last executing test programs:

1m24.564153113s ago: executing program 3 (id=2086):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async, rerun: 32)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async, rerun: 64)
socket(0x10, 0x2, 0x0) (rerun: 64)
memfd_secret$auto(0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x488981, 0x0) (async)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) (async)
write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, 0x0, 0x98c7) (async)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) (async)
mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0)
pread64$auto(r2, 0x0, 0x8, 0xffff) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
ioctl$auto(0x3, 0x80108907, 0x38)

1m23.349504551s ago: executing program 3 (id=2088):
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/tracing/set_event\x00', 0x7c1480, 0x0)
r1 = socket(0x15, 0x5, 0x9)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0x0, 0xe9, 0x100008, 0x9b72, r1, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b71, 0x2, 0x8000)
r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"})
ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000002c0)={0x7fe3, 0x6, "b908674cfda2f7f351c66f681b0cf4a6f675fcee96065fdca6f219ea386de55097e14dbb38e0462dd9d44d7c6c55e2a5937efe361800", "3b6e33d493a9c79b3387938d612ceab5a4a20e605cd0842aa149397ff8063b45d44f8ce95fa39df1e5e1fc5e51f00fa2dfcc38c9b1ef6596b9e746f5e48ac07048156ea6be1e1ca5d281c7bb11333d0f", 0x397, 0x3, "d3bc655e384df871894a5771758ff164f2cd8098ac193333046911421bc3f1a0cf5d0300000000000000a9001fa7efb0600cc93b5b84a000"})
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(r0, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
brk$auto(0xffffffffffffff66)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x84200, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8008000)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x81fe, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4)
pipe$auto(&(0x7f0000000040)=<r5=>r4)
write$auto_tracing_mark_raw_fops_trace(r5, &(0x7f0000000080)="832814e318e918ecca892a4b584ed48f8d7bcea32fcbdc92f54e7cb50a037976bce7ed8d0d47badf84409329ae76e04ab1281461ca4c485db3d8fcca79526877bfc99871b4ccbdf7ed6bc8dae4acd52f2b19330b707bcb03969f3a1dfc39ce6a37a763af4c0ca287be46549bb6b7e265e0cf1bc4c6ed1e14cda4344d93a3a72c2bd8806eeb63c991c40c1f73b40791a18b0577d2399e83044cef0c7b2643b48981448c0cedf9feb5c11adaa35029bfd895b1dcffbcec8263e5d92b373cf8a4ae53224fa7d92b96af764679", 0xcb)
madvise$auto(0x0, 0x2003f0, 0x15)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4)
socket(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xf, 0x3, 0x1)
sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000fffffdef)
sendmsg$auto_NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80)

1m22.492476409s ago: executing program 3 (id=2091):
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
mmap$auto(0x0, 0x20005, 0x4000000000dc, 0xeb1, 0x401, 0x40000008000)
r0 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci3/force_wakeup\x00', 0x8742, 0x0)
write$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)='1', 0x1)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x5, 0x8)
keyctl$auto(0x11, 0xdfffffffffffffff, 0x69c9, 0x0, 0xbcd)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x9, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
getpid()
mlockall$auto(0x5)
rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2b, 0x1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x88)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, &(0x7f0000000140), 0x55)
getsockopt$auto(r2, 0x40000000029, 0x1, 0xfffffffffffffffe, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x4)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0xa, 0x300)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x400, 0x7)
close_range$auto(0x2, 0x8, 0x0)

1m21.144975496s ago: executing program 3 (id=2093):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf250300000005000300040000000500050000000000050002000400000005000200810000000c00018008000100", @ANYRES32=r2, @ANYBLOB="86e4ed7ecb9325c8cd73133cfe75174d09305c50f5958f87617966af2e4b23a6785913b1a347459130e651d742e846c41ec78b9db623eff7970c0098154166bc342317d55cfa628d51b10d64475f5bcd2b36c9e6a698655677391034d110d33fb8b7d5912ce5a0459ae25ebfc58e39b736c4d059433d9737eacf4c0aa4658fda2aae1276b8b29072068596430e9641e412f862a3c9219bf26ffdbaad99b5503da1f3fe3e87ca041d232ce1bf103713338a07c7a3be2e4e6b02730d722b2eb2d18767aecee7c8a3091876434002a24cc638dd41fdaddf7779"], 0x40}, 0x1, 0x0, 0x0, 0x4000841}, 0x2000c840)

1m20.890272697s ago: executing program 3 (id=2095):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
rt_sigtimedwait$auto(&(0x7f00000000c0)={0xffffffff}, &(0x7f0000000100)={@siginfo_0_0={0xff, 0x9, 0x2, @_sigpoll={0x6, r0}}}, &(0x7f0000000180)={0x2, 0xfffffffffffff000}, 0x8)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
read$auto(r0, 0x0, 0x20)
r1 = socket(0x2, 0x801, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x100)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(r1, 0x6, 0xa, 0x0, 0x9)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd15\x00', 0x80000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f00000013c0)="352c8efa618c0bcf83ebc441e7af7307000000000000007929e0eb89851b5f0b9e4ff2201749de411c66eca55ffca38e2e7d595281d1f28babef7733f5a0465e80871ac9a7a29765a601c2ae4885d73d4dcc1c9fb39396", 0x57)
ioctl$auto_BLKSECDISCARD(r2, 0x127d, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
fanotify_init$auto(0x5, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
unshare$auto(0x40000080)

1m20.104500233s ago: executing program 3 (id=2097):
mmap$auto(0x0, 0x80000001, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (rerun: 32)
socket(0x15, 0x5, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x6202, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async)
select$auto(0x3, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x95f4da0a, 0x400, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe]}, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) (async)
mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000008580)=ANY=[@ANYRES8, @ANYBLOB="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"], 0x4238}, 0x1, 0x0, 0x0, 0x4c098}, 0x4048000)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73)
r3 = socket(0x2, 0x1, 0x84)
setsockopt$auto(r3, 0x10000000084, 0x19, 0x0, 0x8) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (rerun: 32)

1m4.566924281s ago: executing program 32 (id=2097):
mmap$auto(0x0, 0x80000001, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (rerun: 32)
socket(0x15, 0x5, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x6202, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async)
select$auto(0x3, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x95f4da0a, 0x400, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe]}, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) (async)
mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000008580)=ANY=[@ANYRES8, @ANYBLOB="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"], 0x4238}, 0x1, 0x0, 0x0, 0x4c098}, 0x4048000)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73)
r3 = socket(0x2, 0x1, 0x84)
setsockopt$auto(r3, 0x10000000084, 0x19, 0x0, 0x8) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (rerun: 32)

11.703071389s ago: executing program 1 (id=2276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/irq/2/wakeup\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x4000800)
mmap$auto(0x0, 0x22009, 0x4000000000df, 0xeb1, 0x401, 0x1)
socket(0xa, 0x3, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0)
read$auto(r3, &(0x7f0000000240)='/\x00', 0x100000001)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffffffffffff7)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x48b41, 0x0)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x20c00, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mincore$auto(0x1000, 0x8001, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8, 0x0)
ptrace$auto(0x4206, 0x1, 0x0, 0x200005)
alarm$auto(0x80000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)

10.692900049s ago: executing program 0 (id=2278):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r0, 0x80000000, 0x1)
read$auto_ctl_device_fops_user(r0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getpid()
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/ip_vs_conn\x00', 0x20440, 0x0)
pread64$auto(r3, 0x0, 0xa0, 0xf86)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc)
r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0x0, 0x0)
pread64$auto(r4, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400)
inotify_rm_watch$auto(r2, 0x8001)
getpid()
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
write$auto(0x3, 0x0, 0xffd8)
mprotect$auto(0x0, 0x806121, 0x6)

10.415621114s ago: executing program 1 (id=2279):
writev$auto(0xffffffffffffffff, 0x0, 0x3)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000810)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x121901, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0)
ioctl$auto(0x3, 0xc040563e, 0x38)
r1 = socket(0x11, 0x2, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48})
mkdir$auto(&(0x7f0000000140)='./file0\x00', 0x974c)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), r1)
unshare$auto(0x40000080)
write$auto(0x3, 0x0, 0xffd8)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x400, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)

9.370755971s ago: executing program 0 (id=2282):
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) (async)
r0 = socket(0x15, 0x5, 0x0)
r1 = getsockopt$auto(r0, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) (async)
unshare$auto(0x40000080) (async, rerun: 64)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea06, 0x0) (rerun: 64)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) (async)
r3 = bpf$auto(0x5, 0x0, 0x102) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_SCAN(r4, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="79a327bd7000fedbdf2520000000810740ae986ba83484560611f67ed964c137f80553562c7b6ea3901f1c2b26d12c2a289d603413807099bc29c8ffc1581253a6d8445aba5f99e4c193feba73a38658fe2cd94767117e42d7253e9f5bbcde207d9eed038f7942a2ed527656569fe26d8856d0269c417e178eca44aee5a08d79dac5bfb11db7d967cd618ed90be241218ae58f5c5c702d3087af1033"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_BSS_COLOR={0x4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x2c, 0x128, "412c94727916e271831e0a667b5b461579f3daae363ef7463fbaa2637e96bae836a4a6a56fb3da1d"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x22240, 0x155)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x155) (async, rerun: 32)
socket(0x2, 0x1, 0x0) (rerun: 32)
getsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x0) (async)
socket(0xb, 0x3, 0x3b)
r6 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0)
write$auto(r6, &(0x7f00000001c0)='-\x001c\xc2.b\x97\x1a\xf4\xd8\x1a\x1c\xb2\x9db\xb1\xec\xdeGDr=\xc2\xdc\xdf\x8cg\xa10Fzk\x86bd\xfc\x19\x96y\x9cYy\xc1\xc4\xf1\x0fH\x0f2\xa6\xbd\x9b\xe8\x97\xb0>,\xbf\xb8Kje\x05\xc4\xf8\x01\xd3]\x7f\xb8\x83S\xaf\xc5\xceZZlTO\xf5\x81`$\xec=|1\x05\xa9\x95Q\xf6\a\x81)\x94\xdaJ.\x04\xf2\xd7O\xa7=u1\xcd$\x17(t\xa4.\x1d\xfd\xf1\xc8e\x9c\xb4k\xfd\x94+B\x17o\\>4\xb7d5\a\xef\xb6\xe5F\xba\xf9Q\xdb\xd0\xb5\xa6\x1b\\\x0e\xb7\xab\xc3\x7fO`\x0e\x15\xca\x01z\xc23\xa1\x03\xdd@\xf3', 0xfdef) (async)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) (async, rerun: 32)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9) (rerun: 32)

7.700444651s ago: executing program 0 (id=2289):
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0)
mmap$auto(0x20, 0x400007, 0x80, 0x400012, r0, 0xffffffffffffffff)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
lseek$auto(0x3, 0x0, 0x1)
munmap$auto(0x8000, 0xffffffff)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
r1 = prctl$auto_SECCOMP_MODE_STRICT(0x9, 0x1, 0x0, 0x8000, 0x5)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x101}, 0x7}, 0x3, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0x200d)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22d02, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8)
r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0)
read$auto_vhci_fops_hci_vhci(r2, 0x0, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

6.885798325s ago: executing program 1 (id=2290):
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0)
socket(0xf, 0x3, 0x2) (async, rerun: 32)
r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 32)
pread64$auto(r0, 0x0, 0x8001, 0x1964) (async, rerun: 32)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
socket(0x2, 0x2, 0x0) (rerun: 32)
bind$auto(0xffffffffffffffff, 0x0, 0x67) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async)
sendmsg$auto_NL80211_CMD_DEL_PMK(r3, 0x0, 0x8000) (async, rerun: 32)
socket(0xa, 0x5, 0x8) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x100)
ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040))
unshare$auto(0x40000080)

6.758280429s ago: executing program 4 (id=2291):
r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x88901, 0x0)
ftruncate$auto(r0, 0x100000001)

6.362527776s ago: executing program 4 (id=2292):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x80000001, 0x4000000000001, 0x4, 0x5, 0x40045a1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x101, 0x5, 0x7fff, 0x6, 0x80020000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0x6, 0x7ffffffd, 0x3, 0x7, 0x9})
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0)
timerfd_create$auto(0x9, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
adjtimex$auto(&(0x7f0000000180)={0x9, 0x0, 0xffffffffffffffff, 0x40, 0x4, 0x0, 0x6, 0x0, 0xe, 0x2, 0x9, {0xe62, 0x1}, 0xfffffffffffffff7, 0x8e08, 0x100000001, 0x5, 0x0, 0x2, 0x9, 0x0, 0x3a, 0x40, 0x3})
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x28300, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
close_range$auto(0x0, 0x5, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0x200007, 0x8)

6.312353272s ago: executing program 0 (id=2293):
unshare$auto(0x40000080)
r0 = socket(0xa, 0x1, 0x84)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
close_range$auto(r0, 0xffffffffffffffff, 0x3)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0)
mmap$auto(0x0, 0x20007, 0xdf, 0x19, 0x401, 0x2)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto(0x3, 0xc0485619, 0x38)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0)
r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0)
ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r2, 0x5509, 0x0)
unshare$auto(0x40000080)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, 0x0, 0x44044)
timer_create$auto(0x8, &(0x7f0000000000)={@sival_int=0xccea, @inferred, 0x1}, &(0x7f0000000040)=0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = getpgrp(0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, r3, 0xfffffffffffffff5, 0x7)
open_by_handle_at$auto(r1, 0x0, 0x5)
r4 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0)
readv$auto(r4, &(0x7f0000001080)={&(0x7f0000000080), 0x5c2}, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000080), r5)
sendmsg$auto_ILA_CMD_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x9, 0x70bd2d, 0x25dfdbfb, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20048840)
socket(0x28, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x445f, 0x15f4da0a, 0x1, 0x81, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)

5.95641418s ago: executing program 1 (id=2295):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0)
read$auto(0x3, 0x0, 0xf3c)
write$auto(r0, 0x0, 0xd149)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
sysfs$auto(0x2, 0x10000000000002f, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x3d13, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0)
write$auto(r3, &(0x7f0000000100)='0\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x402000b, 0x7, 0xeb1, 0x401, 0x8000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/dummy0/stable_secret\x00', 0x100, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket(0x1d, 0x2, 0x6)
r5 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000180), 0x101480, 0x0)
r7 = socket(0x2, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000280)=@in={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x55)
shutdown$auto(0x200000003, 0x2)
shutdown$auto(0x200000003, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r3, r0, 0x81)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES64=r7, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=r7], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)

4.594665902s ago: executing program 4 (id=2296):
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x420102, 0x0)
ioctl$auto_TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
mmap$auto(0x2, 0x40000000008, 0x6, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x8000)
socket(0x11, 0x3, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)
r3 = ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, 0x0)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
io_uring_setup$auto(0x3000000, &(0x7f00000001c0)={0x7, 0x2cff, 0x0, 0xffffffff, 0x0, 0x5, 0xffffffffffffffff, [0x0, 0x4], {0xc, 0xe, 0x8000, 0x2, 0xfffffffa, 0x7, 0x4, 0x15d}, {0x40, 0xf1, 0x0, 0x4, 0x10001, 0x4, 0x6, 0x8d, 0x8}})
sendmsg$auto_NL802154_CMD_SET_TX_POWER(r3, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
memfd_create$auto(0x0, 0xd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x8, 0x401, r5, @relative_fd, 0x6}, 0xf)
bpf$auto(0x1, &(0x7f00000002c0)=@bpf_attr_0={0x5, 0x0, 0xfb03, 0x9, 0x4, 0xffffffffffffffff, 0x9, "7defc51120dfc9202e5ea7421ce62c93", 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x7ff}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)

4.159783539s ago: executing program 2 (id=2297):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0)
prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x4, 0x0, <r1=>r0})
ioperm$auto(0x7, 0x1, 0x7)
modify_ldt$auto(0x1, 0x0, 0x10)
ioperm$auto(0x7, 0x6, 0x2)
r2 = gettid()
rt_sigqueueinfo$auto(r2, 0x2, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x26, 0xa, 0x7)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000003280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendmsg$auto_BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="f38327b97000fedbdf250500000008000300", @ANYRES32=r7], 0x1c}}, 0x4008000)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ROUTER={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity$auto(r2, 0x4, &(0x7f0000000240)=0x6)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x700)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
close_range$auto(r1, 0xa, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)

4.04235914s ago: executing program 0 (id=2298):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0)
prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x4, 0x0, <r1=>r0})
ioperm$auto(0x7, 0x1, 0x7)
modify_ldt$auto(0x1, 0x0, 0x10)
ioperm$auto(0x7, 0x6, 0x2)
r2 = gettid()
rt_sigqueueinfo$auto(r2, 0x2, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x26, 0xa, 0x7)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000003280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendmsg$auto_BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="f38327b97000fedbdf250500000008000300", @ANYRES32=r7], 0x1c}}, 0x4008000)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ROUTER={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity$auto(r2, 0x4, &(0x7f0000000240)=0x6)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x14)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
close_range$auto(r1, 0xa, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)

4.028916055s ago: executing program 4 (id=2299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x9, 0x3, 0xeb3, 0xfffefffffffffffa, 0x8000)
r1 = open(0x0, 0x5d3443, 0x120)
fcntl$auto(r1, 0x5, 0x40003f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0xe983, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x69e200, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80900, 0x0)
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xdcf01, 0x0)
io_uring_setup$auto(0x6, 0x0)
write$auto(0x3, 0x0, 0x100082)
setsockopt$auto(0xffffffffffffffff, 0x7, 0xc, 0x0, 0x567)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x103002, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0))
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x48040)

3.841318535s ago: executing program 1 (id=2300):
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0)
mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r3 = socket(0xa, 0x2, 0x84)
getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r2, 0x4b4d, r4)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
readv$auto(r5, &(0x7f00000000c0)={0x0, 0x5}, 0x3)
ioctl$auto_TCFLSH2(r4, 0x540b, &(0x7f00000002c0)="9853e49588d99102c279bb8aa2eb655e358a7556b05153133c5430cd3baddd19c78f238f462394923bcec6a39fb7afc3e85290b0771f518900d9b637d78324588a1462bbb395287e962c99680bad6e939c9625386488843033eb0547c07ca617bac3")
ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0x1010001, 0x100000003)
read$auto(r6, 0x0, 0x20)
sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2408c810}, 0x40418c0)
mmap$auto(0xff0f200000000000, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000003d40)={0x105c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1018, 0x1, 0x0, 0x1, [@typed={0x14, 0x10d, 0x0, 0x0, @ipv6=@private1}, @generic="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"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@typed={0x23, 0x99, 0x0, 0x0, @str='/sys/kernel/debug/sync/sw_sync\x00'}]}]}, 0x105c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4)

2.880743923s ago: executing program 2 (id=2301):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = socketcall$auto(0x8000, 0x0)
mmap$auto(0x7f, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x109000, 0x0)
openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2, 0x0)
read$auto(r2, 0x0, 0x7)
write$auto(0x3, 0x0, 0xfffffdef)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0)
unshare$auto(0x40000080)

