532.993736][T15116] ? xfd_validate_state+0x61/0x180 [ 532.993780][T15116] __x64_sys_unshare+0x31/0x40 [ 532.993821][T15116] do_syscall_64+0xcd/0x490 [ 532.993850][T15116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.993884][T15116] RIP: 0033:0x7fa0ea58e929 [ 532.993909][T15116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.993942][T15116] RSP: 002b:00007fa0eb3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 532.993972][T15116] RAX: ffffffffffffffda RBX: 00007fa0ea7b6080 RCX: 00007fa0ea58e929 [ 532.993993][T15116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 532.994013][T15116] RBP: 00007fa0ea610b39 R08: 0000000000000000 R09: 0000000000000000 [ 532.994033][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.994053][T15116] R13: 0000000000000000 R14: 00007fa0ea7b6080 R15: 00007fff38593c08 [ 532.994084][T15116] [ 533.264271][T15104] vcan0: tx drop: invalid da for name 0x000000000000003f [ 534.061105][T15134] vcan0: tx drop: invalid da for name 0x000000000000003f [ 535.310367][T15164] FAULT_INJECTION: forcing a failure. [ 535.310367][T15164] name failslab, interval 1, probability 0, space 0, times 0 [ 535.338362][T15164] CPU: 1 UID: 0 PID: 15164 Comm: syz.3.2268 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 535.338416][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.338437][T15164] Call Trace: [ 535.338446][T15164] [ 535.338459][T15164] dump_stack_lvl+0x16c/0x1f0 [ 535.338531][T15164] should_fail_ex+0x512/0x640 [ 535.338589][T15164] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 535.338660][T15164] should_failslab+0xc2/0x120 [ 535.338695][T15164] __kmalloc_noprof+0xd2/0x510 [ 535.338750][T15164] tomoyo_realpath_from_path+0xc2/0x6e0 [ 535.338803][T15164] ? tomoyo_profile+0x47/0x60 [ 535.338862][T15164] tomoyo_path_number_perm+0x245/0x580 [ 535.338903][T15164] ? tomoyo_path_number_perm+0x237/0x580 [ 535.338949][T15164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 535.339000][T15164] ? preempt_count_add+0x76/0x150 [ 535.339065][T15164] ? rcu_is_watching+0x12/0xc0 [ 535.339102][T15164] ? __fget_files+0x204/0x3c0 [ 535.339148][T15164] ? hook_file_ioctl_common+0x145/0x410 [ 535.339188][T15164] ? lock_release+0x201/0x2f0 [ 535.339237][T15164] ? __fget_files+0x20e/0x3c0 [ 535.339287][T15164] security_file_ioctl+0x9b/0x240 [ 535.339333][T15164] __x64_sys_ioctl+0xb7/0x210 [ 535.339374][T15164] do_syscall_64+0xcd/0x490 [ 535.339409][T15164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.339446][T15164] RIP: 0033:0x7f11b798e929 [ 535.339484][T15164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.339524][T15164] RSP: 002b:00007f11b87bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.339558][T15164] RAX: ffffffffffffffda RBX: 00007f11b7bb5fa0 RCX: 00007f11b798e929 [ 535.339584][T15164] RDX: 0000200000000080 RSI: 00000000c008ae88 RDI: 0000000000000004 [ 535.339606][T15164] RBP: 00007f11b87bf090 R08: 0000000000000000 R09: 0000000000000000 [ 535.339629][T15164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.339651][T15164] R13: 0000000000000000 R14: 00007f11b7bb5fa0 R15: 00007ffdeee53b68 [ 535.339685][T15164] [ 535.339701][T15164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 535.979059][T15170] Invalid ELF header magic: != ELF [ 536.495832][T15193] FAULT_INJECTION: forcing a failure. [ 536.495832][T15193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.495878][T15193] CPU: 0 UID: 0 PID: 15193 Comm: syz.1.2274 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 536.495918][T15193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.495936][T15193] Call Trace: [ 536.495946][T15193] [ 536.495959][T15193] dump_stack_lvl+0x16c/0x1f0 [ 536.496009][T15193] should_fail_ex+0x512/0x640 [ 536.496058][T15193] _copy_from_user+0x2e/0xd0 [ 536.496107][T15193] kstrtouint_from_user+0xd6/0x1d0 [ 536.496146][T15193] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 536.496191][T15193] ? simple_read_from_buffer+0x10d/0x170 [ 536.496232][T15193] proc_fail_nth_write+0x83/0x250 [ 536.496265][T15193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 536.496302][T15193] ? __pfx___might_resched+0x10/0x10 [ 536.496339][T15193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 536.496399][T15193] vfs_write+0x29d/0x1150 [ 536.496444][T15193] ? __pfx___mutex_lock+0x10/0x10 [ 536.496471][T15193] ? __pfx_vfs_write+0x10/0x10 [ 536.496513][T15193] ? __fget_files+0x204/0x3c0 [ 536.496551][T15193] ? rcu_is_watching+0x12/0xc0 [ 536.496586][T15193] ? __fget_files+0x20e/0x3c0 [ 536.496632][T15193] ksys_write+0x12a/0x250 [ 536.496688][T15193] ? __pfx_ksys_write+0x10/0x10 [ 536.496737][T15193] do_syscall_64+0xcd/0x490 [ 536.496766][T15193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.496797][T15193] RIP: 0033:0x7fa0ea58d3df [ 536.496821][T15193] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 536.496852][T15193] RSP: 002b:00007fa0eb3de030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 536.496880][T15193] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0ea58d3df [ 536.496899][T15193] RDX: 0000000000000001 RSI: 00007fa0eb3de0a0 RDI: 0000000000000004 [ 536.496917][T15193] RBP: 00007fa0eb3de090 R08: 0000000000000000 R09: 0000000000000000 [ 536.496934][T15193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 536.496951][T15193] R13: 0000000000000001 R14: 00007fa0ea7b6080 R15: 00007fff38593c08 [ 536.496980][T15193] [ 536.939427][T15184] vcan0: tx drop: invalid da for name 0x000000000000003f [ 537.932185][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 537.941391][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 537.951640][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 537.980045][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 537.988811][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 538.262660][ T6685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.342253][ T6685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.364713][T15227] chnl_net:caif_netlink_parms(): no params data found [ 538.411473][ T6685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.509340][ T6685] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.534824][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.542070][T15227] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.549627][T15227] bridge_slave_0: entered allmulticast mode [ 538.556896][T15227] bridge_slave_0: entered promiscuous mode [ 538.570336][T15227] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.578755][T15227] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.587859][T15227] bridge_slave_1: entered allmulticast mode [ 538.601049][T15227] bridge_slave_1: entered promiscuous mode [ 538.666576][T15227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.701313][T15227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.830330][T15227] team0: Port device team_slave_0 added [ 538.844270][T15227] team0: Port device team_slave_1 added [ 538.983369][ T6685] bridge_slave_1: left allmulticast mode [ 538.989970][ T6685] bridge_slave_1: left promiscuous mode [ 539.004163][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.057289][ T6685] bridge_slave_0: left allmulticast mode [ 539.067313][ T6685] bridge_slave_0: left promiscuous mode [ 539.088330][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.737127][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.781215][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.795935][ T6685] bond0 (unregistering): Released all slaves [ 539.813248][T15227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.822204][T15227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.850164][T15227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.886848][T15227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.894067][T15227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.921972][T15227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.064628][ T5845] Bluetooth: hci3: command tx timeout [ 540.099675][T15227] hsr_slave_0: entered promiscuous mode [ 540.116371][T15227] hsr_slave_1: entered promiscuous mode [ 540.127260][T15227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.148746][T15227] Cannot create hsr debugfs directory [ 540.273293][ T6685] hsr_slave_0: left promiscuous mode [ 540.290469][ T6685] hsr_slave_1: left promiscuous mode [ 540.300070][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.312667][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.331080][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.345359][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.367233][ T6685] veth1_macvtap: left promiscuous mode [ 540.372880][ T6685] veth0_macvtap: left promiscuous mode [ 540.415432][T15270] vcan0: tx drop: invalid da for name 0x000000000000003f [ 540.596190][ T6685] team0 (unregistering): Port device team_slave_1 removed [ 540.632655][ T6685] team0 (unregistering): Port device team_slave_0 removed [ 542.146042][ T5845] Bluetooth: hci3: command tx timeout [ 542.167904][T15227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 542.316903][T15227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 542.327339][T15227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 542.347845][T15227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 542.716458][T15227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.735592][T15227] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.752883][T12852] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.760089][T12852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.776743][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.783927][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.873234][T15227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.302336][T15227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.562158][T15227] veth0_vlan: entered promiscuous mode [ 543.572155][T15227] veth1_vlan: entered promiscuous mode [ 543.590646][T15227] veth0_macvtap: entered promiscuous mode [ 543.599536][T15227] veth1_macvtap: entered promiscuous mode [ 543.621398][T15227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.692004][T15227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.922739][T15227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.972010][T15227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.108583][T15227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.152760][T15227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.271676][ T5845] Bluetooth: hci3: command tx timeout [ 544.357881][T15227] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 