last executing test programs: 8.290274255s ago: executing program 2 (id=4131): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x9, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x4}, {0x100, 0x1, 0x4e, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0x3, 0x0, 0x7) open(0x0, 0x22040, 0x75) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0xffffffffffffffff, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x800000000002, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) 7.26394131s ago: executing program 2 (id=4134): socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffc]}, 0x1fe, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) r1 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x7, 0x0, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a2, 0xffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/devices/virtual/block/loop10/queue/io_poll\x00', 0x20, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(r1, r1, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose14/carrier_changes\x00', 0x103000, 0x0) socket(0x3, 0x5, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x0) socket(0x10, 0x4, 0xfffffffd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 7.260383405s ago: executing program 1 (id=4143): process_madvise$auto(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0xc0b}, 0x2e5, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xffffffffffffb8f1, 0x5, 0x3, 0x613, 0xfffffffffffffffa, 0x100000000000006) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 5.261427929s ago: executing program 0 (id=4140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r3, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f000000a580)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008080) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_PMKID={0xbb, 0x55, "41752e3cda83c6e74902e3eaed10a2208eec1f64959e56baf9d44e0815bdce0b854fa4b0a61f94f0e1ef61b545d406fac7e83bde583d9c6ff0ee38f817f9c2915ba24516333bf8e719f1f7347eb895df4e756df5f795940567f49e4e7d4c3ca4b54ba4acdfad299dfb8a85adedb1b342c3cc2007691b7e1c03ed5eac323e181ae8e1c9a9ba720822ae70165a1e561441a390ff53194e0e4f76a16d31f3f6c21d4911aa7f9fc7bb1eb07cd4b171611b1967e9695fb4f579"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_DISABLE_EHT={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x4}, @NET_SHAPER_A_LEAVES={0x8, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0x4}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x14) 4.986423198s ago: executing program 1 (id=4144): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x9, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x4}, {0x100, 0x1, 0x4e, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0x3, 0x0, 0x7) open(0x0, 0x22040, 0x75) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0xffffffffffffffff, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x800000000002, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) 4.968086834s ago: executing program 0 (id=4145): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc008) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x24004054) r1 = socketpair$auto(0x0, 0x200, 0xc7, &(0x7f00000000c0)=0xff) mmap$auto(0x0, 0xb991, 0x5, 0x19, 0xffffffffffffffff, 0x2) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003c00)={0x1c, r2, 0x5, 0x74bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0x8, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r4, 0x2275, &(0x7f0000000040)="d93ca7") write$auto(r0, &(0x7f0000001100)='\'.@o\xcf::}%/.&+-\x00', 0x1) write$auto(r4, 0x0, 0xffd8) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000000)="1100000000000000001000000000000000", 0x11) ioctl$auto_VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000001040)={0x4, r5}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000001080)="bfa36e8a41cf4a7903cd8cb5b232fe00841813bdac397709c98c858a36824b499bd91ed2fb094224b4f80eef4dbc1522fe9c114d15b2391e0535863affdb008b44b155ff98e570af60350fbefccfadf72297b2b9018e53dcbe6caf1b6bb5b9c48275", 0x9) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) r7 = setfsuid$auto(0x0) setuid$auto(r7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) writev$auto(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) 4.670191539s ago: executing program 3 (id=4146): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x6, 0x68c, 0xfffffffffffffffc, 0xa) socket(0x2, 0x801, 0x100) mmap$auto(0x1, 0x3, 0x3, 0x55, r0, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) read$auto_check_wx_fops_(r1, 0x0, 0x0) mlockall$auto(0x5) mmap$auto(0x2, 0x40000a, 0x2bb, 0x14, 0x2, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/sit0/ioam6_id\x00', 0x88800, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x8, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x28, 0x80000, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xffffffffffffffff, 0xdae, 0x7) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0643, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.024368587s ago: executing program 2 (id=4147): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc008) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x24004054) r1 = socketpair$auto(0x0, 0x200, 0xc7, &(0x7f00000000c0)=0xff) mmap$auto(0x0, 0xb991, 0x5, 0x19, 0xffffffffffffffff, 0x2) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003c00)={0x1c, r2, 0x5, 0x74bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0x8, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r4, 0x2275, &(0x7f0000000040)="d93ca7") write$auto(r0, &(0x7f0000001100)='\'.@o\xcf::}%/.&+-\x00', 0x1) write$auto(r4, 0x0, 0xffd8) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000000)="1100000000000000001000000000000000", 0x11) ioctl$auto_VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000001040)={0x4, r5}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000001080)="bfa36e8a41cf4a7903cd8cb5b232fe00841813bdac397709c98c858a36824b499bd91ed2fb094224b4f80eef4dbc1522fe9c114d15b2391e0535863affdb008b44b155ff98e570af60350fbefccfadf72297b2b9018e53dcbe6caf1b6bb5b9c48275", 0x9) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) r7 = setfsuid$auto(0x0) setuid$auto(r7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) 3.908239111s ago: executing program 1 (id=4148): socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0xf0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 3.850655895s ago: executing program 0 (id=4149): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) socket(0x17, 0x1, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001480)={{&(0x7f0000000380)="cd24a9a21c3ed3a76f1ac328473d7f894afa83d40afa0428d436c158cba20cb5bdc7ccbd9298b605a09a0d7ff89976afa303faa0d08e9f5cdf98f12260bf042f9698b879739341df9f01c2ca9a96b0192e1c4431defc4bccf446d08af4c42396224c2148439550cb2227d52aaa66ba9eb22921618c59f4605be7d25ef48ebcfaa7ef5e69171882283b6f0353bbfd743fbf9f3af8c068fe0c7e0bcd12bcd25c4ed71748e4d53cae06e7106768326596af31b878764c1b7089e71fa77a9e1dac7b23ae1665ab1df85314a730254cf815dbc53b19e3897ca8850f9fae468d9578314b47b3607b6277a43df7352565facb596f95a6ff593e075817e687af7348a6755f7b1c8c2ed192d99c9d3f42d06a0ea3a82f49d04f9e904f90cc6e70b2e232ba07a756eb552810f6566354572bc7020b3602141f9d05211b84e1a4520b1ab5e0ae5be15a1ab83d2820b7545d91951b73e895d8316fd57e01859de34babb97b1eb43b7fc0d4cc57a6d848570aad2818e59ee488c891a20b9bbf43348a377460d0a72aa75aa225a5672d1b953f10933ec2b0a5d00ebd127b09fdaef50ca2818e56186bb7ad082ca6ca95ec459a3354f3e745838ada51f5717cc735dfa6e290b43754b7ca1c247113604f79e81a1bd8de356c25f68173fd307f2de3d0a9812c5266074c7c8e4b395d882ee88f4337d67800535f3a4ec69fa1ba35955f417e532307db40d4649af62f098bc0e2e863f9dbfbbcbe0522c742530ee0aeadcb0361fda5b1eebc2b646bb3489423061eb780d48a370757d82d9454bac45e0813738068cdbe5c6463895d8d5175e7689aefb30b1e2f61888c71b362dff07e1e52f4d59ee8979237f570427cee1c48c52a892a43c519370f8abad8f42bdd99a022adbaded5ad6aa21a6148a8ac36ccc22d23ad2303d4a2ca77e9428185ff1e3ef5fe14c2d55a691e43a2fef11a0bc07890a3539abd725d9c96a953f89b1166763a5f56ea153467cbce70a1c193a39c5f890c9d2f66617619567519d26e4721d7dda8d8d38624cb8e0e9af6256cef30368ca7f56b120642453df64a46dc94fbfb4c1693254f189c44108b74a688cb9dfe92a6150355bf53b720800b7f1628333a80060f75ffaad224b13fbf9567b511d3fac4193cc2e1cbd145a70cf0c3e8436a94b330b120d2ea67d33aa43891b1f9846d0d3ed9d762645bbda291b5a538fc97dbe396286a994bedb65e048dff7c30c1efbc03794717e063869301920cba8ab8770cbce44a6c6f2265b3cbcf4b8e31f1cce9afc514d8c18a3f1f82632c8ddb1fcd47d98ed25eb6fce530276ba13c537ccf8b1988ab6a339b8d18210076b8ee0c23491e714ef9f21d716200f9d0e368712462773c89f9bc305d707b3d80d7d82796fe6d6ed79008d0bb7b1a80ff8adc60e770e79a832bf4d94c201500231ae53dd90d354c847dbeef4d699d15dcc8da952ea0097b6bd2a2779505fcf06dbdaa43e1225a4c570c8a6fdb92936bcf90114d5559e444e124a05497ae703fc34b85bb55261680440f5e591d7f05951fab7887a26b2c31057f0c392e73db5f6e26103a02c03145b51736c9f6b3d29a41651ae5fad4bf92e5299f6eb4f8b1126ead2afbc450baa92b35d40cc7f2474a2730c0a970f8e1461c52c44750f9078593a99644644c527c83703c25149cadd3d914f5750f8152f7bd33e7436e9992065b1f5aa671a52a021f3da2280cd0950f1cbe7d19954e8ce48b85097dd84a572cd76a848a1ede404de9f49bd691a51827744d99054b44217042795b80bafefd9f801dc9d25ffc32bcf5ed4a387b4b11300be39375e02da7f2bfe11a5499a1623826423f14f4848b1fafd29e70e737c790940a1d344f7e52c1adcd25e1e5f56402b3f167eef62d2c6a69acb2aeef8ed3dc2ef48212624b91298687549b5068c6e12a1aa7c49d36907b49a1c31cc4a219632a0b24a2e017c3860509cf57490233e8c375a09beb0a49be3cb84d50ae738e19c77f8124bfdd8c7c8af6071ab3d3e30a326a9a545da0aa011806ba9781f43299368d2d0452a22629dfe7ccf9c8a552520cd5abd159a5aabd9109209da1722691838be04963741f711900a028bb0d62a2c9a776f5265133d751faa86e31a319a2ba085b5074cda35525ab7edbf6130945b54f6c674c24d2f3cff87641b0e1699edcd49a985e7884dd262888d7509d4b87e8faefb7bfff9ef6ecb2fe8bb6999b321c8eb364776bc114196b02fbe1637448676c31b332bced2952b59ee15dff75638c90524f5fddc8b0955d86ffcf048ef7f714315c1f979716a64576a205ee7ea2a904b0d565a6b1fc4deb195922c1938721d44e05c53b641b929078abe9dd6d0279d4c2f5f4cf4f2be2dc0ce5ff1eb251644d3ad64ad65ed18ce9502599b86902b6aaf23dbf89d1af802540e80a5d54a0c047c730c483e8db4116b0c3ad9a4094b826bba6a519378fe630777a65600eac1220fd33258abfd5965384943fad86a59a1d1e4ba7ee0c671b035889d28a50e7ee07984f2a1542f9673928ac4c514cc09dc64a27c561d19278a3e7e259abc57ce89f1c8f26b63ce4da43e7c4be367a0b3e887aa41bc85094a7e6ac6746661384064ce3297cf52fd7d50ec5729da019d142b7b9aa08b54294a1fa8be99501717cf7532d30a3ae3558df5a9ff5815562b14b9199bd9ddf95014ae1359ada8b8a1289c78a57f7c0990f446726a5e4e919a45af0c661ceeb5b0090e95227913e089e8417fd12e9b8715da04ddf20f3e0c3b9232139b8d7958bfb73d3fbe145e75f9d21dcffe558e184a08e609a931c5d6f8f7350041a514441058a24c07eace5e9a8488809eee4106dfac5e183030958c2a6b0efd773473441af08c03bfe0e8af46ddfae879809b056e4acc4ed9ad25f397a559e63c3ef290e925b9937caf6f3b8047c1f21935dad994754dd5601d46a4f9f80dd7f5dfa94a4bbf10ca20a88760ebd5c3ad5392434242563617aeeb0807af9f08d9fe60dde56869039a7aa