last executing test programs: 1m21.295025304s ago: executing program 2 (id=6530): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaadaabb00000a000500aaaa6a417b43000008005582", @ANYRES32=r1, @ANYBLOB="08000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYBLOB="1372bf72ee2d1d0b23e9b9542d63761002de37d0c62241129467be5953667d7c0edd3cf56db80e9335467999a01b7c880cd6d3f7e95a4a56c753c6ab93865893c1d46970c4177d3bbeea2e33b9bdaaea2863a81eacd388b60d88f15336f1ca3b766cf4abcbe2"], 0x1ac}}, 0x20044094) r3 = getsockopt$auto_SO_PEERPIDFD(r0, 0xb886, 0x4d, &(0x7f0000000000)='vxcan1\x00', &(0x7f0000000100)=0x4) recvmmsg$auto(r3, &(0x7f0000000440)={{&(0x7f0000000300)="4268a4785899057dab16c0996c865620b32c94771c1b5ab18a8022c389f2c1a46a0943b084eeee2c7f55c33d9679a5a195a85d92abf37c98a50cd7ab0002f0bc022052812ca4a1522dbc35ebb6a2139e012627a79141070edbfe612b20c7c874ede1963c1fb055f8dc4ccdfbab2e86e16bb90015cd441796cb1988", 0x4, &(0x7f0000000380)={&(0x7f0000000280)="de77abeb7a4935d404cb313d68c56e8f9be6d7633607f7ce2376c4c4a0aa6bf3fdee2559d6eb0ee66983c3d2afd6434b3763d99907e8250a", 0xfe4}, 0x33, &(0x7f00000003c0)="32c3b496c5fdbafb944b6a9bfddb4b6c2fab0a3e519e411d7fd5d364a9646e527e76a20923114105f8c642ef8290c5364d73cbd79f398572405b838f0768742b665376730a8672bd385114c0fc4d835dd5a41eec979e6a2e2217735f47173d33c1efb584b2d53257b22b7c286fc2", 0x5, 0x101}}, 0x1, 0x0, &(0x7f0000000480)={0x81, 0x9}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000004c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x10000009}, 0x7}, 0x3, 0x7) 1m20.016949785s ago: executing program 2 (id=6536): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x189002, 0x0) fanotify_init$auto(0x5, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x80040200, 0x3}, 0x7}, 0x3, 0xcad7) 1m18.506980922s ago: executing program 2 (id=6541): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91pds\x1c\xb2J\x99\x00:\x00!\r>\x94f\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcd\x01\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb6\x00\x00\x00\x00\x00\x00', 0x48, 0x7) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)="2d03", 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r2 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r2, 0x29, 0x4b, &(0x7f00000000c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000000)=""/192, 0xc0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x0, 0x5, 0x4, 0x0) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 1m17.384716991s ago: executing program 2 (id=6547): r0 = gettid() r1 = getpid() kcmp$auto_KCMP_FILES(r0, r1, 0x2, 0x6, 0x3ff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x9, 0x4, 0x13, 0x943, 0x1ffe0, 0x3, 0x6, 0x6, 0x9, 0xffffffff, 0x2, 0x7, 0x200, 0x8, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x1, 0xfffff8ab, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x3, 0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x24030000, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r4, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) mincore$auto(0xd, 0x2, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00') close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae90, &(0x7f00000001c0)={0x2}) 1m17.061402598s ago: executing program 2 (id=6550): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ttyqb/power/runtime_suspended_time\x00', 0x18b183, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/pagemap\x00', 0xe77aa79ad5053ea5, 0x0) read$auto(r0, 0x0, 0x20) madvise$auto(0x6, 0x5, 0x15) sysfs$auto(0x2, 0x41, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) ioctl$auto_TIOCNXCL2(0xffffffffffffffff, 0x540d, &(0x7f0000000500)) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xd45a78b599bc539, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r1, 0x0, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) r2 = socket(0x11, 0x80003, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r2, 0x107, 0xd, 0x0, 0x8000) madvise$auto(0x0, 0x200004, 0x15) set_mempolicy_home_node$auto(0x0, 0x10001, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) lseek$auto(0x3, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000180), 0x246402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400b008513de80bd7577f71c263890464c4e4624dba6412", @ANYRES16=r4, @ANYBLOB="01002bbd7008fcdbdf25060000002547ff1d4cacf0b3135352c6ebd38c1e268a613eb286c68e658427d6651851b306f286110a32b680e9987071665de6d2ebefd044ed84320c72d00899ab9c8a6e59e70f1618daaacd8c90f453d0d58fb822116e421a8ceaa7188ba910cd7f9ab076395c25830a18ecfa15a4a7729379b5492261ec357b80852c663ecd918b5b1c8a713f6a798d706d6f1cd622d5e4d49f1d61d76983c5e1b43006b87bfdfa207fb11e20153c"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m16.304759432s ago: executing program 2 (id=6554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r3, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff080001006e854e23bb3add496ee720de648ce7aa8daf43901c82d16db3731390601e712bc645fdc7be35c7e61b86c6c71a38859c2e714fdebfcf8349ebbc8371f8c6632bab40baf5dd40ba7bf442599da875e2631b68e6671c1b9c13570cd08496dd909fd3da21f39ee4706be87b47c3176b2b2b9dbad58c8735211eeef4aa12f51435b3432bc521e0b86b40bd9df77b8f37c8540d768c27bf464cf7212b67d2bc"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) read$auto(r2, 0x0, 0x2000000000007) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r6, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 1m0.88946325s ago: executing program 32 (id=6554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r3, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff080001006e854e23bb3add496ee720de648ce7aa8daf43901c82d16db3731390601e712bc645fdc7be35c7e61b86c6c71a38859c2e714fdebfcf8349ebbc8371f8c6632bab40baf5dd40ba7bf442599da875e2631b68e6671c1b9c13570cd08496dd909fd3da21f39ee4706be87b47c3176b2b2b9dbad58c8735211eeef4aa12f51435b3432bc521e0b86b40bd9df77b8f37c8540d768c27bf464cf7212b67d2bc"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) read$auto(r2, 0x0, 0x2000000000007) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r6, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 19.563108274s ago: executing program 0 (id=6787): r0 = ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x5) setpriority$auto_PRIO_USER(0x2, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mprotect$auto(0x1ffff000, 0x8000000000000007, 0x100000c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000340)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa5663248ff0945dd2e405e0d37", 0x99) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x338, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_NAN_FUNC={0x275, 0xf0, 0x0, 0x1, [@generic="52c96f2ffe3d8d2cbdab385b4d1cd143358ddaef8ad34c12dab76adc775f4085c9ce0dad34edc1860b2295b0ebbf18b2521e5668650dff0c05fc98713cc0523759abfd773f7318e0412c895a07b872ad216328278f36e32327399a922f5ce486e82653569ae63e01975b52b73b5836fa278bba619816c3c4c2d83a324dd171a3e548add995e4fb2453d6f6ececa1a2915183e70f41ca80e84dc2f627673d49fdece62462204240e3752922bc33349fde6886cc99b1a1b394933f80fec1374aebee93649b98282bc8af", @nested={0x15e, 0x14f, 0x0, 0x1, [@nested={0x4, 0xe6}, @generic="61c4135fc485aeff237ef451f1af89fed8ddeccb62d66bc2bce52def408e6dda1500a53f6ea8d03cc209f25b479452a66a1417d7c4eef095187e9437b9742baa88de52e0109a79e17fe208506ab9fe7761d4f84f8f4800563960f248c8079728a552fcde72de73ce0fe2e424bb32fd74971ff03d2a84f27dab10908638efce6a41cf7b4609", @generic="a5541559bbd7755586a69a6b55cd8271f17e8f1c685840ff9fc20a07b47a656434bdd30f487a184fd64d5dd5ea3e125b88b972b4cbd24fc18a41fb3fe613a2f0cb4ea6b53b5f735968800c99a49f654237d1e9cb51fe63fd4f9d90344150362244085dfb050d4d02bfc4625b3b8adbdcdc04aa1e949b8908aadb3fb1e70c2203989f558d197fce0761c15ba58d5c24b6e5aaa99d6094e6b938836a45bae31da40c1e03a3f2005b317f455c4dade51d7e1d09789565cc29782f5727554d928943027f1c37cc19c00bce25586df4441e8063"]}, @nested={0x46, 0x101, 0x0, 0x1, [@generic="8cfa3faf54277c364e0a37", @typed={0x8, 0x38, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x2f}, @nested={0x4, 0x31}, @generic="0417f28bd9e6ce2e860c4ee0711eee391871f983660473ebf746f1e3fa070f771e45c1", @nested={0x4, 0xde}]}]}, @NL80211_ATTR_QOS_MAP={0xa7, 0xc7, "de80b34f756babc353a2fc04afc4839ff02facb7e5b020a45d0ed71f8aa7dd860c2f86222a7b9db0c1ec4774235a67896c907a959343d31625d141ae45838bdd9a95e45f4fbee4253a41555649e94c9948cdb0088fdb7a75b8bda2344929f8b91cb55c75ee62944f87f904c8f7fa35aa68d764316de80af42bd9c6f8f157612aa84cd1ff1b7538a16cfd38f5c1229daf6f00513c268a2f418180d1012519353bbea00a"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}]}, 0x338}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) r4 = ioctl$auto_TUNGETFILTER(r0, 0x801054db, &(0x7f0000000880)={0xe0, &(0x7f0000000600)={0x2, 0x2, 0x9, @inferred=r1}}) sendmsg$auto_NL80211_CMD_DEL_STATION(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r2, 0x103, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [@nested={0x4, 0x5f}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008806}, 0x800) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffc, 0xfffd, 0xdf, 0x13, 0xffffffffffffffff, 0x8100) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) acct$auto(0x0) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x1b8, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}, @NL80211_ATTR_FILS_DISCOVERY={0x190, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xcd, 0x3, "c8c8f6879e14041ba308e7a56da98a71060b5809f9f70a4077df8d075e65e5369fa33accb4e37e83056476e9292ede80961b4b0615a1db0412653bf9a8652eedaae41d140f02d532e1ddd6ce3188299cc22eea95efed0f2d935dc06d2e4b00a2ea22f7687cf53b08affa5bd3b25f08df0d37ce6d2683f35fe7be083bd899acc882f04ac95cec4ccee3acd83c16c76aebb0596346bf694453c233c53586ca857ea4c8a8a0e73e0199fbcdb9732e4b50a99cb112124d2b0f85517c8d0598d744705984d4137f8d18af0f"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xaa, 0x3, "07bf434725288e253729a02cfcd290f3e9ae36a897c840c86d320c670573ac12cc8cf984a0473c48df3cdc21583db10f2e9d1dd6092f3d14e8cdbb03a4aba22cf7a77ceeb5d4f3b5d95177294643116804c4dde401f356abd6199aab4944d2284067c7bcda00822926c1f20a056ede36c032bb081a7a5cb4a45856a871b60c0785f6657dc6fedd3f0f4de2d347a3c70c99d471e4cc9db46e2a1d88d3b954c4695f631684c863"}]}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8001}, 0x20040000) unshare$auto(0x40000080) getitimer$auto(0x2, &(0x7f0000000280)={{0x3000, 0x4}, {0x6, 0xae}}) 18.005966825s ago: executing program 0 (id=6796): mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) read$auto(0x3, 0x0, 0x7fffffff) write$auto(r0, &(0x7f0000000000)='(,\'\\\x00', 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)=@iter_create={r1, 0xfffffffb}, 0x912) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) socket(0x2, 0x80002, 0x73) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=r2, 0x4}, 0xa3) madvise$auto(0x0, 0x200007, 0x19) 17.030424666s ago: executing program 0 (id=6802): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xdeb1, &(0x7f00000002c0)={0x0, 0xc4}, 0x81, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100269d7000fedbdf256f00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x180c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), r3) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x9, 0x0, 0x103, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfffffffffffffffd, 0x8000000002, 0xec, 0x4, 0x200000000000002, 0x1, 0x7ff, 0xfffffffffffffff8}) ioctl$auto_FS_IOC_SETFSLABEL2(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) read$auto_nst_seq_fops_netdebug(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)='7', 0x1) 16.818054809s ago: executing program 0 (id=6803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x20, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 16.554161259s ago: executing program 0 (id=6806): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0080, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x300000000000000, 0x0, 0x801}, 0x80) 15.893308177s ago: executing program 0 (id=6807): mprotect$auto(0x0, 0x806121, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x210080, 0x20) ioctl$auto_NVRAM_SETCKS(r1, 0x7041, 0x0) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}}, 0x4000) 7.969648824s ago: executing program 4 (id=6858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01032cb57000fbdbdf250a0700000000010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) close_range$auto(0x2, 0x8, 0x0) 7.246207349s ago: executing program 4 (id=6860): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r1, 0x40104d14, r1) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x3, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x1, 0x5dd8, 0x7eff, 0xb12, 0x2, 0x8000, 0x6, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r3 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r3, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r2, r3, r4) pread64$auto(0xffffffffffffffff, &(0x7f0000001800)='#\\h,\x00', 0x3, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x116, 0x0, 0x1, 0x697b}, 0x7}, 0x9, 0x7) open(&(0x7f0000000080)='./file0\x00', 0x2020c0, 0x44) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x101000, 0x0) 5.570687415s ago: executing program 4 (id=6867): r0 = socket(0x22, 0x5, 0xb32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x1d, 0x1, 0x8000088) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4040aea0, 0x0) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) fcntl$auto_F_RDLCK(r0, 0xffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x4000000000df, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$auto(0x3, 0xaece, 0xffffffffffffffff) 4.866740597s ago: executing program 3 (id=6869): socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0xd737, 0x2000000002020009, 0xf1, 0xcde, 0xfffffffffffffffa, 0x80000000001) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x20040094) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0xf, 0x0) fsconfig$auto(r1, 0x5, 0x0, 0x0, 0x0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x4008050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x400000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0c/info\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8b40, 0x0) 4.655649592s ago: executing program 3 (id=6871): mmap$auto(0x0, 0x2020009, 0x3, 0xffff, 0xfffffffffffffffa, 0x7) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x101001, 0x0) write$auto(r0, &(0x7f0000002c80)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x100) socketpair$auto(0x3, 0x5, 0x7, 0x0) r1 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x101000, 0x0) read$auto_dfs_global_fops_debug(r1, 0x0, 0x0) unshare$auto(0xf) socket(0xb, 0x80000, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) r2 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x88001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f00000002c0)="f618de", 0x3) sysfs$auto(0x2, 0x4d, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x20000080) 4.441793028s ago: executing program 4 (id=6872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0x7ff, 0x8000, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x3, 0x80000000, 0x5f, 0x7ffffffd, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x814) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 3.659465151s ago: executing program 3 (id=6874): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x1, 0x1, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0xac900, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) 3.222898295s ago: executing program 3 (id=6875): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10020, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) getsockopt$auto(r0, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x6, 0x48000a, 0x100002bb, 0x14, 0xffffffffffffffff, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) r1 = socket(0x9, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x400}, 0x6b) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x1c0000000000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r2, 0xab09, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) 3.114028414s ago: executing program 1 (id=6877): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) socket(0x2, 0x1, 0x106) r2 = getpgid$auto(0xffffffffffffffff) prctl$auto(0xfb, 0x8, r2, 0x5, 0x7) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x3000000000000) 2.942109001s ago: executing program 1 (id=6878): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dmmidi2\x00', 0x20000, 0x0) write$auto(r0, 0x0, 0x1ffffffffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/9/spurious\x00', 0x189400, 0x0) nanosleep$auto(0x0, 0x0) r1 = open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0xfffffffffeffffff, 0x2020009, 0x1, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = gettid() setpriority$auto_PRIO_PROCESS(0x0, r2, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffc) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\e\xe7\x04\x94\xfb\xc0\xb4X\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1f\xe1\xe5\xbc\xbc\"}$', 0x8) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) socket(0x2, 0x2, 0x1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000008580)=ANY=[@ANYRES8, @ANYBLOB="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"], 0x4238}, 0x1, 0x0, 0x0, 0x4c098}, 0x4048000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r3, 0x0, 0xa3d9) madvise$auto(0x0, 0xffffffffffff0000, 0x15) 1.653151915s ago: executing program 4 (id=6879): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x2, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) ioctl$auto(r2, 0x40104d05, 0x8) r3 = socket(0x11, 0x800, 0x0) connect$auto(r3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x800}, 0x1e) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x2, 0x8000) ustat$auto(0x801, 0x0) keyctl$auto(0xa, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000007ea4b46f01ec4bc7334208de26cbe38cb6db4940875c63f639625f09c4d820e7b46a995c8c341b9f31acbbdaf42a3923faf3bd5fb7d0fbd040e5ab4caed4106b99fdc9e96e145727b677bf982cd86575257bc5", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000100", @ANYRES16=r1, @ANYBLOB="08002dbd7000fddbdf252800000008004a00080000000c000700b26112291adb5a0008000b01000100009d009d002f2caad3199449792bd88cf37163618858a09c672ca95935dbd8f1ef9a958455e7b870eacd85692ccf6b559618771402e2216443acfae0fda8cb5668ee3114d45cb7b71016d71168f80be11ec57727105435b27a19cd83bdd563d05787b2ca962a9bd445281b68d9d69bc59e2877806f1a28556458bcf6e46985867b0def03944c1ae39b9f41ddd6d59028991667a9c4ec2a630bc573b02a7a000000050030016800000006001200f4ab000008003f0031d1ffff05001901000000000500e40064000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4010}, 0x804) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) 1.313141787s ago: executing program 1 (id=6880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x128}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x6000, 0x0, 0x4004040}, 0xc800) 1.141384514s ago: executing program 1 (id=6881): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x3ff, 0x2, 0x2, 0x93}, "6a034a0700000000000000e32576f893fba86c9dd0f8704a958d0b8da09108fefbbabea6ef9368c7996684fd3e1561d4992f726b0a6c36b0b2fd1678e816203df562367fe6596824588a2e3d84ba165f"}) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) ioctl$auto_FIGETBSZ(r1, 0x2, 0x9) socket(0x2, 0x1, 0x0) setsockopt$auto(0x6, 0x6, 0x14, &(0x7f0000000240)='ns/cgroup\x00', 0xc) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) 1.083359321s ago: executing program 3 (id=6882): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91pds\x1c\xb2J\x99\x00:\x00!