544.400364][T15227] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 544.413181][ T6685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.431977][ T6685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.601428][ T6685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.641497][ T6685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.938245][T15427] vcan0: tx drop: invalid da for name 0x000000000000003f [ 546.329377][ T5845] Bluetooth: hci3: command tx timeout [ 548.955529][T15490] vcan0: tx drop: invalid da for name 0x000000000000003f [ 549.451544][T15507] FAULT_INJECTION: forcing a failure. [ 549.451544][T15507] name fail_futex, interval 1, probability 0, space 0, times 0 [ 549.545374][T15507] CPU: 0 UID: 0 PID: 15507 Comm: syz.3.2325 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 549.545410][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.545426][T15507] Call Trace: [ 549.545434][T15507] [ 549.545443][T15507] dump_stack_lvl+0x16c/0x1f0 [ 549.545494][T15507] should_fail_ex+0x512/0x640 [ 549.545533][T15507] get_futex_key+0x1d0/0x1540 [ 549.545563][T15507] ? __pfx_get_futex_key+0x10/0x10 [ 549.545590][T15507] ? __pfx___schedule+0x10/0x10 [ 549.545624][T15507] ? trace_pid_list_is_set+0xfb/0x150 [ 549.545657][T15507] futex_wait_setup+0x9d/0x550 [ 549.545697][T15507] __futex_wait+0x194/0x2f0 [ 549.545732][T15507] ? __pfx___futex_wait+0x10/0x10 [ 549.545770][T15507] ? __pfx_futex_wake_mark+0x10/0x10 [ 549.545807][T15507] ? futex_wake+0x456/0x530 [ 549.545845][T15507] futex_wait+0xe8/0x380 [ 549.545878][T15507] ? __pfx_futex_wait+0x10/0x10 [ 549.545916][T15507] ? do_writev+0x218/0x340 [ 549.545948][T15507] ? rcu_is_watching+0x12/0xc0 [ 549.545972][T15507] ? lock_release+0x201/0x2f0 [ 549.546006][T15507] do_futex+0x229/0x350 [ 549.546035][T15507] ? __pfx_do_futex+0x10/0x10 [ 549.546062][T15507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 549.546107][T15507] __x64_sys_futex+0x1e0/0x4c0 [ 549.546138][T15507] ? fput+0x70/0xf0 [ 549.546159][T15507] ? __pfx___x64_sys_futex+0x10/0x10 [ 549.546189][T15507] ? xfd_validate_state+0x61/0x180 [ 549.546221][T15507] ? __pfx_do_writev+0x10/0x10 [ 549.546257][T15507] do_syscall_64+0xcd/0x490 [ 549.546280][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.546305][T15507] RIP: 0033:0x7f11b798e929 [ 549.546324][T15507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.546349][T15507] RSP: 002b:00007f11b87bf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 549.546372][T15507] RAX: ffffffffffffffda RBX: 00007f11b7bb5fa8 RCX: 00007f11b798e929 [ 549.546390][T15507] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11b7bb5fa8 [ 549.546406][T15507] RBP: 00007f11b7bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 549.546421][T15507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11b7bb5fac [ 549.546437][T15507] R13: 0000000000000000 R14: 00007ffdeee53a80 R15: 00007ffdeee53b68 [ 549.546472][T15507] [ 552.051234][T15540] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 552.595811][T15555] CIFS mount error: No usable UNC path provided in device string! [ 552.595811][T15555] [ 552.606150][T15555] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 553.075234][T15557] vcan0: tx drop: invalid da for name 0x000000000000003f [ 555.715896][T15588] vcan0: tx drop: invalid da for name 0x000000000000003f [ 555.754965][T15607] netlink: 94 bytes leftover after parsing attributes in process `syz.1.2345'. [ 555.850170][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 556.054855][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 556.073754][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 556.083521][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 556.093130][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 556.103009][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 556.124014][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 556.182772][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 556.185889][T15603] could not allocate digest TFM handle [ 556.272940][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 558.419069][T15661] vcan0: tx drop: invalid da for name 0x000000000000003f [ 559.415141][T15693] can: request_module (can-proto-0) failed. [ 559.540340][T15670] vcan0: tx drop: invalid da for name 0x000000000000003f [ 561.161512][T15735] vcan0: tx drop: invalid da for name 0x000000000000003f [ 561.570483][T15757] netlink: 'syz.3.2376': attribute type 11 has an invalid length. [ 561.633863][T15757] netlink: 'syz.3.2376': attribute type 11 has an invalid length. [ 561.641892][T15757] netlink: 'syz.3.2376': attribute type 11 has an invalid length. [ 563.977038][T15804] FAULT_INJECTION: forcing a failure. [ 563.977038][T15804] name failslab, interval 1, probability 0, space 0, times 0 [ 564.053134][T15800] CIFS mount error: No usable UNC path provided in device string! [ 564.053134][T15800] [ 564.070459][T15807] FAULT_INJECTION: forcing a failure. [ 564.070459][T15807] name failslab, interval 1, probability 0, space 0, times 0 [ 564.085027][T15800] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 564.104303][T15807] CPU: 0 UID: 0 PID: 15807 Comm: syz.3.2388 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 564.104354][T15807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.104376][T15807] Call Trace: [ 564.104388][T15807] [ 564.104401][T15807] dump_stack_lvl+0x16c/0x1f0 [ 564.104458][T15807] should_fail_ex+0x512/0x640 [ 564.104522][T15807] should_failslab+0xc2/0x120 [ 564.104554][T15807] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 564.104606][T15807] ? lock_release+0x201/0x2f0 [ 564.104648][T15807] ? __proc_create+0x2ce/0x8c0 [ 564.104702][T15807] __proc_create+0x2ce/0x8c0 [ 564.104756][T15807] ? __pfx___proc_create+0x10/0x10 [ 564.104806][T15807] ? lock_release+0x201/0x2f0 [ 564.104853][T15807] ? _raw_write_unlock+0x28/0x50 [ 564.104901][T15807] ? proc_register+0x314/0x5f0 [ 564.104957][T15807] proc_create_reg+0x7d/0x180 [ 564.104989][T15807] proc_create_data+0x86/0x110 [ 564.105020][T15807] ? __pfx_proc_create_data+0x10/0x10 [ 564.105052][T15807] ? cache_register_net+0x137/0x5e0 [ 564.105091][T15807] ? lock_release+0x201/0x2f0 [ 564.105135][T15807] cache_register_net+0x2d6/0x5e0 [ 564.105173][T15807] nfsd_idmap_init+0x16e/0x250 [ 564.105224][T15807] ? __pfx_nfsd_net_init+0x10/0x10 [ 564.105259][T15807] nfsd_net_init+0x69/0x3d0 [ 564.105293][T15807] ? nfs4blocklayout_net_init+0x1a4/0x240 [ 564.105349][T15807] ? __pfx_nfsd_net_init+0x10/0x10 [ 564.105383][T15807] ops_init+0x1e2/0x5f0 [ 564.105417][T15807] setup_net+0x1ff/0x510 [ 564.105447][T15807] ? lockdep_init_map_type+0x5c/0x280 [ 564.105499][T15807] ? __pfx_setup_net+0x10/0x10 [ 564.105530][T15807] ? __raw_spin_lock_init+0x3a/0x110 [ 564.105581][T15807] ? debug_mutex_init+0x37/0x70 [ 564.105614][T15807] copy_net_ns+0x2a6/0x5f0 [ 564.105654][T15807] create_new_namespaces+0x3ea/0xa90 [ 564.105694][T15807] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 564.105733][T15807] ksys_unshare+0x45b/0xa40 [ 564.105777][T15807] ? __pfx_ksys_unshare+0x10/0x10 [ 564.105821][T15807] ? xfd_validate_state+0x61/0x180 [ 564.105869][T15807] __x64_sys_unshare+0x31/0x40 [ 564.105911][T15807] do_syscall_64+0xcd/0x490 [ 564.105943][T15807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.105977][T15807] RIP: 0033:0x7f11b798e929 [ 564.106003][T15807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.106038][T15807] RSP: 002b:00007f11b87bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 564.106071][T15807] RAX: ffffffffffffffda RBX: 00007f11b7bb5fa0 RCX: 00007f11b798e929 [ 564.106093][T15807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 564.106114][T15807] RBP: 00007f11b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 564.106135][T15807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.106156][T15807] R13: 0000000000000000 R14: 00007f11b7bb5fa0 R15: 00007ffdeee53b68 [ 564.106188][T15807] [ 564.157635][T15804] CPU: 1 UID: 0 PID: 15804 Comm: syz.2.2387 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 564.157689][T15804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.157715][T15804] Call Trace: [ 564.157727][T15804] [ 564.157753][T15804] dump_stack_lvl+0x16c/0x1f0 [ 564.157818][T15804] should_fail_ex+0x512/0x640 [ 564.157877][T15804] should_failslab+0xc2/0x120 [ 564.157913][T15804] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 564.157970][T15804] ? sock_alloc_inode+0x25/0x1c0 [ 564.158014][T15804] ? __pfx_sock_alloc_inode+0x10/0x10 [ 564.158053][T15804] sock_alloc_inode+0x25/0x1c0 [ 564.158179][T15804] alloc_inode+0x64/0x240 [ 564.158226][T15804] sock_alloc+0x40/0x280 [ 564.158265][T15804] sock_create_lite+0x82/0x120 [ 564.158306][T15804] __netlink_kernel_create+0xbd/0x750 [ 564.158352][T15804] ? __pfx___netlink_kernel_create+0x10/0x10 [ 564.158393][T15804] ? __pfx_static_key_fast_inc_not_disabled+0x10/0x10 [ 564.158446][T15804] ? static_key_slow_inc+0x21/0x30 [ 564.158493][T15804] ? rcu_is_watching+0x12/0xc0 [ 564.158530][T15804] ? lock_release+0x201/0x2f0 [ 564.158579][T15804] ? __pfx_crypto_netlink_init+0x10/0x10 [ 564.158638][T15804] crypto_netlink_init+0xb7/0x140 [ 564.158692][T15804] ? cpus_read_unlock+0x83/0x150 [ 564.158730][T15804] ? __pfx_crypto_netlink_init+0x10/0x10 [ 564.158798][T15804] ? __nf_register_net_hook+0x371/0x730 [ 564.158833][T15804] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 564.158886][T15804] ? nf_register_net_hook+0x117/0x160 [ 564.158922][T15804] ? nf_register_net_hooks+0xb1/0xd0 [ 564.158960][T15804] ops_init+0x1e2/0x5f0 [ 564.158997][T15804] setup_net+0x1ff/0x510 [ 564.159032][T15804] ? lockdep_init_map_type+0x5c/0x280 [ 564.159082][T15804] ? __pfx_setup_net+0x10/0x10 [ 564.159116][T15804] ? __raw_spin_lock_init+0x3a/0x110 [ 564.159174][T15804] ? debug_mutex_init+0x37/0x70 [ 564.159211][T15804] copy_net_ns+0x2a6/0x5f0 [ 564.159252][T15804] create_new_namespaces+0x3ea/0xa90 [ 564.159297][T15804] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 564.159343][T15804] ksys_unshare+0x45b/0xa40 [ 564.159393][T15804] ? __pfx_ksys_unshare+0x10/0x10 [ 564.159443][T15804] ? xfd_validate_state+0x61/0x180 [ 564.159496][T15804] __x64_sys_unshare+0x31/0x40 [ 564.159548][T15804] do_syscall_64+0xcd/0x490 [ 564.159586][T15804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.159627][T15804] RIP: 0033:0x7f108c98e929 [ 564.159657][T15804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.159696][T15804] RSP: 002b:00007f108d77d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 564.159733][T15804] RAX: ffffffffffffffda RBX: 00007f108cbb5fa0 RCX: 00007f108c98e929 [ 564.159774][T15804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 564.159800][T15804] RBP: 00007f108ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 564.159824][T15804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.159849][T15804] R13: 0000000000000000 R14: 00007f108cbb5fa0 R15: 00007fffea9c1c68 [ 564.159887][T15804] [ 564.694993][T15801] tty tty17: ldisc open failed (-12), clearing slot 16 [ 566.927660][T15865] __nla_validate_parse: 2 callbacks suppressed [ 566.927686][T15865] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2400'. [ 567.206699][T15879] FAULT_INJECTION: forcing a failure. [ 567.206699][T15879] name failslab, interval 1, probability 0, space 0, times 0 [ 567.249216][T15879] CPU: 0 UID: 0 PID: 15879 Comm: syz.0.2402 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 567.249275][T15879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.249297][T15879] Call Trace: [ 567.249308][T15879] [ 567.249320][T15879] dump_stack_lvl+0x16c/0x1f0 [ 567.249376][T15879] should_fail_ex+0x512/0x640 [ 567.249425][T15879] should_failslab+0xc2/0x120 [ 567.249456][T15879] __kvmalloc_node_noprof+0x137/0x620 [ 567.249501][T15879] ? __pfx___mutex_lock+0x10/0x10 [ 567.249531][T15879] ? rcu_is_watching+0x12/0xc0 [ 567.249561][T15879] ? nf_hook_entries_grow+0x22b/0x860 [ 567.249615][T15879] ? nf_hook_entries_grow+0x22b/0x860 [ 567.249664][T15879] nf_hook_entries_grow+0x22b/0x860 [ 567.249714][T15879] ? __pfx___debug_object_init+0x10/0x10 [ 567.249749][T15879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 567.249799][T15879] __nf_register_net_hook+0x1cd/0x730 [ 567.249834][T15879] nf_register_net_hook+0x109/0x160 [ 567.249868][T15879] nf_register_net_hooks+0x5d/0xd0 [ 567.249901][T15879] ? __pfx_apparmor_nf_register+0x10/0x10 [ 567.249955][T15879] ops_init+0x1e2/0x5f0 [ 567.249987][T15879] setup_net+0x1ff/0x510 [ 567.250018][T15879] ? lockdep_init_map_type+0x5c/0x280 [ 567.250064][T15879] ? __pfx_setup_net+0x10/0x10 [ 567.250094][T15879] ? __raw_spin_lock_init+0x3a/0x110 [ 567.250144][T15879] ? debug_mutex_init+0x37/0x70 [ 567.250177][T15879] copy_net_ns+0x2a6/0x5f0 [ 567.250219][T15879] create_new_namespaces+0x3ea/0xa90 [ 567.250270][T15879] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 567.250311][T15879] ksys_unshare+0x45b/0xa40 [ 567.250355][T15879] ? __pfx_ksys_unshare+0x10/0x10 [ 567.250398][T15879] ? xfd_validate_state+0x61/0x180 [ 567.250447][T15879] __x64_sys_unshare+0x31/0x40 [ 567.250491][T15879] do_syscall_64+0xcd/0x490 [ 567.250522][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.250556][T15879] RIP: 0033:0x7f1dfc78e929 [ 567.250582][T15879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.250617][T15879] RSP: 002b:00007f1dfd621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 567.250649][T15879] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78e929 [ 567.250670][T15879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 567.250690][T15879] RBP: 00007f1dfc810b39 R08: 0000000000000000 R09: 0000000000000000 [ 567.250709][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.250729][T15879] R13: 0000000000000000 R14: 00007f1dfc9b5fa0 R15: 00007fff81822608 [ 567.250760][T15879] [ 567.599760][T15871] vcan0: tx drop: invalid da for name 0x000000000000003f [ 567.850947][T15875] CIFS mount error: No usable UNC path provided in device string! [ 567.850947][T15875] [ 567.861193][T15875] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 568.472317][T15908] vcan0: tx drop: invalid da for name 0x000000000000003f [ 569.775750][T15935] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 570.279116][T15929] vcan0: tx drop: invalid da for name 0x000000000000003f [ 570.737901][T15956] FAULT_INJECTION: forcing a failure. [ 570.737901][T15956] name failslab, interval 1, probability 0, space 0, times 0 [ 570.781604][T15956] CPU: 0 UID: 0 PID: 15956 Comm: syz.1.2415 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 570.781651][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.781673][T15956] Call Trace: [ 570.781683][T15956] [ 570.781695][T15956] dump_stack_lvl+0x16c/0x1f0 [ 570.781751][T15956] should_fail_ex+0x512/0x640 [ 570.781800][T15956] should_failslab+0xc2/0x120 [ 570.781830][T15956] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 570.781881][T15956] ? sock_alloc_inode+0x25/0x1c0 [ 570.781921][T15956] ? __pfx_sock_alloc_inode+0x10/0x10 [ 570.781955][T15956] sock_alloc_inode+0x25/0x1c0 [ 570.781988][T15956] alloc_inode+0x64/0x240 [ 570.782019][T15956] sock_alloc+0x40/0x280 [ 570.782057][T15956] sock_create_lite+0x82/0x120 [ 570.782088][T15956] __netlink_kernel_create+0xbd/0x750 [ 570.782120][T15956] ? __pfx___netlink_kernel_create+0x10/0x10 [ 570.782151][T15956] ? __pfx_static_key_fast_inc_not_disabled+0x10/0x10 [ 570.782196][T15956] ? static_key_slow_inc+0x21/0x30 [ 570.782233][T15956] ? rcu_is_watching+0x12/0xc0 [ 570.782260][T15956] ? lock_release+0x201/0x2f0 [ 570.782298][T15956] ? __pfx_crypto_netlink_init+0x10/0x10 [ 570.782342][T15956] crypto_netlink_init+0xb7/0x140 [ 570.782383][T15956] ? cpus_read_unlock+0x83/0x150 [ 570.782412][T15956] ? __pfx_crypto_netlink_init+0x10/0x10 [ 570.782452][T15956] ? __nf_register_net_hook+0x371/0x730 [ 570.782480][T15956] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 570.782523][T15956] ? nf_register_net_hook+0x117/0x160 [ 570.782550][T15956] ? nf_register_net_hooks+0xb1/0xd0 [ 570.782577][T15956] ops_init+0x1e2/0x5f0 [ 570.782605][T15956] setup_net+0x1ff/0x510 [ 570.782631][T15956] ? lockdep_init_map_type+0x5c/0x280 [ 570.782669][T15956] ? __pfx_setup_net+0x10/0x10 [ 570.782694][T15956] ? __raw_spin_lock_init+0x3a/0x110 [ 570.782737][T15956] ? debug_mutex_init+0x37/0x70 [ 570.782764][T15956] copy_net_ns+0x2a6/0x5f0 [ 570.782794][T15956] create_new_namespaces+0x3ea/0xa90 [ 570.782827][T15956] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 570.782859][T15956] ksys_unshare+0x45b/0xa40 [ 570.782894][T15956] ? __pfx_ksys_unshare+0x10/0x10 [ 570.782937][T15956] ? xfd_validate_state+0x61/0x180 [ 570.782984][T15956] __x64_sys_unshare+0x31/0x40 [ 570.783038][T15956] do_syscall_64+0xcd/0x490 [ 570.783069][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.783100][T15956] RIP: 0033:0x7fa0ea58e929 [ 570.783127][T15956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.783159][T15956] RSP: 002b:00007fa0eb3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 570.783192][T15956] RAX: ffffffffffffffda RBX: 00007fa0ea7b5fa0 RCX: 00007fa0ea58e929 [ 570.783212][T15956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 570.783229][T15956] RBP: 00007fa0ea610b39 R08: 0000000000000000 R09: 0000000000000000 [ 570.783248][T15956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.783265][T15956] R13: 0000000000000000 R14: 00007fa0ea7b5fa0 R15: 00007fff38593c08 [ 570.783293][T15956] [ 571.532905][T15964] CIFS mount error: No usable UNC path provided in device string! [ 571.532905][T15964] [ 571.560843][T15964] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 573.523985][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.530531][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.455243][T15997] vcan0: tx drop: invalid da for name 0x000000000000003f [ 574.701315][T16022] FAULT_INJECTION: forcing a failure. [ 574.701315][T16022] name failslab, interval 1, probability 0, space 0, times 0 [ 574.795800][T16022] CPU: 1 UID: 0 PID: 16022 Comm: syz.0.2427 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 574.795848][T16022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.795869][T16022] Call Trace: [ 574.795880][T16022] [ 574.795892][T16022] dump_stack_lvl+0x16c/0x1f0 [ 574.795950][T16022] should_fail_ex+0x512/0x640 [ 574.796001][T16022] ? ops_init+0x77/0x5f0 [ 574.796030][T16022] should_failslab+0xc2/0x120 [ 574.796062][T16022] __kmalloc_noprof+0xd2/0x510 [ 574.796107][T16022] ? lockdep_init_map_type+0x5c/0x280 [ 574.796157][T16022] ops_init+0x77/0x5f0 [ 574.796188][T16022] setup_net+0x1ff/0x510 [ 574.796218][T16022] ? lockdep_init_map_type+0x5c/0x280 [ 574.796260][T16022] ? __pfx_setup_net+0x10/0x10 [ 574.796290][T16022] ? __raw_spin_lock_init+0x3a/0x110 [ 574.796342][T16022] ? debug_mutex_init+0x37/0x70 [ 574.796375][T16022] copy_net_ns+0x2a6/0x5f0 [ 574.796412][T16022] create_new_namespaces+0x3ea/0xa90 [ 574.796449][T16022] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 574.796488][T16022] ksys_unshare+0x45b/0xa40 [ 574.796530][T16022] ? __pfx_ksys_unshare+0x10/0x10 [ 574.796572][T16022] ? xfd_validate_state+0x61/0x180 [ 574.796618][T16022] __x64_sys_unshare+0x31/0x40 [ 574.796659][T16022] do_syscall_64+0xcd/0x490 [ 574.796690][T16022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.796724][T16022] RIP: 0033:0x7f1dfc78e929 [ 574.796755][T16022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.796789][T16022] RSP: 002b:00007f1dfd621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 574.796823][T16022] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78e929 [ 574.796845][T16022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 574.796865][T16022] RBP: 00007f1dfc810b39 R08: 0000000000000000 R09: 0000000000000000 [ 574.796886][T16022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.796906][T16022] R13: 0000000000000000 R14: 00007f1dfc9b5fa0 R15: 00007fff81822608 [ 574.796936][T16022] [ 575.094951][T16019] vcan0: tx drop: invalid da for name 0x000000000000003f [ 575.365684][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 575.380688][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 575.389223][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 575.398108][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 575.406246][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.420410][T12854] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.505820][T12854] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.567810][T12854] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.640695][T12854] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.727102][T16037] vcan0: tx drop: invalid da for name 0x000000000000003f [ 575.968818][T12854] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.112324][T16029] chnl_net:caif_netlink_parms(): no params data found [ 576.137311][T16046] vcan0: tx drop: invalid da for name 0x000000000000003f [ 576.403637][T12854] team0: left allmulticast mode [ 576.448478][T12854] team_slave_0: left allmulticast mode [ 576.492782][T12854] team_slave_1: left allmulticast mode [ 576.493228][T12854] team0: left