3f41380268bea1ca47fd2919efe63a48f97bc91beec129cf6fc0e525b7e69f95681d94c943491127be7609f64c50a9e09a4234974d90101b04dfcdd1e73d640531b994c3f23b5b72414fc7879acf5d15b16bb0452f2296ebd2cf165d955a0002caf3f577437f35b9f2a62ace848a8e0c024398cc33d436254c52066a9d64c71eabe153fbebafe4aca39b7e5dbb56d733e4fcd8cb4eb676001aba5054198045fb75d19a4f971c1ce1f7269291d4a279a400c435e6aa9f37584889d696cdb621413b92a601aa1a214b9f3140bf560934785eae1a73ab2238592243de111cea30db961417d6441bfb9da8a282b1230c10fa935b015fa44a426d884e49671ecb9aa39bfdd2c7ba8d53e90dd340271908dc8f8d98edfe7e515dbd5a6eb465fdca29210db7b244262c49a4748b8936ba5fcd4cfdae84a84d4995f4513a6c39cd215e6f5238e24d698f48c9c60d940f668937f0eec7bb053fe98f88a2e4fdfde07929fd0b32c113f77ab430a96fafac5fdf3b359da47f7f89cc46bf10ea67c3dec8f2b5b1e62cb1718ec4fc861b3e626b2e4d19453c205c9a6fc7e1bf8c54f0bb5ca4b654d7dd9b8571d8b0b9f250db4f8d5341dcbbb8f9ecb8f81cc64f081732630213381d22a4751eef3c739ace189b58dae2c0e77790aaf3a22a3a8442adb91beab87c6807dc1a5c1110cd6a776037650e9d27aad4e91dc7419546ea518a725f0b1e8587c8e00d2be34b1edf33f62b0c656c02d47728661d5143131c659cc051d3d382459d6a1da0e4ba6af3b5084254ccfd8c5d563322a68a443918467a425c6955c20c6ce0e32382ba28765fcf9a480f0ff0cd31d3da087655a81c9425480d34763126ca23c4e1b4d686cbfeede31ac22278d44eafd4214a24f08e956693ff75a453326dc2c99af4043619e1b31488a88cf8e57e794182a9c9dc54ed269fd0337fd3d9001297f5e208318614eebf19715522051d0cbe1b5daa80cf50e53650901e35d232fb782172ebc2f01e8ca1c16f0457d0ea5678ac443c8f79056c7c627686c413e3623f8ea046c6b9e2fe04914eceb454345593915c2cca1dbe91e17c60846fc1fa6b0539a839bcd97c262cec040be3ba6e737f45842cd5f57500ad4d4ea0ffa9d622428769f07453dcbba5f5c932829db9488c55f907fe4904d2f273306212a4339a4e1d4433e6bbca6a875256fcb0c46b102b25910b0872dd7e9b35ecaa0cc295eb612df28428e843ad2d259cc10e1e244874219e0e453a31fcb80c3cd0da2b1975dc1ec5beaf79c54fc6604b7253d7dabb0c5f8f453fa353afd472f8fbc5db33e7098a4c70d7706453afd6c021468edf40fc267e84ed2e84f568e9167d87e3181487724b061a2f7bb0c472852dc2b452bcc8bf825be43da8ca58cddc719aca7cbbc3e46f7dd206705fd31baa9e5aa848a3a692f0b9c66c41151f1af90e1e34bd3d4027bbe724fe556f89c4f0af892f003c29065fe3926e81f8c6a30d115888300e8876398016e4b2a375b60196d790ad459a897ad3a49e66c77176a93c380111570de68e516290b28b1d37463dc99271db8479a4793c0f70b0ea3b68098a00a1ee7f84eafb09b27106a18e8404fe01f91f06ac8842e959dc0902fb427451840ac92d305f3b1c6663fed7f6f408ab2fb50e7fbfb8bddf8e19b8bc9f72eef7e381e8c9f7ae0df080dff48c6b95ad61e34df24811b1a321b0fd0450eb1c680f2b0c8f52d693ed35d2963c95af960eaf3a17d95f30771b57bcc4189cb7dcc986fd206f076afec4de8e07841f45f47b41cd494f95c3f60672b40ea1e6e70969b7ccfd6aa8c49fafd42416c1e46f002f5eae52f3107323340996ea1860a8519170f833570d135cd88fd6ab1172cc0f8974ce0ef4216bd9780fb62b795d57b40528265f629acedf0e6400ca30e42f078ab8998680190852938a0bca6e659a5e7329cd9e5496f2ed23bec03b45a5603b1657d8a1a19855a72d8372a3e5597d4a2af9c7347cbdbff41598e360db5207cd35e781e71c6e61cbae58619949baa2607b5a022c66d2ebd0e4e3709a212a991d0d23e48e8eab5ee3103be20408ddd018c3d3fea45c116d5926c5bfbf423e81e7d4744cfbe6bb6b4b6f0cfb9146b65aff5c6ffaad6ab03aeb837ae60203bbef66b13b7ef8e54b3a51084e2afedef58399a35202ee90dd7503f22df138fcd06add7153ce49854ec1d92621202a30f1601fc5a2e4dc15a7622febf4eb19c04115a5a525e71a1fdb8f6f401538a103df4e3daa54f08ad1d991e8ab7f7f16fe9407f50fad70c906f48b87a57aa616e94bdd3e25bf76d6c6a8d5ef7792e07a53335549e7a2290ac75af5d67f9240b902e9b271949e87e72918d1d6bd113616189c5b1421bba60dce05379399b3feaad251fc430537f9d9f403fcb22d3e0becb78100df290eccdeb0df76640cf35320855d93a3a80ec5d20d13955aecc3ace8a59662d516c4cc1eab089aaf4380a2c8c13e81f539597f1529161aa667d56ffa683caa62ab8b24082c2a69f8ca12939ebea22edd5e94bd66c2dcf94741882d1e8b498a30fa869ff537a18f1924a22bf589e7ecd2ec9d5f5e9b5be1af0ff9b85dc0e0876fceffb9bd3b451e7d87a7b803b6781ede2ba346572189da544dcf1cbdc049d3c97f789e3f2095cf975b608e21fce69e71acdbabdb72ca933a5cca9068fb594c0d9cd41269e73acb0af80e7cf8dbfc84e7bae0d68117dbb7cd66553e512bcef93ce562ac7c00"/4082, 0x80000000, &(0x7f00000000c0)={&(0x7f0000001380)="7e2f8f015987fc9fbd79f3fd56903d3908795152df7409f7ac2074a3cc9a23cc2f99c6e599a9fb81b0666b63bac2dd5e66924223e18ccedef848db6afdaf4726e07d1bc80bb6ddba409c838ae2c8ffc86fb9b50a9c25bdadb88adb17fa4edb3bacb5c958c03c0142234c1220bf0a83248c36fc5c614e03f92bfb06a4fbb5dee4616e340acfc1473898451906a650bb0a8aff131adfe3dec9ac24", 0x7}, 0x8001, &(0x7f0000001440)="aa9c2ca25cdae2a278cdfbb243e2761c81672f1c9598c2c54c99", 0x1, 0x102}, 0x7}, 0x7ffe, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x3b66, 0x0) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x0, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x2, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r1 = socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index0/ways_of_associativity\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x2b, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) 3.647509011s ago: executing program 1 (id=4150): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) socket(0x17, 0x1, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001480)={{&(0x7f0000000380)="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"/4082, 0x80000000, &(0x7f00000000c0)={&(0x7f0000001380)="7e2f8f015987fc9fbd79f3fd56903d3908795152df7409f7ac2074a3cc9a23cc2f99c6e599a9fb81b0666b63bac2dd5e66924223e18ccedef848db6afdaf4726e07d1bc80bb6ddba409c838ae2c8ffc86fb9b50a9c25bdadb88adb17fa4edb3bacb5c958c03c0142234c1220bf0a83248c36fc5c614e03f92bfb06a4fbb5dee4616e340acfc1473898451906a650bb0a8aff131adfe3dec9ac24", 0x7}, 0x8001, &(0x7f0000001440)="aa9c2ca25cdae2a278cdfbb243e2761c81672f1c9598c2c54c99", 0x1, 0x102}, 0x7}, 0x7ffe, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x3b66, 0x0) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x0, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x2, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index0/ways_of_associativity\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003800)=""/168, 0xa8) socket(0x2b, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) 3.414156749s ago: executing program 3 (id=4151): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, 0x0, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000100)="dbf92bb70aff517fa7a31df41560bbd5c6316a84c6328446a41ccb148874ff979d186cf41fde8edee6f0bc98fc050f6992079ae65f312e25473a1c1c4dd6b9eb2bfdec6489eb5aaf5689a2f2e571df72dde0bd5eea2a74b35e4242101fc4c9d8eb7f0a7987a3ab6252cdf1be710db4865e67d4cd310bdce89f28174f1c73e96e9def18a07cbc6fe8b1bfe8a7d658f8c52920d0958eeb738b43573334965fee45e62fe6b2d4c3150dc6f1b855ae1bbae44d6005e898e4920a5cc86e5b714f6156e6ec8ab9f22ff3", 0xffffffff, &(0x7f0000000000)="0c54893d92c8e14117e7c244a0e9219e586449e72bdc6a0bfb01a1f634512364b048e46d75c95f7795f96638335e65b4cd218823f9da2b006f7fd5a6af69cada86dfdeffac550e0945263002a823b78b424ff4a3f6d591f36f73e0cc9f398b7b8f3b1379c0", 0x100, &(0x7f0000000200)="9dabc562d54a8c25f5f8b0d1849a1cadfb21967ba4c681dbcd241d57", &(0x7f0000000240)=0x4}) read$auto_ipsec_dbg_fops_ipsec(r2, &(0x7f00000002c0)=""/167, 0xa7) close_range$auto(0x2, 0x8, 0x0) 3.272997156s ago: executing program 0 (id=4152): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x9, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x5, 0x40, 0x76c5, 0x8, 0x100000000}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto(r0, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x10000, 0x1, 0x3, 0x5, 0xee01, 0xee00, 0x0, 0x8, 0x8001, 0x43, 0x0, 0x26e2de87, 0xa, 0x9, 0x5, 0x0, 0x5}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x1000007ffe) setitimer$auto(0x5, 0x0, 0x0) keyctl$auto(0x4, 0xfffffffffffffffc, r2, 0x0, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/udp_ports_inject_error\x00', 0x2002, 0x0) readlink$auto(0x0, 0x0, 0x7) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = set_tid_address$auto(0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0x3f1) getdents$auto(r4, 0x0, 0xa2b0) sched_rr_get_interval$auto(r3, 0x0) lseek$auto(0x3, 0x8, 0x3) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) madvise$auto(0x7, 0x8, 0x1a) 3.163678668s ago: executing program 1 (id=4153): process_madvise$auto(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0xc0b}, 0x2e5, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xffffffffffffb8f1, 0x5, 0x3, 0x613, 0xfffffffffffffffa, 0x100000000000006) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 3.132150523s ago: executing program 3 (id=4154): process_madvise$auto(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0xc0b}, 0x2e5, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xffffffffffffb8f1, 0x5, 0x3, 0x613, 0xfffffffffffffffa, 0x100000000000006) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = memfd_secret$auto(0x81) writev$auto(r1, &(0x7f00000001c0)={&(0x7f0000000140)="2cf7b6083a4342e38ed1303a1cc0e68de74f56dcfa28136ea40f853ea07a32a9358563e134265c9b9d0621471232e669c69303f5cd2eb92feae98e4aec61977291d703ba66cb0c414271c87d2ecd8a82", 0xffff}, 0xc099) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x80) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0x0) 2.471592146s ago: executing program 0 (id=4155): r0 = socket(0x1e, 0xa, 0x0) r1 = setfsgid$auto(0xee01) fchown$auto(r0, 0x0, r1) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) socket(0x2, 0xe, 0x400fd) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4082, 0xff2) 2.394848887s ago: executing program 2 (id=4156): mmap$auto(0x0, 0x20009, 0xdf, 0x800000000eb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = set_tid_address$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc0\x00', 0xc00, 0x0) ioctl$auto(r1, 0x4bfb, 0x9) syz_open_procfs$namespace(r0, &(0x7f0000000080)) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) timer_settime$auto(0x9, 0x5, &(0x7f0000000000)={{0x9, 0x1}, {0x17, 0x7e}}, &(0x7f0000000040)={{0x8, 0x80000001}, {0x8, 0xaa0}}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_secret$auto(0x0) r2 = socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000100), r2) socket(0x18, 0x6, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 2.084662457s ago: executing program 3 (id=4157): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x9, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0x4}, {0x100, 0x1, 0x4e, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0x3, 0x0, 0x7) open(0x0, 0x22040, 0x75) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0xffffffffffffffff, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x800000000002, 0x8]}, 0x0) 1.403147989s ago: executing program 2 (id=4158): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x5000000, 0xfffffffffffffffe, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) 915.603742ms ago: executing program 3 (id=4159): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mq_notify$auto(0xffffffffffffffff, &(0x7f0000001940)={@sival_ptr=&(0x7f0000001740), @raw=0x1, 0x2, @_sigev_thread={0x0, 0x0}}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) tee$auto(r0, r2, 