last executing test programs: 9m45.283274428s ago: executing program 2 (id=352): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x800000000000000, 0x9}, 0x7}, 0x3, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 9m45.037410788s ago: executing program 2 (id=353): r0 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/x86/topo/cpus/1\x00', 0x201, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0x7fffffff, r0, 0x8000) r1 = socket(0x2c, 0x3, 0x0) r2 = prctl$auto(0x23, 0xd, 0x8, 0x0, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x48501, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2400, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r6 = socket(0xa, 0x1, 0x84) getsockopt$auto(r6, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28) ioctl$auto_FS_IOC_GETFLAGS(r3, 0x80086601, 0xfffffffffffffff7) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r3) r9 = setfsuid$auto(0xee01) setresuid$auto(0x0, r9, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg1\x00', 0x0}) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000ed5e00", @ANYRES64=r4, @ANYBLOB="000029bd7000fbdbdf250700000038002f800400300010002e800800a800", @ANYRES32=r9, @ANYBLOB="04000d8010006480040002800800e400", @ANYRES32=r5, @ANYBLOB="0800080015007f00000108000300000000000b3d10f8cf22", @ANYRES32=r10, @ANYRESHEX=r8], 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x1) ioctl$auto(r8, 0x5646, r8) preadv$auto(r0, &(0x7f0000000100)={&(0x7f0000000080)="f38fe2439eb2ce7d2365bc99ed1663d8e6fb80295046df30c5f63c1b229854b508acdb0ce0f73ef81ce731d060570c762e756e711ff485721d4a62c6633315d1c6627d039afca8a06fec", 0x80000000}, 0xffff, 0xe0, 0x7) pipe$auto(0x0) ioctl$auto_I2C_SMBUS(r7, 0x720, 0x0) r11 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x80001, 0x0) write$auto(r11, 0x0, 0x8) 9m44.396603977s ago: executing program 2 (id=355): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000ffdbdf25100000000c000180080001"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="20009eff", @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) 9m44.253584883s ago: executing program 2 (id=356): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/softnet_stat\x00', 0x2000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) bpf$auto(0x24, &(0x7f0000000040)=@batch={0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0xb6c0, 0x3}, 0x8) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x20000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x7fc, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}}) prctl$auto_SECCOMP_MODE_STRICT(0x40, 0x1, r2, 0x8, 0x4f) setpgid$auto(0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(r0, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0x100000000) 9m44.170175005s ago: executing program 2 (id=357): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000240)=0x6) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x40000a, 0xdf, 0x10, 0x2, 0x7ffd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r3, 0x4018bc13, &(0x7f00000005c0)={0xf4, 0x9d, 0x720, [0x0]}) socket(0x3, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x3a3c02, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9m43.576328277s ago: executing program 2 (id=361): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_clone(0x8000000, &(0x7f00000000c0)="4919e68e47865038716832e1ebf25aa019b3db4535c6506a6e2e1a30e33315ceee4848e062809138b646e92f7be1fa57d268daab478f851aff315f915c001d02443b11c2686a2a5af3463b48d244ffcb7a14a62c35739dc25e03c81d1eea8fee17949177a16ba5979be6460cfa9b9bfdc8e707e048e862846564c9c65228f3d2064e358f5dc2d9777f61859f0a364479bec3", 0x92, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)="81dcbe9cae0dae4c2eec8ed9a58c029473a88d410910b3203a070b5b3cc24893abea89633eb554acb0ef6254e045f820b5465828956fc90f5668b2fea74509314af81e98950cfe1f01311690591f548971fa64a7fb6ada9cc964d5046d811ac0d3b0a2bf0ea05b1dd2d5dc38757569c662848553bea76f10542723c91d8c5c253284c7174223e0d56bf1e26ee74991f1f4841874744f4428a245a079b763719aaacf798f15d23f761d2796702b50825f4414c8") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0903, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x15, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x5, 0x8000020000008001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x0, 0x0) 9m42.756987387s ago: executing program 32 (id=361): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_clone(0x8000000, &(0x7f00000000c0)="4919e68e47865038716832e1ebf25aa019b3db4535c6506a6e2e1a30e33315ceee4848e062809138b646e92f7be1fa57d268daab478f851aff315f915c001d02443b11c2686a2a5af3463b48d244ffcb7a14a62c35739dc25e03c81d1eea8fee17949177a16ba5979be6460cfa9b9bfdc8e707e048e862846564c9c65228f3d2064e358f5dc2d9777f61859f0a364479bec3", 0x92, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)="81dcbe9cae0dae4c2eec8ed9a58c029473a88d410910b3203a070b5b3cc24893abea89633eb554acb0ef6254e045f820b5465828956fc90f5668b2fea74509314af81e98950cfe1f01311690591f548971fa64a7fb6ada9cc964d5046d811ac0d3b0a2bf0ea05b1dd2d5dc38757569c662848553bea76f10542723c91d8c5c253284c7174223e0d56bf1e26ee74991f1f4841874744f4428a245a079b763719aaacf798f15d23f761d2796702b50825f4414c8") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0903, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x15, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x5, 0x8000020000008001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x0, 0x0) 8.994180502s ago: executing program 0 (id=2433): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) r1 = syz_clone(0x84003e91, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x72, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) ptrace$auto_PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) write$auto(0x3, 0x0, 0x5c8) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) getsockopt$auto_SO_PRIORITY(r3, 0xffffffff, 0xc, 0x0, &(0x7f0000000240)=0x1df4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 8.749145004s ago: executing program 0 (id=2434): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/32t\x00', 0x82000, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x0, 0x7d}, 0xfd, 0x0, 0x0, 0x8) close_range$auto(0x2, r1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) poll$auto(0x0, 0x5, 0x104) write$auto(0x3, 0x0, 0xfffffdef) 8.298148883s ago: executing program 0 (id=2436): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x305383, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x6, 0x0, 0x1, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x8, 0xfffffffffffffffb, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/platform/dummy_hcd.5/usb6/serial\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) shmdt$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x6, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x9, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop10\x00', 0x2, 0x0) mmap$auto(0x20000000000, 0x810004, 0xffd, 0xfffffffffffff2f7, r1, 0x8002) preadv2$auto(r3, &(0x7f0000000040)={0x0, 0x4}, 0x6, 0xfffffffffeffffff, 0x8, 0x2e) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fD\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x7, 0x69ce, &(0x7f00000000c0)='(\xd6\x9b\xbai\xd1\xf0\x0fC[F\xb4*\x9d*\x7f\x06\x03.c\xc3\xbcxg\x9a\xa7T,\xce\xb6\v\xcd\x9f\xb2e\x8f\xdap\xfa\x85n\xc4\xeeQ\n%r\xcafh\xbf\xba\xba0\x1f\xc3\xad\x86\xddi\xdb\x1c\xa7)t\x18\x198\x8d', 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) 6.915636213s ago: executing program 4 (id=2441): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) close_range$auto(r1, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x9b13) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0xffffffffffffffff, 0x40009, 0x400000000000048, 0x14, r0, 0x1) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x122, 0x400, 0x9}]}) 6.661409483s ago: executing program 1 (id=2442): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) r1 = syz_clone(0x84003e91, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x72, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) ptrace$auto_PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) write$auto(0x3, 0x0, 0x5c8) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) getsockopt$auto_SO_PRIORITY(r3, 0xffffffff, 0xc, 0x0, &(0x7f0000000240)=0x1df4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 6.279103782s ago: executing program 1 (id=2443): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) select$auto(0x6, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x5, 0xc, 0x6, 0x5f, 0x7, 0x7, 0x6d3f, 0x329, 0x4, 0x3]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x5, 0x3, 0xf, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0xe35, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) personality$auto(0xfffffffc) 6.266191735s ago: executing program 3 (id=2444): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) select$auto(0x6, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x5, 0xc, 0x6, 0x5f, 0x7, 0x7, 0x6d3f, 0x329, 0x4, 0x3]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x5, 0x3, 0xf, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0xe35, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) personality$auto(0xfffffffc) uname$auto(&(0x7f0000000240)={"fc685f71205fad1cb07f3e67d49ca513219e5cd8e010a4393fc468a7c27ff25b3d6a3f3540d153f788ae9f976eb8ad13af309148c74748a98a086e1030ae014236", "9c93244e3d563f0aa13f22a230414ac25ef6d8108920d762077fdf97a7967b55e0127ffae56dee5ccff7b8625876c376b4be546a02eea99f9069212f129d6fe2ad", "491ea26a688b8658035455079bd72a42d030bd6a4cdd4b02d50236cfc9a94c566b98f5d8d7689b4b9a4ffd1513fd5bafa188603808790096b8f4854035edacdf05", "eb9dce7ad83b583285f5a6217510229bfde2caf616acd1dc1df95c1b28e210c750f58f24693ab743348cd3e161b875f0a696fd94f0c154917eca09863e20b43e47", "c31b9f193ec75b094a1f400a2229101e86416b0ccdd2dab4e531ccb4ed9ec9d4560b1516df5c67c8244ad926ce5a51ef90b80248edaf1b654f695b6b4e6cbdd475", "e93dac6cf9221b10088ae454d2244a030654fa614f960905bfc97b029a1756f5700eadd486f0b060601a16fb0913d64929102abf4e30c8ebe2946d351cc99b7bcf"}) 5.673099224s ago: executing program 4 (id=2445): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nbd15\x00', 0x14fe03, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1d, 0x2, 0x7) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/drm/version\x00', 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x80045432, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0xfffffffffffffffc, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 5.061331829s ago: executing program 1 (id=2446): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) signalfd4$auto(r0, &(0x7f00000000c0)={0x4}, 0x2e80, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) socket(0x28, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_evdev_fops_evdev(0xffffffffffffffff, 0x0, 0x0) pread64$auto(r1, 0x0, 0x7fb, 0x400) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/prev\x00', 0xc000, 0x0) r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r2, &(0x7f0000000200)={0x8, 0x2, "0200000000000000"}, 0x100004) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) inotify_init1$auto(0x403) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 5.056715181s ago: executing program 3 (id=2447): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) signalfd4$auto(r0, &(0x7f00000000c0)={0x4}, 0x2e80, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) socket(0x28, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_evdev_fops_evdev(0xffffffffffffffff, 0x0, 0x0) pread64$auto(r1, 0x0, 0x7fb, 0x400) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/prev\x00', 0xc000, 0x0) r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r2, &(0x7f0000000200)={0x8, 0x2, "0200000000000000"}, 0x100004) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) inotify_init1$auto(0x403) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 4.321332367s ago: executing program 0 (id=2448): socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) socket(0xa, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi1\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x40482, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x301001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) 3.653185171s ago: executing program 1 (id=2449): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) select$auto(0x6, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x5, 0xc, 0x6, 0x5f, 0x7, 0x7, 0x6d3f, 0x329, 0x4, 0x3]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x5, 0x3, 0xf, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0xe35, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) personality$auto(0xfffffffc) uname$auto(&(0x7f0000000240)={"fc685f71205fad1cb07f3e67d49ca513219e5cd8e010a4393fc468a7c27ff25b3d6a3f3540d153f788ae9f976eb8ad13af309148c74748a98a086e1030ae014236", "9c93244e3d563f0aa13f22a230414ac25ef6d8108920d762077fdf97a7967b55e0127ffae56dee5ccff7b8625876c376b4be546a02eea99f9069212f129d6fe2ad", "491ea26a688b8658035455079bd72a42d030bd6a4cdd4b02d50236cfc9a94c566b98f5d8d7689b4b9a4ffd1513fd5bafa188603808790096b8f4854035edacdf05", "eb9dce7ad83b583285f5a6217510229bfde2caf616acd1dc1df95c1b28e210c750f58f24693ab743348cd3e161b875f0a696fd94f0c154917eca09863e20b43e47", "c31b9f193ec75b094a1f400a2229101e86416b0ccdd2dab4e531ccb4ed9ec9d4560b1516df5c67c8244ad926ce5a51ef90b80248edaf1b654f695b6b4e6cbdd475", "e93dac6cf9221b10088ae454d2244a030654fa614f960905bfc97b029a1756f5700eadd486f0b060601a16fb0913d64929102abf4e30c8ebe2946d351cc99b7bcf"}) 3.575969331s ago: executing program 4 (id=2450): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x60000000, 0x985}, 0x4) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) 3.529511187s ago: executing program 3 (id=2451): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="9ab50f4ecf847be05f351e6488b61b974daa95047bb74b315eed6dca52dbdae0242fcfb571a66c97616937dd93b97753a5af8eadde84d075a946b81cdc6c72bd40aad677442d78a9994343e93dbf7822b41297f10050e625de61812235419b61ca6e1cf512102bf572750799aa3964739a05ea21d618836df2cf96ebcc6d292f0545e1eb5e66f83ca5b02974f6e1cd2acedee5d3b4ffdafe41befaaf1e517f633ea0e3d67782d4189bdf2c6a65f72859659a9ab103b7813b1630bb6f2fb4863586abb50472130ea12c4b4aba1e6bc7bac83382aa3bba6fc507788cd0b19beec49ae5b89b5a91aa0048f0d058daad9b1f0a396c35595d66e0ca73bd85830896d61370d97956eed87e06c4199bb2afa4338793b007e67835158c000971ca880dc7ee66113cf14495b0f4339cef5ac32c775d7db142f0a63d7fe953177f2ef74fbe6791a0dbbeddb2060899962e8a45a9fa8f07c39e260873330d84b00875d18b79e1c773918de40b9d457e92aa8cb305e4d88c10e8e27e7452362269216617b6688155473a8ce9850ba6627d1dc13f6b12679cb1a2c292ec5f4179b5f3b3375ad86b07e9d0ce7b00aa9ed5ca064645dc63be31d980f23257e30f76da5b7c7b9288b1f9201526113dc5a1bb6868da8c4097911a19863753cab06714d88848a93cfb183d2fc04ef62292aca7030578e9deb86077d38502dffc31e5eba12846f302793061d70cd92f6e8dcea38a4d51e9d96e20e49b70fab676aa1e69ce4ad9350001eaa3dd7f9af5aedf664876fe6fdac17799b2046f62fe5052ed5f3408fe2f1c716e9e9a1f5ba039a39db432c6dab2ec3a720a0415baca171e6e611c14bb511444af9e559223a1e9d2692ce839be9168d82477cbef48d915698ab249e58667942914a841828f4e15d5bb6d00fddbdd6b5b170f0326be5d5e2f515e7e5a8933fcacbd3d14f5d03a3b85a28462f3b22c5a0fea03f8ea21b5a0de0b1ff8ff47e2a6a7d2da26ec901d27ca5816108494e1ee2d8e9c1af62daa7e2f9437a735d504bb46dd720578ed308f70609188ce6a15d30bd9fe10e4c028f46450a7572256f84d1d59444e4a08d6f79811115506206e4d6714cb12dac45a6a85be8913ba01d71e5f19d6e90d830958a3f56923edb5a0efc8346d4d193a0abbb658f219279a5d9f5c5d524e5f000cfe9943beb70eb5994e26aadbd3f47dc18003165b39b5cf718900ab4b845a0493481ee388fccfc460859bd85fa63c0b58b775d3729db3c1cc58573e36b3bd33dd890a9d26a2a3a8b2def1a7c6eb3129cdceff29d3ec2ff52b9bd2ecb7ebc103706366c9e88c089f332d8bb380dc3afe436e490a538cd8c43ea63bd65e9486ce2c52e55d9eca84b24cc77f33e2c3096a04705dedc238779c4a497082d6d6a7dfb3b5259112546874411622e28e15c70ad98fd1e916843b06c4ee3f13c3cfdf5fc0d393391bad9d68335c0b4e32c4407c60ba070eeb6dd282b2f7ff6134e039eb011f0b4026f2ed46426fb07a335c21614dbabfb7cef26b96f29b0805642e9b0f5d9c675d5cf89111791600d330d8503efd3ee384e5e7fe02b8137f8881e8ac23eb4f4fa6a1a88a9fa8dfa9e446bb7f117a3d6687b2d2d505c461703eb5df4032b9371ebe49710c8e8244f10943a516bb84307769d12ea0d2c5244d8f41e646d162706cb35b9ac6e2e1650eddf1cca58c1a8fd2c8e6fc485ab478dd2a0913ffdce715d775f38c4b692d16cab3a24edc5fe496dc98a68451eb4776db277465525780d92bcaeebf145408a6607f86fc94043ee30683106cde9c71edd460f783e602465f32554c09376860d3d9420badf095ff9fdfb3311af5800eda2ee5741e555ea42b121d1f7001b471df869b7b2b0de36a31b443e75bc8f101884c227fab4951f0bd1b503f9d5c816afe75061648eec404c1ed0eb57e4f8a5e966f45227be127369550f5daec076d5020274a9a5bac078e700dd9b95ba961be08f97fcd543f88691e32d0aa9f8776f58c96de8cce194aee6f9010d7710b692ddfa24457a3a623b91d743521dfe43a21ecce2863356308526687c7ed1169386be11059614cd138d439725ac4b5c0a9e04f503dd1461e57935de94a12a64d18c1845500665f81bae9ef33033a4a2d04ca381da212a68e1f267f03ffb71db53ff0da93176b47ff0568a5acee10190c12c9fda1543c318229708f6985e224ce750e9ca937d6927c1de7e5fd7e7db6cd42478e0d11a97e8959ce0118d556960d4cfde1625c72220ac1988fc3c69850d00a08246bda3846b623e0c1a731d47ba3216fa91139d5f5a8af9897fb08bc53e682e669e4a20962f841e13da43b62ad6eba654f815c2ad347ae279ab134cca6a1ebd06e822cdceeb58d4329d501c216357a12fd92fa0c27de77e756cdec09698284802eb2d21ca7e1a3619da2591c1fe29d4da0744f1110594f57a20c286f78b1111814c55715e05e4c753bc0242c9abb850b508e061c1179d88fb11b33bb1f34d05cb38e99a57d1a06ea61590431db1cf22817c85f885978f08f92335e997eff96a5feb784e410d41a953a6d92eb5973c08aa728ab673c0e693f47055c112d8efc8bd84f4c85b2f160b4c47da302cfa214b822b68276fbd50933facc06956aea16f35e61e859072749a49f13d33376ec41f7dc85625e1e48fc821317f43b0be304f448eb1de7c68ba84e774a2d22b1d3f55c144f59c15fc19c6df45ac3ac6461df9aebebfc8738b7b2e0dbdd99909498a3741d9101d82540a64b5e7a149e1f98a0788704a843faece338d465826b58f3e11aef73d44efdce1739b1927c45248d32be74ea0fabbe17e7c0657cc68419d96f19119493ab5569c86aa80b6bc4b410b011a12e1ad5365c674720c2f2a4c78962affef7e63c4ca0d4235f977ae416153edef6402b95ec61cb561759217002b66a78b65819d1b649a85308943148ac025410dbe4f9f18694a1c7289118035f454f81e1d9b6ab076ddb50e8c7b8ed2fd36d4dd6c5c928041afc8936fa83244aa9dbf08676cc30580d8fee518e24ed4089b63f9930c194e048b88cec98f9190a81f1a09e80c2af63e4738d4bf6c8e4eff41a846a25f8d74ab88f9d85c9b059bab15fc1fc485e1f92fa4f41a3a275e9609ea0c7dff7c9488f482067f38f4e8f424007498ac1da9eeba9857b34dc21d552dada4aff917d37463fb054ddedf52ab3def2813fd115e3f36c3f82719a486d2605aadd9c3e708261e2acf13fa9cd81fa2f23aea49b3a42b3ad43bd140ccb5c274c099062d1148d1def0171c5b8b49ac6b462de5246523cee3bb96d6340c8992114ce7f3d0d6ef92f02bfe3142dc1cc03310ea49fe1000b6a5e2353e25b4d373830a2030f7a7f33c60d583ca9ecf9930a22fb8415364d22a1f5aa8ebd95930123e04edaa80b5bdd0473a2c95be3797d6100145d674498fea24a87009149aa27a7060ccaf0ea0675a0c498370beff8978604ac3d3aec9cf3ad53ec8a698c5e1a44d0a4be22e5a16547db9eef5577d6ecd5a2967