last executing test programs: 20.372231389s ago: executing program 1 (id=2090): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyca\x00', 0x102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], 0x2bc4}, 0x1, 0x0, 0x0, 0xc040004}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_DM_CMD_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x30c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NET_DM_ATTR_UNSPEC={0xdf, 0x0, "803ba0fc5534a1da82d55ae230e3238cdb66f3d18d45b7f5c29c23446a2353cbafa8a0cb894f2815f2756170759584f0b839ea923ae495fb3cc26733baec34f08b725b7e58443faaf5694c502c23fa8e774ec68c26a003a2f976c626ade5e3b44a69b48d4f3b48b34fb56fdcd2bb1b409936e516cb0ad7538bb2793a585074a693bd42bf7b8a09538630f69c2de7eec7681dd1f18d1d2c9f5429881a0dc2af9a2271413cb2edbab452f9882e243ccc1b5ded7bfce373bea4c36e860fbd9387c23d4230bc244ebb3089c69f541725233ea5549abe31f461adbc8227"}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x9}, @NET_DM_ATTR_UNSPEC={0xcf, 0x0, "f8391dcaaddc0e5c43871265a4ecd04ca361a72d20e39c517a7f4f534be3a41f923613aa85deb13891a21c56767b81df82b13ad5cc7880ff2ee44dfa1a56fbeb9f1bbe96966d45d110d5aca87d5d28a7d291442bf5e791bea29b616abe02be8c0197c2b017821a566c7754f878d2d9881922ca4c9152a5498b8058c9a1d3a5e0867aff7120e3f1ee05efab3a59f452e9839b59dd403c21afa2f415d905518c086d256ed754fb78e129c3d6beda1427b40e7fb3a6df3d84919e6b803b4247865a2c3a84617d72eb6475cedf"}, @NET_DM_ATTR_UNSPEC={0xc0, 0x0, "f69c8c2a1ebdb0182f0acf56d3848ab3a967cb2d46a566d93f3063d6a5ab1c267ba4e6fe6c62045cce4b27442846139968ad648298c20d691ad029d7e3bd6ee7ddcbee3c03c7f8fc20130d4a9fc51547bae3306797e25f69bcba5e53cc410082c2131ed2ca759186584b350285b8eb3ea11c591816f3f035bbc560f9801481a19db62bdcb7c95d1583928b82f8683c76c0ef14e6ad20021916bb6c488a92a29f24aa9d30532317aca1192e7b4e2cbbb9fd465627f74577d6d1374e8c"}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xb1}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0xa}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0x66, 0x0, "c657f6396d0380b4436078e13279411e2e0311b83f6e2235b80eac07111e39ace72679b4b1169239720708587811dd266103d47c22075d5a084dbee2031e0d5eeb8964e1634883ea069c484a0d6a6c4f1b3e53927afbeb7b6eb161205c174787f4da"}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4}, 0x20048884) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000ec0)=""/4096, 0x1000) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) mmap$auto(0xffffffff, 0x6, 0x7, 0xffffffffffff2492, r0, 0x8000000000000000) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000ffdbdf25100000000000000000000100c42dfac5f331299d31ac69a83230a420779ffaffc9f033912cc054517f3c2ea78451615bfe1150ea3214be8798af000078bcde49cf2dff0156f4eb1586e054e423e6045a3460c39c32265c972fc01b2c9aa938a5d1c1a18417e285bff5751c74cc", @ANYRES32=r8, @ANYBLOB="08000a0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0xa, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x7f}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x3}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x404c014) 19.672526492s ago: executing program 1 (id=2092): r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r0, 0x800, &(0x7f0000000140)='/proc/sys/net/ipv4/neigh/veth1_to_team/delay_first_probe_time\x00', &(0x7f0000000180), 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000000)={0xffffffffffffffff, 0x6}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/neigh/veth1_to_team/delay_first_probe_time\x00', 0x40b00, 0x0) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0x1000, 0x1) ioctl$auto_VHOST_SET_VRING_BASE2(r1, 0x4008af12, &(0x7f0000000080)={0x2, 0x1}) 19.098786202s ago: executing program 1 (id=2095): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x2}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, &(0x7f0000000240)="ac7d7dbca6e5d5cafed326f75f172ca0c4fcb84910215f25b890b7bd74b3d99f2c1dd0e3bcfc843ea155b162d31f219b346f042037f5ecd5f41245b6529cd633dd046eac3dfacf81cfe2da0dd380a34be89022999d5246b99efd0cdc83cfbda8f7e9ca7415fe4b105bf0d56df987ca0e6a96649469a3e18bc816505e14b6c3e56d09066b0f91506f2e839667440632ab84326ef55ab41456fc1bcc7c42edbcfe0edda28df451687ae52bd1dacd8cb0d6bb0edb3ca7e4a0ef77e3c8053534202acba7a685c45c369d5ce0651d35e4a73d0c8f8c43d860f671dbdd0374627aff5d56ade31b2b8053df21bb94befde339d3668023edc418d2bfb3bf140a6671c1a2c32e9a2ebe194f043f3d4d15e5f5042a782bd14fc8f02511f60cc072e80303de2a5a6f0d548dec6b8414950b6541594bfa4b0d61ed2e63c4e7e36c8071d8bd33b2cb460ac66eb1d2b395e2855769107bf5944e9bd2599c29b127a200f52a759f3acc9cb8738e6472bfa8fddfb13b233902e30be134154116b7102454e40860f66bc3c1089d0dac3055afd4a38c8561871e4d7a225b69cb8dc8839f313d5df558fc8909b1fc910ada6c38c40dd7023e68e4b26efe769f35938f527a888ed4d9be8bdc172df5644ffdc2b7a668d253ed3627880d5f6f54d35ddbe6a929f6c3834f74fff47352d6317c05451bfe6147518ace4e2a3fe850590d511725e8b7606bb592e56e18e4374391d5597511a799135564d57d2b015967b809fca4c5d936d7dfc146a31248f67692a3f983d6f4f0de03f7d245ab0021cbed1048ed84dfdeb9d83de9c9cbee9cd9b728f5c7cb7e3c26ebb62bb1c0f80375ffd522d06aaae45dbcf97350f581a8239bfdd71e021722cb399bf316acdad3b41d02766572928bdb4f57d3c6c7ddb954e36b6872f87305a3946670e4f9fd89e2a1439a66273f62b83f8c8dfab71c2aeb9b6fa39072b1e1a9dee91f23a603424ba8d8791547dc95ab3651ae2784fcc1af918464c0731058e34455f07081d1d6ef17131316bb1e96395b3f2df31df0c0c402e1724eee30286f0882e2f54f27662d2e98d2c25deb1e46606770dc1f9151cb3e3922f2f275683726c36d2216fc8526bb749e5eab45c7c4dffc0a5b428838f6c4986e1ad9aa8073e36f4d8a7b723f685270a76de550f44d34b1dbed702b5301eda9a506eb6719b1205860d68de4c05c8d763dff2d3d40dfe91a515a6fd94707b43d2238b660af0ed6e8cac319e5a6ba1aa7be4a07051a00f5930b006b3ac73e38319882cbb4ecd6d59b6434b3f6407d3cc7d8e9e4d03139565fac7aaa68af5c9637261fbe914fdeaed3db28cd11b9549cc212a3859d2780e3ab85d8973568b50b50d558c782ffceae195d8f5b993ed866a1a8b9a47c704f4e0716f90d8e7d0744c7e8b6a240801d58a8ba504e87bc4e8c8680a38b4c26816c918c93f1e031419a665cdf996029862a13d66e52bec7e55a91b3ab81c74e27c202db9a177a4c82e9721b0731ff33fdeb680a6aca965c95d2ab4297119d2dd0e7e363c1dc52a4bb6d978ba5cf2da27e1b83dc1ad6c185615204ce8ebd4bd3ce4305c779bbc5285132e7ec4fa6c7519543be987c5bc941ff11b1e1e811ec378fd01d8bdd0c0f5c395d132b943ff7e41ef8c8d9b6008c05b54e801f1d62a96dc413bf64302250d0f7a6318ea46721f61df081116d72aeddaf32b80890caa3ee0cd72224d0aa7535545274e115bba868611cd7c232b26ae985b882b648eb525d4f2581df256d15ee2244cf14a02caa1f04b5beec10f797711e4adf2e0ff605f9c0aae5a2716c797358be2f16f3556cf5046b8bb53397342cd919137ba3bb2e0b60d8d83a5a6b146e5969be5127bbd9aa927cb3735c6cee696396fc88d626c7398e3d185c285b8b5b5e7644f931c8390c3653cad9b3e8437fd2543f5ae990ed7402e68c5ffbab288cc49a75f7c1032682fa92b128dd7641ebe3c6d14597946d8b31924d1ada0593c005987fcbbb93925f1bfe1ea7064f4b77aeaa058011e5334519d0d3b649e2548df25ef3870a857b5b8d1c7496f214e3ac5d6ee430bce2a700df3741db8147b9b591ec55f1bef07ab2c4f4a2e53db6502f4ffc10bee81ad6a95ef427d72d6d7aa922b7500482fcd82833ea89b6931bae932ae91db8f8715ee3756462389778a6f3075670ffeca045e3a893850e6f8326ce0f1ad0d39c907dedd8aff1644c6800e9372aef6c4226bbfdba79356896f4aaedd5fb1278f6a32b29f89a93ad80eae9f5ae2b7fb32b17a7e59136f768abaf18d9e8e4f6e7857deebb78c8df5eca9319841939b01ef449ba749e15bcfbb2ba730de7564e207888514d45fd6d4c3f57c2c4d455e1d87796c86b779a9cb8e471612892b0db17dc58c06347ff62df8458f407e54635aa503f87b1609daced8d0b67b6e0f72d824556584a9f93e3ee51b73c35df445a33d784333c439ed0be374a89b9c742ce3d03aa280982e27f7ff24d12898d6227a4fedffff4a126cdddd8b9722ff8a3d76d662c6a9c3cf24eb9d9e3eca6395b78c12019677bd3f775cfaa45555625c05e01ca8f8f51bbcbb755b8e4b87b2083fbe58e44f9de0ab0712417b75286a1b9e1385894840b223b585ad5abe2cc31a40fb3a5a0c330deb687a3a4185b08408d598fa93010678f77d969d52522709717fbea3df272f227047d12f6ffc0f39e2cb453da23551a4d76501666c728cc76a6a775dc5232e4caf970cab82dc1265ad1deb8ff3fd056a98ff6c5136fccbf9fd6aa0cdf1665f7b612d815c7c7d8c75b24a01e3b3eb38a98ecfca799b5972c5055efee856bd952dc51bbc16592a31ffbb08af2c8440f65cf91b8aac3ca0a8e51460e8ad0950a4408a08986cf3dc4c13392e33989312518c574dd17c02d47658eec2ae1f2e287f8b8b18840cebc9049141d8b34a4c71a47b315d2f61664fbe7437ab11cf2444153465db1f50b091408783042e30065ee58d232879e919160753ef1be643430bdb7f5acf2ec76833e0cb64e5d08240383399440ef1e1c4a0b625fb08c462fef14b9fb148548edfcf3328a68eb987bbadf4ba21969ca7bf7e8f81e8e99f77996200f9382dee60b11b4fdc7891e9d19087b2a7e5da6f1b4a2236f51da8409cfa624618da0f8a1742b49b4a496be2f8acdd2debf9571a3a9e14cf1000c439468f5b251a054e7af620cc27e829f766776d6b91e504a9dfb1827577875dd88028990b086ff6b499d1b24f39c3f2d5eeae291f852436b800edfc345aa07693c337811e385b671626a2227e3285dbc6e6f374b2c278b9c9fdaf80bf1708e6f5063b9d7045de583d30a40a01dc22a11b8b4c71a4ec435c5dca3421e93a16ba0d541c3005a8f7fa010605804c15918155f25909eccf9aa4466cbd0622977672e107e218c7f573009109a6371a13122bdb256d6be40cf84b36a3e2da57714b6864e7add7498eafb133e8081cd7d89b1ffc6f28cfda1424becddb491eddde6a2d63cc33edc385ae106014b0910ab63fcab692e3ae00db3d8660acec6979be0cca080fb21fdc0f9e23ca767a26ad4eb1eb55f1db7bd10ffc8f06b4e778ad939252a1552b9a8ba8318c0145629d94db2495395874159e65916f6315d0de8e39372e93a3d004888af641c8048d6b78ba1cea88877712b9b7c72b219fc20ba54347d4caaf3db109e0978475d046d9b2aed20186118a7c83dd3ef9d2e96d54b2e6f09389c894ad15f5765bf4cace107dfc7334ed95f72e8191f045cb8d08da06a504543f65207179685ab3385348861ac3e95f363b4453cd3326c030027fe5f59e4abd4d9a49b1812862c35a8764742adef44f9694edfcbcd6b1c83b2cf11e242bb7b6f63fa2249b597ef3dd95338cff9943500de60c6c215cd9bd1241d9615720a1489f2991d4e9909c85eaff7cabaca2648b738fbb6014962134b06225e8a62f379b8add9b4d8cca482a6d6765f2b88a0c243c72f5b35d339e1bfb2c8f94c499f8cce5d642e65ba73fa0f98a688569c88293119c40bd2264744d5bf2a2923a98bad113df16d247c3bd05a627b09e339d6d3f4b321c9942fee531642762cc413a0caa91aeaa9584f3c3f383a49bac8e76e9c67227f1b4323a2c2e5ce2b7026b1e73070825170566ecf9067c7dbf770c8c70cb3b22e9d343e22224b0d7e3f7ad13aade6561c8c4a99b9b63f0d40c71c2183f56488a0bfeadd484c09d9ea94dae3188f1a3a2d4f3a5b4c0c2ce40ad4d33b5bd1da94f499ef435fdc5509a9b6614761c2457e00ed451946d7ab6b888f374695c7c7dfc8575d1d1ebc339ddc9d41ce80ac963215704feb457651cc88f0dc1413f340aa39d7561b17915f5b67643d112a77ff06060c948fb53fe20abbd8a5b0454bf5fc97453b1993da04de5f3d24366928a92d3bc2cbcc0884ec3d6194fe0ec8410d2ff5ae7d24442b3ca9d905e21c5e00e9476dca841848af676d6c507a765df460315b438fb16633709647329e5b5a58d6a423c7a4f288be432ea4e3fbc87f8fb9e7f47c0cd2e182aa63e7954ca54614b7a78e3f3b3db76a80507a196a67f1530efffee5ca1e8856e4d5e28cf68b2bbb92eed3721e41420899b5baf174a217676879ad1668595fa9c5fc71aa3e23809ec72c9c0b3075ef92628a910a62a0dd5526fac43cc0788649d7d36ae8e81bf269a16b7ae16ae44a5464a9e51e4b31137916e512e13dbb08c92821dd6a32989083573bcd838ced0a556ab393365dd1472b5560cdc821612a866400a0d04bb0c5ce3d8e19e5df45e1f289fca819084a7f2061a5e33c0b2ee0548b0e9cecf6f18880eee6e4cd7b21a7eb01b208058e82dfa2c818a2a29dbefa07613066b9991a032b51c45fc1fe03ab76cb161e9ece26858b719bb0f6edec365e7e6e57c78d867591cdaa5519f947a33be4256dcacf22793ac7d871236e2a90cdadf67c3f2d0b329b6ef9a85635065ec1912e90ab73652892de11091696c00428d6c425e0a25bd287eabaea038537eac770a0f4e273062f3451f6cad04a53973a9fe0ca0cdb9d4dc3ac42870ed6792ec556179b87096c1056f2422a64beb331542d4f3ec00264c02eb444354c3c8ac834ad33f5b0a58d696b184bd4bcc7ecca605e136af57ebf948ca9564d13e16838d6f2ed8fd717e1778cae06e67703fd01148f669aeae788f716537616332851a4312013fe79010ae5c82a27bd3ae893b2074669164617b8f9dfa8ce24363253fddc111d090b6adf65f927e90a9bda91ddb0542a5443d5374f2fb8ad5d7cc3f670229ce00356d655c782c1c259d23e3e73dfe4be2b4fe72e23628135a2f53cb6d9f83a1947f7b68aff92ccca3c38089b3acf57d9602e07cebdfe3701d8ad081e7f47567ba821a822eb8c6fde36f6d666ba942a57364087b91ae6dbdf35050d01be178a1af93573cdf15cc3aa27512d5fd0139b39a391133528a344c5b448a601bbca0ae741b3621acb29a7615a9da59b338d311fdd34d4262b3198b4560532b67e2ceaf01ecc955b14ba876d930e8b67b10fa95cd578f2094a19f829e7515c4d5266be7485e51cfb020dfc655754ee301acd53fe7e3111918e3c03f7aa4a28f2e81cbbd9a074185ee34f3f769646985cda62ddb2ee55bb30ada28841cfe9e0bc8366adfd445d8e5458b0d49ce969aaa34bfc3138cdf9485ed5b569a58fd4f4e5297592edc4b9d2c7d0eb7a23d840b436be3a29a1d3e011b9b550572c8b3a3bb41205e676772f558c592f99e7f7c69a3f7dfeb5ae4335a71eb4b837c4f8303e7aa29fb99822056200f3e2bf4d02a42f9ecf6b0e", 0x1000) shmctl$auto_SHM_UNLOCK(0xbc38, 0xc, 0x0) bpf$auto(0x6, 0x0, 0x101) r2 = open(0x0, 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17.791700716s ago: executing program 1 (id=2098): close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x105240, 0x0) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0xfb5) sysfs$auto(0x100000e, 0x4, 0x7d) ioctl$auto(0x3, 0x541b, 0x10000000000402) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x29, 0x200, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000110) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x2020009, 0xffffffffffff0001, 0xeb1, 0xfffffffffffffffa, 0x400) socketpair$auto(0x0, 0x5, 0x100, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) exit$auto(0x6) timer_delete$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0) writev$auto(0x3, &(0x7f0000000040)={&(0x7f0000000080), 0x7114}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socketpair$auto(0x2, 0xc62, 0x8000000000000000, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/252:0/min_ratio_fine\x00', 0xc0082, 0x0) sendfile$auto(r3, r3, 0x0, 0xef3) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock$auto(0xfbe8, 0x1000000000000004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22202, 0x0) 14.761226694s ago: executing program 3 (id=2101): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xc) mount$auto(&(0x7f0000000000)='bond_slave_0\x00', 0x0, 0x0, 0xc2, &(0x7f0000000380)="d006787a7ba4498a2204b636acce3792d8698168d5a76889280650b335121c2185a83d496e3a722f7a57cbb53f09c22869663055b54b1b558a9a82511c") syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) getegid() mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680), 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4000c, 0x9, 0x948b, 0x3, 0x15f4da0a, 0x8000003, 0x80000000, 0x5f, 0x80000001, 0xb, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0xeb1, r0, 0x9ddb) socket(0x2, 0x80002, 0x73) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x147602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = fanotify_init$auto(0xba, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r3, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 13.727116724s ago: executing program 1 (id=2102): mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203) bind$auto(r2, 0x0, 0x7fffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) writev$auto(r2, &(0x7f0000000040)={0x0, 0xffffffff}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) io_uring_register$auto(0x2, 0x1a, &(0x7f00000000c0), 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) ioctl$auto_TCFLSH2(r3, 0x5453, 0x0) socket(0x15, 0x800, 0x81) prctl$auto_PR_SET_MM_START_STACK(0x5, 0x5, 0xffffffffffffffff, 0x2, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) 13.299621029s ago: executing program 1 (id=2104): mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) mmap$auto(0x0, 0x8, 0x80000000, 0xeb1, 0xfffffffffffffffa, 0x8002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x26, 0x1, 0x4) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x58700, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@link_detach={r1}, 0x1100001) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000004c0)=""/206, 0xce) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) 13.265551978s ago: executing program 3 (id=2105): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') ioctl$auto(0x3, 0x40103e05, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video25\x00', 0x189a40, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto_VHOST_SET_VRING_ERR(r2, 0x4008af22, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x88002, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, 0x0, 0x20000000) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, 0x0, {0x1003, 0x9b72}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x1fe, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) ioctl$auto(0x3, 0x4020565a, 0x38) 11.941979918s ago: executing program 2 (id=2109): mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x7ffc) r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) fdatasync$auto(r0) socketpair$auto(0x1, 0x2, 0xae4, 0x0) mmap$auto(0x100, 0x3, 0x100000001, 0x12, r0, 0xff) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x44) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:2/max_ratio_fine\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync\x00', 0x6) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r8, 0x28000) r9 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r9, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000600100000"]) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r3, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9a9f06e09dcadad3d9ee10bbb658ce92cbcb7cc709cbe37f97b24431b75359c87f4d5466aca049b6fdf8e957729664abd0170abd3c8d6f7a65cfbb70015598f8c7ce0bba394f9e9a0f8a6133a3b92d187be5a0e9d15b89de1b8c4c0b54429d99972aea0d1e0b", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08003c00ac1414aa04004f80040097801400710000000000000000000000ffffe0000001220036002f7379732f6b65726e656c2f74726163696e672f7365745f6576656e7400000004004500080028002a2c2b000065745992aaeda04abc9865ab83673665e2110db66d10d4296625b69f19752aa5ef8ade5aa7811a5f98b1929926cb04ad66dfae10d7b84b1f5f7ab161e9999c641c29756121741db58249fcaf60eb38f076912bd64802c7ecb0248a53c5b2a665fc3f678382d753114aa304cbd1ff515c3284cd60b4bdbb2ee2b5b7588a632aaf0fb68618dbd79dad39625a948a0c3a443e9af56c48d4d872464e5505a4a1959d9dc5d04457a6465e5b7d0bb8d4a895f2adfa402568363f9db219c2c801d5c76c023a2436e62d39c4ee4370561b184dd407703694355799b104f55d2e21a00505a34ef98215fb44c5ca1cf5f93dd76418559b097120ef1ff4791a233988cfd891cc6892dcb578b7cb9b751dac25dead0366f1213aa0df1fe08625a4546bb62556de83eada68e42ed8acd22c5a8b7783d7ce10e3737dfb6ea2eef46fda7a55289751ddc40ef9e9e7b1a2d2aeb33d87b759721158b0c8b0826961122cd384659b4a8df5b06db43770a2402e29a340ec211f87b083e6e61fab0aec4eab61a09e438ff35529568347886dd8f9ff8fa6a1a89cc770b9f71cd30b10151da88235a335723787b1e9eaff0e6ef012c71c3c7e1d66937888813955f14066135d8a59604f54cf15cb41b5a27df02e9f5801bec7c392d025482c6f079647a6f4e8b928b12582fcf070f602aea50e782d87654f749672b502eca8e1d1a177c549c67c02fcc1d195a704679d93ce1b0671a5d5f3032630d34144cbdf8dc77015fcf9f01be12864ed0b49022157d91908005d0005000000"], 0x66c}}, 0x10) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) 11.765854669s ago: executing program 3 (id=2110): unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x200004, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = memfd_create$auto(0x0, 0x4) sendmmsg$auto(r0, 0x0, 0xf78d, 0x5) unshare$auto(0x40000080) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto(0x3, 0x8010aebc, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, 0xffffffffffffffff, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capset$auto(0x0, 0x0) 8.398495379s ago: executing program 2 (id=2111): unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x200004, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = memfd_create$auto(0x0, 0x4) sendmmsg$auto(r0, 0x0, 0xf78d, 0x5) unshare$auto(0x40000080) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto(0x3, 0x8010aebc, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, 0xffffffffffffffff, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capset$auto(0x0, 0x0) 7.258958964s ago: executing program 0 (id=2113): openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0xebff) 6.706369461s ago: executing program 0 (id=2114): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_shared\x00', 0x20b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x4f64a1d2) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/sctp/rto_min\x00', 0x202, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) recvfrom$auto(0x3, 0x0, 0x80000003, 0x400, 0x0, 0xfffffffffffffffd) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={0x0, 0xf000, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f38327b97000fedbdf250500000008000300", @ANYRES32=r4], 0x1c}}, 0x4008000) madvise$auto(0x0, 0x1010001, 0x100000003) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.10/usb29/29-0:1.0/usb29-port6/uevent\x00', 0xa80780, 0x0) 6.340779903s ago: executing program 2 (id=2115): mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) r0 = io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1, 0x100000007, 0x800000000000000d, 0x8fd6, 0x19488, 0x3, 0x8, 0x7f, 0x2, 0xffffffffffffffff, 0xdfe, 0x8, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x128e2, 0x0) write$auto(r2, &(0x7f00000001c0)='\b\x1c\xc7\x00\x80\x00\x00\x00\x00\x00\x00\x00', 0x81) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) splice$auto(r0, &(0x7f0000000200)=0x2, r2, &(0x7f0000000240)=0x9, 0x4dc0000000000000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="34ed35f1", @ANYRES16=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="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", 0xc84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x2, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.77215169s ago: executing program 3 (id=2116): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) capset$auto(0x0, 0x0) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x1, 0x1, 0x1, 0xa, 0xed, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="010025b97000fcdbdf25020000002c00018028003c80"], 0x40}, 0x1, 0x0, 0x0, 0x20048004}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b67, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000005c0)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~Or\'\x8e\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc89\x9f\xda\x8ad\xc3\xcd~\x9e\x94\xc6\xb0`b\x87x\x97\xaf\xa5\xf2\x9f\xd4\xae2\xad;|\x82\xb6b\xa1\x92\a\x95k\x85\xd4\x86E\x00\xedGP\x0e;Hu\x03L\xc6u\xee\xe7\xa8\xd7U\x9bw\x96\xd3Ci:\xc6\xed.