0x6, 0xb) writev$auto(r1, &(0x7f0000000200)={0x0, 0x10}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/sessionid\x00', 0x8000, 0x0) 655.620712ms ago: executing program 0 (id=4160): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x6, 0x68c, 0xfffffffffffffffc, 0xa) socket(0x2, 0x801, 0x100) mmap$auto(0x1, 0x3, 0x3, 0x55, r0, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) read$auto_check_wx_fops_(r1, 0x0, 0x0) mlockall$auto(0x5) mmap$auto(0x2, 0x40000a, 0x2bb, 0x14, 0x2, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/sit0/ioam6_id\x00', 0x88800, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x8, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x28, 0x80000, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xffffffffffffffff, 0xdae, 0x7) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0643, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 305.207398ms ago: executing program 1 (id=4161): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) socket(0x17, 0x1, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001480)={{&(0x7f0000000380)="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"/4082, 0x80000000, &(0x7f00000000c0)={&(0x7f0000001380)="7e2f8f015987fc9fbd79f3fd56903d3908795152df7409f7ac2074a3cc9a23cc2f99c6e599a9fb81b0666b63bac2dd5e66924223e18ccedef848db6afdaf4726e07d1bc80bb6ddba409c838ae2c8ffc86fb9b50a9c25bdadb88adb17fa4edb3bacb5c958c03c0142234c1220bf0a83248c36fc5c614e03f92bfb06a4fbb5dee4616e340acfc1473898451906a650bb0a8aff131adfe3dec9ac24", 0x7}, 0x8001, &(0x7f0000001440)="aa9c2ca25cdae2a278cdfbb243e2761c81672f1c9598c2c54c99", 0x1, 0x102}, 0x7}, 0x7ffe, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x3b66, 0x0) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x0, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x2, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r1 = socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index0/ways_of_associativity\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x2b, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) 252.98219ms ago: executing program 2 (id=4162): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, 0x0, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000100)="dbf92bb70aff517fa7a31df41560bbd5c6316a84c6328446a41ccb148874ff979d186cf41fde8edee6f0bc98fc050f6992079ae65f312e25473a1c1c4dd6b9eb2bfdec6489eb5aaf5689a2f2e571df72dde0bd5eea2a74b35e4242101fc4c9d8eb7f0a7987a3ab6252cdf1be710db4865e67d4cd310bdce89f28174f1c73e96e9def18a07cbc6fe8b1bfe8a7d658f8c52920d0958eeb738b43573334965fee45e62fe6b2d4c3150dc6f1b855ae1bbae44d6005e898e4920a5cc86e5b714f6156e6ec8ab9f22ff3", 0xffffffff, &(0x7f0000000000)="0c54893d92c8e14117e7c244a0e9219e586449e72bdc6a0bfb01a1f634512364b048e46d75c95f7795f96638335e65b4cd218823f9da2b006f7fd5a6af69cada86dfdeffac550e0945263002a823b78b424ff4a3f6d591f36f73e0cc9f398b7b8f3b1379c0", 0x100, &(0x7f0000000200)="9dabc562d54a8c25f5f8b0d1849a1cadfb21967ba4c681dbcd241d57", &(0x7f0000000240)=0x4}) read$auto_ipsec_dbg_fops_ipsec(r2, &(0x7f00000002c0)=""/167, 0xa7) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 3 (id=4163): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000040)="658f3a8cee169ca7cf41a0da55ffa9af49b911f4ebe067c90b7a2c1c9e3017cf2873a2fa974000b3875f3bec726bd1e4f69a780e5a7847ff45c8e5940723789c7ba8e95ed6c64a08628eba3ff9f3afa8650370ad33614cc23ded4d96bf0785294deaf54c93541c2c77f334a6231c0a", 0x4}, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) (async) writev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000040)="658f3a8cee169ca7cf41a0da55ffa9af49b911f4ebe067c90b7a2c1c9e3017cf2873a2fa974000b3875f3bec726bd1e4f69a780e5a7847ff45c8e5940723789c7ba8e95ed6c64a08628eba3ff9f3afa8650370ad33614cc23ded4d96bf0785294deaf54c93541c2c77f334a6231c0a", 0x4}, 0x10) (async) kernel console output (not intermixed with test programs): wroot/310/file0" dev="tmpfs" ino=1645 res=1 errno=0 [ 2552.864512][ T30] audit: type=1800 audit(1751430463.866:310): pid=30698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3681" name="file0" dev="tmpfs" ino=1645 res=0 errno=0 [ 2553.068290][T30711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3685'. [ 2553.176208][T30709] hub 8-0:1.0: USB hub found [ 2553.196807][T30709] hub 8-0:1.0: 1 port detected [ 2553.309715][ T30] audit: type=1800 audit(1751430464.356:311): pid=30720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3687" name="dbroot" dev="configfs" ino=122517 res=0 errno=0 [ 2553.378473][T30720] vhci_hcd: invalid port number 16 [ 2553.383964][T30720] vhci_hcd: invalid port number 16 [ 2553.539072][T30723] netlink: 'syz.0.3690': attribute type 7 has an invalid length. [ 2553.587579][T30723] netlink: 'syz.0.3690': attribute type 7 has an invalid length. [ 2554.230847][T30741] ICMPv6: process `syz.3.3693' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 2554.519119][T30744] lo: entered allmulticast mode [ 2554.583867][T30745] lo: left allmulticast mode [ 2555.185482][ T30] audit: type=1804 audit(1751430466.226:312): pid=30759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3695" name="/newroot/313/file0" dev="tmpfs" ino=1662 res=1 errno=0 [ 2555.283872][ T30] audit: type=1800 audit(1751430466.226:313): pid=30759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3695" name="file0" dev="tmpfs" ino=1662 res=0 errno=0 [ 2555.391851][T30763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3700'. [ 2555.532021][T30763] hub 8-0:1.0: USB hub found [ 2555.579665][T30763] hub 8-0:1.0: 1 port detected [ 2560.044635][T30828] syz.2.3714 (30828) used greatest stack depth: 17096 bytes left [ 2560.194952][T30833] kexec: Could not allocate control_code_buffer [ 2560.224221][T30839] FAULT_INJECTION: forcing a failure. [ 2560.224221][T30839] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.262412][T30839] CPU: 0 UID: 0 PID: 30839 Comm: syz.2.3716 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2560.262459][T30839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2560.262480][T30839] Call Trace: [ 2560.262490][T30839] [ 2560.262503][T30839] dump_stack_lvl+0x16c/0x1f0 [ 2560.262561][T30839] should_fail_ex+0x512/0x640 [ 2560.262608][T30839] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2560.262659][T30839] should_failslab+0xc2/0x120 [ 2560.262691][T30839] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2560.262737][T30839] ? sctp_endpoint_new+0x7c/0xcd0 [ 2560.262776][T30839] sctp_endpoint_new+0x7c/0xcd0 [ 2560.262818][T30839] sctp_init_sock+0xe2d/0x1330 [ 2560.262849][T30839] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 2560.262890][T30839] sctp_v6_init_sock+0x16/0x70 [ 2560.262921][T30839] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 2560.262951][T30839] inet6_create+0xb2d/0x1300 [ 2560.262986][T30839] ? inet6_create+0x7f/0x1300 [ 2560.263022][T30839] __sock_create+0x335/0x8d0 [ 2560.263071][T30839] __sys_socket+0x14d/0x260 [ 2560.263109][T30839] ? fput+0x70/0xf0 [ 2560.263139][T30839] ? __pfx___sys_socket+0x10/0x10 [ 2560.263180][T30839] ? xfd_validate_state+0x61/0x180 [ 2560.263220][T30839] ? __pfx_ksys_write+0x10/0x10 [ 2560.263278][T30839] __x64_sys_socket+0x72/0xb0 [ 2560.263315][T30839] ? lockdep_hardirqs_on+0x7c/0x110 [ 2560.263365][T30839] do_syscall_64+0xcd/0x490 [ 2560.263421][T30839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2560.263455][T30839] RIP: 0033:0x7f096538e929 [ 2560.263481][T30839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2560.263514][T30839] RSP: 002b:00007f0966244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2560.263546][T30839] RAX: ffffffffffffffda RBX: 00007f09655b5fa0 RCX: 00007f096538e929 [ 2560.263568][T30839] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 2560.263588][T30839] RBP: 00007f0965410b39 R08: 0000000000000000 R09: 0000000000000000 [ 2560.263609][T30839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2560.263629][T30839] R13: 0000000000000000 R14: 00007f09655b5fa0 R15: 00007ffd6e6fa928 [ 2560.263693][T30839] [ 2562.024001][T30867] FAULT_INJECTION: forcing a failure. [ 2562.024001][T30867] name failslab, interval 1, probability 0, space 0, times 0 [ 2562.039521][T30867] CPU: 0 UID: 0 PID: 30867 Comm: syz.1.3725 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2562.039564][T30867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2562.039583][T30867] Call Trace: [ 2562.039593][T30867] [ 2562.039604][T30867] dump_stack_lvl+0x16c/0x1f0 [ 2562.039656][T30867] should_fail_ex+0x512/0x640 [ 2562.039701][T30867] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2562.039768][T30867] should_failslab+0xc2/0x120 [ 2562.039799][T30867] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2562.039848][T30867] ? __alloc_skb+0x2b2/0x380 [ 2562.039895][T30867] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2562.039949][T30867] __alloc_skb+0x2b2/0x380 [ 2562.039996][T30867] ? __pfx___alloc_skb+0x10/0x10 [ 2562.040043][T30867] ? __local_bh_enable_ip+0xa0/0x120 [ 2562.040081][T30867] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 2562.040128][T30867] ? __local_bh_enable_ip+0xa4/0x120 [ 2562.040164][T30867] ? rt_set_nexthop.constprop.0+0x500/0x12e0 [ 2562.040217][T30867] alloc_skb_with_frags+0xe0/0x860 [ 2562.040253][T30867] ? xfrm_lookup_with_ifid+0x8b4/0x1e40 [ 2562.040312][T30867] sock_alloc_send_pskb+0x7fb/0x990 [ 2562.040357][T30867] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 2562.040411][T30867] ? ip_route_output_key_hash+0x16b/0x2e0 [ 2562.040464][T30867] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2562.040518][T30867] ? xfrm_lookup_route+0x6a/0x200 [ 2562.040576][T30867] raw_sendmsg+0x19e2/0x3820 [ 2562.040633][T30867] ? __pfx_raw_sendmsg+0x10/0x10 [ 2562.040691][T30867] ? __lock_acquire+0x622/0x1c90 [ 2562.040760][T30867] ? __pfx___might_resched+0x10/0x10 [ 2562.040794][T30867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2562.040850][T30867] ? aa_sk_perm+0x2f4/0xb10 [ 2562.040892][T30867] ? __import_iovec+0x1dd/0x650 [ 2562.040942][T30867] ? __might_fault+0xe3/0x190 [ 2562.040986][T30867] ? __might_fault+0x13b/0x190 [ 2562.041032][T30867] ? __pfx_raw_sendmsg+0x10/0x10 [ 2562.041082][T30867] inet_sendmsg+0x119/0x140 [ 2562.041130][T30867] ____sys_sendmsg+0x973/0xc70 [ 2562.041171][T30867] ? copy_msghdr_from_user+0x10a/0x160 [ 2562.041221][T30867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2562.041264][T30867] ? __pfx__kstrtoull+0x10/0x10 [ 2562.041307][T30867] ___sys_sendmsg+0x134/0x1d0 [ 2562.041357][T30867] ? __pfx____sys_sendmsg+0x10/0x10 [ 2562.041424][T30867] ? find_held_lock+0x2b/0x80 [ 2562.041474][T30867] __sys_sendmmsg+0x200/0x420 [ 2562.041520][T30867] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2562.041573][T30867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2562.041631][T30867] ? fput+0x70/0xf0 [ 2562.041656][T30867] ? ksys_write+0x1ac/0x250 [ 