last executing test programs: 19.928554813s ago: executing program 3 (id=4127): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x6, 0x8, 0x0, 0x1, [@generic="1a32"]}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040075}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0xfffffffd, 0x0, 0x220000c1}, 0xc0) 19.584327398s ago: executing program 3 (id=4129): r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) read$auto_transactions_fops_(r0, &(0x7f0000001140)=""/67, 0x43) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r1 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r1, 0x201, 0x9, 0x4, 0x0) fanotify_mark$auto(r1, 0x1, 0x9, 0x4, 0x0) r2 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000080)=@enable_stats={0x6}, 0x200) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r4, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, 0x10000000000402) renameat$auto(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') 19.075218978s ago: executing program 3 (id=4133): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x800) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) 18.193932092s ago: executing program 3 (id=4145): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0x3, 0x89e1, 0x91) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x809}, 0x7}, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x20000080) statmount$auto(0x0, 0x0, 0x1fe, 0x9) open(0x0, 0x220c0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20040001) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x20008041) 17.060880525s ago: executing program 3 (id=4143): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0xfe, 0x100000001, 0xdf, 0x9b72, r3, 0x7fff) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0xfeff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = mq_open$auto(0x0, 0x62, 0xfffc, 0x0) mq_timedsend$auto(r4, 0x0, 0x80, 0x9, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 15.972654003s ago: executing program 3 (id=4149): mmap$auto(0x8000, 0x2020009, 0x3, 0x100000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x800) io_uring_setup$auto(0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f00000001c0)={0x0, 0x45}, 0x1) io_uring_setup$auto(0x2000, 0x0) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5761, 0x4) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x840) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) socket(0x28, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, 0x0) r5 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ipsec\x00', 0x1cb202, 0x0) read$auto_ipsec_dbg_fops_ipsec(r5, 0x0, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000300)=""/234, 0xea) 3.592296565s ago: executing program 1 (id=4225): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10}) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c06, 0x0) unshare$auto(0x40000080) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(0xffffffffffffffff, r4, 0x0, 0x1000200) write$auto(r3, 0x0, 0xa3d9) munmap$auto(0x200000008000, 0xffffffff) 3.241550218s ago: executing program 2 (id=4228): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sched_get_priority_min$auto(0x7) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) io_uring_setup$auto(0x9f6, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x24000004) close_range$auto(0x2, 0x8, 0x0) 3.104092921s ago: executing program 2 (id=4230): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0xfffffffd, 0x0, 0x220000c1}, 0xc0) 2.876280148s ago: executing program 2 (id=4231): r0 = prctl$auto(0x3e, 0x6558403, 0x0, 0x9, 0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0xa901, 0x0) signalfd$auto(r2, 0x0, 0x100000000) fsopen$auto(0x0, 0x401) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) ioctl$auto_USBDEVFS_SETCONFIGURATION(r2, 0x80045505, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nilfs2/features/revision\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/19, 0x13) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="6704be1675e4cb2ccecbe2838feb648f06002bbd7000fddbdf2500d529000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6e640, 0x90) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x6, 0x7, 0x5, 0x388, 0x0, 0x3ac41994, r4, [0xc, 0x9, 0x8], {0x2, 0xa, 0x10, 0xbe, 0x81, 0xffff8544, 0xffff, 0xf02, 0xfffffffffffffffb}, {0x2, 0xa20, 0x7, 0x5, 0x930464b, 0x10000009, 0x1040, 0x7, 0x8}}) readahead$auto(r4, 0x7ff, 0xfffffffffffffff8) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$auto_NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x2000805) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) r6 = timerfd_create$auto(0x8, 0x3) sendmmsg$auto(r6, &(0x7f0000000400)={{&(0x7f0000000240)="208e582c8d9d59d69b2a048d499b57301eee1282714c364f014e28c506d7bd1d3801f4a5945af3b5046a6d9b5bdaf0ac82c975ebe02968fcef2324ca6458ef0d41fcd052c2e74361e86f52f2442b6424a3ef35d04d0ca7cf66e83a88a323e8c382ac76fdf662a6ebb22502160f87ca0979459f8f6eef84cf0e7a105637ec6944ca0994512f94dc3599f0c8f7b55dec379bc4e55d7254e138ba57900837c4d5683436684716370b2ea753a23dfa670efddfd57dd051c9e284e45a96f12ad0f9e51e3b9ccdd16dc568442c969e5d9dbe624d89a25d164ea70b38181a6683df52fc6433f2e0713fedd251a8cfbb80", 0x1, &(0x7f0000000340)={&(0x7f00000001c0)="36b421777ae75c0c6864c7b210efdfc6285bd67d1a6cc18d662dd7", 0x3}, 0x9, &(0x7f0000000380)="23f98bff9e76ac013f174e98e5ee6684926ed59697c40725b1ea83291b87f77dab2ee6285f715bf87415551307111bb0d97b039bc15c9ad3d9222137b8239e34878a818a79cf38c93aa8", 0x6, 0x4}, 0x1b9}, 0x6, 0x40) socket(0x2, 0xa, 0x0) socketpair$auto(0x35, 0x8, 0xb02a, &(0x7f0000000040)=0x3) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 2.875687936s ago: executing program 0 (id=4239): r0 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r0, 0x7, 0x6}, 0x4, 0x100000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) 2.76984271s ago: executing program 0 (id=4232): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000300)=""/234, 0xea) mmap$auto(0x9, 0x101, 0xffffffffffff7fff, 0xeb1, 0xffffffffffffffff, 0x40000007ffe) r1 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000000)="77c82235b9e51b607329979038f969596b3912b68b68fe26a74e7dc5d47222c8") ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000000c0)="2324753ec4eb60d45208de7e20b71bc3930548cdee85f555499109979fc523f4ec22b4439ab072edfdddd68ea524032793163019550a63740f0db42f8e8dd9a13ac3e9a14003522f6222e89535620f") mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000000)=0x3) r3 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r4, 0x0, 0x7, 0x7) 2.249336756s ago: executing program 1 (id=4233): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x6, 0x8, 0x0, 0x1, [@generic="1a32"]}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040075}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x220000c1}, 0xc0) 1.852655291s ago: executing program 0 (id=4234): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x759, 0x5, 0x7181, 0x1ffde, 0x7, 0xfffffffffffffffa, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000380)) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0)) 1.76715488s ago: executing program 1 (id=4235): mmap$auto(0xfffffffffffffffd, 0x400408, 0xe0, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys2\x00', 0x1aec1, 0x0) ioctl$auto(r2, 0x4b47, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000000), 0x7f}, 0x6, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)="2391ebc4fdc5c2d69eac79cac4f759145a7a83448c05febf55744fcf34082d065a5102b8964da07b2136e74c4a79ad8a059a60e58555a73b2b5d90f974a445ff35ace6bddd04a0c623458df40286a5606e1af16b326575") sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f00000004c0)=0xe3) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004084}, 0x2800c88c) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) pread64$auto(r8, 0x0, 0x3, 0x1000007ffe) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32], 0x24}}, 0x4000000) setreuid$auto(0x9, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.609581735s ago: executing program 0 (id=4236): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) read$auto_urandom_fops_random(r0, &(0x7f0000000540)=""/4096, 0x1000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0) ppoll$auto(&(0x7f0000000040)={r3, 0x2}, 0x10, &(0x7f00000000c0)={0x7, 0x65a29aea}, &(0x7f0000000100)={0x4}, 0x8) openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x450003, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0xfffffffffffffe4c, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @u32=0xa888}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/veth0_to_bridge/interval_probe_time_ms\x00', 0x202, 0x0) sendfile$auto(r7, r6, 0x0, 0x48) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4, 0x0) r8 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r8, 0x0, 0xe) 1.587989043s ago: executing program 2 (id=4237): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sched_get_priority_min$auto(0x7) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) io_uring_setup$auto(0x9f6, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x24000004) close_range$auto(0x2, 0x8, 0x0) 1.407005179s ago: executing program 2 (id=4238): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000300)=""/234, 0xea) mmap$auto(0x9, 0x101, 0xffffffffffff7fff, 0xeb1, 0xffffffffffffffff, 0x40000007ffe) r1 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000000)="77c82235b9e51b607329979038f969596b3912b68b68fe26a74e7dc5d47222c8") ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000000c0)="2324753ec4eb60d45208de7e20b71bc3930548cdee85f555499109979fc523f4ec22b4439ab072edfdddd68ea524032793163019550a63740f0db42f8e8dd9a13ac3e9a14003522f6222e89535620f") mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000000)=0x3) r3 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r4, 0x0, 0x7, 0x7) 936.616724ms ago: executing program 0 (id=4240): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0xfffffffd, 0x0, 0x220000c1}, 0xc0) 770.818816ms ago: executing program 32 (id=4149): mmap$auto(0x8000, 0x2020009, 0x3, 0x100000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x800) io_uring_setup$auto(0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f00000001c0)={0x0, 0x45}, 0x1) io_uring_setup$auto(0x2000, 0x0) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5761, 0x4) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x840) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) socket(0x28, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, 0x0) r5 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ipsec\x00', 0x1cb202, 0x0) read$auto_ipsec_dbg_fops_ipsec(r5, 0x0, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000300)=""/234, 0xea) 736.784283ms ago: executing program 2 (id=4248): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10}) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c06, 0x0) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) munmap$auto(0x200000008000, 0xffffffff) 734.40399ms ago: executing program 0 (id=4242): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) read$auto(0xffffffffffffffff, 0x0, 0x4) 730.070782ms ago: executing program 1 (id=4243): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) read$auto(0xffffffffffffffff, 0x0, 0x4) 253.450174ms ago: executing program 1 (id=4244): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sched_get_priority_min$auto(0x7) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) io_uring_setup$auto(0x9f6, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x24000004) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 1 (id=4245): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) kernel console output (not intermixed with test programs): ] random: crng reseeded on system resumption [ 859.454195][T20166] FAULT_INJECTION: forcing a failure. [ 859.454195][T20166] name failslab, interval 1, probability 0, space 0, times 0 [ 859.467310][T20166] CPU: 0 UID: 0 PID: 20166 Comm: syz.2.3556 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 859.467335][T20166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 859.467345][T20166] Call Trace: [ 859.467352][T20166] [ 859.467358][T20166] dump_stack_lvl+0x116/0x1f0 [ 859.467383][T20166] should_fail_ex+0x512/0x640 [ 859.467403][T20166] should_failslab+0xc2/0x120 [ 859.467421][T20166] __kmalloc_cache_noprof+0x6a/0x3e0 [ 859.467446][T20166] ? alloc_fw_cache_entry+0x3f/0xd0 [ 859.467469][T20166] ? __pfx_fw_name_devm_release+0x10/0x10 [ 859.467490][T20166] alloc_fw_cache_entry+0x3f/0xd0 [ 859.467512][T20166] dev_create_fw_entry+0x3d/0x150 [ 859.467533][T20166] ? __pfx_fw_name_devm_release+0x10/0x10 [ 859.467553][T20166] devres_for_each_res+0x173/0x1d0 [ 859.467571][T20166] ? __pfx_devm_name_match+0x10/0x10 [ 859.467590][T20166] ? __pfx_dev_create_fw_entry+0x10/0x10 [ 859.467612][T20166] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 859.467634][T20166] dev_cache_fw_image+0xa2/0x490 [ 859.467657][T20166] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 859.467682][T20166] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 859.467704][T20166] dpm_for_each_dev+0x5d/0xb0 [ 859.467725][T20166] fw_pm_notify+0x81/0x150 [ 859.467744][T20166] notifier_call_chain+0xb9/0x410 [ 859.467761][T20166] ? __pfx_fw_pm_notify+0x10/0x10 [ 859.467785][T20166] blocking_notifier_call_chain_robust+0xc8/0x160 [ 859.467805][T20166] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 859.467831][T20166] pm_notifier_call_chain_robust+0x27/0x60 [ 859.467851][T20166] snapshot_open+0x218/0x2b0 [ 859.467869][T20166] ? __pfx_snapshot_open+0x10/0x10 [ 859.467887][T20166] misc_open+0x35d/0x420 [ 859.467909][T20166] ? __pfx_misc_open+0x10/0x10 [ 859.467929][T20166] chrdev_open+0x231/0x6a0 [ 859.467944][T20166] ? __pfx_apparmor_file_open+0x10/0x10 [ 859.467967][T20166] ? __pfx_chrdev_open+0x10/0x10 [ 859.467984][T20166] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 859.468010][T20166] do_dentry_open+0x744/0x1c10 [ 859.468026][T20166] ? __pfx_chrdev_open+0x10/0x10 [ 859.468045][T20166] vfs_open+0x82/0x3f0 [ 859.468066][T20166] path_openat+0x1de4/0x2cb0 [ 859.468088][T20166] ? __pfx_path_openat+0x10/0x10 [ 859.468103][T20166] ? __lock_acquire+0xb8a/0x1c90 [ 859.468125][T20166] do_filp_open+0x20b/0x470 [ 859.468139][T20166] ? __pfx_do_filp_open+0x10/0x10 [ 859.468168][T20166] ? alloc_fd+0x471/0x7d0 [ 859.468196][T20166] do_sys_openat2+0x11b/0x1d0 [ 859.468214][T20166] ? __pfx_do_sys_openat2+0x10/0x10 [ 859.468241][T20166] __x64_sys_openat+0x174/0x210 [ 859.468260][T20166] ? __pfx___x64_sys_openat+0x10/0x10 [ 859.468288][T20166] do_syscall_64+0xcd/0x490 [ 859.468305][T20166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.468320][T20166] RIP: 0033:0x7f879698e9a9 [ 859.468335][T20166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.468349][T20166] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 859.468363][T20166] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 859.468381][T20166] RDX: 0000000000180b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 859.468392][T20166] RBP: 00007f8796a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 859.468401][T20166] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000000 [ 859.468411][T20166] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 859.468431][T20166] [ 860.345349][T20171] Invalid ELF header magic: != ELF [ 861.261902][T20194] openvswitch: netlink: IPv4 tunnel dst address is zero [ 861.674676][T20191] usb usb2: usbfs: process 20191 (syz.2.3562) did not claim interface 1 before use [ 862.438660][T20224] FAULT_INJECTION: forcing a failure. [ 862.438660][T20224] name failslab, interval 1, probability 0, space 0, times 0 [ 862.507744][T20224] CPU: 0 UID: 0 PID: 20224 Comm: syz.2.3572 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 862.507770][T20224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 862.507780][T20224] Call Trace: [ 862.507786][T20224] [ 862.507793][T20224] dump_stack_lvl+0x16c/0x1f0 [ 862.507813][T20224] should_fail_ex+0x512/0x640 [ 862.507829][T20224] ? fs_reclaim_acquire+0xae/0x150 [ 862.507852][T20224] ? tomoyo_encode2+0x100/0x3e0 [ 862.507872][T20224] should_failslab+0xc2/0x120 [ 862.507890][T20224] __kmalloc_noprof+0xd2/0x510 [ 862.507905][T20224] ? d_absolute_path+0x136/0x1a0 [ 862.507926][T20224] tomoyo_encode2+0x100/0x3e0 [ 862.507942][T20224] tomoyo_encode+0x29/0x50 [ 862.507955][T20224] tomoyo_realpath_from_path+0x18f/0x6e0 [ 862.507977][T20224] tomoyo_check_open_permission+0x2ab/0x3c0 [ 862.507999][T20224] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 862.508039][T20224] ? do_raw_spin_lock+0x12c/0x2b0 [ 862.508067][T20224] tomoyo_file_open+0x6b/0x90 [ 862.508085][T20224] security_file_open+0x84/0x1e0 [ 862.508107][T20224] do_dentry_open+0x596/0x1c10 [ 862.508128][T20224] vfs_open+0x82/0x3f0 [ 862.508148][T20224] path_openat+0x1de4/0x2cb0 [ 862.508169][T20224] ? __pfx_path_openat+0x10/0x10 [ 862.508184][T20224] ? __lock_acquire+0xb8a/0x1c90 [ 862.508206][T20224] do_filp_open+0x20b/0x470 [ 862.508220][T20224] ? __pfx_do_filp_open+0x10/0x10 [ 862.508248][T20224] ? alloc_fd+0x471/0x7d0 [ 862.508276][T20224] do_sys_openat2+0x11b/0x1d0 [ 862.508294][T20224] ? __pfx_do_sys_openat2+0x10/0x10 [ 862.508320][T20224] __x64_sys_openat+0x174/0x210 [ 862.508339][T20224] ? __pfx___x64_sys_openat+0x10/0x10 [ 862.508366][T20224] do_syscall_64+0xcd/0x490 [ 862.508383][T20224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.508398][T20224] RIP: 0033:0x7f879698e9a9 [ 862.508412][T20224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.508426][T20224] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 862.508442][T20224] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 862.508452][T20224] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 862.508461][T20224] RBP: 00007f8796a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 862.508470][T20224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.508479][T20224] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 862.508498][T20224] [ 862.508546][T20224] ERROR: Out of memory at tomoyo_realpath_from_path. [ 862.826466][T20218] zswap: compressor 000 not available [ 863.027145][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'. [ 864.238875][T20273] openvswitch: netlink: IPv4 tunnel dst address is zero [ 864.399819][T20277] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 864.409861][T20261] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3580'. [ 864.520017][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 866.237373][T20310] netlink: 206 bytes leftover after parsing attributes in process `syz.2.3595'. [ 866.826862][T20315] random: crng reseeded on system resumption [ 867.580869][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 868.586718][T20335] FAULT_INJECTION: forcing a failure. [ 868.586718][T20335] name fail_futex, interval 1, probability 0, space 0, times 0 [ 868.615699][T20339] openvswitch: netlink: IPv4 tunnel dst address is zero [ 868.756270][T20335] CPU: 0 UID: 0 PID: 20335 Comm: syz.0.3602 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 868.756295][T20335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 868.756305][T20335] Call Trace: [ 868.756311][T20335] [ 868.756317][T20335] dump_stack_lvl+0x16c/0x1f0 [ 868.756337][T20335] should_fail_ex+0x512/0x640 [ 868.756356][T20335] get_futex_key+0x1d0/0x1540 [ 868.756405][T20335] ? __pfx_get_futex_key+0x10/0x10 [ 868.756425][T20335] ? stack_trace_save+0x8e/0xc0 [ 868.756445][T20335] futex_wait_setup+0x84/0x510 [ 868.756470][T20335] __futex_wait+0x194/0x2f0 [ 868.756491][T20335] ? __pfx___futex_wait+0x10/0x10 [ 868.756515][T20335] ? __pfx_futex_wake_mark+0x10/0x10 [ 868.756544][T20335] ? __futex_hash.constprop.0+0x1e9/0x440 [ 868.756563][T20335] futex_wait+0xe8/0x380 [ 868.756583][T20335] ? __pfx_futex_wait+0x10/0x10 [ 868.756613][T20335] do_futex+0x229/0x350 [ 868.756631][T20335] ? __pfx_do_futex+0x10/0x10 [ 868.756649][T20335] ? __pfx___might_resched+0x10/0x10 [ 868.756667][T20335] __x64_sys_futex+0x1e0/0x4c0 [ 868.756685][T20335] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 868.756708][T20335] ? __pfx___x64_sys_futex+0x10/0x10 [ 868.756724][T20335] ? ksys_mmap_pgoff+0x85/0x5c0 [ 868.756742][T20335] ? xfd_validate_state+0x61/0x180 [ 868.756768][T20335] do_syscall_64+0xcd/0x490 [ 868.756784][T20335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.756799][T20335] RIP: 0033:0x7fcaa158e9a9 [ 868.756811][T20335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.756825][T20335] RSP: 002b:00007fcaa23ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 868.756839][T20335] RAX: ffffffffffffffda RBX: 00007fcaa17b5fa8 RCX: 00007fcaa158e9a9 [ 868.756849][T20335] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcaa17b5fa8 [ 868.756858][T20335] RBP: 00007fcaa17b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 868.756867][T20335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcaa17b5fac [ 868.756875][T20335] R13: 0000000000000000 R14: 00007ffe808ce660 R15: 00007ffe808ce748 [ 868.756893][T20335] [ 869.353202][T20336] zswap: compressor 000 not available [ 869.480241][ T30] audit: type=1800 audit(6048477390.940:12): pid=20346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3606" name="features" dev="configfs" ino=79374 res=0 errno=0 [ 869.579692][T20351] Invalid ELF header magic: != ELF [ 869.619762][T20350] Invalid ELF header magic: != ELF [ 870.288032][T20358] FAULT_INJECTION: forcing a failure. [ 870.288032][T20358] name failslab, interval 1, probability 0, space 0, times 0 [ 870.361571][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.368621][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.384561][T20356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 870.412964][T20358] CPU: 0 UID: 0 PID: 20358 Comm: syz.1.3609 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 870.412989][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.412999][T20358] Call Trace: [ 870.413006][T20358] [ 870.413012][T20358] dump_stack_lvl+0x16c/0x1f0 [ 870.413032][T20358] should_fail_ex+0x512/0x640 [ 870.413049][T20358] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 870.413068][T20358] should_failslab+0xc2/0x120 [ 870.413086][T20358] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 870.413103][T20358] ? alloc_inode+0xc3/0x240 [ 870.413125][T20358] alloc_inode+0xc3/0x240 [ 870.413142][T20358] new_inode+0x22/0x1c0 [ 870.413162][T20358] devpts_pty_new+0xcb/0x750 [ 870.413184][T20358] ? __pfx_devpts_pty_new+0x10/0x10 [ 870.413205][T20358] ? ptmx_open+0x192/0x360 [ 870.413230][T20358] ptmx_open+0x1be/0x360 [ 870.413252][T20358] ? __pfx_ptmx_open+0x10/0x10 [ 870.413274][T20358] chrdev_open+0x231/0x6a0 [ 870.413289][T20358] ? __pfx_apparmor_file_open+0x10/0x10 [ 870.413320][T20358] ? __pfx_chrdev_open+0x10/0x10 [ 870.413338][T20358] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 870.413367][T20358] do_dentry_open+0x744/0x1c10 [ 870.413383][T20358] ? __pfx_chrdev_open+0x10/0x10 [ 870.413403][T20358] vfs_open+0x82/0x3f0 [ 870.413424][T20358] path_openat+0x1de4/0x2cb0 [ 870.413446][T20358] ? __pfx_path_openat+0x10/0x10 [ 870.413461][T20358] ? __lock_acquire+0xb8a/0x1c90 [ 870.413483][T20358] do_filp_open+0x20b/0x470 [ 870.413498][T20358] ? __pfx_do_filp_open+0x10/0x10 [ 870.413526][T20358] ? alloc_fd+0x471/0x7d0 [ 870.413553][T20358] do_sys_openat2+0x11b/0x1d0 [ 870.413571][T20358] ? __pfx_do_sys_openat2+0x10/0x10 [ 870.413597][T20358] __x64_sys_openat+0x174/0x210 [ 870.413617][T20358] ? __pfx___x64_sys_openat+0x10/0x10 [ 870.413643][T20358] do_syscall_64+0xcd/0x490 [ 870.413661][T20358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.413676][T20358] RIP: 0033:0x7f11b418e9a9 [ 870.413688][T20358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.413702][T20358] RSP: 002b:00007f11b4f90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 870.413716][T20358] RAX: ffffffffffffffda RBX: 00007f11b43b5fa0 RCX: 00007f11b418e9a9 [ 870.413726][T20358] RDX: 0000000000002200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 870.413735][T20358] RBP: 00007f11b4210d69 R08: 0000000000000000 R09: 0000000000000000 [ 870.413744][T20358] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 870.413753][T20358] R13: 0000000000000000 R14: 00007f11b43b5fa0 R15: 00007ffc620c7fe8 [ 870.413772][T20358] [ 870.677502][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.386650][T20370] usb usb36: usbfs: process 20370 (syz.0.3613) did not claim interface 0 before use [ 871.407540][T20370] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 871.548916][T20384] openvswitch: netlink: IPv4 tunnel dst address is zero [ 871.626729][ C0] sd 0:0:1:0: [sda] tag#4069 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 871.637257][ C0] sd 0:0:1:0: [sda] tag#4069 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 871.886555][T20389] openvswitch: netlink: IPv4 tunnel dst address is zero [ 872.160053][T20395] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 873.025665][T20416] openvswitch: netlink: IPv4 tunnel dst address is zero [ 873.173202][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'. [ 873.528743][T20414] usb usb36: usbfs: process 20414 (syz.1.3625) did not claim interface 0 before use [ 873.596100][T20418] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 874.492875][T20445] program syz.3.3634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 875.659257][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3638'. [ 875.907495][T20464] FAULT_INJECTION: forcing a failure. [ 875.907495][T20464] name fail_futex, interval 1, probability 0, space 0, times 0 [ 875.941036][T20464] CPU: 0 UID: 0 PID: 20464 Comm: syz.3.3639 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 875.941060][T20464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.941071][T20464] Call Trace: [ 875.941077][T20464] [ 875.941083][T20464] dump_stack_lvl+0x16c/0x1f0 [ 875.941104][T20464] should_fail_ex+0x512/0x640 [ 875.941124][T20464] get_futex_key+0x1d0/0x1540 [ 875.941145][T20464] ? __pfx_get_futex_key+0x10/0x10 [ 875.941162][T20464] ? css_rstat_updated+0x9d/0xd30 [ 875.941184][T20464] futex_wait_setup+0x84/0x510 [ 875.941210][T20464] __futex_wait+0x194/0x2f0 [ 875.941232][T20464] ? __pfx___futex_wait+0x10/0x10 [ 875.941251][T20464] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 875.941276][T20464] ? __pfx_futex_wake_mark+0x10/0x10 [ 875.941299][T20464] ? plist_check_head+0xa3/0x150 [ 875.941318][T20464] ? find_held_lock+0x2b/0x80 [ 875.941338][T20464] futex_wait+0xe8/0x380 [ 875.941359][T20464] ? __pfx_futex_wait+0x10/0x10 [ 875.941382][T20464] ? kmem_cache_free+0x2d1/0x4d0 [ 875.941395][T20464] ? fd_install+0x225/0x750 [ 875.941416][T20464] ? putname+0x154/0x1a0 [ 875.941436][T20464] do_futex+0x229/0x350 [ 875.941454][T20464] ? __pfx_do_futex+0x10/0x10 [ 875.941472][T20464] ? __pfx_sched_core_share_pid+0x10/0x10 [ 875.941491][T20464] __x64_sys_futex+0x1e0/0x4c0 [ 875.941511][T20464] ? __pfx___x64_sys_futex+0x10/0x10 [ 875.941529][T20464] ? __pfx___do_sys_prctl+0x10/0x10 [ 875.941557][T20464] do_syscall_64+0xcd/0x490 [ 875.941573][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.941588][T20464] RIP: 0033:0x7f492378e9a9 [ 875.941600][T20464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.941615][T20464] RSP: 002b:00007f49246880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 875.941630][T20464] RAX: ffffffffffffffda RBX: 00007f49239b5fa8 RCX: 00007f492378e9a9 [ 875.941640][T20464] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49239b5fa8 [ 875.941649][T20464] RBP: 00007f49239b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 875.941658][T20464] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49239b5fac [ 875.941667][T20464] R13: 0000000000000000 R14: 00007ffdccba5800 R15: 00007ffdccba58e8 [ 875.941685][T20464] [ 876.950482][T20489] FAULT_INJECTION: forcing a failure. [ 876.950482][T20489] name failslab, interval 1, probability 0, space 0, times 0 [ 876.999954][T20489] CPU: 0 UID: 0 PID: 20489 Comm: syz.3.3647 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 877.000000][T20489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 877.000021][T20489] Call Trace: [ 877.000027][T20489] [ 877.000033][T20489] dump_stack_lvl+0x16c/0x1f0 [ 877.000053][T20489] should_fail_ex+0x512/0x640 [ 877.000069][T20489] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 877.000088][T20489] should_failslab+0xc2/0x120 [ 877.000106][T20489] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 877.000120][T20489] ? __pfx_futex_wait+0x10/0x10 [ 877.000141][T20489] ? getname_flags.part.0+0x4c/0x550 [ 877.000163][T20489] getname_flags.part.0+0x4c/0x550 [ 877.000181][T20489] ? kmem_cache_free+0x2d1/0x4d0 [ 877.000196][T20489] getname_flags+0x93/0xf0 [ 877.000218][T20489] do_mq_open+0x1ac/0x8c0 [ 877.000235][T20489] ? do_futex+0x122/0x350 [ 877.000254][T20489] ? __pfx_do_mq_open+0x10/0x10 [ 877.000270][T20489] ? __pfx_sched_core_share_pid+0x10/0x10 [ 877.000291][T20489] __x64_sys_mq_open+0x155/0x1e0 [ 877.000309][T20489] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 877.000336][T20489] do_syscall_64+0xcd/0x490 [ 877.000352][T20489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.000367][T20489] RIP: 0033:0x7f492378e9a9 [ 877.000380][T20489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.000394][T20489] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 877.000408][T20489] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 877.000418][T20489] RDX: 000000000000fffc RSI: 0000000000000062 RDI: 0000000000000000 [ 877.000426][T20489] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 877.000435][T20489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.000444][T20489] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 877.000462][T20489] [ 877.692027][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3648'. [ 877.748973][T20500] FAULT_INJECTION: forcing a failure. [ 877.748973][T20500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.749002][T20500] CPU: 0 UID: 0 PID: 20500 Comm: syz.2.3649 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 877.749021][T20500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 877.749030][T20500] Call Trace: [ 877.749035][T20500] [ 877.749041][T20500] dump_stack_lvl+0x16c/0x1f0 [ 877.749060][T20500] should_fail_ex+0x512/0x640 [ 877.749078][T20500] strncpy_from_user+0x3b/0x2e0 [ 877.749102][T20500] getname_flags.part.0+0x8f/0x550 [ 877.749124][T20500] getname_flags+0x93/0xf0 [ 877.749146][T20500] do_sys_openat2+0xb8/0x1d0 [ 877.749165][T20500] ? __pfx_do_sys_openat2+0x10/0x10 [ 877.749185][T20500] ? __fget_files+0x20e/0x3c0 [ 877.749211][T20500] __x64_sys_openat+0x174/0x210 [ 877.749230][T20500] ? __pfx___x64_sys_openat+0x10/0x10 [ 877.749248][T20500] ? ksys_write+0x1ac/0x250 [ 877.749268][T20500] do_syscall_64+0xcd/0x490 [ 877.749284][T20500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.749299][T20500] RIP: 0033:0x7f879698e9a9 [ 877.749311][T20500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.749326][T20500] RSP: 002b:00007f87947f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 877.749339][T20500] RAX: ffffffffffffffda RBX: 00007f8796bb6160 RCX: 00007f879698e9a9 [ 877.749349][T20500] RDX: 0000000000020401 RSI: 0000200000001c80 RDI: ffffffffffffff9c [ 877.749358][T20500] RBP: 00007f87947f6090 R08: 0000000000000000 R09: 0000000000000000 [ 877.749367][T20500] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 877.749376][T20500] R13: 0000000000000001 R14: 00007f8796bb6160 R15: 00007fffe30fc808 [ 877.749394][T20500] [ 878.041699][T20500] Invalid ELF header magic: != ELF [ 878.468092][T20518] FAULT_INJECTION: forcing a failure. [ 878.468092][T20518] name failslab, interval 1, probability 0, space 0, times 0 [ 878.468163][T20518] CPU: 0 UID: 0 PID: 20518 Comm: syz.1.3654 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 878.468183][T20518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.468193][T20518] Call Trace: [ 878.468198][T20518] [ 878.468205][T20518] dump_stack_lvl+0x16c/0x1f0 [ 878.468224][T20518] should_fail_ex+0x512/0x640 [ 878.468239][T20518] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 878.468258][T20518] should_failslab+0xc2/0x120 [ 878.468275][T20518] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 878.468291][T20518] ? alloc_inode+0x61/0x240 [ 878.468310][T20518] ? __pfx_rpc_fill_super+0x10/0x10 [ 878.468333][T20518] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 878.468351][T20518] alloc_inode+0x61/0x240 [ 878.468369][T20518] new_inode+0x22/0x1c0 [ 878.468386][T20518] ? __pfx_rpc_fill_super+0x10/0x10 [ 878.468408][T20518] rpc_fill_super+0x19c/0x840 [ 878.468429][T20518] ? sget_fc+0x808/0xc20 [ 878.468452][T20518] ? __pfx_set_anon_super_fc+0x10/0x10 [ 878.468473][T20518] ? __pfx_rpc_fill_super+0x10/0x10 [ 878.468494][T20518] get_tree_keyed+0x10b/0x1d0 [ 878.468517][T20518] vfs_get_tree+0x8e/0x340 [ 878.468537][T20518] vfs_cmd_create+0xd7/0x2a0 [ 878.468555][T20518] __do_sys_fsconfig+0x7b8/0xbe0 [ 878.468572][T20518] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 878.468599][T20518] do_syscall_64+0xcd/0x490 [ 878.468615][T20518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.468641][T20518] RIP: 0033:0x7f11b418e9a9 [ 878.468654][T20518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.468669][T20518] RSP: 002b:00007f11b4f90038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 878.468684][T20518] RAX: ffffffffffffffda RBX: 00007f11b43b5fa0 RCX: 00007f11b418e9a9 [ 878.468694][T20518] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 878.468703][T20518] RBP: 00007f11b4210d69 R08: 0000000000000000 R09: 0000000000000000 [ 878.468713][T20518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.468722][T20518] R13: 0000000000000000 R14: 00007f11b43b5fa0 R15: 00007ffc620c7fe8 [ 878.468742][T20518] [ 878.722648][ T30] audit: type=1800 audit(6048477400.220:13): pid=20523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3655" name="lu_gp_id" dev="configfs" ino=80161 res=0 errno=0 [ 878.812828][T20524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3656'. [ 879.127012][T20524] team0: Port device team_slave_1 removed [ 880.170693][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3659'. [ 880.222536][ C0] vkms_vblank_simulate: vblank timer overrun [ 880.256583][T20535] openvswitch: netlink: IPv4 tunnel dst address is zero [ 880.353802][T20539] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 880.448722][T20541] FAULT_INJECTION: forcing a failure. [ 880.448722][T20541] name failslab, interval 1, probability 0, space 0, times 0 [ 880.448749][T20541] CPU: 0 UID: 0 PID: 20541 Comm: syz.1.3662 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 880.448769][T20541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 880.448778][T20541] Call Trace: [ 880.448784][T20541] [ 880.448791][T20541] dump_stack_lvl+0x16c/0x1f0 [ 880.448811][T20541] should_fail_ex+0x512/0x640 [ 880.448826][T20541] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 880.448845][T20541] should_failslab+0xc2/0x120 [ 880.448862][T20541] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 880.448877][T20541] ? __proc_create+0xc3/0x8c0 [ 880.448892][T20541] ? __proc_create+0x2ce/0x8c0 [ 880.448911][T20541] __proc_create+0x2ce/0x8c0 [ 880.448927][T20541] ? __pfx___proc_create+0x10/0x10 [ 880.448950][T20541] proc_create_reg+0x7d/0x180 [ 880.448967][T20541] proc_create_net_data+0x8e/0x1b0 [ 880.448984][T20541] ? __pfx_proc_create_net_data+0x10/0x10 [ 880.449001][T20541] ? lockdep_init_map_type+0x5c/0x280 [ 880.449023][T20541] ? lockdep_init_map_type+0x5c/0x280 [ 880.449044][T20541] ? __pfx_igmp_net_init+0x10/0x10 [ 880.449058][T20541] igmp_net_init+0x5a/0x1a0 [ 880.449072][T20541] ops_init+0x1df/0x5f0 [ 880.449091][T20541] setup_net+0x1ff/0x510 [ 880.449106][T20541] ? lockdep_init_map_type+0x5c/0x280 [ 880.449126][T20541] ? __pfx_setup_net+0x10/0x10 [ 880.449144][T20541] ? debug_mutex_init+0x37/0x70 [ 880.449160][T20541] copy_net_ns+0x2a6/0x5f0 [ 880.449180][T20541] create_new_namespaces+0x3ea/0xa90 [ 880.449203][T20541] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 880.449222][T20541] ksys_unshare+0x45b/0xa40 [ 880.449242][T20541] ? __pfx_ksys_unshare+0x10/0x10 [ 880.449262][T20541] ? xfd_validate_state+0x61/0x180 [ 880.449287][T20541] __x64_sys_unshare+0x31/0x40 [ 880.449306][T20541] do_syscall_64+0xcd/0x490 [ 880.449322][T20541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.449337][T20541] RIP: 0033:0x7f11b418e9a9 [ 880.449351][T20541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.449365][T20541] RSP: 002b:00007f11b4f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 880.449379][T20541] RAX: ffffffffffffffda RBX: 00007f11b43b6080 RCX: 00007f11b418e9a9 [ 880.449389][T20541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 880.449398][T20541] RBP: 00007f11b4210d69 R08: 0000000000000000 R09: 0000000000000000 [ 880.449407][T20541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.449416][T20541] R13: 0000000000000000 R14: 00007f11b43b6080 R15: 00007ffc620c7fe8 [ 880.449435][T20541] [ 880.724064][T20546] openvswitch: netlink: IPv4 tunnel dst address is zero [ 880.751693][T20544] vivid-003: ================= START STATUS ================= [ 880.751757][T20544] vivid-003: Radio HW Seek Mode: Bounded [ 880.751793][T20544] vivid-003: Radio Programmable HW Seek: false [ 880.751810][T20544] vivid-003: RDS Rx I/O Mode: Block I/O [ 880.751826][T20544] vivid-003: Generate RBDS Instead of RDS: false [ 880.751842][T20544] vivid-003: RDS Reception: true [ 880.751857][T20544] vivid-003: RDS Program Type: 0 inactive [ 880.751877][T20544] vivid-003: RDS PS Name: inactive [ 880.751895][T20544] vivid-003: RDS Radio Text: inactive [ 880.751914][T20544] vivid-003: RDS Traffic Announcement: false inactive [ 880.751933][T20544] vivid-003: RDS Traffic Program: false inactive [ 880.751951][T20544] vivid-003: RDS Music: false inactive [ 880.751969][T20544] vivid-003: ================== END STATUS ================== [ 881.295878][T20556] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3667'. [ 881.296935][T20556] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3667'. [ 881.563054][T20559] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.565019][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3671'. [ 881.598094][T20567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3670'. [ 881.840699][T20567] team0: Port device team_slave_1 removed [ 882.490577][T20504] tty tty34: ldisc open failed (-12), clearing slot 33 [ 883.288094][T20601] FAULT_INJECTION: forcing a failure. [ 883.288094][T20601] name failslab, interval 1, probability 0, space 0, times 0 [ 883.358503][T20601] CPU: 0 UID: 0 PID: 20601 Comm: syz.3.3681 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 883.358527][T20601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 883.358538][T20601] Call Trace: [ 883.358543][T20601] [ 883.358550][T20601] dump_stack_lvl+0x16c/0x1f0 [ 883.358572][T20601] should_fail_ex+0x512/0x640 [ 883.358588][T20601] ? __kmalloc_noprof+0xbf/0x510 [ 883.358605][T20601] ? memcg_list_lru_alloc+0x4e9/0x740 [ 883.358620][T20601] should_failslab+0xc2/0x120 [ 883.358637][T20601] __kmalloc_noprof+0xd2/0x510 [ 883.358651][T20601] ? __lock_acquire+0x622/0x1c90 [ 883.358674][T20601] memcg_list_lru_alloc+0x4e9/0x740 [ 883.358694][T20601] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 883.358715][T20601] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 883.358740][T20601] __memcg_slab_post_alloc_hook+0x133/0x960 [ 883.358762][T20601] ? kasan_save_track+0x14/0x30 [ 883.358778][T20601] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 883.358795][T20601] ? alloc_inode+0x61/0x240 [ 883.358813][T20601] ? __pfx_rpc_fill_super+0x10/0x10 [ 883.358836][T20601] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 883.358854][T20601] alloc_inode+0x61/0x240 [ 883.358871][T20601] new_inode+0x22/0x1c0 [ 883.358889][T20601] ? __pfx_rpc_fill_super+0x10/0x10 [ 883.358911][T20601] rpc_fill_super+0x19c/0x840 [ 883.358933][T20601] ? sget_fc+0x808/0xc20 [ 883.358955][T20601] ? __pfx_set_anon_super_fc+0x10/0x10 [ 883.358976][T20601] ? __pfx_rpc_fill_super+0x10/0x10 [ 883.358997][T20601] get_tree_keyed+0x10b/0x1d0 [ 883.359020][T20601] vfs_get_tree+0x8e/0x340 [ 883.359039][T20601] vfs_cmd_create+0xd7/0x2a0 [ 883.359057][T20601] __do_sys_fsconfig+0x7b8/0xbe0 [ 883.359074][T20601] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 883.359100][T20601] do_syscall_64+0xcd/0x490 [ 883.359117][T20601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.359132][T20601] RIP: 0033:0x7f492378e9a9 [ 883.359145][T20601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.359159][T20601] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 883.359173][T20601] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 883.359183][T20601] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 883.359192][T20601] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 883.359201][T20601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.359209][T20601] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 883.359236][T20601] [ 886.033420][T20639] FAULT_INJECTION: forcing a failure. [ 886.033420][T20639] name failslab, interval 1, probability 0, space 0, times 0 [ 886.076753][T20639] CPU: 0 UID: 0 PID: 20639 Comm: syz.2.3687 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 886.076778][T20639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 886.076788][T20639] Call Trace: [ 886.076795][T20639] [ 886.076803][T20639] dump_stack_lvl+0x16c/0x1f0 [ 886.076825][T20639] should_fail_ex+0x512/0x640 [ 886.076841][T20639] ? __kmalloc_noprof+0xbf/0x510 [ 886.076858][T20639] ? lsm_blob_alloc+0x68/0x90 [ 886.076875][T20639] should_failslab+0xc2/0x120 [ 886.076892][T20639] __kmalloc_noprof+0xd2/0x510 [ 886.076910][T20639] lsm_blob_alloc+0x68/0x90 [ 886.076926][T20639] security_sk_alloc+0x30/0x270 [ 886.076946][T20639] sk_prot_alloc+0x1c7/0x2a0 [ 886.076966][T20639] sk_alloc+0x36/0xc20 [ 886.076981][T20639] __netlink_create+0x5e/0x2c0 [ 886.076995][T20639] ? __wake_up+0x3f/0x60 [ 886.077013][T20639] netlink_create+0x39e/0x620 [ 886.077027][T20639] ? __pfx_genl_bind+0x10/0x10 [ 886.077044][T20639] ? __pfx_genl_unbind+0x10/0x10 [ 886.077061][T20639] ? __pfx_genl_release+0x10/0x10 [ 886.077082][T20639] __sock_create+0x335/0x8d0 [ 886.077111][T20639] __sys_socket+0x14d/0x260 [ 886.077131][T20639] ? __x64_sys_openat+0x174/0x210 [ 886.077151][T20639] ? __pfx___sys_socket+0x10/0x10 [ 886.077172][T20639] ? xfd_validate_state+0x61/0x180 [ 886.077195][T20639] __x64_sys_socket+0x72/0xb0 [ 886.077214][T20639] ? lockdep_hardirqs_on+0x7c/0x110 [ 886.077228][T20639] do_syscall_64+0xcd/0x490 [ 886.077244][T20639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.077260][T20639] RIP: 0033:0x7f879698e9a9 [ 886.077273][T20639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.077287][T20639] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 886.077301][T20639] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 886.077311][T20639] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 886.077320][T20639] RBP: 00007f8796a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 886.077329][T20639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.077338][T20639] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 886.077357][T20639] [ 886.304588][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.665096][T20644] zswap: compressor 000 not available [ 886.910580][T20655] Invalid ELF header magic: != ELF [ 887.447986][T20671] netlink: zone id is out of range [ 887.448006][T20671] netlink: zone id is out of range [ 887.448012][T20671] netlink: zone id is out of range [ 887.448018][T20671] netlink: zone id is out of range [ 887.448024][T20671] netlink: zone id is out of range [ 887.448030][T20671] netlink: zone id is out of range [ 887.448036][T20671] netlink: zone id is out of range [ 887.448042][T20671] netlink: zone id is out of range [ 887.448048][T20671] netlink: zone id is out of range [ 887.448053][T20671] netlink: zone id is out of range [ 887.902125][T20655] tty tty34: ldisc open failed (-12), clearing slot 33 [ 888.967506][T20689] FAULT_INJECTION: forcing a failure. [ 888.967506][T20689] name failslab, interval 1, probability 0, space 0, times 0 [ 889.042014][T20689] CPU: 0 UID: 0 PID: 20689 Comm: syz.1.3701 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 889.042039][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 889.042049][T20689] Call Trace: [ 889.042055][T20689] [ 889.042062][T20689] dump_stack_lvl+0x16c/0x1f0 [ 889.042082][T20689] should_fail_ex+0x512/0x640 [ 889.042098][T20689] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 889.042118][T20689] should_failslab+0xc2/0x120 [ 889.042136][T20689] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 889.042152][T20689] ? alloc_inode+0x61/0x240 [ 889.042170][T20689] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 889.042194][T20689] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 889.042213][T20689] alloc_inode+0x61/0x240 [ 889.042230][T20689] new_inode+0x22/0x1c0 [ 889.042250][T20689] __rpc_create_common+0x57/0x2f0 [ 889.042274][T20689] rpc_populate.constprop.0+0x153/0x5d0 [ 889.042302][T20689] rpc_fill_super+0x2bc/0x840 [ 889.042323][T20689] ? sget_fc+0x808/0xc20 [ 889.042345][T20689] ? __pfx_set_anon_super_fc+0x10/0x10 [ 889.042366][T20689] ? __pfx_rpc_fill_super+0x10/0x10 [ 889.042388][T20689] get_tree_keyed+0x10b/0x1d0 [ 889.042412][T20689] vfs_get_tree+0x8e/0x340 [ 889.042431][T20689] vfs_cmd_create+0xd7/0x2a0 [ 889.042449][T20689] __do_sys_fsconfig+0x7b8/0xbe0 [ 889.042467][T20689] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 889.042493][T20689] do_syscall_64+0xcd/0x490 [ 889.042513][T20689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.042528][T20689] RIP: 0033:0x7f11b418e9a9 [ 889.042541][T20689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.042556][T20689] RSP: 002b:00007f11b4f90038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 889.042571][T20689] RAX: ffffffffffffffda RBX: 00007f11b43b5fa0 RCX: 00007f11b418e9a9 [ 889.042581][T20689] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 889.042589][T20689] RBP: 00007f11b4210d69 R08: 0000000000000000 R09: 0000000000000000 [ 889.042598][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.042607][T20689] R13: 0000000000000000 R14: 00007f11b43b5fa0 R15: 00007ffc620c7fe8 [ 889.042627][T20689] [ 889.259682][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.572395][T20702] FAULT_INJECTION: forcing a failure. [ 889.572395][T20702] name failslab, interval 1, probability 0, space 0, times 0 [ 889.572422][T20702] CPU: 0 UID: 0 PID: 20702 Comm: syz.2.3705 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 889.572440][T20702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 889.572450][T20702] Call Trace: [ 889.572455][T20702] [ 889.572461][T20702] dump_stack_lvl+0x16c/0x1f0 [ 889.572480][T20702] should_fail_ex+0x512/0x640 [ 889.572495][T20702] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 889.572517][T20702] should_failslab+0xc2/0x120 [ 889.572535][T20702] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 889.572549][T20702] ? alloc_empty_file+0x55/0x1e0 [ 889.572571][T20702] alloc_empty_file+0x55/0x1e0 [ 889.572589][T20702] path_openat+0xda/0x2cb0 [ 889.572602][T20702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.572623][T20702] ? __pfx_path_openat+0x10/0x10 [ 889.572638][T20702] ? __lock_acquire+0xb8a/0x1c90 [ 889.572660][T20702] do_filp_open+0x20b/0x470 [ 889.572674][T20702] ? __pfx_do_filp_open+0x10/0x10 [ 889.572701][T20702] ? alloc_fd+0x471/0x7d0 [ 889.572728][T20702] do_sys_openat2+0x11b/0x1d0 [ 889.572753][T20702] ? __pfx_do_sys_openat2+0x10/0x10 [ 889.572774][T20702] ? __fget_files+0x20e/0x3c0 [ 889.572799][T20702] __x64_sys_openat+0x174/0x210 [ 889.572818][T20702] ? __pfx___x64_sys_openat+0x10/0x10 [ 889.572837][T20702] ? ksys_write+0x1ac/0x250 [ 889.572857][T20702] do_syscall_64+0xcd/0x490 [ 889.572873][T20702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.572887][T20702] RIP: 0033:0x7f879698e9a9 [ 889.572899][T20702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.572912][T20702] RSP: 002b:00007f87947f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 889.572926][T20702] RAX: ffffffffffffffda RBX: 00007f8796bb6160 RCX: 00007f879698e9a9 [ 889.572936][T20702] RDX: 0000000000020401 RSI: 0000200000001c80 RDI: ffffffffffffff9c [ 889.572945][T20702] RBP: 00007f87947f6090 R08: 0000000000000000 R09: 0000000000000000 [ 889.572953][T20702] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 889.572962][T20702] R13: 0000000000000001 R14: 00007f8796bb6160 R15: 00007fffe30fc808 [ 889.572980][T20702] [ 889.649484][T20702] Invalid ELF header magic: != ELF [ 889.784557][T20689] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry lockd [ 889.784611][T20689] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 890.172149][ C0] vkms_vblank_simulate: vblank timer overrun [ 890.456184][T20702] tty tty34: ldisc open failed (-12), clearing slot 33 [ 890.932111][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'. [ 891.090183][T20735] FAULT_INJECTION: forcing a failure. [ 891.090183][T20735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.262711][T20735] CPU: 0 UID: 7 PID: 20735 Comm: syz.2.3714 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 891.262736][T20735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 891.262747][T20735] Call Trace: [ 891.262753][T20735] [ 891.262759][T20735] dump_stack_lvl+0x16c/0x1f0 [ 891.262780][T20735] should_fail_ex+0x512/0x640 [ 891.262800][T20735] strncpy_from_user+0x3b/0x2e0 [ 891.262827][T20735] getname_flags.part.0+0x8f/0x550 [ 891.262850][T20735] getname_flags+0x93/0xf0 [ 891.262873][T20735] do_sys_openat2+0xb8/0x1d0 [ 891.262892][T20735] ? __pfx_do_sys_openat2+0x10/0x10 [ 891.262918][T20735] __x64_sys_openat+0x174/0x210 [ 891.262937][T20735] ? __pfx___x64_sys_openat+0x10/0x10 [ 891.262963][T20735] do_syscall_64+0xcd/0x490 [ 891.262980][T20735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.262995][T20735] RIP: 0033:0x7f879698e9a9 [ 891.263007][T20735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.263021][T20735] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.263035][T20735] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 891.263044][T20735] RDX: 0000000000000001 RSI: 0000200000001d80 RDI: ffffffffffffff9c [ 891.263054][T20735] RBP: 00007f8796a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 891.263063][T20735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.263072][T20735] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 891.263091][T20735] [ 891.430306][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.091170][T20763] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3719'. [ 892.116877][T20761] FAULT_INJECTION: forcing a failure. [ 892.116877][T20761] name failslab, interval 1, probability 0, space 0, times 0 [ 892.163003][T20761] CPU: 0 UID: 0 PID: 20761 Comm: syz.3.3723 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 892.163027][T20761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 892.163038][T20761] Call Trace: [ 892.163043][T20761] [ 892.163050][T20761] dump_stack_lvl+0x16c/0x1f0 [ 892.163070][T20761] should_fail_ex+0x512/0x640 [ 892.163087][T20761] ? __kmalloc_node_noprof+0xc5/0x500 [ 892.163106][T20761] should_failslab+0xc2/0x120 [ 