c4d4255e8908ccb347fe7cb5a7246345035a7a8a12993f8fdc661ffd3a84736ee9a5852dcf8e3aca4afa19a598c9379dd6d3c594e9aa54c1b5f0a2add05c979c76f9d1796c2072e0a6b5348ec199aa7abb34cde352f97e61823977723500867f803371f115c3528b30442fdd828f872d7c962f21053d6fb1fea2ac4e273902edf14d1b9c362f76c67ee7ff175ddb443afd3bab63767d2a64416d50015c09ae0a0faf5b6cbd39a31b7d324d110a84800f2c541cb39836c4cc2e7de0596b78e580533c1dc1126acc7aa5e8d2c2680b511ef4160351e924411b092a94c0a6df787eea3a6960ee27c1480ffc3dd286af35183020315a00ea9dc2384edb0a9c420c12a35ef16fa73d6caf07d796416768be12fad0fd636304918b7cc7901d5db64e6d3d1f7560b859c2044f38e46eec7c2cca01492309c948880326e60fb540bec547626cb5ceb48eae7f0bdd5f38b7ca69159bf39e5a6dee36f2199bae38a2d21e3316c8debcadfb4121af4446cc9fe2a536689816f66510d8906a1f96db1b71a7ab1a9de45e67d93586db93397eae71e6eca1e84531ba50ee9ab11bc01eba40063e74b0efd6ae4ab90bb50e2312861c92b43720e83d3bad50bf66f87be98c40b275339177dba753ddab002b07827ab860e9613a1bb0c13e690dbd71f5a30578e5ab1d1426ca07cb698f30cdfe1853a10fa976822da5c1b3ab8bd6df956e74a667867b94f26b696b9379ab818eed48a13fa6a3590cc1b6e159f25d3f7f7c5178ae84974460d7880b84aa90077a0a8dce82fd6bed76df7cf1dd42b33ec26cdf374ff068db186ddf08112eabfcd7b3f25afaa765bc831a3c7e7d93d6794c2c92d1223de9b15217632aa17ee09651556d0617219d9142f155dd8b1d87cf31715113519edbfdc5d6849feb239a73b53f94430f8e7ee022cdf8cc9aeb877e4109db461e6dd68351a1522d41854ff59a91b854cab163329442c01cbc3b352c8068131c8c22f7b9220e009e3890f396d5fe69137e2f0b52b27d190705cc4dac692ebb7d9662268cc641d03804d7f5bc99437e49a3e2e6b8879d37322faaec90df4a1201bb1f58d1eedadf74df18be13e0aff304b583da98589aa22e27b1f78beaea663e3182d2b12a2f3c835c0feb3001d787b297a2aaaaa649fbd9269dc534c810ea064d6d27d54e54f73e39ed4ef101491c144f7010aa2519587cda497d770763f60e6d9df6672c3a47991d757b7ccaa38550f42d0ed724b52c04a61e3670a3af1bab73543112f20b4b17e1ca567c2e2dfd8ded52e80ef79f2f0ca312099a2905ee699a61eb34aee75c974ba6c8e6b6f8d4346baa5164edbf9f892f5b20fe2e4d63d697e17a41ff323e114e5b8f8bf9204ac842e4cb0eaf872ed92e92a09a61e17010be88bcffa11a464e9dd15f772b17a0a26a384a6bbe80a2bed2c5f3c5db439384781893c68f35e7f04dd4b90fb35566b4b5e230410f2a88302436113a0d7ce0a589e9155273ffee7fc927dd0f1e5592c727a2bcfe61eb5d95811981d0d307406d5da4c6c164be156558675bc34d2bb1e9bfb3ff557b101892ba10bce45f85ff739acb1513058e74ebf675dafc64501525b510f70338d31ba19b7ab4eae92c2c33d59b616fbeacb0b0af4615a08b316d9ea8ef31b7e27f0d286aa4f918d8fd553d8e463df06cd6a7303b5f0ee14e2b60e910f02e7e4eeb55ca3b1210050359d9f662556ba38c50ea31080fe172438b438af83572cd33451fb92ec62ab10d4a439c571ee290d524270a0cc90665c9f6347f9f3d78efcda9e6e13a255f9080f66dbf0030cb9c1d10ade44412bb9e5783a86e35eb5b28095f52942b83013967d661e2e7bd9b525f1fb8b0d127dce73876805ed4954bd7cf9cf6f43c06c4463dc9d339394e2f83304223627d76d61b245140f440446d4e6eabe0450034f82b1d6f2d6d090895de305a84e7bb7824ad84429aa50775536dbda7bcacadfe01b5d6ca8e46b897c21122655677a176bab6b260deb3d6803607b9aa85d74e748aedc17537bb0bd0b4800cd9ad3705b9960a61f501a4bdaee05309c5537189a8d616554429de7717674aa88674733fb68eeab898aade23712c8058a855904f4e7085115f36b6df394864d88e6cf183753248eefad820ff3f1dda2ff430da2c16633f7bb86fced18a6217c71a412287f31c1699553ad9695195a95baca9cd3f6510d9dbcb5a404fb02d4a6a476090ffab0efa6") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x60000000, 0x985}, 0x4) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) 2.993499954s ago: executing program 0 (id=2452): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) r1 = syz_clone(0x84003e91, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x72, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) ptrace$auto_PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) write$auto(0x3, 0x0, 0x5c8) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) getsockopt$auto_SO_PRIORITY(r3, 0xffffffff, 0xc, 0x0, &(0x7f0000000240)=0x1df4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2.866158603s ago: executing program 0 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) close_range$auto(r1, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x9b13) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0xffffffffffffffff, 0x40009, 0x400000000000048, 0x14, r0, 0x1) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x122, 0x400, 0x9}]}) 2.574253002s ago: executing program 4 (id=2454): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nbd15\x00', 0x14fe03, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1d, 0x2, 0x7) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/drm/version\x00', 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x80045432, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0xfffffffffffffffc, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 2.570745202s ago: executing program 1 (id=2455): sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000089640046c21f1bec2918da64db11342247cac9ef3e2efcfbe40d534a75c7ca7f248ff36705721c2e5b63ff4befa3983185aa4c5af0932764c0a7c2", @ANYRES16=0x0, @ANYBLOB="080037bd7000ffdbdf251000000005000b00080000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000000)={0x14, 0x0, 0x301, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb33a218", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 2.540666847s ago: executing program 3 (id=2456): mlockall$auto(0x7) mmap$auto(0x20000000000000, 0x400007, 0xde, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) fcntl$auto_F_SETLEASE(r2, 0x400, 0x2) listxattrat$auto(r1, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x6) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x40080, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x165242, 0x102) fallocate$auto(r3, 0x0, 0x400000a, 0x4b) lseek$auto(r3, 0x3, 0x3) read$auto(r0, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/filesystems\x00', 0x1a1442, 0x0) 2.387938029s ago: executing program 1 (id=2457): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) signalfd4$auto(r0, &(0x7f00000000c0)={0x4}, 0x2e80, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) socket(0x28, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_evdev_fops_evdev(0xffffffffffffffff, 0x0, 0x0) pread64$auto(r1, 0x0, 0x7fb, 0x400) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/prev\x00', 0xc000, 0x0) r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r2, &(0x7f0000000200)={0x8, 0x2, "0200000000000000"}, 0x100004) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) inotify_init1$auto(0x403) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.129410195s ago: executing program 3 (id=2458): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nbd15\x00', 0x14fe03, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1d, 0x2, 0x7) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/drm/version\x00', 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x80045432, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0xfffffffffffffffc, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 340.746978ms ago: executing program 4 (id=2460): rt_sigprocmask$auto_SIG_UNBLOCK(0x1, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x5}, 0x8) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya8\x00', 0x402081, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000080)="c80d359b4a52eacd4722", 0xa) 7.223151ms ago: executing program 4 (id=2461): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) r1 = syz_clone(0x84003e91, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x72, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) ptrace$auto_PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x7) socket(0xa, 0x5, 0x0) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) write$auto(0x3, 0x0, 0x5c8) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) getsockopt$auto_SO_PRIORITY(r3, 0xffffffff, 0xc, 0x0, &(0x7f0000000240)=0x1df4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 0s ago: executing program 3 (id=2462): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x60000000, 0x985}, 0x4) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) kernel console output (not intermixed with test programs): 4/0x2cb0 [ 342.671771][ T9612] ? __pfx_path_openat+0x10/0x10 [ 342.671807][ T9612] do_filp_open+0x20b/0x470 [ 342.671835][ T9612] ? __pfx_do_filp_open+0x10/0x10 [ 342.671885][ T9612] ? alloc_fd+0x471/0x7d0 [ 342.671919][ T9612] do_sys_openat2+0x11b/0x1d0 [ 342.671955][ T9612] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.671994][ T9612] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 342.672034][ T9612] __x64_sys_openat+0x174/0x210 [ 342.672071][ T9612] ? __pfx___x64_sys_openat+0x10/0x10 [ 342.672122][ T9612] do_syscall_64+0xcd/0x490 [ 342.672155][ T9612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.672179][ T9612] RIP: 0033:0x7fbb6678ebe9 [ 342.672197][ T9612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.672220][ T9612] RSP: 002b:00007fbb675a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 342.672251][ T9612] RAX: ffffffffffffffda RBX: 00007fbb669b5fa0 RCX: 00007fbb6678ebe9 [ 342.672267][ T9612] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 342.672282][ T9612] RBP: 00007fbb66811e19 R08: 0000000000000000 R09: 0000000000000000 [ 342.672296][ T9612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.672310][ T9612] R13: 00007fbb669b6038 R14: 00007fbb669b5fa0 R15: 00007ffccc9dfb68 [ 342.672341][ T9612] [ 344.032122][ T9626] vivid-007: ================= START STATUS ================= [ 344.135133][ T9626] vivid-007: Enable Output Cropping: true [ 344.173781][ T9626] vivid-007: Enable Output Composing: true [ 344.232660][ T9626] vivid-007: Enable Output Scaler: true [ 344.249464][ T9626] vivid-007: Tx RGB Quantization Range: Automatic [ 344.287250][ T9626] vivid-007: Transmit Mode: HDMI [ 344.293245][ T9626] vivid-007: Hotplug Present: 0x00000000 [ 344.317053][ T9626] vivid-007: RxSense Present: 0x00000000 [ 344.325792][ T9626] vivid-007: EDID Present: 0x00000000 [ 344.336711][ T9626] vivid-007: ================== END STATUS ================== [ 344.442085][ T9630] usbip-vudc usbip-vudc.0: gadget not bound [ 344.682984][ T9643] netlink: 346 bytes leftover after parsing attributes in process `syz.3.741'. [ 347.065084][ T9696] FAULT_INJECTION: forcing a failure. [ 347.065084][ T9696] name failslab, interval 1, probability 0, space 0, times 0 [ 347.078229][ T9696] CPU: 1 UID: 0 PID: 9696 Comm: syz.0.748 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 347.078275][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.078295][ T9696] Call Trace: [ 347.078304][ T9696] [ 347.078312][ T9696] dump_stack_lvl+0x16c/0x1f0 [ 347.078348][ T9696] should_fail_ex+0x512/0x640 [ 347.078382][ T9696] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 347.078415][ T9696] should_failslab+0xc2/0x120 [ 347.078447][ T9696] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 347.078475][ T9696] ? lockdep_init_map_type+0x5c/0x280 [ 347.078507][ T9696] ? seq_open+0x55/0x170 [ 347.078544][ T9696] seq_open+0x55/0x170 [ 347.078578][ T9696] kernfs_fop_open+0x59f/0xda0 [ 347.078609][ T9696] do_dentry_open+0x97f/0x1530 [ 347.078646][ T9696] ? __pfx_kernfs_fop_open+0x10/0x10 [ 347.078675][ T9696] vfs_open+0x82/0x3f0 [ 347.078714][ T9696] path_openat+0x1de4/0x2cb0 [ 347.078752][ T9696] ? __pfx_path_openat+0x10/0x10 [ 347.078788][ T9696] do_filp_open+0x20b/0x470 [ 347.078817][ T9696] ? __pfx_do_filp_open+0x10/0x10 [ 347.078867][ T9696] ? alloc_fd+0x471/0x7d0 [ 347.078902][ T9696] do_sys_openat2+0x11b/0x1d0 [ 347.078938][ T9696] ? __pfx_do_sys_openat2+0x10/0x10 [ 347.078976][ T9696] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 347.079017][ T9696] __x64_sys_openat+0x174/0x210 [ 347.079054][ T9696] ? __pfx___x64_sys_openat+0x10/0x10 [ 347.079103][ T9696] do_syscall_64+0xcd/0x490 [ 347.079135][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.079160][ T9696] RIP: 0033:0x7f841018ebe9 [ 347.079178][ T9696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.079201][ T9696] RSP: 002b:00007f8410fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.079223][ T9696] RAX: ffffffffffffffda RBX: 00007f84103b5fa0 RCX: 00007f841018ebe9 [ 347.079238][ T9696] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 347.079253][ T9696] RBP: 00007f8410211e19 R08: 0000000000000000 R09: 0000000000000000 [ 347.079267][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.079280][ T9696] R13: 00007f84103b6038 R14: 00007f84103b5fa0 R15: 00007ffc4cb49fb8 [ 347.079310][ T9696] [ 347.964224][ T9706] vivid-007: ================= START STATUS ================= [ 348.004597][ T9706] vivid-007: Enable Output Cropping: true [ 348.023333][ T9706] vivid-007: Enable Output Composing: true [ 348.057157][ T9706] vivid-007: Enable Output Scaler: true [ 348.080963][ T9706] vivid-007: Tx RGB Quantization Range: Automatic [ 348.106281][ T9706] vivid-007: Transmit Mode: HDMI [ 348.126967][ T9706] vivid-007: Hotplug Present: 0x00000000 [ 348.132810][ T9706] vivid-007: RxSense Present: 0x00000000 [ 348.145623][ T9706] vivid-007: EDID Present: 0x00000000 [ 348.152314][ T9706] vivid-007: ================== END STATUS ================== [ 348.320476][ T9719] netlink: 346 bytes leftover after parsing attributes in process `syz.0.754'. [ 349.197974][ T9733] netlink: 346 bytes leftover after parsing attributes in process `syz.1.764'. [ 351.308721][ T9775] FAULT_INJECTION: forcing a failure. [ 351.308721][ T9775] name failslab, interval 1, probability 0, space 0, times 0 [ 351.377450][ T9775] CPU: 0 UID: 0 PID: 9775 Comm: syz.4.762 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 351.377496][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.377517][ T9775] Call Trace: [ 351.377528][ T9775] [ 351.377540][ T9775] dump_stack_lvl+0x16c/0x1f0 [ 351.377589][ T9775] should_fail_ex+0x512/0x640 [ 351.377635][ T9775] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 351.377674][ T9775] should_failslab+0xc2/0x120 [ 351.377720][ T9775] __kmalloc_cache_noprof+0x6a/0x3e0 [ 351.377756][ T9775] ? kernfs_fop_open+0x244/0xda0 [ 351.377794][ T9775] kernfs_fop_open+0x244/0xda0 [ 351.377837][ T9775] do_dentry_open+0x97f/0x1530 [ 351.377878][ T9775] ? __pfx_kernfs_fop_open+0x10/0x10 [ 351.377918][ T9775] vfs_open+0x82/0x3f0 [ 351.377971][ T9775] path_openat+0x1de4/0x2cb0 [ 351.378023][ T9775] ? __pfx_path_openat+0x10/0x10 [ 351.378075][ T9775] do_filp_open+0x20b/0x470 [ 351.378114][ T9775] ? __pfx_do_filp_open+0x10/0x10 [ 351.378194][ T9775] ? alloc_fd+0x471/0x7d0 [ 351.378241][ T9775] do_sys_openat2+0x11b/0x1d0 [ 351.378291][ T9775] ? __pfx_do_sys_openat2+0x10/0x10 [ 351.378346][ T9775] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 351.378402][ T9775] __x64_sys_openat+0x174/0x210 [ 351.378454][ T9775] ? __pfx___x64_sys_openat+0x10/0x10 [ 351.378523][ T9775] do_syscall_64+0xcd/0x490 [ 351.378568][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.378601][ T9775] RIP: 0033:0x7f0a92b8ebe9 [ 351.378627][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.378659][ T9775] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 351.378690][ T9775] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 351.378711][ T9775] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 351.378733][ T9775] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.378753][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.378773][ T9775] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 351.378817][ T9775] [ 351.592222][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.664538][ T9807] netlink: 346 bytes leftover after parsing attributes in process `syz.0.769'. [ 355.151630][ T9833] FAULT_INJECTION: forcing a failure. [ 355.151630][ T9833] name failslab, interval 1, probability 0, space 0, times 0 [ 355.198721][ T9833] CPU: 1 UID: 0 PID: 9833 Comm: syz.4.777 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 355.198773][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.198795][ T9833] Call Trace: [ 355.198807][ T9833] [ 355.198820][ T9833] dump_stack_lvl+0x16c/0x1f0 [ 355.198871][ T9833] should_fail_ex+0x512/0x640 [ 355.198917][ T9833] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 355.198964][ T9833] should_failslab+0xc2/0x120 [ 355.199018][ T9833] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 355.199062][ T9833] ? lockdep_init_map_type+0x5c/0x280 [ 355.199108][ T9833] ? seq_open+0x55/0x170 [ 355.199165][ T9833] seq_open+0x55/0x170 [ 355.199215][ T9833] kernfs_fop_open+0x59f/0xda0 [ 355.199260][ T9833] do_dentry_open+0x97f/0x1530 [ 355.199303][ T9833] ? __pfx_kernfs_fop_open+0x10/0x10 [ 355.199346][ T9833] vfs_open+0x82/0x3f0 [ 355.199404][ T9833] path_openat+0x1de4/0x2cb0 [ 355.199458][ T9833] ? __pfx_path_openat+0x10/0x10 [ 355.199512][ T9833] do_filp_open+0x20b/0x470 [ 355.199555][ T9833] ? __pfx_do_filp_open+0x10/0x10 [ 355.199627][ T9833] ? alloc_fd+0x471/0x7d0 [ 355.199676][ T9833] do_sys_openat2+0x11b/0x1d0 [ 355.199761][ T9833] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.199817][ T9833] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 355.199877][ T9833] __x64_sys_openat+0x174/0x210 [ 355.199930][ T9833] ? __pfx___x64_sys_openat+0x10/0x10 [ 355.200002][ T9833] do_syscall_64+0xcd/0x490 [ 355.200057][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.200095][ T9833] RIP: 0033:0x7f0a92b8ebe9 [ 355.200121][ T9833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.200155][ T9833] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 355.200199][ T9833] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 355.200230][ T9833] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 355.200258][ T9833] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 355.200281][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.200301][ T9833] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 355.200345][ T9833] [ 357.533384][ T9883] vivid-007: ================= START STATUS ================= [ 357.548848][ T9883] vivid-007: Enable Output Cropping: true [ 357.575542][ T9883] vivid-007: Enable Output Composing: true [ 357.585094][ T9883] vivid-007: Enable Output Scaler: true [ 357.635464][ T9883] vivid-007: Tx RGB Quantization Range: Automatic [ 357.652385][ T9883] vivid-007: Transmit Mode: HDMI [ 357.661532][ T9883] vivid-007: Hotplug Present: 0x00000000 [ 357.684596][ T9883] vivid-007: RxSense Present: 0x00000000 [ 357.691147][ T9883] vivid-007: EDID Present: 0x00000000 [ 357.696729][ T9883] vivid-007: ================== END STATUS ================== [ 362.019618][ T9961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 362.141021][ T9972] FAULT_INJECTION: forcing a failure. [ 362.141021][ T9972] name failslab, interval 1, probability 0, space 0, times 0 [ 362.561963][ T9972] CPU: 1 UID: 0 PID: 9972 Comm: syz.3.807 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 362.562010][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.562031][ T9972] Call Trace: [ 362.562042][ T9972] [ 362.562054][ T9972] dump_stack_lvl+0x16c/0x1f0 [ 362.562103][ T9972] should_fail_ex+0x512/0x640 [ 362.562149][ T9972] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 362.562194][ T9972] should_failslab+0xc2/0x120 [ 362.562239][ T9972] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 362.562306][ T9972] ? lockdep_init_map_type+0x5c/0x280 [ 362.562352][ T9972] ? seq_open+0x55/0x170 [ 362.562404][ T9972] seq_open+0x55/0x170 [ 362.562453][ T9972] kernfs_fop_open+0x59f/0xda0 [ 362.562496][ T9972] do_dentry_open+0x97f/0x1530 [ 362.562538][ T9972] ? __pfx_kernfs_fop_open+0x10/0x10 [ 362.562577][ T9972] vfs_open+0x82/0x3f0 [ 362.562632][ T9972] path_openat+0x1de4/0x2cb0 [ 362.562686][ T9972] ? __pfx_path_openat+0x10/0x10 [ 362.562736][ T9972] do_filp_open+0x20b/0x470 [ 362.562780][ T9972] ? __pfx_do_filp_open+0x10/0x10 [ 362.562851][ T9972] ? alloc_fd+0x471/0x7d0 [ 362.562898][ T9972] do_sys_openat2+0x11b/0x1d0 [ 362.562947][ T9972] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.563000][ T9972] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 362.563104][ T9972] __x64_sys_openat+0x174/0x210 [ 362.563156][ T9972] ? __pfx___x64_sys_openat+0x10/0x10 [ 362.563226][ T9972] do_syscall_64+0xcd/0x490 [ 362.563277][ T9972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.563312][ T9972] RIP: 0033:0x7f361a38ebe9 [ 362.563340][ T9972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.563373][ T9972] RSP: 002b:00007f361b193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.563406][ T9972] RAX: ffffffffffffffda RBX: 00007f361a5b5fa0 RCX: 00007f361a38ebe9 [ 362.563428][ T9972] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 362.563450][ T9972] RBP: 00007f361a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 362.563474][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.563494][ T9972] R13: 00007f361a5b6038 R14: 00007f361a5b5fa0 R15: 00007ffd2ce03408 [ 362.563538][ T9972] [ 363.199644][ T9966] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 364.027588][ T9993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 364.399500][ T9999] vivid-007: ================= START STATUS ================= [ 364.413300][ T9999] vivid-007: Enable Output Cropping: true [ 364.428774][ T9999] vivid-007: Enable Output Composing: true [ 364.451408][ T9999] vivid-007: Enable Output Scaler: true [ 364.482723][ T9999] vivid-007: Tx RGB Quantization Range: Automatic [ 364.497791][ T9999] vivid-007: Transmit Mode: HDMI [ 364.518795][ T9999] vivid-007: Hotplug Present: 0x00000000 [ 364.534901][ T9999] vivid-007: RxSense Present: 0x00000000 [ 364.553895][ T9999] vivid-007: EDID Present: 0x00000000 [ 364.570654][ T9999] vivid-007: ================== END STATUS ================== [ 365.297802][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 365.944992][T10021] FAULT_INJECTION: forcing a failure. [ 365.944992][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 365.970021][T10021] CPU: 1 UID: 0 PID: 10021 Comm: syz.3.820 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 365.970070][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.970089][T10021] Call Trace: [ 365.970100][T10021] [ 365.970113][T10021] dump_stack_lvl+0x16c/0x1f0 [ 365.970159][T10021] should_fail_ex+0x512/0x640 [ 365.970204][T10021] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 365.970246][T10021] should_failslab+0xc2/0x120 [ 365.970289][T10021] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 365.970329][T10021] ? mas_alloc_nodes+0x18b/0x8b0 [ 365.970370][T10021] mas_alloc_nodes+0x18b/0x8b0 [ 365.970413][T10021] mas_node_count_gfp+0x105/0x130 [ 365.970452][T10021] mas_preallocate+0x7e0/0xde0 [ 365.970508][T10021] ? __pfx_mas_preallocate+0x10/0x10 [ 365.970567][T10021] ? anon_vma_name+0x81/0x2f0 [ 365.970623][T10021] __split_vma+0x34a/0x1070 [ 365.970667][T10021] ? __pfx___split_vma+0x10/0x10 [ 365.970700][T10021] ? kernel_mbind+0x1e3/0x1f0 [ 365.970760][T10021] ? do_syscall_64+0xcd/0x490 [ 365.970800][T10021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.970846][T10021] ? is_mergeable_anon_vma+0x11e/0x2f0 [ 365.970890][T10021] vma_modify+0xee1/0x2030 [ 365.970933][T10021] ? __lock_acquire+0xb97/0x1ce0 [ 365.970979][T10021] ? __pfx_vma_modify+0x10/0x10 [ 365.971031][T10021] vma_modify_policy+0x219/0x2d0 [ 365.971072][T10021] ? __pfx_vma_modify_policy+0x10/0x10 [ 365.971125][T10021] ? mpol_set_shared_policy+0x392/0x8c0 [ 365.971190][T10021] mbind_range+0x175/0x570 [ 365.971246][T10021] do_mbind+0x848/0xf30 [ 365.971308][T10021] ? __pfx_do_mbind+0x10/0x10 [ 365.971384][T10021] ? __pfx_get_nodes+0x10/0x10 [ 365.971436][T10021] kernel_mbind+0x1e3/0x1f0 [ 365.971490][T10021] ? __pfx_kernel_mbind+0x10/0x10 [ 365.971554][T10021] do_syscall_64+0xcd/0x490 [ 365.971601][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.971632][T10021] RIP: 0033:0x7f361a38ebe9 [ 365.971657][T10021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.971689][T10021] RSP: 002b:00007f361b172038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 365.971729][T10021] RAX: ffffffffffffffda RBX: 00007f361a5b6090 RCX: 00007f361a38ebe9 [ 365.971751][T10021] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 365.971771][T10021] RBP: 00007f361a411e19 R08: 0000000000000006 R09: 0000000000000002 [ 365.971792][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.971812][T10021] R13: 00007f361a5b6128 R14: 00007f361a5b6090 R15: 00007ffd2ce03408 [ 365.971857][T10021] [ 368.478901][T10048] vivid-007: ================= START STATUS ================= [ 368.545173][T10048] vivid-007: Enable Output Cropping: true [ 368.609695][T10048] vivid-007: Enable Output Composing: true [ 368.627712][T10048] vivid-007: Enable Output Scaler: true [ 368.633876][T10048] vivid-007: Tx RGB Quantization Range: Automatic [ 368.634506][T10054] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 368.642956][T10048] vivid-007: Transmit Mode: HDMI [ 368.776738][T10048] vivid-007: Hotplug Present: 0x00000000 [ 368.811511][T10048] vivid-007: RxSense Present: 0x00000000 [ 368.831436][T10048] vivid-007: EDID Present: 0x00000000 [ 368.838937][T10048] vivid-007: ================== END STATUS ================== [ 369.086692][T10067] FAULT_INJECTION: forcing a failure. [ 369.086692][T10067] name failslab, interval 1, probability 0, space 0, times 0 [ 369.100964][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.4.831 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 369.101011][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.101031][T10067] Call Trace: [ 369.101042][T10067] [ 369.101056][T10067] dump_stack_lvl+0x16c/0x1f0 [ 369.101105][T10067] should_fail_ex+0x512/0x640 [ 369.101150][T10067] ? fs_reclaim_acquire+0xae/0x150 [ 369.101203][T10067] ? tomoyo_encode2+0x100/0x3e0 [ 369.101247][T10067] should_failslab+0xc2/0x120 [ 369.101292][T10067] __kmalloc_noprof+0xd2/0x510 [ 369.101330][T10067] ? d_absolute_path+0x136/0x1a0 [ 369.101383][T10067] tomoyo_encode2+0x100/0x3e0 [ 369.101435][T10067] tomoyo_encode+0x29/0x50 [ 369.101478][T10067] tomoyo_realpath_from_path+0x18f/0x6e0 [ 369.101539][T10067] tomoyo_check_open_permission+0x2ab/0x3c0 [ 369.101578][T10067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.101615][T10067] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 369.101727][T10067] ? do_raw_spin_lock+0x12c/0x2b0 [ 369.101791][T10067] tomoyo_file_open+0x6b/0x90 [ 369.101823][T10067] security_file_open+0x84/0x1e0 [ 369.101868][T10067] do_dentry_open+0x596/0x1530 [ 369.101921][T10067] vfs_open+0x82/0x3f0 [ 369.101973][T10067] path_openat+0x1de4/0x2cb0 [ 369.102027][T10067] ? __pfx_path_openat+0x10/0x10 [ 369.102078][T10067] do_filp_open+0x20b/0x470 [ 369.102118][T10067] ? __pfx_do_filp_open+0x10/0x10 [ 369.102188][T10067] ? alloc_fd+0x471/0x7d0 [ 369.102235][T10067] do_sys_openat2+0x11b/0x1d0 [ 369.102286][T10067] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.102338][T10067] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 369.102446][T10067] __x64_sys_openat+0x174/0x210 [ 369.102500][T10067] ? __pfx___x64_sys_openat+0x10/0x10 [ 369.102570][T10067] do_syscall_64+0xcd/0x490 [ 369.102616][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.102649][T10067] RIP: 0033:0x7f0a92b8ebe9 [ 369.102676][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.102709][T10067] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 369.102747][T10067] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 369.102769][T10067] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 369.102791][T10067] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 369.102812][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.102832][T10067] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 369.102876][T10067] [ 369.103404][T10067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.416580][T10087] FAULT_INJECTION: forcing a failure. [ 370.416580][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 370.471770][T10087] CPU: 0 UID: 0 PID: 10087 Comm: syz.0.835 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 370.471826][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.471848][T10087] Call Trace: [ 370.471860][T10087] [ 370.471874][T10087] dump_stack_lvl+0x16c/0x1f0 [ 370.471925][T10087] should_fail_ex+0x512/0x640 [ 370.471975][T10087] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 370.472020][T10087] should_failslab+0xc2/0x120 [ 370.472065][T10087] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 370.472105][T10087] ? mas_alloc_nodes+0x18b/0x8b0 [ 370.472146][T10087] mas_alloc_nodes+0x18b/0x8b0 [ 370.472189][T10087] mas_node_count_gfp+0x105/0x130 [ 370.472229][T10087] mas_preallocate+0x7e0/0xde0 [ 370.472286][T10087] ? __pfx_mas_preallocate+0x10/0x10 [ 370.472345][T10087] ? anon_vma_name+0x81/0x2f0 [ 370.472411][T10087] __split_vma+0x34a/0x1070 [ 370.472457][T10087] ? __pfx___split_vma+0x10/0x10 [ 370.472492][T10087] ? kernel_mbind+0x1e3/0x1f0 [ 370.472544][T10087] ? do_syscall_64+0xcd/0x490 [ 370.472587][T10087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.472632][T10087] ? is_mergeable_anon_vma+0x11e/0x2f0 [ 370.472676][T10087] vma_modify+0xee1/0x2030 [ 370.472719][T10087] ? __lock_acquire+0xb97/0x1ce0 [ 370.472764][T10087] ? __pfx_vma_modify+0x10/0x10 [ 370.472816][T10087] vma_modify_policy+0x219/0x2d0 [ 370.472856][T10087] ? __pfx_vma_modify_policy+0x10/0x10 [ 370.472908][T10087] ? mpol_set_shared_policy+0x392/0x8c0 [ 370.472973][T10087] mbind_range+0x175/0x570 [ 370.473030][T10087] do_mbind+0x848/0xf30 [ 370.473092][T10087] ? __pfx_do_mbind+0x10/0x10 [ 370.473166][T10087] ? __pfx_get_nodes+0x10/0x10 [ 370.473230][T10087] kernel_mbind+0x1e3/0x1f0 [ 370.473288][T10087] ? __pfx_kernel_mbind+0x10/0x10 [ 370.473361][T10087] do_syscall_64+0xcd/0x490 [ 370.473419][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.473453][T10087] RIP: 0033:0x7f841018ebe9 [ 370.473479][T10087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.473512][T10087] RSP: 002b:00007f8410fc8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 370.473546][T10087] RAX: ffffffffffffffda RBX: 00007f84103b6090 RCX: 00007f841018ebe9 [ 370.473568][T10087] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 370.473589][T10087] RBP: 00007f8410211e19 R08: 0000000000000006 R09: 0000000000000002 [ 370.473610][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.473630][T10087] R13: 00007f84103b6128 R14: 00007f84103b6090 R15: 00007ffc4cb49fb8 [ 370.473674][T10087] [ 370.738000][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.890371][T10110] netlink: 342 bytes leftover after parsing attributes in process `syz.0.839'. [ 372.590580][T10122] FAULT_INJECTION: forcing a failure. [ 372.590580][T10122] name failslab, interval 1, probability 0, space 0, times 0 [ 372.617465][T10122] CPU: 1 UID: 0 PID: 10122 Comm: syz.0.847 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 372.617513][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.617533][T10122] Call Trace: [ 372.617544][T10122] [ 372.617557][T10122] dump_stack_lvl+0x16c/0x1f0 [ 372.617609][T10122] should_fail_ex+0x512/0x640 [ 372.617658][T10122] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 372.617702][T10122] should_failslab+0xc2/0x120 [ 372.617746][T10122] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 372.617785][T10122] ? lockdep_init_map_type+0x5c/0x280 [ 372.617830][T10122] ? seq_open+0x55/0x170 [ 372.617882][T10122] seq_open+0x55/0x170 [ 372.617929][T10122] kernfs_fop_open+0x59f/0xda0 [ 372.617980][T10122] do_dentry_open+0x97f/0x1530 [ 372.618023][T10122] ? __pfx_kernfs_fop_open+0x10/0x10 [ 372.618060][T10122] vfs_open+0x82/0x3f0 [ 372.618124][T10122] path_openat+0x1de4/0x2cb0 [ 372.618176][T10122] ? __pfx_path_openat+0x10/0x10 [ 372.618231][T10122] do_filp_open+0x20b/0x470 [ 372.618270][T10122] ? __pfx_do_filp_open+0x10/0x10 [ 372.618339][T10122] ? alloc_fd+0x471/0x7d0 [ 372.618385][T10122] do_sys_openat2+0x11b/0x1d0 [ 372.618437][T10122] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.618488][T10122] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 372.618545][T10122] __x64_sys_openat+0x174/0x210 [ 372.618597][T10122] ? __pfx___x64_sys_openat+0x10/0x10 [ 372.618666][T10122] do_syscall_64+0xcd/0x490 [ 372.618713][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.618746][T10122] RIP: 0033:0x7f841018ebe9 [ 372.618772][T10122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.618806][T10122] RSP: 002b:00007f8410fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.618837][T10122] RAX: ffffffffffffffda RBX: 00007f84103b5fa0 RCX: 00007f841018ebe9 [ 372.618859][T10122] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 372.618879][T10122] RBP: 00007f8410211e19 R08: 0000000000000000 R09: 0000000000000000 [ 372.618898][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.618917][T10122] R13: 00007f84103b6038 R14: 00007f84103b5fa0 R15: 00007ffc4cb49fb8 [ 372.618958][T10122] [ 373.985089][T10144] FAULT_INJECTION: forcing a failure. [ 373.985089][T10144] name failslab, interval 1, probability 0, space 0, times 0 [ 374.063815][T10144] CPU: 1 UID: 0 PID: 10144 Comm: syz.4.850 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 374.063850][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.063865][T10144] Call Trace: [ 374.063873][T10144] [ 374.063882][T10144] dump_stack_lvl+0x16c/0x1f0 [ 374.063916][T10144] should_fail_ex+0x512/0x640 [ 374.063952][T10144] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 374.063986][T10144] should_failslab+0xc2/0x120 [ 374.064018][T10144] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 374.064047][T10144] ? vm_area_dup+0x27/0x8d0 [ 374.064075][T10144] vm_area_dup+0x27/0x8d0 [ 374.064101][T10144] __split_vma+0x18e/0x1070 [ 374.064127][T10144] ? kasan_save_stack+0x42/0x60 [ 374.064152][T10144] ? kasan_save_stack+0x33/0x60 [ 374.064185][T10144] ? kasan_save_track+0x14/0x30 [ 374.064211][T10144] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 374.064240][T10144] ? __pfx___split_vma+0x10/0x10 [ 374.064263][T10144] ? kernel_mbind+0x1e3/0x1f0 [ 374.064298][T10144] ? do_syscall_64+0xcd/0x490 [ 374.064327][T10144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.064360][T10144] ? is_mergeable_anon_vma+0x11e/0x2f0 [ 374.064390][T10144] vma_modify+0xee1/0x2030 [ 374.064419][T10144] ? __lock_acquire+0xb97/0x1ce0 [ 374.064452][T10144] ? __pfx_vma_modify+0x10/0x10 [ 374.064485][T10144] vma_modify_policy+0x219/0x2d0 [ 374.064513][T10144] ? __pfx_vma_modify_policy+0x10/0x10 [ 374.064550][T10144] ? mpol_set_shared_policy+0x392/0x8c0 [ 374.064596][T10144] mbind_range+0x175/0x570 [ 374.064634][T10144] do_mbind+0x848/0xf30 [ 374.064678][T10144] ? __pfx_do_mbind+0x10/0x10 [ 374.064735][T10144] ? __pfx_get_nodes+0x10/0x10 [ 374.064770][T10144] kernel_mbind+0x1e3/0x1f0 [ 374.064808][T10144] ? __pfx_kernel_mbind+0x10/0x10 [ 374.064853][T10144] do_syscall_64+0xcd/0x490 [ 374.064884][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.064907][T10144] RIP: 0033:0x7f0a92b8ebe9 [ 374.064928][T10144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.064952][T10144] RSP: 002b:00007f0a93a81038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 374.064975][T10144] RAX: ffffffffffffffda RBX: 00007f0a92db6090 RCX: 00007f0a92b8ebe9 [ 374.064991][T10144] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 374.065005][T10144] RBP: 00007f0a92c11e19 R08: 0000000000000006 R09: 0000000000000002 [ 374.065019][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.065032][T10144] R13: 00007f0a92db6128 R14: 00007f0a92db6090 R15: 00007ffebd674bd8 [ 374.065063][T10144] [ 375.228794][T10162] FAULT_INJECTION: forcing a failure. [ 375.228794][T10162] name failslab, interval 1, probability 0, space 0, times 0 [ 375.252772][T10162] CPU: 0 UID: 0 PID: 10162 Comm: syz.4.853 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 375.252816][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.252836][T10162] Call Trace: [ 375.252847][T10162] [ 375.252859][T10162] dump_stack_lvl+0x16c/0x1f0 [ 375.252905][T10162] should_fail_ex+0x512/0x640 [ 375.252949][T10162] ? fs_reclaim_acquire+0xae/0x150 [ 375.253002][T10162] should_failslab+0xc2/0x120 [ 375.253046][T10162] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 375.253091][T10162] ? security_inode_alloc+0x3b/0x2b0 [ 375.253130][T10162] security_inode_alloc+0x3b/0x2b0 [ 375.253163][T10162] inode_init_always_gfp+0xce4/0x1030 [ 375.253202][T10162] alloc_inode+0x86/0x240 [ 375.253243][T10162] sock_alloc+0x40/0x280 [ 375.253283][T10162] __sock_create+0xc1/0x8d0 [ 375.253334][T10162] __sys_socket+0x14d/0x260 [ 375.253361][T10162] ? __pfx___sys_socket+0x10/0x10 [ 375.253388][T10162] ? xfd_validate_state+0x61/0x180 [ 375.253429][T10162] ? __pfx___do_sys_close_range+0x10/0x10 [ 375.253471][T10162] __x64_sys_socket+0x72/0xb0 [ 375.253496][T10162] ? lockdep_hardirqs_on+0x7c/0x110 [ 375.253530][T10162] do_syscall_64+0xcd/0x490 [ 375.253569][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.253598][T10162] RIP: 0033:0x7f0a92b8ebe9 [ 375.253621][T10162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.253650][T10162] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 375.253678][T10162] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 375.253697][T10162] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 375.253715][T10162] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.253732][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.253749][T10162] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 375.253790][T10162] [ 375.254387][T10162] socket: no more sockets [ 376.556797][T10181] random: crng reseeded on system resumption [ 378.902832][T10222] FAULT_INJECTION: forcing a failure. [ 378.902832][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 