2.368561263s ago: executing program 4 (id=2302):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x101100, 0x0)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1a, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) (async)
pread64$auto(r0, 0x0, 0x7ff, 0x400)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) (async)
mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
socket(0x23, 0x80805, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0)
read$auto_vcs_fops_vc_screen(r2, &(0x7f0000000080)=""/238, 0xffffffe9)
r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$auto_nvram_misc_fops_nvram(r3, &(0x7f0000000080)=""/209, 0xd1) (async)
ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) (async)
membarrier$auto(0x2, 0x0, 0x9) (async)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)

1.970252739s ago: executing program 2 (id=2303):
r0 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci3/force_wakeup\x00', 0x8742, 0x0)
write$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)='1', 0x1)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0)
write$auto(r1, 0x0, 0x0)

1.815886617s ago: executing program 1 (id=2304):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0x7fffffff, 0x15, r0, 0x7)
pipe$auto(&(0x7f0000000080)=r0)
unshare$auto(0x40000080)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r1, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r2 = socket(0xa, 0x2, 0xf813)
fadvise64$auto_POSIX_FADV_NOREUSE(r2, 0x7, 0x63b, 0x5)
unshare$auto(0x40000080)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/71, 0x47)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/12, 0xc)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r7 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self/net/ip_mr_vif\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000040)=""/229, 0xe5)
writev$auto(r7, 0x0, 0x9)
fcntl$auto(r6, 0xfffffffd, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x10001, 0x400002, 0x400000040eb1, 0xffffffffffffffff, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb)
r9 = socket(0x2, 0x1, 0x106)
bind$auto(r9, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

1.64296067s ago: executing program 2 (id=2305):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000)
socket(0x2, 0x1, 0x106) (async)
r0 = socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001500", @ANYRES32, @ANYBLOB="12000100898771f1c19f17790485908288470000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001500", @ANYRES32, @ANYBLOB="12000100898771f1c19f17790485908288470000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x0)
memfd_secret$auto(0x1)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4)
r3 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/trap_flow_action_cookie\x00', 0x92980, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7)
write$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000000040)="301c10e9b4f64bf645673136cbaf938583e77454ab9b8220477da6c45436cc791b0710b1e2a33391cc9e1a677d8b46dd871ba652d6f4b4ff01a3ac27a27aa541a7a689aa59b6e82d2723e0ba982f86d2076c207beb4adc87284e51111f2a3330794ee4588f28de1436c869fdbed68a3e822a0eb81e5cfb3c66f25802bdde15f91441fd251253d1297911f06678db17a70331d71f7b53e5c0d3efb6d2db82ec97929bebb252a028cc0331b2a2e33dd6b728633db09dad50ea1d3dd898ce09a0db7b609ba9f23449cda58c3de8189fe76c591d217f85ecf9a3e7de9d63aa09e1a88dc39c1152fa14c1315791fdd102133026", 0xf1) (async)
write$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000000040)="301c10e9b4f64bf645673136cbaf938583e77454ab9b8220477da6c45436cc791b0710b1e2a33391cc9e1a677d8b46dd871ba652d6f4b4ff01a3ac27a27aa541a7a689aa59b6e82d2723e0ba982f86d2076c207beb4adc87284e51111f2a3330794ee4588f28de1436c869fdbed68a3e822a0eb81e5cfb3c66f25802bdde15f91441fd251253d1297911f06678db17a70331d71f7b53e5c0d3efb6d2db82ec97929bebb252a028cc0331b2a2e33dd6b728633db09dad50ea1d3dd898ce09a0db7b609ba9f23449cda58c3de8189fe76c591d217f85ecf9a3e7de9d63aa09e1a88dc39c1152fa14c1315791fdd102133026", 0xf1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x4008000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x4008000)
getdents64$auto(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x4, 0x5, 0xd4, "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"}, 0x200) (async)
getdents64$auto(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x4, 0x5, 0xd4, "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"}, 0x200)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x1d, 0x2, 0x7)
r6 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a)
sendto$auto(r5, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0)
geteuid() (async)
geteuid()
write$auto(r3, 0x0, 0x1)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)

1.457871468s ago: executing program 0 (id=2306):
socket(0x2, 0x80002, 0x73)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0xc00, 0x2000000000002)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0)
rename$auto(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file1\x00')
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x23, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x100000000001, 0x7fffffff)
sendfile$auto(r3, r1, &(0x7f0000000080)=0x8, 0x3508)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getdents$auto(r4, 0x0, 0x41000)
r5 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000200)="200ca012529d93ece834ace67e3e1f2dd24a95056d04b845aaddc474acb9d7c0ac9d4c14808570f64450c9cd6f04f76c6f84bbf4d46ca36e896eead5afed8d66cc8064176a50b23faf17fa5d9e57")
mmap$auto(0x7, 0x8, 0xe3, 0xeb5, r5, 0x8000)
r6 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_RTC_WKALM_SET(r6, 0x4028700f, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
unshare$auto(0x40000080)

1.140249607s ago: executing program 4 (id=2307):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = getpid()
r1 = syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r0], 0x1}, 0x58)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0)
syz_clone(0x80800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r2)
sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2e000000ff03596d1b3da9df2a26600e2900000000a94e819027686c29497ae5bc6e704be1d5a3eaa30e017bec818715d2d146000ea1ba555909805105916b7c22f84dfaabd742b6cd1d919248fbadb4a9f97b612dfb142d906974358edeb3", @ANYRES16=r3, @ANYBLOB="000225bd7000ffdbdf25020000001400080069703665727370616e3000000000000008001800070000000600030004000000050015000800000005000d0080000000"], 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x8004)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
sched_getattr$auto(0x0, 0x0, 0x8198, 0xa286)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0)
unshare$auto(0x40000080)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x3, 0x5, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000)
r5 = signalfd$auto(0x4, 0x0, 0x8)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
prctl$auto(0xfffffff9, 0x3, r1, 0x1, 0x2)
ioctl$auto_FIONCLEX(r5, 0x5450, 0x6)
write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
syslog$auto(0xffffffff, &(0x7f0000000180)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\x01\x00\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)

825.48942ms ago: executing program 2 (id=2308):
mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0xffffffffffffffff, 0x28000)
getrandom$auto(0x0, 0x6000000, 0x3)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpgid(0x0)
sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r6=>0x0})
sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\xff\xfe\x12\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)
sendmsg$auto_OVS_DP_CMD_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x8000)
ioctl$auto(0x3, 0x4020ae76, 0x38)

0s ago: executing program 2 (id=2309):
mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
write$auto(r0, &(0x7f0000000040)='.G+*@sys\x00', 0x2)
madvise$auto(0x0, 0x3, 0x66)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000080)=@enable_stats={0x3}, 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
mmap$auto(0xfffffffffffffff8, 0xef3f, 0x0, 0x17, r2, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r3, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r4 = socket(0x2, 0x5, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
sendto$auto(0x3, 0x0, 0x20010, 0x13f, &(0x7f0000000000)=@generic={0x1a, "0000000000000002a3796e0a195e"}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$auto_WG_CMD_SET_DEVICE(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, "7729ecac5e9239d0c4058eac0405576c2cd59ffc84b3098afa677190f34d1790"}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan0\x00'})
fanotify_init$auto(0x65, 0x2)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)

kernel console output (not intermixed with test programs):

pfx_path_openat+0x10/0x10
[  532.426550][T12317]  ? __lock_acquire+0xb8a/0x1c90
[  532.426602][T12317]  do_filp_open+0x20b/0x470
[  532.426652][T12317]  ? __pfx_do_filp_open+0x10/0x10
[  532.426735][T12317]  ? alloc_fd+0x471/0x7d0
[  532.426794][T12317]  do_sys_openat2+0x11b/0x1d0
[  532.426832][T12317]  ? __pfx_do_sys_openat2+0x10/0x10
[  532.426888][T12317]  __x64_sys_openat+0x174/0x210
[  532.426928][T12317]  ? __pfx___x64_sys_openat+0x10/0x10
[  532.426986][T12317]  do_syscall_64+0xcd/0x490
[  532.427041][T12317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.427075][T12317] RIP: 0033:0x7fe5a538e929
[  532.427102][T12317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.427142][T12317] RSP: 002b:00007fe5a622c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  532.427173][T12317] RAX: ffffffffffffffda RBX: 00007fe5a55b5fa0 RCX: 00007fe5a538e929
[  532.427195][T12317] RDX: 00000000000a2b40 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  532.427216][T12317] RBP: 00007fe5a5410b39 R08: 0000000000000000 R09: 0000000000000000
[  532.427235][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  532.427255][T12317] R13: 0000000000000000 R14: 00007fe5a55b5fa0 R15: 00007ffdf41e5588
[  532.427298][T12317]  </TASK>
[  532.769047][    C1] vkms_vblank_simulate: vblank timer overrun
[  533.699895][T12335] ubi0: attaching mtd0
[  533.733926][T12335] ubi0: scanning is finished
[  534.236720][T12335] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  534.244420][T12335] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  534.253175][T12335] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  534.260185][T12335] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  534.276550][T12335] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  534.290757][T12335] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  534.346706][T12335] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 881888995
[  534.360699][T12335] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  534.426927][T12351] ubi0: background thread "ubi_bgt0d" started, PID 12351
[  534.876064][T12335] lo: entered allmulticast mode
[  535.089405][T12332] lo: left allmulticast mode
[  536.821663][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  536.899687][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  538.107681][T12395] FAULT_INJECTION: forcing a failure.
[  538.107681][T12395] name failslab, interval 1, probability 0, space 0, times 0
[  538.178795][T12395] CPU: 1 UID: 0 PID: 12395 Comm: syz.0.1241 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  538.178846][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  538.178868][T12395] Call Trace:
[  538.178879][T12395]  <TASK>
[  538.178892][T12395]  dump_stack_lvl+0x16c/0x1f0
[  538.178951][T12395]  should_fail_ex+0x512/0x640
[  538.179001][T12395]  ? __kvmalloc_node_noprof+0x124/0x620
[  538.179113][T12395]  should_failslab+0xc2/0x120
[  538.179147][T12395]  __kvmalloc_node_noprof+0x137/0x620
[  538.179193][T12395]  ? __pfx_shmem_get_unmapped_area+0x10/0x10
[  538.179238][T12395]  ? file_tty_write.constprop.0+0x6ef/0x9b0
[  538.179292][T12395]  ? uvc_function_unbind+0xa20/0xb60
[  538.179341][T12395]  ? file_tty_write.constprop.0+0x6ef/0x9b0
[  538.179397][T12395]  file_tty_write.constprop.0+0x6ef/0x9b0
[  538.179461][T12395]  ? rw_verify_area+0xcf/0x680
[  538.179510][T12395]  vfs_write+0x6c4/0x1150
[  538.179562][T12395]  ? __pfx_tty_write+0x10/0x10
[  538.179622][T12395]  ? __pfx_vfs_write+0x10/0x10
[  538.179692][T12395]  ? find_held_lock+0x2b/0x80
[  538.179762][T12395]  ksys_write+0x12a/0x250
[  538.179814][T12395]  ? __pfx_ksys_write+0x10/0x10
[  538.179879][T12395]  do_syscall_64+0xcd/0x490
[  538.179935][T12395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.179969][T12395] RIP: 0033:0x7fe5a538e929
[  538.179997][T12395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  538.180033][T12395] RSP: 002b:00007fe5a622c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  538.180065][T12395] RAX: ffffffffffffffda RBX: 00007fe5a55b5fa0 RCX: 00007fe5a538e929
[  538.180089][T12395] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003
[  538.180111][T12395] RBP: 00007fe5a5410b39 R08: 0000000000000000 R09: 0000000000000000
[  538.180132][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.180153][T12395] R13: 0000000000000000 R14: 00007fe5a55b5fa0 R15: 00007ffdf41e5588
[  538.180211][T12395]  </TASK>
[  538.931747][T12409] mkiss: ax0: crc mode is auto.