2562.041694][T30867] ? __pfx_ksys_write+0x10/0x10 [ 2562.041751][T30867] __x64_sys_sendmmsg+0x9c/0x100 [ 2562.041794][T30867] ? lockdep_hardirqs_on+0x7c/0x110 [ 2562.041833][T30867] do_syscall_64+0xcd/0x490 [ 2562.041878][T30867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2562.041906][T30867] RIP: 0033:0x7f703858e929 [ 2562.041927][T30867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2562.041953][T30867] RSP: 002b:00007f70393a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2562.041978][T30867] RAX: ffffffffffffffda RBX: 00007f70387b5fa0 RCX: 00007f703858e929 [ 2562.041997][T30867] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 2562.042013][T30867] RBP: 00007f70393a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2562.042029][T30867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2562.042044][T30867] R13: 0000000000000000 R14: 00007f70387b5fa0 R15: 00007ffd085d5a78 [ 2562.042078][T30867] [ 2562.981498][T30889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2562.988619][T30889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2563.002703][T30889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2563.008891][T30889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2563.739297][T30903] FAULT_INJECTION: forcing a failure. [ 2563.739297][T30903] name failslab, interval 1, probability 0, space 0, times 0 [ 2563.772456][T30903] CPU: 0 UID: 0 PID: 30903 Comm: syz.3.3733 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2563.772500][T30903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2563.772519][T30903] Call Trace: [ 2563.772526][T30903] [ 2563.772534][T30903] dump_stack_lvl+0x16c/0x1f0 [ 2563.772574][T30903] should_fail_ex+0x512/0x640 [ 2563.772606][T30903] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2563.772645][T30903] should_failslab+0xc2/0x120 [ 2563.772667][T30903] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2563.772701][T30903] ? security_file_alloc+0x34/0x2b0 [ 2563.772752][T30903] security_file_alloc+0x34/0x2b0 [ 2563.772782][T30903] init_file+0x93/0x4c0 [ 2563.772805][T30903] alloc_empty_file+0x73/0x1e0 [ 2563.772830][T30903] path_openat+0xda/0x2cb0 [ 2563.772869][T30903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2563.772903][T30903] ? __pfx_path_openat+0x10/0x10 [ 2563.772937][T30903] ? __lock_acquire+0xb8a/0x1c90 [ 2563.772971][T30903] do_filp_open+0x20b/0x470 [ 2563.773004][T30903] ? __pfx_do_filp_open+0x10/0x10 [ 2563.773057][T30903] ? alloc_fd+0x471/0x7d0 [ 2563.773096][T30903] do_sys_openat2+0x11b/0x1d0 [ 2563.773121][T30903] ? __pfx_do_sys_openat2+0x10/0x10 [ 2563.773149][T30903] ? __fget_files+0x20e/0x3c0 [ 2563.773185][T30903] __x64_sys_openat+0x174/0x210 [ 2563.773212][T30903] ? __pfx___x64_sys_openat+0x10/0x10 [ 2563.773237][T30903] ? ksys_write+0x1ac/0x250 [ 2563.773279][T30903] do_syscall_64+0xcd/0x490 [ 2563.773316][T30903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2563.773339][T30903] RIP: 0033:0x7fc3d978e929 [ 2563.773358][T30903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2563.773380][T30903] RSP: 002b:00007fc3da567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2563.773402][T30903] RAX: ffffffffffffffda RBX: 00007fc3d99b5fa0 RCX: 00007fc3d978e929 [ 2563.773417][T30903] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2563.773432][T30903] RBP: 00007fc3da567090 R08: 0000000000000000 R09: 0000000000000000 [ 2563.773445][T30903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2563.773459][T30903] R13: 0000000000000000 R14: 00007fc3d99b5fa0 R15: 00007ffe4a549ff8 [ 2563.773488][T30903] [ 2564.018549][T30903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3733'. [ 2564.069987][T30903] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2564.913516][T21910] Bluetooth: hci1: command 0x0419 tx timeout [ 2565.082516][T21910] Bluetooth: hci2: command 0x0c1a tx timeout [ 2565.089709][T21910] Bluetooth: hci0: command 0x0c1a tx timeout [ 2565.095673][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 2565.361684][T30931] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3740'. [ 2566.383320][T30945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3742'. [ 2566.421013][T30945] hub 8-0:1.0: USB hub found [ 2566.437280][T30945] hub 8-0:1.0: 1 port detected [ 2566.571529][T30949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3743'. [ 2566.618916][T30954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3745'. [ 2566.795081][T30964] hsr_slave_0 (unregistering): hsr_addr_subst_dest: Unknown node [ 2566.803530][T30964] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2566.826993][T30949] hsr_slave_0 (unregistering): left promiscuous mode [ 2566.956713][T30954] hsr_slave_0 (unregistering): left promiscuous mode [ 2567.656009][T30975] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3748'. [ 2569.111003][T30997] FAULT_INJECTION: forcing a failure. [ 2569.111003][T30997] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.182534][T30997] CPU: 0 UID: 0 PID: 30997 Comm: syz.2.3754 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2569.182579][T30997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2569.182597][T30997] Call Trace: [ 2569.182607][T30997] [ 2569.182618][T30997] dump_stack_lvl+0x16c/0x1f0 [ 2569.182671][T30997] should_fail_ex+0x512/0x640 [ 2569.182716][T30997] ? fs_reclaim_acquire+0xae/0x150 [ 2569.182755][T30997] ? tomoyo_encode2+0x100/0x3e0 [ 2569.182795][T30997] should_failslab+0xc2/0x120 [ 2569.182825][T30997] __kmalloc_noprof+0xd2/0x510 [ 2569.182870][T30997] ? d_absolute_path+0x136/0x1a0 [ 2569.182908][T30997] tomoyo_encode2+0x100/0x3e0 [ 2569.182956][T30997] tomoyo_encode+0x29/0x50 [ 2569.183020][T30997] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2569.183077][T30997] tomoyo_path_number_perm+0x245/0x580 [ 2569.183114][T30997] ? tomoyo_path_number_perm+0x237/0x580 [ 2569.183155][T30997] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2569.183194][T30997] ? find_held_lock+0x2b/0x80 [ 2569.183262][T30997] ? find_held_lock+0x2b/0x80 [ 2569.183291][T30997] ? hook_file_ioctl_common+0x145/0x410 [ 2569.183335][T30997] ? __fget_files+0x20e/0x3c0 [ 2569.183386][T30997] security_file_ioctl+0x9b/0x240 [ 2569.183427][T30997] __x64_sys_ioctl+0xb7/0x210 [ 2569.183478][T30997] do_syscall_64+0xcd/0x490 [ 2569.183522][T30997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2569.183550][T30997] RIP: 0033:0x7f096538e929 [ 2569.183572][T30997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2569.183599][T30997] RSP: 002b:00007f0966244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2569.183624][T30997] RAX: ffffffffffffffda RBX: 00007f09655b5fa0 RCX: 00007f096538e929 [ 2569.183642][T30997] RDX: 0000000000000000 RSI: 0000000083c0550b RDI: 0000000000000003 [ 2569.183658][T30997] RBP: 00007f0966244090 R08: 0000000000000000 R09: 0000000000000000 [ 2569.183673][T30997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2569.183688][T30997] R13: 0000000000000000 R14: 00007f09655b5fa0 R15: 00007ffd6e6fa928 [ 2569.183747][T30997] [ 2569.183777][T30997] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2569.951777][T31010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3758'. [ 2570.801682][ T30] audit: type=1800 audit(1751430481.846:314): pid=31030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3755" name="dbroot" dev="configfs" ino=124084 res=0 errno=0 [ 2570.823488][T31030] FAULT_INJECTION: forcing a failure. [ 2570.823488][T31030] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.855169][T31030] CPU: 1 UID: 0 PID: 31030 Comm: syz.3.3755 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2570.855206][T31030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2570.855220][T31030] Call Trace: [ 2570.855229][T31030] [ 2570.855237][T31030] dump_stack_lvl+0x16c/0x1f0 [ 2570.855286][T31030] should_fail_ex+0x512/0x640 [ 2570.855320][T31030] ? fs_reclaim_acquire+0xae/0x150 [ 2570.855351][T31030] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2570.855384][T31030] should_failslab+0xc2/0x120 [ 2570.855406][T31030] __kmalloc_noprof+0xd2/0x510 [ 2570.855449][T31030] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2570.855491][T31030] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2570.855521][T31030] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2570.855581][T31030] ? do_raw_spin_lock+0x12c/0x2b0 [ 2570.855626][T31030] tomoyo_file_open+0x6b/0x90 [ 2570.855664][T31030] security_file_open+0x84/0x1e0 [ 2570.855696][T31030] do_dentry_open+0x596/0x1c10 [ 2570.855741][T31030] vfs_open+0x82/0x3f0 [ 2570.855771][T31030] path_openat+0x1de4/0x2cb0 [ 2570.855815][T31030] ? __pfx_path_openat+0x10/0x10 [ 2570.855851][T31030] ? __lock_acquire+0xb8a/0x1c90 [ 2570.855885][T31030] do_filp_open+0x20b/0x470 [ 2570.855920][T31030] ? __pfx_do_filp_open+0x10/0x10 [ 2570.855976][T31030] ? alloc_fd+0x471/0x7d0 [ 2570.856018][T31030] do_sys_openat2+0x11b/0x1d0 [ 2570.856044][T31030] ? __pfx_do_sys_openat2+0x10/0x10 [ 2570.856082][T31030] __x64_sys_openat+0x174/0x210 [ 2570.856110][T31030] ? __pfx___x64_sys_openat+0x10/0x10 [ 2570.856158][T31030] do_syscall_64+0xcd/0x490 [ 2570.856199][T31030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2570.856225][T31030] RIP: 0033:0x7fc3d978e929 [ 2570.856250][T31030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2570.856282][T31030] RSP: 002b:00007fc3da567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2570.856305][T31030] RAX: ffffffffffffffda RBX: 00007fc3d99b5fa0 RCX: 00007fc3d978e929 [ 2570.856321][T31030] RDX: 0000000000000802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2570.856341][T31030] RBP: 00007fc3d9810b39 R08: 0000000000000000 R09: 0000000000000000 [ 2570.856355][T31030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2570.856370][T31030] R13: 0000000000000000 R14: 00007fc3d99b5fa0 R15: 00007ffe4a549ff8 [ 2570.856399][T31030] [ 2570.856640][T31030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2571.942466][ T30] audit: type=1804 audit(1751430482.966:315): pid=31047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3765" name="/newroot/354/file0" dev="tmpfs" ino=1884 res=1 errno=0 [ 2572.003444][ T30] audit: type=1800 audit(1751430482.966:316): pid=31047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3765" name="file0" dev="tmpfs" ino=1884 res=0 errno=0 [ 2572.064005][ T30] audit: type=1804 audit(1751430483.086:317): pid=31046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3764" name="/newroot/355/file0" dev="tmpfs" ino=1857 res=1 errno=0 [ 2572.160404][ T30] audit: type=1800 audit(1751430483.086:318): pid=31046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3764" name="file0" dev="tmpfs" ino=1857 res=0 errno=0 [ 2574.441312][ T30] audit: type=1800 audit(1751430485.486:319): pid=31093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3774" name="dbroot" dev="configfs" ino=125189 