378.949303][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.4.868 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 378.949347][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.949367][T10222] Call Trace: [ 378.949377][T10222] [ 378.949390][T10222] dump_stack_lvl+0x16c/0x1f0 [ 378.949433][T10222] should_fail_ex+0x512/0x640 [ 378.949476][T10222] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 378.949519][T10222] should_failslab+0xc2/0x120 [ 378.949563][T10222] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 378.949602][T10222] ? acpi_ut_create_integer_object+0x64/0x180 [ 378.949656][T10222] ? acpi_ds_init_aml_walk+0x2d3/0x590 [ 378.949712][T10222] acpi_ut_create_integer_object+0x64/0x180 [ 378.949765][T10222] acpi_ps_execute_method+0x516/0xb30 [ 378.949814][T10222] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 378.949868][T10222] acpi_ns_evaluate+0x76c/0xca0 [ 378.949916][T10222] ? kasan_save_track+0x14/0x30 [ 378.949957][T10222] acpi_evaluate_object+0x1fa/0xa90 [ 378.950012][T10222] ? do_syscall_64+0xcd/0x490 [ 378.950051][T10222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.950088][T10222] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 378.950128][T10222] ? __mutex_trylock_common+0xe9/0x250 [ 378.950182][T10222] acpi_evaluate_integer+0xdd/0x200 [ 378.950237][T10222] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 378.950313][T10222] ? __pfx_status_show+0x10/0x10 [ 378.950356][T10222] status_show+0xa0/0x120 [ 378.950395][T10222] ? __pfx_status_show+0x10/0x10 [ 378.950448][T10222] dev_attr_show+0x53/0xe0 [ 378.950501][T10222] ? __pfx_dev_attr_show+0x10/0x10 [ 378.950547][T10222] sysfs_kf_seq_show+0x213/0x3e0 [ 378.950593][T10222] seq_read_iter+0x506/0x12c0 [ 378.950629][T10222] ? __mutex_trylock_common+0xe9/0x250 [ 378.950708][T10222] kernfs_fop_read_iter+0x40f/0x5a0 [ 378.950740][T10222] ? rw_verify_area+0xcf/0x6c0 [ 378.950779][T10222] vfs_read+0x8bf/0xcf0 [ 378.950822][T10222] ? __pfx___mutex_lock+0x10/0x10 [ 378.950864][T10222] ? __pfx_vfs_read+0x10/0x10 [ 378.950932][T10222] ksys_read+0x12a/0x250 [ 378.950969][T10222] ? __pfx_ksys_read+0x10/0x10 [ 378.951021][T10222] do_syscall_64+0xcd/0x490 [ 378.951067][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.951100][T10222] RIP: 0033:0x7f0a92b8ebe9 [ 378.951126][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.951159][T10222] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.951190][T10222] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 378.951212][T10222] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 378.951233][T10222] RBP: 00007f0a93aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 378.951254][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.951274][T10222] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 378.951321][T10222] [ 378.951460][T10222] ACPI Error: Could not allocate an object descriptor (20250404/utobject-180) [ 379.291771][T10222] ACPI Error: ffff88807eb93000 walk still has a scope list (20250404/dswstate-694) [ 380.008808][ T30] audit: type=1800 audit(1754913220.778:12): pid=10250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.873" name="discovery_nqn" dev="configfs" ino=24391 res=0 errno=0 [ 380.389036][T10265] random: crng reseeded on system resumption [ 381.500302][T10290] FAULT_INJECTION: forcing a failure. [ 381.500302][T10290] name failslab, interval 1, probability 0, space 0, times 0 [ 381.613164][T10290] CPU: 1 UID: 0 PID: 10290 Comm: syz.0.881 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 381.613221][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.613243][T10290] Call Trace: [ 381.613253][T10290] [ 381.613266][T10290] dump_stack_lvl+0x16c/0x1f0 [ 381.613313][T10290] should_fail_ex+0x512/0x640 [ 381.613356][T10290] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 381.613401][T10290] should_failslab+0xc2/0x120 [ 381.613444][T10290] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 381.613485][T10290] ? poll_select_finish+0x377/0x6b0 [ 381.613518][T10290] ? sock_alloc_inode+0x25/0x1c0 [ 381.613572][T10290] ? __pfx_sock_alloc_inode+0x10/0x10 [ 381.613619][T10290] sock_alloc_inode+0x25/0x1c0 [ 381.613666][T10290] alloc_inode+0x61/0x240 [ 381.613715][T10290] sock_alloc+0x40/0x280 [ 381.613760][T10290] __sock_create+0xc1/0x8d0 [ 381.613820][T10290] __sys_socket+0x14d/0x260 [ 381.613852][T10290] ? __pfx___sys_socket+0x10/0x10 [ 381.613883][T10290] ? xfd_validate_state+0x61/0x180 [ 381.613931][T10290] ? __pfx___do_sys_close_range+0x10/0x10 [ 381.613981][T10290] __x64_sys_socket+0x72/0xb0 [ 381.614012][T10290] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.614069][T10290] do_syscall_64+0xcd/0x490 [ 381.614114][T10290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.614147][T10290] RIP: 0033:0x7f841018ebe9 [ 381.614173][T10290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.614215][T10290] RSP: 002b:00007f8410fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 381.614248][T10290] RAX: ffffffffffffffda RBX: 00007f84103b5fa0 RCX: 00007f841018ebe9 [ 381.614272][T10290] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 381.614293][T10290] RBP: 00007f8410211e19 R08: 0000000000000000 R09: 0000000000000000 [ 381.614314][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.614335][T10290] R13: 00007f84103b6038 R14: 00007f84103b5fa0 R15: 00007ffc4cb49fb8 [ 381.614378][T10290] [ 381.614393][T10290] socket: no more sockets [ 383.209603][T10311] nbd: nbd7 already in use [ 383.359496][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 383.863003][T10312] netlink: 334 bytes leftover after parsing attributes in process `syz.4.887'. [ 387.074937][T10381] nbd: nbd7 already in use [ 387.431369][T10383] netlink: 334 bytes leftover after parsing attributes in process `syz.3.901'. [ 388.707089][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.713539][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.282719][T10507] nbd: must specify at least one socket [ 395.623231][T10552] binder: 10550:10552 ioctl c0306201 200000000300 returned -14 [ 400.691437][T10650] netlink: 338 bytes leftover after parsing attributes in process `syz.0.957'. [ 400.743453][T10650] netlink: 338 bytes leftover after parsing attributes in process `syz.0.957'. [ 409.684483][T10815] netlink: 338 bytes leftover after parsing attributes in process `syz.3.990'. [ 409.701699][T10815] netlink: 338 bytes leftover after parsing attributes in process `syz.3.990'. [ 410.893128][ T5184] Bluetooth: hci2: unexpected event 0x13 length: 440 > 260 [ 411.537358][ T30] audit: type=1800 audit(6049880546.461:13): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.997" name="discovery_nqn" dev="configfs" ino=27137 res=0 errno=0 getty: ttyS0: read error: Resource temporarily unavailable [ 414.969489][ T30] audit: type=1800 audit(6049880549.918:14): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1013" name="discovery_nqn" dev="configfs" ino=27858 res=0 errno=0 [ 417.089682][ T30] audit: type=1806 audit(6049880552.019:15): xattr="" res=-22 [ 420.801496][T11012] vivid-007: ================= START STATUS ================= [ 420.810054][T11012] vivid-007: Enable Output Cropping: true [ 420.815859][T11012] vivid-007: Enable Output Composing: true [ 420.850362][T11012] vivid-007: Enable Output Scaler: true [ 420.872047][T11012] vivid-007: Tx RGB Quantization Range: Automatic [ 420.910832][T11012] vivid-007: Transmit Mode: HDMI [ 420.915894][T11012] vivid-007: Hotplug Present: 0x00000000 [ 420.925037][T11012] vivid-007: RxSense Present: 0x00000000 [ 421.000440][T11012] vivid-007: EDID Present: 0x00000000 [ 421.015073][T11012] vivid-007: ================== END STATUS ================== [ 422.053206][T11035] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1041'. [ 422.104933][T11039] netlink: 'syz.1.1042': attribute type 7 has an invalid length. [ 422.156752][T11039] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1042'. [ 422.247804][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 423.752037][T11065] sctp: [Deprecated]: syz.3.1048 (pid 11065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.752037][T11065] Use struct sctp_sack_info instead [ 425.088870][T11091] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1052'. syzkaller syzkaller login: [ 425.788800][T11103] FAULT_INJECTION: forcing a failure. [ 425.788800][T11103] name failslab, interval 1, probability 0, space 0, times 0 [ 425.801832][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.0.1055 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 425.801878][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.801898][T11103] Call Trace: [ 425.801908][T11103] [ 425.801921][T11103] dump_stack_lvl+0x16c/0x1f0 [ 425.801967][T11103] should_fail_ex+0x512/0x640 [ 425.802013][T11103] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 425.802051][T11103] should_failslab+0xc2/0x120 [ 425.802095][T11103] __kmalloc_cache_noprof+0x6a/0x3e0 [ 425.802129][T11103] ? kernfs_fop_open+0x244/0xda0 [ 425.802167][T11103] kernfs_fop_open+0x244/0xda0 [ 425.802219][T11103] do_dentry_open+0x97f/0x1530 [ 425.802262][T11103] ? __pfx_kernfs_fop_open+0x10/0x10 [ 425.802301][T11103] vfs_open+0x82/0x3f0 [ 425.802356][T11103] path_openat+0x1de4/0x2cb0 [ 425.802409][T11103] ? __pfx_path_openat+0x10/0x10 [ 425.802461][T11103] do_filp_open+0x20b/0x470 [ 425.802501][T11103] ? __pfx_do_filp_open+0x10/0x10 [ 425.802571][T11103] ? alloc_fd+0x471/0x7d0 [ 425.802619][T11103] do_sys_openat2+0x11b/0x1d0 [ 425.802686][T11103] ? __pfx_do_sys_openat2+0x10/0x10 [ 425.802741][T11103] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 425.802798][T11103] __x64_sys_openat+0x174/0x210 [ 425.802849][T11103] ? __pfx___x64_sys_openat+0x10/0x10 [ 425.802921][T11103] do_syscall_64+0xcd/0x490 [ 425.802967][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.803001][T11103] RIP: 0033:0x7f841018ebe9 [ 425.803028][T11103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.803060][T11103] RSP: 002b:00007f8410fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 425.803091][T11103] RAX: ffffffffffffffda RBX: 00007f84103b5fa0 RCX: 00007f841018ebe9 [ 425.803112][T11103] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 425.803132][T11103] RBP: 00007f8410211e19 R08: 0000000000000000 R09: 0000000000000000 [ 425.803151][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.803169][T11103] R13: 00007f84103b6038 R14: 00007f84103b5fa0 R15: 00007ffc4cb49fb8 [ 425.803224][T11103] [ 426.014839][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.794501][T11135] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1064'. [ 428.500547][T11157] netlink: 'syz.3.1070': attribute type 7 has an invalid length. [ 428.508643][T11157] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1070'. [ 428.518093][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 430.684326][T11194] vivid-007: ================= START STATUS ================= [ 430.715897][T11194] vivid-007: Enable Output Cropping: true [ 430.724812][T11194] vivid-007: Enable Output Composing: true [ 430.733110][T11194] vivid-007: Enable Output Scaler: true [ 430.739156][T11194] vivid-007: Tx RGB Quantization Range: Automatic [ 430.745624][T11194] vivid-007: Transmit Mode: HDMI [ 430.768534][T11194] vivid-007: Hotplug Present: 0x00000000 [ 430.781536][T11194] vivid-007: RxSense Present: 0x00000000 [ 430.791324][T11194] vivid-007: EDID Present: 0x00000000 [ 430.806816][T11194] vivid-007: ================== END STATUS ================== [ 433.010888][T11239] netlink: 'syz.0.1090': attribute type 7 has an invalid length. [ 433.057751][T11239] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1090'. [ 433.086252][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 434.536944][T11256] random: crng reseeded on system resumption [ 437.830212][T11327] nbd: nbd7 already in use [ 438.472891][T11331] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1113'. [ 446.389857][T11469] sctp: [Deprecated]: syz.1.1149 (pid 11469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.389857][T11469] Use struct sctp_sack_info instead [ 446.548818][T11471] vivid-007: ================= START STATUS ================= [ 446.557160][T11471] vivid-007: Enable Output Cropping: true [ 446.563060][T11471] vivid-007: Enable Output Composing: true [ 446.574954][T11471] vivid-007: Enable Output Scaler: true [ 446.588110][T11471] vivid-007: Tx RGB Quantization Range: Automatic [ 446.624796][T11471] vivid-007: Transmit Mode: HDMI [ 446.635159][T11471] vivid-007: Hotplug Present: 0x00000000 [ 446.644566][T11471] vivid-007: RxSense Present: 0x00000000 [ 446.650293][T11471] vivid-007: EDID Present: 0x00000000 [ 446.704255][T11471] vivid-007: ================== END STATUS ================== [ 447.227281][ T30] audit: type=1800 audit(6049880582.336:16): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1149" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 447.247835][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.829363][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.835926][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.185754][T11535] sctp: [Deprecated]: syz.4.1164 (pid 11535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.185754][T11535] Use struct sctp_sack_info instead [ 451.942217][ T30] audit: type=1800 audit(6049880587.091:17): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1164" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 456.135126][T11633] FAULT_INJECTION: forcing a failure. [ 456.135126][T11633] name failslab, interval 1, probability 0, space 0, times 0 [ 456.228825][T11633] CPU: 0 UID: 0 PID: 11633 Comm: syz.4.1187 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 456.228871][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.228890][T11633] Call Trace: [ 456.228901][T11633] [ 456.228912][T11633] dump_stack_lvl+0x16c/0x1f0 [ 456.228957][T11633] should_fail_ex+0x512/0x640 [ 456.229011][T11633] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 456.229046][T11633] should_failslab+0xc2/0x120 [ 456.229085][T11633] __kmalloc_cache_noprof+0x6a/0x3e0 [ 456.229116][T11633] ? kernfs_fop_open+0x244/0xda0 [ 456.229150][T11633] kernfs_fop_open+0x244/0xda0 [ 456.229186][T11633] do_dentry_open+0x97f/0x1530 [ 456.229222][T11633] ? __pfx_kernfs_fop_open+0x10/0x10 [ 456.229259][T11633] vfs_open+0x82/0x3f0 [ 456.229305][T11633] path_openat+0x1de4/0x2cb0 [ 456.229351][T11633] ? __pfx_path_openat+0x10/0x10 [ 456.229394][T11633] do_filp_open+0x20b/0x470 [ 456.229428][T11633] ? __pfx_do_filp_open+0x10/0x10 [ 456.229492][T11633] ? alloc_fd+0x471/0x7d0 [ 456.229537][T11633] do_sys_openat2+0x11b/0x1d0 [ 456.229586][T11633] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.229639][T11633] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 456.229697][T11633] __x64_sys_openat+0x174/0x210 [ 456.229749][T11633] ? __pfx___x64_sys_openat+0x10/0x10 [ 456.229815][T11633] do_syscall_64+0xcd/0x490 [ 456.229860][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.229891][T11633] RIP: 0033:0x7f0a92b8ebe9 [ 456.229915][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.229948][T11633] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.229989][T11633] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 456.230011][T11633] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 456.230033][T11633] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 456.230053][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.230070][T11633] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 456.230108][T11633] [ 456.446818][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.199738][T11670] random: crng reseeded on system resumption [ 458.870152][T11651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.951374][T11651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.911756][T11697] vivid-003: ================= START STATUS ================= [ 460.951049][T11697] vivid-003: Radio HW Seek Mode: Bounded [ 460.956775][T11697] vivid-003: Radio Programmable HW Seek: false [ 461.018251][T11697] vivid-003: RDS Rx I/O Mode: Block I/O [ 461.062550][T11697] vivid-003: Generate RBDS Instead of RDS: false [ 461.073653][T11697] vivid-003: RDS Reception: true [ 461.136938][T11697] vivid-003: RDS Program Type: 0 inactive [ 461.143010][T11697] vivid-003: RDS PS Name: inactive [ 461.151277][T11697] vivid-003: RDS Radio Text: inactive [ 461.163350][T11697] vivid-003: RDS Traffic Announcement: false inactive [ 461.183042][T11697] vivid-003: RDS Traffic Program: false inactive [ 461.216889][T11697] vivid-003: RDS Music: false inactive [ 461.521272][T11697] vivid-003: ================== END STATUS ================== [ 463.890975][T11771] mkiss: ax0: crc mode is auto. [ 465.071411][T11783] FAULT_INJECTION: forcing a failure. [ 465.071411][T11783] name failslab, interval 1, probability 0, space 0, times 0 [ 465.141238][T11783] CPU: 1 UID: 0 PID: 11783 Comm: syz.3.1217 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 465.141287][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.141308][T11783] Call Trace: [ 465.141320][T11783] [ 465.141332][T11783] dump_stack_lvl+0x16c/0x1f0 [ 465.141380][T11783] should_fail_ex+0x512/0x640 [ 465.141424][T11783] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 465.141462][T11783] should_failslab+0xc2/0x120 [ 465.141505][T11783] __kmalloc_cache_noprof+0x6a/0x3e0 [ 465.141540][T11783] ? kernfs_fop_open+0x244/0xda0 [ 465.141576][T11783] kernfs_fop_open+0x244/0xda0 [ 465.141619][T11783] do_dentry_open+0x97f/0x1530 [ 465.141659][T11783] ? __pfx_kernfs_fop_open+0x10/0x10 [ 465.141698][T11783] vfs_open+0x82/0x3f0 [ 465.141751][T11783] path_openat+0x1de4/0x2cb0 [ 465.141803][T11783] ? __pfx_path_openat+0x10/0x10 [ 465.141855][T11783] do_filp_open+0x20b/0x470 [ 465.141895][T11783] ? __pfx_do_filp_open+0x10/0x10 [ 465.141965][T11783] ? alloc_fd+0x471/0x7d0 [ 465.142025][T11783] do_sys_openat2+0x11b/0x1d0 [ 465.142076][T11783] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.142128][T11783] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 465.142186][T11783] __x64_sys_openat+0x174/0x210 [ 465.142238][T11783] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.142306][T11783] do_syscall_64+0xcd/0x490 [ 465.142349][T11783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.142382][T11783] RIP: 0033:0x7f361a38ebe9 [ 465.142408][T11783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.142440][T11783] RSP: 002b:00007f361b193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.142473][T11783] RAX: ffffffffffffffda RBX: 00007f361a5b5fa0 RCX: 00007f361a38ebe9 [ 465.142495][T11783] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 465.142516][T11783] RBP: 