syzkaller
syzkaller login: [  539.258864][T12411] ubi: mtd0 is already attached to ubi0
[  539.342920][T12422] sp0: Synchronizing with TNC
[  544.173946][T12474] sp0: Synchronizing with TNC
[  544.341211][T12476] sp0: Synchronizing with TNC
[  544.735810][ T8335] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260
[  544.735858][ T8335] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260
[  544.755219][ T8335] Bluetooth: hci1: Dropping invalid advertising data
[  544.762607][ T8335] Bluetooth: hci1: unknown advertising packet type: 0xe9
[  544.762655][ T8335] Bluetooth: hci1: Dropping invalid advertising data
[  544.778229][ T8335] Bluetooth: hci1: Dropping invalid advertising data
[  544.787702][ T8335] Bluetooth: hci1: Malformed LE Event: 0x02
[  545.445352][T12501] FAULT_INJECTION: forcing a failure.
[  545.445352][T12501] name failslab, interval 1, probability 0, space 0, times 0
[  545.459291][T12501] CPU: 0 UID: 0 PID: 12501 Comm: syz.0.1264 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  545.459338][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  545.459359][T12501] Call Trace:
[  545.459369][T12501]  <TASK>
[  545.459378][T12501]  dump_stack_lvl+0x16c/0x1f0
[  545.459417][T12501]  should_fail_ex+0x512/0x640
[  545.459451][T12501]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  545.459486][T12501]  should_failslab+0xc2/0x120
[  545.459507][T12501]  __kmalloc_cache_noprof+0x6a/0x3e0
[  545.459538][T12501]  ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0
[  545.459568][T12501]  ? irqentry_exit+0x3b/0x90
[  545.459604][T12501]  snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0
[  545.459634][T12501]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[  545.459672][T12501]  ? snd_pcm_plug_client_size+0x21/0x170
[  545.459699][T12501]  ? calc_src_frames.isra.0+0x187/0x1d0
[  545.459732][T12501]  snd_pcm_oss_change_params_locked+0x1398/0x3a30
[  545.459772][T12501]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  545.459823][T12501]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  545.459855][T12501]  snd_pcm_oss_ioctl+0x21e9/0x37a0
[  545.459886][T12501]  ? hook_file_ioctl_common+0x145/0x410
[  545.459921][T12501]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  545.459954][T12501]  ? __fget_files+0x20e/0x3c0
[  545.460007][T12501]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  545.460039][T12501]  __x64_sys_ioctl+0x18e/0x210
[  545.460075][T12501]  do_syscall_64+0xcd/0x490
[  545.460115][T12501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.460147][T12501] RIP: 0033:0x7fe5a538e929
[  545.460173][T12501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.460202][T12501] RSP: 002b:00007fe5a620b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  545.460246][T12501] RAX: ffffffffffffffda RBX: 00007fe5a55b6080 RCX: 00007fe5a538e929
[  545.460267][T12501] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007
[  545.460289][T12501] RBP: 00007fe5a5410b39 R08: 0000000000000000 R09: 0000000000000000
[  545.460318][T12501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  545.460332][T12501] R13: 0000000000000000 R14: 00007fe5a55b6080 R15: 00007ffdf41e5588
[  545.460362][T12501]  </TASK>
[  547.547700][T12527] Invalid ELF header magic: != ELF
[  548.408104][   T30] audit: type=1800 audit(4295031842.149:14): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1271" name="dbroot" dev="configfs" ino=39310 res=0 errno=0
[  550.656889][T12593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'.
[  553.007764][T12625] FAULT_INJECTION: forcing a failure.
[  553.007764][T12625] name fail_futex, interval 1, probability 0, space 0, times 0
[  553.007803][T12625] CPU: 1 UID: 0 PID: 12625 Comm: syz.2.1284 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  553.007834][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  553.007848][T12625] Call Trace:
[  553.007855][T12625]  <TASK>
[  553.007864][T12625]  dump_stack_lvl+0x16c/0x1f0
[  553.007922][T12625]  should_fail_ex+0x512/0x640
[  553.007980][T12625]  get_futex_key+0x1d0/0x1540
[  553.008021][T12625]  ? __pfx_get_futex_key+0x10/0x10
[  553.008047][T12625]  ? shmem_get_unmapped_area+0x170/0xa00
[  553.008110][T12625]  ? __pfx_shmem_get_unmapped_area+0x10/0x10
[  553.008142][T12625]  ? __get_unmapped_area+0x267/0x440
[  553.008186][T12625]  futex_wake+0xe7/0x4e0
[  553.008219][T12625]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  553.008256][T12625]  ? __pfx_futex_wake+0x10/0x10
[  553.008303][T12625]  ? up_write+0x1b2/0x520
[  553.008488][T12625]  do_futex+0x1e3/0x350
[  553.008523][T12625]  ? __pfx_do_futex+0x10/0x10
[  553.008565][T12625]  __x64_sys_futex+0x1e0/0x4c0
[  553.008599][T12625]  ? __pfx___x64_sys_futex+0x10/0x10
[  553.008631][T12625]  ? ksys_mmap_pgoff+0x85/0x5c0
[  553.008656][T12625]  ? xfd_validate_state+0x61/0x180
[  553.008688][T12625]  ? __pfx_do_writev+0x10/0x10
[  553.008732][T12625]  do_syscall_64+0xcd/0x490
[  553.008772][T12625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.008796][T12625] RIP: 0033:0x7fd46d18e929
[  553.008815][T12625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.008839][T12625] RSP: 002b:00007fd46e0090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  553.008862][T12625] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa8 RCX: 00007fd46d18e929
[  553.008883][T12625] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd46d3b5fac
[  553.008898][T12625] RBP: 00007fd46d3b5fa0 R08: 00007fd46e00a000 R09: 0000000000000000
[  553.008913][T12625] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fd46d3b5fac
[  553.008928][T12625] R13: 0000000000000000 R14: 00007ffec889fa60 R15: 00007ffec889fb48
[  553.008958][T12625]  </TASK>
[  555.160966][T12654] FAULT_INJECTION: forcing a failure.
[  555.160966][T12654] name failslab, interval 1, probability 0, space 0, times 0
[  555.264090][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.0.1291 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  555.264139][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  555.264160][T12654] Call Trace:
[  555.264170][T12654]  <TASK>
[  555.264199][T12654]  dump_stack_lvl+0x16c/0x1f0
[  555.264258][T12654]  should_fail_ex+0x512/0x640
[  555.264306][T12654]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  555.264355][T12654]  should_failslab+0xc2/0x120
[  555.264386][T12654]  __kmalloc_cache_noprof+0x6a/0x3e0
[  555.264433][T12654]  ? apply_subsystem_event_filter+0x44e/0x17d0
[  555.264487][T12654]  apply_subsystem_event_filter+0x44e/0x17d0
[  555.264558][T12654]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[  555.264615][T12654]  ? _copy_from_user+0x59/0xd0
[  555.264675][T12654]  subsystem_filter_write+0x95/0x120
[  555.264723][T12654]  ? __pfx_subsystem_filter_write+0x10/0x10
[  555.264767][T12654]  vfs_write+0x2a0/0x1150
[  555.264824][T12654]  ? __pfx___mutex_lock+0x10/0x10
[  555.264877][T12654]  ? __pfx_vfs_write+0x10/0x10
[  555.264939][T12654]  ? __fget_files+0x20e/0x3c0
[  555.265002][T12654]  ksys_write+0x12a/0x250
[  555.265050][T12654]  ? __pfx_ksys_write+0x10/0x10
[  555.265115][T12654]  do_syscall_64+0xcd/0x490
[  555.265170][T12654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.265205][T12654] RIP: 0033:0x7fe5a538e929
[  555.265233][T12654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  555.265266][T12654] RSP: 002b:00007fe5a620b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  555.265299][T12654] RAX: ffffffffffffffda RBX: 00007fe5a55b6080 RCX: 00007fe5a538e929
[  555.265321][T12654] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006
[  555.265341][T12654] RBP: 00007fe5a5410b39 R08: 0000000000000000 R09: 0000000000000000
[  555.265362][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  555.265382][T12654] R13: 0000000000000000 R14: 00007fe5a55b6080 R15: 00007ffdf41e5588
[  555.265428][T12654]  </TASK>
[  562.566021][T12764] synth uevent: /module/l2tp_ip6: unknown uevent action string
[  565.568844][T12821] warning: `syz.3.1323' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  565.583379][   T30] audit: type=1804 audit(4295031859.309:15): pid=12819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1322" name="/newroot/345/file0" dev="tmpfs" ino=1833 res=1 errno=0
[  565.583468][   T30] audit: type=1800 audit(4295031859.309:16): pid=12819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1322" name="file0" dev="tmpfs" ino=1833 res=0 errno=0
[  565.901423][ T8335] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  566.338459][T12843] FAULT_INJECTION: forcing a failure.
[  566.338459][T12843] name failslab, interval 1, probability 0, space 0, times 0
[  566.351913][T12843] CPU: 1 UID: 0 PID: 12843 Comm: syz.2.1328 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  566.351959][T12843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  566.351979][T12843] Call Trace:
[  566.351987][T12843]  <TASK>
[  566.351995][T12843]  dump_stack_lvl+0x16c/0x1f0
[  566.352035][T12843]  should_fail_ex+0x512/0x640
[  566.352069][T12843]  ? __kvmalloc_node_noprof+0x124/0x620
[  566.352105][T12843]  should_failslab+0xc2/0x120
[  566.352127][T12843]  __kvmalloc_node_noprof+0x137/0x620
[  566.352161][T12843]  ? lru_gen_seq_start+0x4f/0x240
[  566.352192][T12843]  ? lru_gen_seq_start+0x4f/0x240
[  566.352217][T12843]  lru_gen_seq_start+0x4f/0x240
[  566.352247][T12843]  seq_read_iter+0x2be/0x12c0
[  566.352288][T12843]  seq_read+0x39e/0x4e0
[  566.352335][T12843]  ? __pfx_seq_read+0x10/0x10
[  566.352370][T12843]  ? get_pid_task+0xfc/0x250
[  566.352416][T12843]  full_proxy_read+0x13f/0x200
[  566.352438][T12843]  ? __pfx_full_proxy_read+0x10/0x10
[  566.352462][T12843]  vfs_read+0x1e1/0xc60
[  566.352500][T12843]  ? __pfx_vfs_read+0x10/0x10
[  566.352531][T12843]  ? find_held_lock+0x2b/0x80
[  566.352555][T12843]  ? __fget_files+0x204/0x3c0
[  566.352592][T12843]  ? __fget_files+0x20e/0x3c0
[  566.352631][T12843]  __x64_sys_pread64+0x1eb/0x250
[  566.352667][T12843]  ? __pfx___x64_sys_pread64+0x10/0x10
[  566.352711][T12843]  do_syscall_64+0xcd/0x490
[  566.352749][T12843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.352773][T12843] RIP: 0033:0x7fd46d18e929
[  566.352791][T12843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.352814][T12843] RSP: 002b:00007fd46e009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  566.352835][T12843] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18e929
[  566.352851][T12843] RDX: 00000000000007ff RSI: 0000000000000000 RDI: 0000000000000003
[  566.352865][T12843] RBP: 00007fd46d210b39 R08: 0000000000000000 R09: 0000000000000000
[  566.352879][T12843] R10: 00000000000000d6 R11: 0000000000000246 R12: 0000000000000000
[  566.352893][T12843] R13: 0000000000000000 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  566.352922][T12843]  </TASK>
[  566.354700][T12843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'.
[  566.791050][T12843] team0: Port device team_slave_1 removed
[  568.976908][T12886] ubi: mtd0 is already attached to ubi0
[  568.984376][T12886] ubi0: detaching mtd0
[  568.996014][T12886] ubi0: mtd0 is detached
[  569.923381][T12893] can: request_module (can-proto-0) failed.
[  571.772318][T12928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'.
[  571.812942][T12930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'.
[  573.506988][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  573.540786][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  573.988551][T12963] nbd: illegal input index 2147483647
[  575.549957][T12988] writes to the poll attribute are ignored.
[  575.606356][T12988] please use driver specific parameters instead.
[  575.886756][T12985] zswap: compressor 32 not available
[  577.071375][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'.
[  577.134910][T13013] veth0_macvtap: left promiscuous mode
[  577.169573][T13013] macvtap0: entered promiscuous mode
[  577.188046][T13013] macvtap0: entered allmulticast mode
[  577.543043][T13016] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  577.564564][T13016] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  577.622148][T13016] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  577.648131][T13016] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  579.582495][ T8335] Bluetooth: hci1: command 0x0406 tx timeout
[  579.590464][ T8851] Bluetooth: hci0: command 0x0406 tx timeout
[  579.672452][ T8335] Bluetooth: hci3: command 0x0406 tx timeout
[  579.678542][ T8335] Bluetooth: hci2: command 0x0406 tx timeout
[  582.094465][T13086] mkiss: ax0: crc mode is auto.
[  583.961751][T13133] random: crng reseeded on system resumption
[  584.137029][T13133] FAULT_INJECTION: forcing a failure.
[  584.137029][T13133] name failslab, interval 1, probability 0, space 0, times 0
[  584.187080][T13133] CPU: 1 UID: 0 PID: 13133 Comm: syz.0.1381 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  584.187130][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  584.187150][T13133] Call Trace:
[  584.187160][T13133]  <TASK>
[  584.187172][T13133]  dump_stack_lvl+0x16c/0x1f0
[  584.187229][T13133]  should_fail_ex+0x512/0x640
[  584.187279][T13133]  ? fs_reclaim_acquire+0xae/0x150
[  584.187322][T13133]  should_failslab+0xc2/0x120
[  584.187355][T13133]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  584.187406][T13133]  ? security_inode_alloc+0x3b/0x2b0
[  584.187451][T13133]  security_inode_alloc+0x3b/0x2b0
[  584.187490][T13133]  inode_init_always_gfp+0xce4/0x1030
[  584.187547][T13133]  alloc_inode+0x86/0x240
[  584.187584][T13133]  sock_alloc+0x40/0x280
[  584.187617][T13133]  sock_create_lite+0x82/0x120
[  584.187655][T13133]  __netlink_kernel_create+0xbd/0x750
[  584.187690][T13133]  ? trace_kmalloc+0x2b/0xd0
[  584.187723][T13133]  ? __kvmalloc_node_noprof+0x298/0x620
[  584.187774][T13133]  ? __pfx___netlink_kernel_create+0x10/0x10
[  584.187807][T13133]  ? fib4_semantics_init+0x25/0x100
[  584.187863][T13133]  fib_net_init+0x26d/0x3f0
[  584.187895][T13133]  ? __pfx___register_sysctl_table+0x10/0x10
[  584.187954][T13133]  ? __pfx_fib_net_init+0x10/0x10
[  584.187989][T13133]  ? lockdep_init_map_type+0x5c/0x280
[  584.188041][T13133]  ? __pfx_nl_fib_input+0x10/0x10
[  584.188097][T13133]  ? devinet_init_net+0x5c2/0x910
[  584.188144][T13133]  ? __pfx_fib_net_init+0x10/0x10
[  584.188178][T13133]  ops_init+0x1e2/0x5f0
[  584.188236][T13133]  setup_net+0x1ff/0x510
[  584.188288][T13133]  ? lockdep_init_map_type+0x5c/0x280
[  584.188338][T13133]  ? __pfx_setup_net+0x10/0x10
[  584.188397][T13133]  ? debug_mutex_init+0x37/0x70
[  584.188438][T13133]  copy_net_ns+0x2a6/0x5f0
[  584.188478][T13133]  create_new_namespaces+0x3ea/0xa90
[  584.188529][T13133]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  584.188574][T13133]  ksys_unshare+0x45b/0xa40
[  584.188641][T13133]  ? __pfx_ksys_unshare+0x10/0x10
[  584.188693][T13133]  ? xfd_validate_state+0x61/0x180
[  584.188754][T13133]  __x64_sys_unshare+0x31/0x40
[  584.188802][T13133]  do_syscall_64+0xcd/0x490
[  584.188858][T13133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.188892][T13133] RIP: 0033:0x7fe5a538e929
[  584.188919][T13133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  584.188953][T13133] RSP: 002b:00007fe5a622c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  584.188986][T13133] RAX: ffffffffffffffda RBX: 00007fe5a55b5fa0 RCX: 00007fe5a538e929
[  584.189009][T13133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  584.189030][T13133] RBP: 00007fe5a5410b39 R08: 0000000000000000 R09: 0000000000000000
[  584.189051][T13133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  584.189081][T13133] R13: 0000000000000000 R14: 00007fe5a55b5fa0 R15: 00007ffdf41e5588
[  584.189125][T13133]  </TASK>
[  585.349432][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'.
[  587.170875][T13170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1387'.
[  587.388663][T13191] FAULT_INJECTION: forcing a failure.
[  587.388663][T13191] name failslab, interval 1, probability 0, space 0, times 0
[  587.403246][T13191] CPU: 0 UID: 0 PID: 13191 Comm: syz.0.1390 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  587.403292][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  587.403311][T13191] Call Trace:
[  587.403322][T13191]  <TASK>
[  587.403333][T13191]  dump_stack_lvl+0x16c/0x1f0
[  587.403387][T13191]  should_fail_ex+0x512/0x640
[  587.403434][T13191]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  587.403488][T13191]  should_failslab+0xc2/0x120
[  587.403517][T13191]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  587.403554][T13191]  ? getname_flags.part.0+0x4c/0x550
[  587.403593][T13191]  getname_flags.part.0+0x4c/0x550
[  587.403623][T13191]  getname_flags+0x93/0xf0
[  587.403655][T13191]  do_mq_open+0x1ac/0x8c0
[  587.403697][T13191]  ? __pfx_do_mq_open+0x10/0x10
[  587.403737][T13191]  ? __fget_files+0x20e/0x3c0
[  587.403771][T13191]  __x64_sys_mq_open+0x155/0x1e0
[  587.403797][T13191]  ? __pfx___x64_sys_mq_open+0x10/0x10
[  587.403819][T13191]  ? fput+0x70/0xf0
[  587.403855][T13191]  do_syscall_64+0xcd/0x490
[  587.403893][T13191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.403916][T13191] RIP: 0033:0x7fe5a538e929
[  587.403935][T13191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.403958][T13191] RSP: 002b:00007fe5a622c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  587.403980][T13191] RAX: ffffffffffffffda RBX: 00007fe5a55b5fa0 RCX: 00007fe5a538e929
[  587.403995][T13191] RDX: 0000000000000012 RSI: 00000000ffffffd9 RDI: 0000200000000240
[  587.404009][T13191] RBP: 00007fe5a622c090 R08: 0000000000000000 R09: 0000000000000000
[  587.404024][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.404038][T13191] R13: 0000000000000001 R14: 00007fe5a55b5fa0 R15: 00007ffdf41e5588
[  587.404066][T13191]  </TASK>
[  587.614746][T13174] could not allocate digest TFM handle 
[  588.958290][T13213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1396'.
[  589.805822][T13217] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[13217]
[  590.604271][T13241] FAULT_INJECTION: forcing a failure.
[  590.604271][T13241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  590.649091][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.2.1400 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  590.649144][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  590.649163][T13241] Call Trace:
[  590.649173][T13241]  <TASK>
[  590.649186][T13241]  dump_stack_lvl+0x16c/0x1f0
[  590.649241][T13241]  should_fail_ex+0x512/0x640
[  590.649296][T13241]  strncpy_from_user+0x3b/0x2e0
[  590.649339][T13241]  getname_flags.part.0+0x8f/0x550
[  590.649376][T13241]  getname_flags+0x93/0xf0
[  590.649422][T13241]  do_mq_open+0x1ac/0x8c0
[  590.649482][T13241]  ? __pfx_do_mq_open+0x10/0x10
[  590.649538][T13241]  ? __fget_files+0x20e/0x3c0
[  590.649627][T13241]  __x64_sys_mq_open+0x155/0x1e0
[  590.649660][T13241]  ? __pfx___x64_sys_mq_open+0x10/0x10
[  590.649691][T13241]  ? fput+0x70/0xf0
[  590.649741][T13241]  do_syscall_64+0xcd/0x490
[  590.649794][T13241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.649827][T13241] RIP: 0033:0x7fd46d18e929
[  590.649851][T13241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  590.649883][T13241] RSP: 002b:00007fd46e009038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  590.649913][T13241] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18e929
[  590.649933][T13241] RDX: 0000000000000012 RSI: 00000000ffffffd9 RDI: 0000200000000240
[  590.649953][T13241] RBP: 00007fd46e009090 R08: 0000000000000000 R09: 0000000000000000
[  590.649972][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.649990][T13241] R13: 0000000000000001 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  590.650032][T13241]  </TASK>
[  594.602257][   T30] audit: type=1804 audit(4295031888.339:17): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1417" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  597.243260][T13356] Invalid ELF header magic: != ELF
[  599.245188][T13390] random: crng reseeded on system resumption
[  603.550953][T13486] ptrace attach of "./syz-executor exec"[13487] was attempted by "./syz-executor exec"[13486]
[  605.547083][T13521] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1462'.
[  607.666270][T13546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1468'.
[  610.712021][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1479'.
[  615.041046][ T8335] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260
[  615.041108][ T8335] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260
[  615.059006][ T8335] Bluetooth: hci0: Dropping invalid advertising data
[  615.068594][ T8335] Bluetooth: hci0: unknown advertising packet type: 0xe9
[  617.002652][T13674] kexec: Could not allocate control_code_buffer
[  619.805676][T13727] FAULT_INJECTION: forcing a failure.
[  619.805676][T13727] name failslab, interval 1, probability 0, space 0, times 0
[  619.855803][T13727] CPU: 0 UID: 0 PID: 13727 Comm: syz.0.1507 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  619.855857][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  619.855879][T13727] Call Trace:
[  619.855890][T13727]  <TASK>
[  619.855904][T13727]  dump_stack_lvl+0x16c/0x1f0
[  619.855962][T13727]  should_fail_ex+0x512/0x640
[  619.856020][T13727]  should_failslab+0xc2/0x120
[  619.856054][T13727]  __kmalloc_cache_noprof+0x6a/0x3e0
[  619.856101][T13727]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  619.856157][T13727]  ? tipc_group_create+0xbc/0x660
[  619.856223][T13727]  tipc_group_create+0xbc/0x660
[  619.856278][T13727]  tipc_setsockopt+0x7f0/0xdb0
[  619.856315][T13727]  ? __pfx_tipc_setsockopt+0x10/0x10
[  619.856358][T13727]  ? errseq_sample+0x53/0x70
[  619.856420][T13727]  ? __pfx_tipc_setsockopt+0x10/0x10
[  619.856454][T13727]  do_sock_setsockopt+0x221/0x470
[  619.856489][T13727]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  619.856552][T13727]  __sys_setsockopt+0x120/0x1a0
[  619.856610][T13727]  __x64_sys_setsockopt+0xbd/0x160
[  619.856657][T13727]  ? do_syscall_64+0x91/0x490
[  619.856707][T13727]  ? lockdep_hardirqs_on+0x7c/0x110
[  619.856755][T13727]  do_syscall_64+0xcd/0x490
[  619.856810][T13727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.856846][T13727] RIP: 0033:0x7fe5a538e929
[  619.856874][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  619.856908][T13727] RSP: 002b:00007fe5a622c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  619.856940][T13727] RAX: ffffffffffffffda RBX: 00007fe5a55b5fa0 RCX: 00007fe5a538e929
[  619.856962][T13727] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006
[  619.856989][T13727] RBP: 00007fe5a5410b39 R08: 0000000000000014 R09: 0000000000000000
[  619.857010][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  619.857031][T13727] R13: 0000000000000000 R14: 00007fe5a55b5fa0 R15: 00007ffdf41e5588
[  619.857077][T13727]  </TASK>
[  620.908724][T13727] kexec: Could not allocate control_code_buffer
[  620.971199][T13749] vivid-007: =================  START STATUS  =================
[  621.018224][T13749] vivid-007: Generate PTS: true
[  621.038664][T13749] vivid-007: Generate SCR: true
[  621.059036][T13749] tpg source WxH: 320x240 (Y'CbCr)
[  621.078962][T13749] tpg field: 1
[  621.097601][T13749] tpg crop: (0,0)/320x240
[  621.112405][T13749] tpg compose: (0,0)/320x240
[  621.121108][T13749] tpg colorspace: 8
[  621.130277][T13749] tpg transfer function: 0/0
[  621.139238][T13749] tpg Y'CbCr encoding: 0/0
[  621.144443][T13749] tpg quantization: 0/0
[  621.204248][T13749] tpg RGB range: 0/2
[  621.208324][T13749] vivid-007: ==================  END STATUS  ==================
[  623.720863][T13776] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[13776]
[  629.142426][T13872] =======================================================
[  629.142426][T13872] WARNING: The mand mount option has been deprecated and
[  629.142426][T13872]          and is ignored by this kernel. Remove the mand
[  629.142426][T13872]          option from the mount to silence this warning.
[  629.142426][T13872] =======================================================
[  630.883282][ T8335] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  632.907214][T13958] random: crng reseeded on system resumption
[  633.823803][T13981] kvm_intel: kvm [13977]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x7f
[  634.043931][T13986] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1547'.
[  634.947418][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  634.954136][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  635.730684][   T30] audit: type=1804 audit(4295031929.469:18): pid=14013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1552" name="/newroot/359/file0" dev="tmpfs" ino=1917 res=1 errno=0
[  635.773200][   T30] audit: type=1800 audit(4295031929.499:19): pid=14013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1552" name="file0" dev="tmpfs" ino=1917 res=0 errno=0
	




	
				
	




	
				
	




	
				
	
	
	
	

	

	
		
	
	
	
	



	

		


		
	
		
	



				
		
	


			
		
	
	
		
	
	
		
		
	
		
	

	
	
		
	

	
	
			
	
	
		


	
	




	
				
			

	
	
	
	

	


	


	
		
	
	
	

		




	