res=0 errno=0 [ 2574.457343][T31093] vhci_hcd: invalid port number 16 [ 2574.491376][T31093] vhci_hcd: invalid port number 16 [ 2574.796070][ T30] audit: type=1804 audit(1751430485.846:320): pid=31103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3776" name="/newroot/321/file0" dev="tmpfs" ino=1693 res=1 errno=0 [ 2574.833730][ T30] audit: type=1800 audit(1751430485.846:321): pid=31103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3776" name="file0" dev="tmpfs" ino=1693 res=0 errno=0 [ 2576.999879][T31140] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 2579.101254][T31166] FAULT_INJECTION: forcing a failure. [ 2579.101254][T31166] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.114174][T31166] CPU: 0 UID: 0 PID: 31166 Comm: syz.1.3791 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2579.114208][T31166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2579.114223][T31166] Call Trace: [ 2579.114233][T31166] [ 2579.114243][T31166] dump_stack_lvl+0x16c/0x1f0 [ 2579.114285][T31166] should_fail_ex+0x512/0x640 [ 2579.114320][T31166] ? fs_reclaim_acquire+0xae/0x150 [ 2579.114350][T31166] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2579.114392][T31166] should_failslab+0xc2/0x120 [ 2579.114416][T31166] __kmalloc_noprof+0xd2/0x510 [ 2579.114460][T31166] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2579.114506][T31166] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2579.114536][T31166] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2579.114596][T31166] ? do_raw_spin_lock+0x12c/0x2b0 [ 2579.114644][T31166] tomoyo_file_open+0x6b/0x90 [ 2579.114744][T31166] security_file_open+0x84/0x1e0 [ 2579.114778][T31166] do_dentry_open+0x596/0x1c10 [ 2579.114823][T31166] vfs_open+0x82/0x3f0 [ 2579.114852][T31166] path_openat+0x1de4/0x2cb0 [ 2579.114897][T31166] ? __pfx_path_openat+0x10/0x10 [ 2579.114934][T31166] ? __lock_acquire+0xb8a/0x1c90 [ 2579.114969][T31166] do_filp_open+0x20b/0x470 [ 2579.115005][T31166] ? __pfx_do_filp_open+0x10/0x10 [ 2579.115061][T31166] ? alloc_fd+0x471/0x7d0 [ 2579.115102][T31166] do_sys_openat2+0x11b/0x1d0 [ 2579.115128][T31166] ? __pfx_do_sys_openat2+0x10/0x10 [ 2579.115167][T31166] __x64_sys_openat+0x174/0x210 [ 2579.115194][T31166] ? __pfx___x64_sys_openat+0x10/0x10 [ 2579.115234][T31166] do_syscall_64+0xcd/0x490 [ 2579.115275][T31166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2579.115300][T31166] RIP: 0033:0x7f703858e929 [ 2579.115320][T31166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2579.115343][T31166] RSP: 002b:00007f70393a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2579.115366][T31166] RAX: ffffffffffffffda RBX: 00007f70387b5fa0 RCX: 00007f703858e929 [ 2579.115382][T31166] RDX: 0000000000000802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2579.115397][T31166] RBP: 00007f7038610b39 R08: 0000000000000000 R09: 0000000000000000 [ 2579.115412][T31166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2579.115440][T31166] R13: 0000000000000000 R14: 00007f70387b5fa0 R15: 00007ffd085d5a78 [ 2579.115471][T31166] [ 2579.115481][T31166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2579.152378][ T30] audit: type=1800 audit(1751430490.146:322): pid=31166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3791" name="dbroot" dev="configfs" ino=125333 res=0 errno=0 [ 2581.244508][T31196] FAULT_INJECTION: forcing a failure. [ 2581.244508][T31196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2581.262705][T31196] CPU: 1 UID: 0 PID: 31196 Comm: syz.1.3798 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2581.262747][T31196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2581.262765][T31196] Call Trace: [ 2581.262775][T31196] [ 2581.262787][T31196] dump_stack_lvl+0x16c/0x1f0 [ 2581.262841][T31196] should_fail_ex+0x512/0x640 [ 2581.262894][T31196] _copy_from_iter+0x29f/0x16f0 [ 2581.262950][T31196] ? __alloc_skb+0x200/0x380 [ 2581.262998][T31196] ? __pfx__copy_from_iter+0x10/0x10 [ 2581.263053][T31196] ? __lock_acquire+0xb8a/0x1c90 [ 2581.263107][T31196] netlink_sendmsg+0x829/0xdd0 [ 2581.263151][T31196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2581.263203][T31196] ____sys_sendmsg+0xa98/0xc70 [ 2581.263241][T31196] ? copy_msghdr_from_user+0x10a/0x160 [ 2581.263293][T31196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2581.263359][T31196] ___sys_sendmsg+0x134/0x1d0 [ 2581.263412][T31196] ? __pfx____sys_sendmsg+0x10/0x10 [ 2581.263458][T31196] ? __lock_acquire+0x622/0x1c90 [ 2581.263552][T31196] __sys_sendmsg+0x16d/0x220 [ 2581.263598][T31196] ? __pfx___sys_sendmsg+0x10/0x10 [ 2581.263676][T31196] do_syscall_64+0xcd/0x490 [ 2581.263729][T31196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2581.263762][T31196] RIP: 0033:0x7f703858e929 [ 2581.263787][T31196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2581.263817][T31196] RSP: 002b:00007f70393a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2581.263847][T31196] RAX: ffffffffffffffda RBX: 00007f70387b5fa0 RCX: 00007f703858e929 [ 2581.263867][T31196] RDX: 0000000000000014 RSI: 0000200000001600 RDI: 0000000000000003 [ 2581.263885][T31196] RBP: 00007f70393a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2581.263903][T31196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2581.263920][T31196] R13: 0000000000000000 R14: 00007f70387b5fa0 R15: 00007ffd085d5a78 [ 2581.263959][T31196] [ 2581.567577][T31190] kexec: Could not allocate control_code_buffer [ 2581.721206][T31204] FAULT_INJECTION: forcing a failure. [ 2581.721206][T31204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2581.734962][T31204] CPU: 1 UID: 0 PID: 31204 Comm: syz.3.3801 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2581.735005][T31204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2581.735024][T31204] Call Trace: [ 2581.735034][T31204] [ 2581.735045][T31204] dump_stack_lvl+0x16c/0x1f0 [ 2581.735101][T31204] should_fail_ex+0x512/0x640 [ 2581.735155][T31204] _copy_from_iter+0x29f/0x16f0 [ 2581.735211][T31204] ? __alloc_skb+0x200/0x380 [ 2581.735271][T31204] ? __pfx__copy_from_iter+0x10/0x10 [ 2581.735325][T31204] ? __lock_acquire+0xb8a/0x1c90 [ 2581.735369][T31204] netlink_sendmsg+0x829/0xdd0 [ 2581.735407][T31204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2581.735450][T31204] ____sys_sendmsg+0xa98/0xc70 [ 2581.735485][T31204] ? copy_msghdr_from_user+0x10a/0x160 [ 2581.735528][T31204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2581.735582][T31204] ___sys_sendmsg+0x134/0x1d0 [ 2581.735636][T31204] ? __pfx____sys_sendmsg+0x10/0x10 [ 2581.735684][T31204] ? __lock_acquire+0x622/0x1c90 [ 2581.735775][T31204] __sys_sendmsg+0x16d/0x220 [ 2581.735825][T31204] ? __pfx___sys_sendmsg+0x10/0x10 [ 2581.735902][T31204] do_syscall_64+0xcd/0x490 [ 2581.735957][T31204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2581.735991][T31204] RIP: 0033:0x7fc3d978e929 [ 2581.736017][T31204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2581.736049][T31204] RSP: 002b:00007fc3da567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2581.736080][T31204] RAX: ffffffffffffffda RBX: 00007fc3d99b5fa0 RCX: 00007fc3d978e929 [ 2581.736101][T31204] RDX: 0000000000000014 RSI: 0000200000001600 RDI: 0000000000000003 [ 2581.736123][T31204] RBP: 00007fc3da567090 R08: 0000000000000000 R09: 0000000000000000 [ 2581.736144][T31204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2581.736164][T31204] R13: 0000000000000000 R14: 00007fc3d99b5fa0 R15: 00007ffe4a549ff8 [ 2581.736205][T31204] [ 2582.007206][T31206] FAULT_INJECTION: forcing a failure. [ 2582.007206][T31206] name failslab, interval 1, probability 0, space 0, times 0 [ 2582.046415][T31206] CPU: 0 UID: 0 PID: 31206 Comm: syz.1.3803 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2582.046464][T31206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2582.046483][T31206] Call Trace: [ 2582.046495][T31206] [ 2582.046508][T31206] dump_stack_lvl+0x16c/0x1f0 [ 2582.046566][T31206] should_fail_ex+0x512/0x640 [ 2582.046608][T31206] ? fs_reclaim_acquire+0xae/0x150 [ 2582.046643][T31206] ? tomoyo_encode2+0x100/0x3e0 [ 2582.046680][T31206] should_failslab+0xc2/0x120 [ 2582.046706][T31206] __kmalloc_noprof+0xd2/0x510 [ 2582.046745][T31206] ? d_absolute_path+0x136/0x1a0 [ 2582.046778][T31206] tomoyo_encode2+0x100/0x3e0 [ 2582.046820][T31206] tomoyo_encode+0x29/0x50 [ 2582.046855][T31206] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2582.046904][T31206] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2582.046939][T31206] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2582.047006][T31206] ? do_raw_spin_lock+0x12c/0x2b0 [ 2582.047057][T31206] tomoyo_file_open+0x6b/0x90 [ 2582.047103][T31206] security_file_open+0x84/0x1e0 [ 2582.047141][T31206] do_dentry_open+0x596/0x1c10 [ 2582.047193][T31206] vfs_open+0x82/0x3f0 [ 2582.047228][T31206] path_openat+0x1de4/0x2cb0 [ 2582.047293][T31206] ? __pfx_path_openat+0x10/0x10 [ 2582.047338][T31206] ? __lock_acquire+0xb8a/0x1c90 [ 2582.047382][T31206] do_filp_open+0x20b/0x470 [ 2582.047423][T31206] ? __pfx_do_filp_open+0x10/0x10 [ 2582.047489][T31206] ? alloc_fd+0x471/0x7d0 [ 2582.047540][T31206] do_sys_openat2+0x11b/0x1d0 [ 2582.047570][T31206] ? __pfx_do_sys_openat2+0x10/0x10 [ 2582.047616][T31206] __x64_sys_openat+0x174/0x210 [ 2582.047648][T31206] ? __pfx___x64_sys_openat+0x10/0x10 [ 2582.047694][T31206] do_syscall_64+0xcd/0x490 [ 2582.047741][T31206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2582.047770][T31206] RIP: 0033:0x7f703858e929 [ 2582.047794][T31206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2582.047823][T31206] RSP: 002b:00007f70393a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2582.047851][T31206] RAX: ffffffffffffffda RBX: 00007f70387b5fa0 RCX: 00007f703858e929 [ 2582.047871][T31206] RDX: 0000000000000802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2582.047890][T31206] RBP: 00007f7038610b39 R08: 0000000000000000 R09: 0000000000000000 [ 2582.047908][T31206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2582.047926][T31206] R13: 0000000000000000 R14: 00007f70387b5fa0 R15: 00007ffd085d5a78 [ 2582.047963][T31206] [ 2582.047996][T31206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2582.317903][ T30] audit: type=1800 audit(1751430493.046:323): pid=31206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3803" name="dbroot" dev="configfs" ino=125438 res=0 errno=0 [ 2582.605002][T31220] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 2582.616146][T31220] CPU: 0 UID: 0 PID: 31220 Comm: syz.1.3805 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2582.616202][T31220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2582.616217][T31220] Call Trace: [ 2582.616226][T31220] [ 2582.616236][T31220] dump_stack_lvl+0x16c/0x1f0 [ 2582.616279][T31220] sysfs_warn_dup+0x7f/0xa0 [ 