00007f361a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 465.142536][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.142555][T11783] R13: 00007f361a5b6038 R14: 00007f361a5b5fa0 R15: 00007ffd2ce03408 [ 465.142598][T11783] [ 468.112620][T11828] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 469.785716][T11871] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1237'. [ 470.693484][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 471.754736][T11893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.816467][T11893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.841921][T11893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 471.905935][T11893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 471.923466][T11893] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 473.216727][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 473.855107][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 473.861866][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 473.938014][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 474.345038][T11946] nbd: nbd7 already in use [ 474.674380][T11949] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1251'. [ 476.002165][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 480.851044][T12029] FAULT_INJECTION: forcing a failure. [ 480.851044][T12029] name failslab, interval 1, probability 0, space 0, times 0 [ 480.886269][T12029] CPU: 0 UID: 0 PID: 12029 Comm: syz.3.1268 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 480.886318][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.886340][T12029] Call Trace: [ 480.886352][T12029] [ 480.886364][T12029] dump_stack_lvl+0x16c/0x1f0 [ 480.886413][T12029] should_fail_ex+0x512/0x640 [ 480.886458][T12029] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 480.886500][T12029] should_failslab+0xc2/0x120 [ 480.886543][T12029] __kmalloc_cache_noprof+0x6a/0x3e0 [ 480.886578][T12029] ? resv_map_alloc+0x46/0x400 [ 480.886628][T12029] resv_map_alloc+0x46/0x400 [ 480.886675][T12029] hugetlbfs_get_inode+0x33f/0x730 [ 480.886717][T12029] hugetlb_file_setup+0x15b/0x620 [ 480.886757][T12029] ksys_mmap_pgoff+0x189/0x5c0 [ 480.886822][T12029] __x64_sys_mmap+0x125/0x190 [ 480.886882][T12029] do_syscall_64+0xcd/0x490 [ 480.886926][T12029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.886961][T12029] RIP: 0033:0x7f361a38ebe9 [ 480.886986][T12029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.887019][T12029] RSP: 002b:00007f361b172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 480.887052][T12029] RAX: ffffffffffffffda RBX: 00007f361a5b6090 RCX: 00007f361a38ebe9 [ 480.887074][T12029] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 480.887096][T12029] RBP: 00007f361a411e19 R08: 0000000000000602 R09: 0000300000000000 [ 480.887118][T12029] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 480.887139][T12029] R13: 00007f361a5b6128 R14: 00007f361a5b6090 R15: 00007ffd2ce03408 [ 480.887183][T12029] [ 481.053549][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.235591][T12029] random: crng reseeded on system resumption [ 484.173561][T12073] vivid-003: ================= START STATUS ================= [ 484.219068][T12073] vivid-003: Radio HW Seek Mode: Bounded [ 484.245697][T12073] vivid-003: Radio Programmable HW Seek: false [ 484.355068][T12073] vivid-003: RDS Rx I/O Mode: Block I/O [ 484.377678][T12073] vivid-003: Generate RBDS Instead of RDS: false [ 484.413658][T12073] vivid-003: RDS Reception: true [ 484.430644][T12073] vivid-003: RDS Program Type: 0 inactive [ 484.436494][T12073] vivid-003: RDS PS Name: inactive [ 484.448975][T12073] vivid-003: RDS Radio Text: inactive [ 484.454553][T12073] vivid-003: RDS Traffic Announcement: false inactive [ 484.499196][T12073] vivid-003: RDS Traffic Program: false inactive [ 484.505657][T12073] vivid-003: RDS Music: false inactive [ 484.512717][T12073] vivid-003: ================== END STATUS ================== [ 485.274647][T12096] FAULT_INJECTION: forcing a failure. [ 485.274647][T12096] name failslab, interval 1, probability 0, space 0, times 0 [ 485.362954][T12096] CPU: 1 UID: 0 PID: 12096 Comm: syz.0.1282 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 485.363001][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.363020][T12096] Call Trace: [ 485.363031][T12096] [ 485.363044][T12096] dump_stack_lvl+0x16c/0x1f0 [ 485.363090][T12096] should_fail_ex+0x512/0x640 [ 485.363134][T12096] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 485.363175][T12096] should_failslab+0xc2/0x120 [ 485.363223][T12096] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 485.363261][T12096] ? __pfx_acct_collect+0x10/0x10 [ 485.363321][T12096] ? taskstats_exit+0x654/0xbe0 [ 485.363373][T12096] taskstats_exit+0x654/0xbe0 [ 485.363423][T12096] ? __pfx_taskstats_exit+0x10/0x10 [ 485.363483][T12096] do_exit+0x5dc/0x2bf0 [ 485.363540][T12096] ? __pfx_do_exit+0x10/0x10 [ 485.363584][T12096] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.363635][T12096] ? find_held_lock+0x2b/0x80 [ 485.363675][T12096] do_group_exit+0xd3/0x2a0 [ 485.363738][T12096] get_signal+0x2673/0x26d0 [ 485.363782][T12096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 485.363835][T12096] ? is_valid_madvise+0x34/0xd0 [ 485.363879][T12096] ? __pfx_get_signal+0x10/0x10 [ 485.363917][T12096] ? do_futex+0x122/0x350 [ 485.363960][T12096] ? __pfx_do_futex+0x10/0x10 [ 485.364026][T12096] arch_do_signal_or_restart+0x8f/0x790 [ 485.364074][T12096] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 485.364132][T12096] ? xfd_validate_state+0x61/0x180 [ 485.364179][T12096] ? __pfx_ksys_write+0x10/0x10 [ 485.364226][T12096] exit_to_user_mode_loop+0x84/0x110 [ 485.364286][T12096] do_syscall_64+0x3f6/0x490 [ 485.364334][T12096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.364369][T12096] RIP: 0033:0x7f841018ebe9 [ 485.364395][T12096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.364430][T12096] RSP: 002b:00007f8410fe90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 485.364462][T12096] RAX: fffffffffffffe00 RBX: 00007f84103b5fa8 RCX: 00007f841018ebe9 [ 485.364485][T12096] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f84103b5fa8 [ 485.364506][T12096] RBP: 00007f84103b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 485.364528][T12096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.364548][T12096] R13: 00007f84103b6038 R14: 00007ffc4cb49ed0 R15: 00007ffc4cb49fb8 [ 485.364593][T12096] [ 486.266310][T12114] vivid-007: ================= START STATUS ================= [ 486.282606][T12114] vivid-007: Enable Output Cropping: true [ 486.321158][T12114] vivid-007: Enable Output Composing: true [ 486.327221][T12114] vivid-007: Enable Output Scaler: true [ 486.364825][T12114] vivid-007: Tx RGB Quantization Range: Automatic [ 486.406864][T12114] vivid-007: Transmit Mode: HDMI [ 486.406905][T12114] vivid-007: Hotplug Present: 0x00000000 [ 486.406939][T12114] vivid-007: RxSense Present: 0x00000000 [ 486.406971][T12114] vivid-007: EDID Present: 0x00000000 [ 486.407007][T12114] vivid-007: ================== END STATUS ================== [ 487.731569][T12138] vivid-003: ================= START STATUS ================= [ 487.739310][T12138] vivid-003: Radio HW Seek Mode: Bounded [ 487.768237][T12138] vivid-003: Radio Programmable HW Seek: false [ 487.776909][T12138] vivid-003: RDS Rx I/O Mode: Block I/O [ 487.782849][T12138] vivid-003: Generate RBDS Instead of RDS: false [ 487.789264][T12138] vivid-003: RDS Reception: true [ 487.794487][T12138] vivid-003: RDS Program Type: 0 inactive [ 487.800284][T12138] vivid-003: RDS PS Name: inactive [ 487.805861][T12138] vivid-003: RDS Radio Text: inactive [ 487.811603][T12138] vivid-003: RDS Traffic Announcement: false inactive [ 487.818485][T12138] vivid-003: RDS Traffic Program: false inactive [ 487.833587][T12138] vivid-003: RDS Music: false inactive [ 487.859527][T12138] vivid-003: ================== END STATUS ================== [ 488.602595][T12148] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 489.276206][T12165] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1303'. [ 489.866104][T12166] mkiss: ax0: crc mode is auto. [ 490.739552][T12171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 490.764779][T12171] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 490.793329][T12171] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 490.825087][T12171] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.141202][T12194] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1307'. [ 491.999643][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 492.794808][T11937] Bluetooth: hci2: command 0x0c1a tx timeout [ 492.801637][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 492.884547][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 493.617341][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 494.412678][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 494.814551][T12249] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1319'. [ 494.989832][T12253] FAULT_INJECTION: forcing a failure. [ 494.989832][T12253] name failslab, interval 1, probability 0, space 0, times 0 [ 495.004169][T12253] CPU: 1 UID: 0 PID: 12253 Comm: syz.4.1317 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 495.004227][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 495.004247][T12253] Call Trace: [ 495.004258][T12253] [ 495.004271][T12253] dump_stack_lvl+0x16c/0x1f0 [ 495.004318][T12253] should_fail_ex+0x512/0x640 [ 495.004364][T12253] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 495.004408][T12253] should_failslab+0xc2/0x120 [ 495.004451][T12253] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 495.004491][T12253] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 495.004551][T12253] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 495.004604][T12253] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 495.004662][T12253] alloc_inode+0x61/0x240 [ 495.004710][T12253] new_inode+0x22/0x1c0 [ 495.004759][T12253] hugetlbfs_get_inode+0x354/0x730 [ 495.004801][T12253] hugetlb_file_setup+0x15b/0x620 [ 495.004839][T12253] ksys_mmap_pgoff+0x189/0x5c0 [ 495.004891][T12253] __x64_sys_mmap+0x125/0x190 [ 495.004946][T12253] do_syscall_64+0xcd/0x490 [ 495.004992][T12253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.005025][T12253] RIP: 0033:0x7f0a92b8ebe9 [ 495.005050][T12253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.005082][T12253] RSP: 002b:00007f0a93a81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 495.005112][T12253] RAX: ffffffffffffffda RBX: 00007f0a92db6090 RCX: 00007f0a92b8ebe9 [ 495.005134][T12253] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 495.005152][T12253] RBP: 00007f0a92c11e19 R08: 0000000000000602 R09: 0000300000000000 [ 495.005171][T12253] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 495.005196][T12253] R13: 00007f0a92db6128 R14: 00007f0a92db6090 R15: 00007ffebd674bd8 [ 495.005232][T12253] [ 495.196983][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.230892][T12253] random: crng reseeded on system resumption [ 497.638416][ T30] audit: type=1800 audit(6049882681.015:18): pid=12277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1326" name="discovery_nqn" dev="configfs" ino=33796 res=0 errno=0 [ 498.999529][T12306] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1331'. [ 499.298694][T12311] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1332'. [ 500.614405][T12338] FAULT_INJECTION: forcing a failure. [ 500.614405][T12338] name failslab, interval 1, probability 0, space 0, times 0 [ 500.644889][T12338] CPU: 0 UID: 0 PID: 12338 Comm: syz.3.1341 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 500.644935][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.644956][T12338] Call Trace: [ 500.644966][T12338] [ 500.644978][T12338] dump_stack_lvl+0x16c/0x1f0 [ 500.645024][T12338] should_fail_ex+0x512/0x640 [ 500.645069][T12338] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 500.645108][T12338] should_failslab+0xc2/0x120 [ 500.645151][T12338] __kmalloc_cache_noprof+0x6a/0x3e0 [ 500.645185][T12338] ? refill_pi_state_cache+0x89/0x250 [ 500.645237][T12338] refill_pi_state_cache+0x89/0x250 [ 500.645284][T12338] futex_lock_pi+0x175/0x7c0 [ 500.645333][T12338] ? futex_unqueue+0x13d/0x2c0 [ 500.645372][T12338] ? __pfx_futex_lock_pi+0x10/0x10 [ 500.645419][T12338] ? __futex_wait+0x24c/0x2f0 [ 500.645503][T12338] ? futex_private_hash_put+0x18a/0x300 [ 500.645549][T12338] ? __pfx_futex_wake_mark+0x10/0x10 [ 500.645599][T12338] ? __pfx_child_wait_callback+0x10/0x10 [ 500.645642][T12338] do_futex+0x11a/0x350 [ 500.645672][T12338] ? __pfx_do_futex+0x10/0x10 [ 500.645702][T12338] ? __pfx___do_sys_wait4+0x10/0x10 [ 500.645738][T12338] ? cap_task_prctl+0x2af/0xa80 [ 500.645766][T12338] __x64_sys_futex+0x1e0/0x4c0 [ 500.645800][T12338] ? __pfx___x64_sys_futex+0x10/0x10 [ 500.645833][T12338] ? xfd_validate_state+0x61/0x180 [ 500.645869][T12338] ? __pfx___do_sys_prctl+0x10/0x10 [ 500.645921][T12338] do_syscall_64+0xcd/0x490 [ 500.645954][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.645977][T12338] RIP: 0033:0x7f361a38ebe9 [ 500.645996][T12338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.646019][T12338] RSP: 002b:00007f361b193038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 500.646041][T12338] RAX: ffffffffffffffda RBX: 00007f361a5b5fa0 RCX: 00007f361a38ebe9 [ 500.646056][T12338] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 500.646070][T12338] RBP: 00007f361a411e19 R08: 0000000000000000 R09: 000000008000fff2 [ 500.646084][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.646098][T12338] R13: 00007f361a5b6038 R14: 00007f361a5b5fa0 R15: 00007ffd2ce03408 [ 500.646127][T12338] [ 502.495808][T12373] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1344'. [ 504.003347][T12403] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1348'. [ 504.124610][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'. [ 504.888835][T12410] FAULT_INJECTION: forcing a failure. [ 504.888835][T12410] name failslab, interval 1, probability 0, space 0, times 0 [ 504.888875][T12410] CPU: 1 UID: 0 PID: 12410 Comm: syz.0.1351 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 504.888904][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.888918][T12410] Call Trace: [ 504.888926][T12410] [ 504.888935][T12410] dump_stack_lvl+0x16c/0x1f0 [ 504.888969][T12410] should_fail_ex+0x512/0x640 [ 504.889002][T12410] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 504.889030][T12410] should_failslab+0xc2/0x120 [ 504.889062][T12410] __kmalloc_cache_noprof+0x6a/0x3e0 [ 504.889087][T12410] ? refill_pi_state_cache+0x89/0x250 [ 504.889150][T12410] refill_pi_state_cache+0x89/0x250 [ 504.889193][T12410] futex_lock_pi+0x175/0x7c0 [ 504.889229][T12410] ? futex_unqueue+0x13d/0x2c0 [ 504.889257][T12410] ? __pfx_futex_lock_pi+0x10/0x10 [ 504.889290][T12410] ? __futex_wait+0x24c/0x2f0 [ 504.889348][T12410] ? futex_private_hash_put+0x18a/0x300 [ 504.889381][T12410] ? __pfx_futex_wake_mark+0x10/0x10 [ 504.889424][T12410] ? __pfx_child_wait_callback+0x10/0x10 [ 504.889465][T12410] do_futex+0x11a/0x350 [ 504.889496][T12410] ? __pfx_do_futex+0x10/0x10 [ 504.889526][T12410] ? __pfx___do_sys_wait4+0x10/0x10 [ 504.889561][T12410] ? cap_task_prctl+0x2af/0xa80 [ 504.889589][T12410] __x64_sys_futex+0x1e0/0x4c0 [ 504.889623][T12410] ? __pfx___x64_sys_futex+0x10/0x10 [ 504.889654][T12410] ? xfd_validate_state+0x61/0x180 [ 504.889689][T12410] ? __pfx___do_sys_prctl+0x10/0x10 [ 504.889735][T12410] do_syscall_64+0xcd/0x490 [ 504.889767][T12410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.889791][T12410] RIP: 0033:0x7f841018ebe9 [ 504.889809][T12410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.889832][T12410] RSP: 002b:00007f8410fe9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 504.889855][T12410] RAX: ffffffffffffffda RBX: 00007f84103b5fa0 RCX: 00007f841018ebe9 [ 504.889870][T12410] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 504.889885][T12410] RBP: 00007f8410211e19 R08: 0000000000000000 R09: 000000008000fff2 [ 504.889900][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.889914][T12410] R13: 00007f84103b6038 R14: 00007f84103b5fa0 R15: 00007ffc4cb49fb8 [ 504.889943][T12410] [ 505.279132][T12412] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 505.498608][T12423] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1356'. [ 505.520525][T12417] FAULT_INJECTION: forcing a failure. [ 505.520525][T12417] name failslab, interval 1, probability 0, space 0, times 0 [ 505.520600][T12417] CPU: 1 UID: 0 PID: 12417 Comm: syz.4.1355 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 505.520642][T12417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.520662][T12417] Call Trace: [ 505.520672][T12417] [ 505.520685][T12417] dump_stack_lvl+0x16c/0x1f0 [ 505.520732][T12417] should_fail_ex+0x512/0x640 [ 505.520777][T12417] ? __kmalloc_noprof+0xbf/0x510 [ 505.520818][T12417] ? lsm_blob_alloc+0x68/0x90 [ 505.520867][T12417] should_failslab+0xc2/0x120 [ 505.520911][T12417] __kmalloc_noprof+0xd2/0x510 [ 505.520960][T12417] lsm_blob_alloc+0x68/0x90 [ 505.521013][T12417] security_sk_alloc+0x30/0x270 [ 505.521052][T12417] sk_prot_alloc+0x1c7/0x2a0 [ 505.521104][T12417] sk_alloc+0x36/0xc20 [ 505.521143][T12417] __netlink_create+0x5e/0x2c0 [ 505.521190][T12417] __netlink_kernel_create+0xed/0x750 [ 505.521233][T12417] ? __lock_acquire+0x62e/0x1ce0 [ 505.521278][T12417] ? __pfx___netlink_kernel_create+0x10/0x10 [ 505.521330][T12417] rtnetlink_net_init+0xb9/0x140 [ 505.521367][T12417] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 505.521404][T12417] ? lockdep_init_map_type+0x5c/0x280 [ 505.521447][T12417] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 505.521481][T12417] ? __pfx_rtnetlink_bind+0x10/0x10 [ 505.521517][T12417] ? lockdep_init_map_type+0x5c/0x280 [ 505.521563][T12417] ? debug_mutex_init+0x37/0x70 [ 505.521598][T12417] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 505.521633][T12417] ops_init+0x1e2/0x5f0 [ 505.521680][T12417] setup_net+0x10f/0x380 [ 505.521719][T12417] ? lockdep_init_map_type+0x5c/0x280 [ 505.521759][T12417] ? __pfx_setup_net+0x10/0x10 [ 505.521799][T12417] ? debug_mutex_init+0x37/0x70 [ 505.521830][T12417] copy_net_ns+0x2a6/0x5f0 [ 505.521881][T12417] create_new_namespaces+0x3ea/0xa90 [ 505.521928][T12417] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 505.521969][T12417] ksys_unshare+0x45b/0xa40 [ 505.522014][T12417] ? __pfx_ksys_unshare+0x10/0x10 [ 505.522061][T12417] ? xfd_validate_state+0x61/0x180 [ 505.522123][T12417] __x64_sys_unshare+0x31/0x40 [ 505.522178][T12417] do_syscall_64+0xcd/0x490 [ 