last executing test programs: 8m31.293938824s ago: executing program 0 (id=283): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x505000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x403, 0xc00000076, 0xffffffff, 0x1000000002, 0x8) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5I\xd3F\xd3\xff\x0f\xca\x8b\xf2\x012\xeb\xd0\x9f\xaf\xb4\xc8\xf9n)\xa5\xec\xeb\x1c\xb1\xa2Y\x9dW\xff\xb3\xb8\n\x938\x13\x1f\xdcBP<\xd5\x12\xd1*\xb2|\xf0\xe8,M3E\xb5&\x91G\x020') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r8, r8, 0x0, 0x3) mseal$auto(0xb, 0x5, 0x7fffffffffffffff) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x600002, 0x0) prctl$auto(0xdd6, 0x4, 0x0, 0x4000001, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d25e, 0xe8) socket(0x1, 0x80000, 0x401) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 8m26.215027058s ago: executing program 0 (id=299): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) socket(0xa, 0x5, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x2c8501, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x15, 0x3, 0x4) waitid$auto_P_PID(0x1, 0x0, 0xfffffffffffffffc, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r2 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r2, 0x6a, 0x3, 0x0, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mseal$auto(0x0, 0x40000000007dda, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xc02, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps_rollup\x00', 0x1a3000, 0x0) 8m24.554420947s ago: executing program 0 (id=306): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0xe}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r2) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x658baa000, 0xb, 0x4000000e) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) getsockopt$auto(r2, 0xffffffff, 0xdc, &(0x7f0000000040)='/de\x02\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) clock_getres$auto(0xfffffffb, 0x0) 8m22.038311764s ago: executing program 0 (id=312): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioperm$auto(0x400, 0x7f, 0xd) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x1, 0x2, 0x2, 0xb, 0x2e, 0x8000, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) setrlimit$auto(0x406, 0x0) socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000000c0)={0x0, 0xc4}, 0x10000, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10b00) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff00"}, 0x66) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop12\x00', 0x60742, 0x0) socket(0xa, 0x2, 0x3a) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) 8m6.574719072s ago: executing program 32 (id=312): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioperm$auto(0x400, 0x7f, 0xd) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x1, 0x2, 0x2, 0xb, 0x2e, 0x8000, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) setrlimit$auto(0x406, 0x0) socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000000c0)={0x0, 0xc4}, 0x10000, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10b00) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff00"}, 0x66) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop12\x00', 0x60742, 0x0) socket(0xa, 0x2, 0x3a) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) 8.904866188s ago: executing program 3 (id=2315): socket(0xa, 0x1, 0x100) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) socket(0x2, 0x80002, 0x73) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/248, 0xf8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x8042, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xfffffff7, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc8, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x64, 0x8000001f, 0x7, 0x46d3e, 0xc, 0x10000, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop11\x00', 0x14d600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xfff, 0x8000000008012, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{0x0, 0x205aa, 0x0, 0x1, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0x40}, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) 7.697095634s ago: executing program 3 (id=2319): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy3/hwflags\x00', 0x40081, 0x0) (async) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy3/hwflags\x00', 0x40081, 0x0) write$auto(r4, 0x0, 0x4) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r5, 0x2285, r3) (async) ioctl$auto(r5, 0x2285, r3) ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, &(0x7f00000003c0)="24974be558375bae3ad1ba19ced8be946c60c60ab2bde92759ef9897bcce2190e07e47e713c1adbf479e4df99c9d0a5584300c4783207c385762d26b0815f96a4ded924fa9bb8e3bead2f8d8f403a22bf7a60a2dc93d96d61f258c7cd895c47a7b7c9af0b359fb193e640266f73ce090c01be652928aabb21c70437ba3ca371bd2b3a6e8a414c5241cbbca03a64a9825d755b553e4ca5b19fad8665da13daaea4bda280d76ccb9dec930133f104c52") r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/active\x00', 0x800, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r6, &(0x7f00000002c0)=""/243, 0xf3) (async) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r6, &(0x7f00000002c0)=""/243, 0xf3) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0005"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0005"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) getsockopt$auto_SO_LOCK_FILTER(r0, 0x0, 0x2c, &(0x7f00000000c0)='xfrm0\x00', &(0x7f0000000100)=0x8f3) write$auto_tun_fops_tun(r3, &(0x7f0000000480), 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x2, 0x88) (async) r7 = socket(0xa, 0x2, 0x88) setsockopt$auto(r7, 0x11, 0xb, 0x0, 0x8) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r8, 0x9000643b, 0xcd) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="cd2356ec956a4d8f679ec1f8950ab0eff2f15278ce19413390a5a9b75bd48a317787274c8f9460aab1bb091bfe144ae49b178536a458b32380d786de2a37941dd636960373ce337ff2468d91e72be1b6a5747d03d930f92ec1dddbd5f3e47d7c9c5257740a2ae1b963f814991d01828e69e76616822983e9ce21accbd8", 0x2000000000000fc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa504}, 0x800}, 0x7, 0x4008) 7.077033526s ago: executing program 3 (id=2322): madvise$auto(0x0, 0x200007, 0x8) 6.960565558s ago: executing program 2 (id=2323): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = getpid() sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x40) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000080)=""/103, 0x67) shutdown$auto(0x200000003, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x47, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r5, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) write$auto(r7, &(0x7f0000000080)='1\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, 0x0) 6.680948389s ago: executing program 3 (id=2325): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0xfffffffffffffffe) r0 = socket(0x26, 0x1, 0xfffffffd) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x4, 0x0, 0x25}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x1, 0x1ff, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00000000c7ff7567b8b8bb2596186d87ef96aa93cad5590efe28aedfc4f6a4faf8a3e12d44e9e99e75867d9c852863be0223902e776471908a5e5a2c2975e4caa347f43d87b67a15ffbb05ab9e46a22fc59da804dfa74934107dbc56eba38defebbb07eca99c826c6593f9dc487a211c76c1dabcc3c37cd260a99381a21596b2119b43264b47d24ff14f95aeae1fe59154a55810257fd54cdad504", @ANYRESDEC=0x0, @ANYBLOB="00024d80261cfbdbdf25140000005c000180140002007465616d3000000000000000000000001400020064756d6d79300000000000000000000014000200626f6e645f736c6176655f30000000001400020074756e6c30000000000000000000000008000300000800000800090000800000"], 0x78}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/power/pm_qos_no_power_off\x00', 0x20a42, 0x0) mmap$auto(0x3, 0xe97f, 0x2, 0x14, r2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x4, 0x5, 0x2, 0x100000009b72, 0x5, 0x45c0e89) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x45, 0x0, 0x9) ioctl$auto_FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x4) pread64$auto(r4, 0x0, 0x10001, 0x830) write$auto(r3, 0x0, 0x30fe) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) 6.205686868s ago: executing program 3 (id=2326): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmctl$auto_SHM_LOCK(0x8, 0xb, &(0x7f0000000080)={{0x1ff, 0xee01, 0x0, 0x200, 0x4, 0x2, 0x200}, 0x29ba, 0x52ded5a9, 0x5, 0x0, @inferred, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000040)="a70c4823efcf4e0fc451510e1a", &(0x7f0000000180)="c8e0e734c0695a2a08d918729df602c1880d4ba6da139125545e793acd61657ad7ef28a8b33c7aa29d5881687724863d1e913b911d2a4cf9f213884b67a97070ba17bc7a81b1ce86e4b01401cbd43e6f4f88c39ba6364b40c9a65ba499557b65c88ab97e3c15195deffaa8acf415f5c5a55d861ae94fb6ebd7832ccfd0f586d0797224b3a5512ec47025581faebdcb5110d3844aa53c286cc004a9e1f99e431d8e0f5a73f25392b27b4605855197479bd09158605e0aa41d36078ec077a66a1c051cfb0074506478e1b9368a476a3defd5b6dd869109522cac634c95c45de6"}) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, &(0x7f00000002c0)={{0xc, r0, 0x0, 0x28b0, 0x80000000, 0x7, 0xf895}, &(0x7f0000000100)=0xa, &(0x7f0000000280)=0x1d, 0x3, 0xfffffffffffffff7, 0xff, 0x9, 0x80000000, 0x5, 0x8, 0xb60, @raw=0x80, @inferred=0xffffffffffffffff}) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi28\x00', 0xc0500, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/saved_tgids\x00', 0x6c100, 0x0) r2 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto(r1, 0x0, r2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x11c, 0x3, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 5.935364288s ago: executing program 2 (id=2327): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000c, 0x2000000008, 0xeb0, 0xfffffffffffffffa, 0x7ffd) mmap$auto(0x0, 0x10008, 0x3, 0xeb1, 0x40000000000a5, 0x808000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto(r0, &(0x7f0000000100)='.}\x00', 0x2) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x1000000000100002, 0x8000000000000010, 0x602, 0x2) mmap$auto(0x0, 0x7, 0x4000000000df, 0x19, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpu1/hotplug/state\x00', 0x109100, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x27fff) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 5.921211952s ago: executing program 3 (id=2328): syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0x85, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x2000000081, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x15, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r3, 0xa0) ustat$auto(0x801, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bpf$auto(0x0, 0x0, 0x6f4) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r4, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) 5.914318149s ago: executing program 4 (id=2329): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000340), 0x0) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x141142, 0x0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x480) epoll_ctl$auto(r0, 0x81, r0, 0x0) (async) epoll_ctl$auto(r0, 0x81, r0, 0x0) sysfs$auto(0x2, 0x100000000000036, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) (async) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000100)={&(0x7f00000002c0)="4aeb5811374c4108f3fa2a09ae586438e9cf6b8ce4a72edcb1f7f94e01ba51cc69e91b4bc064f8e7abe6cddf85ff2728aa19b96fb03df49af31cfd35c2282826045dbf2cdbb24b8f6d93a0b35480d0a0210cb9dd076095d6ac3c55ea3f7d6852de4135dbd8f522f827107cd973c9715c4b28159d3fabfe718765a9b6548e150aa6a2dc42b7bca91a1f4f8ca1bf414f0bebfe873c8be497c2152371fffffffffffffffd00c1b5e85a019685", 0x8}, 0xd, 0x8, 0x1) (async) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000100)={&(0x7f00000002c0)="4aeb5811374c4108f3fa2a09ae586438e9cf6b8ce4a72edcb1f7f94e01ba51cc69e91b4bc064f8e7abe6cddf85ff2728aa19b96fb03df49af31cfd35c2282826045dbf2cdbb24b8f6d93a0b35480d0a0210cb9dd076095d6ac3c55ea3f7d6852de4135dbd8f522f827107cd973c9715c4b28159d3fabfe718765a9b6548e150aa6a2dc42b7bca91a1f4f8ca1bf414f0bebfe873c8be497c2152371fffffffffffffffd00c1b5e85a019685", 0x8}, 0xd, 0x8, 0x1) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty63\x00', 0x12203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r4) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x985}, 0x4) write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) (async) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x40a002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000400)=0xfffff000) 4.893071553s ago: executing program 4 (id=2331): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x80000000000000a, 0xffffffffffffffff, 0x3, 0x2e) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x2, 0x0, 0x80) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2008, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x3) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x400fffd, 0x0, 0x0) ioperm$auto(0x9, 0x7f, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) 4.817555932s ago: executing program 1 (id=2332): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) r0 = getpid() sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x40) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket(0x2, 0x80002, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x47, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r3, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4.558147037s ago: executing program 1 (id=2333): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket(0x2b, 0x1, 0x1) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(r0, 0x8983, 