2582.616312][T31220] sysfs_create_dir_ns+0x24b/0x2b0 [ 2582.616345][T31220] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2582.616375][T31220] ? find_held_lock+0x2b/0x80 [ 2582.616404][T31220] ? nfs_netns_namespace+0xd/0x40 [ 2582.616430][T31220] kobject_add_internal+0x2c4/0x9b0 [ 2582.616463][T31220] kobject_init_and_add+0x11b/0x190 [ 2582.616491][T31220] ? __pfx_kobject_init_and_add+0x10/0x10 [ 2582.616534][T31220] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 2582.616562][T31220] nfs_net_init+0x10a/0x300 [ 2582.616592][T31220] ? __pfx_nfs_net_init+0x10/0x10 [ 2582.616620][T31220] ops_init+0x1df/0x5f0 [ 2582.616646][T31220] setup_net+0x1ff/0x510 [ 2582.616666][T31220] ? lockdep_init_map_type+0x5c/0x280 [ 2582.616699][T31220] ? __pfx_setup_net+0x10/0x10 [ 2582.616723][T31220] ? debug_mutex_init+0x37/0x70 [ 2582.616749][T31220] copy_net_ns+0x2a6/0x5f0 [ 2582.616777][T31220] create_new_namespaces+0x3ea/0xa90 [ 2582.616811][T31220] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2582.616840][T31220] ksys_unshare+0x45b/0xa40 [ 2582.616872][T31220] ? __pfx_ksys_unshare+0x10/0x10 [ 2582.616905][T31220] ? xfd_validate_state+0x61/0x180 [ 2582.616945][T31220] __x64_sys_unshare+0x31/0x40 [ 2582.616977][T31220] do_syscall_64+0xcd/0x490 [ 2582.617021][T31220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2582.617047][T31220] RIP: 0033:0x7f703858e929 [ 2582.617066][T31220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2582.617091][T31220] RSP: 002b:00007f70393a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2582.617114][T31220] RAX: ffffffffffffffda RBX: 00007f70387b5fa0 RCX: 00007f703858e929 [ 2582.617130][T31220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2582.617145][T31220] RBP: 00007f7038610b39 R08: 0000000000000000 R09: 0000000000000000 [ 2582.617159][T31220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2582.617174][T31220] R13: 0000000000000000 R14: 00007f70387b5fa0 R15: 00007ffd085d5a78 [ 2582.617210][T31220] [ 2582.618084][T31220] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 2584.067100][T31238] zswap: compressor not available [ 2584.674339][T31248] kexec: Could not allocate control_code_buffer [ 2585.151179][T31268] FAULT_INJECTION: forcing a failure. [ 2585.151179][T31268] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.172613][T31268] CPU: 0 UID: 0 PID: 31268 Comm: syz.2.3815 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2585.172658][T31268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2585.172678][T31268] Call Trace: [ 2585.172689][T31268] [ 2585.172702][T31268] dump_stack_lvl+0x16c/0x1f0 [ 2585.172758][T31268] should_fail_ex+0x512/0x640 [ 2585.172799][T31268] ? __kvmalloc_node_noprof+0x124/0x620 [ 2585.172848][T31268] should_failslab+0xc2/0x120 [ 2585.172880][T31268] __kvmalloc_node_noprof+0x137/0x620 [ 2585.172929][T31268] ? __pfx_net_ctl_permissions+0x10/0x10 [ 2585.172962][T31268] ? proc_sys_call_handler+0x2a6/0x5c0 [ 2585.173012][T31268] ? ns_capable_noaudit+0xda/0x110 [ 2585.173064][T31268] ? proc_sys_call_handler+0x2a6/0x5c0 [ 2585.173114][T31268] proc_sys_call_handler+0x2a6/0x5c0 [ 2585.173169][T31268] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 2585.173224][T31268] ? trace_kmalloc+0x2b/0xd0 [ 2585.173270][T31268] copy_splice_read+0x615/0xba0 [ 2585.173322][T31268] ? __pfx_copy_splice_read+0x10/0x10 [ 2585.173369][T31268] ? look_up_lock_class+0x59/0x150 [ 2585.173425][T31268] ? lockdep_init_map_type+0x5c/0x280 [ 2585.173473][T31268] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 2585.173533][T31268] ? __pfx_copy_splice_read+0x10/0x10 [ 2585.173571][T31268] do_splice_read+0x285/0x370 [ 2585.173618][T31268] splice_direct_to_actor+0x2a1/0xa30 [ 2585.173662][T31268] ? __pfx_direct_splice_actor+0x10/0x10 [ 2585.173714][T31268] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2585.173756][T31268] ? get_pid_task+0xfc/0x250 [ 2585.173814][T31268] do_splice_direct+0x174/0x240 [ 2585.173860][T31268] ? __pfx_do_splice_direct+0x10/0x10 [ 2585.173906][T31268] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2585.173958][T31268] ? rw_verify_area+0xcf/0x680 [ 2585.174005][T31268] do_sendfile+0xb06/0xe50 [ 2585.174070][T31268] ? __pfx_do_sendfile+0x10/0x10 [ 2585.174118][T31268] ? __fget_files+0x20e/0x3c0 [ 2585.174179][T31268] __x64_sys_sendfile64+0x1d8/0x220 [ 2585.174211][T31268] ? ksys_write+0x1ac/0x250 [ 2585.174258][T31268] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2585.174305][T31268] do_syscall_64+0xcd/0x490 [ 2585.174362][T31268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2585.174398][T31268] RIP: 0033:0x7f096538e929 [ 2585.174426][T31268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2585.174459][T31268] RSP: 002b:00007f0966244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2585.174491][T31268] RAX: ffffffffffffffda RBX: 00007f09655b5fa0 RCX: 00007f096538e929 [ 2585.174515][T31268] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2585.174537][T31268] RBP: 00007f0966244090 R08: 0000000000000000 R09: 0000000000000000 [ 2585.174558][T31268] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 2585.174579][T31268] R13: 0000000000000000 R14: 00007f09655b5fa0 R15: 00007ffd6e6fa928 [ 2585.174624][T31268] [ 2585.473135][ C0] vkms_vblank_simulate: vblank timer overrun [ 2586.876843][T31299] random: crng reseeded on system resumption [ 2587.460712][ T30] audit: type=1804 audit(1751430498.506:324): pid=31304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3826" name="/newroot/345/file0" dev="tmpfs" ino=1828 res=1 errno=0 [ 2587.512396][ T30] audit: type=1800 audit(1751430498.506:325): pid=31304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3826" name="file0" dev="tmpfs" ino=1828 res=0 errno=0 [ 2587.813583][T31297] kexec: Could not allocate control_code_buffer [ 2588.863534][T31325] FAULT_INJECTION: forcing a failure. [ 2588.863534][T31325] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.925614][T31325] CPU: 1 UID: 0 PID: 31325 Comm: syz.3.3831 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2588.925661][T31325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2588.925680][T31325] Call Trace: [ 2588.925692][T31325] [ 2588.925705][T31325] dump_stack_lvl+0x16c/0x1f0 [ 2588.925767][T31325] should_fail_ex+0x512/0x640 [ 2588.925815][T31325] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2588.925870][T31325] should_failslab+0xc2/0x120 [ 2588.925902][T31325] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2588.925953][T31325] ? getname_kernel+0x52/0x370 [ 2588.925990][T31325] getname_kernel+0x52/0x370 [ 2588.926024][T31325] kern_path+0x1d/0x50 [ 2588.926070][T31325] lookup_bdev+0xd8/0x280 [ 2588.926108][T31325] ? __pfx_lookup_bdev+0x10/0x10 [ 2588.926146][T31325] ? __pfx___might_resched+0x10/0x10 [ 2588.926189][T31325] bdev_file_open_by_path+0x82/0x330 [ 2588.926234][T31325] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 2588.926293][T31325] btrfs_scan_one_device+0xcf/0x680 [ 2588.926344][T31325] ? __might_fault+0x13b/0x190 [ 2588.926398][T31325] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 2588.926464][T31325] btrfs_control_ioctl+0x2d0/0x3c0 [ 2588.926506][T31325] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 2588.926552][T31325] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 2588.926598][T31325] __x64_sys_ioctl+0x18b/0x210 [ 2588.926640][T31325] do_syscall_64+0xcd/0x490 [ 2588.926693][T31325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2588.926727][T31325] RIP: 0033:0x7fc3d978e929 [ 2588.926761][T31325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2588.926792][T31325] RSP: 002b:00007fc3da567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2588.926823][T31325] RAX: ffffffffffffffda RBX: 00007fc3d99b5fa0 RCX: 00007fc3d978e929 [ 2588.926844][T31325] RDX: 0000200000000080 RSI: 0000000050009404 RDI: 0000000000000003 [ 2588.926864][T31325] RBP: 00007fc3da567090 R08: 0000000000000000 R09: 0000000000000000 [ 2588.926883][T31325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2588.926901][T31325] R13: 0000000000000000 R14: 00007fc3d99b5fa0 R15: 00007ffe4a549ff8 [ 2588.926938][T31325]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        syzkaller syzkaller login: [ 2655.920334][T32377] FAULT_INJECTION: forcing a failure. [ 2655.920334][T32377] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2655.985596][T32377] CPU: 1 UID: 0 PID: 32377 Comm: syz.3.4092 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2655.985642][T32377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2655.985660][T32377] Call Trace: [ 2655.985677][T32377] [ 2655.985690][T32377] dump_stack_lvl+0x16c/0x1f0 [ 2655.985746][T32377] should_fail_ex+0x512/0x640 [ 2655.985800][T32377] get_futex_key+0x293/0x1540 [ 2655.985843][T32377] ? find_held_lock+0x2b/0x80 [ 2655.985875][T32377] ? __pfx_get_futex_key+0x10/0x10 [ 2655.985915][T32377] ? __mutex_trylock_common+0xe9/0x250 [ 2655.985972][T32377] futex_wake+0xea/0x530 [ 2655.986023][T32377] ? __pfx_futex_wake+0x10/0x10 [ 2655.986066][T32377] ? __lock_acquire+0xb8a/0x1c90 [ 2655.986126][T32377] do_futex+0x1e3/0x350 [ 2655.986167][T32377] ? __pfx_do_futex+0x10/0x10 [ 2655.986203][T32377] ? __might_fault+0xe3/0x190 [ 2655.986262][T32377] mm_release+0x24e/0x300 [ 2655.986299][T32377] do_exit+0x68b/0x2bd0 [ 2655.986350][T32377] ? __pfx_do_exit+0x10/0x10 [ 2655.986392][T32377] ? do_raw_spin_lock+0x12c/0x2b0 [ 2655.986442][T32377] ? find_held_lock+0x2b/0x80 [ 2655.986490][T32377] do_group_exit+0xd3/0x2a0 [ 2655.986542][T32377] get_signal+0x2673/0x26d0 [ 2655.986627][T32377] ? __pfx_get_signal+0x10/0x10 [ 2655.986665][T32377] ? do_futex+0x122/0x350 [ 2655.986712][T32377] ? __pfx_do_futex+0x10/0x10 [ 2655.986757][T32377] arch_do_signal_or_restart+0x8f/0x790 [ 2655.986798][T32377] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2655.986850][T32377] ? __pfx___do_sys_close_range+0x10/0x10 [ 2655.986909][T32377] exit_to_user_mode_loop+0x84/0x110 [ 2655.986963][T32377] do_syscall_64+0x3f6/0x490 [ 2655.987018][T32377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2655.987053][T32377] RIP: 0033:0x7fc3d978e929 [ 2655.987080][T32377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2655.987110][T32377] RSP: 002b:00007fc3da5670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2655.987142][T32377] RAX: fffffffffffffe00 RBX: 00007fc3d99b5fa8 RCX: 00007fc3d978e929 [ 2655.987164][T32377] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc3d99b5fa8 [ 2655.987183][T32377] RBP: 00007fc3d99b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2655.987203][T32377] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3d99b5fac [ 2655.987222][T32377] R13: 0000000000000000 R14: 00007ffe4a549f10 R15: 00007ffe4a549ff8 [ 2655.987270][T32377] [ 2658.575909][T30927] Bluetooth: hci4: unexpected event 0x03 length: 725 > 11 [ 