promiscuous mode [ 576.493295][T12854] team_slave_0: left promiscuous mode [ 576.494838][T12854] team_slave_1: left promiscuous mode [ 576.506186][T12854] bridge0: port 3(team0) entered disabled state [ 576.573860][T12854] bridge_slave_1: left allmulticast mode [ 576.573894][T12854] bridge_slave_1: left promiscuous mode [ 576.574077][T12854] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.589023][T12854] bridge_slave_0: left allmulticast mode [ 576.591788][T12854] bridge_slave_0: left promiscuous mode [ 576.591965][T12854] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.940019][T12854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.968071][T12854] bond0 (unregistering): Released all slaves [ 577.155131][T16029] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.170303][T16029] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.184067][T16029] bridge_slave_0: entered allmulticast mode [ 577.200510][T16029] bridge_slave_0: entered promiscuous mode [ 577.256842][T16029] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.273828][T16029] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.281156][T16029] bridge_slave_1: entered allmulticast mode [ 577.314862][T16029] bridge_slave_1: entered promiscuous mode [ 577.382026][T16029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.428126][T16029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.444120][ T5845] Bluetooth: hci2: command tx timeout [ 577.503044][T16091] random: crng reseeded on system resumption [ 577.548469][T16091] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 577.585462][T16029] team0: Port device team_slave_0 added [ 577.621957][T16091] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 577.650773][T12854] hsr_slave_1: left promiscuous mode [ 577.657382][T16091] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 577.665633][T16091] PM: hibernation: Basic memory bitmaps created [ 577.673134][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.710767][T12854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.751947][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.760353][T12854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.777505][T12854] veth1_macvtap: left promiscuous mode [ 577.783182][T12854] veth0_macvtap: left promiscuous mode [ 577.789718][T12854] veth1_vlan: left promiscuous mode [ 577.795199][T12854] veth0_vlan: left promiscuous mode [ 578.022779][T16095] PM: hibernation: Basic memory bitmaps freed [ 578.313034][T12854] team0 (unregistering): Port device team_slave_1 removed [ 578.359758][T12854] team0 (unregistering): Port device team_slave_0 removed [ 578.506068][T16101] vcan0: tx drop: invalid da for name 0x000000000000003f [ 578.589016][T16029] team0: Port device team_slave_1 added [ 578.770345][T16029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.788763][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.814849][T16029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.827357][T16029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.835026][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.863940][T16029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.027481][T16029] hsr_slave_0: entered promiscuous mode [ 579.037590][T16029] hsr_slave_1: entered promiscuous mode [ 579.044266][T16029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.051987][T16029] Cannot create hsr debugfs directory [ 579.524410][ T5845] Bluetooth: hci2: command tx timeout [ 579.984522][T16144] CIFS mount error: No usable UNC path provided in device string! [ 579.984522][T16144] [ 579.994988][T16144] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 580.531082][T16029] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 580.690326][T16029] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 580.704531][T16029] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 580.761515][T16029] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 581.246126][T16029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.286707][T16029] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.383853][T12854] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.391157][T12854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.410985][T12854] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.418228][T12854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.605253][ T5845] Bluetooth: hci2: command tx timeout [ 582.038670][T16029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.179442][T16029] veth0_vlan: entered promiscuous mode [ 582.217560][T16029] veth1_vlan: entered promiscuous mode [ 582.318883][T16029] veth0_macvtap: entered promiscuous mode [ 582.348278][T16029] veth1_macvtap: entered promiscuous mode [ 582.384498][T16029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.441876][T16029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.468215][T16029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.477950][T16029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.491482][T16029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.501523][T16029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.674352][T16215] hub 8-0:1.0: USB hub found [ 582.690207][T16029] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 582.725137][T16215] hub 8-0:1.0: 1 port detected [ 582.738572][T12852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.739064][T16029] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 582.769858][T12852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.840916][T12852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.850404][T12852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.065203][T16231] FAULT_INJECTION: forcing a failure. [ 583.065203][T16231] name failslab, interval 1, probability 0, space 0, times 0 [ 583.091393][T16231] CPU: 0 UID: 0 PID: 16231 Comm: syz.2.2455 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 583.091445][T16231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.091464][T16231] Call Trace: [ 583.091475][T16231] [ 583.091487][T16231] dump_stack_lvl+0x16c/0x1f0 [ 583.091543][T16231] should_fail_ex+0x512/0x640 [ 583.091593][T16231] ? __netlink_kernel_create+0x17f/0x750 [ 583.091629][T16231] should_failslab+0xc2/0x120 [ 583.091660][T16231] __kmalloc_noprof+0xd2/0x510 [ 583.091712][T16231] __netlink_kernel_create+0x17f/0x750 [ 583.091750][T16231] ? __pfx___netlink_kernel_create+0x10/0x10 [ 583.091784][T16231] ? __pfx_static_key_fast_inc_not_disabled+0x10/0x10 [ 583.091830][T16231] ? static_key_slow_inc+0x21/0x30 [ 583.091872][T16231] ? rcu_is_watching+0x12/0xc0 [ 583.091904][T16231] ? lock_release+0x201/0x2f0 [ 583.091945][T16231] ? __pfx_crypto_netlink_init+0x10/0x10 [ 583.091994][T16231] crypto_netlink_init+0xb7/0x140 [ 583.092042][T16231] ? cpus_read_unlock+0x83/0x150 [ 583.092075][T16231] ? __pfx_crypto_netlink_init+0x10/0x10 [ 583.092123][T16231] ? __nf_register_net_hook+0x371/0x730 [ 583.092164][T16231] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 583.092215][T16231] ? nf_register_net_hook+0x117/0x160 [ 583.092247][T16231] ? nf_register_net_hooks+0xb1/0xd0 [ 583.092280][T16231] ops_init+0x1e2/0x5f0 [ 583.092312][T16231] setup_net+0x1ff/0x510 [ 583.092341][T16231] ? lockdep_init_map_type+0x5c/0x280 [ 583.092384][T16231] ? __pfx_setup_net+0x10/0x10 [ 583.092413][T16231] ? __raw_spin_lock_init+0x3a/0x110 [ 583.092462][T16231] ? debug_mutex_init+0x37/0x70 [ 583.092493][T16231] copy_net_ns+0x2a6/0x5f0 [ 583.092529][T16231] create_new_namespaces+0x3ea/0xa90 [ 583.092568][T16231] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 583.092605][T16231] ksys_unshare+0x45b/0xa40 [ 583.092647][T16231] ? __pfx_ksys_unshare+0x10/0x10 [ 583.092689][T16231] ? xfd_validate_state+0x61/0x180 [ 583.092736][T16231] __x64_sys_unshare+0x31/0x40 [ 583.092777][T16231] do_syscall_64+0xcd/0x490 [ 583.092807][T16231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.092841][T16231] RIP: 0033:0x7f108c98e929 [ 583.092868][T16231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.092903][T16231] RSP: 002b:00007f108d77d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 583.092937][T16231] RAX: ffffffffffffffda RBX: 00007f108cbb5fa0 RCX: 00007f108c98e929 [ 583.092959][T16231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 583.092980][T16231] RBP: 00007f108ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 583.093005][T16231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.093025][T16231] R13: 0000000000000000 R14: 00007f108cbb5fa0 R15: 00007fffea9c1c68 [ 583.093057][T16231] [ 583.488356][T16236] vcan0: tx drop: invalid da for name 0x000000000000003f [ 583.686959][ T5845] Bluetooth: hci2: command tx timeout [ 584.034246][T16246] can: request_module (can-proto-0) failed. [ 584.117023][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 584.124889][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 584.132627][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 584.142182][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 584.149830][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 584.551963][ T7307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.716019][ T7307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.887735][T16270] RDS: rds_bind could not find a transport for ::ffff:172.30.254.1, load rds_tcp or rds_rdma? [ 584.947188][ T7307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.035832][T16250] chnl_net:caif_netlink_parms(): no params data found [ 585.122462][ T7307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.341349][T16250] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.374450][T16250] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.399701][T16250] bridge_slave_0: entered allmulticast mode [ 585.422261][T16250] bridge_slave_0: entered promiscuous mode [ 585.463744][T16250] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.490716][T16250] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.523038][T16250] bridge_slave_1: entered allmulticast mode [ 585.548430][T16250] bridge_slave_1: entered promiscuous mode [ 585.644477][T16250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.680712][T16250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.782054][ T7307] bridge_slave_1: left allmulticast mode [ 585.798209][ T7307] bridge_slave_1: left promiscuous mode [ 585.804039][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.859772][ T7307] bridge_slave_0: left allmulticast mode [ 585.865545][ T7307] bridge_slave_0: left promiscuous mode [ 