0x4) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyq4\x00', 0x48341, 0x0) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, &(0x7f0000000040)) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x8001, 0x0) write$auto(r2, 0x0, 0x7d) socket(0x2b, 0x1, 0x1) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/macvlan1/app_solicit\x00', 0xd2000, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x2) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) 4.178135207s ago: executing program 2 (id=2334): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000240)={"04ee08c9", 0x1, 0xf6, 0xd, 0x6, 0x7, "bd3b7d7d2a75d9fe381320cc9e1dea", "75b660e6", "847abc35", "9fea6d57", ["da621744c13a48dafa8e4863", "115e1f14786464a8bc277951", "e3d8afc7bf1a88e7344601e7", "e7b7ede0cfe03bb7d2b0bbe3"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@typed={0xc, 0x19, 0x0, 0x0, @u64}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "f75447b747e6d6a37eba86000001"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd8a10ffdbdf250100000008000900", @ANYRES32=r7, @ANYBLOB="0800050006000000110001006f76735f12fffe00000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 3.869876434s ago: executing program 1 (id=2335): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300200000000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4) r1 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x450201, 0x0) write$auto_proc_timens_offsets_operations_base(r1, &(0x7f0000000080)="d35eb45c97d0ce2f", 0x8) mmap$auto(0x0, 0x9, 0x8000000000000005, 0xebe, r0, 0x8000) r2 = socket(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r2) io_uring_setup$auto(0x9, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x30080, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) 3.497602246s ago: executing program 4 (id=2336): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/soft_watchdog\x00', 0x101201, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0xffffffffffffffff, 0x809, 0xfffffffffffffffe, 0x40eb2, r0, 0x300000000000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x5, 0x84) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) getsockopt$auto(r1, 0x84, 0x1d, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4001, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/neigh/ip_vti0/base_reachable_time_ms\x00', 0x202, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) write$auto(0x3, 0x0, 0xfdef) 3.415778366s ago: executing program 1 (id=2337): select$auto(0x3, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x8f75) socket(0x2, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r1) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r3, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x1, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x1, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000004c0)='\xa7J\xe6\xfc\xe2\xfb\xeb\xc8\xcb\x13\xc5\v\xf9&\x88\x8e\xd6\xc5\x9a\xbdC}\xe1\xa5?\x00j\xf4k\xa3\xac\xca\xff:l\xdf\xc0Q\xb30gf\x02\x01\x17\x84\xc4`t\xedd\xa6\xc7\xe5\xbdn\xa6%\x96_v\xc3\n\x8f\xf8|;n&\xda\xb4P\xbe a RJu\xaf>\x04\x19\xf7\xc9\x9e\xacb\x9d\x91\xe9\x98\xee\xf4\x8fZD\xda\xb5\x81\x19.\xe7\x88\x96\x9e\xa5\x7f\xb3Y.\x10\xf1\x12\xc0\xfc\xc5\x10\x8f\xe2K[p\x83\xa4\x18\x80\x1e\x82\xd0\x8d\x13.\xb2R\x92\xcddc\x15\x8c\x98\xbd\"\xad\x13\xfc>Z&u\x9d\x90\xa8o\xb3\x17\x1e3n)2\xc32t\x80\v\xa7}\x12\xa8\x97\xaf\xe3m\xf4\xa8\xb2\xed6R\x8e\x06J\x95c\x18\xf1<\xb8;\x92|\xcd\xd4\x94\xb3\xd4\x94t\x8f\xadM', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) (async) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') (async) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') r5 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) dup$auto(r5) (async) r6 = dup$auto(r5) ioctl$auto_ECCGETLAYOUT(r6, 0x81484d11, &(0x7f0000000340)={0x101, [0x101, 0x1, 0x80000000, 0x3, 0xa, 0x5, 0x1, 0x5, 0x808f, 0xe, 0x5, 0x7, 0x2, 0xf, 0x57, 0x8dbc, 0x8, 0x7, 0xd1, 0x72944006, 0x1, 0xfe54, 0x9, 0xfffff645, 0x9, 0x6, 0x9, 0x80, 0x80000000, 0x8dc, 0x4, 0x8, 0xfffff0bf, 0xa, 0x575e6e2c, 0x101, 0xff, 0x2, 0xffff0000, 0xb, 0x71c7, 0x1, 0x8, 0x90, 0xfffffffb, 0x7, 0x3, 0x5, 0x200, 0x100, 0x71d1, 0xffff, 0x9, 0x8, 0x8, 0x3, 0x2, 0x81, 0xe, 0x17, 0xe0b, 0x1, 0x0, 0x57a1], 0x6, [{0xff, 0x6e14}, {0x9, 0x8}, {0x4d1, 0xb9bc}, {0xe, 0x8}, {0x4, 0x24}, {0x1, 0x8}, {0x1, 0x1ff}, {0x1, 0x40}]}) 2.360948886s ago: executing program 1 (id=2339): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) setresgid$auto(0x9, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x20000000, 0xffffffffffff0001, 0x95) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000015c0)=""/4049, 0xfd1) setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000) madvise$auto(0x8, 0xc89, 0xffffff33) socket(0x10, 0x3, 0xc) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xc0a3, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4e8c, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.3/usb16/ep_00/bmAttributes\x00', 0x2000, 0x0) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) arch_prctl$auto(0x5005, 0x200000000000006) 1.890086921s ago: executing program 4 (id=2340): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x1) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0xe8c282, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0xfffffffffffffffe, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x5, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xf53, 0xffffffffffff0008, 0x17) prctl$auto(0x400, 0x7f, 0x0, 0x10000, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, r1, 0xfffff4c3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) 1.520492752s ago: executing program 2 (id=2341): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x3, 0x2010000000000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0x80000000eb1, 0x401, 0x3) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) (async) r0 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000180)={0x5, 0x0, [{0x280, 0x3ff}]}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7) (async) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x8, 0x57, 0xa441, 0xe) madvise$auto(0x0, 0x2003ed, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r4, 0x0, 0x1f40) (async) read$auto(r4, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x13}, 0x18) 1.078583264s ago: executing program 2 (id=2342): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x1) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x10}, 0x3) close_range$auto(0x2, 0x8, 0xff0f0000) 1.02246624s ago: executing program 4 (id=2343): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, 0x0) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x404880c) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x9, 0x0, 0x103, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfffffffffffffffd, 0x8000000002, 0xec, 0x4, 0x200000000000002, 0x1, 0x7ff, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x10, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x20002, "0600000000000000"}, 0x2) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(r2, r2, 0x1000fffc) write$auto(0xffffffffffffffff, 0x0, 0xe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 541.130595ms ago: executing program 2 (id=2344): unshare$auto(0x40000080) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) select$auto(0xe, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x7}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000200)='1\x00m\xa0\x04|\x03\xcb\x87\xa85\x12\xd6\xfcd7\xf1\xfb\xe9n\xaaQ\x9b\xeb\xa5JcY\xbf\x91C\xd4[\x02\x18\xf1t\"\x0e\xdeO3\xd7\xec\xf4\xcd\x9c\x98\xb8\xaa\xac\xd6u\xfeAA\x88\xcd\x02\x9c\xbb5\x91\xe5S\xa0\xaf\xce\xc8\x807/\x02\x82\xb0,\xe6W\x00\x85\xd5\xdb\xb4\x94\xc3\x89\x04\xc2\x8e\xd8\xec\xc8\xd8\xbae\xfd!\x04\xd0\xa4\x9e,Y\x82)\x9b\xc7\xec\xa6QX\t\xe9\x9es\xc5\xad\x9dV\xa0\xfa\xdb\xf4^\x90q\xa4\x17\xf2\x17\x18}E\xe6z\xda15\xbeI\xba1\xb2\x1e\x80\xbd|\xb0\xd1\xb7\xab\x0e', 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80042, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nilfs2/features/README\x00', 0x40, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x501440, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) setns(0xffffffffffffffff, 0x60020000) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000000)=0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x492201, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) ioctl$auto(0x1, 0x541b, 0x8) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) 467.787044ms ago: executing program 1 (id=2345): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x10000, 0x0) open(0x0, 0x22240, 0x154) bpf$auto(0x7, 0x0, 0xa3) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x11, 0x80003, 0x0) set_robust_list$auto(&(0x7f0000000240)={{&(0x7f0000000100)={&(0x7f0000000040)}}, 0x5, &(0x7f0000000200)={&(0x7f00000001c0)={&(0x7f0000000140)}}}, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0xff}, 0x2}, 0x1, 0xb) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) 0s ago: executing program 4 (id=2346): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) read$auto(0x3, 0x0, 0x7ffffffff000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x59, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4f4, 0x7}, 0x10) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) r3 = getpgid$auto(0x0) fcntl$auto(r1, 0xffffffff, r3) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_RELBIT(r0, 0x40045566, 0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0x1) r4 = socket(0xa, 0x2, 0x0) r5 = mq_open$auto(0x0, 0x0, 0xfff, &(0x7f00000000c0)={0x1, 0x4, 0x37046cbf, 0xb3da}) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8003, 0x0) setreuid$auto(0x8, 0x9d7) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r6, 0x1, &(0x7f00000000c0)) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xc7f, &(0x7f0000000040)="08d51c5d34deadf8da7fb348d0c2e4276ff59946") setsockopt$auto(r4, 0x29, 0x11, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   [ 551.418933][T15193] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 551.456000][T15188] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1810'. [ 551.635816][T15198] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 552.119610][T15209] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 552.699265][T15220] ICMPv6: process `syz.1.1819' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 553.337969][T15225] could not allocate digest TFM handle [ 553.722759][T15248] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1824'. [ 553.986409][ T30] audit: type=1804 audit(4294975917.767:22): pid=15250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1823" name="/newroot/477/file0" dev="tmpfs" ino=2577 res=1 errno=0 [ 554.320033][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 555.706011][T15297] Invalid ELF header magic: != ELF [ 555.863240][T15300] FAULT_INJECTION: forcing a failure. [ 555.863240][T15300] name failslab, interval 1, probability 0, space 0, times 0 [ 555.876464][T15300] CPU: 1 UID: 0 PID: 15300 Comm: syz.2.1836 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 555.876507][T15300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.876527][T15300] Call Trace: [ 555.876538][T15300] [ 555.876550][T15300] dump_stack_lvl+0x16c/0x1f0 [ 555.876589][T15300] should_fail_ex+0x512/0x640 [ 555.876637][T15300] should_failslab+0xc2/0x120 [ 555.876676][T15300] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 555.876708][T15300] ? stack_depot_save_flags+0x28/0xa40 [ 555.876744][T15300] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 555.876800][T15300] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 555.876857][T15300] idr_get_free+0x528/0xa30 [ 555.876924][T15300] idr_alloc_u32+0x190/0x2f0 [ 555.876979][T15300] ? __pfx_idr_alloc_u32+0x10/0x10 [ 555.877046][T15300] idr_alloc+0xc0/0x130 [ 555.877095][T15300] ? __pfx_idr_alloc+0x10/0x10 [ 555.877143][T15300] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.877224][T15300] tipc_conn_alloc+0x337/0x590 [ 555.877283][T15300] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 555.877331][T15300] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 555.877383][T15300] ? net_generic+0xea/0x2a0 [ 555.877446][T15300] tipc_group_create+0x4ab/0x660 [ 555.877496][T15300] tipc_setsockopt+0x7f0/0xdb0 [ 555.877530][T15300] ? __pfx_tipc_setsockopt+0x10/0x10 [ 555.877568][T15300] ? __pfx_do_futex+0x10/0x10 [ 555.877603][T15300] ? fd_install+0x225/0x750 [ 555.877656][T15300] ? __pfx_tipc_setsockopt+0x10/0x10 [ 555.877691][T15300] do_sock_setsockopt+0xf0/0x1d0 [ 555.877733][T15300] __sys_setsockopt+0x120/0x1a0 [ 555.877766][T15300] __x64_sys_setsockopt+0xbd/0x160 [ 555.877792][T15300] ? do_syscall_64+0x91/0x490 [ 555.877819][T15300] ? lockdep_hardirqs_on+0x7c/0x110 [ 555.877845][T15300] do_syscall_64+0xcd/0x490 [ 555.877875][T15300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.877903][T15300] RIP: 0033:0x7fc8ae98e9a9 [ 555.877924][T15300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.877951][T15300] RSP: 002b:00007fc8af7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 555.877976][T15300] RAX: ffffffffffffffda RBX: 00007fc8aebb5fa0 RCX: 00007fc8ae98e9a9 [ 555.877994][T15300] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000002 [ 555.878010][T15300] RBP: 00007fc8aea10d69 R08: 0000000000000014 R09: 0000000000000000 [ 555.878026][T15300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.878042][T15300] R13: 0000000000000000 R14: 00007fc8aebb5fa0 R15: 00007ffee69e5bc8 [ 555.878078][T15300] [ 