505.522225][T12417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.522274][T12417] RIP: 0033:0x7f0a92b8ebe9 [ 505.522299][T12417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.522334][T12417] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 505.522365][T12417] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 505.522388][T12417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 505.522407][T12417] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 505.522427][T12417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.522446][T12417] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 505.522490][T12417] [ 506.637483][T12435] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1360'. [ 506.682529][T12435] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1360'. [ 506.793998][T12435] netlink: 290 bytes leftover after parsing attributes in process `syz.1.1360'. [ 506.813487][T12435] veth0_macvtap: left promiscuous mode [ 507.441910][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'. [ 508.116473][T12466] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1366'. [ 509.270878][T12477] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 510.217619][T12506] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1374'. [ 510.469092][T12506] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1374'. [ 510.571202][T12512] netlink: 82 bytes leftover after parsing attributes in process `syz.1.1376'. [ 510.608902][T12513] netlink: 290 bytes leftover after parsing attributes in process `syz.4.1374'. [ 510.931917][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 510.964702][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.971427][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.347444][T12520] FAULT_INJECTION: forcing a failure. [ 511.347444][T12520] name failslab, interval 1, probability 0, space 0, times 0 [ 511.360699][T12520] CPU: 0 UID: 0 PID: 12520 Comm: syz.4.1378 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 511.360733][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.360748][T12520] Call Trace: [ 511.360756][T12520] [ 511.360764][T12520] dump_stack_lvl+0x16c/0x1f0 [ 511.360799][T12520] should_fail_ex+0x512/0x640 [ 511.360832][T12520] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 511.360871][T12520] should_failslab+0xc2/0x120 [ 511.360902][T12520] __kmalloc_cache_node_noprof+0x6d/0x420 [ 511.360930][T12520] ? bdi_alloc+0x44/0x170 [ 511.360965][T12520] bdi_alloc+0x44/0x170 [ 511.360996][T12520] __alloc_disk_node+0xac/0x630 [ 511.361033][T12520] __blk_mq_alloc_disk+0x89/0x120 [ 511.361065][T12520] loop_add+0x490/0xb70 [ 511.361091][T12520] ? __pfx_loop_add+0x10/0x10 [ 511.361133][T12520] ? find_held_lock+0x2b/0x80 [ 511.361161][T12520] loop_control_ioctl+0x13e/0x630 [ 511.361187][T12520] ? __pfx_loop_control_ioctl+0x10/0x10 [ 511.361216][T12520] ? __pfx_loop_control_ioctl+0x10/0x10 [ 511.361243][T12520] __x64_sys_ioctl+0x18e/0x210 [ 511.361282][T12520] do_syscall_64+0xcd/0x490 [ 511.361314][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.361338][T12520] RIP: 0033:0x7f0a92b8ebe9 [ 511.361356][T12520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.361379][T12520] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.361402][T12520] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 511.361418][T12520] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 511.361432][T12520] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 511.361447][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.361460][T12520] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 511.361490][T12520] [ 513.261067][T12550] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 514.592654][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 514.711322][T12574] block nbd0: Unsupported socket: shutdown callout must be supported. [ 515.652352][ T30] audit: type=1800 audit(6049882699.119:19): pid=12596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1397" name="discovery_nqn" dev="configfs" ino=33338 res=0 errno=0 [ 515.864505][T12601] FAULT_INJECTION: forcing a failure. [ 515.864505][T12601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.907921][T12601] CPU: 0 UID: 0 PID: 12601 Comm: syz.3.1396 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 515.907974][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.907995][T12601] Call Trace: [ 515.908008][T12601] [ 515.908021][T12601] dump_stack_lvl+0x16c/0x1f0 [ 515.908091][T12601] should_fail_ex+0x512/0x640 [ 515.908150][T12601] strncpy_from_user+0x3b/0x2e0 [ 515.908197][T12601] getname_flags.part.0+0x8f/0x550 [ 515.908256][T12601] getname_flags+0x93/0xf0 [ 515.908293][T12601] do_sys_openat2+0xb8/0x1d0 [ 515.908344][T12601] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.908409][T12601] __x64_sys_openat+0x174/0x210 [ 515.908461][T12601] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.908531][T12601] do_syscall_64+0xcd/0x490 [ 515.908576][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.908608][T12601] RIP: 0033:0x7f361a38ebe9 [ 515.908635][T12601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.908668][T12601] RSP: 002b:00007f361b193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.908701][T12601] RAX: ffffffffffffffda RBX: 00007f361a5b5fa0 RCX: 00007f361a38ebe9 [ 515.908723][T12601] RDX: 0000000000008001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 515.908743][T12601] RBP: 00007f361a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 515.908763][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.908783][T12601] R13: 00007f361a5b6038 R14: 00007f361a5b5fa0 R15: 00007ffd2ce03408 [ 515.908826][T12601] [ 518.701712][T12664] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1409'. [ 519.126961][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 519.671110][T12682] FAULT_INJECTION: forcing a failure. [ 519.671110][T12682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.777915][T12682] CPU: 1 UID: 0 PID: 12682 Comm: syz.0.1414 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 519.777965][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.777985][T12682] Call Trace: [ 519.777996][T12682] [ 519.778008][T12682] dump_stack_lvl+0x16c/0x1f0 [ 519.778056][T12682] should_fail_ex+0x512/0x640 [ 519.778109][T12682] strncpy_from_user+0x3b/0x2e0 [ 519.778157][T12682] getname_flags.part.0+0x8f/0x550 [ 519.778215][T12682] getname_flags+0x93/0xf0 [ 519.778250][T12682] do_sys_openat2+0xb8/0x1d0 [ 519.778300][T12682] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.778366][T12682] __x64_sys_openat+0x174/0x210 [ 519.778418][T12682] ? __pfx___x64_sys_openat+0x10/0x10 [ 519.778485][T12682] do_syscall_64+0xcd/0x490 [ 519.778524][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.778557][T12682] RIP: 0033:0x7f841018ebe9 [ 519.778581][T12682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.778615][T12682] RSP: 002b:00007f8410fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 519.778648][T12682] RAX: ffffffffffffffda RBX: 00007f84103b5fa0 RCX: 00007f841018ebe9 [ 519.778670][T12682] RDX: 0000000000008001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 519.778703][T12682] RBP: 00007f8410211e19 R08: 0000000000000000 R09: 0000000000000000 [ 519.778724][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.778745][T12682] R13: 00007f84103b6038 R14: 00007f84103b5fa0 R15: 00007ffc4cb49fb8 [ 519.778788][T12682] [ 519.941130][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.588310][T12691] FAULT_INJECTION: forcing a failure. [ 520.588310][T12691] name failslab, interval 1, probability 0, space 0, times 0 [ 520.643931][T12691] CPU: 1 UID: 0 PID: 12691 Comm: syz.4.1416 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 520.643976][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.643996][T12691] Call Trace: [ 520.644007][T12691] [ 520.644020][T12691] dump_stack_lvl+0x16c/0x1f0 [ 520.644067][T12691] should_fail_ex+0x512/0x640 [ 520.644112][T12691] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 520.644155][T12691] should_failslab+0xc2/0x120 [ 520.644201][T12691] __kmalloc_cache_noprof+0x6a/0x3e0 [ 520.644236][T12691] ? kernfs_fop_open+0x244/0xda0 [ 520.644275][T12691] kernfs_fop_open+0x244/0xda0 [ 520.644318][T12691] do_dentry_open+0x97f/0x1530 [ 520.644361][T12691] ? __pfx_kernfs_fop_open+0x10/0x10 [ 520.644400][T12691] vfs_open+0x82/0x3f0 [ 520.644446][T12691] path_openat+0x1de4/0x2cb0 [ 520.644495][T12691] ? __pfx_path_openat+0x10/0x10 [ 520.644536][T12691] do_filp_open+0x20b/0x470 [ 520.644569][T12691] ? __pfx_do_filp_open+0x10/0x10 [ 520.644628][T12691] ? alloc_fd+0x471/0x7d0 [ 520.644666][T12691] do_sys_openat2+0x11b/0x1d0 [ 520.644709][T12691] ? __pfx_do_sys_openat2+0x10/0x10 [ 520.644753][T12691] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 520.644801][T12691] __x64_sys_openat+0x174/0x210 [ 520.644844][T12691] ? __pfx___x64_sys_openat+0x10/0x10 [ 520.644909][T12691] do_syscall_64+0xcd/0x490 [ 520.644948][T12691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.644977][T12691] RIP: 0033:0x7f0a92b8ebe9 [ 520.645000][T12691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.645028][T12691] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.645056][T12691] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 520.645075][T12691] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 520.645093][T12691] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 520.645109][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.645125][T12691] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 520.645160][T12691] [ 520.861493][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.958379][T12739] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1423'. [ 523.262763][T12747] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1426'. [ 524.869351][T12760] FAULT_INJECTION: forcing a failure. [ 524.869351][T12760] name failslab, interval 1, probability 0, space 0, times 0 [ 524.882386][T12760] CPU: 0 UID: 0 PID: 12760 Comm: syz.0.1429 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 524.882433][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.882454][T12760] Call Trace: [ 524.882465][T12760] [ 524.882478][T12760] dump_stack_lvl+0x16c/0x1f0 [ 524.882532][T12760] should_fail_ex+0x512/0x640 [ 524.882573][T12760] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 524.882606][T12760] should_failslab+0xc2/0x120 [ 524.882645][T12760] __kmalloc_cache_noprof+0x6a/0x3e0 [ 524.882674][T12760] ? kernfs_fop_open+0x244/0xda0 [ 524.882708][T12760] kernfs_fop_open+0x244/0xda0 [ 524.882743][T12760] do_dentry_open+0x97f/0x1530 [ 524.882778][T12760] ? __pfx_kernfs_fop_open+0x10/0x10 [ 524.882811][T12760] vfs_open+0x82/0x3f0 [ 524.882856][T12760] path_openat+0x1de4/0x2cb0 [ 524.882901][T12760] ? __pfx_path_openat+0x10/0x10 [ 524.882942][T12760] do_filp_open+0x20b/0x470 [ 524.882975][T12760] ? __pfx_do_filp_open+0x10/0x10 [ 524.883032][T12760] ? alloc_fd+0x471/0x7d0 [ 524.883071][T12760] do_sys_openat2+0x11b/0x1d0 [ 524.883113][T12760] ? __pfx_do_sys_openat2+0x10/0x10 [ 524.883159][T12760] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 524.883206][T12760] __x64_sys_openat+0x174/0x210 [ 524.883250][T12760] ? __pfx___x64_sys_openat+0x10/0x10 [ 524.883310][T12760] do_syscall_64+0xcd/0x490 [ 524.883348][T12760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.883376][T12760] RIP: 0033:0x7f841018ebe9 [ 524.883398][T12760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.883425][T12760] RSP: 002b:00007f8410fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 524.883453][T12760] RAX: ffffffffffffffda RBX: 00007f84103b5fa0 RCX: 00007f841018ebe9 [ 524.883471][T12760] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 524.883488][T12760] RBP: 00007f8410211e19 R08: 0000000000000000 R09: 0000000000000000 [ 524.883505][T12760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.883527][T12760] R13: 00007f84103b6038 R14: 00007f84103b5fa0 R15: 00007ffc4cb49fb8 [ 524.883562][T12760] [ 525.780944][T12784] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 526.227495][T12792] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1435'. [ 526.244488][T12792] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1435'. [ 526.339425][T12797] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1435'. [ 526.852273][T12808] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1436'. [ 529.078315][T12846] FAULT_INJECTION: forcing a failure. [ 529.078315][T12846] name failslab, interval 1, probability 0, space 0, times 0 [ 529.091518][T12846] CPU: 1 UID: 0 PID: 12846 Comm: syz.3.1447 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 529.091567][T12846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.091586][T12846] Call Trace: [ 529.091598][T12846] [ 529.091609][T12846] dump_stack_lvl+0x16c/0x1f0 [ 529.091657][T12846] should_fail_ex+0x512/0x640 [ 529.091702][T12846] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 529.091764][T12846] should_failslab+0xc2/0x120 [ 529.091806][T12846] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 529.091845][T12846] ? lockdep_init_map_type+0x5c/0x280 [ 529.091895][T12846] ? seq_open+0x55/0x170 [ 529.091948][T12846] seq_open+0x55/0x170 [ 529.091994][T12846] kernfs_fop_open+0x59f/0xda0 [ 529.092034][T12846] do_dentry_open+0x97f/0x1530 [ 529.092075][T12846] ? __pfx_kernfs_fop_open+0x10/0x10 [ 529.092125][T12846] vfs_open+0x82/0x3f0 [ 529.092177][T12846] path_openat+0x1de4/0x2cb0 [ 529.092227][T12846] ? __pfx_path_openat+0x10/0x10 [ 529.092275][T12846] do_filp_open+0x20b/0x470 [ 529.092314][T12846] ? __pfx_do_filp_open+0x10/0x10 [ 529.092381][T12846] ? alloc_fd+0x471/0x7d0 [ 529.092426][T12846] do_sys_openat2+0x11b/0x1d0 [ 529.092475][T12846] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.092525][T12846] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 529.092579][T12846] __x64_sys_openat+0x174/0x210 [ 529.092629][T12846] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.092693][T12846] do_syscall_64+0xcd/0x490 [ 529.092738][T12846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.092772][T12846] RIP: 0033:0x7f361a38ebe9 [ 529.092813][T12846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.092845][T12846] RSP: 002b:00007f361b193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.092876][T12846] RAX: ffffffffffffffda RBX: 00007f361a5b5fa0 RCX: 00007f361a38ebe9 [ 529.092897][T12846] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 529.092918][T12846] RBP: 00007f361a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 529.092938][T12846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.092956][T12846] R13: 00007f361a5b6038 R14: 00007f361a5b5fa0 R15: 00007ffd2ce03408 [ 529.093000][T12846] [ 529.315726][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.731756][T12857] FAULT_INJECTION: forcing a failure. [ 529.731756][T12857] name failslab, interval 1, probability 0, space 0, times 0 [ 529.746388][T12857] CPU: 1 UID: 0 PID: 12857 Comm: syz.4.1451 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 529.746436][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.746456][T12857] Call Trace: [ 529.746467][T12857] [ 529.746479][T12857] dump_stack_lvl+0x16c/0x1f0 [ 529.746527][T12857] should_fail_ex+0x512/0x640 [ 529.746571][T12857] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 529.746610][T12857] should_failslab+0xc2/0x120 [ 529.746654][T12857] __kmalloc_cache_noprof+0x6a/0x3e0 [ 529.746709][T12857] ? kernfs_fop_open+0x244/0xda0 [ 529.746749][T12857] kernfs_fop_open+0x244/0xda0 [ 529.746791][T12857] do_dentry_open+0x97f/0x1530 [ 529.746833][T12857] ? __pfx_kernfs_fop_open+0x10/0x10 [ 529.746871][T12857] vfs_open+0x82/0x3f0 [ 529.746926][T12857] path_openat+0x1de4/0x2cb0 [ 529.746986][T12857] ? __pfx_path_openat+0x10/0x10 [ 529.747037][T12857] do_filp_open+0x20b/0x470 [ 529.747077][T12857] ? __pfx_do_filp_open+0x10/0x10 [ 529.747149][T12857] ? alloc_fd+0x471/0x7d0 [ 529.747196][T12857] do_sys_openat2+0x11b/0x1d0 [ 529.747245][T12857] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.747299][T12857] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 529.747355][T12857] __x64_sys_openat+0x174/0x210 [ 529.747405][T12857] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.747475][T12857] do_syscall_64+0xcd/0x490 [ 529.747520][T12857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.747553][T12857] RIP: 0033:0x7f0a92b8ebe9 [ 529.747578][T12857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.747610][T12857] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.747642][T12857] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 529.747664][T12857] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 529.747686][T12857] RBP: 00007f0a92c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 529.747707][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.747727][T12857] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 529.747771][T12857] [ 529.964356][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.967283][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 548.210466][T13118] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1511'. [ 553.128556][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 556.756676][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'. [ 559.696367][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 563.308231][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'. [ 565.965767][T13412] netlink: 82 bytes leftover after parsing attributes in process `syz.0.1570'. [ 569.774150][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 569.984287][T13486] netlink: 82 bytes leftover after parsing attributes in process `syz.4.1584'. [ 572.069967][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.070048][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.417733][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 573.825460][T13532] netlink: 82 bytes leftover after parsing attributes in process `syz.3.1596'. [ 576.771494][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'. [ 580.868317][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 583.517672][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 591.045952][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 596.892656][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 598.950494][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 601.395602][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 601.491907][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 604.847475][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 605.611677][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 608.356857][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1720'. [ 608.783178][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 