\x061;\x93tf\xb7Uq\xebN\xf0}\xcb\x0e\x80r\xab\x88l\x1a\xe9\xa4\x15O\xc0\x1e\xdc3\f\xf6\x9eg\xe8}\xe2\xf5\x04<2/=\xc9\xf2\xb5q&\x00\xb6\xc8\x94\x83\xe0', 0x100) mmap$auto(0x0, 0x2020009, 0x690, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000180)="285ecf7e037b55e1ab7a4f76992f65c6415bf83a1dbdf2c6c5e006b2e5e027c00f96dad6274a64b2878a42144a92217419d1586fc6d20bdf574fae2b958d59a2518677c559eba44de9112cf6c1fa7f9f93f6fd92bc4e4c39199566e6357935fffc05c8b7523b36cd1db40563ab0d5ef018172ca9860267e22834fb3e01c71b86121c9b09f81877d895ba10c871673dc023c9a133074d031b377b9b1c638b2450d6e4") openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) ioctl$auto(r2, 0x541c, r3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect$auto(0x0, 0x806121, 0x6) 5.156168359s ago: executing program 0 (id=2117): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x309381, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100008a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x20000010}, 0x3f6f69b1b8a2b987) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x5}, 0x9}, 0x16d, 0x6, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYRES16=r2], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x6ffffff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x170, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_HE_6GHZ_CAPABILITY={0xf5, 0x125, "8a65cfd0f7a69f9225a928fab4a1138ddf36da2972d519d27f81c0c3631edebfe5429d8f5610bd2c618a85841f7373a6f773f8b12c04036ce9257c61745ec7bc57e70ea9cd0c4afa69eb678fdffc63394e0d334031b611f73520aa3bca9bc74326c99c78c08ca9461f616842e872e7ad3bc3547cf069aeecce4ac178e118e2422601716b5a55b591cbf25ae690afaa0f160b5e13311893fe0a43c7a72e1a6e6e53c4a7494d2a3cde44a239820cf6c01a69f507d499fa225888c4370cef4a5834f48ba48619c62e3a1beebab990fc224f9ffefb4923b2ebcb6c61b6c35a77e0f5d29161db748f087c64bacf926fc153fe04"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1000}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x3e, 0x125, "c31c0b85d4601361aca8b537155475079eaa55d36649d70f0e75cf9321768945fc99d00971bd11836d37e0fe9a7a6e8422fcf981b83e3eb220a8"}]}, 0x170}, 0x1, 0x0, 0x0, 0x11}, 0x40080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep\x00', 0x16bd00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) socket(0xf, 0x2, 0x0) 3.448702513s ago: executing program 0 (id=2118): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff549042f4d94e13d7855e68b736ec90d98b3cc7"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5cedd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r1) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x8b0f, 0x24) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, 0x0, 0x100000a3d9) 3.019607682s ago: executing program 2 (id=2119): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') ioctl$auto(0x3, 0x40103e05, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) mmap$auto(0x2000000000000, 0xfffffffffffffffe, 0x8, 0x810, r3, 0x5d63) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(0xffffffffffffffff, 0x40084149, &(0x7f0000000040)=0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x23, 0xe, 0x0, 0x6c, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0) socket(0x10, 0x2, 0xc) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) 2.828980772s ago: executing program 3 (id=2120): mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x7ffc) r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) fdatasync$auto(r0) socketpair$auto(0x1, 0x2, 0xae4, 0x0) mmap$auto(0x100, 0x3, 0x100000001, 0x12, r0, 0xff) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x44) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:2/max_ratio_fine\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync\x00', 0x6) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r8, 0x28000) r9 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r9, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000600100000"]) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r3, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9a9f06e09dcadad3d9ee10bbb658ce92cbcb7cc709cbe37f97b24431b75359c87f4d5466aca049b6fdf8e957729664abd0170abd3c8d6f7a65cfbb70015598f8c7ce0bba394f9e9a0f8a6133a3b92d187be5a0e9d15b89de1b8c4c0b54429d99972aea0d1e0b", @ANYRES16=r5, @ANYBLOB="05072bbd7000fedbdf257e0000005006b980f5001d80c5c540271b6635c7d4a410575a1a62c8cde48acb79c25c5d40a78d24906bd4362359e0bf260797766bbc09552eacf295a75d867fb9cf437897f359ace7280607ee4cdfa790e81f569fecbd52479084a135e520f7ecddeba714cf9f5b7dd8b17f71181c935fb483f4bb865880877d4c901b8f531268a2529bb1365f4da23104003b800c00af00010000000000000012c9bfc04fc71c5c7c926da108e2a799d70ade091dae3845605453b7a8b39d464bc32dd864f61b38a0c9857f5923228d8c5d2917d44f0899daa839023a8e1eade1733a069fc504924e448c171ba037fcbad667fd5c0f80e25ab5cfbee961b64880373900000008004300ac1e040136cd20c3571fc08558b594a0a434a98178e6fb07e5229d578d8619b89da22321963ef7aa41c8236be601db800400bf8004005d8018f505106cf7a3a3d0453bc3f3c9ab681eeddb184efc1c582c472d80b15cfddabf4311b5dff185be152d3321bfd2feb467aa214ef70a606c4b903a4862573a660bc438f9124312600d0ce88774ab7fdddc2a0d6d8a78139ff3be25342338b69a61688875f4b661c3a26aed6f20713117c2fb1e210b071b1a6892c1c82c3d3360f28d56cf78b809ad0c213d796429e9254fb4145383a88e9f2e32797169c2c76f6e262931a1c8a3e7e1d5f350f99513ee52568d55ca5b1a0518d14fb40d9d59366a4d1143e767c63067cf09f04bd436f77af0f01380ed6bab6203d39afac49992b5aeb5c1fb376bdf9bbe4e42fef15735c6891e8338bee281d4048f6cffcc9156aac6b198bb3079fbeef1ad83c93b34c5d862c9d7dcb22fafd20196cbe070c0ac829c12fc8ba6179a4181988504e1ad8ff05d70d9a515b519f074066283559d904245e4e84c145f5fd9a3e02fece57cdcf79554c9924008fc29cc6df7b96080f21b663ba5f48582c6697f0e375239a0fd340b389cbe98ddaab880ca4ed8c4aa09b93a9c237400f28f4ffc1fb3dc1eecd4359c1bae2a2020fd00f40358d2c28bc808e2f3e6db2d0eaf0d8b9c468a204cd9696c6d602e1773862170186a2adc5d6336c20400a88014002c00fc00000000000000000000000000000000001301df80f53312e561d1944cf0b63cf2629cd6f15c5a480e75a7c1b8a2ccec55aeca8737f071c519a0239a2ffcaf373baafa00206462cbe84c7424b8621e686bed4ac07db6db63f0998725e0202c000f920e6067e883d9624f42110a26f57599c818a5b820a1752b7cf298e54058dd1f7f25d2aebb881e75fa5ff6d7411b6914128dc81f9b0c237aa6e17fa029c320ed322a25bc4a386bbe7d6adc5f202aec9dd0cf0b7504cad66bd6572cf65bc058acef62fe3543a8040800ac00", @ANYRES32=r6, @ANYBLOB="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"], 0x66c}}, 0x10) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) 2.312995563s ago: executing program 0 (id=2121): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x200}, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x48) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.11/usb32/32-0:1.0/usb32-port6/power/autosuspend_delay_ms\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x3ff, 0xffffffffffff0001, 0x8001) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r5) sendmsg$auto_ILA_CMD_DEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd26, 0x6}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) madvise$auto(0x0, 0x53, 0x9) 1.795547384s ago: executing program 2 (id=2122): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x7f, 0x9, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x92, 0x6}, 0x0) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x101) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca481, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) close_range$auto(0x2, 0xa, 0x0) unlink$auto(&(0x7f0000000380)='./file0\x00') statmount$auto(0x0, &(0x7f0000000180)={0x808, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0xffffffff, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x20000010, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000000c0)="2b16db43086044eea0308ae8ebda8fc1873d80f233832084525a17c3286ecc18c5c5950b1e664d", 0xc, 0xa505}, 0x800}, 0x6, 0x4008) socketpair$auto(0xfffffffd, 0x8, 0xffffffff, 0x0) 200.403079ms ago: executing program 2 (id=2123): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xd, 0xb979, 0x8000001f, 0x1000, 0x6d3d, 0xc, 0x2, 0x8]}, 0x0) sendmsg$auto(r2, 0x0, 0x5) select$auto(0x9, &(0x7f00000000c0)={[0xeeca, 0x7, 0xb, 0x9, 0x6, 0x1fc, 0x6, 0x3, 0x2, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0xc, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) unshare$auto(0x40000080) sendmsg$auto_NFC_CMD_GET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf2501000000050010000400000005000c00ff000000080003008214000083001f003e3fe36d2345c4a020a978d05c864042975f4eb9e314243e5d05000000000000702a4b5d172d64253010602703b76d4ad5a4ef0a65709d2f5dfaf9f77ed1cc0ba0215d7b170a39ab66e1ef0b72f41da7341218461f5d028d826e0dcd1fafd700943c344cfad1b65649cda9ea2667c40005001000000000000e0014002f6465762f766d636900"/194], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, 0x0, 0x200000c0) sysfs$auto(0x2b, 0x7, 0x8000000000000000) write$auto(0x3, 0x0, 0xfdef) 167.461401ms ago: executing program 3 (id=2124): mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203) bind$auto(r2, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) (fail_nth: 10) 0s ago: executing program 0 (id=2125): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000240)={@inferred, "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"}) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x0, 0xffffffffffffffff, 0x1) mmap$auto(0x43e3, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x4}}, 0x8a) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x624}, 0x3, 0x80) modify_ldt$auto(0xfffffffe, 0x0, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) preadv$auto(r1, &(0x7f0000002940)={&(0x7f00000012c0)="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", 0xa93a}, 0xf, 0x200000000000001, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000000000002e}, 0x8000040000000001) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x7113}, 0x8) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000001240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)={0xfffffffffffffdf4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x0, 0x4, 0x1}, @NFC_ATTR_DEVICE_NAME, @NFC_ATTR_LLC_PARAM_RW, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xfff}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400d0}, 0x4004010) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000003740)='/dev/nbd4\x00', 0x80000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x7) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = clone$auto(0x6, 0x7, &(0x7f0000001280)=0x28e4, &(0x7f00000013c0)=0x9, 0x8) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000001400)={0x8, 0x9, 0x8001, 0x4, 0x2, 0x0}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000001480)={0x5, 0x9, 0x56bd, @inferred=r2, &(0x7f0000001440)={@inferred=r3, 0x67, 0x0, 0x3ff, "4cf79e6ae8bd8601f981cc2dbea672d2e31bce1998b07f9c90c3a7c1602af765253eabde8554d2a172d2d0c6"}, "f0bece39ebf1d7aa8b74d755a5b65cf704339d5cea4773656733332e1b14d4de62bb54184a9433df9010ab233a1927ab5958"}) kernel console output (not intermixed with test programs): _do_filp_open+0x10/0x10 [ 783.746596][T14076] ? __pfx_kfree_link+0x10/0x10 [ 783.746638][T14076] ? alloc_fd+0x471/0x7d0 [ 783.746688][T14076] do_sys_openat2+0x11b/0x1d0 [ 783.746719][T14076] ? __pfx_do_sys_openat2+0x10/0x10 [ 783.746754][T14076] ? __fget_files+0x20e/0x3c0 [ 783.746796][T14076] __x64_sys_openat+0x174/0x210 [ 783.746827][T14076] ? __pfx___x64_sys_openat+0x10/0x10 [ 783.746856][T14076] ? ksys_write+0x1ac/0x250 [ 783.746893][T14076] do_syscall_64+0xcd/0x490 [ 783.746922][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.746952][T14076] RIP: 0033:0x7f8cc878e9a9 [ 783.746973][T14076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.746996][T14076] RSP: 002b:00007f8cc9538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 783.747019][T14076] RAX: ffffffffffffffda RBX: 00007f8cc89b5fa0 RCX: 00007f8cc878e9a9 [ 783.747036][T14076] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 783.747051][T14076] RBP: 00007f8cc9538090 R08: 0000000000000000 R09: 0000000000000000 [ 783.747066][T14076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.747080][T14076] R13: 0000000000000001 R14: 00007f8cc89b5fa0 R15: 00007fff3dc8e778 [ 783.747113][T14076] [ 784.711187][ T5168] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 784.711225][ T5168] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 784.726384][ T5168] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 784.726424][ T5168] Bluetooth: hci1: adv larger than maximum supported [ 784.736312][ T5168] Bluetooth: hci1: Malformed LE Event: 0x0d [ 785.430392][ T5168] Bluetooth: hci1: command 0x0406 tx timeout [ 785.510216][ T5168] Bluetooth: hci2: command 0x0406 tx timeout [ 785.670641][ T5168] Bluetooth: hci0: command 0x0406 tx timeout [ 785.750167][ T5168] Bluetooth: hci3: command 0x0406 tx timeout [ 785.771944][ T5168] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 785.771983][ T5168] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 785.788175][ T5168] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 785.788200][ T5168] Bluetooth: hci0: adv larger than maximum supported [ 785.795455][ T5168] Bluetooth: hci0: Malformed LE Event: 0x0d [ 786.029417][ T5168] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 786.029442][ T5168] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 786.045506][ T5168] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 786.045530][ T5168] Bluetooth: hci1: adv larger than maximum supported [ 786.052691][ T5168] Bluetooth: hci1: Malformed LE Event: 0x0d [ 786.939903][T14119] FAULT_INJECTION: forcing a failure. [ 786.939903][T14119] name failslab, interval 1, probability 0, space 0, times 0 [ 787.009538][T14119] CPU: 0 UID: 0 PID: 14119 Comm: syz.1.1659 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 787.009584][T14119] Tainted: [U]=USER [ 787.009593][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.009616][T14119] Call Trace: [ 787.009625][T14119] [ 787.009636][T14119] dump_stack_lvl+0x16c/0x1f0 [ 787.009669][T14119] should_fail_ex+0x512/0x640 [ 787.009703][T14119] ? __kmalloc_noprof+0xbf/0x510 [ 787.009733][T14119] ? __register_sysctl_table+0xb3/0x1900 [ 787.009762][T14119] should_failslab+0xc2/0x120 [ 787.009791][T14119] __kmalloc_noprof+0xd2/0x510 [ 787.009822][T14119] __register_sysctl_table+0xb3/0x1900 [ 787.009862][T14119] ? is_module_address+0x5f/0xf0 [ 787.009904][T14119] ? __pfx___register_sysctl_table+0x10/0x10 [ 787.009932][T14119] ? is_module_address+0x69/0xf0 [ 787.009965][T14119] ? register_net_sysctl_sz+0x228/0x3e0 [ 787.010002][T14119] nf_ct_net_init+0x249/0x370 [ 787.010040][T14119] ? __pfx_nf_ct_net_init+0x10/0x10 [ 787.010076][T14119] ops_init+0x1df/0x5f0 [ 787.010110][T14119] setup_net+0x1ff/0x510 [ 787.010136][T14119] ? lockdep_init_map_type+0x5c/0x280 [ 787.010172][T14119] ? __pfx_setup_net+0x10/0x10 [ 787.010206][T14119] ? debug_mutex_init+0x37/0x70 [ 787.010237][T14119] copy_net_ns+0x2a6/0x5f0 [ 787.010272][T14119] create_new_namespaces+0x3ea/0xa90 [ 787.010311][T14119] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 787.010344][T14119] ksys_unshare+0x45b/0xa40 [ 787.010378][T14119] ? __pfx_ksys_unshare+0x10/0x10 [ 787.010412][T14119] ? xfd_validate_state+0x61/0x180 [ 787.010456][T14119] __x64_sys_unshare+0x31/0x40 [ 787.010488][T14119] do_syscall_64+0xcd/0x490 [ 787.010518][T14119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.010543][T14119] RIP: 0033:0x7fce4638e9a9 [ 787.010565][T14119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.010590][T14119] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 787.010616][T14119] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 787.010634][T14119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 787.010651][T14119] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 787.010667][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.010691][T14119] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 787.010728][T14119] [ 787.262414][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.579162][ T5168] Bluetooth: hci1: command 0x0406 tx timeout [ 787.589581][ T5168] Bluetooth: hci2: command 0x0406 tx timeout [ 788.080394][T14134] vhci_hcd: invalid port number 16 [ 788.208861][T14134] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 789.395052][ T5168] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 789.717872][T14154] ======================================================= [ 789.717872][T14154] WARNING: The mand mount option has been deprecated and [ 789.717872][T14154] and is ignored by this kernel. Remove the mand [ 789.717872][T14154] option from the mount to silence this warning. [ 789.717872][T14154] ======================================================= [ 790.915796][T14194] FAULT_INJECTION: forcing a failure. [ 790.915796][T14194] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.960958][T14194] CPU: 0 UID: 0 PID: 14194 Comm: syz.1.1669 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 790.961004][T14194] Tainted: [U]=USER [ 790.961013][T14194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 790.961029][T14194] Call Trace: [ 790.961038][T14194] [ 790.961049][T14194] dump_stack_lvl+0x16c/0x1f0 [ 790.961082][T14194] should_fail_ex+0x512/0x640 [ 790.961115][T14194] should_fail_alloc_page+0xe7/0x130 [ 790.961150][T14194] prepare_alloc_pages+0x3c2/0x610 [ 790.961186][T14194] ? rcu_is_watching+0x12/0xc0 [ 790.961217][T14194] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 790.961245][T14194] ? sched_clock_cpu+0x6c/0x530 [ 790.961276][T14194] ? lock_acquire+0x179/0x350 [ 790.961311][T14194] ? css_rstat_updated+0x9d/0xd30 [ 790.961348][T14194] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 790.961375][T14194] ? __lock_acquire+0x622/0x1c90 [ 790.961429][T14194] ? __lock_acquire+0x622/0x1c90 [ 790.961467][T14194] ? __lock_acquire+0x622/0x1c90 [ 790.961502][T14194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.961541][T14194] ? policy_nodemask+0xea/0x4e0 [ 790.961573][T14194] alloc_pages_mpol+0x1fb/0x550 [ 790.961605][T14194] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 790.961644][T14194] folio_alloc_mpol_noprof+0x36/0x2f0 [ 790.961679][T14194] vma_alloc_folio_noprof+0xed/0x1e0 [ 790.961712][T14194] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 790.961743][T14194] ? find_held_lock+0x2b/0x80 [ 790.961770][T14194] ? __handle_mm_fault+0x1092/0x5490 [ 790.961812][T14194] __handle_mm_fault+0x2f21/0x5490 [ 790.961860][T14194] ? __pfx___handle_mm_fault+0x10/0x10 [ 790.961898][T14194] ? __pte_offset_map_lock+0x174/0x310 [ 790.961929][T14194] ? find_held_lock+0x2b/0x80 [ 