last executing test programs: 18m5.965947896s ago: executing program 1 (id=1360): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0xe0043, 0x0) writev$auto(r0, 0x0, 0x100) mmap$auto(0x0, 0x2000a, 0xffffffffffff8000, 0xeb1, r0, 0x8000) unshare$auto(0x40000084) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000040)={&(0x7f0000000540), 0xfffffffffffffffd}, 0x8) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x40}, 0x3, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x3, 0x0, 0xc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x80000005, 0x400008, 0x1, 0x40009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0c82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000340)="e3cd8f2ee2e27c5d3ff966c071b74d2a010361005f00bec68d3db3d789c9fe360dd2f06d112a0d4aa7b9e257301d3cf1052999280b67cd234ddd9a8afb52e0887a89e96b88cc67ea4dd93c9b45483ff5f0c0ea1846a27f72fa0cd177517fe71d02b522d1e95b6ce79574bf676e631e9759429b0e33a0ede537901e60754cfee319c53af8b3ece2757d3379f4466dcaeb327ec738dbf8d8f97f", 0xd8}, 0x6db) socketpair$auto(0x1e, 0x5, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, 0x0) pread64$auto(r4, 0x0, 0x5, 0x8000400) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ethtool(0x0, r7) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x20000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x8000001f, 0x20000000007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000000005, 0xeb1, 0x405, 0x8000) 18m4.660779206s ago: executing program 1 (id=1364): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/trace\x00', 0x40, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time_for_children\x00') sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x220, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x43}, @NL802154_ATTR_SEC_KEY={0x1e1, 0x30, 0x0, 0x1, [@nested={0xbb, 0xd1, 0x0, 0x1, [@nested={0x4, 0xcc}, @generic="3d1b524cca16d3d242db8b5824c506ba3758be4f117e213452ccbdcaeabf7b16809b121b6ea8926f6285e01112cd803b7c26cf8435c72a2cb6f3693a6508c432a5a04ef23059b0643cdfb0e17caa1a2ed76dd513c26d2cb3af7ee5c31f8158850f33836184e7a4b490ba4c42ad3a755d58fb4da5fefe64ccfb5766476f939b5ec7a6e2c7681595c7759ac4ed56d3a1ed854a009640370b7552135f657f844f96b30192ff77ece9bbcfef43a2abfaef61b20f8a"]}, @generic="300926f344eb0fa053771d06dd323e1c8a3c91fe2d46cb1a204b63abc19ce1961eeb9ec11c62031dd123559f82588ba9da8787c6e228f2853b42f268dee80b1c27bb5eed4af333192aa8e6437ac194928663d1e24a967151bb7020102e638b7407546836c58cded62c36908c04708bf370df8c6947bc4d0c2ef8c7c660ee7d8e11dc05470160d75ff3fb34c749f60a453530e5c157441d62f31fd0287ce5b9da77041ff693a575aecee05d884595d9141152c1e92407843ac6d22b2c07e4adabd4cdcf43c837d179f780d7554dbc5426c3958261ae90bbc527e7ced2b0a377e4d9df4e12964b522248db0fd194dd11bfda5630cb53", @nested={0x28, 0xe, 0x0, 0x1, [@typed={0x24, 0x16, 0x0, 0x0, @str='/sys/kernel/debug/tracing/trace\x00'}]}, @typed={0x4, 0x1b}]}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x3e}]}, 0x220}, 0x1, 0x0, 0x0, 0x20048000}, 0x4810) 18m4.326920175s ago: executing program 1 (id=1367): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x4020565b, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa001, 0x0) write$auto(r1, 0x0, 0x81) 18m3.15275932s ago: executing program 1 (id=1370): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa001, 0x0) write$auto(r1, 0x0, 0x81) (fail_nth: 1) 18m1.955203098s ago: executing program 1 (id=1376): r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.kmem.slabinfo\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x2b, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x84, 0x80, 0x0, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) write$auto_tap_fops_tap(0xffffffffffffffff, &(0x7f0000000040)="a84f4676598f7a8ebbf3c1db", 0xc) 18m0.806530313s ago: executing program 1 (id=1377): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ustat$auto(0x801, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x20029, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000300)="d4a031d55865138fb54ed4fcf1bde51357c25ba1213aefe959f20830161d396c25af9ab9014e5fe1e27889d653d09dec9962c3025f940bea3165922674936ea0b927220c6c09315155dc7e738d7f98772f75784bdf97963f047e8882835de8a5e37071e1ce85a45e6306e3ee9f219bc0123325ffd6af455f0e1874bb3421f789e1a41f05b8086d059755b72b878e29cbabf7948d41fbecb25ba409cd698c672e89762d5a6ceef9f2c1a02b68f5acfdbe04df00f9bf4bcfd13780b736aaab21411cc8aaabbf91e5acd9ad57a7983f022b79f82a3acb47af019e23991f5945f4889cf083de29bdcac25a", 0x1, &(0x7f0000000180)="7fa556e539efa54109034c3a54c8e6c6869ff8afe23c32141a794685fc9bed33909b0d660f7c4dbde87f5232750c376ff82975892a845c5646b58c30ec36f4bc3196fd2f021f90b7e7c03abfe320fb85d6c73e29d587e9dbfbc77e9473740b08f54adfde6e5d62714cde7e2483ff00c17f", 0x10, &(0x7f0000000400)="3f70b1b615c2522ab79ef67a046bcadaa44c29464d387e16ecd65de052314827e8ed45e34133c5c03be40f2f3f6a8aa35068f013ca5a1f7183a857cd6691f4a053bf4e7fc16bba1688241b6abbb0f5613e4d96307afb7791a83af4", &(0x7f0000000280)=0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x20044840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'ip6erspan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b2747c8c5b303db6df4619e3a249b51f223bee00000000", @ANYRES16=r5, @ANYBLOB="000228bd7000fedbdf250a000000640001800800030002000000140002007465616d5f736c6176655f310000000008000300010000001400020069705f7674693000000000000000000008000100", @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="080003ffffffffffffffff003279936f6b3c7264", @ANYRESDEC=r3, @ANYBLOB="06000300dadf00004000018014000200776c616e3100000000000000000000001400020073797a5f74756e000000000000000000140002007767320000000000000000000000000004000300384e02979b6c28ceab62c2d43dbe2f119da62b80735f566abb423dd147ced332a1ae37ae0dcf94c847b2802671c7ef003fcb01d03e8492192a5672cc67466bfe5f54f5cff288ee15cd5574d0d71fa6ef2c9f66caeca279cfe52451206e85b5753242dcbde7ed081ccccf56750676132790deba3d7f34c5cb9234d7c269806b106e28ef4e568f3688664f89b2c3fd255774b487d2f11bc10360d5c84cb71c3db8ca4d1645"], 0xc4}}, 0x20048810) r6 = socket(0x10, 0x2, 0x0) lsm_get_self_attr$auto(0x1, &(0x7f0000000100)={0x80000001, 0xfffffffffffff9cb, 0xa, 0x6, "31ba3509ca54"}, &(0x7f0000000140), 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xdb33, 0xe2, 0x13, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRES16], 0x1ac}}, 0x20040000) 17m45.649065776s ago: executing program 32 (id=1377): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ustat$auto(0x801, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x20029, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000300)="d4a031d55865138fb54ed4fcf1bde51357c25ba1213aefe959f20830161d396c25af9ab9014e5fe1e27889d653d09dec9962c3025f940bea3165922674936ea0b927220c6c09315155dc7e738d7f98772f75784bdf97963f047e8882835de8a5e37071e1ce85a45e6306e3ee9f219bc0123325ffd6af455f0e1874bb3421f789e1a41f05b8086d059755b72b878e29cbabf7948d41fbecb25ba409cd698c672e89762d5a6ceef9f2c1a02b68f5acfdbe04df00f9bf4bcfd13780b736aaab21411cc8aaabbf91e5acd9ad57a7983f022b79f82a3acb47af019e23991f5945f4889cf083de29bdcac25a", 0x1, &(0x7f0000000180)="7fa556e539efa54109034c3a54c8e6c6869ff8afe23c32141a794685fc9bed33909b0d660f7c4dbde87f5232750c376ff82975892a845c5646b58c30ec36f4bc3196fd2f021f90b7e7c03abfe320fb85d6c73e29d587e9dbfbc77e9473740b08f54adfde6e5d62714cde7e2483ff00c17f", 0x10, &(0x7f0000000400)="3f70b1b615c2522ab79ef67a046bcadaa44c29464d387e16ecd65de052314827e8ed45e34133c5c03be40f2f3f6a8aa35068f013ca5a1f7183a857cd6691f4a053bf4e7fc16bba1688241b6abbb0f5613e4d96307afb7791a83af4", &(0x7f0000000280)=0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x20044840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'ip6erspan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b2747c8c5b303db6df4619e3a249b51f223bee00000000", @ANYRES16=r5, @ANYBLOB="000228bd7000fedbdf250a000000640001800800030002000000140002007465616d5f736c6176655f310000000008000300010000001400020069705f7674693000000000000000000008000100", @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="080003ffffffffffffffff003279936f6b3c7264", @ANYRESDEC=r3, @ANYBLOB="06000300dadf00004000018014000200776c616e3100000000000000000000001400020073797a5f74756e000000000000000000140002007767320000000000000000000000000004000300384e02979b6c28ceab62c2d43dbe2f119da62b80735f566abb423dd147ced332a1ae37ae0dcf94c847b2802671c7ef003fcb01d03e8492192a5672cc67466bfe5f54f5cff288ee15cd5574d0d71fa6ef2c9f66caeca279cfe52451206e85b5753242dcbde7ed081ccccf56750676132790deba3d7f34c5cb9234d7c269806b106e28ef4e568f3688664f89b2c3fd255774b487d2f11bc10360d5c84cb71c3db8ca4d1645"], 0xc4}}, 0x20048810) r6 = socket(0x10, 0x2, 0x0) lsm_get_self_attr$auto(0x1, &(0x7f0000000100)={0x80000001, 0xfffffffffffff9cb, 0xa, 0x6, "31ba3509ca54"}, &(0x7f0000000140), 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xdb33, 0xe2, 0x13, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRES16], 0x1ac}}, 0x20040000) 8m21.333968132s ago: executing program 4 (id=3339): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r1, 0x29, 0x1f, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setitimer$auto(0x1, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r2, 0x2) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) r4 = ioctl$auto_TUNGETIFF2(r3, 0x800454d2, 0x0) getsockopt$auto_SO_OOBINLINE(r4, 0x7, 0xa, 0x0, &(0x7f0000000100)=0x10000) landlock_restrict_self$auto(r2, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) socket(0xa, 0x3, 0x3b) setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 8m20.775205829s ago: executing program 4 (id=3342): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xf, 0x5, 0xf) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r0, &(0x7f0000000400), 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d6804dfc", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf2503000000180001801400020073797a5f74756e0000000000000000000500030004000000050005009e000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x38, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffff8, 0x5, 0xffffffff80000000, 0x5, 0x61, 0x103}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) read$auto(r2, 0x0, 0x1) pidfd_open$auto(0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 8m19.464244454s ago: executing program 4 (id=3346): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcd}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4) 8m18.928710664s ago: executing program 4 (id=3349): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x10, 0x3, 0x6) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0xd, 0x4}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa3) setsockopt$auto_SO_BSDCOMPAT(r3, 0x7f, 0xe, &(0x7f0000000100)='/dev/kvm\x00', 0x6) 8m16.99444308s ago: executing program 4 (id=3352): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/023/001\x00', 0x200, 0x0) (async) setregid$auto(0xffffffffffffffff, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) open(0x0, 0x163340, 0x2a) (async) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 64) sendto$auto(0x3, 0x0, 0x9, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e20, @multicast2}, 0x1d) (rerun: 64) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x6, 0x10, 0x5, 0x7fb, &(0x7f00000002c0)}) 8m15.456223185s ago: executing program 4 (id=3357): mmap$auto(0x0, 0x2020009, 0xb64f, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x2, 0x3b, 0x0, 0x5, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2, 0x1, 0x100) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r0, 0x9, 0x9, r1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x8, 0x9, 0x1, 0xeb3, 0xfffefffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0xd3d8) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200d01532f2ed0d", 0x18) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) unshare$auto(0x4107) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) 7m59.453415556s ago: executing program 33 (id=3357): mmap$auto(0x0, 0x2020009, 0xb64f, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x2, 0x3b, 0x0, 0x5, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2, 0x1, 0x100) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r0, 0x9, 0x9, r1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x8, 0x9, 0x1, 0xeb3, 0xfffefffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0xd3d8) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200d01532f2ed0d", 0x18) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) unshare$auto(0x4107) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) 6m38.078678954s ago: executing program 2 (id=3603): r0 = socket(0x27, 0x80000, 0x5802000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0x3, 0x1, 0x90000800000402) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) futex_wake$auto(0x0, 0x0, 0x3, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80300, 0x0) read$auto_proc_page_owner_threshold_(r1, &(0x7f0000000300)=""/75, 0x4b) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_create$auto(0x4) socket(0x28, 0x1, 0x1) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x7, 0x948b, 0x6, 0x15f4da07, 0xfffffffffffffffe, 0x3, 0x62, 0x8000001f, 0x7, 0x8, 0x9, 0x2, 0x2000000008]}, 0x0) (fail_nth: 3) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) 6m36.677100631s ago: executing program 2 (id=3606): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4) 6m36.455930038s ago: executing program 2 (id=3608): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0xa040, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.pressure\x00', 0x42802, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/231, 0xe7) fsmount$auto(r0, 0x5, 0x3) statmount$auto(0x0, &(0x7f0000000180)={0x81, 0x2, 0x44f, 0x807, 0x9, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x5, 0x8, 0x10006, 0x4000082, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffc, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x1fa, 0xd) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x8d1) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mmap$auto(0x0, 0x3ff, 0x100000001, 0xeb1, 0x401, 0xcea) setuid$auto(0xe) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setrlimit$auto(0x8, 0x0) fchmod$auto(0x3, 0x800000000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) 6m35.91697083s ago: executing program 2 (id=3611): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x3, 0xff) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) madvise$auto(0x1ffff000, 0x7, 0x100000000) shmget$auto(0x8, 0x10563, 0x568d1af2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x14, r2, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x60000, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x22, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b4438a659a000413f7eb016bb998900123ad43479ea829e58efa705ba13674f13d39b45", 0x81) r6 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000480), 0xa2200, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f00000004c0)={0x5, 0x2e9, [{0xffffffffffffffff, 0x0, 0x5, 0xd}, {0xffffffffffffffff, 0x0, 0xffff, 0x4}, {0xffffffffffffffff, 0x0, 0xc43, 0x3}, {0xffffffffffffffff, 0x0, 0x6}]}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x4000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba}) r7 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x0, 0x0) r8 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations\x00', 0x80000, 0x0) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)=@bpf_attr_3={0xfffffffa, 0x8, 0x80, 0xffffffff7fffffff, 0xff, 0xc0000000, 0x80000001, 0x0, 0x7ff, "a4bef3f43e3202c6e0918d29bc5f3d34", 0x0, 0x7fffffff, r7, 0x5, 0x9, 0x3b24, 0x80, 0x7, 0x7fff, 0xe, @attach_prog_fd=r0, 0x9, 0x5, 0x8, 0x3, 0x6, r3, r8}, 0x7fffffff) 6m35.377557523s ago: executing program 2 (id=3613): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000040000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffffffe, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x27, 0x800, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xf53, 0xffffffffffff0008, 0x17) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x3, 0xe97f, 0x9, 0x80000010, r0, 0x20000007ffd) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/reboot/mode\x00', 0x501, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 6m33.952656843s ago: executing program 2 (id=3619): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000080)=""/192, 0xc0) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r1, 0x0, 0x100100, 0x7fff) 6m18.298930604s ago: executing program 34 (id=3619): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000080)=""/192, 0xc0) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r1, 0x0, 0x100100, 0x7fff) 12.203952026s ago: executing program 3 (id=4758): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose4/duplex\x00', 0x0, 0x0) close_range$auto(0x0, 0x1c94, 0x2) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) write$auto(0x3, 0x0, 0xfffffdef) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x80000008) close_range$auto(0x2, 0x8000, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="00012dbd7000fbdbdf2504000000af000280733a1c8a3cf7a0b525c7017d258b3527268b4b499bdddf60a024558f280ec3c3d03af93178fe9d5c5f5142b352f23122f048104602d507fc20c0cff5ca9b5a0dfda9ade24ae25759af18db255417db4cacc389db7a9dce9e5ad4a5aadd742d3afeeae355ff321da753b6b22447a4024b41f94b42b394db3bcb85fb2996493bb4323a10271a41cdc000de737d01302e11c791c43ebc5a28b1b287634fd70dd8f1becd81fd05026bfa4d7b4500"], 0xc4}, 0x1, 0x0, 0x0, 0x24000000}, 0x4041) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:03.0/rescan\x00', 0xa901, 0x0) write$auto(r1, &(0x7f0000000440)='7\x00\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xbap\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV\x94R+\x94s\x84\xa4\xd4M\xa9\xea\\Vt\xde\xedS\xf8?