609.701487][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'. [ 613.214339][T14128] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1738'. [ 613.434027][ T30] audit: type=1800 audit(6049882797.418:20): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1741" name="discovery_nqn" dev="configfs" ino=38903 res=0 errno=0 [ 615.837245][T14164] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 616.325281][T14178] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1752'. [ 616.948380][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1754'. [ 618.961641][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1761'. [ 620.003156][T14217] kvm: kvm [14214]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 620.411540][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 621.385195][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 622.174883][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 624.943178][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1779'. [ 626.487926][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 626.552634][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 627.925311][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 628.809084][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 629.626390][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'. [ 630.691601][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 630.945952][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 633.189648][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.196238][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.957093][T14391] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1810'. [ 634.994365][T14409] kvm: kvm [14405]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 636.253845][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 636.303625][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1820'. [ 637.616677][T14443] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1825'. [ 637.627929][T14443] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1825'. [ 640.262495][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 642.590986][T14485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 644.588912][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 647.847519][T14563] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 648.622036][T14564] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 651.354733][T14625] ubi0: attaching mtd0 [ 651.443000][T14625] ubi0: scanning is finished [ 651.482840][T14625] ubi0: empty MTD device detected [ 652.220458][T14625] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 652.239637][T14625] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 652.280964][T14625] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 652.308913][T14625] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 652.327081][T14625] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 652.335945][T14625] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 652.344493][T14625] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2344746891 [ 652.386048][T14625] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 652.405282][T14628] ubi0: background thread "ubi_bgt0d" started, PID 14628 [ 654.219653][T14652] ubi: mtd0 is already attached to ubi0 [ 657.431204][T14693] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1886'. [ 657.881180][T14706] ubi: mtd0 is already attached to ubi0 [ 664.840048][T14807] ubi: mtd0 is already attached to ubi0 [ 668.843052][T14858] ubi: mtd0 is already attached to ubi0 [ 671.759286][T14918] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1941'. [ 671.791030][T14918] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1941'. [ 687.606934][T15181] FAULT_INJECTION: forcing a failure. [ 687.606934][T15181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.648788][T15181] CPU: 1 UID: 0 PID: 15181 Comm: syz.4.2006 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 687.648840][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 687.648860][T15181] Call Trace: [ 687.648872][T15181] [ 687.648884][T15181] dump_stack_lvl+0x16c/0x1f0 [ 687.648931][T15181] should_fail_ex+0x512/0x640 [ 687.648983][T15181] _copy_from_user+0x2e/0xd0 [ 687.649037][T15181] copy_msghdr_from_user+0x98/0x160 [ 687.649082][T15181] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 687.649134][T15181] ? __pfx__kstrtoull+0x10/0x10 [ 687.649181][T15181] ___sys_sendmsg+0xfe/0x1d0 [ 687.649226][T15181] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.649290][T15181] ? find_held_lock+0x2b/0x80 [ 687.649359][T15181] __sys_sendmmsg+0x200/0x420 [ 687.649408][T15181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 687.649466][T15181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 687.649526][T15181] ? fput+0x9b/0xd0 [ 687.649573][T15181] ? ksys_write+0x1ac/0x250 [ 687.649621][T15181] ? __pfx_ksys_write+0x10/0x10 [ 687.649666][T15181] __x64_sys_sendmmsg+0x9c/0x100 [ 687.649707][T15181] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.649745][T15181] do_syscall_64+0xcd/0x490 [ 687.649789][T15181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.649821][T15181] RIP: 0033:0x7f0a92b8ebe9 [ 687.649845][T15181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.649876][T15181] RSP: 002b:00007f0a93aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 687.649907][T15181] RAX: ffffffffffffffda RBX: 00007f0a92db5fa0 RCX: 00007f0a92b8ebe9 [ 687.649928][T15181] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 687.649948][T15181] RBP: 00007f0a93aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 687.649968][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.649987][T15181] R13: 00007f0a92db6038 R14: 00007f0a92db5fa0 R15: 00007ffebd674bd8 [ 687.650030][T15181] [ 687.848915][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.322688][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.329448][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.586381][T14946] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 703.624913][T15430] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2070'. [ 705.941003][T15467] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 706.888433][ T30] audit: type=1800 audit(6049882891.344:21): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2084" name="discovery_nqn" dev="configfs" ino=44681 res=0 errno=0 [ 716.227217][T15614] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2117'. [ 719.637411][T15665] can: request_module (can-proto-3) failed. [ 721.344923][T15665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 721.345249][T15665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 721.345470][T15665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 721.346873][T15665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 721.349759][T15681] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 722.009879][T14946] Bluetooth: hci0: command 0x0c1a tx timeout [ 723.229356][T15720] vivid-007: ================= START STATUS ================= [ 723.250552][T15720] vivid-007: Enable Output Cropping: true [ 723.267451][T15720] vivid-007: Enable Output Composing: true [ 723.279140][T15720] vivid-007: Enable Output Scaler: true [ 723.292009][T15720] vivid-007: Tx RGB Quantization Range: Automatic [ 723.335942][T15720] vivid-007: Transmit Mode: HDMI [ 723.355911][T15275] Bluetooth: hci1: command 0x0406 tx timeout [ 723.365639][T14946] Bluetooth: hci3: command 0x0c1a tx timeout [ 723.371787][T14946] Bluetooth: hci2: command 0x0c1a tx timeout [ 723.376519][T15720] vivid-007: Hotplug Present: 0x00000000 [ 723.404674][T15720] vivid-007: RxSense Present: 0x00000000 [ 723.410539][T15720] vivid-007: EDID Present: 0x00000000 [ 723.416330][T15720] vivid-007: ================== END STATUS ================== [ 726.017603][T15768] vivid-007: ================= START STATUS ================= [ 726.025507][T15768] vivid-007: Enable Output Cropping: true [ 726.031323][T15768] vivid-007: Enable Output Composing: true [ 726.037470][T15768] vivid-007: Enable Output Scaler: true [ 726.050368][T15768] vivid-007: Tx RGB Quantization Range: Automatic [ 726.071495][T15768] vivid-007: Transmit Mode: HDMI [ 726.092797][T15768] vivid-007: Hotplug Present: 0x00000000 [ 726.101651][T15768] vivid-007: RxSense Present: 0x00000000 [ 726.107408][T15768] vivid-007: EDID Present: 0x00000000 [ 726.128117][T15768] vivid-007: ================== END STATUS ================== [ 728.776945][T15814] can: request_module (can-proto-3) failed. [ 731.160789][T15814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 731.169190][T15814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 731.178726][T15814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 731.185012][T15814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 731.197125][T15816] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 731.635347][T15727] Bluetooth: hci0: command 0x0c1a tx timeout [ 733.224568][T15727] Bluetooth: hci1: command 0x0406 tx timeout [ 733.224629][T15727] Bluetooth: hci3: command 0x0c1a tx timeout [ 733.224673][T15727] Bluetooth: hci2: command 0x0c1a tx timeout [ 734.470509][T15886] can: request_module (can-proto-3) failed. [ 736.566917][T15727] Bluetooth: hci0: command 0x0c1a tx timeout [ 736.573247][T15889] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 736.824653][T15889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 736.843978][T15889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 736.853249][T15889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 736.894004][T15897] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 738.681814][T15727] Bluetooth: hci2: command 0x0c1a tx timeout [ 738.875123][T15727] Bluetooth: hci1: command 0x0406 tx timeout [ 738.883016][T15011] Bluetooth: hci3: command 0x0c1a tx timeout [ 755.433794][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.440417][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.535628][ T30] audit: type=1800 audit(6049882941.272:22): pid=16204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2263" name="discovery_nqn" dev="configfs" ino=50607 res=0 errno=0 [ 759.230263][T16242] FAULT_INJECTION: forcing a failure. [ 759.230263][T16242] name failslab, interval 1, probability 0, space 0, times 0 [ 759.244249][T16242] CPU: 1 UID: 0 PID: 16242 Comm: syz.3.2276 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 759.244282][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.244315][T16242] Call Trace: [ 759.244324][T16242] [ 759.244332][T16242] dump_stack_lvl+0x16c/0x1f0 [ 759.244365][T16242] should_fail_ex+0x512/0x640 [ 759.244403][T16242] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 759.244434][T16242] should_failslab+0xc2/0x120 [ 759.244465][T16242] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 759.244491][T16242] ? __pfx_acct_collect+0x10/0x10 [ 759.244526][T16242] ? taskstats_exit+0x654/0xbe0 [ 759.244563][T16242] taskstats_exit+0x654/0xbe0 [ 759.244597][T16242] ? __pfx_taskstats_exit+0x10/0x10 [ 759.244638][T16242] do_exit+0x5dc/0x2bf0 [ 759.244676][T16242] ? __pfx_do_exit+0x10/0x10 [ 759.244708][T16242] ? do_raw_spin_lock+0x12c/0x2b0 [ 759.244743][T16242] ? find_held_lock+0x2b/0x80 [ 759.244770][T16242] do_group_exit+0xd3/0x2a0 [ 759.244805][T16242] get_signal+0x2673/0x26d0 [ 759.244835][T16242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.244872][T16242] ? is_valid_madvise+0x34/0xd0 [ 759.244904][T16242] ? __pfx_get_signal+0x10/0x10 [ 759.244929][T16242] ? do_futex+0x122/0x350 [ 759.244959][T16242] ? __pfx_do_futex+0x10/0x10 [ 759.244991][T16242] arch_do_signal_or_restart+0x8f/0x790 [ 759.245024][T16242] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 759.245062][T16242] ? xfd_validate_state+0x61/0x180 [ 759.245095][T16242] ? __pfx_ksys_write+0x10/0x10 [ 759.245134][T16242] exit_to_user_mode_loop+0x84/0x110 [ 759.245170][T16242] do_syscall_64+0x3f6/0x490 [ 759.245202][T16242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.245225][T16242] RIP: 0033:0x7f361a38ebe9 [ 759.245244][T16242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.245268][T16242] RSP: 002b:00007f361b1930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 759.245291][T16242] RAX: fffffffffffffe00 RBX: 00007f361a5b5fa8 RCX: 00007f361a38ebe9 [ 759.245306][T16242] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f361a5b5fa8 [ 759.245319][T16242] RBP: 00007f361a5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 759.245333][T16242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.245346][T16242] R13: 00007f361a5b6038 R14: 00007ffd2ce03320 R15: 00007ffd2ce03408 [ 759.245375][T16242] [ 759.939091][ T30] audit: type=1800 audit(6049882944.689:23): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2280" name="discovery_nqn" dev="configfs" ino=49724 res=0 errno=0 [ 765.318781][T15011] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 768.756176][T15727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 768.767556][T15727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 768.813483][T15727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 768.843594][T15727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 768.851718][T15727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 769.957075][T15836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.022462][T16374] chnl_net:caif_netlink_parms(): no params data found [ 770.121956][T15836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.418652][T15836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.516935][T15836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.948490][T15011] Bluetooth: hci4: command tx timeout [ 771.036764][T16374] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.085845][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.105373][T16374] bridge_slave_0: entered allmulticast mode [ 771.172486][T16374] bridge_slave_0: entered promiscuous mode [ 771.232779][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.305489][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.396124][T16374] bridge_slave_1: entered allmulticast mode [ 771.412387][T16374] bridge_slave_1: entered promiscuous mode [ 772.320248][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.452548][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.618360][T16374] team0: Port device team_slave_0 added [ 772.689827][T16374] team0: Port device team_slave_1 added [ 772.926562][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.977903][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.005656][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.036017][T15011] Bluetooth: hci4: command tx timeout [ 773.039066][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.039091][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.039132][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.114654][T15836] bridge_slave_1: left allmulticast mode [ 773.114723][T15836] bridge_slave_1: left promiscuous mode [ 773.116170][T15836] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.184063][T15836] bridge_slave_0: left allmulticast mode [ 773.184101][T15836] bridge_slave_0: left promiscuous mode [ 773.184381][T15836] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.767717][T15836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.806969][T15836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.874051][T15836] bond0 (unregistering): Released all slaves [ 775.087294][T15727] Bluetooth: hci4: command tx timeout [ 775.242852][T16374] hsr_slave_0: entered promiscuous mode [ 775.279481][T16374] hsr_slave_1: entered promiscuous mode [ 775.291161][T16374] debugfs: 'hsr0' already exists in 'hsr' [ 775.300713][T16374] Cannot create hsr debugfs directory [ 777.156070][T15727] Bluetooth: hci4: command tx timeout [ 779.180680][T16374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 779.213644][T16374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 779.304023][T16374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 779.462383][T16374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 780.555620][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.835677][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.872628][T15100] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.879858][T15100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.076635][T15100] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.083794][T15100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.600464][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.037987][T16374] veth0_vlan: entered promiscuous mode [ 783.048123][T16374] veth1_vlan: entered promiscuous mode [ 783.103108][T16374] veth0_macvtap: entered promiscuous mode [ 783.107254][T16374] veth1_macvtap: entered promiscuous mode [ 783.124285][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.179781][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.274679][T15100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.288414][T15100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.323536][T15100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.369427][T15100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.300318][T15836] hsr_slave_0: left promiscuous mode [ 784.306951][T15836] hsr_slave_1: left promiscuous mode [ 784.321578][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.332118][T15836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.342307][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.351531][T15836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.407467][T15836] veth1_macvtap: left promiscuous mode [ 784.444162][T15836] veth1_vlan: left promiscuous mode [ 784.462661][T15836] veth0_vlan: left promiscuous mode [ 786.269928][T15836] team0 (unregistering): Port device team_slave_1 removed [ 786.361617][T15836] team0 (unregistering): Port device team_slave_0 removed [ 787.014116][T16604] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2354'. [ 787.116189][T14955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.161452][T14955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.296373][T15554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.332211][T15554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.466105][T16648] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2365'. [ 789.755005][T15011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 789.771072][T15011] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 789.784926][T15011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 789.807871][T15011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 789.823551][T15011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 