790.961954][T14194] ? find_held_lock+0x2b/0x80 [ 790.961994][T14194] ? follow_page_pte+0x3af/0x14c0 [ 790.962038][T14194] handle_mm_fault+0x589/0xd10 [ 790.962083][T14194] __get_user_pages+0x589/0x3b80 [ 790.962127][T14194] ? __pfx_mt_find+0x10/0x10 [ 790.962157][T14194] ? __pfx___get_user_pages+0x10/0x10 [ 790.962205][T14194] populate_vma_page_range+0x278/0x3a0 [ 790.962243][T14194] ? __pfx_populate_vma_page_range+0x10/0x10 [ 790.962277][T14194] ? __pfx_find_vma_intersection+0x10/0x10 [ 790.962312][T14194] ? do_mmap+0x69c/0x1210 [ 790.962348][T14194] __mm_populate+0x1d8/0x380 [ 790.962384][T14194] ? __pfx___mm_populate+0x10/0x10 [ 790.962427][T14194] ? up_write+0x1b2/0x520 [ 790.962468][T14194] vm_mmap_pgoff+0x362/0x450 [ 790.962504][T14194] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 790.962535][T14194] ? cap_task_prctl+0x2af/0xa80 [ 790.962572][T14194] ? __x64_sys_futex+0x1e0/0x4c0 [ 790.962600][T14194] ? __x64_sys_futex+0x1e9/0x4c0 [ 790.962638][T14194] ksys_mmap_pgoff+0x7d/0x5c0 [ 790.962670][T14194] ? syscall_user_dispatch+0x78/0x140 [ 790.962713][T14194] __x64_sys_mmap+0x125/0x190 [ 790.962752][T14194] do_syscall_64+0xcd/0x490 [ 790.962782][T14194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.962809][T14194] RIP: 0033:0x7fce4638e9a9 [ 790.962832][T14194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.962857][T14194] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 790.962881][T14194] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 790.962900][T14194] RDX: 00000000000000df RSI: 0000000000400004 RDI: 0000000000000000 [ 790.962917][T14194] RBP: 00007fce46410d69 R08: ffffffffffffffff R09: 0000000000008000 [ 790.962935][T14194] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 790.962951][T14194] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 790.962988][T14194] [ 792.233613][ T30] audit: type=1800 audit(6048637486.923:84): pid=14200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=45103 res=0 errno=0 [ 792.725995][T14206] vhci_hcd: invalid port number 16 [ 792.752133][T14206] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 793.109177][T14219] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 793.354899][T14219] can: request_module (can-proto-3) failed. [ 794.887638][T14247] FAULT_INJECTION: forcing a failure. [ 794.887638][T14247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.920535][T14247] CPU: 1 UID: 0 PID: 14247 Comm: syz.0.1681 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 794.920577][T14247] Tainted: [U]=USER [ 794.920585][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.920599][T14247] Call Trace: [ 794.920607][T14247] [ 794.920616][T14247] dump_stack_lvl+0x16c/0x1f0 [ 794.920647][T14247] should_fail_ex+0x512/0x640 [ 794.920677][T14247] should_fail_alloc_page+0xe7/0x130 [ 794.920708][T14247] prepare_alloc_pages+0x3c2/0x610 [ 794.920740][T14247] ? rcu_is_watching+0x12/0xc0 [ 794.920769][T14247] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 794.920800][T14247] ? rcu_is_watching+0x12/0xc0 [ 794.920825][T14247] ? trace_mm_page_alloc+0x11f/0x1a0 [ 794.920857][T14247] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 794.920880][T14247] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.920903][T14247] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 794.920940][T14247] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 794.920978][T14247] ? alloc_vmap_area+0xdc8/0x29c0 [ 794.921006][T14247] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 794.921039][T14247] ? bloom_map_alloc+0x302/0x4c0 [ 794.921059][T14247] ? map_create+0x592/0x1db0 [ 794.921089][T14247] ? __sys_bpf+0x4d8d/0x4ea0 [ 794.921116][T14247] ? __x64_sys_bpf+0x78/0xc0 [ 794.921137][T14247] ? do_syscall_64+0xcd/0x490 [ 794.921160][T14247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.921198][T14247] alloc_pages_bulk_noprof+0x71c/0x1410 [ 794.921224][T14247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 794.921261][T14247] ? policy_nodemask+0xea/0x4e0 [ 794.921292][T14247] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 794.921319][T14247] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 794.921360][T14247] kasan_populate_vmalloc+0xf1/0x1f0 [ 794.921403][T14247] alloc_vmap_area+0x959/0x29c0 [ 794.921448][T14247] ? __pfx_alloc_vmap_area+0x10/0x10 [ 794.921488][T14247] __get_vm_area_node+0x1ca/0x330 [ 794.921526][T14247] __vmalloc_node_range_noprof+0x271/0x14b0 [ 794.921561][T14247] ? bloom_map_alloc+0x302/0x4c0 [ 794.921583][T14247] ? __kernel_text_address+0xd/0x40 [ 794.921619][T14247] ? unwind_get_return_address+0x59/0xa0 [ 794.921662][T14247] ? bloom_map_alloc+0x302/0x4c0 [ 794.921691][T14247] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 794.921722][T14247] ? __pfx_aa_get_newest_label+0x10/0x10 [ 794.921756][T14247] ? trace_cap_capable+0x18d/0x200 [ 794.921790][T14247] ? bloom_map_alloc+0x302/0x4c0 [ 794.921810][T14247] __bpf_map_area_alloc+0x12e/0x200 [ 794.921834][T14247] ? bloom_map_alloc+0x302/0x4c0 [ 794.921861][T14247] bloom_map_alloc+0x302/0x4c0 [ 794.921887][T14247] map_create+0x592/0x1db0 [ 794.921933][T14247] ? __pfx_map_create+0x10/0x10 [ 794.921963][T14247] ? __might_fault+0xe3/0x190 [ 794.921986][T14247] ? __might_fault+0xe3/0x190 [ 794.922007][T14247] ? __might_fault+0x13b/0x190 [ 794.922043][T14247] __sys_bpf+0x4d8d/0x4ea0 [ 794.922070][T14247] ? __pfx___sys_bpf+0x10/0x10 [ 794.922099][T14247] ? ksys_write+0x190/0x250 [ 794.922129][T14247] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 794.922176][T14247] ? fput+0x70/0xf0 [ 794.922203][T14247] ? ksys_write+0x1ac/0x250 [ 794.922224][T14247] ? __pfx_ksys_write+0x10/0x10 [ 794.922254][T14247] __x64_sys_bpf+0x78/0xc0 [ 794.922276][T14247] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.922300][T14247] do_syscall_64+0xcd/0x490 [ 794.922327][T14247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.922351][T14247] RIP: 0033:0x7f8cc878e9a9 [ 794.922371][T14247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.922394][T14247] RSP: 002b:00007f8cc9538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.922416][T14247] RAX: ffffffffffffffda RBX: 00007f8cc89b5fa0 RCX: 00007f8cc878e9a9 [ 794.922432][T14247] RDX: 0000000000000210 RSI: 0000200000000680 RDI: 0000000000000000 [ 794.922448][T14247] RBP: 00007f8cc9538090 R08: 0000000000000000 R09: 0000000000000000 [ 794.922462][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.922476][T14247] R13: 0000000000000000 R14: 00007f8cc89b5fa0 R15: 00007fff3dc8e778 [ 794.922509][T14247] [ 795.579595][T14249] ubi: mtd0 is already attached to ubi0 [ 795.586920][T14249] ubi0: detaching mtd0 [ 795.595805][T14249] ubi0: mtd0 is detached [ 795.848512][T12719] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 795.848553][T12719] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 795.863586][T12719] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 795.863623][T12719] Bluetooth: hci0: adv larger than maximum supported [ 795.870773][T12719] Bluetooth: hci0: Malformed LE Event: 0x0d [ 796.800018][T14264] vhci_hcd: invalid port number 16 [ 796.814862][T14264] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 797.870039][T14285] FAULT_INJECTION: forcing a failure. [ 797.870039][T14285] name failslab, interval 1, probability 0, space 0, times 0 [ 797.951954][T14285] CPU: 1 UID: 0 PID: 14285 Comm: syz.2.1691 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 797.952001][T14285] Tainted: [U]=USER [ 797.952010][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 797.952025][T14285] Call Trace: [ 797.952035][T14285] [ 797.952046][T14285] dump_stack_lvl+0x16c/0x1f0 [ 797.952082][T14285] should_fail_ex+0x512/0x640 [ 797.952109][T14285] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 797.952142][T14285] should_failslab+0xc2/0x120 [ 797.952173][T14285] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 797.952201][T14285] ? __proc_create+0xc3/0x8c0 [ 797.952228][T14285] ? __proc_create+0x2ce/0x8c0 [ 797.952262][T14285] __proc_create+0x2ce/0x8c0 [ 797.952292][T14285] ? __pfx___proc_create+0x10/0x10 [ 797.952327][T14285] ? _raw_write_unlock+0x28/0x50 [ 797.952351][T14285] ? proc_register+0x314/0x5f0 [ 797.952387][T14285] proc_create_reg+0x7d/0x180 [ 797.952418][T14285] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 797.952450][T14285] proc_create_net_single+0x86/0x170 [ 797.952483][T14285] ? __pfx_proc_create_net_single+0x10/0x10 [ 797.952527][T14285] can_init_proc+0x24a/0x4d0 [ 797.952558][T14285] can_pernet_init+0x1e4/0x370 [ 797.952588][T14285] ? __pfx_can_pernet_init+0x10/0x10 [ 797.952615][T14285] ops_init+0x1df/0x5f0 [ 797.952648][T14285] setup_net+0x1ff/0x510 [ 797.952676][T14285] ? lockdep_init_map_type+0x5c/0x280 [ 797.952711][T14285] ? __pfx_setup_net+0x10/0x10 [ 797.952743][T14285] ? debug_mutex_init+0x37/0x70 [ 797.952774][T14285] copy_net_ns+0x2a6/0x5f0 [ 797.952810][T14285] create_new_namespaces+0x3ea/0xa90 [ 797.952848][T14285] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 797.952881][T14285] ksys_unshare+0x45b/0xa40 [ 797.952922][T14285] ? __pfx_ksys_unshare+0x10/0x10 [ 797.952960][T14285] ? xfd_validate_state+0x61/0x180 [ 797.953006][T14285] __x64_sys_unshare+0x31/0x40 [ 797.953041][T14285] do_syscall_64+0xcd/0x490 [ 797.953071][T14285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.953098][T14285] RIP: 0033:0x7f702a78e9a9 [ 797.953119][T14285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.953145][T14285] RSP: 002b:00007f702b65d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 797.953170][T14285] RAX: ffffffffffffffda RBX: 00007f702a9b5fa0 RCX: 00007f702a78e9a9 [ 797.953187][T14285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 797.953203][T14285] RBP: 00007f702a810d69 R08: 0000000000000000 R09: 0000000000000000 [ 797.953218][T14285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.953234][T14285] R13: 0000000000000000 R14: 00007f702a9b5fa0 R15: 00007fffcd29e298 [ 797.953269][T14285] [ 798.713137][T14273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1687'. [ 798.752537][T14286] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[14286] [ 799.684354][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 799.684391][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 799.701472][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 799.701510][T12719] Bluetooth: hci2: adv larger than maximum supported [ 799.730866][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 799.982170][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 800.613357][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 800.613382][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 800.629700][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 800.629727][T12719] Bluetooth: hci2: adv larger than maximum supported [ 800.636846][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 800.853126][T14329] FAULT_INJECTION: forcing a failure. [ 800.853126][T14329] name failslab, interval 1, probability 0, space 0, times 0 [ 800.902416][T14329] CPU: 0 UID: 0 PID: 14329 Comm: syz.2.1702 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 800.902462][T14329] Tainted: [U]=USER [ 800.902471][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 800.902487][T14329] Call Trace: [ 800.902494][T14329] [ 800.902505][T14329] dump_stack_lvl+0x16c/0x1f0 [ 800.902537][T14329] should_fail_ex+0x512/0x640 [ 800.902563][T14329] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 800.902595][T14329] should_failslab+0xc2/0x120 [ 800.902622][T14329] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 800.902647][T14329] ? __proc_create+0xc3/0x8c0 [ 800.902681][T14329] ? __proc_create+0x2ce/0x8c0 [ 800.902715][T14329] __proc_create+0x2ce/0x8c0 [ 800.902744][T14329] ? __pfx___proc_create+0x10/0x10 [ 800.902779][T14329] ? _raw_write_unlock+0x28/0x50 [ 800.902801][T14329] ? proc_register+0x314/0x5f0 [ 800.902833][T14329] proc_create_reg+0x7d/0x180 [ 800.902862][T14329] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 800.902893][T14329] proc_create_net_single+0x86/0x170 [ 800.902924][T14329] ? __pfx_proc_create_net_single+0x10/0x10 [ 800.902965][T14329] can_init_proc+0x1e1/0x4d0 [ 800.902995][T14329] can_pernet_init+0x1e4/0x370 [ 800.903025][T14329] ? __pfx_can_pernet_init+0x10/0x10 [ 800.903050][T14329] ops_init+0x1df/0x5f0 [ 800.903083][T14329] setup_net+0x1ff/0x510 [ 800.903110][T14329] ? lockdep_init_map_type+0x5c/0x280 [ 800.903146][T14329] ? __pfx_setup_net+0x10/0x10 [ 800.903177][T14329] ? debug_mutex_init+0x37/0x70 [ 800.903207][T14329] copy_net_ns+0x2a6/0x5f0 [ 800.903242][T14329] create_new_namespaces+0x3ea/0xa90 [ 800.903279][T14329] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 800.903310][T14329] ksys_unshare+0x45b/0xa40 [ 800.903344][T14329] ? __pfx_ksys_unshare+0x10/0x10 [ 800.903378][T14329] ? xfd_validate_state+0x61/0x180 [ 800.903421][T14329] __x64_sys_unshare+0x31/0x40 [ 800.903454][T14329] do_syscall_64+0xcd/0x490 [ 800.903482][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.903507][T14329] RIP: 0033:0x7f702a78e9a9 [ 800.903529][T14329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.903554][T14329] RSP: 002b:00007f702b65d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 800.903578][T14329] RAX: ffffffffffffffda RBX: 00007f702a9b5fa0 RCX: 00007f702a78e9a9 [ 800.903595][T14329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 800.903611][T14329] RBP: 00007f702a810d69 R08: 0000000000000000 R09: 0000000000000000 [ 800.903628][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.903644][T14329] R13: 0000000000000000 R14: 00007f702a9b5fa0 R15: 00007fffcd29e298 [ 800.903687][T14329] [ 801.748004][T14341] random: crng reseeded on system resumption [ 801.769111][T14337] netlink: 'syz.0.1705': attribute type 33 has an invalid length. [ 801.792327][T14337] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1705'. [ 802.497441][T14351] FAULT_INJECTION: forcing a failure. [ 802.497441][T14351] name fail_futex, interval 1, probability 0, space 0, times 0 [ 802.551720][T14351] CPU: 1 UID: 0 PID: 14351 Comm: syz.3.1707 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 802.551769][T14351] Tainted: [U]=USER [ 802.551779][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.551799][T14351] Call Trace: [ 802.551809][T14351] [ 802.551821][T14351] dump_stack_lvl+0x16c/0x1f0 [ 802.551857][T14351] should_fail_ex+0x512/0x640 [ 802.551891][T14351] get_futex_key+0x1d0/0x1540 [ 802.551928][T14351] ? __pfx_get_futex_key+0x10/0x10 [ 802.551956][T14351] ? plist_check_head+0xa3/0x150 [ 802.551990][T14351] ? find_held_lock+0x2b/0x80 [ 802.552029][T14351] futex_wake+0xe7/0x4e0 [ 802.552067][T14351] ? __pfx_futex_wake+0x10/0x10 [ 802.552105][T14351] ? kmem_cache_free+0x2d1/0x4d0 [ 802.552130][T14351] ? find_held_lock+0x2b/0x80 [ 802.552165][T14351] do_futex+0x1e3/0x350 [ 802.552197][T14351] ? __pfx_do_futex+0x10/0x10 [ 802.552237][T14351] __x64_sys_futex+0x1e0/0x4c0 [ 802.552271][T14351] ? fdget_pos+0x2b8/0x370 [ 802.552296][T14351] ? __pfx___x64_sys_futex+0x10/0x10 [ 802.552326][T14351] ? ksys_read+0x1ac/0x250 [ 802.552350][T14351] ? __pfx_ksys_read+0x10/0x10 [ 802.552386][T14351] do_syscall_64+0xcd/0x490 [ 802.552414][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.552440][T14351] RIP: 0033:0x7fb21938e9a9 [ 802.552463][T14351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.552483][T14351] RSP: 002b:00007fb21a2c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 802.552499][T14351] RAX: ffffffffffffffda RBX: 00007fb2195b5fa8 RCX: 00007fb21938e9a9 [ 802.552509][T14351] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2195b5fac [ 802.552518][T14351] RBP: 00007fb2195b5fa0 R08: 00007fb21a2c8000 R09: 0000000000000000 [ 802.552529][T14351] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb2195b5fac [ 802.552539][T14351] R13: 0000000000000000 R14: 00007ffcf5954b90 R15: 00007ffcf5954c78 [ 802.552558][T14351] [ 802.853665][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 804.193081][T14383] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 805.216921][T14386] random: crng reseeded on system resumption [ 805.268830][T14387] FAULT_INJECTION: forcing a failure. [ 805.268830][T14387] name failslab, interval 1, probability 0, space 0, times 0 [ 805.290305][T14387] CPU: 1 UID: 0 PID: 14387 Comm: syz.2.1714 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 805.290350][T14387] Tainted: [U]=USER [ 805.290359][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 805.290374][T14387] Call Trace: [ 805.290384][T14387] [ 805.290395][T14387] dump_stack_lvl+0x16c/0x1f0 [ 805.290436][T14387] should_fail_ex+0x512/0x640 [ 805.290464][T14387] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 805.290498][T14387] should_failslab+0xc2/0x120 [ 805.290529][T14387] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 805.290556][T14387] ? __proc_create+0xc3/0x8c0 [ 805.290583][T14387] ? __proc_create+0x2ce/0x8c0 [ 805.290617][T14387] __proc_create+0x2ce/0x8c0 [ 805.290647][T14387] ? __pfx___proc_create+0x10/0x10 [ 805.290681][T14387] ? _raw_write_unlock+0x28/0x50 [ 805.290704][T14387] ? proc_register+0x314/0x5f0 [ 805.290737][T14387] proc_create_reg+0x7d/0x180 [ 805.290767][T14387] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 805.290800][T14387] proc_create_net_single+0x86/0x170 [ 805.290830][T14387] ? __pfx_proc_create_net_single+0x10/0x10 [ 805.290873][T14387] can_init_proc+0x2b3/0x4d0 [ 805.290904][T14387] can_pernet_init+0x1e4/0x370 [ 805.290934][T14387] ? __pfx_can_pernet_init+0x10/0x10 [ 805.290960][T14387] ops_init+0x1df/0x5f0 [ 805.290994][T14387] setup_net+0x1ff/0x510 [ 805.291021][T14387] ? lockdep_init_map_type+0x5c/0x280 [ 805.291059][T14387] ? __pfx_setup_net+0x10/0x10 [ 805.291093][T14387] ? debug_mutex_init+0x37/0x70 [ 805.291125][T14387] copy_net_ns+0x2a6/0x5f0 [ 805.291160][T14387] create_new_namespaces+0x3ea/0xa90 [ 805.291218][T14387] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 805.291254][T14387] ksys_unshare+0x45b/0xa40 [ 805.291291][T14387] ? __pfx_ksys_unshare+0x10/0x10 [ 805.291330][T14387] ? xfd_validate_state+0x61/0x180 [ 805.291375][T14387] __x64_sys_unshare+0x31/0x40 [ 805.291408][T14387] do_syscall_64+0xcd/0x490 [ 805.291446][T14387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.291474][T14387] RIP: 0033:0x7f702a78e9a9 [ 805.291497][T14387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.291522][T14387] RSP: 002b:00007f702b65d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 805.291547][T14387] RAX: ffffffffffffffda RBX: 00007f702a9b5fa0 RCX: 00007f702a78e9a9 [ 805.291565][T14387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 805.291582][T14387] RBP: 00007f702a810d69 R08: 0000000000000000 R09: 0000000000000000 [ 805.291599][T14387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.291616][T14387] R13: 0000000000000000 R14: 00007f702a9b5fa0 R15: 00007fffcd29e298 [ 805.291653][T14387] [ 806.299833][T12719] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 808.703294][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.709748][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.273321][T14443] FAULT_INJECTION: forcing a failure. [ 809.273321][T14443] name failslab, interval 1, probability 0, space 0, times 0 [ 809.311601][T14443] CPU: 0 UID: 0 PID: 14443 Comm: syz.3.1728 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 809.311645][T14443] Tainted: [U]=USER [ 809.311654][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.311669][T14443] Call Trace: [ 809.311677][T14443] [ 809.311689][T14443] dump_stack_lvl+0x16c/0x1f0 [ 809.311720][T14443] should_fail_ex+0x512/0x640 [ 809.311751][T14443] should_failslab+0xc2/0x120 [ 809.311781][T14443] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 809.311810][T14443] ? skb_clone+0x190/0x3f0 [ 809.311842][T14443] skb_clone+0x190/0x3f0 [ 809.311870][T14443] netlink_deliver_tap+0xabd/0xd30 [ 809.311908][T14443] netlink_unicast+0x62f/0x850 [ 809.311944][T14443] ? __pfx_netlink_unicast+0x10/0x10 [ 809.311985][T14443] netlink_sendmsg+0x8d1/0xdd0 [ 809.312021][T14443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.312065][T14443] ____sys_sendmsg+0xa95/0xc70 [ 809.312103][T14443] ? copy_msghdr_from_user+0x10a/0x160 [ 809.312129][T14443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.312180][T14443] ___sys_sendmsg+0x134/0x1d0 [ 809.312209][T14443] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.312231][T14443] ? __lock_acquire+0x622/0x1c90 [ 809.312302][T14443] __sys_sendmsg+0x16d/0x220 [ 809.312335][T14443] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.312386][T14443] do_syscall_64+0xcd/0x490 [ 809.312416][T14443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.312443][T14443] RIP: 0033:0x7fb21938e9a9 [ 809.312465][T14443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.312490][T14443] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.312514][T14443] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 809.312532][T14443] RDX: 00000000000000d0 RSI: 0000200000000040 RDI: 0000000000000003 [ 809.312548][T14443] RBP: 00007fb21a2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 809.312564][T14443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.312579][T14443] R13: 0000000000000000 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 809.312613][T14443] [ 809.530663][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.323519][T12719] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 812.323558][T12719] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 812.340556][T12719] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 812.340599][T12719] Bluetooth: hci1: adv larger than maximum supported [ 812.347798][T12719] Bluetooth: hci1: Malformed LE Event: 0x0d [ 812.508718][T14488] FAULT_INJECTION: forcing a failure. [ 812.508718][T14488] name failslab, interval 1, probability 0, space 0, times 0 [ 812.556801][T14488] CPU: 0 UID: 0 PID: 14488 Comm: syz.3.1740 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 812.556849][T14488] Tainted: [U]=USER [ 812.556860][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 812.556877][T14488] Call Trace: [ 812.556886][T14488] [ 812.556896][T14488] dump_stack_lvl+0x16c/0x1f0 [ 812.556930][T14488] should_fail_ex+0x512/0x640 [ 812.556957][T14488] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 812.556991][T14488] should_failslab+0xc2/0x120 [ 812.557021][T14488] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 812.557051][T14488] ? lockdep_init_map_type+0x5c/0x280 [ 812.557096][T14488] ? __d_alloc+0x31/0xaa0 [ 812.557130][T14488] __d_alloc+0x31/0xaa0 [ 812.557163][T14488] d_alloc_pseudo+0x1c/0xc0 [ 812.557196][T14488] alloc_file_pseudo+0xcf/0x230 [ 812.557232][T14488] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 812.557265][T14488] ? alloc_fd+0x471/0x7d0 [ 812.557307][T14488] sock_alloc_file+0x50/0x210 [ 812.557339][T14488] __sys_socket+0x1c0/0x260 [ 812.557373][T14488] ? fput+0x70/0xf0 [ 812.557400][T14488] ? __pfx___sys_socket+0x10/0x10 [ 812.557435][T14488] ? xfd_validate_state+0x61/0x180 [ 812.557467][T14488] ? __pfx_ksys_write+0x10/0x10 [ 812.557499][T14488] __x64_sys_socket+0x72/0xb0 [ 812.557532][T14488] ? lockdep_hardirqs_on+0x7c/0x110 [ 812.557557][T14488] do_syscall_64+0xcd/0x490 [ 812.557587][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.557615][T14488] RIP: 0033:0x7fb21938e9a9 [ 812.557637][T14488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.557661][T14488] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 812.557686][T14488] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 812.557705][T14488] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 812.557722][T14488] RBP: 00007fb219410d69 R08: 0000000000000000 R09: 0000000000000000 [ 812.557739][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.557755][T14488] R13: 0000000000000000 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 812.557790][T14488] [ 812.782198][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.369239][T14537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1751'. [ 818.224043][T12719] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 818.224085][T12719] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 818.240611][T12719] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 818.240650][T12719] Bluetooth: hci1: adv larger than maximum supported [ 818.248031][T12719] Bluetooth: hci1: Malformed LE Event: 0x0d [ 820.652793][T14588] vhci_hcd: invalid port number 16 [ 820.658052][T14588] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 822.601755][T14607] sp0: Synchronizing with TNC [ 824.988866][T14629] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[14629] [ 825.738251][T14639] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[14639] [ 826.205772][T14643] random: crng reseeded on system resumption [ 828.416659][T14666] sp0: Synchronizing with TNC [ 829.111467][T14682] vhci_hcd: invalid port number 16 [ 829.128466][T14682] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 831.683118][T14705] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[14705] [ 834.074830][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 834.074857][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 834.089691][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 834.089715][T12719] Bluetooth: hci2: adv larger than maximum supported [ 834.097409][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 835.773835][T14742] FAULT_INJECTION: forcing a failure. [ 835.773835][T14742] name failslab, interval 1, probability 0, space 0, times 0 [ 835.800846][T14742] CPU: 0 UID: 0 PID: 14742 Comm: syz.3.1791 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 835.800874][T14742] Tainted: [U]=USER [ 835.800879][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 835.800889][T14742] Call Trace: [ 835.800895][T14742] [ 835.800902][T14742] dump_stack_lvl+0x16c/0x1f0 [ 835.800924][T14742] should_fail_ex+0x512/0x640 [ 835.800940][T14742] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 835.800958][T14742] should_failslab+0xc2/0x120 [ 835.800975][T14742] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 835.800989][T14742] ? bpf_ksym_find+0x124/0x1c0 [ 835.801005][T14742] ? __kernfs_new_node+0xd2/0x8e0 [ 835.801031][T14742] __kernfs_new_node+0xd2/0x8e0 [ 835.801056][T14742] ? __pfx___kernfs_new_node+0x10/0x10 [ 835.801083][T14742] ? find_held_lock+0x2b/0x80 [ 835.801099][T14742] ? kernfs_root+0xee/0x2a0 [ 835.801116][T14742] kernfs_new_node+0x13c/0x1e0 [ 835.801132][T14742] ? kasan_save_stack+0x42/0x60 [ 835.801148][T14742] kernfs_create_dir_ns+0x4c/0x1a0 [ 835.801167][T14742] sysfs_create_dir_ns+0x13a/0x2b0 [ 835.801189][T14742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 835.801215][T14742] ? kfree+0x24f/0x4d0 [ 835.801239][T14742] kobject_add_internal+0x2c4/0x9b0 [ 835.801260][T14742] kobject_add+0x16e/0x240 [ 835.801276][T14742] ? __pfx_kobject_add+0x10/0x10 [ 835.801304][T14742] kobject_create_and_add+0x7e/0xf0 [ 835.801322][T14742] __add_disk+0x676/0xf00 [ 835.801337][T14742] ? find_held_lock+0x2b/0x80 [ 835.801353][T14742] add_disk_fwnode+0x3f8/0x5d0 [ 835.801370][T14742] zram_add+0x4c8/0x700 [ 835.801391][T14742] ? __pfx_zram_add+0x10/0x10 [ 835.801423][T14742] ? find_held_lock+0x2b/0x80 [ 835.801441][T14742] ? __pfx_hot_add_show+0x10/0x10 [ 835.801460][T14742] ? __pfx_class_attr_show+0x10/0x10 [ 835.801485][T14742] hot_add_show+0x21/0x80 [ 835.801506][T14742] class_attr_show+0x72/0xa0 [ 835.801526][T14742] sysfs_kf_seq_show+0x216/0x3e0 [ 835.801551][T14742] seq_read_iter+0x506/0x12c0 [ 835.801582][T14742] kernfs_fop_read_iter+0x40f/0x5a0 [ 835.801600][T14742] ? rw_verify_area+0xcf/0x680 [ 835.801623][T14742] vfs_read+0x8bc/0xc60 [ 835.801639][T14742] ? __pfx___mutex_lock+0x10/0x10 [ 835.801653][T14742] ? __pfx_vfs_read+0x10/0x10 [ 835.801680][T14742] ksys_read+0x12a/0x250 [ 835.801693][T14742] ? __pfx_ksys_read+0x10/0x10 [ 835.801713][T14742] do_syscall_64+0xcd/0x490 [ 835.801729][T14742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.801744][T14742] RIP: 0033:0x7fb21938e9a9 [ 835.801757][T14742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.801772][T14742] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 835.801786][T14742] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 835.801796][T14742] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 835.801805][T14742] RBP: 00007fb219410d69 R08: 0000000000000000 R09: 0000000000000000 [ 835.801814][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.801823][T14742] R13: 0000000000000000 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 835.801843][T14742] [ 835.801851][T14742] kobject: kobject_add_internal failed for holders (error: -12 parent: zram1) [ 836.203027][T14746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1791'. [ 836.268224][T14742] kobject: kobject_create_and_add: kobject_add error: -12 [ 837.153462][T14753] FAULT_INJECTION: forcing a failure. [ 837.153462][T14753] name failslab, interval 1, probability 0, space 0, times 0 [ 837.224630][T14753] CPU: 1 UID: 0 PID: 14753 Comm: syz.1.1794 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 837.224679][T14753] Tainted: [U]=USER [ 837.224689][T14753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 837.224705][T14753] Call Trace: [ 837.224715][T14753] [ 837.224726][T14753] dump_stack_lvl+0x16c/0x1f0 [ 837.224761][T14753] should_fail_ex+0x512/0x640 [ 837.224790][T14753] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 837.224825][T14753] should_failslab+0xc2/0x120 [ 837.224855][T14753] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 837.224887][T14753] ? rhashtable_init_noprof+0x4ed/0x7e0 [ 837.224913][T14753] ? rhashtable_init_noprof+0x55e/0x7e0 [ 837.224938][T14753] ? nf_ct_net_init+0x11c/0x370 [ 837.224981][T14753] kmemdup_noprof+0x29/0x60 [ 837.225009][T14753] nf_ct_net_init+0x11c/0x370 [ 837.225046][T14753] ? __pfx_nf_ct_net_init+0x10/0x10 [ 837.225097][T14753] ops_init+0x1df/0x5f0 [ 837.225134][T14753] setup_net+0x1ff/0x510 [ 837.225163][T14753] ? lockdep_init_map_type+0x5c/0x280 [ 837.225203][T14753] ? __pfx_setup_net+0x10/0x10 [ 837.225234][T14753] ? debug_mutex_init+0x37/0x70 [ 837.225266][T14753] copy_net_ns+0x2a6/0x5f0 [ 837.225302][T14753] create_new_namespaces+0x3ea/0xa90 [ 837.225342][T14753] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 837.225374][T14753] ksys_unshare+0x45b/0xa40 [ 837.225409][T14753] ? __pfx_ksys_unshare+0x10/0x10 [ 837.225444][T14753] ? xfd_validate_state+0x61/0x180 [ 837.225489][T14753] __x64_sys_unshare+0x31/0x40 [ 837.225522][T14753] do_syscall_64+0xcd/0x490 [ 837.225551][T14753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.225578][T14753] RIP: 0033:0x7fce4638e9a9 [ 837.225600][T14753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.225624][T14753] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 837.225650][T14753] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 837.225669][T14753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 837.225686][T14753] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 837.225703][T14753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.225719][T14753] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 837.225755][T14753] [ 841.652215][T12719] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 841.652254][T12719] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 841.667375][T12719] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 841.667400][T12719] Bluetooth: hci0: adv larger than maximum supported [ 841.675169][T12719] Bluetooth: hci0: Malformed LE Event: 0x0d [ 842.501386][T14808] vhci_hcd: invalid port number 16 [ 842.543130][T14808] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 844.688968][T14839] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 847.532291][T14871] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1819'. [ 851.208583][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 851.208622][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 851.224602][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 851.224628][T12719] Bluetooth: hci2: adv larger than maximum supported [ 851.231711][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 852.774303][T12719] Bluetooth: hci1: unexpected event 0x3d length: 3 < 14 [ 853.752997][T14924] ubi0: attaching mtd0 [ 853.797031][T14924] ubi0 error: validate_ec_hdr: bad VID header offset 64, expected 3965 [ 853.805388][T14924] ubi0 error: validate_ec_hdr: bad EC header [ 853.927329][T14924] Erase counter header dump: [ 853.932180][T14924] magic 0x55424923 [ 853.937150][T14924] version 1 [ 853.941045][T14924] ec 1 [ 853.944920][T14924] vid_hdr_offset 64 [ 853.982635][T14924] data_offset 128 [ 853.994331][T14924] image_seq 813333700 [ 854.000425][T14924] hdr_crc 0x7169ac5a [ 854.040751][T14924] erase counter header hexdump: [ 854.137904][T14924] CPU: 0 UID: 0 PID: 14924 Comm: syz.1.1827 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 854.137926][T14924] Tainted: [U]=USER [ 854.137932][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 854.137941][T14924] Call Trace: [ 854.137947][T14924] [ 854.137953][T14924] dump_stack_lvl+0x16c/0x1f0 [ 854.137973][T14924] validate_ec_hdr+0x28c/0x330 [ 854.137991][T14924] ubi_io_read_ec_hdr+0x63b/0x6c0 [ 854.138007][T14924] ubi_attach+0x5e7/0x4bd0 [ 854.138032][T14924] ? __pfx_ubi_msg+0x10/0x10 [ 854.138052][T14924] ? __pfx_ubi_attach+0x10/0x10 [ 854.138072][T14924] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 854.138092][T14924] ? __vmalloc_node_noprof+0xad/0xf0 [ 854.138133][T14924] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 854.138163][T14924] ubi_attach_mtd_dev+0x15a7/0x35d0 [ 854.138192][T14924] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 854.138211][T14924] ? __pfx_get_mtd_device+0x10/0x10 [ 854.138231][T14924] ctrl_cdev_ioctl+0x337/0x3d0 [ 854.138251][T14924] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 854.138275][T14924] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 854.138295][T14924] __x64_sys_ioctl+0x18e/0x210 [ 854.138316][T14924] do_syscall_64+0xcd/0x490 [ 854.138333][T14924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.138348][T14924] RIP: 0033:0x7fce4638e9a9 [ 854.138361][T14924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.138375][T14924] RSP: 002b:00007fce47272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.138389][T14924] RAX: ffffffffffffffda RBX: 00007fce465b6160 RCX: 00007fce4638e9a9 [ 854.138400][T14924] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 000000000000000c [ 854.138410][T14924] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 854.138419][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.138428][T14924] R13: 0000000000000000 R14: 00007fce465b6160 R15: 00007ffd598bbc78 [ 854.138447][T14924] [ 854.138454][T14924] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 854.792353][T14924] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 856.903014][T14961] random: crng reseeded on system resumption [ 856.931895][T14961] FAULT_INJECTION: forcing a failure. [ 856.931895][T14961] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 857.016585][T14961] CPU: 0 UID: 0 PID: 14961 Comm: syz.2.1832 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 857.016633][T14961] Tainted: [U]=USER [ 857.016642][T14961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 857.016659][T14961] Call Trace: [ 857.016668][T14961] [ 857.016679][T14961] dump_stack_lvl+0x16c/0x1f0 [ 857.016719][T14961] should_fail_ex+0x512/0x640 [ 857.016753][T14961] should_fail_alloc_page+0xe7/0x130 [ 857.016787][T14961] prepare_alloc_pages+0x3c2/0x610 [ 857.016822][T14961] ? rcu_is_watching+0x12/0xc0 [ 857.016855][T14961] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 857.016895][T14961] ? stack_trace_save+0x8e/0xc0 [ 857.016924][T14961] ? __pfx_stack_trace_save+0x10/0x10 [ 857.016953][T14961] ? stack_depot_save_flags+0x28/0xa40 [ 857.016983][T14961] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 857.017016][T14961] ? kasan_save_stack+0x42/0x60 [ 857.017041][T14961] ? kasan_save_stack+0x33/0x60 [ 857.017071][T14961] ? do_dentry_open+0x744/0x1c10 [ 857.017096][T14961] ? vfs_open+0x82/0x3f0 [ 857.017124][T14961] ? path_openat+0x1de4/0x2cb0 [ 857.017147][T14961] ? do_filp_open+0x20b/0x470 [ 857.017170][T14961] ? do_sys_openat2+0x11b/0x1d0 [ 857.017200][T14961] ? __x64_sys_openat+0x174/0x210 [ 857.017231][T14961] ? do_syscall_64+0xcd/0x490 [ 857.017256][T14961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.017286][T14961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 857.017322][T14961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 857.017361][T14961] ? policy_nodemask+0xea/0x4e0 [ 857.017395][T14961] alloc_pages_mpol+0x1fb/0x550 [ 857.017427][T14961] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 857.017468][T14961] alloc_pages_noprof+0x131/0x390 [ 857.017500][T14961] get_zeroed_page_noprof+0x18/0xb0 [ 857.017533][T14961] get_image_page+0x18/0x190 [ 857.017561][T14961] alloc_rtree_node+0x3c/0xb0 [ 857.017590][T14961] memory_bm_create+0x519/0x810 [ 857.017637][T14961] create_basic_memory_bitmaps+0x10b/0x320 [ 857.017675][T14961] snapshot_open+0x235/0x2b0 [ 857.017710][T14961] ? __pfx_snapshot_open+0x10/0x10 [ 857.017743][T14961] misc_open+0x35d/0x420 [ 857.017782][T14961] ? __pfx_misc_open+0x10/0x10 [ 857.017819][T14961] chrdev_open+0x231/0x6a0 [ 857.017846][T14961] ? __pfx_apparmor_file_open+0x10/0x10 [ 857.017884][T14961] ? __pfx_chrdev_open+0x10/0x10 [ 857.017915][T14961] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 857.017958][T14961] do_dentry_open+0x744/0x1c10 [ 857.017986][T14961] ? __pfx_chrdev_open+0x10/0x10 [ 857.018022][T14961] vfs_open+0x82/0x3f0 [ 857.018059][T14961] path_openat+0x1de4/0x2cb0 [ 857.018098][T14961] ? __pfx_path_openat+0x10/0x10 [ 857.018127][T14961] ? __lock_acquire+0xb8a/0x1c90 [ 857.018165][T14961] do_filp_open+0x20b/0x470 [ 857.018191][T14961] ? __pfx_do_filp_open+0x10/0x10 [ 857.018247][T14961] ? alloc_fd+0x471/0x7d0 [ 857.018295][T14961] do_sys_openat2+0x11b/0x1d0 [ 857.018327][T14961] ? __pfx_do_sys_openat2+0x10/0x10 [ 857.018376][T14961] __x64_sys_openat+0x174/0x210 [ 857.018410][T14961] ? __pfx___x64_sys_openat+0x10/0x10 [ 857.018461][T14961] do_syscall_64+0xcd/0x490 [ 857.018491][T14961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.018515][T14961] RIP: 0033:0x7f702a78e9a9 [ 857.018535][T14961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.018558][T14961] RSP: 002b:00007f702b65d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 857.018582][T14961] RAX: ffffffffffffffda RBX: 00007f702a9b5fa0 RCX: 00007f702a78e9a9 [ 857.018596][T14961] RDX: 0000000000180b03 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 857.018610][T14961] RBP: 00007f702a810d69 R08: 0000000000000000 R09: 0000000000000000 [ 857.018624][T14961] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 857.018638][T14961] R13: 0000000000000000 R14: 00007f702a9b5fa0 R15: 00007fffcd29e298 [ 857.018668][T14961] [ 859.206914][T14978] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[14978] [ 861.653538][T12719] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 861.653578][T12719] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 861.668588][T12719] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 861.668612][T12719] Bluetooth: hci3: adv larger than maximum supported [ 861.675708][T12719] Bluetooth: hci3: Malformed LE Event: 0x0d [ 862.432543][T12719] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 862.432576][T12719] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 862.448348][T12719] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 862.448384][T12719] Bluetooth: hci1: Malformed LE Event: 0x0d [ 863.112351][T15024] FAULT_INJECTION: forcing a failure. [ 863.112351][T15024] name failslab, interval 1, probability 0, space 0, times 0 [ 863.112451][T15024] CPU: 0 UID: 0 PID: 15024 Comm: syz.2.1847 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 863.112476][T15024] Tainted: [U]=USER [ 863.112481][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 863.112490][T15024] Call Trace: [ 863.112496][T15024] [ 863.112503][T15024] dump_stack_lvl+0x16c/0x1f0 [ 863.112524][T15024] should_fail_ex+0x512/0x640 [ 863.112539][T15024] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 863.112566][T15024] should_failslab+0xc2/0x120 [ 863.112583][T15024] __kmalloc_cache_noprof+0x6a/0x3e0 [ 863.112604][T15024] ? allocate_file_region_entries+0x15b/0x620 [ 863.112620][T15024] ? allocate_file_region_entries+0x1a0/0x620 [ 863.112639][T15024] allocate_file_region_entries+0x1a0/0x620 [ 863.112658][T15024] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 863.112679][T15024] region_chg+0x85/0x140 [ 863.112695][T15024] __vma_reservation_common+0x43b/0x740 [ 863.112712][T15024] ? __pfx___vma_reservation_common+0x10/0x10 [ 863.112728][T15024] ? __pfx___might_resched+0x10/0x10 [ 863.112744][T15024] ? folio_zero_user+0x1da/0x7c0 [ 863.112769][T15024] hugetlb_fault+0x1d4e/0x3070 [ 863.112794][T15024] ? __pfx_hugetlb_fault+0x10/0x10 [ 863.112823][T15024] ? find_vma+0xbf/0x140 [ 863.112840][T15024] ? __pfx_find_vma+0x10/0x10 [ 863.112859][T15024] handle_mm_fault+0xbfa/0xd10 [ 863.112882][T15024] ? __pkru_allows_pkey+0x51/0xb0 [ 863.112903][T15024] do_user_addr_fault+0x7a6/0x1370 [ 863.112925][T15024] ? rcu_is_watching+0x12/0xc0 [ 863.112942][T15024] exc_page_fault+0x5c/0xb0 [ 863.112956][T15024] asm_exc_page_fault+0x26/0x30 [ 863.112970][T15024] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 863.112990][T15024] Code: e9 84 11 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 11 04 00 66 66 2e 0f [ 863.113005][T15024] RSP: 0018:ffffc9000b657db0 EFLAGS: 00050206 [ 863.113017][T15024] RAX: 000000000000002f RBX: 0000000000000005 RCX: 0000000000000005 [ 863.113026][T15024] RDX: ffffed100f482ca0 RSI: ffff88807a4164fb RDI: 0000000000000000 [ 863.113035][T15024] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100f482c9f [ 863.113044][T15024] R10: ffff88807a4164ff R11: 0000000000000001 R12: ffff88807a4164fb [ 863.113053][T15024] R13: 0000000000000005 R14: 00007ffffffff000 R15: 0000000000000000 [ 863.113072][T15024] _copy_to_user+0xbb/0xd0 [ 863.113091][T15024] __do_sys_getcwd+0x483/0x930 [ 863.113114][T15024] ? __pfx___do_sys_getcwd+0x10/0x10 [ 863.113133][T15024] ? xfd_validate_state+0x61/0x180 [ 863.113153][T15024] ? __pfx_ksys_write+0x10/0x10 [ 863.113174][T15024] do_syscall_64+0xcd/0x490 [ 863.113190][T15024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.113206][T15024] RIP: 0033:0x7f702a78e9a9 [ 863.113230][T15024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.113245][T15024] RSP: 002b:00007f702b65d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 863.113259][T15024] RAX: ffffffffffffffda RBX: 00007f702a9b5fa0 RCX: 00007f702a78e9a9 [ 863.113270][T15024] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 863.113279][T15024] RBP: 00007f702a810d69 R08: 0000000000000000 R09: 0000000000000000 [ 863.113288][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.113297][T15024] R13: 0000000000000000 R14: 00007f702a9b5fa0 R15: 00007fffcd29e298 [ 863.113317][T15024] [ 863.943793][T15037] random: crng reseeded on system resumption [ 863.944130][T15037] FAULT_INJECTION: forcing a failure. [ 863.944130][T15037] name failslab, interval 1, probability 0, space 0, times 0 [ 863.944270][T15037] CPU: 0 UID: 0 PID: 15037 Comm: syz.2.1850 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 863.944308][T15037] Tainted: [U]=USER [ 863.944318][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 863.944332][T15037] Call Trace: [ 863.944341][T15037] [ 863.944351][T15037] dump_stack_lvl+0x116/0x1f0 [ 863.944382][T15037] should_fail_ex+0x512/0x640 [ 863.944422][T15037] should_failslab+0xc2/0x120 [ 863.944451][T15037] __kmalloc_cache_noprof+0x6a/0x3e0 [ 863.944490][T15037] ? alloc_fw_cache_entry+0x3f/0xd0 [ 863.944528][T15037] ? __pfx_fw_name_devm_release+0x10/0x10 [ 863.944564][T15037] alloc_fw_cache_entry+0x3f/0xd0 [ 863.944600][T15037] dev_create_fw_entry+0x3d/0x150 [ 863.944636][T15037] ? __pfx_fw_name_devm_release+0x10/0x10 [ 863.944669][T15037] devres_for_each_res+0x173/0x1d0 [ 863.944698][T15037] ? __pfx_devm_name_match+0x10/0x10 [ 863.944728][T15037] ? __pfx_dev_create_fw_entry+0x10/0x10 [ 863.944766][T15037] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 863.944803][T15037] dev_cache_fw_image+0xa2/0x490 [ 863.944841][T15037] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 863.944883][T15037] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 863.944920][T15037] dpm_for_each_dev+0x5d/0xb0 [ 863.944954][T15037] fw_pm_notify+0x81/0x150 [ 863.944986][T15037] notifier_call_chain+0xb9/0x410 [ 863.945014][T15037] ? __pfx_fw_pm_notify+0x10/0x10 [ 863.945056][T15037] blocking_notifier_call_chain_robust+0xc8/0x160 [ 863.945090][T15037] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 863.945135][T15037] pm_notifier_call_chain_robust+0x27/0x60 [ 863.945170][T15037] snapshot_open+0x218/0x2b0 [ 863.945199][T15037] ? __pfx_snapshot_open+0x10/0x10 [ 863.945231][T15037] misc_open+0x35d/0x420 [ 863.945266][T15037] ? __pfx_misc_open+0x10/0x10 [ 863.945300][T15037] chrdev_open+0x231/0x6a0 [ 863.945326][T15037] ? __pfx_apparmor_file_open+0x10/0x10 [ 863.945363][T15037] ? __pfx_chrdev_open+0x10/0x10 [ 863.945393][T15037] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 863.945442][T15037] do_dentry_open+0x744/0x1c10 [ 863.945469][T15037] ? __pfx_chrdev_open+0x10/0x10 [ 863.945503][T15037] vfs_open+0x82/0x3f0 [ 863.945540][T15037] path_openat+0x1de4/0x2cb0 [ 863.945578][T15037] ? __pfx_path_openat+0x10/0x10 [ 863.945606][T15037] ? __lock_acquire+0xb8a/0x1c90 [ 863.945643][T15037] do_filp_open+0x20b/0x470 [ 863.945669][T15037] ? __pfx_do_filp_open+0x10/0x10 [ 863.945724][T15037] ? alloc_fd+0x471/0x7d0 [ 863.945771][T15037] do_sys_openat2+0x11b/0x1d0 [ 863.945802][T15037] ? __pfx_do_sys_openat2+0x10/0x10 [ 863.945838][T15037] ? __fget_files+0x20e/0x3c0 [ 863.945881][T15037] __x64_sys_openat+0x174/0x210 [ 863.945912][T15037] ? __pfx___x64_sys_openat+0x10/0x10 [ 863.945942][T15037] ? ksys_write+0x1ac/0x250 [ 863.945982][T15037] do_syscall_64+0xcd/0x490 [ 863.946012][T15037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.946038][T15037] RIP: 0033:0x7f702a78e9a9 [ 863.946059][T15037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.946085][T15037] RSP: 002b:00007f702b65d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 863.946109][T15037] RAX: ffffffffffffffda RBX: 00007f702a9b5fa0 RCX: 00007f702a78e9a9 [ 863.946127][T15037] RDX: 0000000000180b03 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 863.946144][T15037] RBP: 00007f702b65d090 R08: 0000000000000000 R09: 0000000000000000 [ 863.946161][T15037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.946176][T15037] R13: 0000000000000000 R14: 00007f702a9b5fa0 R15: 00007fffcd29e298 [ 863.946213][T15037] [ 864.871775][T15051] FAULT_INJECTION: forcing a failure. [ 864.871775][T15051] name failslab, interval 1, probability 0, space 0, times 0 [ 864.871806][T15051] CPU: 0 UID: 0 PID: 15051 Comm: syz.2.1852 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 864.871827][T15051] Tainted: [U]=USER [ 864.871832][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 864.871841][T15051] Call Trace: [ 864.871846][T15051] [ 864.871852][T15051] dump_stack_lvl+0x16c/0x1f0 [ 864.871872][T15051] should_fail_ex+0x512/0x640 [ 864.871886][T15051] ? __kmalloc_noprof+0xbf/0x510 [ 864.871903][T15051] ? afs_proc_addr_prefs_write+0x3e7/0x1610 [ 864.871922][T15051] should_failslab+0xc2/0x120 [ 864.871939][T15051] __kmalloc_noprof+0xd2/0x510 [ 864.871958][T15051] afs_proc_addr_prefs_write+0x3e7/0x1610 [ 864.871983][T15051] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 864.872005][T15051] ? find_held_lock+0x2b/0x80 [ 864.872020][T15051] ? __might_fault+0xe3/0x190 [ 864.872034][T15051] ? __might_fault+0xe3/0x190 [ 864.872046][T15051] ? __might_fault+0x13b/0x190 [ 864.872068][T15051] ? proc_simple_write+0x117/0x1b0 [ 864.872086][T15051] proc_simple_write+0x117/0x1b0 [ 864.872102][T15051] ? __pfx_proc_simple_write+0x10/0x10 [ 864.872121][T15051] proc_reg_write+0x23d/0x330 [ 864.872136][T15051] ? __pfx_proc_reg_write+0x10/0x10 [ 864.872158][T15051] vfs_write+0x29d/0x1150 [ 864.872175][T15051] ? __pfx___mutex_lock+0x10/0x10 [ 864.872191][T15051] ? __pfx_vfs_write+0x10/0x10 [ 864.872210][T15051] ? __fget_files+0x20e/0x3c0 [ 864.872238][T15051] ksys_write+0x12a/0x250 [ 864.872251][T15051] ? __pfx_ksys_write+0x10/0x10 [ 864.872270][T15051] do_syscall_64+0xcd/0x490 [ 864.872286][T15051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.872301][T15051] RIP: 0033:0x7f702a78e9a9 [ 864.872314][T15051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.872328][T15051] RSP: 002b:00007f702b63c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 864.872341][T15051] RAX: ffffffffffffffda RBX: 00007f702a9b6080 RCX: 00007f702a78e9a9 [ 864.872351][T15051] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000004 [ 864.872359][T15051] RBP: 00007f702b63c090 R08: 0000000000000000 R09: 0000000000000000 [ 864.872367][T15051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.872376][T15051] R13: 0000000000000000 R14: 00007f702a9b6080 R15: 00007fffcd29e298 [ 864.872398][T15051] [ 868.354063][T15084] kafs: addr_prefs: Too many elements in string [ 869.106545][T15094] zswap: compressor not available [ 869.960347][T12719] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 869.960381][T12719] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 869.960411][T12719] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 869.960440][T12719] Bluetooth: hci1: adv larger than maximum supported [ 869.960472][T12719] Bluetooth: hci1: Malformed LE Event: 0x0d [ 870.117630][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.125525][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.346084][T15131] random: crng reseeded on system resumption [ 871.748700][T15168] vhci_hcd: invalid port number 16 [ 871.748723][T15168] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 873.135293][T15183] zram: Added device: zram1 [ 873.146121][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 873.894275][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 873.894302][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 873.916544][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 873.916589][T12719] Bluetooth: hci2: adv larger than maximum supported [ 873.923693][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 874.617772][T15205] ima: policy update failed [ 874.644533][ T30] audit: type=1802 audit(4294967354.927:85): pid=15205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1876" res=0 errno=0 [ 875.331662][T15214] kafs: addr_prefs: Too many elements in string [ 875.835451][T15229] FAULT_INJECTION: forcing a failure. [ 875.835451][T15229] name failslab, interval 1, probability 0, space 0, times 0 [ 875.914449][T15229] CPU: 0 UID: 0 PID: 15229 Comm: syz.1.1880 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 875.914477][T15229] Tainted: [U]=USER [ 875.914483][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.914492][T15229] Call Trace: [ 875.914498][T15229] [ 875.914505][T15229] dump_stack_lvl+0x16c/0x1f0 [ 875.914526][T15229] should_fail_ex+0x512/0x640 [ 875.914542][T15229] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 875.914560][T15229] should_failslab+0xc2/0x120 [ 875.914577][T15229] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 875.914594][T15229] ? __proc_create+0xc3/0x8c0 [ 875.914610][T15229] ? __proc_create+0x2ce/0x8c0 [ 875.914628][T15229] __proc_create+0x2ce/0x8c0 [ 875.914644][T15229] ? __pfx___proc_create+0x10/0x10 [ 875.914658][T15229] ? _raw_write_unlock+0x28/0x50 [ 875.914671][T15229] ? proc_register+0x314/0x5f0 [ 875.914693][T15229] _proc_mkdir+0xb9/0x200 [ 875.914709][T15229] ? __pfx__proc_mkdir+0x10/0x10 [ 875.914724][T15229] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 875.914742][T15229] ? __pfx_netfilter_net_init+0x10/0x10 [ 875.914758][T15229] netfilter_net_init+0x37b/0x4b0 [ 875.914772][T15229] ? sysctl_net_init+0x27/0x30 [ 875.914788][T15229] ops_init+0x1df/0x5f0 [ 875.914812][T15229] setup_net+0x1ff/0x510 [ 875.914838][T15229] ? lockdep_init_map_type+0x5c/0x280 [ 875.914872][T15229] ? __pfx_setup_net+0x10/0x10 [ 875.914894][T15229] ? debug_mutex_init+0x37/0x70 [ 875.914911][T15229] copy_net_ns+0x2a6/0x5f0 [ 875.914931][T15229] create_new_namespaces+0x3ea/0xa90 [ 875.914954][T15229] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 875.914973][T15229] ksys_unshare+0x45b/0xa40 [ 875.914993][T15229] ? __pfx_ksys_unshare+0x10/0x10 [ 875.915012][T15229] ? xfd_validate_state+0x61/0x180 [ 875.915037][T15229] __x64_sys_unshare+0x31/0x40 [ 875.915056][T15229] do_syscall_64+0xcd/0x490 [ 875.915072][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.915087][T15229] RIP: 0033:0x7fce4638e9a9 [ 875.915101][T15229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.915116][T15229] RSP: 002b:00007fce47230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 875.915131][T15229] RAX: ffffffffffffffda RBX: 00007fce465b6320 RCX: 00007fce4638e9a9 [ 875.915140][T15229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 875.915149][T15229] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 875.915157][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.915167][T15229] R13: 0000000000000000 R14: 00007fce465b6320 R15: 00007ffd598bbc78 [ 875.915186][T15229] [ 876.234833][ T30] audit: type=1800 audit(4294967356.498:86): pid=15222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1881" name="members" dev="configfs" ino=49632 res=0 errno=0 [ 876.276789][T15229] cannot create netfilter proc entry [ 876.826485][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 876.831807][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 876.837458][T15239] Unable to find swap-space signature [ 876.839693][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 876.852457][T12719] Bluetooth: hci2: adv larger than maximum supported [ 876.859856][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 877.341676][T15248] FAULT_INJECTION: forcing a failure. [ 877.341676][T15248] name failslab, interval 1, probability 0, space 0, times 0 [ 877.444658][T15248] CPU: 0 UID: 0 PID: 15248 Comm: syz.3.1885 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 877.444693][T15248] Tainted: [U]=USER [ 877.444698][T15248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 877.444707][T15248] Call Trace: [ 877.444712][T15248] [ 877.444719][T15248] dump_stack_lvl+0x16c/0x1f0 [ 877.444738][T15248] should_fail_ex+0x512/0x640 [ 877.444754][T15248] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 877.444771][T15248] should_failslab+0xc2/0x120 [ 877.444788][T15248] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 877.444802][T15248] ? fput+0x70/0xf0 [ 877.444818][T15248] ? getname_flags.part.0+0x4c/0x550 [ 877.444839][T15248] getname_flags.part.0+0x4c/0x550 [ 877.444860][T15248] __x64_sys_mkdir+0xd8/0x140 [ 877.444875][T15248] do_syscall_64+0xcd/0x490 [ 877.444891][T15248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.444906][T15248] RIP: 0033:0x7fb21938e9a9 [ 877.444919][T15248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.444932][T15248] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 877.444946][T15248] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 877.444956][T15248] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000080 [ 877.444965][T15248] RBP: 00007fb21a2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 877.444974][T15248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.444982][T15248] R13: 0000000000000001 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 877.445000][T15248] [ 878.267566][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 878.267591][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 878.284571][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 878.284593][T12719] Bluetooth: hci2: adv larger than maximum supported [ 878.291625][T12719] Bluetooth: hci2: adv larger than maximum supported [ 878.299029][T12719] Bluetooth: hci2: adv larger than maximum supported [ 878.307134][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 878.431765][T15259] zram: Added device: zram2 [ 878.464161][T15264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1889'. [ 879.383654][T15279] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[15279] [ 882.356236][T15298] FAULT_INJECTION: forcing a failure. [ 882.356236][T15298] name failslab, interval 1, probability 0, space 0, times 0 [ 882.502236][T15298] CPU: 0 UID: 0 PID: 15298 Comm: syz.1.1896 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 882.502283][T15298] Tainted: [U]=USER [ 882.502293][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 882.502310][T15298] Call Trace: [ 882.502319][T15298] [ 882.502330][T15298] dump_stack_lvl+0x16c/0x1f0 [ 882.502363][T15298] should_fail_ex+0x512/0x640 [ 882.502391][T15298] ? __kmalloc_noprof+0xbf/0x510 [ 882.502422][T15298] ? __register_sysctl_table+0xea2/0x1900 [ 882.502452][T15298] should_failslab+0xc2/0x120 [ 882.502483][T15298] __kmalloc_noprof+0xd2/0x510 [ 882.502508][T15298] ? __register_sysctl_table+0xe8e/0x1900 [ 882.502547][T15298] __register_sysctl_table+0xea2/0x1900 [ 882.502586][T15298] ? __pfx___register_sysctl_table+0x10/0x10 [ 882.502616][T15298] ? is_module_address+0x69/0xf0 [ 882.502651][T15298] ? register_net_sysctl_sz+0x228/0x3e0 [ 882.502684][T15298] ? __asan_memcpy+0x3c/0x60 [ 882.502725][T15298] xfrm6_net_init+0xf0/0x1c0 [ 882.502752][T15298] ? __pfx_xfrm6_net_init+0x10/0x10 [ 882.502776][T15298] ops_init+0x1df/0x5f0 [ 882.502810][T15298] setup_net+0x1ff/0x510 [ 882.502838][T15298] ? lockdep_init_map_type+0x5c/0x280 [ 882.502875][T15298] ? __pfx_setup_net+0x10/0x10 [ 882.502914][T15298] ? debug_mutex_init+0x37/0x70 [ 882.502947][T15298] copy_net_ns+0x2a6/0x5f0 [ 882.502984][T15298] create_new_namespaces+0x3ea/0xa90 [ 882.503024][T15298] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 882.503057][T15298] ksys_unshare+0x45b/0xa40 [ 882.503093][T15298] ? __pfx_ksys_unshare+0x10/0x10 [ 882.503128][T15298] ? xfd_validate_state+0x61/0x180 [ 882.503172][T15298] __x64_sys_unshare+0x31/0x40 [ 882.503205][T15298] do_syscall_64+0xcd/0x490 [ 882.503235][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.503261][T15298] RIP: 0033:0x7fce4638e9a9 [ 882.503283][T15298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.503307][T15298] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 882.503331][T15298] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 882.503350][T15298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 882.503367][T15298] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 882.503384][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.503400][T15298] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 882.503437][T15298] [ 882.503450][T15298] sysctl could not get directory: /net/ipv6 -12 [ 884.614526][T15325] FAULT_INJECTION: forcing a failure. [ 884.614526][T15325] name failslab, interval 1, probability 0, space 0, times 0 [ 884.660562][T15325] CPU: 1 UID: 0 PID: 15325 Comm: syz.0.1903 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 884.660645][T15325] Tainted: [U]=USER [ 884.660654][T15325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 884.660669][T15325] Call Trace: [ 884.660678][T15325] [ 884.660689][T15325] dump_stack_lvl+0x16c/0x1f0 [ 884.660720][T15325] should_fail_ex+0x512/0x640 [ 884.660748][T15325] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 884.660791][T15325] should_failslab+0xc2/0x120 [ 884.660822][T15325] __kmalloc_cache_node_noprof+0x6d/0x420 [ 884.660865][T15325] ? blkg_alloc+0xb7/0xb00 [ 884.660899][T15325] blkg_alloc+0xb7/0xb00 [ 884.660937][T15325] blkcg_init_disk+0x51/0x160 [ 884.660982][T15325] __alloc_disk_node+0x299/0x630 [ 884.661015][T15325] __blk_mq_alloc_disk+0x89/0x120 [ 884.661045][T15325] loop_add+0x49e/0xb70 [ 884.661080][T15325] ? do_vfs_ioctl+0x523/0x1a60 [ 884.661114][T15325] ? __pfx_loop_add+0x10/0x10 [ 884.661145][T15325] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 884.661202][T15325] ? find_held_lock+0x2b/0x80 [ 884.661234][T15325] loop_control_ioctl+0x13e/0x630 [ 884.661270][T15325] ? __pfx_loop_control_ioctl+0x10/0x10 [ 884.661309][T15325] ? __pfx_loop_control_ioctl+0x10/0x10 [ 884.661346][T15325] __x64_sys_ioctl+0x18e/0x210 [ 884.661382][T15325] do_syscall_64+0xcd/0x490 [ 884.661412][T15325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.661438][T15325] RIP: 0033:0x7f8cc878e9a9 [ 884.661460][T15325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.661485][T15325] RSP: 002b:00007f8cc9538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.661510][T15325] RAX: ffffffffffffffda RBX: 00007f8cc89b5fa0 RCX: 00007f8cc878e9a9 [ 884.661527][T15325] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 884.661544][T15325] RBP: 00007f8cc8810d69 R08: 0000000000000000 R09: 0000000000000000 [ 884.661561][T15325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.661579][T15325] R13: 0000000000000000 R14: 00007f8cc89b5fa0 R15: 00007fff3dc8e778 [ 884.661614][T15325] [ 886.827979][T15340] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[15340] [ 890.222425][T15367] FAULT_INJECTION: forcing a failure. [ 890.222425][T15367] name failslab, interval 1, probability 0, space 0, times 0 [ 890.382594][T15367] CPU: 0 UID: 0 PID: 15367 Comm: syz.0.1911 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 890.382644][T15367] Tainted: [U]=USER [ 890.382654][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 890.382672][T15367] Call Trace: [ 890.382681][T15367] [ 890.382693][T15367] dump_stack_lvl+0x16c/0x1f0 [ 890.382727][T15367] should_fail_ex+0x512/0x640 [ 890.382760][T15367] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 890.382806][T15367] should_failslab+0xc2/0x120 [ 890.382837][T15367] __kmalloc_cache_noprof+0x6a/0x3e0 [ 890.382876][T15367] ? can_pernet_init+0xb7/0x370 [ 890.382906][T15367] ? __pfx_can_pernet_init+0x10/0x10 [ 890.382936][T15367] can_pernet_init+0xb7/0x370 [ 890.382966][T15367] ? __pfx_can_pernet_init+0x10/0x10 [ 890.382994][T15367] ops_init+0x1df/0x5f0 [ 890.383029][T15367] setup_net+0x1ff/0x510 [ 890.383058][T15367] ? lockdep_init_map_type+0x5c/0x280 [ 890.383094][T15367] ? __pfx_setup_net+0x10/0x10 [ 890.383126][T15367] ? debug_mutex_init+0x37/0x70 [ 890.383158][T15367] copy_net_ns+0x2a6/0x5f0 [ 890.383193][T15367] create_new_namespaces+0x3ea/0xa90 [ 890.383230][T15367] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 890.383264][T15367] ksys_unshare+0x45b/0xa40 [ 890.383298][T15367] ? __pfx_ksys_unshare+0x10/0x10 [ 890.383332][T15367] ? xfd_validate_state+0x61/0x180 [ 890.383377][T15367] __x64_sys_unshare+0x31/0x40 [ 890.383410][T15367] do_syscall_64+0xcd/0x490 [ 890.383440][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.383467][T15367] RIP: 0033:0x7f8cc878e9a9 [ 890.383490][T15367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.383515][T15367] RSP: 002b:00007f8cc9538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 890.383540][T15367] RAX: ffffffffffffffda RBX: 00007f8cc89b5fa0 RCX: 00007f8cc878e9a9 [ 890.383567][T15367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 890.383583][T15367] RBP: 00007f8cc8810d69 R08: 0000000000000000 R09: 0000000000000000 [ 890.383600][T15367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.383616][T15367] R13: 0000000000000000 R14: 00007f8cc89b5fa0 R15: 00007fff3dc8e778 [ 890.383653][T15367] [ 893.845266][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 893.845306][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 893.860229][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 893.860255][T12719] Bluetooth: hci2: adv larger than maximum supported [ 893.871577][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 895.306390][T15416] zram: Added device: zram3 [ 895.315947][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1921'. [ 896.134403][T15425] FAULT_INJECTION: forcing a failure. [ 896.134403][T15425] name failslab, interval 1, probability 0, space 0, times 0 [ 896.392522][T15425] CPU: 0 UID: 0 PID: 15425 Comm: syz.1.1923 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 896.392569][T15425] Tainted: [U]=USER [ 896.392578][T15425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 896.392594][T15425] Call Trace: [ 896.392603][T15425] [ 896.392614][T15425] dump_stack_lvl+0x16c/0x1f0 [ 896.392649][T15425] should_fail_ex+0x512/0x640 [ 896.392675][T15425] ? __kmalloc_noprof+0xbf/0x510 [ 896.392704][T15425] ? __register_sysctl_table+0xb3/0x1900 [ 896.392733][T15425] should_failslab+0xc2/0x120 [ 896.392762][T15425] __kmalloc_noprof+0xd2/0x510 [ 896.392796][T15425] __register_sysctl_table+0xb3/0x1900 [ 896.392825][T15425] ? is_module_address+0x5f/0xf0 [ 896.392865][T15425] ? __pfx___register_sysctl_table+0x10/0x10 [ 896.392893][T15425] ? is_module_address+0x69/0xf0 [ 896.392942][T15425] ? register_net_sysctl_sz+0x228/0x3e0 [ 896.392982][T15425] brnf_init_net+0x289/0x450 [ 896.393014][T15425] ? __pfx_brnf_init_net+0x10/0x10 [ 896.393038][T15425] ops_init+0x1df/0x5f0 [ 896.393071][T15425] setup_net+0x1ff/0x510 [ 896.393094][T15425] ? lockdep_init_map_type+0x5c/0x280 [ 896.393127][T15425] ? __pfx_setup_net+0x10/0x10 [ 896.393157][T15425] ? debug_mutex_init+0x37/0x70 [ 896.393186][T15425] copy_net_ns+0x2a6/0x5f0 [ 896.393223][T15425] create_new_namespaces+0x3ea/0xa90 [ 896.393263][T15425] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 896.393297][T15425] ksys_unshare+0x45b/0xa40 [ 896.393332][T15425] ? __pfx_ksys_unshare+0x10/0x10 [ 896.393369][T15425] ? xfd_validate_state+0x61/0x180 [ 896.393415][T15425] __x64_sys_unshare+0x31/0x40 [ 896.393449][T15425] do_syscall_64+0xcd/0x490 [ 896.393480][T15425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.393508][T15425] RIP: 0033:0x7fce4638e9a9 [ 896.393528][T15425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.393555][T15425] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 896.393583][T15425] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 896.393601][T15425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 896.393615][T15425] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 896.393630][T15425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.393645][T15425] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 896.393678][T15425] [ 896.637549][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.554875][T15436] zswap: compressor not available [ 901.410949][T15488] FAULT_INJECTION: forcing a failure. [ 901.410949][T15488] name failslab, interval 1, probability 0, space 0, times 0 [ 901.432293][T15488] CPU: 1 UID: 0 PID: 15488 Comm: syz.1.1935 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 901.432336][T15488] Tainted: [U]=USER [ 901.432341][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 901.432351][T15488] Call Trace: [ 901.432356][T15488] [ 901.432364][T15488] dump_stack_lvl+0x16c/0x1f0 [ 901.432386][T15488] should_fail_ex+0x512/0x640 [ 901.432402][T15488] ? __kmalloc_noprof+0xbf/0x510 [ 901.432420][T15488] ? ops_init+0x77/0x5f0 [ 901.432435][T15488] should_failslab+0xc2/0x120 [ 901.432452][T15488] __kmalloc_noprof+0xd2/0x510 [ 901.432471][T15488] ops_init+0x77/0x5f0 [ 901.432490][T15488] setup_net+0x1ff/0x510 [ 901.432506][T15488] ? lockdep_init_map_type+0x5c/0x280 [ 901.432526][T15488] ? __pfx_setup_net+0x10/0x10 [ 901.432544][T15488] ? debug_mutex_init+0x37/0x70 [ 901.432561][T15488] copy_net_ns+0x2a6/0x5f0 [ 901.432581][T15488] create_new_namespaces+0x3ea/0xa90 [ 901.432602][T15488] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 901.432624][T15488] ksys_unshare+0x45b/0xa40 [ 901.432644][T15488] ? __pfx_ksys_unshare+0x10/0x10 [ 901.432664][T15488] ? xfd_validate_state+0x61/0x180 [ 901.432689][T15488] __x64_sys_unshare+0x31/0x40 [ 901.432708][T15488] do_syscall_64+0xcd/0x490 [ 901.432726][T15488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.432741][T15488] RIP: 0033:0x7fce4638e9a9 [ 901.432753][T15488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.432767][T15488] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 901.432789][T15488] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 901.432800][T15488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 901.432809][T15488] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 901.432818][T15488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.432827][T15488] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 901.432847][T15488] [ 902.251099][T12719] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 902.251135][T12719] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 902.266823][T12719] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 902.266863][T12719] Bluetooth: hci3: adv larger than maximum supported [ 902.274663][T12719] Bluetooth: hci3: Malformed LE Event: 0x0d [ 902.321134][T15492] zswap: compressor not available [ 903.586292][T15520] zram: Added device: zram4 [ 903.602606][T15519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1942'. [ 904.042026][T15523] ptrace attach of "./syz-executor exec"[5856] was attempted by "./syz-executor exec"[15523] [ 905.365002][ T30] audit: type=1800 audit(4294967385.672:87): pid=15536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=51169 res=0 errno=0 [ 906.477959][T15552] FAULT_INJECTION: forcing a failure. [ 906.477959][T15552] name failslab, interval 1, probability 0, space 0, times 0 [ 906.499372][T15552] CPU: 0 UID: 0 PID: 15552 Comm: syz.1.1948 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 906.499418][T15552] Tainted: [U]=USER [ 906.499428][T15552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 906.499445][T15552] Call Trace: [ 906.499455][T15552] [ 906.499466][T15552] dump_stack_lvl+0x16c/0x1f0 [ 906.499499][T15552] should_fail_ex+0x512/0x640 [ 906.499529][T15552] ? __kmalloc_noprof+0xbf/0x510 [ 906.499558][T15552] ? ops_init+0x77/0x5f0 [ 906.499586][T15552] should_failslab+0xc2/0x120 [ 906.499617][T15552] __kmalloc_noprof+0xd2/0x510 [ 906.499650][T15552] ops_init+0x77/0x5f0 [ 906.499682][T15552] setup_net+0x1ff/0x510 [ 906.499709][T15552] ? lockdep_init_map_type+0x5c/0x280 [ 906.499745][T15552] ? __pfx_setup_net+0x10/0x10 [ 906.499777][T15552] ? debug_mutex_init+0x37/0x70 [ 906.499808][T15552] copy_net_ns+0x2a6/0x5f0 [ 906.499844][T15552] create_new_namespaces+0x3ea/0xa90 [ 906.499883][T15552] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 906.499916][T15552] ksys_unshare+0x45b/0xa40 [ 906.499946][T15552] ? __pfx_ksys_unshare+0x10/0x10 [ 906.499978][T15552] ? xfd_validate_state+0x61/0x180 [ 906.500021][T15552] __x64_sys_unshare+0x31/0x40 [ 906.500053][T15552] do_syscall_64+0xcd/0x490 [ 906.500083][T15552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.500109][T15552] RIP: 0033:0x7fce4638e9a9 [ 906.500131][T15552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.500156][T15552] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 906.500191][T15552] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 906.500208][T15552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 906.500344][T15552] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 906.500362][T15552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.500379][T15552] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 906.500415][T15552] [ 907.109976][T15562] ptrace attach of "./syz-executor exec"[5856] was attempted by "./syz-executor exec"[15562] [ 910.177359][T15625] vhci_hcd: invalid port number 16 [ 910.182787][T15625] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 911.838247][T15647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 911.848953][T15647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 911.937415][T15647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 911.991332][T15647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 912.037159][T15647] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 913.018169][T12719] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 913.018206][T12719] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 913.033427][T12719] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 913.033451][T12719] Bluetooth: hci0: adv larger than maximum supported [ 913.040802][T12719] Bluetooth: hci0: Malformed LE Event: 0x0d [ 913.786830][T12719] Bluetooth: hci0: command 0x0406 tx timeout [ 913.926441][T12719] Bluetooth: hci1: command 0x0406 tx timeout [ 914.005958][T12719] Bluetooth: hci2: command 0x0406 tx timeout [ 914.013114][ T5168] Bluetooth: hci3: command 0x0406 tx timeout [ 915.002071][T15688] zram: Added device: zram5 [ 915.021722][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1980'. [ 916.084909][T12719] Bluetooth: hci3: command 0x0406 tx timeout [ 917.470067][T15732] FAULT_INJECTION: forcing a failure. [ 917.470067][T15732] name failslab, interval 1, probability 0, space 0, times 0 [ 917.544052][T15732] CPU: 1 UID: 0 PID: 15732 Comm: syz.1.1986 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 917.544103][T15732] Tainted: [U]=USER [ 917.544113][T15732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.544127][T15732] Call Trace: [ 917.544136][T15732] [ 917.544146][T15732] dump_stack_lvl+0x16c/0x1f0 [ 917.544178][T15732] should_fail_ex+0x512/0x640 [ 917.544204][T15732] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 917.544238][T15732] should_failslab+0xc2/0x120 [ 917.544267][T15732] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 917.544294][T15732] ? fib_notifier_ops_register+0x32/0x270 [ 917.544325][T15732] ? __pfx_fib6_net_init+0x10/0x10 [ 917.544352][T15732] kmemdup_noprof+0x29/0x60 [ 917.544386][T15732] fib_notifier_ops_register+0x32/0x270 [ 917.544418][T15732] ? __pfx_fib6_net_init+0x10/0x10 [ 917.544443][T15732] fib6_notifier_init+0x1d/0x90 [ 917.544470][T15732] fib6_net_init+0x22/0xb20 [ 917.544493][T15732] ? __pfx_fib6_net_init+0x10/0x10 [ 917.544514][T15732] ops_init+0x1df/0x5f0 [ 917.544543][T15732] setup_net+0x1ff/0x510 [ 917.544568][T15732] ? lockdep_init_map_type+0x5c/0x280 [ 917.544599][T15732] ? __pfx_setup_net+0x10/0x10 [ 917.544629][T15732] ? debug_mutex_init+0x37/0x70 [ 917.544656][T15732] copy_net_ns+0x2a6/0x5f0 [ 917.544688][T15732] create_new_namespaces+0x3ea/0xa90 [ 917.544725][T15732] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 917.544755][T15732] ksys_unshare+0x45b/0xa40 [ 917.544787][T15732] ? __pfx_ksys_unshare+0x10/0x10 [ 917.544820][T15732] ? xfd_validate_state+0x61/0x180 [ 917.544861][T15732] __x64_sys_unshare+0x31/0x40 [ 917.544892][T15732] do_syscall_64+0xcd/0x490 [ 917.544923][T15732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.544945][T15732] RIP: 0033:0x7fce4638e9a9 [ 917.544967][T15732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.544995][T15732] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 917.545021][T15732] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 917.545038][T15732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 917.545053][T15732] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 917.545069][T15732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.545083][T15732] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 917.545114][T15732] [ 920.671686][T15768] zram: Added device: zram6 [ 920.678141][T15768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'. [ 921.999788][T15779] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[15779] [ 924.630857][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 924.630897][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 924.646148][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 924.646190][T12719] Bluetooth: hci2: adv larger than maximum supported [ 924.655847][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 925.275491][T15816] random: crng reseeded on system resumption [ 926.488893][T12719] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 926.488949][T12719] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 926.504293][T12719] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 926.504470][T12719] Bluetooth: hci3: adv larger than maximum supported [ 926.511816][T12719] Bluetooth: hci3: Malformed LE Event: 0x0d [ 926.611055][T15843] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[15843] [ 927.384986][T15857] FAULT_INJECTION: forcing a failure. [ 927.384986][T15857] name fail_futex, interval 1, probability 0, space 0, times 0 [ 927.424821][T15857] CPU: 0 UID: 0 PID: 15857 Comm: syz.3.2011 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 927.424848][T15857] Tainted: [U]=USER [ 927.424854][T15857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 927.424863][T15857] Call Trace: [ 927.424869][T15857] [ 927.424876][T15857] dump_stack_lvl+0x16c/0x1f0 [ 927.424898][T15857] should_fail_ex+0x512/0x640 [ 927.424916][T15857] get_futex_key+0x1d0/0x1540 [ 927.424938][T15857] ? __pfx_get_futex_key+0x10/0x10 [ 927.424961][T15857] futex_wake+0xe7/0x4e0 [ 927.424982][T15857] ? __pfx_futex_wake+0x10/0x10 [ 927.425005][T15857] ? kmem_cache_free+0x2d1/0x4d0 [ 927.425019][T15857] ? fd_install+0x225/0x750 [ 927.425040][T15857] ? putname+0x154/0x1a0 [ 927.425060][T15857] do_futex+0x1e3/0x350 [ 927.425077][T15857] ? __pfx_do_futex+0x10/0x10 [ 927.425100][T15857] __x64_sys_futex+0x1e0/0x4c0 [ 927.425118][T15857] ? __x64_sys_openat+0x174/0x210 [ 927.425138][T15857] ? __pfx___x64_sys_futex+0x10/0x10 [ 927.425162][T15857] do_syscall_64+0xcd/0x490 [ 927.425179][T15857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.425194][T15857] RIP: 0033:0x7fb21938e9a9 [ 927.425206][T15857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.425220][T15857] RSP: 002b:00007fb21a2c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 927.425234][T15857] RAX: ffffffffffffffda RBX: 00007fb2195b5fa8 RCX: 00007fb21938e9a9 [ 927.425244][T15857] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2195b5fac [ 927.425252][T15857] RBP: 00007fb2195b5fa0 R08: 00007fb21a2c8000 R09: 0000000000000000 [ 927.425261][T15857] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fb2195b5fac [ 927.425270][T15857] R13: 0000000000000000 R14: 00007ffcf5954b90 R15: 00007ffcf5954c78 [ 927.425289][T15857] [ 928.137173][T15867] vhci_hcd: invalid port number 16 [ 928.160419][T15867] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 931.529792][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.558956][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.779183][T15899] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[15899] [ 932.660133][T15919] vhci_hcd: invalid port number 16 [ 932.665290][T15919] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 933.372860][T15928] netlink: 'syz.0.2027': attribute type 1 has an invalid length. [ 935.171518][T15950] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[15950] [ 935.716465][T12719] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 935.716491][T12719] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 935.732026][T12719] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 935.732052][T12719] Bluetooth: hci3: adv larger than maximum supported [ 935.743484][T12719] Bluetooth: hci3: Malformed LE Event: 0x0d [ 935.913292][T15956] FAULT_INJECTION: forcing a failure. [ 935.913292][T15956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.926845][T15956] CPU: 0 UID: 0 PID: 15956 Comm: syz.0.2032 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 935.926892][T15956] Tainted: [U]=USER [ 935.926902][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.926919][T15956] Call Trace: [ 935.926929][T15956] [ 935.926940][T15956] dump_stack_lvl+0x16c/0x1f0 [ 935.926974][T15956] should_fail_ex+0x512/0x640 [ 935.927009][T15956] should_fail_alloc_page+0xe7/0x130 [ 935.927051][T15956] prepare_alloc_pages+0x3c2/0x610 [ 935.927093][T15956] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 935.927127][T15956] ? __lock_acquire+0x622/0x1c90 [ 935.927162][T15956] ? drm_edid_valid+0x154/0x5f0 [ 935.927201][T15956] ? __vmf_anon_prepare+0x11c/0x240 [ 935.927232][T15956] ? __handle_mm_fault+0x27f6/0x5490 [ 935.927267][T15956] ? handle_mm_fault+0x589/0xd10 [ 935.927299][T15956] ? __get_user_pages+0x589/0x3b80 [ 935.927329][T15956] ? get_user_pages_remote+0x258/0xb20 [ 935.927362][T15956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 935.927392][T15956] ? __lock_acquire+0x622/0x1c90 [ 935.927435][T15956] ? __lock_acquire+0xb8a/0x1c90 [ 935.927475][T15956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 935.927516][T15956] ? policy_nodemask+0xea/0x4e0 [ 935.927550][T15956] alloc_pages_mpol+0x1fb/0x550 [ 935.927582][T15956] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 935.927615][T15956] ? __anon_vma_prepare+0x2db/0x5e0 [ 935.927645][T15956] folio_alloc_mpol_noprof+0x36/0x2f0 [ 935.927681][T15956] vma_alloc_folio_noprof+0xed/0x1e0 [ 935.927715][T15956] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 935.927746][T15956] ? __anon_vma_prepare+0x2e2/0x5e0 [ 935.927782][T15956] __handle_mm_fault+0x2f21/0x5490 [ 935.927829][T15956] ? __pfx___handle_mm_fault+0x10/0x10 [ 935.927899][T15956] handle_mm_fault+0x589/0xd10 [ 935.927945][T15956] __get_user_pages+0x589/0x3b80 [ 935.927993][T15956] ? __pfx___get_user_pages+0x10/0x10 [ 935.928047][T15956] get_user_pages_remote+0x258/0xb20 [ 935.928092][T15956] ? __pfx_get_user_pages_remote+0x10/0x10 [ 935.928126][T15956] ? __pfx_vma_link+0x10/0x10 [ 935.928167][T15956] get_arg_page+0xf4/0x310 [ 935.928204][T15956] ? __pfx_get_arg_page+0x10/0x10 [ 935.928240][T15956] ? up_write+0x1b2/0x520 [ 935.928283][T15956] copy_string_kernel+0x180/0x510 [ 935.928330][T15956] do_execveat_common.isra.0+0x2ed/0x610 [ 935.928376][T15956] __x64_sys_execveat+0xda/0x120 [ 935.928405][T15956] do_syscall_64+0xcd/0x490 [ 935.928435][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.928463][T15956] RIP: 0033:0x7f8cc878e9a9 [ 935.928487][T15956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.928512][T15956] RSP: 002b:00007f8cc9538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 935.928539][T15956] RAX: ffffffffffffffda RBX: 00007f8cc89b5fa0 RCX: 00007f8cc878e9a9 [ 935.928557][T15956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 935.928574][T15956] RBP: 00007f8cc8810d69 R08: 0000000000001000 R09: 0000000000000000 [ 935.928591][T15956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.928608][T15956] R13: 0000000000000000 R14: 00007f8cc89b5fa0 R15: 00007fff3dc8e778 [ 935.928644][T15956] [ 937.991682][T15984] vhci_hcd: invalid port number 16 [ 938.078061][T15984] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 938.442473][T15989] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 940.795738][T16011] FAULT_INJECTION: forcing a failure. [ 940.795738][T16011] name failslab, interval 1, probability 0, space 0, times 0 [ 940.962929][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 940.962970][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 940.981359][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 940.981404][T12719] Bluetooth: hci2: adv larger than maximum supported [ 940.988806][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 941.007637][T16011] CPU: 0 UID: 0 PID: 16011 Comm: syz.0.2045 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 941.007686][T16011] Tainted: [U]=USER [ 941.007697][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 941.007715][T16011] Call Trace: [ 941.007725][T16011] [ 941.007737][T16011] dump_stack_lvl+0x16c/0x1f0 [ 941.007778][T16011] should_fail_ex+0x512/0x640 [ 941.007806][T16011] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 941.007851][T16011] should_failslab+0xc2/0x120 [ 941.007881][T16011] __kmalloc_cache_noprof+0x6a/0x3e0 [ 941.007922][T16011] ? kobject_create_and_add+0x4a/0xf0 [ 941.007960][T16011] kobject_create_and_add+0x4a/0xf0 [ 941.007995][T16011] __add_disk+0x709/0xf00 [ 941.008022][T16011] ? find_held_lock+0x2b/0x80 [ 941.008055][T16011] add_disk_fwnode+0x3f8/0x5d0 [ 941.008088][T16011] zram_add+0x4c8/0x700 [ 941.008124][T16011] ? __pfx_zram_add+0x10/0x10 [ 941.008185][T16011] ? find_held_lock+0x2b/0x80 [ 941.008220][T16011] ? __pfx_hot_add_show+0x10/0x10 [ 941.008253][T16011] ? __pfx_class_attr_show+0x10/0x10 [ 941.008285][T16011] hot_add_show+0x21/0x80 [ 941.008320][T16011] class_attr_show+0x72/0xa0 [ 941.008354][T16011] sysfs_kf_seq_show+0x216/0x3e0 [ 941.008399][T16011] seq_read_iter+0x506/0x12c0 [ 941.008454][T16011] kernfs_fop_read_iter+0x40f/0x5a0 [ 941.008487][T16011] ? rw_verify_area+0xcf/0x680 [ 941.008528][T16011] vfs_read+0x8bc/0xc60 [ 941.008558][T16011] ? __pfx___mutex_lock+0x10/0x10 [ 941.008585][T16011] ? __pfx_vfs_read+0x10/0x10 [ 941.008637][T16011] ksys_read+0x12a/0x250 [ 941.008667][T16011] ? __pfx_ksys_read+0x10/0x10 [ 941.008704][T16011] do_syscall_64+0xcd/0x490 [ 941.008735][T16011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.008769][T16011] RIP: 0033:0x7f8cc878e9a9 [ 941.008792][T16011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.008819][T16011] RSP: 002b:00007f8cc9538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 941.008845][T16011] RAX: ffffffffffffffda RBX: 00007f8cc89b5fa0 RCX: 00007f8cc878e9a9 [ 941.008864][T16011] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 941.008881][T16011] RBP: 00007f8cc8810d69 R08: 0000000000000000 R09: 0000000000000000 [ 941.008898][T16011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.008914][T16011] R13: 0000000000000000 R14: 00007f8cc89b5fa0 R15: 00007fff3dc8e778 [ 941.008952][T16011] [ 941.804655][T12719] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 941.804694][T12719] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 941.820369][T12719] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 941.820407][T12719] Bluetooth: hci0: adv larger than maximum supported [ 941.827867][T12719] Bluetooth: hci0: Malformed LE Event: 0x0d [ 942.560700][T16025] zswap: compressor not available [ 942.969478][T16037] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(32767.0.0), cmd(5) [ 943.539453][T16041] vhci_hcd: invalid port number 16 [ 943.723792][T16041] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 945.127121][T16046] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 947.618008][T16072] zswap: compressor not available [ 948.363507][T16088] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[16088] [ 952.025032][T16128] FAULT_INJECTION: forcing a failure. [ 952.025032][T16128] name failslab, interval 1, probability 0, space 0, times 0 [ 952.055926][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.1.2067 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 952.055975][T16128] Tainted: [U]=USER [ 952.055985][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 952.056001][T16128] Call Trace: [ 952.056011][T16128] [ 952.056023][T16128] dump_stack_lvl+0x16c/0x1f0 [ 952.056056][T16128] should_fail_ex+0x512/0x640 [ 952.056083][T16128] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 952.056117][T16128] should_failslab+0xc2/0x120 [ 952.056148][T16128] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 952.056175][T16128] ? __proc_create+0xc3/0x8c0 [ 952.056202][T16128] ? __proc_create+0x2ce/0x8c0 [ 952.056236][T16128] __proc_create+0x2ce/0x8c0 [ 952.056265][T16128] ? __pfx___proc_create+0x10/0x10 [ 952.056300][T16128] ? _raw_write_unlock+0x28/0x50 [ 952.056324][T16128] ? proc_register+0x314/0x5f0 [ 952.056356][T16128] proc_create_reg+0x7d/0x180 [ 952.056389][T16128] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 952.056422][T16128] proc_create_net_single+0x86/0x170 [ 952.056452][T16128] ? __pfx_proc_create_net_single+0x10/0x10 [ 952.056494][T16128] can_init_proc+0x2b3/0x4d0 [ 952.056524][T16128] can_pernet_init+0x1e4/0x370 [ 952.056553][T16128] ? __pfx_can_pernet_init+0x10/0x10 [ 952.056580][T16128] ops_init+0x1df/0x5f0 [ 952.056616][T16128] setup_net+0x1ff/0x510 [ 952.056646][T16128] ? lockdep_init_map_type+0x5c/0x280 [ 952.056685][T16128] ? __pfx_setup_net+0x10/0x10 [ 952.056719][T16128] ? debug_mutex_init+0x37/0x70 [ 952.056755][T16128] copy_net_ns+0x2a6/0x5f0 [ 952.056792][T16128] create_new_namespaces+0x3ea/0xa90 [ 952.056833][T16128] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 952.056870][T16128] ksys_unshare+0x45b/0xa40 [ 952.056917][T16128] ? __pfx_ksys_unshare+0x10/0x10 [ 952.056955][T16128] ? xfd_validate_state+0x61/0x180 [ 952.057002][T16128] __x64_sys_unshare+0x31/0x40 [ 952.057037][T16128] do_syscall_64+0xcd/0x490 [ 952.057069][T16128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.057097][T16128] RIP: 0033:0x7fce4638e9a9 [ 952.057120][T16128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.057146][T16128] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 952.057172][T16128] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 952.057191][T16128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 952.057207][T16128] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 952.057224][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.057241][T16128] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 952.057278][T16128] [ 952.909571][T16139] FAULT_INJECTION: forcing a failure. [ 952.909571][T16139] name failslab, interval 1, probability 0, space 0, times 0 [ 952.924035][T16139] CPU: 1 UID: 0 PID: 16139 Comm: syz.3.2069 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 952.924076][T16139] Tainted: [U]=USER [ 952.924084][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 952.924102][T16139] Call Trace: [ 952.924111][T16139] [ 952.924121][T16139] dump_stack_lvl+0x16c/0x1f0 [ 952.924156][T16139] should_fail_ex+0x512/0x640 [ 952.924182][T16139] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 952.924212][T16139] should_failslab+0xc2/0x120 [ 952.924242][T16139] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 952.924269][T16139] ? mas_alloc_nodes+0x18b/0x8b0 [ 952.924308][T16139] mas_alloc_nodes+0x18b/0x8b0 [ 952.924352][T16139] mas_node_count_gfp+0x105/0x130 [ 952.924388][T16139] mas_preallocate+0x7e0/0xde0 [ 952.924421][T16139] ? __pfx_mas_preallocate+0x10/0x10 [ 952.924464][T16139] ? __pfx_mt_find+0x10/0x10 [ 952.924494][T16139] vma_link+0x135/0x6a0 [ 952.924524][T16139] ? __pfx_vma_link+0x10/0x10 [ 952.924572][T16139] insert_vm_struct+0xf4/0x2d0 [ 952.924605][T16139] create_init_stack_vma+0x2da/0x700 [ 952.924640][T16139] alloc_bprm+0x420/0x6f0 [ 952.924693][T16139] do_execveat_common.isra.0+0x1ce/0x610 [ 952.924810][T16139] __x64_sys_execveat+0xda/0x120 [ 952.924840][T16139] do_syscall_64+0xcd/0x490 [ 952.924896][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.924922][T16139] RIP: 0033:0x7fb21938e9a9 [ 952.924946][T16139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.924971][T16139] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 952.924996][T16139] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 952.925015][T16139] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 952.925031][T16139] RBP: 00007fb219410d69 R08: 0000000000001000 R09: 0000000000000000 [ 952.925049][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.925065][T16139] R13: 0000000000000000 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 952.925099][T16139] [ 953.700141][T16146] FAULT_INJECTION: forcing a failure. [ 953.700141][T16146] name failslab, interval 1, probability 0, space 0, times 0 [ 953.713501][T16146] CPU: 1 UID: 0 PID: 16146 Comm: syz.3.2071 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 953.713528][T16146] Tainted: [U]=USER [ 953.713533][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 953.713543][T16146] Call Trace: [ 953.713548][T16146] [ 953.713555][T16146] dump_stack_lvl+0x16c/0x1f0 [ 953.713576][T16146] should_fail_ex+0x512/0x640 [ 953.713592][T16146] ? __kmalloc_noprof+0xbf/0x510 [ 953.713610][T16146] ? ops_init+0x77/0x5f0 [ 953.713626][T16146] should_failslab+0xc2/0x120 [ 953.713644][T16146] __kmalloc_noprof+0xd2/0x510 [ 953.713659][T16146] ? brnf_init_net+0x2bc/0x450 [ 953.713678][T16146] ops_init+0x77/0x5f0 [ 953.713696][T16146] setup_net+0x1ff/0x510 [ 953.713712][T16146] ? lockdep_init_map_type+0x5c/0x280 [ 953.713733][T16146] ? __pfx_setup_net+0x10/0x10 [ 953.713751][T16146] ? debug_mutex_init+0x37/0x70 [ 953.713768][T16146] copy_net_ns+0x2a6/0x5f0 [ 953.713788][T16146] create_new_namespaces+0x3ea/0xa90 [ 953.713809][T16146] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 953.713828][T16146] ksys_unshare+0x45b/0xa40 [ 953.713848][T16146] ? __pfx_ksys_unshare+0x10/0x10 [ 953.713868][T16146] ? xfd_validate_state+0x61/0x180 [ 953.713894][T16146] __x64_sys_unshare+0x31/0x40 [ 953.713913][T16146] do_syscall_64+0xcd/0x490 [ 953.713929][T16146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.713944][T16146] RIP: 0033:0x7fb21938e9a9 [ 953.713957][T16146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.713971][T16146] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 953.713985][T16146] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 953.713994][T16146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 953.714003][T16146] RBP: 00007fb219410d69 R08: 0000000000000000 R09: 0000000000000000 [ 953.714012][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.714020][T16146] R13: 0000000000000000 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 953.714039][T16146] [ 956.583431][T16182] FAULT_INJECTION: forcing a failure. [ 956.583431][T16182] name failslab, interval 1, probability 0, space 0, times 0 [ 956.664562][T16182] CPU: 0 UID: 0 PID: 16182 Comm: syz.3.2078 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 956.664606][T16182] Tainted: [U]=USER [ 956.664616][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 956.664631][T16182] Call Trace: [ 956.664640][T16182] [ 956.664652][T16182] dump_stack_lvl+0x16c/0x1f0 [ 956.664683][T16182] should_fail_ex+0x512/0x640 [ 956.664706][T16182] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 956.664740][T16182] should_failslab+0xc2/0x120 [ 956.664770][T16182] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 956.664794][T16182] ? __asan_memcpy+0x3c/0x60 [ 956.664828][T16182] ? __kernfs_new_node+0xd2/0x8e0 [ 956.664884][T16182] __kernfs_new_node+0xd2/0x8e0 [ 956.664926][T16182] ? __pfx___kernfs_new_node+0x10/0x10 [ 956.664974][T16182] ? find_held_lock+0x2b/0x80 [ 956.665004][T16182] ? kernfs_root+0xee/0x2a0 [ 956.665038][T16182] kernfs_new_node+0x13c/0x1e0 [ 956.665074][T16182] kernfs_create_link+0xcc/0x240 [ 956.665112][T16182] sysfs_do_create_link_sd+0x90/0x140 [ 956.665154][T16182] sysfs_create_link+0x61/0xc0 [ 956.665192][T16182] __add_disk+0x61e/0xf00 [ 956.665218][T16182] ? find_held_lock+0x2b/0x80 [ 956.665247][T16182] add_disk_fwnode+0x3f8/0x5d0 [ 956.665279][T16182] zram_add+0x4c8/0x700 [ 956.665315][T16182] ? __pfx_zram_add+0x10/0x10 [ 956.665372][T16182] ? find_held_lock+0x2b/0x80 [ 956.665403][T16182] ? __pfx_hot_add_show+0x10/0x10 [ 956.665434][T16182] ? __pfx_class_attr_show+0x10/0x10 [ 956.665465][T16182] hot_add_show+0x21/0x80 [ 956.665498][T16182] class_attr_show+0x72/0xa0 [ 956.665531][T16182] sysfs_kf_seq_show+0x216/0x3e0 [ 956.665574][T16182] seq_read_iter+0x506/0x12c0 [ 956.665630][T16182] kernfs_fop_read_iter+0x40f/0x5a0 [ 956.665663][T16182] ? rw_verify_area+0xcf/0x680 [ 956.665701][T16182] vfs_read+0x8bc/0xc60 [ 956.665728][T16182] ? __pfx___mutex_lock+0x10/0x10 [ 956.665755][T16182] ? __pfx_vfs_read+0x10/0x10 [ 956.665799][T16182] ksys_read+0x12a/0x250 [ 956.665822][T16182] ? __pfx_ksys_read+0x10/0x10 [ 956.665865][T16182] do_syscall_64+0xcd/0x490 [ 956.665895][T16182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.665922][T16182] RIP: 0033:0x7fb21938e9a9 [ 956.665945][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.665970][T16182] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 956.665995][T16182] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 956.666014][T16182] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 956.666032][T16182] RBP: 00007fb219410d69 R08: 0000000000000000 R09: 0000000000000000 [ 956.666049][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.666066][T16182] R13: 0000000000000000 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 956.666104][T16182] [ 957.601901][T16195] __vm_enough_memory: pid: 16195, comm: syz.2.2082, bytes: 4398046511104 not enough memory for the allocation [ 959.060476][T16211] FAULT_INJECTION: forcing a failure. [ 959.060476][T16211] name failslab, interval 1, probability 0, space 0, times 0 [ 959.098588][T16211] CPU: 1 UID: 0 PID: 16211 Comm: syz.1.2085 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 959.098635][T16211] Tainted: [U]=USER [ 959.098645][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 959.098661][T16211] Call Trace: [ 959.098671][T16211] [ 959.098682][T16211] dump_stack_lvl+0x16c/0x1f0 [ 959.098716][T16211] should_fail_ex+0x512/0x640 [ 959.098744][T16211] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 959.098778][T16211] should_failslab+0xc2/0x120 [ 959.098809][T16211] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 959.098838][T16211] ? bpf_ksym_find+0x124/0x1c0 [ 959.098864][T16211] ? __kernfs_new_node+0xd2/0x8e0 [ 959.098909][T16211] __kernfs_new_node+0xd2/0x8e0 [ 959.098954][T16211] ? __pfx___kernfs_new_node+0x10/0x10 [ 959.099002][T16211] ? find_held_lock+0x2b/0x80 [ 959.099032][T16211] ? kernfs_root+0xee/0x2a0 [ 959.099066][T16211] kernfs_new_node+0x13c/0x1e0 [ 959.099095][T16211] ? kasan_save_stack+0x42/0x60 [ 959.099124][T16211] kernfs_create_dir_ns+0x4c/0x1a0 [ 959.099158][T16211] sysfs_create_dir_ns+0x13a/0x2b0 [ 959.099197][T16211] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 959.099240][T16211] ? kfree+0x24f/0x4d0 [ 959.099280][T16211] kobject_add_internal+0x2c4/0x9b0 [ 959.099318][T16211] kobject_add+0x16e/0x240 [ 959.099347][T16211] ? __pfx_kobject_add+0x10/0x10 [ 959.099398][T16211] kobject_create_and_add+0x7e/0xf0 [ 959.099442][T16211] __add_disk+0x676/0xf00 [ 959.099470][T16211] ? find_held_lock+0x2b/0x80 [ 959.099499][T16211] add_disk_fwnode+0x3f8/0x5d0 [ 959.099527][T16211] zram_add+0x4c8/0x700 [ 959.099563][T16211] ? __pfx_zram_add+0x10/0x10 [ 959.099626][T16211] ? find_held_lock+0x2b/0x80 [ 959.099659][T16211] ? __pfx_hot_add_show+0x10/0x10 [ 959.099689][T16211] ? __pfx_class_attr_show+0x10/0x10 [ 959.099717][T16211] hot_add_show+0x21/0x80 [ 959.099748][T16211] class_attr_show+0x72/0xa0 [ 959.099779][T16211] sysfs_kf_seq_show+0x216/0x3e0 [ 959.099819][T16211] seq_read_iter+0x506/0x12c0 [ 959.099867][T16211] kernfs_fop_read_iter+0x40f/0x5a0 [ 959.099894][T16211] ? rw_verify_area+0xcf/0x680 [ 959.099929][T16211] vfs_read+0x8bc/0xc60 [ 959.099957][T16211] ? __pfx___mutex_lock+0x10/0x10 [ 959.099983][T16211] ? __pfx_vfs_read+0x10/0x10 [ 959.100032][T16211] ksys_read+0x12a/0x250 [ 959.100057][T16211] ? __pfx_ksys_read+0x10/0x10 [ 959.100092][T16211] do_syscall_64+0xcd/0x490 [ 959.100123][T16211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.100150][T16211] RIP: 0033:0x7fce4638e9a9 [ 959.100173][T16211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.100199][T16211] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 959.100225][T16211] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 959.100266][T16211] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 959.100283][T16211] RBP: 00007fce46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 959.100299][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.100316][T16211] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 959.100354][T16211] [ 959.100368][T16211] kobject: kobject_add_internal failed for holders (error: -12 parent: zram7) [ 959.893118][T16211] kobject: kobject_create_and_add: kobject_add error: -12 [ 960.551856][T16235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2090'. [ 960.561927][T16233] zram: Added device: zram7 [ 961.708333][T16248] FAULT_INJECTION: forcing a failure. [ 961.708333][T16248] name failslab, interval 1, probability 0, space 0, times 0 [ 961.895262][T16248] CPU: 1 UID: 0 PID: 16248 Comm: syz.1.2095 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 961.895309][T16248] Tainted: [U]=USER [ 961.895317][T16248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 961.895331][T16248] Call Trace: [ 961.895341][T16248] [ 961.895352][T16248] dump_stack_lvl+0x16c/0x1f0 [ 961.895388][T16248] should_fail_ex+0x512/0x640 [ 961.895416][T16248] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 961.895460][T16248] should_failslab+0xc2/0x120 [ 961.895492][T16248] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 