\x91\xef\xb3 4^\xc9DO\x88Er\xb5\x82b\x8f\xfcd\xe3\x81\xf6\xe4\x16\xe1\x15\xaf\xf2q\xc41\xf5-\xcc\xcfj\x94\xce\xc2>\t=\xe5\"a\xde\x18\xd8\xe8', 0xc64) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000000), r0) 11.599566976s ago: executing program 3 (id=4762): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x4, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x1, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x4, 0x40009, 0xdf, 0xd11d, r0, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x7e) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setsockopt$auto(r1, 0x0, 0x12, 0x0, 0xa4) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x5}, 0x6, 0xa, 0x9) r2 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(r2, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r2) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x4, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x7ffc) 10.09456105s ago: executing program 0 (id=4767): capset$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x0, &(0x7f0000000040)={[0xb, 0x4, 0x34, 0x9, 0x5, 0x1, 0xa, 0x6, 0x5, 0x400000000001, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyqd\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b67, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) socket(0x11, 0x1, 0x87) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000180)="285ecf7e037b55e1ab7a4f76992f65c6415bf83a1dbdf2c6c5e006b2e5e027c00f96dad6274a64b2878a42144a92217419d1586fc6d20bdf574fae2b958d59a2518677c559eba44de9112cf6c1fa7f9f93f6fd92bc4e4c39199566e6357935fffc05c8b7523b36cd1db40563ab0d5ef018172ca9860267e22834fb3e01c71b86121c9b09f81877d895ba10c871673dc023c9a133074d031b377b9b1c638b2450d6e4") ioctl$auto(r2, 0x541c, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) prctl$auto(0x5, 0x2, 0x0, 0x0, 0x8) bind$auto(0x3, 0x0, 0x6c) socket(0x1f, 0x80000, 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20000000000003, 0xb06, 0x18, 0x2, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@typed={0xfffffffffffffe10, 0x88, 0x0, 0x0, @u64=0xffffffffffffffff}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800) 8.430121134s ago: executing program 0 (id=4771): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/dmmidi2\x00', 0xd8502, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) io_uring_setup$auto(0x101, &(0x7f0000000080)={0xffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x4], {0x6, 0x9, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x5, 0x40, 0x76c5, 0x8, 0x100000000}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x5, &(0x7f0000000100)={&(0x7f0000001180)="08c76e8b5983716407ba42ceecf8476b45f3ea8cc4c75b6d19d8bd3d365aff2868f172a4b67847156e7a373d89df495a27ee2f19d46009b1ff09f65abedf1c26152510c20029844a69e84cdd38c6cb582c32aafe511771791701632240d9ce752a18dfb15c1bc7090f13da4dd5af4477605ad0336ec875b85143eff341ef73bf28ce388a2ebcc3f416d20dcebeb34b4eeb39e3756d5dde0de92fb0ad0adffc1d66b970d19014efe339ae79ee77c6688307e9285bb660cfa7bd481c087916f91c30", 0xfc2}, 0x2, &(0x7f0000001100), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto(r0, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x10000, 0x1, 0x3, 0x5, 0x0, 0xee00, 0x0, 0x8, 0x8001, 0x43, 0x0, 0x26e2de87, 0xa, 0x9, 0x5, 0x7f, 0x5}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) pread64$auto(r2, 0x0, 0x3, 0x1000007ffe) keyctl$auto(0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) madvise$auto(0x6, 0xc, 0x1a) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) 6.39647565s ago: executing program 0 (id=4780): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x2, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r3, 0xa0) read$auto_l2cap_debugfs_fops_(r2, &(0x7f0000000240)=""/177, 0xb1) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) 6.199011089s ago: executing program 3 (id=4781): capset$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyqd\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b67, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x795800, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 5.351822941s ago: executing program 3 (id=4784): open(0x0, 0x10ba00, 0x114) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x1, 0x9, 0xa) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) sendfile$auto(r1, r1, &(0x7f0000000280), 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0xb) add_key$auto(0x0, 0x0, 0x0, 0x1, 0x8010) msgget$auto(0x0, 0x77d9) r2 = clone3$auto(&(0x7f0000000040)={0x7, 0x1000, 0xe, 0x3ff, 0x7, 0x3, 0x7f, 0xffff, 0x7, 0x200, 0x4}, 0xfff) r3 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x7, 0x1, 0xdd, @_sigpoll={0x0, r0}}}, 0x6, &(0x7f0000000140)={{0x8, 0x9}, {0x7, 0x80000000}, 0x2, 0xffffffffffffffff, 0x3, 0x1, 0x480, 0x100000001, 0x1, 0x46, 0xbb04, 0x4, 0x3, 0x5, 0x8, 0x9}) tgkill$auto_SIGCONT(r2, r3, 0x12) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x8, 0x19f6, 0x3a42}, &(0x7f0000000200)=0x2c, &(0x7f0000000240)=0x9, 0x0, 0xe94, 0x5, 0x3, 0xdd0, 0x84c, 0x4, 0x6, @inferred=r2, @raw=0x1}) fchown$auto(r1, r4, 0xee00) close_range$auto(0x2, 0x8, 0x0) 5.290949692s ago: executing program 5 (id=4785): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) read$auto(r0, 0x0, 0x1f43) 5.190742265s ago: executing program 6 (id=4786): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8000008, 0x7, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x7ff, 0x200000100103}) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000100)={&(0x7f0000000080), 0x8}, 0xc9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/system/memory/memory0/phys_device\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) r5 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) 4.912179771s ago: executing program 6 (id=4787): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) r0 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto_proc_fault_inject_operations_base(r0, 0x0, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) read$auto(0x3, 0x0, 0x18) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80a86f3d, r1) 4.750240685s ago: executing program 5 (id=4788): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/snd/pcmC1D0p\x00', 0x80000, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r0, 0xc0844123, &(0x7f0000000000)={0x3, @status={0xe93f, 0x0, 0x3, 0x4, 0x1, 0x2df, 0x7ff, 0xccf6}, @reserved="9d92f5c7f63e1053e7ca4e6b87cf17e2e0a0810a15882ffcb924e8313e01a3be43889309f30d430100000000000080d7a49a1d43cf93c72f0bad22eb7800"}) r1 = socket(0x10, 0x3, 0x6) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0xd, 0x4}, 0x6f3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x14, 0x0, 0x6) read$auto(0x3, 0x0, 0x80) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x8100) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_setup$auto(0xffff0001, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x30053e4d, 0x168c, 0x5) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="010027bd7000fbdbdf250100000014000c00fc010000000000000000000000000001080001007f000001"], 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x10008005) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r7 = socket(0x26, 0xa, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r7, @new_prog_fd=0x4, 0x4, @old_map_fd=r3}, 0xa3) 4.626084961s ago: executing program 3 (id=4789): r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000380), 0x261, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) fstatfs$auto(r1, &(0x7f0000000100)={0x7, 0x1, 0xfffffffffffffffe, 0x1, 0x1, 0x7, 0x9, {[0xa76d, 0x5b]}, 0x200009, 0x10001, 0x9, [0xa, 0x2, 0x8, 0x2]}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) mmap$auto(0x4, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffe) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x8a302, 0x0) socket(0x1a, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x2, 0x3, 0xffffffffffffffff, 0x1, 0x3) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000001c0)='/Eev/audio1\x00VI\x83\xbcp\x00\x00\x00\x00\x00\x00\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xc5D\xccK\x94c\x87\xf9\xe6\xcb\x9fF|B\xb6\x0e\xf9F\xc9\xc6\x8fa\x06\xaa()|\xcd\x17\x00\x91\xc0\xf1\xd2\xcfH\a7:h\xc3\xe8\xfe\xff]:\x7f\xfa\xd5+;\x977U\xca\xa3\x87\xebgY\x05\xdbf\x8e', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x4, 0x20000000) r3 = io_uring_setup$auto(0x7, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio1\x00', 0x101001, 0x0) ioctl$auto_SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SG_IO(r3, 0x2285, &(0x7f0000000080)) mbind$auto(0x5, 0x7, 0x6, 0x0, 0xffffffffffffff39, 0x3) mmap$auto(0x0, 0x200006, 0x6, 0x40ebf, r0, 0x80000001) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x23, 0x6, 0x0) 4.429819783s ago: executing program 5 (id=4790): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x9, 0x20007, 0xffffffffffff7fff, 0xeb1, 0xfffffffffffffffd, 0x40000007ffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8094}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) fsconfig$auto_HIDEPID_OFF(r2, 0x3ff, &(0x7f0000000280)='/sys/devices/virtual/net/nr12/address\x00', &(0x7f0000000380)="d06dcecd5b21824cba9e7ba66a3bc2fb9a1edf72dd77bb162f6c2df60e4417e2a9d33deb35d03f15a78958adc02a2a57bda02db8f9e74d", 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x274441, 0xc4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr12/address\x00', 0x101800, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001f40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c190000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="618014f596cc117fd3a6cf52a92614000d87023f0f53837b04a6df2cc85d963084aded25d2219d5792a9238d623828dd26e7de75040e863357c6b9ebb80738798df375194e8c8f3dec150ecd1d8c96c6aec7678ad6541ba5307a12b413e5d5e74e410c82aaf3fbe01eb29fcdd1c341b89f42ceba834d7cdf0fb835c8fca8ffb9dff3d54b9083cd85451f6aeb6d648c821a3544fa35aa09c232767569873623cf16f8908bb80fd390731b7b5f877717c08b0ac5d383c9b293aa88a3560000006c00018008000100", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0040000380e691554aef2f32b742c17edc6bf9c5abf1ebd8e1bc22abc878faf21e9a8d4265b3da96c5322f5348876fe29c205d675da56ccf9931bc2064748dffb00c0003800800ad80040009804801038008004f00", @ANYRES32=0x0, @ANYBLOB="3b01f78004002480849bba0a122c2b927b33f669fcf3d17d55ddb84263a601206acccfc776b8fb0c00d40000000000000000000800e600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000000080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000"], 0x192c}, 0x1, 0x0, 0x0, 0x2000004}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x200}, 0x800000007) ioperm$auto(0x7, 0x6, 0x2) capset$auto(&(0x7f0000000040)={0x80}, &(0x7f00000001c0)={0x769, 0xc, 0x1}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x2d022000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.261118574s ago: executing program 6 (id=4791): ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x98, 0x81}, 0x9, 0x0, 0x0, 0x8) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) epoll_create$auto(0x3e) r1 = gettid() ioctl$auto_TIOCGICOUNT2(0xffffffffffffffff, 0x545d, &(0x7f00000001c0)) socket(0x27, 0x2, 0x5) r2 = socket(0x29, 0x2, 0x5) connect$auto(r2, 0x0, 0x284) read$auto(0xffffffffffffffff, 0x0, 0xffffff7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) tkill$auto(r1, 0x7) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x9, 0x3, 0xffffffffffffffff, 0xd5, 0x2a11) 3.252741866s ago: executing program 5 (id=4792): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x10, 0xa, 0x0, 0x7, 0x2) r1 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r1, 0x106, 0xd, 0x0, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) socket(0x23, 0x5, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, &(0x7f0000000240)='!\x00', {0x1003, 0x9b72}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x1fe, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 3.159960681s ago: executing program 6 (id=4793): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) mmap$auto(0x2, 0x40000000008, 0x6, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x8000) socket(0x11, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x103082, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x5c8) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xe1, 0x400, 0x9}]}) 3.045426499s ago: executing program 3 (id=4794): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0x1, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x44100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sysfs$auto(0x4, 0x6, 0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x1000, 0x7, 0x0, 0xff, "1200000000000040000000e7"}) close_range$auto(0x2, 0x8, 0x0) 2.63224545s ago: executing program 0 (id=4795): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) setuid$auto(0x1f) ioctl$auto_SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyt3\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00", @ANYRES16=r2], 0x24}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x358, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_MAC={0x6b, 0x6, "b756fcf5bce278b03fa95162a8383521cde404056cd4a154e5f10b6abbed0a8b2ae42ea92eac88c88b8a6a4843b16c064f08e1e7cc40720cce46656b3699f51f54c65b6822b3aeecb24d66b0cd2d6d4a9f5976668c1f3b3a18b54ca3eca22407de6fb21556957c"}, @NL80211_ATTR_STA_FLAGS2={0x76, 0x43, "4788ae41388ee58ef53826991fda0684800034220c1ae9f269478857d48c9d2bdda6a4a5512b746fd08b33d51f40fb8f17b7ce7542db252e096c712cbbb8d52538352690e1094e86ca686556e424f9732393bc12b07fb2d6b7f72084b30c748da45aef2c532950383a8f3ca9b6729c750fe0"}, @NL80211_ATTR_CSA_IES={0x5c, 0xb9, 0x0, 0x1, [@typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x129, 0x0, 0x0, @u32=0x2000}, @generic="4013e2a6d9f5b2d2dd15a8992cf362a4f56fe23b4fe6090a5676129a6d0923f1aceb75e41ee90ece5ce2305ac29972a6e01d1f6f541dae8d11d5ece4"]}, @NL80211_ATTR_AUTH_DATA={0x100, 0x9c, "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"}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf5, 0x7d, 0x0, 0x1, [@generic="f1a3e5971e101d2042c522666488883c3538e65632917703b4bae8349dce49490592a2e479d5834fa22fb91b1f994953fc2913f95919d1802bfa535630f3fdc5c0d0f63d00f839b63f3afcae88b15707c6e06b1248f96811d5373c380c298db472ef6e9903d12b43ee4f2671a4706ab58f879a71ce4ca4f3eeee9ff611fc01da0026702c103afb55302599462aee74352cf40863046b364df5f3b1f439b073deb7304e9f7c972dec3ba6814facc862b0a95bbf520bc825f91d77bf3d7fd6a553c3a48055a288da901e53ec44780316bc698652a67edf6a5cf131bfedd10ae46832f16168b03edb1793974aefb4f59ff704"]}]}, 0x358}, 0x1, 0x0, 0x0, 0x44080}, 0x5001) 1.811713351s ago: executing program 5 (id=4797): signalfd$auto(0xffffffff, 0x0, 0x8) openat$dir(0xffffffffffffff9c, 0x0, 0x840, 0xc) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) clone3$auto(0x0, 0x32e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x101402, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/3/affinity_hint\x00', 0x2080, 0x0) read$auto(r1, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0xc9e3) read$auto_lsm_ops_inode(r0, &(0x7f0000000080)=""/170, 0xaa) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto(r2, 0x400c4d06, r2) getrandom$auto(0x0, 0x6000000, 0x3) 1.021675714s ago: executing program 0 (id=4798): open(0x0, 0x10ba00, 0x114) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x1, 0x9, 0xa) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) sendfile$auto(r1, r1, &(0x7f0000000280), 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0xb) add_key$auto(0x0, 0x0, 0x0, 0x1, 0x8010) msgget$auto(0x0, 0x77d9) r2 = clone3$auto(&(0x7f0000000040)={0x7, 0x1000, 0xe, 0x3ff, 0x7, 0x3, 0x7f, 0xffff, 0x7, 0x200, 0x4}, 0xfff) r3 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x7, 0x1, 0xdd, @_sigpoll={0x0, r0}}}, 0x6, &(0x7f0000000140)={{0x8, 0x9}, {0x7, 0x80000000}, 0x2, 0xffffffffffffffff, 0x3, 0x1, 0x480, 0x100000001, 0x1, 0x46, 0xbb04, 0x4, 0x3, 0x5, 0x8, 0x9}) tgkill$auto_SIGCONT(r2, r3, 0x12) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x8, 0x19f6, 0x3a42}, &(0x7f0000000200)=0x2c, &(0x7f0000000240)=0x9, 0x0, 0xe94, 0x5, 0x3, 0xdd0, 0x84c, 0x4, 0x6, @inferred=r2, @raw=0x1}) fchown$auto(r1, r4, 0xee00) close_range$auto(0x2, 0x8, 0x0) 900.690584ms ago: executing program 6 (id=4799): r0 = socket(0x10, 0x3, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0xd, 0x4}, 0x6f3) pipe$auto(0x0) socketpair$auto(0xf1c, 0xf, 0xff, &(0x7f00000000c0)=0x6) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000001800), 0x300, 0x0) ioctl$auto_SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001840)) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) 497.334719ms ago: executing program 5 (id=4800): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) r0 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto_proc_fault_inject_operations_base(r0, 0x0, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) read$auto(0x3, 0x0, 0x18) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80a86f3d, r1) 379.259825ms ago: executing program 6 (id=4801): ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x98, 0x81}, 0x9, 0x0, 0x0, 0x8) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) epoll_create$auto(0x3e) r1 = gettid() ioctl$auto_TIOCGICOUNT2(0xffffffffffffffff, 0x545d, &(0x7f00000001c0)) socket(0x27, 0x2, 0x5) r2 = socket(0x29, 0x2, 0x5) connect$auto(r2, 0x0, 0x284) read$auto(0xffffffffffffffff, 0x0, 0xffffff7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) tkill$auto(r1, 0x7) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x9, 0x3, 0xffffffffffffffff, 0xd5, 0x2a11) 0s ago: executing program 0 (id=4802): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) unshare$auto(0x40000080) r1 = socket(0x10, 0x2, 0x0) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0x7fb, 0x80000011, 0x2, 0x208000) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0xfffffffffffffffe, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x81, 0x0, 0x0) mincore$auto(0x5, 0x5, 0x0) mmap$auto(0x3, 0x7f, 0x2, 0xffffffffffffffff, r0, 0x4000000000000004) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x4b67, 0x38) kernel console output (not intermixed with test programs): 0] should_failslab+0xc2/0x120 [ 1389.452882][T25370] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1389.452916][T25370] ? lockdep_init_map_type+0x5c/0x280 [ 1389.452947][T25370] ? __alloc_workqueue+0x506/0x1810 [ 1389.452980][T25370] __alloc_workqueue+0x506/0x1810 [ 1389.453014][T25370] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1389.453050][T25370] alloc_workqueue+0xd2/0x200 [ 1389.453078][T25370] ? __pfx_alloc_workqueue+0x10/0x10 [ 1389.453114][T25370] ? __pfx___debug_object_init+0x10/0x10 [ 1389.453155][T25370] nci_register_device+0x394/0xb80 [ 1389.453190][T25370] ? __pfx_nci_register_device+0x10/0x10 [ 1389.453227][T25370] ? lockdep_init_map_type+0x5c/0x280 [ 1389.453263][T25370] virtual_ncidev_open+0x141/0x220 [ 1389.453293][T25370] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1389.453321][T25370] misc_open+0x35a/0x420 [ 1389.453350][T25370] ? __pfx_misc_open+0x10/0x10 [ 1389.453377][T25370] chrdev_open+0x231/0x6a0 [ 1389.453413][T25370] ? __pfx_apparmor_file_open+0x10/0x10 [ 1389.453442][T25370] ? __pfx_chrdev_open+0x10/0x10 [ 1389.453481][T25370] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1389.453518][T25370] do_dentry_open+0x744/0x1c10 [ 1389.453555][T25370] ? __pfx_chrdev_open+0x10/0x10 [ 1389.453598][T25370] vfs_open+0x82/0x3f0 [ 1389.453626][T25370] path_openat+0x1de4/0x2cb0 [ 1389.453670][T25370] ? __pfx_path_openat+0x10/0x10 [ 1389.453709][T25370] ? __lock_acquire+0xb8a/0x1c90 [ 1389.453743][T25370] do_filp_open+0x20b/0x470 [ 1389.453777][T25370] ? __pfx_do_filp_open+0x10/0x10 [ 1389.453831][T25370] ? alloc_fd+0x471/0x7d0 [ 1389.453870][T25370] do_sys_openat2+0x11b/0x1d0 [ 1389.453896][T25370] ? __pfx_do_sys_openat2+0x10/0x10 [ 1389.453924][T25370] ? find_held_lock+0x2b/0x80 [ 1389.453954][T25370] __x64_sys_openat+0x174/0x210 [ 1389.454000][T25370] ? __pfx___x64_sys_openat+0x10/0x10 [ 1389.454054][T25370] do_syscall_64+0xcd/0x490 [ 1389.454093][T25370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.454117][T25370] RIP: 0033:0x7f788b58e929 [ 1389.454141][T25370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.454183][T25370] RSP: 002b:00007f788c3ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1389.454222][T25370] RAX: ffffffffffffffda RBX: 00007f788b7b5fa0 RCX: 00007f788b58e929 [ 1389.454238][T25370] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1389.454253][T25370] RBP: 00007f788b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1389.454268][T25370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1389.454283][T25370] R13: 0000000000000000 R14: 00007f788b7b5fa0 R15: 00007ffd1302cd28 [ 1389.454312][T25370] [ 1390.148613][T25382] netlink: 'syz.5.3901': attribute type 1 has an invalid length. [ 1390.939489][T22390] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 1391.182457][T25397] FAULT_INJECTION: forcing a failure. [ 1391.182457][T25397] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.371077][T25397] CPU: 0 UID: 0 PID: 25397 Comm: syz.3.3905 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1391.371116][T25397] Tainted: [U]=USER [ 1391.371124][T25397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1391.371138][T25397] Call Trace: [ 1391.371146][T25397] [ 1391.371155][T25397] dump_stack_lvl+0x16c/0x1f0 [ 1391.371195][T25397] should_fail_ex+0x512/0x640 [ 1391.371230][T25397] ? fs_reclaim_acquire+0xae/0x150 [ 1391.371260][T25397] should_failslab+0xc2/0x120 [ 1391.371281][T25397] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1391.371318][T25397] ? security_inode_alloc+0x3b/0x2b0 [ 1391.371347][T25397] security_inode_alloc+0x3b/0x2b0 [ 1391.371373][T25397] inode_init_always_gfp+0xce4/0x1030 [ 1391.371410][T25397] alloc_inode+0x86/0x240 [ 1391.371434][T25397] sock_alloc+0x40/0x280 [ 1391.371457][T25397] sock_create_lite+0x82/0x120 [ 1391.371482][T25397] __netlink_kernel_create+0xbd/0x750 [ 1391.371510][T25397] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1391.371538][T25397] ? proc_create_reg+0xe3/0x180 [ 1391.371562][T25397] xfrm_user_net_init+0xc6/0x190 [ 1391.371591][T25397] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 1391.371620][T25397] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 1391.371649][T25397] ? __pfx_tls_init_net+0x10/0x10 [ 1391.371687][T25397] ? tls_proc_init+0x58/0x70 [ 1391.371716][T25397] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 1391.371743][T25397] ops_init+0x1df/0x5f0 [ 1391.371767][T25397] setup_net+0x1ff/0x510 [ 1391.371787][T25397] ? lockdep_init_map_type+0x5c/0x280 [ 1391.371819][T25397] ? __pfx_setup_net+0x10/0x10 [ 1391.371843][T25397] ? debug_mutex_init+0x37/0x70 [ 1391.371868][T25397] copy_net_ns+0x2a6/0x5f0 [ 1391.371895][T25397] create_new_namespaces+0x3ea/0xa90 [ 1391.371927][T25397] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1391.371956][T25397] ksys_unshare+0x45b/0xa40 [ 1391.371994][T25397] ? __pfx_ksys_unshare+0x10/0x10 [ 1391.372028][T25397] ? syscall_user_dispatch+0x78/0x140 [ 1391.372072][T25397] __x64_sys_unshare+0x31/0x40 [ 1391.372103][T25397] do_syscall_64+0xcd/0x490 [ 1391.372142][T25397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.372165][T25397] RIP: 0033:0x7efef458e929 [ 1391.372184][T25397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.372207][T25397] RSP: 002b:00007efef534f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1391.372228][T25397] RAX: ffffffffffffffda RBX: 