2662.196920][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2662.212376][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2662.972680][T32475] FAULT_INJECTION: forcing a failure. [ 2662.972680][T32475] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.998130][T32475] CPU: 1 UID: 0 PID: 32475 Comm: syz.1.4116 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2662.998178][T32475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2662.998196][T32475] Call Trace: [ 2662.998208][T32475] [ 2662.998221][T32475] dump_stack_lvl+0x16c/0x1f0 [ 2662.998276][T32475] should_fail_ex+0x512/0x640 [ 2662.998327][T32475] ? fs_reclaim_acquire+0xae/0x150 [ 2662.998367][T32475] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2662.998420][T32475] should_failslab+0xc2/0x120 [ 2662.998451][T32475] __kmalloc_noprof+0xd2/0x510 [ 2662.998520][T32475] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2662.998579][T32475] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2662.998620][T32475] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2662.998699][T32475] ? find_held_lock+0x2b/0x80 [ 2662.998744][T32475] tomoyo_file_open+0x6b/0x90 [ 2662.998798][T32475] security_file_open+0x84/0x1e0 [ 2662.998842][T32475] do_dentry_open+0x596/0x1c10 [ 2662.998903][T32475] vfs_open+0x82/0x3f0 [ 2662.998944][T32475] path_openat+0x1de4/0x2cb0 [ 2662.999006][T32475] ? __pfx_path_openat+0x10/0x10 [ 2662.999056][T32475] ? __lock_acquire+0xb8a/0x1c90 [ 2662.999105][T32475] do_filp_open+0x20b/0x470 [ 2662.999153][T32475] ? __pfx_do_filp_open+0x10/0x10 [ 2662.999215][T32475] ? __pfx_kfree_link+0x10/0x10 [ 2662.999261][T32475] ? alloc_fd+0x471/0x7d0 [ 2662.999313][T32475] do_sys_openat2+0x11b/0x1d0 [ 2662.999348][T32475] ? __pfx_do_sys_openat2+0x10/0x10 [ 2662.999406][T32475] __x64_sys_openat+0x174/0x210 [ 2662.999445][T32475] ? __pfx___x64_sys_openat+0x10/0x10 [ 2662.999499][T32475] do_syscall_64+0xcd/0x490 [ 2662.999554][T32475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.999589][T32475] RIP: 0033:0x7f703858d290 [ 2662.999616][T32475] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 2662.999648][T32475] RSP: 002b:00007f70393a8fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2662.999680][T32475] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f703858d290 [ 2662.999701][T32475] RDX: 0000000000000002 RSI: 00007f7038610e1e RDI: 00000000ffffff9c [ 2662.999721][T32475] RBP: 00007f7038610e1e R08: 0000000000000000 R09: 00007f70393aa000 [ 2662.999742][T32475] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2662.999761][T32475] R13: 0000000000000000 R14: 00007f70387b5fa0 R15: 00007ffd085d5a78 [ 2662.999803][T32475] [ 2662.999817][T32475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2663.260288][T32475] FAULT_INJECTION: forcing a failure. [ 2663.260288][T32475] name failslab, interval 1, probability 0, space 0, times 0 [ 2663.277204][T32475] CPU: 1 UID: 0 PID: 32475 Comm: syz.1.4116 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2663.277249][T32475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2663.277268][T32475] Call Trace: [ 2663.277279][T32475] [ 2663.277292][T32475] dump_stack_lvl+0x16c/0x1f0 [ 2663.277347][T32475] should_fail_ex+0x512/0x640 [ 2663.277394][T32475] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2663.277449][T32475] should_failslab+0xc2/0x120 [ 2663.277482][T32475] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2663.277535][T32475] ? sock_alloc_inode+0x25/0x1c0 [ 2663.277575][T32475] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2663.277609][T32475] sock_alloc_inode+0x25/0x1c0 [ 2663.277643][T32475] alloc_inode+0x64/0x240 [ 2663.277677][T32475] sock_alloc+0x40/0x280 [ 2663.277711][T32475] __sock_create+0xc1/0x8d0 [ 2663.277758][T32475] __sys_socket+0x14d/0x260 [ 2663.277797][T32475] ? fput+0x70/0xf0 [ 2663.277827][T32475] ? __pfx___sys_socket+0x10/0x10 [ 2663.277864][T32475] ? ksys_write+0x1ac/0x250 [ 2663.277910][T32475] ? __pfx_ksys_write+0x10/0x10 [ 2663.277966][T32475] __x64_sys_socket+0x72/0xb0 [ 2663.278005][T32475] ? lockdep_hardirqs_on+0x7c/0x110 [ 2663.278054][T32475] do_syscall_64+0xcd/0x490 [ 2663.278109][T32475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2663.278143][T32475] RIP: 0033:0x7f703858e929 [ 2663.278176][T32475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2663.278208][T32475] RSP: 002b:00007f70393a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2663.278239][T32475] RAX: ffffffffffffffda RBX: 00007f70387b5fa0 RCX: 00007f703858e929 [ 2663.278261][T32475] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 2663.278280][T32475] RBP: 00007f70393a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2663.278301][T32475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2663.278321][T32475] R13: 0000000000000000 R14: 00007f70387b5fa0 R15: 00007ffd085d5a78 [ 2663.278363][T32475] [ 2663.278379][T32475] socket: no more sockets [ 2663.602508][T32476] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4115'. [ 2665.543005][T32516] perf: Dynamic interrupt throttling disabled, can hang your system! [ 2665.910511][T32531] FAULT_INJECTION: forcing a failure. [ 2665.910511][T32531] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.947675][T32531] CPU: 1 UID: 0 PID: 32531 Comm: syz.1.4130 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2665.947720][T32531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2665.947735][T32531] Call Trace: [ 2665.947743][T32531] [ 2665.947752][T32531] dump_stack_lvl+0x16c/0x1f0 [ 2665.947793][T32531] should_fail_ex+0x512/0x640 [ 2665.947827][T32531] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2665.947861][T32531] should_failslab+0xc2/0x120 [ 2665.947883][T32531] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2665.947914][T32531] ? virtual_ncidev_open+0x49/0x220 [ 2665.947949][T32531] virtual_ncidev_open+0x49/0x220 [ 2665.947977][T32531] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2665.948004][T32531] misc_open+0x35a/0x420 [ 2665.948032][T32531] ? __pfx_misc_open+0x10/0x10 [ 2665.948071][T32531] chrdev_open+0x231/0x6a0 [ 2665.948107][T32531] ? __pfx_apparmor_file_open+0x10/0x10 [ 2665.948137][T32531] ? __pfx_chrdev_open+0x10/0x10 [ 2665.948175][T32531] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 2665.948218][T32531] do_dentry_open+0x744/0x1c10 [ 2665.948254][T32531] ? __pfx_chrdev_open+0x10/0x10 [ 2665.948297][T32531] vfs_open+0x82/0x3f0 [ 2665.948326][T32531] path_openat+0x1de4/0x2cb0 [ 2665.948370][T32531] ? __pfx_path_openat+0x10/0x10 [ 2665.948405][T32531] ? __lock_acquire+0xb8a/0x1c90 [ 2665.948440][T32531] do_filp_open+0x20b/0x470 [ 2665.948473][T32531] ? __pfx_do_filp_open+0x10/0x10 [ 2665.948528][T32531] ? alloc_fd+0x471/0x7d0 [ 2665.948568][T32531] do_sys_openat2+0x11b/0x1d0 [ 2665.948593][T32531] ? __pfx_do_sys_openat2+0x10/0x10 [ 2665.948622][T32531] ? __fget_files+0x20e/0x3c0 [ 2665.948659][T32531] __x64_sys_openat+0x174/0x210 [ 2665.948685][T32531] ? __pfx___x64_sys_openat+0x10/0x10 [ 2665.948711][T32531] ? ksys_write+0x1ac/0x250 [ 2665.948754][T32531] do_syscall_64+0xcd/0x490 [ 2665.948792][T32531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2665.948817][T32531] RIP: 0033:0x7f703858e929 [ 2665.948835][T32531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2665.948858][T32531] RSP: 002b:00007f70393a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2665.948880][T32531] RAX: ffffffffffffffda RBX: 00007f70387b5fa0 RCX: 00007f703858e929 [ 2665.948896][T32531] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2665.948911][T32531] RBP: 00007f70393a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2665.948925][T32531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2665.948940][T32531] R13: 0000000000000000 R14: 00007f70387b5fa0 R15: 00007ffd085d5a78 [ 2665.948970][T32531] [ 2665.951452][T32531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4130'. [ 2666.085368][T32526] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4129'. [ 2667.478790][T32563] FAULT_INJECTION: forcing a failure. [ 2667.478790][T32563] name failslab, interval 1, probability 0, space 0, times 0 [ 2667.520772][T32563] CPU: 0 UID: 0 PID: 32563 Comm: syz.3.4136 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2667.520824][T32563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2667.520851][T32563] Call Trace: [ 2667.520862][T32563] [ 2667.520874][T32563] dump_stack_lvl+0x16c/0x1f0 [ 2667.520931][T32563] should_fail_ex+0x512/0x640 [ 2667.520978][T32563] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2667.521025][T32563] should_failslab+0xc2/0x120 [ 2667.521057][T32563] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2667.521102][T32563] ? device_add+0xccc/0x1a70 [ 2667.521143][T32563] device_add+0xccc/0x1a70 [ 2667.521171][T32563] ? dev_set_name+0xc7/0x100 [ 2667.521204][T32563] ? __pfx_dev_set_name+0x10/0x10 [ 2667.521236][T32563] ? __pfx_device_add+0x10/0x10 [ 2667.521264][T32563] ? lockdep_init_map_type+0x5c/0x280 [ 2667.521303][T32563] ? __init_waitqueue_head+0xca/0x150 [ 2667.521356][T32563] rfkill_register+0x1ad/0xb40 [ 2667.521393][T32563] nfc_register_device+0x11f/0x3c0 [ 2667.521442][T32563] nci_register_device+0x7f1/0xb80 [ 2667.521482][T32563] ? __pfx_nci_register_device+0x10/0x10 [ 2667.521525][T32563] ? lockdep_init_map_type+0x5c/0x280 [ 2667.521571][T32563] virtual_ncidev_open+0x141/0x220 [ 2667.521605][T32563] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2667.521638][T32563] misc_open+0x35a/0x420 [ 2667.521672][T32563] ? __pfx_misc_open+0x10/0x10 [ 2667.521705][T32563] chrdev_open+0x231/0x6a0 [ 2667.521753][T32563] ? __pfx_apparmor_file_open+0x10/0x10 [ 2667.521789][T32563] ? __pfx_chrdev_open+0x10/0x10 [ 2667.521835][T32563] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 2667.521889][T32563] do_dentry_open+0x744/0x1c10 [ 2667.521932][T32563] ? __pfx_chrdev_open+0x10/0x10 [ 2667.521984][T32563] vfs_open+0x82/0x3f0 [ 2667.522017][T32563] path_openat+0x1de4/0x2cb0 [ 2667.522069][T32563] ? __pfx_path_openat+0x10/0x10 [ 2667.522112][T32563] ? __lock_acquire+0xb8a/0x1c90 [ 2667.522152][T32563] do_filp_open+0x20b/0x470 [ 2667.522193][T32563] ? __pfx_do_filp_open+0x10/0x10 [ 2667.522269][T32563] ? alloc_fd+0x471/0x7d0 [ 2667.522315][T32563] do_sys_openat2+0x11b/0x1d0 [ 2667.522346][T32563] ? __pfx_do_sys_openat2+0x10/0x10 [ 2667.522391][T32563] __x64_sys_openat+0x174/0x210 [ 2667.522423][T32563] ? __pfx___x64_sys_openat+0x10/0x10 [ 2667.522469][T32563] do_syscall_64+0xcd/0x490 [ 2667.522515][T32563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2667.522544][T32563] RIP: 0033:0x7fc3d978e929 [ 2667.522566][T32563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2667.522593][T32563] RSP: 002b:00007fc3da567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2667.522619][T32563] RAX: ffffffffffffffda RBX: 00007fc3d99b5fa0 RCX: 00007fc3d978e929 [ 