\r>\x94f\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcd\x01\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb6\x00\x00\x00\x00\x00\x00', 0x48, 0x7) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)="2d03", 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r2 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r2, 0x29, 0x4b, &(0x7f00000000c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8001) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 994.009025ms ago: executing program 1 (id=6883): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x189002, 0x0) fanotify_init$auto(0x5, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0xfffffffd, 0x3}, 0x7}, 0x3, 0xcad7) 859.916518ms ago: executing program 33 (id=6807): mprotect$auto(0x0, 0x806121, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x210080, 0x20) ioctl$auto_NVRAM_SETCKS(r1, 0x7041, 0x0) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}}, 0x4000) 775.27116ms ago: executing program 1 (id=6885): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x20000000009b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r0 = geteuid() keyctl$auto(0x1f, r0, r0, 0x5, 0x8) r1 = setfsgid$auto(0xee00) fchown$auto(0xffffffffffffffff, 0xee00, r1) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, r1) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x6, 0xd2, 0xb7, 0xffff, r0, r1, 0x0, 0xfd3e, 0x1, 0x2, 0x238, 0x5, 0x9, 0xb888, 0x7f, 0x6, 0x8}) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0x8) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x3, 0x80000000, 0x5f, 0x7ffffffd, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) 504.810088ms ago: executing program 4 (id=6886): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x8000000000000000, 0xdb7, 0x5, 0x13, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0xfff, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) close_range$auto(0x2, 0x8, 0x0) io_setup$auto(0x7ffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0x7, 0x2e, 0x0, 0x3}, 0x6f4) bpf$auto(0x2, 0x0, 0xf) clone$auto(0x83, 0x2, 0x0, 0x0, 0x0) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x1fff) 0s ago: executing program 3 (id=6887): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_id=0x13, 0x41b5c1ff}, 0x92) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x25, 0x3, 0x1) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4000007, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xa}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRESDEC=r3, @ANYBLOB="ed87c53273c63f0f798b40e1c64e3c151c79e13a4e0704eb9e537799a972dd604af1c631f1dafc4493b023788e"], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x91) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000140)=@bpf_attr_5={@target_ifindex=r5, r0, 0x5, 0x7, r0, @relative_fd=r6, 0xee}, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='d\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1000000, &(0x7f0000000100)={&(0x7f0000000080), 0x1}, 0x3, &(0x7f0000000180), 0xf, 0xa504}, 0x800}, 0x7, 0x8) kernel console output (not intermixed with test programs): 000246 ORIG_RAX: 0000000000000110 [ 1727.132210][ T1312] RAX: ffffffffffffffda RBX: 00007f79c3bb5fa0 RCX: 00007f79c398eb69 [ 1727.132220][ T1312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1727.132229][ T1312] RBP: 00007f79c3a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1727.132238][ T1312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1727.132255][ T1312] R13: 0000000000000000 R14: 00007f79c3bb5fa0 R15: 00007ffc8eea9758 [ 1727.132273][ T1312] [ 1728.357858][ T1343] block nbd9: NBD_DISCONNECT [ 1728.561034][ T1350] delete_channel: no stack [ 1731.418819][ T30] audit: type=1804 audit(6048964518.049:131): pid=1422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6279" name="/newroot/372/file0" dev="tmpfs" ino=1956 res=1 errno=0 [ 1731.490866][ T30] audit: type=1800 audit(6048964518.049:132): pid=1422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6279" name="file0" dev="tmpfs" ino=1956 res=0 errno=0 [ 1731.890140][ T1434] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1733.076866][ T1458] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input53 [ 1733.176417][T22205] Bluetooth: hci4: unexpected event 0x35 length: 13 > 6 [ 1733.898321][ T1476] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1734.455091][ T1498] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1734.537735][ T1500] FAULT_INJECTION: forcing a failure. [ 1734.537735][ T1500] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.581819][ T1500] CPU: 0 UID: 0 PID: 1500 Comm: syz.1.6302 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1734.581842][ T1500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1734.581852][ T1500] Call Trace: [ 1734.581857][ T1500] [ 1734.581863][ T1500] dump_stack_lvl+0x16c/0x1f0 [ 1734.581882][ T1500] should_fail_ex+0x512/0x640 [ 1734.581904][ T1500] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1734.581924][ T1500] should_failslab+0xc2/0x120 [ 1734.581943][ T1500] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1734.581960][ T1500] ? __kernfs_new_node+0xd2/0x8e0 [ 1734.581979][ T1500] __kernfs_new_node+0xd2/0x8e0 [ 1734.581997][ T1500] ? __pfx___kernfs_new_node+0x10/0x10 [ 1734.582018][ T1500] ? find_held_lock+0x2b/0x80 [ 1734.582033][ T1500] ? kernfs_root+0xee/0x2a0 [ 1734.582054][ T1500] kernfs_new_node+0x13c/0x1e0 [ 1734.582076][ T1500] __kernfs_create_file+0x53/0x350 [ 1734.582099][ T1500] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1734.582119][ T1500] internal_create_group+0x578/0xf30 [ 1734.582140][ T1500] ? __pfx_internal_create_group+0x10/0x10 [ 1734.582159][ T1500] ? kernfs_create_link+0x1bd/0x240 [ 1734.582183][ T1500] internal_create_groups+0x9d/0x150 [ 1734.582201][ T1500] device_add+0xf30/0x1a70 [ 1734.582223][ T1500] ? __pfx_device_add+0x10/0x10 [ 1734.582243][ T1500] ? lockdep_init_map_type+0x5c/0x280 [ 1734.582261][ T1500] ? __init_waitqueue_head+0xca/0x150 [ 1734.582285][ T1500] netdev_register_kobject+0x1a9/0x3d0 [ 1734.582305][ T1500] register_netdevice+0x13dc/0x2270 [ 1734.582325][ T1500] ? __pfx_register_netdevice+0x10/0x10 [ 1734.582344][ T1500] ? __pfx_loopback_net_init+0x10/0x10 [ 1734.582359][ T1500] register_netdev+0x34/0x50 [ 1734.582373][ T1500] loopback_net_init+0x7a/0x170 [ 1734.582388][ T1500] ? __pfx_loopback_net_init+0x10/0x10 [ 1734.582400][ T1500] ops_init+0x1e2/0x5f0 [ 1734.582416][ T1500] setup_net+0x10f/0x380 [ 1734.582429][ T1500] ? lockdep_init_map_type+0x5c/0x280 [ 1734.582447][ T1500] ? __pfx_setup_net+0x10/0x10 [ 1734.582461][ T1500] ? debug_mutex_init+0x37/0x70 [ 1734.582485][ T1500] copy_net_ns+0x2a6/0x5f0 [ 1734.582502][ T1500] create_new_namespaces+0x3ea/0xa90 [ 1734.582523][ T1500] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1734.582540][ T1500] ksys_unshare+0x45b/0xa40 [ 1734.582567][ T1500] ? __pfx_ksys_unshare+0x10/0x10 [ 1734.582586][ T1500] ? xfd_validate_state+0x61/0x180 [ 1734.582613][ T1500] __x64_sys_unshare+0x31/0x40 [ 1734.582630][ T1500] do_syscall_64+0xcd/0x490 [ 1734.582645][ T1500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.582660][ T1500] RIP: 0033:0x7f4292f8eb69 [ 1734.582672][ T1500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.582685][ T1500] RSP: 002b:00007f4293df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1734.582699][ T1500] RAX: ffffffffffffffda RBX: 00007f42931b5fa0 RCX: 00007f4292f8eb69 [ 1734.582710][ T1500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1734.582719][ T1500] RBP: 00007f4293011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1734.582728][ T1500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.582736][ T1500] R13: 0000000000000000 R14: 00007f42931b5fa0 R15: 00007ffc2750ab68 [ 1734.582761][ T1500] [ 1734.904382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.963675][ T1504] random: crng reseeded on system resumption [ 1735.134080][ T1498] netlink: set zone limit has 8 unknown bytes [ 1736.471694][ T1547] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1736.650405][ T1547] netlink: set zone limit has 8 unknown bytes [ 1736.854419][ T1550] cgroup: fork rejected by pids controller in /syz3 [ 1736.998850][ T30] audit: type=1804 audit(6048964523.655:133): pid=1593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6320" name="/newroot/389/file0" dev="tmpfs" ino=2043 res=1 errno=0 [ 1737.124367][ T30] audit: type=1800 audit(6048964523.655:134): pid=1593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6320" name="file0" dev="tmpfs" ino=2043 res=0 errno=0 [ 1737.236730][ T30] audit: type=1800 audit(6048964523.685:135): pid=1593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6320" name="file0" dev="tmpfs" ino=2043 res=0 errno=0 [ 1741.269634][ T1638] zswap: compressor 000 not available [ 1743.633816][ T1674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6338'. [ 1752.514825][ T1564] syz.3.6313 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1754.026894][ T1564] CPU: 0 UID: 0 PID: 1564 Comm: syz.3.6313 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1754.026915][ T1564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1754.026925][ T1564] Call Trace: [ 1754.026931][ T1564] [ 1754.026937][ T1564] dump_stack_lvl+0x16c/0x1f0 [ 1754.026956][ T1564] dump_header+0x101/0x930 [ 1754.026977][ T1564] oom_kill_process+0x272/0xa40 [ 1754.026996][ T1564] out_of_memory+0x350/0x1700 [ 1754.027018][ T1564] ? __pfx_out_of_memory+0x10/0x10 [ 1754.027040][ T1564] mem_cgroup_out_of_memory+0x118/0x130 [ 1754.027063][ T1564] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1754.027088][ T1564] ? do_raw_spin_unlock+0x172/0x230 [ 1754.027112][ T1564] try_charge_memcg+0x72b/0xd50 [ 1754.027132][ T1564] ? __pfx_try_charge_memcg+0x10/0x10 [ 1754.027149][ T1564] ? __print_lock_name+0x61/0xe0 [ 1754.027162][ T1564] ? rcu_read_unlock+0x17/0x60 [ 1754.027185][ T1564] charge_memcg+0x8a/0x230 [ 1754.027202][ T1564] __mem_cgroup_charge+0x2b/0x1e0 [ 1754.027222][ T1564] shmem_alloc_and_add_folio+0x514/0xc20 [ 1754.027244][ T1564] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1754.027261][ T1564] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1754.027281][ T1564] shmem_get_folio_gfp+0x67f/0x1600 [ 1754.027299][ T1564] ? __lock_acquire+0xb8a/0x1c90 [ 1754.027315][ T1564] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1754.027332][ T1564] ? __pte_offset_map_lock+0x174/0x310 [ 1754.027353][ T1564] ? vm_normal_page+0x152/0x2e0 [ 1754.027375][ T1564] shmem_write_begin+0x160/0x300 [ 1754.027393][ T1564] ? __pfx_shmem_write_begin+0x10/0x10 [ 1754.027407][ T1564] ? timestamp_truncate+0x21e/0x2d0 [ 1754.027423][ T1564] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1754.027448][ T1564] generic_perform_write+0x3c5/0x900 [ 1754.027470][ T1564] ? __pfx_generic_perform_write+0x10/0x10 [ 1754.027486][ T1564] ? inode_needs_update_time.part.0+0x191/0x270 [ 1754.027507][ T1564] shmem_file_write_iter+0x10e/0x140 [ 1754.027527][ T1564] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1754.027544][ T1564] __kernel_write_iter+0x31a/0xa90 [ 1754.027561][ T1564] ? __pfx___kernel_write_iter+0x10/0x10 [ 1754.027575][ T1564] ? __up_read+0x1f8/0x750 [ 1754.027596][ T1564] ? dump_user_range+0x756/0xb70 [ 1754.027622][ T1564] dump_user_range+0x413/0xb70 [ 1754.027647][ T1564] ? __pfx_dump_user_range+0x10/0x10 [ 1754.027668][ T1564] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 1754.027702][ T1564] ? __pfx_writenote+0x10/0x10 [ 1754.027721][ T1564] elf_core_dump+0x2929/0x3b60 [ 1754.027745][ T1564] ? __pfx_elf_core_dump+0x10/0x10 [ 1754.027765][ T1564] ? 0xffffffffff600000 [ 1754.027778][ T1564] ? rcu_is_watching+0x12/0xc0 [ 1754.027791][ T1564] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1754.027840][ T1564] ? vfs_coredump+0x2b9f/0x56d0 [ 1754.027859][ T1564] vfs_coredump+0x2b9f/0x56d0 [ 1754.027887][ T1564] ? __pfx_vfs_coredump+0x10/0x10 [ 1754.027908][ T1564] ? __lock_acquire+0x622/0x1c90 [ 1754.027932][ T1564] ? lock_acquire+0x179/0x350 [ 1754.027958][ T1564] ? is_bpf_text_address+0x8a/0x1a0 [ 1754.027975][ T1564] ? bpf_ksym_find+0x124/0x1c0 [ 1754.027993][ T1564] ? __kernel_text_address+0xd/0x40 [ 1754.028013][ T1564] ? unwind_get_return_address+0x59/0xa0 [ 1754.028028][ T1564] ? arch_stack_walk+0xa6/0x100 [ 1754.028049][ T1564] ? stack_trace_save+0x8e/0xc0 [ 1754.028063][ T1564] ? __pfx_stack_trace_save+0x10/0x10 [ 1754.028077][ T1564] ? stack_depot_save_flags+0x28/0xa40 [ 1754.028100][ T1564] ? __lock_acquire+0xb8a/0x1c90 [ 1754.028149][ T1564] ? proc_coredump_connector+0x2d1/0x4f0 [ 1754.028164][ T1564] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1754.028182][ T1564] ? rcu_is_watching+0x12/0xc0 [ 1754.028197][ T1564] get_signal+0x22e3/0x26d0 [ 1754.028221][ T1564] ? __pfx_get_signal+0x10/0x10 [ 1754.028236][ T1564] ? __pfx_force_sig+0x10/0x10 [ 1754.028254][ T1564] arch_do_signal_or_restart+0x8f/0x790 [ 1754.028273][ T1564] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1754.028295][ T1564] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1754.028316][ T1564] ? do_error_trap+0x214/0x240 [ 1754.028337][ T1564] irqentry_exit_to_user_mode+0x12a/0x270 [ 1754.028352][ T1564] asm_exc_stack_segment+0x26/0x30 [ 1754.028366][ T1564] RIP: 0033:0x7f9beff8eb71 [ 1754.028377][ T1564] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1754.028391][ T1564] RSP: 002b:0100000000000005 EFLAGS: 00010217 [ 1754.028403][ T1564] RAX: 0000000000000000 RBX: 00007f9bf01b6240 RCX: 00007f9beff8eb69 [ 1754.028412][ T1564] RDX: 0000000000000000 RSI: 0100000000000005 RDI: 0000000020003b46 [ 1754.028420][ T1564] RBP: 00007f9bf0011df1 R08: 0000000000000002 R09: 0000000000000000 [ 1754.028429][ T1564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1754.028437][ T1564] R13: 0000000000000000 R14: 00007f9bf01b6240 R15: 00007ffcabf3ee28 [ 1754.028455][ T1564] [ 1754.909437][ T1564] memory: usage 307200kB, limit 307200kB, failcnt 38844 [ 1754.916744][ T1564] memory+swap: usage 364764kB, limit 9007199254740988kB, failcnt 0 [ 1754.925469][ T1564] kmem: usage 3772kB, limit 9007199254740988kB, failcnt 0 [ 1754.932649][ T1564] Memory cgroup stats for /syz3: [ 1754.932857][ T1564] cache 310329344 [ 1754.941619][ T1564] rss 372736 [ 1754.945343][ T1564] rss_huge 0 [ 1754.948530][ T1564] shmem 310325248 [ 1754.952238][ T1564] mapped_file 26714112 [ 1754.956351][ T1564] dirty 0 [ 1754.959267][ T1564] writeback 0 [ 1754.962623][ T1564] workingset_refault_anon 74267 [ 1754.967525][ T1564] workingset_refault_file 4212 [ 1754.972281][ T1564] swap 58945536 [ 1754.983483][ T1564] swapcached 8192 [ 1754.987128][ T1564] pgpgin 2776332 [ 1754.990655][ T1564] pgpgout 2839770 [ 1755.087507][ T1564] pgfault 2140257 [ 1755.091158][ T1564] pgmajfault 3082 [ 1755.114766][ T1564] inactive_anon 302948352 [ 1755.119301][ T1564] active_anon 7757824 [ 1755.171956][ T1564] inactive_file 4096 [ 1755.199506][ T1564] active_file 0 [ 1755.218121][ T1564] unevictable 0 [ 1755.231395][ T1564] hierarchical_memory_limit 314572800 [ 1755.266845][ T1564] hierarchical_memsw_limit 9223372036854771712 [ 1755.302205][ T1564] total_cache 310329344 [ 1755.319987][ T1564] total_rss 372736 [ 1755.341245][ T1564] total_rss_huge 0 [ 1755.365894][ T1564] total_shmem 310325248 [ 1755.385587][ T1564] total_mapped_file 26714112 [ 1755.408123][ T1564] total_dirty 0 [ 1755.427568][ T1564] total_writeback 0 [ 1755.450061][ T1564] total_workingset_refault_anon 74267 [ 1755.479280][ T1564] total_workingset_refault_file 4212 [ 1755.506659][ T1564] total_swap 58945536 [ 1755.525364][ T1564] total_swapcached 8192 [ 1755.549921][ T1564] total_pgpgin 2776332 [ 1755.568976][ T1564] total_pgpgout 2839770 [ 1755.602452][ T1564] total_pgfault 2140257 [ 1755.632945][ T1564] total_pgmajfault 3082 [ 1755.659924][ T1564] total_inactive_anon 302948352 [ 1755.690372][ T1564] total_active_anon 7757824 [ 1755.722813][ T1564] total_inactive_file 4096 [ 1755.745878][ T1564] total_active_file 0 [ 1755.761901][ T1564] total_unevictable 0 [ 1755.782464][ T1564] anon_cost 15486 [ 1755.803194][ T1564] file_cost 512 [ 1755.806676][ T1564] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6306,pid=1517,uid=0 [ 1755.878028][ T1564] Memory cgroup out of memory: Killed process 1517 (syz.3.6306) total-vm:171996kB, anon-rss:1080kB, file-rss:26032kB, shmem-rss:11776kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 1756.436563][ T1572] syz.3.6313 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1756.702780][ T1572] CPU: 0 UID: 0 PID: 1572 Comm: syz.3.6313 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1756.702803][ T1572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1756.702812][ T1572] Call Trace: [ 1756.702818][ T1572] [ 1756.702824][ T1572] dump_stack_lvl+0x16c/0x1f0 [ 1756.702843][ T1572] dump_header+0x101/0x930 [ 1756.702863][ T1572] oom_kill_process+0x272/0xa40 [ 1756.702883][ T1572] out_of_memory+0x350/0x1700 [ 1756.702904][ T1572] ? __pfx_out_of_memory+0x10/0x10 [ 1756.702926][ T1572] mem_cgroup_out_of_memory+0x118/0x130 [ 1756.702948][ T1572] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1756.702973][ T1572] ? do_raw_spin_unlock+0x172/0x230 [ 1756.702997][ T1572] try_charge_memcg+0x72b/0xd50 [ 1756.703018][ T1572] ? __pfx_try_charge_memcg+0x10/0x10 [ 1756.703035][ T1572] ? __print_lock_name+0x61/0xe0 [ 1756.703048][ T1572] ? rcu_read_unlock+0x17/0x60 [ 1756.703070][ T1572] charge_memcg+0x8a/0x230 [ 1756.703087][ T1572] __mem_cgroup_charge+0x2b/0x1e0 [ 1756.703107][ T1572] shmem_alloc_and_add_folio+0x514/0xc20 [ 1756.703127][ T1572] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1756.703145][ T1572] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1756.703164][ T1572] shmem_get_folio_gfp+0x67f/0x1600 [ 1756.703181][ T1572] ? __lock_acquire+0xb8a/0x1c90 [ 1756.703198][ T1572] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1756.703214][ T1572] ? __pte_offset_map_lock+0x174/0x310 [ 1756.703233][ T1572] ? vm_normal_page+0x152/0x2e0 [ 1756.703253][ T1572] shmem_write_begin+0x160/0x300 [ 1756.703271][ T1572] ? __pfx_shmem_write_begin+0x10/0x10 [ 1756.703285][ T1572] ? timestamp_truncate+0x21e/0x2d0 [ 1756.703301][ T1572] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1756.703325][ T1572] generic_perform_write+0x3c5/0x900 [ 1756.703347][ T1572] ? __pfx_generic_perform_write+0x10/0x10 [ 1756.703363][ T1572] ? inode_needs_update_time.part.0+0x191/0x270 [ 1756.703384][ T1572] shmem_file_write_iter+0x10e/0x140 [ 1756.703403][ T1572] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1756.703421][ T1572] __kernel_write_iter+0x31a/0xa90 [ 1756.703437][ T1572] ? __pfx___kernel_write_iter+0x10/0x10 [ 1756.703451][ T1572] ? __up_read+0x1f8/0x750 [ 1756.703472][ T1572] ? dump_user_range+0x756/0xb70 [ 1756.703497][ T1572] dump_user_range+0x413/0xb70 [ 1756.703521][ T1572] ? __pfx_dump_user_range+0x10/0x10 [ 1756.703543][ T1572] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 1756.703572][ T1572] ? __pfx_writenote+0x10/0x10 [ 1756.703591][ T1572] elf_core_dump+0x2929/0x3b60 [ 1756.703615][ T1572] ? __pfx_elf_core_dump+0x10/0x10 [ 1756.703635][ T1572] ? 