585.878420][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.022086][T16288] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 586.238678][ T7307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.257620][ T5845] Bluetooth: hci4: command tx timeout [ 586.272396][ T7307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.320968][ T7307] bond0 (unregistering): Released all slaves [ 586.360050][T16250] team0: Port device team_slave_0 added [ 586.378568][T16250] team0: Port device team_slave_1 added [ 586.499342][ T7307] tipc: Left network mode [ 586.509500][T16250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.516802][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.570205][T16250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.594396][T16250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.612123][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.667827][T16250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.786209][T16250] hsr_slave_0: entered promiscuous mode [ 586.851199][T16250] hsr_slave_1: entered promiscuous mode [ 586.857503][T16250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.865253][T16250] Cannot create hsr debugfs directory [ 587.150395][ T7307] hsr_slave_0: left promiscuous mode [ 587.248368][ T7307] hsr_slave_1: left promiscuous mode [ 587.271885][ T7307] veth1_macvtap: left promiscuous mode [ 587.277489][ T7307] veth0_macvtap: left promiscuous mode [ 587.285112][ T7307] veth1_vlan: left promiscuous mode [ 587.290900][ T7307] veth0_vlan: left promiscuous mode [ 587.315248][T16319] CIFS mount error: No usable UNC path provided in device string! [ 587.315248][T16319] [ 587.325369][T16319] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 588.151829][ T7307] team0 (unregistering): Port device team_slave_1 removed [ 588.218236][ T7307] team0 (unregistering): Port device team_slave_0 removed [ 588.333580][ T5845] Bluetooth: hci4: command tx timeout [ 588.807742][T16358] CIFS mount error: No usable UNC path provided in device string! [ 588.807742][T16358] [ 588.831826][T16358] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 589.117924][T16348] FAULT_INJECTION: forcing a failure. [ 589.117924][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 589.199126][T16348] CPU: 0 UID: 0 PID: 16348 Comm: syz.0.2465 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 589.199177][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 589.199199][T16348] Call Trace: [ 589.199210][T16348] [ 589.199223][T16348] dump_stack_lvl+0x16c/0x1f0 [ 589.199279][T16348] should_fail_ex+0x512/0x640 [ 589.199330][T16348] should_failslab+0xc2/0x120 [ 589.199362][T16348] __kvmalloc_node_noprof+0x137/0x620 [ 589.199409][T16348] ? __pfx___mutex_lock+0x10/0x10 [ 589.199438][T16348] ? rcu_is_watching+0x12/0xc0 [ 589.199469][T16348] ? nf_hook_entries_grow+0x22b/0x860 [ 589.199524][T16348] ? nf_hook_entries_grow+0x22b/0x860 [ 589.199572][T16348] nf_hook_entries_grow+0x22b/0x860 [ 589.199624][T16348] ? __pfx___debug_object_init+0x10/0x10 [ 589.199659][T16348] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.199711][T16348] __nf_register_net_hook+0x1cd/0x730 [ 589.199745][T16348] nf_register_net_hook+0x109/0x160 [ 589.199777][T16348] nf_register_net_hooks+0x5d/0xd0 [ 589.199809][T16348] ? __pfx_apparmor_nf_register+0x10/0x10 [ 589.199859][T16348] ops_init+0x1e2/0x5f0 [ 589.199891][T16348] setup_net+0x1ff/0x510 [ 589.199919][T16348] ? lockdep_init_map_type+0x5c/0x280 [ 589.199963][T16348] ? __pfx_setup_net+0x10/0x10 [ 589.200003][T16348] ? __raw_spin_lock_init+0x3a/0x110 [ 589.200053][T16348] ? debug_mutex_init+0x37/0x70 [ 589.200085][T16348] copy_net_ns+0x2a6/0x5f0 [ 589.200122][T16348] create_new_namespaces+0x3ea/0xa90 [ 589.200169][T16348] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 589.200206][T16348] ksys_unshare+0x45b/0xa40 [ 589.200248][T16348] ? __pfx_ksys_unshare+0x10/0x10 [ 589.200291][T16348] ? xfd_validate_state+0x61/0x180 [ 589.200338][T16348] __x64_sys_unshare+0x31/0x40 [ 589.200379][T16348] do_syscall_64+0xcd/0x490 [ 589.200408][T16348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.200442][T16348] RIP: 0033:0x7f1dfc78e929 [ 589.200467][T16348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.200500][T16348] RSP: 002b:00007f1dfd621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.200533][T16348] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78e929 [ 589.200555][T16348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 589.200574][T16348] RBP: 00007f1dfc810b39 R08: 0000000000000000 R09: 0000000000000000 [ 589.200594][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.200613][T16348] R13: 0000000000000000 R14: 00007f1dfc9b5fa0 R15: 00007fff81822608 [ 589.200643][T16348] [ 589.963903][T16370] vcan0: tx drop: invalid da for name 0x000000000000003f [ 590.401571][T16250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 590.409897][ T5845] Bluetooth: hci4: command tx timeout [ 590.443983][T16250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 590.518283][T16250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 590.548714][T16250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 590.884250][T16250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.934183][T16250] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.977660][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.984832][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.078355][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.085586][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.243133][T16418] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 591.348664][T16250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 591.379326][T16250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.768876][T16250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.912112][T16250] veth0_vlan: entered promiscuous mode [ 592.011260][T16250] veth1_vlan: entered promiscuous mode [ 592.142334][T16250] veth0_macvtap: entered promiscuous mode [ 592.194076][T16250] veth1_macvtap: entered promiscuous mode [ 592.284396][T16250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.324310][T16250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.443766][T16250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.494646][ T5845] Bluetooth: hci4: command tx timeout [ 592.508056][T16250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.557460][T16436] vcan0: tx drop: invalid da for name 0x000000000000003f [ 592.585637][T16250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.595197][T16250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.710119][T16250] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 592.844820][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.847787][T16250] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 592.896178][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.014280][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.052146][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.210530][T16531] vcan0: tx drop: invalid da for name 0x000000000000003f [ 595.753640][T16523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.759794][T16523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.802459][T16523] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 595.871252][T16523] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 595.905639][T16523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.911721][T16523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 595.945148][T16523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 595.957216][T16523] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 595.983664][T16523] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 595.997394][T16523] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 596.052847][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.062328][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.071325][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.079442][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.087411][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.707713][ T7307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.062371][T16538] chnl_net:caif_netlink_parms(): no params data found [ 597.157735][ T7307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.376269][ T7307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.416303][T16538] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.433226][T16538] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.440526][T16538] bridge_slave_0: entered allmulticast mode [ 597.463605][T16538] bridge_slave_0: entered promiscuous mode [ 597.504479][T16538] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.523307][T16538] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.532097][T16538] bridge_slave_1: entered allmulticast mode [ 597.614813][T16538] bridge_slave_1: entered promiscuous mode [ 597.776099][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 597.820873][T16538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.924839][T16538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.947648][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 598.016565][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 598.029544][T16603] CIFS mount error: No usable UNC path provided in device string! [ 598.029544][T16603] [ 598.039982][T16603] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 598.065790][T16538] team0: Port device team_slave_0 added [ 598.086744][ T7307] vlan1: left allmulticast mode [ 598.113576][ T7307] veth0_vlan: left allmulticast mode [ 598.133530][ T7307] vlan1: left promiscuous mode [ 598.150157][ T7307] bridge0: port 3(vlan1) entered disabled state [ 598.176678][ T5845] Bluetooth: hci0: command tx timeout [ 598.230690][ T7307] bridge_slave_1: left allmulticast mode [ 598.236622][ T7307] bridge_slave_1: left promiscuous mode [ 598.247773][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.400291][ T7307] bridge_slave_0: left allmulticast mode [ 598.416029][ T7307] bridge_slave_0: left promiscuous mode [ 598.455485][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.747511][ T7307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.791522][ T7307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.811654][ T7307] bond0 (unregistering): Released all slaves [ 598.870278][T16538] team0: Port device team_slave_1 added [ 599.120291][ T7307] ovs_ÿþ: left promiscuous mode [ 599.221105][ T7307] Â: left promiscuous mode [ 