		
		

syzkaller
syzkaller login: [  656.499570][   T30] audit: type=1800 audit(4295031950.239:20): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1623" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  657.865695][T14457] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  658.085749][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'.
[  658.145151][T14470] ubi0: attaching mtd0
[  658.207548][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'.
[  658.284721][T14470] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1
[  658.300869][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'.
[  658.361464][T14470] eraseblock attaching information dump:
[  658.367224][T14470] 	ec       1
[  658.370607][T14470] 	pnum     0
[  658.374151][T14470] 	lnum     0
[  658.377724][T14470] 	scrub    0
[  658.381530][T14470] 	sqnum    1
[  658.385248][T14470] Volume identifier header dump:
[  658.390333][T14470] 	magic     55424921
[  658.394671][T14470] 	version   1
[  658.398109][T14470] 	vol_type  1
[  658.401665][T14470] 	copy_flag 0
[  658.405136][T14470] 	compat    5
[  658.408595][T14470] 	vol_id    2147479551
[  658.412853][T14470] 	lnum      0
[  658.416344][T14470] 	data_size 0
[  658.419776][T14470] 	used_ebs  0
[  658.423573][T14470] 	data_pad  0
[  658.427019][T14470] 	sqnum     1
[  658.430504][T14470] 	hdr_crc   65b3bd2d
[  658.434599][T14470] Volume identifier header hexdump:
[  658.446692][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'.
[  659.028193][T14470] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  659.298179][T14492] netlink: 218 bytes leftover after parsing attributes in process `syz.2.1638'.
[  659.361446][T14492] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  659.981602][T14504] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1640'.
[  660.286736][T14518] random: crng reseeded on system resumption
[  660.987314][T14529] program syz.1.1643 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  664.826134][T14583] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1656'.
[  665.599149][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1661'.
[  666.344855][T14619] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34
[  669.901033][T14663] device-mapper: ioctl: name not supplied when creating device
[  672.243270][T14708] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35
[  672.739589][T14710] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1683'.
[  673.200325][T14709] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36
[  674.121188][T14729] syz.1.1687 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  683.600518][T14803] Invalid ELF header magic: != ELF
[  685.076865][T14854] netlink: 194 bytes leftover after parsing attributes in process `syz.0.1716'.
[  685.592557][T14862] i2c i2c-0: delete_device: Extra parameters
[  685.603248][T14861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1717'.
[  689.670415][T14913] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1728'.
[  690.371923][T14927] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1731'.
[  690.988238][T14936] FAULT_INJECTION: forcing a failure.
[  690.988238][T14936] name failslab, interval 1, probability 0, space 0, times 0
[  691.077146][T14936] CPU: 1 UID: 0 PID: 14936 Comm: syz.2.1734 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  691.077198][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  691.077219][T14936] Call Trace:
[  691.077230][T14936]  <TASK>
[  691.077244][T14936]  dump_stack_lvl+0x16c/0x1f0
[  691.077311][T14936]  should_fail_ex+0x512/0x640
[  691.077359][T14936]  ? __kmalloc_noprof+0xbf/0x510
[  691.077414][T14936]  ? iter_file_splice_write+0x1cc/0x1150
[  691.077461][T14936]  should_failslab+0xc2/0x120
[  691.077493][T14936]  __kmalloc_noprof+0xd2/0x510
[  691.077558][T14936]  iter_file_splice_write+0x1cc/0x1150
[  691.077612][T14936]  ? kfree+0x2b4/0x4d0
[  691.077652][T14936]  ? copy_splice_read+0x897/0xba0
[  691.077705][T14936]  ? __pfx_iter_file_splice_write+0x10/0x10
[  691.077753][T14936]  ? __lock_acquire+0xb8a/0x1c90
[  691.077805][T14936]  ? __pfx_copy_splice_read+0x10/0x10
[  691.077874][T14936]  ? __pfx_iter_file_splice_write+0x10/0x10
[  691.077926][T14936]  direct_splice_actor+0x192/0x6c0
[  691.077978][T14936]  splice_direct_to_actor+0x342/0xa30
[  691.078027][T14936]  ? __pfx_direct_splice_actor+0x10/0x10
[  691.078073][T14936]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  691.078134][T14936]  do_splice_direct+0x174/0x240
[  691.078186][T14936]  ? __pfx_do_splice_direct+0x10/0x10
[  691.078233][T14936]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  691.078314][T14936]  ? rw_verify_area+0xcf/0x680
[  691.078364][T14936]  do_sendfile+0xb06/0xe50
[  691.078420][T14936]  ? __pfx_do_sendfile+0x10/0x10
[  691.078477][T14936]  ? __x64_sys_futex+0x1e0/0x4c0
[  691.078518][T14936]  ? __x64_sys_futex+0x1e9/0x4c0
[  691.078566][T14936]  __x64_sys_sendfile64+0x1d8/0x220
[  691.078602][T14936]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  691.078651][T14936]  do_syscall_64+0xcd/0x490
[  691.078709][T14936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.078744][T14936] RIP: 0033:0x7fd46d18e929
[  691.078771][T14936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  691.078805][T14936] RSP: 002b:00007fd46e009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  691.078837][T14936] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18e929
[  691.078859][T14936] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  691.078879][T14936] RBP: 00007fd46d210b39 R08: 0000000000000000 R09: 0000000000000000
[  691.078901][T14936] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  691.078922][T14936] R13: 0000000000000000 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  691.078966][T14936]  </TASK>
[  691.332286][    C1] vkms_vblank_simulate: vblank timer overrun
[  693.663597][   T30] audit: type=1804 audit(4295031987.383:21): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1744" name="/newroot/403/file0" dev="tmpfs" ino=2155 res=1 errno=0
[  693.793956][   T30] audit: type=1800 audit(4295031987.383:22): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1744" name="file0" dev="tmpfs" ino=2155 res=0 errno=0
[  693.909977][T14998] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1746'.
[  694.030132][ T8344] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3563 with max blocks 20 with error 74
[  694.046029][ T8344] EXT4-fs (sda1): This should not happen!! Data will be lost
[  694.046029][ T8344] 
[  695.202635][T15023] FAULT_INJECTION: forcing a failure.
[  695.202635][T15023] name failslab, interval 1, probability 0, space 0, times 0
[  695.223465][T15023] CPU: 0 UID: 0 PID: 15023 Comm: syz.1.1752 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  695.223522][T15023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  695.223541][T15023] Call Trace:
[  695.223552][T15023]  <TASK>
[  695.223565][T15023]  dump_stack_lvl+0x16c/0x1f0
[  695.223622][T15023]  should_fail_ex+0x512/0x640
[  695.223682][T15023]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  695.223734][T15023]  should_failslab+0xc2/0x120
[  695.223769][T15023]  __kmalloc_cache_noprof+0x6a/0x3e0
[  695.223817][T15023]  ? lockdep_init_map_type+0x5c/0x280
[  695.223866][T15023]  ? register_netdevice+0x4eb/0x2270
[  695.223906][T15023]  register_netdevice+0x4eb/0x2270
[  695.223948][T15023]  ? __pfx_register_netdevice+0x10/0x10
[  695.224023][T15023]  ? kfree+0x24f/0x4d0
[  695.224079][T15023]  slip_open+0xb86/0x1150
[  695.224134][T15023]  ? __pfx_slip_open+0x10/0x10
[  695.224178][T15023]  ? down_write+0x14d/0x200
[  695.224215][T15023]  ? __pfx_slip_open+0x10/0x10
[  695.224260][T15023]  tty_ldisc_open+0x9c/0x120
[  695.224309][T15023]  tty_set_ldisc+0x32b/0x780
[  695.224365][T15023]  tty_ioctl+0xc2e/0x1640
[  695.224422][T15023]  ? __pfx_tty_ioctl+0x10/0x10
[  695.224491][T15023]  ? find_held_lock+0x2b/0x80
[  695.224527][T15023]  ? hook_file_ioctl_common+0x145/0x410
[  695.224575][T15023]  ? __fget_files+0x20e/0x3c0
[  695.224630][T15023]  ? __pfx_tty_ioctl+0x10/0x10
[  695.224696][T15023]  __x64_sys_ioctl+0x18e/0x210
[  695.224744][T15023]  do_syscall_64+0xcd/0x490
[  695.224800][T15023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.224835][T15023] RIP: 0033:0x7f94a6d8e929
[  695.224863][T15023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  695.224897][T15023] RSP: 002b:00007f94a7b80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  695.224938][T15023] RAX: ffffffffffffffda RBX: 00007f94a6fb6080 RCX: 00007f94a6d8e929
[  695.224960][T15023] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 000000000000000b
[  695.224981][T15023] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  695.225001][T15023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  695.225021][T15023] R13: 0000000000000000 R14: 00007f94a6fb6080 R15: 00007ffddc981728
[  695.225067][T15023]  </TASK>
[  696.381180][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  696.405134][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  703.665642][T15175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1773'.
[  703.918290][T15179] FAULT_INJECTION: forcing a failure.
[  703.918290][T15179] name failslab, interval 1, probability 0, space 0, times 0
[  703.933790][T15179] CPU: 0 UID: 0 PID: 15179 Comm: syz.1.1774 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  703.933824][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  703.933839][T15179] Call Trace:
[  703.933847][T15179]  <TASK>
[  703.933857][T15179]  dump_stack_lvl+0x16c/0x1f0
[  703.933898][T15179]  should_fail_ex+0x512/0x640
[  703.933933][T15179]  ? __kmalloc_noprof+0xbf/0x510
[  703.933971][T15179]  ? __register_sysctl_table+0xea2/0x1900
[  703.934019][T15179]  should_failslab+0xc2/0x120
[  703.934042][T15179]  __kmalloc_noprof+0xd2/0x510
[  703.934077][T15179]  ? __register_sysctl_table+0xe8e/0x1900
[  703.934123][T15179]  __register_sysctl_table+0xea2/0x1900
[  703.934169][T15179]  ? __pfx___register_sysctl_table+0x10/0x10
[  703.934208][T15179]  ? is_module_address+0x69/0xf0
[  703.934243][T15179]  ? register_net_sysctl_sz+0x228/0x3e0
[  703.934270][T15179]  ? __asan_memcpy+0x3c/0x60
[  703.934303][T15179]  ? __pfx_nf_lwtunnel_net_init+0x10/0x10
[  703.934330][T15179]  nf_lwtunnel_net_init+0x60/0xf0
[  703.934355][T15179]  ops_init+0x1e2/0x5f0
[  703.934396][T15179]  setup_net+0x1ff/0x510
[  703.934432][T15179]  ? lockdep_init_map_type+0x5c/0x280
[  703.934476][T15179]  ? __pfx_setup_net+0x10/0x10
[  703.934516][T15179]  ? debug_mutex_init+0x37/0x70
[  703.934545][T15179]  copy_net_ns+0x2a6/0x5f0
[  703.934572][T15179]  create_new_namespaces+0x3ea/0xa90
[  703.934607][T15179]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  703.934638][T15179]  ksys_unshare+0x45b/0xa40
[  703.934672][T15179]  ? __pfx_ksys_unshare+0x10/0x10
[  703.934706][T15179]  ? xfd_validate_state+0x61/0x180
[  703.934747][T15179]  __x64_sys_unshare+0x31/0x40
[  703.934779][T15179]  do_syscall_64+0xcd/0x490
[  703.934837][T15179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.934862][T15179] RIP: 0033:0x7f94a6d8e929
[  703.934881][T15179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  703.934910][T15179] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  703.934932][T15179] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  703.934949][T15179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  703.934963][T15179] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  703.934978][T15179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  703.934992][T15179] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  703.935027][T15179]  </TASK>
[  703.935037][T15179] sysctl could not get directory: /net/netfilter -12
[  705.839385][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'.
[  706.606693][ T9360] udevd[9360]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory
[  706.984696][T15217] random: crng reseeded on system resumption
[  709.793866][T15256] vivid-007: =================  START STATUS  =================
[  709.841967][T15256] vivid-007: Generate PTS: true
[  709.846941][T15256] vivid-007: Generate SCR: true
[  709.970489][T15256] tpg source WxH: 320x240 (Y'CbCr)
[  709.980617][T15256] tpg field: 1
[  709.984148][T15256] tpg crop: (0,0)/320x240
[  710.029471][T15256] tpg compose: (0,0)/320x240
[  710.034368][T15256] tpg colorspace: 8
[  710.038439][T15256] tpg transfer function: 0/0
[  710.044149][T15256] tpg Y'CbCr encoding: 0/0
[  710.049499][T15256] tpg quantization: 0/0
[  710.053896][T15256] tpg RGB range: 0/2
[  710.058165][T15256] vivid-007: ==================  END STATUS  ==================
[  710.630592][T15250] svc: failed to register nfsdv3 RPC service (errno 512).
[  710.676848][T15250] svc: failed to register nfsaclv3 RPC service (errno 512).
[  712.817826][T15295] FAULT_INJECTION: forcing a failure.
[  712.817826][T15295] name failslab, interval 1, probability 0, space 0, times 0
[  712.885203][T15295] CPU: 0 UID: 0 PID: 15295 Comm: syz.1.1796 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  712.885238][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  712.885253][T15295] Call Trace:
[  712.885262][T15295]  <TASK>
[  712.885271][T15295]  dump_stack_lvl+0x16c/0x1f0
[  712.885320][T15295]  should_fail_ex+0x512/0x640
[  712.885355][T15295]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  712.885395][T15295]  should_failslab+0xc2/0x120
[  712.885418][T15295]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  712.885456][T15295]  ? proc_net_ns_init+0x42/0x410
[  712.885480][T15295]  ? __pfx_proc_net_ns_init+0x10/0x10
[  712.885503][T15295]  proc_net_ns_init+0x42/0x410
[  712.885525][T15295]  ? __pfx_proc_net_ns_init+0x10/0x10
[  712.885546][T15295]  ops_init+0x1e2/0x5f0
[  712.885587][T15295]  setup_net+0x1ff/0x510
[  712.885623][T15295]  ? lockdep_init_map_type+0x5c/0x280
[  712.885658][T15295]  ? __pfx_setup_net+0x10/0x10
[  712.885698][T15295]  ? debug_mutex_init+0x37/0x70
[  712.885725][T15295]  copy_net_ns+0x2a6/0x5f0
[  712.885752][T15295]  create_new_namespaces+0x3ea/0xa90
[  712.885787][T15295]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  712.885817][T15295]  ksys_unshare+0x45b/0xa40
[  712.885851][T15295]  ? __pfx_ksys_unshare+0x10/0x10
[  712.885885][T15295]  ? xfd_validate_state+0x61/0x180
[  712.885926][T15295]  __x64_sys_unshare+0x31/0x40
[  712.885958][T15295]  do_syscall_64+0xcd/0x490
[  712.885997][T15295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.886022][T15295] RIP: 0033:0x7f94a6d8e929
[  712.886040][T15295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  712.886065][T15295] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  712.886088][T15295] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  712.886103][T15295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  712.886117][T15295] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  712.886132][T15295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.886146][T15295] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  712.886179][T15295]  </TASK>
[  713.343935][T15304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1799'.
[  715.036048][ T8335] Bluetooth: hci1: Unable to find connection for big 0xd2
[  716.722975][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'.
[  717.192834][ T9360] udevd[9360]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory
[  717.312434][ T9360] udevd[9360]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory
[  718.528044][T15392] delete_channel: no stack
[  719.359169][ T8349] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3423 with max blocks 160 with error 117
[  719.399834][ T8349] EXT4-fs (sda1): This should not happen!! Data will be lost
[  719.399834][ T8349] 
[  720.486675][T15427] openvswitch: HfR: Dropping previously announced user features
[  720.543327][T15427] openvswitch: HfR: Dropping previously announced user features
[  720.639353][T15427] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  721.380597][T15444] vhci_hcd: not connected 4
[  724.617580][T15485] binder: 15482:15485 ioctl 400c620e 0 returned -14
[  727.463037][T15537] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1854'.
[  727.568573][T15539] FAULT_INJECTION: forcing a failure.
[  727.568573][T15539] name failslab, interval 1, probability 0, space 0, times 0
[  727.602177][T15539] CPU: 1 UID: 0 PID: 15539 Comm: syz.1.1854 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  727.602224][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  727.602242][T15539] Call Trace:
[  727.602252][T15539]  <TASK>
[  727.602264][T15539]  dump_stack_lvl+0x16c/0x1f0
[  727.602313][T15539]  should_fail_ex+0x512/0x640
[  727.602355][T15539]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  727.602399][T15539]  should_failslab+0xc2/0x120
[  727.602426][T15539]  __kmalloc_cache_noprof+0x6a/0x3e0
[  727.602465][T15539]  ? ktime_get_coarse_real_ts64_mg+0x240/0x300
[  727.602505][T15539]  ? hugetlb_vma_lock_alloc+0xbc/0x1f0
