last executing test programs: 6.017748884s ago: executing program 1 (id=953): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a7, 0x28000002) close_range$auto(0x2, 0x8, 0x0) 5.829319506s ago: executing program 0 (id=954): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) close_range$auto(0x2, 0x8, 0x0) r1 = eventfd$auto(0x7f) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, &(0x7f0000000280)="b2826566b16edb004936203c1745a319e25c26ec71c6589282e7b9674c0698b63dd3c417da54e26c8aa16d9fa3d3af66491686fc36871df9b61a2ca8f72647baa7032af3ecec15fc2806a61267a1bc4392eaa2b1f37df7873678801a5d123109de68af9aafacb6a98b7abc0e70e59c7d428df9601b920bcd4f4e3b6fdf5455f4e53f16f93ea968b0359a0d8aea561caed5460de5cdddbe6b1706b8df736a05b32157d1ed4589aaef02121197f9c96853306b6d0eb710f0c063e74f1e3e5a5257319eba474f60206b4f52ad54b58cace6f58d2aaaaf254ab6f179ce9879a817c00f30a5c7") (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pread64$auto(r2, &(0x7f00000000c0)='$[\x00', 0xf90, 0x8000) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) (async) bpf$auto(0x1c, 0x0, 0x80007) 5.815252228s ago: executing program 2 (id=955): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x10a, 0x400, 0x9}]}) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0xfffffffffffffff8, 0x2009, 0x4000000020df, 0x1000000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) utimensat$auto(r2, 0x0, 0x0, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x800, 0x0) mmap$auto(0xa, 0x5, 0x5, 0x17, r0, 0x8d8) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x14040, 0x0) close_range$auto(0x2, 0x8000, 0x0) 4.809379487s ago: executing program 1 (id=957): syz_clone(0x2ca00000, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x81) open(&(0x7f00000001c0)='./cgroup\x00', 0x800, 0x8a) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x234) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/188, 0xbc) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) accept$auto(0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x420800, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) set_tid_address$auto(0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 4.799884832s ago: executing program 2 (id=958): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0x40047438, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getpid() (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000180), 0x64102, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x1, &(0x7f00000002c0)="8cd2734e4747840f1283289957c595f3c0a35c98da698cc273f0731446e23f6229cf5451d17875e0fbe905dc2bca2a02562863f2866b6a7b96ace68ab99907218aa74b14d6367f064d7800f4331bbb4922e5060bca52ed2091b17945bd1735013302a8fb7b50269dfa35f6614a21e53f12ac0e41a7df2de0f2d8b98d2e946d2b3b9340e905d12b37c1a6c286dfd7950d4b43c522e7bbe29e9ad1ee4945ec957290e0e5487fb7e18d") (async) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x1, &(0x7f00000002c0)="8cd2734e4747840f1283289957c595f3c0a35c98da698cc273f0731446e23f6229cf5451d17875e0fbe905dc2bca2a02562863f2866b6a7b96ace68ab99907218aa74b14d6367f064d7800f4331bbb4922e5060bca52ed2091b17945bd1735013302a8fb7b50269dfa35f6614a21e53f12ac0e41a7df2de0f2d8b98d2e946d2b3b9340e905d12b37c1a6c286dfd7950d4b43c522e7bbe29e9ad1ee4945ec957290e0e5487fb7e18d") process_vm_readv$auto(r2, &(0x7f0000000000)={0xffffffffffffffff, 0x4}, 0x4, &(0x7f0000000140)={&(0x7f0000000040)="da073d19dbbc66079ee85dd3e01bfb503462d9342c1d090d68ccb93dcdaea2944c7996901d521467122f9a9debed4d4d8473b4d3e5b1a7577e7abe197bb0d9f7b5a2b41f0c315fb679911eca83ef866cf629d8b99477a0752442dd69a5d043ef1e7ad2d56906a3113649df26e75c3795999156756422a81ea579bc7f70bae9d289e9a8f51f2e9798413af209d8c290e781fd497d5eca2ec2321f341ab0042ca4b9664d1598a62ccd57a75c055472b8ee2d8a30b0f97ffe6f17e55111ccd14616f7f8c3e7fb0b08cb22d52dbbdca487ee604b1c2c4a9cc18ae65513f569a1845e08c570016d40a388de36e4e56638a6ae0b898a9319e050", 0x2e}, 0xfffffffffffffffe, 0x2) io_uring_setup$auto(0x7e1b, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x401, 0x1) (async) fanotify_init$auto(0x401, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r6, 0x5001, 0xfffffffffffffffc) (async) ioctl$auto_SNDCTL_DSP_SYNC(r6, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x4, 0xffb, 0x8000000008012, 0x3, 0x0) read$auto(r1, 0x0, 0x5) sendfile$auto(r4, r0, 0x0, 0x3) (async) sendfile$auto(r4, r0, 0x0, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 4.705307927s ago: executing program 0 (id=959): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) close_range$auto(r2, r5, 0x10001) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b41, 0x7) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) 4.149275113s ago: executing program 1 (id=960): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) init_module$auto(0x0, 0xfffff, 0x0) mkdir$auto(0x0, 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "5256441b633b87bba3bd6e38e194879ade12e8512ef3ab6a65fae7f2ee80ef36de7ef6f3"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002dbd7000fbdbdf253f0000004e001f00e414bab9ba21cad35c2c9eb704ca7be00a69f414794bf0e48d9696a603a63263c6d6edca1d55bebdffa9e6865056ee58c7ffe00116b7886dc43976eadb64ed1707b54f7b51eb73ea277d00000600360003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) getpriority$auto_PRIO_USER(0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'wg1\x00'}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/226, 0xe2) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000e80)=""/193, 0xc1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8) 4.085324004s ago: executing program 2 (id=961): r0 = socket(0xa, 0x3, 0x36) setsockopt$auto(r0, 0xf, 0xcc, 0x0, 0x20000000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00/\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8880) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(r1, &(0x7f0000000240)='5\x00\\\x1cj\xf0\xa4\x9cje\xdc\"F\x12', 0x81) capset$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) fchown$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) syz_clone3(&(0x7f0000000500)={0x200248400, &(0x7f0000000200), &(0x7f0000000240), 0x0, {}, &(0x7f00000002c0)=""/111, 0x6f, &(0x7f0000000340)=""/236, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/modalias\x00', 0x12bf40, 0x0) socket(0xa, 0x5, 0x0) 3.201844004s ago: executing program 0 (id=965): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a7, 0x28000002) close_range$auto(0x2, 0x8, 0x0) 3.017186603s ago: executing program 1 (id=966): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) nanosleep$auto(&(0x7f0000000000)={0x1ff, 0x6}, &(0x7f0000000040)={0x5}) (async) socket(0x29, 0x2, 0x0) (async) ioctl$auto(0x3, 0x89e0, 0x91) (async) socket(0x5, 0x2, 0xffff) (async) r0 = socket(0x11, 0x3, 0x9) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f0000000000), 0x3ff, 0x0, 0x9, 0x0, 0x3ff, 0x24000000}, 0xb6}, 0x2, 0x2) (async) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x6, 0x8, 0x100000000, 0xeb1, 0x401, 0xba01) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x20000, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r4, 0x80044dfb, 0x0) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x6, 0x0, 0x5, 0x3}, 0x5}, 0x63, 0x100) futex$auto(&(0x7f0000000080)=0xfffffffd, 0x0, 0xfffffffd, &(0x7f00000000c0)={0x1, 0x1}, &(0x7f0000000100)=0xce0, 0xfffffff8) 2.447537623s ago: executing program 2 (id=967): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x105003, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x105003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x9a040, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x9a040, 0x0) ioctl$auto(r2, 0x5646, r2) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/40, 0x28) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1) (async) copy_file_range$auto(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x21, 0x2, 0x9) (async) socket(0x21, 0x2, 0x9) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000040)={"24df202c52ce582a0a73bfa704878a246fc33219c75577639801c6106a8e786529a4668e21e8a9b2817530ce1fb4fc2d102c736b89a415c7a183eb07f8030b22835fbd9fdb3fa90ce8da218a0e3e3eb7c4233804196028f833e45ebe85d7e729aa777a271084f6dd7ddc988b016d23da37264de075c0e1abe160d263351db601", "b0b113fa57b34e83551e4e9ee15f25d3144ec0e65d8dcc1e2aa67241fb6ae0ef2da86d63d66eb3398b5d01e0249a4035ac4dfd5b1e904ba0ae329e383366547cee54863a0452c02f7f1fb7a55c8571826b00d951406d96a8338c4a923faa5cbc96e223acd4487267b584deff7d8f2bbc21d84674d5640d74c05686d77aa439f1", 0x5}) (async) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000040)={"24df202c52ce582a0a73bfa704878a246fc33219c75577639801c6106a8e786529a4668e21e8a9b2817530ce1fb4fc2d102c736b89a415c7a183eb07f8030b22835fbd9fdb3fa90ce8da218a0e3e3eb7c4233804196028f833e45ebe85d7e729aa777a271084f6dd7ddc988b016d23da37264de075c0e1abe160d263351db601", "b0b113fa57b34e83551e4e9ee15f25d3144ec0e65d8dcc1e2aa67241fb6ae0ef2da86d63d66eb3398b5d01e0249a4035ac4dfd5b1e904ba0ae329e383366547cee54863a0452c02f7f1fb7a55c8571826b00d951406d96a8338c4a923faa5cbc96e223acd4487267b584deff7d8f2bbc21d84674d5640d74c05686d77aa439f1", 0x5}) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, 0x0) (async) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r5, r6, 0x0, 0x1) (async) sendfile$auto(r5, r6, 0x0, 0x1) 1.969180553s ago: executing program 1 (id=968): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x183941, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\fz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x7) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) settimeofday$auto(0x0, &(0x7f0000000180)={0x0, 0xe73}) unshare$auto(0x40000080) munmap$auto(0x3, 0x1) socket(0xa, 0x1, 0x100) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) 1.485082314s ago: executing program 3 (id=969): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range$auto(r0, r0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 1.368666765s ago: executing program 2 (id=970): unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x4ea06, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty36\x00', 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00~=', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf2501000000100002800c00010006000000000000003c1103801d00ae002f232e213a5e407b2e5c7d2b3a237b2c2f2d27d52f402b250000000023101e800400ca800400b6805af8e962ff618445ff2a27e2188809d41872f442d5bb885593c10d5f155cab51e58e01e0dc1818e4118182a06a58e61f6ca2e204203b64c77ad0110ab002840c0527fdda25b23f53ea4bf8d15440f7d6bea98f8d260c1100f222fd5e930919eb8540d4bf6be434a123378e25ce8337b40bf3f265d084e01944f567be6af8f5e4bae97102a486fc517f146b922bda5692ae0c87a9b6bca25e4bb201af10de9970d54ffdf64832fe48be235766e018a0cc4904340dcc4d0fd8320b4b683159a4ce6a2440b0dcd583c3bc018e7249de7532b57908a11553037235d2cc16d027f582f3a487116397ba696601be57f1f75a17e15b5a6e897a9cc6f2529ac3aa715d3e1a9af5ea64c5ebd2d066720b1a7ba709489cf2154d54d386187ad4ae8bb13cd1fd0685cea7d30fe6e7f080fab976c1a23809ac74b10cf88a9a6b257a011093d73d02d1803911ffe9e0df2a5a1b0308962a5402830f52bd0b8b13a5acd5c042de86ab03d4f67b9e7348075b660cc88abd9d3a130df908eaab1f1402b14da50657bf2fc416f4d94b76959143aced436ffc8a0481087589c76eb5ec1a630b1a0e2912348b6b8da8678c5215da241463928476c041105e99f5c6496cffa97e6abb140491959bc84261b9b7f50280cc45975a7b59319b450fc1379f7a751d561e84cb7a46954c7f24907258ec5a619b391b4b7a85ee5f95929d18f92ec167db0ddab82832449cd421e807ed5bdeefcb7cb29ec87771570b524d0c2857cbe5969cd3550b1b0f6fd8706c4d61e54ea93e189e1a7406a6231ea1378eb260d0d48880a911debf871f17ef6849cadb36e73c3795df9ae3cbdc2ac09edb61d82262b25bb4628e13b601e49398bc36b2f5be34de945a517aedd98f7ed13234556671c2b819704c9e1bef2612edfc2ca2b46d0a34c573f9a233e55258a1c646a79bf4af7150742387dfa7bab5dcb2baaebd6ea403f0ccd2a1c1b2789ea959af50736e2d2e4e18c54b80adf4933b18fed792cd2cb51ec707f7f7651fa95ba6ae1eb36c78c12a5243ed5bd5214261414b0a0da0f7acb033d702ef4b082182dc25599c6a4035a9f09b787c369293da5b3c5195a2807bda23bd5d4010e9e4fa1b1338c31048704b1cc209274d2d8e150a0db7c914c40bce89cf14bd24c2dbe3a2202dfb1ed0349a92befc180abad80a9d8f70b8c2cce2978b6c382d109ab4b65b9b649fe0589a76af7a90cd2fa215926e41d3e43dde5964fcfe80280356b81ab1360a60817071b09260d64995ac9e65b822b45020e7845a517af812ccfb1e9d8767521cb67d9d0b0276cb226df6514181a57101b7f7b7077ac9250aeffa77c067c5605a932ee6e17778d675b82d1612f1600ab68036b8eceb52d85879b6df3e5b2c0088df73330ddef6cc0deb3f6b20f137f2cba0b0e8bdb457c5f6d15ee9b0162e656e19bb06d6c267636e7cf46faed5f1007db0ced3ba20b1dd88dad0875924c73bfa130d3b90dfb453f909524b9db21015b89055e0cac775f3a46d5ceec5b48583d41f3248d649cf64603c48534e3b8f7a8f9758ec801417ad5bad9d58f104cc51d893d0a79bc0beb0d5023283bca3b67a536b5d0a383f26ebe7d982ef22bbc50cb87ad9b2af70170eef0074c3067b9685b49f990e8b259907fa6836e32c1719f389d8a09196381001182abc646767639e3959ee127da5e642a74d2d952da25ac8d4b312ab1a958d7f27ef839234f719ba1e8f71c34132f166af0537ff494647c77b79384f28388a6ec87f8ca3dc6bfde16d931338a7068029b16043e1316799d3e67b11005ce13c366db0863b9b6bc5ecd4131cabd3a9642815e61b9ec95d26656eabdf1deb7f6b318a7d6d0ba057fb5a0927c92c0298d6acb919b2aef14bd1c482315280320db5d1c9c6afbd3011bf9224cccce37bae4bbeb0695ecb2f73942be5cfcd01dc1b8c94e3ed4077b32e5561f3580fabca591efec1bfe62c9fcfdb7a8a9cdba826fb484e38146897fa30738f207c85a73b7e84d532b2dc576526a992a384d333a04a21b111b5414081bc87d1b556bb381d03713e12b3de72bf03cb027e92f364c2f736b3714a63c0036e753e05b20d76a71816b6837da79d436a017a3c8f002256a1093bfb5ba39cb86cfb97e763fd93a1a2319d3bc39d292a44be1a97eb301e3b1dd1a397a8b28563d7d89a8ade32197a26074625672847a360cb1f7f02fafe224b7fdae143fd2d902a68dce5a563cb093e58c4aa405dac66cd5884397c5ad60af965e497f984d3a0293d9c6532190f3589d3aba228af60d45f762eacdfd3a2a6e311b93ba5d90da0217312dcb4a288228df8156eb3759a9c7b6950740093a08a7fad1707130a83deb0e4940ae07ca56f9cefedbb95032e4c7fb347af53c55cf00be3e5127b062a92f4a13829fb705348b8f77c5fae0d33454d0d5f6586fd56f9dbb4464144379a15757d1e6ddb9c2ca4e8e21d8df33a857bc97b2eb8de65bce6bf2606b7f741ae18d9efb619d69d8c47efa804a4313fd0b3d15f856f88f593cbb2a44ac7f72805908de2f87385fdaec4225f79f0c43ddf28bd9fad4e9c8a4cae08a52e36a8fa5c3ebd1beaaef1c63b3114b12edf18434674d7f1e3551ef48b0493ac204337e4391764aec6174db501dd8a221745dbdab63a39fc2417763376f171c0405c29634bcb994b4a41c88ba64b0a0b27a05643a26bc686e2bdbbd18e078dbf8393dcbf16f297d573773e2d9638612b6630bac2fccfaf7467c55c60aeb3256db9b36b53343f0b12d8147b36400a3cc9934e7047359e27208707f7fd4d6fd54ddb6a9f26c0619bae00b77531c8b018d975052770d66af1ef08ba4984c327ec371b32f58b34b5ef599cab3e86a13b6b9559b9944ea6d4c16c933aed093ed668a1bab9e672c08c3ba215dc2ac112963cf0b6fda669e7085b90608a67eabfa5fbd5d1c35384414e9efca5605c133165c5bf29acde453ec640375879ae131cdc3b50ac8a83b4fbb26f6ed84753b1952e3530e7e4e0600f7dd57e46b1486cf11faf2dbabff7613d8e13d486024a8fad9cf8b8e6a8847006ac96b8cb4d3bc7adf2cae4ec6b9d84d3ccd3a36c872086dbcc605269c4f08826e34b1c0ff0d214378f9e46c35fb58d62250d4cd999de6c963886d010e162cb2793b63abeb7e81ddc231cf60438287de8571239fc3baa7f20db68ebbb8fe03ac23bcbeb23014a15bb475d2fe18810ab4f874f85fae837eef45f17d9f2b03623d7b3693708ef709b77ac1e51a7d4bfbfe19b76fa968fab4152f7cee50069c619b70d999a079cda81baee4a8332fa35417f5d867afe3c26948ea8881962c5fdd8000bc9ccb483c518faf18ccc7620ed8c5e17b6f6512e163a5b0c853ff4dec95368cc12f4de603ce67d47d27ff8df0de6f09c60cdf2ccaff631137e291e7efcd689fb2ec022238c973eb64226ee8ea2e0afc4c88167bc1477f8c2a4f9c405aee4f8abbdb7f98b7bac8b6f798195a0a82aa08a9211345da5d4f2c2b2b58b9e3a6cc89b21316350cd555d07f9c62c3944ae96c1de017b87428f69e72f44965b7bcae8afddf4f6b70d3987ad9aeb7e984ef62c5a113e63612fe14e1d72c4609b4a0c7bfffbb64a5649e5a119cdd08d5d036a62e3c5414b8425b1a6b376b1a0181bf55d08bbfd028d8df9b12844aa50a090867a52bb9a517ccda232d2c8bf885a6b0cab704d8e3547c1e9bb7be0a34b5850328eef646578f30a66546587e6860a6f946120844a313f385511c3ad40f8db5189e0a36f28d109214f7cb938887d9e48f4ef4c2dc1585ab66e9b2ce94fec71033d2427f7d3207f36befd04756bd3ccd4e0a7effc20fa16d031533312508347b9aa97671a96fe4c3d11dac0a061667601b7a87609d8c27cc997f3a1f06c7582ff78fadb6fa834aee07af155bfdf6eb0a94b5a2d79a94eb74ef08134cc1cb034df4f97bc524a7b173ee906e80004af6f2174da7777202e35766670ec6335241629ad31884bd55029c3df1e28e9ddb1f0292bfd181d84f934a202d5c3aa7ae9c896044c6f42b739ac0dadd51913003930da53c2463edf9c9c9289e98f02a9489905bb93faf647776c35b649d355d254817b28e5f8276d54e98f811373b72ebb46ca5030d71a1adadd818b4ce0a9aeaabef408977a3d77c4ab8adc3dc73c6a83b2dfc85275c72bfd7fee451723454c14ea4a0448edf4ac57e69731b089d1eb8bc05833f85ee64d4f11502b3dd972072f4d9b2176aa5cf8f73b32ba59ad409840735cf1540844fba57272fbab71ca0eea71598973289b92cbc0451e31347cad6e1191580f22aee166632e47b3252d90215e18d7fb55734cd6f7c3c958806995a5589ac1ff6c89ab7dd40a682922a2eed45e82f14853b9af261d7e20e718ee1616f69ec0ecdc1a990b3bc30be9050840d665927fb32a63386f47e6945b70049298872707add384a140cb7de0a65c53634593a580ba8fb0409ec052d7cf16a3e23058ecde0cab3972f17a9b353589245746d73b2759ecd51ca767d732b3918af94e3a456f5b53158ff4924dbcaf0586c5c4eebf8b399f04fc72bf69aac0f7c791a4651cd8f4ad536c9f614dec97377057f6fb55b9547ca8188c876662efeb196be380d77cc5e6d22d01188aaf749235be3789684b3e82c99c555be00e2895c1b77feeaf7db06bfbbc11027f4223a69f4f7942f139480b43a9f73794827bc576b1d8db08b03f15eb729813099e89f8e1d00ca610433808454c28476cfd0a198e1771d4d67ccdb8fbed5e06987076a6f75dc7c041f9ee668668515a2c443fb521b874b6b5293b0575df50ad30ec7d5b75b402bafc017f24f3b3d7b732eecd099277796f40d7080664016a61a071ffb9f455d25a83e9f72a2f33a6947d70f8df040e1fdddb88979ba40ec9b415ac4bc791c32a298d08b59a32b12c861b374cb1afcf5ecaa952852fe77b69a875b27d15ca1b13208e02d01b1aa8562fe3605f4e662b9dc04c85916f9682f50d12b3429899c32ad7896ef6025d97d98cf5c776b1fcb8711652bac105adc71b43a0f8326ee1d6a2caf3f86ba41753a2a93330ccf4922b10d276ea972f5992ba4863d15ceecda6fe73fd7f5a9c0de2adcbcd624bca9122436898644b7c03eabe9a42176fd4287989ca5d4aa5694bc7aea425c9a4f254656e5819511b9d47eccb80a2df6a6d4643168d8db07faf524bd61376886ce7f11b0c9d7bfc6e08d07188e11f5b106ff867d6fb61892ac2b68b1ee9828789eecf0b4b711a6fc511c43b6f699f67750020da74b25c8eb3fbd41355b049701d50592a4b51313bdb3a3b737daa67c1949f14f462044b64e13670863cbc8045c921f8fb73fffe9aae0a8e0c23f16418e984a6ad02d9e8a571668c3eeacd40c644cc92e7fe6f47e4c20b9252292649a4cdfd77c1a730a28b5ac602208684ee61f0faff863cbfa2e7a6bf11b7b4f096ca673c4c8826658cca664047e61a20aa52bc7659b026d5efc2662cc90ffb387b42f48088c8acabb4d7e7151959469fa96aad308ca86739480db5a1255cc92ee6486f4442cea86091625c5f463f245f031da5e01e1e1e1f3dcdc56a21eb5edfb100804eb7fdc21ce0b404b455f8b8f5df29759e87693bad772e4126b01491b759f82d814b96cc8c6a08d64b7915969baedf1c97b895902adc979328da24c1869cc7cc92045ce44852b060cfee132ab09834cb27178e63a3db546b4637dae8dc2d80febe77ca55f7e9f5c4de3d35a0a0615df8ee93c68add627f40157555f3ff7a8b8dd690bc118b78fd7ef4bdbfd9445e95567ccc04001d80a7cac27303c06767e69850f519ce67ea4972eb0014000100fe880000000000000000000000000001e000d900349de797dcd88f072e725a32b4b2cdf4c806fd5eb33d026f53a01f4a2991b6f1008787315f0b73861d911c9f9769d34dcfb62c42fccb1271fb665b812c30089f1393fa0c4efe9d17113498f71d978ded5fb8b681feeb82e6baefe5de85a51d384596397b184c63dbcf221eda5b46e673b137380e09aebdae11f96044c0b9304177f44a0ba8a4c38eed89c42d061621d156c36b63b76ecec9c23b7067af068819ac9f4007d75e18c90878e66b157a1429cb053d7097dce601db0d42c65438ba683b6a4006f3356b712fdad6b5645e2bc87e284a41008d6fb68913a564"], 0x1160}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r4 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) read$auto_proc_timers_operations_base(r4, &(0x7f0000000080)=""/173, 0xad) write$auto(r1, &(0x7f00000004c0)='\x8f\xe9\x02\x00', 0x7ff) socketpair$auto(0x19, 0x0, 0xd, &(0x7f0000001800)=0x8) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x18b301, 0x8) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x400200, 0x85, 0x2c}, 0x18) move_mount$auto(r6, &(0x7f0000001700)='./file0\x00', r7, &(0x7f00000017c0)='./file0\x00', 0x8) syz_clone3(&(0x7f0000000380)={0x4000080, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2d}, &(0x7f00000002c0)=""/81, 