892.163124][T20761] __kmalloc_node_noprof+0xd8/0x500 [ 892.163140][T20761] ? load_msg+0x43/0x4a0 [ 892.163158][T20761] load_msg+0x43/0x4a0 [ 892.163175][T20761] do_mq_timedsend+0x3d7/0xc40 [ 892.163195][T20761] ? __pfx_do_mq_timedsend+0x10/0x10 [ 892.163213][T20761] ? do_futex+0x122/0x350 [ 892.163238][T20761] ? __x64_sys_futex+0x1e0/0x4c0 [ 892.163257][T20761] __x64_sys_mq_timedsend+0x1cd/0x260 [ 892.163277][T20761] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 892.163301][T20761] do_syscall_64+0xcd/0x490 [ 892.163318][T20761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.163333][T20761] RIP: 0033:0x7f492378e9a9 [ 892.163345][T20761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.163360][T20761] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 892.163374][T20761] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 892.163384][T20761] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000009 [ 892.163392][T20761] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 892.163401][T20761] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 892.163409][T20761] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 892.163427][T20761] [ 892.349705][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.746695][T20778] net_ratelimit: 58 callbacks suppressed [ 892.746711][T20778] netlink: zone id is out of range [ 892.786450][T20778] netlink: zone id is out of range [ 892.798286][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 892.813839][T20778] netlink: zone id is out of range [ 892.826433][T20778] netlink: zone id is out of range [ 892.866470][T20778] netlink: zone id is out of range [ 892.871641][T20778] netlink: zone id is out of range [ 892.910467][T20778] netlink: zone id is out of range [ 892.946377][T20781] FAULT_INJECTION: forcing a failure. [ 892.946377][T20781] name fail_futex, interval 1, probability 0, space 0, times 0 [ 892.985911][T20778] netlink: zone id is out of range [ 893.036561][T20781] CPU: 0 UID: 0 PID: 20781 Comm: syz.3.3728 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 893.036586][T20781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 893.036597][T20781] Call Trace: [ 893.036603][T20781] [ 893.036609][T20781] dump_stack_lvl+0x16c/0x1f0 [ 893.036630][T20781] should_fail_ex+0x512/0x640 [ 893.036649][T20781] get_futex_key+0x1d0/0x1540 [ 893.036670][T20781] ? __pfx_get_futex_key+0x10/0x10 [ 893.036688][T20781] ? kasan_save_stack+0x42/0x60 [ 893.036702][T20781] ? kasan_save_stack+0x33/0x60 [ 893.036715][T20781] ? kasan_save_track+0x14/0x30 [ 893.036729][T20781] ? kasan_save_free_info+0x3b/0x60 [ 893.036748][T20781] ? __kasan_slab_free+0x51/0x70 [ 893.036765][T20781] futex_wait_setup+0x84/0x510 [ 893.036791][T20781] __futex_wait+0x194/0x2f0 [ 893.036812][T20781] ? __pfx___futex_wait+0x10/0x10 [ 893.036835][T20781] ? __pfx_futex_wake_mark+0x10/0x10 [ 893.036862][T20781] ? __futex_hash.constprop.0+0x1e9/0x440 [ 893.036881][T20781] futex_wait+0xe8/0x380 [ 893.036901][T20781] ? __pfx_futex_wait+0x10/0x10 [ 893.036925][T20781] ? kmem_cache_free+0x2d1/0x4d0 [ 893.036940][T20781] ? getname_flags+0x9b/0xf0 [ 893.036964][T20781] do_futex+0x229/0x350 [ 893.036982][T20781] ? __pfx_do_futex+0x10/0x10 [ 893.037000][T20781] ? __pfx_sched_core_share_pid+0x10/0x10 [ 893.037020][T20781] __x64_sys_futex+0x1e0/0x4c0 [ 893.037039][T20781] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 893.037058][T20781] ? __pfx___x64_sys_futex+0x10/0x10 [ 893.037082][T20781] do_syscall_64+0xcd/0x490 [ 893.037099][T20781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.037113][T20781] RIP: 0033:0x7f492378e9a9 [ 893.037126][T20781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.037141][T20781] RSP: 002b:00007f49246880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 893.037156][T20781] RAX: ffffffffffffffda RBX: 00007f49239b5fa8 RCX: 00007f492378e9a9 [ 893.037165][T20781] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49239b5fa8 [ 893.037178][T20781] RBP: 00007f49239b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 893.037187][T20781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49239b5fac [ 893.037196][T20781] R13: 0000000000000000 R14: 00007ffdccba5800 R15: 00007ffdccba58e8 [ 893.037214][T20781] [ 893.273845][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.319466][T20778] netlink: zone id is out of range [ 893.324683][T20778] netlink: zone id is out of range [ 893.542891][T20785] zswap: compressor 000 not available [ 893.671903][T20797] bond0: option all_slaves_active: invalid value () [ 894.227977][T20810] Invalid ELF header magic: != ELF [ 894.334683][T20815] netlink: 'syz.3.3737': attribute type 1 has an invalid length. [ 894.378558][T20818] netlink: 'syz.3.3737': attribute type 1 has an invalid length. [ 894.466020][T20815] netlink: 322 bytes leftover after parsing attributes in process `syz.3.3737'. [ 894.529338][T20818] netlink: 322 bytes leftover after parsing attributes in process `syz.3.3737'. [ 895.513322][T20849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3745'. [ 895.579921][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3744'. [ 896.157726][T20868] FAULT_INJECTION: forcing a failure. [ 896.157726][T20868] name failslab, interval 1, probability 0, space 0, times 0 [ 896.157753][T20868] CPU: 0 UID: 0 PID: 20868 Comm: syz.3.3750 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 896.157772][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 896.157781][T20868] Call Trace: [ 896.157786][T20868] [ 896.157792][T20868] dump_stack_lvl+0x16c/0x1f0 [ 896.157811][T20868] should_fail_ex+0x512/0x640 [ 896.157826][T20868] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 896.157844][T20868] should_failslab+0xc2/0x120 [ 896.157861][T20868] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 896.157875][T20868] ? security_file_alloc+0x34/0x2b0 [ 896.157901][T20868] security_file_alloc+0x34/0x2b0 [ 896.157922][T20868] init_file+0x93/0x4c0 [ 896.157941][T20868] alloc_empty_file+0x73/0x1e0 [ 896.157959][T20868] path_openat+0xda/0x2cb0 [ 896.157972][T20868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.157993][T20868] ? __pfx_path_openat+0x10/0x10 [ 896.158008][T20868] ? __lock_acquire+0xb8a/0x1c90 [ 896.158030][T20868] do_filp_open+0x20b/0x470 [ 896.158044][T20868] ? __pfx_do_filp_open+0x10/0x10 [ 896.158071][T20868] ? alloc_fd+0x471/0x7d0 [ 896.158097][T20868] do_sys_openat2+0x11b/0x1d0 [ 896.158116][T20868] ? __pfx_do_sys_openat2+0x10/0x10 [ 896.158136][T20868] ? __fget_files+0x20e/0x3c0 [ 896.158161][T20868] __x64_sys_openat+0x174/0x210 [ 896.158180][T20868] ? __pfx___x64_sys_openat+0x10/0x10 [ 896.158197][T20868] ? ksys_write+0x1ac/0x250 [ 896.158217][T20868] do_syscall_64+0xcd/0x490 [ 896.158233][T20868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.158247][T20868] RIP: 0033:0x7f492378e9a9 [ 896.158258][T20868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.158279][T20868] RSP: 002b:00007f4924646038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 896.158293][T20868] RAX: ffffffffffffffda RBX: 00007f49239b6160 RCX: 00007f492378e9a9 [ 896.158303][T20868] RDX: 0000000000020401 RSI: 0000200000001c80 RDI: ffffffffffffff9c [ 896.158312][T20868] RBP: 00007f4924646090 R08: 0000000000000000 R09: 0000000000000000 [ 896.158320][T20868] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 896.158329][T20868] R13: 0000000000000001 R14: 00007f49239b6160 R15: 00007ffdccba58e8 [ 896.158347][T20868] [ 896.405839][T20868] Invalid ELF header magic: != ELF [ 896.916345][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 897.226768][T20893] FAULT_INJECTION: forcing a failure. [ 897.226768][T20893] name failslab, interval 1, probability 0, space 0, times 0 [ 897.226798][T20893] CPU: 0 UID: 0 PID: 20893 Comm: syz.2.3758 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 897.226818][T20893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 897.226828][T20893] Call Trace: [ 897.226833][T20893] [ 897.226840][T20893] dump_stack_lvl+0x16c/0x1f0 [ 897.226861][T20893] should_fail_ex+0x512/0x640 [ 897.226877][T20893] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 897.226902][T20893] should_failslab+0xc2/0x120 [ 897.226919][T20893] __kmalloc_cache_noprof+0x6a/0x3e0 [ 897.226942][T20893] ? shrinker_alloc+0xf5/0xbf0 [ 897.226960][T20893] shrinker_alloc+0xf5/0xbf0 [ 897.226983][T20893] ? mark_held_locks+0x49/0x80 [ 897.227005][T20893] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 897.227035][T20893] ? __pfx_shrinker_alloc+0x10/0x10 [ 897.227054][T20893] ? lockdep_init_map_type+0x5c/0x280 [ 897.227076][T20893] ? __raw_spin_lock_init+0x3a/0x110 [ 897.227097][T20893] ? __init_rwsem+0x12d/0x1b0 [ 897.227121][T20893] alloc_super+0x7c8/0xbd0 [ 897.227151][T20893] ? __pfx_test_keyed_super+0x10/0x10 [ 897.227171][T20893] sget_fc+0x116/0xc20 [ 897.227194][T20893] ? __pfx_set_anon_super_fc+0x10/0x10 [ 897.227217][T20893] ? __pfx_rpc_fill_super+0x10/0x10 [ 897.227239][T20893] get_tree_keyed+0x59/0x1d0 [ 897.227263][T20893] vfs_get_tree+0x8e/0x340 [ 897.227282][T20893] vfs_cmd_create+0xd7/0x2a0 [ 897.227300][T20893] __do_sys_fsconfig+0x7b8/0xbe0 [ 897.227318][T20893] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 897.227344][T20893] do_syscall_64+0xcd/0x490 [ 897.227361][T20893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.227375][T20893] RIP: 0033:0x7f879698e9a9 [ 897.227388][T20893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.227402][T20893] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 897.227416][T20893] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 897.227426][T20893] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 897.227435][T20893] RBP: 00007f8796a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 897.227445][T20893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.227454][T20893] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 897.227473][T20893] [ 897.773247][T20899] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3759'. [ 898.338292][ C0] vkms_vblank_simulate: vblank timer overrun [ 898.643813][T20873] tty tty34: ldisc open failed (-12), clearing slot 33 [ 898.705351][T20912] FAULT_INJECTION: forcing a failure. [ 898.705351][T20912] name fail_futex, interval 1, probability 0, space 0, times 0 [ 898.853298][T20912] CPU: 0 UID: 0 PID: 20912 Comm: syz.1.3761 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 898.853323][T20912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 898.853333][T20912] Call Trace: [ 898.853339][T20912] [ 898.853346][T20912] dump_stack_lvl+0x16c/0x1f0 [ 898.853366][T20912] should_fail_ex+0x512/0x640 [ 898.853385][T20912] get_futex_key+0x1d0/0x1540 [ 898.853406][T20912] ? __pfx_get_futex_key+0x10/0x10 [ 898.853430][T20912] futex_wake+0xe7/0x4e0 [ 898.853452][T20912] ? __pfx_futex_wake+0x10/0x10 [ 898.853474][T20912] ? kmem_cache_free+0x2d1/0x4d0 [ 898.853488][T20912] ? fd_install+0x225/0x750 [ 898.853509][T20912] ? putname+0x154/0x1a0 [ 898.853532][T20912] do_futex+0x1e3/0x350 [ 898.853550][T20912] ? __pfx_do_futex+0x10/0x10 [ 898.853572][T20912] __x64_sys_futex+0x1e0/0x4c0 [ 898.853591][T20912] ? __x64_sys_openat+0x174/0x210 [ 898.853610][T20912] ? __pfx___x64_sys_futex+0x10/0x10 [ 898.853628][T20912] ? xfd_validate_state+0x61/0x180 [ 898.853655][T20912] do_syscall_64+0xcd/0x490 [ 898.853671][T20912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.853686][T20912] RIP: 0033:0x7f11b418e9a9 [ 898.853699][T20912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.853713][T20912] RSP: 002b:00007f11b4f900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 898.853728][T20912] RAX: ffffffffffffffda RBX: 00007f11b43b5fa8 RCX: 00007f11b418e9a9 [ 898.853738][T20912] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f11b43b5fac [ 898.853747][T20912] RBP: 00007f11b43b5fa0 R08: 00007f11b4f91000 R09: 0000000000000000 [ 898.853756][T20912] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f11b43b5fac [ 898.853765][T20912] R13: 0000000000000000 R14: 00007ffc620c7f00 R15: 00007ffc620c7fe8 [ 898.853783][T20912] [ 899.047343][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.624319][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'. [ 900.419033][T20952] Invalid ELF header magic: != ELF [ 900.641285][T20966] FAULT_INJECTION: forcing a failure. [ 900.641285][T20966] name failslab, interval 1, probability 0, space 0, times 0 [ 900.697142][T20966] CPU: 0 UID: 0 PID: 20966 Comm: syz.0.3776 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 900.697167][T20966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 900.697177][T20966] Call Trace: [ 900.697183][T20966] [ 900.697190][T20966] dump_stack_lvl+0x16c/0x1f0 [ 900.697212][T20966] should_fail_ex+0x512/0x640 [ 900.697228][T20966] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 900.697247][T20966] should_failslab+0xc2/0x120 [ 900.697265][T20966] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 900.697281][T20966] ? can_rx_register+0x1ef/0x6f0 [ 900.697299][T20966] can_rx_register+0x1ef/0x6f0 [ 900.697313][T20966] ? __pfx_raw_rcv+0x10/0x10 [ 900.697331][T20966] ? __pfx_can_rx_register+0x10/0x10 [ 900.697348][T20966] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 900.697370][T20966] raw_enable_filters+0xe0/0x210 [ 900.697392][T20966] raw_enable_allfilters+0x8b/0x2b0 [ 900.697413][T20966] raw_bind+0x2bc/0xe50 [ 900.697434][T20966] __sys_bind+0x1a4/0x260 [ 900.697456][T20966] ? __pfx___sys_bind+0x10/0x10 [ 900.697484][T20966] ? xfd_validate_state+0x61/0x180 [ 900.697509][T20966] __x64_sys_bind+0x72/0xb0 [ 900.697528][T20966] ? lockdep_hardirqs_on+0x7c/0x110 [ 900.697542][T20966] do_syscall_64+0xcd/0x490 [ 900.697559][T20966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.697574][T20966] RIP: 0033:0x7fcaa158e9a9 [ 900.697587][T20966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.697600][T20966] RSP: 002b:00007fcaa23ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 900.697614][T20966] RAX: ffffffffffffffda RBX: 00007fcaa17b5fa0 RCX: 00007fcaa158e9a9 [ 900.697624][T20966] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 900.697633][T20966] RBP: 00007fcaa1610d69 R08: 0000000000000000 R09: 0000000000000000 [ 900.697642][T20966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.697650][T20966] R13: 0000000000000000 R14: 00007fcaa17b5fa0 R15: 00007ffe808ce748 [ 900.697669][T20966] [ 900.904109][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.468850][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'. [ 902.283070][T21001] FAULT_INJECTION: forcing a failure. [ 902.283070][T21001] name failslab, interval 1, probability 0, space 0, times 0 [ 902.314804][T21002] ptrace attach of "./syz-executor exec"[16174] was attempted by "./syz-executor exec"[21002] [ 902.343237][T21001] CPU: 0 UID: 0 PID: 21001 Comm: syz.1.3786 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 902.343261][T21001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 902.343271][T21001] Call Trace: [ 902.343277][T21001] [ 902.343284][T21001] dump_stack_lvl+0x16c/0x1f0 [ 902.343306][T21001] should_fail_ex+0x512/0x640 [ 902.343321][T21001] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 902.343340][T21001] should_failslab+0xc2/0x120 [ 902.343358][T21001] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 902.343373][T21001] ? __pmd_alloc+0xbf/0x930 [ 902.343395][T21001] __pmd_alloc+0xbf/0x930 [ 902.343417][T21001] __handle_mm_fault+0xaac/0x5490 [ 902.343444][T21001] ? __pfx___handle_mm_fault+0x10/0x10 [ 902.343482][T21001] handle_mm_fault+0x589/0xd10 [ 902.343507][T21001] __get_user_pages+0x589/0x3b80 [ 902.343532][T21001] ? __pfx_mt_find+0x10/0x10 [ 902.343549][T21001] ? __pfx___get_user_pages+0x10/0x10 [ 902.343575][T21001] populate_vma_page_range+0x278/0x3a0 [ 902.343597][T21001] ? __pfx_populate_vma_page_range+0x10/0x10 [ 902.343617][T21001] ? __pfx_find_vma_intersection+0x10/0x10 [ 902.343637][T21001] ? do_mmap+0x69c/0x1210 [ 902.343658][T21001] __mm_populate+0x1d8/0x380 [ 902.343679][T21001] ? __pfx___mm_populate+0x10/0x10 [ 902.343700][T21001] ? up_write+0x1b2/0x520 [ 902.343724][T21001] vm_mmap_pgoff+0x362/0x450 [ 902.343745][T21001] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 902.343767][T21001] ? __x64_sys_futex+0x1e0/0x4c0 [ 902.343784][T21001] ? __x64_sys_futex+0x1e9/0x4c0 [ 902.343803][T21001] ksys_mmap_pgoff+0x7d/0x5c0 [ 902.343829][T21001] ? xfd_validate_state+0x61/0x180 [ 902.343850][T21001] ? __pfx_ksys_read+0x10/0x10 [ 902.343867][T21001] __x64_sys_mmap+0x125/0x190 [ 902.343891][T21001] do_syscall_64+0xcd/0x490 [ 902.343908][T21001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.343923][T21001] RIP: 0033:0x7f11b418e9a9 [ 902.343936][T21001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.343950][T21001] RSP: 002b:00007f11b4f90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 902.343966][T21001] RAX: ffffffffffffffda RBX: 00007f11b43b5fa0 RCX: 00007f11b418e9a9 [ 902.343976][T21001] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000000000000 [ 902.343985][T21001] RBP: 00007f11b4210d69 R08: 0000000000000007 R09: 0000000000028000 [ 902.343994][T21001] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 