0xffffffffff600000 [ 1756.703648][ T1572] ? rcu_is_watching+0x12/0xc0 [ 1756.703661][ T1572] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1756.703710][ T1572] ? vfs_coredump+0x2b9f/0x56d0 [ 1756.703729][ T1572] vfs_coredump+0x2b9f/0x56d0 [ 1756.703756][ T1572] ? __pfx_vfs_coredump+0x10/0x10 [ 1756.703777][ T1572] ? __lock_acquire+0x622/0x1c90 [ 1756.703801][ T1572] ? lock_acquire+0x179/0x350 [ 1756.703827][ T1572] ? is_bpf_text_address+0x8a/0x1a0 [ 1756.703844][ T1572] ? bpf_ksym_find+0x124/0x1c0 [ 1756.703861][ T1572] ? __kernel_text_address+0xd/0x40 [ 1756.703882][ T1572] ? unwind_get_return_address+0x59/0xa0 [ 1756.703896][ T1572] ? arch_stack_walk+0xa6/0x100 [ 1756.703918][ T1572] ? stack_trace_save+0x8e/0xc0 [ 1756.703933][ T1572] ? __pfx_stack_trace_save+0x10/0x10 [ 1756.703947][ T1572] ? stack_depot_save_flags+0x28/0xa40 [ 1756.703969][ T1572] ? __lock_acquire+0xb8a/0x1c90 [ 1756.704018][ T1572] ? proc_coredump_connector+0x2d1/0x4f0 [ 1756.704032][ T1572] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1756.704051][ T1572] ? rcu_is_watching+0x12/0xc0 [ 1756.704066][ T1572] get_signal+0x22e3/0x26d0 [ 1756.704089][ T1572] ? __pfx_get_signal+0x10/0x10 [ 1756.704104][ T1572] ? __pfx_force_sig+0x10/0x10 [ 1756.704122][ T1572] arch_do_signal_or_restart+0x8f/0x790 [ 1756.704141][ T1572] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1756.704163][ T1572] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1756.704184][ T1572] ? do_error_trap+0x214/0x240 [ 1756.704204][ T1572] irqentry_exit_to_user_mode+0x12a/0x270 [ 1756.704219][ T1572] asm_exc_stack_segment+0x26/0x30 [ 1756.704233][ T1572] RIP: 0033:0x7f9beff8eb71 [ 1756.704244][ T1572] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1756.704258][ T1572] RSP: 002b:0100000000000005 EFLAGS: 00010217 [ 1756.704270][ T1572] RAX: 0000000000000000 RBX: 00007f9bf01b6240 RCX: 00007f9beff8eb69 [ 1756.704279][ T1572] RDX: 0000000000000000 RSI: 0100000000000005 RDI: 0000000020003b46 [ 1756.704287][ T1572] RBP: 00007f9bf0011df1 R08: 0000000000000002 R09: 0000000000000000 [ 1756.704296][ T1572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1756.704304][ T1572] R13: 0000000000000000 R14: 00007f9bf01b6240 R15: 00007ffcabf3ee28 [ 1756.704322][ T1572] [ 1756.704327][ T1572] memory: usage 304392kB, limit 307200kB, failcnt 39016 [ 1759.714123][ T1924] FAULT_INJECTION: forcing a failure. [ 1759.714123][ T1924] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.758887][ T1572] memory+swap: usage 357380kB, limit 9007199254740988kB, failcnt 0 [ 1759.781166][ T1924] CPU: 0 UID: 0 PID: 1924 Comm: syz.2.6403 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1759.781189][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1759.781199][ T1924] Call Trace: [ 1759.781205][ T1924] [ 1759.781211][ T1924] dump_stack_lvl+0x16c/0x1f0 [ 1759.781230][ T1924] should_fail_ex+0x512/0x640 [ 1759.781251][ T1924] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1759.781272][ T1924] should_failslab+0xc2/0x120 [ 1759.781291][ T1924] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1759.781308][ T1924] ? __kernfs_new_node+0xd2/0x8e0 [ 1759.781328][ T1924] __kernfs_new_node+0xd2/0x8e0 [ 1759.781346][ T1924] ? __pfx___kernfs_new_node+0x10/0x10 [ 1759.781365][ T1924] ? find_held_lock+0x2b/0x80 [ 1759.781380][ T1924] ? kernfs_root+0xee/0x2a0 [ 1759.781399][ T1924] kernfs_new_node+0x13c/0x1e0 [ 1759.781420][ T1924] __kernfs_create_file+0x53/0x350 [ 1759.781444][ T1924] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1759.781463][ T1924] internal_create_group+0x578/0xf30 [ 1759.781485][ T1924] ? __pfx_internal_create_group+0x10/0x10 [ 1759.781504][ T1924] ? kernfs_create_link+0x1bd/0x240 [ 1759.781528][ T1924] internal_create_groups+0x9d/0x150 [ 1759.781546][ T1924] device_add+0x77f/0x1a70 [ 1759.781568][ T1924] ? __pfx_device_add+0x10/0x10 [ 1759.781588][ T1924] ? lockdep_init_map_type+0x5c/0x280 [ 1759.781606][ T1924] ? __init_waitqueue_head+0xca/0x150 [ 1759.781630][ T1924] netdev_register_kobject+0x1a9/0x3d0 [ 1759.781651][ T1924] register_netdevice+0x13dc/0x2270 [ 1759.781670][ T1924] ? __pfx_register_netdevice+0x10/0x10 [ 1759.781691][ T1924] ppp_dev_configure+0xa1e/0xd40 [ 1759.781713][ T1924] ppp_ioctl+0x17e0/0x2660 [ 1759.781732][ T1924] ? find_held_lock+0x2b/0x80 [ 1759.781744][ T1924] ? __pfx_ppp_ioctl+0x10/0x10 [ 1759.781764][ T1924] ? __fget_files+0x20e/0x3c0 [ 1759.781781][ T1924] ? __pfx_ppp_ioctl+0x10/0x10 [ 1759.781799][ T1924] __x64_sys_ioctl+0x18e/0x210 [ 1759.781820][ T1924] do_syscall_64+0xcd/0x490 [ 1759.781836][ T1924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.781850][ T1924] RIP: 0033:0x7f79c398eb69 [ 1759.781863][ T1924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1759.781877][ T1924] RSP: 002b:00007f79c484f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.781891][ T1924] RAX: ffffffffffffffda RBX: 00007f79c3bb5fa0 RCX: 00007f79c398eb69 [ 1759.781900][ T1924] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000007 [ 1759.781909][ T1924] RBP: 00007f79c3a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1759.781918][ T1924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1759.781926][ T1924] R13: 0000000000000000 R14: 00007f79c3bb5fa0 R15: 00007ffc8eea9758 [ 1759.781944][ T1924] [ 1760.358329][ T1572] kmem: usage 3528kB, limit 9007199254740988kB, failcnt 0 [ 1760.365557][ T1572] Memory cgroup stats for /syz3: [ 1760.365653][ T1572] cache 310571008 [ 1760.439059][ T1572] rss 200704 [ 1760.442381][ T1572] rss_huge 0 [ 1760.445567][ T1572] shmem 310566912 [ 1760.507541][ T1572] mapped_file 29925376 [ 1760.517546][ T1572] dirty 0 [ 1760.520695][ T1572] writeback 0 [ 1760.523963][ T1572] workingset_refault_anon 74267 [ 1760.582694][ T1572] workingset_refault_file 4212 [ 1760.602540][ T1572] swap 54775808 [ 1760.606072][ T1572] swapcached 0 [ 1760.651290][ T1572] pgpgin 2784353 [ 1760.654841][ T1572] pgpgout 2847776 [ 1760.669869][ T1572] pgfault 2143994 [ 1760.716558][ T1572] pgmajfault 3082 [ 1760.720933][ T1572] inactive_anon 307924992 [ 1760.726059][ T1572] active_anon 2842624 [ 1760.741972][ T1572] inactive_file 4096 [ 1760.751876][ T1572] active_file 0 [ 1760.755352][ T1572] unevictable 0 [ 1760.776566][ T1572] hierarchical_memory_limit 314572800 [ 1760.788544][ T1572] hierarchical_memsw_limit 9223372036854771712 [ 1760.810446][ T1572] total_cache 310571008 [ 1760.814614][ T1572] total_rss 200704 [ 1760.837471][ T1572] total_rss_huge 0 [ 1760.841219][ T1572] total_shmem 310566912 [ 1760.845375][ T1572] total_mapped_file 29925376 [ 1760.861655][ T1572] total_dirty 0 [ 1760.865178][ T1572] total_writeback 0 [ 1760.883913][ T1572] total_workingset_refault_anon 74267 [ 1760.891855][ T1572] total_workingset_refault_file 4212 [ 1760.917223][ T1572] total_swap 54775808 [ 1760.921224][ T1572] total_swapcached 0 [ 1760.940848][ T1572] total_pgpgin 2784353 [ 1760.945192][ T1572] total_pgpgout 2847776 [ 1760.955942][ T1572] total_pgfault 2143994 [ 1760.970608][ T1572] total_pgmajfault 3082 [ 1760.974790][ T1572] total_inactive_anon 307924992 [ 1760.995630][ T1572] total_active_anon 2842624 [ 1761.018980][ T1572] total_inactive_file 4096 [ 1761.051025][ T1572] total_active_file 0 [ 1761.080522][ T1572] total_unevictable 0 [ 1761.095071][ T1943] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input54 [ 1761.117968][ T1572] anon_cost 11819 [ 1761.144857][ T1572] file_cost 0 [ 1761.161287][ T1572] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6313,pid=1580,uid=0 [ 1761.208197][ T1572] Memory cgroup out of memory: Killed process 1580 (syz.3.6313) total-vm:131416kB, anon-rss:1088kB, file-rss:21720kB, shmem-rss:31232kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 1766.533375][ T2040] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1766.785825][ T2040] netlink: set zone limit has 8 unknown bytes [ 1768.787954][ T2091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1769.582263][ T2105] FAULT_INJECTION: forcing a failure. [ 1769.582263][ T2105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1769.721962][ T2105] CPU: 0 UID: 0 PID: 2105 Comm: syz.0.6447 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1769.721984][ T2105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1769.721993][ T2105] Call Trace: [ 1769.721998][ T2105] [ 1769.722004][ T2105] dump_stack_lvl+0x16c/0x1f0 [ 1769.722022][ T2105] should_fail_ex+0x512/0x640 [ 1769.722050][ T2105] _copy_from_user+0x2e/0xd0 [ 1769.722070][ T2105] snd_pcm_oss_write2+0x1c2/0x410 [ 1769.722090][ T2105] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1769.722104][ T2105] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 1769.722128][ T2105] snd_pcm_oss_write+0x711/0xa10 [ 1769.722146][ T2105] ? security_file_permission+0x71/0x210 [ 1769.722164][ T2105] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1769.722179][ T2105] vfs_write+0x2a0/0x1150 [ 1769.722199][ T2105] ? __pfx_vfs_write+0x10/0x10 [ 1769.722211][ T2105] ? find_held_lock+0x2b/0x80 [ 1769.722225][ T2105] ? __fget_files+0x204/0x3c0 [ 1769.722241][ T2105] ? __fget_files+0x20e/0x3c0 [ 1769.722259][ T2105] ksys_write+0x12a/0x250 [ 1769.722273][ T2105] ? __pfx_ksys_write+0x10/0x10 [ 1769.722292][ T2105] do_syscall_64+0xcd/0x490 [ 1769.722307][ T2105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.722320][ T2105] RIP: 0033:0x7fa73758eb69 [ 1769.722332][ T2105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.722345][ T2105] RSP: 002b:00007fa7383ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1769.722359][ T2105] RAX: ffffffffffffffda RBX: 00007fa7377b6080 RCX: 00007fa73758eb69 [ 1769.722368][ T2105] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1769.722376][ T2105] RBP: 00007fa7383ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.722384][ T2105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1769.722392][ T2105] R13: 0000000000000000 R14: 00007fa7377b6080 R15: 00007ffc93520c78 [ 1769.722410][ T2105] [ 1769.916471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1771.045513][ T2124] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1771.441733][ T2121] netlink: set zone limit has 8 unknown bytes [ 1771.471385][ T2136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6455'. [ 1772.026930][ T2149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6460'. [ 1772.888639][ T2172] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1773.126033][ T2169] netlink: set zone limit has 8 unknown bytes [ 1773.313043][ T30] audit: type=1804 audit(4294967317.807:136): pid=2188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6470" name="/newroot/433/file0" dev="tmpfs" ino=2272 res=1 errno=0 [ 1773.420198][ T30] audit: type=1800 audit(4294967317.837:137): pid=2188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6470" name="file0" dev="tmpfs" ino=2272 res=0 errno=0 [ 1773.440904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1774.409646][ T2209] FAULT_INJECTION: forcing a failure. [ 1774.409646][ T2209] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.472157][ T2209] CPU: 0 UID: 0 PID: 2209 Comm: syz.2.6479 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1774.472179][ T2209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1774.472189][ T2209] Call Trace: [ 1774.472194][ T2209] [ 1774.472201][ T2209] dump_stack_lvl+0x16c/0x1f0 [ 1774.472220][ T2209] should_fail_ex+0x512/0x640 [ 1774.472241][ T2209] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1774.472260][ T2209] should_failslab+0xc2/0x120 [ 1774.472279][ T2209] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1774.472293][ T2209] ? allocate_file_region_entries+0x15b/0x620 [ 1774.472310][ T2209] ? allocate_file_region_entries+0x1a0/0x620 [ 1774.472329][ T2209] allocate_file_region_entries+0x1a0/0x620 [ 1774.472349][ T2209] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1774.472372][ T2209] region_chg+0x85/0x140 [ 1774.472388][ T2209] __vma_reservation_common+0x43b/0x740 [ 1774.472407][ T2209] ? __pfx___vma_reservation_common+0x10/0x10 [ 1774.472425][ T2209] ? __pfx___might_resched+0x10/0x10 [ 1774.472438][ T2209] ? folio_zero_user+0x1da/0x7c0 [ 1774.472456][ T2209] hugetlb_fault+0x1d4e/0x3070 [ 1774.472473][ T2209] ? __pfx_hugetlb_fault+0x10/0x10 [ 1774.472494][ T2209] ? find_vma+0xbf/0x140 [ 1774.472512][ T2209] ? __pfx_find_vma+0x10/0x10 [ 1774.472532][ T2209] handle_mm_fault+0xbfa/0xd10 [ 1774.472547][ T2209] ? __pkru_allows_pkey+0x51/0xb0 [ 1774.472569][ T2209] do_user_addr_fault+0x7a6/0x1370 [ 1774.472591][ T2209] ? rcu_is_watching+0x12/0xc0 [ 1774.472607][ T2209] exc_page_fault+0x5c/0xb0 [ 1774.472638][ T2209] asm_exc_page_fault+0x26/0x30 [ 1774.472653][ T2209] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1774.472673][ T2209] Code: e9 04 21 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 20 04 00 66 66 2e 0f [ 1774.472688][ T2209] RSP: 0018:ffffc90004befdb0 EFLAGS: 00050206 [ 1774.472700][ T2209] RAX: 000000000000002f RBX: 0000000000000005 RCX: 0000000000000005 [ 1774.472709][ T2209] RDX: ffffed100f6fcec0 RSI: ffff88807b7e75fb RDI: 0000000000000000 [ 1774.472718][ T2209] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100f6fcebf [ 1774.472726][ T2209] R10: ffff88807b7e75ff R11: 0000000000000001 R12: ffff88807b7e75fb [ 1774.472735][ T2209] R13: 0000000000000005 R14: 00007ffffffff000 R15: 0000000000000000 [ 1774.472753][ T2209] _copy_to_user+0xbb/0xd0 [ 1774.472768][ T2209] __do_sys_getcwd+0x483/0x930 [ 1774.472791][ T2209] ? __pfx___do_sys_getcwd+0x10/0x10 [ 1774.472811][ T2209] ? xfd_validate_state+0x61/0x180 [ 1774.472829][ T2209] ? __pfx_ksys_write+0x10/0x10 [ 1774.472851][ T2209] do_syscall_64+0xcd/0x490 [ 1774.472866][ T2209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.472879][ T2209] RIP: 0033:0x7f79c398eb69 [ 1774.472891][ T2209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.472904][ T2209] RSP: 002b:00007f79c484f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 1774.472916][ T2209] RAX: ffffffffffffffda RBX: 00007f79c3bb5fa0 RCX: 00007f79c398eb69 [ 1774.472926][ T2209] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 1774.472934][ T2209] RBP: 00007f79c3a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1774.472943][ T2209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.472951][ T2209] R13: 0000000000000000 R14: 00007f79c3bb5fa0 R15: 00007ffc8eea9758 [ 1774.472973][ T2209] [ 1774.814373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1775.387053][ T2225] FAULT_INJECTION: forcing a failure. [ 1775.387053][ T2225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.467307][ T2225] CPU: 0 UID: 0 PID: 2225 Comm: syz.1.6482 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1775.467330][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1775.467338][ T2225] Call Trace: [ 1775.467344][ T2225] [ 1775.467350][ T2225] dump_stack_lvl+0x16c/0x1f0 [ 1775.467368][ T2225] should_fail_ex+0x512/0x640 [ 1775.467391][ T2225] _copy_from_user+0x2e/0xd0 [ 1775.467406][ T2225] input_event_from_user+0xb9/0x290 [ 1775.467420][ T2225] ? __pfx_input_event_from_user+0x10/0x10 [ 1775.467433][ T2225] ? __pfx___might_resched+0x10/0x10 [ 1775.467447][ T2225] ? input_inject_event+0x1a5/0x390 [ 1775.467471][ T2225] evdev_write+0x26b/0x440 [ 1775.467493][ T2225] ? __pfx_evdev_write+0x10/0x10 [ 1775.467520][ T2225] ? bpf_lsm_file_permission+0x9/0x10 [ 1775.467540][ T2225] ? security_file_permission+0x71/0x210 [ 1775.467554][ T2225] ? rw_verify_area+0xcf/0x680 [ 1775.467576][ T2225] ? __pfx_evdev_write+0x10/0x10 [ 1775.467595][ T2225] vfs_write+0x2a0/0x1150 [ 1775.467613][ T2225] ? __pfx_vfs_write+0x10/0x10 [ 1775.467625][ T2225] ? find_held_lock+0x2b/0x80 [ 1775.467639][ T2225] ? __fget_files+0x204/0x3c0 [ 1775.467655][ T2225] ? __fget_files+0x20e/0x3c0 [ 1775.467673][ T2225] ksys_write+0x1f8/0x250 [ 1775.467686][ T2225] ? __pfx_ksys_write+0x10/0x10 [ 1775.467706][ T2225] do_syscall_64+0xcd/0x490 [ 1775.467721][ T2225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.467735][ T2225] RIP: 0033:0x7f4292f8eb69 [ 1775.467747][ T2225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1775.467760][ T2225] RSP: 002b:00007f4293df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1775.467773][ T2225] RAX: ffffffffffffffda RBX: 00007f42931b5fa0 RCX: 00007f4292f8eb69 [ 1775.467783][ T2225] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1775.467791][ T2225] RBP: 00007f4293df3090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.467800][ T2225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1775.467808][ T2225] R13: 0000000000000000 R14: 00007f42931b5fa0 R15: 00007ffc2750ab68 [ 1775.467825][ T2225] [ 1775.688582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1776.144331][ T2232] block nbd9: NBD_DISCONNECT [ 1776.366980][ T2236] delete_channel: no stack [ 1777.030299][ T2259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6490'. [ 1779.233974][ T2317] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1779.417734][ T2334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1779.541698][ T2332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1779.856462][ T2312] netlink: set zone limit has 8 unknown bytes [ 1780.677779][ T2359] FAULT_INJECTION: forcing