last executing test programs: 9.185468384s ago: executing program 3 (id=2110): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x111001, 0x0) mmap$auto_snd_pcm_f_ops_pcm(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop8/integrity/read_verify\x00', 0x103041, 0x0) write$auto(r3, &(0x7f0000000600)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\x9e1\xb0\xadT\x00R\xa1Y\x94V[8\x04\t\xbe:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x01\x00\x01\x00\x00\x00\x00\x00\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL(\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xcf\x12Qi\xc1\xe9(\x95\xdfH\xf4\v\xff\xff\x00\x00\x001\x8fxA\xd3$h\xb3@\x81\xcaT`1\xf8\x03~i\x8c\xa1\\\xc8\xfd\xb6\xb86\xb8wEe\x1d\xb4t\xae\x88\\\x99q?\xc8e\x88\xbe.\f\xfdm\xf2\x83?rI\x9e\xbez-\xfe0\xc2\xdb\xf6\x91n/\x92&4\x9c\x9c\x8f5\xe5\x17\xd4\x97\x8b\xd1\xff\xf8es\x9e/\x7f\xa8vs\xbb\xbc\xbfR7\t\x02\xca E\xd4\xde\xe9j\x9c\x8b\xe5A\x84\x96w\x94\x1cY\x1an\x15**\xc3E?\x8a<\xe5\x9b\xbf\xd4f\x90\xbd\x97\xdf\xe5\xef\"\xddI\xde\x0e\x9f\b\xa5\x11\xc7A\xbfRs\xcd\x8e\xd6?IA/>Q\xbbLo2\x9dI`9\xf2\x1fC\xfd\xed\xca\'\xc9\xda\"\x98/\xf2\x7fco\xd8<\xd8\x93a\xbcV\xa8\xe5\x87\xe9\xe0\xea3S%\xf4\xb9\xe8\x8a\xb4y8\xcc\xb1G7\\1\x8cO\xe1\x7f\x01\x8c=\x81\x1c', 0x8) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0) 8.428063183s ago: executing program 3 (id=2113): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/media19/uevent\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/41, 0x29) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) eventfd$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) sysfs$auto(0x2, 0x47, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sysfs$auto(0x2, 0x20, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x88, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0xfe, "01"}, 0xffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) socketcall$auto_SYS_ACCEPT4(0x12, 0x0) syz_clone3(&(0x7f00000005c0)={0x400, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0), {0xb}, &(0x7f0000000400)=""/175, 0xaf, 0x0, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) 7.352088635s ago: executing program 3 (id=2117): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/media19/uevent\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/41, 0x29) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) eventfd$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) fsopen$auto(0x0, 0x1) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x88, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0xfe, "01"}, 0xffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000080)=0x1) syz_clone3(&(0x7f00000005c0)={0x400, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0), {0xb}, &(0x7f0000000400)=""/175, 0xaf, 0x0, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) 6.336384223s ago: executing program 3 (id=2119): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x9, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'gretap0\x00'}) socket(0x1, 0x23af690fef30229, 0x0) r6 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000001280), 0xa00, 0x0) pread64$auto(r6, 0x0, 0x8, 0xbee) lseek$auto(0x3, 0xe6a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="c8727477c7f7bafa69b0de7a6c512a519ab886b1"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 5.087407641s ago: executing program 3 (id=2122): connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff85, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xa00006, 0x2, 0x13, 0x602, 0x300000000000) prctl$auto_PR_SET_MM_ARG_START(0x4, 0x8, 0xffffffffffffffff, 0xd, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) ioctl$auto_IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, 0x4) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) 4.900011849s ago: executing program 2 (id=2123): connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff85, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xa00006, 0x2, 0x13, 0x602, 0x300000000000) prctl$auto_PR_SET_MM_ARG_START(0x4, 0x8, 0xffffffffffffffff, 0xd, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) ioctl$auto_IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, 0x4) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 4.868193422s ago: executing program 0 (id=2124): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8004) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x80102, 0x0) socket(0x28, 0x1, 0xffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x20940, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/de>/\x82udi\x00\x00\x00', 0xa3d9) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyd5/power/control\x00', 0x183042, 0x0) sendfile$auto(r3, r3, 0x0, 0x8000) mknod$auto(0x0, 0x1001, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd, @target_fd, 0x1, 0x7, @bpf_attr_link_create_4_1={0x3, 0xeecc}}, 0x2) close_range$auto(0x2, 0x8000, 0x4) io_uring_setup$auto(0x203, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) mprotect$auto(0x0, 0x4, 0x4) write$auto(0x3, 0x0, 0x7fffffff) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r4, 0x9210642d, 0xc5) read$auto(0x3, 0x0, 0x7fffffff) pread64$auto(r1, 0x0, 0xffffffff, 0x5) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x0, 0x1, 0x3, 0x10, 0x1, 0x4, 0x0}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x25, 0xd, 0x1, 0x948b, 0x4460, 0x2, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x0, 0x5, 0x2]}, 0x0) unshare$auto(0x40000080) 3.90043274s ago: executing program 1 (id=2125): request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000100)='-\x00\x00\xe2\xd0\x1c ,\x8a\xd5\xdf\x8b\xa0\xa5\xda\x19E\xe0\x81\xcf\xb6X\xf3*\'\x04\x06\f\x85Iw}\xb5X\xb8\xbc\x12++\x15\x9a\xb5\x1d0xee01, 0xee00, 0x3, 0x7, 0x2}, 0x1, 0xc0f, 0x401, 0x8, @raw=0x5, @inferred, 0x8, 0x0, &(0x7f00000002c0)="b71657cccd7a46fd2bb760ee9732d4ceee2ca6fcca44b40a8089e7916e850cbab3a18a9243e58bd91fe4aaaa3fc74021451eb1f6ec6a272ca21d94abb6e7605a1ab78d1da74bc7a2dd11c594353713b1fb9d1fc4873a3653227e750856fd9e8108e1246671d23ae20ca5356c2877f344e7f4e96c1afb19b5288ee54beda78ca82ff2cc1ba2c35db2fb6e8527b7f34050d09ee7fe9bc37f2d36", &(0x7f0000000380)="f294d91c10fed056dc1fa605ae7775afbd51613d3908892c890e270927c4abfe40d6b643e1850d20bc9106daf0c504f85b11b7b7bc515891748a895ad5b17738de99c08838f8409df5f91b0d29d6a8e8325eafa619d91f4d36e4efc419af992bfcc10bf9f7d7d687b92526e12c54aa2cd7e52454defa933116948a64f0fab5bfbb18258a413fb273ea"}) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b8", 0x40000100000001}, 0x6, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000003000)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000005c00)=ANY=[@ANYBLOB="a02b0000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800ef00", @ANYRES32=0xee00, @ANYBLOB="040086800400af800400118008005800", @ANYRES32=r1, @ANYBLOB='\b\x00O\x00', @ANYRES32=0x0, @ANYBLOB="e900028044004100d20f942d35bd06490232170b7a73011c669f205cd477432b8910574844488a92a3317048c372d62ab42d091fcfecee1f357c31d945c150a280b53c0e45286804ac5a2404226a4ec61253e124886c1895820c7d232ac4ff9e2b65198939ba7b49fc8f5bf6d644816bc837e7b297625fad39b18e7b663d5274de0389729204001b809e1477e5a8d5965a7118437b378d873864da43f1b624a36870b6276945da2615c0b2c2fcd95f589c213cb5af4221d178e4a5fe4a1aaffe25a201c431f4252819879e46a824a623b5a034522a570dbc3d04002f8008002400", @ANYRES32=0x0, @ANYBLOB="0400fe80000000f200b8805ccdd02352de59e72d4172d96ed9d43f5264c5177c68d526e6371835509da6f0f17d781842115905e2f9f94b4360db1bbec8bceaa9fc8a085a2a8e586d70c3464340d3c796c870e2a9a6dee0bf1d6ed6cb78bd57ec8006e546830f6c96297c48af600997ababef9caca4c37294ec0496929465c858b2b5e6a35967b1d9311dc6ba4278a8b9b5dfecc19165455da5f5f24777623a3cd413e55627decae6236fb3054de8b16670084d77aa32b072b3f6918b14e0e037663b9915d7fc4c5bfdf20e569055d864c509315a9dbdd6ecfe3d574b9b9b63808e4873d6bef2bc9cdcb0dc6a7ed6a4776c5f5bd1fd04006080000033127180ed003180c6630fb93095f3e3ce6588a3d3ac25a38284ca129d0f64b6a103d34cc23fb0fc37942c86e7bc86465aed5d87ad1ab396b2acb9691ee6a63b3d13fad923747baef9cccb95d92a723602dafe3d0554c5f18fa7320102e70b8d3121b6a02507b0068956c5ec84b43b2858f167fbf2955f506c71e4495452455a110f8966ef47205ac8cf17a18aeb31f3e8c344ee4d6d3cf8a0497148507254920d85be995e30956a5b466cb1663c5aa47bcbb9162130b82f74572ce0caa04265648e868bc50264f4caa0b812b113437dcc8263b331df23a9e29be4453130f8780adc16f6681d815bd2ce2b5199b6aa602e0000006f70796b8e8ac57a35a1414dd0e5e62cc66d2c25ed7bf3dc8ea8c613bd3c27f61b025ca049e0d4a79e9606282aeed94e176371db9de9880f47388d0d498544fd9e8adb02accefbc911b555fef8f8da62f558645d724bcfad1369a5870e5c974ea602314e2f917c76522e771230b383560cd979a20e6a998e9ca2c21a3ecc815e93d4e3f40634c74a5afe23b28d531ab5cded1da8243e923f6338149fcf22f410f037edb266fc061ae5428bfe9af9f69e2f3e349403fe88b8fb83601efd3c14b69f0b2ac582915de2597ab017fb80f5872216c531e5359bacef2ba8f96119698089ddf5c2099a0236ad7d04f033c69088a457759bbbd9bddbd022b14bc7a3a19d94d35caa43c7e13a14aed87514e4f3da60437934a59a8b283e4b2bd4e701aed254e0e1108c9e73e2236a64fa7b967c0a76d8c32dbd14235feb692c1c30caa9bf36f43afc0f930039f4095342355ad994447cf11cf82e56d81f497f7f9d964d550b085c57d4c0a707d7982532fef7051926da9cb6b3374d68aae8de58af6e6ddb5fe173177560aee47a90693b602224d20718d6493f00d31febd4c3e462518c1887ac8f4ec8efbfa5c96160e969d70458ea9750ef2aa0299f31d8852070564ba3248f69010cb7e3e9c1c8f1c7631c2d7e84f241a9e621fc45d448cc7c28d4bb4b25e2cc4af4771002a355b27dc5b806f7e77073a51d4d627c1603dd3765fb5a5537ed703a7df8b8790addf7394f27635ae911f343222fa2f5ae931cc5a808bb30608e8c3315cc8cfab2c115d2ac63743fd0530511677ea45d31614fa809bba5c8f139565386ae780298d510d0abe59a970a2df42f3313b7a9b25f98dd08b0907bd5924dd70224f4c4054437fa727a24f61c1fc5997ecbdcaa6478e20606a5969b204e058b8f014fb0da8686c7e1bfb5a6696c2af95b73ff39bf7c3d38362934d9270611cf23a2f52b8449460fb30f65f6be0fbaece51795c2d71891f265df2933cffdc8037280ad0219d4e6efb9fef3ee663ecd35836b4ab8cdb6cf268eae762ba1367f95c39ceeea627c6d0b0f6738f35fc4b1ef3e046747f056bbae84df9e4982e60a6c9bbb7d52f5a94111cc69f9e30e3271d1597a35cd2fa9e821ffd2b8c13c428ca35b1eaf977cd1a9e2f78e3e56dc4fb9342c76e5f67a3c9f0a94b6fe76757dd10a029b4534e6d6b9c544c59563a3c15b089f4e51199f2da96c7aeead7bd21edbcca448f7aa8313a31212ad4a1ba414dd79abea25a3965925190afe1898d93f892a94f96159b4db50a633c4babafb0bb732a7bfcbf970107ac1024a32c96a91518c4093acf44213bf739210bd7956182209fd7a7a147403c9e4a6016571fe1b668fac8d1e6d5bfc4a90e96af94f0e6cb37b3bc0e957ebf72c965e26da52cfda564396314fc44837f12f49b3807d44787fbf9597bbdabe2660cf5c9b80c09fef127adefea931a950402485893789e1d3d5350dc55baf2b7ac9b268180d1e7277347d883d64f69620714c3e2c503cb37eec72c5576384e0484ed1b7b2d96338a999adac3d78894b2cba64c39baee5e6e823ee5864175c38c30d1ec09e1acd5014fcd90058c75bf69766f994de49978dc562fdfc463da63da0d94c1acddeaba93048f24538e4d864ab2bd17d7e3de8ecdf51f1a8385793ba04835a61d98cacf3515f3ee020c264cf80e126a79ce23cf65ec084a0f83d5f53daf1c723238b930ba4ef252df23e7f59abfd3b5ecbf88290c4b4e55b893783e53d0251368006199e13f8437d8a70c3dd71bf0e5614cd43bffad3b1b7956a0f41866f28597d8da7845547a3618ac34024053614dfc1923fcf5adbf79174c080493b43a504afbc0786a9d648b5bac77483126a83b05b06735d40adb7e8d3f531ac654700fab458f2733313b00fb441c6004d535d39efa53927ea98d8b2148569df07db3e4361e531cbf155bfaad5b70d067ad5d988ba8229ffc1e656533525f604dfb966cb4c9f85d91969be1cacdeb977e782d0da5823bafa636575692a2e5f1404b6c0877bf4b366bde9538dee6d3d6973c9c71ff73c306e4f59ff8d3139629279ec5b145418b45bd12a65cc97a2c172f7ec03746e3f2fa8e91d9b0f5295d4d97ec5073a7764d1c119ee49debde2eb5e36e43615f03a012556459f034984e0d35833c15888dd37d4118714456389ac2200f9023817f7e4bfa65e451ddb9f3743ede9dc1645e11b7d93cb2d10fdffca743a2511089e11b26cb0a9c9aa8baed64eb38344e838973d689e9590b37b329c6af2f2a947ca8e00ec611db0f8bab044283a6576d65c452eba1f2b61c77bebc604a12662840685e288d02c3df195d8f4a0343f6f93b82cbb17752cf7921c895204c68c2e167f30be01c5b93982b3bb5c63941112b2e2b47a8ccf687a5b3661db9c8aac42b7a54aa60077928a663ac48c446b285a57548d30f9f87281395eeba67abecf26ac093ee0614b4307d1531ae960f0dc62d3f42afa8004504286786050b0130b978136509df0e290460fa29c2d53859425c0c5ad5361b57eda5e3bc4d4959596270c82c2dd8713c71d25c4ab0288afcc8b375c5bf8e3402948a80ec7c3550f1b4512bc34c6597fe501ad17179ede6c7da39b7962ef242bbeffdd77ce6ed122643ad95347d9c4d8c6ef0e4122b6f1b29653330a0ab3052375fc728bf9809f0432f6eb96dd8f69fdc5301084837170daeadc1c4c7b08f4f353dd99f80935344eeb274288e9d9205f7526aceb0efd8617769be25846300c5522f22927ede346fc6cc326374b9381670dacdc40672dcdf24956176eb25020d6511b44e863c44e2ac17c907c4b910fb25f3ecdd9e3c5bfe47debd28ac3b5c8e41b1e5ff40d154cc665458d02533ffe37c4d8bd7b2bc60d9a669885ef73ba11b9aab03d4bd20b7dac842257f9283fcc4e10932f76f020a5c0fa62bfaf4335d574173c8c65f453eca64adbdecc313477a84863bf0ce089dd4458fa02f4a793fc3db5faf1e7183cf4240c80ec205a354758ed1787bbaea37f5936aa9e63ff6adabedaff060526e25d50f7b32fd3424ea1ef008c42a51c53b6898cb7a7ccb25a23352ad62d104ff7ab95ebf37b2efee7b99dbdfd6848ce58e8b792d35fdac55277b5ef29a1de8779f078c0bd667158339229061badda6c151dab7343206c6605b3adc8d527c7066bcff454ce5d9c513b204d1443b01ddd04f88d995434bc3763073caaf15a572ce88b4c12936b0249c47b811d9dd21b5171a95ed91828417cdf0f66b2200e1e56c851badc1e3dd0957432a44410ea01d81776a607db77e42a21383fcf4af11b1c6ade75e6a66cfd90a580197be88fa64e5544c8091ed009c6b238c7ebcfdb1f5d919ce8dbda30539297758d83c59c8e156cc1894acc469973bbebc5334b534c8f44381581432c6141877ea1db00c3b208af9229db2f0f8acc268fca37a89b09697162d2ce9e73db930bda0836d7ed44ae2d642938876cdd1d2313779c9b7537b69f7a4df26c27a7b38a2a3da4fd6bc495792b86ccf4c771255e56082679a7a65a0b194fa25edafdfbd00379ded959ab387745b9d1711ad8a5452f742aad3bba521152e3b5dcdc1e9558c27d6356dd6954b2ff01e8f5ecb133551a9e7447c5bfff976e1622ff4f73d5fe471c128e60754b24ba9b11f48cf021b64b83bf88f94ec5264237229758c2763ad4977d9d23d5e0dc4e5b61b9312fb358899b37dbdd9dbb9b1ca90e97202349c5e9fd9fa84a07e66b2c038061c9a40da3511f3dc0106f9a931946aba1c66ed9400afb5862c2436c3504337840f2709616fb96de6865b805f455dc05b9fb41be43cfd72ef7b57c9246b6baccd1931a6e8f49900228bf0681a25170aa25a7c713647c018f245623db36f8b0f790cf26128d48043dab0291a6f3c92339fbc80abfc64d5694681fc3fa1195a606492b8c571e052d4f0be9a8a3e40c31ac4ca019c05ee3ec7293f50a123bc9e5b715b6a2700d0eb2a7053565e2442bc0bf4e6645e4c57f21ba212132d51c43e159426bb67989ac10f23a5567e01a180e696e91de2b42035fc770a5d752bdb4db8b575490267e767f89d8f54fbd6c2961efccbc7af42edaa73909f62e0f65faf5c136d89d03582b9b1daec7a1cf38250821bd325f193f47963027c2e886103920222286f090117fd9464a7ddfae4baaebd9e53e82161630777f6e0fb40d4abc5ffbd5c2c2f3f70bbaa70a17120d2f2e9195fd2425b2e41ccc759fb7d472432b9b3df0be1b83fe2aaf4de270e668144c79f324f211ae912f2405015d0b41381ca552498594304e9185ff2f7288355ce364457925be9831273b053d5098d6070e45b8192abd3dd4d67f87e7cbacaa8c88bc51debd6a2c9b4bb3b013c9cbde0dcbf7b587bf8ba33bcda59a61c77c3eee6ce53f343f67867c028aea4ce58ede25d4e980844736235bb62e0c032af8e8a5a16ab86775eae9e9fcd9d566414902bd6e1156db7eefd00fcd4eeffec9f5c67d7c1cf511aaae9c4b743e297e2312c589d336fcaead531564c3061f2a75870fc8475bb87ae5fd2a65a9fc77691f5ebbfda70ca40a15f1db9fb268535c0bcb502af3caf61cf90b87dcf4ab62f111fd7d3932aef35ea132c904045a8d650e51688b89d73d035f975b8dfa82110f25dd1c6c47c5bae6958828aa270e8c6ab963ff9715225e4d8b43d8ff26bf7cb4ab05ceeb17af35d994944ee1c12963c443d13a2778b86a60e13e22b9d565a4de0ba6e3a33d7f4c2105d0f874a0885eb3a570bea83104f27d917f51f192620eb924c18dd300732f6ac096858baa5296d4f48973eb578136209e0795064728c1020d3d33b28a58806e09e6f7f79ca4de0bcb238e2d7d2d60bc2063b54f30877010309e120a5fd65f60c72337495b67787fe5042dde983da58e8cd99518c38a77c401c845c4a4d2b20c0b0c7ca1e432d46cb9dccae55e96d961850a20b647eb714a8b1b304a1fb501cfb9fd64b37812592992e135a342536b25bdbb71109b3581504e9561a1acabf9c4f4efa9da6740cc8feed329c75820abf969ab9f5822a67c9b1fc7aebcf611f721107e3ae3bacdca93c7b934fc7dacad5aff47796bae16c91a99b61566c3b5a9297b643d4c68224814c473bb301d31a43e32b3612898a589bcbee6a8da4d834e7712c1cde27691918041591e7038dbed552958c8acc7af8fe76ccb9081310f9a61dedbdb6b86cf0f8dafb7cabc6edc373ed9358242aa4cb7a7d6aa31592432b42048c49e83f5cbe8378d6e8d7ef09e0a9ec84ea03ad345b35e0dc42902c719c1ecc4af344c46d08da2bdea6de62f5c3a28f6f4f5787aba9916b6bc9939f6b47257515619ed0436ea3b3f5299ad6714c7ab7d5648d8f1a2907d3c576b09d93f021879d31f3517ba5ff7d75d5ea8fd6426dfc11f5552d7deaaeceeaad0d0d3fd2bc0ea454a51c0750388666ff1a186ec2df12d985b2f8f1cbedb9145f266aa700b4e8cc84c7dc53c7cd86c01419e3d01b909c1d6f238cf7a326df2e0e002f6d71839c75a5e893624104220bd7dbefdacd1d9bbeac1f4a2f3463d85104536206db482e9773a8ad62b74d3b8a7f309399b6f7ba00095b1d12aad1a34935b073cbbfd3c0ed1a922ca09005c189552625e16b0469f9ab530e503850df91a4223f12009ca354eda4a8c6a19a8e881af8083fe3a60f35ab67b7508d29bdff19cf83fafcb430eeeeb911c59c5653944e91766567193bb06a64a7574471bd9525cf883c6758fcfb59fa4406a2276816a3504467fcd8ef10fece3c08e7f60c01d22027bb07131eb3dc03985ac4a64c9b98f2f67ac5eb1ca0bfb923c32bf8ea397ba115788bce6ee914bd341e84651bdc7e835ba1596c90afed9e8b2478cca6dcda3ed4a37c5aef86ab159799c0a20411ba83823a1d081e466b3802fb3c02f0ace7973cff4cee158f6ce7bc16c870df6b90cc2e2cec8b3c962e3e8a1a0460e89ce0db6bfe3c5ebe0de4cfdd4193f728eefc47839e0fa30f06ff942c854c6be42c070a0e5ad8ec2086d7d2cc27784c766188b7afede753223fefaa1fa1c5186737802e1901e5f183bcfc53c4a84958253a9ad0bd476eda479903096ded4019c0f6b9e0e4a1b77ba57598a9b165dacd48a67d14c968d653ddd70f073eaf3c92f3aab6cfd1d086b913e265b32b34e303c4b2d03515eb6d86725e1b63bf31ec2002063f285e4da03af08e4f900c8276dffe13d4421251e333a3d376a3c76d16683a928d0c274bc2e0f9c2933003d010d800800f300", @ANYRES32=r4, @ANYBLOB='\b\x00,\x00', @ANYRES32, @ANYBLOB="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"], 0x2ba0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.804397024s ago: executing program 1 (id=2132): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) 1.280105477s ago: executing program 0 (id=2133): r0 = setfsuid$auto(0xee00) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/net/teql0/statistics/rx_compressed\x00', 0xc2700, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x221, 0x70bd2c, 0x25dfdbeb}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000ffdbdf250800000018000180140002006970766c616e31000000000000ffffff8d40fdb8897c25f97279c961f2f04403c2818bfb3035cbdf922723cd3512d4cbe266a51061ffcbfb03bb5f02420493bb0e87b864a14d3c78c319affc605b1662256a08526703379a00e53ae456c4c82513"], 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080) setresuid$auto(0xffffffffffffffff, r0, 0x8000) 977.089736ms ago: executing program 0 (id=2134): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) 741.733732ms ago: executing program 2 (id=2135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) getxattrat$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/transparent_hugepage/hugepages-128kB/enabled\x00', 0x100580, 0x0) read$auto(r2, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/ep_81/interval\x00', 0x3) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d00)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 717.368558ms ago: executing program 1 (id=2136): connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff85, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xa00006, 0x2, 0x13, 0x602, 0x300000000000) prctl$auto_PR_SET_MM_ARG_START(0x4, 0x8, 0xffffffffffffffff, 0xd, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) ioctl$auto_IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, 0x4) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 632.525413ms ago: executing program 0 (id=2137): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto(0x3, 0x0, 0x80) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x321, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4804) msync$auto(0x8, 0x80000000009, 0x1) 472.195875ms ago: executing program 2 (id=2138): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/media19/uevent\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/41, 0x29) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) eventfd$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) sysfs$auto(0x2, 0x47, 0x0) fsopen$auto(0x0, 0x1) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x88, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0xfe, "01"}, 0xffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000080)=0x1) syz_clone3(&(0x7f00000005c0)={0x400, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0), {0xb}, &(0x7f0000000400)=""/175, 0xaf, 0x0, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) 377.600452ms ago: executing program 0 (id=2139): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/first_error_func\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/114, 0x72) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mbind$auto(0x2001, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) capset$auto(0x0, 0x0) capget$auto(0x0, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x7352c0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x101000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000080)={0x6, 0x9d, 0x0, 0xd, 0xc6, 0x8, 0x0, 0x5, 0x100000001, 0x4, 0x4d, 0x9, 0x9, @iso={0x402, 0x7f}, 0x9, 0xffffff81, 0x2, 0x1002}, &(0x7f0000000180)="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", 0xfff}) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8001d}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) listen$auto(0x3, 0x81) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r5 = socket(0x10, 0x2, 0x6) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340014a36eb88010", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf251100fc00"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0x100082) 67.104761ms ago: executing program 1 (id=2140): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x8000, 0x0) read$auto_ftrace_set_event_fops_trace_events(r0, &(0x7f0000000040)=""/132, 0x84) (fail_nth: 2) 0s ago: executing program 2 (id=2141): unshare$auto(0x40000080) socket(0x10, 0x2, 0x7fffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x2a4cc1, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)="58fcb282bcbc38bfaef257e019406e8ec445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e9ce53883444996d1721d7f3ae627c6c68118e15b5a753fd37910fbc02d898cfc8254c80582fc6184113a38c8937e") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x1cb803, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) write$auto(r1, &(0x7f0000000540)='/dev/audig1\x00\x1dI]\x9fW\xae1\xa3\xfeN\xf5\x8c\xa1\xc3\xf9\x10XZ\xae\xaf\xb3\xc1\xc4/G+VC\xd7\x96\xb2\xb69L\xff\x00\x00\x01\xc5\xf9|l\x04 \xa8\xfa\x9e\xd1t\xc1i\xac\x92\x9a\xdfMM]\x83>T\xa1\xecgWb\xa6+i)\x92\xee\x14\x90`6\xcbP\xbenB\x1e\xec\xa0\xf2\xc4\v\x9c\xc9Y\x95X\xb9\x88\x80\x1e\xd2Z\xb9\xed\xd8\xa6\xec\xb2\xf6T\x9e\xf9G\xefiC\xff\x8d\xe7>\xe4_\xecP\xda\xb3\xbe\x80\x1e\xfd\xc7m,\x8d\x00\x00\x00\x00', 0x800a3d9) select$auto(0x0, 0x0, 0x0, &(0x7f0000000340)={[0x5, 0x69, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x80000000000007, 0x1, 0x5, 0xfffffffffffffffe]}, 0x0) unshare$auto(0x40000080) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) io_uring_setup$auto(0x4bf15e08, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000000c0)={0x1, 0xfa, 0x9, 0x1, 0x418, "e72171dd9872b555facc1e8f"}) bpf$auto(0x0, &(0x7f0000000480)=@link_update={0xa, @new_map_fd, 0x4007, @old_prog_fd=0x13b}, 0xa3) kernel console output (not intermixed with test programs): 7] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[12557] [ 533.539494][T12562] [U] ª߃`6\I(߹˭K+zr';4?s)Z#Ry_qX [ 533.763176][T12562] [U] +J,k>>[canJ0'*7k( g+^vހ!/]o5# [ 533.772084][T12562] [U] c _5RM Gm-q [ 533.777449][T12562] [U] U=As 6D0(З&>_ [ 533.784543][T12562] [U] )"laQGF 4?ZfA wNG [ 533.791285][T12562] [U] Jg6$,{=PL~m͵ߔAhQMsݲ]GyQ9fkЗjX:]@e5L!YC3C8ǻ]:̈7`~coB`S>;#E>"2f:Rgv KQ=2oe&y29?XWCl͸ [ 533.809828][T12562] [U] wȡ{S` [ 533.813700][T12562] [U] j [ 533.817225][T12562] [U] ՝dUJһ{@RlȒb55/9ۙՈTfS{-,`Ol{1=#ޑtș [ 533.872642][T12562] [U] cxBf\a`v v܀[T\UӏSk`#IU@tb|Ys_a۶L̩Ո6%ʸe( [ 533.885454][T12562] [U] YL~6U4X [ 533.889499][T12562] [U] zC[ "({VQ$Av6$`4QdΔcT(.fgD)DU>- BQ [ 533.899273][T12562] [U] e$*g<3z?%~V#)dDHJ [ 533.905143][T12562] [U] "$pk [ 533.908726][T12562] [U] "ĆZ} m!=H3˽{x_R}`xsh}IIq )x#$T~lQ>@ל`KѤ+ǥhwREH*$ [ 533.933174][T12562] [U] uWBYU|DR+_UWBT=| }Wu2_sK( J,Y.ԚtuEq۪Dgջz­Z^}9*vswDY`E0B#t+Pw(j߾\''C%huzWCeRmb_ [ 534.045504][T12562] [U] Ye5;'.;QZCkNMn2C) [ 534.051258][T12562] [U] Jd [ 534.054495][T12562] [U] Nl&;;G2yUFX޶/J@|RmCr#UJ4P [ 534.061584][T12562] [U] &e4ͧt5-.4ROxDbzS'D+a:CUߞ! }x:7+6̜>#b(*vvvJM{a!fG>tISad }J)1Uu7Wc,z [ 534.092061][T12562] [U] # [ 534.094953][T12562] [U] Y+c3GD')9ח5%z(qsgcV iהܗ# [ 534.103249][T12562] [U] 1(֧~&pVQmU2Ԫ0\˄#;j1Yܛh6B6^zi& vrHdphz#fzQm%)UA`#ⱐ/!K7DZ~fpeڲ;DQr^(-?qp"[\ [ 534.122130][T12562] [U]  [ 534.124931][T12562] [U] cȬ wŏlZF7PG% [ 534.130443][T12562] [U] Ϗ|J'oN-@nA7 [ 534.232824][T12562] [U] t` yn柁kMd1Ic޴Ax.(QFI n8CGי bvb,27<^Ib Ic9'\Hj|}c&"{PX8³9׾U&A|Ƶ!gZ*B^bꋯ{E~Uu㍇xY/qT4ǞiԚv_%1EUdM [ 534.256745][T12562] [U] \)i5|a' [ 534.260580][T12562] [U] qۥPDyzsd.v!JRlC&?d& [ 534.334214][ T31] audit: type=1107 audit(4294967306.100:31): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 535.558196][T12582] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1613'. [ 536.571115][T12584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 536.599891][T12584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 536.625836][T12584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 536.631980][T12584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 536.977916][ T31] audit: type=1107 audit(4294967297.960:32): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 537.587164][T12617] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[12617] [ 537.803317][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 538.174241][T12626] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 538.192058][T12626] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 538.258690][T12626] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 538.321621][T12626] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.519563][T12636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.563969][T12636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.602480][T12636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 539.628438][T12636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.695638][ T31] audit: type=1107 audit(4294967300.700:33): pid=12646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 540.863503][T12661] FAULT_INJECTION: forcing a failure. [ 540.863503][T12661] name failslab, interval 1, probability 0, space 0, times 0 [ 540.883806][T12661] CPU: 0 UID: 0 PID: 12661 Comm: syz.0.1634 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 540.883848][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 540.883865][T12661] Call Trace: [ 540.883874][T12661] [ 540.883885][T12661] dump_stack_lvl+0x16c/0x1f0 [ 540.883935][T12661] should_fail_ex+0x50a/0x650 [ 540.883964][T12661] ? fs_reclaim_acquire+0xae/0x150 [ 540.884005][T12661] ? constrain_params_by_rules+0x176/0xca0 [ 540.884043][T12661] should_failslab+0xc2/0x120 [ 540.884071][T12661] __kmalloc_noprof+0xcb/0x510 [ 540.884109][T12661] ? unwind_get_return_address+0x59/0xa0 [ 540.884152][T12661] ? arch_stack_walk+0xa7/0x100 [ 540.884195][T12661] constrain_params_by_rules+0x176/0xca0 [ 540.884245][T12661] ? stack_trace_save+0x95/0xd0 [ 540.884281][T12661] ? stack_depot_save_flags+0x28/0x9c0 [ 540.884330][T12661] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 540.884380][T12661] ? __kasan_kmalloc+0xaa/0xb0 [ 540.884422][T12661] ? snd_pcm_oss_change_params_locked+0x6d9/0x3a60 [ 540.884460][T12661] ? snd_pcm_oss_ioctl+0x2623/0x3780 [ 540.884497][T12661] ? __x64_sys_ioctl+0x190/0x200 [ 540.884548][T12661] ? snd_interval_refine+0x2fa/0x580 [ 540.884583][T12661] snd_pcm_hw_refine+0x7e8/0xad0 [ 540.884631][T12661] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 540.884692][T12661] ? snd_interval_refine+0x2fa/0x580 [ 540.884729][T12661] snd_pcm_oss_change_params_locked+0x211e/0x3a60 [ 540.884789][T12661] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 540.884827][T12661] ? do_vfs_ioctl+0x513/0x1990 [ 540.884863][T12661] ? __pfx___mutex_lock+0x10/0x10 [ 540.884936][T12661] snd_pcm_oss_ioctl+0x2623/0x3780 [ 540.884982][T12661] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 540.885028][T12661] ? __fget_files+0x206/0x3a0 [ 540.885077][T12661] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 540.885120][T12661] __x64_sys_ioctl+0x190/0x200 [ 540.885164][T12661] do_syscall_64+0xcd/0x250 [ 540.885208][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.885250][T12661] RIP: 0033:0x7f114e18d169 [ 540.885275][T12661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.885303][T12661] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.885331][T12661] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 540.885351][T12661] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 540.885369][T12661] RBP: 00007f114e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 540.885387][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.885404][T12661] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 540.885441][T12661] [ 541.208939][T12658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.215701][T12658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 541.232673][T12658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.258393][T12658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 541.464944][T12665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.471114][T12665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 541.486810][T12665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.501578][T12665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 542.745862][T12678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 542.755022][T12678] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 542.761330][T12678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 542.770029][T12678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 543.030858][T12698] FAULT_INJECTION: forcing a failure. [ 543.030858][T12698] name failslab, interval 1, probability 0, space 0, times 0 [ 543.082477][T12698] CPU: 1 UID: 0 PID: 12698 Comm: syz.1.1646 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 543.082521][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 543.082540][T12698] Call Trace: [ 543.082548][T12698] [ 543.082559][T12698] dump_stack_lvl+0x16c/0x1f0 [ 543.082610][T12698] should_fail_ex+0x50a/0x650 [ 543.082638][T12698] ? fs_reclaim_acquire+0xae/0x150 [ 543.082680][T12698] ? constrain_params_by_rules+0x176/0xca0 [ 543.082719][T12698] should_failslab+0xc2/0x120 [ 543.082750][T12698] __kmalloc_noprof+0xcb/0x510 [ 543.082793][T12698] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 543.082837][T12698] constrain_params_by_rules+0x176/0xca0 [ 543.082874][T12698] ? arch_stack_walk+0xa7/0x100 [ 543.082915][T12698] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 543.082956][T12698] ? stack_trace_save+0x95/0xd0 [ 543.082987][T12698] ? __pfx_stack_trace_save+0x10/0x10 [ 543.083038][T12698] ? snd_pcm_oss_change_params_locked+0x9ad/0x3a60 [ 543.083077][T12698] ? snd_pcm_oss_ioctl+0x2623/0x3780 [ 543.083125][T12698] ? __x64_sys_ioctl+0x190/0x200 [ 543.083159][T12698] ? do_syscall_64+0xcd/0x250 [ 543.083202][T12698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.083245][T12698] ? snd_interval_refine+0x2fa/0x580 [ 543.083280][T12698] snd_pcm_hw_refine+0x7e8/0xad0 [ 543.083327][T12698] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 543.083394][T12698] snd_pcm_hw_param_first+0x328/0x6e0 [ 543.083441][T12698] snd_pcm_hw_param_near.constprop.0+0x711/0x8f0 [ 543.083486][T12698] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 543.083527][T12698] ? kfree+0x2c4/0x4d0 [ 543.083564][T12698] ? snd_pcm_oss_change_params_locked+0x93b/0x3a60 [ 543.083611][T12698] snd_pcm_oss_change_params_locked+0x9ad/0x3a60 [ 543.083671][T12698] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 543.083706][T12698] ? do_vfs_ioctl+0x513/0x1990 [ 543.083738][T12698] ? __pfx___mutex_lock+0x10/0x10 [ 543.083802][T12698] snd_pcm_oss_ioctl+0x2623/0x3780 [ 543.083841][T12698] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 543.083880][T12698] ? __fget_files+0x206/0x3a0 [ 543.083924][T12698] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 543.083962][T12698] __x64_sys_ioctl+0x190/0x200 [ 543.084000][T12698] do_syscall_64+0xcd/0x250 [ 543.084046][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.084085][T12698] RIP: 0033:0x7f045cd8d169 [ 543.084117][T12698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.084145][T12698] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.084173][T12698] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 543.084192][T12698] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 543.084209][T12698] RBP: 00007f045ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 543.084226][T12698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.084243][T12698] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 543.084280][T12698] [ 543.953911][T12707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 543.972455][T12707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 543.993150][T12711] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[12711] [ 544.004116][T12707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 544.010242][T12707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 545.623891][T12735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 545.631196][T12735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 545.702197][T12735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 545.782658][T12735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.976673][T12742] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[12742] [ 547.713898][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 547.713922][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 547.713968][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 547.795728][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 547.872545][T12762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 547.951919][T12762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.022756][T12762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.068129][T12762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.209118][T12778] FAULT_INJECTION: forcing a failure. [ 549.209118][T12778] name failslab, interval 1, probability 0, space 0, times 0 [ 549.222421][T12778] CPU: 0 UID: 0 PID: 12778 Comm: syz.1.1667 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 549.222463][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 549.222479][T12778] Call Trace: [ 549.222488][T12778] [ 549.222501][T12778] dump_stack_lvl+0x16c/0x1f0 [ 549.222554][T12778] should_fail_ex+0x50a/0x650 [ 549.222583][T12778] ? fs_reclaim_acquire+0xae/0x150 [ 549.222624][T12778] ? snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 549.222663][T12778] should_failslab+0xc2/0x120 [ 549.222691][T12778] __kmalloc_cache_noprof+0x68/0x410 [ 549.222732][T12778] ? snd_pcm_hw_param_first+0x301/0x6e0 [ 549.222766][T12778] ? snd_pcm_hw_param_near.constprop.0+0x73e/0x8f0 [ 549.222810][T12778] snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 549.222855][T12778] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 549.222897][T12778] ? calc_src_frames.isra.0+0x187/0x1d0 [ 549.222936][T12778] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 549.222985][T12778] snd_pcm_oss_change_params_locked+0x13cd/0x3a60 [ 549.223051][T12778] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 549.223090][T12778] ? do_vfs_ioctl+0x513/0x1990 [ 549.223127][T12778] ? __pfx___mutex_lock+0x10/0x10 [ 549.223199][T12778] snd_pcm_oss_ioctl+0x2623/0x3780 [ 549.223243][T12778] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 549.223286][T12778] ? __fget_files+0x206/0x3a0 [ 549.223335][T12778] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 549.223377][T12778] __x64_sys_ioctl+0x190/0x200 [ 549.223415][T12778] do_syscall_64+0xcd/0x250 [ 549.223458][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.223496][T12778] RIP: 0033:0x7f045cd8d169 [ 549.223517][T12778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.223544][T12778] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.223574][T12778] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 549.223593][T12778] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 549.223611][T12778] RBP: 00007f045ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 549.223629][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.223651][T12778] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 