[  727.602551][T15539]  hugetlb_vma_lock_alloc+0xbc/0x1f0
[  727.602593][T15539]  hugetlb_reserve_pages+0x149/0xe10
[  727.602634][T15539]  ? __pfx_hugetlb_reserve_pages+0x10/0x10
[  727.602670][T15539]  ? atime_needs_update+0x8b/0x710
[  727.602713][T15539]  hugetlbfs_file_mmap+0x4a1/0x730
[  727.602767][T15539]  __mmap_region+0x128b/0x25e0
[  727.602815][T15539]  ? __pfx___mmap_region+0x10/0x10
[  727.602868][T15539]  ? is_bpf_text_address+0x94/0x1a0
[  727.602909][T15539]  ? kernel_text_address+0x8d/0x100
[  727.602956][T15539]  ? __kernel_text_address+0xd/0x40
[  727.602980][T15539]  ? unwind_get_return_address+0x59/0xa0
[  727.603037][T15539]  ? arch_stack_walk+0xa6/0x100
[  727.603081][T15539]  ? __pfx_stack_trace_save+0x10/0x10
[  727.603114][T15539]  ? stack_depot_save_flags+0x28/0xa40
[  727.603199][T15539]  ? trace_cap_capable+0x18d/0x200
[  727.603240][T15539]  mmap_region+0x32b/0x3f0
[  727.603292][T15539]  do_mmap+0xa3e/0x1210
[  727.603331][T15539]  ? __pfx_do_mmap+0x10/0x10
[  727.603363][T15539]  ? __pfx_down_write_killable+0x10/0x10
[  727.603398][T15539]  vm_mmap_pgoff+0x281/0x450
[  727.603434][T15539]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  727.603460][T15539]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  727.603492][T15539]  ? hugetlbfs_get_inode+0x31f/0x730
[  727.603532][T15539]  ksys_mmap_pgoff+0x1c8/0x5c0
[  727.603569][T15539]  __x64_sys_mmap+0x125/0x190
[  727.603615][T15539]  do_syscall_64+0xcd/0x490
[  727.603662][T15539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.603691][T15539] RIP: 0033:0x7f94a6d8e929
[  727.603714][T15539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  727.603742][T15539] RSP: 002b:00007f94a7b80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  727.603768][T15539] RAX: ffffffffffffffda RBX: 00007f94a6fb6080 RCX: 00007f94a6d8e929
[  727.603787][T15539] RDX: 0000000000000002 RSI: 0000000000200006 RDI: 0000000000000000
[  727.603804][T15539] RBP: 00007f94a6e10b39 R08: 0000000000000602 R09: 0000300000000000
[  727.603821][T15539] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000
[  727.603838][T15539] R13: 0000000000000000 R14: 00007f94a6fb6080 R15: 00007ffddc981728
[  727.603875][T15539]  </TASK>
[  728.665125][T15551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1850'.
[  730.216463][T15585] FAULT_INJECTION: forcing a failure.
[  730.216463][T15585] name failslab, interval 1, probability 0, space 0, times 0
[  730.244374][T15585] CPU: 0 UID: 0 PID: 15585 Comm: syz.1.1856 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  730.244427][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  730.244449][T15585] Call Trace:
[  730.244460][T15585]  <TASK>
[  730.244474][T15585]  dump_stack_lvl+0x16c/0x1f0
[  730.244535][T15585]  should_fail_ex+0x512/0x640
[  730.244587][T15585]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  730.244649][T15585]  should_failslab+0xc2/0x120
[  730.244681][T15585]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  730.244734][T15585]  ? getname_flags.part.0+0x4c/0x550
[  730.244781][T15585]  getname_flags.part.0+0x4c/0x550
[  730.244828][T15585]  getname_flags+0x93/0xf0
[  730.244878][T15585]  do_sys_openat2+0xb8/0x1d0
[  730.244918][T15585]  ? __pfx_do_sys_openat2+0x10/0x10
[  730.244977][T15585]  __x64_sys_openat+0x174/0x210
[  730.245020][T15585]  ? __pfx___x64_sys_openat+0x10/0x10
[  730.245080][T15585]  do_syscall_64+0xcd/0x490
[  730.245152][T15585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.245189][T15585] RIP: 0033:0x7f94a6d8e929
[  730.245217][T15585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  730.245252][T15585] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  730.245286][T15585] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  730.245309][T15585] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c
[  730.245332][T15585] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  730.245352][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  730.245373][T15585] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  730.245418][T15585]  </TASK>
[  732.394636][T15595] kexec: Could not allocate control_code_buffer
[  732.820086][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'.
[  732.875215][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'.
[  733.392345][T15626] HfR: entered promiscuous mode
[  733.410364][T15626] openvswitch: HfR: Dropping previously announced user features
[  733.423505][T15626] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  733.515287][T15633] loop10: detected capacity change from 0 to 8192
[  734.100253][T15638] debugfs: Directory '!PjE�r��҄y�*�"�l-���y–��L̓���]' with parent 'ieee80211' already present!
[  735.095857][T15677] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE�r��҄y�*�"�l-���y–��L̓���]'
[  735.153147][T15677] CPU: 0 UID: 0 PID: 15677 Comm: syz.1.1874 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  735.153201][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  735.153222][T15677] Call Trace:
[  735.153234][T15677]  <TASK>
[  735.153246][T15677]  dump_stack_lvl+0x16c/0x1f0
[  735.153305][T15677]  sysfs_warn_dup+0x7f/0xa0
[  735.153352][T15677]  sysfs_do_create_link_sd+0x124/0x140
[  735.153403][T15677]  sysfs_create_link+0x61/0xc0
[  735.153451][T15677]  device_add+0x62c/0x1a70
[  735.153505][T15677]  ? __pfx_device_add+0x10/0x10
[  735.153539][T15677]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  735.153596][T15677]  ? ieee80211_set_bitrate_flags+0x243/0x6b0
[  735.153661][T15677]  wiphy_register+0x1c9c/0x2850
[  735.153699][T15677]  ? netdev_run_todo+0x864/0x1320
[  735.153755][T15677]  ? __dev_printk+0x210/0x270
[  735.153809][T15677]  ? __pfx_wiphy_register+0x10/0x10
[  735.153870][T15677]  ieee80211_register_hw+0x24ac/0x4140
[  735.153924][T15677]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  735.153968][T15677]  ? find_held_lock+0x2b/0x80
[  735.154007][T15677]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  735.154061][T15677]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  735.154100][T15677]  ? __hrtimer_setup+0x176/0x280
[  735.154164][T15677]  mac80211_hwsim_new_radio+0x3034/0x54d0
[  735.154243][T15677]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  735.154310][T15677]  hwsim_new_radio_nl+0xb51/0x12c0
[  735.154364][T15677]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  735.154428][T15677]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  735.154480][T15677]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  735.154535][T15677]  genl_family_rcv_msg_doit+0x206/0x2f0
[  735.154581][T15677]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  735.154622][T15677]  ? trace_cap_capable+0x18d/0x200
[  735.154665][T15677]  ? bpf_lsm_capable+0x9/0x10
[  735.154707][T15677]  ? security_capable+0x7e/0x260
[  735.154741][T15677]  ? ns_capable+0xd7/0x110
[  735.154781][T15677]  genl_rcv_msg+0x55c/0x800
[  735.154827][T15677]  ? __pfx_genl_rcv_msg+0x10/0x10
[  735.154868][T15677]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  735.154936][T15677]  netlink_rcv_skb+0x155/0x420
[  735.154969][T15677]  ? __pfx_genl_rcv_msg+0x10/0x10
[  735.155012][T15677]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  735.155064][T15677]  ? netlink_deliver_tap+0x1ae/0xd30
[  735.155124][T15677]  genl_rcv+0x28/0x40
[  735.155158][T15677]  netlink_unicast+0x58d/0x850
[  735.155196][T15677]  ? __pfx_netlink_unicast+0x10/0x10
[  735.155243][T15677]  netlink_sendmsg+0x8d1/0xdd0
[  735.155284][T15677]  ? __pfx_netlink_sendmsg+0x10/0x10
[  735.155339][T15677]  ____sys_sendmsg+0xa95/0xc70
[  735.155379][T15677]  ? copy_msghdr_from_user+0x10a/0x160
[  735.155430][T15677]  ? __pfx_____sys_sendmsg+0x10/0x10
[  735.155493][T15677]  ? __pfx_futex_wake_mark+0x10/0x10
[  735.155552][T15677]  ___sys_sendmsg+0x134/0x1d0
[  735.155608][T15677]  ? __pfx____sys_sendmsg+0x10/0x10
[  735.155660][T15677]  ? __futex_hash.constprop.0+0x1e9/0x440
[  735.155741][T15677]  ? do_futex+0x122/0x350
[  735.155795][T15677]  __sys_sendmsg+0x16d/0x220
[  735.155848][T15677]  ? __pfx___sys_sendmsg+0x10/0x10
[  735.155900][T15677]  ? __x64_sys_futex+0x1e0/0x4c0
[  735.155972][T15677]  do_syscall_64+0xcd/0x490
[  735.156030][T15677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.156065][T15677] RIP: 0033:0x7f94a6d8e929
[  735.156092][T15677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  735.156126][T15677] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  735.156159][T15677] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  735.156182][T15677] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000000
[  735.156202][T15677] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  735.156223][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  735.156242][T15677] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  735.156288][T15677]  </TASK>
[  736.123962][T15696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1876'.
[  736.219387][T15696] hsr0: entered allmulticast mode
[  736.219864][T15693] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37
[  736.242323][T15696] hsr_slave_0: entered allmulticast mode
[  736.255525][T15696] hsr_slave_1: entered allmulticast mode
[  737.006127][T15703] sd 0:0:1:0: PR command failed: 1026
[  737.023300][T15703] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  737.067304][T15703] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  737.158246][T15703] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38
[  737.330894][T15710] ima: policy update failed
[  737.378502][   T30] audit: type=1802 audit(4295032031.125:23): pid=15710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1880" res=0 errno=0
[  738.064136][T15714] program syz.2.1880 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  739.467157][T15722] random: crng reseeded on system resumption
[  739.820583][T15739] FAULT_INJECTION: forcing a failure.
[  739.820583][T15739] name failslab, interval 1, probability 0, space 0, times 0
[  739.838989][T15742] FAULT_INJECTION: forcing a failure.
[  739.838989][T15742] name failslab, interval 1, probability 0, space 0, times 0
[  739.907773][T15742] CPU: 0 UID: 0 PID: 15742 Comm: syz.3.1883 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  739.907820][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  739.907841][T15742] Call Trace:
[  739.907852][T15742]  <TASK>
[  739.907864][T15742]  dump_stack_lvl+0x16c/0x1f0
[  739.907923][T15742]  should_fail_ex+0x512/0x640
[  739.907970][T15742]  ? __kmalloc_noprof+0xbf/0x510
[  739.908025][T15742]  ? ops_init+0x77/0x5f0
[  739.908076][T15742]  should_failslab+0xc2/0x120
[  739.908108][T15742]  __kmalloc_noprof+0xd2/0x510
[  739.908159][T15742]  ? __raw_spin_lock_init+0x3a/0x110
[  739.908203][T15742]  ops_init+0x77/0x5f0
[  739.908243][T15742]  setup_net+0x1ff/0x510
[  739.908279][T15742]  ? lockdep_init_map_type+0x5c/0x280
[  739.908313][T15742]  ? __pfx_setup_net+0x10/0x10
[  739.908364][T15742]  ? debug_mutex_init+0x37/0x70
[  739.908393][T15742]  copy_net_ns+0x2a6/0x5f0
[  739.908420][T15742]  create_new_namespaces+0x3ea/0xa90
[  739.908464][T15742]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  739.908508][T15742]  ksys_unshare+0x45b/0xa40
[  739.908554][T15742]  ? __pfx_ksys_unshare+0x10/0x10
[  739.908602][T15742]  ? xfd_validate_state+0x61/0x180
[  739.908659][T15742]  __x64_sys_unshare+0x31/0x40
[  739.908697][T15742]  do_syscall_64+0xcd/0x490
[  739.908744][T15742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.908772][T15742] RIP: 0033:0x7fbe7b78e929
[  739.908795][T15742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  739.908824][T15742] RSP: 002b:00007fbe7c6bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  739.908851][T15742] RAX: ffffffffffffffda RBX: 00007fbe7b9b5fa0 RCX: 00007fbe7b78e929
[  739.908870][T15742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  739.908887][T15742] RBP: 00007fbe7b810b39 R08: 0000000000000000 R09: 0000000000000000
[  739.908903][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  739.908920][T15742] R13: 0000000000000000 R14: 00007fbe7b9b5fa0 R15: 00007ffc62050468
[  739.908956][T15742]  </TASK>
[  739.969576][T15739] CPU: 1 UID: 0 PID: 15739 Comm: syz.2.1882 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  739.969633][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  739.969655][T15739] Call Trace:
[  739.969667][T15739]  <TASK>
[  739.969684][T15739]  dump_stack_lvl+0x16c/0x1f0
[  739.969749][T15739]  should_fail_ex+0x512/0x640
[  739.969804][T15739]  ? __kmalloc_noprof+0xbf/0x510
[  739.969866][T15739]  ? ops_init+0x77/0x5f0
[  739.969922][T15739]  should_failslab+0xc2/0x120
[  739.969960][T15739]  __kmalloc_noprof+0xd2/0x510
[  739.970030][T15739]  ops_init+0x77/0x5f0
[  739.970104][T15739]  setup_net+0x1ff/0x510
[  739.970163][T15739]  ? lockdep_init_map_type+0x5c/0x280
[  739.970222][T15739]  ? __pfx_setup_net+0x10/0x10
[  739.970288][T15739]  ? debug_mutex_init+0x37/0x70
[  739.970333][T15739]  copy_net_ns+0x2a6/0x5f0
[  739.970377][T15739]  create_new_namespaces+0x3ea/0xa90
[  739.970434][T15739]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  739.970483][T15739]  ksys_unshare+0x45b/0xa40
[  739.970538][T15739]  ? __pfx_ksys_unshare+0x10/0x10
[  739.970593][T15739]  ? xfd_validate_state+0x61/0x180
[  739.970659][T15739]  __x64_sys_unshare+0x31/0x40
[  739.970713][T15739]  do_syscall_64+0xcd/0x490
[  739.970774][T15739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.970814][T15739] RIP: 0033:0x7fd46d18e929
[  739.970841][T15739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  739.970875][T15739] RSP: 002b:00007fd46e009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  739.970912][T15739] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18e929
[  739.970939][T15739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  739.970964][T15739] RBP: 00007fd46d210b39 R08: 0000000000000000 R09: 0000000000000000
[  739.970987][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  739.971011][T15739] R13: 0000000000000000 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  739.971062][T15739]  </TASK>
[  743.135436][T15774] FAULT_INJECTION: forcing a failure.
[  743.135436][T15774] name failslab, interval 1, probability 0, space 0, times 0
[  743.194369][T15774] CPU: 1 UID: 0 PID: 15774 Comm: syz.1.1889 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  743.194418][T15774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  743.194438][T15774] Call Trace:
[  743.194450][T15774]  <TASK>
[  743.194463][T15774]  dump_stack_lvl+0x16c/0x1f0
[  743.194521][T15774]  should_fail_ex+0x512/0x640
[  743.194572][T15774]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  743.194632][T15774]  should_failslab+0xc2/0x120
[  743.194664][T15774]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  743.194716][T15774]  ? __proc_create+0xc3/0x8c0
[  743.194768][T15774]  ? __proc_create+0x2ce/0x8c0
[  743.194840][T15774]  __proc_create+0x2ce/0x8c0
[  743.194894][T15774]  ? __pfx___proc_create+0x10/0x10
[  743.194963][T15774]  _proc_mkdir+0xb9/0x200
[  743.194994][T15774]  ? __pfx__proc_mkdir+0x10/0x10
[  743.195024][T15774]  ? kmem_cache_alloc_noprof+0x21e/0x3b0
[  743.195085][T15774]  proc_net_ns_init+0x265/0x410
[  743.195120][T15774]  ? __pfx_proc_net_ns_init+0x10/0x10
[  743.195150][T15774]  ops_init+0x1e2/0x5f0
[  743.195210][T15774]  setup_net+0x1ff/0x510
[  743.195261][T15774]  ? lockdep_init_map_type+0x5c/0x280
[  743.195310][T15774]  ? __pfx_setup_net+0x10/0x10
[  743.195366][T15774]  ? debug_mutex_init+0x37/0x70
[  743.195404][T15774]  copy_net_ns+0x2a6/0x5f0
[  743.195440][T15774]  create_new_namespaces+0x3ea/0xa90
[  743.195488][T15774]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  743.195531][T15774]  ksys_unshare+0x45b/0xa40
[  743.195580][T15774]  ? __pfx_ksys_unshare+0x10/0x10
[  743.195616][T15774]  ? xfd_validate_state+0x61/0x180
[  743.195657][T15774]  __x64_sys_unshare+0x31/0x40
[  743.195689][T15774]  do_syscall_64+0xcd/0x490
[  743.195727][T15774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.195752][T15774] RIP: 0033:0x7f94a6d8e929
[  743.195770][T15774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  743.195802][T15774] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  743.195824][T15774] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  743.195840][T15774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  743.195854][T15774] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  743.195869][T15774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  743.195883][T15774] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  743.195913][T15774]  </TASK>
[  744.359405][T15788] nvme_fcloop: unknown parameter or missing value '^/]'
[  744.401109][T15792] debugfs: Directory '!PjE�r��҄y�*�"�l-���y–��L̓���]' with parent 'ieee80211' already present!
[  745.229247][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'.
[  745.365404][T15810] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007