00007efef47b6080 RCX: 00007efef458e929 [ 1391.372244][T25397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1391.372259][T25397] RBP: 00007efef4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1391.372273][T25397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.372288][T25397] R13: 0000000000000000 R14: 00007efef47b6080 R15: 00007fffa8dd4208 [ 1391.372317][T25397] [ 1392.495837][T22390] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1392.599342][T25415] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1392.637562][T25419] FAULT_INJECTION: forcing a failure. [ 1392.637562][T25419] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.686445][T25406] zswap: compressor not available [ 1392.726920][T25419] CPU: 0 UID: 0 PID: 25419 Comm: syz.3.3908 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1392.726960][T25419] Tainted: [U]=USER [ 1392.726968][T25419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1392.726983][T25419] Call Trace: [ 1392.726991][T25419] [ 1392.727000][T25419] dump_stack_lvl+0x16c/0x1f0 [ 1392.727043][T25419] should_fail_ex+0x512/0x640 [ 1392.727078][T25419] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1392.727119][T25419] should_failslab+0xc2/0x120 [ 1392.727142][T25419] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1392.727177][T25419] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 1392.727211][T25419] ? __d_alloc+0x31/0xaa0 [ 1392.727251][T25419] __d_alloc+0x31/0xaa0 [ 1392.727285][T25419] ? look_up_lock_class+0x59/0x150 [ 1392.727343][T25419] d_alloc_pseudo+0x1c/0xc0 [ 1392.727369][T25419] alloc_file_pseudo+0xcf/0x230 [ 1392.727395][T25419] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1392.727418][T25419] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1392.727459][T25419] create_pipe_files+0x364/0x930 [ 1392.727499][T25419] do_pipe2+0xaf/0x1c0 [ 1392.727534][T25419] ? __pfx_do_pipe2+0x10/0x10 [ 1392.727570][T25419] ? xfd_validate_state+0x61/0x180 [ 1392.727599][T25419] ? __pfx_ksys_write+0x10/0x10 [ 1392.727638][T25419] __x64_sys_pipe+0x33/0x50 [ 1392.727674][T25419] do_syscall_64+0xcd/0x490 [ 1392.727716][T25419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.727740][T25419] RIP: 0033:0x7efef458e929 [ 1392.727777][T25419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1392.727801][T25419] RSP: 002b:00007efef5370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1392.727824][T25419] RAX: ffffffffffffffda RBX: 00007efef47b5fa0 RCX: 00007efef458e929 [ 1392.727841][T25419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1392.727863][T25419] RBP: 00007efef4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1392.727878][T25419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1392.727893][T25419] R13: 0000000000000000 R14: 00007efef47b5fa0 R15: 00007fffa8dd4208 [ 1392.727924][T25419] [ 1393.002553][T25417] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1393.085674][T22390] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1393.886571][T25421] kafs: addr_prefs: Too many elements in string [ 1396.074192][T25463] netlink: 'syz.0.3923': attribute type 11 has an invalid length. [ 1397.886489][T25481] zswap: compressor not available [ 1397.941896][T25479] FAULT_INJECTION: forcing a failure. [ 1397.941896][T25479] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.124613][T25479] CPU: 0 UID: 0 PID: 25479 Comm: syz.0.3918 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1398.124655][T25479] Tainted: [U]=USER [ 1398.124664][T25479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1398.124679][T25479] Call Trace: [ 1398.124687][T25479] [ 1398.124696][T25479] dump_stack_lvl+0x16c/0x1f0 [ 1398.124742][T25479] should_fail_ex+0x512/0x640 [ 1398.124777][T25479] ? __kmalloc_noprof+0xbf/0x510 [ 1398.124815][T25479] ? lsm_blob_alloc+0x68/0x90 [ 1398.124850][T25479] should_failslab+0xc2/0x120 [ 1398.124873][T25479] __kmalloc_noprof+0xd2/0x510 [ 1398.124914][T25479] lsm_blob_alloc+0x68/0x90 [ 1398.124951][T25479] security_sk_alloc+0x30/0x270 [ 1398.124978][T25479] sk_prot_alloc+0xfb/0x2a0 [ 1398.125007][T25479] sk_alloc+0x36/0xc20 [ 1398.125043][T25479] inet6_create+0x381/0x1300 [ 1398.125068][T25479] ? inet6_create+0x7f/0x1300 [ 1398.125094][T25479] __sock_create+0x335/0x8d0 [ 1398.125128][T25479] inet_ctl_sock_create+0x94/0x230 [ 1398.125161][T25479] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 1398.125193][T25479] ? ndisc_net_init+0x1bc/0x250 [ 1398.125222][T25479] ? __pfx_ndisc_net_init+0x10/0x10 [ 1398.125253][T25479] ? __pfx_igmp6_net_init+0x10/0x10 [ 1398.125282][T25479] igmp6_net_init+0x35/0x470 [ 1398.125311][T25479] ? __pfx_igmp6_net_init+0x10/0x10 [ 1398.125339][T25479] ops_init+0x1df/0x5f0 [ 1398.125373][T25479] setup_net+0x1ff/0x510 [ 1398.125393][T25479] ? lockdep_init_map_type+0x5c/0x280 [ 1398.125427][T25479] ? __pfx_setup_net+0x10/0x10 [ 1398.125452][T25479] ? debug_mutex_init+0x37/0x70 [ 1398.125478][T25479] copy_net_ns+0x2a6/0x5f0 [ 1398.125506][T25479] create_new_namespaces+0x3ea/0xa90 [ 1398.125540][T25479] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1398.125568][T25479] ksys_unshare+0x45b/0xa40 [ 1398.125601][T25479] ? __pfx_ksys_unshare+0x10/0x10 [ 1398.125634][T25479] ? xfd_validate_state+0x61/0x180 [ 1398.125674][T25479] __x64_sys_unshare+0x31/0x40 [ 1398.125706][T25479] do_syscall_64+0xcd/0x490 [ 1398.125746][T25479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.125770][T25479] RIP: 0033:0x7f788b58e929 [ 1398.125790][T25479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1398.125814][T25479] RSP: 002b:00007f788c3cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1398.125837][T25479] RAX: ffffffffffffffda RBX: 00007f788b7b6080 RCX: 00007f788b58e929 [ 1398.125854][T25479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1398.125869][T25479] RBP: 00007f788b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1398.125884][T25479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.125899][T25479] R13: 0000000000000000 R14: 00007f788b7b6080 R15: 00007ffd1302cd28 [ 1398.125930][T25479] [ 1398.126007][T25479] Failed to initialize the IGMP6 control socket (err -105) [ 1398.616427][T25489] netlink: 'syz.3.3920': attribute type 16 has an invalid length. [ 1398.635621][T25489] netlink: 'syz.3.3920': attribute type 17 has an invalid length. [ 1398.660766][T25489] netlink: 'syz.3.3920': attribute type 19 has an invalid length. [ 1398.680768][T25489] netlink: 162 bytes leftover after parsing attributes in process `syz.3.3920'. [ 1399.066062][T25501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 1399.470762][T25503] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91 [ 1404.329511][T25537] MTRR 1 not used [ 1404.798026][T15599] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1404.901409][T25548] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 1405.002598][T25552] netlink: 'syz.3.3929': attribute type 11 has an invalid length. [ 1406.218008][T25559] zswap: compressor not available [ 1406.733878][T25578] block2mtd: illegal erase size [ 1406.752572][T15599] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1406.878188][T25573] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 1408.543814][T15599] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1408.703520][T25597] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1408.718263][T15599] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1409.717068][T25619] FAULT_INJECTION: forcing a failure. [ 1409.717068][T25619] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.901352][T25619] CPU: 0 UID: 0 PID: 25619 Comm: syz.5.3945 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1409.901394][T25619] Tainted: [U]=USER [ 1409.901402][T25619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1409.901417][T25619] Call Trace: [ 1409.901427][T25619] [ 1409.901437][T25619] dump_stack_lvl+0x16c/0x1f0 [ 1409.901479][T25619] should_fail_ex+0x512/0x640 [ 1409.901513][T25619] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1409.901554][T25619] should_failslab+0xc2/0x120 [ 1409.901576][T25619] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1409.901615][T25619] ? lockdep_init_map_type+0x5c/0x280 [ 1409.901648][T25619] ? __d_alloc+0x31/0xaa0 [ 1409.901690][T25619] __d_alloc+0x31/0xaa0 [ 1409.901731][T25619] d_alloc_pseudo+0x1c/0xc0 [ 1409.901758][T25619] alloc_file_pseudo+0xcf/0x230 [ 1409.901786][T25619] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1409.901813][T25619] ? alloc_fd+0x471/0x7d0 [ 1409.901850][T25619] sock_alloc_file+0x50/0x210 [ 1409.901874][T25619] __sys_socket+0x1c0/0x260 [ 1409.901904][T25619] ? __pfx___sys_socket+0x10/0x10 [ 1409.901933][T25619] ? xfd_validate_state+0x61/0x180 [ 1409.901972][T25619] __x64_sys_socket+0x72/0xb0 [ 1409.902000][T25619] ? lockdep_hardirqs_on+0x7c/0x110 [ 1409.902036][T25619] do_syscall_64+0xcd/0x490 [ 1409.902077][T25619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.902102][T25619] RIP: 0033:0x7f6e7b78e929 [ 1409.902122][T25619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.902146][T25619] RSP: 002b:00007f6e7c52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1409.902168][T25619] RAX: ffffffffffffffda RBX: 00007f6e7b9b6080 RCX: 00007f6e7b78e929 [ 1409.902184][T25619] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1409.902199][T25619] RBP: 00007f6e7b810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1409.902214][T25619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.902229][T25619] R13: 0000000000000000 R14: 00007f6e7b9b6080 R15: 00007ffcb0360638 [ 1409.902259][T25619] [ 1410.113415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1412.658864][T15599] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1416.771405][T25682] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3961'. [ 1418.175153][T25700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3966'. [ 1419.155919][T25691] snd_aloop snd_aloop.0: control 1:6:-2147483647:¢¸è_ÅheºRŸª:0 is already present [ 1419.489560][T25714] zswap: compressor not available [ 1422.189532][T25753] MTRR 1 not used [ 1423.364160][T25767] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92 [ 1424.159466][T25769] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93 [ 1424.525381][T25783] Invalid ELF header magic: != ELF [ 1426.651198][T25787] snd_aloop snd_aloop.0: control 1:6:-2147483647:¢¸è_ÅheºRŸª:0 is already present [ 1428.493655][T25814] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3990'. [ 1431.193571][T25830] kexec: Could not allocate control_code_buffer [ 1431.401241][T15599] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1433.570567][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.582478][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1436.492392][T25866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1436.502995][T25866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1436.539202][T25866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1436.575529][T25866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1436.591432][T15599] Bluetooth: hci1: command 0x0c1a tx timeout [ 1436.672161][T25891] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1437.153128][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1438.462895][T25916] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94 [ 1438.514250][T15599] Bluetooth: hci0: command 0x0c1a tx timeout [ 1438.594858][T15599] Bluetooth: hci3: command 0x0c1a tx timeout [ 1438.600974][T22390] Bluetooth: hci2: command 0x0406 tx timeout [ 1438.729456][T15599] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1438.840576][T25935] openvswitch: netlink: Key type 143 is out of range max 32 [ 1439.086282][T25918] zswap: compressor not available [ 1439.395900][T25932] zswap: compressor not available [ 1441.242068][T25958] sp0: Synchronizing with TNC [ 1443.516786][T26003] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4023'. [ 1443.580833][T15599] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1443.613703][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1444.763658][T26023] binder: 26020:26023 ioctl 600004 6 returned -22 [ 1446.381471][ T30] audit: type=1806 audit(4294968666.252:128): xattr="" res=-22 [ 1447.880617][T26075] XFS: irix_symlink_mode sysctl option is deprecated. [ 1448.565793][T26081] Invalid ELF header magic: != ELF [ 1448.670136][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1448.926790][T26093] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4041'. [ 1449.585838][ T30] audit: type=1806 audit(4294968669.450:129): xattr="" res=-22 [ 1449.626807][T15599] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1450.760439][T26111] zswap: compressor not available [ 1451.271714][T26128] XFS: irix_symlink_mode sysctl option is deprecated. [ 1452.465974][T26132] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1452.936726][T26152] input: jJǸ-¶š9ã%vø“û¨lÐQ  J8fi‘ as /devices/virtual/input/input95 [ 1455.380184][T26183] random: crng reseeded on system resumption [ 1456.512941][T26183] Restarting kernel threads ... [ 1456.612055][T26183] Done restarting kernel threads. [ 1456.637657][T26179] zswap: compressor not available [ 1459.390165][T26217] vivid-009: ================= START STATUS ================= [ 1459.443010][T26217] vivid-009: Enable Output Cropping: true [ 1459.476206][T26217] vivid-009: Enable Output Composing: true [ 1459.571763][T26217] vivid-009: Enable Output Scaler: true [ 1459.578127][T26217] vivid-009: Tx RGB Quantization Range: Automatic [ 1459.718965][T26217] vivid-009: Transmit Mode: HDMI [ 1459.810056][T26217] vivid-009: Hotplug Present: 0x00000000 [ 1459.891443][T26217] vivid-009: RxSense Present: 0x00000000 [ 1459.939684][T26217] vivid-009: EDID Present: 0x00000000 [ 1459.979708][T26217] vivid-009: ================== END STATUS ================== [ 1460.062234][T15599] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1461.176659][T26242] Invalid ELF header magic: != ELF [ 1461.816772][T26253] zswap: compressor not available [ 1463.219913][T26267] vivid-003: ================= START STATUS ================= [ 1463.306772][T26267] vivid-003: Radio HW Seek Mode: Bounded [ 1463.312480][T26267] vivid-003: Radio Programmable HW Seek: false [ 1463.518194][T26267] vivid-003: RDS Rx I/O Mode: Block I/O [ 1463.557921][T26267] vivid-003: Generate RBDS Instead of RDS: false [ 1463.638184][T26267] vivid-003: RDS Reception: true [ 1463.718515][T26267] vivid-003: RDS Program Type: 0 inactive [ 1463.782855][T26267] vivid-003: RDS PS Name: inactive [ 1463.848250][T26267] vivid-003: RDS Radio Text: inactive [ 1463.888733][T26267] vivid-003: RDS Traffic Announcement: false inactive [ 1463.925103][T26267] vivid-003: RDS Traffic Program: false inactive [ 1463.953427][T26267] vivid-003: RDS Music: false inactive [ 1463.983184][T26267] vivid-003: ================== END STATUS ================== [ 1464.026339][T26293] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4083'. [ 1464.157252][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1464.371593][T26298] FAULT_INJECTION: forcing a failure. [ 1464.371593][T26298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1464.440367][T26298] CPU: 0 UID: 0 PID: 26298 Comm: syz.6.4085 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1464.440414][T26298] Tainted: [U]=USER [ 1464.440423][T26298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1464.440438][T26298] Call Trace: [ 1464.440447][T26298] [ 1464.440456][T26298] dump_stack_lvl+0x16c/0x1f0 [ 1464.440498][T26298] should_fail_ex+0x512/0x640 [ 1464.440538][T26298] should_fail_alloc_page+0xe7/0x130 [ 1464.440564][T26298] prepare_alloc_pages+0x3c2/0x610 [ 1464.440592][T26298] ? rcu_is_watching+0x12/0xc0 [ 1464.440619][T26298] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1464.440671][T26298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1464.440721][T26298] ? rcu_is_watching+0x12/0xc0 [ 1464.440744][T26298] ? trace_kmalloc+0x2b/0xd0 [ 1464.440767][T26298] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1464.440807][T26298] ? __alloc_skb+0x166/0x380 [ 1464.440840][T26298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1464.440878][T26298] ? policy_nodemask+0xea/0x4e0 [ 1464.440920][T26298] alloc_pages_mpol+0x1fb/0x550 [ 1464.440944][T26298] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1464.440965][T26298] ? __pfx___alloc_skb+0x10/0x10 [ 1464.440998][T26298] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1464.441030][T26298] alloc_pages_noprof+0x131/0x390 [ 1464.441054][T26298] alloc_skb_with_frags+0x24a/0x860 [ 1464.441085][T26298] sock_alloc_send_pskb+0x7fb/0x990 [ 1464.441130][T26298] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1464.441163][T26298] ? __pfx___schedule+0x10/0x10 [ 1464.441202][T26298] ? find_held_lock+0x2b/0x80 [ 1464.441229][T26298] tun_get_user+0x502/0x3b80 [ 1464.441280][T26298] ? __pfx_tun_get_user+0x10/0x10 [ 1464.441317][T26298] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1464.441363][T26298] ? find_held_lock+0x2b/0x80 [ 1464.441392][T26298] ? tun_get+0x191/0x370 [ 1464.441440][T26298] tun_chr_write_iter+0xdc/0x210 [ 1464.441481][T26298] vfs_write+0x6c4/0x1150 [ 1464.441517][T26298] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1464.441561][T26298] ? __pfx_vfs_write+0x10/0x10 [ 1464.441592][T26298] ? find_held_lock+0x2b/0x80 [ 1464.441633][T26298] __x64_sys_pwrite64+0x1eb/0x250 [ 1464.441670][T26298] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1464.441716][T26298] do_syscall_64+0xcd/0x490 [ 1464.441756][T26298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.441781][T26298] RIP: 0033:0x7f198858e929 [ 1464.441801][T26298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1464.441824][T26298] RSP: 002b:00007f19894c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1464.441846][T26298] RAX: ffffffffffffffda RBX: 00007f19887b5fa0 RCX: 00007f198858e929 [ 1464.441863][T26298] RDX: 000000000000fdf3 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1464.441877][T26298] RBP: 00007f1988610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1464.441892][T26298] R10: 0000000000000039 R11: 0000000000000246 R12: 0000000000000000 [ 1464.441907][T26298] R13: 0000000000000000 R14: 00007f19887b5fa0 R15: 00007ffc927d3fb8 [ 1464.441936][T26298] [ 1468.484426][T26344] Invalid ELF header magic: != ELF [ 1470.071070][T26352] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4096'. [ 1471.615680][T26381] zswap: compressor not available [ 1471.899874][T26383] vivid-009: ================= START STATUS ================= [ 1471.976166][T26383] vivid-009: Enable Output Cropping: true [ 1472.067920][T26383] vivid-009: Enable Output Composing: true [ 1472.105955][T26383] vivid-009: Enable Output Scaler: true [ 1472.140317][T26383] vivid-009: Tx RGB Quantization Range: Automatic [ 1472.190179][T26383] vivid-009: Transmit Mode: HDMI [ 1472.279430][T26383] vivid-009: Hotplug Present: 0x00000000 [ 1472.336754][T26383] vivid-009: RxSense Present: 0x00000000 [ 1472.399643][T26395] FAULT_INJECTION: forcing a failure. [ 1472.399643][T26395] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.418252][T26383] vivid-009: EDID Present: 0x00000000 [ 1472.423686][T26383] vivid-009: ================== END STATUS ================== [ 1472.463217][T26395] CPU: 0 UID: 0 PID: 26395 Comm: syz.6.4104 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1472.463271][T26395] Tainted: [U]=USER [ 1472.463279][T26395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1472.463294][T26395] Call Trace: [ 1472.463302][T26395] [ 1472.463311][T26395] dump_stack_lvl+0x16c/0x1f0 [ 1472.463352][T26395] should_fail_ex+0x512/0x640 [ 1472.463386][T26395] ? fs_reclaim_acquire+0xae/0x150 [ 1472.463416][T26395] should_failslab+0xc2/0x120 [ 1472.463438][T26395] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1472.463474][T26395] ? security_inode_alloc+0x3b/0x2b0 [ 1472.463504][T26395] security_inode_alloc+0x3b/0x2b0 [ 1472.463530][T26395] inode_init_always_gfp+0xce4/0x1030 [ 1472.463568][T26395] alloc_inode+0x86/0x240 [ 1472.463592][T26395] path_from_stashed+0x2be/0xb00 [ 1472.463626][T26395] ? do_raw_spin_lock+0x12c/0x2b0 [ 1472.463666][T26395] ? __pfx_path_from_stashed+0x10/0x10 [ 1472.463702][T26395] ? do_raw_spin_unlock+0x172/0x230 [ 1472.463756][T26395] ns_get_path+0x5f/0x80 [ 1472.463787][T26395] proc_ns_get_link+0x121/0x260 [ 1472.463819][T26395] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1472.463854][T26395] ? atime_needs_update+0x8b/0x710 [ 1472.463881][T26395] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1472.463912][T26395] step_into+0x1a2c/0x2270 [ 1472.463948][T26395] ? __pfx_step_into+0x10/0x10 [ 1472.463976][T26395] ? find_held_lock+0x2b/0x80 [ 1472.464007][T26395] path_openat+0x6db/0x2cb0 [ 1472.464067][T26395] ? __pfx_path_openat+0x10/0x10 [ 1472.464103][T26395] ? __lock_acquire+0xb8a/0x1c90 [ 1472.464138][T26395] do_filp_open+0x20b/0x470 [ 1472.464173][T26395] ? __pfx_do_filp_open+0x10/0x10 [ 1472.464228][T26395] ? alloc_fd+0x471/0x7d0 [ 1472.464268][T26395] do_sys_openat2+0x11b/0x1d0 [ 1472.464294][T26395] ? __pfx_do_sys_openat2+0x10/0x10 [ 1472.464332][T26395] __x64_sys_openat+0x174/0x210 [ 1472.464359][T26395] ? __pfx___x64_sys_openat+0x10/0x10 [ 1472.464398][T26395] do_syscall_64+0xcd/0x490 [ 1472.464438][T26395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.464462][T26395] RIP: 0033:0x7f198858d290 [ 1472.464482][T26395] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1472.464506][T26395] RSP: 002b:00007f198949ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1472.464529][T26395] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f198858d290 [ 1472.464545][T26395] RDX: 0000000000000002 RSI: 00007f198949ffa0 RDI: 00000000ffffff9c [ 1472.464560][T26395] RBP: 00007f198949ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1472.464575][T26395] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1472.464593][T26395] R13: 0000000000000000 R14: 00007f19887b6080 R15: 00007ffc927d3fb8 [ 1472.464623][T26395] [ 1474.321530][T26409] netlink: 'syz.3.4108': attribute type 1 has an invalid length. [ 1474.409705][T26409] netlink: zone id is out of range [ 1474.414862][T26409] netlink: zone id is out of range [ 1474.491329][T26409] netlink: zone id is out of range [ 1474.491362][T26409] netlink: zone id is out of range [ 1474.491371][T26409] netlink: zone id is out of range [ 1474.491380][T26409] netlink: zone id is out of range [ 1474.491390][T26409] netlink: zone id is out of range [ 1474.491399][T26409] netlink: zone id is out of range [ 1474.491408][T26409] netlink: zone id is out of range [ 1474.491418][T26409] netlink: zone id is out of range [ 1477.173794][T26437] zswap: compressor not available [ 1477.638946][T26446] Invalid ELF header magic: != ELF [ 1478.310414][T26460] FAULT_INJECTION: forcing a failure. [ 1478.310414][T26460] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.357060][T26460] CPU: 0 UID: 0 PID: 26460 Comm: syz.5.4116 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1478.357102][T26460] Tainted: [U]=USER [ 1478.357111][T26460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1478.357125][T26460] Call Trace: [ 1478.357134][T26460] [ 1478.357143][T26460] dump_stack_lvl+0x16c/0x1f0 [ 1478.357192][T26460] should_fail_ex+0x512/0x640 [ 1478.357227][T26460] ? fs_reclaim_acquire+0xae/0x150 [ 1478.357258][T26460] should_failslab+0xc2/0x120 [ 1478.357281][T26460] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1478.357318][T26460] ? security_inode_alloc+0x3b/0x2b0 [ 1478.357349][T26460] security_inode_alloc+0x3b/0x2b0 [ 1478.357388][T26460] inode_init_always_gfp+0xce4/0x1030 [ 1478.357436][T26460] alloc_inode+0x86/0x240 [ 1478.357458][T26460] path_from_stashed+0x2be/0xb00 [ 1478.357490][T26460] ? do_raw_spin_lock+0x12c/0x2b0 [ 1478.357527][T26460] ? __pfx_path_from_stashed+0x10/0x10 [ 1478.357560][T26460] ? do_raw_spin_unlock+0x172/0x230 [ 1478.357598][T26460] ns_get_path+0x5f/0x80 [ 1478.357626][T26460] proc_ns_get_link+0x121/0x260 [ 1478.357655][T26460] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1478.357687][T26460] ? atime_needs_update+0x8b/0x710 [ 1478.357731][T26460] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1478.357764][T26460] step_into+0x1a2c/0x2270 [ 1478.357804][T26460] ? __pfx_step_into+0x10/0x10 [ 1478.357832][T26460] ? find_held_lock+0x2b/0x80 [ 1478.357863][T26460] path_openat+0x6db/0x2cb0 [ 1478.357905][T26460] ? __pfx_path_openat+0x10/0x10 [ 1478.357940][T26460] ? __lock_acquire+0xb8a/0x1c90 [ 1478.357974][T26460] do_filp_open+0x20b/0x470 [ 1478.358008][T26460] ? __pfx_do_filp_open+0x10/0x10 [ 1478.358062][T26460] ? alloc_fd+0x471/0x7d0 [ 1478.358100][T26460] do_sys_openat2+0x11b/0x1d0 [ 1478.358125][T26460] ? __pfx_do_sys_openat2+0x10/0x10 [ 1478.358162][T26460] __x64_sys_openat+0x174/0x210 [ 1478.358194][T26460] ? __pfx___x64_sys_openat+0x10/0x10 [ 1478.358232][T26460] do_syscall_64+0xcd/0x490 [ 1478.358271][T26460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.358295][T26460] RIP: 0033:0x7f6e7b78d290 [ 1478.358313][T26460] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1478.358337][T26460] RSP: 002b:00007f6e7c52ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1478.358359][T26460] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e7b78d290 [ 1478.358375][T26460] RDX: 0000000000000002 RSI: 00007f6e7c52efa0 RDI: 00000000ffffff9c [ 1478.358389][T26460] RBP: 00007f6e7c52efa0 R08: 0000000000000000 R09: 0000000000000000 [ 1478.358404][T26460] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1478.358418][T26460] R13: 0000000000000000 R14: 00007f6e7b9b6080 R15: 00007ffcb0360638 [ 1478.358447][T26460] [ 1478.632078][ C0] vkms_vblank_simulate: vblank timer overrun [ 1480.523836][T26484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'. [ 1482.781467][T15599] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1483.913202][T26546] FAULT_INJECTION: forcing a failure. [ 1483.913202][T26546] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.913841][T26546] CPU: 0 UID: 0 PID: 26546 Comm: syz.0.4134 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1483.913879][T26546] Tainted: [U]=USER [ 1483.913887][T26546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1483.913902][T26546] Call Trace: [ 1483.913910][T26546] [ 1483.913920][T26546] dump_stack_lvl+0x16c/0x1f0 [ 1483.913962][T26546] should_fail_ex+0x512/0x640 [ 1483.913997][T26546] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1483.914033][T26546] ? __pfx_mon_text_open+0x10/0x10 [ 1483.914068][T26546] should_failslab+0xc2/0x120 [ 1483.914091][T26546] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1483.914122][T26546] ? lockdep_init_map_type+0x5c/0x280 [ 1483.914155][T26546] ? mon_text_open+0xd5/0x4f0 [ 1483.914193][T26546] ? __pfx_mon_text_open+0x10/0x10 [ 1483.914228][T26546] mon_text_open+0xd5/0x4f0 [ 1483.914264][T26546] ? __pfx_mon_text_open+0x10/0x10 [ 1483.914298][T26546] ? __debugfs_file_get+0x1fe/0x840 [ 1483.914321][T26546] ? __pfx___debugfs_file_get+0x10/0x10 [ 1483.914345][T26546] ? __pfx_apparmor_file_open+0x10/0x10 [ 1483.914374][T26546] ? lockdown_is_locked_down+0x3f/0x130 [ 1483.914408][T26546] ? bpf_lsm_locked_down+0x9/0x10 [ 1483.914441][T26546] ? __pfx_mon_text_open+0x10/0x10 [ 1483.914476][T26546] full_proxy_open_regular+0x1b6/0x360 [ 1483.914504][T26546] do_dentry_open+0x744/0x1c10 [ 1483.914541][T26546] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1483.914573][T26546] vfs_open+0x82/0x3f0 [ 1483.914602][T26546] path_openat+0x1de4/0x2cb0 [ 1483.914647][T26546] ? __pfx_path_openat+0x10/0x10 [ 1483.914684][T26546] ? __lock_acquire+0xb8a/0x1c90 [ 1483.914724][T26546] do_filp_open+0x20b/0x470 [ 1483.914760][T26546] ? __pfx_do_filp_open+0x10/0x10 [ 1483.914817][T26546] ? alloc_fd+0x471/0x7d0 [ 1483.914857][T26546] do_sys_openat2+0x11b/0x1d0 [ 1483.914884][T26546] ? __pfx_do_sys_openat2+0x10/0x10 [ 1483.914923][T26546] __x64_sys_openat+0x174/0x210 [ 1483.914950][T26546] ? __pfx___x64_sys_openat+0x10/0x10 [ 1483.914990][T26546] do_syscall_64+0xcd/0x490 [ 1483.915031][T26546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.915056][T26546] RIP: 0033:0x7f788b58e929 [ 1483.915075][T26546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.915099][T26546] RSP: 002b:00007f788c3cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1483.915123][T26546] RAX: ffffffffffffffda RBX: 00007f788b7b6080 RCX: 00007f788b58e929 [ 1483.915139][T26546] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1483.915155][T26546] RBP: 00007f788b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1483.915171][T26546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.915186][T26546] R13: 0000000000000000 R14: 00007f788b7b6080 R15: 00007ffd1302cd28 [ 1483.915217][T26546] [ 1488.888365][T26594] zswap: compressor not available [ 1489.577807][T26612] FAULT_INJECTION: forcing a failure. [ 1489.577807][T26612] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.659554][T26612] CPU: 0 UID: 0 PID: 26612 Comm: syz.5.4150 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1489.659594][T26612] Tainted: [U]=USER [ 1489.659602][T26612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1489.659616][T26612] Call Trace: [ 1489.659624][T26612] [ 1489.659633][T26612] dump_stack_lvl+0x16c/0x1f0 [ 1489.659674][T26612] should_fail_ex+0x512/0x640 [ 1489.659707][T26612] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1489.659745][T26612] should_failslab+0xc2/0x120 [ 1489.659767][T26612] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1489.659802][T26612] ? lockdep_init_map_type+0x5c/0x280 [ 1489.659833][T26612] ? seq_open+0x55/0x170 [ 1489.659860][T26612] seq_open+0x55/0x170 [ 1489.659884][T26612] kernfs_fop_open+0x59f/0xda0 [ 1489.659910][T26612] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1489.659946][T26612] do_dentry_open+0x744/0x1c10 [ 1489.659981][T26612] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1489.660010][T26612] vfs_open+0x82/0x3f0 [ 1489.660038][T26612] path_openat+0x1de4/0x2cb0 [ 1489.660081][T26612] ? __pfx_path_openat+0x10/0x10 [ 1489.660116][T26612] ? __lock_acquire+0xb8a/0x1c90 [ 1489.660165][T26612] do_filp_open+0x20b/0x470 [ 1489.660226][T26612] ? __pfx_do_filp_open+0x10/0x10 [ 1489.660283][T26612] ? alloc_fd+0x471/0x7d0 [ 1489.660324][T26612] do_sys_openat2+0x11b/0x1d0 [ 1489.660350][T26612] ? __pfx_do_sys_openat2+0x10/0x10 [ 1489.660389][T26612] __x64_sys_openat+0x174/0x210 [ 1489.660417][T26612] ? __pfx___x64_sys_openat+0x10/0x10 [ 1489.660456][T26612] do_syscall_64+0xcd/0x490 [ 1489.660496][T26612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.660521][T26612] RIP: 0033:0x7f6e7b78e929 [ 1489.660540][T26612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1489.660564][T26612] RSP: 002b:00007f6e7c550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1489.660586][T26612] RAX: ffffffffffffffda RBX: 00007f6e7b9b5fa0 RCX: 00007f6e7b78e929 [ 1489.660602][T26612] RDX: 0000000000001182 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1489.660618][T26612] RBP: 00007f6e7b810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1489.660633][T26612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.660647][T26612] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1489.660680][T26612] [ 1489.898103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1492.549660][T26628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1492.614350][T26628] HfR: entered promiscuous mode [ 1494.865828][T26673] FAULT_INJECTION: forcing a failure. [ 1494.865828][T26673] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.952493][T26673] CPU: 0 UID: 0 PID: 26673 Comm: syz.3.4163 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1494.952533][T26673] Tainted: [U]=USER [ 1494.952541][T26673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1494.952556][T26673] Call Trace: [ 1494.952565][T26673] [ 1494.952574][T26673] dump_stack_lvl+0x16c/0x1f0 [ 1494.952614][T26673] should_fail_ex+0x512/0x640 [ 1494.952649][T26673] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1494.952694][T26673] should_failslab+0xc2/0x120 [ 1494.952716][T26673] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1494.952751][T26673] ? lockdep_init_map_type+0x5c/0x280 [ 1494.952782][T26673] ? seq_open+0x55/0x170 [ 1494.952810][T26673] seq_open+0x55/0x170 [ 1494.952833][T26673] kernfs_fop_open+0x59f/0xda0 [ 1494.952859][T26673] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1494.952896][T26673] do_dentry_open+0x744/0x1c10 [ 1494.952931][T26673] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1494.952961][T26673] vfs_open+0x82/0x3f0 [ 1494.952989][T26673] path_openat+0x1de4/0x2cb0 [ 1494.953033][T26673] ? __pfx_path_openat+0x10/0x10 [ 1494.953068][T26673] ? __lock_acquire+0xb8a/0x1c90 [ 1494.953101][T26673] do_filp_open+0x20b/0x470 [ 1494.953135][T26673] ? __pfx_do_filp_open+0x10/0x10 [ 1494.953189][T26673] ? alloc_fd+0x471/0x7d0 [ 1494.953228][T26673] do_sys_openat2+0x11b/0x1d0 [ 1494.953254][T26673] ? __pfx_do_sys_openat2+0x10/0x10 [ 1494.953291][T26673] __x64_sys_openat+0x174/0x210 [ 1494.953317][T26673] ? __pfx___x64_sys_openat+0x10/0x10 [ 1494.953356][T26673] do_syscall_64+0xcd/0x490 [ 1494.953394][T26673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.953418][T26673] RIP: 0033:0x7efef458e929 [ 1494.953437][T26673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.953459][T26673] RSP: 002b:00007efef5370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1494.953481][T26673] RAX: ffffffffffffffda RBX: 00007efef47b5fa0 RCX: 00007efef458e929 [ 1494.953497][T26673] RDX: 0000000000001182 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1494.953513][T26673] RBP: 00007efef4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1494.953526][T26673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1494.953541][T26673] R13: 0000000000000000 R14: 00007efef47b5fa0 R15: 00007fffa8dd4208 [ 1494.953570][T26673] [ 1495.191087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1496.730319][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1496.730376][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1498.024809][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1498.200334][T26698] HfR: entered promiscuous mode [ 1502.013918][T26746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4182'. [ 1502.117388][T26746] HfR: entered promiscuous mode [ 1503.481563][T26751] nfs4: Unknown parameter '' [ 1505.750486][T26803] nfs4: Unknown parameter '' [ 1506.006574][T26807] FAULT_INJECTION: forcing a failure. [ 1506.006574][T26807] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.092507][T26807] CPU: 0 UID: 0 PID: 26807 Comm: syz.3.4195 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1506.092550][T26807] Tainted: [U]=USER [ 1506.092558][T26807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1506.092572][T26807] Call Trace: [ 1506.092581][T26807] [ 1506.092590][T26807] dump_stack_lvl+0x16c/0x1f0 [ 1506.092631][T26807] should_fail_ex+0x512/0x640 [ 1506.092667][T26807] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1506.092710][T26807] should_failslab+0xc2/0x120 [ 1506.092733][T26807] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1506.092766][T26807] ? kvm_dev_ioctl+0x1396/0x1ad0 [ 1506.092810][T26807] kvm_dev_ioctl+0x1396/0x1ad0 [ 1506.092858][T26807] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1506.092906][T26807] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1506.092946][T26807] __x64_sys_ioctl+0x18b/0x210 [ 1506.092988][T26807] do_syscall_64+0xcd/0x490 [ 1506.093026][T26807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.093050][T26807] RIP: 0033:0x7efef458e929 [ 1506.093068][T26807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.093091][T26807] RSP: 002b:00007efef5370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1506.093112][T26807] RAX: ffffffffffffffda RBX: 00007efef47b5fa0 RCX: 00007efef458e929 [ 1506.093128][T26807] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1506.093142][T26807] RBP: 00007efef4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1506.093156][T26807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.093170][T26807] R13: 0000000000000000 R14: 00007efef47b5fa0 R15: 00007fffa8dd4208 [ 1506.093199][T26807] [ 1508.730284][T26838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4203'. [ 1510.895359][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1517.846044][T15599] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 1520.651170][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4232'. [ 1521.255568][T26980] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4233'. [ 1522.375102][T15599] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1522.821284][T26994] zswap: compressor not available [ 1522.861254][T27000] Setting dangerous option i915.mitigations - tainting kernel [ 1522.896025][T26997] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4237'. [ 1525.008160][T27022] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4244'. [ 1529.292822][T27085] sysfs_service_op_show: Client not running :-5: [ 1529.424530][T27085] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96 [ 1530.189466][T27077] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4254'. [ 1530.475119][T27094] zswap: compressor not available [ 1530.510134][T27097] Setting dangerous option i915.mitigations - tainting kernel [ 1533.356010][T27146] sysfs_service_op_show: Client not running :-5: [ 1533.453251][T27147] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input97 [ 1534.046541][T27146] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98 [ 1541.027930][ T30] audit: type=1326 audit(4294968767.860:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27245 comm="syz.0.4294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f788b58e929 code=0x0 [ 1541.064145][T27259] FAULT_INJECTION: forcing a failure. [ 1541.064145][T27259] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.156214][T27259] CPU: 0 UID: 0 PID: 27259 Comm: syz.5.4298 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1541.156256][T27259] Tainted: [U]=USER [ 1541.156265][T27259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1541.156280][T27259] Call Trace: [ 1541.156289][T27259] [ 1541.156298][T27259] dump_stack_lvl+0x16c/0x1f0 [ 1541.156341][T27259] should_fail_ex+0x512/0x640 [ 1541.156376][T27259] ? fs_reclaim_acquire+0xae/0x150 [ 1541.156408][T27259] should_failslab+0xc2/0x120 [ 1541.156431][T27259] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1541.156469][T27259] ? security_inode_alloc+0x3b/0x2b0 [ 1541.156500][T27259] security_inode_alloc+0x3b/0x2b0 [ 1541.156527][T27259] inode_init_always_gfp+0xce4/0x1030 [ 1541.156573][T27259] alloc_inode+0x86/0x240 [ 1541.156598][T27259] new_inode+0x22/0x1c0 [ 1541.156625][T27259] proc_pid_make_inode+0x22/0x160 [ 1541.156661][T27259] proc_ns_instantiate+0x57/0x100 [ 1541.156696][T27259] proc_ns_dir_lookup+0x1af/0x2f0 [ 1541.156737][T27259] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1541.156770][T27259] lookup_open.isra.0+0x4d7/0x1580 [ 1541.156808][T27259] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1541.156856][T27259] ? mnt_get_write_access+0x20c/0x300 [ 1541.156887][T27259] path_openat+0x893/0x2cb0 [ 1541.156931][T27259] ? __pfx_path_openat+0x10/0x10 [ 1541.156970][T27259] ? __lock_acquire+0xb8a/0x1c90 [ 1541.157006][T27259] do_filp_open+0x20b/0x470 [ 1541.157041][T27259] ? __pfx_do_filp_open+0x10/0x10 [ 1541.157091][T27259] ? __pfx_kfree_link+0x10/0x10 [ 1541.157126][T27259] ? alloc_fd+0x471/0x7d0 [ 1541.157167][T27259] do_sys_openat2+0x11b/0x1d0 [ 1541.157195][T27259] ? __pfx_do_sys_openat2+0x10/0x10 [ 1541.157224][T27259] ? __sys_sendmsg+0x18c/0x220 [ 1541.157269][T27259] __x64_sys_openat+0x174/0x210 [ 1541.157297][T27259] ? __pfx___x64_sys_openat+0x10/0x10 [ 1541.157337][T27259] do_syscall_64+0xcd/0x490 [ 1541.157377][T27259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.157402][T27259] RIP: 0033:0x7f6e7b78d290 [ 1541.157422][T27259] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1541.157446][T27259] RSP: 002b:00007f6e7c52ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1541.157469][T27259] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e7b78d290 [ 1541.157486][T27259] RDX: 0000000000000002 RSI: 00007f6e7c52efa0 RDI: 00000000ffffff9c [ 1541.157501][T27259] RBP: 00007f6e7c52efa0 R08: 0000000000000000 R09: 0000000000000000 [ 1541.157515][T27259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1541.157539][T27259] R13: 0000000000000000 R14: 00007f6e7b9b6080 R15: 00007ffcb0360638 [ 1541.157570][T27259] [ 1541.420162][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.450563][T27292] zswap: compressor not available [ 1547.419657][T27345] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1547.450136][T27345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1547.517433][T27345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1547.558740][T27345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1549.427274][T15599] Bluetooth: hci1: command 0x0c1a tx timeout [ 1549.509354][T15599] Bluetooth: hci0: command 0x0c1a tx timeout [ 1549.590054][T15599] Bluetooth: hci3: command 0x0c1a tx timeout [ 1549.596197][T22390] Bluetooth: hci2: command 0x0406 tx timeout [ 1550.108159][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1552.828312][T27454] FAULT_INJECTION: forcing a failure. [ 1552.828312][T27454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1552.924026][T27454] CPU: 0 UID: 0 PID: 27454 Comm: syz.3.4344 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1552.924068][T27454] Tainted: [U]=USER [ 1552.924077][T27454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1552.924091][T27454] Call Trace: [ 1552.924098][T27454] [ 1552.924107][T27454] dump_stack_lvl+0x16c/0x1f0 [ 1552.924147][T27454] should_fail_ex+0x512/0x640 [ 1552.924184][T27454] _copy_from_user+0x2e/0xd0 [ 1552.924220][T27454] __sys_bpf+0x21d/0x4d80 [ 1552.924260][T27454] ? __pfx___sys_bpf+0x10/0x10 [ 1552.924294][T27454] ? vfs_write+0x15d/0x1150 [ 1552.924332][T27454] ? __pfx_vfs_write+0x10/0x10 [ 1552.924365][T27454] ? do_sys_openat2+0x157/0x1d0 [ 1552.924404][T27454] ? ksys_write+0x1ac/0x250 [ 1552.924435][T27454] ? __pfx_ksys_write+0x10/0x10 [ 1552.924471][T27454] __x64_sys_bpf+0x78/0xc0 [ 1552.924492][T27454] ? lockdep_hardirqs_on+0x7c/0x110 [ 1552.924535][T27454] do_syscall_64+0xcd/0x490 [ 1552.924573][T27454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.924596][T27454] RIP: 0033:0x7efef458e929 [ 1552.924614][T27454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.924637][T27454] RSP: 002b:00007efef5370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1552.924659][T27454] RAX: ffffffffffffffda RBX: 00007efef47b5fa0 RCX: 00007efef458e929 [ 1552.924675][T27454] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 1552.924689][T27454] RBP: 00007efef5370090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.924703][T27454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.924716][T27454] R13: 0000000000000000 R14: 00007efef47b5fa0 R15: 00007fffa8dd4208 [ 1552.924744][T27454] [ 1553.102957][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.336192][T27509] random: crng reseeded on system resumption [ 1556.482928][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.489823][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.772152][T27556] FAULT_INJECTION: forcing a failure. [ 1558.772152][T27556] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.850119][T27556] CPU: 0 UID: 0 PID: 27556 Comm: syz.6.4374 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1558.850159][T27556] Tainted: [U]=USER [ 1558.850167][T27556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1558.850182][T27556] Call Trace: [ 1558.850189][T27556] [ 1558.850198][T27556] dump_stack_lvl+0x16c/0x1f0 [ 1558.850239][T27556] should_fail_ex+0x512/0x640 [ 1558.850272][T27556] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1558.850307][T27556] should_failslab+0xc2/0x120 [ 1558.850334][T27556] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1558.850363][T27556] ? find_held_lock+0x2b/0x80 [ 1558.850386][T27556] ? prog_array_map_alloc+0x45/0x2a0 [ 1558.850421][T27556] prog_array_map_alloc+0x45/0x2a0 [ 1558.850451][T27556] map_create+0x58f/0x1db0 [ 1558.850496][T27556] ? __pfx_map_create+0x10/0x10 [ 1558.850529][T27556] ? __might_fault+0xe3/0x190 [ 1558.850562][T27556] ? __might_fault+0xe3/0x190 [ 1558.850593][T27556] ? __might_fault+0x13b/0x190 [ 1558.850638][T27556] __sys_bpf+0x47cc/0x4d80 [ 1558.850678][T27556] ? __pfx___sys_bpf+0x10/0x10 [ 1558.850714][T27556] ? vfs_write+0x15d/0x1150 [ 1558.850753][T27556] ? __pfx_vfs_write+0x10/0x10 [ 1558.850786][T27556] ? do_sys_openat2+0x157/0x1d0 [ 1558.850827][T27556] ? ksys_write+0x1ac/0x250 [ 1558.850859][T27556] ? __pfx_ksys_write+0x10/0x10 [ 1558.850897][T27556] __x64_sys_bpf+0x78/0xc0 [ 1558.850919][T27556] ? lockdep_hardirqs_on+0x7c/0x110 [ 1558.850953][T27556] do_syscall_64+0xcd/0x490 [ 1558.850998][T27556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.851023][T27556] RIP: 0033:0x7f198858e929 [ 1558.851054][T27556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.851077][T27556] RSP: 002b:00007f19894c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1558.851098][T27556] RAX: ffffffffffffffda RBX: 00007f19887b5fa0 RCX: 00007f198858e929 [ 1558.851114][T27556] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 1558.851128][T27556] RBP: 00007f19894c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.851141][T27556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.851155][T27556] R13: 0000000000000000 R14: 00007f19887b5fa0 R15: 00007ffc927d3fb8 [ 1558.851182][T27556] [ 1559.082491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.698088][T27581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4369'. [ 1561.547449][T27587] FAULT_INJECTION: forcing a failure. [ 1561.547449][T27587] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.620967][T27587] CPU: 0 UID: 0 PID: 27587 Comm: syz.6.4371 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1561.621009][T27587] Tainted: [U]=USER [ 1561.621017][T27587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1561.621045][T27587] Call Trace: [ 1561.621053][T27587] [ 1561.621062][T27587] dump_stack_lvl+0x16c/0x1f0 [ 1561.621103][T27587] should_fail_ex+0x512/0x640 [ 1561.621137][T27587] ? fs_reclaim_acquire+0xae/0x150 [ 1561.621167][T27587] should_failslab+0xc2/0x120 [ 1561.621190][T27587] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1561.621227][T27587] ? security_inode_alloc+0x3b/0x2b0 [ 1561.621257][T27587] security_inode_alloc+0x3b/0x2b0 [ 1561.621284][T27587] inode_init_always_gfp+0xce4/0x1030 [ 1561.621322][T27587] alloc_inode+0x86/0x240 [ 1561.621346][T27587] new_inode+0x22/0x1c0 [ 1561.621372][T27587] proc_pid_make_inode+0x22/0x160 [ 1561.621406][T27587] proc_ns_instantiate+0x57/0x100 [ 1561.621441][T27587] proc_ns_dir_lookup+0x1af/0x2f0 [ 1561.621476][T27587] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1561.621508][T27587] lookup_open.isra.0+0x4d7/0x1580 [ 1561.621545][T27587] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1561.621591][T27587] ? mnt_get_write_access+0x20c/0x300 [ 1561.621621][T27587] path_openat+0x893/0x2cb0 [ 1561.621665][T27587] ? __pfx_path_openat+0x10/0x10 [ 1561.621709][T27587] ? __lock_acquire+0xb8a/0x1c90 [ 1561.621744][T27587] do_filp_open+0x20b/0x470 [ 1561.621778][T27587] ? __pfx_do_filp_open+0x10/0x10 [ 1561.621822][T27587] ? __pfx_kfree_link+0x10/0x10 [ 1561.621857][T27587] ? alloc_fd+0x471/0x7d0 [ 1561.621896][T27587] do_sys_openat2+0x11b/0x1d0 [ 1561.621921][T27587] ? __pfx_do_sys_openat2+0x10/0x10 [ 1561.621949][T27587] ? __sys_sendmsg+0x18c/0x220 [ 1561.621992][T27587] __x64_sys_openat+0x174/0x210 [ 1561.622019][T27587] ? __pfx___x64_sys_openat+0x10/0x10 [ 1561.622047][T27587] ? syscall_user_dispatch+0x78/0x140 [ 1561.622092][T27587] do_syscall_64+0xcd/0x490 [ 1561.622131][T27587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.622155][T27587] RIP: 0033:0x7f198858d290 [ 1561.622174][T27587] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1561.622197][T27587] RSP: 002b:00007f19894c0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1561.622219][T27587] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f198858d290 [ 1561.622235][T27587] RDX: 0000000000000002 RSI: 00007f19894c0fa0 RDI: 00000000ffffff9c [ 1561.622251][T27587] RBP: 00007f19894c0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.622266][T27587] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1561.622280][T27587] R13: 0000000000000000 R14: 00007f19887b5fa0 R15: 00007ffc927d3fb8 [ 1561.622309][T27587] [ 1561.895737][ C0] vkms_vblank_simulate: vblank timer overrun [ 1563.315480][T27612] FAULT_INJECTION: forcing a failure. [ 1563.315480][T27612] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.322309][T27612] CPU: 0 UID: 0 PID: 27612 Comm: syz.5.4381 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1563.322352][T27612] Tainted: [U]=USER [ 1563.322361][T27612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1563.322375][T27612] Call Trace: [ 1563.322384][T27612] [ 1563.322394][T27612] dump_stack_lvl+0x16c/0x1f0 [ 1563.322435][T27612] should_fail_ex+0x512/0x640 [ 1563.322470][T27612] ? fs_reclaim_acquire+0xae/0x150 [ 1563.322502][T27612] should_failslab+0xc2/0x120 [ 1563.322532][T27612] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1563.322568][T27612] ? security_inode_alloc+0x3b/0x2b0 [ 1563.322599][T27612] security_inode_alloc+0x3b/0x2b0 [ 1563.322624][T27612] inode_init_always_gfp+0xce4/0x1030 [ 1563.322662][T27612] alloc_inode+0x86/0x240 [ 1563.322685][T27612] new_inode+0x22/0x1c0 [ 1563.322711][T27612] proc_pid_make_inode+0x22/0x160 [ 1563.322745][T27612] proc_ns_instantiate+0x57/0x100 [ 1563.322781][T27612] proc_ns_dir_lookup+0x1af/0x2f0 [ 1563.322817][T27612] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1563.322849][T27612] lookup_open.isra.0+0x4d7/0x1580 [ 1563.322886][T27612] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1563.322933][T27612] ? mnt_get_write_access+0x20c/0x300 [ 1563.322964][T27612] path_openat+0x893/0x2cb0 [ 1563.323008][T27612] ? __pfx_path_openat+0x10/0x10 [ 1563.323044][T27612] ? __lock_acquire+0xb8a/0x1c90 [ 1563.323080][T27612] do_filp_open+0x20b/0x470 [ 1563.323114][T27612] ? __pfx_do_filp_open+0x10/0x10 [ 1563.323165][T27612] ? __pfx_kfree_link+0x10/0x10 [ 1563.323205][T27612] ? alloc_fd+0x471/0x7d0 [ 1563.323246][T27612] do_sys_openat2+0x11b/0x1d0 [ 1563.323276][T27612] ? __pfx_do_sys_openat2+0x10/0x10 [ 1563.323305][T27612] ? __sys_sendmsg+0x18c/0x220 [ 1563.323350][T27612] __x64_sys_openat+0x174/0x210 [ 1563.323377][T27612] ? __pfx___x64_sys_openat+0x10/0x10 [ 1563.323407][T27612] ? syscall_user_dispatch+0x78/0x140 [ 1563.323454][T27612] do_syscall_64+0xcd/0x490 [ 1563.323494][T27612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.323526][T27612] RIP: 0033:0x7f6e7b78d290 [ 1563.323545][T27612] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1563.323570][T27612] RSP: 002b:00007f6e7c54ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1563.323593][T27612] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e7b78d290 [ 1563.323609][T27612] RDX: 0000000000000002 RSI: 00007f6e7c54ffa0 RDI: 00000000ffffff9c [ 1563.323624][T27612] RBP: 00007f6e7c54ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.323639][T27612] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1563.323654][T27612] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1563.323684][T27612] [ 1563.975974][T27633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4384'. [ 1563.976515][T27633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4384'. [ 1564.693187][T27618] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1564.811641][T27631] tty tty8: ldisc open failed (-12), clearing slot 7 [ 1564.864252][T27634] tty tty8: ldisc open failed (-12), clearing slot 7 [ 1565.671632][T27653] FAULT_INJECTION: forcing a failure. [ 1565.671632][T27653] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.740542][T27653] CPU: 0 UID: 0 PID: 27653 Comm: syz.3.4388 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1565.740583][T27653] Tainted: [U]=USER [ 1565.740592][T27653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1565.740606][T27653] Call Trace: [ 1565.740614][T27653] [ 1565.740624][T27653] dump_stack_lvl+0x16c/0x1f0 [ 1565.740666][T27653] should_fail_ex+0x512/0x640 [ 1565.740701][T27653] ? fs_reclaim_acquire+0xae/0x150 [ 1565.740732][T27653] should_failslab+0xc2/0x120 [ 1565.740755][T27653] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1565.740792][T27653] ? security_inode_alloc+0x3b/0x2b0 [ 1565.740823][T27653] security_inode_alloc+0x3b/0x2b0 [ 1565.740850][T27653] inode_init_always_gfp+0xce4/0x1030 [ 1565.740889][T27653] alloc_inode+0x86/0x240 [ 1565.740913][T27653] path_from_stashed+0x2be/0xb00 [ 1565.740948][T27653] ? do_raw_spin_lock+0x12c/0x2b0 [ 1565.740988][T27653] ? __pfx_path_from_stashed+0x10/0x10 [ 1565.741026][T27653] ? do_raw_spin_unlock+0x172/0x230 [ 1565.741068][T27653] ns_get_path+0x5f/0x80 [ 1565.741100][T27653] proc_ns_get_link+0x121/0x260 [ 1565.741133][T27653] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1565.741168][T27653] ? atime_needs_update+0x8b/0x710 [ 1565.741196][T27653] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1565.741229][T27653] step_into+0x1a2c/0x2270 [ 1565.741266][T27653] ? __pfx_step_into+0x10/0x10 [ 1565.741295][T27653] ? find_held_lock+0x2b/0x80 [ 1565.741335][T27653] path_openat+0x6db/0x2cb0 [ 1565.741379][T27653] ? __pfx_path_openat+0x10/0x10 [ 1565.741416][T27653] ? __lock_acquire+0xb8a/0x1c90 [ 1565.741451][T27653] do_filp_open+0x20b/0x470 [ 1565.741486][T27653] ? __pfx_do_filp_open+0x10/0x10 [ 1565.741542][T27653] ? alloc_fd+0x471/0x7d0 [ 1565.741586][T27653] do_sys_openat2+0x11b/0x1d0 [ 1565.741612][T27653] ? __pfx_do_sys_openat2+0x10/0x10 [ 1565.741641][T27653] ? __sys_sendmsg+0x18c/0x220 [ 1565.741686][T27653] __x64_sys_openat+0x174/0x210 [ 1565.741713][T27653] ? __pfx___x64_sys_openat+0x10/0x10 [ 1565.741743][T27653] ? syscall_user_dispatch+0x78/0x140 [ 1565.741789][T27653] do_syscall_64+0xcd/0x490 [ 1565.741829][T27653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.741854][T27653] RIP: 0033:0x7efef458d290 [ 1565.741873][T27653] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1565.741896][T27653] RSP: 002b:00007efef536ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1565.741919][T27653] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007efef458d290 [ 1565.741935][T27653] RDX: 0000000000000002 RSI: 00007efef536ffa0 RDI: 00000000ffffff9c [ 1565.741950][T27653] RBP: 00007efef536ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1565.741965][T27653] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1565.741980][T27653] R13: 0000000000000000 R14: 00007efef47b5fa0 R15: 00007fffa8dd4208 [ 1565.742009][T27653] [ 1566.029330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.206833][T27664] zswap: compressor not available [ 1567.401800][T15599] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1568.650210][T27723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 1568.679167][T27723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 1571.871153][T27790] FAULT_INJECTION: forcing a failure. [ 1571.871153][T27790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.007207][T27790] CPU: 0 UID: 0 PID: 27790 Comm: syz.6.4424 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1572.007247][T27790] Tainted: [U]=USER [ 1572.007255][T27790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1572.007270][T27790] Call Trace: [ 1572.007277][T27790] [ 1572.007287][T27790] dump_stack_lvl+0x16c/0x1f0 [ 1572.007329][T27790] should_fail_ex+0x512/0x640 [ 1572.007367][T27790] _copy_from_iter+0x29f/0x16f0 [ 1572.007423][T27790] ? __pfx__copy_from_iter+0x10/0x10 [ 1572.007470][T27790] ? rcu_is_watching+0x12/0xc0 [ 1572.007492][T27790] ? trace_kmalloc+0x2b/0xd0 [ 1572.007512][T27790] ? __kmalloc_noprof+0x242/0x510 [ 1572.007550][T27790] kernfs_fop_write_iter+0x19a/0x510 [ 1572.007577][T27790] vfs_write+0x6c4/0x1150 [ 1572.007608][T27790] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1572.007632][T27790] ? __pfx___mutex_lock+0x10/0x10 [ 1572.007665][T27790] ? __pfx_vfs_write+0x10/0x10 [ 1572.007712][T27790] ksys_write+0x12a/0x250 [ 1572.007742][T27790] ? __pfx_ksys_write+0x10/0x10 [ 1572.007785][T27790] do_syscall_64+0xcd/0x490 [ 1572.007820][T27790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.007842][T27790] RIP: 0033:0x7f198858e929 [ 1572.007859][T27790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.007880][T27790] RSP: 002b:00007f19894c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1572.007904][T27790] RAX: ffffffffffffffda RBX: 00007f19887b5fa0 RCX: 00007f198858e929 [ 1572.007919][T27790] RDX: 0000000000000004 RSI: 0000200000000440 RDI: 0000000000000003 [ 1572.007932][T27790] RBP: 00007f19894c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.007945][T27790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.007958][T27790] R13: 0000000000000000 R14: 00007f19887b5fa0 R15: 00007ffc927d3fb8 [ 1572.007985][T27790] [ 1572.206434][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.317806][T27837] FAULT_INJECTION: forcing a failure. [ 1575.317806][T27837] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.421541][T27837] CPU: 0 UID: 0 PID: 27837 Comm: syz.0.4434 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1575.421580][T27837] Tainted: [U]=USER [ 1575.421587][T27837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1575.421602][T27837] Call Trace: [ 1575.421610][T27837] [ 1575.421619][T27837] dump_stack_lvl+0x16c/0x1f0 [ 1575.421660][T27837] should_fail_ex+0x512/0x640 [ 1575.421695][T27837] ? fs_reclaim_acquire+0xae/0x150 [ 1575.421726][T27837] should_failslab+0xc2/0x120 [ 1575.421748][T27837] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1575.421784][T27837] ? security_inode_alloc+0x3b/0x2b0 [ 1575.421814][T27837] security_inode_alloc+0x3b/0x2b0 [ 1575.421840][T27837] inode_init_always_gfp+0xce4/0x1030 [ 1575.421877][T27837] alloc_inode+0x86/0x240 [ 1575.421901][T27837] path_from_stashed+0x2be/0xb00 [ 1575.421935][T27837] ? do_raw_spin_lock+0x12c/0x2b0 [ 1575.421973][T27837] ? __pfx_path_from_stashed+0x10/0x10 [ 1575.422009][T27837] ? do_raw_spin_unlock+0x172/0x230 [ 1575.422049][T27837] ns_get_path+0x5f/0x80 [ 1575.422079][T27837] proc_ns_get_link+0x121/0x260 [ 1575.422111][T27837] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1575.422145][T27837] ? atime_needs_update+0x8b/0x710 [ 1575.422172][T27837] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1575.422203][T27837] step_into+0x1a2c/0x2270 [ 1575.422239][T27837] ? __pfx_step_into+0x10/0x10 [ 1575.422267][T27837] ? find_held_lock+0x2b/0x80 [ 1575.422298][T27837] path_openat+0x6db/0x2cb0 [ 1575.422340][T27837] ? __pfx_path_openat+0x10/0x10 [ 1575.422375][T27837] ? __lock_acquire+0xb8a/0x1c90 [ 1575.422408][T27837] do_filp_open+0x20b/0x470 [ 1575.422442][T27837] ? __pfx_do_filp_open+0x10/0x10 [ 1575.422501][T27837] ? alloc_fd+0x471/0x7d0 [ 1575.422540][T27837] do_sys_openat2+0x11b/0x1d0 [ 1575.422571][T27837] ? __pfx_do_sys_openat2+0x10/0x10 [ 1575.422598][T27837] ? __sys_sendmsg+0x18c/0x220 [ 1575.422641][T27837] __x64_sys_openat+0x174/0x210 [ 1575.422668][T27837] ? __pfx___x64_sys_openat+0x10/0x10 [ 1575.422696][T27837] ? syscall_user_dispatch+0x78/0x140 [ 1575.422740][T27837] do_syscall_64+0xcd/0x490 [ 1575.422779][T27837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.422803][T27837] RIP: 0033:0x7f788b58d290 [ 1575.422822][T27837] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1575.422845][T27837] RSP: 002b:00007f788c3ebf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1575.422867][T27837] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f788b58d290 [ 1575.422882][T27837] RDX: 0000000000000002 RSI: 00007f788c3ebfa0 RDI: 00000000ffffff9c [ 1575.422897][T27837] RBP: 00007f788c3ebfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.422911][T27837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1575.422925][T27837] R13: 0000000000000000 R14: 00007f788b7b5fa0 R15: 00007ffd1302cd28 [ 1575.422953][T27837] [ 1575.709276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1576.043295][T27842] zswap: compressor not available [ 1576.302831][T27865] FAULT_INJECTION: forcing a failure. [ 1576.302831][T27865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1576.386434][T27865] CPU: 0 UID: 0 PID: 27865 Comm: syz.6.4440 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1576.386482][T27865] Tainted: [U]=USER [ 1576.386489][T27865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1576.386504][T27865] Call Trace: [ 1576.386513][T27865] [ 1576.386524][T27865] dump_stack_lvl+0x16c/0x1f0 [ 1576.386565][T27865] should_fail_ex+0x512/0x640 [ 1576.386603][T27865] _copy_to_user+0x32/0xd0 [ 1576.386642][T27865] simple_read_from_buffer+0xcb/0x170 [ 1576.386674][T27865] proc_fail_nth_read+0x197/0x270 [ 1576.386704][T27865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1576.386733][T27865] ? rw_verify_area+0xcf/0x680 [ 1576.386762][T27865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1576.386789][T27865] vfs_read+0x1e4/0xc60 [ 1576.386827][T27865] ? __pfx_vfs_read+0x10/0x10 [ 1576.386860][T27865] ? do_sys_openat2+0x157/0x1d0 [ 1576.386901][T27865] ksys_read+0x12a/0x250 [ 1576.386933][T27865] ? __pfx_ksys_read+0x10/0x10 [ 1576.386974][T27865] do_syscall_64+0xcd/0x490 [ 