556.155393][T15300] ima: policy update failed [ 556.216720][ T30] audit: type=1802 audit(4294975919.938:23): pid=15300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1836" res=0 errno=0 [ 557.224746][T15326] random: crng reseeded on system resumption [ 557.838536][T15336] lo: entered allmulticast mode [ 557.851582][T15336] lo: left allmulticast mode [ 558.566625][T15355] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1849'. [ 558.897062][T15377] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 559.033944][T15372] zswap: compressor not available [ 559.534036][T15397] binder: 15396:15397 ioctl c018620c 0 returned -14 [ 559.566007][T15398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1859'. [ 560.231462][ T30] audit: type=1800 audit(4294975928.016:24): pid=15419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=53482 res=0 errno=0 [ 561.387713][ T9780] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1369 with max blocks 2 with error 117 [ 561.429053][ T9780] EXT4-fs (sda1): This should not happen!! Data will be lost [ 561.429053][ T9780] [ 563.524642][T15493] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 563.743619][T15498] vivid-009: ================= START STATUS ================= [ 563.793070][T15498] vivid-009: Enable Output Cropping: true [ 563.802927][T15498] vivid-009: Enable Output Composing: true [ 563.837538][T15498] vivid-009: Enable Output Scaler: true [ 563.861710][T15498] vivid-009: Tx RGB Quantization Range: Automatic [ 563.889726][T15498] vivid-009: Transmit Mode: HDMI [ 563.908731][T15498] vivid-009: Hotplug Present: 0x00000000 [ 563.935811][T15503] block nbd7: not configured, cannot reconfigure [ 563.943898][T15498] vivid-009: RxSense Present: 0x00000000 [ 563.953370][T15498] vivid-009: EDID Present: 0x00000000 [ 563.959196][T15498] vivid-009: ================== END STATUS ================== [ 564.689838][T15513] [U] - [ 564.760401][T15518] [U] [ 564.787289][T15518] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 565.332287][T15533] ICMPv6: process `syz.1.1890' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 566.236009][T15553] FAULT_INJECTION: forcing a failure. [ 566.236009][T15553] name failslab, interval 1, probability 0, space 0, times 0 [ 566.250499][T15553] CPU: 1 UID: 0 PID: 15553 Comm: syz.1.1892 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 566.250539][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.250556][T15553] Call Trace: [ 566.250565][T15553] [ 566.250576][T15553] dump_stack_lvl+0x16c/0x1f0 [ 566.250610][T15553] should_fail_ex+0x512/0x640 [ 566.250641][T15553] ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0 [ 566.250675][T15553] should_failslab+0xc2/0x120 [ 566.250710][T15553] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 566.250746][T15553] ? trace_kmem_cache_alloc+0x28/0xc0 [ 566.250782][T15553] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 566.250813][T15553] ? mas_alloc_nodes+0x18b/0x8b0 [ 566.250860][T15553] ? mas_alloc_nodes+0x2f1/0x8b0 [ 566.250912][T15553] mas_alloc_nodes+0x2f1/0x8b0 [ 566.250962][T15553] mas_node_count_gfp+0x105/0x130 [ 566.251011][T15553] mas_preallocate+0x7e0/0xde0 [ 566.251052][T15553] ? __pfx_mas_preallocate+0x10/0x10 [ 566.251098][T15553] ? rcu_read_unlock+0x17/0x60 [ 566.251139][T15553] vma_link+0x135/0x6a0 [ 566.251174][T15553] ? __pfx_vma_link+0x10/0x10 [ 566.251202][T15553] ? rcu_is_watching+0x12/0xc0 [ 566.251246][T15553] ? anon_vma_clone+0x405/0x5c0 [ 566.251292][T15553] ? anon_vma_name+0x75/0x100 [ 566.251335][T15553] copy_vma+0x6c2/0xaa0 [ 566.251370][T15553] ? __pfx_copy_vma+0x10/0x10 [ 566.251397][T15553] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.251433][T15553] ? register_lock_class+0x41/0x4c0 [ 566.251473][T15553] ? __schedule+0x1181/0x5dd0 [ 566.251515][T15553] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 566.251566][T15553] ? __lock_acquire+0x622/0x1c90 [ 566.251612][T15553] copy_vma_and_data+0x1cf/0x750 [ 566.251644][T15553] ? __pfx_copy_vma_and_data+0x10/0x10 [ 566.251682][T15553] ? __vma_enter_locked+0x163/0x3f0 [ 566.251733][T15553] ? find_held_lock+0x2b/0x80 [ 566.251764][T15553] ? move_vma+0x536/0x1740 [ 566.251799][T15553] move_vma+0x548/0x1740 [ 566.251833][T15553] ? __pfx_move_vma+0x10/0x10 [ 566.251859][T15553] ? mm_get_unmapped_area+0x95/0xe0 [ 566.251909][T15553] ? shmem_get_unmapped_area+0x170/0xa00 [ 566.251955][T15553] ? cap_mmap_addr+0x4b/0x120 [ 566.251989][T15553] ? bpf_lsm_mmap_addr+0x9/0x10 [ 566.252025][T15553] ? security_mmap_addr+0x6c/0x1e0 [ 566.252071][T15553] ? __get_unmapped_area+0x267/0x440 [ 566.252113][T15553] ? vrm_set_new_addr+0x208/0x290 [ 566.252145][T15553] __do_sys_mremap+0xe07/0x1590 [ 566.252179][T15553] ? __pfx___do_sys_mremap+0x10/0x10 [ 566.252230][T15553] ? __x64_sys_futex+0x1e0/0x4c0 [ 566.252288][T15553] do_syscall_64+0xcd/0x490 [ 566.252322][T15553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.252350][T15553] RIP: 0033:0x7f32fed8e9a9 [ 566.252373][T15553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.252401][T15553] RSP: 002b:00007f32ffbd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 566.252429][T15553] RAX: ffffffffffffffda RBX: 00007f32fefb6240 RCX: 00007f32fed8e9a9 [ 566.252449][T15553] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 566.252466][T15553] RBP: 00007f32fee10d69 R08: 00007effffffb000 R09: 0000000000000000 [ 566.252484][T15553] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 566.252502][T15553] R13: 0000000000000000 R14: 00007f32fefb6240 R15: 00007fff1f07d348 [ 566.252539][T15553] [ 566.629648][ T9784] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:49: bg 4: bad block bitmap checksum [ 566.648031][ T9784] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 566.670856][ T9784] EXT4-fs (sda1): This should not happen!! Data will be lost [ 566.670856][ T9784] [ 566.846036][T15563] random: crng reseeded on system resumption [ 567.084842][T15566] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 567.217197][T15566] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.217197][T15566] [ 567.931551][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.937913][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.938991][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 567.960712][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 568.151142][T15581] binder: 15578:15581 ioctl c018620c 0 returned -22 [ 568.198811][T15581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1899'. [ 569.704005][T15623] Setting dangerous option i915.mitigations - tainting kernel [ 571.579009][T15675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1920'. [ 572.730010][T15707] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 576.614427][T15788] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 576.627032][T15788] EXT4-fs (sda1): This should not happen!! Data will be lost [ 576.627032][T15788] [ 577.386551][T15793] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 577.424544][T15793] EXT4-fs (sda1): This should not happen!! Data will be lost [ 577.424544][T15793] [ 579.552193][T15802] Process accounting resumed [ 580.288478][T15855] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 580.301078][T15855] EXT4-fs (sda1): This should not happen!! Data will be lost [ 580.301078][T15855] [ 581.100962][T15875] zram0: detected capacity change from 8 to 0 [ 581.380586][T15875] zram: Removed device: zram0 [ 581.813114][T15890] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 583.758615][T15897] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 584.123580][T15926] rnbd_client L213: map_device: Parameters missing [ 584.160304][T15929] rnbd_client L213: map_device: Parameters missing [ 585.297720][T15959] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 585.385318][T15963] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[15963] [ 585.395888][T15964] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[15964] [ 587.407292][T16006] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 587.460703][T16006] EXT4-fs (sda1): This should not happen!! Data will be lost [ 587.460703][T16006] [ 588.601233][T16008] kexec: Could not allocate control_code_buffer [ 591.919412][ T9776] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 918 with max blocks 5 with error 117 [ 591.950725][ T9776] EXT4-fs (sda1): This should not happen!! Data will be lost [ 591.950725][ T9776] [ 592.864760][T16102] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 592.927993][ T30] audit: type=1800 audit(4294976987.703:25): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2003" name="dbroot" dev="configfs" ino=56200 res=0 errno=0 [ 592.948192][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.810598][T16171] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2016'. [ 596.079590][T16174] FAULT_INJECTION: forcing a failure. [ 596.079590][T16174] name failslab, interval 1, probability 0, space 0, times 0 [ 596.112495][T16174] CPU: 1 UID: 0 PID: 16174 Comm: syz.2.2014 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 596.112543][T16174] Tainted: [U]=USER [ 596.112552][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.112570][T16174] Call Trace: [ 596.112579][T16174] [ 596.112594][T16174] dump_stack_lvl+0x16c/0x1f0 [ 596.112628][T16174] should_fail_ex+0x512/0x640 [ 596.112656][T16174] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 596.112689][T16174] should_failslab+0xc2/0x120 [ 596.112721][T16174] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 596.112752][T16174] ? sock_alloc_inode+0x25/0x1c0 [ 596.112800][T16174] ? __pfx_sock_alloc_inode+0x10/0x10 [ 596.112835][T16174] sock_alloc_inode+0x25/0x1c0 [ 596.112871][T16174] alloc_inode+0x61/0x240 [ 596.112907][T16174] sock_alloc+0x40/0x280 [ 596.112942][T16174] __sock_create+0xc1/0x8d0 [ 596.112982][T16174] ? lockdep_init_map_type+0x5c/0x280 [ 596.113027][T16174] smc_create+0x15d/0x2a0 [ 596.113073][T16174] __sock_create+0x335/0x8d0 [ 596.113120][T16174] __sys_socket+0x14d/0x260 [ 596.113157][T16174] ? fput+0x70/0xf0 [ 596.113187][T16174] ? __pfx___sys_socket+0x10/0x10 [ 596.113221][T16174] ? xfd_validate_state+0x61/0x180 [ 596.113255][T16174] ? __pfx_ksys_write+0x10/0x10 [ 596.113289][T16174] __x64_sys_socket+0x72/0xb0 [ 596.113328][T16174] ? lockdep_hardirqs_on+0x7c/0x110 [ 596.113355][T16174] do_syscall_64+0xcd/0x490 [ 596.113387][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.113416][T16174] RIP: 0033:0x7fc8ae98e9a9 [ 596.113438][T16174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.113465][T16174] RSP: 002b:00007fc8af726038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 596.113491][T16174] RAX: ffffffffffffffda RBX: 00007fc8aebb6320 RCX: 00007fc8ae98e9a9 [ 596.113509][T16174] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 596.113526][T16174] RBP: 00007fc8aea10d69 R08: 0000000000000000 R09: 0000000000000000 [ 596.113544][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.113561][T16174] R13: 0000000000000000 R14: 00007fc8aebb6320 R15: 00007ffee69e5bc8 [ 596.113596][T16174] [ 596.456276][T16174] net_ratelimit: 672 callbacks suppressed [ 596.456301][T16174] socket: no more sockets [ 597.178054][ T9776] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 597.205873][ T9776] EXT4-fs (sda1): This should not happen!! Data will be lost [ 597.205873][ T9776] [ 597.756656][T13827] Bluetooth: hci2: Malformed Event: 0x02 [ 598.000556][T16203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2022'. [ 598.012003][T16207] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2024'. [ 598.497316][T16219] FAULT_INJECTION: forcing a failure. [ 598.497316][T16219] name failslab, interval 1, probability 0, space 0, times 0 [ 598.538889][T16219] CPU: 0 UID: 0 PID: 16219 Comm: syz.4.2026 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 598.538938][T16219] Tainted: [U]=USER [ 598.538947][T16219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 598.538966][T16219] Call Trace: [ 598.538976][T16219] [ 598.538987][T16219] dump_stack_lvl+0x16c/0x1f0 [ 598.539022][T16219] should_fail_ex+0x512/0x640 [ 598.539051][T16219] ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0 [ 598.539086][T16219] should_failslab+0xc2/0x120 [ 598.539121][T16219] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 598.539156][T16219] ? trace_kmem_cache_alloc+0x28/0xc0 [ 598.539192][T16219] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 598.539222][T16219] ? mas_alloc_nodes+0x18b/0x8b0 [ 598.539271][T16219] ? mas_alloc_nodes+0x2f1/0x8b0 [ 598.539313][T16219] mas_alloc_nodes+0x2f1/0x8b0 [ 598.539365][T16219] mas_node_count_gfp+0x105/0x130 [ 598.539413][T16219] mas_preallocate+0x7e0/0xde0 [ 598.539454][T16219] ? __pfx_mas_preallocate+0x10/0x10 [ 598.539499][T16219] ? rcu_read_unlock+0x17/0x60 [ 598.539543][T16219] vma_link+0x135/0x6a0 [ 598.539576][T16219] ? __pfx_vma_link+0x10/0x10 [ 598.539604][T16219] ? rcu_is_watching+0x12/0xc0 [ 598.539640][T16219] ? anon_vma_clone+0x405/0x5c0 [ 598.539693][T16219] ? anon_vma_name+0x75/0x100 [ 598.539736][T16219] copy_vma+0x6c2/0xaa0 [ 598.539773][T16219] ? __pfx_copy_vma+0x10/0x10 [ 598.539801][T16219] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.539837][T16219] ? register_lock_class+0x41/0x4c0 [ 598.539876][T16219] ? __schedule+0x1181/0x5dd0 [ 598.539934][T16219] ? __lock_acquire+0x622/0x1c90 [ 598.539982][T16219] copy_vma_and_data+0x1cf/0x750 [ 598.540015][T16219] ? __pfx_copy_vma_and_data+0x10/0x10 [ 598.540053][T16219] ? __vma_enter_locked+0x163/0x3f0 [ 598.540101][T16219] ? find_held_lock+0x2b/0x80 [ 598.540132][T16219] ? move_vma+0x536/0x1740 [ 598.540167][T16219] move_vma+0x548/0x1740 [ 598.540202][T16219] ? __pfx_move_vma+0x10/0x10 [ 598.540228][T16219] ? mm_get_unmapped_area+0x95/0xe0 [ 598.540268][T16219] ? shmem_get_unmapped_area+0x170/0xa00 [ 598.540313][T16219] ? cap_mmap_addr+0x4b/0x120 [ 598.540346][T16219] ? bpf_lsm_mmap_addr+0x9/0x10 [ 598.540381][T16219] ? security_mmap_addr+0x6c/0x1e0 [ 598.540432][T16219] ? __get_unmapped_area+0x267/0x440 [ 598.540475][T16219] ? vrm_set_new_addr+0x208/0x290 [ 598.540506][T16219] __do_sys_mremap+0xe07/0x1590 [ 598.540540][T16219] ? __pfx___do_sys_mremap+0x10/0x10 [ 598.540590][T16219] ? __x64_sys_futex+0x1e0/0x4c0 [ 598.540653][T16219] do_syscall_64+0xcd/0x490 [ 598.540692][T16219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.540722][T16219] RIP: 0033:0x7f314298e9a9 [ 598.540746][T16219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.540774][T16219] RSP: 002b:00007f31437c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 598.540802][T16219] RAX: ffffffffffffffda RBX: 00007f3142bb6240 RCX: 00007f314298e9a9 [ 598.540821][T16219] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 598.540837][T16219] RBP: 00007f3142a10d69 R08: 00007effffffb000 R09: 0000000000000000 [ 598.540855][T16219] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 598.540872][T16219] R13: 0000000000000000 R14: 00007f3142bb6240 R15: 00007ffe6a6f9118 [ 598.540908][T16219] [ 602.139933][T16286] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 602.153586][T16286] EXT4-fs (sda1): This should not happen!! Data will be lost [ 602.153586][T16286] [ 602.550712][T16293] FAULT_INJECTION: forcing a failure. [ 602.550712][T16293] name failslab, interval 1, probability 0, space 0, times 0 [ 602.689235][T16293] CPU: 0 UID: 0 PID: 16293 Comm: syz.1.2040 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 602.689270][T16293] Tainted: [U]=USER [ 602.689276][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.689288][T16293] Call Trace: [ 602.689294][T16293] [ 602.689302][T16293] dump_stack_lvl+0x16c/0x1f0 [ 602.689331][T16293] should_fail_ex+0x512/0x640 [ 602.689352][T16293] ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0 [ 602.689377][T16293] should_failslab+0xc2/0x120 [ 602.689401][T16293] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 602.689426][T16293] ? trace_kmem_cache_alloc+0x28/0xc0 [ 602.689451][T16293] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 602.689472][T16293] ? mas_alloc_nodes+0x18b/0x8b0 [ 602.689506][T16293] ? mas_alloc_nodes+0x2f1/0x8b0 [ 602.689536][T16293] mas_alloc_nodes+0x2f1/0x8b0 [ 602.689573][T16293] mas_node_count_gfp+0x105/0x130 [ 602.689606][T16293] mas_preallocate+0x7e0/0xde0 [ 602.689635][T16293] ? __pfx_mas_preallocate+0x10/0x10 [ 602.689666][T16293] ? rcu_read_unlock+0x17/0x60 [ 602.689697][T16293] vma_link+0x135/0x6a0 [ 602.689719][T16293] ? __pfx_vma_link+0x10/0x10 [ 602.689739][T16293] ? rcu_is_watching+0x12/0xc0 [ 602.689765][T16293] ? anon_vma_clone+0x405/0x5c0 [ 602.689797][T16293] ? anon_vma_name+0x75/0x100 [ 602.689828][T16293] copy_vma+0x6c2/0xaa0 [ 602.689852][T16293] ? __pfx_copy_vma+0x10/0x10 [ 602.689871][T16293] ? lockdep_hardirqs_on+0x7c/0x110 [ 602.689896][T16293] ? register_lock_class+0x41/0x4c0 [ 602.689942][T16293] ? __schedule+0x1181/0x5dd0 [ 602.689985][T16293] ? __lock_acquire+0x622/0x1c90 [ 602.690030][T16293] copy_vma_and_data+0x1cf/0x750 [ 602.690053][T16293] ? __pfx_copy_vma_and_data+0x10/0x10 [ 602.690079][T16293] ? __vma_enter_locked+0x163/0x3f0 [ 602.690114][T16293] ? find_held_lock+0x2b/0x80 [ 602.690135][T16293] ? move_vma+0x536/0x1740 [ 602.690160][T16293] move_vma+0x548/0x1740 [ 602.690183][T16293] ? __pfx_move_vma+0x10/0x10 [ 602.690202][T16293] ? mm_get_unmapped_area+0x95/0xe0 [ 602.690230][T16293] ? shmem_get_unmapped_area+0x170/0xa00 [ 602.690261][T16293] ? cap_mmap_addr+0x4b/0x120 [ 602.690285][T16293] ? bpf_lsm_mmap_addr+0x9/0x10 [ 602.690314][T16293] ? security_mmap_addr+0x6c/0x1e0 [ 602.690351][T16293] ? __get_unmapped_area+0x267/0x440 [ 602.690381][T16293] ? vrm_set_new_addr+0x208/0x290 [ 602.690403][T16293] __do_sys_mremap+0xe07/0x1590 [ 602.690427][T16293] ? __pfx___do_sys_mremap+0x10/0x10 [ 602.690461][T16293] ? __x64_sys_futex+0x1e0/0x4c0 [ 602.690502][T16293] do_syscall_64+0xcd/0x490 [ 602.690525][T16293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.690546][T16293] RIP: 0033:0x7f32fed8e9a9 [ 602.690561][T16293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.690581][T16293] RSP: 002b:00007f32ffbd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 602.690600][T16293] RAX: ffffffffffffffda RBX: 00007f32fefb6240 RCX: 00007f32fed8e9a9 [ 602.690613][T16293] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 602.690624][T16293] RBP: 00007f32fee10d69 R08: 00007effffffb000 R09: 0000000000000000 [ 602.690636][T16293] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 602.690648][T16293] R13: 0000000000000000 R14: 00007f32fefb6240 R15: 00007fff1f07d348 [ 602.690674][T16293] [ 603.502215][T16286] kexec: Could not allocate control_code_buffer [ 603.768525][T16320] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 604.155592][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 604.902123][T16340] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 607.652777][T16384] sg_write: process 1682 (syz.4.2061) changed security contexts after opening file descriptor, this is not allowed. [ 608.060494][T16398] Invalid ELF header magic: != ELF [ 609.432900][T16433] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 609.445820][T16433] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.445820][T16433] [ 609.888384][T16431] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2070'. [ 610.787345][T16433] kexec: Could not allocate control_code_buffer [ 611.150099][T16437] Process accounting paused [ 611.238288][T16452] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 611.255864][T16452] EXT4-fs (sda1): This should not happen!! Data will be lost [ 611.255864][T16452] [ 611.516483][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 611.522932][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 612.669309][T16478] ptrace attach of "./syz-executor exec"[5848] was attempted by "òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ [ 612.723976][T16462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 612.883922][T16462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.890582][T16462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.905812][T16462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 613.398785][T16483] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 613.423775][T16483] EXT4-fs (sda1): This should not happen!! Data will be lost [ 613.423775][T16483] [ 613.504340][T13827] Bluetooth: hci0: command 0x0406 tx timeout [ 614.138843][T16504] CIFS: VFS: Invalid SecurityFlags: [ 614.194093][T16493] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.2.2082: Error -117 reading block bitmap for 4 [ 614.943576][T13827] Bluetooth: hci4: command 0x0406 tx timeout [ 614.949963][T13836] Bluetooth: hci2: command 0x0406 tx timeout [ 614.956164][T13836] Bluetooth: hci1: command 0x0406 tx timeout [ 615.688301][T16545] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 616.341132][ T30] audit: type=1800 audit(4294977019.139:26): pid=16562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2093" name="dbroot" dev="configfs" ino=59410 res=0 errno=0 [ 616.396334][T16562] db_root: not a directory: /dev/audio1 [ 616.426464][T16563] tc_dump_action: action bad kind [ 616.753634][T16570] vivid-009: ================= START STATUS ================= [ 616.761864][T16570] vivid-009: Enable Output Cropping: true grabbed [ 616.768772][T16570] vivid-009: Enable Output Composing: true grabbed [ 616.775819][T16570] vivid-009: Enable Output Scaler: true grabbed [ 616.782373][T16570] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 616.791591][T16570] vivid-009: Transmit Mode: HDMI grabbed [ 616.798645][T16570] vivid-009: Hotplug Present: 0x00000000 [ 616.804671][T16570] vivid-009: RxSense Present: 0x00000000 [ 616.814776][T16570] vivid-009: EDID Present: 0x00000000 [ 616.833255][T16570] vivid-009: ================== END STATUS ================== [ 616.919813][T16570] block nbd7: not configured, cannot reconfigure [ 618.662774][T16625] can: request_module (can-proto-0) failed. [ 619.004629][T16642] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2112'. [ 619.383066][T16653] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 619.580250][T16659] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.2117: bg 5: bad block bitmap checksum [ 619.645400][T16659] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 619.667652][T16659] EXT4-fs (sda1): This should not happen!! Data will be lost [ 619.667652][T16659] [ 622.025670][T16710] random: crng reseeded on system resumption [ 622.094510][T16711] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 622.110680][T16711] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.110680][T16711] [ 622.410349][ T9768] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1369 with max blocks 15 with error 117 [ 622.433206][ T9768] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.433206][ T9768] [ 622.452777][ T9768] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 939 with max blocks 6 with error 117 [ 622.469465][ T9768] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.469465][ T9768] [ 624.353922][T16743] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 624.354026][T16743] EXT4-fs (sda1): This should not happen!! Data will be lost [ 624.354026][T16743] [ 626.152147][T13836] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 626.223534][T16760] block2mtd: Using custom MTD label '' for dev [ 626.231105][T16760] block2mtd: error: cannot open device [ 626.289711][T13836] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 626.594981][T16743] kexec: Could not allocate control_code_buffer [ 627.224136][T16791] FAULT_INJECTION: forcing a failure. [ 627.224136][T16791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.286765][T16791] CPU: 1 UID: 0 PID: 16791 Comm: syz.4.2149 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 627.286805][T16791] Tainted: [U]=USER [ 627.286812][T16791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.286826][T16791] Call Trace: [ 627.286833][T16791] [ 627.286841][T16791] dump_stack_lvl+0x16c/0x1f0 [ 627.286868][T16791] should_fail_ex+0x512/0x640 [ 627.286897][T16791] _copy_from_user+0x2e/0xd0 [ 627.286924][T16791] write_flush.constprop.0+0x10f/0x3d0 [ 627.286956][T16791] ? __pfx_write_flush.constprop.0+0x10/0x10 [ 627.286989][T16791] ? iovec_from_user+0xbb/0x140 [ 627.287026][T16791] ? __pfx_write_flush_procfs+0x10/0x10 [ 627.287057][T16791] proc_reg_write+0x23d/0x330 [ 627.287084][T16791] ? __pfx_proc_reg_write+0x10/0x10 [ 627.287106][T16791] vfs_writev+0x5dc/0xde0 [ 627.287142][T16791] ? __pfx___mutex_trylock_common+0x10/0x10 [ 627.287185][T16791] ? __pfx_vfs_writev+0x10/0x10 [ 627.287236][T16791] ? __mutex_lock+0x1ca/0xb90 [ 627.287276][T16791] ? __pfx___mutex_lock+0x10/0x10 [ 627.287307][T16791] ? __fget_files+0x20e/0x3c0 [ 627.287350][T16791] ? __fget_files+0x1b0/0x3c0 [ 627.287386][T16791] ? do_writev+0x132/0x340 [ 627.287414][T16791] do_writev+0x132/0x340 [ 627.287444][T16791] ? __pfx_do_writev+0x10/0x10 [ 627.287482][T16791] do_syscall_64+0xcd/0x490 [ 627.287504][T16791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.287524][T16791] RIP: 0033:0x7f314298e9a9 [ 627.287539][T16791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.287558][T16791] RSP: 002b:00007f3143828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 627.287577][T16791] RAX: ffffffffffffffda RBX: 00007f3142bb5fa0 RCX: 00007f314298e9a9 [ 627.287596][T16791] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000003 [ 627.287608][T16791] RBP: 00007f3143828090 R08: 0000000000000000 R09: 0000000000000000 [ 627.287620][T16791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.287631][T16791] R13: 0000000000000000 R14: 00007f3142bb5fa0 R15: 00007ffe6a6f9118 [ 627.287656][T16791] [ 627.505988][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.614010][ T9777] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 627.644261][T16787] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 627.713395][ T9777] EXT4-fs (sda1): This should not happen!! Data will be lost [ 627.713395][ T9777] [ 627.812360][T16780] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.1.2148: Error -117 reading block bitmap for 5 [ 628.557199][T16801] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 629.351209][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.357983][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.627699][ T30] audit: type=1800 audit(4294977033.436:27): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2164" name="file0" dev="tmpfs" ino=2341 res=0 errno=0 [ 630.811875][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 632.285036][T16885] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 633.923861][T16904] Format for deleting device is "id" (uint). [ 634.267909][T16919] FAULT_INJECTION: forcing a failure. [ 634.267909][T16919] name failslab, interval 1, probability 0, space 0, times 0 [ 634.283533][T16919] CPU: 0 UID: 0 PID: 16919 Comm: syz.4.2177 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 634.283577][T16919] Tainted: [U]=USER [ 