2667.522638][T32563] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 2667.522656][T32563] RBP: 00007fc3d9810b39 R08: 0000000000000000 R09: 0000000000000000 [ 2667.522673][T32563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2667.522689][T32563] R13: 0000000000000000 R14: 00007fc3d99b5fa0 R15: 00007ffe4a549ff8 [ 2667.522724][T32563] [ 2667.826011][ C0] vkms_vblank_simulate: vblank timer overrun [ 2669.290836][T32585] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4142'. [ 2670.438216][T32604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4149'. [ 2674.068954][T32659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4161'. [ 2674.178737][T32664] ================================================================== [ 2674.186850][T32664] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 2674.195574][T32664] Read of size 1 at addr ffff888031cef905 by task syz.3.4163/32664 [ 2674.203485][T32664] [ 2674.205824][T32664] CPU: 0 UID: 0 PID: 32664 Comm: syz.3.4163 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2674.205856][T32664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2674.205871][T32664] Call Trace: [ 2674.205880][T32664] [ 2674.205890][T32664] dump_stack_lvl+0x116/0x1f0 [ 2674.205929][T32664] print_report+0xcd/0x680 [ 2674.205967][T32664] ? __virt_addr_valid+0x81/0x610 [ 2674.205991][T32664] ? __phys_addr+0xe8/0x180 [ 2674.206015][T32664] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 2674.206040][T32664] kasan_report+0xe0/0x110 [ 2674.206061][T32664] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 2674.206091][T32664] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 2674.206115][T32664] ? __lock_acquire+0xb8a/0x1c90 [ 2674.206151][T32664] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 2674.206178][T32664] ? find_held_lock+0x2b/0x80 [ 2674.206200][T32664] ? __might_fault+0xe3/0x190 [ 2674.206232][T32664] ? __might_fault+0xe3/0x190 [ 2674.206264][T32664] ? __might_fault+0x13b/0x190 [ 2674.206304][T32664] ? proc_simple_write+0x117/0x1b0 [ 2674.206326][T32664] proc_simple_write+0x117/0x1b0 [ 2674.206355][T32664] ? __pfx_proc_simple_write+0x10/0x10 [ 2674.206379][T32664] proc_reg_write+0x23d/0x330 [ 2674.206414][T32664] ? __pfx_proc_reg_write+0x10/0x10 [ 2674.206447][T32664] vfs_writev+0x5dc/0xde0 [ 2674.206477][T32664] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2674.206514][T32664] ? __pfx_vfs_writev+0x10/0x10 [ 2674.206544][T32664] ? __mutex_lock+0x1ca/0xb90 [ 2674.206579][T32664] ? kmem_cache_free+0x2d1/0x4d0 [ 2674.206614][T32664] ? __pfx___mutex_lock+0x10/0x10 [ 2674.206655][T32664] ? __fget_files+0x20e/0x3c0 [ 2674.206690][T32664] ? do_writev+0x132/0x340 [ 2674.206718][T32664] do_writev+0x132/0x340 [ 2674.206748][T32664] ? __pfx_do_writev+0x10/0x10 [ 2674.206783][T32664] do_syscall_64+0xcd/0x490 [ 2674.206820][T32664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2674.206845][T32664] RIP: 0033:0x7fc3d978e929 [ 2674.206864][T32664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2674.206887][T32664] RSP: 002b:00007fc3da567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2674.206909][T32664] RAX: ffffffffffffffda RBX: 00007fc3d99b5fa0 RCX: 00007fc3d978e929 [ 2674.206925][T32664] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2674.206940][T32664] RBP: 00007fc3d9810b39 R08: 0000000000000000 R09: 0000000000000000 [ 2674.206955][T32664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2674.206969][T32664] R13: 0000000000000000 R14: 00007fc3d99b5fa0 R15: 00007ffe4a549ff8 [ 2674.206992][T32664] [ 2674.207000][T32664] [ 2674.467363][T32664] Allocated by task 32664: [ 2674.471788][T32664] kasan_save_stack+0x33/0x60 [ 2674.476497][T32664] kasan_save_track+0x14/0x30 [ 2674.481231][T32664] __kasan_kmalloc+0xaa/0xb0 [ 2674.485848][T32664] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 2674.492309][T32664] memdup_user_nul+0x2b/0x120 [ 2674.497006][T32664] proc_simple_write+0xc7/0x1b0 [ 2674.501872][T32664] proc_reg_write+0x23d/0x330 [ 2674.506577][T32664] vfs_writev+0x5dc/0xde0 [ 2674.510929][T32664] do_writev+0x132/0x340 [ 2674.515208][T32664] do_syscall_64+0xcd/0x490 [ 2674.519742][T32664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2674.525677][T32664] [ 2674.528016][T32664] The buggy address belongs to the object at ffff888031cef900 [ 2674.528016][T32664] which belongs to the cache kmalloc-8 of size 8 [ 2674.541743][T32664] The buggy address is located 0 bytes to the right of [ 2674.541743][T32664] allocated 5-byte region [ffff888031cef900, ffff888031cef905) [ 2674.556083][T32664] [ 2674.558425][T32664] The buggy address belongs to the physical page: [ 2674.564853][T32664] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31cef [ 2674.573641][T32664] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2674.580769][T32664] page_type: f5(slab) [ 2674.584775][T32664] raw: 00fff00000000000 ffff88801b841500 ffffea0000983ec0 dead000000000002 [ 2674.593472][T32664] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 2674.602094][T32664] page dumped because: kasan: bad access detected [ 2674.608521][T32664] page_owner tracks the page as allocated [ 2674.614245][T32664] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 22048, tgid 22048 (syz-executor), ts 2320866616842, free_ts 2320866591309 [ 2674.634069][T32664] post_alloc_hook+0x1c0/0x230 [ 2674.638862][T32664] get_page_from_freelist+0x1321/0x3890 [ 2674.644438][T32664] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 2674.650360][T32664] alloc_pages_mpol+0x1fb/0x550 [ 2674.655231][T32664] new_slab+0x23b/0x330 [ 2674.659411][T32664] ___slab_alloc+0xd9c/0x1940 [ 2674.664110][T32664] __slab_alloc.constprop.0+0x56/0xb0 [ 2674.669507][T32664] __kmalloc_node_noprof+0x2ed/0x500 [ 2674.674822][T32664] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 2674.680743][T32664] __vmalloc_node_noprof+0xad/0xf0 [ 2674.685882][T32664] do_ip6t_get_ctl+0x63f/0xa50 [ 2674.690668][T32664] nf_getsockopt+0x7c/0xe0 [ 2674.695129][T32664] ipv6_getsockopt+0x1f7/0x280 [ 2674.700035][T32664] tcp_getsockopt+0x9e/0x100 [ 2674.704660][T32664] do_sock_getsockopt+0x3ff/0x800 [ 2674.709709][T32664] __sys_getsockopt+0x123/0x1b0 [ 2674.714588][T32664] page last free pid 22048 tgid 22048 stack trace: [ 2674.721104][T32664] __free_frozen_pages+0x7fe/0x1180 [ 2674.726330][T32664] kasan_populate_vmalloc+0x13d/0x1f0 [ 2674.731732][T32664] alloc_vmap_area+0x959/0x29c0 [ 2674.736615][T32664] __get_vm_area_node+0x1ca/0x330 [ 2674.741676][T32664] __vmalloc_node_range_noprof+0x271/0x14b0 [ 2674.747626][T32664] __vmalloc_node_noprof+0xad/0xf0 [ 2674.752767][T32664] do_ip6t_get_ctl+0x63f/0xa50 [ 2674.757559][T32664] nf_getsockopt+0x7c/0xe0 [ 2674.761998][T32664] ipv6_getsockopt+0x1f7/0x280 [ 2674.766862][T32664] tcp_getsockopt+0x9e/0x100 [ 2674.771485][T32664] do_sock_getsockopt+0x3ff/0x800 [ 2674.776532][T32664] __sys_getsockopt+0x123/0x1b0 [ 2674.781417][T32664] __x64_sys_getsockopt+0xbd/0x160 [ 2674.786675][T32664] do_syscall_64+0xcd/0x490 [ 2674.791225][T32664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2674.797159][T32664] [ 2674.799512][T32664] Memory state around the buggy address: [ 2674.805162][T32664] ffff888031cef800: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 2674.813238][T32664] ffff888031cef880: 05 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 2674.821321][T32664] >ffff888031cef900: 05 fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 2674.829413][T32664] ^ [ 2674.833494][T32664] ffff888031cef980: fa fc fc fc fa fc fc fc 04 fc fc fc fa fc fc fc [ 2674.841572][T32664] ffff888031cefa00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 2674.849651][T32664] ================================================================== [ 2674.921085][T32664] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2674.928344][T32664] CPU: 1 UID: 0 PID: 32664 Comm: syz.3.4163 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 2674.940432][T32664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2674.950511][T32664] Call Trace: [ 2674.953817][T32664] [ 2674.956781][T32664] dump_stack_lvl+0x3d/0x1f0 [ 2674.961453][T32664] panic+0x71c/0x800 [ 2674.965406][T32664] ? __pfx_panic+0x10/0x10 [ 2674.969853][T32664] ? mark_held_locks+0x49/0x80 [ 2674.974655][T32664] ? preempt_schedule_thunk+0x16/0x30 [ 2674.980073][T32664] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 2674.986084][T32664] ? preempt_schedule_common+0x44/0xc0 [ 2674.991618][T32664] ? check_panic_on_warn+0x1f/0xb0 [ 2674.996768][T32664] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 2675.002779][T32664] check_panic_on_warn+0xab/0xb0 [ 2675.007753][T32664] end_report+0x107/0x170 [ 2675.012122][T32664] kasan_report+0xee/0x110 [ 2675.016583][T32664] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 2675.022609][T32664] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 2675.028471][T32664] ? __lock_acquire+0xb8a/0x1c90 [ 2675.033465][T32664] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 2675.039658][T32664] ? find_held_lock+0x2b/0x80 [ 2675.044369][T32664] ? __might_fault+0xe3/0x190 [ 2675.049084][T32664] ? __might_fault+0xe3/0x190 [ 2675.053805][T32664] ? __might_fault+0x13b/0x190 [ 2675.058636][T32664] ? proc_simple_write+0x117/0x1b0 [ 2675.063802][T32664] proc_simple_write+0x117/0x1b0 [ 2675.068794][T32664] ? __pfx_proc_simple_write+0x10/0x10 [ 2675.074306][T32664] proc_reg_write+0x23d/0x330 [ 2675.079061][T32664] ? __pfx_proc_reg_write+0x10/0x10 [ 2675.084333][T32664] vfs_writev+0x5dc/0xde0 [ 2675.088744][T32664] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2675.094732][T32664] ? __pfx_vfs_writev+0x10/0x10 [ 2675.099670][T32664] ? __mutex_lock+0x1ca/0xb90 [ 2675.104434][T32664] ? kmem_cache_free+0x2d1/0x4d0 [ 2675.109432][T32664] ? __pfx___mutex_lock+0x10/0x10 [ 2675.114533][T32664] ? __fget_files+0x20e/0x3c0 [ 2675.119264][T32664] ? do_writev+0x132/0x340 [ 2675.123733][T32664] do_writev+0x132/0x340 [ 2675.128031][T32664] ? __pfx_do_writev+0x10/0x10 [ 2675.132845][T32664] do_syscall_64+0xcd/0x490 [ 2675.137407][T32664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2675.143345][T32664] RIP: 0033:0x7fc3d978e929 [ 2675.147798][T32664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2675.167467][T32664] RSP: 002b:00007fc3da567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2675.175952][T32664] RAX: ffffffffffffffda RBX: 00007fc3d99b5fa0 RCX: 00007fc3d978e929 [ 2675.183989][T32664] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2675.192021][T32664] RBP: 00007fc3d9810b39 R08: 0000000000000000 R09: 0000000000000000 [ 2675.200043][T32664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2675.208049][T32664] R13: 0000000000000000 R14: 00007fc3d99b5fa0 R15: 00007ffe4a549ff8 [ 2675.216068][T32664] [ 2675.219446][T32664] Kernel Offset: disabled [ 2675.223813][T32664] Rebooting in 86400 seconds..