1576.387013][T27865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.387040][T27865] RIP: 0033:0x7f198858d33c [ 1576.387059][T27865] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1576.387082][T27865] RSP: 002b:00007f19894c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1576.387105][T27865] RAX: ffffffffffffffda RBX: 00007f19887b5fa0 RCX: 00007f198858d33c [ 1576.387121][T27865] RDX: 000000000000000f RSI: 00007f19894c10a0 RDI: 0000000000000004 [ 1576.387135][T27865] RBP: 00007f19894c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.387150][T27865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1576.387164][T27865] R13: 0000000000000000 R14: 00007f19887b5fa0 R15: 00007ffc927d3fb8 [ 1576.387194][T27865] [ 1576.569734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.334026][T27880] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1578.756689][T27899] FAULT_INJECTION: forcing a failure. [ 1578.756689][T27899] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.943527][T27899] CPU: 0 UID: 0 PID: 27899 Comm: syz.0.4448 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1578.943565][T27899] Tainted: [U]=USER [ 1578.943572][T27899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1578.943585][T27899] Call Trace: [ 1578.943593][T27899] [ 1578.943601][T27899] dump_stack_lvl+0x16c/0x1f0 [ 1578.943639][T27899] should_fail_ex+0x512/0x640 [ 1578.943671][T27899] ? fs_reclaim_acquire+0xae/0x150 [ 1578.943700][T27899] should_failslab+0xc2/0x120 [ 1578.943721][T27899] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1578.943755][T27899] ? security_inode_alloc+0x3b/0x2b0 [ 1578.943783][T27899] security_inode_alloc+0x3b/0x2b0 [ 1578.943808][T27899] inode_init_always_gfp+0xce4/0x1030 [ 1578.943844][T27899] alloc_inode+0x86/0x240 [ 1578.943866][T27899] new_inode+0x22/0x1c0 [ 1578.943890][T27899] proc_pid_make_inode+0x22/0x160 [ 1578.943923][T27899] proc_ns_instantiate+0x57/0x100 [ 1578.943955][T27899] proc_ns_dir_lookup+0x1af/0x2f0 [ 1578.943987][T27899] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1578.944017][T27899] lookup_open.isra.0+0x4d7/0x1580 [ 1578.944051][T27899] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1578.944094][T27899] ? mnt_get_write_access+0x20c/0x300 [ 1578.944125][T27899] path_openat+0x893/0x2cb0 [ 1578.944175][T27899] ? __pfx_path_openat+0x10/0x10 [ 1578.944208][T27899] ? __lock_acquire+0xb8a/0x1c90 [ 1578.944241][T27899] do_filp_open+0x20b/0x470 [ 1578.944273][T27899] ? __pfx_do_filp_open+0x10/0x10 [ 1578.944313][T27899] ? __pfx_kfree_link+0x10/0x10 [ 1578.944345][T27899] ? alloc_fd+0x471/0x7d0 [ 1578.944381][T27899] do_sys_openat2+0x11b/0x1d0 [ 1578.944405][T27899] ? __pfx_do_sys_openat2+0x10/0x10 [ 1578.944430][T27899] ? __sys_sendmsg+0x18c/0x220 [ 1578.944471][T27899] __x64_sys_openat+0x174/0x210 [ 1578.944496][T27899] ? __pfx___x64_sys_openat+0x10/0x10 [ 1578.944532][T27899] do_syscall_64+0xcd/0x490 [ 1578.944568][T27899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.944590][T27899] RIP: 0033:0x7f788b58d290 [ 1578.944607][T27899] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1578.944629][T27899] RSP: 002b:00007f788c3caf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1578.944650][T27899] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f788b58d290 [ 1578.944683][T27899] RDX: 0000000000000002 RSI: 00007f788c3cafa0 RDI: 00000000ffffff9c [ 1578.944698][T27899] RBP: 00007f788c3cafa0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.944713][T27899] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1578.944728][T27899] R13: 0000000000000000 R14: 00007f788b7b6080 R15: 00007ffd1302cd28 [ 1578.944758][T27899] [ 1579.210009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.685109][T27928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4457'. [ 1584.601954][T27996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 1585.679310][T28009] FAULT_INJECTION: forcing a failure. [ 1585.679310][T28009] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.778902][T28009] CPU: 0 UID: 0 PID: 28009 Comm: syz.5.4473 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1585.778942][T28009] Tainted: [U]=USER [ 1585.778950][T28009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1585.778963][T28009] Call Trace: [ 1585.778970][T28009] [ 1585.778979][T28009] dump_stack_lvl+0x16c/0x1f0 [ 1585.779019][T28009] should_fail_ex+0x512/0x640 [ 1585.779051][T28009] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1585.779090][T28009] should_failslab+0xc2/0x120 [ 1585.779111][T28009] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1585.779146][T28009] ? __pmd_alloc+0xbf/0x930 [ 1585.779175][T28009] __pmd_alloc+0xbf/0x930 [ 1585.779198][T28009] ? find_held_lock+0x2b/0x80 [ 1585.779223][T28009] __handle_mm_fault+0xaac/0x5490 [ 1585.779261][T28009] ? __pfx___handle_mm_fault+0x10/0x10 [ 1585.779290][T28009] ? __pfx_mt_find+0x10/0x10 [ 1585.779327][T28009] ? find_vma+0xbf/0x140 [ 1585.779349][T28009] ? __pfx_find_vma+0x10/0x10 [ 1585.779374][T28009] handle_mm_fault+0x589/0xd10 [ 1585.779405][T28009] ? __pkru_allows_pkey+0x41/0xb0 [ 1585.779437][T28009] do_user_addr_fault+0x7a6/0x1370 [ 1585.779470][T28009] ? rcu_is_watching+0x12/0xc0 [ 1585.779497][T28009] exc_page_fault+0x5c/0xb0 [ 1585.779537][T28009] asm_exc_page_fault+0x26/0x30 [ 1585.779559][T28009] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1585.779588][T28009] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 10 04 00 66 66 [ 1585.779611][T28009] RSP: 0018:ffffc90003c37ba8 EFLAGS: 00050206 [ 1585.779629][T28009] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 0000000000000005 [ 1585.779644][T28009] RDX: ffffed100d0f0c5c RSI: 0000000000000000 RDI: ffff8880687862e0 [ 1585.779659][T28009] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d0f0c5c [ 1585.779673][T28009] R10: 0000000000000004 R11: 0000000000000001 R12: ffffc90003c37da0 [ 1585.779687][T28009] R13: 0000000000000005 R14: ffff8880687862e0 R15: 00007ffffffff000 [ 1585.779717][T28009] _copy_from_iter+0x383/0x16f0 [ 1585.779759][T28009] ? __pfx__copy_from_iter+0x10/0x10 [ 1585.779795][T28009] ? rcu_is_watching+0x12/0xc0 [ 1585.779817][T28009] ? trace_kmalloc+0x2b/0xd0 [ 1585.779838][T28009] ? __kmalloc_noprof+0x242/0x510 [ 1585.779878][T28009] kernfs_fop_write_iter+0x19a/0x510 [ 1585.779907][T28009] vfs_write+0x6c4/0x1150 [ 1585.779940][T28009] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1585.779966][T28009] ? __pfx___mutex_lock+0x10/0x10 [ 1585.780001][T28009] ? __pfx_vfs_write+0x10/0x10 [ 1585.780052][T28009] ksys_write+0x12a/0x250 [ 1585.780083][T28009] ? __pfx_ksys_write+0x10/0x10 [ 1585.780124][T28009] do_syscall_64+0xcd/0x490 [ 1585.780161][T28009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.780183][T28009] RIP: 0033:0x7f6e7b78e929 [ 1585.780200][T28009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1585.780222][T28009] RSP: 002b:00007f6e7c550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1585.780242][T28009] RAX: ffffffffffffffda RBX: 00007f6e7b9b5fa0 RCX: 00007f6e7b78e929 [ 1585.780258][T28009] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1585.780272][T28009] RBP: 00007f6e7c550090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.780286][T28009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.780300][T28009] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1585.780329][T28009] [ 1586.127794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.666701][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4481'. [ 1588.713750][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4481'. [ 1589.993234][T28066] FAULT_INJECTION: forcing a failure. [ 1589.993234][T28066] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.068179][T28066] CPU: 0 UID: 0 PID: 28066 Comm: syz.6.4486 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1590.068221][T28066] Tainted: [U]=USER [ 1590.068229][T28066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1590.068244][T28066] Call Trace: [ 1590.068252][T28066] [ 1590.068261][T28066] dump_stack_lvl+0x16c/0x1f0 [ 1590.068303][T28066] should_fail_ex+0x512/0x640 [ 1590.068338][T28066] ? fs_reclaim_acquire+0xae/0x150 [ 1590.068370][T28066] should_failslab+0xc2/0x120 [ 1590.068392][T28066] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1590.068430][T28066] ? security_inode_alloc+0x3b/0x2b0 [ 1590.068460][T28066] security_inode_alloc+0x3b/0x2b0 [ 1590.068487][T28066] inode_init_always_gfp+0xce4/0x1030 [ 1590.068526][T28066] alloc_inode+0x86/0x240 [ 1590.068551][T28066] new_inode+0x22/0x1c0 [ 1590.068577][T28066] proc_pid_make_inode+0x22/0x160 [ 1590.068612][T28066] proc_ns_instantiate+0x57/0x100 [ 1590.068647][T28066] proc_ns_dir_lookup+0x1af/0x2f0 [ 1590.068683][T28066] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1590.068715][T28066] lookup_open.isra.0+0x4d7/0x1580 [ 1590.068753][T28066] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1590.068800][T28066] ? mnt_get_write_access+0x20c/0x300 [ 1590.068830][T28066] path_openat+0x893/0x2cb0 [ 1590.068874][T28066] ? __pfx_path_openat+0x10/0x10 [ 1590.068911][T28066] ? __lock_acquire+0xb8a/0x1c90 [ 1590.068946][T28066] do_filp_open+0x20b/0x470 [ 1590.068981][T28066] ? __pfx_do_filp_open+0x10/0x10 [ 1590.069028][T28066] ? __pfx_kfree_link+0x10/0x10 [ 1590.069063][T28066] ? alloc_fd+0x471/0x7d0 [ 1590.069103][T28066] do_sys_openat2+0x11b/0x1d0 [ 1590.069130][T28066] ? __pfx_do_sys_openat2+0x10/0x10 [ 1590.069159][T28066] ? __sys_sendmsg+0x18c/0x220 [ 1590.069210][T28066] __x64_sys_openat+0x174/0x210 [ 1590.069239][T28066] ? __pfx___x64_sys_openat+0x10/0x10 [ 1590.069269][T28066] ? syscall_user_dispatch+0x78/0x140 [ 1590.069315][T28066] do_syscall_64+0xcd/0x490 [ 1590.069355][T28066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.069380][T28066] RIP: 0033:0x7f198858d290 [ 1590.069399][T28066] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1590.069423][T28066] RSP: 002b:00007f19894c0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1590.069447][T28066] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f198858d290 [ 1590.069463][T28066] RDX: 0000000000000002 RSI: 00007f19894c0fa0 RDI: 00000000ffffff9c [ 1590.069479][T28066] RBP: 00007f19894c0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1590.069495][T28066] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1590.069509][T28066] R13: 0000000000000000 R14: 00007f19887b5fa0 R15: 00007ffc927d3fb8 [ 1590.069540][T28066] [ 1590.345331][ C0] vkms_vblank_simulate: vblank timer overrun [ 1590.872164][T28078] can: request_module (can-proto-5) failed. [ 1591.144714][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4494'. [ 1591.170579][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4494'. [ 1594.639645][T28142] FAULT_INJECTION: forcing a failure. [ 1594.639645][T28142] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.639685][T28142] CPU: 0 UID: 0 PID: 28142 Comm: syz.6.4507 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1594.639720][T28142] Tainted: [U]=USER [ 1594.639741][T28142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1594.639754][T28142] Call Trace: [ 1594.639768][T28142] [ 1594.639776][T28142] dump_stack_lvl+0x16c/0x1f0 [ 1594.639834][T28142] should_fail_ex+0x512/0x640 [ 1594.639880][T28142] ? fs_reclaim_acquire+0xae/0x150 [ 1594.639909][T28142] should_failslab+0xc2/0x120 [ 1594.639930][T28142] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1594.639964][T28142] ? security_inode_alloc+0x3b/0x2b0 [ 1594.639992][T28142] security_inode_alloc+0x3b/0x2b0 [ 1594.640017][T28142] inode_init_always_gfp+0xce4/0x1030 [ 1594.640052][T28142] alloc_inode+0x86/0x240 [ 1594.640074][T28142] new_inode+0x22/0x1c0 [ 1594.640098][T28142] proc_pid_make_inode+0x22/0x160 [ 1594.640130][T28142] proc_ns_instantiate+0x57/0x100 [ 1594.640161][T28142] proc_ns_dir_lookup+0x1af/0x2f0 [ 1594.640193][T28142] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1594.640223][T28142] lookup_open.isra.0+0x4d7/0x1580 [ 1594.640259][T28142] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1594.640301][T28142] ? mnt_get_write_access+0x20c/0x300 [ 1594.640329][T28142] path_openat+0x893/0x2cb0 [ 1594.640368][T28142] ? __pfx_path_openat+0x10/0x10 [ 1594.640401][T28142] ? __lock_acquire+0xb8a/0x1c90 [ 1594.640434][T28142] do_filp_open+0x20b/0x470 [ 1594.640465][T28142] ? __pfx_do_filp_open+0x10/0x10 [ 1594.640506][T28142] ? __pfx_kfree_link+0x10/0x10 [ 1594.640538][T28142] ? alloc_fd+0x471/0x7d0 [ 1594.640574][T28142] do_sys_openat2+0x11b/0x1d0 [ 1594.640597][T28142] ? __pfx_do_sys_openat2+0x10/0x10 [ 1594.640623][T28142] ? __sys_sendmsg+0x18c/0x220 [ 1594.640682][T28142] __x64_sys_openat+0x174/0x210 [ 1594.640718][T28142] ? __pfx___x64_sys_openat+0x10/0x10 [ 1594.640746][T28142] ? syscall_user_dispatch+0x78/0x140 [ 1594.640797][T28142] do_syscall_64+0xcd/0x490 [ 1594.640836][T28142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.640861][T28142] RIP: 0033:0x7f198858d290 [ 1594.640879][T28142] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1594.640902][T28142] RSP: 002b:00007f19894c0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1594.640930][T28142] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f198858d290 [ 1594.640945][T28142] RDX: 0000000000000002 RSI: 00007f19894c0fa0 RDI: 00000000ffffff9c [ 1594.640960][T28142] RBP: 00007f19894c0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.640974][T28142] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1594.640988][T28142] R13: 0000000000000000 R14: 00007f19887b5fa0 R15: 00007ffc927d3fb8 [ 1594.641021][T28142] [ 1596.184212][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1596.644298][T28164] tty tty8: ldisc open failed (-12), clearing slot 7 [ 1596.755373][T28170] pty pty29: ldisc open failed (-12), clearing slot 29 [ 1596.808416][T28171] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1596.871711][T28175] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 1598.589698][T28217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4528'. [ 1598.590731][T28217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4528'. [ 1600.211856][T28246] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4542'. [ 1603.247787][T28298] FAULT_INJECTION: forcing a failure. [ 1603.247787][T28298] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.350257][T28298] CPU: 0 UID: 0 PID: 28298 Comm: syz.3.4545 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1603.350299][T28298] Tainted: [U]=USER [ 1603.350307][T28298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1603.350321][T28298] Call Trace: [ 1603.350330][T28298] [ 1603.350339][T28298] dump_stack_lvl+0x16c/0x1f0 [ 1603.350381][T28298] should_fail_ex+0x512/0x640 [ 1603.350417][T28298] ? fs_reclaim_acquire+0xae/0x150 [ 1603.350448][T28298] should_failslab+0xc2/0x120 [ 1603.350471][T28298] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1603.350508][T28298] ? security_inode_alloc+0x3b/0x2b0 [ 1603.350539][T28298] security_inode_alloc+0x3b/0x2b0 [ 1603.350565][T28298] inode_init_always_gfp+0xce4/0x1030 [ 1603.350604][T28298] alloc_inode+0x86/0x240 [ 1603.350629][T28298] path_from_stashed+0x2be/0xb00 [ 1603.350664][T28298] ? do_raw_spin_lock+0x12c/0x2b0 [ 1603.350704][T28298] ? __pfx_path_from_stashed+0x10/0x10 [ 1603.350741][T28298] ? do_raw_spin_unlock+0x172/0x230 [ 1603.350783][T28298] ns_get_path+0x5f/0x80 [ 1603.350814][T28298] proc_ns_get_link+0x121/0x260 [ 1603.350847][T28298] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1603.350883][T28298] ? atime_needs_update+0x8b/0x710 [ 1603.350911][T28298] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1603.350950][T28298] step_into+0x1a2c/0x2270 [ 1603.350987][T28298] ? __pfx_step_into+0x10/0x10 [ 1603.351016][T28298] ? find_held_lock+0x2b/0x80 [ 1603.351049][T28298] path_openat+0x6db/0x2cb0 [ 1603.351093][T28298] ? __pfx_path_openat+0x10/0x10 [ 1603.351129][T28298] ? __lock_acquire+0xb8a/0x1c90 [ 1603.351164][T28298] do_filp_open+0x20b/0x470 [ 1603.351212][T28298] ? __pfx_do_filp_open+0x10/0x10 [ 1603.351270][T28298] ? alloc_fd+0x471/0x7d0 [ 1603.351309][T28298] do_sys_openat2+0x11b/0x1d0 [ 1603.351334][T28298] ? __pfx_do_sys_openat2+0x10/0x10 [ 1603.351362][T28298] ? __sys_sendmsg+0x18c/0x220 [ 1603.351409][T28298] __x64_sys_openat+0x174/0x210 [ 1603.351436][T28298] ? __pfx___x64_sys_openat+0x10/0x10 [ 1603.351474][T28298] do_syscall_64+0xcd/0x490 [ 1603.351513][T28298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.351537][T28298] RIP: 0033:0x7efef458d290 [ 1603.351556][T28298] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1603.351578][T28298] RSP: 002b:00007efef534ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1603.351600][T28298] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007efef458d290 [ 1603.351616][T28298] RDX: 0000000000000002 RSI: 00007efef534efa0 RDI: 00000000ffffff9c [ 1603.351630][T28298] RBP: 00007efef534efa0 R08: 0000000000000000 R09: 0000000000000000 [ 1603.351645][T28298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1603.351659][T28298] R13: 0000000000000000 R14: 00007efef47b6080 R15: 00007fffa8dd4208 [ 1603.351688][T28298] [ 1603.634204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.692559][T28303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4548'. [ 1604.635582][T15599] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1605.966184][T28353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4560'. [ 1607.763518][T28391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4572'. [ 1607.963352][T28393] FAULT_INJECTION: forcing a failure. [ 1607.963352][T28393] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.033519][T28393] CPU: 0 UID: 0 PID: 28393 Comm: syz.5.4570 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1608.033567][T28393] Tainted: [U]=USER [ 1608.033575][T28393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1608.033589][T28393] Call Trace: [ 1608.033598][T28393] [ 1608.033608][T28393] dump_stack_lvl+0x16c/0x1f0 [ 1608.033650][T28393] should_fail_ex+0x512/0x640 [ 1608.033688][T28393] ? fs_reclaim_acquire+0xae/0x150 [ 1608.033720][T28393] should_failslab+0xc2/0x120 [ 1608.033743][T28393] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1608.033780][T28393] ? security_inode_alloc+0x3b/0x2b0 [ 1608.033811][T28393] security_inode_alloc+0x3b/0x2b0 [ 1608.033838][T28393] inode_init_always_gfp+0xce4/0x1030 [ 1608.033876][T28393] alloc_inode+0x86/0x240 [ 1608.033900][T28393] path_from_stashed+0x2be/0xb00 [ 1608.033936][T28393] ? do_raw_spin_lock+0x12c/0x2b0 [ 1608.033975][T28393] ? __pfx_path_from_stashed+0x10/0x10 [ 1608.034012][T28393] ? do_raw_spin_unlock+0x172/0x230 [ 1608.034055][T28393] ns_get_path+0x5f/0x80 [ 1608.034086][T28393] proc_ns_get_link+0x121/0x260 [ 1608.034119][T28393] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1608.034154][T28393] ? atime_needs_update+0x8b/0x710 [ 1608.034182][T28393] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1608.034215][T28393] step_into+0x1a2c/0x2270 [ 1608.034251][T28393] ? __pfx_step_into+0x10/0x10 [ 1608.034280][T28393] ? find_held_lock+0x2b/0x80 [ 1608.034312][T28393] path_openat+0x6db/0x2cb0 [ 1608.034357][T28393] ? __pfx_path_openat+0x10/0x10 [ 1608.034393][T28393] ? __lock_acquire+0xb8a/0x1c90 [ 1608.034428][T28393] do_filp_open+0x20b/0x470 [ 1608.034463][T28393] ? __pfx_do_filp_open+0x10/0x10 [ 1608.034540][T28393] ? alloc_fd+0x471/0x7d0 [ 1608.034581][T28393] do_sys_openat2+0x11b/0x1d0 [ 1608.034608][T28393] ? __pfx_do_sys_openat2+0x10/0x10 [ 1608.034637][T28393] ? __sys_sendmsg+0x18c/0x220 [ 1608.034681][T28393] __x64_sys_openat+0x174/0x210 [ 1608.034709][T28393] ? __pfx___x64_sys_openat+0x10/0x10 [ 1608.034748][T28393] do_syscall_64+0xcd/0x490 [ 1608.034788][T28393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.034813][T28393] RIP: 0033:0x7f6e7b78d290 [ 1608.034832][T28393] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1608.034856][T28393] RSP: 002b:00007f6e7c52ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1608.034880][T28393] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e7b78d290 [ 1608.034896][T28393] RDX: 0000000000000002 RSI: 00007f6e7c52efa0 RDI: 00000000ffffff9c [ 1608.034911][T28393] RBP: 00007f6e7c52efa0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.034927][T28393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1608.034941][T28393] R13: 0000000000000000 R14: 00007f6e7b9b6080 R15: 00007ffcb0360638 [ 1608.034971][T28393] [ 1608.314360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.051057][T28435] FAULT_INJECTION: forcing a failure. [ 