902.344003][T21001] R13: 0000000000000000 R14: 00007f11b43b5fa0 R15: 00007ffc620c7fe8 [ 902.344023][T21001] [ 902.603831][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.291595][T21011] zswap: compressor 000 not available [ 904.345320][T21045] FAULT_INJECTION: forcing a failure. [ 904.345320][T21045] name failslab, interval 1, probability 0, space 0, times 0 [ 904.345357][T21045] CPU: 0 UID: 0 PID: 21045 Comm: syz.0.3797 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 904.345376][T21045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 904.345384][T21045] Call Trace: [ 904.345389][T21045] [ 904.345395][T21045] dump_stack_lvl+0x16c/0x1f0 [ 904.345414][T21045] should_fail_ex+0x512/0x640 [ 904.345429][T21045] ? fs_reclaim_acquire+0xae/0x150 [ 904.345451][T21045] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 904.345465][T21045] should_failslab+0xc2/0x120 [ 904.345482][T21045] __kmalloc_noprof+0xd2/0x510 [ 904.345501][T21045] tomoyo_realpath_from_path+0xc2/0x6e0 [ 904.345521][T21045] tomoyo_check_open_permission+0x2ab/0x3c0 [ 904.345542][T21045] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 904.345589][T21045] ? do_raw_spin_lock+0x12c/0x2b0 [ 904.345618][T21045] tomoyo_file_open+0x6b/0x90 [ 904.345635][T21045] security_file_open+0x84/0x1e0 [ 904.345658][T21045] do_dentry_open+0x596/0x1c10 [ 904.345679][T21045] vfs_open+0x82/0x3f0 [ 904.345699][T21045] path_openat+0x1de4/0x2cb0 [ 904.345720][T21045] ? __pfx_path_openat+0x10/0x10 [ 904.345735][T21045] ? __lock_acquire+0xb8a/0x1c90 [ 904.345756][T21045] do_filp_open+0x20b/0x470 [ 904.345770][T21045] ? __pfx_do_filp_open+0x10/0x10 [ 904.345798][T21045] ? alloc_fd+0x471/0x7d0 [ 904.345825][T21045] do_sys_openat2+0x11b/0x1d0 [ 904.345844][T21045] ? __pfx_do_sys_openat2+0x10/0x10 [ 904.345864][T21045] ? __fget_files+0x20e/0x3c0 [ 904.345889][T21045] __x64_sys_openat+0x174/0x210 [ 904.345908][T21045] ? __pfx___x64_sys_openat+0x10/0x10 [ 904.345926][T21045] ? ksys_write+0x1ac/0x250 [ 904.345945][T21045] do_syscall_64+0xcd/0x490 [ 904.345963][T21045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.345977][T21045] RIP: 0033:0x7fcaa158e9a9 [ 904.345989][T21045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.346003][T21045] RSP: 002b:00007fcaa236c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 904.346016][T21045] RAX: ffffffffffffffda RBX: 00007fcaa17b6160 RCX: 00007fcaa158e9a9 [ 904.346026][T21045] RDX: 0000000000020401 RSI: 0000200000001c80 RDI: ffffffffffffff9c [ 904.346035][T21045] RBP: 00007fcaa236c090 R08: 0000000000000000 R09: 0000000000000000 [ 904.346043][T21045] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 904.346051][T21045] R13: 0000000000000001 R14: 00007fcaa17b6160 R15: 00007ffe808ce748 [ 904.346070][T21045] [ 904.346076][T21045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 904.374156][T21038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3796'. [ 904.617463][T21045] Invalid ELF header magic: != ELF [ 905.340279][T21065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3802'. [ 905.340300][T21065] net_ratelimit: 26 callbacks suppressed [ 905.340309][T21065] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 905.650251][T21071] FAULT_INJECTION: forcing a failure. [ 905.650251][T21071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 905.650336][T21071] CPU: 0 UID: 0 PID: 21071 Comm: syz.3.3804 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 905.650357][T21071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 905.650366][T21071] Call Trace: [ 905.650372][T21071] [ 905.650380][T21071] dump_stack_lvl+0x16c/0x1f0 [ 905.650400][T21071] should_fail_ex+0x512/0x640 [ 905.650420][T21071] should_fail_alloc_page+0xe7/0x130 [ 905.650440][T21071] prepare_alloc_pages+0x3c2/0x610 [ 905.650461][T21071] ? rcu_is_watching+0x12/0xc0 [ 905.650479][T21071] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 905.650495][T21071] ? kasan_save_stack+0x42/0x60 [ 905.650520][T21071] ? __lock_acquire+0x622/0x1c90 [ 905.650541][T21071] ? drm_edid_valid+0x1d4/0x5f0 [ 905.650564][T21071] ? __vmf_anon_prepare+0x11c/0x240 [ 905.650584][T21071] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 905.650599][T21071] ? __lock_acquire+0x622/0x1c90 [ 905.650624][T21071] ? __lock_acquire+0x622/0x1c90 [ 905.650644][T21071] ? __lock_acquire+0x622/0x1c90 [ 905.650663][T21071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 905.650687][T21071] ? policy_nodemask+0xea/0x4e0 [ 905.650705][T21071] alloc_pages_mpol+0x1fb/0x550 [ 905.650722][T21071] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 905.650744][T21071] folio_alloc_mpol_noprof+0x36/0x2f0 [ 905.650765][T21071] vma_alloc_folio_noprof+0xed/0x1e0 [ 905.650784][T21071] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 905.650802][T21071] ? find_held_lock+0x2b/0x80 [ 905.650817][T21071] ? __handle_mm_fault+0x1092/0x5490 [ 905.650842][T21071] __handle_mm_fault+0x2f21/0x5490 [ 905.650869][T21071] ? __pfx___handle_mm_fault+0x10/0x10 [ 905.650891][T21071] ? __pte_offset_map_lock+0x174/0x310 [ 905.650909][T21071] ? find_held_lock+0x2b/0x80 [ 905.650923][T21071] ? find_held_lock+0x2b/0x80 [ 905.650942][T21071] ? follow_page_pte+0x3af/0x14c0 [ 905.650966][T21071] handle_mm_fault+0x589/0xd10 [ 905.650991][T21071] __get_user_pages+0x589/0x3b80 [ 905.651019][T21071] ? __pfx_mt_find+0x10/0x10 [ 905.651035][T21071] ? __pfx___get_user_pages+0x10/0x10 [ 905.651061][T21071] populate_vma_page_range+0x278/0x3a0 [ 905.651083][T21071] ? __pfx_populate_vma_page_range+0x10/0x10 [ 905.651103][T21071] ? __pfx_find_vma_intersection+0x10/0x10 [ 905.651123][T21071] ? do_mmap+0x69c/0x1210 [ 905.651144][T21071] __mm_populate+0x1d8/0x380 [ 905.651165][T21071] ? __pfx___mm_populate+0x10/0x10 [ 905.651187][T21071] ? up_write+0x1b2/0x520 [ 905.651210][T21071] vm_mmap_pgoff+0x362/0x450 [ 905.651231][T21071] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 905.651247][T21071] ? fput+0x70/0xf0 [ 905.651263][T21071] ? __sys_connect+0xe0/0x160 [ 905.651288][T21071] ? __x64_sys_futex+0x1e0/0x4c0 [ 905.651305][T21071] ? __x64_sys_futex+0x1e9/0x4c0 [ 905.651326][T21071] ksys_mmap_pgoff+0x7d/0x5c0 [ 905.651343][T21071] ? xfd_validate_state+0x61/0x180 [ 905.651362][T21071] ? __pfx_ksys_read+0x10/0x10 [ 905.651378][T21071] __x64_sys_mmap+0x125/0x190 [ 905.651400][T21071] do_syscall_64+0xcd/0x490 [ 905.651417][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.651432][T21071] RIP: 0033:0x7f492378e9a9 [ 905.651445][T21071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.651460][T21071] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 905.651474][T21071] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 905.651485][T21071] RDX: fffffffffffffffe RSI: 0000000000400005 RDI: 0000000000000000 [ 905.651504][T21071] RBP: 00007f4923810d69 R08: 0000000000000002 R09: 0000000000008000 [ 905.651519][T21071] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 905.651528][T21071] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 905.651548][T21071] [ 906.094336][T21077] Invalid ELF header magic: != ELF [ 906.135152][T21076] FAULT_INJECTION: forcing a failure. [ 906.135152][T21076] name failslab, interval 1, probability 0, space 0, times 0 [ 906.135215][T21076] CPU: 0 UID: 0 PID: 21076 Comm: syz.3.3805 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 906.135235][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 906.135245][T21076] Call Trace: [ 906.135250][T21076] [ 906.135257][T21076] dump_stack_lvl+0x16c/0x1f0 [ 906.135277][T21076] should_fail_ex+0x512/0x640 [ 906.135293][T21076] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 906.135311][T21076] should_failslab+0xc2/0x120 [ 906.135329][T21076] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 906.135344][T21076] ? can_rx_register+0x582/0x6f0 [ 906.135362][T21076] can_rx_register+0x582/0x6f0 [ 906.135376][T21076] ? __pfx_raw_rcv+0x10/0x10 [ 906.135395][T21076] ? __pfx_can_rx_register+0x10/0x10 [ 906.135410][T21076] ? raw_bind+0xae/0xe50 [ 906.135432][T21076] raw_enable_filters+0xe0/0x210 [ 906.135464][T21076] raw_enable_allfilters+0x8b/0x2b0 [ 906.135482][T21076] ? __local_bh_enable_ip+0xa4/0x120 [ 906.135503][T21076] raw_bind+0x48a/0xe50 [ 906.135525][T21076] __sys_bind+0x1a4/0x260 [ 906.135548][T21076] ? __pfx___sys_bind+0x10/0x10 [ 906.135575][T21076] ? xfd_validate_state+0x61/0x180 [ 906.135594][T21076] ? __sys_setsockopt+0x140/0x1a0 [ 906.135611][T21076] __x64_sys_bind+0x72/0xb0 [ 906.135631][T21076] ? lockdep_hardirqs_on+0x7c/0x110 [ 906.135645][T21076] do_syscall_64+0xcd/0x490 [ 906.135662][T21076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.135677][T21076] RIP: 0033:0x7f492378e9a9 [ 906.135691][T21076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.135705][T21076] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 906.135718][T21076] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 906.135728][T21076] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 906.135737][T21076] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 906.135746][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.135754][T21076] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 906.135773][T21076] [ 906.591283][T21082] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 906.837765][T21084] could not allocate digest TFM handle [ 907.714520][T21046] tty tty34: ldisc open failed (-12), clearing slot 33 [ 907.733838][T21060] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 907.741990][T21077] tty tty34: ldisc open failed (-12), clearing slot 33 [ 909.028211][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'. [ 909.757346][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3821'. [ 910.903477][T21154] FAULT_INJECTION: forcing a failure. [ 910.903477][T21154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 910.974465][T21154] CPU: 0 UID: 0 PID: 21154 Comm: syz.0.3826 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 910.974490][T21154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 910.974500][T21154] Call Trace: [ 910.974506][T21154] [ 910.974513][T21154] dump_stack_lvl+0x16c/0x1f0 [ 910.974534][T21154] should_fail_ex+0x512/0x640 [ 910.974554][T21154] should_fail_alloc_page+0xe7/0x130 [ 910.974574][T21154] prepare_alloc_pages+0x3c2/0x610 [ 910.974594][T21154] ? rcu_is_watching+0x12/0xc0 [ 910.974613][T21154] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 910.974630][T21154] ? kasan_save_stack+0x42/0x60 [ 910.974646][T21154] ? __lock_acquire+0x622/0x1c90 [ 910.974666][T21154] ? drm_edid_valid+0x1d4/0x5f0 [ 910.974688][T21154] ? __vmf_anon_prepare+0x11c/0x240 [ 910.974709][T21154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 910.974723][T21154] ? __lock_acquire+0x622/0x1c90 [ 910.974742][T21154] ? drm_edid_valid+0x1d4/0x5f0 [ 910.974769][T21154] ? __lock_acquire+0x622/0x1c90 [ 910.974789][T21154] ? __lock_acquire+0x622/0x1c90 [ 910.974807][T21154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 910.974830][T21154] ? policy_nodemask+0xea/0x4e0 [ 910.974848][T21154] alloc_pages_mpol+0x1fb/0x550 [ 910.974866][T21154] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 910.974888][T21154] folio_alloc_mpol_noprof+0x36/0x2f0 [ 910.974909][T21154] vma_alloc_folio_noprof+0xed/0x1e0 [ 910.974928][T21154] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 910.974946][T21154] ? find_held_lock+0x2b/0x80 [ 910.974961][T21154] ? __handle_mm_fault+0x1092/0x5490 [ 910.974985][T21154] __handle_mm_fault+0x2f21/0x5490 [ 910.975012][T21154] ? __pfx___handle_mm_fault+0x10/0x10 [ 910.975034][T21154] ? __pte_offset_map_lock+0x174/0x310 [ 910.975053][T21154] ? find_held_lock+0x2b/0x80 [ 910.975067][T21154] ? find_held_lock+0x2b/0x80 [ 910.975087][T21154] ? follow_page_pte+0x3af/0x14c0 [ 910.975110][T21154] handle_mm_fault+0x589/0xd10 [ 910.975136][T21154] __get_user_pages+0x589/0x3b80 [ 910.975160][T21154] ? __pfx_mt_find+0x10/0x10 [ 910.975178][T21154] ? __pfx___get_user_pages+0x10/0x10 [ 910.975204][T21154] populate_vma_page_range+0x278/0x3a0 [ 910.975225][T21154] ? __pfx_populate_vma_page_range+0x10/0x10 [ 910.975245][T21154] ? __pfx_find_vma_intersection+0x10/0x10 [ 910.975265][T21154] ? do_mmap+0x69c/0x1210 [ 910.975285][T21154] __mm_populate+0x1d8/0x380 [ 910.975311][T21154] ? __pfx___mm_populate+0x10/0x10 [ 910.975339][T21154] ? up_write+0x1b2/0x520 [ 910.975364][T21154] vm_mmap_pgoff+0x362/0x450 [ 910.975386][T21154] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 910.975409][T21154] ? __x64_sys_futex+0x1e0/0x4c0 [ 910.975427][T21154] ? __x64_sys_futex+0x1e9/0x4c0 [ 910.975447][T21154] ksys_mmap_pgoff+0x7d/0x5c0 [ 910.975465][T21154] ? xfd_validate_state+0x61/0x180 [ 910.975483][T21154] ? __pfx_ksys_read+0x10/0x10 [ 910.975500][T21154] __x64_sys_mmap+0x125/0x190 [ 910.975523][T21154] do_syscall_64+0xcd/0x490 [ 910.975540][T21154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.975555][T21154] RIP: 0033:0x7fcaa158e9a9 [ 910.975568][T21154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.975583][T21154] RSP: 002b:00007fcaa23ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 910.975597][T21154] RAX: ffffffffffffffda RBX: 00007fcaa17b5fa0 RCX: 00007fcaa158e9a9 [ 910.975607][T21154] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000000000000 [ 910.975617][T21154] RBP: 00007fcaa1610d69 R08: 0000000000000007 R09: 0000000000028000 [ 910.975627][T21154] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 910.975636][T21154] R13: 0000000000000000 R14: 00007fcaa17b5fa0 R15: 00007ffe808ce748 [ 910.975656][T21154] [ 911.845051][T21168] usb usb36: usbfs: process 21168 (syz.0.3830) did not claim interface 0 before use [ 912.082099][T21175] FAULT_INJECTION: forcing a failure. [ 912.082099][T21175] name failslab, interval 1, probability 0, space 0, times 0 [ 912.104277][T21175] CPU: 0 UID: 0 PID: 21175 Comm: syz.3.3834 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 912.104302][T21175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.104312][T21175] Call Trace: [ 912.104318][T21175] [ 912.104325][T21175] dump_stack_lvl+0x16c/0x1f0 [ 912.104345][T21175] should_fail_ex+0x512/0x640 [ 912.104361][T21175] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 912.104379][T21175] should_failslab+0xc2/0x120 [ 912.104397][T21175] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 912.104413][T21175] ? can_rx_register+0x1ef/0x6f0 [ 912.104432][T21175] can_rx_register+0x1ef/0x6f0 [ 912.104446][T21175] ? __pfx_raw_rcv+0x10/0x10 [ 912.104465][T21175] ? __pfx_can_rx_register+0x10/0x10 [ 912.104481][T21175] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 912.104503][T21175] raw_enable_filters+0xe0/0x210 [ 912.104526][T21175] raw_enable_allfilters+0x8b/0x2b0 [ 912.104547][T21175] raw_bind+0x2bc/0xe50 [ 912.104569][T21175] __sys_bind+0x1a4/0x260 [ 912.104591][T21175] ? __pfx___sys_bind+0x10/0x10 [ 912.104618][T21175] ? xfd_validate_state+0x61/0x180 [ 912.104643][T21175] __x64_sys_bind+0x72/0xb0 [ 912.104663][T21175] ? lockdep_hardirqs_on+0x7c/0x110 [ 912.104677][T21175] do_syscall_64+0xcd/0x490 [ 912.104693][T21175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.104708][T21175] RIP: 0033:0x7f492378e9a9 [ 912.104721][T21175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.104735][T21175] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 912.104749][T21175] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 912.104759][T21175] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 912.104768][T21175] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 912.104777][T21175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.104786][T21175] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 912.104805][T21175] [ 913.189673][T21193] openvswitch: netlink: IPv4 tunnel dst address is zero [ 913.208339][T21183] could not allocate digest TFM handle [ 913.371857][T21195] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 914.605037][T21217] usb usb36: usbfs: process 21217 (syz.3.3842) did not claim interface 0 before use [ 916.254949][T21250] openvswitch: netlink: IPv4 tunnel dst address is zero [ 916.442799][T21254] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 917.538753][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'. [ 918.407873][T21280] usb usb36: usbfs: process 21280 (syz.2.3862) did not claim interface 0 before use [ 920.805745][T21326] usb usb36: usbfs: process 21326 (syz.1.3873) did not claim interface 0 before use [ 921.191269][T21335] openvswitch: netlink: IPv4 tunnel dst address is zero [ 921.350291][T21336] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 921.474862][T21339] FAULT_INJECTION: forcing a failure. [ 921.474862][T21339] name failslab, interval 1, probability 0, space 0, times 0 [ 921.531847][T21339] CPU: 0 UID: 0 PID: 21339 Comm: syz.3.3879 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 921.531872][T21339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.531881][T21339] Call Trace: [ 921.531888][T21339] [ 921.531894][T21339] dump_stack_lvl+0x16c/0x1f0 [ 921.531915][T21339] should_fail_ex+0x512/0x640 [ 921.531932][T21339] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 921.531951][T21339] should_failslab+0xc2/0x120 [ 921.531969][T21339] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 921.531984][T21339] ? can_rx_register+0x582/0x6f0 [ 921.532003][T21339] can_rx_register+0x582/0x6f0 [ 921.532017][T21339] ? __pfx_raw_rcv+0x10/0x10 [ 921.532036][T21339] ? __pfx_can_rx_register+0x10/0x10 [ 921.532052][T21339] ? raw_bind+0xae/0xe50 [ 921.532074][T21339] raw_enable_filters+0xe0/0x210 [ 921.532096][T21339] raw_enable_allfilters+0x8b/0x2b0 [ 921.532112][T21339] ? __local_bh_enable_ip+0xa4/0x120 [ 921.532132][T21339] raw_bind+0x48a/0xe50 [ 921.532153][T21339] __sys_bind+0x1a4/0x260 [ 921.532176][T21339] ? __pfx___sys_bind+0x10/0x10 [ 921.532203][T21339] ? xfd_validate_state+0x61/0x180 [ 921.532222][T21339] ? __sys_setsockopt+0x140/0x1a0 [ 921.532240][T21339] __x64_sys_bind+0x72/0xb0 [ 921.532259][T21339] ? lockdep_hardirqs_on+0x7c/0x110 [ 921.532274][T21339] do_syscall_64+0xcd/0x490 [ 921.532290][T21339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.532305][T21339] RIP: 0033:0x7f492378e9a9 [ 921.532318][T21339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.532332][T21339] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 921.532355][T21339] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 921.532366][T21339] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 921.532375][T21339] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 921.532385][T21339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.532394][T21339] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 921.532414][T21339] [ 922.271035][T21343] usb usb36: usbfs: process 21343 (syz.0.3880) did not claim interface 0 before use [ 922.316443][T21343] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 922.716517][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3882'. [ 923.458193][T21363] usb usb36: usbfs: process 21363 (syz.3.3884) did not claim interface 0 before use [ 923.640522][T21368] could not allocate digest TFM handle [ 924.701089][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3893'. [ 926.448111][T21417] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 926.461877][T21416] usb usb36: usbfs: process 21416 (syz.2.3900) did not claim interface 0 before use [ 926.508519][T21416] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 927.015529][T21428] usb usb36: usbfs: process 21428 (syz.0.3903) did not claim interface 0 before use [ 927.068063][T21429] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 929.138447][T21476] usb usb36: usbfs: process 21476 (syz.1.3917) did not claim interface 0 before use [ 929.200040][T21476] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 929.322431][T21483] usb usb36: usbfs: process 21483 (syz.3.3919) did not claim interface 0 before use [ 929.383939][T21483] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 929.589676][T21488] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 930.826828][T21525] could not allocate digest TFM handle [ 930.848860][T21521] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 931.490796][T21538] FAULT_INJECTION: forcing a failure. [ 931.490796][T21538] name failslab, interval 1, probability 0, space 0, times 0 [ 931.534309][T21538] CPU: 0 UID: 0 PID: 21538 Comm: syz.2.3935 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 931.534333][T21538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.534343][T21538] Call Trace: [ 931.534348][T21538] [ 931.534355][T21538] dump_stack_lvl+0x16c/0x1f0 [ 931.534375][T21538] should_fail_ex+0x512/0x640 [ 931.534390][T21538] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 931.534415][T21538] should_failslab+0xc2/0x120 [ 931.534432][T21538] __kmalloc_cache_noprof+0x6a/0x3e0 [ 931.534453][T21538] ? __asan_memset+0x23/0x50 [ 931.534474][T21538] ? snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 931.534506][T21538] snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 931.534528][T21538] ? rcu_is_watching+0x12/0xc0 [ 931.534549][T21538] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 931.534569][T21538] ? __pfx___mutex_lock+0x10/0x10 [ 931.534597][T21538] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 931.534617][T21538] snd_pcm_oss_sync+0x1de/0x840 [ 931.534638][T21538] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 931.534656][T21538] snd_pcm_oss_release+0x28b/0x310 [ 931.534676][T21538] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 931.534694][T21538] __fput+0x402/0xb70 [ 931.534716][T21538] task_work_run+0x14d/0x240 [ 931.534740][T21538] ? __pfx_task_work_run+0x10/0x10 [ 931.534762][T21538] ? do_raw_spin_unlock+0x172/0x230 [ 931.534788][T21538] do_exit+0x86c/0x2bd0 [ 931.534812][T21538] ? __pfx_do_exit+0x10/0x10 [ 931.534830][T21538] ? do_raw_spin_lock+0x12c/0x2b0 [ 931.534851][T21538] ? find_held_lock+0x2b/0x80 [ 931.534873][T21538] do_group_exit+0xd3/0x2a0 [ 931.534894][T21538] get_signal+0x2673/0x26d0 [ 931.534913][T21538] ? __local_bh_enable_ip+0xa4/0x120 [ 931.534932][T21538] ? __pfx_get_signal+0x10/0x10 [ 931.534948][T21538] ? do_futex+0x122/0x350 [ 931.534966][T21538] ? __pfx_do_futex+0x10/0x10 [ 931.534985][T21538] arch_do_signal_or_restart+0x8f/0x790 [ 931.535003][T21538] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 931.535025][T21538] ? xfd_validate_state+0x61/0x180 [ 931.535050][T21538] exit_to_user_mode_loop+0x84/0x110 [ 931.535073][T21538] do_syscall_64+0x3f6/0x490 [ 931.535090][T21538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.535105][T21538] RIP: 0033:0x7f879698e9a9 [ 931.535117][T21538] Code: Unable to access opcode bytes at 0x7f879698e97f. [ 931.535124][T21538] RSP: 002b:00007f87977420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 931.535138][T21538] RAX: fffffffffffffe00 RBX: 00007f8796bb5fa8 RCX: 00007f879698e9a9 [ 931.535148][T21538] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8796bb5fa8 [ 931.535157][T21538] RBP: 00007f8796bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 931.535165][T21538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8796bb5fac [ 931.535174][T21538] R13: 0000000000000000 R14: 00007fffe30fc720 R15: 00007fffe30fc808 [ 931.535193][T21538] [ 931.865002][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.871327][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.134790][T21545] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 932.739882][T21552] could not allocate digest TFM handle [ 933.052128][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'. [ 933.389977][T21572] could not allocate digest TFM handle [ 933.834240][T21579] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 934.379870][T21588] could not allocate digest TFM handle [ 936.046795][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'. [ 936.420205][T21623] usb usb36: usbfs: process 21623 (syz.2.3955) did not claim interface 0 before use [ 936.463138][T21623] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 936.505948][T21636] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 936.868917][T21639] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 936.971320][T21641] could not allocate digest TFM handle [ 937.167796][T21654] FAULT_INJECTION: forcing a failure. [ 937.167796][T21654] name failslab, interval 1, probability 0, space 0, times 0 [ 937.228156][T21654] CPU: 0 UID: 0 PID: 21654 Comm: syz.0.3964 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 937.228179][T21654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 937.228189][T21654] Call Trace: [ 937.228194][T21654] [ 937.228201][T21654] dump_stack_lvl+0x16c/0x1f0 [ 937.228221][T21654] should_fail_ex+0x512/0x640 [ 937.228236][T21654] ? __kmalloc_noprof+0xbf/0x510 [ 937.228252][T21654] ? constrain_params_by_rules+0x175/0xca0 [ 937.228275][T21654] should_failslab+0xc2/0x120 [ 937.228292][T21654] __kmalloc_noprof+0xd2/0x510 [ 937.228304][T21654] ? unwind_get_return_address+0x59/0xa0 [ 937.228327][T21654] ? arch_stack_walk+0xa6/0x100 [ 937.228343][T21654] constrain_params_by_rules+0x175/0xca0 [ 937.228366][T21654] ? stack_trace_save+0x8e/0xc0 [ 937.228383][T21654] ? stack_depot_save_flags+0x28/0xa40 [ 937.228399][T21654] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 937.228417][T21654] ? kfree+0x2b4/0x4d0 [ 937.228440][T21654] ? __kasan_kmalloc+0xaa/0xb0 [ 937.228453][T21654] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 937.228472][T21654] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 937.228490][T21654] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 937.228512][T21654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.228529][T21654] ? snd_interval_refine+0x2fa/0x580 [ 937.228546][T21654] snd_pcm_hw_refine+0x7de/0xad0 [ 937.228568][T21654] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 937.228595][T21654] ? _snd_pcm_hw_param_min+0x259/0x630 [ 937.228616][T21654] snd_pcm_hw_param_near.constprop.0+0x58a/0x8e0 [ 937.228638][T21654] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 937.228658][T21654] ? __asan_memset+0x23/0x50 [ 937.228678][T21654] ? calc_src_frames.isra.0+0x187/0x1d0 [ 937.228701][T21654] snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 937.228730][T21654] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 937.228750][T21654] ? __pfx___mutex_lock+0x10/0x10 [ 937.228778][T21654] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 937.228798][T21654] snd_pcm_oss_sync+0x1de/0x840 [ 937.228818][T21654] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 937.228837][T21654] snd_pcm_oss_release+0x28b/0x310 [ 937.228857][T21654] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 937.228875][T21654] __fput+0x402/0xb70 [ 937.228897][T21654] task_work_run+0x14d/0x240 [ 937.228921][T21654] ? __pfx_task_work_run+0x10/0x10 [ 937.228943][T21654] ? do_raw_spin_unlock+0x172/0x230 [ 937.228970][T21654] do_exit+0x86c/0x2bd0 [ 937.228988][T21654] ? __pfx_try_to_wake_up+0x10/0x10 [ 937.229007][T21654] ? __pfx_do_exit+0x10/0x10 [ 937.229026][T21654] ? do_raw_spin_lock+0x12c/0x2b0 [ 937.229047][T21654] ? find_held_lock+0x2b/0x80 [ 937.229069][T21654] do_group_exit+0xd3/0x2a0 [ 937.229091][T21654] get_signal+0x2673/0x26d0 [ 937.229115][T21654] ? __pfx_get_signal+0x10/0x10 [ 937.229130][T21654] ? do_futex+0x122/0x350 [ 937.229148][T21654] ? __pfx_do_futex+0x10/0x10 [ 937.229167][T21654] arch_do_signal_or_restart+0x8f/0x790 [ 937.229186][T21654] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 937.229208][T21654] ? xfd_validate_state+0x61/0x180 [ 937.229231][T21654] exit_to_user_mode_loop+0x84/0x110 [ 937.229255][T21654] do_syscall_64+0x3f6/0x490 [ 937.229271][T21654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.229285][T21654] RIP: 0033:0x7fcaa158e9a9 [ 937.229296][T21654] Code: Unable to access opcode bytes at 0x7fcaa158e97f. [ 937.229303][T21654] RSP: 002b:00007fcaa23ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 937.229317][T21654] RAX: 0000000000000001 RBX: 00007fcaa17b5fa8 RCX: 00007fcaa158e9a9 [ 937.229326][T21654] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcaa17b5fac [ 937.229335][T21654] RBP: 00007fcaa17b5fa0 R08: 00007fcaa23af000 R09: 0000000000000000 [ 937.229344][T21654] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fcaa17b5fac [ 937.229353][T21654] R13: 0000000000000000 R14: 00007ffe808ce660 R15: 00007ffe808ce748 [ 937.229371][T21654] [ 938.644824][T21685] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 939.091178][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 939.456210][T21699] could not allocate digest TFM handle [ 940.834990][T21725] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 941.919226][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 942.212379][T21741] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 942.607448][T21767] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 942.710926][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4000'. [ 942.721659][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4000'. [ 942.732166][T21780] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4000'. [ 942.743815][T21779] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4000'. [ 943.271295][T21792] could not allocate digest TFM handle [ 943.898752][T21806] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 944.655711][T21846] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 944.668711][T21837] could not allocate digest TFM handle [ 945.260219][T21849] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 945.436469][T21867] FAULT_INJECTION: forcing a failure. [ 945.436469][T21867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.488992][T21855] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 945.511580][T21867] CPU: 0 UID: 0 PID: 21867 Comm: syz.2.4028 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 945.511604][T21867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.511613][T21867] Call Trace: [ 945.511619][T21867] [ 945.511625][T21867] dump_stack_lvl+0x16c/0x1f0 [ 945.511645][T21867] should_fail_ex+0x512/0x640 [ 945.511671][T21867] _copy_from_user+0x2e/0xd0 [ 945.511688][T21867] copy_msghdr_from_user+0x98/0x160 [ 945.511704][T21867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 945.511728][T21867] ___sys_sendmsg+0xfe/0x1d0 [ 945.511744][T21867] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.511758][T21867] ? __lock_acquire+0x622/0x1c90 [ 945.511800][T21867] __sys_sendmsg+0x16d/0x220 [ 945.511815][T21867] ? __pfx___sys_sendmsg+0x10/0x10 [ 945.511842][T21867] do_syscall_64+0xcd/0x490 [ 945.511858][T21867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.511874][T21867] RIP: 0033:0x7f879698e9a9 [ 945.511886][T21867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.511899][T21867] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.511913][T21867] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 945.511923][T21867] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 945.511932][T21867] RBP: 00007f8797742090 R08: 0000000000000000 R09: 0000000000000000 [ 945.511941][T21867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.511949][T21867] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 945.511967][T21867] [ 945.838384][T21877] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 946.148789][T21875] could not allocate digest TFM handle [ 946.287609][T21893] FAULT_INJECTION: forcing a failure. [ 946.287609][T21893] name fail_futex, interval 1, probability 0, space 0, times 0 [ 946.344992][T21893] CPU: 0 UID: 0 PID: 21893 Comm: syz.1.4036 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 946.345016][T21893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 946.345026][T21893] Call Trace: [ 946.345031][T21893] [ 946.345038][T21893] dump_stack_lvl+0x16c/0x1f0 [ 946.345058][T21893] should_fail_ex+0x512/0x640 [ 946.345076][T21893] get_futex_key+0x1d0/0x1540 [ 946.345097][T21893] ? __pfx_get_futex_key+0x10/0x10 [ 946.345120][T21893] futex_wake+0xe7/0x4e0 [ 946.345142][T21893] ? __pfx_futex_wake+0x10/0x10 [ 946.345163][T21893] ? kmem_cache_free+0x2d1/0x4d0 [ 946.345178][T21893] ? fd_install+0x225/0x750 [ 946.345198][T21893] ? putname+0x154/0x1a0 [ 946.345218][T21893] do_futex+0x1e3/0x350 [ 946.345235][T21893] ? __pfx_do_futex+0x10/0x10 [ 946.345258][T21893] __x64_sys_futex+0x1e0/0x4c0 [ 946.345279][T21893] ? __x64_sys_openat+0x174/0x210 [ 946.345299][T21893] ? __pfx___x64_sys_futex+0x10/0x10 [ 946.345316][T21893] ? xfd_validate_state+0x61/0x180 [ 946.345350][T21893] do_syscall_64+0xcd/0x490 [ 946.345367][T21893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.345384][T21893] RIP: 0033:0x7f11b418e9a9 [ 946.345397][T21893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.345410][T21893] RSP: 002b:00007f11b4f900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 946.345424][T21893] RAX: ffffffffffffffda RBX: 00007f11b43b5fa8 RCX: 00007f11b418e9a9 [ 946.345434][T21893] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f11b43b5fac [ 946.345443][T21893] RBP: 00007f11b43b5fa0 R08: 00007f11b4f91000 R09: 0000000000000000 [ 946.345452][T21893] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f11b43b5fac [ 946.345461][T21893] R13: 0000000000000000 R14: 00007ffc620c7f00 R15: 00007ffc620c7fe8 [ 946.345480][T21893] [ 946.743808][T21912] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 947.616329][T21929] could not allocate digest TFM handle [ 947.642470][T21935] Invalid ELF header magic: != ELF [ 948.095197][T21939] zswap: compressor 000 not available [ 948.485544][T21949] zswap: compressor 000 not available [ 949.246091][T21974] could not allocate digest TFM handle [ 949.296398][T21982] openvswitch: netlink: IPv4 tunnel dst address is zero [ 949.421907][T21983] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 952.111218][T22035] could not allocate digest TFM handle [ 953.607804][T22077] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 954.077954][T22079] zswap: compressor 000 not available [ 954.186895][T22085] could not allocate digest TFM handle [ 955.407839][T22103] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4090'. [ 955.453127][T22119] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 956.242887][T22134] could not allocate digest TFM handle [ 956.881108][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4101'. [ 