634.283586][T16919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.283603][T16919] Call Trace: [ 634.283612][T16919] [ 634.283622][T16919] dump_stack_lvl+0x16c/0x1f0 [ 634.283655][T16919] should_fail_ex+0x512/0x640 [ 634.283683][T16919] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 634.283730][T16919] should_failslab+0xc2/0x120 [ 634.283763][T16919] __kmalloc_cache_noprof+0x6a/0x3e0 [ 634.283801][T16919] ? alloc_pipe_info+0x10e/0x590 [ 634.283826][T16919] alloc_pipe_info+0x10e/0x590 [ 634.283851][T16919] splice_direct_to_actor+0x77d/0xa30 [ 634.283884][T16919] ? __pfx_direct_splice_actor+0x10/0x10 [ 634.283917][T16919] ? __pfx_aa_file_perm+0x10/0x10 [ 634.283936][T16919] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 634.283966][T16919] ? get_pid_task+0xfc/0x250 [ 634.283999][T16919] do_splice_direct+0x174/0x240 [ 634.284029][T16919] ? __pfx_do_splice_direct+0x10/0x10 [ 634.284060][T16919] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 634.284096][T16919] ? bpf_lsm_file_permission+0x9/0x10 [ 634.284123][T16919] ? security_file_permission+0x71/0x210 [ 634.284155][T16919] ? rw_verify_area+0xcf/0x680 [ 634.284187][T16919] do_sendfile+0xb06/0xe50 [ 634.284222][T16919] ? __pfx_do_sendfile+0x10/0x10 [ 634.284254][T16919] ? __fget_files+0x20e/0x3c0 [ 634.284292][T16919] __x64_sys_sendfile64+0x1d8/0x220 [ 634.284315][T16919] ? ksys_write+0x1ac/0x250 [ 634.284332][T16919] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 634.284363][T16919] do_syscall_64+0xcd/0x490 [ 634.284386][T16919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.284406][T16919] RIP: 0033:0x7f314298e9a9 [ 634.284421][T16919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.284441][T16919] RSP: 002b:00007f3143828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 634.284459][T16919] RAX: ffffffffffffffda RBX: 00007f3142bb5fa0 RCX: 00007f314298e9a9 [ 634.284471][T16919] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 634.284483][T16919] RBP: 00007f3143828090 R08: 0000000000000000 R09: 0000000000000000 [ 634.284495][T16919] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 634.284506][T16919] R13: 0000000000000000 R14: 00007f3142bb5fa0 R15: 00007ffe6a6f9118 [ 634.284531][T16919] [ 634.783131][T16899] kexec: Could not allocate control_code_buffer [ 634.986232][T16923] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 635.792539][T16948] sd 0:0:1:0: PR command failed: 1026 [ 635.842726][T16948] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 635.849730][T16948] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 637.323745][T16958] FAULT_INJECTION: forcing a failure. [ 637.323745][T16958] name fail_futex, interval 1, probability 0, space 0, times 0 [ 637.386274][T16958] CPU: 0 UID: 0 PID: 16958 Comm: syz.4.2187 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 637.386328][T16958] Tainted: [U]=USER [ 637.386339][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.386358][T16958] Call Trace: [ 637.386369][T16958] [ 637.386381][T16958] dump_stack_lvl+0x16c/0x1f0 [ 637.386419][T16958] should_fail_ex+0x512/0x640 [ 637.386459][T16958] get_futex_key+0x1d0/0x1540 [ 637.386505][T16958] ? __pfx_get_futex_key+0x10/0x10 [ 637.386544][T16958] ? __mutex_trylock_common+0xe9/0x250 [ 637.386604][T16958] futex_wake+0xe7/0x4e0 [ 637.386664][T16958] ? __pfx_futex_wake+0x10/0x10 [ 637.386709][T16958] ? __lock_acquire+0xb8a/0x1c90 [ 637.386776][T16958] do_futex+0x1e3/0x350 [ 637.386818][T16958] ? __pfx_do_futex+0x10/0x10 [ 637.386855][T16958] ? __might_fault+0xe3/0x190 [ 637.386899][T16958] mm_release+0x24e/0x300 [ 637.386939][T16958] do_exit+0x68b/0x2bd0 [ 637.386994][T16958] ? __pfx_do_exit+0x10/0x10 [ 637.387040][T16958] ? do_raw_spin_lock+0x12c/0x2b0 [ 637.387092][T16958] ? find_held_lock+0x2b/0x80 [ 637.387134][T16958] do_group_exit+0xd3/0x2a0 [ 637.387184][T16958] get_signal+0x2673/0x26d0 [ 637.387239][T16958] ? __do_sys_mremap+0x5d4/0x1590 [ 637.387280][T16958] ? __pfx_get_signal+0x10/0x10 [ 637.387323][T16958] ? do_futex+0x122/0x350 [ 637.387358][T16958] ? __pfx_do_futex+0x10/0x10 [ 637.387397][T16958] arch_do_signal_or_restart+0x8f/0x790 [ 637.387433][T16958] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 637.387488][T16958] exit_to_user_mode_loop+0x84/0x110 [ 637.387536][T16958] do_syscall_64+0x3f6/0x490 [ 637.387568][T16958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.387597][T16958] RIP: 0033:0x7f314298e9a9 [ 637.387619][T16958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.387652][T16958] RSP: 002b:00007f31438280e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 637.387678][T16958] RAX: fffffffffffffe00 RBX: 00007f3142bb5fa8 RCX: 00007f314298e9a9 [ 637.387697][T16958] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3142bb5fa8 [ 637.387714][T16958] RBP: 00007f3142bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 637.387731][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3142bb5fac [ 637.387749][T16958] R13: 0000000000000000 R14: 00007ffe6a6f9030 R15: 00007ffe6a6f9118 [ 637.387785][T16958] [ 638.508561][T16986] vivid-002: ================= START STATUS ================= [ 638.533892][T16986] vivid-002: Test Pattern: 75% Colorbar [ 638.550911][T16986] vivid-002: Fill Percentage of Frame: 100 [ 638.572079][T16986] vivid-002: Horizontal Movement: No Movement [ 638.604712][T16986] vivid-002: Vertical Movement: No Movement [ 638.623425][T16986] vivid-002: OSD Text Mode: All [ 638.672543][T16986] vivid-002: Show Border: false [ 638.679475][T16990] block nbd7: not configured, cannot reconfigure [ 638.686179][T16986] vivid-002: Show Square: false [ 638.691344][T16987] block nbd7: not configured, cannot reconfigure [ 638.703693][T16986] vivid-002: Sensor Flipped Horizontally: false [ 638.713587][T16986] vivid-002: Sensor Flipped Vertically: false [ 638.719801][T16986] vivid-002: Insert SAV Code in Image: false [ 638.727188][T16986] vivid-002: Insert EAV Code in Image: false [ 638.734477][T16986] vivid-002: Insert Video Guard Band: false [ 638.740570][T16986] vivid-002: Reduced Framerate: false [ 638.753238][T16986] vivid-002: HDMI 002-0 Is Connected To: Test Pattern Generator [ 638.792860][T16986] vivid-002: S-Video 002-0 Is Connected To: Test Pattern Generator [ 638.813574][T16986] vivid-002: Enable Capture Cropping: true [ 638.819431][T16986] vivid-002: Enable Capture Composing: true [ 638.825808][T16986] vivid-002: Enable Capture Scaler: true [ 638.831497][T16986] vivid-002: Timestamp Source: End of Frame [ 638.837934][T16986] vivid-002: Colorspace: sRGB [ 638.842718][T16986] vivid-002: Transfer Function: Default [ 638.851602][T16986] vivid-002: Y'CbCr Encoding: Default [ 638.857350][T16986] vivid-002: HSV Encoding: Hue 0-179 [ 638.862782][T16986] vivid-002: Quantization: Default [ 638.872931][T16986] vivid-002: Apply Alpha To Red Only: false [ 638.882807][T16986] vivid-002: Standard Aspect Ratio: 4x3 [ 638.888726][T16986] vivid-002: DV Timings Signal Mode: Current DV Timings inactive [ 638.898027][T16986] vivid-002: DV Timings: 640x480p59 inactive [ 638.904388][T16986] vivid-002: DV Timings Aspect Ratio: Source Width x Height [ 638.911733][T16986] vivid-002: Maximum EDID Blocks: 2 [ 638.918715][T16986] vivid-002: Limited RGB Range (16-235): false [ 638.925209][T16986] vivid-002: Rx RGB Quantization Range: Automatic [ 638.931671][T16986] vivid-002: Power Present: 0x00000001 [ 638.937477][T16986] tpg source WxH: 320x240 (Y'CbCr) [ 638.986554][T16986] tpg field: 1 [ 638.996703][T16986] tpg crop: (0,0)/320x240 [ 639.031652][T17000] FAULT_INJECTION: forcing a failure. [ 639.031652][T17000] name failslab, interval 1, probability 0, space 0, times 0 [ 639.049938][T16986] tpg compose: (0,0)/320x240 [ 639.061230][T16986] tpg colorspace: 8 [ 639.110657][T16986] tpg transfer function: 0/2 [ 639.119890][T16986] tpg Y'CbCr encoding: 0/1 [ 639.128664][T17000] CPU: 0 UID: 0 PID: 17000 Comm: syz.2.2195 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 639.128708][T17000] Tainted: [U]=USER [ 639.128718][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.128742][T17000] Call Trace: [ 639.128751][T17000] [ 639.128763][T17000] dump_stack_lvl+0x16c/0x1f0 [ 639.128797][T17000] should_fail_ex+0x512/0x640 [ 639.128826][T17000] ? __kmalloc_noprof+0xbf/0x510 [ 639.128857][T17000] ? copy_splice_read+0x1a8/0xba0 [ 639.128897][T17000] should_failslab+0xc2/0x120 [ 639.128930][T17000] __kmalloc_noprof+0xd2/0x510 [ 639.128968][T17000] copy_splice_read+0x1a8/0xba0 [ 639.129018][T17000] ? __pfx_copy_splice_read+0x10/0x10 [ 639.129064][T17000] ? look_up_lock_class+0x59/0x150 [ 639.129097][T17000] ? lockdep_init_map_type+0x5c/0x280 [ 639.129140][T17000] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 639.129170][T17000] ? __pfx_copy_splice_read+0x10/0x10 [ 639.129211][T17000] do_splice_read+0x285/0x370 [ 639.129257][T17000] splice_direct_to_actor+0x2a1/0xa30 [ 639.129302][T17000] ? __pfx_direct_splice_actor+0x10/0x10 [ 639.129352][T17000] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 639.129394][T17000] ? get_pid_task+0xfc/0x250 [ 639.129443][T17000] do_splice_direct+0x174/0x240 [ 639.129486][T17000] ? __pfx_do_splice_direct+0x10/0x10 [ 639.129530][T17000] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 639.129574][T17000] ? bpf_lsm_file_permission+0x9/0x10 [ 639.129610][T17000] ? security_file_permission+0x71/0x210 [ 639.129659][T17000] ? rw_verify_area+0xcf/0x680 [ 639.129711][T17000] do_sendfile+0xb06/0xe50 [ 639.129771][T17000] ? __pfx_do_sendfile+0x10/0x10 [ 639.129819][T17000] ? __fget_files+0x20e/0x3c0 [ 639.129876][T17000] __x64_sys_sendfile64+0x1d8/0x220 [ 639.129910][T17000] ? ksys_write+0x1ac/0x250 [ 639.129938][T17000] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 639.129985][T17000] do_syscall_64+0xcd/0x490 [ 639.130019][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.130050][T17000] RIP: 0033:0x7fc8ae98e9a9 [ 639.130073][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.130101][T17000] RSP: 002b:00007fc8af7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 639.130128][T17000] RAX: ffffffffffffffda RBX: 00007fc8aebb5fa0 RCX: 00007fc8ae98e9a9 [ 639.130147][T17000] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 639.130165][T17000] RBP: 00007fc8af7aa090 R08: 0000000000000000 R09: 0000000000000000 [ 639.130183][T17000] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 639.130200][T17000] R13: 0000000000000000 R14: 00007fc8aebb5fa0 R15: 00007ffee69e5bc8 [ 639.130238][T17000] [ 639.223440][T16986] tpg quantization: 0/2 [ 639.463564][T16986] tpg RGB range: 0/2 [ 639.467505][T16986] vivid-002: ================== END STATUS ================== [ 640.723463][T17027] FAULT_INJECTION: forcing a failure. [ 640.723463][T17027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.736909][T17027] CPU: 1 UID: 0 PID: 17027 Comm: syz.4.2199 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 640.736958][T17027] Tainted: [U]=USER [ 640.736968][T17027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.736986][T17027] Call Trace: [ 640.736996][T17027] [ 640.737008][T17027] dump_stack_lvl+0x16c/0x1f0 [ 640.737045][T17027] should_fail_ex+0x512/0x640 [ 640.737084][T17027] _copy_to_user+0x32/0xd0 [ 640.737123][T17027] simple_read_from_buffer+0xcb/0x170 [ 640.737173][T17027] proc_fail_nth_read+0x197/0x270 [ 640.737220][T17027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.737279][T17027] ? rw_verify_area+0xcf/0x680 [ 640.737324][T17027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.737377][T17027] vfs_read+0x1e4/0xc60 [ 640.737417][T17027] ? __pfx___mutex_lock+0x10/0x10 [ 640.737445][T17027] ? __pfx_vfs_read+0x10/0x10 [ 640.737478][T17027] ? __fget_files+0x20e/0x3c0 [ 640.737530][T17027] ksys_read+0x12a/0x250 [ 640.737554][T17027] ? __pfx_ksys_read+0x10/0x10 [ 640.737590][T17027] do_syscall_64+0xcd/0x490 [ 640.737621][T17027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.737657][T17027] RIP: 0033:0x7f314298d3bc [ 640.737679][T17027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 640.737705][T17027] RSP: 002b:00007f3143828030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 640.737730][T17027] RAX: ffffffffffffffda RBX: 00007f3142bb5fa0 RCX: 00007f314298d3bc [ 640.737747][T17027] RDX: 000000000000000f RSI: 00007f31438280a0 RDI: 0000000000000007 [ 640.737763][T17027] RBP: 00007f3143828090 R08: 0000000000000000 R09: 0000000000000000 [ 640.737779][T17027] R10: 0000000200000004 R11: 0000000000000246 R12: 0000000000000001 [ 640.737794][T17027] R13: 0000000000000000 R14: 00007f3142bb5fa0 R15: 00007ffe6a6f9118 [ 640.737828][T17027] [ 641.279607][T17026] Process accounting resumed [ 641.722414][T17013] kexec: Could not allocate control_code_buffer [ 641.838000][T17045] FAULT_INJECTION: forcing a failure. [ 641.838000][T17045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 641.861591][T17045] CPU: 0 UID: 0 PID: 17045 Comm: syz.4.2204 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 641.861635][T17045] Tainted: [U]=USER [ 641.861644][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.861661][T17045] Call Trace: [ 641.861671][T17045] [ 641.861681][T17045] dump_stack_lvl+0x16c/0x1f0 [ 641.861713][T17045] should_fail_ex+0x512/0x640 [ 641.861746][T17045] should_fail_alloc_page+0xe7/0x130 [ 641.861781][T17045] prepare_alloc_pages+0x3c2/0x610 [ 641.861827][T17045] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 641.861859][T17045] ? copy_splice_read+0x1a8/0xba0 [ 641.861899][T17045] ? stack_trace_save+0x8e/0xc0 [ 