549.223686][T12778] [ 549.503847][ T31] audit: type=1107 audit(4294967310.470:34): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 549.875149][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 549.953967][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 550.034001][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 550.124186][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 551.089241][T12797] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[12797] [ 554.168187][T12834] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 554.174518][T12834] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 554.215902][T12834] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 554.233932][T12834] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 555.871960][ T31] audit: type=1107 audit(4294967316.870:35): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 556.199148][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 556.199157][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 556.273843][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 556.280929][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 557.919887][ T31] audit: type=1107 audit(4294967318.920:36): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 559.186777][T12885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 559.213185][T12885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 559.262761][T12885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.297573][T12885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.993733][T12889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.001717][T12889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 560.053787][T12889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.094258][T12889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.792807][T12898] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[12898] [ 561.484022][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 562.040873][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 562.123750][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 562.131536][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 563.100036][T12927] FAULT_INJECTION: forcing a failure. [ 563.100036][T12927] name failslab, interval 1, probability 0, space 0, times 0 [ 563.118824][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.0.1704 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 563.118866][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 563.118884][T12927] Call Trace: [ 563.118902][T12927] [ 563.118912][T12927] dump_stack_lvl+0x16c/0x1f0 [ 563.118965][T12927] should_fail_ex+0x50a/0x650 [ 563.118993][T12927] ? fs_reclaim_acquire+0xae/0x150 [ 563.119034][T12927] ? ccid_get_builtin_ccids+0x79/0x200 [ 563.119076][T12927] should_failslab+0xc2/0x120 [ 563.119106][T12927] __kmalloc_cache_noprof+0x68/0x410 [ 563.119157][T12927] ccid_get_builtin_ccids+0x79/0x200 [ 563.119205][T12927] dccp_feat_init+0x396/0x800 [ 563.119257][T12927] ? __pfx_dccp_feat_init+0x10/0x10 [ 563.119303][T12927] ? lockdep_init_map_type+0xe0/0x7d0 [ 563.119351][T12927] ? do_init_timer+0xc9/0x110 [ 563.119384][T12927] ? __pfx_dccp_keepalive_timer+0x10/0x10 [ 563.119421][T12927] ? __pfx_dccp_delack_timer+0x10/0x10 [ 563.119463][T12927] dccp_init_sock+0x327/0x420 [ 563.119495][T12927] ? __pfx_dccp_v6_init_sock+0x10/0x10 [ 563.119530][T12927] dccp_v6_init_sock+0x1f/0xd0 [ 563.119561][T12927] ? __pfx_dccp_v6_init_sock+0x10/0x10 [ 563.119595][T12927] inet6_create+0xb53/0x1320 [ 563.119637][T12927] ? inet6_create+0x5d/0x1320 [ 563.119678][T12927] __sock_create+0x335/0x8d0 [ 563.119725][T12927] inet_ctl_sock_create+0x96/0x230 [ 563.119756][T12927] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 563.119796][T12927] ? __pfx_dccp_v6_init_net+0x10/0x10 [ 563.119830][T12927] dccp_v6_init_net+0x63/0x90 [ 563.119863][T12927] ops_init+0x1df/0x5f0 [ 563.119907][T12927] setup_net+0x21f/0x860 [ 563.119940][T12927] ? __pfx_setup_net+0x10/0x10 [ 563.119971][T12927] ? down_read_killable+0xcc/0x380 [ 563.120001][T12927] ? __pfx_down_read_killable+0x10/0x10 [ 563.120028][T12927] ? __raw_spin_lock_init+0x3a/0x110 [ 563.120060][T12927] ? debug_mutex_init+0x37/0x70 [ 563.120097][T12927] copy_net_ns+0x2a6/0x5f0 [ 563.120137][T12927] create_new_namespaces+0x3ea/0xad0 [ 563.120194][T12927] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 563.120246][T12927] ksys_unshare+0x45d/0xa40 [ 563.120278][T12927] ? __pfx_ksys_unshare+0x10/0x10 [ 563.120307][T12927] ? xfd_validate_state+0x5d/0x180 [ 563.120362][T12927] __x64_sys_unshare+0x31/0x40 [ 563.120392][T12927] do_syscall_64+0xcd/0x250 [ 563.120438][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.120479][T12927] RIP: 0033:0x7f114e18d169 [ 563.120502][T12927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.120531][T12927] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 563.120560][T12927] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 563.120579][T12927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 563.120597][T12927] RBP: 00007f114e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 563.120615][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.120632][T12927] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 563.120671][T12927] [ 564.434310][ T31] audit: type=1107 audit(4294967325.430:37): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 565.502966][T12971] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[12971] [ 565.788235][T12980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 566.900465][T12990] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 566.910471][T12990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 566.937769][T12990] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 566.951924][T12990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 567.592253][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 568.353933][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 568.516899][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.523403][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.913805][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 569.010861][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 569.011678][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 569.145465][T13046] FAULT_INJECTION: forcing a failure. [ 569.145465][T13046] name failslab, interval 1, probability 0, space 0, times 0 [ 569.186594][T13046] CPU: 1 UID: 0 PID: 13046 Comm: syz.0.1735 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 569.186637][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 569.186654][T13046] Call Trace: [ 569.186663][T13046] [ 569.186674][T13046] dump_stack_lvl+0x16c/0x1f0 [ 569.186722][T13046] should_fail_ex+0x50a/0x650 [ 569.186757][T13046] should_failslab+0xc2/0x120 [ 569.186794][T13046] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 569.186839][T13046] ? skb_clone+0x190/0x3f0 [ 569.186875][T13046] skb_clone+0x190/0x3f0 [ 569.186906][T13046] netlink_deliver_tap+0xabd/0xd30 [ 569.186958][T13046] netlink_unicast+0x5e1/0x7f0 [ 569.187007][T13046] ? __pfx_netlink_unicast+0x10/0x10 [ 569.187052][T13046] ? __phys_addr_symbol+0x30/0x80 [ 569.187082][T13046] ? __check_object_size+0x488/0x710 [ 569.187117][T13046] netlink_sendmsg+0x8b8/0xd70 [ 569.187168][T13046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.187229][T13046] ____sys_sendmsg+0xaaf/0xc90 [ 569.187267][T13046] ? copy_msghdr_from_user+0x10b/0x160 [ 569.187296][T13046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.187353][T13046] ___sys_sendmsg+0x135/0x1e0 [ 569.187385][T13046] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.187431][T13046] ? __pfx_lock_release+0x10/0x10 [ 569.187470][T13046] ? trace_lock_acquire+0x14e/0x1f0 [ 569.187517][T13046] ? __fget_files+0x206/0x3a0 [ 569.187568][T13046] __sys_sendmsg+0x16e/0x220 [ 569.187598][T13046] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.187652][T13046] do_syscall_64+0xcd/0x250 [ 569.187699][T13046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.187739][T13046] RIP: 0033:0x7f114e18d169 [ 569.187763][T13046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.187796][T13046] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.187825][T13046] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 569.187845][T13046] RDX: 0000000000004880 RSI: 0000400000000140 RDI: 0000000000000003 [ 569.187862][T13046] RBP: 00007f114f0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 569.187879][T13046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.187896][T13046] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 569.187934][T13046] [ 569.705820][T13045] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[13045] [ 574.134561][T13103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 574.144495][T13103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 574.157586][T13103] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 574.169994][T13103] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 574.674307][T13122] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 574.680488][T13122] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 574.744382][T13122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 574.750541][T13122] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.505575][ T31] audit: type=1107 audit(4294967297.480:38): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 576.754171][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 576.754195][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 576.754245][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 576.761095][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 581.117461][T13181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 581.139850][T13181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 581.182824][T13181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 581.265622][T13181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.674093][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 582.687624][T13203] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[13203] [ 582.927365][T13213] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[13213] [ 583.153913][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 583.233877][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 583.234273][T13227] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.316405][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 583.336542][T13227] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 583.394332][T13227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.400674][T13227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 584.740554][T13247] zswap: compressor not available [ 585.154244][T13263] FAULT_INJECTION: forcing a failure. [ 585.154244][T13263] name failslab, interval 1, probability 0, space 0, times 0 [ 585.180988][T13263] CPU: 1 UID: 0 PID: 13263 Comm: syz.3.1791 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 585.181029][T13263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 585.181045][T13263] Call Trace: [ 585.181053][T13263] [ 585.181065][T13263] dump_stack_lvl+0x16c/0x1f0 [ 585.181112][T13263] should_fail_ex+0x50a/0x650 [ 585.181137][T13263] ? fs_reclaim_acquire+0xae/0x150 [ 585.181176][T13263] should_failslab+0xc2/0x120 [ 585.181203][T13263] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 585.181258][T13263] ? __xlate_proc_name+0x173/0x210 [ 585.181302][T13263] ? __proc_create+0x2c0/0x8b0 [ 585.181333][T13263] __proc_create+0x2c0/0x8b0 [ 585.181359][T13263] ? __pfx___proc_create+0x10/0x10 [ 585.181383][T13263] ? proc_register+0xa0/0x5f0 [ 585.181413][T13263] ? _raw_write_unlock+0x28/0x50 [ 585.181450][T13263] ? proc_register+0x314/0x5f0 [ 585.181478][T13263] proc_create_reg+0x7d/0x180 [ 585.181509][T13263] proc_create_seq_private+0x8f/0x180 [ 585.181538][T13263] ? __pfx_proc_create_seq_private+0x10/0x10 [ 585.181568][T13263] ? __pfx_uevent_net_rcv+0x10/0x10 [ 585.181604][T13263] ? __pfx_dev_proc_net_init+0x10/0x10 [ 585.181639][T13263] dev_proc_net_init+0xa8/0x220 [ 585.181674][T13263] ops_init+0x1df/0x5f0 [ 585.181707][T13263] setup_net+0x21f/0x860 [ 585.181738][T13263] ? __pfx_setup_net+0x10/0x10 [ 585.181767][T13263] ? down_read_killable+0xcc/0x380 [ 585.181794][T13263] ? __pfx_down_read_killable+0x10/0x10 [ 585.181820][T13263] ? __raw_spin_lock_init+0x3a/0x110 [ 585.181849][T13263] ? debug_mutex_init+0x37/0x70 [ 585.181882][T13263] copy_net_ns+0x2a6/0x5f0 [ 585.181918][T13263] create_new_namespaces+0x3ea/0xad0 [ 585.181972][T13263] copy_namespaces+0x468/0x560 [ 585.182018][T13263] copy_process+0x29fc/0x8c50 [ 585.182047][T13263] ? find_held_lock+0x2d/0x110 [ 585.182081][T13263] ? try_to_wake_up+0x8a0/0x1490 [ 585.182134][T13263] ? __pfx_copy_process+0x10/0x10 [ 585.182163][T13263] ? try_to_wake_up+0x953/0x1490 [ 585.182205][T13263] ? __pfx_try_to_wake_up+0x10/0x10 [ 585.182249][T13263] ? __pfx_lock_release+0x10/0x10 [ 585.182288][T13263] ? plist_check_head+0xa3/0x150 [ 585.182329][T13263] ? wake_up_q+0xb0/0x160 [ 585.182363][T13263] ? do_raw_spin_unlock+0x172/0x230 [ 585.182397][T13263] kernel_clone+0xfd/0x960 [ 585.182424][T13263] ? __pfx_futex_wake+0x10/0x10 [ 585.182463][T13263] ? __pfx_kernel_clone+0x10/0x10 [ 585.182487][T13263] ? __pfx_vfs_writev+0x10/0x10 [ 585.182542][T13263] __do_sys_clone+0xcf/0x120 [ 585.182569][T13263] ? __pfx___do_sys_clone+0x10/0x10 [ 585.182612][T13263] ? rcu_is_watching+0x12/0xc0 [ 585.182651][T13263] do_syscall_64+0xcd/0x250 [ 585.182695][T13263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.182734][T13263] RIP: 0033:0x7f7981d8d169 [ 585.182757][T13263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.182785][T13263] RSP: 002b:00007f7982c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 585.182812][T13263] RAX: ffffffffffffffda RBX: 00007f7981fa5fa0 RCX: 00007f7981d8d169 [ 585.182831][T13263] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000006cb0a3c8 [ 585.182847][T13263] RBP: 00007f7981e0e2a0 R08: 0000000000000408 R09: 0000000000000000 [ 585.182864][T13263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.182879][T13263] R13: 0000000000000000 R14: 00007f7981fa5fa0 R15: 00007fff15cf1b38 [ 585.182914][T13263] [ 585.521132][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 585.527320][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 585.533428][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 585.539532][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 586.019514][T13274] FAULT_INJECTION: forcing a failure. [ 586.019514][T13274] name failslab, interval 1, probability 0, space 0, times 0 [ 586.033409][ T31] audit: type=1107 audit(4294967303.110:39): pid=13270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 586.058575][T13274] CPU: 1 UID: 0 PID: 13274 Comm: syz.1.1794 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 586.058616][T13274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 586.058633][T13274] Call Trace: [ 586.058641][T13274] [ 586.058652][T13274] dump_stack_lvl+0x16c/0x1f0 [ 586.058703][T13274] should_fail_ex+0x50a/0x650 [ 586.058730][T13274] ? fs_reclaim_acquire+0xae/0x150 [ 586.058771][T13274] ? constrain_params_by_rules+0x176/0xca0 [ 586.058809][T13274] should_failslab+0xc2/0x120 [ 586.058838][T13274] __kmalloc_noprof+0xcb/0x510 [ 586.058880][T13274] ? mark_lock+0xb5/0xc60 [ 586.058925][T13274] constrain_params_by_rules+0x176/0xca0 [ 586.058966][T13274] ? __pfx___lock_acquire+0x10/0x10 [ 586.059011][T13274] ? stack_trace_save+0x95/0xd0 [ 586.059048][T13274] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 586.059086][T13274] ? lock_acquire.part.0+0x11b/0x380 [ 586.059150][T13274] ? hlock_class+0x4e/0x130 [ 586.059180][T13274] ? mark_lock+0xb5/0xc60 [ 586.059217][T13274] ? snd_interval_refine+0x2fa/0x580 [ 586.059249][T13274] snd_pcm_hw_refine+0x7e8/0xad0 [ 586.059295][T13274] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 586.059340][T13274] ? __pfx_lock_release+0x10/0x10 [ 586.059386][T13274] ? mark_held_locks+0x9f/0xe0 [ 586.059434][T13274] snd_pcm_hw_params+0x3e6/0x1b20 [ 586.059477][T13274] ? snd_pcm_hw_param_last+0x306/0x710 [ 586.059520][T13274] ? snd_pcm_hw_param_near.constprop.0+0x73e/0x8f0 [ 586.059564][T13274] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 586.059609][T13274] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 586.059653][T13274] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 586.059701][T13274] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 586.059747][T13274] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 586.059804][T13274] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 586.059841][T13274] ? do_vfs_ioctl+0x513/0x1990 [ 586.059876][T13274] ? __pfx___mutex_lock+0x10/0x10 [ 586.059946][T13274] snd_pcm_oss_ioctl+0x2623/0x3780 [ 586.059992][T13274] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 586.060036][T13274] ? __fget_files+0x206/0x3a0 [ 586.060083][T13274] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 586.060124][T13274] __x64_sys_ioctl+0x190/0x200 [ 586.060163][T13274] do_syscall_64+0xcd/0x250 [ 586.060209][T13274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.060248][T13274] RIP: 0033:0x7f045cd8d169 [ 586.060271][T13274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.060298][T13274] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.060326][T13274] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 586.060346][T13274] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 586.060363][T13274] RBP: 00007f045ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 586.060380][T13274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.060397][T13274] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 586.060435][T13274] [ 586.409653][T13271] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[13271] [ 588.061389][T13290] kAFS: Invalid Command on /proc/fs/afs/cells file [ 588.716219][T13292] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[13292] [ 589.134288][T13305] FAULT_INJECTION: forcing a failure. [ 589.134288][T13305] name failslab, interval 