599.270825][T16538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.355534][T16538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.453832][T16538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.692534][T16642] vcan0: tx drop: invalid da for name 0x000000000000003f [ 599.713639][T16538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.751879][T16538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.854758][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 599.885213][T16538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.014825][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 600.094799][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 600.152251][T16538] hsr_slave_0: entered promiscuous mode [ 600.195287][T16538] hsr_slave_1: entered promiscuous mode [ 600.267730][ T5845] Bluetooth: hci0: command tx timeout [ 600.400145][T16661] random: crng reseeded on system resumption [ 600.530000][T16661] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 600.623747][T16661] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 600.650259][ T7307] hsr_slave_0: left promiscuous mode [ 600.671786][T16661] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 600.699207][ T7307] hsr_slave_1: left promiscuous mode [ 600.722163][T16661] PM: hibernation: Basic memory bitmaps created [ 600.732539][ T7307] veth1_macvtap: left promiscuous mode [ 600.774814][ T7307] veth0_macvtap: left promiscuous mode [ 600.780602][ T7307] veth1_vlan: left promiscuous mode [ 600.786178][ T7307] veth0_vlan: left promiscuous mode [ 601.299090][T16674] PM: hibernation: Basic memory bitmaps freed [ 601.338973][ T7307] team0 (unregistering): Port device team_slave_1 removed [ 601.419483][ T7307] team0 (unregistering): Port device team_slave_0 removed [ 601.935703][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 602.095855][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 602.175747][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 602.336189][ T5845] Bluetooth: hci0: command tx timeout [ 602.853631][T16538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 602.913910][T16538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 602.977945][T16538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 603.080929][T16538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 603.535668][T16742] CIFS mount error: No usable UNC path provided in device string! [ 603.535668][T16742] [ 603.548649][T16742] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 603.754586][T16538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.849420][T16748] FAULT_INJECTION: forcing a failure. [ 603.849420][T16748] name failslab, interval 1, probability 0, space 0, times 0 [ 603.879496][T16748] CPU: 1 UID: 0 PID: 16748 Comm: syz.3.2511 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 603.879533][T16748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 603.879548][T16748] Call Trace: [ 603.879556][T16748] [ 603.879565][T16748] dump_stack_lvl+0x16c/0x1f0 [ 603.879607][T16748] should_fail_ex+0x512/0x640 [ 603.879644][T16748] ? ops_init+0x77/0x5f0 [ 603.879665][T16748] should_failslab+0xc2/0x120 [ 603.879688][T16748] __kmalloc_noprof+0xd2/0x510 [ 603.879723][T16748] ? lockdep_init_map_type+0x5c/0x280 [ 603.879761][T16748] ops_init+0x77/0x5f0 [ 603.879785][T16748] setup_net+0x1ff/0x510 [ 603.879807][T16748] ? lockdep_init_map_type+0x5c/0x280 [ 603.879840][T16748] ? __pfx_setup_net+0x10/0x10 [ 603.879862][T16748] ? __raw_spin_lock_init+0x3a/0x110 [ 603.879901][T16748] ? debug_mutex_init+0x37/0x70 [ 603.879934][T16748] copy_net_ns+0x2a6/0x5f0 [ 603.879962][T16748] create_new_namespaces+0x3ea/0xa90 [ 603.879992][T16748] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 603.880020][T16748] ksys_unshare+0x45b/0xa40 [ 603.880052][T16748] ? __pfx_ksys_unshare+0x10/0x10 [ 603.880085][T16748] ? xfd_validate_state+0x61/0x180 [ 603.880121][T16748] __x64_sys_unshare+0x31/0x40 [ 603.880153][T16748] do_syscall_64+0xcd/0x490 [ 603.880176][T16748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.880202][T16748] RIP: 0033:0x7f80b798e929 [ 603.880220][T16748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.880246][T16748] RSP: 002b:00007f80b87ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 603.880269][T16748] RAX: ffffffffffffffda RBX: 00007f80b7bb5fa0 RCX: 00007f80b798e929 [ 603.880286][T16748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 603.880301][T16748] RBP: 00007f80b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 603.880316][T16748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.880331][T16748] R13: 0000000000000000 R14: 00007f80b7bb5fa0 R15: 00007ffdb884c098 [ 603.880354][T16748] [ 604.113332][T16538] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.148961][T16594] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.156136][T16594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.184148][T16591] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.191307][T16591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.353639][T16538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.416707][ T5845] Bluetooth: hci0: command tx timeout [ 604.895633][T16538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.340073][T16538] veth0_vlan: entered promiscuous mode [ 605.398592][T16538] veth1_vlan: entered promiscuous mode [ 605.513779][T16538] veth0_macvtap: entered promiscuous mode [ 605.529426][T16538] veth1_macvtap: entered promiscuous mode [ 605.572918][T16770] CIFS mount error: No usable UNC path provided in device string! [ 605.572918][T16770] [ 605.587184][T16770] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 605.653384][T16538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.732607][T16538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.836397][T16538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.897545][T16538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.955836][T16538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.010930][T16538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.469167][T16538] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 606.730619][T16594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.772391][T16538] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 606.789558][T16594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.115601][ T7307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.145169][ T7307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.756090][T16841] FAULT_INJECTION: forcing a failure. [ 607.756090][T16841] name failslab, interval 1, probability 0, space 0, times 0 [ 607.778003][T16841] CPU: 0 UID: 0 PID: 16841 Comm: syz.3.2521 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 607.778087][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 607.778123][T16841] Call Trace: [ 607.778137][T16841] [ 607.778148][T16841] dump_stack_lvl+0x16c/0x1f0 [ 607.778210][T16841] should_fail_ex+0x512/0x640 [ 607.778259][T16841] ? ops_init+0x77/0x5f0 [ 607.778287][T16841] should_failslab+0xc2/0x120 [ 607.778316][T16841] __kmalloc_noprof+0xd2/0x510 [ 607.778361][T16841] ? lockdep_init_map_type+0x5c/0x280 [ 607.778411][T16841] ops_init+0x77/0x5f0 [ 607.778443][T16841] setup_net+0x1ff/0x510 [ 607.778472][T16841] ? lockdep_init_map_type+0x5c/0x280 [ 607.778516][T16841] ? __pfx_setup_net+0x10/0x10 [ 607.778544][T16841] ? __raw_spin_lock_init+0x3a/0x110 [ 607.778596][T16841] ? debug_mutex_init+0x37/0x70 [ 607.778628][T16841] copy_net_ns+0x2a6/0x5f0 [ 607.778675][T16841] create_new_namespaces+0x3ea/0xa90 [ 607.778713][T16841] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 607.778750][T16841] ksys_unshare+0x45b/0xa40 [ 607.778792][T16841] ? __pfx_ksys_unshare+0x10/0x10 [ 607.778835][T16841] ? xfd_validate_state+0x61/0x180 [ 607.778882][T16841] __x64_sys_unshare+0x31/0x40 [ 607.778923][T16841] do_syscall_64+0xcd/0x490 [ 607.778954][T16841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.778986][T16841] RIP: 0033:0x7f80b798e929 [ 607.779012][T16841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.779046][T16841] RSP: 002b:00007f80b87ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 607.779078][T16841] RAX: ffffffffffffffda RBX: 00007f80b7bb5fa0 RCX: 00007f80b798e929 [ 607.779101][T16841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 607.779122][T16841] RBP: 00007f80b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 607.779144][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.779165][T16841] R13: 0000000000000000 R14: 00007f80b7bb5fa0 R15: 00007ffdb884c098 [ 607.779197][T16841] [ 608.493557][T16855] vcan0: tx drop: invalid da for name 0x000000000000003f [ 609.723118][T16909] vcan0: tx drop: invalid da for name 0x000000000000003f [ 609.907462][T16910] CIFS mount error: No usable UNC path provided in device string! [ 609.907462][T16910] [ 609.917665][T16910] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 610.386957][T16918] FAULT_INJECTION: forcing a failure. [ 610.386957][T16918] name failslab, interval 1, probability 0, space 0, times 0 [ 610.421790][T16918] CPU: 1 UID: 0 PID: 16918 Comm: syz.3.2530 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 610.421828][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 610.421844][T16918] Call Trace: [ 610.421851][T16918] [ 610.421860][T16918] dump_stack_lvl+0x16c/0x1f0 [ 610.421903][T16918] should_fail_ex+0x512/0x640 [ 610.421942][T16918] should_failslab+0xc2/0x120 [ 610.421965][T16918] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 610.422002][T16918] ? lock_release+0x201/0x2f0 [ 610.422033][T16918] ? __proc_create+0x2ce/0x8c0 [ 610.422073][T16918] __proc_create+0x2ce/0x8c0 [ 610.422111][T16918] ? __pfx___proc_create+0x10/0x10 [ 610.422159][T16918] ? lock_release+0x201/0x2f0 [ 610.422192][T16918] ? _raw_write_unlock+0x28/0x50 [ 610.422229][T16918] ? proc_register+0x314/0x5f0 [ 610.422268][T16918] proc_create_reg+0x7d/0x180 [ 610.422292][T16918] proc_create_data+0x86/0x110 [ 610.422313][T16918] ? __pfx_proc_create_data+0x10/0x10 [ 610.422336][T16918] ? cache_register_net+0x137/0x5e0 [ 610.422364][T16918] ? lock_release+0x201/0x2f0 [ 610.422397][T16918] cache_register_net+0x25a/0x5e0 [ 610.422424][T16918] nfsd_idmap_init+0x16e/0x250 [ 610.422456][T16918] ? __pfx_nfsd_net_init+0x10/0x10 [ 610.422481][T16918] nfsd_net_init+0x69/0x3d0 [ 610.422504][T16918] ? nfs4blocklayout_net_init+0x1a4/0x240 [ 610.422546][T16918] ? __pfx_nfsd_net_init+0x10/0x10 [ 610.422570][T16918] ops_init+0x1e2/0x5f0 [ 610.422595][T16918] setup_net+0x1ff/0x510 [ 610.422617][T16918] ? lockdep_init_map_type+0x5c/0x280 [ 610.422650][T16918] ? __pfx_setup_net+0x10/0x10 [ 