1610.051057][T28435] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.120936][T28435] CPU: 0 UID: 0 PID: 28435 Comm: syz.3.4582 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1610.120979][T28435] Tainted: [U]=USER [ 1610.120987][T28435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1610.121003][T28435] Call Trace: [ 1610.121012][T28435] [ 1610.121021][T28435] dump_stack_lvl+0x16c/0x1f0 [ 1610.121064][T28435] should_fail_ex+0x512/0x640 [ 1610.121100][T28435] ? fs_reclaim_acquire+0xae/0x150 [ 1610.121131][T28435] should_failslab+0xc2/0x120 [ 1610.121159][T28435] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1610.121196][T28435] ? security_inode_alloc+0x3b/0x2b0 [ 1610.121228][T28435] security_inode_alloc+0x3b/0x2b0 [ 1610.121256][T28435] inode_init_always_gfp+0xce4/0x1030 [ 1610.121295][T28435] alloc_inode+0x86/0x240 [ 1610.121320][T28435] new_inode+0x22/0x1c0 [ 1610.121353][T28435] proc_pid_make_inode+0x22/0x160 [ 1610.121389][T28435] proc_ns_instantiate+0x57/0x100 [ 1610.121424][T28435] proc_ns_dir_lookup+0x1af/0x2f0 [ 1610.121460][T28435] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1610.121493][T28435] lookup_open.isra.0+0x4d7/0x1580 [ 1610.121530][T28435] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1610.121577][T28435] ? mnt_get_write_access+0x20c/0x300 [ 1610.121608][T28435] path_openat+0x893/0x2cb0 [ 1610.121652][T28435] ? __pfx_path_openat+0x10/0x10 [ 1610.121689][T28435] ? __lock_acquire+0xb8a/0x1c90 [ 1610.121725][T28435] do_filp_open+0x20b/0x470 [ 1610.121760][T28435] ? __pfx_do_filp_open+0x10/0x10 [ 1610.121805][T28435] ? __pfx_kfree_link+0x10/0x10 [ 1610.121840][T28435] ? alloc_fd+0x471/0x7d0 [ 1610.121881][T28435] do_sys_openat2+0x11b/0x1d0 [ 1610.121907][T28435] ? __pfx_do_sys_openat2+0x10/0x10 [ 1610.121936][T28435] ? __sys_sendmsg+0x18c/0x220 [ 1610.121981][T28435] __x64_sys_openat+0x174/0x210 [ 1610.122008][T28435] ? __pfx___x64_sys_openat+0x10/0x10 [ 1610.122048][T28435] do_syscall_64+0xcd/0x490 [ 1610.122088][T28435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.122113][T28435] RIP: 0033:0x7efef458d290 [ 1610.122133][T28435] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1610.122157][T28435] RSP: 002b:00007efef534ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1610.122180][T28435] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007efef458d290 [ 1610.122196][T28435] RDX: 0000000000000002 RSI: 00007efef534efa0 RDI: 00000000ffffff9c [ 1610.122211][T28435] RBP: 00007efef534efa0 R08: 0000000000000000 R09: 0000000000000000 [ 1610.122225][T28435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1610.122240][T28435] R13: 0000000000000000 R14: 00007efef47b6080 R15: 00007fffa8dd4208 [ 1610.122271][T28435] [ 1610.390223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.698873][T28448] writes to the poll attribute are ignored. [ 1610.699444][T28448] please use driver specific parameters instead. [ 1612.795719][T28493] FAULT_INJECTION: forcing a failure. [ 1612.795719][T28493] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.795823][T28493] CPU: 0 UID: 0 PID: 28493 Comm: syz.5.4599 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1612.795859][T28493] Tainted: [U]=USER [ 1612.795867][T28493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1612.795882][T28493] Call Trace: [ 1612.795890][T28493] [ 1612.795899][T28493] dump_stack_lvl+0x16c/0x1f0 [ 1612.795941][T28493] should_fail_ex+0x512/0x640 [ 1612.795981][T28493] should_failslab+0xc2/0x120 [ 1612.796004][T28493] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1612.796037][T28493] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 1612.796082][T28493] tipc_nametbl_insert_publ+0x700/0x1720 [ 1612.796125][T28493] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1612.796171][T28493] ? net_generic+0xea/0x2a0 [ 1612.796218][T28493] tipc_nametbl_publish+0x137/0x280 [ 1612.796262][T28493] tipc_sk_publish+0x1d8/0x430 [ 1612.796286][T28493] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1612.796313][T28493] ? __local_bh_enable_ip+0xa4/0x120 [ 1612.796344][T28493] tipc_sk_bind+0x16f/0x380 [ 1612.796374][T28493] tipc_bind+0x190/0x2a0 [ 1612.796400][T28493] __sys_bind+0x1a4/0x260 [ 1612.796431][T28493] ? __pfx___sys_bind+0x10/0x10 [ 1612.796472][T28493] ? xfd_validate_state+0x61/0x180 [ 1612.796503][T28493] ? __sys_setsockopt+0x140/0x1a0 [ 1612.796544][T28493] __x64_sys_bind+0x72/0xb0 [ 1612.796572][T28493] ? lockdep_hardirqs_on+0x7c/0x110 [ 1612.796608][T28493] do_syscall_64+0xcd/0x490 [ 1612.796648][T28493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.796673][T28493] RIP: 0033:0x7f6e7b78e929 [ 1612.796692][T28493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1612.796716][T28493] RSP: 002b:00007f6e7c550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1612.796739][T28493] RAX: ffffffffffffffda RBX: 00007f6e7b9b5fa0 RCX: 00007f6e7b78e929 [ 1612.796755][T28493] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000005 [ 1612.796770][T28493] RBP: 00007f6e7b810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1612.796785][T28493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.796800][T28493] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1612.796830][T28493] [ 1612.796870][T28493] tipc: Failed to bind to 65,0,0 [ 1616.322092][T28544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4610'. [ 1617.913908][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.920431][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.528535][T28633] binder: 28628:28633 ioctl 400c620e 0 returned -22 [ 1620.640685][T28633] binder: 28628:28633 ioctl 400c620e 0 returned -22 [ 1620.714644][T28633] binder: 28628:28633 ioctl 400c620e 0 returned -22 [ 1620.773968][T28633] binder: 28628:28633 ioctl 400c620e 0 returned -22 [ 1620.824555][T28633] binder: 28628:28633 ioctl 400c620e 0 returned -22 [ 1620.893218][T28633] binder: 28628:28633 ioctl 400c620e 0 returned -22 [ 1620.919417][T28633] binder: 28628:28633 ioctl 400c620e 0 returned -22 [ 1621.459621][T28637] FAULT_INJECTION: forcing a failure. [ 1621.459621][T28637] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.539671][T28637] CPU: 0 UID: 0 PID: 28637 Comm: syz.0.4637 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1621.539713][T28637] Tainted: [U]=USER [ 1621.539721][T28637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.539737][T28637] Call Trace: [ 1621.539745][T28637] [ 1621.539768][T28637] dump_stack_lvl+0x16c/0x1f0 [ 1621.539808][T28637] should_fail_ex+0x512/0x640 [ 1621.539842][T28637] ? fs_reclaim_acquire+0xae/0x150 [ 1621.539874][T28637] should_failslab+0xc2/0x120 [ 1621.539896][T28637] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1621.539933][T28637] ? security_inode_alloc+0x3b/0x2b0 [ 1621.539963][T28637] security_inode_alloc+0x3b/0x2b0 [ 1621.539990][T28637] inode_init_always_gfp+0xce4/0x1030 [ 1621.540027][T28637] alloc_inode+0x86/0x240 [ 1621.540051][T28637] new_inode+0x22/0x1c0 [ 1621.540077][T28637] proc_pid_make_inode+0x22/0x160 [ 1621.540111][T28637] proc_ns_instantiate+0x57/0x100 [ 1621.540144][T28637] proc_ns_dir_lookup+0x1af/0x2f0 [ 1621.540179][T28637] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1621.540210][T28637] lookup_open.isra.0+0x4d7/0x1580 [ 1621.540246][T28637] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1621.540291][T28637] ? mnt_get_write_access+0x20c/0x300 [ 1621.540320][T28637] path_openat+0x893/0x2cb0 [ 1621.540371][T28637] ? __pfx_path_openat+0x10/0x10 [ 1621.540406][T28637] ? __lock_acquire+0xb8a/0x1c90 [ 1621.540441][T28637] do_filp_open+0x20b/0x470 [ 1621.540475][T28637] ? __pfx_do_filp_open+0x10/0x10 [ 1621.540522][T28637] ? __pfx_kfree_link+0x10/0x10 [ 1621.540556][T28637] ? alloc_fd+0x471/0x7d0 [ 1621.540595][T28637] do_sys_openat2+0x11b/0x1d0 [ 1621.540620][T28637] ? __pfx_do_sys_openat2+0x10/0x10 [ 1621.540648][T28637] ? __sys_sendmsg+0x18c/0x220 [ 1621.540692][T28637] __x64_sys_openat+0x174/0x210 [ 1621.540718][T28637] ? __pfx___x64_sys_openat+0x10/0x10 [ 1621.540757][T28637] do_syscall_64+0xcd/0x490 [ 1621.540796][T28637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.540820][T28637] RIP: 0033:0x7f788b58d290 [ 1621.540839][T28637] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1621.540863][T28637] RSP: 002b:00007f788c3ebf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1621.540885][T28637] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f788b58d290 [ 1621.540901][T28637] RDX: 0000000000000002 RSI: 00007f788c3ebfa0 RDI: 00000000ffffff9c [ 1621.540916][T28637] RBP: 00007f788c3ebfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1621.540930][T28637] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1621.540945][T28637] R13: 0000000000000000 R14: 00007f788b7b5fa0 R15: 00007ffd1302cd28 [ 1621.540974][T28637] [ 1621.809907][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.094730][T28709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4644'. [ 1628.069617][T28764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4657'. [ 1631.204936][T28811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4669'. [ 1635.543933][T28886] net_ratelimit: 96 callbacks suppressed [ 1635.543951][T28886] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1637.128493][T28903] FAULT_INJECTION: forcing a failure. [ 1637.128493][T28903] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.201549][T28903] CPU: 0 UID: 0 PID: 28903 Comm: syz.5.4691 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1637.201592][T28903] Tainted: [U]=USER [ 1637.201600][T28903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1637.201616][T28903] Call Trace: [ 1637.201624][T28903] [ 1637.201633][T28903] dump_stack_lvl+0x16c/0x1f0 [ 1637.201675][T28903] should_fail_ex+0x512/0x640 [ 1637.201711][T28903] ? fs_reclaim_acquire+0xae/0x150 [ 1637.201742][T28903] should_failslab+0xc2/0x120 [ 1637.201765][T28903] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1637.201803][T28903] ? security_inode_alloc+0x3b/0x2b0 [ 1637.201834][T28903] security_inode_alloc+0x3b/0x2b0 [ 1637.201862][T28903] inode_init_always_gfp+0xce4/0x1030 [ 1637.201901][T28903] alloc_inode+0x86/0x240 [ 1637.201926][T28903] new_inode+0x22/0x1c0 [ 1637.201959][T28903] proc_pid_make_inode+0x22/0x160 [ 1637.201995][T28903] proc_ns_instantiate+0x57/0x100 [ 1637.202030][T28903] proc_ns_dir_lookup+0x1af/0x2f0 [ 1637.202067][T28903] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1637.202100][T28903] lookup_open.isra.0+0x4d7/0x1580 [ 1637.202137][T28903] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1637.202184][T28903] ? mnt_get_write_access+0x20c/0x300 [ 1637.202215][T28903] path_openat+0x893/0x2cb0 [ 1637.202259][T28903] ? __pfx_path_openat+0x10/0x10 [ 1637.202296][T28903] ? __lock_acquire+0xb8a/0x1c90 [ 1637.202332][T28903] do_filp_open+0x20b/0x470 [ 1637.202367][T28903] ? __pfx_do_filp_open+0x10/0x10 [ 1637.202413][T28903] ? __pfx_kfree_link+0x10/0x10 [ 1637.202448][T28903] ? alloc_fd+0x471/0x7d0 [ 1637.202488][T28903] do_sys_openat2+0x11b/0x1d0 [ 1637.202519][T28903] ? __pfx_do_sys_openat2+0x10/0x10 [ 1637.202548][T28903] ? __sys_sendmsg+0x18c/0x220 [ 1637.202593][T28903] __x64_sys_openat+0x174/0x210 [ 1637.202620][T28903] ? __pfx___x64_sys_openat+0x10/0x10 [ 1637.202661][T28903] do_syscall_64+0xcd/0x490 [ 1637.202702][T28903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.202728][T28903] RIP: 0033:0x7f6e7b78d290 [ 1637.202747][T28903] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1637.202772][T28903] RSP: 002b:00007f6e7c54ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1637.202794][T28903] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e7b78d290 [ 1637.202811][T28903] RDX: 0000000000000002 RSI: 00007f6e7c54ffa0 RDI: 00000000ffffff9c [ 1637.202826][T28903] RBP: 00007f6e7c54ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.202842][T28903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1637.202857][T28903] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1637.202888][T28903] [ 1637.469652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1638.081655][T28919] FAULT_INJECTION: forcing a failure. [ 1638.081655][T28919] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.106820][T28919] CPU: 0 UID: 0 PID: 28919 Comm: syz.5.4697 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1638.106862][T28919] Tainted: [U]=USER [ 1638.106875][T28919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1638.106890][T28919] Call Trace: [ 1638.106898][T28919] [ 1638.106907][T28919] dump_stack_lvl+0x16c/0x1f0 [ 1638.106953][T28919] should_fail_ex+0x512/0x640 [ 1638.106988][T28919] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1638.107032][T28919] should_failslab+0xc2/0x120 [ 1638.107055][T28919] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1638.107095][T28919] ? kstrdup_const+0x63/0x80 [ 1638.107136][T28919] kstrdup+0x53/0x100 [ 1638.107173][T28919] kstrdup_const+0x63/0x80 [ 1638.107209][T28919] __kmem_cache_create_args+0x18f/0x390 [ 1638.107246][T28919] mon_text_open+0x313/0x4f0 [ 1638.107284][T28919] ? __pfx_mon_text_open+0x10/0x10 [ 1638.107319][T28919] ? __debugfs_file_get+0x1fe/0x840 [ 1638.107342][T28919] ? __pfx_mon_text_ctor+0x10/0x10 [ 1638.107377][T28919] ? __pfx_apparmor_file_open+0x10/0x10 [ 1638.107407][T28919] ? lockdown_is_locked_down+0x3f/0x130 [ 1638.107440][T28919] ? bpf_lsm_locked_down+0x9/0x10 [ 1638.107473][T28919] ? __pfx_mon_text_open+0x10/0x10 [ 1638.107507][T28919] full_proxy_open_regular+0x1b6/0x360 [ 1638.107536][T28919] do_dentry_open+0x744/0x1c10 [ 1638.107573][T28919] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1638.107605][T28919] vfs_open+0x82/0x3f0 [ 1638.107634][T28919] path_openat+0x1de4/0x2cb0 [ 1638.107679][T28919] ? __pfx_path_openat+0x10/0x10 [ 1638.107718][T28919] ? __lock_acquire+0xb8a/0x1c90 [ 1638.107757][T28919] do_filp_open+0x20b/0x470 [ 1638.107791][T28919] ? __pfx_do_filp_open+0x10/0x10 [ 1638.107848][T28919] ? alloc_fd+0x471/0x7d0 [ 1638.107895][T28919] do_sys_openat2+0x11b/0x1d0 [ 1638.107922][T28919] ? __pfx_do_sys_openat2+0x10/0x10 [ 1638.107960][T28919] __x64_sys_openat+0x174/0x210 [ 1638.107999][T28919] ? __pfx___x64_sys_openat+0x10/0x10 [ 1638.108038][T28919] do_syscall_64+0xcd/0x490 [ 1638.108077][T28919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.108101][T28919] RIP: 0033:0x7f6e7b78e929 [ 1638.108120][T28919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1638.108143][T28919] RSP: 002b:00007f6e7c550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1638.108166][T28919] RAX: ffffffffffffffda RBX: 00007f6e7b9b5fa0 RCX: 00007f6e7b78e929 [ 1638.108181][T28919] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1638.108196][T28919] RBP: 00007f6e7b810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1638.108222][T28919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1638.108235][T28919] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1638.108263][T28919] [ 1638.382804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.474258][T28919] __kmem_cache_create_args(mon_text_ffff88807d01fc00) failed with error -12 [ 1639.489748][T28943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1639.526894][T28919] CPU: 0 UID: 0 PID: 28919 Comm: syz.5.4697 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1639.526935][T28919] Tainted: [U]=USER [ 1639.526948][T28919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1639.526964][T28919] Call Trace: [ 1639.526972][T28919] [ 1639.526981][T28919] dump_stack_lvl+0x16c/0x1f0 [ 1639.527023][T28919] __kmem_cache_create_args+0x125/0x390 [ 1639.527063][T28919] mon_text_open+0x313/0x4f0 [ 1639.527101][T28919] ? __pfx_mon_text_open+0x10/0x10 [ 1639.527136][T28919] ? __debugfs_file_get+0x1fe/0x840 [ 1639.527159][T28919] ? __pfx_mon_text_ctor+0x10/0x10 [ 1639.527196][T28919] ? __pfx_apparmor_file_open+0x10/0x10 [ 1639.527225][T28919] ? lockdown_is_locked_down+0x3f/0x130 [ 1639.527259][T28919] ? bpf_lsm_locked_down+0x9/0x10 [ 1639.527292][T28919] ? __pfx_mon_text_open+0x10/0x10 [ 1639.527327][T28919] full_proxy_open_regular+0x1b6/0x360 [ 1639.527360][T28919] do_dentry_open+0x744/0x1c10 [ 1639.527397][T28919] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1639.527429][T28919] vfs_open+0x82/0x3f0 [ 1639.527459][T28919] path_openat+0x1de4/0x2cb0 [ 1639.527504][T28919] ? __pfx_path_openat+0x10/0x10 [ 1639.527541][T28919] ? __lock_acquire+0xb8a/0x1c90 [ 1639.527576][T28919] do_filp_open+0x20b/0x470 [ 1639.527611][T28919] ? __pfx_do_filp_open+0x10/0x10 [ 1639.527667][T28919] ? alloc_fd+0x471/0x7d0 [ 1639.527708][T28919] do_sys_openat2+0x11b/0x1d0 [ 1639.527734][T28919] ? __pfx_do_sys_openat2+0x10/0x10 [ 1639.527778][T28919] __x64_sys_openat+0x174/0x210 [ 1639.527806][T28919] ? __pfx___x64_sys_openat+0x10/0x10 [ 1639.527845][T28919] do_syscall_64+0xcd/0x490 [ 1639.527886][T28919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.527911][T28919] RIP: 0033:0x7f6e7b78e929 [ 1639.527930][T28919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.527954][T28919] RSP: 002b:00007f6e7c550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1639.527977][T28919] RAX: ffffffffffffffda RBX: 00007f6e7b9b5fa0 RCX: 00007f6e7b78e929 [ 1639.527994][T28919] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1639.528010][T28919] RBP: 00007f6e7b810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1639.528025][T28919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.528040][T28919] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1639.528070][T28919] [ 1639.767535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.848837][T28946] vhci_hcd: invalid port number 16 [ 1639.854011][T28946] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1640.012082][T28949] FAULT_INJECTION: forcing a failure. [ 1640.012082][T28949] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.025363][T28949] CPU: 0 UID: 0 PID: 28949 Comm: syz.6.4704 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1640.025400][T28949] Tainted: [U]=USER [ 1640.025409][T28949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1640.025423][T28949] Call Trace: [ 1640.025431][T28949] [ 1640.025439][T28949] dump_stack_lvl+0x16c/0x1f0 [ 1640.025480][T28949] should_fail_ex+0x512/0x640 [ 1640.025514][T28949] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1640.025554][T28949] should_failslab+0xc2/0x120 [ 1640.025576][T28949] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1640.025612][T28949] ? __d_alloc+0x31/0xaa0 [ 1640.025652][T28949] __d_alloc+0x31/0xaa0 [ 1640.025714][T28949] d_alloc+0x4a/0x1e0 [ 1640.025751][T28949] d_alloc_parallel+0xe3/0x12e0 [ 1640.025786][T28949] ? find_held_lock+0x2b/0x80 [ 1640.025817][T28949] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1640.025848][T28949] ? __d_lookup+0x266/0x4a0 [ 1640.025881][T28949] lookup_open.isra.0+0x665/0x1580 [ 1640.025917][T28949] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1640.025962][T28949] ? mnt_get_write_access+0x20c/0x300 [ 1640.025992][T28949] path_openat+0x893/0x2cb0 [ 1640.026034][T28949] ? __pfx_path_openat+0x10/0x10 [ 1640.026070][T28949] ? __lock_acquire+0xb8a/0x1c90 [ 1640.026103][T28949] do_filp_open+0x20b/0x470 [ 1640.026137][T28949] ? __pfx_do_filp_open+0x10/0x10 [ 1640.026181][T28949] ? __pfx_kfree_link+0x10/0x10 [ 1640.026217][T28949] ? alloc_fd+0x471/0x7d0 [ 1640.026275][T28949] do_sys_openat2+0x11b/0x1d0 [ 1640.026302][T28949] ? __pfx_do_sys_openat2+0x10/0x10 [ 1640.026331][T28949] ? __sys_sendmsg+0x18c/0x220 [ 1640.026376][T28949] __x64_sys_openat+0x174/0x210 [ 1640.026404][T28949] ? __pfx___x64_sys_openat+0x10/0x10 [ 1640.026445][T28949] do_syscall_64+0xcd/0x490 [ 1640.026485][T28949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.026510][T28949] RIP: 0033:0x7f198858d290 [ 1640.026531][T28949] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1640.026554][T28949] RSP: 002b:00007f19894c0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1640.026577][T28949] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f198858d290 [ 1640.026594][T28949] RDX: 0000000000000002 RSI: 00007f19894c0fa0 RDI: 00000000ffffff9c [ 1640.026609][T28949] RBP: 00007f19894c0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1640.026624][T28949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1640.026655][T28949] R13: 0000000000000000 R14: 00007f19887b5fa0 R15: 00007ffc927d3fb8 [ 1640.026690][T28949] [ 1640.278125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1640.534681][T28954] nvme_fabrics: missing parameter 'transport=%s' [ 1640.541875][T28954] nvme_fabrics: missing parameter 'nqn=%s' [ 