1, probability 0, space 0, times 0 [ 589.202936][T13305] CPU: 0 UID: 0 PID: 13305 Comm: syz.2.1801 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 589.202975][T13305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 589.202991][T13305] Call Trace: [ 589.202999][T13305] [ 589.203009][T13305] dump_stack_lvl+0x16c/0x1f0 [ 589.203056][T13305] should_fail_ex+0x50a/0x650 [ 589.203083][T13305] ? fs_reclaim_acquire+0xae/0x150 [ 589.203122][T13305] ? tomoyo_encode2+0x100/0x3e0 [ 589.203160][T13305] should_failslab+0xc2/0x120 [ 589.203198][T13305] __kmalloc_noprof+0xcb/0x510 [ 589.203241][T13305] ? d_absolute_path+0x137/0x1b0 [ 589.203273][T13305] ? rcu_is_watching+0x12/0xc0 [ 589.203309][T13305] tomoyo_encode2+0x100/0x3e0 [ 589.203355][T13305] tomoyo_encode+0x29/0x50 [ 589.203393][T13305] tomoyo_realpath_from_path+0x19d/0x720 [ 589.203444][T13305] tomoyo_path_number_perm+0x248/0x590 [ 589.203477][T13305] ? tomoyo_path_number_perm+0x235/0x590 [ 589.203516][T13305] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 589.203594][T13305] ? __pfx_lock_release+0x10/0x10 [ 589.203638][T13305] ? trace_lock_acquire+0x14e/0x1f0 [ 589.203673][T13305] ? lock_acquire+0x2f/0xb0 [ 589.203710][T13305] ? __fget_files+0x40/0x3a0 [ 589.203756][T13305] ? __fget_files+0x206/0x3a0 [ 589.203803][T13305] security_file_ioctl+0x9b/0x240 [ 589.203841][T13305] __x64_sys_ioctl+0xb7/0x200 [ 589.203880][T13305] do_syscall_64+0xcd/0x250 [ 589.203926][T13305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.203963][T13305] RIP: 0033:0x7f131c98d169 [ 589.203987][T13305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.204014][T13305] RSP: 002b:00007f131d833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.204042][T13305] RAX: ffffffffffffffda RBX: 00007f131cba6080 RCX: 00007f131c98d169 [ 589.204062][T13305] RDX: ffffffffffffffff RSI: 0000000000005600 RDI: 0000000000000004 [ 589.204079][T13305] RBP: 00007f131d833090 R08: 0000000000000000 R09: 0000000000000000 [ 589.204096][T13305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.204113][T13305] R13: 0000000000000000 R14: 00007f131cba6080 R15: 00007ffec74ad288 [ 589.204151][T13305] [ 589.437028][T13305] ERROR: Out of memory at tomoyo_realpath_from_path. [ 589.716418][T13313] FAULT_INJECTION: forcing a failure. [ 589.716418][T13313] name failslab, interval 1, probability 0, space 0, times 0 [ 589.751524][T13313] CPU: 0 UID: 0 PID: 13313 Comm: syz.1.1803 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 589.751570][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 589.751588][T13313] Call Trace: [ 589.751597][T13313] [ 589.751609][T13313] dump_stack_lvl+0x16c/0x1f0 [ 589.751661][T13313] should_fail_ex+0x50a/0x650 [ 589.751691][T13313] ? fs_reclaim_acquire+0xae/0x150 [ 589.751733][T13313] ? constrain_params_by_rules+0x176/0xca0 [ 589.751772][T13313] should_failslab+0xc2/0x120 [ 589.751802][T13313] __kmalloc_noprof+0xcb/0x510 [ 589.751845][T13313] ? kasan_quarantine_put+0x10a/0x240 [ 589.751886][T13313] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.751935][T13313] constrain_params_by_rules+0x176/0xca0 [ 589.751976][T13313] ? constrain_params_by_rules+0xa0e/0xca0 [ 589.752024][T13313] ? constrain_params_by_rules+0xa13/0xca0 [ 589.752070][T13313] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 589.752127][T13313] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 589.752165][T13313] ? lock_acquire.part.0+0x11b/0x380 [ 589.752230][T13313] snd_pcm_hw_refine+0x7e8/0xad0 [ 589.752278][T13313] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 589.752327][T13313] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 589.752372][T13313] ? __pfx_lock_release+0x10/0x10 [ 589.752411][T13313] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 589.752462][T13313] snd_pcm_hw_param_first+0x328/0x6e0 [ 589.752501][T13313] ? trace_hw_mask_param+0x19e/0x210 [ 589.752541][T13313] snd_pcm_hw_params+0x5b2/0x1b20 [ 589.752594][T13313] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 589.752640][T13313] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 589.752687][T13313] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 589.752735][T13313] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 589.752782][T13313] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 589.752842][T13313] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 589.752880][T13313] ? do_vfs_ioctl+0x513/0x1990 [ 589.752916][T13313] ? __pfx___mutex_lock+0x10/0x10 [ 589.752989][T13313] snd_pcm_oss_ioctl+0x2623/0x3780 [ 589.753035][T13313] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 589.753080][T13313] ? __fget_files+0x206/0x3a0 [ 589.753129][T13313] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 589.753171][T13313] __x64_sys_ioctl+0x190/0x200 [ 589.753210][T13313] do_syscall_64+0xcd/0x250 [ 589.753259][T13313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.753301][T13313] RIP: 0033:0x7f045cd8d169 [ 589.753325][T13313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.753353][T13313] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.753381][T13313] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 589.753401][T13313] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 589.753427][T13313] RBP: 00007f045ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 589.753445][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.753463][T13313] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 589.753503][T13313] [ 592.556258][T13350] FAULT_INJECTION: forcing a failure. [ 592.556258][T13350] name failslab, interval 1, probability 0, space 0, times 0 [ 592.569099][T13350] CPU: 0 UID: 0 PID: 13350 Comm: syz.2.1815 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 592.569137][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 592.569153][T13350] Call Trace: [ 592.569161][T13350] [ 592.569172][T13350] dump_stack_lvl+0x16c/0x1f0 [ 592.569225][T13350] should_fail_ex+0x50a/0x650 [ 592.569251][T13350] ? fs_reclaim_acquire+0xae/0x150 [ 592.569290][T13350] ? constrain_params_by_rules+0x176/0xca0 [ 592.569323][T13350] should_failslab+0xc2/0x120 [ 592.569351][T13350] __kmalloc_noprof+0xcb/0x510 [ 592.569386][T13350] ? kasan_quarantine_put+0x10a/0x240 [ 592.569424][T13350] ? constrain_params_by_rules+0xa0e/0xca0 [ 592.569464][T13350] constrain_params_by_rules+0x176/0xca0 [ 592.569515][T13350] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 592.569559][T13350] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 592.569594][T13350] ? lock_acquire.part.0+0x11b/0x380 [ 592.569648][T13350] ? snd_interval_refine+0x2fa/0x580 [ 592.569682][T13350] snd_pcm_hw_refine+0x7e8/0xad0 [ 592.569724][T13350] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 592.569771][T13350] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 592.569814][T13350] ? __pfx_lock_release+0x10/0x10 [ 592.569851][T13350] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 592.569892][T13350] snd_pcm_hw_param_first+0x328/0x6e0 [ 592.569935][T13350] snd_pcm_hw_params+0x5b2/0x1b20 [ 592.569986][T13350] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 592.570028][T13350] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 592.570071][T13350] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 592.570114][T13350] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 592.570160][T13350] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 592.570225][T13350] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 592.570260][T13350] ? do_vfs_ioctl+0x513/0x1990 [ 592.570294][T13350] ? __pfx___mutex_lock+0x10/0x10 [ 592.570364][T13350] snd_pcm_oss_ioctl+0x2623/0x3780 [ 592.570405][T13350] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 592.570448][T13350] ? __fget_files+0x206/0x3a0 [ 592.570492][T13350] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 592.570531][T13350] __x64_sys_ioctl+0x190/0x200 [ 592.570569][T13350] do_syscall_64+0xcd/0x250 [ 592.570614][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.570651][T13350] RIP: 0033:0x7f131c98d169 [ 592.570674][T13350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.570698][T13350] RSP: 002b:00007f131d854038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.570726][T13350] RAX: ffffffffffffffda RBX: 00007f131cba5fa0 RCX: 00007f131c98d169 [ 592.570745][T13350] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 592.570763][T13350] RBP: 00007f131ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 592.570779][T13350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.570795][T13350] R13: 0000000000000000 R14: 00007f131cba5fa0 R15: 00007ffec74ad288 [ 592.570830][T13350] [ 593.444894][T13351] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[13351] [ 593.706529][T13353] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 593.713370][T13353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 593.734273][T13353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 593.740718][T13353] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 594.727567][T13374] FAULT_INJECTION: forcing a failure. [ 594.727567][T13374] name failslab, interval 1, probability 0, space 0, times 0 [ 594.875255][T13374] CPU: 0 UID: 0 PID: 13374 Comm: syz.1.1818 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 594.875298][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 594.875314][T13374] Call Trace: [ 594.875323][T13374] [ 594.875334][T13374] dump_stack_lvl+0x16c/0x1f0 [ 594.875382][T13374] should_fail_ex+0x50a/0x650 [ 594.875409][T13374] ? fs_reclaim_acquire+0xae/0x150 [ 594.875448][T13374] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 594.875482][T13374] should_failslab+0xc2/0x120 [ 594.875510][T13374] __kmalloc_noprof+0xcb/0x510 [ 594.875550][T13374] ? kasan_quarantine_put+0x10a/0x240 [ 594.875591][T13374] ? lockdep_hardirqs_on+0x7c/0x110 [ 594.875637][T13374] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 594.875679][T13374] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 594.875714][T13374] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 594.875746][T13374] ? genl_get_cmd+0x195/0x580 [ 594.875788][T13374] ? __radix_tree_lookup+0x21f/0x2c0 [ 594.875835][T13374] genl_rcv_msg+0x565/0x800 [ 594.875869][T13374] ? __pfx_genl_rcv_msg+0x10/0x10 [ 594.875901][T13374] ? __pfx_ethnl_phy_doit+0x10/0x10 [ 594.875951][T13374] netlink_rcv_skb+0x16b/0x440 [ 594.875995][T13374] ? __pfx_genl_rcv_msg+0x10/0x10 [ 594.876027][T13374] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.876088][T13374] ? down_read+0xc9/0x330 [ 594.876113][T13374] ? __pfx_down_read+0x10/0x10 [ 594.876153][T13374] ? netlink_deliver_tap+0x1ae/0xd30 [ 594.876202][T13374] genl_rcv+0x28/0x40 [ 594.876227][T13374] netlink_unicast+0x53c/0x7f0 [ 594.876275][T13374] ? __pfx_netlink_unicast+0x10/0x10 [ 594.876318][T13374] ? __phys_addr_symbol+0x30/0x80 [ 594.876348][T13374] ? __check_object_size+0x488/0x710 [ 594.876382][T13374] netlink_sendmsg+0x8b8/0xd70 [ 594.876432][T13374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.876492][T13374] ____sys_sendmsg+0xaaf/0xc90 [ 594.876529][T13374] ? copy_msghdr_from_user+0x10b/0x160 [ 594.876558][T13374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.876614][T13374] ___sys_sendmsg+0x135/0x1e0 [ 594.876646][T13374] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.876691][T13374] ? __pfx_lock_release+0x10/0x10 [ 594.876730][T13374] ? trace_lock_acquire+0x14e/0x1f0 [ 594.876778][T13374] ? __fget_files+0x206/0x3a0 [ 594.876831][T13374] __sys_sendmsg+0x16e/0x220 [ 594.876860][T13374] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.876916][T13374] do_syscall_64+0xcd/0x250 [ 594.876962][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.877001][T13374] RIP: 0033:0x7f045cd8d169 [ 594.877024][T13374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.877051][T13374] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.877100][T13374] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 594.877118][T13374] RDX: 00000000000400c0 RSI: 0000400000000140 RDI: 0000000000000003 [ 594.877142][T13374] RBP: 00007f045dbdc090 R08: 0000000000000000 R09: 0000000000000000 [ 594.877159][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.877176][T13374] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 594.877214][T13374] [ 595.555071][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 595.793770][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 595.793868][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 595.800004][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 597.414936][ T31] audit: type=1107 audit(4294967314.510:40): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 598.631564][T13418] HfR: entered promiscuous mode [ 598.660507][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1830'. [ 598.725025][T13418] HfR: left promiscuous mode [ 598.868979][T13410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 598.876170][T13410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 598.895855][T13410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 598.902136][T13410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 598.964041][T13420] FAULT_INJECTION: forcing a failure. [ 598.964041][T13420] name failslab, interval 1, probability 0, space 0, times 0 [ 599.107894][T13420] CPU: 0 UID: 0 PID: 13420 Comm: syz.3.1830 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 599.107933][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 599.107949][T13420] Call Trace: [ 599.107958][T13420] [ 599.107968][T13420] dump_stack_lvl+0x16c/0x1f0 [ 599.108014][T13420] should_fail_ex+0x50a/0x650 [ 599.108048][T13420] ? fs_reclaim_acquire+0xae/0x150 [ 599.108085][T13420] ? tbl_mask_cache_alloc+0xa1/0x200 [ 599.108113][T13420] should_failslab+0xc2/0x120 [ 599.108139][T13420] __kmalloc_cache_noprof+0x68/0x410 [ 599.108185][T13420] tbl_mask_cache_alloc+0xa1/0x200 [ 599.108216][T13420] ovs_flow_tbl_init+0x24/0x600 [ 599.108246][T13420] ? kasan_save_track+0x14/0x30 [ 599.108287][T13420] ovs_dp_cmd_new+0x252/0xe50 [ 599.108327][T13420] ? rcu_is_watching+0x12/0xc0 [ 599.108357][T13420] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 599.108399][T13420] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 599.108434][T13420] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 599.108475][T13420] genl_family_rcv_msg_doit+0x202/0x2f0 [ 599.108510][T13420] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 599.108539][T13420] ? trace_cap_capable+0x1a2/0x210 [ 599.108579][T13420] ? bpf_lsm_capable+0x9/0x10 [ 599.108607][T13420] ? security_capable+0x7e/0x260 [ 599.108638][T13420] ? ns_capable+0xd7/0x110 [ 599.108680][T13420] genl_rcv_msg+0x565/0x800 [ 599.108715][T13420] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.108746][T13420] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 599.108795][T13420] netlink_rcv_skb+0x16b/0x440 [ 599.108838][T13420] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.108870][T13420] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.108930][T13420] ? down_read+0xc9/0x330 [ 599.108958][T13420] ? __pfx_down_read+0x10/0x10 [ 599.108984][T13420] ? netlink_deliver_tap+0x1ae/0xd30 [ 599.109040][T13420] genl_rcv+0x28/0x40 [ 599.109065][T13420] netlink_unicast+0x53c/0x7f0 [ 599.109113][T13420] ? __pfx_netlink_unicast+0x10/0x10 [ 599.109158][T13420] ? __phys_addr_symbol+0x30/0x80 [ 599.109187][T13420] ? __check_object_size+0x488/0x710 [ 599.109222][T13420] netlink_sendmsg+0x8b8/0xd70 [ 599.109272][T13420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.109327][T13420] ____sys_sendmsg+0xaaf/0xc90 [ 599.109366][T13420] ? copy_msghdr_from_user+0x10b/0x160 [ 599.109395][T13420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.109451][T13420] ___sys_sendmsg+0x135/0x1e0 [ 599.109481][T13420] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.109526][T13420] ? __pfx_lock_release+0x10/0x10 [ 599.109566][T13420] ? trace_lock_acquire+0x14e/0x1f0 [ 599.109614][T13420] ? __fget_files+0x206/0x3a0 [ 599.109665][T13420] __sys_sendmsg+0x16e/0x220 [ 599.109695][T13420] ? __pfx___sys_sendmsg+0x10/0x10 [ 599.109751][T13420] do_syscall_64+0xcd/0x250 [ 599.109796][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.109835][T13420] RIP: 0033:0x7f7981d8d169 [ 599.109859][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.109886][T13420] RSP: 002b:00007f7982c59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.109914][T13420] RAX: ffffffffffffffda RBX: 00007f7981fa6080 RCX: 00007f7981d8d169 [ 599.109933][T13420] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000007 [ 599.109951][T13420] RBP: 00007f7982c59090 R08: 0000000000000000 R09: 0000000000000000 [ 599.109969][T13420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.109985][T13420] R13: 0000000000000000 R14: 00007f7981fa6080 R15: 00007fff15cf1b38 [ 599.110032][T13420] [ 600.046235][T13429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 600.084000][ T31] audit: type=1107 audit(4294967297.530:41): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 600.096577][T13429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 600.102688][T13429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 600.114155][T13429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.113997][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 602.120177][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 602.126450][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 602.199373][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 603.479784][T13471] FAULT_INJECTION: forcing a failure. [ 603.479784][T13471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.518870][T13471] CPU: 1 UID: 0 PID: 13471 Comm: syz.2.1843 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 603.518911][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 603.518927][T13471] Call Trace: [ 603.518935][T13471] [ 603.518946][T13471] dump_stack_lvl+0x16c/0x1f0 [ 603.518994][T13471] should_fail_ex+0x50a/0x650 [ 603.519027][T13471] _copy_to_user+0x32/0xd0 [ 603.519058][T13471] simple_read_from_buffer+0xd0/0x160 [ 603.519096][T13471] proc_fail_nth_read+0x198/0x270 [ 603.519130][T13471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.519167][T13471] ? rw_verify_area+0xcf/0x680 [ 603.519199][T13471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.519232][T13471] vfs_read+0x1df/0xbf0 [ 603.519277][T13471] ? __fget_files+0x1fc/0x3a0 [ 603.519316][T13471] ? __pfx___mutex_lock+0x10/0x10 [ 603.519356][T13471] ? __pfx_vfs_read+0x10/0x10 [ 603.519404][T13471] ? __fget_files+0x206/0x3a0 [ 603.519455][T13471] ksys_read+0x12b/0x250 [ 603.519491][T13471] ? __pfx_ksys_read+0x10/0x10 [ 603.519537][T13471] do_syscall_64+0xcd/0x250 [ 603.519578][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.519614][T13471] RIP: 0033:0x7f131c98bb7c [ 603.519636][T13471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 603.519660][T13471] RSP: 002b:00007f131d854030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.519688][T13471] RAX: ffffffffffffffda RBX: 00007f131cba5fa0 RCX: 00007f131c98bb7c [ 603.519707][T13471] RDX: 000000000000000f RSI: 00007f131d8540a0 RDI: 0000000000000004 [ 603.519724][T13471] RBP: 00007f131d854090 R08: 0000000000000000 R09: 0000000000000000 [ 603.519741][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.519757][T13471] R13: 0000000000000000 R14: 00007f131cba5fa0 R15: 00007ffec74ad288 [ 603.519793][T13471] [ 603.758318][T13471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.115326][T13469] zswap: compressor not available [ 604.131083][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 604.179997][T13461] Invalid ELF header magic: != ELF [ 604.520353][ T31] audit: type=1107 audit(4294967301.970:42): pid=13493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 608.324101][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 608.369227][ T31] audit: type=1107 audit(4294967305.820:43): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 611.635140][T13582] [U] [ 611.637944][T13582] [U] [ 611.640691][T13582] [U] [ 611.643447][T13582] [U] [ 611.943494][T13582] [U] [ 611.946299][T13582] [U] [ 611.949047][T13582] [U] [ 611.951794][T13582] [U] [ 612.272451][T13582] [U] [ 612.275259][T13582] [U] [ 612.278011][T13582] [U] [ 612.280755][T13582] [U] [ 612.284014][T13582] [U] [ 612.286767][T13582] [U] [ 612.289507][T13582] [U] [ 612.292256][T13582] [U] [ 612.295875][T13582] [U] [ 612.298644][T13582] [U] [ 612.301394][T13582] [U] [ 612.304139][T13582] [U] [ 612.307297][T13582] [U] [ 612.310053][T13582] [U] [ 612.312803][T13582] [U] [ 612.315538][T13582] [U] [ 612.318717][T13582] [U] [ 612.321463][T13582] [U] [ 612.324186][T13582] [U] [ 612.326914][T13582] [U] [ 612.330086][T13582] [U] [ 612.332836][T13582] [U] [ 612.335577][T13582] [U] [ 612.338298][T13582] [U] [ 612.341534][T13582] [U] [ 612.344281][T13582] [U] [ 612.347024][T13582] [U] [ 612.349774][T13582] [U] [ 612.352926][T13582] [U] [ 612.355684][T13582] [U] [ 612.358437][T13582] [U] [ 612.361184][T13582] [U] [ 612.364551][T13582] [U] [ 612.367301][T13582] [U] [ 612.370018][T13582] [U] [ 612.372731][T13582] [U] [ 612.376090][T13582] [U] [ 612.378830][T13582] [U] [ 612.381548][T13582] [U] [ 612.384268][T13582] [U] [ 612.387531][T13582] [U] [ 612.390284][T13582] [U] [ 612.393032][T13582] [U] [ 612.395890][T13582] [U] [ 612.399448][T13582] [U] [ 612.402212][T13582] [U] [ 612.404963][T13582] [U] [ 612.407707][T13582] [U] [ 612.410857][T13582] [U] [ 612.413633][T13582] [U] [ 612.416385][T13582] [U] [ 612.419128][T13582] [U] [ 612.425168][T13582] [U] [ 612.427949][T13582] [U] [ 612.430696][T13582] [U] [ 612.433424][T13582] [U] [ 612.436984][T13582] [U] [ 612.439733][T13582] [U] [ 612.442472][T13582] [U] [ 612.445216][T13582] [U] [ 612.448306][T13582] [U] [ 612.451061][T13582] [U] [ 612.453817][T13582] [U] [ 612.456575][T13582] [U] [ 612.493702][T13582] [U] [ 612.496503][T13582] [U] [ 612.499260][T13582] [U] [ 612.502020][T13582] [U] [ 612.526080][T13582] [U] [ 612.528874][T13582] [U] [ 612.531616][T13582] [U] [ 612.534358][T13582] [U] [ 612.559213][T13582] [U] [ 612.561996][T13582] [U] [ 612.564744][T13582] [U] [ 612.567488][T13582] [U] [ 612.611166][T13582] [U] [ 612.613961][T13582] [U] [ 612.616714][T13582] [U] [ 612.619464][T13582] [U] [ 612.651991][T13582] [U] [ 612.654781][T13582] [U] [ 612.657530][T13582] [U] [ 612.660274][T13582] [U] [ 612.664549][T13582] [U] [ 612.667297][T13582] [U] [ 612.670013][T13582] [U] [ 612.672724][T13582] [U] [ 612.684014][T13582] [U] [ 612.686801][T13582] [U] [ 612.689556][T13582] [U] [ 612.692305][T13582] [U] [ 612.695790][T13582] [U] [ 612.698541][T13582] [U] [ 612.701257][T13582] [U] [ 612.703989][T13582] [U] [ 612.717787][T13582] [U] [ 612.720575][T13582] [U] [ 612.723328][T13582] [U] [ 612.726071][T13582] [U] [ 612.739605][T13582] [U] [ 612.742395][T13582] [U] [ 612.745153][T13582] [U] [ 612.747907][T13582] [U] [ 612.761149][T13582] [U] [ 612.765325][T13582] [U] [ 612.768080][T13582] [U] [ 612.770826][T13582] [U] [ 612.781325][T13582] [U] [ 612.784118][T13582] [U] [ 612.786866][T13582] [U] [ 612.789612][T13582] [U] [ 612.983336][T13591] FAULT_INJECTION: forcing a failure. [ 612.983336][T13591] name failslab, interval 1, probability 0, space 0, times 0 [ 613.009767][T13591] CPU: 1 UID: 0 PID: 13591 Comm: syz.0.1872 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 613.009811][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 613.009828][T13591] Call Trace: [ 613.009837][T13591] [ 613.009848][T13591] dump_stack_lvl+0x16c/0x1f0 [ 613.009898][T13591] should_fail_ex+0x50a/0x650 [ 613.009934][T13591] ? fs_reclaim_acquire+0xae/0x150 [ 613.009976][T13591] should_failslab+0xc2/0x120 [ 613.010004][T13591] __kmalloc_node_noprof+0xd1/0x510 [ 613.010050][T13591] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 613.010097][T13591] __kvmalloc_node_noprof+0xad/0x1a0 [ 613.010139][T13591] seq_read_iter+0x82a/0x12b0 [ 613.010192][T13591] seq_read+0x39f/0x4e0 [ 613.010231][T13591] ? __pfx_seq_read+0x10/0x10 [ 613.010291][T13591] ? rw_verify_area+0xcf/0x680 [ 613.010327][T13591] ? __pfx_seq_read+0x10/0x10 [ 613.010364][T13591] vfs_read+0x1df/0xbf0 [ 613.010404][T13591] ? __fget_files+0x1fc/0x3a0 [ 613.010445][T13591] ? __pfx___mutex_lock+0x10/0x10 [ 613.010487][T13591] ? __pfx_vfs_read+0x10/0x10 [ 613.010538][T13591] ? __fget_files+0x206/0x3a0 [ 613.010591][T13591] ksys_read+0x12b/0x250 [ 613.010629][T13591] ? __pfx_ksys_read+0x10/0x10 [ 613.010681][T13591] do_syscall_64+0xcd/0x250 [ 613.010726][T13591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.010766][T13591] RIP: 0033:0x7f114e18d169 [ 613.010790][T13591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.010816][T13591] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 613.010845][T13591] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 613.010864][T13591] RDX: 0000000000000084 RSI: 0000400000000040 RDI: 0000000000000003 [ 613.010881][T13591] RBP: 00007f114f0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 613.010897][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.010922][T13591] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 613.010961][T13591] [ 613.287661][T13582] [U] [ 613.684367][ T31] audit: type=1107 audit(4294967311.110:44): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 613.831403][T13606] nbd: must specify an index to disconnect [ 615.025160][T13616] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 615.055055][T13616] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 615.062415][T13616] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 615.078373][T13616] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 616.124542][T13625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 616.148347][T13625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 616.159258][T13639] FAULT_INJECTION: forcing a failure. [ 616.159258][T13639] name failslab, interval 1, probability 0, space 0, times 0 [ 616.165090][T13625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 616.192904][T13639] CPU: 1 UID: 0 PID: 13639 Comm: syz.2.1884 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 616.192950][T13639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 616.192966][T13639] Call Trace: [ 616.192975][T13639] [ 616.192986][T13639] dump_stack_lvl+0x16c/0x1f0 [ 616.193031][T13639] should_fail_ex+0x50a/0x650 [ 616.193059][T13639] ? fs_reclaim_acquire+0xae/0x150 [ 616.193096][T13639] ? constrain_params_by_rules+0x176/0xca0 [ 616.193132][T13639] should_failslab+0xc2/0x120 [ 616.193160][T13639] __kmalloc_noprof+0xcb/0x510 [ 616.193199][T13639] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 616.193239][T13639] constrain_params_by_rules+0x176/0xca0 [ 616.193275][T13639] ? arch_stack_walk+0xa7/0x100 [ 616.193314][T13639] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 616.193349][T13639] ? stack_trace_save+0x95/0xd0 [ 616.193376][T13639] ? __pfx_stack_trace_save+0x10/0x10 [ 616.193420][T13639] ? snd_pcm_oss_change_params_locked+0x9ad/0x3a60 [ 616.193453][T13639] ? snd_pcm_oss_ioctl+0x2623/0x3780 [ 616.193484][T13639] ? __x64_sys_ioctl+0x190/0x200 [ 616.193514][T13639] ? do_syscall_64+0xcd/0x250 [ 616.193549][T13639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.193587][T13639] ? snd_interval_refine+0x2fa/0x580 [ 616.193618][T13639] snd_pcm_hw_refine+0x7e8/0xad0 [ 616.193660][T13639] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 616.193720][T13639] snd_pcm_hw_param_first+0x328/0x6e0 [ 616.193762][T13639] snd_pcm_hw_param_near.constprop.0+0x711/0x8f0 [ 616.193803][T13639] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 616.193853][T13639] ? kfree+0x2c4/0x4d0 [ 616.193888][T13639] ? snd_pcm_oss_change_params_locked+0x93b/0x3a60 [ 616.193933][T13639] snd_pcm_oss_change_params_locked+0x9ad/0x3a60 [ 616.193991][T13639] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 616.194030][T13639] ? do_vfs_ioctl+0x513/0x1990 [ 616.194064][T13639] ? __pfx___mutex_lock+0x10/0x10 [ 616.194136][T13639] snd_pcm_oss_ioctl+0x2623/0x3780 [ 616.194183][T13639] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 616.194228][T13639] ? __fget_files+0x206/0x3a0 [ 616.194275][T13639] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 616.194317][T13639] __x64_sys_ioctl+0x190/0x200 [ 616.194357][T13639] do_syscall_64+0xcd/0x250 [ 616.194404][T13639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.194445][T13639] RIP: 0033:0x7f131c98d169 [ 616.194469][T13639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.194498][T13639] RSP: 002b:00007f131d854038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.194526][T13639] RAX: ffffffffffffffda RBX: 00007f131cba5fa0 RCX: 00007f131c98d169 [ 616.194545][T13639] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 616.194564][T13639] RBP: 00007f131ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 616.194581][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.194598][T13639] R13: 0000000000000000 R14: 00007f131cba5fa0 R15: 00007ffec74ad288 [ 616.194636][T13639] [ 616.324077][T13625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 616.751978][T13643] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 617.559402][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 618.193837][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 618.193850][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 618.354190][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 619.444085][T13670] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[13670] [ 620.505034][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 622.403921][T13705] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[13705] [ 625.775232][T13758] FAULT_INJECTION: forcing a failure. [ 625.775232][T13758] name failslab, interval 1, probability 0, space 0, times 0 [ 625.800771][T13758] CPU: 1 UID: 0 PID: 13758 Comm: syz.3.1914 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 625.800812][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 625.800827][T13758] Call Trace: [ 625.800836][T13758] [ 625.800846][T13758] dump_stack_lvl+0x16c/0x1f0 [ 625.800890][T13758] should_fail_ex+0x50a/0x650 [ 625.800915][T13758] ? fs_reclaim_acquire+0xae/0x150 [ 625.800949][T13758] should_failslab+0xc2/0x120 [ 625.800975][T13758] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 625.801015][T13758] ? security_file_alloc+0x34/0x2b0 [ 625.801054][T13758] security_file_alloc+0x34/0x2b0 [ 625.801089][T13758] init_file+0x93/0x4c0 [ 625.801116][T13758] alloc_empty_file+0x91/0x1e0 [ 625.801144][T13758] path_openat+0xe1/0x2d80 [ 625.801179][T13758] ? __pfx_mark_lock+0x10/0x10 [ 625.801225][T13758] ? __pfx_path_openat+0x10/0x10 [ 625.801259][T13758] ? stack_trace_save+0x95/0xd0 [ 625.801288][T13758] ? __pfx_stack_trace_save+0x10/0x10 [ 625.801323][T13758] do_filp_open+0x20c/0x470 [ 625.801361][T13758] ? __pfx_do_filp_open+0x10/0x10 [ 625.801427][T13758] ? __virt_addr_valid+0x2b4/0x590 [ 625.801454][T13758] ? __pfx_lock_release+0x10/0x10 [ 625.801494][T13758] do_open_execat+0xfa/0x450 [ 625.801527][T13758] ? __pfx_do_open_execat+0x10/0x10 [ 625.801563][T13758] ? __virt_addr_valid+0x5e/0x590 [ 625.801589][T13758] ? __phys_addr_symbol+0x30/0x80 [ 625.801614][T13758] ? __check_object_size+0x488/0x710 [ 625.801643][T13758] alloc_bprm+0x2d/0xdd0 [ 625.801686][T13758] ? strncpy_from_user+0x1fc/0x2d0 [ 625.801727][T13758] do_execveat_common.isra.0+0x1cd/0x610 [ 625.801770][T13758] __x64_sys_execveat+0xda/0x120 [ 625.801808][T13758] do_syscall_64+0xcd/0x250 [ 625.801849][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.801884][T13758] RIP: 0033:0x7f7981d8d169 [ 625.801906][T13758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.801930][T13758] RSP: 002b:00007f7982c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 625.801956][T13758] RAX: ffffffffffffffda RBX: 00007f7981fa5fa0 RCX: 00007f7981d8d169 [ 625.801974][T13758] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 625.801990][T13758] RBP: 00007f7982c7a090 R08: 0000000000011000 R09: 0000000000000000 [ 625.802007][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.802022][T13758] R13: 0000000000000000 R14: 00007f7981fa5fa0 R15: 00007fff15cf1b38 [ 625.802056][T13758] [ 625.850328][T13759] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1913'. [ 627.218655][T13778] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 627.261397][T13778] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 627.268390][T13778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 627.292321][T13778] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 627.604448][T13791] FAULT_INJECTION: forcing a failure. [ 627.604448][T13791] name failslab, interval 1, probability 0, space 0, times 0 [ 627.653734][T13791] CPU: 1 UID: 0 PID: 13791 Comm: syz.1.1922 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 627.653777][T13791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 627.653795][T13791] Call Trace: [ 627.653804][T13791] [ 627.653815][T13791] dump_stack_lvl+0x16c/0x1f0 [ 627.653866][T13791] should_fail_ex+0x50a/0x650 [ 627.653892][T13791] ? fs_reclaim_acquire+0xae/0x150 [ 627.653933][T13791] should_failslab+0xc2/0x120 [ 627.653962][T13791] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 627.654008][T13791] ? getname_flags.part.0+0x4c/0x550 [ 627.654047][T13791] getname_flags.part.0+0x4c/0x550 [ 627.654087][T13791] getname+0x8d/0xe0 [ 627.654127][T13791] do_sys_openat2+0x104/0x1e0 [ 627.654159][T13791] ? __pfx_do_sys_openat2+0x10/0x10 [ 627.654190][T13791] ? snd_pcm_oss_ioctl+0x2be/0x3780 [ 627.654243][T13791] __x64_sys_open+0x154/0x1e0 [ 627.654275][T13791] ? __pfx___x64_sys_open+0x10/0x10 [ 627.654322][T13791] do_syscall_64+0xcd/0x250 [ 627.654369][T13791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.654411][T13791] RIP: 0033:0x7f045cd8d169 [ 627.654433][T13791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.654460][T13791] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 627.654495][T13791] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 627.654515][T13791] RDX: 0000000000000100 RSI: 0000000000000380 RDI: 0000400000001bc0 [ 627.654533][T13791] RBP: 00007f045ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 627.654551][T13791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.654569][T13791] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 627.654609][T13791] [ 629.233923][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 629.319729][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 629.319744][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 629.332022][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 629.967277][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.973770][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.049897][T13823] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[13823] [ 632.684122][T13840] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[13840] [ 633.584487][T13861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 633.646118][T13861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 633.696465][T13861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 633.748485][T13861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.903002][T13869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 634.940918][T13869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 634.989260][T13869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.033969][T13869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 635.035141][T13883] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1942'. [ 635.099634][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'. [ 636.359504][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 637.002439][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 637.089928][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 637.096619][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 637.790648][T13914] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 637.830802][T13914] netlink: 306 bytes leftover after parsing attributes in process `syz.3.1948'. [ 639.544224][T13928] Invalid ELF header magic: != ELF [ 639.749383][T13930] netlink: zone id is out of range [ 639.775856][T13930] netlink: zone id is out of range [ 639.785645][T13930] netlink: zone id is out of range [ 639.808211][T13930] netlink: zone id is out of range [ 639.834050][T13930] netlink: zone id is out of range [ 639.841120][T13930] netlink: zone id is out of range [ 639.894601][T13930] netlink: zone id is out of range [ 639.899799][T13930] netlink: zone id is out of range [ 639.943841][T13930] netlink: zone id is out of range [ 639.963100][T13930] netlink: zone id is out of range [ 644.541459][T13998] random: crng reseeded on system resumption [ 645.133489][T14010] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 646.881947][T14018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 646.905364][T14018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 646.930393][T14018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 646.936622][T14018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.276161][T14037] tipc: Started in network mode [ 647.281117][T14037] tipc: Node identity ee00, cluster identity 4711 [ 647.425691][T14037] tipc: Node number set to 60928 [ 648.273813][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 648.915964][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 648.993834][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 648.993955][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 649.781005][T14065] netlink: 'syz.2.1986': attribute type 13 has an invalid length. [ 650.146805][T14069] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 650.152967][T14069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 650.214206][T14069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 650.220330][T14069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 650.673181][ T31] audit: type=1800 audit(4294967321.560:45): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1992" name="dbroot" dev="configfs" ino=46359 res=0 errno=0 [ 652.195328][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 652.201533][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 652.273847][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 652.280024][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 652.443928][T14098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 652.450075][T14098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 652.533714][T14098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 652.544157][T14098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 652.567143][ T55] Bluetooth: hci2: Malformed LE Event: 0x02 [ 652.762485][T14103] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[14103] [ 652.907114][T14111] FAULT_INJECTION: forcing a failure. [ 652.907114][T14111] name failslab, interval 1, probability 0, space 0, times 0 [ 652.921015][T14111] CPU: 0 UID: 0 PID: 14111 Comm: syz.0.1998 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 652.921068][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 652.921086][T14111] Call Trace: [ 652.921095][T14111] [ 652.921107][T14111] dump_stack_lvl+0x16c/0x1f0 [ 652.921159][T14111] should_fail_ex+0x50a/0x650 [ 652.921188][T14111] ? fs_reclaim_acquire+0xae/0x150 [ 652.921239][T14111] ? snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 652.921278][T14111] should_failslab+0xc2/0x120 [ 652.921308][T14111] __kmalloc_cache_noprof+0x68/0x410 [ 652.921350][T14111] ? snd_pcm_hw_param_first+0x301/0x6e0 [ 652.921387][T14111] ? snd_pcm_hw_param_near.constprop.0+0x73e/0x8f0 [ 652.921427][T14111] ? snd_pcm_format_linear+0x8b/0xc0 [ 652.921469][T14111] snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 652.921521][T14111] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 652.921564][T14111] ? calc_src_frames.isra.0+0x187/0x1d0 [ 652.921603][T14111] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 652.921653][T14111] snd_pcm_oss_change_params_locked+0x136c/0x3a60 [ 652.921711][T14111] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 652.921749][T14111] ? do_vfs_ioctl+0x513/0x1990 [ 652.921786][T14111] ? __pfx___mutex_lock+0x10/0x10 [ 652.921853][T14111] snd_pcm_oss_ioctl+0x2623/0x3780 [ 652.921909][T14111] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 652.921955][T14111] ? __fget_files+0x206/0x3a0 [ 652.922013][T14111] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 652.922056][T14111] __x64_sys_ioctl+0x190/0x200 [ 652.922095][T14111] do_syscall_64+0xcd/0x250 [ 652.922146][T14111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.922189][T14111] RIP: 0033:0x7f114e18d169 [ 652.922222][T14111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.922252][T14111] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.922283][T14111] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 652.922302][T14111] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 652.922320][T14111] RBP: 00007f114e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 652.922345][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.922363][T14111] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 652.922401][T14111] [ 653.158390][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.513886][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 654.514128][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 654.594195][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 654.594216][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 655.328919][T14140] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 655.666350][T14143] FAULT_INJECTION: forcing a failure. [ 655.666350][T14143] name failslab, interval 1, probability 0, space 0, times 0 [ 655.744383][T14143] CPU: 0 UID: 0 PID: 14143 Comm: syz.0.2008 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 655.744427][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 655.744444][T14143] Call Trace: [ 655.744453][T14143] [ 655.744465][T14143] dump_stack_lvl+0x16c/0x1f0 [ 655.744515][T14143] should_fail_ex+0x50a/0x650 [ 655.744543][T14143] ? fs_reclaim_acquire+0xae/0x150 [ 655.744584][T14143] ? snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 655.744622][T14143] should_failslab+0xc2/0x120 [ 655.744650][T14143] __kmalloc_cache_noprof+0x68/0x410 [ 655.744692][T14143] ? snd_pcm_hw_param_first+0x301/0x6e0 [ 655.744729][T14143] ? snd_pcm_hw_param_near.constprop.0+0x73e/0x8f0 [ 655.744776][T14143] snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 655.744822][T14143] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 655.744870][T14143] ? calc_src_frames.isra.0+0x187/0x1d0 [ 655.744906][T14143] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 655.744956][T14143] snd_pcm_oss_change_params_locked+0x13cd/0x3a60 [ 655.745013][T14143] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 655.745051][T14143] ? do_vfs_ioctl+0x513/0x1990 [ 655.745088][T14143] ? __pfx___mutex_lock+0x10/0x10 [ 655.745160][T14143] snd_pcm_oss_ioctl+0x2623/0x3780 [ 655.745215][T14143] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 655.745260][T14143] ? __fget_files+0x206/0x3a0 [ 655.745309][T14143] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 655.745351][T14143] __x64_sys_ioctl+0x190/0x200 [ 655.745391][T14143] do_syscall_64+0xcd/0x250 [ 655.745439][T14143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.745478][T14143] RIP: 0033:0x7f114e18d169 [ 655.745502][T14143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.745530][T14143] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.745558][T14143] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 655.745578][T14143] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 655.745596][T14143] RBP: 00007f114e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 655.745615][T14143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.745632][T14143] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 655.745672][T14143] [ 655.983068][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.348406][T14162] program syz.2.2012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 658.068823][T14161] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 658.076246][T14161] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 658.082320][T14161] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 658.090140][T14161] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 659.347358][T14179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 659.354594][T14179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 659.390157][T14179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 659.398980][T14194] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2023'. [ 659.429327][T14179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 660.768532][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 661.267279][T14224] HfR: entered promiscuous mode [ 661.316727][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 661.393857][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 661.397465][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 661.473894][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 661.529156][T14224] HfR: left promiscuous mode [ 661.609488][T14226] HfR: entered promiscuous mode [ 662.047248][T14231] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[14231] [ 662.953457][T14247] FAULT_INJECTION: forcing a failure. [ 662.953457][T14247] name failslab, interval 1, probability 0, space 0, times 0 [ 662.994558][T14247] CPU: 1 UID: 0 PID: 14247 Comm: syz.3.2034 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 662.994600][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 662.994616][T14247] Call Trace: [ 662.994624][T14247] [ 662.994635][T14247] dump_stack_lvl+0x16c/0x1f0 [ 662.994680][T14247] should_fail_ex+0x50a/0x650 [ 662.994707][T14247] ? fs_reclaim_acquire+0xae/0x150 [ 662.994745][T14247] ? lsm_blob_alloc+0x68/0x90 [ 662.994783][T14247] should_failslab+0xc2/0x120 [ 662.994809][T14247] __kmalloc_noprof+0xcb/0x510 [ 662.994857][T14247] lsm_blob_alloc+0x68/0x90 [ 662.994897][T14247] security_sk_alloc+0x30/0x270 [ 662.994930][T14247] sk_prot_alloc+0x1c7/0x2a0 [ 662.994966][T14247] sk_alloc+0x36/0xc20 [ 662.995010][T14247] alg_create+0x9e/0x150 [ 662.995052][T14247] __sock_create+0x335/0x8d0 [ 662.995094][T14247] __sys_socket+0x14f/0x260 [ 662.995129][T14247] ? __pfx___sys_socket+0x10/0x10 [ 662.995164][T14247] ? rcu_is_watching+0x12/0xc0 [ 662.995203][T14247] __x64_sys_socket+0x72/0xb0 [ 662.995236][T14247] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.995276][T14247] do_syscall_64+0xcd/0x250 [ 662.995319][T14247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.995360][T14247] RIP: 0033:0x7f7981d8d169 [ 662.995385][T14247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.995423][T14247] RSP: 002b:00007f7982c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 662.995452][T14247] RAX: ffffffffffffffda RBX: 00007f7981fa5fa0 RCX: 00007f7981d8d169 [ 662.995471][T14247] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 662.995490][T14247] RBP: 00007f7981e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 662.995507][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.995524][T14247] R13: 0000000000000000 R14: 00007f7981fa5fa0 R15: 00007fff15cf1b38 [ 662.995559][T14247] [ 664.333137][T14258] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:8 is already present [ 664.784633][T14265] FAULT_INJECTION: forcing a failure. [ 664.784633][T14265] name failslab, interval 1, probability 0, space 0, times 0 [ 664.890352][T14265] CPU: 1 UID: 0 PID: 14265 Comm: syz.0.2039 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 664.890397][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 664.890414][T14265] Call Trace: [ 664.890422][T14265] [ 664.890433][T14265] dump_stack_lvl+0x16c/0x1f0 [ 664.890482][T14265] should_fail_ex+0x50a/0x650 [ 664.890509][T14265] ? fs_reclaim_acquire+0xae/0x150 [ 664.890549][T14265] should_failslab+0xc2/0x120 [ 664.890577][T14265] __kmalloc_node_noprof+0xd1/0x510 [ 664.890622][T14265] ? __pfx___debug_object_init+0x10/0x10 [ 664.890656][T14265] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 664.890702][T14265] __kvmalloc_node_noprof+0xad/0x1a0 [ 664.890744][T14265] bucket_table_alloc.isra.0+0x86/0x460 [ 664.890794][T14265] rhashtable_init_noprof+0x41a/0x7e0 [ 664.890839][T14265] ? __init_waitqueue_head+0xca/0x150 [ 664.890876][T14265] rhltable_init_noprof+0x20/0x60 [ 664.890906][T14265] sta_info_init+0x27/0x160 [ 664.890948][T14265] ieee80211_alloc_hw_nm+0x840/0x2260 [ 664.890991][T14265] ? __local_bh_enable_ip+0xa4/0x120 [ 664.891039][T14265] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 664.891106][T14265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 664.891155][T14265] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 664.891210][T14265] hwsim_new_radio_nl+0xb42/0x12b0 [ 664.891257][T14265] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 664.891311][T14265] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 664.891346][T14265] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 664.891394][T14265] genl_family_rcv_msg_doit+0x202/0x2f0 [ 664.891429][T14265] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 664.891460][T14265] ? trace_cap_capable+0x1a2/0x210 [ 664.891502][T14265] ? bpf_lsm_capable+0x9/0x10 [ 664.891531][T14265] ? security_capable+0x7e/0x260 [ 664.891562][T14265] ? ns_capable+0xd7/0x110 [ 664.891605][T14265] genl_rcv_msg+0x565/0x800 [ 664.891643][T14265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 664.891674][T14265] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 664.891732][T14265] netlink_rcv_skb+0x16b/0x440 [ 664.891775][T14265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 664.891809][T14265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 664.891871][T14265] ? down_read+0xc9/0x330 [ 664.891898][T14265] ? __pfx_down_read+0x10/0x10 [ 664.891926][T14265] ? netlink_deliver_tap+0x1ae/0xd30 [ 664.891975][T14265] genl_rcv+0x28/0x40 [ 664.892000][T14265] netlink_unicast+0x53c/0x7f0 [ 664.892048][T14265] ? __pfx_netlink_unicast+0x10/0x10 [ 664.892101][T14265] ? __phys_addr_symbol+0x30/0x80 [ 664.892131][T14265] ? __check_object_size+0x488/0x710 [ 664.892167][T14265] netlink_sendmsg+0x8b8/0xd70 [ 664.892217][T14265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.892278][T14265] ____sys_sendmsg+0xaaf/0xc90 [ 664.892314][T14265] ? copy_msghdr_from_user+0x10b/0x160 [ 664.892344][T14265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 664.892401][T14265] ___sys_sendmsg+0x135/0x1e0 [ 664.892432][T14265] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.892479][T14265] ? __pfx_lock_release+0x10/0x10 [ 664.892517][T14265] ? trace_lock_acquire+0x14e/0x1f0 [ 664.892564][T14265] ? __fget_files+0x206/0x3a0 [ 664.892617][T14265] __sys_sendmsg+0x16e/0x220 [ 664.892647][T14265] ? __pfx___sys_sendmsg+0x10/0x10 [ 664.892705][T14265] do_syscall_64+0xcd/0x250 [ 664.892749][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.892788][T14265] RIP: 0033:0x7f114e18d169 [ 664.892811][T14265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.892840][T14265] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.892870][T14265] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 664.892890][T14265] RDX: 0000000004048000 RSI: 0000400000004240 RDI: 0000000000000003 [ 664.892908][T14265] RBP: 00007f114f0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 664.892926][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 664.892941][T14265] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 664.892979][T14265] [ 665.536374][T14268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2040'. [ 665.619954][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.712530][T14268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.729333][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.744917][T14268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.280173][T14279] FAULT_INJECTION: forcing a failure. [ 666.280173][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 666.323847][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.1.2043 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 666.323888][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 666.323905][T14279] Call Trace: [ 666.323913][T14279] [ 666.323924][T14279] dump_stack_lvl+0x16c/0x1f0 [ 666.323972][T14279] should_fail_ex+0x50a/0x650 [ 666.323998][T14279] ? fs_reclaim_acquire+0xae/0x150 [ 666.324038][T14279] should_failslab+0xc2/0x120 [ 666.324066][T14279] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 666.324110][T14279] ? __kernfs_new_node+0xd3/0x890 [ 666.324156][T14279] __kernfs_new_node+0xd3/0x890 [ 666.324199][T14279] ? __pfx___kernfs_new_node+0x10/0x10 [ 666.324238][T14279] ? __pfx_lock_release+0x10/0x10 [ 666.324277][T14279] ? kernfs_add_one+0x39d/0x520 [ 666.324343][T14279] ? up_write+0x1b2/0x520 [ 666.324393][T14279] kernfs_new_node+0x186/0x240 [ 666.324444][T14279] __kernfs_create_file+0x53/0x350 [ 666.324482][T14279] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 666.324531][T14279] internal_create_group+0x56c/0xf10 [ 666.324581][T14279] ? __pfx_internal_create_group+0x10/0x10 [ 666.324629][T14279] ? kernfs_create_link+0x1bd/0x240 [ 666.324668][T14279] internal_create_groups+0x9d/0x150 [ 666.324713][T14279] device_add+0x733/0x1a70 [ 666.324759][T14279] ? __pfx_device_add+0x10/0x10 [ 666.324816][T14279] add_disk_fwnode+0x468/0x1320 [ 666.324863][T14279] zram_add+0x486/0x6b0 [ 666.324904][T14279] ? __pfx_zram_add+0x10/0x10 [ 666.324972][T14279] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 666.325014][T14279] ? rcu_is_watching+0x12/0xc0 [ 666.325052][T14279] ? __pfx_hot_add_show+0x10/0x10 [ 666.325093][T14279] hot_add_show+0x21/0x80 [ 666.325132][T14279] class_attr_show+0x6f/0xa0 [ 666.325172][T14279] ? __pfx_class_attr_show+0x10/0x10 [ 666.325209][T14279] sysfs_kf_seq_show+0x23e/0x410 [ 666.325251][T14279] seq_read_iter+0x4f4/0x12b0 [ 666.325314][T14279] kernfs_fop_read_iter+0x414/0x580 [ 666.325345][T14279] ? rw_verify_area+0xcf/0x680 [ 666.325384][T14279] vfs_read+0x886/0xbf0 [ 666.325438][T14279] ? __pfx_vfs_read+0x10/0x10 [ 666.325505][T14279] ksys_read+0x12b/0x250 [ 666.325542][T14279] ? __pfx_ksys_read+0x10/0x10 [ 666.325595][T14279] do_syscall_64+0xcd/0x250 [ 666.325641][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.325678][T14279] RIP: 0033:0x7f045cd8d169 [ 