0x51, &(0x7f0000000440)=""/200, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) prctl$auto(0x80000000, 0x169, r8, 0x9, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf25880000000800260006000000050089000a00000008006100000000000800c900c20700000400ae00"], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x4044080) write$auto(0x3, 0x0, 0xfffffdef) 1.294210031s ago: executing program 0 (id=971): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9, 0x0) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002380)='/sys/devices/pci0000:00/0000:00:04.0/power/runtime_active_time\x00', 0x2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000023c0)=""/132, 0x84) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x200000000003, 0x2f4a3a23) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/bond0/ignore_routes_with_linkdown\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) 1.214332642s ago: executing program 3 (id=972): mmap$auto(0x2c000, 0x20009, 0x9, 0x111, 0x401, 0x400) r0 = socket(0x2, 0x2, 0x0) setsockopt$auto_SO_BUSY_POLL(r0, 0x5, 0x2e, &(0x7f0000000000)='/dev/sequencer\x00', 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x183681, 0x0) writev$auto(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0x2}, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x2, 0x0, 0x3}, 0x6f3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x101, 0x0) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r2, &(0x7f0000000380)="703a3a82d9e5cc7c2ceda8d50bfc", 0xe) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="eed33a7c", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="00080006060000000000000004000048d34a5c053a000000000000003e95641a70d49330ad1c772f92ebcf670e5d3e1be0821cb4b6f62335b2d5261d9337df3e83d65b5b4b40886e27fde8edacedd3e43a0089cb025a044f64dff232a119bf8d732d7e3dea08d0e97aa510d14ffeabd055504d52bd", @ANYRES32=0x0, @ANYBLOB="0a000500000000000000000086fd010000000000000000000a000100aaaaaaaaaaaa0000060006000f00000008000400f3ffffff0a000100bbbbbbbbbbbb0000"], 0x6c}, 0x1, 0x0, 0x0, 0x40050}, 0x404c005) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x1, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x5, 0x90, 0xfffffff5}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) 1.11884915s ago: executing program 1 (id=973): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) r2 = dup$auto(r1) ioctl$auto_ECCGETLAYOUT(r2, 0x81484d11, &(0x7f0000000340)={0x101, [0x101, 0x1, 0x80000000, 0x3, 0xa, 0x5, 0x1, 0x5, 0x808f, 0xe, 0x5, 0x7, 0x2, 0xf, 0x57, 0x8dbc, 0x8, 0x7, 0xd1, 0x72944006, 0x1, 0xfe54, 0x0, 0xfffff645, 0x9, 0x6, 0x9, 0xffffff31, 0x80000000, 0x8dc, 0x4, 0x8, 0xfffff0bf, 0xa, 0x575e6e30, 0x101, 0xff, 0x2, 0xffff0000, 0x3ea3, 0x71c7, 0x1, 0x8, 0x90, 0xfffffffb, 0x7, 0x3, 0x5, 0x200, 0x100, 0x71d1, 0xffff, 0x9, 0x20000008, 0x8, 0x3, 0x2, 0x81, 0xe, 0x17, 0xe0b, 0x1, 0x0, 0x57a1], 0x6, [{0xff, 0x6e14}, {0x9, 0x8}, {0x4d1, 0x6}, {0xe, 0x8}, {0x4, 0x24}, {0x1, 0x8}, {0x1, 0x11ff}, {0x1, 0x40}]}) r3 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4008ae48, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x101a00, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r6, 0x5016, 0x0) ioctl$auto(0x3, 0xc0086202, r3) 1.014153502s ago: executing program 3 (id=974): r0 = clone$auto(0x100, 0x1000, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x5, 0x5) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000080)={0x7, 0x9, 0x7, 0x800000, 0x9, 0xffffffffffffffff}) tgkill$auto_SIGCONT(r0, r1, 0x12) r2 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x410200, 0x0) fcntl$auto_F_GET_SEALS(r2, 0x40a, 0x6) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy14\x00', 0x20900, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xf29, 0x10, 0x7}, 0x8, 0x46b) sendmsg$auto_NFC_CMD_START_POLL(r3, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f00000001c0)={0x1158, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_DATA={0xf4, 0x1f, "6f6dd2518cd8d17afa97123b487324774d21417976d093459b3307f582188ea061ef0eb1b6b5c4f4d8b0a266ec0ee2ed3fce4b484eb0bb7690595c38136559ca0feddc464ecb9009e0ad1f999ce9593ae933704790a2452d08af0d81c5f06a07b871fceb59048d0e0201806525cce6018d2d64b391eaaf196e90b6f9b26da643195d3f168b8b76717a624ca5159a83d1dc075a27a7dd99c88656ee3d0dc4676f7cb8ecd70ec6a072ab11597a39d7ce47cc51347fb3c7e309cfcdf9b2180ee9f9294a0a2e26d1bc5b856f486528f6b8deb4c8a8caf87bc17bac9cf244e45b19fb72b1fc07e4cf9b552740ed82a3ee01b5"}, @NFC_ATTR_SE_APDU={0x41, 0x19, "021d7f21ccd27a9b457d752fb0f0fa6a1ff59bc08cabdfb55a135af855f256d5cefd20ae57cceefd5d9d538bc25879564dd5a9de947cfdbe9d39c01e81"}, @NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "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"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x7}]}, 0x1158}, 0x1, 0x0, 0x0, 0x4841}, 0x40) r4 = socket(0xf, 0x2, 0x5) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001400), r3) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x90, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_WIPHY_NAME={0x30, 0x2, '/sys/devices/virtual/mac80211_hwsim/hwsim15\x00'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "8e4404819c6b73796e2b4d62"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x81}, @NL80211_ATTR_MAC_HINT={0x20, 0xc8, "db6da55050a5a2ded1ed26f67faecc0c481c9b141124c471b0948356"}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c015}, 0x4c001) r6 = ioctl$auto_TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000001580)=0xb) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000015c0), 0x800, 0x0) r7 = open_tree$auto(r6, &(0x7f0000001600)='./file0\x00', 0x100) ptrace$auto_PTRACE_GETSIGINFO(0x4202, r0, 0x8, 0xf6) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001640)='/proc/sys/net/ipv6/neigh/erspan0/base_reachable_time\x00', 0x40, 0x0) shutdown$auto(r8, 0x4) r9 = waitid$auto_P_PIDFD(0x3, r6, &(0x7f00000016c0)={@_si_pad}, 0x5, &(0x7f0000001740)={{0x80, 0x2000000000}, {0x9, 0x73d3}, 0x800000, 0x1ff, 0x7, 0x645, 0xbb4, 0x81, 0x5a, 0x3ff, 0x9, 0x8000000000000001, 0x1, 0x2, 0x81, 0x2}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001900)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x10}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x10}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x5b9b}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7}, @NL802154_ATTR_SEC_LEVEL={0x28, 0x2d, 0x0, 0x1, [@typed={0x6, 0x13c, 0x0, 0x0, @str='{\x00'}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r3}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x7}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xf34}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000001c80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x284, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x9}, @NL80211_ATTR_KEY_DATA={0x10, 0x7, "d2b60797515e1e7d51dd7b7b"}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x14e, 0x80, "30bd17e6368f781d883a86b59adae5b0b9654ec3bf3e712c1ff9d2b45c6d7e21533333ee8bf6d53973c19f3816767c53ce01cb94da5425ea4e5e72501f82b4a642a2bcf1ef557b6ae50e71416caae31dc12d1e9edd27f00f7ec0fa281be6fbfff801435c051d1029a5adb134c9169658fbbcf1f1ab9fda755eb2b201d42e5faa57290b3c0e8b351f1a320ee8f882a68d329cfd721c33a0ced3536ba0983bbb50052da503b1f4e56d8186a96ad5e752226eaa387126a36e5535b0288fe25f15e77e5fb0b52aff806961370b31197dc1fb59b0441deb3a8f780b66d5fa884b8837b906a86cd6d97fc962191217d036a5c831dd42a564f62f9df6f5a9a6b193f730ba8f4f8e49263aa1f7c406eb6c63349f06b1f06882a417fd7f6c9cdd527332866617dbaf006459a5fb2204c8abb4ed5a5cf6002832fdf9ebee666ba31bc8a596cf9b59f83d203e1e25d0"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x7}, @NL80211_ATTR_PREV_BSSID={0xdc, 0x4f, "1ead8254a76e973c24685248fee48278319f99117b0e62db79162f5a945326bc8817fbe2106c17f6b505d71d22880e24fabcee741dd606709217144a3fa73b4c049c8b615bce7f826cb91efeb0b55eeb6996b38c78af07eb460cc1a7ab30055876d0f8ee5ff573a0892903a672852407df8d83a2f8a0d38cba989c4878e33a02284455953b23f76feff8df5f2eca2544ec535e519b20c46fafa6a24c59d1496ffb72f4373bb253301d715b86e9f6784741d07d0eb278c1c523f2e158f7baba9ef0eaf884630eec4ea24f2d1ff9f9a415808ceede32fe2c59"}]}, 0x284}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x84, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfffff800}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0xcf}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x55, 0x125, "698c997d285012598dc0e5f7819ab17148725d826d0c0df6d27d48124f09049fbb11205a75ddf80c3fec40af8b57fc25a0c5ddac63bece7274af00ec8968c7c5bc59aa062804c205f64d6f5d7a1baf454d"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x4b087884}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) creat$auto(&(0x7f0000001e40)='./file0\x00', 0x6) open(&(0x7f0000001e80)='./file0/file0\x00', 0x46600, 0x4) r10 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x40, 0x0) ioctl$auto_EXT4_IOC_GETVERSION(r10, 0x80086603, &(0x7f0000001f00)=0x6) modify_ldt$auto(0x8, &(0x7f0000001f40)="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", 0x4) ioctl$auto_EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000002f40)=0x1) shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000003040)={{0x8, 0x0, 0xffffffffffffffff, 0x9, 0x74d, 0x8, 0xfeff}, 0x7, 0x7, 0x10000, 0x1, @inferred=r9, @raw=0x7, 0x7, 0x0, &(0x7f0000002f80)="31eeecf50b13e884b09aec9d07b444757aec36d6b617ed605f8bc33757c38b255e69d00ee086f830bd39fff55962f8b04503e6834c72d437415a514603fc29d5ebc9cc6af0cbf4f0f1fd4b38ef080cd0705de02c0e7a6c15b07fc22ff5936aead892f06c470dfb8c0ae5d9c13b108821d4c1dd59665b35b10170e62dd823", &(0x7f0000003000)="3e573a0d137319af3edcfc01ea75ebdaa80e8159053782078904b686cda1a7215c2d7e8270b7da5e8100e2e57e124785612753adf52330ede0a786"}) shmctl$auto_SHM_LOCK(0x488, 0xb, &(0x7f0000003140)={{0xfff, 0xee00, 0x0, 0xb5, 0x5, 0x28, 0x4}, 0x3, 0x1020000000, 0x4, 0x2, @inferred=r9, @raw=0x3, 0x7, 0x0, &(0x7f00000030c0)="9c2e46ae99ec308460dbb50f84ed3714a07eb4dffd54a1fde8", &(0x7f0000003100)}) shmctl$auto_SHM_STAT_ANY(0x2, 0xf, &(0x7f0000003300)={{0x8001, r11, r12, 0x9, 0x4, 0x3, 0xb4}, 0x9, 0x7, 0x4, 0x8, @raw=0x7, @raw=0x1a1d, 0xb5, 0x0, &(0x7f00000031c0)="e4df7a496d91fe01ee3c73f53779318d6ef7cbeabbdae9f10032f4612000779db115e033caabfc96dcf941523e0fca498f6822fd8546800e174c8c42d405af2ad5e994668748d226d8b8e5c39769e791f2e926cdc77a968ab62c23386201d8b5fb9e8dbf2c2de386136b785acb05f4a3", &(0x7f0000003240)="8f0689e8bd13d255646ae192ca632c9abad6ceda3527ad397731f25b9f6fb4073c0814ddf3d5fb848fac5dfa98491092a2cb24d006aaf36857036caf84da433650a6b9c965a0d39088f653414fb1b9bbedd9d6f612bae240e8110fa20cb7d94c6d82ac1a91ded41ab34c103f5a22187a3292a1908031931eec9db708f2205e091d21b26479371773e96931ecd2084d97edbbd5d9b2cd80f8e9e61eb81c6995247d2ff1de71d5267ece467e7c2db743e394b626cab4e5f123f2ac"}) 847.385892ms ago: executing program 3 (id=975): mmap$auto(0x1, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xffffffffd0ccea9c) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x20000, 0x0) ioctl$auto_BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000003c0)={0x2, "2e060b7d536cc87fde043eca4fea773d", 0x5, 0x0, "877bcdd43aed9782703b30bbd9735360", '\x00', "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"}) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x101001, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x420041, 0x105, 0x4}, 0x18) fanotify_mark$auto(r0, 0x7, 0x1, r4, &(0x7f00000000c0)='./file0\x00') sysfs$auto(0x2, 0x100000000000030, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x80085504, r0) 334.682904ms ago: executing program 0 (id=976): r0 = socket(0x2, 0x5, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (rerun: 32) shutdown$auto(0x200000003, 0x2) (async) setsockopt$auto(r0, 0x0, 0x1, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1) (async) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x11, 0x0, 0x0) readv$auto(r2, 0x0, 0xd709) (async) read$auto_fops_ulong_ro_(r2, &(0x7f0000000000)=""/121, 0x79) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8}]}, 0x1c}}, 0xd4) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 333.018727ms ago: executing program 3 (id=977): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x2, 0x5, 0x200) open_by_handle_at$auto(0x0, 0xfffffffffffffffc, 0x10003) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x1d9, 0xe3, 0x7f}]}) setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) 139.283798ms ago: executing program 2 (id=978): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]}) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) (async, rerun: 64) sendmsg$auto_SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) (async, rerun: 64) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async, rerun: 64) landlock_restrict_self$auto(r6, 0x0) (async) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)=',{\x00', &(0x7f0000000140)=&(0x7f0000000100)='}.\x00') move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) 33.254047ms ago: executing program 0 (id=979): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x88202, 0x0) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r1, 0x0, 0x9000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, r2, 0x22b, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) socket(0x2, 0x801, 0x106) socket(0x10, 0x2, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r0, @ANYRES64], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) 0s ago: executing program 3 (id=980): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a7, 0x28000002) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.337476][ T7203] RSP: 002b:00007fd192958038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 179.337504][ T7203] RAX: ffffffffffffffda RBX: 00007fd191db6080 RCX: 00007fd191b8e929 [ 179.337523][ T7203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 179.337540][ T7203] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 179.337557][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.337580][ T7203] R13: 0000000000000000 R14: 00007fd191db6080 R15: 00007ffdcdb7b4a8 [ 179.337623][ T7203] [ 179.805143][ T7216] FAULT_INJECTION: forcing a failure. [ 179.805143][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.838402][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.2.242 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 179.838444][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.838461][ T7216] Call Trace: [ 179.838471][ T7216] [ 179.838483][ T7216] dump_stack_lvl+0x16c/0x1f0 [ 179.838544][ T7216] should_fail_ex+0x512/0x640 [ 179.838592][ T7216] _copy_from_user+0x2e/0xd0 [ 179.838637][ T7216] do_sock_getsockopt+0x5f4/0x800 [ 179.838672][ T7216] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 179.838700][ T7216] ? __fget_files+0x204/0x3c0 [ 179.838756][ T7216] __sys_getsockopt+0x123/0x1b0 [ 179.838805][ T7216] __x64_sys_getsockopt+0xbd/0x160 [ 179.838843][ T7216] ? do_syscall_64+0x91/0x490 [ 179.838883][ T7216] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.838922][ T7216] do_syscall_64+0xcd/0x490 [ 179.838966][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.838995][ T7216] RIP: 0033:0x7f032298e929 [ 179.839017][ T7216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.839044][ T7216] RSP: 002b:00007f03238b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 179.839072][ T7216] RAX: ffffffffffffffda RBX: 00007f0322bb6080 RCX: 00007f032298e929 [ 179.839090][ T7216] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 179.839106][ T7216] RBP: 00007f03238b9090 R08: 0000200000000000 R09: 0000000000000000 [ 179.839122][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.839138][ T7216] R13: 0000000000000000 R14: 00007f0322bb6080 R15: 00007ffe72fb39d8 [ 179.839174][ T7216] [ 180.156881][ T7218] FAULT_INJECTION: forcing a failure. [ 180.156881][ T7218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.258513][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.243 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 180.258556][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.258572][ T7218] Call Trace: [ 180.258583][ T7218] [ 180.258594][ T7218] dump_stack_lvl+0x16c/0x1f0 [ 180.258642][ T7218] should_fail_ex+0x512/0x640 [ 180.258699][ T7218] _copy_from_iter+0x29f/0x16f0 [ 180.258756][ T7218] ? __pfx__copy_from_iter+0x10/0x10 [ 180.258798][ T7218] ? rcu_is_watching+0x12/0xc0 [ 180.258837][ T7218] ? rcu_is_watching+0x12/0xc0 [ 180.258867][ T7218] ? kfree+0x24f/0x4d0 [ 180.258900][ T7218] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 180.258957][ T7218] file_tty_write.constprop.0+0x488/0x9b0 [ 180.259015][ T7218] vfs_write+0x6c7/0x1150 [ 180.259057][ T7218] ? __pfx_tty_write+0x10/0x10 [ 180.259105][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 180.259142][ T7218] ? find_held_lock+0x2b/0x80 [ 180.259201][ T7218] ksys_write+0x12a/0x250 [ 180.259241][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 180.259294][ T7218] do_syscall_64+0xcd/0x490 [ 180.259341][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.259369][ T7218] RIP: 0033:0x7fd191b8e929 [ 180.259392][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.259419][ T7218] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.259443][ T7218] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 180.259457][ T7218] RDX: 000000000000024a RSI: 0000200000000340 RDI: 0000000000000003 [ 180.259470][ T7218] RBP: 00007fd192979090 R08: 0000000000000000 R09: 0000000000000000 [ 180.259485][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.259501][ T7218] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 180.259541][ T7218] [ 180.393721][ T7223] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.467098][ T7226] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input8 [ 183.406958][ T7240] kexec: Could not allocate control_code_buffer [ 184.036572][ T7273] FAULT_INJECTION: forcing a failure. [ 184.036572][ T7273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.051809][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.1.257 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 184.051834][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.051844][ T7273] Call Trace: [ 184.051850][ T7273] [ 184.051857][ T7273] dump_stack_lvl+0x16c/0x1f0 [ 184.051887][ T7273] should_fail_ex+0x512/0x640 [ 184.051916][ T7273] _copy_to_user+0x32/0xd0 [ 184.051945][ T7273] simple_read_from_buffer+0xcb/0x170 [ 184.051969][ T7273] proc_fail_nth_read+0x197/0x270 [ 184.051991][ T7273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.052013][ T7273] ? rw_verify_area+0xcf/0x680 [ 184.052035][ T7273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.052055][ T7273] vfs_read+0x1e4/0xc60 [ 184.052082][ T7273] ? __pfx___mutex_lock+0x10/0x10 [ 184.052108][ T7273] ? __pfx_vfs_read+0x10/0x10 [ 184.052137][ T7273] ? __fget_files+0x20e/0x3c0 [ 184.052166][ T7273] ksys_read+0x12a/0x250 [ 184.052190][ T7273] ? __pfx_ksys_read+0x10/0x10 [ 184.052220][ T7273] do_syscall_64+0xcd/0x490 [ 184.052248][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.052266][ T7273] RIP: 0033:0x7fb8c218d33c [ 184.052281][ T7273] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.052297][ T7273] RSP: 002b:00007fb8c3097030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.052313][ T7273] RAX: ffffffffffffffda RBX: 00007fb8c23b5fa0 RCX: 00007fb8c218d33c [ 184.052324][ T7273] RDX: 000000000000000f RSI: 00007fb8c30970a0 RDI: 0000000000000005 [ 184.052334][ T7273] RBP: 00007fb8c3097090 R08: 0000000000000000 R09: 0000000000000000 [ 184.052344][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.052353][ T7273] R13: 0000000000000000 R14: 00007fb8c23b5fa0 R15: 00007ffd30234ec8 [ 184.052381][ T7273] [ 184.613389][ T7285] FAULT_INJECTION: forcing a failure. [ 184.613389][ T7285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.675777][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.0.255 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 184.675817][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.675832][ T7285] Call Trace: [ 184.675841][ T7285] [ 184.675851][ T7285] dump_stack_lvl+0x16c/0x1f0 [ 184.675897][ T7285] should_fail_ex+0x512/0x640 [ 184.675941][ T7285] _copy_from_user+0x2e/0xd0 [ 184.675985][ T7285] sctp_getsockopt_peer_addr_params+0x109/0xa60 [ 184.676020][ T7285] ? __pfx_sctp_getsockopt_peer_addr_params+0x10/0x10 [ 184.676079][ T7285] ? __local_bh_enable_ip+0xa4/0x120 [ 184.676116][ T7285] sctp_getsockopt+0x2a94/0x6b10 [ 184.676150][ T7285] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 184.676187][ T7285] ? __pfx_sctp_getsockopt+0x10/0x10 [ 184.676238][ T7285] ? __lock_acquire+0xb8a/0x1c90 [ 184.676279][ T7285] ? __pfx___might_resched+0x10/0x10 [ 184.676321][ T7285] ? find_held_lock+0x2b/0x80 [ 184.676346][ T7285] ? __might_fault+0xe3/0x190 [ 184.676383][ T7285] ? __might_fault+0xe3/0x190 [ 184.676427][ T7285] ? __might_fault+0x13b/0x190 [ 184.676474][ T7285] ? sock_common_getsockopt+0x21/0xb0 [ 184.676499][ T7285] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 184.676529][ T7285] do_sock_getsockopt+0x3ff/0x800 [ 184.676561][ T7285] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 184.676587][ T7285] ? __fget_files+0x204/0x3c0 [ 184.676643][ T7285] __sys_getsockopt+0x123/0x1b0 [ 184.676689][ T7285] __x64_sys_getsockopt+0xbd/0x160 [ 184.676725][ T7285] ? do_syscall_64+0x91/0x490 [ 184.676765][ T7285] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.676808][ T7285] do_syscall_64+0xcd/0x490 [ 184.676850][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.676877][ T7285] RIP: 0033:0x7fd191b8e929 [ 184.676899][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.676923][ T7285] RSP: 002b:00007fd192958038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 184.676949][ T7285] RAX: ffffffffffffffda RBX: 00007fd191db6080 RCX: 00007fd191b8e929 [ 184.676966][ T7285] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 184.676981][ T7285] RBP: 00007fd192958090 R08: 0000200000000000 R09: 0000000000000000 [ 184.676997][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.677012][ T7285] R13: 0000000000000000 R14: 00007fd191db6080 R15: 00007ffdcdb7b4a8 [ 184.677048][ T7285] [ 186.119269][ T7306] FAULT_INJECTION: forcing a failure. [ 186.119269][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 186.190501][ T7306] CPU: 0 UID: 0 PID: 7306 Comm: syz.3.263 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 186.190546][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.190564][ T7306] Call Trace: [ 186.190575][ T7306] [ 186.190587][ T7306] dump_stack_lvl+0x16c/0x1f0 [ 186.190639][ T7306] should_fail_ex+0x512/0x640 [ 186.190681][ T7306] ? fs_reclaim_acquire+0xae/0x150 [ 186.190719][ T7306] ? tomoyo_encode2+0x100/0x3e0 [ 186.190757][ T7306] should_failslab+0xc2/0x120 [ 186.190786][ T7306] __kmalloc_noprof+0xd2/0x510 [ 186.190829][ T7306] ? d_absolute_path+0x136/0x1a0 [ 186.190868][ T7306] tomoyo_encode2+0x100/0x3e0 [ 186.190916][ T7306] tomoyo_encode+0x29/0x50 [ 186.190955][ T7306] tomoyo_realpath_from_path+0x18f/0x6e0 [ 186.191011][ T7306] tomoyo_mkdev_perm+0x22b/0x570 [ 186.191045][ T7306] ? tomoyo_mkdev_perm+0x217/0x570 [ 186.191083][ T7306] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 186.191131][ T7306] ? find_held_lock+0x2b/0x80 [ 186.191188][ T7306] ? __pfx_current_check_access_path+0x10/0x10 [ 186.191222][ T7306] ? simple_lookup+0x12c/0x180 [ 186.191262][ T7306] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 186.191295][ T7306] ? lookup_dcache+0x66/0x170 [ 186.191334][ T7306] tomoyo_path_mknod+0x12a/0x190 [ 186.191381][ T7306] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 186.191440][ T7306] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.191494][ T7306] security_path_mknod+0x161/0x310 [ 186.191533][ T7306] do_mknodat+0x239/0x5d0 [ 186.191577][ T7306] ? __pfx_do_mknodat+0x10/0x10 [ 186.191613][ T7306] ? getname_flags.part.0+0x1c5/0x550 [ 186.191651][ T7306] __x64_sys_mknod+0x87/0xb0 [ 186.191692][ T7306] do_syscall_64+0xcd/0x490 [ 186.191735][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.191763][ T7306] RIP: 0033:0x7fa0a558e929 [ 186.191785][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.191809][ T7306] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 186.191828][ T7306] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 186.191840][ T7306] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 186.191850][ T7306] RBP: 00007fa0a5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 186.191859][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.191869][ T7306] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 186.191891][ T7306] [ 186.205202][ T7306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.528194][ T7320] ALSA: mixer_oss: invalid OSS volume '0' [ 187.579903][ T7320] ALSA: mixer_oss: invalid OSS volume '' [ 187.678437][ T7322] FAULT_INJECTION: forcing a failure. [ 187.678437][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 187.763141][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.3.265 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 187.763187][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.763205][ T7322] Call Trace: [ 187.763215][ T7322] [ 187.763228][ T7322] dump_stack_lvl+0x16c/0x1f0 [ 187.763280][ T7322] should_fail_ex+0x512/0x640 [ 187.763323][ T7322] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 187.763374][ T7322] should_failslab+0xc2/0x120 [ 187.763415][ T7322] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 187.763459][ T7322] ? rcu_is_watching+0x12/0xc0 [ 187.763490][ T7322] ? prepare_creds+0x2c/0x7d0 [ 187.763542][ T7322] prepare_creds+0x2c/0x7d0 [ 187.763591][ T7322] cap_task_prctl+0x46a/0xa80 [ 187.763626][ T7322] security_task_prctl+0xbf/0x160 [ 187.763673][ T7322] __do_sys_prctl+0xaa/0x24c0 [ 187.763724][ T7322] ? __pfx___do_sys_prctl+0x10/0x10 [ 187.763784][ T7322] do_syscall_64+0xcd/0x490 [ 187.763833][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.763861][ T7322] RIP: 0033:0x7fa0a558e929 [ 187.763883][ T7322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.763907][ T7322] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 187.763934][ T7322] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 187.763952][ T7322] RDX: 0000000100000000 RSI: 0000000000000005 RDI: 000001000000001c [ 187.763968][ T7322] RBP: 00007fa0a5610b39 R08: 0000003fffffffff R09: 0000000000000000 [ 187.763985][ T7322] R10: 0000000000008784 R11: 0000000000000246 R12: 0000000000000000 [ 187.764001][ T7322] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 187.764038][ T7322] [ 188.557060][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'. [ 188.970367][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.269'. [ 189.656319][ T7360] capability: warning: `syz.2.273' uses 32-bit capabilities (legacy support in use) [ 190.189438][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 190.409122][ T7387] __vm_enough_memory: pid: 7387, comm: syz.0.278, bytes: 4398046511104 not enough memory for the allocation [ 190.779830][ T7398] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 192.262401][ T7418] Setting dangerous option i915.mitigations - tainting kernel [ 192.450173][ T7424] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 192.519988][ T7428] FAULT_INJECTION: forcing a failure. [ 192.519988][ T7428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.588694][ T7428] CPU: 0 UID: 0 PID: 7428 Comm: syz.0.285 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 192.588741][ T7428] Tainted: [U]=USER [ 192.588750][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.588765][ T7428] Call Trace: [ 192.588774][ T7428] [ 192.588785][ T7428] dump_stack_lvl+0x16c/0x1f0 [ 192.588831][ T7428] should_fail_ex+0x512/0x640 [ 192.588875][ T7428] _copy_to_user+0x32/0xd0 [ 192.588919][ T7428] simple_read_from_buffer+0xcb/0x170 [ 192.588957][ T7428] proc_fail_nth_read+0x197/0x270 [ 192.588991][ T7428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.589029][ T7428] ? rw_verify_area+0xcf/0x680 [ 192.589065][ T7428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.589105][ T7428] vfs_read+0x1e4/0xc60 [ 192.589151][ T7428] ? __pfx___mutex_lock+0x10/0x10 [ 192.589194][ T7428] ? __pfx_vfs_read+0x10/0x10 [ 192.589245][ T7428] ? __fget_files+0x20e/0x3c0 [ 192.589304][ T7428] ksys_read+0x12a/0x250 [ 192.589341][ T7428] ? __pfx_ksys_read+0x10/0x10 [ 192.589385][ T7428] do_syscall_64+0xcd/0x490 [ 192.589427][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.589455][ T7428] RIP: 0033:0x7fd191b8d33c [ 192.589478][ T7428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.589504][ T7428] RSP: 002b:00007fd192958030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.589531][ T7428] RAX: ffffffffffffffda RBX: 00007fd191db6080 RCX: 00007fd191b8d33c [ 192.589550][ T7428] RDX: 000000000000000f RSI: 00007fd1929580a0 RDI: 0000000000000005 [ 192.589566][ T7428] RBP: 00007fd192958090 R08: 0000000000000000 R09: 0000000000000000 [ 192.589583][ T7428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.589606][ T7428] R13: 0000000000000000 R14: 00007fd191db6080 R15: 00007ffdcdb7b4a8 [ 192.589645][ T7428] [ 194.503680][ T7031] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 194.503713][ T7031] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 194.518919][ T7031] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 194.518960][ T7031] Bluetooth: hci3: adv larger than maximum supported [ 194.528262][ T7031] Bluetooth: hci3: adv larger than maximum supported [ 194.535043][ T7031] Bluetooth: hci3: Malformed LE Event: 0x0d [ 195.226482][ T7487] netlink: 330 bytes leftover after parsing attributes in process `syz.1.295'. [ 195.244529][ T7487] ›: renamed from hsr0 (while UP) [ 196.479736][ T7527] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 196.589955][ T7527] input: failed to attach handler evdev to device input10, error: -4 [ 196.724335][ T7532] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 198.339504][ T7566] FAULT_INJECTION: forcing a failure. [ 198.339504][ T7566] name failslab, interval 1, probability 0, space 0, times 0 [ 198.352773][ T7566] CPU: 1 UID: 0 PID: 7566 Comm: syz.1.312 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 198.352807][ T7566] Tainted: [U]=USER [ 198.352813][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.352823][ T7566] Call Trace: [ 198.352829][ T7566] [ 198.352836][ T7566] dump_stack_lvl+0x16c/0x1f0 [ 198.352865][ T7566] should_fail_ex+0x512/0x640 [ 198.352890][ T7566] ? __kmalloc_noprof+0xbf/0x510 [ 198.352919][ T7566] ? cache_create_net+0x9d/0x220 [ 198.352943][ T7566] should_failslab+0xc2/0x120 [ 198.352960][ T7566] __kmalloc_noprof+0xd2/0x510 [ 198.352990][ T7566] cache_create_net+0x9d/0x220 [ 198.353019][ T7566] nfsd_idmap_init+0x11f/0x250 [ 198.353042][ T7566] ? __pfx_nfsd_net_init+0x10/0x10 [ 198.353060][ T7566] nfsd_net_init+0x69/0x3d0 [ 198.353079][ T7566] ? __pfx_nfsd_net_init+0x10/0x10 [ 198.353098][ T7566] ops_init+0x1df/0x5f0 [ 198.353128][ T7566] setup_net+0x1ff/0x510 [ 198.353153][ T7566] ? lockdep_init_map_type+0x5c/0x280 [ 198.353179][ T7566] ? __pfx_setup_net+0x10/0x10 [ 198.353208][ T7566] ? debug_mutex_init+0x37/0x70 [ 198.353228][ T7566] copy_net_ns+0x2a6/0x5f0 [ 198.353247][ T7566] create_new_namespaces+0x3ea/0xa90 [ 198.353276][ T7566] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 198.353298][ T7566] ksys_unshare+0x45b/0xa40 [ 198.353323][ T7566] ? __pfx_ksys_unshare+0x10/0x10 [ 198.353347][ T7566] ? xfd_validate_state+0x61/0x180 [ 198.353377][ T7566] __x64_sys_unshare+0x31/0x40 [ 198.353400][ T7566] do_syscall_64+0xcd/0x490 [ 198.353427][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.353445][ T7566] RIP: 0033:0x7fb8c218e929 [ 198.353459][ T7566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.353476][ T7566] RSP: 002b:00007fb8c3097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 198.353493][ T7566] RAX: ffffffffffffffda RBX: 00007fb8c23b5fa0 RCX: 00007fb8c218e929 [ 198.353504][ T7566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 198.353521][ T7566] RBP: 00007fb8c2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 198.353531][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.353541][ T7566] R13: 0000000000000000 R14: 00007fb8c23b5fa0 R15: 00007ffd30234ec8 [ 198.353562][ T7566] [ 198.778348][ T7571] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 198.929821][ T7582] sysfs_service_op_store: Client not running :-5: [ 199.062745][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 199.315662][ T7582] sysfs_service_op_show: Client not running :-5: [ 199.704764][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.717995][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.240960][ T7636] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 202.931491][ T7645] can: request_module (can-proto-0) failed. [ 203.105082][ T7658] random: crng reseeded on system resumption [ 203.837644][ T7666] mkiss: ax0: crc mode is auto. [ 204.553793][ T7675] FAULT_INJECTION: forcing a failure. [ 204.553793][ T7675] name failslab, interval 1, probability 0, space 0, times 0 [ 204.567491][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.3.338 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 204.567539][ T7675] Tainted: [U]=USER [ 204.567549][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.567565][ T7675] Call Trace: [ 204.567576][ T7675] [ 204.567587][ T7675] dump_stack_lvl+0x16c/0x1f0 [ 204.567638][ T7675] should_fail_ex+0x512/0x640 [ 204.567679][ T7675] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 204.567725][ T7675] should_failslab+0xc2/0x120 [ 204.567752][ T7675] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 204.567793][ T7675] ? lockdep_init_map_type+0x5c/0x280 [ 204.567833][ T7675] ? fcntl_setlease+0x389/0x5a0 [ 204.567869][ T7675] fcntl_setlease+0x389/0x5a0 [ 204.567900][ T7675] ? __pfx_fcntl_setlease+0x10/0x10 [ 204.567953][ T7675] do_fcntl+0x751/0x15a0 [ 204.567983][ T7675] ? __pfx_do_fcntl+0x10/0x10 [ 204.568023][ T7675] ? tomoyo_file_fcntl+0x6c/0xc0 [ 204.568073][ T7675] __x64_sys_fcntl+0x163/0x200 [ 204.568109][ T7675] do_syscall_64+0xcd/0x490 [ 204.568155][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.568185][ T7675] RIP: 0033:0x7fa0a558e929 [ 204.568219][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.568247][ T7675] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 204.568275][ T7675] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 204.568294][ T7675] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000004 [ 204.568311][ T7675] RBP: 00007fa0a5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 204.568329][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.568345][ T7675] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 204.568382][ T7675] [ 205.473286][ T30] audit: type=1800 audit(2147483652.112:3): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.341" name="features" dev="configfs" ino=14556 res=0 errno=0 [ 207.307586][ T30] audit: type=1804 audit(2147483654.043:4): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.353" name="/newroot/86/file0" dev="tmpfs" ino=465 res=1 errno=0 [ 207.703617][ T7763] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 209.126003][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 209.175677][ T7787] bond0: (slave bond_slave_0): Releasing backup interface [ 209.322782][ T7780] capability: warning: `syz.2.362' uses deprecated v2 capabilities in a way that may be insecure [ 209.432982][ T7803] ubi: mtd0 is already attached to ubi0 [ 211.869435][ T7866] binder: 7864:7866 ioctl 541b 38 returned -22 [ 212.857455][ T7887] FAULT_INJECTION: forcing a failure. [ 212.857455][ T7887] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.871374][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.0.384 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 212.871421][ T7887] Tainted: [U]=USER [ 212.871430][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.871448][ T7887] Call Trace: [ 212.871458][ T7887] [ 212.871469][ T7887] dump_stack_lvl+0x16c/0x1f0 [ 212.871517][ T7887] should_fail_ex+0x512/0x640 [ 212.871564][ T7887] should_fail_alloc_page+0xe7/0x130 [ 212.871597][ T7887] prepare_alloc_pages+0x3c2/0x610 [ 212.871634][ T7887] ? rcu_is_watching+0x12/0xc0 [ 212.871672][ T7887] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 212.871719][ T7887] ? mark_held_locks+0x49/0x80 [ 212.871758][ T7887] ? finish_task_switch.isra.0+0x221/0xc10 [ 212.871793][ T7887] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 212.871827][ T7887] ? rcu_is_watching+0x12/0xc0 [ 212.871862][ T7887] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 212.871905][ T7887] ? __lock_acquire+0x622/0x1c90 [ 212.871958][ T7887] ? __lock_acquire+0x622/0x1c90 [ 212.871998][ T7887] ? __lock_acquire+0x622/0x1c90 [ 212.872038][ T7887] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.872086][ T7887] ? policy_nodemask+0xea/0x4e0 [ 212.872119][ T7887] alloc_pages_mpol+0x1fb/0x550 [ 212.872150][ T7887] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 212.872192][ T7887] folio_alloc_mpol_noprof+0x36/0x2f0 [ 212.872237][ T7887] vma_alloc_folio_noprof+0xed/0x1e0 [ 212.872272][ T7887] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 212.872306][ T7887] ? find_held_lock+0x2b/0x80 [ 212.872338][ T7887] ? __handle_mm_fault+0x1092/0x5490 [ 212.872386][ T7887] __handle_mm_fault+0x2f21/0x5490 [ 212.872441][ T7887] ? __pfx___handle_mm_fault+0x10/0x10 [ 212.872481][ T7887] ? __pte_offset_map_lock+0x174/0x310 [ 212.872514][ T7887] ? find_held_lock+0x2b/0x80 [ 212.872542][ T7887] ? find_held_lock+0x2b/0x80 [ 212.872586][ T7887] ? follow_page_pte+0x3af/0x14c0 [ 212.872634][ T7887] handle_mm_fault+0x589/0xd10 [ 212.872686][ T7887] __get_user_pages+0x589/0x3b80 [ 212.872735][ T7887] ? __pfx_mt_find+0x10/0x10 [ 212.872765][ T7887] ? __pfx___get_user_pages+0x10/0x10 [ 212.872820][ T7887] populate_vma_page_range+0x278/0x3a0 [ 212.872860][ T7887] ? __pfx_populate_vma_page_range+0x10/0x10 [ 212.872896][ T7887] ? __pfx_find_vma_intersection+0x10/0x10 [ 212.872933][ T7887] ? do_mmap+0x69c/0x1210 [ 212.872973][ T7887] __mm_populate+0x1d8/0x380 [ 212.873013][ T7887] ? __pfx___mm_populate+0x10/0x10 [ 212.873053][ T7887] ? up_write+0x1b2/0x520 [ 212.873104][ T7887] vm_mmap_pgoff+0x362/0x450 [ 212.873143][ T7887] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 212.873186][ T7887] ? __x64_sys_futex+0x1e0/0x4c0 [ 212.873221][ T7887] ? __x64_sys_futex+0x1e9/0x4c0 [ 212.873287][ T7887] ksys_mmap_pgoff+0x7d/0x5c0 [ 212.873319][ T7887] ? xfd_validate_state+0x61/0x180 [ 212.873367][ T7887] __x64_sys_mmap+0x125/0x190 [ 212.873415][ T7887] do_syscall_64+0xcd/0x490 [ 212.873464][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.873494][ T7887] RIP: 0033:0x7fd191b8e929 [ 212.873519][ T7887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.873547][ T7887] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 212.873575][ T7887] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 212.873594][ T7887] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 212.873611][ T7887] RBP: 00007fd191c10b39 R08: 0000000000000002 R09: 0000000000008000 [ 212.873629][ T7887] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 212.873646][ T7887] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 212.873686][ T7887] [ 