syzkaller
syzkaller login: [  748.212560][T15830] FAULT_INJECTION: forcing a failure.
[  748.212560][T15830] name failslab, interval 1, probability 0, space 0, times 0
[  748.236975][T15830] CPU: 1 UID: 0 PID: 15830 Comm: syz.2.1898 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  748.237022][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  748.237042][T15830] Call Trace:
[  748.237052][T15830]  <TASK>
[  748.237064][T15830]  dump_stack_lvl+0x16c/0x1f0
[  748.237120][T15830]  should_fail_ex+0x512/0x640
[  748.237166][T15830]  ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0
[  748.237222][T15830]  should_failslab+0xc2/0x120
[  748.237252][T15830]  kmem_cache_alloc_bulk_noprof+0x85/0xbc0
[  748.237309][T15830]  ? trace_kmem_cache_alloc+0x28/0xc0
[  748.237343][T15830]  ? kmem_cache_alloc_noprof+0x21e/0x3b0
[  748.237404][T15830]  ? mas_alloc_nodes+0x18b/0x8b0
[  748.237453][T15830]  ? mas_alloc_nodes+0x2f1/0x8b0
[  748.237495][T15830]  mas_alloc_nodes+0x2f1/0x8b0
[  748.237550][T15830]  mas_node_count_gfp+0x105/0x130
[  748.237601][T15830]  mas_preallocate+0x7e0/0xde0
[  748.237642][T15830]  ? __pfx_mas_preallocate+0x10/0x10
[  748.237689][T15830]  ? rcu_read_unlock+0x17/0x60
[  748.237736][T15830]  vma_link+0x135/0x6a0
[  748.237792][T15830]  ? __pfx_vma_link+0x10/0x10
[  748.237843][T15830]  ? rcu_is_watching+0x12/0xc0
[  748.237886][T15830]  ? anon_vma_clone+0x405/0x5c0
[  748.237934][T15830]  ? anon_vma_name+0x75/0x100
[  748.237979][T15830]  copy_vma+0x6c2/0xaa0
[  748.238038][T15830]  ? __pfx_copy_vma+0x10/0x10
[  748.238088][T15830]  ? lockdep_hardirqs_on+0x7c/0x110
[  748.238148][T15830]  ? register_lock_class+0x41/0x4c0
[  748.238196][T15830]  ? __schedule+0x1181/0x5de0
[  748.238260][T15830]  ? __lock_acquire+0x622/0x1c90
[  748.238316][T15830]  copy_vma_and_data+0x1cf/0x750
[  748.238373][T15830]  ? __pfx_copy_vma_and_data+0x10/0x10
[  748.238446][T15830]  ? __vma_enter_locked+0x163/0x3f0
[  748.238498][T15830]  ? find_held_lock+0x2b/0x80
[  748.238535][T15830]  ? move_vma+0x536/0x1740
[  748.238595][T15830]  move_vma+0x548/0x1740
[  748.238654][T15830]  ? __pfx_move_vma+0x10/0x10
[  748.238702][T15830]  ? mm_get_unmapped_area+0x95/0xe0
[  748.238745][T15830]  ? shmem_get_unmapped_area+0x170/0xa00
[  748.238790][T15830]  ? cap_mmap_addr+0x4b/0x120
[  748.238821][T15830]  ? bpf_lsm_mmap_addr+0x9/0x10
[  748.238856][T15830]  ? security_mmap_addr+0x6c/0x1e0
[  748.238900][T15830]  ? __get_unmapped_area+0x267/0x440
[  748.238944][T15830]  ? vrm_set_new_addr+0x208/0x290
[  748.238999][T15830]  __do_sys_mremap+0xe07/0x1590
[  748.239056][T15830]  ? __pfx___do_sys_mremap+0x10/0x10
[  748.239121][T15830]  ? __fget_files+0x204/0x3c0
[  748.239177][T15830]  ? __x64_sys_futex+0x1e0/0x4c0
[  748.239248][T15830]  do_syscall_64+0xcd/0x490
[  748.239303][T15830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.239338][T15830] RIP: 0033:0x7fd46d18e929
[  748.239364][T15830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  748.239405][T15830] RSP: 002b:00007fd46dfa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  748.239436][T15830] RAX: ffffffffffffffda RBX: 00007fd46d3b6240 RCX: 00007fd46d18e929
[  748.239458][T15830] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000
[  748.239478][T15830] RBP: 00007fd46d210b39 R08: 00007effffffb000 R09: 0000000000000000
[  748.239498][T15830] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  748.239518][T15830] R13: 0000000000000000 R14: 00007fd46d3b6240 R15: 00007ffec889fb48
[  748.239563][T15830]  </TASK>
[  749.739538][ T8349] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3423 with max blocks 160 with error 117
[  749.772759][ T8349] EXT4-fs (sda1): This should not happen!! Data will be lost
[  749.772759][ T8349] 
[  750.517090][T15850] can: request_module (can-proto-0) failed.
[  751.055594][T15866] deleting an unspecified loop device is not supported.
[  753.570230][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1905'.
[  757.107140][T15920] could not allocate digest TFM handle 
[  757.322492][T15930] can: request_module (can-proto-3) failed.
[  757.339482][T15929] can: request_module (can-proto-3) failed.
[  757.447799][T15937] FAULT_INJECTION: forcing a failure.
[  757.447799][T15937] name failslab, interval 1, probability 0, space 0, times 0
[  757.462174][T15937] CPU: 0 UID: 0 PID: 15937 Comm: syz.1.1919 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  757.462208][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  757.462223][T15937] Call Trace:
[  757.462231][T15937]  <TASK>
[  757.462240][T15937]  dump_stack_lvl+0x16c/0x1f0
[  757.462281][T15937]  should_fail_ex+0x512/0x640
[  757.462316][T15937]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  757.462359][T15937]  should_failslab+0xc2/0x120
[  757.462382][T15937]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  757.462422][T15937]  ? __pfx__proc_mkdir+0x10/0x10
[  757.462443][T15937]  ? nf_lwtunnel_net_init+0x38/0xf0
[  757.462470][T15937]  ? __pfx_nf_lwtunnel_net_init+0x10/0x10
[  757.462497][T15937]  kmemdup_noprof+0x29/0x60
[  757.462533][T15937]  nf_lwtunnel_net_init+0x38/0xf0
[  757.462559][T15937]  ops_init+0x1e2/0x5f0
[  757.462600][T15937]  setup_net+0x1ff/0x510
[  757.462645][T15937]  ? lockdep_init_map_type+0x5c/0x280
[  757.462681][T15937]  ? __pfx_setup_net+0x10/0x10
[  757.462721][T15937]  ? debug_mutex_init+0x37/0x70
[  757.462749][T15937]  copy_net_ns+0x2a6/0x5f0
[  757.462776][T15937]  create_new_namespaces+0x3ea/0xa90
[  757.462810][T15937]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  757.462841][T15937]  ksys_unshare+0x45b/0xa40
[  757.462880][T15937]  ? __pfx_ksys_unshare+0x10/0x10
[  757.462934][T15937]  ? xfd_validate_state+0x61/0x180
[  757.462997][T15937]  __x64_sys_unshare+0x31/0x40
[  757.463034][T15937]  do_syscall_64+0xcd/0x490
[  757.463072][T15937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.463097][T15937] RIP: 0033:0x7f94a6d8e929
[  757.463115][T15937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  757.463138][T15937] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  757.463160][T15937] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  757.463176][T15937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  757.463190][T15937] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  757.463205][T15937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  757.463219][T15937] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  757.463249][T15937]  </TASK>
[  757.935426][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  757.942663][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  760.485811][T15982] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1929'.
[  760.520981][T15983] random: crng reseeded on system resumption
[  760.663247][T15983] FAULT_INJECTION: forcing a failure.
[  760.663247][T15983] name failslab, interval 1, probability 0, space 0, times 0
[  760.690052][T15983] CPU: 1 UID: 0 PID: 15983 Comm: syz.1.1928 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  760.690101][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  760.690116][T15983] Call Trace:
[  760.690123][T15983]  <TASK>
[  760.690132][T15983]  dump_stack_lvl+0x16c/0x1f0
[  760.690205][T15983]  should_fail_ex+0x512/0x640
[  760.690249][T15983]  ? __kmalloc_noprof+0xbf/0x510
[  760.690323][T15983]  ? __register_sysctl_table+0xb3/0x1900
[  760.690369][T15983]  should_failslab+0xc2/0x120
[  760.690392][T15983]  __kmalloc_noprof+0xd2/0x510
[  760.690435][T15983]  __register_sysctl_table+0xb3/0x1900
[  760.690474][T15983]  ? is_module_address+0x5f/0xf0
[  760.690513][T15983]  ? __pfx___register_sysctl_table+0x10/0x10
[  760.690551][T15983]  ? is_module_address+0x69/0xf0
[  760.690585][T15983]  ? register_net_sysctl_sz+0x228/0x3e0
[  760.690619][T15983]  ? __asan_memcpy+0x3c/0x60
[  760.690653][T15983]  sysctl_core_net_init+0xe3/0x280
[  760.690685][T15983]  ? __pfx_sysctl_core_net_init+0x10/0x10
[  760.690714][T15983]  ops_init+0x1e2/0x5f0
[  760.690754][T15983]  setup_net+0x1ff/0x510
[  760.690790][T15983]  ? lockdep_init_map_type+0x5c/0x280
[  760.690825][T15983]  ? __pfx_setup_net+0x10/0x10
[  760.690864][T15983]  ? debug_mutex_init+0x37/0x70
[  760.690891][T15983]  copy_net_ns+0x2a6/0x5f0
[  760.690918][T15983]  create_new_namespaces+0x3ea/0xa90
[  760.690952][T15983]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  760.690983][T15983]  ksys_unshare+0x45b/0xa40
[  760.691016][T15983]  ? __pfx_ksys_unshare+0x10/0x10
[  760.691050][T15983]  ? xfd_validate_state+0x61/0x180
[  760.691092][T15983]  __x64_sys_unshare+0x31/0x40
[  760.691124][T15983]  do_syscall_64+0xcd/0x490
[  760.691162][T15983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.691186][T15983] RIP: 0033:0x7f94a6d8e929
[  760.691205][T15983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  760.691249][T15983] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  760.691275][T15983] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  760.691291][T15983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  760.691305][T15983] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  760.691320][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  760.691336][T15983] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  760.691366][T15983]  </TASK>
[  762.082772][T16017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'.
[  762.636452][T16030] random: crng reseeded on system resumption
[  763.323516][T16037] FAULT_INJECTION: forcing a failure.
[  763.323516][T16037] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  763.402272][T16037] CPU: 1 UID: 0 PID: 16037 Comm: syz.1.1940 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  763.402309][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  763.402324][T16037] Call Trace:
[  763.402332][T16037]  <TASK>
[  763.402341][T16037]  dump_stack_lvl+0x16c/0x1f0
[  763.402381][T16037]  should_fail_ex+0x512/0x640
[  763.402425][T16037]  should_fail_alloc_page+0xe7/0x130
[  763.402451][T16037]  prepare_alloc_pages+0x3c2/0x610
[  763.402480][T16037]  ? rcu_is_watching+0x12/0xc0
[  763.402508][T16037]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  763.402547][T16037]  ? kasan_save_stack+0x42/0x60
[  763.402585][T16037]  ? css_rstat_updated+0x9d/0xd30
[  763.402617][T16037]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  763.402653][T16037]  ? __lock_acquire+0x622/0x1c90
[  763.402696][T16037]  ? __lock_acquire+0x622/0x1c90
[  763.402731][T16037]  ? __lock_acquire+0x622/0x1c90
[  763.402763][T16037]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  763.402802][T16037]  ? policy_nodemask+0xea/0x4e0
[  763.402826][T16037]  alloc_pages_mpol+0x1fb/0x550
[  763.402850][T16037]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  763.402881][T16037]  folio_alloc_mpol_noprof+0x36/0x2f0
[  763.402910][T16037]  vma_alloc_folio_noprof+0xed/0x1e0
[  763.402938][T16037]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  763.402964][T16037]  ? find_held_lock+0x2b/0x80
[  763.402989][T16037]  ? __handle_mm_fault+0x1092/0x5490
[  763.403025][T16037]  __handle_mm_fault+0x2f21/0x5490
[  763.403065][T16037]  ? __pfx___handle_mm_fault+0x10/0x10
[  763.403097][T16037]  ? __pte_offset_map_lock+0x174/0x310
[  763.403122][T16037]  ? find_held_lock+0x2b/0x80
[  763.403178][T16037]  ? find_held_lock+0x2b/0x80
[  763.403209][T16037]  ? follow_page_pte+0x3af/0x14c0
[  763.403244][T16037]  handle_mm_fault+0x589/0xd10
[  763.403282][T16037]  __get_user_pages+0x589/0x3b80
[  763.403317][T16037]  ? __pfx_mt_find+0x10/0x10
[  763.403340][T16037]  ? __pfx___get_user_pages+0x10/0x10
[  763.403378][T16037]  populate_vma_page_range+0x278/0x3a0
[  763.403413][T16037]  ? __pfx_populate_vma_page_range+0x10/0x10
[  763.403442][T16037]  ? __pfx_find_vma_intersection+0x10/0x10
[  763.403470][T16037]  ? do_mmap+0x69c/0x1210
[  763.403500][T16037]  __mm_populate+0x1d8/0x380
[  763.403529][T16037]  ? __pfx___mm_populate+0x10/0x10
[  763.403561][T16037]  ? up_write+0x1b2/0x520
[  763.403600][T16037]  vm_mmap_pgoff+0x362/0x450
[  763.403627][T16037]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  763.403652][T16037]  ? find_held_lock+0x2b/0x80
[  763.403680][T16037]  ? __x64_sys_futex+0x1e0/0x4c0
[  763.403707][T16037]  ? __x64_sys_futex+0x1e9/0x4c0
[  763.403741][T16037]  ksys_mmap_pgoff+0x7d/0x5c0
[  763.403765][T16037]  ? xfd_validate_state+0x61/0x180
[  763.403797][T16037]  ? __pfx___do_sys_close_range+0x10/0x10
[  763.403836][T16037]  __x64_sys_mmap+0x125/0x190
[  763.403874][T16037]  do_syscall_64+0xcd/0x490
[  763.403913][T16037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.403937][T16037] RIP: 0033:0x7f94a6d8e929
[  763.403956][T16037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  763.403979][T16037] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  763.404001][T16037] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  763.404018][T16037] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000000000000
[  763.404032][T16037] RBP: 00007f94a6e10b39 R08: 0000000000000007 R09: 0000000000028000
[  763.404047][T16037] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  763.404061][T16037] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  763.404091][T16037]  </TASK>
[  764.129334][T16035] mkiss: ax0: crc mode is auto.
[  764.443019][T16035] can: request_module (can-proto-0) failed.
[  764.876399][T16049] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39
[  765.403629][T16053] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  765.417614][T16053] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  765.423935][T16053] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  765.436678][T16053] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  765.583060][ T8335] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260
[  765.583117][ T8335] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260
[  765.600093][ T8335] Bluetooth: hci3: Dropping invalid advertising data
[  765.606895][ T8335] Bluetooth: hci3: unknown advertising packet type: 0xe9
[  765.606924][ T8335] Bluetooth: hci3: Dropping invalid advertising data
[  765.622222][ T8335] Bluetooth: hci3: Dropping invalid advertising data
[  765.629042][ T8335] Bluetooth: hci3: Malformed LE Event: 0x02
[  766.925175][ T8335] Bluetooth: hci0: command 0x0406 tx timeout
[  767.035413][T16091] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1951'.
[  767.494221][ T8335] Bluetooth: hci3: command 0x0406 tx timeout
[  767.501704][ T8335] Bluetooth: hci2: command 0x0406 tx timeout
[  767.512258][ T8851] Bluetooth: hci1: command 0x0406 tx timeout
[  768.416982][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417100][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417187][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417273][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417358][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417442][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417527][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417612][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417698][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417796][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417888][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.417973][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.418060][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.418145][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.418229][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.418314][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.418399][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.418484][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.418568][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.418652][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.419562][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.419664][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.419760][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.419846][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.419931][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420015][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420100][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420188][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420273][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420358][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420443][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420529][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420617][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420704][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420795][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420879][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.420963][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.421044][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.421137][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.421221][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.421305][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.422564][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.422664][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.422762][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.422848][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.422930][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423013][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423107][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423192][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423278][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423366][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423452][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423540][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423618][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423697][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423785][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423869][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.423955][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.424040][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.426655][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.426765][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.426854][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.426938][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.427023][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  768.427109][ T8335] Bluetooth: hci3: Unable to find connection for big 0xd2
[  769.162962][T16136] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1957'.
[  769.352671][T16136] gre0: entered promiscuous mode
[  769.729258][T16136] gre0: entered allmulticast mode
[  770.684880][T16155] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT
[  770.966497][T16159] batman_adv: Routing algorithm '' is not supported
[  771.872689][T16180] FAULT_INJECTION: forcing a failure.
[  771.872689][T16180] name failslab, interval 1, probability 0, space 0, times 0
[  772.002990][T16180] CPU: 0 UID: 0 PID: 16180 Comm: syz.3.1966 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  772.003027][T16180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  772.003041][T16180] Call Trace:
[  772.003049][T16180]  <TASK>
[  772.003057][T16180]  dump_stack_lvl+0x16c/0x1f0
[  772.003099][T16180]  should_fail_ex+0x512/0x640
[  772.003133][T16180]  ? fs_reclaim_acquire+0xae/0x150
[  772.003164][T16180]  should_failslab+0xc2/0x120
[  772.003187][T16180]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  772.003225][T16180]  ? security_inode_alloc+0x3b/0x2b0
[  772.003256][T16180]  security_inode_alloc+0x3b/0x2b0
[  772.003283][T16180]  inode_init_always_gfp+0xce4/0x1030
[  772.003322][T16180]  alloc_inode+0x86/0x240
[  772.003346][T16180]  sock_alloc+0x40/0x280
[  772.003369][T16180]  __sock_create+0xc1/0x8d0
[  772.003396][T16180]  ? proc_create_reg+0xe3/0x180
[  772.003421][T16180]  inet_ctl_sock_create+0x94/0x230
[  772.003455][T16180]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[  772.003486][T16180]  ? lockdep_init_map_type+0x5c/0x280
[  772.003523][T16180]  ? lockdep_init_map_type+0x5c/0x280
[  772.003558][T16180]  ? __pfx_igmp_net_init+0x10/0x10
[  772.003593][T16180]  igmp_net_init+0xd0/0x1a0
[  772.003627][T16180]  ops_init+0x1e2/0x5f0
[  772.003667][T16180]  setup_net+0x1ff/0x510
[  772.003713][T16180]  ? lockdep_init_map_type+0x5c/0x280
[  772.003748][T16180]  ? __pfx_setup_net+0x10/0x10
[  772.003788][T16180]  ? debug_mutex_init+0x37/0x70
[  772.003815][T16180]  copy_net_ns+0x2a6/0x5f0
[  772.003842][T16180]  create_new_namespaces+0x3ea/0xa90
[  772.003877][T16180]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  772.003907][T16180]  ksys_unshare+0x45b/0xa40
[  772.003941][T16180]  ? __pfx_ksys_unshare+0x10/0x10
[  772.003975][T16180]  ? xfd_validate_state+0x61/0x180
[  772.004017][T16180]  __x64_sys_unshare+0x31/0x40
[  772.004060][T16180]  do_syscall_64+0xcd/0x490
[  772.004114][T16180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.004139][T16180] RIP: 0033:0x7fbe7b78e929
[  772.004158][T16180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  772.004182][T16180] RSP: 002b:00007fbe7c6bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  772.004204][T16180] RAX: ffffffffffffffda RBX: 00007fbe7b9b5fa0 RCX: 00007fbe7b78e929
[  772.004220][T16180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  772.004235][T16180] RBP: 00007fbe7b810b39 R08: 0000000000000000 R09: 0000000000000000
[  772.004249][T16180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  772.004264][T16180] R13: 0000000000000000 R14: 00007fbe7b9b5fa0 R15: 00007ffc62050468
[  772.004294][T16180]  </TASK>
[  772.628974][T16180] socket: no more sockets
[  772.717245][T16180] Failed to initialize the IGMP autojoin socket (err -23)
[  775.853771][ T8335] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5
[  776.032101][T16227] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0