666.325701][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.325728][T14279] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 666.325756][T14279] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 666.325775][T14279] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000006 [ 666.325794][T14279] RBP: 00007f045dbdc090 R08: 0000000000000000 R09: 0000000000000000 [ 666.325811][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 666.325828][T14279] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 666.325869][T14279] [ 666.340387][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2044'. [ 666.747431][T14282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.898419][T14282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.026685][T14282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.093875][T14282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.439133][T14299] FAULT_INJECTION: forcing a failure. [ 668.439133][T14299] name failslab, interval 1, probability 0, space 0, times 0 [ 668.482886][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.0.2049 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 668.482927][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 668.482945][T14299] Call Trace: [ 668.482953][T14299] [ 668.482964][T14299] dump_stack_lvl+0x16c/0x1f0 [ 668.483011][T14299] should_fail_ex+0x50a/0x650 [ 668.483039][T14299] ? fs_reclaim_acquire+0xae/0x150 [ 668.483077][T14299] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 668.483110][T14299] should_failslab+0xc2/0x120 [ 668.483138][T14299] __kmalloc_noprof+0xcb/0x510 [ 668.483180][T14299] ? __pfx___schedule+0x10/0x10 [ 668.483220][T14299] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 668.483271][T14299] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 668.483304][T14299] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 668.483335][T14299] ? trace_cap_capable+0x1a2/0x210 [ 668.483377][T14299] ? bpf_lsm_capable+0x9/0x10 [ 668.483406][T14299] ? security_capable+0x7e/0x260 [ 668.483437][T14299] ? ns_capable+0xd7/0x110 [ 668.483481][T14299] genl_rcv_msg+0x565/0x800 [ 668.483515][T14299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 668.483547][T14299] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 668.483603][T14299] netlink_rcv_skb+0x16b/0x440 [ 668.483646][T14299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 668.483677][T14299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 668.483738][T14299] ? down_read+0xc9/0x330 [ 668.483762][T14299] ? __pfx_down_read+0x10/0x10 [ 668.483790][T14299] ? rcu_is_watching+0x12/0xc0 [ 668.483829][T14299] genl_rcv+0x28/0x40 [ 668.483854][T14299] netlink_unicast+0x53c/0x7f0 [ 668.483902][T14299] ? __pfx_netlink_unicast+0x10/0x10 [ 668.483947][T14299] ? __phys_addr_symbol+0x30/0x80 [ 668.483975][T14299] ? __check_object_size+0x488/0x710 [ 668.484007][T14299] netlink_sendmsg+0x8b8/0xd70 [ 668.484056][T14299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.484115][T14299] ____sys_sendmsg+0xaaf/0xc90 [ 668.484151][T14299] ? copy_msghdr_from_user+0x10b/0x160 [ 668.484179][T14299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.484240][T14299] ___sys_sendmsg+0x135/0x1e0 [ 668.484270][T14299] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.484311][T14299] ? __pfx_lock_release+0x10/0x10 [ 668.484347][T14299] ? trace_lock_acquire+0x14e/0x1f0 [ 668.484391][T14299] ? __fget_files+0x206/0x3a0 [ 668.484440][T14299] __sys_sendmsg+0x16e/0x220 [ 668.484468][T14299] ? __pfx___sys_sendmsg+0x10/0x10 [ 668.484523][T14299] do_syscall_64+0xcd/0x250 [ 668.484568][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.484606][T14299] RIP: 0033:0x7f114e18d169 [ 668.484629][T14299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.484656][T14299] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.484684][T14299] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 668.484703][T14299] RDX: 0000000000004880 RSI: 0000400000000140 RDI: 0000000000000003 [ 668.484720][T14299] RBP: 00007f114f0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 668.484737][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.484754][T14299] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 668.484792][T14299] [ 668.799497][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.325546][T14303] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[14303] [ 671.488927][T14326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 671.523488][T14326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 671.558960][T14326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 671.580237][T14326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 672.927553][T14339] FAULT_INJECTION: forcing a failure. [ 672.927553][T14339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.964013][T14339] CPU: 1 UID: 0 PID: 14339 Comm: syz.3.2060 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 672.964053][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 672.964068][T14339] Call Trace: [ 672.964076][T14339] [ 672.964087][T14339] dump_stack_lvl+0x16c/0x1f0 [ 672.964134][T14339] should_fail_ex+0x50a/0x650 [ 672.964167][T14339] _copy_from_user+0x2e/0xd0 [ 672.964200][T14339] snd_rawmidi_kernel_write1+0x4f9/0x880 [ 672.964253][T14339] snd_rawmidi_write+0x267/0xbe0 [ 672.964311][T14339] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 672.964353][T14339] ? __pfx_default_wake_function+0x10/0x10 [ 672.964395][T14339] ? bpf_lsm_file_permission+0x9/0x10 [ 672.964438][T14339] ? security_file_permission+0x71/0x210 [ 672.964478][T14339] ? rw_verify_area+0xcf/0x680 [ 672.964513][T14339] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 672.964552][T14339] vfs_write+0x24c/0x1150 [ 672.964593][T14339] ? __fget_files+0x1fc/0x3a0 [ 672.964633][T14339] ? __pfx_lock_release+0x10/0x10 [ 672.964673][T14339] ? __pfx_vfs_write+0x10/0x10 [ 672.964713][T14339] ? lock_acquire+0x2f/0xb0 [ 672.964746][T14339] ? __fget_files+0x40/0x3a0 [ 672.964787][T14339] ? __fget_files+0x206/0x3a0 [ 672.964839][T14339] ksys_write+0x207/0x250 [ 672.964878][T14339] ? __pfx_ksys_write+0x10/0x10 [ 672.964925][T14339] do_syscall_64+0xcd/0x250 [ 672.964971][T14339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.965009][T14339] RIP: 0033:0x7f7981d8d169 [ 672.965031][T14339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.965057][T14339] RSP: 002b:00007f7982c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.965086][T14339] RAX: ffffffffffffffda RBX: 00007f7981fa5fa0 RCX: 00007f7981d8d169 [ 672.965105][T14339] RDX: 000000000000a3d9 RSI: 0000400000000400 RDI: 0000000000000006 [ 672.965122][T14339] RBP: 00007f7982c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 672.965138][T14339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.965156][T14339] R13: 0000000000000000 R14: 00007f7981fa5fa0 R15: 00007fff15cf1b38 [ 672.965189][T14339] [ 673.283267][T14343] FAULT_INJECTION: forcing a failure. [ 673.283267][T14343] name failslab, interval 1, probability 0, space 0, times 0 [ 673.347135][T14343] CPU: 1 UID: 0 PID: 14343 Comm: syz.0.2062 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 673.347183][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 673.347209][T14343] Call Trace: [ 673.347218][T14343] [ 673.347229][T14343] dump_stack_lvl+0x16c/0x1f0 [ 673.347282][T14343] should_fail_ex+0x50a/0x650 [ 673.347311][T14343] ? fs_reclaim_acquire+0xae/0x150 [ 673.347351][T14343] ? __list_lru_init+0xe8/0x4c0 [ 673.347381][T14343] should_failslab+0xc2/0x120 [ 673.347411][T14343] __kmalloc_noprof+0xcb/0x510 [ 673.347450][T14343] ? lockdep_init_map_type+0x16d/0x7d0 [ 673.347503][T14343] __list_lru_init+0xe8/0x4c0 [ 673.347538][T14343] alloc_super+0x8c4/0xbd0 [ 673.347584][T14343] ? __pfx_test_keyed_super+0x10/0x10 [ 673.347617][T14343] sget_fc+0x116/0xc20 [ 673.347656][T14343] ? __pfx_set_anon_super_fc+0x10/0x10 [ 673.347695][T14343] ? __pfx_nfsd_fill_super+0x10/0x10 [ 673.347738][T14343] get_tree_keyed+0x59/0x1d0 [ 673.347781][T14343] vfs_get_tree+0x8b/0x340 [ 673.347817][T14343] path_mount+0x14e6/0x1f10 [ 673.347849][T14343] ? kmem_cache_free+0x2e2/0x4d0 [ 673.347891][T14343] ? __pfx_path_mount+0x10/0x10 [ 673.347926][T14343] ? putname+0x13c/0x180 [ 673.347959][T14343] __x64_sys_mount+0x28f/0x310 [ 673.347989][T14343] ? __pfx___x64_sys_mount+0x10/0x10 [ 673.348031][T14343] do_syscall_64+0xcd/0x250 [ 673.348080][T14343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.348122][T14343] RIP: 0033:0x7f114e18d169 [ 673.348147][T14343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.348176][T14343] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 673.348214][T14343] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 673.348234][T14343] RDX: 0000400000000100 RSI: 00004000000000c0 RDI: 0000000000000000 [ 673.348253][T14343] RBP: 00007f114e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 673.348271][T14343] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 673.348300][T14343] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 673.348339][T14343] [ 673.395257][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 673.518844][ C0] vkms_vblank_simulate: vblank timer overrun [ 673.568939][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 673.633784][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 673.633922][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 678.059805][T14422] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2082'. [ 678.070784][T14422] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2082'. [ 678.845567][T14427] : Can't lookup blockdev [ 678.913772][T14427] FAULT_INJECTION: forcing a failure. [ 678.913772][T14427] name failslab, interval 1, probability 0, space 0, times 0 [ 679.096525][T14427] CPU: 0 UID: 0 PID: 14427 Comm: syz.2.2084 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 679.096566][T14427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 679.096583][T14427] Call Trace: [ 679.096591][T14427] [ 679.096602][T14427] dump_stack_lvl+0x16c/0x1f0 [ 679.096652][T14427] should_fail_ex+0x50a/0x650 [ 679.096679][T14427] ? fs_reclaim_acquire+0xae/0x150 [ 679.096718][T14427] ? nexthop_net_init+0x73/0x140 [ 679.096755][T14427] should_failslab+0xc2/0x120 [ 679.096784][T14427] __kmalloc_cache_noprof+0x68/0x410 [ 679.096824][T14427] ? __pfx_nexthop_net_init+0x10/0x10 [ 679.096868][T14427] nexthop_net_init+0x73/0x140 [ 679.096897][T14427] ? tcf_net_init+0x55/0x150 [ 679.096937][T14427] ops_init+0x1df/0x5f0 [ 679.096974][T14427] setup_net+0x21f/0x860 [ 679.097008][T14427] ? __pfx_setup_net+0x10/0x10 [ 679.097035][T14427] ? down_read_killable+0xcc/0x380 [ 679.097064][T14427] ? __pfx_down_read_killable+0x10/0x10 [ 679.097089][T14427] ? __raw_spin_lock_init+0x3a/0x110 [ 679.097118][T14427] ? debug_mutex_init+0x37/0x70 [ 679.097153][T14427] copy_net_ns+0x2a6/0x5f0 [ 679.097190][T14427] create_new_namespaces+0x3ea/0xad0 [ 679.097242][T14427] copy_namespaces+0x468/0x560 [ 679.097289][T14427] copy_process+0x29fc/0x8c50 [ 679.097316][T14427] ? find_held_lock+0x2d/0x110 [ 679.097349][T14427] ? try_to_wake_up+0x8a0/0x1490 [ 679.097399][T14427] ? __pfx_copy_process+0x10/0x10 [ 679.097429][T14427] ? try_to_wake_up+0x953/0x1490 [ 679.097474][T14427] ? __pfx_try_to_wake_up+0x10/0x10 [ 679.097509][T14427] ? __pfx_lock_release+0x10/0x10 [ 679.097543][T14427] ? plist_check_head+0xa3/0x150 [ 679.097585][T14427] ? wake_up_q+0xb0/0x160 [ 679.097620][T14427] ? do_raw_spin_unlock+0x172/0x230 [ 679.097652][T14427] kernel_clone+0xfd/0x960 [ 679.097682][T14427] ? __pfx_futex_wake+0x10/0x10 [ 679.097724][T14427] ? __pfx_kernel_clone+0x10/0x10 [ 679.097751][T14427] ? __pfx_vfs_writev+0x10/0x10 [ 679.097804][T14427] __do_sys_clone+0xcf/0x120 [ 679.097831][T14427] ? __pfx___do_sys_clone+0x10/0x10 [ 679.097889][T14427] ? rcu_is_watching+0x12/0xc0 [ 679.097931][T14427] do_syscall_64+0xcd/0x250 [ 679.097976][T14427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.098013][T14427] RIP: 0033:0x7f131c98d169 [ 679.098035][T14427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.098063][T14427] RSP: 002b:00007f131d854038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 679.098093][T14427] RAX: ffffffffffffffda RBX: 00007f131cba5fa0 RCX: 00007f131c98d169 [ 679.098111][T14427] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000006cb0a3c8 [ 679.098127][T14427] RBP: 00007f131ca0e2a0 R08: 0000000000000008 R09: 0000000000000000 [ 679.098144][T14427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.098162][T14427] R13: 0000000000000000 R14: 00007f131cba5fa0 R15: 00007ffec74ad288 [ 679.098201][T14427] [ 687.780170][T14532] FAULT_INJECTION: forcing a failure. [ 687.780170][T14532] name failslab, interval 1, probability 0, space 0, times 0 [ 687.792999][T14532] CPU: 0 UID: 0 PID: 14532 Comm: syz.3.2108 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 687.793036][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 687.793051][T14532] Call Trace: [ 687.793061][T14532] [ 687.793072][T14532] dump_stack_lvl+0x16c/0x1f0 [ 687.793118][T14532] should_fail_ex+0x50a/0x650 [ 687.793144][T14532] ? fs_reclaim_acquire+0xae/0x150 [ 687.793183][T14532] ? constrain_params_by_rules+0x176/0xca0 [ 687.793217][T14532] should_failslab+0xc2/0x120 [ 687.793245][T14532] __kmalloc_noprof+0xcb/0x510 [ 687.793292][T14532] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 687.793332][T14532] constrain_params_by_rules+0x176/0xca0 [ 687.793369][T14532] ? arch_stack_walk+0xa7/0x100 [ 687.793409][T14532] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 687.793445][T14532] ? stack_trace_save+0x95/0xd0 [ 687.793477][T14532] ? __pfx_stack_trace_save+0x10/0x10 [ 687.793521][T14532] ? snd_pcm_oss_change_params_locked+0x9ad/0x3a60 [ 687.793555][T14532] ? snd_pcm_oss_ioctl+0x2623/0x3780 [ 687.793591][T14532] ? __x64_sys_ioctl+0x190/0x200 [ 687.793624][T14532] ? do_syscall_64+0xcd/0x250 [ 687.793662][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.793708][T14532] ? snd_interval_refine+0x2fa/0x580 [ 687.793743][T14532] snd_pcm_hw_refine+0x7e8/0xad0 [ 687.793788][T14532] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 687.793849][T14532] snd_pcm_hw_param_first+0x328/0x6e0 [ 687.793891][T14532] snd_pcm_hw_param_near.constprop.0+0x711/0x8f0 [ 687.793933][T14532] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 687.793971][T14532] ? kfree+0x2c4/0x4d0 [ 687.794006][T14532] ? snd_pcm_oss_change_params_locked+0x93b/0x3a60 [ 687.794047][T14532] snd_pcm_oss_change_params_locked+0x9ad/0x3a60 [ 687.794100][T14532] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 687.794140][T14532] ? do_vfs_ioctl+0x513/0x1990 [ 687.794176][T14532] ? __pfx___mutex_lock+0x10/0x10 [ 687.794247][T14532] snd_pcm_oss_ioctl+0x2623/0x3780 [ 687.794293][T14532] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 687.794339][T14532] ? __fget_files+0x206/0x3a0 [ 687.794386][T14532] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 687.794428][T14532] __x64_sys_ioctl+0x190/0x200 [ 687.794468][T14532] do_syscall_64+0xcd/0x250 [ 687.794516][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.794557][T14532] RIP: 0033:0x7f7981d8d169 [ 687.794592][T14532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.794621][T14532] RSP: 002b:00007f7982c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.794651][T14532] RAX: ffffffffffffffda RBX: 00007f7981fa5fa0 RCX: 00007f7981d8d169 [ 687.794670][T14532] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000007 [ 687.794689][T14532] RBP: 00007f7981e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 687.794714][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.794732][T14532] R13: 0000000000000000 R14: 00007f7981fa5fa0 R15: 00007fff15cf1b38 [ 687.794771][T14532] [ 688.098246][T14534] FAULT_INJECTION: forcing a failure. [ 688.098246][T14534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 688.111644][T14534] CPU: 0 UID: 0 PID: 14534 Comm: syz.0.2109 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 688.111681][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 688.111697][T14534] Call Trace: [ 688.111706][T14534] [ 688.111717][T14534] dump_stack_lvl+0x16c/0x1f0 [ 688.111763][T14534] should_fail_ex+0x50a/0x650 [ 688.111790][T14534] ? __pfx___might_resched+0x10/0x10 [ 688.111839][T14534] should_fail_alloc_page+0xe7/0x130 [ 688.111870][T14534] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 688.111917][T14534] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 688.111975][T14534] ? hlock_class+0x4e/0x130 [ 688.112005][T14534] ? __lock_acquire+0xcc5/0x3c40 [ 688.112053][T14534] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 688.112103][T14534] ? __pfx___lock_acquire+0x10/0x10 [ 688.112155][T14534] ? find_held_lock+0x2d/0x110 [ 688.112187][T14534] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 688.112235][T14534] ? policy_nodemask+0xea/0x4e0 [ 688.112267][T14534] alloc_pages_mpol+0x1fc/0x540 [ 688.112297][T14534] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 688.112329][T14534] ? blk_cgroup_congested+0x140/0x270 [ 688.112366][T14534] alloc_pages_noprof+0x131/0x390 [ 688.112395][T14534] pte_alloc_one+0x20/0x390 [ 688.112438][T14534] do_huge_pmd_anonymous_page+0x2bb/0x20f0 [ 688.112486][T14534] __handle_mm_fault+0x1db2/0x2c60 [ 688.112540][T14534] ? __pfx___handle_mm_fault+0x10/0x10 [ 688.112580][T14534] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 688.112643][T14534] ? find_vma+0xc0/0x140 [ 688.112677][T14534] ? __pfx_find_vma+0x10/0x10 [ 688.112714][T14534] handle_mm_fault+0x3fa/0xaa0 [ 688.112764][T14534] do_user_addr_fault+0x7a3/0x13f0 [ 688.112812][T14534] exc_page_fault+0x5c/0xc0 [ 688.112852][T14534] asm_exc_page_fault+0x26/0x30 [ 688.112889][T14534] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 688.112921][T14534] Code: ff c7 48 ff c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 688.112956][T14534] RSP: 0018:ffffc900101afcd0 EFLAGS: 00050206 [ 688.112982][T14534] RAX: 0000000000000000 RBX: 000000007fdff000 RCX: 0000000000001000 [ 688.113002][T14534] RDX: ffff88807e5dbc00 RSI: ffffffff85427966 RDI: 0000400000200000 [ 688.113022][T14534] RBP: 0000000000001000 R08: 0000000000000000 R09: fffffbfff20c5222 [ 688.113041][T14534] R10: ffffffff90629117 R11: 