961.895521][T16248] ? mas_alloc_nodes+0x18b/0x8b0 [ 961.895565][T16248] mas_alloc_nodes+0x18b/0x8b0 [ 961.895615][T16248] mas_node_count_gfp+0x105/0x130 [ 961.895655][T16248] mas_preallocate+0x7e0/0xde0 [ 961.895693][T16248] ? __pfx_mas_preallocate+0x10/0x10 [ 961.895738][T16248] ? __pfx_mt_find+0x10/0x10 [ 961.895771][T16248] vma_link+0x135/0x6a0 [ 961.895803][T16248] ? __pfx_vma_link+0x10/0x10 [ 961.895850][T16248] insert_vm_struct+0xf4/0x2d0 [ 961.895883][T16248] create_init_stack_vma+0x2da/0x700 [ 961.895918][T16248] alloc_bprm+0x420/0x6f0 [ 961.895960][T16248] do_execveat_common.isra.0+0x1ce/0x610 [ 961.896007][T16248] __x64_sys_execveat+0xda/0x120 [ 961.896037][T16248] do_syscall_64+0xcd/0x490 [ 961.896067][T16248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.896095][T16248] RIP: 0033:0x7fce4638e9a9 [ 961.896117][T16248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.896145][T16248] RSP: 002b:00007fce472b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 961.896172][T16248] RAX: ffffffffffffffda RBX: 00007fce465b5fa0 RCX: 00007fce4638e9a9 [ 961.896189][T16248] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 961.896206][T16248] RBP: 00007fce46410d69 R08: 0000000000001000 R09: 0000000000000000 [ 961.896223][T16248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.896240][T16248] R13: 0000000000000000 R14: 00007fce465b5fa0 R15: 00007ffd598bbc78 [ 961.896278][T16248] [ 962.108924][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.105703][T12719] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 965.337039][T16279] Falling back ldisc for ttyS2. [ 968.041043][T16312] zswap: compressor not available [ 968.155990][T12719] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 968.156017][T12719] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 968.171780][T12719] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 968.171806][T12719] Bluetooth: hci2: adv larger than maximum supported [ 968.179528][T12719] Bluetooth: hci2: Malformed LE Event: 0x0d [ 972.789388][T16350] FAULT_INJECTION: forcing a failure. [ 972.789388][T16350] name fail_futex, interval 1, probability 0, space 0, times 0 [ 972.968002][T16350] CPU: 0 UID: 0 PID: 16350 Comm: syz.0.2112 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 972.968030][T16350] Tainted: [U]=USER [ 972.968036][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 972.968045][T16350] Call Trace: [ 972.968051][T16350] [ 972.968057][T16350] dump_stack_lvl+0x16c/0x1f0 [ 972.968078][T16350] should_fail_ex+0x512/0x640 [ 972.968097][T16350] get_futex_key+0x1d0/0x1540 [ 972.968117][T16350] ? __pfx_get_futex_key+0x10/0x10 [ 972.968141][T16350] futex_wake+0xe7/0x4e0 [ 972.968163][T16350] ? __pfx_futex_wake+0x10/0x10 [ 972.968187][T16350] ? kasan_quarantine_put+0x10a/0x240 [ 972.968202][T16350] ? lockdep_hardirqs_on+0x7c/0x110 [ 972.968220][T16350] do_futex+0x1e3/0x350 [ 972.968238][T16350] ? __pfx_do_futex+0x10/0x10 [ 972.968256][T16350] ? __do_sys_getcwd+0x4d6/0x930 [ 972.968276][T16350] __x64_sys_futex+0x1e0/0x4c0 [ 972.968296][T16350] ? __pfx___x64_sys_futex+0x10/0x10 [ 972.968313][T16350] ? xfd_validate_state+0x61/0x180 [ 972.968333][T16350] ? __pfx_ksys_write+0x10/0x10 [ 972.968352][T16350] do_syscall_64+0xcd/0x490 [ 972.968369][T16350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.968384][T16350] RIP: 0033:0x7f8cc878e9a9 [ 972.968397][T16350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.968412][T16350] RSP: 002b:00007f8cc95380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 972.968426][T16350] RAX: ffffffffffffffda RBX: 00007f8cc89b5fa8 RCX: 00007f8cc878e9a9 [ 972.968437][T16350] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8cc89b5fac [ 972.968446][T16350] RBP: 00007f8cc89b5fa0 R08: 00007f8cc9539000 R09: 0000000000000000 [ 972.968455][T16350] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f8cc89b5fac [ 972.968464][T16350] R13: 0000000000000000 R14: 00007fff3dc8e690 R15: 00007fff3dc8e778 [ 972.968482][T16350] [ 975.952502][T12719] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 977.434701][T16376] vhci_hcd: invalid port number 16 [ 977.484293][T16376] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 979.250299][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2122'. [ 980.074217][T16397] team0: Port device team_slave_1 removed [ 980.436226][T16405] random: crng reseeded on system resumption [ 980.473086][T16405] FAULT_INJECTION: forcing a failure. [ 980.473086][T16405] name failslab, interval 1, probability 0, space 0, times 0 [ 980.539139][T16405] CPU: 1 UID: 0 PID: 16405 Comm: syz.3.2124 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 980.539183][T16405] Tainted: [U]=USER [ 980.539192][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 980.539208][T16405] Call Trace: [ 980.539216][T16405] [ 980.539227][T16405] dump_stack_lvl+0x16c/0x1f0 [ 980.539258][T16405] should_fail_ex+0x512/0x640 [ 980.539284][T16405] ? lockdep_hardirqs_on+0x7c/0x110 [ 980.539312][T16405] should_failslab+0xc2/0x120 [ 980.539341][T16405] __kmalloc_cache_noprof+0x6a/0x3e0 [ 980.539376][T16405] ? do_raw_spin_lock+0x12c/0x2b0 [ 980.539411][T16405] ? find_held_lock+0x2b/0x80 [ 980.539433][T16405] ? async_schedule_node_domain+0x54/0x120 [ 980.539468][T16405] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 980.539492][T16405] async_schedule_node_domain+0x54/0x120 [ 980.539525][T16405] dev_cache_fw_image+0x38e/0x490 [ 980.539564][T16405] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 980.539605][T16405] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 980.539642][T16405] dpm_for_each_dev+0x5d/0xb0 [ 980.539677][T16405] fw_pm_notify+0x81/0x150 [ 980.539709][T16405] notifier_call_chain+0xb9/0x410 [ 980.539737][T16405] ? __pfx_fw_pm_notify+0x10/0x10 [ 980.539778][T16405] blocking_notifier_call_chain_robust+0xc8/0x160 [ 980.539813][T16405] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 980.539858][T16405] pm_notifier_call_chain_robust+0x27/0x60 [ 980.539892][T16405] snapshot_open+0x218/0x2b0 [ 980.539920][T16405] ? __pfx_snapshot_open+0x10/0x10 [ 980.539950][T16405] misc_open+0x35d/0x420 [ 980.539987][T16405] ? __pfx_misc_open+0x10/0x10 [ 980.540020][T16405] chrdev_open+0x231/0x6a0 [ 980.540047][T16405] ? __pfx_apparmor_file_open+0x10/0x10 [ 980.540083][T16405] ? __pfx_chrdev_open+0x10/0x10 [ 980.540114][T16405] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 980.540167][T16405] do_dentry_open+0x744/0x1c10 [ 980.540195][T16405] ? __pfx_chrdev_open+0x10/0x10 [ 980.540229][T16405] vfs_open+0x82/0x3f0 [ 980.540265][T16405] path_openat+0x1de4/0x2cb0 [ 980.540304][T16405] ? __pfx_path_openat+0x10/0x10 [ 980.540332][T16405] ? __lock_acquire+0xb8a/0x1c90 [ 980.540369][T16405] do_filp_open+0x20b/0x470 [ 980.540394][T16405] ? __pfx_do_filp_open+0x10/0x10 [ 980.540449][T16405] ? alloc_fd+0x471/0x7d0 [ 980.540497][T16405] do_sys_openat2+0x11b/0x1d0 [ 980.540528][T16405] ? __pfx_do_sys_openat2+0x10/0x10 [ 980.540563][T16405] ? __fget_files+0x20e/0x3c0 [ 980.540607][T16405] __x64_sys_openat+0x174/0x210 [ 980.540638][T16405] ? __pfx___x64_sys_openat+0x10/0x10 [ 980.540668][T16405] ? ksys_write+0x1ac/0x250 [ 980.540706][T16405] do_syscall_64+0xcd/0x490 [ 980.540736][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.540764][T16405] RIP: 0033:0x7fb21938e9a9 [ 980.540785][T16405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.540809][T16405] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 980.540834][T16405] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 980.540851][T16405] RDX: 0000000000180b03 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 980.540869][T16405] RBP: 00007fb21a2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 980.540885][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 980.540900][T16405] R13: 0000000000000000 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 980.540938][T16405] [ 981.158888][T16405] [ 981.161255][T16405] ====================================================== [ 981.168284][T16405] WARNING: possible circular locking dependency detected [ 981.175314][T16405] 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 Tainted: G U [ 981.183995][T16405] ------------------------------------------------------ [ 981.191020][T16405] syz.3.2124/16405 is trying to acquire lock: [ 981.197098][T16405] ffff88803519c068 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7e0/0x23e0 [ 981.207766][T16405] [ 981.207766][T16405] but task is already holding lock: [ 981.215142][T16405] ffffffff8f50d568 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 981.224063][T16405] [ 981.224063][T16405] which lock already depends on the new lock. [ 981.224063][T16405] [ 981.234485][T16405] [ 981.234485][T16405] the existing dependency chain (in reverse order) is: [ 981.243502][T16405] [ 981.243502][T16405] -> #4 (dpm_list_mtx){+.+.}-{4:4}: [ 981.250897][T16405] __mutex_lock+0x199/0xb90 [ 981.255915][T16405] device_pm_add+0x87/0x3e0 [ 981.260924][T16405] device_add+0x9cd/0x1a70 [ 981.265852][T16405] device_create_groups_vargs+0x1f8/0x270 [ 981.272108][T16405] device_create+0xed/0x130 [ 981.277135][T16405] msr_device_create+0x31/0x70 [ 981.282407][T16405] cpuhp_invoke_callback+0x3d5/0xa10 [ 981.288204][T16405] cpuhp_thread_fun+0x47e/0x6f0 [ 981.293593][T16405] smpboot_thread_fn+0x3f4/0xae0 [ 981.299076][T16405] kthread+0x3c5/0x780 [ 981.303678][T16405] ret_from_fork+0x5d4/0x6f0 [ 981.308799][T16405] ret_from_fork_asm+0x1a/0x30 [ 981.314095][T16405] [ 981.314095][T16405] -> #3 (cpuhp_state-up){+.+.}-{0:0}: [ 981.322618][T16405] cpuhp_thread_fun+0x193/0x6f0 [ 981.327994][T16405] smpboot_thread_fn+0x3f4/0xae0 [ 981.333457][T16405] kthread+0x3c5/0x780 [ 981.338092][T16405] ret_from_fork+0x5d4/0x6f0 [ 981.343211][T16405] ret_from_fork_asm+0x1a/0x30 [ 981.348498][T16405] [ 981.348498][T16405] -> #2 (cpu_hotplug_lock){++++}-{0:0}: [ 981.356236][T16405] cpus_read_lock+0x42/0x160 [ 981.361355][T16405] ring_buffer_resize+0x105/0x15c0 [ 981.366994][T16405] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 981.373942][T16405] tracing_update_buffers+0x102/0x130 [ 981.379848][T16405] ftrace_event_write+0x14a/0x290 [ 981.385399][T16405] vfs_write+0x29d/0x1150 [ 981.390250][T16405] ksys_write+0x12a/0x250 [ 981.395105][T16405] do_syscall_64+0xcd/0x490 [ 981.400132][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.406549][T16405] [ 981.406549][T16405] -> #1 (trace_types_lock){+.+.}-{4:4}: [ 981.414300][T16405] __mutex_lock+0x199/0xb90 [ 981.419343][T16405] tracing_check_open_get_tr.part.0+0x45/0x130 [ 981.426040][T16405] tracing_err_log_open+0x6c/0x250 [ 981.431685][T16405] do_dentry_open+0x744/0x1c10 [ 981.436968][T16405] vfs_open+0x82/0x3f0 [ 981.441566][T16405] dentry_open+0x71/0xd0 [ 981.446332][T16405] ima_calc_file_hash+0x2b6/0x490 [ 981.451878][T16405] ima_collect_measurement+0x897/0xa40 [ 981.457873][T16405] process_measurement+0x11fa/0x23e0 [ 981.463680][T16405] ima_file_check+0xc5/0x110 [ 981.468801][T16405] security_file_post_open+0x8e/0x210 [ 981.474716][T16405] path_openat+0x1404/0x2cb0 [ 981.479828][T16405] do_filp_open+0x20b/0x470 [ 981.484855][T16405] do_sys_openat2+0x11b/0x1d0 [ 981.490060][T16405] __x64_sys_openat+0x174/0x210 [ 981.495442][T16405] do_syscall_64+0xcd/0x490 [ 981.500471][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.506889][T16405] [ 981.506889][T16405] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 981.515500][T16405] __lock_acquire+0x126f/0x1c90 [ 981.520883][T16405] lock_acquire+0x179/0x350 [ 981.525915][T16405] __mutex_lock+0x199/0xb90 [ 981.530942][T16405] process_measurement+0x7e0/0x23e0 [ 981.536662][T16405] ima_file_check+0xc5/0x110 [ 981.541787][T16405] security_file_post_open+0x8e/0x210 [ 981.547689][T16405] path_openat+0x1404/0x2cb0 [ 981.552800][T16405] do_file_open_root+0x322/0x610 [ 981.558256][T16405] file_open_root+0x2a7/0x450 [ 981.563455][T16405] kernel_read_file_from_path_initns+0x189/0x260 [ 981.570312][T16405] _request_firmware+0x744/0x1470 [ 981.575873][T16405] __async_dev_cache_fw_image+0xb1/0x340 [ 981.582033][T16405] async_schedule_node_domain+0xd1/0x120 [ 981.588200][T16405] dev_cache_fw_image+0x38e/0x490 [ 981.593777][T16405] dpm_for_each_dev+0x5d/0xb0 [ 981.598986][T16405] fw_pm_notify+0x81/0x150 [ 981.603932][T16405] notifier_call_chain+0xb9/0x410 [ 981.609483][T16405] blocking_notifier_call_chain_robust+0xc8/0x160 [ 981.616426][T16405] pm_notifier_call_chain_robust+0x27/0x60 [ 981.622767][T16405] snapshot_open+0x218/0x2b0 [ 981.627886][T16405] misc_open+0x35d/0x420 [ 981.632659][T16405] chrdev_open+0x231/0x6a0 [ 981.637599][T16405] do_dentry_open+0x744/0x1c10 [ 981.642885][T16405] vfs_open+0x82/0x3f0 [ 981.647485][T16405] path_openat+0x1de4/0x2cb0 [ 981.652597][T16405] do_filp_open+0x20b/0x470 [ 981.657636][T16405] do_sys_openat2+0x11b/0x1d0 [ 981.662845][T16405] __x64_sys_openat+0x174/0x210 [ 981.668225][T16405] do_syscall_64+0xcd/0x490 [ 981.673250][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.679670][T16405] [ 981.679670][T16405] other info that might help us debug this: [ 981.679670][T16405] [ 981.689899][T16405] Chain exists of: [ 981.689899][T16405] &ima_iint_mutex_key[depth] --> cpuhp_state-up --> dpm_list_mtx [ 981.689899][T16405] [ 981.703561][T16405] Possible unsafe locking scenario: [ 981.703561][T16405] [ 981.711016][T16405] CPU0 CPU1 [ 981.716381][T16405] ---- ---- [ 981.721743][T16405] lock(dpm_list_mtx); [ 981.725911][T16405] lock(cpuhp_state-up); [ 981.732765][T16405] lock(dpm_list_mtx); [ 981.739441][T16405] lock(&ima_iint_mutex_key[depth]); [ 981.744815][T16405] [ 981.744815][T16405] *** DEADLOCK *** [ 981.744815][T16405] [ 981.752953][T16405] 5 locks held by syz.3.2124/16405: [ 981.758151][T16405] #0: ffffffff8f3002a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 981.766626][T16405] #1: ffffffff8e488228 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 981.777004][T16405] #2: ffffffff8e4c8910 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 981.788887][T16405] #3: ffffffff8f512b68 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 981.797575][T16405] #4: ffffffff8f50d568 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 981.806942][T16405] [ 981.806942][T16405] stack backtrace: [ 981.812892][T16405] CPU: 0 UID: 0 PID: 16405 Comm: syz.3.2124 Tainted: G U 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 981.812925][T16405] Tainted: [U]=USER [ 981.812933][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.812947][T16405] Call Trace: [ 981.812955][T16405] [ 981.812964][T16405] dump_stack_lvl+0x116/0x1f0 [ 981.812990][T16405] print_circular_bug+0x275/0x350 [ 981.813018][T16405] check_noncircular+0x14c/0x170 [ 981.813049][T16405] __lock_acquire+0x126f/0x1c90 [ 981.813081][T16405] lock_acquire+0x179/0x350 [ 981.813108][T16405] ? process_measurement+0x7e0/0x23e0 [ 981.813132][T16405] ? __pfx___might_resched+0x10/0x10 [ 981.813157][T16405] __mutex_lock+0x199/0xb90 [ 981.813179][T16405] ? process_measurement+0x7e0/0x23e0 [ 981.813201][T16405] ? process_measurement+0x7e0/0x23e0 [ 981.813224][T16405] ? __pfx___mutex_lock+0x10/0x10 [ 981.813245][T16405] ? __pfx___might_resched+0x10/0x10 [ 981.813268][T16405] ? find_held_lock+0x2b/0x80 [ 981.813290][T16405] ? down_write+0x14d/0x200 [ 981.813316][T16405] ? process_measurement+0x7e0/0x23e0 [ 981.813338][T16405] process_measurement+0x7e0/0x23e0 [ 981.813369][T16405] ? __pfx_process_measurement+0x10/0x10 [ 981.813394][T16405] ? find_held_lock+0x2b/0x80 [ 981.813414][T16405] ? fscrypt_file_open+0x47c/0x590 [ 981.813459][T16405] ? __pfx___fsnotify_parent+0x10/0x10 [ 981.813492][T16405] ima_file_check+0xc5/0x110 [ 981.813513][T16405] ? __pfx_ima_file_check+0x10/0x10 [ 981.813536][T16405] ? vfs_open+0x2e3/0x3f0 [ 981.813562][T16405] security_file_post_open+0x8e/0x210 [ 981.813593][T16405] path_openat+0x1404/0x2cb0 [ 981.813617][T16405] ? trace_kmem_cache_alloc+0x28/0xc0 [ 981.813643][T16405] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 981.813665][T16405] ? __pfx_path_openat+0x10/0x10 [ 981.813685][T16405] ? __asan_memcpy+0x3c/0x60 [ 981.813718][T16405] do_file_open_root+0x322/0x610 [ 981.813739][T16405] ? __pfx_do_file_open_root+0x10/0x10 [ 981.813772][T16405] ? vsnprintf+0x318/0x1160 [ 981.813809][T16405] file_open_root+0x2a7/0x450 [ 981.813831][T16405] ? __pfx_file_open_root+0x10/0x10 [ 981.813851][T16405] ? find_held_lock+0x2b/0x80 [ 981.813872][T16405] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 981.813902][T16405] kernel_read_file_from_path_initns+0x189/0x260 [ 981.813930][T16405] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 981.813957][T16405] ? trace_kmem_cache_alloc+0x28/0xc0 [ 981.813983][T16405] ? _request_firmware+0x503/0x1470 [ 981.814017][T16405] _request_firmware+0x744/0x1470 [ 981.814053][T16405] ? __pfx__request_firmware+0x10/0x10 [ 981.814084][T16405] ? dump_stack_lvl+0x197/0x1f0 [ 981.814105][T16405] ? dump_stack_lvl+0x1a3/0x1f0 [ 981.814126][T16405] __async_dev_cache_fw_image+0xb1/0x340 [ 981.814147][T16405] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 981.814169][T16405] ? mark_held_locks+0x49/0x80 [ 981.814195][T16405] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 981.814227][T16405] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 981.814248][T16405] async_schedule_node_domain+0xd1/0x120 [ 981.814275][T16405] dev_cache_fw_image+0x38e/0x490 [ 981.814306][T16405] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 981.814338][T16405] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 981.814369][T16405] dpm_for_each_dev+0x5d/0xb0 [ 981.814398][T16405] fw_pm_notify+0x81/0x150 [ 981.814425][T16405] notifier_call_chain+0xb9/0x410 [ 981.814449][T16405] ? __pfx_fw_pm_notify+0x10/0x10 [ 981.814481][T16405] blocking_notifier_call_chain_robust+0xc8/0x160 [ 981.814509][T16405] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 981.814541][T16405] pm_notifier_call_chain_robust+0x27/0x60 [ 981.814570][T16405] snapshot_open+0x218/0x2b0 [ 981.814595][T16405] ? __pfx_snapshot_open+0x10/0x10 [ 981.814620][T16405] misc_open+0x35d/0x420 [ 981.814651][T16405] ? __pfx_misc_open+0x10/0x10 [ 981.814679][T16405] chrdev_open+0x231/0x6a0 [ 981.814702][T16405] ? __pfx_apparmor_file_open+0x10/0x10 [ 981.814733][T16405] ? __pfx_chrdev_open+0x10/0x10 [ 981.814756][T16405] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 981.814796][T16405] do_dentry_open+0x744/0x1c10 [ 981.814821][T16405] ? __pfx_chrdev_open+0x10/0x10 [ 981.814846][T16405] vfs_open+0x82/0x3f0 [ 981.814873][T16405] path_openat+0x1de4/0x2cb0 [ 981.814896][T16405] ? __pfx_path_openat+0x10/0x10 [ 981.814917][T16405] ? __lock_acquire+0xb8a/0x1c90 [ 981.814945][T16405] do_filp_open+0x20b/0x470 [ 981.814965][T16405] ? __pfx_do_filp_open+0x10/0x10 [ 981.814994][T16405] ? alloc_fd+0x471/0x7d0 [ 981.815027][T16405] do_sys_openat2+0x11b/0x1d0 [ 981.815054][T16405] ? __pfx_do_sys_openat2+0x10/0x10 [ 981.815082][T16405] ? __fget_files+0x20e/0x3c0 [ 981.815115][T16405] __x64_sys_openat+0x174/0x210 [ 981.815142][T16405] ? __pfx___x64_sys_openat+0x10/0x10 [ 981.815169][T16405] ? ksys_write+0x1ac/0x250 [ 981.815194][T16405] do_syscall_64+0xcd/0x490 [ 981.815216][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.815239][T16405] RIP: 0033:0x7fb21938e9a9 [ 981.815257][T16405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.815278][T16405] RSP: 002b:00007fb21a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 981.815299][T16405] RAX: ffffffffffffffda RBX: 00007fb2195b5fa0 RCX: 00007fb21938e9a9 [ 981.815314][T16405] RDX: 0000000000180b03 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 981.815329][T16405] RBP: 00007fb21a2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 981.815343][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 981.815356][T16405] R13: 0000000000000000 R14: 00007fb2195b5fa0 R15: 00007ffcf5954c78 [ 981.815377][T16405] [ 982.646098][T16405] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 982.655206][T16405] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -4 [ 982.664531][T16405] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s