syzkaller
syzkaller login: [  779.158152][T16271] ptp ptp0: new virtual clock ptp1
[  779.195080][T16271] ptp ptp0: new virtual clock ptp2
[  779.235641][T16271] ptp ptp0: new virtual clock ptp3
[  779.240847][T16271] ptp ptp0: guarantee physical clock free running
[  780.386630][ T8350] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3229 with max blocks 194 with error 117
[  780.423112][ T8350] EXT4-fs (sda1): This should not happen!! Data will be lost
[  780.423112][ T8350] 
[  786.578273][T16368] FAULT_INJECTION: forcing a failure.
[  786.578273][T16368] name failslab, interval 1, probability 0, space 0, times 0
[  786.592119][T16368] CPU: 1 UID: 0 PID: 16368 Comm: syz.2.2002 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  786.592153][T16368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  786.592168][T16368] Call Trace:
[  786.592175][T16368]  <TASK>
[  786.592184][T16368]  dump_stack_lvl+0x16c/0x1f0
[  786.592233][T16368]  should_fail_ex+0x512/0x640
[  786.592287][T16368]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  786.592349][T16368]  should_failslab+0xc2/0x120
[  786.592380][T16368]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  786.592421][T16368]  ? trace_kmem_cache_alloc+0x28/0xc0
[  786.592445][T16368]  ? key_alloc+0x43e/0x1330
[  786.592488][T16368]  kmemdup_noprof+0x29/0x60
[  786.592526][T16368]  key_alloc+0x43e/0x1330
[  786.592572][T16368]  ? trace_kmalloc+0x2b/0xd0
[  786.592605][T16368]  ? __kmalloc_noprof+0x242/0x510
[  786.592655][T16368]  ? __pfx_key_alloc+0x10/0x10
[  786.592711][T16368]  keyring_alloc+0x44/0xc0
[  786.592765][T16368]  lookup_user_key+0xc51/0x1300
[  786.592814][T16368]  ? __pfx_lookup_user_key+0x10/0x10
[  786.592866][T16368]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  786.592913][T16368]  ? do_futex+0x122/0x350
[  786.592966][T16368]  keyctl_chown_key+0x1c9/0xfb0
[  786.593003][T16368]  ? __x64_sys_futex+0x1e0/0x4c0
[  786.593043][T16368]  ? __x64_sys_futex+0x1e9/0x4c0
[  786.593088][T16368]  ? __pfx_keyctl_chown_key+0x10/0x10
[  786.593122][T16368]  ? xfd_validate_state+0x61/0x180
[  786.593178][T16368]  __do_sys_keyctl+0x283/0x590
[  786.593216][T16368]  do_syscall_64+0xcd/0x490
[  786.593272][T16368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.593306][T16368] RIP: 0033:0x7fd46d18e929
[  786.593332][T16368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  786.593365][T16368] RSP: 002b:00007fd46e009038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  786.593396][T16368] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18e929
[  786.593418][T16368] RDX: 0000000000000000 RSI: fffff7ffffffffff RDI: 0000000000000004
[  786.593439][T16368] RBP: 00007fd46d210b39 R08: 0000000000000008 R09: 0000000000000000
[  786.593469][T16368] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  786.593490][T16368] R13: 0000000000000000 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  786.593534][T16368]  </TASK>
[  788.216392][T16391] openvswitch: netlink: Message has 20 unknown bytes.
[  791.226293][T16441] FAULT_INJECTION: forcing a failure.
[  791.226293][T16441] name failslab, interval 1, probability 0, space 0, times 0
[  791.320821][T16441] CPU: 0 UID: 0 PID: 16441 Comm: syz.1.2020 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  791.320881][T16441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  791.320902][T16441] Call Trace:
[  791.320912][T16441]  <TASK>
[  791.320926][T16441]  dump_stack_lvl+0x16c/0x1f0
[  791.320983][T16441]  should_fail_ex+0x512/0x640
[  791.321033][T16441]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  791.321091][T16441]  should_failslab+0xc2/0x120
[  791.321126][T16441]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  791.321180][T16441]  ? do_raw_write_lock+0x11c/0x3a0
[  791.321211][T16441]  ? sock_alloc_inode+0x25/0x1c0
[  791.321251][T16441]  ? __pfx_sock_alloc_inode+0x10/0x10
[  791.321285][T16441]  sock_alloc_inode+0x25/0x1c0
[  791.321317][T16441]  alloc_inode+0x61/0x240
[  791.321354][T16441]  sock_alloc+0x40/0x280
[  791.321387][T16441]  __sock_create+0xc1/0x8d0
[  791.321427][T16441]  ? proc_create_reg+0xe3/0x180
[  791.321464][T16441]  inet_ctl_sock_create+0x94/0x230
[  791.321510][T16441]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[  791.321555][T16441]  ? lockdep_init_map_type+0x5c/0x280
[  791.321606][T16441]  ? lockdep_init_map_type+0x5c/0x280
[  791.321658][T16441]  ? __pfx_igmp_net_init+0x10/0x10
[  791.321710][T16441]  igmp_net_init+0xd0/0x1a0
[  791.321757][T16441]  ops_init+0x1e2/0x5f0
[  791.321811][T16441]  setup_net+0x1ff/0x510
[  791.321869][T16441]  ? lockdep_init_map_type+0x5c/0x280
[  791.321904][T16441]  ? __pfx_setup_net+0x10/0x10
[  791.321943][T16441]  ? debug_mutex_init+0x37/0x70
[  791.321971][T16441]  copy_net_ns+0x2a6/0x5f0
[  791.321998][T16441]  create_new_namespaces+0x3ea/0xa90
[  791.322033][T16441]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  791.322064][T16441]  ksys_unshare+0x45b/0xa40
[  791.322097][T16441]  ? __pfx_ksys_unshare+0x10/0x10
[  791.322131][T16441]  ? xfd_validate_state+0x61/0x180
[  791.322172][T16441]  __x64_sys_unshare+0x31/0x40
[  791.322205][T16441]  do_syscall_64+0xcd/0x490
[  791.322243][T16441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.322267][T16441] RIP: 0033:0x7f94a6d8e929
[  791.322286][T16441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  791.322310][T16441] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  791.322332][T16441] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  791.322348][T16441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  791.322363][T16441] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  791.322378][T16441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  791.322392][T16441] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  791.322421][T16441]  </TASK>
[  791.820910][T16441] socket: no more sockets
[  791.880146][T16441] Failed to initialize the IGMP autojoin socket (err -23)
[  793.345178][   T30] audit: type=1326 audit(4295032087.098:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.3.2026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe7b78e929 code=0x0
[  795.626562][T16506] loop6: detected capacity change from 0 to 8192
[  798.074427][T16561] batman_adv: Routing algorithm '' is not supported
[  799.503924][T16598] ICMPv6: process `syz.3.2052' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead
[  801.581679][T16641] binder: 16633:16641 ioctl c018620c 0 returned -22
[  801.629075][ T8335] Bluetooth: hci2: unexpected event for opcode 0x7c89
[  806.833712][T16700] openvswitch: netlink: IPv4 tunnel dst address is zero
[  806.872605][T16700] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  807.111531][T16704] FAULT_INJECTION: forcing a failure.
[  807.111531][T16704] name failslab, interval 1, probability 0, space 0, times 0
[  807.152423][T16704] CPU: 0 UID: 0 PID: 16704 Comm: syz.3.2078 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  807.152474][T16704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  807.152495][T16704] Call Trace:
[  807.152505][T16704]  <TASK>
[  807.152519][T16704]  dump_stack_lvl+0x16c/0x1f0
[  807.152583][T16704]  should_fail_ex+0x512/0x640
[  807.152632][T16704]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  807.152683][T16704]  should_failslab+0xc2/0x120
[  807.152710][T16704]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  807.152755][T16704]  ? __kernfs_new_node+0xd2/0x8e0
[  807.152799][T16704]  __kernfs_new_node+0xd2/0x8e0
[  807.152840][T16704]  ? kernfs_add_one+0x37d/0x840
[  807.152884][T16704]  ? __pfx___kernfs_new_node+0x10/0x10
[  807.152932][T16704]  ? find_held_lock+0x2b/0x80
[  807.152963][T16704]  ? kernfs_root+0xee/0x2a0
[  807.153008][T16704]  kernfs_new_node+0x13c/0x1e0
[  807.153052][T16704]  ? net_ns_get_ownership+0xf8/0x1b0
[  807.153100][T16704]  kernfs_create_dir_ns+0x4c/0x1a0
[  807.153149][T16704]  internal_create_group+0x34d/0xf30
[  807.153198][T16704]  ? __pfx_internal_create_group+0x10/0x10
[  807.153240][T16704]  ? __pfx_internal_create_group+0x10/0x10
[  807.153285][T16704]  ? __pfx_dev_add_physical_location+0x10/0x10
[  807.153314][T16704]  ? bus_to_subsys+0x131/0x160
[  807.153353][T16704]  dpm_sysfs_add+0x80/0x280
[  807.153383][T16704]  device_add+0x9a6/0x1a70
[  807.153415][T16704]  ? __pfx_device_add+0x10/0x10
[  807.153445][T16704]  ? lockdep_init_map_type+0x5c/0x280
[  807.153486][T16704]  ? __init_waitqueue_head+0xca/0x150
[  807.153521][T16704]  netdev_register_kobject+0x182/0x3a0
[  807.153561][T16704]  register_netdevice+0x13dc/0x2270
[  807.153596][T16704]  ? __pfx_register_netdevice+0x10/0x10
[  807.153631][T16704]  ? __pfx_loopback_net_init+0x10/0x10
[  807.153667][T16704]  register_netdev+0x34/0x50
[  807.153692][T16704]  loopback_net_init+0x7a/0x170
[  807.153726][T16704]  ? __pfx_loopback_net_init+0x10/0x10
[  807.153757][T16704]  ops_init+0x1e2/0x5f0
[  807.153806][T16704]  setup_net+0x1ff/0x510
[  807.153848][T16704]  ? lockdep_init_map_type+0x5c/0x280
[  807.153888][T16704]  ? __pfx_setup_net+0x10/0x10
[  807.153935][T16704]  ? debug_mutex_init+0x37/0x70
[  807.153967][T16704]  copy_net_ns+0x2a6/0x5f0
[  807.153999][T16704]  create_new_namespaces+0x3ea/0xa90
[  807.154040][T16704]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  807.154076][T16704]  ksys_unshare+0x45b/0xa40
[  807.154116][T16704]  ? __pfx_ksys_unshare+0x10/0x10
[  807.154156][T16704]  ? xfd_validate_state+0x61/0x180
[  807.154205][T16704]  __x64_sys_unshare+0x31/0x40
[  807.154243][T16704]  do_syscall_64+0xcd/0x490
[  807.154289][T16704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.154318][T16704] RIP: 0033:0x7fbe7b78e929
[  807.154340][T16704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  807.154367][T16704] RSP: 002b:00007fbe7c6bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  807.154393][T16704] RAX: ffffffffffffffda RBX: 00007fbe7b9b5fa0 RCX: 00007fbe7b78e929
[  807.154413][T16704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  807.154429][T16704] RBP: 00007fbe7b810b39 R08: 0000000000000000 R09: 0000000000000000
[  807.154446][T16704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  807.154462][T16704] R13: 0000000000000000 R14: 00007fbe7b9b5fa0 R15: 00007ffc62050468
[  807.154499][T16704]  </TASK>
[  809.064337][T16697] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  809.077328][T16697] File: /dev/ram7 PID: 16697 Comm: syz.1.2076
[  813.946551][T16793] FAULT_INJECTION: forcing a failure.
[  813.946551][T16793] name failslab, interval 1, probability 0, space 0, times 0
[  813.959431][T16793] CPU: 0 UID: 0 PID: 16793 Comm: syz.2.2094 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  813.959465][T16793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  813.959480][T16793] Call Trace:
[  813.959487][T16793]  <TASK>
[  813.959503][T16793]  dump_stack_lvl+0x16c/0x1f0
[  813.959559][T16793]  should_fail_ex+0x512/0x640
[  813.959606][T16793]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  813.959661][T16793]  should_failslab+0xc2/0x120
[  813.959694][T16793]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  813.959734][T16793]  ? __proc_create+0xc3/0x8c0
[  813.959771][T16793]  ? __proc_create+0x2ce/0x8c0
[  813.959812][T16793]  __proc_create+0x2ce/0x8c0
[  813.959850][T16793]  ? __pfx___proc_create+0x10/0x10
[  813.959892][T16793]  ? _raw_write_unlock+0x28/0x50
[  813.959924][T16793]  ? proc_register+0x314/0x5f0
[  813.959965][T16793]  proc_create_reg+0x7d/0x180
[  813.959990][T16793]  proc_create_net_data+0x8e/0x1b0
[  813.960038][T16793]  ? __pfx_proc_create_net_data+0x10/0x10
[  813.960088][T16793]  ? __pfx_inet_init_net+0x10/0x10
[  813.960133][T16793]  ? __pfx_ping_v4_proc_init_net+0x10/0x10
[  813.960173][T16793]  ping_v4_proc_init_net+0x53/0x70
[  813.960212][T16793]  ops_init+0x1e2/0x5f0
[  813.960257][T16793]  setup_net+0x1ff/0x510
[  813.960295][T16793]  ? lockdep_init_map_type+0x5c/0x280
[  813.960331][T16793]  ? __pfx_setup_net+0x10/0x10
[  813.960370][T16793]  ? debug_mutex_init+0x37/0x70
[  813.960398][T16793]  copy_net_ns+0x2a6/0x5f0
[  813.960424][T16793]  create_new_namespaces+0x3ea/0xa90
[  813.960459][T16793]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  813.960490][T16793]  ksys_unshare+0x45b/0xa40
[  813.960523][T16793]  ? __pfx_ksys_unshare+0x10/0x10
[  813.960557][T16793]  ? xfd_validate_state+0x61/0x180
[  813.960598][T16793]  __x64_sys_unshare+0x31/0x40
[  813.960630][T16793]  do_syscall_64+0xcd/0x490
[  813.960669][T16793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.960693][T16793] RIP: 0033:0x7fd46d18e929
[  813.960712][T16793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  813.960735][T16793] RSP: 002b:00007fd46e009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  813.960757][T16793] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18e929
[  813.960773][T16793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  813.960787][T16793] RBP: 00007fd46d210b39 R08: 0000000000000000 R09: 0000000000000000
[  813.960801][T16793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  813.960815][T16793] R13: 0000000000000000 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  813.960844][T16793]  </TASK>
[  815.251389][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'.
[  816.914207][ T9360] udevd[9360]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory
[  818.441114][T16846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2103'.
[  818.682121][T16846] bridge_slave_1: left allmulticast mode
[  818.695257][T16846] bridge_slave_1: left promiscuous mode
[  818.751450][T16846] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.816293][T16846] bridge_slave_0: left allmulticast mode
[  818.849979][T16846] bridge_slave_0: left promiscuous mode
[  818.889997][T16846] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.243199][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  819.249688][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  821.339818][T16866] mkiss: ax0: crc mode is auto.
[  823.649934][T16890] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  823.669783][T16890] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  823.675978][T16890] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  823.691204][T16890] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  823.729731][T16890] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  824.053956][T16902] device-mapper: ioctl: name not supplied when creating device
[  824.163046][T16902] device-mapper: ioctl: name not supplied when creating device
[  825.080704][T16101] Bluetooth: hci0: command 0x0406 tx timeout
[  825.719763][T16101] Bluetooth: hci3: command 0x0406 tx timeout
[  825.725896][T16101] Bluetooth: hci2: command 0x0406 tx timeout
[  825.735742][ T8335] Bluetooth: hci1: command 0x0406 tx timeout
[  827.808584][T16955] Bluetooth: hci3: command 0x0406 tx timeout
[  829.497424][T16974] FAULT_INJECTION: forcing a failure.
[  829.497424][T16974] name failslab, interval 1, probability 0, space 0, times 0
[  829.527984][T16974] CPU: 1 UID: 0 PID: 16974 Comm: syz.1.2121 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  829.528035][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  829.528056][T16974] Call Trace:
[  829.528067][T16974]  <TASK>
[  829.528080][T16974]  dump_stack_lvl+0x16c/0x1f0
[  829.528139][T16974]  should_fail_ex+0x512/0x640
[  829.528189][T16974]  ? __kmalloc_noprof+0xbf/0x510
[  829.528245][T16974]  ? __netlink_kernel_create+0x17f/0x750
[  829.528280][T16974]  should_failslab+0xc2/0x120
[  829.528313][T16974]  __kmalloc_noprof+0xd2/0x510
[  829.528376][T16974]  __netlink_kernel_create+0x17f/0x750
[  829.528414][T16974]  ? __pfx___netlink_kernel_create+0x10/0x10
[  829.528461][T16974]  ? __pfx_crypto_netlink_init+0x10/0x10
[  829.528515][T16974]  crypto_netlink_init+0xb7/0x140
[  829.528565][T16974]  ? cpus_read_unlock+0x83/0x150
[  829.528602][T16974]  ? __pfx_crypto_netlink_init+0x10/0x10
[  829.528653][T16974]  ? __nf_register_net_hook+0x371/0x730
[  829.528707][T16974]  ? __pfx_crypto_netlink_rcv+0x10/0x10
[  829.528762][T16974]  ? nf_register_net_hook+0x117/0x160
[  829.528816][T16974]  ? nf_register_net_hooks+0xb1/0xd0
[  829.528874][T16974]  ops_init+0x1e2/0x5f0
[  829.528933][T16974]  setup_net+0x1ff/0x510
[  829.528995][T16974]  ? lockdep_init_map_type+0x5c/0x280
[  829.529047][T16974]  ? __pfx_setup_net+0x10/0x10
[  829.529104][T16974]  ? debug_mutex_init+0x37/0x70
[  829.529144][T16974]  copy_net_ns+0x2a6/0x5f0
[  829.529184][T16974]  create_new_namespaces+0x3ea/0xa90
[  829.529234][T16974]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  829.529279][T16974]  ksys_unshare+0x45b/0xa40
[  829.529327][T16974]  ? __pfx_ksys_unshare+0x10/0x10
[  829.529392][T16974]  __x64_sys_unshare+0x31/0x40
[  829.529439][T16974]  do_syscall_64+0xcd/0x490
[  829.529493][T16974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.529524][T16974] RIP: 0033:0x7f94a6d8e929
[  829.529549][T16974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  829.529580][T16974] RSP: 002b:00007f94a7ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  829.529610][T16974] RAX: ffffffffffffffda RBX: 00007f94a6fb5fa0 RCX: 00007f94a6d8e929
[  829.529631][T16974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  829.529651][T16974] RBP: 00007f94a6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  829.529671][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  829.529689][T16974] R13: 0000000000000000 R14: 00007f94a6fb5fa0 R15: 00007ffddc981728
[  829.529733][T16974]  </TASK>
[  829.890592][T16976] device-mapper: ioctl: only supply one of name or uuid, cmd(15)
[  829.906079][T16976] Unable to find swap-space signature
[  831.200461][T17006] input: jJǸ���;9�%v����l��Q�	J86�� as /devices/virtual/input/input41
[  831.534881][ T8851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  831.546150][ T8851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  831.555538][ T8851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  831.564803][ T8851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  831.575936][ T8851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  833.325271][T17008] chnl_net:caif_netlink_parms(): no params data found
[  833.639693][ T8851] Bluetooth: hci4: command tx timeout
[  834.032714][T17008] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.069728][T17008] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.107649][T17008] bridge_slave_0: entered allmulticast mode
[  834.128272][T17008] bridge_slave_0: entered promiscuous mode
[  834.192202][T17040] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2133'.
[  834.335725][T17008] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.356134][T17008] bridge0: port 2(bridge_slave_1) entered disabled state
[  834.380055][T17008] bridge_slave_1: entered allmulticast mode
[  834.410107][T17008] bridge_slave_1: entered promiscuous mode
[  834.652161][T17008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  834.665261][T17045] Process accounting resumed
[  834.705551][T17008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  835.261980][T17008] team0: Port device team_slave_0 added
[  835.592112][T17008] team0: Port device team_slave_1 added
[  835.719841][ T8851] Bluetooth: hci4: command tx timeout
[  835.826082][T17008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  835.839727][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  835.957730][T17008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  835.977618][T17008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  835.985928][T17008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  836.015851][T17008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  836.227654][T17008] hsr_slave_0: entered promiscuous mode
[  836.251144][T17008] hsr_slave_1: entered promiscuous mode
[  836.257646][T17008] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  836.299549][T17008] Cannot create hsr debugfs directory
[  837.274309][T17008] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  837.326588][T17008] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  837.375942][T17008] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  837.402507][T17008] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  837.799741][T16955] Bluetooth: hci4: command tx timeout
[  838.178969][T17008] 8021q: adding VLAN 0 to HW filter on device bond0
[  838.421260][T17008] 8021q: adding VLAN 0 to HW filter on device team0
[  838.438459][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.445734][ T8355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  838.594981][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.602198][ T8355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  839.365902][T17008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  839.883570][T16955] Bluetooth: hci4: command tx timeout
[  840.115407][T17008] veth0_vlan: entered promiscuous mode
[  840.194115][T17008] veth1_vlan: entered promiscuous mode
[  840.383989][T17008] veth0_macvtap: entered promiscuous mode
[  840.403435][T17008] veth1_macvtap: entered promiscuous mode
[  840.507651][T17008] batman_adv: batadv0: Interface activated: batadv_slave_0
[  840.530569][T17008] batman_adv: batadv0: Interface activated: batadv_slave_1
[  840.568922][T17008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.588371][T17008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.621308][T17008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  840.644625][T17008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.967604][ T8330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.030054][ T8330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.345865][T14095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.357141][T14095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  842.222430][T17135] random: crng reseeded on system resumption
[  843.582170][T17163] ecryptfs_parse_packet_length: Five-byte packet length not supported
[  843.600748][T17163] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  845.770557][T17216] [U]  
[  845.773465][T17216] [U] 
[  845.776227][T17216] [U] 
[  845.778995][T17216] [U] 
[  845.819967][T17216] [U] 
[  845.822779][T17216] [U] 
[  845.825547][T17216] [U] 
[  845.828319][T17216] [U] 
[  845.864407][T17216] [U] 
[  845.867212][T17216] [U] 
[  845.869989][T17216] [U] 
[  845.872750][T17216] [U] 
[  845.979916][T17216] [U] 
[  845.982741][T17216] [U] 
[  845.985512][T17216] [U] 
[  845.988296][T17216] [U] 
[  846.021305][T17216] [U] 
[  846.024114][T17216] [U] 
[  846.026890][T17216] [U] 
[  846.029659][T17216] [U] 
[  846.071168][T17216] [U] 
[  846.073966][T17216] [U] 
[  846.076709][T17216] [U] 
[  846.079491][T17216] [U] 
[  846.149822][T17216] [U] 
[  846.152635][T17216] [U] 
[  846.155419][T17216] [U] 
[  846.158187][T17216] [U] 
[  846.193846][T17216] [U] 
[  846.196660][T17216] [U] 
[  846.199424][T17216] [U] 
[  846.202186][T17216] [U] 
[  846.237900][T17216] [U] 
[  846.240809][T17216] [U] 
[  846.243589][T17216] [U] 
[  846.246363][T17216] [U] 
[  846.262692][T17216] [U] 
[  846.265504][T17216] [U] 
[  846.268286][T17216] [U] 
[  846.271049][T17216] [U] 
[  846.319834][T17216] [U] 
[  846.322646][T17216] [U] 
[  846.325414][T17216] [U] 
[  846.328179][T17216] [U] 
[  846.406767][T17216] [U] 
[  846.409600][T17216] [U] 
[  846.412372][T17216] [U] 
[  846.415145][T17216] [U] 
[  846.499720][T17216] [U] 
[  846.502540][T17216] [U] 
[  846.505328][T17216] [U] 
[  846.508112][T17216] [U] 
[  846.550309][T17216] [U] 
[  846.553114][T17216] [U] 
[  846.555861][T17216] [U] 
[  846.558605][T17216] [U] 
[  846.623424][T17216] [U] 
[  849.489257][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'.
[  850.436735][T17290] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  850.582413][T17290] File: /dev/ram7 PID: 17290 Comm: syz.0.2173
[  850.657207][T17301] netlink: 'syz.2.2177': attribute type 11 has an invalid length.
[  850.699780][T17301] netlink: 'syz.2.2177': attribute type 11 has an invalid length.
[  850.707655][T17301] netlink: 'syz.2.2177': attribute type 11 has an invalid length.
[  850.791207][T17301] netlink: 'syz.2.2177': attribute type 11 has an invalid length.
[  850.840986][T17301] netlink: 'syz.2.2177': attribute type 11 has an invalid length.
[  850.869823][T17301] netlink: 'syz.2.2177': attribute type 11 has an invalid length.
[  853.975804][T17351] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2187'.
[  854.304202][T17312] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  857.974189][T17391] random: crng reseeded on system resumption