641.861931][T17045] ? __pfx_stack_trace_save+0x10/0x10 [ 641.861963][T17045] ? stack_depot_save_flags+0x28/0xa40 [ 641.861995][T17045] ? bpf_ksym_find+0x124/0x1c0 [ 641.862028][T17045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 641.862057][T17045] ? kasan_save_stack+0x33/0x60 [ 641.862084][T17045] ? __kasan_kmalloc+0xaa/0xb0 [ 641.862109][T17045] ? copy_splice_read+0x1a8/0xba0 [ 641.862148][T17045] ? do_splice_read+0x285/0x370 [ 641.862198][T17045] ? splice_direct_to_actor+0x2a1/0xa30 [ 641.862238][T17045] ? do_splice_direct+0x174/0x240 [ 641.862278][T17045] ? do_sendfile+0xb06/0xe50 [ 641.862320][T17045] ? __x64_sys_sendfile64+0x1d8/0x220 [ 641.862350][T17045] ? do_syscall_64+0xcd/0x490 [ 641.862411][T17045] alloc_pages_bulk_noprof+0x71c/0x1410 [ 641.862452][T17045] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 641.862490][T17045] ? trace_kmalloc+0x2b/0xd0 [ 641.862524][T17045] ? __kmalloc_noprof+0x242/0x510 [ 641.862560][T17045] copy_splice_read+0x1e1/0xba0 [ 641.862610][T17045] ? __pfx_copy_splice_read+0x10/0x10 [ 641.862655][T17045] ? look_up_lock_class+0x59/0x150 [ 641.862687][T17045] ? lockdep_init_map_type+0x5c/0x280 [ 641.862730][T17045] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 641.862759][T17045] ? __pfx_copy_splice_read+0x10/0x10 [ 641.862791][T17045] do_splice_read+0x285/0x370 [ 641.862822][T17045] splice_direct_to_actor+0x2a1/0xa30 [ 641.862854][T17045] ? __pfx_direct_splice_actor+0x10/0x10 [ 641.862889][T17045] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 641.862918][T17045] ? get_pid_task+0xfc/0x250 [ 641.862951][T17045] do_splice_direct+0x174/0x240 [ 641.862982][T17045] ? __pfx_do_splice_direct+0x10/0x10 [ 641.863012][T17045] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 641.863043][T17045] ? bpf_lsm_file_permission+0x9/0x10 [ 641.863069][T17045] ? security_file_permission+0x71/0x210 [ 641.863101][T17045] ? rw_verify_area+0xcf/0x680 [ 641.863132][T17045] do_sendfile+0xb06/0xe50 [ 641.863189][T17045] ? __pfx_do_sendfile+0x10/0x10 [ 641.863220][T17045] ? __fget_files+0x20e/0x3c0 [ 641.863258][T17045] __x64_sys_sendfile64+0x1d8/0x220 [ 641.863281][T17045] ? ksys_write+0x1ac/0x250 [ 641.863298][T17045] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 641.863329][T17045] do_syscall_64+0xcd/0x490 [ 641.863351][T17045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.863371][T17045] RIP: 0033:0x7f314298e9a9 [ 641.863387][T17045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.863412][T17045] RSP: 002b:00007f3143828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 641.863430][T17045] RAX: ffffffffffffffda RBX: 00007f3142bb5fa0 RCX: 00007f314298e9a9 [ 641.863444][T17045] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 641.863455][T17045] RBP: 00007f3143828090 R08: 0000000000000000 R09: 0000000000000000 [ 641.863467][T17045] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 641.863479][T17045] R13: 0000000000000000 R14: 00007f3142bb5fa0 R15: 00007ffe6a6f9118 [ 641.863502][T17045] [ 644.632553][T17086] FAULT_INJECTION: forcing a failure. [ 644.632553][T17086] name failslab, interval 1, probability 0, space 0, times 0 [ 644.683304][T17086] CPU: 1 UID: 0 PID: 17086 Comm: syz.2.2214 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 644.683337][T17086] Tainted: [U]=USER [ 644.683343][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.683355][T17086] Call Trace: [ 644.683366][T17086] [ 644.683373][T17086] dump_stack_lvl+0x16c/0x1f0 [ 644.683398][T17086] should_fail_ex+0x512/0x640 [ 644.683418][T17086] ? __kvmalloc_node_noprof+0x124/0x620 [ 644.683455][T17086] should_failslab+0xc2/0x120 [ 644.683478][T17086] __kvmalloc_node_noprof+0x137/0x620 [ 644.683511][T17086] ? seq_read_iter+0x826/0x12c0 [ 644.683545][T17086] ? seq_read_iter+0x826/0x12c0 [ 644.683573][T17086] seq_read_iter+0x826/0x12c0 [ 644.683601][T17086] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 644.683631][T17086] kernfs_fop_read_iter+0x40f/0x5a0 [ 644.683661][T17086] copy_splice_read+0x615/0xba0 [ 644.683696][T17086] ? __pfx_copy_splice_read+0x10/0x10 [ 644.683728][T17086] ? look_up_lock_class+0x59/0x150 [ 644.683751][T17086] ? lockdep_init_map_type+0x5c/0x280 [ 644.683781][T17086] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 644.683802][T17086] ? __pfx_copy_splice_read+0x10/0x10 [ 644.683831][T17086] do_splice_read+0x285/0x370 [ 644.683862][T17086] splice_direct_to_actor+0x2a1/0xa30 [ 644.683894][T17086] ? __pfx_direct_splice_actor+0x10/0x10 [ 644.683929][T17086] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 644.683958][T17086] ? get_pid_task+0xfc/0x250 [ 644.683992][T17086] do_splice_direct+0x174/0x240 [ 644.684022][T17086] ? __pfx_do_splice_direct+0x10/0x10 [ 644.684053][T17086] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 644.684083][T17086] ? bpf_lsm_file_permission+0x9/0x10 [ 644.684109][T17086] ? security_file_permission+0x71/0x210 [ 644.684142][T17086] ? rw_verify_area+0xcf/0x680 [ 644.684173][T17086] do_sendfile+0xb06/0xe50 [ 644.684209][T17086] ? __pfx_do_sendfile+0x10/0x10 [ 644.684240][T17086] ? __fget_files+0x20e/0x3c0 [ 644.684278][T17086] __x64_sys_sendfile64+0x1d8/0x220 [ 644.684301][T17086] ? ksys_write+0x1ac/0x250 [ 644.684319][T17086] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 644.684355][T17086] do_syscall_64+0xcd/0x490 [ 644.684381][T17086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.684401][T17086] RIP: 0033:0x7fc8ae98e9a9 [ 644.684416][T17086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.684436][T17086] RSP: 002b:00007fc8af7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 644.684471][T17086] RAX: ffffffffffffffda RBX: 00007fc8aebb5fa0 RCX: 00007fc8ae98e9a9 [ 644.684485][T17086] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 644.684497][T17086] RBP: 00007fc8af7aa090 R08: 0000000000000000 R09: 0000000000000000 [ 644.684509][T17086] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 644.684521][T17086] R13: 0000000000000000 R14: 00007fc8aebb5fa0 R15: 00007ffee69e5bc8 [ 644.684547][T17086] [ 645.328984][T17089] random: crng reseeded on system resumption [ 646.002177][T17108] FAULT_INJECTION: forcing a failure. [ 646.002177][T17108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 646.068917][T17108] CPU: 1 UID: 0 PID: 17108 Comm: syz.4.2218 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 646.068966][T17108] Tainted: [U]=USER [ 646.068976][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 646.068993][T17108] Call Trace: [ 646.069003][T17108] [ 646.069013][T17108] dump_stack_lvl+0x16c/0x1f0 [ 646.069049][T17108] should_fail_ex+0x512/0x640 [ 646.069086][T17108] should_fail_alloc_page+0xe7/0x130 [ 646.069124][T17108] prepare_alloc_pages+0x3c2/0x610 [ 646.069171][T17108] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 646.069209][T17108] ? mas_next_slot+0x12d3/0x21b0 [ 646.069242][T17108] ? __up_read+0x1f8/0x750 [ 646.069298][T17108] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.069333][T17108] ? mas_find+0x2f6/0x530 [ 646.069365][T17108] ? validate_mm+0x40a/0x570 [ 646.069397][T17108] ? __pfx_validate_mm+0x10/0x10 [ 646.069428][T17108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 646.069475][T17108] ? policy_nodemask+0xea/0x4e0 [ 646.069512][T17108] alloc_pages_mpol+0x1fb/0x550 [ 646.069547][T17108] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 646.069591][T17108] alloc_pages_noprof+0x131/0x390 [ 646.069627][T17108] __pud_alloc+0x3b/0x750 [ 646.069668][T17108] alloc_new_pud+0x267/0x320 [ 646.069699][T17108] move_page_tables+0x6b6/0x4070 [ 646.069735][T17108] ? __pfx_copy_vma+0x10/0x10 [ 646.069763][T17108] ? lockdep_hardirqs_on+0x7c/0x110 [ 646.069800][T17108] ? __pfx_move_page_tables+0x10/0x10 [ 646.069828][T17108] ? register_lock_class+0x41/0x4c0 [ 646.069868][T17108] ? __schedule+0x1181/0x5dd0 [ 646.069925][T17108] ? __lock_acquire+0x622/0x1c90 [ 646.069971][T17108] copy_vma_and_data+0x216/0x750 [ 646.070004][T17108] ? __pfx_copy_vma_and_data+0x10/0x10 [ 646.070042][T17108] ? __vma_enter_locked+0x163/0x3f0 [ 646.070091][T17108] ? find_held_lock+0x2b/0x80 [ 646.070121][T17108] ? move_vma+0x536/0x1740 [ 646.070157][T17108] move_vma+0x548/0x1740 [ 646.070191][T17108] ? __pfx_move_vma+0x10/0x10 [ 646.070216][T17108] ? mm_get_unmapped_area+0x95/0xe0 [ 646.070257][T17108] ? shmem_get_unmapped_area+0x170/0xa00 [ 646.070309][T17108] ? cap_mmap_addr+0x4b/0x120 [ 646.070342][T17108] ? bpf_lsm_mmap_addr+0x9/0x10 [ 646.070378][T17108] ? security_mmap_addr+0x6c/0x1e0 [ 646.070423][T17108] ? __get_unmapped_area+0x267/0x440 [ 646.070466][T17108] ? vrm_set_new_addr+0x208/0x290 [ 646.070497][T17108] __do_sys_mremap+0xe07/0x1590 [ 646.070531][T17108] ? __pfx___do_sys_mremap+0x10/0x10 [ 646.070580][T17108] ? __x64_sys_futex+0x1e0/0x4c0 [ 646.070651][T17108] do_syscall_64+0xcd/0x490 [ 646.070684][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.070715][T17108] RIP: 0033:0x7f314298e9a9 [ 646.070737][T17108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.070766][T17108] RSP: 002b:00007f31437e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 646.070795][T17108] RAX: ffffffffffffffda RBX: 00007f3142bb6160 RCX: 00007f314298e9a9 [ 646.070814][T17108] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 646.070830][T17108] RBP: 00007f3142a10d69 R08: 00007effffffb000 R09: 0000000000000000 [ 646.070849][T17108] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 646.070866][T17108] R13: 0000000000000000 R14: 00007f3142bb6160 R15: 00007ffe6a6f9118 [ 646.070903][T17108] [ 647.215479][T17135] FAULT_INJECTION: forcing a failure. [ 647.215479][T17135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.255471][T17135] CPU: 1 UID: 0 PID: 17135 Comm: syz.2.2225 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 647.255519][T17135] Tainted: [U]=USER [ 647.255529][T17135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.255546][T17135] Call Trace: [ 647.255556][T17135] [ 647.255566][T17135] dump_stack_lvl+0x16c/0x1f0 [ 647.255602][T17135] should_fail_ex+0x512/0x640 [ 647.255639][T17135] _copy_to_user+0x32/0xd0 [ 647.255676][T17135] simple_read_from_buffer+0xcb/0x170 [ 647.255724][T17135] proc_fail_nth_read+0x197/0x270 [ 647.255768][T17135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.255813][T17135] ? rw_verify_area+0xcf/0x680 [ 647.255857][T17135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.255899][T17135] vfs_read+0x1e4/0xc60 [ 647.255931][T17135] ? __pfx___mutex_lock+0x10/0x10 [ 647.255971][T17135] ? __pfx_vfs_read+0x10/0x10 [ 647.256010][T17135] ? __fget_files+0x20e/0x3c0 [ 647.256073][T17135] ksys_read+0x12a/0x250 [ 647.256119][T17135] ? __pfx_ksys_read+0x10/0x10 [ 647.256162][T17135] do_syscall_64+0xcd/0x490 [ 647.256198][T17135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.256232][T17135] RIP: 0033:0x7fc8ae98d3bc [ 647.256258][T17135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 647.256290][T17135] RSP: 002b:00007fc8af7aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.256320][T17135] RAX: ffffffffffffffda RBX: 00007fc8aebb5fa0 RCX: 00007fc8ae98d3bc [ 647.256341][T17135] RDX: 000000000000000f RSI: 00007fc8af7aa0a0 RDI: 0000000000000005 [ 647.256360][T17135] RBP: 00007fc8af7aa090 R08: 0000000000000000 R09: 0000000000000000 [ 647.256379][T17135] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 647.256399][T17135] R13: 0000000000000000 R14: 00007fc8aebb5fa0 R15: 00007ffee69e5bc8 [ 647.256440][T17135] [ 648.567193][T17145] kexec: Could not allocate control_code_buffer [ 648.748096][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 649.771348][T17187] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 649.871935][T17185] FAULT_INJECTION: forcing a failure. [ 649.871935][T17185] name fail_futex, interval 1, probability 0, space 0, times 0 [ 649.928069][T17185] CPU: 1 UID: 0 PID: 17185 Comm: syz.2.2239 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 649.928114][T17185] Tainted: [U]=USER [ 649.928123][T17185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.928140][T17185] Call Trace: [ 649.928148][T17185] [ 649.928158][T17185] dump_stack_lvl+0x16c/0x1f0 [ 649.928192][T17185] should_fail_ex+0x512/0x640 [ 649.928226][T17185] get_futex_key+0x1d0/0x1540 [ 649.928265][T17185] ? __pfx_get_futex_key+0x10/0x10 [ 649.928297][T17185] ? __pfx___schedule+0x10/0x10 [ 649.928337][T17185] ? do_raw_spin_unlock+0x172/0x230 [ 649.928389][T17185] futex_wait_setup+0x84/0x510 [ 649.928439][T17185] __futex_wait+0x194/0x2f0 [ 649.928480][T17185] ? __pfx___futex_wait+0x10/0x10 [ 649.928527][T17185] ? __pfx_futex_wake_mark+0x10/0x10 [ 649.928574][T17185] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 649.928617][T17185] ? __hrtimer_setup+0x176/0x280 [ 649.928663][T17185] ? ktime_add_safe+0x60/0x70 [ 649.928706][T17185] futex_wait+0xe8/0x380 [ 649.928740][T17185] ? __pfx_futex_wait+0x10/0x10 [ 649.928778][T17185] ? __lock_acquire+0xb8a/0x1c90 [ 649.928819][T17185] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 649.928876][T17185] do_futex+0x229/0x350 [ 649.928911][T17185] ? __pfx_do_futex+0x10/0x10 [ 649.928941][T17185] ? rcu_is_watching+0x12/0xc0 [ 649.928976][T17185] ? ktime_get+0x200/0x310 [ 649.929009][T17185] ? lockdep_hardirqs_on+0x7c/0x110 [ 649.929033][T17185] ? read_tsc+0x9/0x20 [ 649.929065][T17185] __x64_sys_futex+0x1e0/0x4c0 [ 649.929105][T17185] ? __pfx___x64_sys_futex+0x10/0x10 [ 649.929140][T17185] ? xfd_validate_state+0x61/0x180 [ 649.929189][T17185] do_syscall_64+0xcd/0x490 [ 649.929220][T17185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.929249][T17185] RIP: 