0000000000000000 R12: ffff88807e5dbc00 [ 688.113061][T14534] R13: 00007ffffffff000 R14: ffffed100fcbb780 R15: 0000400000200000 [ 688.113093][T14534] ? read_zero+0xc6/0x250 [ 688.113139][T14534] read_zero+0xd6/0x250 [ 688.113180][T14534] ? __pfx_read_zero+0x10/0x10 [ 688.113220][T14534] vfs_read+0x1df/0xbf0 [ 688.113261][T14534] ? __fget_files+0x1fc/0x3a0 [ 688.113301][T14534] ? __pfx_lock_release+0x10/0x10 [ 688.113339][T14534] ? __pfx_vfs_read+0x10/0x10 [ 688.113381][T14534] ? lock_acquire+0x2f/0xb0 [ 688.113417][T14534] ? __fget_files+0x40/0x3a0 [ 688.113462][T14534] ? __fget_files+0x206/0x3a0 [ 688.113514][T14534] __x64_sys_pread64+0x1f6/0x250 [ 688.113557][T14534] ? __pfx___x64_sys_pread64+0x10/0x10 [ 688.113614][T14534] do_syscall_64+0xcd/0x250 [ 688.113658][T14534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.113696][T14534] RIP: 0033:0x7f114e18d169 [ 688.113719][T14534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.113748][T14534] RSP: 002b:00007f114f0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 688.113775][T14534] RAX: ffffffffffffffda RBX: 00007f114e3a5fa0 RCX: 00007f114e18d169 [ 688.113793][T14534] RDX: 0000000100000005 RSI: 0000400000000000 RDI: 0000000000000004 [ 688.113811][T14534] RBP: 00007f114f0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 688.113828][T14534] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 688.113845][T14534] R13: 0000000000000000 R14: 00007f114e3a5fa0 R15: 00007ffe5f5db548 [ 688.113884][T14534] [ 689.099045][T14540] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[14540] [ 690.274549][T14549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 690.284681][T14549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 690.297985][T14549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 690.333098][T14549] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 691.154265][T14556] net_ratelimit: 6 callbacks suppressed [ 691.154293][T14556] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 691.396843][T14571] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 691.398825][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.403313][T14571] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 691.412352][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.434908][T14571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 691.445406][T14571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 691.601113][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2119'. [ 691.725687][T14586] HfR: entered promiscuous mode [ 692.433816][ T31] audit: type=1800 audit(4294967363.310:46): pid=14589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2120" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 692.640064][T14584] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 692.854954][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 693.223231][T14599] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[14599] [ 693.473734][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 693.479896][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 693.486112][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 693.702115][T14603] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[14603] [ 694.096334][T14616] FAULT_INJECTION: forcing a failure. [ 694.096334][T14616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.141944][T14616] CPU: 1 UID: 0 PID: 14616 Comm: syz.1.2125 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 694.141984][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 694.142000][T14616] Call Trace: [ 694.142008][T14616] [ 694.142018][T14616] dump_stack_lvl+0x16c/0x1f0 [ 694.142063][T14616] should_fail_ex+0x50a/0x650 [ 694.142087][T14616] ? __pfx___might_resched+0x10/0x10 [ 694.142132][T14616] should_fail_alloc_page+0xe7/0x130 [ 694.142161][T14616] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 694.142204][T14616] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 694.142248][T14616] ? __pfx_mark_lock+0x10/0x10 [ 694.142284][T14616] ? hlock_class+0x4e/0x130 [ 694.142311][T14616] ? mark_lock+0xb5/0xc60 [ 694.142344][T14616] ? hlock_class+0x4e/0x130 [ 694.142371][T14616] ? mark_lock+0xb5/0xc60 [ 694.142404][T14616] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 694.142448][T14616] ? mark_lock+0xb5/0xc60 [ 694.142500][T14616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 694.142541][T14616] ? policy_nodemask+0xea/0x4e0 [ 694.142569][T14616] alloc_pages_mpol+0x1fc/0x540 [ 694.142596][T14616] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 694.142622][T14616] ? find_held_lock+0x2d/0x110 [ 694.142656][T14616] folio_alloc_mpol_noprof+0x36/0x2f0 [ 694.142688][T14616] shmem_alloc_folio+0x135/0x160 [ 694.142730][T14616] shmem_alloc_and_add_folio+0x48e/0xc10 [ 694.142767][T14616] ? shmem_huge_global_enabled+0x72/0x6b0 [ 694.142795][T14616] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 694.142828][T14616] ? shmem_allowable_huge_orders+0xd0/0x410 [ 694.142867][T14616] shmem_get_folio_gfp+0x689/0x1530 [ 694.142912][T14616] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 694.142947][T14616] ? filemap_map_pages+0xf92/0x16b0 [ 694.142983][T14616] shmem_fault+0x200/0xae0 [ 694.143016][T14616] ? __pfx_shmem_fault+0x10/0x10 [ 694.143054][T14616] ? do_pte_missing+0xde9/0x3e10 [ 694.143090][T14616] ? __pfx_lock_release+0x10/0x10 [ 694.143133][T14616] __do_fault+0x10a/0x490 [ 694.143165][T14616] do_pte_missing+0xecf/0x3e10 [ 694.143204][T14616] ? __pfx_lock_release+0x10/0x10 [ 694.143247][T14616] __handle_mm_fault+0x1166/0x2c60 [ 694.143296][T14616] ? __pfx___handle_mm_fault+0x10/0x10 [ 694.143333][T14616] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 694.143390][T14616] ? find_vma+0xc0/0x140 [ 694.143421][T14616] ? __pfx_find_vma+0x10/0x10 [ 694.143457][T14616] handle_mm_fault+0x3fa/0xaa0 [ 694.143502][T14616] do_user_addr_fault+0x7a3/0x13f0 [ 694.143547][T14616] exc_page_fault+0x5c/0xc0 [ 694.143589][T14616] asm_exc_page_fault+0x26/0x30 [ 694.143622][T14616] RIP: 0010:fault_in_readable+0x160/0x200 [ 694.143655][T14616] Code: 42 e8 45 31 f6 e8 80 60 b9 ff 48 39 eb 75 13 eb 2e e8 74 60 b9 ff 48 81 c3 00 10 00 00 48 39 eb 74 1d e8 63 60 b9 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 50 5b b9 ff 45 85 ff 74 d2 e8 [ 694.143680][T14616] RSP: 0018:ffffc900180c79c8 EFLAGS: 00050293 [ 694.143703][T14616] RAX: 0000000000000000 RBX: 0000000000009000 RCX: ffffffff82008f80 [ 694.143720][T14616] RDX: ffff88802c333c00 RSI: ffffffff82008fdd RDI: 0000000000000005 [ 694.143737][T14616] RBP: 000000000000a000 R08: 0000000000000005 R09: 0000000000000000 [ 694.143753][T14616] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 [ 694.143770][T14616] R13: 0000000000008f7e R14: 0000000000000000 R15: 0000000000000000 [ 694.143796][T14616] ? fault_in_readable+0x100/0x200 [ 694.143827][T14616] ? fault_in_readable+0x15d/0x200 [ 694.143864][T14616] ? fault_in_readable+0x15d/0x200 [ 694.143906][T14616] ? __pfx_fault_in_readable+0x10/0x10 [ 694.143939][T14616] ? I_BDEV+0xd/0x20 [ 694.143963][T14616] ? inode_to_bdi+0x9e/0x160 [ 694.143997][T14616] fault_in_iov_iter_readable+0x101/0x2c0 [ 694.144030][T14616] iomap_file_buffered_write+0x3e2/0xc70 [ 694.144076][T14616] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 694.144105][T14616] ? find_held_lock+0x2d/0x110 [ 694.144132][T14616] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 694.144188][T14616] ? preempt_count_add+0x76/0x150 [ 694.144221][T14616] ? mnt_put_write_access_file+0xc1/0xf0 [ 694.144261][T14616] blkdev_write_iter+0x574/0xdd0 [ 694.144302][T14616] vfs_write+0x5ae/0x1150 [ 694.144339][T14616] ? __pfx_blkdev_write_iter+0x10/0x10 [ 694.144377][T14616] ? __pfx_vfs_write+0x10/0x10 [ 694.144414][T14616] ? __fget_files+0x40/0x3a0 [ 694.144468][T14616] ksys_write+0x12b/0x250 [ 694.144502][T14616] ? __pfx_ksys_write+0x10/0x10 [ 694.144548][T14616] do_syscall_64+0xcd/0x250 [ 694.144589][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.144623][T14616] RIP: 0033:0x7f045cd8d169 [ 694.144645][T14616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.144668][T14616] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 694.144693][T14616] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 694.144710][T14616] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 694.144727][T14616] RBP: 00007f045dbdc090 R08: 0000000000000000 R09: 0000000000000000 [ 694.144743][T14616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 694.144759][T14616] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 694.144794][T14616] [ 695.348310][T14635] FAULT_INJECTION: forcing a failure. [ 695.348310][T14635] name failslab, interval 1, probability 0, space 0, times 0 [ 695.373578][T14635] CPU: 0 UID: 0 PID: 14635 Comm: syz.1.2130 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 695.373630][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 695.373655][T14635] Call Trace: [ 695.373665][T14635] [ 695.373677][T14635] dump_stack_lvl+0x16c/0x1f0 [ 695.373728][T14635] should_fail_ex+0x50a/0x650 [ 695.373757][T14635] ? fs_reclaim_acquire+0xae/0x150 [ 695.373798][T14635] ? constrain_params_by_rules+0x176/0xca0 [ 695.373836][T14635] should_failslab+0xc2/0x120 [ 695.373866][T14635] __kmalloc_noprof+0xcb/0x510 [ 695.373905][T14635] ? unwind_get_return_address+0x59/0xa0 [ 695.373956][T14635] constrain_params_by_rules+0x176/0xca0 [ 695.374002][T14635] ? stack_trace_save+0x95/0xd0 [ 695.374038][T14635] ? stack_depot_save_flags+0x28/0x9c0 [ 695.374084][T14635] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 695.374132][T14635] ? __kasan_kmalloc+0xaa/0xb0 [ 695.374172][T14635] ? snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 695.374210][T14635] ? snd_pcm_oss_change_params_locked+0x136c/0x3a60 [ 695.374248][T14635] ? snd_pcm_oss_ioctl+0x2623/0x3780 [ 695.374301][T14635] ? snd_interval_refine+0x2fa/0x580 [ 695.374336][T14635] snd_pcm_hw_refine+0x7e8/0xad0 [ 695.374382][T14635] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 695.374437][T14635] ? _snd_pcm_hw_param_min+0x259/0x630 [ 695.374481][T14635] snd_pcm_hw_param_near.constprop.0+0x597/0x8f0 [ 695.374527][T14635] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 695.374569][T14635] ? calc_src_frames.isra.0+0x187/0x1d0 [ 695.374607][T14635] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 695.374665][T14635] snd_pcm_oss_change_params_locked+0x136c/0x3a60 [ 695.374723][T14635] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 695.374761][T14635] ? do_vfs_ioctl+0x513/0x1990 [ 695.374797][T14635] ? __pfx___mutex_lock+0x10/0x10 [ 695.374868][T14635] snd_pcm_oss_ioctl+0x2623/0x3780 [ 695.374911][T14635] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 695.374955][T14635] ? __fget_files+0x206/0x3a0 [ 695.375003][T14635] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 695.375045][T14635] __x64_sys_ioctl+0x190/0x200 [ 695.375084][T14635] do_syscall_64+0xcd/0x250 [ 695.375131][T14635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.375171][T14635] RIP: 0033:0x7f045cd8d169 [ 695.375195][T14635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.375223][T14635] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.375252][T14635] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 695.375271][T14635] RDX: 0000400000000340 RSI: 000000008010500c RDI: 0000000000000006 [ 695.375288][T14635] RBP: 00007f045ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 695.375304][T14635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.375320][T14635] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 695.375355][T14635] [ 696.045569][T14632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 696.101324][T14632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 696.139304][T14632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 696.177707][T14632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 697.458649][T14659] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[14659] [ 697.537367][T14666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 697.555486][T14666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 697.587819][T14666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 697.626874][T14666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 697.917566][T14676] FAULT_INJECTION: forcing a failure. [ 697.917566][T14676] name failslab, interval 1, probability 0, space 0, times 0 [ 697.956706][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.1.2140 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 697.956748][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 697.956764][T14676] Call Trace: [ 697.956773][T14676] [ 697.956792][T14676] dump_stack_lvl+0x16c/0x1f0 [ 697.956841][T14676] should_fail_ex+0x50a/0x650 [ 697.956867][T14676] ? fs_reclaim_acquire+0xae/0x150 [ 697.956906][T14676] ? s_start+0x7b/0x320 [ 697.956941][T14676] should_failslab+0xc2/0x120 [ 697.956969][T14676] __kmalloc_cache_noprof+0x68/0x410 [ 697.957008][T14676] ? trace_kmalloc+0x2d/0xd0 [ 697.957039][T14676] ? __kmalloc_node_noprof+0x23d/0x510 [ 697.957088][T14676] s_start+0x7b/0x320 [ 697.957134][T14676] seq_read_iter+0x2ab/0x12b0 [ 697.957189][T14676] seq_read+0x39f/0x4e0 [ 697.957225][T14676] ? __pfx_seq_read+0x10/0x10 [ 697.957281][T14676] ? rw_verify_area+0xcf/0x680 [ 697.957314][T14676] ? __pfx_seq_read+0x10/0x10 [ 697.957346][T14676] vfs_read+0x1df/0xbf0 [ 697.957382][T14676] ? __fget_files+0x1fc/0x3a0 [ 697.957421][T14676] ? __pfx___mutex_lock+0x10/0x10 [ 697.957459][T14676] ? __pfx_vfs_read+0x10/0x10 [ 697.957504][T14676] ? __fget_files+0x206/0x3a0 [ 697.957551][T14676] ksys_read+0x12b/0x250 [ 697.957585][T14676] ? __pfx_ksys_read+0x10/0x10 [ 697.957632][T14676] do_syscall_64+0xcd/0x250 [ 697.957671][T14676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.957706][T14676] RIP: 0033:0x7f045cd8d169 [ 697.957727][T14676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.957753][T14676] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 697.957779][T14676] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 697.957805][T14676] RDX: 0000000000000084 RSI: 0000400000000040 RDI: 0000000000000003 [ 697.957820][T14676] RBP: 00007f045dbdc090 R08: 0000000000000000 R09: 0000000000000000 [ 697.957836][T14676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.957851][T14676] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 697.957886][T14676] [ 697.957899][T14676] [ 698.170678][T14676] ===================================== [ 698.176225][T14676] WARNING: bad unlock balance detected! [ 698.181788][T14676] 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 Not tainted [ 698.188917][T14676] ------------------------------------- [ 698.194471][T14676] syz.1.2140/14676 is trying to release lock (event_mutex) at: [ 698.202036][T14676] [] seq_read_iter+0x5ff/0x12b0 [ 698.208480][T14676] but there are no more locks to release! [ 698.214200][T14676] [ 698.214200][T14676] other info that might help us debug this: [ 698.222260][T14676] 2 locks held by syz.1.2140/14676: [ 698.227464][T14676] #0: ffff88807bbb02b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 698.236567][T14676] #1: ffff88801323f418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 698.245495][T14676] [ 698.245495][T14676] stack backtrace: [ 698.251388][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.1.2140 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 698.251413][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 698.251426][T14676] Call Trace: [ 698.251433][T14676] [ 698.251442][T14676] dump_stack_lvl+0x116/0x1f0 [ 698.251476][T14676] ? seq_read_iter+0x5ff/0x12b0 [ 698.251501][T14676] print_unlock_imbalance_bug+0x1aa/0x1f0 [ 698.251532][T14676] lock_release+0x525/0x6f0 [ 698.251560][T14676] ? seq_read_iter+0x5ff/0x12b0 [ 698.251587][T14676] ? __pfx_lock_release+0x10/0x10 [ 698.251616][T14676] ? s_start+0x7b/0x320 [ 698.251645][T14676] ? mark_held_locks+0x9f/0xe0 [ 698.251674][T14676] ? dump_stack_lvl+0x185/0x1f0 [ 698.251705][T14676] ? lockdep_hardirqs_on+0x7c/0x110 [ 698.251738][T14676] __mutex_unlock_slowpath+0xa3/0x6a0 [ 698.251771][T14676] ? rcu_is_watching+0x12/0xc0 [ 698.251794][T14676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 698.251826][T14676] ? __kmalloc_cache_noprof+0x2a2/0x410 [ 698.251864][T14676] ? rcu_is_watching+0x12/0xc0 [ 698.251885][T14676] ? kfree+0x260/0x4d0 [ 698.251912][T14676] ? s_start+0x28a/0x320 [ 698.251942][T14676] seq_read_iter+0x5ff/0x12b0 [ 698.251973][T14676] seq_read+0x39f/0x4e0 [ 698.251999][T14676] ? __pfx_seq_read+0x10/0x10 [ 698.252031][T14676] ? rw_verify_area+0xcf/0x680 [ 698.252057][T14676] ? __pfx_seq_read+0x10/0x10 [ 698.252083][T14676] vfs_read+0x1df/0xbf0 [ 698.252112][T14676] ? __fget_files+0x1fc/0x3a0 [ 698.252143][T14676] ? __pfx___mutex_lock+0x10/0x10 [ 698.252174][T14676] ? __pfx_vfs_read+0x10/0x10 [ 698.252205][T14676] ? __fget_files+0x206/0x3a0 [ 698.252238][T14676] ksys_read+0x12b/0x250 [ 698.252266][T14676] ? __pfx_ksys_read+0x10/0x10 [ 698.252298][T14676] do_syscall_64+0xcd/0x250 [ 698.252331][T14676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.252362][T14676] RIP: 0033:0x7f045cd8d169 [ 698.252379][T14676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.252401][T14676] RSP: 002b:00007f045dbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.252421][T14676] RAX: ffffffffffffffda RBX: 00007f045cfa5fa0 RCX: 00007f045cd8d169 [ 698.252436][T14676] RDX: 0000000000000084 RSI: 0000400000000040 RDI: 0000000000000003 [ 698.252450][T14676] RBP: 00007f045dbdc090 R08: 0000000000000000 R09: 0000000000000000 [ 698.252463][T14676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.252476][T14676] R13: 0000000000000000 R14: 00007f045cfa5fa0 R15: 00007ffea5fb4658 [ 698.252496][T14676] [ 698.779345][ T31] audit: type=1800 audit(4294967369.460:47): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2141" name="dummy_udc" dev="gadgetfs" ino=6061 res=0 errno=0 [ 699.563705][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 699.633869][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 699.633967][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 699.640252][ T5146] Bluetooth: hci1: command 0x0406 tx timeout