610.422672][T16918] ? __raw_spin_lock_init+0x3a/0x110 [ 610.422710][T16918] ? debug_mutex_init+0x37/0x70 [ 610.422733][T16918] copy_net_ns+0x2a6/0x5f0 [ 610.422761][T16918] create_new_namespaces+0x3ea/0xa90 [ 610.422790][T16918] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 610.422818][T16918] ksys_unshare+0x45b/0xa40 [ 610.422849][T16918] ? __pfx_ksys_unshare+0x10/0x10 [ 610.422882][T16918] ? xfd_validate_state+0x61/0x180 [ 610.422918][T16918] __x64_sys_unshare+0x31/0x40 [ 610.422949][T16918] do_syscall_64+0xcd/0x490 [ 610.422972][T16918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.422997][T16918] RIP: 0033:0x7f80b798e929 [ 610.423015][T16918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.423041][T16918] RSP: 002b:00007f80b87ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 610.423064][T16918] RAX: ffffffffffffffda RBX: 00007f80b7bb5fa0 RCX: 00007f80b798e929 [ 610.423082][T16918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 610.423097][T16918] RBP: 00007f80b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 610.423113][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.423128][T16918] R13: 0000000000000000 R14: 00007f80b7bb5fa0 R15: 00007ffdb884c098 [ 610.423158][T16918] [ 610.715475][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.008606][T16949] ecryptfs_parse_packet_length: Error parsing packet length [ 612.044875][T16949] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 612.105749][T16952] can: request_module (can-proto-0) failed. [ 612.206970][T16967] FAULT_INJECTION: forcing a failure. [ 612.206970][T16967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.263272][T16967] CPU: 0 UID: 0 PID: 16967 Comm: syz.0.2537 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 612.263317][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 612.263336][T16967] Call Trace: [ 612.263346][T16967] [ 612.263357][T16967] dump_stack_lvl+0x16c/0x1f0 [ 612.263414][T16967] should_fail_ex+0x512/0x640 [ 612.263462][T16967] _copy_from_user+0x2e/0xd0 [ 612.263511][T16967] move_addr_to_kernel+0x65/0x170 [ 612.263551][T16967] __sys_bind+0x11b/0x260 [ 612.263592][T16967] ? __pfx___sys_bind+0x10/0x10 [ 612.263630][T16967] ? __fget_files+0x20e/0x3c0 [ 612.263680][T16967] ? __pfx_ksys_write+0x10/0x10 [ 612.263729][T16967] __x64_sys_bind+0x72/0xb0 [ 612.263768][T16967] do_syscall_64+0xcd/0x490 [ 612.263797][T16967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.263828][T16967] RIP: 0033:0x7f3fcdb8e929 [ 612.263856][T16967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.263888][T16967] RSP: 002b:00007f3fce9d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 612.263919][T16967] RAX: ffffffffffffffda RBX: 00007f3fcddb5fa0 RCX: 00007f3fcdb8e929 [ 612.263941][T16967] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 612.263962][T16967] RBP: 00007f3fce9d8090 R08: 0000000000000000 R09: 0000000000000000 [ 612.263983][T16967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.264004][T16967] R13: 0000000000000000 R14: 00007f3fcddb5fa0 R15: 00007ffc70405f68 [ 612.264035][T16967] [ 618.105773][T17077] CIFS mount error: No usable UNC path provided in device string! [ 618.105773][T17077] [ 618.164854][T17077] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 620.305172][T17121] netlink: 5064 bytes leftover after parsing attributes in process `syz.2.2567'. [ 621.116799][T17120] caif:caif_disconnect_client(): nothing to disconnect [ 622.689580][T17171] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 623.223263][T17180] vcan0: tx drop: invalid da for name 0x000000000000003f [ 623.230496][T17185] Console: switching to colour frame buffer device 128x48 [ 623.753710][T17179] netlink: 94 bytes leftover after parsing attributes in process `syz.3.2582'. [ 624.714015][T17225] CIFS mount error: No usable UNC path provided in device string! [ 624.714015][T17225] [ 624.724231][T17225] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 626.209329][T17243] zswap: compressor not available [ 626.472621][T17256] vcan0: tx drop: invalid da for name 0x000000000000003f [ 627.095338][T17265] FAULT_INJECTION: forcing a failure. [ 627.095338][T17265] name failslab, interval 1, probability 0, space 0, times 0 [ 627.136468][T17265] CPU: 0 UID: 0 PID: 17265 Comm: syz.1.2598 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 627.136513][T17265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.136533][T17265] Call Trace: [ 627.136542][T17265] [ 627.136554][T17265] dump_stack_lvl+0x16c/0x1f0 [ 627.136610][T17265] should_fail_ex+0x512/0x640 [ 627.136659][T17265] should_failslab+0xc2/0x120 [ 627.136689][T17265] __kmalloc_cache_noprof+0x6a/0x3e0 [ 627.136731][T17265] ? kvm_arch_vcpu_create+0x3d3/0xb20 [ 627.136772][T17265] kvm_arch_vcpu_create+0x3d3/0xb20 [ 627.136820][T17265] kvm_vm_ioctl+0xf57/0x3da0 [ 627.136877][T17265] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 627.136933][T17265] ? rcu_is_watching+0x12/0xc0 [ 627.136966][T17265] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 627.137027][T17265] ? tomoyo_path_number_perm+0x295/0x580 [ 627.137065][T17265] ? rcu_is_watching+0x12/0xc0 [ 627.137095][T17265] ? lock_release+0x201/0x2f0 [ 627.137137][T17265] ? tomoyo_path_number_perm+0x18d/0x580 [ 627.137176][T17265] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 627.137213][T17265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 627.137263][T17265] ? do_vfs_ioctl+0x523/0x1a60 [ 627.137298][T17265] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 627.137334][T17265] ? preempt_count_add+0x76/0x150 [ 627.137389][T17265] ? rcu_is_watching+0x12/0xc0 [ 627.137420][T17265] ? __fget_files+0x204/0x3c0 [ 627.137460][T17265] ? hook_file_ioctl_common+0x145/0x410 [ 627.137500][T17265] ? __fget_files+0x20e/0x3c0 [ 627.137543][T17265] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 627.137590][T17265] __x64_sys_ioctl+0x18b/0x210 [ 627.137628][T17265] do_syscall_64+0xcd/0x490 [ 627.137659][T17265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.137690][T17265] RIP: 0033:0x7fef5c18e929 [ 627.137715][T17265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.137754][T17265] RSP: 002b:00007fef5cfee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.137785][T17265] RAX: ffffffffffffffda RBX: 00007fef5c3b5fa0 RCX: 00007fef5c18e929 [ 627.137806][T17265] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 627.137825][T17265] RBP: 00007fef5cfee090 R08: 0000000000000000 R09: 0000000000000000 [ 627.137844][T17265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.137863][T17265] R13: 0000000000000000 R14: 00007fef5c3b5fa0 R15: 00007ffee0744d78 [ 627.137889][T17265] [ 627.379633][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.695416][T17297] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2604'. [ 629.765959][T17320] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 630.458060][T17327] FAULT_INJECTION: forcing a failure. [ 630.458060][T17327] name failslab, interval 1, probability 0, space 0, times 0 [ 630.552030][T17327] CPU: 0 UID: 0 PID: 17327 Comm: syz.3.2612 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 630.552082][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.552103][T17327] Call Trace: [ 630.552114][T17327] [ 630.552127][T17327] dump_stack_lvl+0x16c/0x1f0 [ 630.552187][T17327] should_fail_ex+0x512/0x640 [ 630.552240][T17327] should_failslab+0xc2/0x120 [ 630.552272][T17327] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 630.552320][T17327] ? lock_release+0x201/0x2f0 [ 630.552361][T17327] ? __proc_create+0x2ce/0x8c0 [ 630.552414][T17327] __proc_create+0x2ce/0x8c0 [ 630.552466][T17327] ? __pfx___proc_create+0x10/0x10 [ 630.552518][T17327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 630.552567][T17327] ? debug_object_activate+0x2ec/0x4c0 [ 630.552602][T17327] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 630.552654][T17327] ? do_raw_spin_lock+0x12c/0x2b0 [ 630.552706][T17327] proc_create_reg+0x7d/0x180 [ 630.552738][T17327] proc_create_data+0x86/0x110 [ 630.552768][T17327] ? __pfx_proc_create_data+0x10/0x10 [ 630.552802][T17327] ? net_generic+0xf4/0x2a0 [ 630.552852][T17327] nfsd_net_init+0x11b/0x3d0 [ 630.552887][T17327] ? __pfx_nfsd_net_init+0x10/0x10 [ 630.552923][T17327] ops_init+0x1e2/0x5f0 [ 630.552956][T17327] setup_net+0x1ff/0x510 [ 630.552986][T17327] ? lockdep_init_map_type+0x5c/0x280 [ 630.553040][T17327] ? __pfx_setup_net+0x10/0x10 [ 630.553071][T17327] ? __raw_spin_lock_init+0x3a/0x110 [ 630.553123][T17327] ? debug_mutex_init+0x37/0x70 [ 630.553156][T17327] copy_net_ns+0x2a6/0x5f0 [ 630.553193][T17327] create_new_namespaces+0x3ea/0xa90 [ 630.553234][T17327] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 630.553273][T17327] ksys_unshare+0x45b/0xa40 [ 630.553316][T17327] ? __pfx_ksys_unshare+0x10/0x10 [ 630.553360][T17327] ? xfd_validate_state+0x61/0x180 [ 630.553408][T17327] __x64_sys_unshare+0x31/0x40 [ 630.553450][T17327] do_syscall_64+0xcd/0x490 [ 630.553481][T17327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.553515][T17327] RIP: 0033:0x7f80b798e929 [ 630.553541][T17327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.553575][T17327] RSP: 002b:00007f80b87ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 630.553608][T17327] RAX: ffffffffffffffda RBX: 00007f80b7bb5fa0 RCX: 00007f80b798e929 [ 630.553632][T17327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 630.553652][T17327] RBP: 00007f80b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 630.553673][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.553694][T17327] R13: 0000000000000000 R14: 00007f80b7bb5fa0 R15: 00007ffdb884c098 [ 630.553726][T17327] [ 630.827148][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.339561][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2617'. [ 631.884089][T17359] CIFS mount error: No usable UNC path provided in device string! [ 631.884089][T17359] [ 631.910562][T17359] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 631.957396][T17363] vcan0: tx drop: invalid da for name 0x000000000000003f [ 632.071117][T17370] ubi: mtd0 is already attached to ubi0 [ 632.743942][T17380] FAULT_INJECTION: forcing a failure. [ 632.743942][T17380] name failslab, interval 1, probability 0, space 0, times 0 [ 632.756701][T17380] CPU: 0 UID: 0 PID: 17380 Comm: syz.2.2625 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 632.756736][T17380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.756752][T17380] Call Trace: [ 632.756761][T17380] [ 632.756770][T17380] dump_stack_lvl+0x16c/0x1f0 [ 632.756814][T17380] should_fail_ex+0x512/0x640 [ 632.756857][T17380] should_failslab+0xc2/0x120 [ 632.756886][T17380] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 632.756923][T17380] ? security_inode_alloc+0x3b/0x2b0 [ 632.756952][T17380] security_inode_alloc+0x3b/0x2b0 [ 632.756978][T17380] inode_init_always_gfp+0xce4/0x1030 [ 632.757015][T17380] alloc_inode+0x86/0x240 [ 632.757039][T17380] sock_alloc+0x40/0x280 [ 632.757064][T17380] sock_create_lite+0x82/0x120 [ 632.757090][T17380] __netlink_kernel_create+0xbd/0x750 [ 632.757118][T17380] ? __pfx___netlink_kernel_create+0x10/0x10 [ 632.757145][T17380] ? __pfx_static_key_fast_inc_not_disabled+0x10/0x10 [ 632.757180][T17380] ? static_key_slow_inc+0x21/0x30 [ 632.757217][T17380] ? rcu_is_watching+0x12/0xc0 [ 632.757248][T17380] ? lock_release+0x201/0x2f0 [ 632.757290][T17380] ? __pfx_crypto_netlink_init+0x10/0x10 [ 632.757340][T17380] crypto_netlink_init+0xb7/0x140 [ 632.757377][T17380] ? cpus_read_unlock+0x83/0x150 [ 632.757402][T17380] ? __pfx_crypto_netlink_init+0x10/0x10 [ 632.757440][T17380] ? __nf_register_net_hook+0x371/0x730 [ 632.757464][T17380] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 632.757502][T17380] ? nf_register_net_hook+0x117/0x160 [ 632.757525][T17380] ? nf_register_net_hooks+0xb1/0xd0 [ 632.757549][T17380] ops_init+0x1e2/0x5f0 [ 632.757573][T17380] setup_net+0x1ff/0x510 [ 632.757595][T17380] ? lockdep_init_map_type+0x5c/0x280 [ 632.757629][T17380] ? __pfx_setup_net+0x10/0x10 [ 632.757650][T17380] ? __raw_spin_lock_init+0x3a/0x110 [ 632.757688][T17380] ? debug_mutex_init+0x37/0x70 [ 632.757712][T17380] copy_net_ns+0x2a6/0x5f0 [ 632.757739][T17380] create_new_namespaces+0x3ea/0xa90 [ 632.757769][T17380] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 632.757797][T17380] ksys_unshare+0x45b/0xa40 [ 632.757829][T17380] ? __pfx_ksys_unshare+0x10/0x10 [ 632.757861][T17380] ? xfd_validate_state+0x61/0x180 [ 632.757904][T17380] __x64_sys_unshare+0x31/0x40 [ 632.757937][T17380] do_syscall_64+0xcd/0x490 [ 632.757960][T17380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.757985][T17380] RIP: 0033:0x7f108c98e929 [ 632.758005][T17380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.758030][T17380] RSP: 002b:00007f108d77d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 632.758054][T17380] RAX: ffffffffffffffda RBX: 00007f108cbb5fa0 RCX: 00007f108c98e929 [ 632.758071][T17380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 632.758086][T17380] RBP: 00007f108ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 632.758102][T17380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.758118][T17380] R13: 0000000000000000 R14: 00007f108cbb5fa0 R15: 00007fffea9c1c68 [ 632.758141][T17380] [ 633.062450][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.548689][T17388] CIFS mount error: No usable UNC path provided in device string! [ 633.548689][T17388] [ 633.558996][T17388] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 634.458786][T17399] FAULT_INJECTION: forcing a failure. [ 634.458786][T17399] name failslab, interval 1, probability 0, space 0, times 0 [ 634.522433][T17399] CPU: 0 UID: 0 PID: 17399 Comm: syz.3.2629 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 634.522469][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.522485][T17399] Call Trace: [ 634.522492][T17399] [ 634.522501][T17399] dump_stack_lvl+0x16c/0x1f0 [ 634.522544][T17399] should_fail_ex+0x512/0x640 [ 634.522592][T17399] should_failslab+0xc2/0x120 [ 634.522614][T17399] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 634.522652][T17399] ? kvm_arch_vcpu_create+0x4a1/0xb20 [ 634.522683][T17399] kvm_arch_vcpu_create+0x4a1/0xb20 [ 634.522719][T17399] kvm_vm_ioctl+0xf57/0x3da0 [ 634.522770][T17399] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 634.522813][T17399] ? rcu_is_watching+0x12/0xc0 [ 634.522835][T17399] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 634.522873][T17399] ? tomoyo_path_number_perm+0x295/0x580 [ 634.522900][T17399] ? rcu_is_watching+0x12/0xc0 [ 634.522921][T17399] ? lock_release+0x201/0x2f0 [ 634.522951][T17399] ? tomoyo_path_number_perm+0x18d/0x580 [ 634.522979][T17399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 634.523005][T17399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 634.523041][T17399] ? do_vfs_ioctl+0x523/0x1a60 [ 634.523066][T17399] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 634.523092][T17399] ? preempt_count_add+0x76/0x150 [ 634.523132][T17399] ? rcu_is_watching+0x12/0xc0 [ 634.523155][T17399] ? __fget_files+0x204/0x3c0 [ 634.523184][T17399] ? hook_file_ioctl_common+0x145/0x410 [ 634.523211][T17399] ? __fget_files+0x20e/0x3c0 [ 634.523242][T17399] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 634.523276][T17399] __x64_sys_ioctl+0x18b/0x210 [ 634.523303][T17399] do_syscall_64+0xcd/0x490 [ 634.523324][T17399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.523347][T17399] RIP: 0033:0x7f80b798e929 [ 634.523364][T17399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.523389][T17399] RSP: 002b:00007f80b87ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.523412][T17399] RAX: ffffffffffffffda RBX: 00007f80b7bb5fa0 RCX: 00007f80b798e929 [ 634.523428][T17399] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 634.523443][T17399] RBP: 00007f80b87ff090 R08: 0000000000000000 R09: 0000000000000000 [ 634.523459][T17399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.523477][T17399] R13: 0000000000000000 R14: 00007f80b7bb5fa0 R15: 00007ffdb884c098 [ 634.523499][T17399] [ 634.775558][T17399] kvm: failed to allocate vcpu's emulator [ 634.994259][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.000624][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.618820][T17403] ima: policy update failed [ 635.632085][ T30] audit: type=1802 audit(4294967513.521:13): pid=17403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2630" res=0 errno=0 [ 635.973813][T17434] bond0: option mode: unable to set because the bond device is up [ 638.674626][T17486] CIFS mount error: No usable UNC path provided in device string! [ 638.674626][T17486] [ 638.710392][T17486] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 639.903025][ T5845] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 641.264917][T17546] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2661'. [ 642.799472][T17587] ================================================================== [ 642.807598][T17587] BUG: KASAN: wild-memory-access in get_futex_key+0x595/0x1540 [ 642.815181][T17587] Read of size 8 at addr 1fffffff823b4b28 by task syz.3.2669/17587 [ 642.823106][T17587] [ 642.825449][T17587] CPU: 1 UID: 0 PID: 17587 Comm: syz.3.2669 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 642.825482][T17587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.825498][T17587] Call Trace: [ 642.825508][T17587] [ 642.825518][T17587] dump_stack_lvl+0x116/0x1f0 [ 642.825561][T17587] kasan_report+0xe0/0x110 [ 642.825585][T17587] ? get_futex_key+0x595/0x1540 [ 642.825617][T17587] kasan_check_range+0x100/0x1b0 [ 642.825646][T17587] get_futex_key+0x595/0x1540 [ 642.825675][T17587] ? __pfx_get_futex_key+0x10/0x10 [ 642.825705][T17587] ? do_futex+0x122/0x350 [ 642.825747][T17587] futex_wake+0xea/0x530 [ 642.825793][T17587] ? __pfx_futex_wake+0x10/0x10 [ 642.825843][T17587] ? xfd_validate_state+0x61/0x180 [ 642.825890][T17587] __x64_sys_futex_wake+0x23d/0x2b0 [ 642.825935][T17587] do_syscall_64+0xcd/0x490 [ 642.825970][T17587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.826007][T17587] RIP: 0033:0x7f80b798e929 [ 642.826034][T17587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.826071][T17587] RSP: 002b:00007f80b87ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c6 [ 642.826104][T17587] RAX: ffffffffffffffda RBX: 00007f80b7bb5fa0 RCX: 00007f80b798e929 [ 642.826127][T17587] RDX: 0000000000000008 RSI: 000000000000007f RDI: 00002000000016c0 [ 642.826158][T17587] RBP: 00007f80b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 642.826180][T17587] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 642.826201][T17587] R13: 0000000000000000 R14: 00007f80b7bb5fa0 R15: 00007ffdb884c098 [ 642.826234][T17587] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 642.826246][T17587] ================================================================== [ 643.000977][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.086360][T17587] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 643.093654][T17587] CPU: 0 UID: 0 PID: 17587 Comm: syz.3.2669 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 643.105782][T17587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 643.115896][T17587] Call Trace: [ 643.119221][T17587] [ 643.122197][T17587] dump_stack_lvl+0x3d/0x1f0 [ 643.126859][T17587] panic+0x71c/0x800 [ 643.130793][T17587] ? __pfx_panic+0x10/0x10 [ 643.135241][T17587] ? rcu_is_watching+0x12/0xc0 [ 643.140028][T17587] ? preempt_schedule_thunk+0x16/0x30 [ 643.145428][T17587] ? get_futex_key+0x595/0x1540 [ 643.150306][T17587] ? preempt_schedule_common+0x44/0xc0 [ 643.155805][T17587] ? get_futex_key+0x595/0x1540 [ 643.160679][T17587] check_panic_on_warn+0xab/0xb0 [ 643.165670][T17587] end_report+0x107/0x170 [ 643.170047][T17587] kasan_report+0xee/0x110 [ 643.174498][T17587] ? get_futex_key+0x595/0x1540 [ 643.179384][T17587] kasan_check_range+0x100/0x1b0 [ 643.184349][T17587] get_futex_key+0x595/0x1540 [ 643.189573][T17587] ? __pfx_get_futex_key+0x10/0x10 [ 643.194709][T17587] ? do_futex+0x122/0x350 [ 643.199072][T17587] futex_wake+0xea/0x530 [ 643.203353][T17587] ? __pfx_futex_wake+0x10/0x10 [ 643.208261][T17587] ? xfd_validate_state+0x61/0x180 [ 643.213426][T17587] __x64_sys_futex_wake+0x23d/0x2b0 [ 643.218659][T17587] do_syscall_64+0xcd/0x490 [ 643.223205][T17587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.229301][T17587] RIP: 0033:0x7f80b798e929 [ 643.233738][T17587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.253418][T17587] RSP: 002b:00007f80b87ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c6 [ 643.261863][T17587] RAX: ffffffffffffffda RBX: 00007f80b7bb5fa0 RCX: 00007f80b798e929 [ 643.269871][T17587] RDX: 0000000000000008 RSI: 000000000000007f RDI: 00002000000016c0 [ 643.277874][T17587] RBP: 00007f80b7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 643.285890][T17587] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 643.293894][T17587] R13: 0000000000000000 R14: 00007f80b7bb5fa0 R15: 00007ffdb884c098 [ 643.301916][T17587] [ 643.305339][T17587] Kernel Offset: disabled [ 643.309695][T17587] Rebooting in 86400 seconds..