215.237764][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 216.269560][ T7928] rtc_cmos 00:00: in use; can't configure [ 216.384857][ T7933] rtc_cmos 00:00: in use; can't configure [ 216.745220][ T7936] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 217.289737][ T7956] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 221.460201][ T8033] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 222.019152][ T8034] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 224.301455][ T8097] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2048.0.1), cmd(1) [ 226.025604][ T8152] ubi: mtd0 is already attached to ubi0 [ 226.251242][ T8152] Loading of unsigned module is rejected [ 228.779559][ T8209] snd_aloop snd_aloop.0: control 16781581:65539:6:é'x?F¢é/èìzFË·fCªáª:7 is already present [ 229.902059][ T8236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 230.906529][ T8165] kexec: Could not allocate control_code_buffer [ 231.290625][ T8257] zero sized request [ 233.301165][ T8281] FAULT_INJECTION: forcing a failure. [ 233.301165][ T8281] name failslab, interval 1, probability 0, space 0, times 0 [ 233.409697][ T8281] CPU: 1 UID: 0 PID: 8281 Comm: syz.3.464 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 233.409729][ T8281] Tainted: [U]=USER [ 233.409735][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.409745][ T8281] Call Trace: [ 233.409751][ T8281] [ 233.409758][ T8281] dump_stack_lvl+0x16c/0x1f0 [ 233.409790][ T8281] should_fail_ex+0x512/0x640 [ 233.409815][ T8281] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 233.409846][ T8281] should_failslab+0xc2/0x120 [ 233.409863][ T8281] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 233.409891][ T8281] ? lockdep_hardirqs_on+0x7c/0x110 [ 233.409916][ T8281] ? fib_notifier_ops_register+0x32/0x270 [ 233.409947][ T8281] kmemdup_noprof+0x29/0x60 [ 233.409975][ T8281] fib_notifier_ops_register+0x32/0x270 [ 233.410011][ T8281] fib4_notifier_init+0x4f/0xd0 [ 233.410029][ T8281] fib_net_init+0xbf/0x3f0 [ 233.410047][ T8281] ? __pfx___register_sysctl_table+0x10/0x10 [ 233.410076][ T8281] ? __pfx_fib_net_init+0x10/0x10 [ 233.410094][ T8281] ? lockdep_init_map_type+0x5c/0x280 [ 233.410120][ T8281] ? do_init_timer+0xc9/0x110 [ 233.410142][ T8281] ? devinet_init_net+0x5c2/0x910 [ 233.410164][ T8281] ? __pfx_fib_net_init+0x10/0x10 [ 233.410181][ T8281] ops_init+0x1df/0x5f0 [ 233.410210][ T8281] setup_net+0x1ff/0x510 [ 233.410235][ T8281] ? lockdep_init_map_type+0x5c/0x280 [ 233.410260][ T8281] ? __pfx_setup_net+0x10/0x10 [ 233.410289][ T8281] ? debug_mutex_init+0x37/0x70 [ 233.410309][ T8281] copy_net_ns+0x2a6/0x5f0 [ 233.410328][ T8281] create_new_namespaces+0x3ea/0xa90 [ 233.410353][ T8281] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 233.410375][ T8281] ksys_unshare+0x45b/0xa40 [ 233.410399][ T8281] ? __pfx_ksys_unshare+0x10/0x10 [ 233.410424][ T8281] ? xfd_validate_state+0x61/0x180 [ 233.410454][ T8281] __x64_sys_unshare+0x31/0x40 [ 233.410477][ T8281] do_syscall_64+0xcd/0x490 [ 233.410504][ T8281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.410522][ T8281] RIP: 0033:0x7fa0a558e929 [ 233.410537][ T8281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.410553][ T8281] RSP: 002b:00007fa0a637e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 233.410570][ T8281] RAX: ffffffffffffffda RBX: 00007fa0a57b6080 RCX: 00007fa0a558e929 [ 233.410581][ T8281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 233.410591][ T8281] RBP: 00007fa0a5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 233.410601][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.410610][ T8281] R13: 0000000000000000 R14: 00007fa0a57b6080 R15: 00007ffeabf5d998 [ 233.410631][ T8281] [ 234.124707][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 235.038206][ T8114] Process accounting resumed [ 237.122885][ T8339] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 237.284343][ T7031] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 237.961665][ T8353] snd_aloop snd_aloop.0: control 1:6:-2147483647:¢¸è_ÅheºRŸª:0 is already present [ 238.167092][ T8340] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 238.571962][ T8364] netlink: 334 bytes leftover after parsing attributes in process `syz.1.482'. [ 238.624326][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 239.478441][ T8350] kexec: Could not allocate control_code_buffer [ 240.298268][ T8388] ubi: mtd0 is already attached to ubi0 [ 242.367813][ T8430] FAULT_INJECTION: forcing a failure. [ 242.367813][ T8430] name failslab, interval 1, probability 0, space 0, times 0 [ 242.381740][ T8430] CPU: 1 UID: 0 PID: 8430 Comm: syz.0.499 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 242.381792][ T8430] Tainted: [U]=USER [ 242.381801][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.381817][ T8430] Call Trace: [ 242.381826][ T8430] [ 242.381837][ T8430] dump_stack_lvl+0x16c/0x1f0 [ 242.381895][ T8430] should_fail_ex+0x512/0x640 [ 242.381933][ T8430] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 242.381981][ T8430] should_failslab+0xc2/0x120 [ 242.382010][ T8430] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 242.382056][ T8430] ? copy_pid_ns+0x2bf/0xce0 [ 242.382091][ T8430] copy_pid_ns+0x2bf/0xce0 [ 242.382123][ T8430] ? __pfx_copy_pid_ns+0x10/0x10 [ 242.382157][ T8430] ? copy_mnt_ns+0xac/0xac0 [ 242.382200][ T8430] ? trace_kmem_cache_alloc+0x28/0xc0 [ 242.382228][ T8430] ? trace_cap_capable+0x18d/0x200 [ 242.382257][ T8430] ? copy_ipcs+0xb6/0x610 [ 242.382292][ T8430] create_new_namespaces+0x2aa/0xa90 [ 242.382333][ T8430] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 242.382369][ T8430] ksys_unshare+0x45b/0xa40 [ 242.382409][ T8430] ? __pfx_ksys_unshare+0x10/0x10 [ 242.382451][ T8430] ? xfd_validate_state+0x61/0x180 [ 242.382502][ T8430] __x64_sys_unshare+0x31/0x40 [ 242.382539][ T8430] do_syscall_64+0xcd/0x490 [ 242.382587][ T8430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.382615][ T8430] RIP: 0033:0x7fd191b8e929 [ 242.382640][ T8430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.382667][ T8430] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 242.382696][ T8430] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 242.382716][ T8430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 242.382732][ T8430] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 242.382749][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.382764][ T8430] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 242.382803][ T8430] [ 242.828983][ T8430] syz.0.499: vmalloc error: size 507904, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 242.895172][ T8430] CPU: 0 UID: 0 PID: 8430 Comm: syz.0.499 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 242.895240][ T8430] Tainted: [U]=USER [ 242.895250][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.895265][ T8430] Call Trace: [ 242.895275][ T8430] [ 242.895286][ T8430] dump_stack_lvl+0x16c/0x1f0 [ 242.895335][ T8430] warn_alloc+0x248/0x3a0 [ 242.895382][ T8430] ? __pfx_warn_alloc+0x10/0x10 [ 242.895431][ T8430] ? alloc_pages_mpol+0x25a/0x550 [ 242.895462][ T8430] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 242.895495][ T8430] ? trace_kmalloc+0x2b/0xd0 [ 242.895539][ T8430] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 242.895591][ T8430] ? __snd_dma_alloc_pages+0x50/0x90 [ 242.895643][ T8430] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 242.895689][ T8430] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 242.895740][ T8430] ? __snd_dma_alloc_pages+0x50/0x90 [ 242.895787][ T8430] __vmalloc_node_noprof+0xad/0xf0 [ 242.895824][ T8430] ? __snd_dma_alloc_pages+0x50/0x90 [ 242.895860][ T8430] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 242.895904][ T8430] __snd_dma_alloc_pages+0x50/0x90 [ 242.895943][ T8430] snd_dma_alloc_dir_pages+0x151/0x240 [ 242.895985][ T8430] do_alloc_pages+0x115/0x280 [ 242.896026][ T8430] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 242.896070][ T8430] snd_pcm_hw_params+0x15e1/0x1b40 [ 242.896112][ T8430] ? do_raw_spin_unlock+0x172/0x230 [ 242.896141][ T8430] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 242.896176][ T8430] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.896232][ T8430] ? mark_held_locks+0x49/0x80 [ 242.896270][ T8430] ? _raw_spin_unlock_irq+0x23/0x50 [ 242.896308][ T8430] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.896356][ T8430] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 242.896394][ T8430] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 242.896461][ T8430] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 242.896528][ T8430] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 242.896571][ T8430] snd_pcm_oss_set_channels+0x23a/0x370 [ 242.896606][ T8430] ? __pfx_snd_pcm_oss_set_channels+0x10/0x10 [ 242.896637][ T8430] ? __might_fault+0x13b/0x190 [ 242.896692][ T8430] snd_pcm_oss_ioctl+0x219d/0x37a0 [ 242.896723][ T8430] ? find_held_lock+0x2b/0x80 [ 242.896749][ T8430] ? hook_file_ioctl_common+0x145/0x410 [ 242.896783][ T8430] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 242.896820][ T8430] ? __fget_files+0x20e/0x3c0 [ 242.896863][ T8430] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 242.896896][ T8430] __x64_sys_ioctl+0x18b/0x210 [ 242.896930][ T8430] do_syscall_64+0xcd/0x490 [ 242.896972][ T8430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.896999][ T8430] RIP: 0033:0x7fd191b8e929 [ 242.897030][ T8430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.897055][ T8430] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.897091][ T8430] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 242.897109][ T8430] RDX: 00002000000001c0 RSI: 00000000c0045006 RDI: 0000000000000005 [ 242.897126][ T8430] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 242.897141][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.897157][ T8430] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 242.897221][ T8430] [ 242.897234][ T8430] Mem-Info: [ 243.271305][ T8430] active_anon:9369 inactive_anon:0 isolated_anon:0 [ 243.271305][ T8430] active_file:15022 inactive_file:41704 isolated_file:0 [ 243.271305][ T8430] unevictable:768 dirty:613 writeback:0 [ 243.271305][ T8430] slab_reclaimable:10436 slab_unreclaimable:94194 [ 243.271305][ T8430] mapped:26069 shmem:1409 pagetables:1167 [ 243.271305][ T8430] sec_pagetables:0 bounce:0 [ 243.271305][ T8430] kernel_misc_reclaimable:0 [ 243.271305][ T8430] free:1299645 free_pcp:32339 free_cma:0 [ 243.379214][ T8430] Node 0 active_anon:37776kB inactive_anon:0kB active_file:60088kB inactive_file:166612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104676kB dirty:2452kB writeback:0kB shmem:4400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11396kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.454807][ T8430] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.486292][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.532250][ T8430] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.561548][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.611195][ T8430] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 243.631773][ T8430] Node 0 DMA32 free:1317388kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35132kB inactive_anon:0kB active_file:60088kB inactive_file:165284kB unevictable:1536kB writepending:2452kB present:3129332kB managed:2540344kB mlocked:0kB bounce:0kB free_pcp:59848kB local_pcp:22924kB free_cma:0kB [ 243.664410][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.737353][ T8430] lowmem_reserve[]: 0 0 1 1 1 [ 243.753622][ T8430] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 243.783003][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.838559][ T8430] lowmem_reserve[]: 0 0 0 0 0 [ 243.844813][ T8430] Node 1 Normal free:3848080kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:70428kB local_pcp:32048kB free_cma:0kB [ 243.884236][ T8430] lowmem_reserve[]: 0 0 0 0 0 [ 243.987738][ T8430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 244.001412][ T8430] Node 0 DMA32: 1050*4kB (ME) 1181*8kB (UME) 1024*16kB (ME) 764*32kB (ME) 424*64kB (M) 163*128kB (ME) 111*256kB (UM) 54*512kB (UM) 46*1024kB (UME) 15*2048kB (UM) 258*4096kB (UM) = 1293136kB [ 244.167140][ T8430] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 244.311174][ T8430] Node 1 Normal: 7*4kB (UME) 8*8kB (UME) 14*16kB (UME) 24*32kB (UME) 13*64kB (UME) 7*128kB (UME) 9*256kB (UM) 9*512kB (UM) 1*1024kB (U) 1*2048kB (E) 937*4096kB (UM) = 3850748kB [ 244.335770][ T8430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.345697][ T8430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.355223][ T8430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.369010][ T8430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.378607][ T8430] 58547 total pagecache pages [ 244.421164][ T8430] 0 pages in swap cache [ 244.440716][ T8430] Free swap = 124996kB [ 244.445671][ T8430] Total swap = 124996kB [ 244.763627][ T8430] 2097051 pages RAM [ 244.788203][ T8430] 0 pages HighMem/MovableOnly [ 244.810477][ T8430] 429987 pages reserved [ 244.814919][ T8430] 0 pages cma reserved [ 245.775831][ T8471] HfR: entered promiscuous mode [ 245.816349][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'. [ 245.943104][ T8471] HfR: left promiscuous mode [ 246.358600][ T8480] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[8480] [ 246.843886][ T8472] HfR: entered promiscuous mode [ 247.252104][ T8439] kexec: Could not allocate control_code_buffer [ 247.295702][ T8490] Loading of unsigned module is rejected [ 247.904123][ T8496] FAULT_INJECTION: forcing a failure. [ 247.904123][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 247.930643][ T8496] CPU: 1 UID: 0 PID: 8496 Comm: syz.2.512 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 247.930690][ T8496] Tainted: [U]=USER [ 247.930699][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.930714][ T8496] Call Trace: [ 247.930722][ T8496] [ 247.930732][ T8496] dump_stack_lvl+0x16c/0x1f0 [ 247.930771][ T8496] should_fail_ex+0x512/0x640 [ 247.930806][ T8496] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 247.930845][ T8496] should_failslab+0xc2/0x120 [ 247.930869][ T8496] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 247.930905][ T8496] ? fcntl_setlease+0xc6/0x5a0 [ 247.930936][ T8496] fcntl_setlease+0xc6/0x5a0 [ 247.930963][ T8496] ? __pfx_fcntl_setlease+0x10/0x10 [ 247.931005][ T8496] do_fcntl+0x751/0x15a0 [ 247.931030][ T8496] ? __pfx_do_fcntl+0x10/0x10 [ 247.931062][ T8496] ? tomoyo_file_fcntl+0x6c/0xc0 [ 247.931104][ T8496] __x64_sys_fcntl+0x163/0x200 [ 247.931133][ T8496] do_syscall_64+0xcd/0x490 [ 247.931180][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.931206][ T8496] RIP: 0033:0x7f032298e929 [ 247.931227][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.931249][ T8496] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 247.931272][ T8496] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 247.931288][ T8496] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000004 [ 247.931301][ T8496] RBP: 00007f0322a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 247.931315][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.931329][ T8496] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 247.931359][ T8496] [ 248.246305][ T8505] block nbd0: Unsupported socket: shutdown callout must be supported. [ 248.505722][ T8508] FAULT_INJECTION: forcing a failure. [ 248.505722][ T8508] name failslab, interval 1, probability 0, space 0, times 0 [ 248.523524][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.0.515 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 248.523573][ T8508] Tainted: [U]=USER [ 248.523583][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.523599][ T8508] Call Trace: [ 248.523608][ T8508] [ 248.523619][ T8508] dump_stack_lvl+0x16c/0x1f0 [ 248.523666][ T8508] should_fail_ex+0x512/0x640 [ 248.523701][ T8508] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 248.523743][ T8508] should_failslab+0xc2/0x120 [ 248.523767][ T8508] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 248.523805][ T8508] ? ptlock_alloc+0x1f/0x70 [ 248.523841][ T8508] ptlock_alloc+0x1f/0x70 [ 248.523873][ T8508] pte_alloc_one+0x82/0x3a0 [ 248.523897][ T8508] __pte_alloc+0x6d/0x3c0 [ 248.523920][ T8508] ? __pfx___pte_alloc+0x10/0x10 [ 248.523944][ T8508] ? _raw_spin_unlock+0x28/0x50 [ 248.523975][ T8508] ? __pmd_alloc+0x3fb/0x930 [ 248.524008][ T8508] __handle_mm_fault+0x4358/0x5490 [ 248.524051][ T8508] ? __pfx___handle_mm_fault+0x10/0x10 [ 248.524120][ T8508] handle_mm_fault+0x589/0xd10 [ 248.524178][ T8508] __get_user_pages+0x589/0x3b80 [ 248.524225][ T8508] ? __pfx_mt_find+0x10/0x10 [ 248.524253][ T8508] ? __pfx___get_user_pages+0x10/0x10 [ 248.524307][ T8508] populate_vma_page_range+0x278/0x3a0 [ 248.524345][ T8508] ? __pfx_populate_vma_page_range+0x10/0x10 [ 248.524376][ T8508] ? __pfx_find_vma_intersection+0x10/0x10 [ 248.524411][ T8508] ? do_mmap+0x69c/0x1210 [ 248.524448][ T8508] __mm_populate+0x1d8/0x380 [ 248.524484][ T8508] ? __pfx___mm_populate+0x10/0x10 [ 248.524520][ T8508] ? up_write+0x1b2/0x520 [ 248.524567][ T8508] vm_mmap_pgoff+0x362/0x450 [ 248.524603][ T8508] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 248.524644][ T8508] ? __x64_sys_futex+0x1e0/0x4c0 [ 248.524679][ T8508] ? __x64_sys_futex+0x1e9/0x4c0 [ 248.524720][ T8508] ksys_mmap_pgoff+0x7d/0x5c0 [ 248.524751][ T8508] ? xfd_validate_state+0x61/0x180 [ 248.524788][ T8508] ? __pfx_ksys_write+0x10/0x10 [ 248.524835][ T8508] __x64_sys_mmap+0x125/0x190 [ 248.524882][ T8508] do_syscall_64+0xcd/0x490 [ 248.524926][ T8508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.524956][ T8508] RIP: 0033:0x7fd191b8e929 [ 248.524980][ T8508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.525006][ T8508] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 248.525034][ T8508] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 248.525052][ T8508] RDX: 0000001000000004 RSI: 0000000000000008 RDI: 0000000000000000 [ 248.525068][ T8508] RBP: 00007fd191c10b39 R08: 0000000000000002 R09: 0000000000008000 [ 248.525085][ T8508] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 248.525101][ T8508] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 248.525214][ T8508] [ 248.811185][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.663479][ T8523] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 249.974218][ T8531] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 252.224868][ T8594] FAULT_INJECTION: forcing a failure. [ 252.224868][ T8594] name fail_futex, interval 1, probability 0, space 0, times 0 [ 252.271778][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz.3.535 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 252.271836][ T8594] Tainted: [U]=USER [ 252.271845][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.271859][ T8594] Call Trace: [ 252.271865][ T8594] [ 252.271872][ T8594] dump_stack_lvl+0x16c/0x1f0 [ 252.271902][ T8594] should_fail_ex+0x512/0x640 [ 252.271932][ T8594] get_futex_key+0x1d0/0x1540 [ 252.271957][ T8594] ? __pfx_get_futex_key+0x10/0x10 [ 252.271977][ T8594] ? kfree+0x24f/0x4d0 [ 252.272002][ T8594] ? __futex_hash.constprop.0+0x1e9/0x440 [ 252.272024][ T8594] futex_wake+0xe7/0x4e0 [ 252.272049][ T8594] ? __lock_acquire+0x622/0x1c90 [ 252.272073][ T8594] ? __pfx_futex_wake+0x10/0x10 [ 252.272107][ T8594] do_futex+0x1e3/0x350 [ 252.272128][ T8594] ? __pfx_do_futex+0x10/0x10 [ 252.272151][ T8594] ? __fget_files+0x20e/0x3c0 [ 252.272177][ T8594] __x64_sys_futex+0x1e0/0x4c0 [ 252.272202][ T8594] ? __pfx___x64_sys_futex+0x10/0x10 [ 