a failure. [ 1780.677779][ T2359] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.789905][ T2359] CPU: 0 UID: 0 PID: 2359 Comm: syz.3.6510 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1780.789929][ T2359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1780.789938][ T2359] Call Trace: [ 1780.789944][ T2359] [ 1780.789950][ T2359] dump_stack_lvl+0x16c/0x1f0 [ 1780.789969][ T2359] should_fail_ex+0x512/0x640 [ 1780.789991][ T2359] ? __kmalloc_noprof+0xbf/0x510 [ 1780.790013][ T2359] ? __seq_open_private+0x22/0xd0 [ 1780.790033][ T2359] should_failslab+0xc2/0x120 [ 1780.790060][ T2359] __kmalloc_noprof+0xd2/0x510 [ 1780.790081][ T2359] ? __pfx_stats_fop_open+0x10/0x10 [ 1780.790098][ T2359] __seq_open_private+0x22/0xd0 [ 1780.790118][ T2359] sc_common_open+0x6b/0x200 [ 1780.790133][ T2359] full_proxy_open_regular+0x1b6/0x360 [ 1780.790153][ T2359] do_dentry_open+0x744/0x1c10 [ 1780.790169][ T2359] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1780.790192][ T2359] vfs_open+0x82/0x3f0 [ 1780.790213][ T2359] path_openat+0x1de4/0x2cb0 [ 1780.790234][ T2359] ? __pfx_path_openat+0x10/0x10 [ 1780.790250][ T2359] ? __lock_acquire+0xb8a/0x1c90 [ 1780.790269][ T2359] do_filp_open+0x20b/0x470 [ 1780.790284][ T2359] ? __pfx_do_filp_open+0x10/0x10 [ 1780.790312][ T2359] ? alloc_fd+0x471/0x7d0 [ 1780.790330][ T2359] do_sys_openat2+0x11b/0x1d0 [ 1780.790349][ T2359] ? __pfx_do_sys_openat2+0x10/0x10 [ 1780.790374][ T2359] __x64_sys_openat+0x174/0x210 [ 1780.790393][ T2359] ? __pfx___x64_sys_openat+0x10/0x10 [ 1780.790420][ T2359] do_syscall_64+0xcd/0x490 [ 1780.790435][ T2359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.790450][ T2359] RIP: 0033:0x7f9beff8eb69 [ 1780.790462][ T2359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1780.790475][ T2359] RSP: 002b:00007f9bf0e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1780.790489][ T2359] RAX: ffffffffffffffda RBX: 00007f9bf01b5fa0 RCX: 00007f9beff8eb69 [ 1780.790498][ T2359] RDX: 0000000000145440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1780.790507][ T2359] RBP: 00007f9bf0011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1780.790516][ T2359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1780.790524][ T2359] R13: 0000000000000000 R14: 00007f9bf01b5fa0 R15: 00007ffcabf3ee28 [ 1780.790542][ T2359] [ 1782.527561][ T2375] HfR: entered promiscuous mode [ 1783.931949][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1783.938682][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1784.567331][ T2406] FAULT_INJECTION: forcing a failure. [ 1784.567331][ T2406] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.611361][ T2406] CPU: 0 UID: 0 PID: 2406 Comm: syz.1.6525 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1784.611384][ T2406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1784.611394][ T2406] Call Trace: [ 1784.611400][ T2406] [ 1784.611406][ T2406] dump_stack_lvl+0x16c/0x1f0 [ 1784.611426][ T2406] should_fail_ex+0x512/0x640 [ 1784.611447][ T2406] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1784.611467][ T2406] should_failslab+0xc2/0x120 [ 1784.611487][ T2406] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1784.611504][ T2406] ? __d_alloc+0x32/0xae0 [ 1784.611523][ T2406] __d_alloc+0x32/0xae0 [ 1784.611541][ T2406] d_alloc_parallel+0x111/0x1480 [ 1784.611562][ T2406] ? __lock_acquire+0xb8a/0x1c90 [ 1784.611584][ T2406] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1784.611606][ T2406] ? lockdep_init_map_type+0x5c/0x280 [ 1784.611624][ T2406] ? lockdep_init_map_type+0x5c/0x280 [ 1784.611645][ T2406] __lookup_slow+0x193/0x460 [ 1784.611674][ T2406] ? __pfx___lookup_slow+0x10/0x10 [ 1784.611706][ T2406] ? lookup_fast+0x156/0x610 [ 1784.611727][ T2406] ? _raw_spin_unlock+0x28/0x50 [ 1784.611748][ T2406] walk_component+0x353/0x5b0 [ 1784.611763][ T2406] link_path_walk+0x627/0xe20 [ 1784.611782][ T2406] path_openat+0x1b0/0x2cb0 [ 1784.611796][ T2406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.611817][ T2406] ? __pfx_path_openat+0x10/0x10 [ 1784.611832][ T2406] ? __lock_acquire+0xb8a/0x1c90 [ 1784.611851][ T2406] do_filp_open+0x20b/0x470 [ 1784.611869][ T2406] ? __pfx_do_filp_open+0x10/0x10 [ 1784.611898][ T2406] ? alloc_fd+0x471/0x7d0 [ 1784.611916][ T2406] do_sys_openat2+0x11b/0x1d0 [ 1784.611936][ T2406] ? __pfx_do_sys_openat2+0x10/0x10 [ 1784.611964][ T2406] __x64_sys_openat+0x174/0x210 [ 1784.611984][ T2406] ? __pfx___x64_sys_openat+0x10/0x10 [ 1784.612011][ T2406] do_syscall_64+0xcd/0x490 [ 1784.612029][ T2406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.612043][ T2406] RIP: 0033:0x7f4292f8eb69 [ 1784.612055][ T2406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1784.612068][ T2406] RSP: 002b:00007f4293df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1784.612083][ T2406] RAX: ffffffffffffffda RBX: 00007f42931b5fa0 RCX: 00007f4292f8eb69 [ 1784.612092][ T2406] RDX: 00000000001a8840 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1784.612101][ T2406] RBP: 00007f4293011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1784.612109][ T2406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1784.612118][ T2406] R13: 0000000000000000 R14: 00007f42931b5fa0 R15: 00007ffc2750ab68 [ 1784.612136][ T2406] [ 1785.737882][ T2423] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1786.054594][ T2423] netlink: set zone limit has 8 unknown bytes [ 1787.778214][ T2479] FAULT_INJECTION: forcing a failure. [ 1787.778214][ T2479] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.839278][ T2479] CPU: 0 UID: 0 PID: 2479 Comm: syz.3.6540 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1787.839300][ T2479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1787.839309][ T2479] Call Trace: [ 1787.839314][ T2479] [ 1787.839327][ T2479] dump_stack_lvl+0x16c/0x1f0 [ 1787.839346][ T2479] should_fail_ex+0x512/0x640 [ 1787.839366][ T2479] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1787.839386][ T2479] should_failslab+0xc2/0x120 [ 1787.839404][ T2479] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1787.839421][ T2479] ? __d_alloc+0x32/0xae0 [ 1787.839440][ T2479] __d_alloc+0x32/0xae0 [ 1787.839456][ T2479] d_alloc_parallel+0x111/0x1480 [ 1787.839478][ T2479] ? __lock_acquire+0xb8a/0x1c90 [ 1787.839500][ T2479] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1787.839521][ T2479] ? lockdep_init_map_type+0x5c/0x280 [ 1787.839539][ T2479] ? lockdep_init_map_type+0x5c/0x280 [ 1787.839560][ T2479] __lookup_slow+0x193/0x460 [ 1787.839580][ T2479] ? __pfx___lookup_slow+0x10/0x10 [ 1787.839610][ T2479] ? lookup_fast+0x156/0x610 [ 1787.839630][ T2479] ? _raw_spin_unlock+0x28/0x50 [ 1787.839651][ T2479] walk_component+0x353/0x5b0 [ 1787.839665][ T2479] link_path_walk+0x627/0xe20 [ 1787.839684][ T2479] path_openat+0x1b0/0x2cb0 [ 1787.839697][ T2479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.839718][ T2479] ? __pfx_path_openat+0x10/0x10 [ 1787.839733][ T2479] ? __lock_acquire+0xb8a/0x1c90 [ 1787.839751][ T2479] do_filp_open+0x20b/0x470 [ 1787.839766][ T2479] ? __pfx_do_filp_open+0x10/0x10 [ 1787.839794][ T2479] ? alloc_fd+0x471/0x7d0 [ 1787.839812][ T2479] do_sys_openat2+0x11b/0x1d0 [ 1787.839831][ T2479] ? __pfx_do_sys_openat2+0x10/0x10 [ 1787.839852][ T2479] ? __fget_files+0x20e/0x3c0 [ 1787.839869][ T2479] __x64_sys_openat+0x174/0x210 [ 1787.839888][ T2479] ? __pfx___x64_sys_openat+0x10/0x10 [ 1787.839906][ T2479] ? ksys_write+0x1ac/0x250 [ 1787.839927][ T2479] do_syscall_64+0xcd/0x490 [ 1787.839941][ T2479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.839954][ T2479] RIP: 0033:0x7f9beff8eb69 [ 1787.839966][ T2479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1787.839979][ T2479] RSP: 002b:00007f9bf0e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1787.839992][ T2479] RAX: ffffffffffffffda RBX: 00007f9bf01b5fa0 RCX: 00007f9beff8eb69 [ 1787.840002][ T2479] RDX: 0000000000143ac1 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1787.840010][ T2479] RBP: 00007f9bf0e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.840019][ T2479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.840027][ T2479] R13: 0000000000000001 R14: 00007f9bf01b5fa0 R15: 00007ffcabf3ee28 [ 1787.840045][ T2479] [ 1789.599377][ T30] audit: type=1807 audit(4294967334.163:138): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 1789.621134][ T2512] ima: policy update failed [ 1789.674960][ T30] audit: type=1802 audit(4294967334.183:139): pid=2512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.6547" res=0 errno=0 [ 1789.784858][ T30] audit: type=1802 audit(4294967334.224:140): pid=2512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.6547" res=0 errno=0 [ 1790.757102][ T2543] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1793.028983][ T2615] FAULT_INJECTION: forcing a failure. [ 1793.028983][ T2615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.053320][ T2613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6569'. [ 1793.073482][ T2615] CPU: 0 UID: 0 PID: 2615 Comm: syz.1.6570 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1793.073502][ T2615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1793.073511][ T2615] Call Trace: [ 1793.073517][ T2615] [ 1793.073523][ T2615] dump_stack_lvl+0x16c/0x1f0 [ 1793.073541][ T2615] should_fail_ex+0x512/0x640 [ 1793.073564][ T2615] _copy_from_user+0x2e/0xd0 [ 1793.073579][ T2615] input_event_from_user+0xb9/0x290 [ 1793.073593][ T2615] ? __pfx_input_event_from_user+0x10/0x10 [ 1793.073606][ T2615] ? __pfx___might_resched+0x10/0x10 [ 1793.073620][ T2615] ? input_inject_event+0x1a5/0x390 [ 1793.073643][ T2615] evdev_write+0x26b/0x440 [ 1793.073665][ T2615] ? __pfx_evdev_write+0x10/0x10 [ 1793.073686][ T2615] ? bpf_lsm_file_permission+0x9/0x10 [ 1793.073706][ T2615] ? security_file_permission+0x71/0x210 [ 1793.073720][ T2615] ? rw_verify_area+0xcf/0x680 [ 1793.073743][ T2615] ? __pfx_evdev_write+0x10/0x10 [ 1793.073761][ T2615] vfs_write+0x2a0/0x1150 [ 1793.073779][ T2615] ? __pfx_vfs_write+0x10/0x10 [ 1793.073791][ T2615] ? find_held_lock+0x2b/0x80 [ 1793.073805][ T2615] ? __fget_files+0x204/0x3c0 [ 1793.073827][ T2615] ? __fget_files+0x20e/0x3c0 [ 1793.073844][ T2615] ksys_write+0x1f8/0x250 [ 1793.073858][ T2615] ? __pfx_ksys_write+0x10/0x10 [ 1793.073878][ T2615] do_syscall_64+0xcd/0x490 [ 1793.073893][ T2615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.073907][ T2615] RIP: 0033:0x7f4292f8eb69 [ 1793.073919][ T2615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.073933][ T2615] RSP: 002b:00007f4293df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1793.073946][ T2615] RAX: ffffffffffffffda RBX: 00007f42931b5fa0 RCX: 00007f4292f8eb69 [ 1793.073956][ T2615] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1793.073964][ T2615] RBP: 00007f4293df3090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.073973][ T2615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.073981][ T2615] R13: 0000000000000000 R14: 00007f42931b5fa0 R15: 00007ffc2750ab68 [ 1793.073999][ T2615] [ 1793.388164][ T2623] block nbd9: NBD_DISCONNECT [ 1793.550365][ T2631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6582'. [ 1794.114522][ T2651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1794.155682][ T2651] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1794.328168][ T2658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6580'. [ 1794.373203][ T2658] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6580'. [ 1794.593472][ T2661] FAULT_INJECTION: forcing a failure. [ 1794.593472][ T2661] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.650454][ T2661] CPU: 0 UID: 0 PID: 2661 Comm: syz.0.6581 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1794.650479][ T2661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1794.650488][ T2661] Call Trace: [ 1794.650494][ T2661] [ 1794.650500][ T2661] dump_stack_lvl+0x16c/0x1f0 [ 1794.650520][ T2661] should_fail_ex+0x512/0x640 [ 1794.650543][ T2661] ? fs_reclaim_acquire+0xae/0x150 [ 1794.650567][ T2661] ? ima_alloc_init_template+0xb5/0x720 [ 1794.650585][ T2661] should_failslab+0xc2/0x120 [ 1794.650604][ T2661] __kmalloc_noprof+0xd2/0x510 [ 1794.650625][ T2661] ima_alloc_init_template+0xb5/0x720 [ 1794.650654][ T2661] ? d_absolute_path+0x136/0x1a0 [ 1794.650673][ T2661] ? __pfx_d_absolute_path+0x10/0x10 [ 1794.650694][ T2661] ima_store_measurement+0x1eb/0x5c0 [ 1794.650715][ T2661] ? __pfx_ima_store_measurement+0x10/0x10 [ 1794.650735][ T2661] ? ima_d_path+0x12b/0x2a0 [ 1794.650757][ T2661] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1794.650776][ T2661] process_measurement+0x1ddb/0x23e0 [ 1794.650800][ T2661] ? __pfx_process_measurement+0x10/0x10 [ 1794.650825][ T2661] ? kasan_quarantine_put+0x10a/0x240 [ 1794.650862][ T2661] ima_bprm_check+0xe7/0x210 [ 1794.650879][ T2661] ? __pfx_ima_bprm_check+0x10/0x10 [ 1794.650899][ T2661] security_bprm_check+0xa5/0x1e0 [ 1794.650917][ T2661] bprm_execve+0x810/0x1650 [ 1794.650935][ T2661] ? __pfx_bprm_execve+0x10/0x10 [ 1794.650947][ T2661] ? copy_string_kernel+0x460/0x520 [ 1794.650964][ T2661] do_execveat_common.isra.0+0x4a5/0x610 [ 1794.650986][ T2661] __x64_sys_execveat+0xda/0x120 [ 1794.651002][ T2661] do_syscall_64+0xcd/0x490 [ 1794.651017][ T2661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.651032][ T2661] RIP: 0033:0x7fa73758eb69 [ 1794.651044][ T2661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.651057][ T2661] RSP: 002b:00007fa7383cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1794.651071][ T2661] RAX: ffffffffffffffda RBX: 00007fa7377b5fa0 RCX: 00007fa73758eb69 [ 1794.651081][ T2661] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1794.651089][ T2661] RBP: 00007fa737611df1 R08: 0000000000001000 R09: 0000000000000000 [ 1794.651098][ T2661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1794.651106][ T2661] R13: 0000000000000000 R14: 00007fa7377b5fa0 R15: 00007ffc93520c78 [ 1794.651125][ T2661] [ 1794.652688][ T30] audit: type=1804 audit(4294967339.247:141): pid=2661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.6581" name="/newroot/459/file0" dev="tmpfs" ino=2406 res=0 errno=0 [ 1806.536144][ T2714] random: crng reseeded on system resumption [ 1807.010313][T29916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1807.039340][T29916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1807.048227][T29916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1807.057356][T29916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1807.065306][T29916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1807.355145][ T2742] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input55 [ 1807.712968][ T2727] chnl_net:caif_netlink_parms(): no params data found [ 1808.101509][ T2727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.141895][ T2727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.165036][ T2727] bridge_slave_0: entered allmulticast mode [ 1808.199923][ T2727] bridge_slave_0: entered promiscuous mode [ 1808.235417][ T2727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.275671][ T2727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.306753][ T2727] bridge_slave_1: entered allmulticast mode [ 1808.351827][ T2727] bridge_slave_1: entered promiscuous mode [ 1808.584217][ T2727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.610783][ T2783] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1808.658531][ T2727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.806367][ T2783] netlink: set zone limit has 8 unknown bytes [ 1808.866889][ T2727] team0: Port device team_slave_0 added [ 1808.907580][ T2727] team0: Port device team_slave_1 added [ 1808.997261][ T30] audit: type=1800 audit(4294967353.655:142): pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6613" name="lu_gp_id" dev="configfs" ino=163415 res=0 errno=0 [ 1809.040825][ T2727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.047779][ T2727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.089654][T29916] Bluetooth: hci1: command tx timeout [ 1809.191603][ T2727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.250636][ T2727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.278970][ T2727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.388075][ T2727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.611698][ T2727] hsr_slave_0: entered promiscuous mode [ 1809.647693][ T2727] hsr_slave_1: entered promiscuous mode [ 1809.654715][ T2727] debugfs: 'hsr0' already exists in 'hsr' [ 1809.699436][ T2727] Cannot create hsr debugfs directory [ 1810.584371][ T2727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1810.676735][ T2727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1810.714695][ T2727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1810.772354][ T2727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1811.159948][T29916] Bluetooth: hci1: command tx timeout [ 1811.251199][ T2727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.317846][ T2727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.393912][T31099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.401094][T31099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.445962][T31099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.453137][T31099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.044880][ T2727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.416352][ T2861] FAULT_INJECTION: forcing a failure. [ 1812.416352][ T2861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1812.478661][ T2861] CPU: 0 UID: 0 PID: 2861 Comm: syz.0.6623 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1812.478683][ T2861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1812.478692][ T2861] Call Trace: [ 1812.478698][ T2861] [ 1812.478704][ T2861] dump_stack_lvl+0x16c/0x1f0 [ 1812.478723][ T2861] should_fail_ex+0x512/0x640 [ 1812.478746][ T2861] _copy_from_user+0x2e/0xd0 [ 1812.478760][ T2861] snd_pcm_oss_write2+0x1c2/0x410 [ 1812.478779][ T2861] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1812.478793][ T2861] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 1812.478817][ T2861] snd_pcm_oss_write+0x711/0xa10 [ 1812.478835][ T2861] ? security_file_permission+0x71/0x210 [ 1812.478852][ T2861] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1812.478868][ T2861] vfs_write+0x2a0/0x1150 [ 1812.478887][ T2861] ? __pfx_vfs_write+0x10/0x10 [ 1812.478906][ T2861] ? find_held_lock+0x2b/0x80 [ 1812.478919][ T2861] ? __fget_files+0x204/0x3c0 [ 1812.478935][ T2861] ? __fget_files+0x20e/0x3c0 [ 1812.478953][ T2861] ksys_write+0x12a/0x250 [ 1812.478967][ T2861] ? __pfx_ksys_write+0x10/0x10 [ 1812.478987][ T2861] do_syscall_64+0xcd/0x490 [ 1812.479001][ T2861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.479016][ T2861] RIP: 0033:0x7fa73758eb69 [ 1812.479028][ T2861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1812.479041][ T2861] RSP: 002b:00007fa7383ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1812.479055][ T2861] RAX: ffffffffffffffda RBX: 00007fa7377b6080 RCX: 00007fa73758eb69 [ 1812.479064][ T2861] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1812.479072][ T2861] RBP: 00007fa7383ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.479080][ T2861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1812.479088][ T2861] R13: 0000000000000000 R14: 00007fa7377b6080 R15: 00007ffc93520c78 [ 1812.479106][ T2861] [ 1812.770556][ T2727] veth0_vlan: entered promiscuous mode [ 1812.780706][ T2727] veth1_vlan: entered promiscuous mode [ 1812.799747][ T2727] veth0_macvtap: entered promiscuous mode [ 1812.808445][ T2727] veth1_macvtap: entered promiscuous mode [ 1812.823270][ T2727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1812.833342][ T2727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.142311][T11488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.157087][T11488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.215704][T11488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.230300][T29916] Bluetooth: hci1: command tx timeout [ 1813.237942][T11488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.436294][T31099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.487373][T31099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.568497][T31101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.608228][T31101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.620892][ T2909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6632'. [ 1815.300293][T29916] Bluetooth: hci1: command tx timeout [ 1817.123187][ T2958] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 1817.431655][ T2967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1818.945310][ T2993] FAULT_INJECTION: forcing a failure. [ 1818.945310][ T2993] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.016737][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: syz.1.6653 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1819.016760][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1819.016769][ T2993] Call Trace: [ 1819.016774][ T2993] [ 1819.016781][ T2993] dump_stack_lvl+0x16c/0x1f0 [ 1819.016800][ T2993] should_fail_ex+0x512/0x640 [ 1819.016821][ T2993] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1819.016841][ T2993] should_failslab+0xc2/0x120 [ 1819.016860][ T2993] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1819.016877][ T2993] ? do_futex+0x122/0x350 [ 1819.016893][ T2993] ? __do_sys_getcwd+0xe0/0x930 [ 1819.016913][ T2993] __do_sys_getcwd+0xe0/0x930 [ 1819.016933][ T2993] ? __x64_sys_futex+0x1e0/0x4c0 [ 1819.016948][ T2993] ? __x64_sys_futex+0x1e9/0x4c0 [ 1819.016964][ T2993] ? __pfx___do_sys_getcwd+0x10/0x10 [ 1819.016983][ T2993] ? xfd_validate_state+0x61/0x180 [ 1819.017002][ T2993] ? __pfx_ksys_write+0x10/0x10 [ 1819.017022][ T2993] do_syscall_64+0xcd/0x490 [ 1819.017036][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.017050][ T2993] RIP: 0033:0x7f4292f8eb69 [ 1819.017062][ T2993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1819.017075][ T2993] RSP: 002b:00007f4293df3038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 1819.017089][ T2993] RAX: ffffffffffffffda RBX: 00007f42931b5fa0 RCX: 00007f4292f8eb69 [ 1819.017099][ T2993] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 1819.017107][ T2993] RBP: 00007f4293011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1819.017116][ T2993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1819.017124][ T2993] R13: 0000000000000000 R14: 00007f42931b5fa0 R15: 00007ffc2750ab68 [ 1819.017141][ T2993] [ 1819.331092][ T2999] FAULT_INJECTION: forcing a failure. [ 1819.331092][ T2999] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.343752][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: syz.3.6656 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1819.343774][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1819.343783][ T2999] Call Trace: [ 1819.343789][ T2999] [ 1819.343794][ T2999] dump_stack_lvl+0x16c/0x1f0 [ 1819.343812][ T2999] should_fail_ex+0x512/0x640 [ 1819.343833][ T2999] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1819.343849][ T2999] should_failslab+0xc2/0x120 [ 1819.343867][ T2999] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1819.343882][ T2999] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 1819.343901][ T2999] ? kasan_save_track+0x14/0x30 [ 1819.343918][ T2999] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 1819.343937][ T2999] ? rcu_is_watching+0x12/0xc0 [ 1819.343952][ T2999] ? __mutex_lock+0x1c2/0x1070 [ 1819.343969][ T2999] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1819.343987][ T2999] ? __pfx___mutex_lock+0x10/0x10 [ 1819.343999][ T2999] ? __lock_acquire+0xb8a/0x1c90 [ 1819.344027][ T2999] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1819.344044][ T2999] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 1819.344060][ T2999] ? lockdep_hardirqs_on+0x7c/0x110 [ 1819.344083][ T2999] snd_pcm_oss_poll+0x549/0xaf0 [ 1819.344101][ T2999] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1819.344115][ T2999] ? __fget_files+0x20e/0x3c0 [ 1819.344132][ T2999] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1819.344148][ T2999] do_select+0xd3d/0x17e0 [ 1819.344175][ T2999] ? __pfx_do_select+0x10/0x10 [ 1819.344193][ T2999] ? __pfx_pollwake+0x10/0x10 [ 1819.344214][ T2999] ? __pfx_pollwake+0x10/0x10 [ 1819.344236][ T2999] ? __pfx_pollwake+0x10/0x10 [ 1819.344257][ T2999] ? __pfx_pollwake+0x10/0x10 [ 1819.344295][ T2999] ? find_held_lock+0x2b/0x80 [ 1819.344307][ T2999] ? __might_fault+0xe3/0x190 [ 1819.344322][ T2999] ? __might_fault+0xe3/0x190 [ 1819.344336][ T2999] ? __might_fault+0x13b/0x190 [ 1819.344358][ T2999] ? core_sys_select+0x453/0xc10 [ 1819.344369][ T2999] core_sys_select+0x453/0xc10 [ 1819.344386][ T2999] ? __pfx_core_sys_select+0x10/0x10 [ 1819.344403][ T2999] ? proc_fail_nth_write+0x9f/0x220 [ 1819.344431][ T2999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1819.344449][ T2999] kern_select+0x15d/0x1e0 [ 1819.344462][ T2999] ? __pfx_kern_select+0x10/0x10 [ 1819.344477][ T2999] ? __pfx_ksys_write+0x10/0x10 [ 1819.344495][ T2999] __x64_sys_select+0xbd/0x160 [ 1819.344507][ T2999] ? do_syscall_64+0x91/0x490 [ 1819.344519][ T2999] ? lockdep_hardirqs_on+0x7c/0x110 [ 1819.344546][ T2999] do_syscall_64+0xcd/0x490 [ 1819.344560][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.344574][ T2999] RIP: 0033:0x7f9beff8eb69 [ 1819.344587][ T2999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1819.344601][ T2999] RSP: 002b:00007f9bf0e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1819.344615][ T2999] RAX: ffffffffffffffda RBX: 00007f9bf01b5fa0 RCX: 00007f9beff8eb69 [ 1819.344624][ T2999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1819.344631][ T2999] RBP: 00007f9bf0e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.344640][ T2999] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1819.344648][ T2999] R13: 0000000000000000 R14: 00007f9bf01b5fa0 R15: 00007ffcabf3ee28 [ 1819.344666][ T2999] [ 1820.829220][ T3027] FAULT_INJECTION: forcing a failure. [ 1820.829220][ T3027] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.906215][ T3027] CPU: 0 UID: 0 PID: 3027 Comm: syz.4.6665 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1820.906239][ T3027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1820.906248][ T3027] Call Trace: [ 1820.906254][ T3027] [ 1820.906261][ T3027] dump_stack_lvl+0x16c/0x1f0 [ 1820.906281][ T3027] should_fail_ex+0x512/0x640 [ 1820.906302][ T3027] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1820.906324][ T3027] should_failslab+0xc2/0x120 [ 1820.906344][ T3027] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1820.906362][ T3027] ? mark_held_locks+0x49/0x80 [ 1820.906378][ T3027] ? kstrdup_const+0x63/0x80 [ 1820.906398][ T3027] kstrdup+0x53/0x100 [ 1820.906415][ T3027] kstrdup_const+0x63/0x80 [ 1820.906431][ T3027] kvasprintf_const+0x10f/0x1a0 [ 1820.906446][ T3027] kobject_set_name_vargs+0x5a/0x140 [ 1820.906463][ T3027] dev_set_name+0xc7/0x100 [ 1820.906477][ T3027] ? __pfx_dev_set_name+0x10/0x10 [ 1820.906493][ T3027] ? lockdep_init_map_type+0x5c/0x280 [ 1820.906511][ T3027] ? __init_waitqueue_head+0xca/0x150 [ 1820.906536][ T3027] netdev_register_kobject+0xc5/0x3d0 [ 1820.906558][ T3027] register_netdevice+0x13dc/0x2270 [ 1820.906577][ T3027] ? __pfx_register_netdevice+0x10/0x10 [ 1820.906599][ T3027] internal_dev_create+0x2d3/0x520 [ 1820.906616][ T3027] ovs_vport_add+0x144/0x4d0 [ 1820.906631][ T3027] new_vport+0x16/0x1d0 [ 1820.906651][ T3027] ovs_dp_cmd_new+0x6ba/0xe60 [ 1820.906676][ T3027] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1820.906700][ T3027] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1820.906717][ T3027] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1820.906739][ T3027] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1820.906757][ T3027] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1820.906773][ T3027] ? trace_cap_capable+0x18d/0x200 [ 1820.906797][ T3027] ? bpf_lsm_capable+0x9/0x10 [ 1820.906810][ T3027] ? security_capable+0x7e/0x260 [ 1820.906828][ T3027] ? ns_capable+0xd7/0x110 [ 1820.906844][ T3027] genl_rcv_msg+0x55c/0x800 [ 1820.906863][ T3027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1820.906880][ T3027] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1820.906907][ T3027] netlink_rcv_skb+0x155/0x420 [ 1820.906921][ T3027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1820.906938][ T3027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1820.906960][ T3027] ? netlink_deliver_tap+0x1ae/0xd30 [ 1820.906985][ T3027] genl_rcv+0x28/0x40 [ 1820.906998][ T3027] netlink_unicast+0x5aa/0x870 [ 1820.907015][ T3027] ? __pfx_netlink_unicast+0x10/0x10 [ 1820.907029][ T3027] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1820.907056][ T3027] netlink_sendmsg+0x8d1/0xdd0 [ 1820.907075][ T3027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1820.907097][ T3027] ____sys_sendmsg+0xa98/0xc70 [ 1820.907116][ T3027] ? copy_msghdr_from_user+0x10a/0x160 [ 1820.907130][ T3027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1820.907157][ T3027] ___sys_sendmsg+0x134/0x1d0 [ 1820.907169][ T3027] ? futex_private_hash_put+0x176/0x300 [ 1820.907186][ T3027] ? __pfx____sys_sendmsg+0x10/0x10 [ 1820.907197][ T3027] ? __lock_acquire+0x622/0x1c90 [ 1820.907240][ T3027] __sys_sendmsg+0x16d/0x220 [ 1820.907254][ T3027] ? __pfx___sys_sendmsg+0x10/0x10 [ 1820.907267][ T3027] ? __x64_sys_futex+0x1e0/0x4c0 [ 1820.907295][ T3027] do_syscall_64+0xcd/0x490 [ 1820.907311][ T3027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.907326][ T3027] RIP: 0033:0x7f6f98b8eb69 [ 1820.907339][ T3027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1820.907352][ T3027] RSP: 002b:00007f6f969f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1820.907366][ T3027] RAX: ffffffffffffffda RBX: 00007f6f98db5fa0 RCX: 00007f6f98b8eb69 [ 1820.907375][ T3027] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 1820.907384][ T3027] RBP: 00007f6f98c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1820.907393][ T3027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1820.907402][ T3027] R13: 0000000000000000 R14: 00007f6f98db5fa0 R15: 00007fff04c4b378 [ 1820.907421][ T3027] [ 1822.192064][ T3040] can: request_module (can-proto-0) failed. [ 1823.486067][ T3069] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1823.681874][ T3069] netlink: set zone limit has 8 unknown bytes [ 1824.115695][ T3080] random: crng reseeded on system resumption [ 1824.412492][ T3088] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 1825.024947][ T3106] FAULT_INJECTION: forcing a failure. [ 1825.024947][ T3106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.244382][ T3106] CPU: 0 UID: 0 PID: 3106 Comm: syz.0.6685 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1825.244404][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1825.244413][ T3106] Call Trace: [ 1825.244418][ T3106] [ 1825.244424][ T3106] dump_stack_lvl+0x16c/0x1f0 [ 1825.244442][ T3106] should_fail_ex+0x512/0x640 [ 1825.244466][ T3106] _copy_to_user+0x32/0xd0 [ 1825.244481][ T3106] simple_read_from_buffer+0xcb/0x170 [ 1825.244505][ T3106] proc_fail_nth_read+0x197/0x240 [ 1825.244529][ T3106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1825.244552][ T3106] ? rw_verify_area+0xcf/0x680 [ 1825.244572][ T3106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1825.244594][ T3106] vfs_read+0x1e1/0xc60 [ 1825.244610][ T3106] ? __pfx___mutex_lock+0x10/0x10 [ 1825.244640][ T3106] ? __pfx_vfs_read+0x10/0x10 [ 1825.244666][ T3106] ? __fget_files+0x20e/0x3c0 [ 1825.244684][ T3106] ksys_read+0x12a/0x250 [ 1825.244698][ T3106] ? __pfx_ksys_read+0x10/0x10 [ 1825.244717][ T3106] do_syscall_64+0xcd/0x490 [ 1825.244732][ T3106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.244747][ T3106] RIP: 0033:0x7fa73758d57c [ 1825.244759][ T3106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1825.244772][ T3106] RSP: 002b:00007fa7383cc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1825.244786][ T3106] RAX: ffffffffffffffda RBX: 00007fa7377b5fa0 RCX: 00007fa73758d57c [ 1825.244795][ T3106] RDX: 000000000000000f RSI: 00007fa7383cc0a0 RDI: 0000000000000004 [ 1825.244803][ T3106] RBP: 00007fa7383cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.244812][ T3106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.244820][ T3106] R13: 0000000000000000 R14: 00007fa7377b5fa0 R15: 00007ffc93520c78 [ 1825.244838][ T3106] [ 1825.433740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.705459][ T3120] random: crng reseeded on system resumption [ 1825.921109][ T3130] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1827.178868][ T3145] block nbd9: NBD_DISCONNECT [ 1827.512062][ T3152] FAULT_INJECTION: forcing a failure. [ 1827.512062][ T3152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1827.607765][ T3152] CPU: 0 UID: 0 PID: 3152 Comm: syz.1.6702 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1827.607787][ T3152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1827.607796][ T3152] Call Trace: [ 1827.607801][ T3152] [ 1827.607807][ T3152] dump_stack_lvl+0x16c/0x1f0 [ 1827.607826][ T3152] should_fail_ex+0x512/0x640 [ 1827.607850][ T3152] _copy_from_user+0x2e/0xd0 [ 1827.607864][ T3152] input_event_from_user+0xb9/0x290 [ 1827.607878][ T3152] ? __pfx_input_event_from_user+0x10/0x10 [ 1827.607891][ T3152] ? __pfx___might_resched+0x10/0x10 [ 1827.607906][ T3152] ? input_inject_event+0x1a5/0x390 [ 1827.607935][ T3152] evdev_write+0x26b/0x440 [ 1827.607958][ T3152] ? __pfx_evdev_write+0x10/0x10 [ 1827.607979][ T3152] ? bpf_lsm_file_permission+0x9/0x10 [ 1827.607999][ T3152] ? security_file_permission+0x71/0x210 [ 1827.608014][ T3152] ? rw_verify_area+0xcf/0x680 [ 1827.608036][ T3152] ? __pfx_evdev_write+0x10/0x10 [ 1827.608054][ T3152] vfs_write+0x2a0/0x1150 [ 1827.608072][ T3152] ? __pfx_vfs_write+0x10/0x10 [ 1827.608085][ T3152] ? find_held_lock+0x2b/0x80 [ 1827.608098][ T3152] ? __fget_files+0x204/0x3c0 [ 1827.608114][ T3152] ? __fget_files+0x20e/0x3c0 [ 1827.608132][ T3152] ksys_write+0x1f8/0x250 [ 1827.608146][ T3152] ? __pfx_ksys_write+0x10/0x10 [ 1827.608166][ T3152] do_syscall_64+0xcd/0x490 [ 1827.608180][ T3152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.608195][ T3152] RIP: 0033:0x7f4292f8eb69 [ 1827.608206][ T3152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1827.608219][ T3152] RSP: 002b:00007f4293df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1827.608232][ T3152] RAX: ffffffffffffffda RBX: 00007f42931b5fa0 RCX: 00007f4292f8eb69 [ 1827.608241][ T3152] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1827.608250][ T3152] RBP: 00007f4293df3090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.608258][ T3152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1827.608266][ T3152] R13: 0000000000000000 R14: 00007f42931b5fa0 R15: 00007ffc2750ab68 [ 1827.608284][ T3152] [ 1827.823886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1828.043912][ T3156] random: crng reseeded on system resumption [ 1828.251947][ T3159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6704'. [ 1828.319759][ T3160] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6704'. [ 1829.430519][ T3173] ptp ptp0: only physical clock in use now [ 1830.726505][ T3199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6712'. [ 1833.951307][ T3247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6723'. [ 1834.073816][ T3249] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6723'. [ 1834.083827][ T3250] random: crng reseeded on system resumption [ 1834.441009][ T3225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.449637][ T3225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.571539][ T3254] FAULT_INJECTION: forcing a failure. [ 1834.571539][ T3254] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.815068][ T3254] CPU: 0 UID: 0 PID: 3254 Comm: syz.0.6724 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1834.815092][ T3254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1834.815101][ T3254] Call Trace: [ 1834.815107][ T3254] [ 1834.815113][ T3254] dump_stack_lvl+0x16c/0x1f0 [ 1834.815132][ T3254] should_fail_ex+0x512/0x640 [ 1834.815152][ T3254] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1834.815171][ T3254] should_failslab+0xc2/0x120 [ 1834.815189][ T3254] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1834.815203][ T3254] ? find_held_lock+0x2b/0x80 [ 1834.815216][ T3254] ? yama_ptracer_add+0x48/0x590 [ 1834.815232][ T3254] yama_ptracer_add+0x48/0x590 [ 1834.815246][ T3254] yama_task_prctl+0xf4/0x1d0 [ 1834.815259][ T3254] security_task_prctl+0xbf/0x160 [ 1834.815280][ T3254] __do_sys_prctl+0xaa/0x24c0 [ 1834.815302][ T3254] ? __pfx___do_sys_prctl+0x10/0x10 [ 1834.815327][ T3254] do_syscall_64+0xcd/0x490 [ 1834.815342][ T3254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.815356][ T3254] RIP: 0033:0x7fa73758eb69 [ 1834.815368][ T3254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1834.815381][ T3254] RSP: 002b:00007fa7383cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1834.815395][ T3254] RAX: ffffffffffffffda RBX: 00007fa7377b5fa0 RCX: 00007fa73758eb69 [ 1834.815405][ T3254] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000059616d61 [ 1834.815414][ T3254] RBP: 00007fa737611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1834.815422][ T3254] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1834.815430][ T3254] R13: 0000000000000000 R14: 00007fa7377b5fa0 R15: 00007ffc93520c78 [ 1834.815448][ T3254] [ 1836.405190][ T3294] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1836.668379][ T3294] netlink: set zone limit has 8 unknown bytes [ 1837.110601][ T3307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6737'. [ 1840.530156][ T3337] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1841.756866][ T3409] block nbd9: NBD_DISCONNECT [ 1842.653477][ T3430] FAULT_INJECTION: forcing a failure. [ 1842.653477][ T3430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1842.765039][ T3430] CPU: 0 UID: 0 PID: 3430 Comm: syz.4.6765 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1842.765062][ T3430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1842.765070][ T3430] Call Trace: [ 1842.765076][ T3430] [ 1842.765081][ T3430] dump_stack_lvl+0x16c/0x1f0 [ 1842.765099][ T3430] should_fail_ex+0x512/0x640 [ 1842.765122][ T3430] _copy_from_user+0x2e/0xd0 [ 1842.765136][ T3430] snd_pcm_oss_write2+0x1c2/0x410 [ 1842.765156][ T3430] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1842.765170][ T3430] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 1842.765194][ T3430] snd_pcm_oss_write+0x711/0xa10 [ 1842.765212][ T3430] ? security_file_permission+0x71/0x210 [ 1842.765229][ T3430] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1842.765245][ T3430] vfs_write+0x2a0/0x1150 [ 1842.765264][ T3430] ? __pfx_vfs_write+0x10/0x10 [ 1842.765276][ T3430] ? find_held_lock+0x2b/0x80 [ 1842.765290][ T3430] ? __fget_files+0x204/0x3c0 [ 1842.765306][ T3430] ? __fget_files+0x20e/0x3c0 [ 1842.765324][ T3430] ksys_write+0x12a/0x250 [ 1842.765338][ T3430] ? __pfx_ksys_write+0x10/0x10 [ 1842.765358][ T3430] do_syscall_64+0xcd/0x490 [ 1842.765373][ T3430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.765387][ T3430] RIP: 0033:0x7f6f98b8eb69 [ 1842.765398][ T3430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1842.765412][ T3430] RSP: 002b:00007f6f969d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1842.765426][ T3430] RAX: ffffffffffffffda RBX: 00007f6f98db6080 RCX: 00007f6f98b8eb69 [ 1842.765435][ T3430] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1842.765443][ T3430] RBP: 00007f6f969d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.765452][ T3430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1842.765460][ T3430] R13: 0000000000000000 R14: 00007f6f98db6080 R15: 00007fff04c4b378 [ 1842.765478][ T3430] [ 1842.965878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1843.258558][ T3435] FAULT_INJECTION: forcing a failure. [ 1843.258558][ T3435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1843.298913][ T3435] CPU: 0 UID: 0 PID: 3435 Comm: syz.3.6767 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1843.298935][ T3435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1843.298944][ T3435] Call Trace: [ 1843.298949][ T3435] [ 1843.298955][ T3435] dump_stack_lvl+0x16c/0x1f0 [ 1843.298973][ T3435] should_fail_ex+0x512/0x640 [ 1843.298996][ T3435] _copy_from_user+0x2e/0xd0 [ 1843.299011][ T3435] input_event_from_user+0xb9/0x290 [ 1843.299025][ T3435] ? __pfx_input_event_from_user+0x10/0x10 [ 1843.299038][ T3435] ? __pfx___might_resched+0x10/0x10 [ 1843.299052][ T3435] ? input_inject_event+0x1a5/0x390 [ 1843.299076][ T3435] evdev_write+0x26b/0x440 [ 1843.299098][ T3435] ? __pfx_evdev_write+0x10/0x10 [ 1843.299119][ T3435] ? bpf_lsm_file_permission+0x9/0x10 [ 1843.299139][ T3435] ? security_file_permission+0x71/0x210 [ 1843.299154][ T3435] ? rw_verify_area+0xcf/0x680 [ 1843.299176][ T3435] ? __pfx_evdev_write+0x10/0x10 [ 1843.299201][ T3435] vfs_write+0x2a0/0x1150 [ 1843.299219][ T3435] ? __pfx_vfs_write+0x10/0x10 [ 1843.299232][ T3435] ? find_held_lock+0x2b/0x80 [ 1843.299245][ T3435] ? __fget_files+0x204/0x3c0 [ 1843.299261][ T3435] ? __fget_files+0x20e/0x3c0 [ 1843.299283][ T3435] ksys_write+0x1f8/0x250 [ 1843.299296][ T3435] ? __pfx_ksys_write+0x10/0x10 [ 1843.299316][ T3435] do_syscall_64+0xcd/0x490 [ 1843.299331][ T3435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.299345][ T3435] RIP: 0033:0x7f9beff8eb69 [ 1843.299357][ T3435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1843.299370][ T3435] RSP: 002b:00007f9bf0e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1843.299384][ T3435] RAX: ffffffffffffffda RBX: 00007f9bf01b5fa0 RCX: 00007f9beff8eb69 [ 1843.299394][ T3435] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1843.299402][ T3435] RBP: 00007f9bf0e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.299411][ T3435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1843.299419][ T3435] R13: 0000000000000000 R14: 00007f9bf01b5fa0 R15: 00007ffcabf3ee28 [ 1843.299437][ T3435] [ 1843.519706][ C0] vkms_vblank_simulate: vblank timer overrun [ 1843.544476][ T3438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6768'. [ 1843.553998][ T3438] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6768'. [ 1844.277754][ T3447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6771'. [ 1844.333339][ T3447] netlink: 25 bytes leftover after parsing attributes in process `syz.4.6771'. [ 1844.413572][ T3449] random: crng reseeded on system resumption [ 1844.682633][ T3457] XFS: irix_symlink_mode sysctl option is deprecated. [ 1844.714055][ T3452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6773'. [ 1844.731404][ T3457] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1844.786213][ T3459] Process accounting resumed [ 1844.817453][ T3460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6776'. [ 1844.874282][ T3457] netlink: set zone limit has 8 unknown bytes [ 1845.084596][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1845.091302][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1845.755917][ T3485] FAULT_INJECTION: forcing a failure. [ 1845.755917][ T3485] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.794175][ T3487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6783'. [ 1845.828914][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1845.844382][ T3485] CPU: 0 UID: 0 PID: 3485 Comm: syz.1.6782 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1845.844402][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1845.844410][ T3485] Call Trace: [ 1845.844416][ T3485] [ 1845.844421][ T3485] dump_stack_lvl+0x16c/0x1f0 [ 1845.844440][ T3485] should_fail_ex+0x512/0x640 [ 1845.844460][ T3485] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1845.844481][ T3485] should_failslab+0xc2/0x120 [ 1845.844500][ T3485] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1845.844518][ T3485] ? kstrdup_const+0x63/0x80 [ 1845.844537][ T3485] kstrdup+0x53/0x100 [ 1845.844554][ T3485] kstrdup_const+0x63/0x80 [ 1845.844569][ T3485] __kernfs_new_node+0x9b/0x8e0 [ 1845.844589][ T3485] ? __pfx___kernfs_new_node+0x10/0x10 [ 1845.844609][ T3485] ? find_held_lock+0x2b/0x80 [ 1845.844623][ T3485] ? kernfs_root+0xee/0x2a0 [ 1845.844642][ T3485] kernfs_new_node+0x13c/0x1e0 [ 1845.844663][ T3485] __kernfs_create_file+0x53/0x350 [ 1845.844687][ T3485] cgroup_addrm_files+0x546/0xc20 [ 1845.844716][ T3485] ? __xa_store+0x1dc/0x2e0 [ 1845.844730][ T3485] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1845.844750][ T3485] ? __pfx___xa_store+0x10/0x10 [ 1845.844771][ T3485] ? do_raw_spin_unlock+0x172/0x230 [ 1845.844794][ T3485] css_populate_dir+0x169/0x580 [ 1845.844812][ T3485] cgroup_apply_control_enable+0x3f3/0xbb0 [ 1845.844840][ T3485] cgroup_mkdir+0x5e7/0x11f0 [ 1845.844863][ T3485] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1845.844892][ T3485] kernfs_iop_mkdir+0x111/0x190 [ 1845.844908][ T3485] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1845.844927][ T3485] vfs_mkdir+0x590/0x8c0 [ 1845.844952][ T3485] do_mkdirat+0x304/0x3e0 [ 1845.844970][ T3485] ? __pfx_do_mkdirat+0x10/0x10 [ 1845.844987][ T3485] ? getname_flags.part.0+0x1c5/0x550 [ 1845.845008][ T3485] __x64_sys_mkdir+0xef/0x140 [ 1845.845023][ T3485] do_syscall_64+0xcd/0x490 [ 1845.845038][ T3485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.845052][ T3485] RIP: 0033:0x7f4292f8eb69 [ 1845.845063][ T3485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1845.845076][ T3485] RSP: 002b:00007f4293dd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1845.845090][ T3485] RAX: ffffffffffffffda RBX: 00007f42931b6080 RCX: 00007f4292f8eb69 [ 1845.845099][ T3485] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1845.845107][ T3485] RBP: 00007f4293011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1845.845116][ T3485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.845124][ T3485] R13: 0000000000000000 R14: 00007f42931b6080 R15: 00007ffc2750ab68 [ 1845.845141][ T3485] [ 1845.845149][ T3485] cgroup: cgroup_addrm_files: failed to add kmem.tcp.failcnt, err=-12 [ 1846.059601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1846.146542][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1846.171860][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6783'. [ 1846.196334][ T3491] netlink: 25 bytes leftover after parsing attributes in process `syz.4.6783'. [ 1846.215120][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1846.233128][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1846.318215][ T3493] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1846.334442][ T3493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1846.361189][ T3493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1846.400311][ T3493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1846.430587][ T3493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1846.444064][ T3496] FAULT_INJECTION: forcing a failure. [ 1846.444064][ T3496] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.468587][ T3493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1846.500974][ T3493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1846.526942][ T3496] CPU: 0 UID: 0 PID: 3496 Comm: syz.4.6785 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1846.526965][ T3496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1846.526974][ T3496] Call Trace: [ 1846.526980][ T3496] [ 1846.526986][ T3496] dump_stack_lvl+0x16c/0x1f0 [ 1846.527003][ T3496] should_fail_ex+0x512/0x640 [ 1846.527024][ T3496] ? __kmalloc_noprof+0xbf/0x510 [ 1846.527042][ T3496] ? constrain_params_by_rules+0x175/0xca0 [ 1846.527059][ T3496] should_failslab+0xc2/0x120 [ 1846.527077][ T3496] __kmalloc_noprof+0xd2/0x510 [ 1846.527093][ T3496] ? unwind_get_return_address+0x59/0xa0 [ 1846.527111][ T3496] constrain_params_by_rules+0x175/0xca0 [ 1846.527138][ T3496] ? stack_trace_save+0x8e/0xc0 [ 1846.527153][ T3496] ? stack_depot_save_flags+0x28/0xa40 [ 1846.527174][ T3496] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1846.527194][ T3496] ? __kasan_kmalloc+0xaa/0xb0 [ 1846.527208][ T3496] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 1846.527225][ T3496] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1846.527240][ T3496] ? snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 1846.527261][ T3496] ? rcu_is_watching+0x12/0xc0 [ 1846.527274][ T3496] ? snd_interval_refine+0x2fa/0x580 [ 1846.527296][ T3496] snd_pcm_hw_refine+0x7de/0xad0 [ 1846.527316][ T3496] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1846.527338][ T3496] ? __asan_memset+0x23/0x50 [ 1846.527352][ T3496] ? _snd_pcm_hw_param_min+0x259/0x630 [ 1846.527370][ T3496] snd_pcm_oss_change_params_locked+0x65e/0x3a30 [ 1846.527388][ T3496] ? rcu_is_watching+0x12/0xc0 [ 1846.527406][ T3496] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1846.527423][ T3496] ? __pfx___mutex_lock+0x10/0x10 [ 1846.527437][ T3496] ? __lock_acquire+0xb8a/0x1c90 [ 1846.527465][ T3496] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1846.527482][ T3496] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 1846.527498][ T3496] ? lockdep_hardirqs_on+0x7c/0x110 [ 1846.527521][ T3496] snd_pcm_oss_poll+0x549/0xaf0 [ 1846.527539][ T3496] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1846.527554][ T3496] ? __fget_files+0x20e/0x3c0 [ 1846.527575][ T3496] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1846.527591][ T3496] do_select+0xd3d/0x17e0 [ 1846.527619][ T3496] ? __pfx_do_select+0x10/0x10 [ 1846.527637][ T3496] ? __pfx_pollwake+0x10/0x10 [ 1846.527659][ T3496] ? __pfx_pollwake+0x10/0x10 [ 1846.527680][ T3496] ? __pfx_pollwake+0x10/0x10 [ 1846.527702][ T3496] ? __pfx_pollwake+0x10/0x10 [ 1846.527740][ T3496] ? find_held_lock+0x2b/0x80 [ 1846.527752][ T3496] ? __might_fault+0xe3/0x190 [ 1846.527767][ T3496] ? __might_fault+0xe3/0x190 [ 1846.527781][ T3496] ? __might_fault+0x13b/0x190 [ 1846.527803][ T3496] ? core_sys_select+0x453/0xc10 [ 1846.527814][ T3496] core_sys_select+0x453/0xc10 [ 1846.527832][ T3496] ? __pfx_core_sys_select+0x10/0x10 [ 1846.527848][ T3496] ? proc_fail_nth_write+0x9f/0x220 [ 1846.527877][ T3496] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1846.527895][ T3496] kern_select+0x15d/0x1e0 [ 1846.527908][ T3496] ? __pfx_kern_select+0x10/0x10 [ 1846.527923][ T3496] ? __pfx_ksys_write+0x10/0x10 [ 1846.527941][ T3496] __x64_sys_select+0xbd/0x160 [ 1846.527953][ T3496] ? do_syscall_64+0x91/0x490 [ 1846.527965][ T3496] ? lockdep_hardirqs_on+0x7c/0x110 [ 1846.527985][ T3496] do_syscall_64+0xcd/0x490 [ 1846.528000][ T3496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.528014][ T3496] RIP: 0033:0x7f6f98b8eb69 [ 1846.528025][ T3496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1846.528039][ T3496] RSP: 002b:00007f6f969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1846.528053][ T3496] RAX: ffffffffffffffda RBX: 00007f6f98db5fa0 RCX: 00007f6f98b8eb69 [ 1846.528063][ T3496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1846.528071][ T3496] RBP: 00007f6f969f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1846.528079][ T3496] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1846.528088][ T3496] R13: 0000000000000000 R14: 00007f6f98db5fa0 R15: 00007fff04c4b378 [ 1846.528106][ T3496] [ 1846.924717][ C0] vkms_vblank_simulate: vblank timer overrun [ 1847.735890][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6787'. [ 1847.909715][ T3524] FAULT_INJECTION: forcing a failure. [ 1847.909715][ T3524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1848.043171][ T3524] CPU: 0 UID: 0 PID: 3524 Comm: syz.1.6792 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1848.043192][ T3524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1848.043201][ T3524] Call Trace: [ 1848.043206][ T3524] [ 1848.043212][ T3524] dump_stack_lvl+0x16c/0x1f0 [ 1848.043230][ T3524] should_fail_ex+0x512/0x640 [ 1848.043253][ T3524] _copy_to_user+0x32/0xd0 [ 1848.043268][ T3524] mousedev_read+0x3a9/0x7d0 [ 1848.043290][ T3524] ? __pfx_mousedev_read+0x10/0x10 [ 1848.043309][ T3524] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1848.043326][ T3524] ? apparmor_file_permission+0x251/0x400 [ 1848.043348][ T3524] ? bpf_lsm_file_permission+0x9/0x10 [ 1848.043368][ T3524] ? security_file_permission+0x71/0x210 [ 1848.043382][ T3524] ? rw_verify_area+0xcf/0x680 [ 1848.043404][ T3524] ? __pfx_mousedev_read+0x10/0x10 [ 1848.043421][ T3524] vfs_readv+0x5be/0x8b0 [ 1848.043447][ T3524] ? __pfx_vfs_readv+0x10/0x10 [ 1848.043459][ T3524] ? find_held_lock+0x2b/0x80 [ 1848.043483][ T3524] ? __fget_files+0x20e/0x3c0 [ 1848.043495][ T3524] ? __fget_files+0x1d0/0x3c0 [ 1848.043511][ T3524] ? do_readv+0x28c/0x340 [ 1848.043522][ T3524] do_readv+0x28c/0x340 [ 1848.043534][ T3524] ? __pfx_do_readv+0x10/0x10 [ 1848.043551][ T3524] do_syscall_64+0xcd/0x490 [ 1848.043566][ T3524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1848.043580][ T3524] RIP: 0033:0x7f4292f8eb69 [ 1848.043591][ T3524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1848.043605][ T3524] RSP: 002b:00007f4293dd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1848.043619][ T3524] RAX: ffffffffffffffda RBX: 00007f42931b6080 RCX: 00007f4292f8eb69 [ 1848.043628][ T3524] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1848.043636][ T3524] RBP: 00007f4293dd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1848.043645][ T3524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1848.043653][ T3524] R13: 0000000000000000 R14: 00007f42931b6080 R15: 00007ffc2750ab68 [ 1848.043670][ T3524] [ 1848.251653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1848.355692][ T3510] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1848.515533][T29916] Bluetooth: hci4: command 0x0c1a tx timeout [ 1848.521585][T29916] Bluetooth: hci3: command 0x0406 tx timeout [ 1848.529115][T29916] Bluetooth: hci0: command 0x0406 tx timeout [ 1848.535534][T29916] Bluetooth: hci1: command 0x0c1a tx timeout [ 1848.541765][T29916] Bluetooth: hci2: command 0x0c1a tx timeout [ 1849.592325][ T3547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6798'. [ 1850.027485][ T3560] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6802'. [ 1850.203692][ T3563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6803'. [ 1850.354971][ T3569] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 1850.467492][ T3572] FAULT_INJECTION: forcing a failure. [ 1850.467492][ T3572] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.541388][ T3572] CPU: 0 UID: 0 PID: 3572 Comm: syz.0.6806 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1850.541412][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1850.541422][ T3572] Call Trace: [ 1850.541428][ T3572] [ 1850.541434][ T3572] dump_stack_lvl+0x16c/0x1f0 [ 1850.541454][ T3572] should_fail_ex+0x512/0x640 [ 1850.541475][ T3572] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1850.541496][ T3572] should_failslab+0xc2/0x120 [ 1850.541515][ T3572] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1850.541532][ T3572] ? __kernfs_new_node+0xd2/0x8e0 [ 1850.541551][ T3572] __kernfs_new_node+0xd2/0x8e0 [ 1850.541569][ T3572] ? __pfx___kernfs_new_node+0x10/0x10 [ 1850.541589][ T3572] ? find_held_lock+0x2b/0x80 [ 1850.541604][ T3572] ? kernfs_root+0xee/0x2a0 [ 1850.541623][ T3572] kernfs_new_node+0x13c/0x1e0 [ 1850.541645][ T3572] __kernfs_create_file+0x53/0x350 [ 1850.541668][ T3572] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1850.541688][ T3572] internal_create_group+0x578/0xf30 [ 1850.541709][ T3572] ? __pfx_internal_create_group+0x10/0x10 [ 1850.541728][ T3572] ? kernfs_create_link+0x1bd/0x240 [ 1850.541752][ T3572] internal_create_groups+0x9d/0x150 [ 1850.541770][ T3572] device_add+0x6d1/0x1a70 [ 1850.541793][ T3572] ? __pfx_device_add+0x10/0x10 [ 1850.541813][ T3572] ? lockdep_init_map_type+0x5c/0x280 [ 1850.541832][ T3572] ? __init_waitqueue_head+0xca/0x150 [ 1850.541857][ T3572] netdev_register_kobject+0x1a9/0x3d0 [ 1850.541876][ T3572] register_netdevice+0x13dc/0x2270 [ 1850.541896][ T3572] ? __pfx_register_netdevice+0x10/0x10 [ 1850.541917][ T3572] internal_dev_create+0x2d3/0x520 [ 1850.541934][ T3572] ovs_vport_add+0x144/0x4d0 [ 1850.541949][ T3572] new_vport+0x16/0x1d0 [ 1850.541969][ T3572] ovs_dp_cmd_new+0x6ba/0xe60 [ 1850.541994][ T3572] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1850.542018][ T3572] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1850.542036][ T3572] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1850.542057][ T3572] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1850.542074][ T3572] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1850.542091][ T3572] ? trace_cap_capable+0x18d/0x200 [ 1850.542114][ T3572] ? bpf_lsm_capable+0x9/0x10 [ 1850.542127][ T3572] ? security_capable+0x7e/0x260 [ 1850.542149][ T3572] ? ns_capable+0xd7/0x110 [ 1850.542182][ T3572] genl_rcv_msg+0x55c/0x800 [ 1850.542253][ T3572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1850.542271][ T3572] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1850.542299][ T3572] netlink_rcv_skb+0x155/0x420 [ 1850.542314][ T3572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1850.542337][ T3572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1850.542363][ T3572] genl_rcv+0x28/0x40 [ 1850.542378][ T3572] netlink_unicast+0x5aa/0x870 [ 1850.542395][ T3572] ? __pfx_netlink_unicast+0x10/0x10 [ 1850.542410][ T3572] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1850.542430][ T3572] netlink_sendmsg+0x8d1/0xdd0 [ 1850.542448][ T3572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1850.542470][ T3572] ____sys_sendmsg+0xa98/0xc70 [ 1850.542489][ T3572] ? copy_msghdr_from_user+0x10a/0x160 [ 1850.542502][ T3572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1850.542524][ T3572] ? __pfx_futex_wake_mark+0x10/0x10 [ 1850.542546][ T3572] ___sys_sendmsg+0x134/0x1d0 [ 1850.542557][ T3572] ? futex_private_hash_put+0x176/0x300 [ 1850.542574][ T3572] ? __pfx____sys_sendmsg+0x10/0x10 [ 1850.542585][ T3572] ? __lock_acquire+0x622/0x1c90 [ 1850.542626][ T3572] __sys_sendmsg+0x16d/0x220 [ 1850.542639][ T3572] ? __pfx___sys_sendmsg+0x10/0x10 [ 1850.542652][ T3572] ? __x64_sys_futex+0x1e0/0x4c0 [ 1850.542680][ T3572] do_syscall_64+0xcd/0x490 [ 1850.542695][ T3572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.542709][ T3572] RIP: 0033:0x7fa73758eb69 [ 1850.542722][ T3572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1850.542736][ T3572] RSP: 002b:00007fa7383cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1850.542750][ T3572] RAX: ffffffffffffffda RBX: 00007fa7377b5fa0 RCX: 00007fa73758eb69 [ 1850.542760][ T3572] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 1850.542770][ T3572] RBP: 00007fa737611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1850.542779][ T3572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1850.542788][ T3572] R13: 0000000000000000 R14: 00007fa7377b5fa0 R15: 00007ffc93520c78 [ 1850.542807][ T3572] [ 1851.035057][ T3531] Bluetooth: hci1: command 0x0c1a tx timeout [ 1851.081782][ T3578] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1851.776358][ T3531] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1852.093280][ T3588] netlink: 342 bytes leftover after parsing attributes in process `syz.1.6812'. [ 1852.307127][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6814'. [ 1852.573481][ T3604] FAULT_INJECTION: forcing a failure. [ 1852.573481][ T3604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.636474][ T3604] CPU: 0 UID: 0 PID: 3604 Comm: syz.1.6815 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1852.636496][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1852.636505][ T3604] Call Trace: [ 1852.636510][ T3604] [ 1852.636516][ T3604] dump_stack_lvl+0x16c/0x1f0 [ 1852.636534][ T3604] should_fail_ex+0x512/0x640 [ 1852.636557][ T3604] _copy_from_user+0x2e/0xd0 [ 1852.636572][ T3604] snd_pcm_oss_write2+0x1c2/0x410 [ 1852.636591][ T3604] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1852.636606][ T3604] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 1852.636629][ T3604] snd_pcm_oss_write+0x711/0xa10 [ 1852.636647][ T3604] ? security_file_permission+0x71/0x210 [ 1852.636664][ T3604] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1852.636680][ T3604] vfs_write+0x2a0/0x1150 [ 1852.636699][ T3604] ? __pfx_vfs_write+0x10/0x10 [ 1852.636711][ T3604] ? find_held_lock+0x2b/0x80 [ 1852.636725][ T3604] ? __fget_files+0x204/0x3c0 [ 1852.636741][ T3604] ? __fget_files+0x20e/0x3c0 [ 1852.636759][ T3604] ksys_write+0x12a/0x250 [ 1852.636773][ T3604] ? __pfx_ksys_write+0x10/0x10 [ 1852.636792][ T3604] do_syscall_64+0xcd/0x490 [ 1852.636807][ T3604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.636821][ T3604] RIP: 0033:0x7f4292f8eb69 [ 1852.636833][ T3604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1852.636846][ T3604] RSP: 002b:00007f4293dd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1852.636860][ T3604] RAX: ffffffffffffffda RBX: 00007f42931b6080 RCX: 00007f4292f8eb69 [ 1852.636869][ T3604] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1852.636877][ T3604] RBP: 00007f4293dd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.636885][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.636893][ T3604] R13: 0000000000000000 R14: 00007f42931b6080 R15: 00007ffc2750ab68 [ 1852.636911][ T3604] [ 1853.049490][ T3531] Bluetooth: hci1: command 0x0c1a tx timeout [ 1853.609193][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1853.620053][ T3629] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1853.630661][ T3629] FAULT_INJECTION: forcing a failure. [ 1853.630661][ T3629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.644315][ T3629] CPU: 0 UID: 0 PID: 3629 Comm: syz.1.6823 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1853.644335][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1853.644344][ T3629] Call Trace: [ 1853.644349][ T3629] [ 1853.644354][ T3629] dump_stack_lvl+0x16c/0x1f0 [ 1853.644372][ T3629] should_fail_ex+0x512/0x640 [ 1853.644395][ T3629] _copy_to_user+0x32/0xd0 [ 1853.644410][ T3629] simple_read_from_buffer+0xcb/0x170 [ 1853.644434][ T3629] proc_fail_nth_read+0x197/0x240 [ 1853.644457][ T3629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1853.644480][ T3629] ? rw_verify_area+0xcf/0x680 [ 1853.644501][ T3629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1853.644522][ T3629] vfs_read+0x1e1/0xc60 [ 1853.644538][ T3629] ? __pfx___mutex_lock+0x10/0x10 [ 1853.644552][ T3629] ? __pfx_vfs_read+0x10/0x10 [ 1853.644571][ T3629] ? __fget_files+0x20e/0x3c0 [ 1853.644590][ T3629] ksys_read+0x12a/0x250 [ 1853.644603][ T3629] ? __pfx_ksys_read+0x10/0x10 [ 1853.644622][ T3629] do_syscall_64+0xcd/0x490 [ 1853.644637][ T3629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.644651][ T3629] RIP: 0033:0x7f4292f8d57c [ 1853.644663][ T3629] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1853.644676][ T3629] RSP: 002b:00007f4293df3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1853.644689][ T3629] RAX: ffffffffffffffda RBX: 00007f42931b5fa0 RCX: 00007f4292f8d57c [ 1853.644698][ T3629] RDX: 000000000000000f RSI: 00007f4293df30a0 RDI: 0000000000000003 [ 1853.644706][ T3629] RBP: 00007f4293df3090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.644714][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.644722][ T3629] R13: 0000000000000000 R14: 00007f42931b5fa0 R15: 00007ffc2750ab68 [ 1853.644745][ T3629] [ 1854.145427][ T3635] FAULT_INJECTION: forcing a failure. [ 1854.145427][ T3635] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.176463][ T3531] Bluetooth: hci4: unexpected event 0x1d length: 10 > 5 [ 1854.191745][ T3635] CPU: 0 UID: 0 PID: 3635 Comm: syz.4.6825 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1854.191767][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1854.191775][ T3635] Call Trace: [ 1854.191780][ T3635] [ 1854.191786][ T3635] dump_stack_lvl+0x16c/0x1f0 [ 1854.191804][ T3635] should_fail_ex+0x512/0x640 [ 1854.191824][ T3635] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1854.191850][ T3635] should_failslab+0xc2/0x120 [ 1854.191868][ T3635] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1854.191881][ T3635] ? __asan_memset+0x23/0x50 [ 1854.191894][ T3635] ? snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 1854.191915][ T3635] snd_pcm_oss_change_params_locked+0x6f4/0x3a30 [ 1854.191934][ T3635] ? rcu_is_watching+0x12/0xc0 [ 1854.191953][ T3635] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1854.191970][ T3635] ? __pfx___mutex_lock+0x10/0x10 [ 1854.191983][ T3635] ? __lock_acquire+0xb8a/0x1c90 [ 1854.192012][ T3635] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1854.192029][ T3635] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 1854.192045][ T3635] ? lockdep_hardirqs_on+0x7c/0x110 [ 1854.192068][ T3635] snd_pcm_oss_poll+0x549/0xaf0 [ 1854.192089][ T3635] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1854.192104][ T3635] ? __fget_files+0x20e/0x3c0 [ 1854.192121][ T3635] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1854.192137][ T3635] do_select+0xd3d/0x17e0 [ 1854.192167][ T3635] ? __pfx_do_select+0x10/0x10 [ 1854.192186][ T3635] ? __pfx_pollwake+0x10/0x10 [ 1854.192207][ T3635] ? __pfx_pollwake+0x10/0x10 [ 1854.192229][ T3635] ? __pfx_pollwake+0x10/0x10 [ 1854.192251][ T3635] ? __pfx_pollwake+0x10/0x10 [ 1854.192289][ T3635] ? find_held_lock+0x2b/0x80 [ 1854.192300][ T3635] ? __might_fault+0xe3/0x190 [ 1854.192316][ T3635] ? __might_fault+0xe3/0x190 [ 1854.192330][ T3635] ? __might_fault+0x13b/0x190 [ 1854.192351][ T3635] ? core_sys_select+0x453/0xc10 [ 1854.192363][ T3635] core_sys_select+0x453/0xc10 [ 1854.192380][ T3635] ? __pfx_core_sys_select+0x10/0x10 [ 1854.192396][ T3635] ? proc_fail_nth_write+0x9f/0x220 [ 1854.192425][ T3635] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1854.192442][ T3635] kern_select+0x15d/0x1e0 [ 1854.192455][ T3635] ? __pfx_kern_select+0x10/0x10 [ 1854.192471][ T3635] ? __pfx_ksys_write+0x10/0x10 [ 1854.192492][ T3635] __x64_sys_select+0xbd/0x160 [ 1854.192504][ T3635] ? do_syscall_64+0x91/0x490 [ 1854.192517][ T3635] ? lockdep_hardirqs_on+0x7c/0x110 [ 1854.192537][ T3635] do_syscall_64+0xcd/0x490 [ 1854.192551][ T3635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.192565][ T3635] RIP: 0033:0x7f6f98b8eb69 [ 1854.192577][ T3635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1854.192590][ T3635] RSP: 002b:00007f6f969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1854.192604][ T3635] RAX: ffffffffffffffda RBX: 00007f6f98db5fa0 RCX: 00007f6f98b8eb69 [ 1854.192616][ T3635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1854.192627][ T3635] RBP: 00007f6f969f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1854.192635][ T3635] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1854.192645][ T3635] R13: 0000000000000000 R14: 00007f6f98db5fa0 R15: 00007fff04c4b378 [ 1854.192665][ T3635] [ 1854.576987][ T3641] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1854.609185][ T3641] netlink: set zone limit has 8 unknown bytes [ 1854.709016][ T30] audit: type=1326 audit(4294967399.589:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3645 comm="syz.1.6830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4292f8eb69 code=0x0 [ 1855.942847][ T3677] FAULT_INJECTION: forcing a failure. [ 1855.942847][ T3677] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.005988][ T3677] CPU: 0 UID: 0 PID: 3677 Comm: syz.4.6840 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1856.006012][ T3677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1856.006023][ T3677] Call Trace: [ 1856.006031][ T3677] [ 1856.006038][ T3677] dump_stack_lvl+0x16c/0x1f0 [ 1856.006058][ T3677] should_fail_ex+0x512/0x640 [ 1856.006079][ T3677] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1856.006097][ T3677] should_failslab+0xc2/0x120 [ 1856.006117][ T3677] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1856.006130][ T3677] ? lockdep_init_map_type+0x5c/0x280 [ 1856.006149][ T3677] ? nci_hci_allocate+0x45/0x330 [ 1856.006166][ T3677] nci_hci_allocate+0x45/0x330 [ 1856.006179][ T3677] nci_allocate_device+0x26f/0x430 [ 1856.006199][ T3677] virtual_ncidev_open+0x6f/0x220 [ 1856.006215][ T3677] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1856.006228][ T3677] misc_open+0x35d/0x420 [ 1856.006244][ T3677] ? __pfx_misc_open+0x10/0x10 [ 1856.006259][ T3677] chrdev_open+0x234/0x6a0 [ 1856.006274][ T3677] ? __pfx_apparmor_file_open+0x10/0x10 [ 1856.006289][ T3677] ? __pfx_chrdev_open+0x10/0x10 [ 1856.006306][ T3677] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1856.006325][ T3677] do_dentry_open+0x744/0x1c10 [ 1856.006341][ T3677] ? __pfx_chrdev_open+0x10/0x10 [ 1856.006361][ T3677] vfs_open+0x82/0x3f0 [ 1856.006382][ T3677] path_openat+0x1de4/0x2cb0 [ 1856.006404][ T3677] ? __pfx_path_openat+0x10/0x10 [ 1856.006420][ T3677] ? __lock_acquire+0xb8a/0x1c90 [ 1856.006439][ T3677] do_filp_open+0x20b/0x470 [ 1856.006453][ T3677] ? __pfx_do_filp_open+0x10/0x10 [ 1856.006482][ T3677] ? alloc_fd+0x471/0x7d0 [ 1856.006500][ T3677] do_sys_openat2+0x11b/0x1d0 [ 1856.006519][ T3677] ? __pfx_do_sys_openat2+0x10/0x10 [ 1856.006545][ T3677] __x64_sys_openat+0x174/0x210 [ 1856.006564][ T3677] ? __pfx___x64_sys_openat+0x10/0x10 [ 1856.006591][ T3677] do_syscall_64+0xcd/0x490 [ 1856.006606][ T3677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.006621][ T3677] RIP: 0033:0x7f6f98b8eb69 [ 1856.006633][ T3677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.006647][ T3677] RSP: 002b:00007f6f969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1856.006668][ T3677] RAX: ffffffffffffffda RBX: 00007f6f98db5fa0 RCX: 00007f6f98b8eb69 [ 1856.006678][ T3677] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1856.006688][ T3677] RBP: 00007f6f98c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1856.006697][ T3677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1856.006706][ T3677] R13: 0000000000000000 R14: 00007f6f98db5fa0 R15: 00007fff04c4b378 [ 1856.006725][ T3677] [ 1856.507959][ T3687] netlink: 302 bytes leftover after parsing attributes in process `syz.3.6843'. [ 1856.916215][ T3695] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input57 [ 1857.088871][ T3700] block nbd9: NBD_DISCONNECT [ 1857.932829][ T3712] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1857.987725][ T3714] netlink: 146 bytes leftover after parsing attributes in process `syz.3.6851'. [ 1858.185989][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1858.265577][ T3726] FAULT_INJECTION: forcing a failure. [ 1858.265577][ T3726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1858.295031][ T3726] CPU: 0 UID: 0 PID: 3726 Comm: syz.3.6855 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1858.295053][ T3726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1858.295062][ T3726] Call Trace: [ 1858.295070][ T3726] [ 1858.295076][ T3726] dump_stack_lvl+0x16c/0x1f0 [ 1858.295095][ T3726] should_fail_ex+0x512/0x640 [ 1858.295118][ T3726] _copy_from_user+0x2e/0xd0 [ 1858.295133][ T3726] input_event_from_user+0xb9/0x290 [ 1858.295148][ T3726] ? __pfx_input_event_from_user+0x10/0x10 [ 1858.295161][ T3726] ? __pfx___might_resched+0x10/0x10 [ 1858.295175][ T3726] ? input_inject_event+0x1a5/0x390 [ 1858.295198][ T3726] evdev_write+0x26b/0x440 [ 1858.295220][ T3726] ? __pfx_evdev_write+0x10/0x10 [ 1858.295241][ T3726] ? bpf_lsm_file_permission+0x9/0x10 [ 1858.295261][ T3726] ? security_file_permission+0x71/0x210 [ 1858.295276][ T3726] ? rw_verify_area+0xcf/0x680 [ 1858.295298][ T3726] ? __pfx_evdev_write+0x10/0x10 [ 1858.295316][ T3726] vfs_write+0x2a0/0x1150 [ 1858.295334][ T3726] ? __pfx_vfs_write+0x10/0x10 [ 1858.295347][ T3726] ? find_held_lock+0x2b/0x80 [ 1858.295360][ T3726] ? __fget_files+0x204/0x3c0 [ 1858.295376][ T3726] ? __fget_files+0x20e/0x3c0 [ 1858.295395][ T3726] ksys_write+0x1f8/0x250 [ 1858.295408][ T3726] ? __pfx_ksys_write+0x10/0x10 [ 1858.295436][ T3726] do_syscall_64+0xcd/0x490 [ 1858.295451][ T3726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.295466][ T3726] RIP: 0033:0x7f9beff8eb69 [ 1858.295478][ T3726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1858.295492][ T3726] RSP: 002b:00007f9bf0e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1858.295505][ T3726] RAX: ffffffffffffffda RBX: 00007f9bf01b5fa0 RCX: 00007f9beff8eb69 [ 1858.295515][ T3726] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1858.295524][ T3726] RBP: 00007f9bf0e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1858.295532][ T3726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1858.295540][ T3726] R13: 0000000000000000 R14: 00007f9bf01b5fa0 R15: 00007ffcabf3ee28 [ 1858.295558][ T3726] [ 1859.035356][ T3737] FAULT_INJECTION: forcing a failure. [ 1859.035356][ T3737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1859.055425][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6858'. [ 1859.086082][ T3737] CPU: 0 UID: 0 PID: 3737 Comm: syz.3.6859 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1859.086104][ T3737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1859.086113][ T3737] Call Trace: [ 1859.086118][ T3737] [ 1859.086124][ T3737] dump_stack_lvl+0x16c/0x1f0 [ 1859.086142][ T3737] should_fail_ex+0x512/0x640 [ 1859.086165][ T3737] should_fail_alloc_page+0xe7/0x130 [ 1859.086186][ T3737] prepare_alloc_pages+0x3c2/0x610 [ 1859.086207][ T3737] ? unwind_get_return_address+0x59/0xa0 [ 1859.086224][ T3737] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1859.086242][ T3737] ? __lock_acquire+0x622/0x1c90 [ 1859.086262][ T3737] ? _parse_integer_limit+0x17f/0x1d0 [ 1859.086282][ T3737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1859.086301][ T3737] ? find_held_lock+0x2b/0x80 [ 1859.086318][ T3737] ? aa_file_perm+0x495/0xf70 [ 1859.086334][ T3737] ? register_lock_class+0x41/0x4c0 [ 1859.086351][ T3737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1859.086383][ T3737] ? policy_nodemask+0xea/0x4e0 [ 1859.086402][ T3737] alloc_pages_mpol+0x1fb/0x550 [ 1859.086422][ T3737] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1859.086441][ T3737] ? get_pid_task+0xfc/0x250 [ 1859.086464][ T3737] alloc_pages_noprof+0x131/0x390 [ 1859.086482][ T3737] get_free_pages_noprof+0x10/0xb0 [ 1859.086502][ T3737] mem_rw+0x94/0x640 [ 1859.086524][ T3737] ? __pfx_mem_write+0x10/0x10 [ 1859.086542][ T3737] vfs_write+0x2a0/0x1150 [ 1859.086559][ T3737] ? __pfx___mutex_lock+0x10/0x10 [ 1859.086573][ T3737] ? __pfx_vfs_write+0x10/0x10 [ 1859.086592][ T3737] ? __fget_files+0x20e/0x3c0 [ 1859.086612][ T3737] ksys_write+0x12a/0x250 [ 1859.086625][ T3737] ? __pfx_ksys_write+0x10/0x10 [ 1859.086645][ T3737] do_syscall_64+0xcd/0x490 [ 1859.086660][ T3737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.086675][ T3737] RIP: 0033:0x7f9beff8eb69 [ 1859.086687][ T3737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1859.086700][ T3737] RSP: 002b:00007f9bf0e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1859.086713][ T3737] RAX: ffffffffffffffda RBX: 00007f9bf01b5fa0 RCX: 00007f9beff8eb69 [ 1859.086722][ T3737] RDX: 0000000000080000 RSI: 0000200000001680 RDI: 0000000000000004 [ 1859.086731][ T3737] RBP: 00007f9bf0e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1859.086739][ T3737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1859.086747][ T3737] R13: 0000000000000000 R14: 00007f9bf01b5fa0 R15: 00007ffcabf3ee28 [ 1859.086765][ T3737] [ 1860.101202][ T3757] FAULT_INJECTION: forcing a failure. [ 1860.101202][ T3757] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.168427][ T3757] CPU: 0 UID: 0 PID: 3757 Comm: syz.3.6863 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1860.168448][ T3757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1860.168457][ T3757] Call Trace: [ 1860.168462][ T3757] [ 1860.168467][ T3757] dump_stack_lvl+0x16c/0x1f0 [ 1860.168487][ T3757] should_fail_ex+0x512/0x640 [ 1860.168507][ T3757] ? __kmalloc_noprof+0xbf/0x510 [ 1860.168533][ T3757] ? proc_do_large_bitmap+0x578/0xcd0 [ 1860.168546][ T3757] should_failslab+0xc2/0x120 [ 1860.168564][ T3757] __kmalloc_noprof+0xd2/0x510 [ 1860.168584][ T3757] proc_do_large_bitmap+0x578/0xcd0 [ 1860.168598][ T3757] ? __pfx___might_resched+0x10/0x10 [ 1860.168616][ T3757] ? __pfx_proc_do_large_bitmap+0x10/0x10 [ 1860.168628][ T3757] ? __mutex_lock+0x1c2/0x1070 [ 1860.168646][ T3757] ? __pfx___mutex_lock+0x10/0x10 [ 1860.168664][ T3757] ? rcu_is_watching+0x12/0xc0 [ 1860.168678][ T3757] ? trace_kmalloc+0x2b/0xd0 [ 1860.168696][ T3757] ? __kvmalloc_node_noprof+0x298/0x620 [ 1860.168714][ T3757] proc_watchdog_cpumask+0x40/0xe0 [ 1860.168730][ T3757] proc_sys_call_handler+0x440/0x570 [ 1860.168750][ T3757] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1860.168774][ T3757] vfs_write+0x6c7/0x1150 [ 1860.168790][ T3757] ? __pfx_proc_sys_write+0x10/0x10 [ 1860.168808][ T3757] ? __pfx___mutex_lock+0x10/0x10 [ 1860.168821][ T3757] ? __pfx_vfs_write+0x10/0x10 [ 1860.168847][ T3757] ksys_write+0x12a/0x250 [ 1860.168861][ T3757] ? __pfx_ksys_write+0x10/0x10 [ 1860.168881][ T3757] do_syscall_64+0xcd/0x490 [ 1860.168896][ T3757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.168910][ T3757] RIP: 0033:0x7f9beff8eb69 [ 1860.168922][ T3757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1860.168935][ T3757] RSP: 002b:00007f9bf0e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1860.168951][ T3757] RAX: ffffffffffffffda RBX: 00007f9bf01b5fa0 RCX: 00007f9beff8eb69 [ 1860.168961][ T3757] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1860.168969][ T3757] RBP: 00007f9bf0e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.168977][ T3757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.168985][ T3757] R13: 0000000000000000 R14: 00007f9bf01b5fa0 R15: 00007ffcabf3ee28 [ 1860.169003][ T3757] [ 1860.903356][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6864'. [ 1860.935044][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6864'. [ 1861.008100][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6864'. [ 1861.038559][ T3769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6864'. [ 1862.931167][ T3801] netlink: 'syz.1.6873': attribute type 10 has an invalid length. [ 1862.968715][ T3801] netlink: 230 bytes leftover after parsing attributes in process `syz.1.6873'. [ 1863.047029][ T3801] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1863.444473][ T3806] FAULT_INJECTION: forcing a failure. [ 1863.444473][ T3806] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1863.491798][ T3806] CPU: 0 UID: 0 PID: 3806 Comm: syz.3.6874 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1863.491821][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1863.491831][ T3806] Call Trace: [ 1863.491837][ T3806] [ 1863.491843][ T3806] dump_stack_lvl+0x16c/0x1f0 [ 1863.491862][ T3806] should_fail_ex+0x512/0x640 [ 1863.491886][ T3806] get_futex_key+0x1d0/0x1540 [ 1863.491906][ T3806] ? __pfx_get_futex_key+0x10/0x10 [ 1863.491937][ T3806] futex_wake+0xea/0x530 [ 1863.491957][ T3806] ? rcu_is_watching+0x12/0xc0 [ 1863.491973][ T3806] ? __pfx_futex_wake+0x10/0x10 [ 1863.491994][ T3806] ? kmem_cache_free+0x2d1/0x4d0 [ 1863.492010][ T3806] ? fd_install+0x225/0x750 [ 1863.492023][ T3806] ? putname+0x154/0x1a0 [ 1863.492043][ T3806] do_futex+0x1e3/0x350 [ 1863.492061][ T3806] ? __pfx_do_futex+0x10/0x10 [ 1863.492082][ T3806] __x64_sys_futex+0x1e0/0x4c0 [ 1863.492100][ T3806] ? __x64_sys_openat+0x174/0x210 [ 1863.492119][ T3806] ? __pfx___x64_sys_futex+0x10/0x10 [ 1863.492143][ T3806] do_syscall_64+0xcd/0x490 [ 1863.492158][ T3806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.492172][ T3806] RIP: 0033:0x7f9beff8eb69 [ 1863.492184][ T3806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1863.492198][ T3806] RSP: 002b:00007f9bf0e9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1863.492212][ T3806] RAX: ffffffffffffffda RBX: 00007f9bf01b5fa8 RCX: 00007f9beff8eb69 [ 1863.492221][ T3806] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9bf01b5fac [ 1863.492233][ T3806] RBP: 00007f9bf01b5fa0 R08: 00007f9bf0e9c000 R09: 0000000000000000 [ 1863.492242][ T3806] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f9bf01b5fac [ 1863.492251][ T3806] R13: 0000000000000000 R14: 00007ffcabf3ed40 R15: 00007ffcabf3ee28 [ 1863.492268][ T3806] [ 1864.260204][ T3817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1864.281056][ T3817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1864.312481][ T3817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1864.323335][ T3817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1864.347418][ T3817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1866.260975][ T3531] Bluetooth: hci0: command 0x0406 tx timeout [ 1866.340302][ T3531] Bluetooth: hci1: command 0x0c1a tx timeout [ 1866.346360][T22205] Bluetooth: hci2: command 0x0c1a tx timeout [ 1866.352792][ T3531] Bluetooth: hci4: command 0x0c1a tx timeout [ 1866.358862][ T3531] Bluetooth: hci3: command 0x0406 tx timeout [ 1866.880964][T29916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1866.891566][T29916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1866.900546][T29916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1866.908542][T29916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1866.918935][T29916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1867.600360][ T3855] chnl_net:caif_netlink_parms(): no params data found [ 1867.921010][ T3880] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1867.927640][ T3880] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1867.966265][ T3855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.984074][ T3855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.018382][ T3855] bridge_slave_0: entered allmulticast mode [ 1868.048349][ T3855] bridge_slave_0: entered promiscuous mode [ 1868.071791][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.093654][ T3855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.113916][ T3855] bridge_slave_1: entered allmulticast mode [ 1868.136853][ T3855] bridge_slave_1: entered promiscuous mode [ 1868.262565][ T3855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.297256][ T3855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1868.432290][ T3855] team0: Port device team_slave_0 added [ 1868.456123][ T3855] team0: Port device team_slave_1 added [ 1868.542470][ T3855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1868.561476][ T3855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.689088][ T3855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1868.734466][ T3855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1868.772130][ T3855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.881436][ T3855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1868.968010][T29916] Bluetooth: hci5: command tx timeout [ 1869.167385][ T3855] hsr_slave_0: entered promiscuous mode [ 1869.196225][ T3855] hsr_slave_1: entered promiscuous mode [ 1869.230432][ T3855] debugfs: 'hsr0' already exists in 'hsr' [ 1869.253443][ T3855] Cannot create hsr debugfs directory [ 1870.125661][ T3855] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1870.146354][ T3855] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1870.212056][ T3855] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1870.238454][ T3855] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1870.413297][ T3855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1870.451352][ T3855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1870.465501][T31100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.472843][T31100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.524000][T31100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.531325][T31100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1870.811701][ T3855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.041170][T29916] Bluetooth: hci5: command tx timeout [ 1871.141152][ T3855] veth0_vlan: entered promiscuous mode [ 1871.167785][ T3855] veth1_vlan: entered promiscuous mode [ 1871.212753][ T3855] veth0_macvtap: entered promiscuous mode [ 1871.231243][ T3855] veth1_macvtap: entered promiscuous mode [ 1871.268389][ T3855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.299671][ T3855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.322416][T22525] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.347506][T22525] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.376998][T22525] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.385810][T22525] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.501385][T22525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.526502][T22525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.568352][T31101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.589794][T31101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.109118][T29916] Bluetooth: hci5: command tx timeout [ 1875.178929][T29916] Bluetooth: hci5: command tx timeout [ 1906.238493][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1906.247601][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1934.261840][ T31] INFO: task syz.2.6554:2561 blocked for more than 143 seconds. [ 1934.269708][ T31] Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 [ 1934.282949][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1934.294522][ T31] task:syz.2.6554 state:D stack:26440 pid:2561 tgid:2538 ppid:30547 task_flags:0x400140 flags:0x00004004 [ 1934.313780][ T31] Call Trace: [ 1934.317298][ T31] [ 1934.320365][ T31] __schedule+0x1190/0x5df0 [ 1934.333117][ T31] ? __lock_acquire+0x622/0x1c90 [ 1934.338276][ T31] ? __pfx___schedule+0x10/0x10 [ 1934.354176][ T31] ? find_held_lock+0x2b/0x80 [ 1934.358933][ T31] ? schedule+0x2d7/0x3a0 [ 1934.370836][ T31] schedule+0xe7/0x3a0 [ 1934.375249][ T31] schedule_preempt_disabled+0x13/0x30 [ 1934.383640][ T31] __mutex_lock+0x81a/0x1070 [ 1934.388274][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1934.404418][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1934.409597][ T31] ? net_generic+0xea/0x2a0 [ 1934.424742][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1934.434662][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1934.441753][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1934.448444][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1934.456830][ T31] ? rcu_is_watching+0x12/0xc0 [ 1934.466724][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1934.477084][ T31] ? security_capable+0x7e/0x260 [ 1934.486643][ T31] genl_rcv_msg+0x55c/0x800 [ 1934.496660][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1934.507488][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1934.518650][ T31] netlink_rcv_skb+0x155/0x420 [ 1934.525014][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1934.531281][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1934.536607][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1934.545929][ T31] genl_rcv+0x28/0x40 [ 1934.551303][ T31] netlink_unicast+0x5aa/0x870 [ 1934.556097][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1934.561845][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1934.566635][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1934.572511][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1934.577319][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1934.583490][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1934.588806][ T31] ? kfree+0x24f/0x4d0 [ 1934.593366][ T31] ? futex_unqueue+0x133/0x2c0 [ 1934.598195][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1934.603976][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1934.609719][ T31] ? __pfx___might_resched+0x10/0x10 [ 1934.615044][ T31] __sys_sendmmsg+0x200/0x420 [ 1934.620230][ T31] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1934.625632][ T31] ? __pfx_do_futex+0x10/0x10 [ 1934.631090][ T31] ? fput+0x70/0xf0 [ 1934.635096][ T31] ? xfd_validate_state+0x61/0x180 [ 1934.641435][ T31] ? __pfx_ksys_read+0x10/0x10 [ 1934.646231][ T31] __x64_sys_sendmmsg+0x9c/0x100 [ 1934.656483][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1934.662193][ T31] do_syscall_64+0xcd/0x490 [ 1934.666721][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.673031][ T31] RIP: 0033:0x7f79c398eb69 [ 1934.677569][ T31] RSP: 002b:00007f79c47ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1934.686611][ T31] RAX: ffffffffffffffda RBX: 00007f79c3bb6240 RCX: 00007f79c398eb69 [ 1934.694929][ T31] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1934.703765][ T31] RBP: 00007f79c3a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1934.712443][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1934.720860][ T31] R13: 0000000000000000 R14: 00007f79c3bb6240 R15: 00007ffc8eea9758 [ 1934.729199][ T31] [ 1934.732285][ T31] [ 1934.732285][ T31] Showing all locks held in the system: [ 1934.740989][ T31] 1 lock held by khungtaskd/31: [ 1934.745865][ T31] #0: ffffffff8e5c0ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1934.758318][ T31] 2 locks held by getty/31507: [ 1934.767209][ T31] #0: ffff8880354530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1934.777322][ T31] #1: ffffc900030202f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1934.787952][ T31] 2 locks held by syz.2.6554/2543: [ 1934.793680][ T31] #0: ffffffff903f1510 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1934.802218][ T31] #1: ffffffff8e9d5588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1934.812783][ T31] 2 locks held by syz.2.6554/2561: [ 1934.817896][ T31] #0: ffffffff903f1510 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1934.826608][ T31] #1: ffffffff8e9d5588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1934.837153][ T31] 2 locks held by syz.0.6807/3576: [ 1934.842643][ T31] #0: ffffffff903f1510 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1934.851338][ T31] #1: ffffffff8e9d5588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1934.863576][ T31] [ 1934.865913][ T31] ============================================= [ 1934.865913][ T31] [ 1934.877280][ T31] NMI backtrace for cpu 0 [ 1934.877294][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1934.877310][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1934.877319][ T31] Call Trace: [ 1934.877324][ T31] [ 1934.877329][ T31] dump_stack_lvl+0x116/0x1f0 [ 1934.877349][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1934.877368][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1934.877390][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1934.877410][ T31] watchdog+0xf0e/0x1260 [ 1934.877432][ T31] ? __pfx_watchdog+0x10/0x10 [ 1934.877451][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1934.877474][ T31] ? __kthread_parkme+0x19e/0x250 [ 1934.877491][ T31] ? __pfx_watchdog+0x10/0x10 [ 1934.877509][ T31] kthread+0x3c2/0x780 [ 1934.877528][ T31] ? __pfx_kthread+0x10/0x10 [ 1934.877547][ T31] ? rcu_is_watching+0x12/0xc0 [ 1934.877562][ T31] ? __pfx_kthread+0x10/0x10 [ 1934.877581][ T31] ret_from_fork+0x5d7/0x6f0 [ 1934.877600][ T31] ? __pfx_kthread+0x10/0x10 [ 1934.877619][ T31] ret_from_fork_asm+0x1a/0x30 [ 1934.877643][ T31] [ 1934.877651][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1934.999068][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1935.010638][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1935.021307][ T31] Call Trace: [ 1935.024593][ T31] [ 1935.027549][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1935.032231][ T31] vpanic+0x6a3/0x780 [ 1935.036315][ T31] ? __pfx_vpanic+0x10/0x10 [ 1935.040981][ T31] panic+0xca/0xd0 [ 1935.044716][ T31] ? __pfx_panic+0x10/0x10 [ 1935.049235][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1935.054989][ T31] ? irq_work_queue+0xce/0x100 [ 1935.059839][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1935.065827][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1935.071205][ T31] ? watchdog+0xd78/0x1260 [ 1935.075708][ T31] ? watchdog+0xd6b/0x1260 [ 1935.080115][ T31] watchdog+0xd89/0x1260 [ 1935.084350][ T31] ? __pfx_watchdog+0x10/0x10 [ 1935.089055][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1935.094264][ T31] ? __kthread_parkme+0x19e/0x250 [ 1935.099309][ T31] ? __pfx_watchdog+0x10/0x10 [ 1935.104021][ T31] kthread+0x3c2/0x780 [ 1935.108096][ T31] ? __pfx_kthread+0x10/0x10 [ 1935.112771][ T31] ? rcu_is_watching+0x12/0xc0 [ 1935.117610][ T31] ? __pfx_kthread+0x10/0x10 [ 1935.122198][ T31] ret_from_fork+0x5d7/0x6f0 [ 1935.126781][ T31] ? __pfx_kthread+0x10/0x10 [ 1935.131359][ T31] ret_from_fork_asm+0x1a/0x30 [ 1935.136135][ T31] [ 1935.139218][ T31] Kernel Offset: disabled [ 1935.143543][ T31] Rebooting in 86400 seconds..