957.518124][T22163] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 957.581493][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'. [ 958.320369][T22167] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4105'. [ 958.403606][T22181] could not allocate digest TFM handle [ 958.458303][T22189] FAULT_INJECTION: forcing a failure. [ 958.458303][T22189] name failslab, interval 1, probability 0, space 0, times 0 [ 958.601650][T22189] CPU: 0 UID: 0 PID: 22189 Comm: syz.0.4111 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 958.601674][T22189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 958.601685][T22189] Call Trace: [ 958.601691][T22189] [ 958.601697][T22189] dump_stack_lvl+0x16c/0x1f0 [ 958.601720][T22189] should_fail_ex+0x512/0x640 [ 958.601736][T22189] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 958.601755][T22189] should_failslab+0xc2/0x120 [ 958.601773][T22189] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 958.601789][T22189] ? can_rx_register+0x1ef/0x6f0 [ 958.601807][T22189] can_rx_register+0x1ef/0x6f0 [ 958.601821][T22189] ? __pfx_raw_rcv+0x10/0x10 [ 958.601840][T22189] ? __pfx_can_rx_register+0x10/0x10 [ 958.601856][T22189] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 958.601877][T22189] raw_enable_filters+0xe0/0x210 [ 958.601899][T22189] raw_enable_allfilters+0x8b/0x2b0 [ 958.601920][T22189] raw_bind+0x2bc/0xe50 [ 958.601941][T22189] __sys_bind+0x1a4/0x260 [ 958.601964][T22189] ? __pfx___sys_bind+0x10/0x10 [ 958.601991][T22189] ? xfd_validate_state+0x61/0x180 [ 958.602016][T22189] __x64_sys_bind+0x72/0xb0 [ 958.602037][T22189] ? lockdep_hardirqs_on+0x7c/0x110 [ 958.602051][T22189] do_syscall_64+0xcd/0x490 [ 958.602068][T22189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.602083][T22189] RIP: 0033:0x7fcaa158e9a9 [ 958.602095][T22189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.602109][T22189] RSP: 002b:00007fcaa23ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 958.602123][T22189] RAX: ffffffffffffffda RBX: 00007fcaa17b5fa0 RCX: 00007fcaa158e9a9 [ 958.602133][T22189] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 958.602141][T22189] RBP: 00007fcaa1610d69 R08: 0000000000000000 R09: 0000000000000000 [ 958.602150][T22189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.602159][T22189] R13: 0000000000000000 R14: 00007fcaa17b5fa0 R15: 00007ffe808ce748 [ 958.602197][T22189] [ 959.022990][T22207] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 959.294716][T22212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 959.978301][T22230] FAULT_INJECTION: forcing a failure. [ 959.978301][T22230] name failslab, interval 1, probability 0, space 0, times 0 [ 960.031278][T22230] CPU: 0 UID: 0 PID: 22230 Comm: syz.2.4122 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 960.031301][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.031310][T22230] Call Trace: [ 960.031316][T22230] [ 960.031322][T22230] dump_stack_lvl+0x16c/0x1f0 [ 960.031343][T22230] should_fail_ex+0x512/0x640 [ 960.031358][T22230] ? __kvmalloc_node_noprof+0x124/0x620 [ 960.031384][T22230] should_failslab+0xc2/0x120 [ 960.031401][T22230] __kvmalloc_node_noprof+0x137/0x620 [ 960.031424][T22230] ? __lock_acquire+0xb8a/0x1c90 [ 960.031443][T22230] ? seq_read_iter+0x826/0x12c0 [ 960.031468][T22230] ? seq_read_iter+0x826/0x12c0 [ 960.031486][T22230] seq_read_iter+0x826/0x12c0 [ 960.031506][T22230] ? __mutex_trylock_common+0xe9/0x250 [ 960.031534][T22230] proc_reg_read_iter+0x220/0x310 [ 960.031550][T22230] vfs_read+0x8bc/0xc60 [ 960.031573][T22230] ? __pfx___mutex_lock+0x10/0x10 [ 960.031589][T22230] ? __pfx_vfs_read+0x10/0x10 [ 960.031614][T22230] ksys_read+0x12a/0x250 [ 960.031627][T22230] ? __pfx_ksys_read+0x10/0x10 [ 960.031646][T22230] do_syscall_64+0xcd/0x490 [ 960.031663][T22230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.031678][T22230] RIP: 0033:0x7f879698e9a9 [ 960.031691][T22230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.031705][T22230] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 960.031719][T22230] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 960.031729][T22230] RDX: 00000000000000ea RSI: 0000200000000300 RDI: 0000000000000003 [ 960.031738][T22230] RBP: 00007f8797742090 R08: 0000000000000000 R09: 0000000000000000 [ 960.031747][T22230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.031756][T22230] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 960.031775][T22230] [ 960.503525][T22237] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 960.975489][T22241] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4126'. [ 961.745939][T22262] FAULT_INJECTION: forcing a failure. [ 961.745939][T22262] name failslab, interval 1, probability 0, space 0, times 0 [ 961.764455][T22265] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 961.809782][T22266] FAULT_INJECTION: forcing a failure. [ 961.809782][T22266] name failslab, interval 1, probability 0, space 0, times 0 [ 961.839052][T22262] CPU: 0 UID: 0 PID: 22262 Comm: syz.3.4133 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 961.839074][T22262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 961.839084][T22262] Call Trace: [ 961.839090][T22262] [ 961.839097][T22262] dump_stack_lvl+0x16c/0x1f0 [ 961.839117][T22262] should_fail_ex+0x512/0x640 [ 961.839134][T22262] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 961.839153][T22262] should_failslab+0xc2/0x120 [ 961.839170][T22262] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 961.839186][T22262] ? can_rx_register+0x1ef/0x6f0 [ 961.839205][T22262] can_rx_register+0x1ef/0x6f0 [ 961.839223][T22262] ? __pfx_raw_rcv+0x10/0x10 [ 961.839242][T22262] ? __pfx_can_rx_register+0x10/0x10 [ 961.839259][T22262] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 961.839281][T22262] raw_enable_filters+0xe0/0x210 [ 961.839304][T22262] raw_enable_allfilters+0x8b/0x2b0 [ 961.839325][T22262] raw_bind+0x2bc/0xe50 [ 961.839346][T22262] __sys_bind+0x1a4/0x260 [ 961.839369][T22262] ? __pfx___sys_bind+0x10/0x10 [ 961.839396][T22262] ? xfd_validate_state+0x61/0x180 [ 961.839430][T22262] __x64_sys_bind+0x72/0xb0 [ 961.839454][T22262] ? lockdep_hardirqs_on+0x7c/0x110 [ 961.839469][T22262] do_syscall_64+0xcd/0x490 [ 961.839486][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.839501][T22262] RIP: 0033:0x7f492378e9a9 [ 961.839514][T22262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.839529][T22262] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 961.839543][T22262] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 961.839553][T22262] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 961.839562][T22262] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 961.839571][T22262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.839579][T22262] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 961.839598][T22262] [ 962.071698][T22266] CPU: 0 UID: 0 PID: 22266 Comm: syz.2.4134 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 962.071722][T22266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 962.071732][T22266] Call Trace: [ 962.071738][T22266] [ 962.071744][T22266] dump_stack_lvl+0x16c/0x1f0 [ 962.071765][T22266] should_fail_ex+0x512/0x640 [ 962.071781][T22266] ? __kvmalloc_node_noprof+0x124/0x620 [ 962.071807][T22266] should_failslab+0xc2/0x120 [ 962.071824][T22266] __kvmalloc_node_noprof+0x137/0x620 [ 962.071848][T22266] ? io_alloc_cache_init+0x33/0x170 [ 962.071867][T22266] ? io_alloc_cache_init+0x33/0x170 [ 962.071880][T22266] io_alloc_cache_init+0x33/0x170 [ 962.071896][T22266] io_uring_setup+0x63b/0x2080 [ 962.071920][T22266] ? __pfx_io_uring_setup+0x10/0x10 [ 962.071941][T22266] ? do_futex+0x122/0x350 [ 962.071959][T22266] ? __pfx_do_futex+0x10/0x10 [ 962.071975][T22266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 962.072001][T22266] ? xfd_validate_state+0x61/0x180 [ 962.072020][T22266] ? __pfx_do_writev+0x10/0x10 [ 962.072046][T22266] __x64_sys_io_uring_setup+0xc2/0x170 [ 962.072068][T22266] do_syscall_64+0xcd/0x490 [ 962.072085][T22266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.072099][T22266] RIP: 0033:0x7f879698e9a9 [ 962.072112][T22266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.072125][T22266] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 962.072140][T22266] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 962.072149][T22266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002000 [ 962.072168][T22266] RBP: 00007f8796a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 962.072177][T22266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.072186][T22266] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 962.072206][T22266] [ 962.659688][T22277] netlink: 'syz.3.4145': attribute type 27 has an invalid length. [ 962.722042][T22277] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4145'. [ 963.185055][T22281] zswap: compressor 000 not available [ 963.746961][T22302] FAULT_INJECTION: forcing a failure. [ 963.746961][T22302] name failslab, interval 1, probability 0, space 0, times 0 [ 963.818039][T22302] CPU: 0 UID: 0 PID: 22302 Comm: syz.3.4143 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 963.818064][T22302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 963.818074][T22302] Call Trace: [ 963.818079][T22302] [ 963.818086][T22302] dump_stack_lvl+0x16c/0x1f0 [ 963.818107][T22302] should_fail_ex+0x512/0x640 [ 963.818123][T22302] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 963.818142][T22302] should_failslab+0xc2/0x120 [ 963.818159][T22302] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 963.818175][T22302] ? getname_flags.part.0+0x4c/0x550 [ 963.818198][T22302] getname_flags.part.0+0x4c/0x550 [ 963.818216][T22302] ? kmem_cache_free+0x2d1/0x4d0 [ 963.818231][T22302] getname_flags+0x93/0xf0 [ 963.818254][T22302] do_mq_open+0x1ac/0x8c0 [ 963.818271][T22302] ? do_futex+0x122/0x350 [ 963.818290][T22302] ? __pfx_do_mq_open+0x10/0x10 [ 963.818306][T22302] ? __pfx_sched_core_share_pid+0x10/0x10 [ 963.818327][T22302] __x64_sys_mq_open+0x155/0x1e0 [ 963.818345][T22302] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 963.818372][T22302] do_syscall_64+0xcd/0x490 [ 963.818389][T22302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.818403][T22302] RIP: 0033:0x7f492378e9a9 [ 963.818416][T22302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.818430][T22302] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 963.818444][T22302] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 963.818454][T22302] RDX: 000000000000fffc RSI: 0000000000000062 RDI: 0000000000000000 [ 963.818462][T22302] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 963.818471][T22302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.818480][T22302] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 963.818498][T22302] [ 964.317778][T22310] could not allocate digest TFM handle [ 964.743293][T22320] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 964.856681][T22322] FAULT_INJECTION: forcing a failure. [ 964.856681][T22322] name failslab, interval 1, probability 0, space 0, times 0 [ 964.907209][T22322] CPU: 0 UID: 0 PID: 22322 Comm: syz.3.4149 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 964.907235][T22322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 964.907245][T22322] Call Trace: [ 964.907251][T22322] [ 964.907258][T22322] dump_stack_lvl+0x16c/0x1f0 [ 964.907279][T22322] should_fail_ex+0x512/0x640 [ 964.907295][T22322] ? __kvmalloc_node_noprof+0x124/0x620 [ 964.907321][T22322] should_failslab+0xc2/0x120 [ 964.907339][T22322] __kvmalloc_node_noprof+0x137/0x620 [ 964.907363][T22322] ? io_alloc_cache_init+0x33/0x170 [ 964.907382][T22322] ? io_alloc_cache_init+0x33/0x170 [ 964.907396][T22322] io_alloc_cache_init+0x33/0x170 [ 964.907412][T22322] io_uring_setup+0x63b/0x2080 [ 964.907435][T22322] ? __pfx_io_uring_setup+0x10/0x10 [ 964.907456][T22322] ? do_futex+0x122/0x350 [ 964.907475][T22322] ? __pfx_do_futex+0x10/0x10 [ 964.907491][T22322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 964.907517][T22322] ? xfd_validate_state+0x61/0x180 [ 964.907536][T22322] ? __pfx_do_writev+0x10/0x10 [ 964.907561][T22322] __x64_sys_io_uring_setup+0xc2/0x170 [ 964.907584][T22322] do_syscall_64+0xcd/0x490 [ 964.907601][T22322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.907621][T22322] RIP: 0033:0x7f492378e9a9 [ 964.907634][T22322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.907650][T22322] RSP: 002b:00007f4924688038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 964.907666][T22322] RAX: ffffffffffffffda RBX: 00007f49239b5fa0 RCX: 00007f492378e9a9 [ 964.907676][T22322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002000 [ 964.907685][T22322] RBP: 00007f4923810d69 R08: 0000000000000000 R09: 0000000000000000 [ 964.907695][T22322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.907704][T22322] R13: 0000000000000000 R14: 00007f49239b5fa0 R15: 00007ffdccba58e8 [ 964.907723][T22322] [ 965.285955][T22331] could not allocate digest TFM handle [ 967.377006][T22372] could not allocate digest TFM handle [ 969.651486][T22428] could not allocate digest TFM handle [ 969.988197][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4183'. [ 970.434077][T22450] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 970.815514][T22458] zswap: compressor 000 not available [ 971.015612][T22469] FAULT_INJECTION: forcing a failure. [ 971.015612][T22469] name failslab, interval 1, probability 0, space 0, times 0 [ 971.069806][T22469] CPU: 0 UID: 0 PID: 22469 Comm: syz.2.4191 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 971.069829][T22469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 971.069840][T22469] Call Trace: [ 971.069845][T22469] [ 971.069852][T22469] dump_stack_lvl+0x16c/0x1f0 [ 971.069872][T22469] should_fail_ex+0x512/0x640 [ 971.069886][T22469] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 971.069911][T22469] should_failslab+0xc2/0x120 [ 971.069928][T22469] __kmalloc_cache_noprof+0x6a/0x3e0 [ 971.069950][T22469] ? alloc_pipe_info+0x10e/0x590 [ 971.069968][T22469] alloc_pipe_info+0x10e/0x590 [ 971.069985][T22469] splice_direct_to_actor+0x77d/0xa30 [ 971.070009][T22469] ? __pfx_direct_splice_actor+0x10/0x10 [ 971.070031][T22469] ? __pfx_aa_file_perm+0x10/0x10 [ 971.070046][T22469] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 971.070065][T22469] ? get_pid_task+0xfc/0x250 [ 971.070090][T22469] do_splice_direct+0x174/0x240 [ 971.070111][T22469] ? __pfx_do_splice_direct+0x10/0x10 [ 971.070132][T22469] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 971.070156][T22469] ? rw_verify_area+0xcf/0x680 [ 971.070179][T22469] do_sendfile+0xb06/0xe50 [ 971.070204][T22469] ? __pfx_do_sendfile+0x10/0x10 [ 971.070226][T22469] ? __fget_files+0x20e/0x3c0 [ 971.070253][T22469] __x64_sys_sendfile64+0x1d8/0x220 [ 971.070269][T22469] ? ksys_write+0x1ac/0x250 [ 971.070282][T22469] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 971.070304][T22469] do_syscall_64+0xcd/0x490 [ 971.070321][T22469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.070336][T22469] RIP: 0033:0x7f879698e9a9 [ 971.070348][T22469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.070363][T22469] RSP: 002b:00007f8797742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 971.070377][T22469] RAX: ffffffffffffffda RBX: 00007f8796bb5fa0 RCX: 00007f879698e9a9 [ 971.070387][T22469] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 971.070395][T22469] RBP: 00007f8797742090 R08: 0000000000000000 R09: 0000000000000000 [ 971.070410][T22469] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 971.070419][T22469] R13: 0000000000000000 R14: 00007f8796bb5fa0 R15: 00007fffe30fc808 [ 971.070440][T22469] [ 971.696828][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4194'. [ 973.171942][T22505] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 973.676031][ T5860] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 974.504736][T22534] openvswitch: netlink: IPv4 tunnel dst address is zero [ 974.618938][T22537] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 974.730804][T22531] could not allocate digest TFM handle [ 975.326864][T22541] zswap: compressor 000 not available [ 975.629667][T22549] FAULT_INJECTION: forcing a failure. [ 975.629667][T22549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.785254][T22549] CPU: 0 UID: 0 PID: 22549 Comm: syz.0.4211 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 975.785278][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 975.785287][T22549] Call Trace: [ 975.785292][T22549] [ 975.785307][T22549] dump_stack_lvl+0x16c/0x1f0 [ 975.785327][T22549] should_fail_ex+0x512/0x640 [ 975.785345][T22549] _copy_to_user+0x32/0xd0 [ 975.785364][T22549] simple_read_from_buffer+0xcb/0x170 [ 975.785388][T22549] proc_fail_nth_read+0x197/0x270 [ 975.785409][T22549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 975.785430][T22549] ? rw_verify_area+0xcf/0x680 [ 975.785451][T22549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 975.785470][T22549] vfs_read+0x1e4/0xc60 [ 975.785485][T22549] ? __pfx___mutex_lock+0x10/0x10 [ 975.785500][T22549] ? __pfx_vfs_read+0x10/0x10 [ 975.785518][T22549] ? __fget_files+0x20e/0x3c0 [ 975.785546][T22549] ksys_read+0x12a/0x250 [ 975.785558][T22549] ? __pfx_ksys_read+0x10/0x10 [ 975.785577][T22549] do_syscall_64+0xcd/0x490 [ 975.785594][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.785609][T22549] RIP: 0033:0x7fcaa158d3bc [ 975.785622][T22549] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 975.785636][T22549] RSP: 002b:00007fcaa238d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 975.785650][T22549] RAX: ffffffffffffffda RBX: 00007fcaa17b6080 RCX: 00007fcaa158d3bc [ 975.785660][T22549] RDX: 000000000000000f RSI: 00007fcaa238d0a0 RDI: 0000000000000006 [ 975.785669][T22549] RBP: 00007fcaa238d090 R08: 0000000000000000 R09: 0000000000000000 [ 975.785677][T22549] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 975.785686][T22549] R13: 0000000000000000 R14: 00007fcaa17b6080 R15: 00007ffe808ce748 [ 975.785705][T22549] [ 975.894024][T22552] Invalid ELF header magic: != ELF [ 976.098331][T22555] zswap: compressor 000 not available [ 976.291957][T22557] zswap: compressor 000 not available [ 976.592416][T22553] tty tty34: ldisc open failed (-12), clearing slot 33 [ 977.023687][T22584] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 978.024342][T22516] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 978.033510][T22516] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 978.043525][T22516] CPU: 0 UID: 0 PID: 22516 Comm: kworker/u9:1 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 978.043549][T22516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 978.043560][T22516] Workqueue: hci3 hci_rx_work [ 978.043582][T22516] Call Trace: [ 978.043588][T22516] [ 978.043595][T22516] dump_stack_lvl+0x16c/0x1f0 [ 978.043613][T22516] sysfs_warn_dup+0x7f/0xa0 [ 978.043637][T22516] sysfs_create_dir_ns+0x24b/0x2b0 [ 978.043659][T22516] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 978.043680][T22516] ? find_held_lock+0x2b/0x80 [ 978.043700][T22516] ? do_raw_spin_unlock+0x172/0x230 [ 978.043724][T22516] kobject_add_internal+0x2c4/0x9b0 [ 978.043744][T22516] kobject_add+0x16e/0x240 [ 978.043760][T22516] ? __pfx_kobject_add+0x10/0x10 [ 978.043778][T22516] ? do_raw_spin_unlock+0x172/0x230 [ 978.043801][T22516] ? kobject_put+0xab/0x5a0 [ 978.043822][T22516] device_add+0x288/0x1a70 [ 978.043841][T22516] ? __pfx_dev_set_name+0x10/0x10 [ 978.043871][T22516] ? __pfx_device_add+0x10/0x10 [ 978.043891][T22516] ? mgmt_send_event_skb+0x2fb/0x460 [ 978.043916][T22516] hci_conn_add_sysfs+0x17e/0x230 [ 978.043934][T22516] le_conn_complete_evt+0x1075/0x1d70 [ 978.043963][T22516] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 978.043985][T22516] ? bt_warn+0xe4/0x120 [ 978.044008][T22516] ? __pfx_bt_warn+0x10/0x10 [ 978.044038][T22516] hci_le_conn_complete_evt+0x23c/0x370 [ 978.044065][T22516] hci_le_meta_evt+0x357/0x5e0 [ 978.044080][T22516] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 978.044109][T22516] hci_event_packet+0x682/0x11c0 [ 978.044132][T22516] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 978.044148][T22516] ? __pfx_hci_event_packet+0x10/0x10 [ 978.044173][T22516] ? kcov_remote_start+0x3c9/0x6d0 [ 978.044194][T22516] ? lockdep_hardirqs_on+0x7c/0x110 [ 978.044212][T22516] hci_rx_work+0x2c5/0x16b0 [ 978.044228][T22516] ? rcu_is_watching+0x12/0xc0 [ 978.044247][T22516] process_one_work+0x9cc/0x1b70 [ 978.044277][T22516] ? __pfx_process_one_work+0x10/0x10 [ 978.044304][T22516] ? assign_work+0x1a0/0x250 [ 978.044327][T22516] worker_thread+0x6c8/0xf10 [ 978.044355][T22516] ? __kthread_parkme+0x19e/0x250 [ 978.044373][T22516] ? __pfx_worker_thread+0x10/0x10 [ 978.044395][T22516] kthread+0x3c5/0x780 [ 978.044416][T22516] ? __pfx_kthread+0x10/0x10 [ 978.044437][T22516] ? rcu_is_watching+0x12/0xc0 [ 978.044452][T22516] ? __pfx_kthread+0x10/0x10 [ 978.044473][T22516] ret_from_fork+0x5d4/0x6f0 [ 978.044493][T22516] ? __pfx_kthread+0x10/0x10 [ 978.044513][T22516] ret_from_fork_asm+0x1a/0x30 [ 978.044549][T22516] [ 978.044602][T22516] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 978.341414][T22516] Bluetooth: hci3: failed to register connection device [ 978.566338][T22609] could not allocate digest TFM handle [ 978.943889][T22620] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 979.212936][T22624] FAULT_INJECTION: forcing a failure. [ 979.212936][T22624] name failslab, interval 1, probability 0, space 0, times 0 [ 979.277392][T22624] CPU: 0 UID: 0 PID: 22624 Comm: syz.0.4236 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 979.277418][T22624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 979.277428][T22624] Call Trace: [ 979.277434][T22624] [ 979.277441][T22624] dump_stack_lvl+0x16c/0x1f0 [ 979.277461][T22624] should_fail_ex+0x512/0x640 [ 979.277477][T22624] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 979.277496][T22624] should_failslab+0xc2/0x120 [ 979.277514][T22624] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 979.277530][T22624] ? __alloc_skb+0x2b2/0x380 [ 979.277548][T22624] __alloc_skb+0x2b2/0x380 [ 979.277562][T22624] ? __pfx___alloc_skb+0x10/0x10 [ 979.277576][T22624] ? __nla_validate_parse+0x600/0x2880 [ 979.277600][T22624] __netdev_alloc_skb+0x213/0x920 [ 979.277619][T22624] ovs_packet_cmd_execute+0x219/0x15b0 [ 979.277637][T22624] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 979.277655][T22624] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 979.277677][T22624] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 979.277702][T22624] genl_family_rcv_msg_doit+0x209/0x2f0 [ 979.277724][T22624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 979.277744][T22624] ? trace_cap_capable+0x18d/0x200 [ 979.277766][T22624] ? bpf_lsm_capable+0x9/0x10 [ 979.277786][T22624] ? security_capable+0x7e/0x260 [ 979.277804][T22624] ? ns_capable+0xd7/0x110 [ 979.277828][T22624] genl_rcv_msg+0x55c/0x800 [ 979.277851][T22624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 979.277880][T22624] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 979.277902][T22624] netlink_rcv_skb+0x158/0x420 [ 979.277919][T22624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 979.277941][T22624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 979.277968][T22624] ? netlink_deliver_tap+0x1ae/0xd30 [ 979.277988][T22624] genl_rcv+0x28/0x40 [ 979.278005][T22624] netlink_unicast+0x58a/0x850 [ 979.278025][T22624] ? __pfx_netlink_unicast+0x10/0x10 [ 979.278049][T22624] netlink_sendmsg+0x8d1/0xdd0 [ 979.278069][T22624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.278094][T22624] ____sys_sendmsg+0xa95/0xc70 [ 979.278114][T22624] ? copy_msghdr_from_user+0x10a/0x160 [ 979.278129][T22624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 979.278152][T22624] ? __pfx_futex_wake_mark+0x10/0x10 [ 979.278176][T22624] ___sys_sendmsg+0x134/0x1d0 [ 979.278193][T22624] ? __pfx____sys_sendmsg+0x10/0x10 [ 979.278207][T22624] ? __lock_acquire+0x622/0x1c90 [ 979.278250][T22624] __sys_sendmsg+0x16d/0x220 [ 979.278266][T22624] ? __pfx___sys_sendmsg+0x10/0x10 [ 979.278280][T22624] ? __x64_sys_futex+0x1e0/0x4c0 [ 979.278309][T22624] do_syscall_64+0xcd/0x490 [ 979.278326][T22624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.278341][T22624] RIP: 0033:0x7fcaa158e9a9 [ 979.278354][T22624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.278369][T22624] RSP: 002b:00007fcaa23ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 979.278384][T22624] RAX: ffffffffffffffda RBX: 00007fcaa17b5fa0 RCX: 00007fcaa158e9a9 [ 979.278394][T22624] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000008 [ 979.278404][T22624] RBP: 00007fcaa1610d69 R08: 0000000000000000 R09: 0000000000000000 [ 979.278413][T22624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.278422][T22624] R13: 0000000000000000 R14: 00007fcaa17b5fa0 R15: 00007ffe808ce748 [ 979.278441][T22624] [ 979.615527][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.797263][T22626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4235'. [ 980.312239][T22634] zswap: compressor 000 not available [ 980.589336][T15808] ------------[ cut here ]------------ [ 980.595005][T15808] ODEBUG: free active (active state 0) object: ffff88807939d318 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 980.711336][T22639] zswap: compressor 000 not available [ 980.747727][T15808] WARNING: CPU: 0 PID: 15808 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 980.757604][T15808] Modules linked in: [ 980.761497][T15808] CPU: 0 UID: 0 PID: 15808 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 980.773993][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 980.784221][T15808] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 980.790028][T15808] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 6f 15 8c 4c 89 e6 48 c7 c7 40 64 15 8c e8 5f d2 9d fc 90 <0f> 0b 90 90 58 83 05 16 b2 cc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 980.809722][T15808] RSP: 0018:ffffc90003f4f768 EFLAGS: 00010286 [ 980.815807][T15808] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 980.824052][T15808] RDX: ffff888026a9da00 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 980.832242][T15808] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 980.840415][T15808] R10: 0000000000000001 R11: 0000000000056660 R12: ffffffff8c156ae0 [ 980.848483][T15808] R13: ffffffff8baff040 R14: ffffffff8a8e0710 R15: ffffc90003f4f868 [ 980.856715][T15808] FS: 0000000000000000(0000) GS:ffff88812472d000(0000) knlGS:0000000000000000 [ 980.865847][T15808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.872424][T15808] CR2: 0000001b2d2e8ff8 CR3: 0000000045ae4000 CR4: 00000000003526f0 [ 980.880576][T15808] Call Trace: [ 980.883984][T15808] [ 980.886903][T15808] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 980.892368][T15808] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 980.898204][T15808] debug_check_no_obj_freed+0x4b7/0x600 [ 980.903774][T15808] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 980.909835][T15808] ? rcu_is_watching+0x12/0xc0 [ 980.915189][T15808] ? kmem_cache_free+0x2d1/0x4d0 [ 980.920121][T15808] kfree+0x28f/0x4d0 [ 980.924586][T15808] ? hci_release_dev+0x4d8/0x600 [ 980.929537][T15808] hci_release_dev+0x4d8/0x600 [ 980.934622][T15808] ? __pfx_hci_release_dev+0x10/0x10 [ 980.939909][T15808] ? rcu_is_watching+0x12/0xc0 [ 980.944706][T15808] ? kfree+0x24f/0x4d0 [ 980.948774][T15808] bt_host_release+0x6a/0xb0 [ 980.953630][T15808] ? __pfx_bt_host_release+0x10/0x10 [ 980.958910][T15808] device_release+0xa4/0x240 [ 980.963662][T15808] kobject_put+0x1e7/0x5a0 [ 980.968091][T15808] ? __pfx_vhci_release+0x10/0x10 [ 980.973199][T15808] put_device+0x1f/0x30 [ 980.977371][T15808] vhci_release+0x81/0xf0 [ 980.981730][T15808] __fput+0x402/0xb70 [ 980.985854][T15808] task_work_run+0x14d/0x240 [ 980.990444][T15808] ? __pfx_task_work_run+0x10/0x10 [ 980.995617][T15808] do_exit+0x86c/0x2bd0 [ 980.999768][T15808] ? find_held_lock+0x2b/0x80 [ 981.004501][T15808] ? __pfx_do_exit+0x10/0x10 [ 981.009084][T15808] ? do_raw_spin_lock+0x12c/0x2b0 [ 981.014122][T15808] ? find_held_lock+0x2b/0x80 [ 981.018789][T15808] do_group_exit+0xd3/0x2a0 [ 981.023322][T15808] get_signal+0x2673/0x26d0 [ 981.028113][T15808] ? __pfx_get_signal+0x10/0x10 [ 981.033223][T15808] ? __do_sys_wait4+0xd1/0x170 [ 981.038008][T15808] arch_do_signal_or_restart+0x8f/0x790 [ 981.043609][T15808] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 981.049757][T15808] ? __pfx_fput_close_sync+0x10/0x10 [ 981.055314][T15808] ? dnotify_flush+0xa9/0x4c0 [ 981.059991][T15808] exit_to_user_mode_loop+0x84/0x110 [ 981.065435][T15808] do_syscall_64+0x3f6/0x490 [ 981.070020][T15808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.075980][T15808] RIP: 0033:0x7f4923784c17 [ 981.080399][T15808] Code: Unable to access opcode bytes at 0x7f4923784bed. [ 981.087465][T15808] RSP: 002b:00007ffdccba5c40 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 981.095922][T15808] RAX: fffffffffffffe00 RBX: 00000000000005ab RCX: 00007f4923784c17 [ 981.103930][T15808] RDX: 0000000040000000 RSI: 00007ffdccba5cac RDI: 00000000ffffffff [ 981.111889][T15808] RBP: 00007ffdccba5cac R08: 0000000000000000 R09: 0000000000000000 [ 981.119924][T15808] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001bc [ 981.127920][T15808] R13: 0000555594b4c590 R14: 00000000000eb9ea R15: 00007ffdccba5d00 [ 981.136252][T15808] [ 981.139276][T15808] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 981.146538][T15808] CPU: 0 UID: 0 PID: 15808 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 981.158762][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.168803][T15808] Call Trace: [ 981.172068][T15808] [ 981.174986][T15808] dump_stack_lvl+0x3d/0x1f0 [ 981.179564][T15808] panic+0x71c/0x800 [ 981.183451][T15808] ? __pfx_panic+0x10/0x10 [ 981.187857][T15808] ? show_trace_log_lvl+0x29b/0x3e0 [ 981.193051][T15808] ? check_panic_on_warn+0x1f/0xb0 [ 981.198155][T15808] ? debug_print_object+0x1a2/0x2b0 [ 981.203344][T15808] check_panic_on_warn+0xab/0xb0 [ 981.208275][T15808] __warn+0xf6/0x3c0 [ 981.212163][T15808] ? debug_print_object+0x1a2/0x2b0 [ 981.217349][T15808] report_bug+0x3c3/0x580 [ 981.221690][T15808] ? debug_print_object+0x1a2/0x2b0 [ 981.226882][T15808] handle_bug+0x184/0x210 [ 981.231201][T15808] exc_invalid_op+0x17/0x50 [ 981.235780][T15808] asm_exc_invalid_op+0x1a/0x20 [ 981.240652][T15808] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 981.246448][T15808] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 6f 15 8c 4c 89 e6 48 c7 c7 40 64 15 8c e8 5f d2 9d fc 90 <0f> 0b 90 90 58 83 05 16 b2 cc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 981.266052][T15808] RSP: 0018:ffffc90003f4f768 EFLAGS: 00010286 [ 981.272106][T15808] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 981.280235][T15808] RDX: ffff888026a9da00 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 981.288189][T15808] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 981.296158][T15808] R10: 0000000000000001 R11: 0000000000056660 R12: ffffffff8c156ae0 [ 981.304113][T15808] R13: ffffffff8baff040 R14: ffffffff8a8e0710 R15: ffffc90003f4f868 [ 981.312072][T15808] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 981.317529][T15808] ? __warn_printk+0x198/0x350 [ 981.322300][T15808] ? __warn_printk+0x1a5/0x350 [ 981.327077][T15808] ? debug_print_object+0x1a1/0x2b0 [ 981.332262][T15808] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 981.337710][T15808] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 981.343512][T15808] debug_check_no_obj_freed+0x4b7/0x600 [ 981.349051][T15808] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 981.355108][T15808] ? rcu_is_watching+0x12/0xc0 [ 981.359868][T15808] ? kmem_cache_free+0x2d1/0x4d0 [ 981.364794][T15808] kfree+0x28f/0x4d0 [ 981.368681][T15808] ? hci_release_dev+0x4d8/0x600 [ 981.373611][T15808] hci_release_dev+0x4d8/0x600 [ 981.378366][T15808] ? __pfx_hci_release_dev+0x10/0x10 [ 981.383642][T15808] ? rcu_is_watching+0x12/0xc0 [ 981.388390][T15808] ? kfree+0x24f/0x4d0 [ 981.392454][T15808] bt_host_release+0x6a/0xb0 [ 981.397035][T15808] ? __pfx_bt_host_release+0x10/0x10 [ 981.402303][T15808] device_release+0xa4/0x240 [ 981.406885][T15808] kobject_put+0x1e7/0x5a0 [ 981.411289][T15808] ? __pfx_vhci_release+0x10/0x10 [ 981.416303][T15808] put_device+0x1f/0x30 [ 981.420481][T15808] vhci_release+0x81/0xf0 [ 981.424799][T15808] __fput+0x402/0xb70 [ 981.428774][T15808] task_work_run+0x14d/0x240 [ 981.433360][T15808] ? __pfx_task_work_run+0x10/0x10 [ 981.438467][T15808] do_exit+0x86c/0x2bd0 [ 981.442615][T15808] ? find_held_lock+0x2b/0x80 [ 981.447281][T15808] ? __pfx_do_exit+0x10/0x10 [ 981.451862][T15808] ? do_raw_spin_lock+0x12c/0x2b0 [ 981.456878][T15808] ? find_held_lock+0x2b/0x80 [ 981.461542][T15808] do_group_exit+0xd3/0x2a0 [ 981.466037][T15808] get_signal+0x2673/0x26d0 [ 981.470536][T15808] ? __pfx_get_signal+0x10/0x10 [ 981.475373][T15808] ? __do_sys_wait4+0xd1/0x170 [ 981.480588][T15808] arch_do_signal_or_restart+0x8f/0x790 [ 981.486124][T15808] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 981.492274][T15808] ? __pfx_fput_close_sync+0x10/0x10 [ 981.497549][T15808] ? dnotify_flush+0xa9/0x4c0 [ 981.502213][T15808] exit_to_user_mode_loop+0x84/0x110 [ 981.507492][T15808] do_syscall_64+0x3f6/0x490 [ 981.512071][T15808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.517955][T15808] RIP: 0033:0x7f4923784c17 [ 981.522369][T15808] Code: Unable to access opcode bytes at 0x7f4923784bed. [ 981.529368][T15808] RSP: 002b:00007ffdccba5c40 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 981.537791][T15808] RAX: fffffffffffffe00 RBX: 00000000000005ab RCX: 00007f4923784c17 [ 981.545748][T15808] RDX: 0000000040000000 RSI: 00007ffdccba5cac RDI: 00000000ffffffff [ 981.553701][T15808] RBP: 00007ffdccba5cac R08: 0000000000000000 R09: 0000000000000000 [ 981.561663][T15808] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001bc [ 981.569617][T15808] R13: 0000555594b4c590 R14: 00000000000eb9ea R15: 00007ffdccba5d00 [ 981.577582][T15808] [ 981.580653][T15808] Kernel Offset: disabled [ 981.584963][T15808] Rebooting in 86400 seconds..