1642.062860][T28984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4713'. [ 1646.430875][T29029] FAULT_INJECTION: forcing a failure. [ 1646.430875][T29029] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.521486][T29031] nvme_fabrics: missing parameter 'transport=%s' [ 1646.538471][T29029] CPU: 0 UID: 0 PID: 29029 Comm: syz.5.4724 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1646.538510][T29029] Tainted: [U]=USER [ 1646.538517][T29029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1646.538530][T29029] Call Trace: [ 1646.538538][T29029] [ 1646.538546][T29029] dump_stack_lvl+0x16c/0x1f0 [ 1646.538583][T29029] should_fail_ex+0x512/0x640 [ 1646.538615][T29029] ? fs_reclaim_acquire+0xae/0x150 [ 1646.538644][T29029] should_failslab+0xc2/0x120 [ 1646.538665][T29029] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1646.538699][T29029] ? security_inode_alloc+0x3b/0x2b0 [ 1646.538727][T29029] security_inode_alloc+0x3b/0x2b0 [ 1646.538751][T29029] inode_init_always_gfp+0xce4/0x1030 [ 1646.538786][T29029] alloc_inode+0x86/0x240 [ 1646.538808][T29029] path_from_stashed+0x2be/0xb00 [ 1646.538840][T29029] ? do_raw_spin_lock+0x12c/0x2b0 [ 1646.538876][T29029] ? __pfx_path_from_stashed+0x10/0x10 [ 1646.538910][T29029] ? do_raw_spin_unlock+0x172/0x230 [ 1646.538948][T29029] ns_get_path+0x5f/0x80 [ 1646.538977][T29029] proc_ns_get_link+0x121/0x260 [ 1646.539007][T29029] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1646.539039][T29029] ? atime_needs_update+0x8b/0x710 [ 1646.539074][T29029] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1646.539104][T29029] step_into+0x1a2c/0x2270 [ 1646.539138][T29029] ? __pfx_step_into+0x10/0x10 [ 1646.539164][T29029] ? find_held_lock+0x2b/0x80 [ 1646.539193][T29029] path_openat+0x6db/0x2cb0 [ 1646.539252][T29029] ? __pfx_path_openat+0x10/0x10 [ 1646.539287][T29029] ? __lock_acquire+0xb8a/0x1c90 [ 1646.539324][T29029] do_filp_open+0x20b/0x470 [ 1646.539358][T29029] ? __pfx_do_filp_open+0x10/0x10 [ 1646.539411][T29029] ? alloc_fd+0x471/0x7d0 [ 1646.539450][T29029] do_sys_openat2+0x11b/0x1d0 [ 1646.539475][T29029] ? __pfx_do_sys_openat2+0x10/0x10 [ 1646.539502][T29029] ? __sys_sendmsg+0x18c/0x220 [ 1646.539545][T29029] __x64_sys_openat+0x174/0x210 [ 1646.539572][T29029] ? __pfx___x64_sys_openat+0x10/0x10 [ 1646.539609][T29029] do_syscall_64+0xcd/0x490 [ 1646.539648][T29029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.539671][T29029] RIP: 0033:0x7f6e7b78d290 [ 1646.539690][T29029] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1646.539713][T29029] RSP: 002b:00007f6e7c54ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1646.539735][T29029] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e7b78d290 [ 1646.539750][T29029] RDX: 0000000000000002 RSI: 00007f6e7c54ffa0 RDI: 00000000ffffff9c [ 1646.539765][T29029] RBP: 00007f6e7c54ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.539780][T29029] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1646.539794][T29029] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1646.539822][T29029] [ 1646.539931][T29031] nvme_fabrics: missing parameter 'nqn=%s' [ 1647.668110][T29044] FAULT_INJECTION: forcing a failure. [ 1647.668110][T29044] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.700364][T29044] CPU: 0 UID: 0 PID: 29044 Comm: syz.5.4728 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1647.700410][T29044] Tainted: [U]=USER [ 1647.700418][T29044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1647.700433][T29044] Call Trace: [ 1647.700442][T29044] [ 1647.700452][T29044] dump_stack_lvl+0x16c/0x1f0 [ 1647.700494][T29044] should_fail_ex+0x512/0x640 [ 1647.700528][T29044] ? fs_reclaim_acquire+0xae/0x150 [ 1647.700560][T29044] should_failslab+0xc2/0x120 [ 1647.700583][T29044] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1647.700628][T29044] ? security_inode_alloc+0x3b/0x2b0 [ 1647.700659][T29044] security_inode_alloc+0x3b/0x2b0 [ 1647.700686][T29044] inode_init_always_gfp+0xce4/0x1030 [ 1647.700726][T29044] alloc_inode+0x86/0x240 [ 1647.700750][T29044] new_inode+0x22/0x1c0 [ 1647.700777][T29044] proc_pid_make_inode+0x22/0x160 [ 1647.700813][T29044] proc_ns_instantiate+0x57/0x100 [ 1647.700848][T29044] proc_ns_dir_lookup+0x1af/0x2f0 [ 1647.700884][T29044] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1647.700916][T29044] lookup_open.isra.0+0x4d7/0x1580 [ 1647.700953][T29044] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1647.701009][T29044] ? mnt_get_write_access+0x20c/0x300 [ 1647.701040][T29044] path_openat+0x893/0x2cb0 [ 1647.701085][T29044] ? __pfx_path_openat+0x10/0x10 [ 1647.701122][T29044] ? __lock_acquire+0xb8a/0x1c90 [ 1647.701158][T29044] do_filp_open+0x20b/0x470 [ 1647.701194][T29044] ? __pfx_do_filp_open+0x10/0x10 [ 1647.701240][T29044] ? __pfx_kfree_link+0x10/0x10 [ 1647.701275][T29044] ? alloc_fd+0x471/0x7d0 [ 1647.701316][T29044] do_sys_openat2+0x11b/0x1d0 [ 1647.701343][T29044] ? __pfx_do_sys_openat2+0x10/0x10 [ 1647.701372][T29044] ? __sys_sendmsg+0x18c/0x220 [ 1647.701416][T29044] __x64_sys_openat+0x174/0x210 [ 1647.701444][T29044] ? __pfx___x64_sys_openat+0x10/0x10 [ 1647.701484][T29044] do_syscall_64+0xcd/0x490 [ 1647.701525][T29044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.701549][T29044] RIP: 0033:0x7f6e7b78d290 [ 1647.701568][T29044] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1647.701592][T29044] RSP: 002b:00007f6e7c54ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1647.701615][T29044] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e7b78d290 [ 1647.701630][T29044] RDX: 0000000000000002 RSI: 00007f6e7c54ffa0 RDI: 00000000ffffff9c [ 1647.701646][T29044] RBP: 00007f6e7c54ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.701661][T29044] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1647.701675][T29044] R13: 0000000000000000 R14: 00007f6e7b9b5fa0 R15: 00007ffcb0360638 [ 1647.701707][T29044] [ 1647.969792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.390605][T29048] mmap: syz.3.4730 (29048): VmData 37470208 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 1648.606162][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1649.552605][T29073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4735'. [ 1650.136198][T29080] FAULT_INJECTION: forcing a failure. [ 1650.136198][T29080] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.242229][T29080] CPU: 0 UID: 0 PID: 29080 Comm: syz.0.4736 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1650.242271][T29080] Tainted: [U]=USER [ 1650.242280][T29080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1650.242295][T29080] Call Trace: [ 1650.242303][T29080] [ 1650.242313][T29080] dump_stack_lvl+0x16c/0x1f0 [ 1650.242356][T29080] should_fail_ex+0x512/0x640 [ 1650.242395][T29080] ? fs_reclaim_acquire+0xae/0x150 [ 1650.242427][T29080] should_failslab+0xc2/0x120 [ 1650.242451][T29080] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1650.242488][T29080] ? security_inode_alloc+0x3b/0x2b0 [ 1650.242519][T29080] security_inode_alloc+0x3b/0x2b0 [ 1650.242547][T29080] inode_init_always_gfp+0xce4/0x1030 [ 1650.242586][T29080] alloc_inode+0x86/0x240 [ 1650.242611][T29080] new_inode+0x22/0x1c0 [ 1650.242638][T29080] proc_pid_make_inode+0x22/0x160 [ 1650.242673][T29080] proc_ns_instantiate+0x57/0x100 [ 1650.242708][T29080] proc_ns_dir_lookup+0x1af/0x2f0 [ 1650.242750][T29080] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1650.242783][T29080] lookup_open.isra.0+0x4d7/0x1580 [ 1650.242820][T29080] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1650.242868][T29080] ? mnt_get_write_access+0x20c/0x300 [ 1650.242898][T29080] path_openat+0x893/0x2cb0 [ 1650.242943][T29080] ? __pfx_path_openat+0x10/0x10 [ 1650.242980][T29080] ? __lock_acquire+0xb8a/0x1c90 [ 1650.243016][T29080] do_filp_open+0x20b/0x470 [ 1650.243051][T29080] ? __pfx_do_filp_open+0x10/0x10 [ 1650.243096][T29080] ? __pfx_kfree_link+0x10/0x10 [ 1650.243131][T29080] ? alloc_fd+0x471/0x7d0 [ 1650.243172][T29080] do_sys_openat2+0x11b/0x1d0 [ 1650.243198][T29080] ? __pfx_do_sys_openat2+0x10/0x10 [ 1650.243227][T29080] ? __sys_sendmsg+0x18c/0x220 [ 1650.243272][T29080] __x64_sys_openat+0x174/0x210 [ 1650.243299][T29080] ? __pfx___x64_sys_openat+0x10/0x10 [ 1650.243340][T29080] do_syscall_64+0xcd/0x490 [ 1650.243379][T29080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.243404][T29080] RIP: 0033:0x7f788b58d290 [ 1650.243424][T29080] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1650.243448][T29080] RSP: 002b:00007f788c3ebf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1650.243471][T29080] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f788b58d290 [ 1650.243487][T29080] RDX: 0000000000000002 RSI: 00007f788c3ebfa0 RDI: 00000000ffffff9c [ 1650.243502][T29080] RBP: 00007f788c3ebfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.243517][T29080] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1650.243532][T29080] R13: 0000000000000000 R14: 00007f788b7b5fa0 R15: 00007ffd1302cd28 [ 1650.243563][T29080] [ 1650.509508][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.593134][T29094] nvme_fabrics: missing parameter 'transport=%s' [ 1651.609656][T29094] nvme_fabrics: missing parameter 'nqn=%s' [ 1654.365103][T29135] tty tty12: ldisc open failed (-12), clearing slot 11 [ 1657.273919][T29152] nvme_fabrics: missing parameter 'transport=%s' [ 1657.273956][T29152] nvme_fabrics: missing parameter 'nqn=%s' [ 1657.963545][T29164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4753'. [ 1658.113814][T29171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4755'. [ 1658.114861][T29171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4755'. [ 1660.528659][T29204] nvme_fabrics: missing parameter 'transport=%s' [ 1660.571136][T29204] nvme_fabrics: missing parameter 'nqn=%s' [ 1661.300007][T15599] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1663.611424][T29246] nvme_fabrics: missing parameter 'transport=%s' [ 1663.611444][T29246] nvme_fabrics: missing parameter 'nqn=%s' [ 1663.682958][T29251] program syz.5.4776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1665.979606][T29286] nvme_fabrics: missing parameter 'transport=%s' [ 1666.007199][T29286] nvme_fabrics: missing parameter 'nqn=%s' [ 1668.173275][T15599] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1668.173309][T15599] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 1668.194776][T15599] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1668.194805][T15599] Bluetooth: hci2: adv larger than maximum supported [ 1668.202326][T15599] Bluetooth: hci2: adv larger than maximum supported [ 1668.209470][T15599] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1669.383140][T29333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1669.488439][T29333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1669.553339][T29333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1669.577853][T29339] mtrr: base(0x10000) is not aligned on a size(0x0000) boundary [ 1669.650244][T29333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1670.029794][T22390] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1670.052643][T22390] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1670.061457][T22390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1670.078853][T22390] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1670.086725][T22390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1671.027686][T22390] Bluetooth: hci1: command 0x0c1a tx timeout [ 1671.046694][T18699] ------------[ cut here ]------------ [ 1671.052561][T18699] ODEBUG: free active (active state 0) object: ffff888025a8d318 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1671.281391][T18699] WARNING: CPU: 0 PID: 18699 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1671.291197][T18699] Modules linked in: [ 1671.295117][T18699] CPU: 0 UID: 0 PID: 18699 Comm: syz-executor Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1671.309193][T18699] Tainted: [U]=USER [ 1671.313005][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1671.323158][T18699] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1671.329122][T18699] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 80 77 15 8c 4c 89 e6 48 c7 c7 00 6c 15 8c e8 8f 21 9c fc 90 <0f> 0b 90 90 58 83 05 56 db c9 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1671.349564][T18699] RSP: 0018:ffffc9000be17768 EFLAGS: 00010286 [ 1671.356806][T18699] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aa1f8 [ 1671.365715][T18699] RDX: ffff8880223dda00 RSI: ffffffff817aa205 RDI: 0000000000000001 [ 1671.374417][T18699] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1671.382465][T18699] R10: 0000000000000001 R11: 0000000000026628 R12: ffffffff8c1572a0 [ 1671.390506][T18699] R13: ffffffff8bafe840 R14: ffffffff8a8865e0 R15: ffffc9000be17868 [ 1671.398792][T18699] FS: 0000000000000000(0000) GS:ffff88812475f000(0000) knlGS:0000000000000000 [ 1671.407786][T18699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1671.414386][T18699] CR2: 0000001b2e814ff8 CR3: 000000006a880000 CR4: 00000000003526f0 [ 1671.422497][T18699] Call Trace: [ 1671.425788][T18699] [ 1671.428763][T18699] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1671.434254][T18699] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1671.440676][T18699] debug_check_no_obj_freed+0x4b7/0x600 [ 1671.446258][T18699] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1671.452780][T18699] ? rcu_is_watching+0x12/0xc0 [ 1671.457923][T18699] ? kmem_cache_free+0x2d1/0x4d0 [ 1671.462895][T18699] kfree+0x28f/0x4d0 [ 1671.467608][T18699] ? hci_release_dev+0x4d8/0x600 [ 1671.472581][T18699] hci_release_dev+0x4d8/0x600 [ 1671.477805][T18699] ? __pfx_hci_release_dev+0x10/0x10 [ 1671.483125][T18699] ? rcu_is_watching+0x12/0xc0 [ 1671.487947][T18699] ? kfree+0x24f/0x4d0 [ 1671.492043][T18699] bt_host_release+0x6a/0xb0 [ 1671.496651][T18699] ? __pfx_bt_host_release+0x10/0x10 [ 1671.501998][T18699] device_release+0xa4/0x240 [ 1671.506628][T18699] kobject_put+0x1e7/0x5a0 [ 1671.511096][T18699] ? __pfx_vhci_release+0x10/0x10 [ 1671.516150][T18699] put_device+0x1f/0x30 [ 1671.520374][T18699] vhci_release+0x81/0xf0 [ 1671.524734][T18699] __fput+0x402/0xb70 [ 1671.528778][T18699] task_work_run+0x14d/0x240 [ 1671.533402][T18699] ? __pfx_task_work_run+0x10/0x10 [ 1671.538588][T18699] do_exit+0x86c/0x2bd0 [ 1671.543281][T18699] ? __pfx_do_exit+0x10/0x10 [ 1671.548324][T18699] ? do_raw_spin_lock+0x12c/0x2b0 [ 1671.553381][T18699] ? find_held_lock+0x2b/0x80 [ 1671.558469][T18699] do_group_exit+0xd3/0x2a0 [ 1671.563004][T18699] get_signal+0x2673/0x26d0 [ 1671.568317][T18699] ? __pfx_get_signal+0x10/0x10 [ 1671.573199][T18699] arch_do_signal_or_restart+0x8f/0x790 [ 1671.579185][T18699] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1671.585368][T18699] ? ksys_read+0x1ac/0x250 [ 1671.589904][T18699] ? __pfx_ksys_read+0x10/0x10 [ 1671.594701][T18699] exit_to_user_mode_loop+0x84/0x110 [ 1671.600060][T18699] do_syscall_64+0x3f6/0x490 [ 1671.604686][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.610646][T18699] RIP: 0033:0x7efef458d33c [ 1671.615097][T18699] Code: Unable to access opcode bytes at 0x7efef458d312. [ 1671.622156][T18699] RSP: 002b:00007fffa8dd4560 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1671.630627][T18699] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007efef458d33c [ 1671.638650][T18699] RDX: 0000000000000030 RSI: 00007fffa8dd4620 RDI: 00000000000000f9 [ 1671.647184][T18699] RBP: 00007fffa8dd45cc R08: 0000000000000000 R09: 0079746972756365 [ 1671.655168][T18699] R10: 00007fffa8dd3f20 R11: 0000000000000246 R12: 0000000000000258 [ 1671.663947][T18699] R13: 00000000000927c0 R14: 00000000001974ae R15: 00007fffa8dd4620 [ 1671.673097][T18699] [ 1671.676135][T18699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1671.683434][T18699] CPU: 0 UID: 0 PID: 18699 Comm: syz-executor Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1671.697256][T18699] Tainted: [U]=USER [ 1671.701065][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1671.711131][T18699] Call Trace: [ 1671.714524][T18699] [ 1671.717468][T18699] dump_stack_lvl+0x3d/0x1f0 [ 1671.722095][T18699] panic+0x71c/0x800 [ 1671.726017][T18699] ? __pfx_panic+0x10/0x10 [ 1671.730465][T18699] ? show_trace_log_lvl+0x29b/0x3e0 [ 1671.735699][T18699] ? check_panic_on_warn+0x1f/0xb0 [ 1671.740840][T18699] ? debug_print_object+0x1a2/0x2b0 [ 1671.746055][T18699] check_panic_on_warn+0xab/0xb0 [ 1671.751024][T18699] __warn+0xf6/0x3c0 [ 1671.754943][T18699] ? debug_print_object+0x1a2/0x2b0 [ 1671.760154][T18699] report_bug+0x3c3/0x580 [ 1671.764520][T18699] ? debug_print_object+0x1a2/0x2b0 [ 1671.769750][T18699] handle_bug+0x184/0x210 [ 1671.774098][T18699] exc_invalid_op+0x17/0x50 [ 1671.778615][T18699] asm_exc_invalid_op+0x1a/0x20 [ 1671.783481][T18699] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1671.789299][T18699] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 80 77 15 8c 4c 89 e6 48 c7 c7 00 6c 15 8c e8 8f 21 9c fc 90 <0f> 0b 90 90 58 83 05 56 db c9 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1671.809002][T18699] RSP: 0018:ffffc9000be17768 EFLAGS: 00010286 [ 1671.815085][T18699] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aa1f8 [ 1671.823069][T18699] RDX: ffff8880223dda00 RSI: ffffffff817aa205 RDI: 0000000000000001 [ 1671.831051][T18699] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1671.839034][T18699] R10: 0000000000000001 R11: 0000000000026628 R12: ffffffff8c1572a0 [ 1671.847023][T18699] R13: ffffffff8bafe840 R14: ffffffff8a8865e0 R15: ffffc9000be17868 [ 1671.855020][T18699] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1671.860527][T18699] ? __warn_printk+0x198/0x350 [ 1671.865321][T18699] ? __warn_printk+0x1a5/0x350 [ 1671.870121][T18699] ? debug_print_object+0x1a1/0x2b0 [ 1671.875333][T18699] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1671.880817][T18699] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1671.886666][T18699] debug_check_no_obj_freed+0x4b7/0x600 [ 1671.892252][T18699] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1671.898338][T18699] ? rcu_is_watching+0x12/0xc0 [ 1671.903131][T18699] ? kmem_cache_free+0x2d1/0x4d0 [ 1671.908105][T18699] kfree+0x28f/0x4d0 [ 1671.912018][T18699] ? hci_release_dev+0x4d8/0x600 [ 1671.916992][T18699] hci_release_dev+0x4d8/0x600 [ 1671.921784][T18699] ? __pfx_hci_release_dev+0x10/0x10 [ 1671.927124][T18699] ? rcu_is_watching+0x12/0xc0 [ 1671.931907][T18699] ? kfree+0x24f/0x4d0 [ 1671.936028][T18699] bt_host_release+0x6a/0xb0 [ 1671.940634][T18699] ? __pfx_bt_host_release+0x10/0x10 [ 1671.945929][T18699] device_release+0xa4/0x240 [ 1671.950537][T18699] kobject_put+0x1e7/0x5a0 [ 1671.954967][T18699] ? __pfx_vhci_release+0x10/0x10 [ 1671.960015][T18699] put_device+0x1f/0x30 [ 1671.964190][T18699] vhci_release+0x81/0xf0 [ 1671.968544][T18699] __fput+0x402/0xb70 [ 1671.972555][T18699] task_work_run+0x14d/0x240 [ 1671.977168][T18699] ? __pfx_task_work_run+0x10/0x10 [ 1671.982317][T18699] do_exit+0x86c/0x2bd0 [ 1671.986509][T18699] ? __pfx_do_exit+0x10/0x10 [ 1671.991142][T18699] ? do_raw_spin_lock+0x12c/0x2b0 [ 1671.996195][T18699] ? find_held_lock+0x2b/0x80 [ 1672.000896][T18699] do_group_exit+0xd3/0x2a0 [ 1672.005425][T18699] get_signal+0x2673/0x26d0 [ 1672.009956][T18699] ? __pfx_get_signal+0x10/0x10 [ 1672.014839][T18699] arch_do_signal_or_restart+0x8f/0x790 [ 1672.020407][T18699] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1672.026592][T18699] ? ksys_read+0x1ac/0x250 [ 1672.031036][T18699] ? __pfx_ksys_read+0x10/0x10 [ 1672.035834][T18699] exit_to_user_mode_loop+0x84/0x110 [ 1672.041149][T18699] do_syscall_64+0x3f6/0x490 [ 1672.045772][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.051686][T18699] RIP: 0033:0x7efef458d33c [ 1672.056114][T18699] Code: Unable to access opcode bytes at 0x7efef458d312. [ 1672.063140][T18699] RSP: 002b:00007fffa8dd4560 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1672.071566][T18699] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007efef458d33c [ 1672.079549][T18699] RDX: 0000000000000030 RSI: 00007fffa8dd4620 RDI: 00000000000000f9 [ 1672.087544][T18699] RBP: 00007fffa8dd45cc R08: 0000000000000000 R09: 0079746972756365 [ 1672.095534][T18699] R10: 00007fffa8dd3f20 R11: 0000000000000246 R12: 0000000000000258 [ 1672.103520][T18699] R13: 00000000000927c0 R14: 00000000001974ae R15: 00007fffa8dd4620 [ 1672.111522][T18699] [ 1672.114633][T18699] Kernel Offset: disabled [ 1672.118971][T18699] Rebooting in 86400 seconds..