				



		


	

						
	
						
	
						
	
						
	
	
	

	

	
	
		
		


	

	

	
	
		
		


			






			


		


		



		
	



	




[  875.247061][ T8354] hsr_slave_0: left promiscuous mode
[  875.369610][ T8354] hsr_slave_1: left promiscuous mode
[  875.429013][ T8354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  875.458074][ T8354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  875.483241][ T8354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  875.490874][ T8354] batman_adv: batadv0: Removing interface: batadv_slave_1
[  875.577485][ T8354] veth1_macvtap: left promiscuous mode
[  875.612167][ T8354] veth0_macvtap: left promiscuous mode
[  876.616799][T17656] FAULT_INJECTION: forcing a failure.
[  876.616799][T17656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  876.641115][T17656] CPU: 1 UID: 0 PID: 17656 Comm: syz.2.2250 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  876.641162][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  876.641181][T17656] Call Trace:
[  876.641191][T17656]  <TASK>
[  876.641203][T17656]  dump_stack_lvl+0x16c/0x1f0
[  876.641260][T17656]  should_fail_ex+0x512/0x640
[  876.641314][T17656]  _copy_to_user+0x32/0xd0
[  876.641369][T17656]  simple_read_from_buffer+0xcb/0x170
[  876.641420][T17656]  proc_fail_nth_read+0x197/0x270
[  876.641461][T17656]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  876.641503][T17656]  ? rw_verify_area+0xcf/0x680
[  876.641545][T17656]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  876.641585][T17656]  vfs_read+0x1e1/0xc60
[  876.641638][T17656]  ? __pfx___mutex_lock+0x10/0x10
[  876.641688][T17656]  ? __pfx_vfs_read+0x10/0x10
[  876.641746][T17656]  ? __fget_files+0x20e/0x3c0
[  876.641802][T17656]  ksys_read+0x12a/0x250
[  876.641846][T17656]  ? __pfx_ksys_read+0x10/0x10
[  876.641904][T17656]  do_syscall_64+0xcd/0x490
[  876.641957][T17656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.641989][T17656] RIP: 0033:0x7fd46d18d33c
[  876.642013][T17656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  876.642046][T17656] RSP: 002b:00007fd46e009030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  876.642076][T17656] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18d33c
[  876.642118][T17656] RDX: 000000000000000f RSI: 00007fd46e0090a0 RDI: 0000000000000009
[  876.642138][T17656] RBP: 00007fd46e009090 R08: 0000000000000000 R09: 0000000000000000
[  876.642157][T17656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  876.642176][T17656] R13: 0000000000000000 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  876.642220][T17656]  </TASK>
[  877.048241][T17661] vivid-009: =================  START STATUS  =================
[  877.069132][T17661] vivid-009: Enable Output Cropping: true
[  877.084969][T17661] vivid-009: Enable Output Composing: true
[  877.112115][T17661] vivid-009: Enable Output Scaler: true
[  877.121039][T17661] vivid-009: Tx RGB Quantization Range: Automatic
[  877.127553][T17661] vivid-009: Transmit Mode: HDMI
[  877.132842][T17661] vivid-009: Hotplug Present: 0x00000000
[  877.138836][T17661] vivid-009: RxSense Present: 0x00000000
[  877.207255][T17661] vivid-009: EDID Present: 0x00000000
[  877.215269][T17661] vivid-009: ==================  END STATUS  ==================
[  877.305166][T17661] cougar: G6 mapped to space
[  877.469987][T17631] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  877.503143][T17631] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  877.519688][T17631] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  879.860150][T17725] program syz.1.2264 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  880.687575][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  880.694284][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  881.326192][T17756] usb usb2: usbfs: process 17756 (syz.1.2268) did not claim interface 1 before use
[  882.147401][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  882.154822][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  882.228626][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  882.235312][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  882.271185][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  882.277787][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  882.303935][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  882.310559][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  882.386217][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'.
[  882.467791][T17742] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  883.695983][T17806] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2277'.
[  883.740302][T17808] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[17808]
[  886.020553][T17855] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1)
[  894.491173][T18019] ovs_��: entered promiscuous mode
[  894.814212][T18028] ==================================================================
[  894.822348][T18028] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0
[  894.831104][T18028] Read of size 1 at addr ffff888029767b47 by task syz.2.2309/18028
[  894.839051][T18028] 
[  894.841426][T18028] CPU: 0 UID: 0 PID: 18028 Comm: syz.2.2309 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  894.841473][T18028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  894.841494][T18028] Call Trace:
[  894.841506][T18028]  <TASK>
[  894.841519][T18028]  dump_stack_lvl+0x116/0x1f0
[  894.841574][T18028]  print_report+0xcd/0x680
[  894.841613][T18028]  ? __virt_addr_valid+0x81/0x610
[  894.841650][T18028]  ? __phys_addr+0xe8/0x180
[  894.841688][T18028]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  894.841726][T18028]  kasan_report+0xe0/0x110
[  894.841758][T18028]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  894.841802][T18028]  afs_proc_addr_prefs_write+0x13a9/0x15f0
[  894.841839][T18028]  ? __lock_acquire+0xb8a/0x1c90
[  894.841893][T18028]  ? __pfx_afs_proc_addr_prefs_write+0x10/0x10
[  894.841934][T18028]  ? find_held_lock+0x2b/0x80
[  894.841968][T18028]  ? __might_fault+0xe3/0x190
[  894.842017][T18028]  ? __might_fault+0xe3/0x190
[  894.842064][T18028]  ? __might_fault+0x13b/0x190
[  894.842125][T18028]  ? proc_simple_write+0x117/0x1b0
[  894.842158][T18028]  proc_simple_write+0x117/0x1b0
[  894.842192][T18028]  ? __pfx_proc_simple_write+0x10/0x10
[  894.842227][T18028]  proc_reg_write+0x23d/0x330
[  894.842279][T18028]  ? __pfx_proc_reg_write+0x10/0x10
[  894.842328][T18028]  vfs_writev+0x5df/0xde0
[  894.842372][T18028]  ? __pfx___mutex_trylock_common+0x10/0x10
[  894.842429][T18028]  ? __pfx_vfs_writev+0x10/0x10
[  894.842474][T18028]  ? __mutex_lock+0x1ca/0xb90
[  894.842524][T18028]  ? kmem_cache_free+0x2d1/0x4d0
[  894.842576][T18028]  ? __pfx___mutex_lock+0x10/0x10
[  894.842671][T18028]  ? __fget_files+0x20e/0x3c0
[  894.842722][T18028]  ? do_writev+0x132/0x340
[  894.842764][T18028]  do_writev+0x132/0x340
[  894.842809][T18028]  ? __pfx_do_writev+0x10/0x10
[  894.842860][T18028]  do_syscall_64+0xcd/0x490
[  894.842913][T18028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  894.842947][T18028] RIP: 0033:0x7fd46d18e929
[  894.842974][T18028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  894.843008][T18028] RSP: 002b:00007fd46e009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  894.843040][T18028] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18e929
[  894.843062][T18028] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004
[  894.843083][T18028] RBP: 00007fd46d210b39 R08: 0000000000000000 R09: 0000000000000000
[  894.843103][T18028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  894.843123][T18028] R13: 0000000000000000 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  894.843155][T18028]  </TASK>
[  894.843166][T18028] 
[  895.104378][T18028] Allocated by task 18028:
[  895.108825][T18028]  kasan_save_stack+0x33/0x60
[  895.113564][T18028]  kasan_save_track+0x14/0x30
[  895.118288][T18028]  __kasan_kmalloc+0xaa/0xb0
[  895.122924][T18028]  __kmalloc_node_track_caller_noprof+0x221/0x510
[  895.129397][T18028]  memdup_user_nul+0x2b/0x120
[  895.134103][T18028]  proc_simple_write+0xc7/0x1b0
[  895.138987][T18028]  proc_reg_write+0x23d/0x330
[  895.143706][T18028]  vfs_writev+0x5df/0xde0
[  895.148087][T18028]  do_writev+0x132/0x340
[  895.152370][T18028]  do_syscall_64+0xcd/0x490
[  895.156921][T18028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.162849][T18028] 
[  895.165195][T18028] The buggy address belongs to the object at ffff888029767b40
[  895.165195][T18028]  which belongs to the cache kmalloc-8 of size 8
[  895.178934][T18028] The buggy address is located 0 bytes to the right of
[  895.178934][T18028]  allocated 7-byte region [ffff888029767b40, ffff888029767b47)
[  895.193360][T18028] 
[  895.195712][T18028] The buggy address belongs to the physical page:
[  895.202143][T18028] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29767
[  895.210945][T18028] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  895.218516][T18028] page_type: f5(slab)
[  895.222566][T18028] raw: 00fff00000000000 ffff88801b841500 0000000000000000 dead000000000001
[  895.231222][T18028] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
[  895.239828][T18028] page dumped because: kasan: bad access detected
[  895.246266][T18028] page_owner tracks the page as allocated
[  895.252003][T18028] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 19677199942, free_ts 19663480662
[  895.270370][T18028]  post_alloc_hook+0x1c0/0x230
[  895.275183][T18028]  get_page_from_freelist+0x1321/0x3890
[  895.280780][T18028]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  895.286723][T18028]  alloc_pages_mpol+0x1fb/0x550
[  895.291603][T18028]  new_slab+0x23b/0x330
[  895.295792][T18028]  ___slab_alloc+0xd9c/0x1940
[  895.300503][T18028]  __slab_alloc.constprop.0+0x56/0xb0
[  895.305920][T18028]  __kmalloc_cache_noprof+0xfb/0x3e0
[  895.311243][T18028]  usb_control_msg+0xbc/0x4a0
[  895.315955][T18028]  usb_get_descriptor+0xbb/0x1b0
[  895.321024][T18028]  usb_get_configuration+0x3ba/0x6510
[  895.326445][T18028]  usb_new_device+0x11ac/0x1a20
[  895.331337][T18028]  register_root_hub+0x299/0x730
[  895.336335][T18028]  usb_add_hcd+0xaf2/0x1730
[  895.340904][T18028]  dummy_hcd_probe+0x15c/0x380
[  895.345723][T18028]  platform_probe+0xff/0x1f0
[  895.350360][T18028] page last free pid 10 tgid 10 stack trace:
[  895.356370][T18028]  __free_frozen_pages+0x7fe/0x1180
[  895.361701][T18028]  vfree+0x1fd/0xb50
[  895.365641][T18028]  delayed_vfree_work+0x56/0x70
[  895.370530][T18028]  process_one_work+0x9cf/0x1b70
[  895.375606][T18028]  worker_thread+0x6c8/0xf10
[  895.380243][T18028]  kthread+0x3c2/0x780
[  895.384355][T18028]  ret_from_fork+0x5d7/0x6f0
[  895.388988][T18028]  ret_from_fork_asm+0x1a/0x30
[  895.393790][T18028] 
[  895.396131][T18028] Memory state around the buggy address:
[  895.401787][T18028]  ffff888029767a00: 05 fc fc fc 06 fc fc fc 06 fc fc fc 07 fc fc fc
[  895.409876][T18028]  ffff888029767a80: 06 fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc
[  895.417980][T18028] >ffff888029767b00: 05 fc fc fc 05 fc fc fc 07 fc fc fc 06 fc fc fc
[  895.426076][T18028]                                            ^
[  895.432275][T18028]  ffff888029767b80: fa fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc
[  895.440379][T18028]  ffff888029767c00: fa fc fc fc fa fc fc fc 00 fc fc fc 00 fc fc fc
[  895.448484][T18028] ==================================================================
[  895.519990][T18028] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  895.527279][T18028] CPU: 1 UID: 0 PID: 18028 Comm: syz.2.2309 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  895.539391][T18028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  895.549486][T18028] Call Trace:
[  895.552796][T18028]  <TASK>
[  895.555752][T18028]  dump_stack_lvl+0x3d/0x1f0
[  895.560399][T18028]  panic+0x71c/0x800
[  895.564345][T18028]  ? __pfx_panic+0x10/0x10
[  895.568815][T18028]  ? mark_held_locks+0x49/0x80
[  895.573630][T18028]  ? preempt_schedule_thunk+0x16/0x30
[  895.579044][T18028]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  895.585095][T18028]  ? preempt_schedule_common+0x44/0xc0
[  895.590606][T18028]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  895.596723][T18028]  check_panic_on_warn+0xab/0xb0
[  895.601724][T18028]  end_report+0x107/0x170
[  895.606093][T18028]  kasan_report+0xee/0x110
[  895.610547][T18028]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  895.616578][T18028]  afs_proc_addr_prefs_write+0x13a9/0x15f0
[  895.622425][T18028]  ? __lock_acquire+0xb8a/0x1c90
[  895.627432][T18028]  ? __pfx_afs_proc_addr_prefs_write+0x10/0x10
[  895.633634][T18028]  ? find_held_lock+0x2b/0x80
[  895.638345][T18028]  ? __might_fault+0xe3/0x190
[  895.643084][T18028]  ? __might_fault+0xe3/0x190
[  895.647914][T18028]  ? __might_fault+0x13b/0x190
[  895.652781][T18028]  ? proc_simple_write+0x117/0x1b0
[  895.657927][T18028]  proc_simple_write+0x117/0x1b0
[  895.662898][T18028]  ? __pfx_proc_simple_write+0x10/0x10
[  895.668397][T18028]  proc_reg_write+0x23d/0x330
[  895.673139][T18028]  ? __pfx_proc_reg_write+0x10/0x10
[  895.678385][T18028]  vfs_writev+0x5df/0xde0
[  895.682777][T18028]  ? __pfx___mutex_trylock_common+0x10/0x10
[  895.688728][T18028]  ? __pfx_vfs_writev+0x10/0x10
[  895.693625][T18028]  ? __mutex_lock+0x1ca/0xb90
[  895.698354][T18028]  ? kmem_cache_free+0x2d1/0x4d0
[  895.703343][T18028]  ? __pfx___mutex_lock+0x10/0x10
[  895.708427][T18028]  ? __fget_files+0x20e/0x3c0
[  895.713161][T18028]  ? do_writev+0x132/0x340
[  895.717623][T18028]  do_writev+0x132/0x340
[  895.721912][T18028]  ? __pfx_do_writev+0x10/0x10
[  895.726727][T18028]  do_syscall_64+0xcd/0x490
[  895.731293][T18028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.737226][T18028] RIP: 0033:0x7fd46d18e929
[  895.741667][T18028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  895.761327][T18028] RSP: 002b:00007fd46e009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  895.769778][T18028] RAX: ffffffffffffffda RBX: 00007fd46d3b5fa0 RCX: 00007fd46d18e929
[  895.777776][T18028] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004
[  895.785779][T18028] RBP: 00007fd46d210b39 R08: 0000000000000000 R09: 0000000000000000
[  895.793823][T18028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  895.801821][T18028] R13: 0000000000000000 R14: 00007fd46d3b5fa0 R15: 00007ffec889fb48
[  895.809831][T18028]  </TASK>
[  895.813177][T18028] Kernel Offset: disabled
[  895.817525][T18028] Rebooting in 86400 seconds..