0033:0x7fc8ae98e9a9 [ 649.929271][T17185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.929298][T17185] RSP: 002b:00007ffee69e5d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 649.929323][T17185] RAX: ffffffffffffffda RBX: 000000000009eac8 RCX: 00007fc8ae98e9a9 [ 649.929341][T17185] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc8aebb608c [ 649.929358][T17185] RBP: 0000000000000032 R08: 00007fc8af7ab000 R09: 0000000ce69e601f [ 649.929376][T17185] R10: 00007ffee69e5e20 R11: 0000000000000246 R12: 00007fc8aebb608c [ 649.929394][T17185] R13: 00007ffee69e5e20 R14: 000000000009eafa R15: 00007ffee69e5e40 [ 649.929429][T17185] [ 650.523373][T17189] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 653.276722][T17248] ACPI: Can not change Invalid GPE/Fixed Event status [ 653.418778][T17254] FAULT_INJECTION: forcing a failure. [ 653.418778][T17254] name failslab, interval 1, probability 0, space 0, times 0 [ 653.471646][T17254] CPU: 0 UID: 0 PID: 17254 Comm: syz.2.2250 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 653.471695][T17254] Tainted: [U]=USER [ 653.471704][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.471721][T17254] Call Trace: [ 653.471730][T17254] [ 653.471741][T17254] dump_stack_lvl+0x16c/0x1f0 [ 653.471776][T17254] should_fail_ex+0x512/0x640 [ 653.471806][T17254] ? fs_reclaim_acquire+0xae/0x150 [ 653.471850][T17254] ? tomoyo_encode2+0x100/0x3e0 [ 653.471875][T17254] should_failslab+0xc2/0x120 [ 653.471910][T17254] __kmalloc_noprof+0xd2/0x510 [ 653.471938][T17254] ? d_absolute_path+0x136/0x1a0 [ 653.471980][T17254] tomoyo_encode2+0x100/0x3e0 [ 653.472013][T17254] tomoyo_encode+0x29/0x50 [ 653.472038][T17254] tomoyo_realpath_from_path+0x18f/0x6e0 [ 653.472078][T17254] tomoyo_check_open_permission+0x2ab/0x3c0 [ 653.472122][T17254] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 653.472204][T17254] ? find_held_lock+0x2b/0x80 [ 653.472244][T17254] tomoyo_file_open+0x6b/0x90 [ 653.472279][T17254] security_file_open+0x84/0x1e0 [ 653.472326][T17254] do_dentry_open+0x596/0x1c10 [ 653.472365][T17254] vfs_open+0x82/0x3f0 [ 653.472408][T17254] path_openat+0x1de4/0x2cb0 [ 653.472449][T17254] ? __pfx_path_openat+0x10/0x10 [ 653.472491][T17254] ? __lock_acquire+0xb8a/0x1c90 [ 653.472536][T17254] do_filp_open+0x20b/0x470 [ 653.472565][T17254] ? __pfx_do_filp_open+0x10/0x10 [ 653.472621][T17254] ? alloc_fd+0x471/0x7d0 [ 653.472676][T17254] do_sys_openat2+0x11b/0x1d0 [ 653.472714][T17254] ? __pfx_do_sys_openat2+0x10/0x10 [ 653.472768][T17254] __x64_sys_openat+0x174/0x210 [ 653.472826][T17254] ? __pfx___x64_sys_openat+0x10/0x10 [ 653.472885][T17254] do_syscall_64+0xcd/0x490 [ 653.472921][T17254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.472952][T17254] RIP: 0033:0x7fc8ae98e9a9 [ 653.472987][T17254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.473016][T17254] RSP: 002b:00007fc8af7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 653.473044][T17254] RAX: ffffffffffffffda RBX: 00007fc8aebb5fa0 RCX: 00007fc8ae98e9a9 [ 653.473063][T17254] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 653.473082][T17254] RBP: 00007fc8aea10d69 R08: 0000000000000000 R09: 0000000000000000 [ 653.473100][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.473117][T17254] R13: 0000000000000000 R14: 00007fc8aebb5fa0 R15: 00007ffee69e5bc8 [ 653.473153][T17254] [ 653.803506][T17254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 655.623538][T17241] kexec: Could not allocate control_code_buffer [ 658.071704][T17340] overlayfs: missing 'lowerdir' [ 659.339608][T17344] kexec: Could not allocate control_code_buffer [ 659.504860][T17368] kAFS: No cell specified [ 659.643706][T17373] FAULT_INJECTION: forcing a failure. [ 659.643706][T17373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.683421][T17373] CPU: 1 UID: 0 PID: 17373 Comm: syz.2.2275 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 659.683467][T17373] Tainted: [U]=USER [ 659.683476][T17373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 659.683489][T17373] Call Trace: [ 659.683495][T17373] [ 659.683506][T17373] dump_stack_lvl+0x16c/0x1f0 [ 659.683531][T17373] should_fail_ex+0x512/0x640 [ 659.683557][T17373] _copy_to_iter+0x463/0x16f0 [ 659.683586][T17373] ? __pfx__copy_to_iter+0x10/0x10 [ 659.683611][T17373] ? const_folio_flags+0x5b/0x100 [ 659.683632][T17373] ? folio_mark_accessed+0xc1/0xc00 [ 659.683656][T17373] ? __pfx_folio_mark_accessed+0x10/0x10 [ 659.683685][T17373] copy_page_to_iter+0x12a/0x1e0 [ 659.683712][T17373] filemap_read+0x6b1/0xe40 [ 659.683746][T17373] ? __pfx_filemap_read+0x10/0x10 [ 659.683767][T17373] ? __lock_acquire+0xb21/0x1c90 [ 659.683813][T17373] ? __pfx_down_read+0x10/0x10 [ 659.683838][T17373] ? futex_unqueue+0x133/0x2c0 [ 659.683866][T17373] blkdev_read_iter+0x1ac/0x500 [ 659.683891][T17373] do_iter_readv_writev+0x735/0x950 [ 659.683926][T17373] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 659.683962][T17373] ? bpf_lsm_file_permission+0x9/0x10 [ 659.683988][T17373] ? security_file_permission+0x71/0x210 [ 659.684021][T17373] ? rw_verify_area+0xcf/0x680 [ 659.684062][T17373] vfs_readv+0x4cb/0x8b0 [ 659.684099][T17373] ? __pfx_vfs_readv+0x10/0x10 [ 659.684149][T17373] ? __fget_files+0x20e/0x3c0 [ 659.684188][T17373] ? do_readv+0x132/0x340 [ 659.684218][T17373] do_readv+0x132/0x340 [ 659.684249][T17373] ? __pfx_do_readv+0x10/0x10 [ 659.684282][T17373] ? xfd_validate_state+0x61/0x180 [ 659.684315][T17373] __x64_sys_preadv2+0x11f/0x160 [ 659.684339][T17373] do_syscall_64+0xcd/0x490 [ 659.684362][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.684382][T17373] RIP: 0033:0x7fc8ae98e9a9 [ 659.684398][T17373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.684417][T17373] RSP: 002b:00007fc8af7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 659.684436][T17373] RAX: ffffffffffffffda RBX: 00007fc8aebb5fa0 RCX: 00007fc8ae98e9a9 [ 659.684449][T17373] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 659.684462][T17373] RBP: 00007fc8aea10d69 R08: 0000000000000004 R09: 000000000000002e [ 659.684474][T17373] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 659.684486][T17373] R13: 0000000000000000 R14: 00007fc8aebb5fa0 R15: 00007ffee69e5bc8 [ 659.684510][T17373] [ 660.424200][T17384] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 661.000523][T17395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 661.485001][T17397] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 662.651045][T17423] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 663.311769][T17419] kexec: Could not allocate control_code_buffer [ 663.663433][T17439] FAULT_INJECTION: forcing a failure. [ 663.663433][T17439] name failslab, interval 1, probability 0, space 0, times 0 [ 663.716267][T17439] CPU: 1 UID: 0 PID: 17439 Comm: syz.4.2287 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 663.716326][T17439] Tainted: [U]=USER [ 663.716338][T17439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.716358][T17439] Call Trace: [ 663.716369][T17439] [ 663.716381][T17439] dump_stack_lvl+0x16c/0x1f0 [ 663.716422][T17439] should_fail_ex+0x512/0x640 [ 663.716456][T17439] ? fs_reclaim_acquire+0xae/0x150 [ 663.716508][T17439] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 663.716541][T17439] should_failslab+0xc2/0x120 [ 663.716581][T17439] __kmalloc_noprof+0xd2/0x510 [ 663.716627][T17439] tomoyo_realpath_from_path+0xc2/0x6e0 [ 663.716674][T17439] tomoyo_check_open_permission+0x2ab/0x3c0 [ 663.716727][T17439] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 663.716830][T17439] ? do_raw_spin_lock+0x12c/0x2b0 [ 663.716898][T17439] tomoyo_file_open+0x6b/0x90 [ 663.716938][T17439] security_file_open+0x84/0x1e0 [ 663.716993][T17439] do_dentry_open+0x596/0x1c10 [ 663.717040][T17439] vfs_open+0x82/0x3f0 [ 663.717089][T17439] path_openat+0x1de4/0x2cb0 [ 663.717136][T17439] ? __pfx_path_openat+0x10/0x10 [ 663.717172][T17439] ? __lock_acquire+0xb8a/0x1c90 [ 663.717221][T17439] do_filp_open+0x20b/0x470 [ 663.717266][T17439] ? __pfx_do_filp_open+0x10/0x10 [ 663.717338][T17439] ? alloc_fd+0x471/0x7d0 [ 663.717395][T17439] do_sys_openat2+0x11b/0x1d0 [ 663.717431][T17439] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.717484][T17439] __x64_sys_openat+0x174/0x210 [ 663.717524][T17439] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.717573][T17439] do_syscall_64+0xcd/0x490 [ 663.717606][T17439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.717634][T17439] RIP: 0033:0x7f314298e9a9 [ 663.717657][T17439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.717702][T17439] RSP: 002b:00007f3143807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.717730][T17439] RAX: ffffffffffffffda RBX: 00007f3142bb6080 RCX: 00007f314298e9a9 [ 663.717750][T17439] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 663.717769][T17439] RBP: 00007f3142a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 663.717786][T17439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.717807][T17439] R13: 0000000000000000 R14: 00007f3142bb6080 R15: 00007ffe6a6f9118 [ 663.717835][T17439] [ 663.717850][T17439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.339039][T17451] FAULT_INJECTION: forcing a failure. [ 664.339039][T17451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.393355][T17451] CPU: 0 UID: 0 PID: 17451 Comm: syz.2.2290 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 664.393400][T17451] Tainted: [U]=USER [ 664.393410][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 664.393427][T17451] Call Trace: [ 664.393436][T17451] [ 664.393446][T17451] dump_stack_lvl+0x16c/0x1f0 [ 664.393479][T17451] should_fail_ex+0x512/0x640 [ 664.393513][T17451] _copy_from_user+0x2e/0xd0 [ 664.393544][T17451] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 664.393599][T17451] snd_rawmidi_write+0x26e/0xc10 [ 664.393650][T17451] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 664.393692][T17451] ? __pfx_default_wake_function+0x10/0x10 [ 664.393737][T17451] ? bpf_lsm_file_permission+0x9/0x10 [ 664.393775][T17451] ? security_file_permission+0x71/0x210 [ 664.393821][T17451] ? rw_verify_area+0xcf/0x680 [ 664.393867][T17451] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 664.393910][T17451] vfs_write+0x29d/0x1150 [ 664.393945][T17451] ? __pfx_vfs_write+0x10/0x10 [ 664.393969][T17451] ? find_held_lock+0x2b/0x80 [ 664.394001][T17451] ? __fget_files+0x204/0x3c0 [ 664.394053][T17451] ? __fget_files+0x20e/0x3c0 [ 664.394108][T17451] ksys_write+0x1f8/0x250 [ 664.394134][T17451] ? __pfx_ksys_write+0x10/0x10 [ 664.394172][T17451] do_syscall_64+0xcd/0x490 [ 664.394205][T17451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.394235][T17451] RIP: 0033:0x7fc8ae98e9a9 [ 664.394258][T17451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.394286][T17451] RSP: 002b:00007fc8af789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.394313][T17451] RAX: ffffffffffffffda RBX: 00007fc8aebb6080 RCX: 00007fc8ae98e9a9 [ 664.394332][T17451] RDX: 000000100000a3d9 RSI: 0000200000000180 RDI: 000000000000000b [ 664.394351][T17451] RBP: 00007fc8aea10d69 R08: 0000000000000000 R09: 0000000000000000 [ 664.394368][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.394385][T17451] R13: 0000000000000000 R14: 00007fc8aebb6080 R15: 00007ffee69e5bc8 [ 664.394422][T17451] [ 664.993047][T17464] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 665.297217][T17477] random: crng reseeded on system resumption [ 666.341406][T17481] kexec: Could not allocate control_code_buffer [ 668.638969][T17549] FAULT_INJECTION: forcing a failure. [ 668.638969][T17549] name failslab, interval 1, probability 0, space 0, times 0 [ 668.651805][T17549] CPU: 0 UID: 0 PID: 17549 Comm: syz.2.2314 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 668.651843][T17549] Tainted: [U]=USER [ 668.651849][T17549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 668.651861][T17549] Call Trace: [ 668.651868][T17549] [ 668.651876][T17549] dump_stack_lvl+0x16c/0x1f0 [ 668.651901][T17549] should_fail_ex+0x512/0x640 [ 668.651922][T17549] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 668.651946][T17549] should_failslab+0xc2/0x120 [ 668.651970][T17549] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 668.651991][T17549] ? __pmd_alloc+0xbf/0x930 [ 668.652022][T17549] __pmd_alloc+0xbf/0x930 [ 668.652051][T17549] move_page_tables+0x28c8/0x4070 [ 668.652079][T17549] ? __pfx_copy_vma+0x10/0x10 [ 668.652107][T17549] ? finish_task_switch.isra.0+0x21c/0xc10 [ 668.652147][T17549] ? __pfx_move_page_tables+0x10/0x10 [ 668.652170][T17549] ? register_lock_class+0x41/0x4c0 [ 668.652216][T17549] copy_vma_and_data+0x216/0x750 [ 668.652239][T17549] ? __pfx_copy_vma_and_data+0x10/0x10 [ 668.652265][T17549] ? __vma_enter_locked+0x163/0x3f0 [ 668.652299][T17549] ? find_held_lock+0x2b/0x80 [ 668.652320][T17549] ? move_vma+0x536/0x1740 [ 668.652345][T17549] move_vma+0x548/0x1740 [ 668.652369][T17549] ? __pfx_move_vma+0x10/0x10 [ 668.652386][T17549] ? mm_get_unmapped_area+0x95/0xe0 [ 668.652415][T17549] ? shmem_get_unmapped_area+0x170/0xa00 [ 668.652454][T17549] ? cap_mmap_addr+0x4b/0x120 [ 668.652478][T17549] ? bpf_lsm_mmap_addr+0x9/0x10 [ 668.652505][T17549] ? security_mmap_addr+0x6c/0x1e0 [ 668.652537][T17549] ? __get_unmapped_area+0x267/0x440 [ 668.652566][T17549] ? vrm_set_new_addr+0x208/0x290 [ 668.652588][T17549] __do_sys_mremap+0xe07/0x1590 [ 668.652612][T17549] ? __pfx___do_sys_mremap+0x10/0x10 [ 668.652646][T17549] ? __x64_sys_futex+0x1e0/0x4c0 [ 668.652687][T17549] do_syscall_64+0xcd/0x490 [ 668.652711][T17549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.652732][T17549] RIP: 0033:0x7fc8ae98e9a9 [ 668.652748][T17549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.652768][T17549] RSP: 002b:00007fc8af7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 668.652786][T17549] RAX: ffffffffffffffda RBX: 00007fc8aebb5fa0 RCX: 00007fc8ae98e9a9 [ 668.652799][T17549] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 668.652811][T17549] RBP: 00007fc8aea10d69 R08: 00007effffffb000 R09: 0000000000000000 [ 668.652824][T17549] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 668.652835][T17549] R13: 0000000000000000 R14: 00007fc8aebb5fa0 R15: 00007ffee69e5bc8 [ 668.652861][T17549] [ 668.916622][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.101058][T17552] __vm_enough_memory: pid: 17552, comm: syz.4.2309, bytes: 4398046511104 not enough memory for the allocation [ 672.094189][T17588] Process accounting paused [ 673.604824][T17631] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 673.612551][T17631] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 673.690806][T17617] kexec: Could not allocate control_code_buffer [ 674.120093][T17636] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 674.708188][T17649] ksmbd: Unknown IPC event: 14, ignore. [ 675.571033][T17655] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 675.648631][T17655] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 675.683241][T17655] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 676.186344][T17636] ovs_ÿþ: entered promiscuous mode [ 676.692400][T17668] ptrace attach of "./syz-executor exec"[5855] was attempted by ""[17668] [ 677.090103][T13827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 677.103937][T13827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 677.114496][T13827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 677.142887][T13827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 677.154830][T13827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 677.574590][T17677] binder: 17676:17677 ioctl c018620c 0 returned -1 [ 677.672134][T17683] FAULT_INJECTION: forcing a failure. [ 677.672134][T17683] name fail_futex, interval 1, probability 0, space 0, times 0 [ 677.734052][T17683] CPU: 1 UID: 0 PID: 17683 Comm: syz.1.2345 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 677.734100][T17683] Tainted: [U]=USER [ 677.734109][T17683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.734126][T17683] Call Trace: [ 677.734135][T17683] [ 677.734146][T17683] dump_stack_lvl+0x16c/0x1f0 [ 677.734180][T17683] should_fail_ex+0x512/0x640 [ 677.734215][T17683] get_futex_key+0x1d0/0x1540 [ 677.734254][T17683] ? __pfx_get_futex_key+0x10/0x10 [ 677.734290][T17683] ? __destroy_inode+0x2e4/0x730 [ 677.734324][T17683] ? __futex_hash.constprop.0+0x1e9/0x440 [ 677.734362][T17683] futex_wake+0xe7/0x4e0 [ 677.734402][T17683] ? __pfx_evict+0x10/0x10 [ 677.734435][T17683] ? __pfx_futex_wake+0x10/0x10 [ 677.734480][T17683] ? iput+0x519/0x880 [ 677.734521][T17683] do_futex+0x1e3/0x350 [ 677.734556][T17683] ? __pfx_do_futex+0x10/0x10 [ 677.734591][T17683] ? __sock_release+0x20b/0x270 [ 677.734632][T17683] __x64_sys_futex+0x1e0/0x4c0 [ 677.734669][T17683] ? __sys_socket+0xac/0x260 [ 677.734707][T17683] ? fput+0x70/0xf0 [ 677.734738][T17683] ? __pfx___x64_sys_futex+0x10/0x10 [ 677.734774][T17683] ? xfd_validate_state+0x61/0x180 [ 677.734811][T17683] ? __pfx_ksys_write+0x10/0x10 [ 677.734848][T17683] do_syscall_64+0xcd/0x490 [ 677.734879][T17683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.734908][T17683] RIP: 0033:0x7f32fed8e9a9 [ 677.734929][T17683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.734957][T17683] RSP: 002b:00007f32ffc370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 677.734983][T17683] RAX: ffffffffffffffda RBX: 00007f32fefb5fa8 RCX: 00007f32fed8e9a9 [ 677.735001][T17683] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f32fefb5fac [ 677.735018][T17683] RBP: 00007f32fefb5fa0 R08: 00007f32ffc38000 R09: 0000000000000000 [ 677.735042][T17683] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f32fefb5fac [ 677.735061][T17683] R13: 0000000000000000 R14: 00007fff1f07d260 R15: 00007fff1f07d348 [ 677.735097][T17683] [ 677.955420][T10237] ------------[ cut here ]------------ [ 677.961007][T10237] ODEBUG: free active (active state 0) object: ffff888035aa1318 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 678.016652][T10237] WARNING: CPU: 0 PID: 10237 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 678.026621][T10237] Modules linked in: [ 678.030578][T10237] CPU: 0 UID: 0 PID: 10237 Comm: syz.3.754 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 678.044231][T10237] Tainted: [U]=USER [ 678.048060][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.058175][T10237] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 678.064077][T10237] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 6f 15 8c 4c 89 e6 48 c7 c7 40 64 15 8c e8 ff d1 9d fc 90 <0f> 0b 90 90 58 83 05 b6 b1 cc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 678.084087][T10237] RSP: 0018:ffffc90003627768 EFLAGS: 00010286 [ 678.090210][T10237] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 678.098679][T10237] RDX: ffff888028ac0000 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 678.107041][T10237] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 678.115245][T10237] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c156ae0 [ 678.123301][T10237] R13: ffffffff8baff040 R14: ffffffff8a8e0850 R15: ffffc90003627868 [ 678.131315][T10237] FS: 0000000000000000(0000) GS:ffff88812472d000(0000) knlGS:0000000000000000 [ 678.140373][T10237] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.147356][T10237] CR2: 00007f9f739cc2d0 CR3: 0000000034db4000 CR4: 00000000003526f0 [ 678.155446][T10237] Call Trace: [ 678.158751][T10237] [ 678.161713][T10237] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 678.167340][T10237] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 678.173242][T10237] debug_check_no_obj_freed+0x4b7/0x600 [ 678.178857][T10237] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 678.185002][T10237] ? rcu_is_watching+0x12/0xc0 [ 678.189840][T10237] ? kmem_cache_free+0x2d1/0x4d0 [ 678.195153][T10237] kfree+0x28f/0x4d0 [ 678.199760][T10237] ? hci_release_dev+0x4d8/0x600 [ 678.206958][T10237] hci_release_dev+0x4d8/0x600 [ 678.211805][T10237] ? __pfx_hci_release_dev+0x10/0x10 [ 678.218030][T10237] ? rcu_is_watching+0x12/0xc0 [ 678.222842][T10237] ? kfree+0x24f/0x4d0 [ 678.227675][T10237] bt_host_release+0x6a/0xb0 [ 678.232326][T10237] ? __pfx_bt_host_release+0x10/0x10 [ 678.238250][T10237] device_release+0xa4/0x240 [ 678.242913][T10237] kobject_put+0x1e7/0x5a0 [ 678.247898][T10237] ? __pfx_vhci_release+0x10/0x10 [ 678.252973][T10237] put_device+0x1f/0x30 [ 678.257554][T10237] vhci_release+0x81/0xf0 [ 678.261927][T10237] __fput+0x402/0xb70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 678.266001][T10237] task_work_run+0x14d/0x240 [ 678.270651][T10237] ? __pfx_task_work_run+0x10/0x10 [ 678.275865][T10237] do_exit+0x86c/0x2bd0 [ 678.280078][T10237] ? __pfx_do_exit+0x10/0x10 [ 678.284748][T10237] ? cgroup_update_frozen_flag+0x107/0x210 [ 678.291008][T10237] ? find_held_lock+0x2b/0x80 [ 678.295794][T10237] do_group_exit+0xd3/0x2a0 [ 678.300367][T10237] get_signal+0x2673/0x26d0 [ 678.305306][T10237] ? hrtimer_nanosleep+0x187/0x380 [ 678.310469][T10237] ? __pfx_get_signal+0x10/0x10 [ 678.315400][T10237] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 678.320839][T10237] arch_do_signal_or_restart+0x8f/0x790 [ 678.326526][T10237] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 678.332759][T10237] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 678.339025][T10237] exit_to_user_mode_loop+0x84/0x110 [ 678.344402][T10237] do_syscall_64+0x3f6/0x490 [ 678.349042][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.355031][T10237] RIP: 0033:0x7fd4e81c1265 [ 678.359485][T10237] Code: Unable to access opcode bytes at 0x7fd4e81c123b. [ 678.366630][T10237] RSP: 002b:00007fd4e9053f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 678.375155][T10237] RAX: fffffffffffffdfc RBX: 00007fd4e83b5fa0 RCX: 00007fd4e81c1265 [ 678.383258][T10237] RDX: 00007fd4e9053fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 678.391269][T10237] RBP: 00007fd4e8210d69 R08: 0000000000000000 R09: 0000000000000000 [ 678.399326][T10237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 678.407542][T10237] R13: 0000000000000000 R14: 00007fd4e83b5fa0 R15: 00007ffcebcae5a8 [ 678.417546][T10237] [ 678.420607][T10237] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 678.427925][T10237] CPU: 0 UID: 0 PID: 10237 Comm: syz.3.754 Tainted: G U 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 678.441515][T10237] Tainted: [U]=USER [ 678.445334][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.455401][T10237] Call Trace: [ 678.458691][T10237] [ 678.461637][T10237] dump_stack_lvl+0x3d/0x1f0 [ 678.466259][T10237] panic+0x71c/0x800 [ 678.470197][T10237] ? __pfx_panic+0x10/0x10 [ 678.474640][T10237] ? show_trace_log_lvl+0x29b/0x3e0 [ 678.479872][T10237] ? check_panic_on_warn+0x1f/0xb0 [ 678.485016][T10237] ? debug_print_object+0x1a2/0x2b0 [ 678.490250][T10237] check_panic_on_warn+0xab/0xb0 [ 678.495218][T10237] __warn+0xf6/0x3c0 [ 678.499139][T10237] ? debug_print_object+0x1a2/0x2b0 [ 678.504363][T10237] report_bug+0x3c3/0x580 [ 678.508767][T10237] ? debug_print_object+0x1a2/0x2b0 [ 678.513997][T10237] handle_bug+0x184/0x210 [ 678.518345][T10237] exc_invalid_op+0x17/0x50 [ 678.522883][T10237] asm_exc_invalid_op+0x1a/0x20 [ 678.527757][T10237] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 678.533592][T10237] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 6f 15 8c 4c 89 e6 48 c7 c7 40 64 15 8c e8 ff d1 9d fc 90 <0f> 0b 90 90 58 83 05 b6 b1 cc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 678.553218][T10237] RSP: 0018:ffffc90003627768 EFLAGS: 00010286 [ 678.559303][T10237] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 678.567304][T10237] RDX: ffff888028ac0000 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 678.575322][T10237] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 678.583311][T10237] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c156ae0 [ 678.591297][T10237] R13: ffffffff8baff040 R14: ffffffff8a8e0850 R15: ffffc90003627868 [ 678.599286][T10237] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 678.604788][T10237] ? __warn_printk+0x198/0x350 [ 678.609582][T10237] ? __warn_printk+0x1a5/0x350 [ 678.614384][T10237] ? debug_print_object+0x1a1/0x2b0 [ 678.619632][T10237] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 678.625141][T10237] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 678.630989][T10237] debug_check_no_obj_freed+0x4b7/0x600 [ 678.636583][T10237] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 678.642697][T10237] ? rcu_is_watching+0x12/0xc0 [ 678.647493][T10237] ? kmem_cache_free+0x2d1/0x4d0 [ 678.652454][T10237] kfree+0x28f/0x4d0 [ 678.656385][T10237] ? hci_release_dev+0x4d8/0x600 [ 678.661371][T10237] hci_release_dev+0x4d8/0x600 [ 678.666178][T10237] ? __pfx_hci_release_dev+0x10/0x10 [ 678.671508][T10237] ? rcu_is_watching+0x12/0xc0 [ 678.676303][T10237] ? kfree+0x24f/0x4d0 [ 678.680417][T10237] bt_host_release+0x6a/0xb0 [ 678.685034][T10237] ? __pfx_bt_host_release+0x10/0x10 [ 678.690345][T10237] device_release+0xa4/0x240 [ 678.694970][T10237] kobject_put+0x1e7/0x5a0 [ 678.699409][T10237] ? __pfx_vhci_release+0x10/0x10 [ 678.704455][T10237] put_device+0x1f/0x30 [ 678.708649][T10237] vhci_release+0x81/0xf0 [ 678.713008][T10237] __fput+0x402/0xb70 [ 678.717027][T10237] task_work_run+0x14d/0x240 [ 678.721683][T10237] ? __pfx_task_work_run+0x10/0x10 [ 678.726871][T10237] do_exit+0x86c/0x2bd0 [ 678.731070][T10237] ? __pfx_do_exit+0x10/0x10 [ 678.735685][T10237] ? cgroup_update_frozen_flag+0x107/0x210 [ 678.741523][T10237] ? find_held_lock+0x2b/0x80 [ 678.746246][T10237] do_group_exit+0xd3/0x2a0 [ 678.750790][T10237] get_signal+0x2673/0x26d0 [ 678.755330][T10237] ? hrtimer_nanosleep+0x187/0x380 [ 678.760468][T10237] ? __pfx_get_signal+0x10/0x10 [ 678.765343][T10237] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 678.770576][T10237] arch_do_signal_or_restart+0x8f/0x790 [ 678.776163][T10237] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 678.782362][T10237] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 678.788550][T10237] exit_to_user_mode_loop+0x84/0x110 [ 678.793870][T10237] do_syscall_64+0x3f6/0x490 [ 678.798486][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.804401][T10237] RIP: 0033:0x7fd4e81c1265 [ 678.808828][T10237] Code: Unable to access opcode bytes at 0x7fd4e81c123b. [ 678.815867][T10237] RSP: 002b:00007fd4e9053f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 678.824319][T10237] RAX: fffffffffffffdfc RBX: 00007fd4e83b5fa0 RCX: 00007fd4e81c1265 [ 678.832308][T10237] RDX: 00007fd4e9053fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 678.840290][T10237] RBP: 00007fd4e8210d69 R08: 0000000000000000 R09: 0000000000000000 [ 678.848274][T10237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 678.856273][T10237] R13: 0000000000000000 R14: 00007fd4e83b5fa0 R15: 00007ffcebcae5a8 [ 678.864284][T10237] [ 678.867648][T10237] Kernel Offset: disabled [ 678.871989][T10237] Rebooting in 86400 seconds..