252.272224][ T8594] ? do_getpgid+0x101/0x2e0 [ 252.272246][ T8594] do_syscall_64+0xcd/0x490 [ 252.272273][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.272292][ T8594] RIP: 0033:0x7fa0a558e929 [ 252.272307][ T8594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.272323][ T8594] RSP: 002b:00007fa0a637e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 252.272340][ T8594] RAX: ffffffffffffffda RBX: 00007fa0a57b6088 RCX: 00007fa0a558e929 [ 252.272351][ T8594] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0a57b608c [ 252.272361][ T8594] RBP: 00007fa0a57b6080 R08: 00007fa0a63a0000 R09: 0000000000000000 [ 252.272371][ T8594] R10: 0000000000000217 R11: 0000000000000246 R12: 00007fa0a57b608c [ 252.272381][ T8594] R13: 0000000000000000 R14: 00007ffeabf5d8b0 R15: 00007ffeabf5d998 [ 252.272401][ T8594] [ 253.467146][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 253.477457][ T8617] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 3 [ 254.722227][ T8647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.548'. [ 255.795081][ T8668] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 255.889249][ T8669] ubi: mtd0 is already attached to ubi0 [ 256.671322][ T8670] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 257.996489][ T8702] FAULT_INJECTION: forcing a failure. [ 257.996489][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 258.038035][ T8702] CPU: 0 UID: 0 PID: 8702 Comm: syz.2.557 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 258.038089][ T8702] Tainted: [U]=USER [ 258.038099][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.038116][ T8702] Call Trace: [ 258.038127][ T8702] [ 258.038139][ T8702] dump_stack_lvl+0x16c/0x1f0 [ 258.038191][ T8702] should_fail_ex+0x512/0x640 [ 258.038235][ T8702] ? __kvmalloc_node_noprof+0x124/0x620 [ 258.038284][ T8702] should_failslab+0xc2/0x120 [ 258.038315][ T8702] __kvmalloc_node_noprof+0x137/0x620 [ 258.038358][ T8702] ? lockdep_init_map_type+0x5c/0x280 [ 258.038404][ T8702] ? open_substream+0x30c/0x9b0 [ 258.038445][ T8702] ? open_substream+0x30c/0x9b0 [ 258.038475][ T8702] ? open_substream+0x19a/0x9b0 [ 258.038504][ T8702] open_substream+0x30c/0x9b0 [ 258.038535][ T8702] ? lockdep_hardirqs_on+0x7c/0x110 [ 258.038582][ T8702] rawmidi_open_priv+0x4db/0x6e0 [ 258.038629][ T8702] snd_rawmidi_open+0x4cc/0xbf0 [ 258.038676][ T8702] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 258.038718][ T8702] ? __pfx_default_wake_function+0x10/0x10 [ 258.038756][ T8702] ? soundcore_open+0x35a/0x580 [ 258.038812][ T8702] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 258.038853][ T8702] soundcore_open+0x40c/0x580 [ 258.038903][ T8702] ? __pfx_soundcore_open+0x10/0x10 [ 258.038949][ T8702] chrdev_open+0x231/0x6a0 [ 258.038995][ T8702] ? __pfx_apparmor_file_open+0x10/0x10 [ 258.039037][ T8702] ? __pfx_chrdev_open+0x10/0x10 [ 258.039085][ T8702] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 258.039122][ T8702] do_dentry_open+0x744/0x1c10 [ 258.039149][ T8702] ? __pfx_chrdev_open+0x10/0x10 [ 258.039180][ T8702] vfs_open+0x82/0x3f0 [ 258.039202][ T8702] path_openat+0x1de4/0x2cb0 [ 258.039234][ T8702] ? __pfx_path_openat+0x10/0x10 [ 258.039261][ T8702] ? __lock_acquire+0xb8a/0x1c90 [ 258.039287][ T8702] do_filp_open+0x20b/0x470 [ 258.039313][ T8702] ? __pfx_do_filp_open+0x10/0x10 [ 258.039355][ T8702] ? alloc_fd+0x471/0x7d0 [ 258.039385][ T8702] do_sys_openat2+0x11b/0x1d0 [ 258.039404][ T8702] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.039432][ T8702] __x64_sys_openat+0x174/0x210 [ 258.039453][ T8702] ? __pfx___x64_sys_openat+0x10/0x10 [ 258.039482][ T8702] do_syscall_64+0xcd/0x490 [ 258.039510][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.039528][ T8702] RIP: 0033:0x7f032298e929 [ 258.039543][ T8702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.039565][ T8702] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.039582][ T8702] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 258.039593][ T8702] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 258.039604][ T8702] RBP: 00007f0322a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 258.039614][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.039624][ T8702] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 258.039646][ T8702] [ 258.883954][ T8713] netlink: 'syz.3.560': attribute type 11 has an invalid length. [ 258.898019][ T8713] netlink: 'syz.3.560': attribute type 11 has an invalid length. [ 258.927999][ T8713] netlink: 'syz.3.560': attribute type 11 has an invalid length. [ 259.396500][ T30] audit: type=1800 audit(2147483653.713:5): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.562" name="dbroot" dev="configfs" ino=18767 res=0 errno=0 [ 259.567425][ T8713] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 259.578358][ T8713] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 259.633126][ T8713] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 259.650815][ T8713] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 259.688210][ T8713] page dumped because: unmovable page [ 259.718155][ T8713] page_owner tracks the page as allocated [ 259.749433][ T8713] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5849, tgid 5849 (syz-executor), ts 98977497719, free_ts 95324180393 [ 259.822669][ T8713] post_alloc_hook+0x1c0/0x230 [ 259.886097][ T8713] get_page_from_freelist+0x1321/0x3890 [ 259.962925][ T8713] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 259.993037][ T8713] alloc_pages_mpol+0x1fb/0x550 [ 260.013089][ T8713] alloc_pages_noprof+0x131/0x390 [ 260.041170][ T8713] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 260.052502][ T8713] vmalloc_user_noprof+0x9e/0xe0 [ 260.062142][ T8713] kcov_ioctl+0x4c/0x730 [ 260.103697][ T8713] __x64_sys_ioctl+0x18b/0x210 [ 260.108743][ T8713] do_syscall_64+0xcd/0x490 [ 260.116958][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.185620][ T8713] page last free pid 5837 tgid 5837 stack trace: [ 260.213488][ T8713] __free_frozen_pages+0x7fe/0x1180 [ 260.248789][ T8713] vfree+0x1fd/0xb50 [ 260.278547][ T8733] FAULT_INJECTION: forcing a failure. [ 260.278547][ T8733] name failslab, interval 1, probability 0, space 0, times 0 [ 260.283404][ T8713] kcov_close+0x34/0x60 [ 260.302753][ T8733] CPU: 0 UID: 0 PID: 8733 Comm: syz.0.563 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 260.302800][ T8733] Tainted: [U]=USER [ 260.302807][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.302816][ T8733] Call Trace: [ 260.302824][ T8733] [ 260.302832][ T8733] dump_stack_lvl+0x16c/0x1f0 [ 260.302863][ T8733] should_fail_ex+0x512/0x640 [ 260.302888][ T8733] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 260.302917][ T8733] should_failslab+0xc2/0x120 [ 260.302934][ T8733] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 260.302969][ T8733] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 260.302996][ T8733] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 260.303022][ T8733] radix_tree_insert+0x247/0x630 [ 260.303050][ T8733] qrtr_node_enqueue+0x1077/0x12e0 [ 260.303072][ T8733] ? __asan_memcpy+0x3c/0x60 [ 260.303097][ T8733] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 260.303113][ T8733] ? skb_set_owner_w+0x31f/0x710 [ 260.303136][ T8733] ? skb_copy_header+0x20/0x2b0 [ 260.303158][ T8733] ? __pfx_skb_set_owner_w+0x10/0x10 [ 260.303179][ T8733] ? __pskb_copy_fclone+0x48e/0xb50 [ 260.303196][ T8733] ? __pfx__copy_from_iter+0x10/0x10 [ 260.303226][ T8733] qrtr_bcast_enqueue+0xc7/0x1b0 [ 260.303248][ T8733] qrtr_sendmsg+0x441/0x7b0 [ 260.303265][ T8733] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 260.303282][ T8733] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 260.303308][ T8733] sock_write_iter+0x4fc/0x5b0 [ 260.303327][ T8733] ? __pfx_sock_write_iter+0x10/0x10 [ 260.303355][ T8733] ? __futex_wait+0x24c/0x2f0 [ 260.303380][ T8733] ? copy_iovec_from_user+0x131/0x170 [ 260.303408][ T8733] do_iter_readv_writev+0x657/0x950 [ 260.303434][ T8733] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 260.303460][ T8733] ? bpf_lsm_file_permission+0x9/0x10 [ 260.303479][ T8733] ? security_file_permission+0x71/0x210 [ 260.303502][ T8733] ? rw_verify_area+0xcf/0x680 [ 260.303526][ T8733] vfs_writev+0x35f/0xde0 [ 260.303555][ T8733] ? __pfx_vfs_writev+0x10/0x10 [ 260.303594][ T8733] ? __fget_files+0x20e/0x3c0 [ 260.303624][ T8733] ? do_writev+0x28c/0x340 [ 260.303645][ T8733] do_writev+0x28c/0x340 [ 260.303667][ T8733] ? __pfx_do_writev+0x10/0x10 [ 260.303698][ T8733] do_syscall_64+0xcd/0x490 [ 260.303728][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.303746][ T8733] RIP: 0033:0x7fd191b8e929 [ 260.303761][ T8733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.303778][ T8733] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 260.303795][ T8733] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 260.303806][ T8733] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 260.303816][ T8733] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 260.303826][ T8733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.303835][ T8733] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 260.303857][ T8733] [ 260.367760][ T8713] __fput+0x3ff/0xb70 [ 260.693767][ T8713] fput_close_sync+0x118/0x260 [ 260.719771][ T8713] __x64_sys_close+0x8b/0x120 [ 260.728354][ T8713] do_syscall_64+0xcd/0x490 [ 260.735048][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.124586][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.131164][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.213310][ T8740] FAULT_INJECTION: forcing a failure. [ 261.213310][ T8740] name fail_futex, interval 1, probability 0, space 0, times 0 [ 261.262922][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.0.566 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 261.262974][ T8740] Tainted: [U]=USER [ 261.262984][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.263012][ T8740] Call Trace: [ 261.263022][ T8740] [ 261.263034][ T8740] dump_stack_lvl+0x16c/0x1f0 [ 261.263095][ T8740] should_fail_ex+0x512/0x640 [ 261.263144][ T8740] get_futex_key+0x1d0/0x1540 [ 261.263187][ T8740] ? __pfx_get_futex_key+0x10/0x10 [ 261.263221][ T8740] ? kfree+0x24f/0x4d0 [ 261.263267][ T8740] ? __futex_hash.constprop.0+0x1e9/0x440 [ 261.263308][ T8740] futex_wake+0xe7/0x4e0 [ 261.263352][ T8740] ? __lock_acquire+0x622/0x1c90 [ 261.263394][ T8740] ? __pfx_futex_wake+0x10/0x10 [ 261.263456][ T8740] do_futex+0x1e3/0x350 [ 261.263495][ T8740] ? __pfx_do_futex+0x10/0x10 [ 261.263537][ T8740] ? __fget_files+0x20e/0x3c0 [ 261.263584][ T8740] __x64_sys_futex+0x1e0/0x4c0 [ 261.263624][ T8740] ? __pfx___x64_sys_futex+0x10/0x10 [ 261.263664][ T8740] ? __pfx_do_pwritev+0x10/0x10 [ 261.263710][ T8740] do_syscall_64+0xcd/0x490 [ 261.263752][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.263779][ T8740] RIP: 0033:0x7fd191b8e929 [ 261.263801][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.263827][ T8740] RSP: 002b:00007fd1929790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 261.263855][ T8740] RAX: ffffffffffffffda RBX: 00007fd191db5fa8 RCX: 00007fd191b8e929 [ 261.263873][ T8740] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd191db5fac [ 261.263890][ T8740] RBP: 00007fd191db5fa0 R08: 00007fd19297a000 R09: 0000000000000000 [ 261.263908][ T8740] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fd191db5fac [ 261.263926][ T8740] R13: 0000000000000000 R14: 00007ffdcdb7b3c0 R15: 00007ffdcdb7b4a8 [ 261.263963][ T8740] [ 261.692182][ T8746] ubi: mtd0 is already attached to ubi0 [ 262.140445][ T8751] ecryptfs_miscdev_write: Error while inspecting packet size [ 263.127325][ T8768] FAULT_INJECTION: forcing a failure. [ 263.127325][ T8768] name failslab, interval 1, probability 0, space 0, times 0 [ 263.143151][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.3.572 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 263.143199][ T8768] Tainted: [U]=USER [ 263.143208][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.143224][ T8768] Call Trace: [ 263.143234][ T8768] [ 263.143244][ T8768] dump_stack_lvl+0x16c/0x1f0 [ 263.143292][ T8768] should_fail_ex+0x512/0x640 [ 263.143328][ T8768] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 263.143376][ T8768] should_failslab+0xc2/0x120 [ 263.143405][ T8768] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 263.143447][ T8768] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 263.143478][ T8768] ? ptlock_alloc+0x1f/0x70 [ 263.143519][ T8768] ptlock_alloc+0x1f/0x70 [ 263.143553][ T8768] pte_alloc_one+0x82/0x3a0 [ 263.143580][ T8768] __handle_mm_fault+0x3a68/0x5490 [ 263.143629][ T8768] ? __pfx___handle_mm_fault+0x10/0x10 [ 263.143666][ T8768] ? __pfx_mt_find+0x10/0x10 [ 263.143718][ T8768] ? find_vma+0xbf/0x140 [ 263.143756][ T8768] ? __pfx_find_vma+0x10/0x10 [ 263.143791][ T8768] handle_mm_fault+0x589/0xd10 [ 263.143833][ T8768] ? __pkru_allows_pkey+0x51/0xb0 [ 263.143877][ T8768] do_user_addr_fault+0x7a6/0x1370 [ 263.143925][ T8768] ? rcu_is_watching+0x12/0xc0 [ 263.143964][ T8768] exc_page_fault+0x5c/0xb0 [ 263.144016][ T8768] asm_exc_page_fault+0x26/0x30 [ 263.144046][ T8768] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 263.144082][ T8768] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 263.144109][ T8768] RSP: 0018:ffffc90004b1fc40 EFLAGS: 00050246 [ 263.144135][ T8768] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 263.144154][ T8768] RDX: ffffed10054deabd RSI: 0000000000000000 RDI: ffff88802a6f55e0 [ 263.144173][ T8768] RBP: 0000000000000008 R08: 0000000000000001 R09: ffffed10054deabc [ 263.144191][ T8768] R10: ffff88802a6f55e7 R11: 0000000000000001 R12: 0000000000000000 [ 263.144209][ T8768] R13: ffff88802a6f55e0 R14: 0000000000000000 R15: 0000000000000008 [ 263.144250][ T8768] _copy_from_user+0x98/0xd0 [ 263.144301][ T8768] sctp_setsockopt+0x2045/0xb870 [ 263.144350][ T8768] ? __pfx_sctp_setsockopt+0x10/0x10 [ 263.144387][ T8768] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.144429][ T8768] ? sock_common_setsockopt+0x2e/0xf0 [ 263.144463][ T8768] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 263.144496][ T8768] do_sock_setsockopt+0x224/0x470 [ 263.144528][ T8768] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 263.144587][ T8768] __sys_setsockopt+0x120/0x1a0 [ 263.144638][ T8768] __x64_sys_setsockopt+0xbd/0x160 [ 263.144679][ T8768] ? do_syscall_64+0x91/0x490 [ 263.144723][ T8768] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.144764][ T8768] do_syscall_64+0xcd/0x490 [ 263.144812][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.144842][ T8768] RIP: 0033:0x7fa0a558e929 [ 263.144866][ T8768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.144893][ T8768] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.144921][ T8768] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 263.144940][ T8768] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 263.144957][ T8768] RBP: 00007fa0a5610b39 R08: 0000000000000008 R09: 0000000000000000 [ 263.144974][ T8768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.145003][ T8768] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 263.145043][ T8768] [ 263.781779][ T8776] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 264.053624][ T8783] FAULT_INJECTION: forcing a failure. [ 264.053624][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 264.090905][ T8783] CPU: 0 UID: 0 PID: 8783 Comm: syz.3.575 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 264.090954][ T8783] Tainted: [U]=USER [ 264.090962][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.090978][ T8783] Call Trace: [ 264.090988][ T8783] [ 264.090999][ T8783] dump_stack_lvl+0x16c/0x1f0 [ 264.091044][ T8783] should_fail_ex+0x512/0x640 [ 264.091081][ T8783] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 264.091130][ T8783] should_failslab+0xc2/0x120 [ 264.091160][ T8783] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 264.091207][ T8783] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 264.091254][ T8783] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 264.091301][ T8783] radix_tree_insert+0x247/0x630 [ 264.091350][ T8783] qrtr_node_enqueue+0x1077/0x12e0 [ 264.091386][ T8783] ? __asan_memcpy+0x3c/0x60 [ 264.091429][ T8783] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 264.091456][ T8783] ? skb_set_owner_w+0x31f/0x710 [ 264.091494][ T8783] ? skb_copy_header+0x20/0x2b0 [ 264.091533][ T8783] ? __pfx_skb_set_owner_w+0x10/0x10 [ 264.091568][ T8783] ? __pskb_copy_fclone+0x48e/0xb50 [ 264.091597][ T8783] ? __pfx__copy_from_iter+0x10/0x10 [ 264.091650][ T8783] qrtr_bcast_enqueue+0xc7/0x1b0 [ 264.091690][ T8783] qrtr_sendmsg+0x441/0x7b0 [ 264.091720][ T8783] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 264.091758][ T8783] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 264.091804][ T8783] sock_write_iter+0x4fc/0x5b0 [ 264.091839][ T8783] ? __pfx_sock_write_iter+0x10/0x10 [ 264.091890][ T8783] ? __futex_wait+0x24c/0x2f0 [ 264.091936][ T8783] ? copy_iovec_from_user+0x131/0x170 [ 264.091985][ T8783] do_iter_readv_writev+0x657/0x950 [ 264.092027][ T8783] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 264.092075][ T8783] ? bpf_lsm_file_permission+0x9/0x10 [ 264.092106][ T8783] ? security_file_permission+0x71/0x210 [ 264.092147][ T8783] ? rw_verify_area+0xcf/0x680 [ 264.092190][ T8783] vfs_writev+0x35f/0xde0 [ 264.092242][ T8783] ? __pfx_vfs_writev+0x10/0x10 [ 264.092313][ T8783] ? __fget_files+0x20e/0x3c0 [ 264.092365][ T8783] ? do_writev+0x28c/0x340 [ 264.092401][ T8783] do_writev+0x28c/0x340 [ 264.092441][ T8783] ? __pfx_do_writev+0x10/0x10 [ 264.092493][ T8783] do_syscall_64+0xcd/0x490 [ 264.092541][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.092571][ T8783] RIP: 0033:0x7fa0a558e929 [ 264.092595][ T8783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.092622][ T8783] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 264.092650][ T8783] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 264.092669][ T8783] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 264.092686][ T8783] RBP: 00007fa0a5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 264.092703][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.092720][ T8783] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 264.092769][ T8783] [ 264.646934][ T8797] qrtr: Invalid version 0 [ 264.660988][ T8797] qrtr: Invalid version 0 [ 264.665689][ T8797] qrtr: Invalid version 0 [ 264.751324][ T8797] qrtr: Invalid version 0 [ 264.756405][ T8797] qrtr: Invalid version 0 [ 264.763389][ T8797] qrtr: Invalid version 0 [ 264.832638][ T8797] qrtr: Invalid version 0 [ 264.852740][ T8797] qrtr: Invalid version 0 [ 264.863963][ T8797] qrtr: Invalid version 0 [ 264.872291][ T8797] qrtr: Invalid version 0 [ 264.878244][ T8797] qrtr: Invalid version 0 [ 264.885223][ T8797] qrtr: Invalid version 0 [ 264.906308][ T8797] qrtr: Invalid version 0 [ 264.912571][ T8797] qrtr: Invalid version 0 [ 264.921338][ T8797] qrtr: Invalid version 0 [ 264.926856][ T8797] qrtr: Invalid version 0 [ 264.965858][ T8797] qrtr: Invalid version 0 [ 264.980624][ T8797] qrtr: Invalid version 0 [ 264.985316][ T8797] qrtr: Invalid version 0 [ 265.000029][ T8797] qrtr: Invalid version 0 [ 265.006274][ T8797] qrtr: Invalid version 0 [ 265.019174][ T8797] qrtr: Invalid version 0 [ 265.026920][ T8797] qrtr: Invalid version 0 [ 265.037093][ T8797] qrtr: Invalid version 0 [ 265.051380][ T8797] qrtr: Invalid version 0 [ 265.057376][ T8797] qrtr: Invalid version 0 [ 265.080837][ T8797] qrtr: Invalid version 0 [ 265.088008][ T8797] qrtr: Invalid version 0 [ 265.094403][ T8797] qrtr: Invalid version 0 [ 265.102070][ T8797] qrtr: Invalid version 0 [ 265.107688][ T8797] qrtr: Invalid version 0 [ 265.114260][ T8797] qrtr: Invalid version 0 [ 265.120121][ T8797] qrtr: Invalid version 0 [ 265.130712][ T8797] qrtr: Invalid version 0 [ 265.136649][ T8797] qrtr: Invalid version 0 [ 265.142830][ T8797] qrtr: Invalid version 0 [ 265.148343][ T8797] qrtr: Invalid version 0 [ 265.154259][ T8797] qrtr: Invalid version 0 [ 265.159862][ T8797] qrtr: Invalid version 0 [ 265.165612][ T8797] qrtr: Invalid version 0 [ 265.172205][ T8797] qrtr: Invalid version 0 [ 265.178053][ T8797] qrtr: Invalid version 0 [ 265.184283][ T8797] qrtr: Invalid version 0 [ 265.211625][ T8797] qrtr: Invalid version 0 [ 265.239024][ T8797] qrtr: Invalid version 0 [ 265.266951][ T8797] qrtr: Invalid version 0 [ 265.272136][ T8797] qrtr: Invalid version 0 [ 265.277045][ T8797] qrtr: Invalid version 0 [ 265.282501][ T8797] qrtr: Invalid version 0 [ 265.288093][ T8797] qrtr: Invalid version 0 [ 265.307851][ T8797] qrtr: Invalid version 0 [ 265.316622][ T8797] qrtr: Invalid version 0 [ 265.323989][ T8797] qrtr: Invalid version 0 [ 265.329059][ T8797] qrtr: Invalid version 0 [ 265.336143][ T8797] qrtr: Invalid version 0 [ 265.343524][ T8797] qrtr: Invalid version 0 [ 265.348500][ T8797] qrtr: Invalid version 0 [ 266.584824][ T8846] FAULT_INJECTION: forcing a failure. [ 266.584824][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 266.630065][ T8846] CPU: 0 UID: 60929 PID: 8846 Comm: syz.2.589 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 266.630114][ T8846] Tainted: [U]=USER [ 266.630122][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.630137][ T8846] Call Trace: [ 266.630146][ T8846] [ 266.630157][ T8846] dump_stack_lvl+0x16c/0x1f0 [ 266.630210][ T8846] should_fail_ex+0x512/0x640 [ 266.630251][ T8846] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 266.630299][ T8846] should_failslab+0xc2/0x120 [ 266.630327][ T8846] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 266.630369][ T8846] ? getname_flags.part.0+0x4c/0x550 [ 266.630407][ T8846] getname_flags.part.0+0x4c/0x550 [ 266.630442][ T8846] getname_flags+0x93/0xf0 [ 266.630476][ T8846] do_sys_openat2+0xb8/0x1d0 [ 266.630507][ T8846] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.630543][ T8846] ? __fget_files+0x20e/0x3c0 [ 266.630586][ T8846] __x64_sys_openat+0x174/0x210 [ 266.630620][ T8846] ? __pfx___x64_sys_openat+0x10/0x10 [ 266.630649][ T8846] ? ksys_write+0x1ac/0x250 [ 266.630703][ T8846] do_syscall_64+0xcd/0x490 [ 266.630749][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.630777][ T8846] RIP: 0033:0x7f032298e929 [ 266.630798][ T8846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.630826][ T8846] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.630853][ T8846] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 266.630871][ T8846] RDX: 0000000000040342 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 266.630897][ T8846] RBP: 00007f03238da090 R08: 0000000000000000 R09: 0000000000000000 [ 266.630914][ T8846] R10: 0000000000000163 R11: 0000000000000246 R12: 0000000000000001 [ 266.630931][ T8846] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 266.630967][ T8846] [ 267.447327][ T8864] netlink: 'syz.2.595': attribute type 2 has an invalid length. [ 270.401502][ T8910] FAULT_INJECTION: forcing a failure. [ 270.401502][ T8910] name failslab, interval 1, probability 0, space 0, times 0 [ 270.401552][ T8910] CPU: 1 UID: 0 PID: 8910 Comm: syz.2.605 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 270.401598][ T8910] Tainted: [U]=USER [ 270.401607][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.401624][ T8910] Call Trace: [ 270.401634][ T8910] [ 270.401645][ T8910] dump_stack_lvl+0x16c/0x1f0 [ 270.401691][ T8910] should_fail_ex+0x512/0x640 [ 270.401733][ T8910] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 270.401787][ T8910] should_failslab+0xc2/0x120 [ 270.401815][ T8910] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 270.401875][ T8910] ? fcntl_setlease+0xc6/0x5a0 [ 270.401915][ T8910] fcntl_setlease+0xc6/0x5a0 [ 270.401970][ T8910] ? __pfx_fcntl_setlease+0x10/0x10 [ 270.402022][ T8910] do_fcntl+0x751/0x15a0 [ 270.402054][ T8910] ? __pfx_do_fcntl+0x10/0x10 [ 270.402093][ T8910] ? tomoyo_file_fcntl+0x6c/0xc0 [ 270.402147][ T8910] __x64_sys_fcntl+0x163/0x200 [ 270.402181][ T8910] do_syscall_64+0xcd/0x490 [ 270.402230][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.402259][ T8910] RIP: 0033:0x7f032298e929 [ 270.402281][ T8910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.402310][ T8910] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 270.402337][ T8910] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 270.402356][ T8910] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000004 [ 270.402373][ T8910] RBP: 00007f0322a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 270.402390][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.402407][ T8910] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 270.402445][ T8910] [ 271.233865][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 272.498552][ T8958] ubi: mtd0 is already attached to ubi0 [ 273.329074][ T8974] FAULT_INJECTION: forcing a failure. [ 273.329074][ T8974] name failslab, interval 1, probability 0, space 0, times 0 [ 273.349040][ T8974] CPU: 1 UID: 60929 PID: 8974 Comm: syz.2.618 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 273.349086][ T8974] Tainted: [U]=USER [ 273.349096][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.349111][ T8974] Call Trace: [ 273.349120][ T8974] [ 273.349131][ T8974] dump_stack_lvl+0x16c/0x1f0 [ 273.349176][ T8974] should_fail_ex+0x512/0x640 [ 273.349216][ T8974] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 273.349262][ T8974] should_failslab+0xc2/0x120 [ 273.349290][ T8974] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 273.349331][ T8974] ? alloc_empty_file+0x55/0x1e0 [ 273.349368][ T8974] alloc_empty_file+0x55/0x1e0 [ 273.349399][ T8974] path_openat+0xda/0x2cb0 [ 273.349436][ T8974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.349480][ T8974] ? __pfx_path_openat+0x10/0x10 [ 273.349524][ T8974] ? __lock_acquire+0xb8a/0x1c90 [ 273.349569][ T8974] do_filp_open+0x20b/0x470 [ 273.349609][ T8974] ? __pfx_do_filp_open+0x10/0x10 [ 273.349675][ T8974] ? alloc_fd+0x471/0x7d0 [ 273.349720][ T8974] do_sys_openat2+0x11b/0x1d0 [ 273.349751][ T8974] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.349786][ T8974] ? __fget_files+0x20e/0x3c0 [ 273.349841][ T8974] __x64_sys_openat+0x174/0x210 [ 273.349875][ T8974] ? __pfx___x64_sys_openat+0x10/0x10 [ 273.349906][ T8974] ? ksys_write+0x1ac/0x250 [ 273.349959][ T8974] do_syscall_64+0xcd/0x490 [ 273.350005][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.350032][ T8974] RIP: 0033:0x7f032298e929 [ 273.350057][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.350084][ T8974] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 273.350113][ T8974] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 273.350131][ T8974] RDX: 0000000000040342 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 273.350149][ T8974] RBP: 00007f03238da090 R08: 0000000000000000 R09: 0000000000000000 [ 273.350166][ T8974] R10: 0000000000000163 R11: 0000000000000246 R12: 0000000000000001 [ 273.350182][ T8974] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 273.350220][ T8974] [ 273.575776][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.665910][ T8975] nbd: must specify a device to reconfigure [ 273.790929][ T8972] FAULT_INJECTION: forcing a failure. [ 273.790929][ T8972] name failslab, interval 1, probability 0, space 0, times 0 [ 273.826298][ T8972] CPU: 1 UID: 0 PID: 8972 Comm: syz.0.620 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 273.826350][ T8972] Tainted: [U]=USER [ 273.826361][ T8972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.826379][ T8972] Call Trace: [ 273.826388][ T8972] [ 273.826399][ T8972] dump_stack_lvl+0x16c/0x1f0 [ 273.826445][ T8972] should_fail_ex+0x512/0x640 [ 273.826487][ T8972] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 273.826537][ T8972] should_failslab+0xc2/0x120 [ 273.826566][ T8972] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 273.826611][ T8972] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 273.826665][ T8972] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 273.826711][ T8972] radix_tree_insert+0x247/0x630 [ 273.826751][ T8972] qrtr_node_enqueue+0x1077/0x12e0 [ 273.826781][ T8972] ? __asan_memcpy+0x3c/0x60 [ 273.826813][ T8972] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 273.826834][ T8972] ? skb_set_owner_w+0x31f/0x710 [ 273.826863][ T8972] ? skb_copy_header+0x20/0x2b0 [ 273.826894][ T8972] ? __pfx_skb_set_owner_w+0x10/0x10 [ 273.826923][ T8972] ? __pskb_copy_fclone+0x48e/0xb50 [ 273.826945][ T8972] ? __pfx__copy_from_iter+0x10/0x10 [ 273.826986][ T8972] qrtr_bcast_enqueue+0xc7/0x1b0 [ 273.827017][ T8972] qrtr_sendmsg+0x441/0x7b0 [ 273.827040][ T8972] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 273.827062][ T8972] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 273.827099][ T8972] sock_write_iter+0x4fc/0x5b0 [ 273.827125][ T8972] ? __pfx_sock_write_iter+0x10/0x10 [ 273.827164][ T8972] ? __futex_wait+0x24c/0x2f0 [ 273.827197][ T8972] ? copy_iovec_from_user+0x131/0x170 [ 273.827235][ T8972] do_iter_readv_writev+0x657/0x950 [ 273.827270][ T8972] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 273.827306][ T8972] ? bpf_lsm_file_permission+0x9/0x10 [ 273.827331][ T8972] ? security_file_permission+0x71/0x210 [ 273.827362][ T8972] ? rw_verify_area+0xcf/0x680 [ 273.827394][ T8972] vfs_writev+0x35f/0xde0 [ 273.827434][ T8972] ? __pfx_vfs_writev+0x10/0x10 [ 273.827490][ T8972] ? __fget_files+0x20e/0x3c0 [ 273.827531][ T8972] ? do_writev+0x28c/0x340 [ 273.827559][ T8972] do_writev+0x28c/0x340 [ 273.827588][ T8972] ? __pfx_do_writev+0x10/0x10 [ 273.827636][ T8972] do_syscall_64+0xcd/0x490 [ 273.827673][ T8972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.827697][ T8972] RIP: 0033:0x7fd191b8e929 [ 273.827718][ T8972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.827742][ T8972] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 273.827765][ T8972] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 273.827781][ T8972] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 273.827795][ T8972] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 273.827810][ T8972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.827824][ T8972] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 273.827855][ T8972] [ 274.134538][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.091794][ T9015] FAULT_INJECTION: forcing a failure. [ 275.091794][ T9015] name failslab, interval 1, probability 0, space 0, times 0 [ 275.166291][ T9015] CPU: 1 UID: 60929 PID: 9015 Comm: syz.2.630 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 275.166323][ T9015] Tainted: [U]=USER [ 275.166329][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.166339][ T9015] Call Trace: [ 275.166344][ T9015] [ 275.166351][ T9015] dump_stack_lvl+0x16c/0x1f0 [ 275.166387][ T9015] should_fail_ex+0x512/0x640 [ 275.166412][ T9015] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 275.166445][ T9015] should_failslab+0xc2/0x120 [ 275.166462][ T9015] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 275.166488][ T9015] ? security_file_alloc+0x34/0x2b0 [ 275.166514][ T9015] security_file_alloc+0x34/0x2b0 [ 275.166537][ T9015] init_file+0x93/0x4c0 [ 275.166554][ T9015] alloc_empty_file+0x73/0x1e0 [ 275.166580][ T9015] path_openat+0xda/0x2cb0 [ 275.166603][ T9015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.166629][ T9015] ? __pfx_path_openat+0x10/0x10 [ 275.166655][ T9015] ? __lock_acquire+0xb8a/0x1c90 [ 275.166682][ T9015] do_filp_open+0x20b/0x470 [ 275.166707][ T9015] ? __pfx_do_filp_open+0x10/0x10 [ 275.166748][ T9015] ? alloc_fd+0x471/0x7d0 [ 275.166777][ T9015] do_sys_openat2+0x11b/0x1d0 [ 275.166797][ T9015] ? __pfx_do_sys_openat2+0x10/0x10 [ 275.166818][ T9015] ? __fget_files+0x20e/0x3c0 [ 275.166846][ T9015] __x64_sys_openat+0x174/0x210 [ 275.166866][ T9015] ? __pfx___x64_sys_openat+0x10/0x10 [ 275.166884][ T9015] ? ksys_write+0x1ac/0x250 [ 275.166917][ T9015] do_syscall_64+0xcd/0x490 [ 275.166944][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.166961][ T9015] RIP: 0033:0x7f032298e929 [ 275.166975][ T9015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.166993][ T9015] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 275.167010][ T9015] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 275.167021][ T9015] RDX: 0000000000040342 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 275.167032][ T9015] RBP: 00007f03238da090 R08: 0000000000000000 R09: 0000000000000000 [ 275.167042][ T9015] R10: 0000000000000163 R11: 0000000000000246 R12: 0000000000000001 [ 275.167052][ T9015] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 275.167073][ T9015] [ 275.404088][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.869668][ T9026] usb usb24: check_ctrlrecip: process 9026 (syz.3.634) requesting ep 01 but needs 81 [ 275.885812][ T9026] usb usb24: usbfs: process 9026 (syz.3.634) did not claim interface 0 before use [ 275.919077][ T9026] FAULT_INJECTION: forcing a failure. [ 275.919077][ T9026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.933672][ T9026] CPU: 1 UID: 0 PID: 9026 Comm: syz.3.634 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 275.933704][ T9026] Tainted: [U]=USER [ 275.933709][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.933721][ T9026] Call Trace: [ 275.933727][ T9026] [ 275.933734][ T9026] dump_stack_lvl+0x16c/0x1f0 [ 275.933765][ T9026] should_fail_ex+0x512/0x640 [ 275.933795][ T9026] should_fail_alloc_page+0xe7/0x130 [ 275.933815][ T9026] prepare_alloc_pages+0x3c2/0x610 [ 275.933844][ T9026] ? rcu_is_watching+0x12/0xc0 [ 275.933867][ T9026] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 275.933899][ T9026] ? rcu_is_watching+0x12/0xc0 [ 275.933918][ T9026] ? trace_mm_page_alloc+0x11f/0x1a0 [ 275.933938][ T9026] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 275.933965][ T9026] ? stack_trace_save+0x8e/0xc0 [ 275.933987][ T9026] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.934022][ T9026] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 275.934048][ T9026] ? __get_vm_area_node+0x1ca/0x330 [ 275.934069][ T9026] ? __vmalloc_node_noprof+0xad/0xf0 [ 275.934089][ T9026] ? pcpu_mem_zalloc+0x54/0xb0 [ 275.934109][ T9026] ? pcpu_create_chunk+0x432/0x730 [ 275.934131][ T9026] ? pcpu_alloc_noprof+0x11e3/0x1470 [ 275.934154][ T9026] ? bpf_map_alloc_percpu+0x9a/0x4b0 [ 275.934178][ T9026] ? htab_map_alloc+0x10ca/0x1570 [ 275.934203][ T9026] ? map_create+0x58f/0x1db0 [ 275.934234][ T9026] alloc_pages_bulk_noprof+0x71c/0x1410 [ 275.934261][ T9026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.934289][ T9026] ? policy_nodemask+0xea/0x4e0 [ 275.934308][ T9026] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 275.934336][ T9026] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 275.934363][ T9026] kasan_populate_vmalloc+0xf1/0x1f0 [ 275.934392][ T9026] alloc_vmap_area+0x959/0x29c0 [ 275.934420][ T9026] ? __pfx_alloc_vmap_area+0x10/0x10 [ 275.934445][ T9026] __get_vm_area_node+0x1ca/0x330 [ 275.934471][ T9026] __vmalloc_node_range_noprof+0x271/0x14b0 [ 275.934494][ T9026] ? pcpu_mem_zalloc+0x54/0xb0 [ 275.934521][ T9026] ? pcpu_mem_zalloc+0x54/0xb0 [ 275.934548][ T9026] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.934584][ T9026] ? pcpu_mem_zalloc+0x54/0xb0 [ 275.934615][ T9026] __vmalloc_node_noprof+0xad/0xf0 [ 275.934648][ T9026] ? pcpu_mem_zalloc+0x54/0xb0 [ 275.934686][ T9026] pcpu_mem_zalloc+0x54/0xb0 [ 275.934713][ T9026] pcpu_create_chunk+0x432/0x730 [ 275.934738][ T9026] pcpu_alloc_noprof+0x11e3/0x1470 [ 275.934782][ T9026] bpf_map_alloc_percpu+0x9a/0x4b0 [ 275.934836][ T9026] htab_map_alloc+0x10ca/0x1570 [ 275.934884][ T9026] ? ns_capable+0xd7/0x110 [ 275.934908][ T9026] map_create+0x58f/0x1db0 [ 275.934943][ T9026] ? __pfx_map_create+0x10/0x10 [ 275.934968][ T9026] ? __might_fault+0xe3/0x190 [ 275.934993][ T9026] ? __might_fault+0xe3/0x190 [ 275.935018][ T9026] ? __might_fault+0x13b/0x190 [ 275.935053][ T9026] __sys_bpf+0x47cc/0x4d80 [ 275.935067][ T9026] ? __pfx_futex_wake+0x10/0x10 [ 275.935094][ T9026] ? __pfx___sys_bpf+0x10/0x10 [ 275.935110][ T9026] ? do_writev+0x218/0x340 [ 275.935138][ T9026] ? do_futex+0x122/0x350 [ 275.935159][ T9026] ? __pfx_do_futex+0x10/0x10 [ 275.935205][ T9026] ? fput+0x70/0xf0 [ 275.935224][ T9026] ? xfd_validate_state+0x61/0x180 [ 275.935247][ T9026] ? __pfx_do_writev+0x10/0x10 [ 275.935275][ T9026] __x64_sys_bpf+0x78/0xc0 [ 275.935292][ T9026] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.935318][ T9026] do_syscall_64+0xcd/0x490 [ 275.935346][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.935364][ T9026] RIP: 0033:0x7fa0a558e929 [ 275.935380][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.935397][ T9026] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.935415][ T9026] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 275.935427][ T9026] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 275.935437][ T9026] RBP: 00007fa0a5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 275.935447][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.935457][ T9026] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 275.935479][ T9026] [ 276.350632][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.917065][ T9041] netlink: 338 bytes leftover after parsing attributes in process `syz.3.638'. [ 277.930609][ T9047] netlink: 338 bytes leftover after parsing attributes in process `syz.3.638'. [ 277.965188][ T9044] netlink: 338 bytes leftover after parsing attributes in process `syz.3.638'. [ 278.006897][ T9054] netlink: 338 bytes leftover after parsing attributes in process `syz.3.638'. [ 279.308269][ T9066] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 280.956022][ T9091] netlink: 330 bytes leftover after parsing attributes in process `syz.3.651'. [ 281.116383][ T9093] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 283.612338][ T9131] kAFS: Invalid Command on /proc/fs/afs/cells file [ 283.950411][ T9137] ======================================================= [ 283.950411][ T9137] WARNING: The mand mount option has been deprecated and [ 283.950411][ T9137] and is ignored by this kernel. Remove the mand [ 283.950411][ T9137] option from the mount to silence this warning. [ 283.950411][ T9137] ======================================================= [ 283.985511][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.020663][ T9137] nfsd: Unknown parameter '˜ÛZØ' [ 284.090858][ T9137] FAULT_INJECTION: forcing a failure. [ 284.090858][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 284.113918][ T9137] CPU: 1 UID: 0 PID: 9137 Comm: syz.3.662 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 284.113970][ T9137] Tainted: [U]=USER [ 284.113980][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.113998][ T9137] Call Trace: [ 284.114009][ T9137] [ 284.114021][ T9137] dump_stack_lvl+0x16c/0x1f0 [ 284.114072][ T9137] should_fail_ex+0x512/0x640 [ 284.114116][ T9137] ? fs_reclaim_acquire+0xae/0x150 [ 284.114154][ T9137] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 284.114196][ T9137] should_failslab+0xc2/0x120 [ 284.114226][ T9137] __kmalloc_noprof+0xd2/0x510 [ 284.114282][ T9137] tomoyo_realpath_from_path+0xc2/0x6e0 [ 284.114337][ T9137] tomoyo_check_open_permission+0x2ab/0x3c0 [ 284.114382][ T9137] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 284.114470][ T9137] ? do_raw_spin_lock+0x12c/0x2b0 [ 284.114532][ T9137] tomoyo_file_open+0x6b/0x90 [ 284.114581][ T9137] security_file_open+0x84/0x1e0 [ 284.114621][ T9137] do_dentry_open+0x596/0x1c10 [ 284.114679][ T9137] vfs_open+0x82/0x3f0 [ 284.114716][ T9137] path_openat+0x1de4/0x2cb0 [ 284.114790][ T9137] ? __pfx_path_openat+0x10/0x10 [ 284.114838][ T9137] ? __lock_acquire+0xb8a/0x1c90 [ 284.114886][ T9137] do_filp_open+0x20b/0x470 [ 284.114932][ T9137] ? __pfx_do_filp_open+0x10/0x10 [ 284.115015][ T9137] ? alloc_fd+0x471/0x7d0 [ 284.115072][ T9137] do_sys_openat2+0x11b/0x1d0 [ 284.115107][ T9137] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.115143][ T9137] ? find_held_lock+0x2b/0x80 [ 284.115193][ T9137] __x64_sys_openat+0x174/0x210 [ 284.115228][ T9137] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.115283][ T9137] do_syscall_64+0xcd/0x490 [ 284.115332][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.115363][ T9137] RIP: 0033:0x7fa0a558e929 [ 284.115389][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.115418][ T9137] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.115447][ T9137] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 284.115474][ T9137] RDX: 0000000000028b40 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 284.115494][ T9137] RBP: 00007fa0a5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 284.115512][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.115530][ T9137] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 284.115572][ T9137] [ 284.115824][ T9137] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.199839][ T9136] [U] [ 284.373952][ T9136] [U] [ 284.376671][ T9136] [U] [ 284.379385][ T9136] [U] [ 284.452133][ T9136] [U] [ 284.454935][ T9136] [U] [ 284.457691][ T9136] [U] [ 284.460446][ T9136] [U] [ 284.579614][ T9136] [U] [ 284.582520][ T9136] [U] [ 284.585372][ T9136] [U] [ 284.588141][ T9136] [U] [ 284.630868][ T9136] [U] [ 284.633668][ T9136] [U] [ 284.636388][ T9136] [U] [ 284.639111][ T9136] [U] [ 284.692532][ T9136] [U] [ 284.695268][ T9136] [U] [ 284.697964][ T9136] [U] [ 284.700662][ T9136] [U] [ 284.751280][ T9136] [U] [ 284.754081][ T9136] [U] [ 284.756831][ T9136] [U] [ 284.759621][ T9136] [U] [ 284.846267][ T9136] [U] [ 284.849090][ T9136] [U] [ 284.851856][ T9136] [U] [ 284.854582][ T9136] [U] [ 284.869614][ T9154] ubi: mtd0 is already attached to ubi0 [ 284.990073][ T9136] [U] [ 285.037976][ T9156] Loading of unsigned module is rejected [ 285.732533][ T9170] loop6: detected capacity change from 0 to 8192 [ 286.054794][ T9153] could not allocate digest TFM handle [ 286.500926][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.671'. [ 288.835889][ T9233] __vm_enough_memory: pid: 9233, comm: syz.0.679, bytes: 9223372036854775808 not enough memory for the allocation [ 288.926213][ T9197] kexec: Could not allocate control_code_buffer [ 289.570988][ T9267] ubi: mtd0 is already attached to ubi0 [ 294.046861][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 294.360533][ T9344] nfsd: Unknown parameter '˜ÛZØ' [ 294.810176][ T9344] FAULT_INJECTION: forcing a failure. [ 294.810176][ T9344] name failslab, interval 1, probability 0, space 0, times 0 [ 294.947245][ T9344] CPU: 1 UID: 0 PID: 9344 Comm: syz.0.699 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 294.947307][ T9344] Tainted: [U]=USER [ 294.947316][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.947330][ T9344] Call Trace: [ 294.947339][ T9344] [ 294.947349][ T9344] dump_stack_lvl+0x16c/0x1f0 [ 294.947397][ T9344] should_fail_ex+0x512/0x640 [ 294.947430][ T9344] ? fs_reclaim_acquire+0xae/0x150 [ 294.947462][ T9344] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 294.947493][ T9344] should_failslab+0xc2/0x120 [ 294.947516][ T9344] __kmalloc_noprof+0xd2/0x510 [ 294.947560][ T9344] tomoyo_realpath_from_path+0xc2/0x6e0 [ 294.947602][ T9344] tomoyo_check_open_permission+0x2ab/0x3c0 [ 294.947631][ T9344] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 294.947693][ T9344] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.947738][ T9344] tomoyo_file_open+0x6b/0x90 [ 294.947775][ T9344] security_file_open+0x84/0x1e0 [ 294.947805][ T9344] do_dentry_open+0x596/0x1c10 [ 294.947849][ T9344] vfs_open+0x82/0x3f0 [ 294.947878][ T9344] path_openat+0x1de4/0x2cb0 [ 294.947922][ T9344] ? __pfx_path_openat+0x10/0x10 [ 294.947958][ T9344] ? __lock_acquire+0xb8a/0x1c90 [ 294.947993][ T9344] do_filp_open+0x20b/0x470 [ 294.948026][ T9344] ? __pfx_do_filp_open+0x10/0x10 [ 294.948083][ T9344] ? alloc_fd+0x471/0x7d0 [ 294.948123][ T9344] do_sys_openat2+0x11b/0x1d0 [ 294.948148][ T9344] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.948175][ T9344] ? __pfx___schedule+0x10/0x10 [ 294.948214][ T9344] __x64_sys_openat+0x174/0x210 [ 294.948240][ T9344] ? __pfx___x64_sys_openat+0x10/0x10 [ 294.948280][ T9344] do_syscall_64+0xcd/0x490 [ 294.948317][ T9344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.948340][ T9344] RIP: 0033:0x7fd191b8e929 [ 294.948359][ T9344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.948390][ T9344] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.948412][ T9344] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 294.948428][ T9344] RDX: 0000000000028b40 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 294.948442][ T9344] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 294.948456][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.948470][ T9344] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 294.948502][ T9344] [ 294.948557][ T9344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.961607][ T9363] FAULT_INJECTION: forcing a failure. [ 295.961607][ T9363] name failslab, interval 1, probability 0, space 0, times 0 [ 295.974534][ T9363] CPU: 0 UID: 0 PID: 9363 Comm: syz.0.703 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 295.974584][ T9363] Tainted: [U]=USER [ 295.974593][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.974612][ T9363] Call Trace: [ 295.974621][ T9363] [ 295.974633][ T9363] dump_stack_lvl+0x16c/0x1f0 [ 295.974679][ T9363] should_fail_ex+0x512/0x640 [ 295.974720][ T9363] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 295.974774][ T9363] should_failslab+0xc2/0x120 [ 295.974802][ T9363] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 295.974837][ T9363] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 295.974864][ T9363] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 295.974892][ T9363] radix_tree_insert+0x247/0x630 [ 295.974920][ T9363] qrtr_node_enqueue+0x1077/0x12e0 [ 295.974942][ T9363] ? __asan_memcpy+0x3c/0x60 [ 295.974966][ T9363] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 295.974982][ T9363] ? skb_set_owner_w+0x31f/0x710 [ 295.975005][ T9363] ? skb_copy_header+0x20/0x2b0 [ 295.975028][ T9363] ? __pfx_skb_set_owner_w+0x10/0x10 [ 295.975050][ T9363] ? __pskb_copy_fclone+0x48e/0xb50 [ 295.975067][ T9363] ? __pfx__copy_from_iter+0x10/0x10 [ 295.975098][ T9363] qrtr_bcast_enqueue+0xc7/0x1b0 [ 295.975121][ T9363] qrtr_sendmsg+0x441/0x7b0 [ 295.975138][ T9363] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 295.975155][ T9363] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 295.975182][ T9363] sock_write_iter+0x4fc/0x5b0 [ 295.975202][ T9363] ? __pfx_sock_write_iter+0x10/0x10 [ 295.975231][ T9363] ? preempt_schedule_common+0x44/0xc0 [ 295.975256][ T9363] ? copy_iovec_from_user+0x131/0x170 [ 295.975285][ T9363] do_iter_readv_writev+0x657/0x950 [ 295.975311][ T9363] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 295.975339][ T9363] ? bpf_lsm_file_permission+0x9/0x10 [ 295.975358][ T9363] ? security_file_permission+0x71/0x210 [ 295.975382][ T9363] ? rw_verify_area+0xcf/0x680 [ 295.975407][ T9363] vfs_writev+0x35f/0xde0 [ 295.975444][ T9363] ? __pfx_vfs_writev+0x10/0x10 [ 295.975485][ T9363] ? __fget_files+0x20e/0x3c0 [ 295.975516][ T9363] ? do_writev+0x28c/0x340 [ 295.975538][ T9363] do_writev+0x28c/0x340 [ 295.975564][ T9363] ? __pfx_do_writev+0x10/0x10 [ 295.975610][ T9363] do_syscall_64+0xcd/0x490 [ 295.975645][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.975664][ T9363] RIP: 0033:0x7fd191b8e929 [ 295.975679][ T9363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.975697][ T9363] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 295.975714][ T9363] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 295.975726][ T9363] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 295.975736][ T9363] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 295.975746][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.975756][ T9363] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 295.975779][ T9363] [ 296.741764][ T9385] netlink: 11092 bytes leftover after parsing attributes in process `syz.3.709'. [ 297.873358][ T9408] FAULT_INJECTION: forcing a failure. [ 297.873358][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 297.890486][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.3.714 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 297.890538][ T9408] Tainted: [U]=USER [ 297.890547][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.890565][ T9408] Call Trace: [ 297.890575][ T9408] [ 297.890586][ T9408] dump_stack_lvl+0x16c/0x1f0 [ 297.890636][ T9408] should_fail_ex+0x512/0x640 [ 297.890689][ T9408] ? fs_reclaim_acquire+0xae/0x150 [ 297.890728][ T9408] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.890771][ T9408] should_failslab+0xc2/0x120 [ 297.890800][ T9408] __kmalloc_noprof+0xd2/0x510 [ 297.890856][ T9408] tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.890904][ T9408] ? tomoyo_profile+0x47/0x60 [ 297.890954][ T9408] tomoyo_path_number_perm+0x245/0x580 [ 297.890988][ T9408] ? tomoyo_path_number_perm+0x237/0x580 [ 297.891028][ T9408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.891108][ T9408] ? find_held_lock+0x2b/0x80 [ 297.891139][ T9408] ? hook_file_ioctl_common+0x145/0x410 [ 297.891180][ T9408] ? __fget_files+0x20e/0x3c0 [ 297.891224][ T9408] security_file_ioctl+0x9b/0x240 [ 297.891262][ T9408] __x64_sys_ioctl+0xb7/0x210 [ 297.891301][ T9408] do_syscall_64+0xcd/0x490 [ 297.891349][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.891380][ T9408] RIP: 0033:0x7fa0a558e929 [ 297.891405][ T9408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.891431][ T9408] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.891461][ T9408] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 297.891482][ T9408] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 297.891500][ T9408] RBP: 00007fa0a5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 297.891519][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.891536][ T9408] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 297.891577][ T9408] [ 297.893373][ T9408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.273260][ T7031] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 300.475142][ T9615] FAULT_INJECTION: forcing a failure. [ 300.475142][ T9615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.571951][ T9615] CPU: 0 UID: 0 PID: 9615 Comm: syz.0.729 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 300.572005][ T9615] Tainted: [U]=USER [ 300.572016][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.572033][ T9615] Call Trace: [ 300.572043][ T9615] [ 300.572055][ T9615] dump_stack_lvl+0x16c/0x1f0 [ 300.572104][ T9615] should_fail_ex+0x512/0x640 [ 300.572151][ T9615] strncpy_from_user+0x3b/0x2e0 [ 300.572195][ T9615] getname_flags.part.0+0x8f/0x550 [ 300.572234][ T9615] getname_flags+0x93/0xf0 [ 300.572271][ T9615] do_sys_openat2+0xb8/0x1d0 [ 300.572305][ T9615] ? __pfx_do_sys_openat2+0x10/0x10 [ 300.572352][ T9615] ? __fget_files+0x20e/0x3c0 [ 300.572401][ T9615] __x64_sys_openat+0x174/0x210 [ 300.572433][ T9615] ? __pfx___x64_sys_openat+0x10/0x10 [ 300.572485][ T9615] do_syscall_64+0xcd/0x490 [ 300.572532][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.572563][ T9615] RIP: 0033:0x7fd191b8e929 [ 300.572588][ T9615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.572618][ T9615] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 300.572647][ T9615] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 300.572668][ T9615] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 300.572687][ T9615] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 300.572704][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.572722][ T9615] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 300.572763][ T9615] [ 302.796658][ T9667] random: crng reseeded on system resumption [ 303.166654][ T9707] FAULT_INJECTION: forcing a failure. [ 303.166654][ T9707] name failslab, interval 1, probability 0, space 0, times 0 [ 303.195464][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz.2.742 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 303.195515][ T9707] Tainted: [U]=USER [ 303.195526][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.195553][ T9707] Call Trace: [ 303.195563][ T9707] [ 303.195576][ T9707] dump_stack_lvl+0x16c/0x1f0 [ 303.195628][ T9707] should_fail_ex+0x512/0x640 [ 303.195672][ T9707] ? fs_reclaim_acquire+0xae/0x150 [ 303.195711][ T9707] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 303.195753][ T9707] should_failslab+0xc2/0x120 [ 303.195782][ T9707] __kmalloc_noprof+0xd2/0x510 [ 303.195839][ T9707] tomoyo_realpath_from_path+0xc2/0x6e0 [ 303.195895][ T9707] tomoyo_check_open_permission+0x2ab/0x3c0 [ 303.195930][ T9707] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 303.196010][ T9707] ? do_raw_spin_lock+0x12c/0x2b0 [ 303.196071][ T9707] tomoyo_file_open+0x6b/0x90 [ 303.196121][ T9707] security_file_open+0x84/0x1e0 [ 303.196162][ T9707] do_dentry_open+0x596/0x1c10 [ 303.196221][ T9707] vfs_open+0x82/0x3f0 [ 303.196259][ T9707] path_openat+0x1de4/0x2cb0 [ 303.196315][ T9707] ? __pfx_path_openat+0x10/0x10 [ 303.196359][ T9707] ? __lock_acquire+0xb8a/0x1c90 [ 303.196409][ T9707] do_filp_open+0x20b/0x470 [ 303.196455][ T9707] ? __pfx_do_filp_open+0x10/0x10 [ 303.196530][ T9707] ? alloc_fd+0x471/0x7d0 [ 303.196590][ T9707] do_sys_openat2+0x11b/0x1d0 [ 303.196624][ T9707] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.196660][ T9707] ? find_held_lock+0x2b/0x80 [ 303.196703][ T9707] __x64_sys_openat+0x174/0x210 [ 303.196740][ T9707] ? __pfx___x64_sys_openat+0x10/0x10 [ 303.196794][ T9707] do_syscall_64+0xcd/0x490 [ 303.196843][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.196874][ T9707] RIP: 0033:0x7f032298e929 [ 303.196898][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.196928][ T9707] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.196957][ T9707] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 303.196977][ T9707] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 303.196996][ T9707] RBP: 00007f0322a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 303.197014][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.197031][ T9707] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 303.197072][ T9707] [ 303.199591][ T9707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.917955][ T9972] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.757'. [ 311.115433][T10085] Loading of unsigned module is rejected [ 314.299418][T10181] Loading of unsigned module is rejected [ 315.952367][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 315.963477][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 316.142126][T10200] kexec: Could not allocate control_code_buffer [ 316.795994][T10314] ubi: mtd0 is already attached to ubi0 [ 316.809295][T10314] ubi0: detaching mtd0 [ 316.851310][T10314] ubi0: mtd0 is detached [ 318.425424][T10359] ubi0: attaching mtd0 [ 318.430937][T10359] ubi0: scanning is finished [ 318.437412][T10359] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 318.846759][T10359] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 321.473797][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.805'. [ 321.757693][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.240767][T10526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.447456][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.457864][T10526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.549417][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.556086][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.052516][T10641] ubi0: attaching mtd0 [ 324.095893][T10641] ubi0: scanning is finished [ 324.197804][T10641] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 324.379965][T10641] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 330.502356][T10822] syz.3.833 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 330.738770][T10821] netlink: 25 bytes leftover after parsing attributes in process `syz.0.834'. [ 331.121588][T10861] cifs: Unknown parameter '/proc/self/cgroup' [ 331.224678][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.835'. [ 334.474106][T10926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 336.156254][T11044] FAULT_INJECTION: forcing a failure. [ 336.156254][T11044] name failslab, interval 1, probability 0, space 0, times 0 [ 336.182788][T11044] CPU: 0 UID: 0 PID: 11044 Comm: syz.0.851 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 336.182840][T11044] Tainted: [U]=USER [ 336.182849][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.182866][T11044] Call Trace: [ 336.182876][T11044] [ 336.182888][T11044] dump_stack_lvl+0x16c/0x1f0 [ 336.182937][T11044] should_fail_ex+0x512/0x640 [ 336.182978][T11044] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 336.183034][T11044] should_failslab+0xc2/0x120 [ 336.183062][T11044] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 336.183107][T11044] ? ioctx_alloc+0x1a4/0x2120 [ 336.183153][T11044] ioctx_alloc+0x1a4/0x2120 [ 336.183204][T11044] ? find_held_lock+0x2b/0x80 [ 336.183235][T11044] ? __pfx_ioctx_alloc+0x10/0x10 [ 336.183267][T11044] ? __might_fault+0x13b/0x190 [ 336.183319][T11044] __x64_sys_io_setup+0xc9/0x210 [ 336.183360][T11044] do_syscall_64+0xcd/0x490 [ 336.183411][T11044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.183439][T11044] RIP: 0033:0x7fd191b8e929 [ 336.183463][T11044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.183494][T11044] RSP: 002b:00007fd192979038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 336.183525][T11044] RAX: ffffffffffffffda RBX: 00007fd191db5fa0 RCX: 00007fd191b8e929 [ 336.183545][T11044] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 336.183564][T11044] RBP: 00007fd191c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 336.183581][T11044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.183598][T11044] R13: 0000000000000000 R14: 00007fd191db5fa0 R15: 00007ffdcdb7b4a8 [ 336.183638][T11044] [ 336.908789][T11061] random: crng reseeded on system resumption [ 339.432284][T11120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.860'. [ 341.527611][T11262] .SR: entered promiscuous mode [ 342.739533][T11287] FAULT_INJECTION: forcing a failure. [ 342.739533][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 342.769115][T11287] CPU: 1 UID: 2054 PID: 11287 Comm: syz.3.873 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 342.769168][T11287] Tainted: [U]=USER [ 342.769177][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.769195][T11287] Call Trace: [ 342.769205][T11287] [ 342.769217][T11287] dump_stack_lvl+0x16c/0x1f0 [ 342.769268][T11287] should_fail_ex+0x512/0x640 [ 342.769307][T11287] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 342.769350][T11287] should_failslab+0xc2/0x120 [ 342.769379][T11287] __kmalloc_cache_noprof+0x6a/0x3e0 [ 342.769417][T11287] ? key_user_lookup+0x169/0x560 [ 342.769454][T11287] ? key_user_lookup+0x195/0x560 [ 342.769494][T11287] key_user_lookup+0x195/0x560 [ 342.769522][T11287] ? __pfx_key_user_lookup+0x10/0x10 [ 342.769545][T11287] ? security_key_permission+0x79/0x240 [ 342.769570][T11287] key_alloc+0x18b/0x1330 [ 342.769598][T11287] ? __pfx_keyring_search+0x10/0x10 [ 342.769625][T11287] ? __pfx_key_alloc+0x10/0x10 [ 342.769646][T11287] ? __pfx_key_default_cmp+0x10/0x10 [ 342.769672][T11287] ? __pfx_keyring_search_iterator+0x10/0x10 [ 342.769700][T11287] keyring_alloc+0x44/0xc0 [ 342.769727][T11287] look_up_user_keyrings+0x46d/0x760 [ 342.769751][T11287] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 342.769780][T11287] lookup_user_key+0x1a3/0x1300 [ 342.769804][T11287] ? __pfx_lookup_user_key+0x10/0x10 [ 342.769822][T11287] ? do_futex+0x122/0x350 [ 342.769850][T11287] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 342.769875][T11287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.769902][T11287] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 342.769928][T11287] keyctl_keyring_clear+0x24/0x1a0 [ 342.769955][T11287] __do_sys_keyctl+0x355/0x590 [ 342.769976][T11287] do_syscall_64+0xcd/0x490 [ 342.770005][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.770023][T11287] RIP: 0033:0x7fa0a558e929 [ 342.770039][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.770057][T11287] RSP: 002b:00007fa0a639f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 342.770075][T11287] RAX: ffffffffffffffda RBX: 00007fa0a57b5fa0 RCX: 00007fa0a558e929 [ 342.770087][T11287] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 342.770097][T11287] RBP: 00007fa0a5610b39 R08: 0000000000000008 R09: 0000000000000000 [ 342.770108][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.770118][T11287] R13: 0000000000000000 R14: 00007fa0a57b5fa0 R15: 00007ffeabf5d998 [ 342.770140][T11287] [ 342.824277][T11297] FAULT_INJECTION: forcing a failure. [ 342.824277][T11297] name failslab, interval 1, probability 0, space 0, times 0 [ 343.074596][T11297] CPU: 0 UID: 0 PID: 11297 Comm: syz.2.874 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 343.074648][T11297] Tainted: [U]=USER [ 343.074658][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.074676][T11297] Call Trace: [ 343.074685][T11297] [ 343.074697][T11297] dump_stack_lvl+0x16c/0x1f0 [ 343.074747][T11297] should_fail_ex+0x512/0x640 [ 343.074792][T11297] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 343.074843][T11297] should_failslab+0xc2/0x120 [ 343.074873][T11297] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 343.074921][T11297] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 343.074970][T11297] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 343.075030][T11297] radix_tree_insert+0x247/0x630 [ 343.075081][T11297] qrtr_node_enqueue+0x1077/0x12e0 [ 343.075121][T11297] ? __asan_memcpy+0x3c/0x60 [ 343.075166][T11297] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 343.075194][T11297] ? skb_set_owner_w+0x31f/0x710 [ 343.075235][T11297] ? skb_copy_header+0x20/0x2b0 [ 343.075274][T11297] ? __pfx_skb_set_owner_w+0x10/0x10 [ 343.075307][T11297] ? __pskb_copy_fclone+0x48e/0xb50 [ 343.075336][T11297] ? __pfx__copy_from_iter+0x10/0x10 [ 343.075389][T11297] qrtr_bcast_enqueue+0xc7/0x1b0 [ 343.075428][T11297] qrtr_sendmsg+0x441/0x7b0 [ 343.075460][T11297] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 343.075492][T11297] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 343.075540][T11297] sock_write_iter+0x4fc/0x5b0 [ 343.075576][T11297] ? __pfx_sock_write_iter+0x10/0x10 [ 343.075628][T11297] ? __futex_wait+0x24c/0x2f0 [ 343.075672][T11297] ? copy_iovec_from_user+0x131/0x170 [ 343.075723][T11297] do_iter_readv_writev+0x657/0x950 [ 343.075768][T11297] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 343.075814][T11297] ? bpf_lsm_file_permission+0x9/0x10 [ 343.075841][T11297] ? security_file_permission+0x71/0x210 [ 343.075879][T11297] ? rw_verify_area+0xcf/0x680 [ 343.075921][T11297] vfs_writev+0x35f/0xde0 [ 343.075974][T11297] ? __pfx_vfs_writev+0x10/0x10 [ 343.076079][T11297] ? __fget_files+0x20e/0x3c0 [ 343.076134][T11297] ? do_writev+0x28c/0x340 [ 343.076172][T11297] do_writev+0x28c/0x340 [ 343.076214][T11297] ? __pfx_do_writev+0x10/0x10 [ 343.076268][T11297] do_syscall_64+0xcd/0x490 [ 343.076318][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.076348][T11297] RIP: 0033:0x7f032298e929 [ 343.076375][T11297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.076402][T11297] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 343.076433][T11297] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 343.076452][T11297] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 343.076471][T11297] RBP: 00007f0322a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 343.076488][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.076505][T11297] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 343.076544][T11297] [ 343.883543][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 344.869926][T11355] openvswitch: HfR: Dropping previously announced user features [ 345.257755][ T30] audit: type=1800 audit(6442451981.241:6): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.883" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 345.641478][T11419] openvswitch: netlink: Key type 29 is not supported [ 347.372298][T11456] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 348.610617][T11541] ubi0: attaching mtd0 [ 348.710406][T11541] ubi0: scanning is finished [ 348.715109][T11541] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 348.916937][T11541] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 350.652770][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 350.812385][T11688] Loading of unsigned module is rejected [ 351.410716][T11691] could not allocate digest TFM handle [ 351.458216][T11714] ubi0: attaching mtd0 [ 351.535890][T11714] ubi0: scanning is finished [ 351.551152][T11714] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 351.817871][T11714] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 356.537493][T12027] FAULT_INJECTION: forcing a failure. [ 356.537493][T12027] name failslab, interval 1, probability 0, space 0, times 0 [ 356.553024][T12027] CPU: 0 UID: 0 PID: 12027 Comm: syz.2.926 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 356.553076][T12027] Tainted: [U]=USER [ 356.553085][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.553101][T12027] Call Trace: [ 356.553111][T12027] [ 356.553122][T12027] dump_stack_lvl+0x16c/0x1f0 [ 356.553174][T12027] should_fail_ex+0x512/0x640 [ 356.553217][T12027] ? __kmalloc_noprof+0xbf/0x510 [ 356.553265][T12027] ? get_modalias+0xbb/0x380 [ 356.553295][T12027] should_failslab+0xc2/0x120 [ 356.553326][T12027] __kmalloc_noprof+0xd2/0x510 [ 356.553369][T12027] ? get_modalias+0x20f/0x380 [ 356.553408][T12027] get_modalias+0xbb/0x380 [ 356.553447][T12027] ? __pfx_sys_dmi_modalias_show+0x10/0x10 [ 356.553485][T12027] sys_dmi_modalias_show+0x1f/0xb0 [ 356.553519][T12027] dev_attr_show+0x56/0xe0 [ 356.553552][T12027] ? __pfx_dev_attr_show+0x10/0x10 [ 356.553579][T12027] sysfs_kf_seq_show+0x213/0x3e0 [ 356.553626][T12027] seq_read_iter+0x506/0x12c0 [ 356.553685][T12027] kernfs_fop_read_iter+0x40f/0x5a0 [ 356.553717][T12027] ? rw_verify_area+0xcf/0x680 [ 356.553761][T12027] vfs_read+0x8bf/0xc60 [ 356.553808][T12027] ? __pfx___mutex_lock+0x10/0x10 [ 356.553865][T12027] ? __pfx_vfs_read+0x10/0x10 [ 356.553938][T12027] ksys_read+0x12a/0x250 [ 356.553981][T12027] ? __pfx_ksys_read+0x10/0x10 [ 356.554038][T12027] do_syscall_64+0xcd/0x490 [ 356.554085][T12027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.554116][T12027] RIP: 0033:0x7f032298e929 [ 356.554142][T12027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.554173][T12027] RSP: 002b:00007f03238b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.554202][T12027] RAX: ffffffffffffffda RBX: 00007f0322bb6080 RCX: 00007f032298e929 [ 356.554222][T12027] RDX: 0000000000001016 RSI: 0000200000000000 RDI: 0000000000000002 [ 356.554241][T12027] RBP: 00007f0322a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 356.554258][T12027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.554275][T12027] R13: 0000000000000000 R14: 00007f0322bb6080 R15: 00007ffe72fb39d8 [ 356.554317][T12027] [ 357.034151][T12016] can: request_module (can-proto-0) failed. [ 357.823881][ T7031] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 358.065834][T12072] ptrace attach of "./syz-executor exec"[5854] was attempted by ""[12072] [ 358.191067][T12083] netlink: 'syz.2.929': attribute type 2 has an invalid length. [ 358.979954][ T7031] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 362.703155][T12389] random: crng reseeded on system resumption [ 364.973694][T12511] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.027355][T12511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.121273][T12511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.135802][T12511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.693181][T12560] ubi0: attaching mtd0 [ 365.718317][T12560] ubi0: scanning is finished [ 365.725147][T12560] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 365.975220][T12560] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 367.030102][ T7031] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.098949][ T7031] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.163867][T12606] can: request_module (can-proto-3) failed. [ 367.178996][ T7031] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.185918][ T8312] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.551250][T12722] [ 369.553651][T12722] ====================================================== [ 369.560960][T12722] WARNING: possible circular locking dependency detected [ 369.568164][T12722] 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 Tainted: G U [ 369.576948][T12722] ------------------------------------------------------ [ 369.584149][T12722] syz.2.978/12722 is trying to acquire lock: [ 369.590238][T12722] ffff8881427136c8 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 369.600119][T12722] [ 369.600119][T12722] but task is already holding lock: [ 369.607494][T12722] ffff888142713190 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 369.618761][T12722] [ 369.618761][T12722] which lock already depends on the new lock. [ 369.618761][T12722] [ 369.629181][T12722] [ 369.629181][T12722] the existing dependency chain (in reverse order) is: [ 369.638211][T12722] [ 369.638211][T12722] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 369.646843][T12722] blk_alloc_queue+0x619/0x760 [ 369.652328][T12722] blk_mq_alloc_queue+0x175/0x290 [ 369.657897][T12722] __blk_mq_alloc_disk+0x29/0x120 [ 369.663470][T12722] nbd_dev_add+0x4a0/0xbc0 [ 369.668432][T12722] nbd_init+0x181/0x320 [ 369.673132][T12722] do_one_initcall+0x120/0x6e0 [ 369.678463][T12722] kernel_init_freeable+0x5c2/0x900 [ 369.684384][T12722] kernel_init+0x1c/0x2b0 [ 369.689262][T12722] ret_from_fork+0x5d7/0x6f0 [ 369.694399][T12722] ret_from_fork_asm+0x1a/0x30 [ 369.699701][T12722] [ 369.699701][T12722] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 369.707024][T12722] fs_reclaim_acquire+0x102/0x150 [ 369.712587][T12722] prepare_alloc_pages+0x162/0x610 [ 369.718323][T12722] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 369.724762][T12722] __alloc_pages_noprof+0xb/0x1b0 [ 369.730333][T12722] pcpu_populate_chunk+0x110/0xb00 [ 369.735988][T12722] pcpu_alloc_noprof+0x86a/0x1470 [ 369.741577][T12722] xt_percpu_counter_alloc+0x13e/0x1b0 [ 369.747574][T12722] find_check_entry.constprop.0+0xbc/0x9b0 [ 369.753933][T12722] translate_table+0xc98/0x1720 [ 369.759326][T12722] ipt_register_table+0x102/0x430 [ 369.764892][T12722] iptable_mangle_table_init+0x40/0x60 [ 369.770987][T12722] xt_find_table_lock+0x2e4/0x520 [ 369.776552][T12722] xt_request_find_table_lock+0x28/0xf0 [ 369.782643][T12722] get_info+0x190/0x610 [ 369.787336][T12722] do_ipt_get_ctl+0x169/0xa10 [ 369.792558][T12722] nf_getsockopt+0x79/0xe0 [ 369.797519][T12722] ip_getsockopt+0x18c/0x1e0 [ 369.802665][T12722] tcp_getsockopt+0xa1/0x100 [ 369.807806][T12722] do_sock_getsockopt+0x3ff/0x800 [ 369.813397][T12722] __sys_getsockopt+0x123/0x1b0 [ 369.818816][T12722] __x64_sys_getsockopt+0xbd/0x160 [ 369.824479][T12722] do_syscall_64+0xcd/0x490 [ 369.829534][T12722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.835980][T12722] [ 369.835980][T12722] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 369.843838][T12722] __mutex_lock+0x199/0xb90 [ 369.848890][T12722] pcpu_alloc_noprof+0xb4c/0x1470 [ 369.854552][T12722] sbitmap_init_node+0x2fd/0x770 [ 369.860116][T12722] sbitmap_queue_init_node+0x41/0x560 [ 369.866039][T12722] blk_mq_init_tags+0x12d/0x2b0 [ 369.871524][T12722] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 369.877699][T12722] blk_mq_init_sched+0x30c/0x610 [ 369.883178][T12722] elevator_switch+0x1e1/0x7f0 [ 369.888479][T12722] elevator_change+0x2ac/0x400 [ 369.893800][T12722] elevator_set_default+0x292/0x320 [ 369.899545][T12722] blk_register_queue+0x393/0x4f0 [ 369.905203][T12722] __add_disk+0x74a/0xf00 [ 369.910082][T12722] add_disk_fwnode+0x13f/0x5d0 [ 369.915389][T12722] nbd_dev_add+0x791/0xbc0 [ 369.920350][T12722] nbd_init+0x181/0x320 [ 369.925044][T12722] do_one_initcall+0x120/0x6e0 [ 369.930460][T12722] kernel_init_freeable+0x5c2/0x900 [ 369.936467][T12722] kernel_init+0x1c/0x2b0 [ 369.941516][T12722] ret_from_fork+0x5d7/0x6f0 [ 369.946663][T12722] ret_from_fork_asm+0x1a/0x30 [ 369.951978][T12722] [ 369.951978][T12722] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 369.959842][T12722] __lock_acquire+0x126f/0x1c90 [ 369.965257][T12722] lock_acquire+0x179/0x350 [ 369.970343][T12722] __mutex_lock+0x199/0xb90 [ 369.975408][T12722] queue_requests_store+0x1c7/0x310 [ 369.981162][T12722] queue_attr_store+0x279/0x320 [ 369.986819][T12722] sysfs_kf_write+0xef/0x150 [ 369.991956][T12722] kernfs_fop_write_iter+0x351/0x510 [ 369.997783][T12722] iter_file_splice_write+0x91c/0x1150 [ 370.003877][T12722] direct_splice_actor+0x18f/0x6c0 [ 370.009540][T12722] splice_direct_to_actor+0x345/0xa30 [ 370.015456][T12722] do_splice_direct+0x174/0x240 [ 370.020850][T12722] do_sendfile+0xb06/0xe50 [ 370.025811][T12722] __x64_sys_sendfile64+0x1d8/0x220 [ 370.031570][T12722] do_syscall_64+0xcd/0x490 [ 370.036983][T12722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.043418][T12722] [ 370.043418][T12722] other info that might help us debug this: [ 370.043418][T12722] [ 370.053659][T12722] Chain exists of: [ 370.053659][T12722] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 370.053659][T12722] [ 370.067444][T12722] Possible unsafe locking scenario: [ 370.067444][T12722] [ 370.075166][T12722] CPU0 CPU1 [ 370.080536][T12722] ---- ---- [ 370.085909][T12722] lock(&q->q_usage_counter(io)#59); [ 370.091311][T12722] lock(fs_reclaim); [ 370.097915][T12722] lock(&q->q_usage_counter(io)#59); [ 370.106065][T12722] lock(&q->elevator_lock); [ 370.110689][T12722] [ 370.110689][T12722] *** DEADLOCK *** [ 370.110689][T12722] [ 370.118859][T12722] 5 locks held by syz.2.978/12722: [ 370.124065][T12722] #0: ffff8880367ac428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 370.134131][T12722] #1: ffff88805d480488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 370.144171][T12722] #2: ffff888142f0cd28 (kn->active#183){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 370.154478][T12722] #3: ffff888142713190 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 370.166291][T12722] #4: ffff8881427131c8 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 370.178372][T12722] [ 370.178372][T12722] stack backtrace: [ 370.184535][T12722] CPU: 1 UID: 0 PID: 12722 Comm: syz.2.978 Tainted: G U 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 370.184569][T12722] Tainted: [U]=USER [ 370.184576][T12722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.184589][T12722] Call Trace: [ 370.184596][T12722] [ 370.184604][T12722] dump_stack_lvl+0x116/0x1f0 [ 370.184637][T12722] print_circular_bug+0x275/0x350 [ 370.184667][T12722] check_noncircular+0x14c/0x170 [ 370.184705][T12722] __lock_acquire+0x126f/0x1c90 [ 370.184736][T12722] ? __lock_acquire+0xb8a/0x1c90 [ 370.184765][T12722] lock_acquire+0x179/0x350 [ 370.184793][T12722] ? queue_requests_store+0x1c7/0x310 [ 370.184813][T12722] ? __pfx___might_resched+0x10/0x10 [ 370.184836][T12722] ? do_raw_spin_lock+0x12c/0x2b0 [ 370.184870][T12722] __mutex_lock+0x199/0xb90 [ 370.184902][T12722] ? queue_requests_store+0x1c7/0x310 [ 370.184922][T12722] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 370.184951][T12722] ? queue_requests_store+0x1c7/0x310 [ 370.184970][T12722] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.185000][T12722] ? __pfx___mutex_lock+0x10/0x10 [ 370.185033][T12722] ? __pfx_autoremove_wake_function+0x10/0x10 [ 370.185063][T12722] ? queue_requests_store+0x1c7/0x310 [ 370.185081][T12722] queue_requests_store+0x1c7/0x310 [ 370.185101][T12722] ? __pfx_queue_requests_store+0x10/0x10 [ 370.185122][T12722] ? __mutex_trylock_common+0xe9/0x250 [ 370.185152][T12722] ? __pfx_queue_requests_store+0x10/0x10 [ 370.185172][T12722] queue_attr_store+0x279/0x320 [ 370.185204][T12722] ? __pfx_queue_attr_store+0x10/0x10 [ 370.185234][T12722] ? __lock_acquire+0x622/0x1c90 [ 370.185268][T12722] ? find_held_lock+0x2b/0x80 [ 370.185290][T12722] ? sysfs_file_kobj+0xe4/0x290 [ 370.185316][T12722] ? __pfx_queue_attr_store+0x10/0x10 [ 370.185347][T12722] sysfs_kf_write+0xef/0x150 [ 370.185372][T12722] kernfs_fop_write_iter+0x351/0x510 [ 370.185395][T12722] ? __pfx_sysfs_kf_write+0x10/0x10 [ 370.185421][T12722] iter_file_splice_write+0x91c/0x1150 [ 370.185456][T12722] ? __pfx_iter_file_splice_write+0x10/0x10 [ 370.185487][T12722] ? __pfx_copy_splice_read+0x10/0x10 [ 370.185518][T12722] ? __pfx_iter_file_splice_write+0x10/0x10 [ 370.185547][T12722] direct_splice_actor+0x18f/0x6c0 [ 370.185576][T12722] splice_direct_to_actor+0x345/0xa30 [ 370.185603][T12722] ? __pfx_direct_splice_actor+0x10/0x10 [ 370.185632][T12722] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 370.185663][T12722] do_splice_direct+0x174/0x240 [ 370.185689][T12722] ? __pfx_do_splice_direct+0x10/0x10 [ 370.185723][T12722] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 370.185752][T12722] ? rw_verify_area+0xcf/0x680 [ 370.185780][T12722] do_sendfile+0xb06/0xe50 [ 370.185809][T12722] ? __pfx_do_sendfile+0x10/0x10 [ 370.185839][T12722] ? __x64_sys_futex+0x1e0/0x4c0 [ 370.185864][T12722] ? __x64_sys_futex+0x1e9/0x4c0 [ 370.185891][T12722] __x64_sys_sendfile64+0x1d8/0x220 [ 370.185912][T12722] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 370.185936][T12722] do_syscall_64+0xcd/0x490 [ 370.185969][T12722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.185990][T12722] RIP: 0033:0x7f032298e929 [ 370.186007][T12722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.186029][T12722] RSP: 002b:00007f03238da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 370.186049][T12722] RAX: ffffffffffffffda RBX: 00007f0322bb5fa0 RCX: 00007f032298e929 [ 370.186063][T12722] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 370.186076][T12722] RBP: 00007f0322a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 370.186089][T12722] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 370.186102][T12722] R13: 0000000000000000 R14: 00007f0322bb5fa0 R15: 00007ffe72fb39d8 [ 370.186122][T12722] [ 370.616345][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'.