789.837829][T14979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.094193][T14979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.255199][T14979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.370084][T14979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.457024][T14979] team0: left allmulticast mode [ 791.493415][T14979] team_slave_0: left allmulticast mode [ 791.512832][T14979] team_slave_1: left allmulticast mode [ 791.532637][T14979] team0: left promiscuous mode [ 791.537468][T14979] team_slave_0: left promiscuous mode [ 791.566250][T14979] team_slave_1: left promiscuous mode [ 791.578631][T14979] bridge0: port 3(team0) entered disabled state [ 791.608621][T14979] bridge_slave_1: left allmulticast mode [ 791.626340][T14979] bridge_slave_1: left promiscuous mode [ 791.640183][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.837054][T14979] bridge_slave_0: left allmulticast mode [ 791.858621][T14979] bridge_slave_0: left promiscuous mode [ 791.880858][T15011] Bluetooth: hci2: command tx timeout [ 791.888145][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.656773][T16688] FAULT_INJECTION: forcing a failure. [ 792.656773][T16688] name fail_futex, interval 1, probability 0, space 0, times 0 [ 792.693622][T16688] CPU: 1 UID: 0 PID: 16688 Comm: syz.1.2374 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 792.693661][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.693676][T16688] Call Trace: [ 792.693685][T16688] [ 792.693693][T16688] dump_stack_lvl+0x16c/0x1f0 [ 792.693729][T16688] should_fail_ex+0x512/0x640 [ 792.693766][T16688] get_futex_key+0x1d0/0x1560 [ 792.693798][T16688] ? __pfx_get_futex_key+0x10/0x10 [ 792.693825][T16688] ? futex_private_hash_put+0x176/0x300 [ 792.693861][T16688] futex_wake+0xea/0x530 [ 792.693893][T16688] ? find_held_lock+0x2b/0x80 [ 792.693916][T16688] ? shmctl_stat+0x4f6/0x720 [ 792.693947][T16688] ? __pfx_futex_wake+0x10/0x10 [ 792.693994][T16688] ? ksys_shmctl.constprop.0+0x1d4/0x380 [ 792.694033][T16688] do_futex+0x1e3/0x350 [ 792.694069][T16688] ? __pfx_do_futex+0x10/0x10 [ 792.694097][T16688] ? kill_proc_info+0x9c/0x1b0 [ 792.694126][T16688] ? kill_pid_info_type+0x102/0x2a0 [ 792.694162][T16688] __x64_sys_futex+0x1e0/0x4c0 [ 792.694196][T16688] ? __pfx___x64_sys_futex+0x10/0x10 [ 792.694238][T16688] do_syscall_64+0xcd/0x490 [ 792.694270][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.694295][T16688] RIP: 0033:0x7f1edd98ebe9 [ 792.694315][T16688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.694338][T16688] RSP: 002b:00007f1ede7a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 792.694361][T16688] RAX: ffffffffffffffda RBX: 00007f1eddbb5fa8 RCX: 00007f1edd98ebe9 [ 792.694377][T16688] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1eddbb5fac [ 792.694391][T16688] RBP: 00007f1eddbb5fa0 R08: 00007f1ede7a6000 R09: 0000000000000000 [ 792.694406][T16688] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 792.694420][T16688] R13: 00007f1eddbb6038 R14: 00007ffd632a1d60 R15: 00007ffd632a1e48 [ 792.694450][T16688] [ 793.506347][T14979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.519180][T14979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.532919][T14979] bond0 (unregistering): Released all slaves [ 793.558432][T16650] chnl_net:caif_netlink_parms(): no params data found [ 793.952366][T15011] Bluetooth: hci2: command tx timeout [ 794.318064][T16650] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.386404][T16650] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.428742][T16650] bridge_slave_0: entered allmulticast mode [ 794.544457][T16650] bridge_slave_0: entered promiscuous mode [ 794.710149][T16650] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.802477][T16650] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.822843][T16650] bridge_slave_1: entered allmulticast mode [ 794.865004][T16650] bridge_slave_1: entered promiscuous mode [ 795.404199][T16650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.473494][T16650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.754694][T16736] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 795.881768][T16650] team0: Port device team_slave_0 added [ 795.926323][T16650] team0: Port device team_slave_1 added [ 796.018060][T15011] Bluetooth: hci2: command tx timeout [ 796.058030][T16650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.065026][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.098304][T16650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.134061][T16650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.198282][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.296525][T16650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.707840][T16650] hsr_slave_0: entered promiscuous mode [ 796.758906][T16650] hsr_slave_1: entered promiscuous mode [ 796.776181][T16650] debugfs: 'hsr0' already exists in 'hsr' [ 796.782077][T16650] Cannot create hsr debugfs directory [ 798.087439][T15011] Bluetooth: hci2: command tx timeout [ 799.483835][T14979] hsr_slave_0: left promiscuous mode [ 799.507744][T14979] hsr_slave_1: left promiscuous mode [ 799.537813][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.595654][T14979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.753859][T14979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.797923][T14979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.835337][T14979] veth1_macvtap: left promiscuous mode [ 799.845713][T14979] veth1_vlan: left promiscuous mode [ 799.853780][T14979] veth0_vlan: left promiscuous mode [ 801.474189][T14979] team0 (unregistering): Port device team_slave_1 removed [ 801.548001][T14979] team0 (unregistering): Port device team_slave_0 removed [ 802.547714][T15011] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 802.821142][T16650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 802.847196][T16650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 802.857707][T16650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 802.897964][T16650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.129816][T16650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.177217][T16650] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.205924][T14945] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.213224][T14945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.239296][T14945] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.246595][T14945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.877757][T16650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.012922][T16650] veth0_vlan: entered promiscuous mode [ 804.051185][T16650] veth1_vlan: entered promiscuous mode [ 804.105216][T16650] veth0_macvtap: entered promiscuous mode [ 804.154685][T16650] veth1_macvtap: entered promiscuous mode [ 804.208938][T16650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.215592][T15727] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 804.223035][T16650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.289588][T14955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.323095][T15836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.421774][T15836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.489003][T15836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.779213][T15836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.814642][T15836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.935172][T15555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.992857][T15555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.308042][T16928] FAULT_INJECTION: forcing a failure. [ 807.308042][T16928] name failslab, interval 1, probability 0, space 0, times 0 [ 807.357357][T16928] CPU: 0 UID: 0 PID: 16928 Comm: syz.0.2414 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 807.357406][T16928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.357425][T16928] Call Trace: [ 807.357436][T16928] [ 807.357448][T16928] dump_stack_lvl+0x16c/0x1f0 [ 807.357494][T16928] should_fail_ex+0x512/0x640 [ 807.357535][T16928] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 807.357577][T16928] should_failslab+0xc2/0x120 [ 807.357620][T16928] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 807.357665][T16928] ? rcu_is_watching+0x12/0xc0 [ 807.357697][T16928] ? get_random_u64+0x57c/0x7d0 [ 807.357726][T16928] ? prepare_creds+0x2c/0x7d0 [ 807.357779][T16928] prepare_creds+0x2c/0x7d0 [ 807.357829][T16928] copy_creds+0xa7/0xa50 [ 807.357882][T16928] copy_process+0xff6/0x7690 [ 807.357942][T16928] ? __pfx_copy_process+0x10/0x10 [ 807.358002][T16928] kernel_clone+0xfc/0x930 [ 807.358047][T16928] ? __pfx_kernel_clone+0x10/0x10 [ 807.358103][T16928] ? __mutex_unlock_slowpath+0x163/0x800 [ 807.358150][T16928] __do_sys_clone+0xce/0x120 [ 807.358191][T16928] ? __pfx___do_sys_clone+0x10/0x10 [ 807.358250][T16928] ? ksys_write+0x1ac/0x250 [ 807.358286][T16928] ? __pfx_ksys_write+0x10/0x10 [ 807.358334][T16928] do_syscall_64+0xcd/0x490 [ 807.358378][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.358410][T16928] RIP: 0033:0x7f841018ebe9 [ 807.358435][T16928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.358466][T16928] RSP: 002b:00007f8410fc7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 807.358497][T16928] RAX: ffffffffffffffda RBX: 00007f84103b6090 RCX: 00007f841018ebe9 [ 807.358518][T16928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 807.358538][T16928] RBP: 00007f8410fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 807.358558][T16928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 807.358578][T16928] R13: 00007f84103b6128 R14: 00007f84103b6090 R15: 00007ffc4cb49fb8 [ 807.358620][T16928] [ 811.016982][T16992] netlink: 346 bytes leftover after parsing attributes in process `syz.4.2427'. [ 814.481843][T15727] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 816.558260][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.564833][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.420671][T17109] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 821.579529][T15011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 821.592783][T15011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 821.604706][T15011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 821.639358][T15011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 821.650410][T15011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 821.836267][T17127] ================================================================== [ 821.844427][T17127] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 821.852358][T17127] Read of size 8 at addr ffff888028e0a000 by task syz.3.2462/17127 [ 821.860276][T17127] [ 821.862617][T17127] CPU: 1 UID: 0 PID: 17127 Comm: syz.3.2462 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 821.862650][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.862666][T17127] Call Trace: [ 821.862676][T17127] [ 821.862685][T17127] dump_stack_lvl+0x116/0x1f0 [ 821.862719][T17127] print_report+0xcd/0x630 [ 821.862752][T17127] ? __virt_addr_valid+0x81/0x610 [ 821.862782][T17127] ? __phys_addr+0xe8/0x180 [ 821.862812][T17127] ? force_devcd_write+0x312/0x340 [ 821.862844][T17127] kasan_report+0xe0/0x110 [ 821.862876][T17127] ? force_devcd_write+0x312/0x340 [ 821.862912][T17127] force_devcd_write+0x312/0x340 [ 821.862945][T17127] ? __pfx_force_devcd_write+0x10/0x10 [ 821.862977][T17127] ? __debugfs_file_get+0x1fe/0x840 [ 821.863015][T17127] ? __pfx___debugfs_file_get+0x10/0x10 [ 821.863057][T17127] full_proxy_write+0x12e/0x1a0 [ 821.863095][T17127] ? __pfx_full_proxy_write+0x10/0x10 [ 821.863132][T17127] vfs_write+0x29d/0x11d0 [ 821.863163][T17127] ? __pfx___mutex_lock+0x10/0x10 [ 821.863195][T17127] ? __pfx_vfs_write+0x10/0x10 [ 821.863227][T17127] ? __fget_files+0x20e/0x3c0 [ 821.863266][T17127] ksys_write+0x12a/0x250 [ 821.863301][T17127] ? __pfx_ksys_write+0x10/0x10 [ 821.863358][T17127] do_syscall_64+0xcd/0x490 [ 821.863394][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.863418][T17127] RIP: 0033:0x7f9b5738ebe9 [ 821.863437][T17127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.863461][T17127] RSP: 002b:00007f9b581cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 821.863482][T17127] RAX: ffffffffffffffda RBX: 00007f9b575b5fa0 RCX: 00007f9b5738ebe9 [ 821.863497][T17127] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 821.863511][T17127] RBP: 00007f9b57411e19 R08: 0000000000000000 R09: 0000000000000000 [ 821.863530][T17127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.863551][T17127] R13: 00007f9b575b6038 R14: 00007f9b575b5fa0 R15: 00007ffc6015b308 [ 821.863575][T17127] [ 821.863582][T17127] [ 822.071968][T17127] Allocated by task 5859: [ 822.076317][T17127] kasan_save_stack+0x33/0x60 [ 822.081036][T17127] kasan_save_track+0x14/0x30 [ 822.085741][T17127] __kasan_kmalloc+0xaa/0xb0 [ 822.090397][T17127] vhci_open+0x4c/0x430 [ 822.094589][T17127] misc_open+0x35a/0x420 [ 822.098856][T17127] chrdev_open+0x231/0x6a0 [ 822.103396][T17127] do_dentry_open+0x97f/0x1530 [ 822.108205][T17127] vfs_open+0x82/0x3f0 [ 822.112335][T17127] path_openat+0x1de4/0x2cb0 [ 822.116972][T17127] do_filp_open+0x20b/0x470 [ 822.121517][T17127] do_sys_openat2+0x11b/0x1d0 [ 822.126241][T17127] __x64_sys_openat+0x174/0x210 [ 822.131138][T17127] do_syscall_64+0xcd/0x490 [ 822.135683][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.141603][T17127] [ 822.143961][T17127] Freed by task 8121: [ 822.147954][T17127] kasan_save_stack+0x33/0x60 [ 822.152656][T17127] kasan_save_track+0x14/0x30 [ 822.157361][T17127] kasan_save_free_info+0x3b/0x60 [ 822.162429][T17127] __kasan_slab_free+0x60/0x70 [ 822.167235][T17127] kfree+0x2b4/0x4d0 [ 822.171158][T17127] vhci_release+0xbb/0xf0 [ 822.175529][T17127] __fput+0x3ff/0xb70 [ 822.179549][T17127] task_work_run+0x150/0x240 [ 822.184209][T17127] do_exit+0x86f/0x2bf0 [ 822.188406][T17127] do_group_exit+0xd3/0x2a0 [ 822.193051][T17127] get_signal+0x2673/0x26d0 [ 822.197598][T17127] arch_do_signal_or_restart+0x8f/0x790 [ 822.203275][T17127] exit_to_user_mode_loop+0x84/0x110 [ 822.208704][T17127] do_syscall_64+0x3f6/0x490 [ 822.213515][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.219437][T17127] [ 822.221778][T17127] The buggy address belongs to the object at ffff888028e0a000 [ 822.221778][T17127] which belongs to the cache kmalloc-1k of size 1024 [ 822.235855][T17127] The buggy address is located 0 bytes inside of [ 822.235855][T17127] freed 1024-byte region [ffff888028e0a000, ffff888028e0a400) [ 822.249603][T17127] [ 822.251959][T17127] The buggy address belongs to the physical page: [ 822.258406][T17127] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28e08 [ 822.267194][T17127] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 822.275718][T17127] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 822.283355][T17127] page_type: f5(slab) [ 822.287366][T17127] raw: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122 [ 822.296005][T17127] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 822.304818][T17127] head: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122 [ 822.313570][T17127] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 822.322381][T17127] head: 00fff00000000003 ffffea0000a38201 00000000ffffffff 00000000ffffffff [ 822.331077][T17127] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 822.339767][T17127] page dumped because: kasan: bad access detected [ 822.346209][T17127] page_owner tracks the page as allocated [ 822.351938][T17127] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 59, tgid 59 (kworker/u8:4), ts 18740863580, free_ts 0 [ 822.370301][T17127] post_alloc_hook+0x1c0/0x230 [ 822.375105][T17127] get_page_from_freelist+0x132b/0x38e0 [ 822.380708][T17127] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 822.386633][T17127] new_slab+0x94/0x330 [ 822.390724][T17127] ___slab_alloc+0xcf2/0x1740 [ 822.395448][T17127] __slab_alloc.constprop.0+0x56/0xb0 [ 822.400939][T17127] __kmalloc_cache_node_noprof+0x100/0x420 [ 822.406774][T17127] blk_mq_alloc_and_init_hctx+0x639/0x11c0 [ 822.412716][T17127] __blk_mq_realloc_hw_ctxs+0x495/0x610 [ 822.418313][T17127] blk_mq_init_allocated_queue+0x3af/0x1240 [ 822.424245][T17127] blk_mq_alloc_queue+0x1bb/0x280 [ 822.429315][T17127] scsi_alloc_sdev+0x888/0xd70 [ 822.434117][T17127] scsi_probe_and_add_lun+0x76b/0xd80 [ 822.439520][T17127] __scsi_scan_target+0x1e8/0x580 [ 822.444578][T17127] scsi_scan_channel+0x149/0x1e0 [ 822.449560][T17127] scsi_scan_host_selected+0x302/0x400 [ 822.455054][T17127] page_owner free stack trace missing [ 822.460518][T17127] [ 822.462854][T17127] Memory state around the buggy address: [ 822.468497][T17127] ffff888028e09f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 822.476581][T17127] ffff888028e09f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 822.484750][T17127] >ffff888028e0a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.492823][T17127] ^ [ 822.496909][T17127] ffff888028e0a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.504989][T17127] ffff888028e0a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.513168][T17127] ================================================================== [ 823.066572][T15836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.135288][T17127] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 823.142581][T17127] CPU: 0 UID: 0 PID: 17127 Comm: syz.3.2462 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 823.152941][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 823.163022][T17127] Call Trace: [ 823.166326][T17127] [ 823.169283][T17127] dump_stack_lvl+0x3d/0x1f0 [ 823.173921][T17127] vpanic+0x6e8/0x7a0 [ 823.177948][T17127] ? __pfx_vpanic+0x10/0x10 [ 823.182494][T17127] ? __pfx_vprintk_emit+0x10/0x10 [ 823.187550][T17127] ? force_devcd_write+0x312/0x340 [ 823.192696][T17127] panic+0xca/0xd0 [ 823.196459][T17127] ? __pfx_panic+0x10/0x10 [ 823.201005][T17127] ? force_devcd_write+0x312/0x340 [ 823.206158][T17127] ? preempt_schedule_common+0x44/0xc0 [ 823.211651][T17127] ? preempt_schedule_thunk+0x16/0x30 [ 823.217107][T17127] check_panic_on_warn+0xab/0xb0 [ 823.222102][T17127] end_report+0x107/0x170 [ 823.226476][T17127] kasan_report+0xee/0x110 [ 823.230954][T17127] ? force_devcd_write+0x312/0x340 [ 823.236110][T17127] force_devcd_write+0x312/0x340 [ 823.241100][T17127] ? __pfx_force_devcd_write+0x10/0x10 [ 823.246601][T17127] ? __debugfs_file_get+0x1fe/0x840 [ 823.251842][T17127] ? __pfx___debugfs_file_get+0x10/0x10 [ 823.257444][T17127] full_proxy_write+0x12e/0x1a0 [ 823.262339][T17127] ? __pfx_full_proxy_write+0x10/0x10 [ 823.267769][T17127] vfs_write+0x29d/0x11d0 [ 823.272161][T17127] ? __pfx___mutex_lock+0x10/0x10 [ 823.277228][T17127] ? __pfx_vfs_write+0x10/0x10 [ 823.282036][T17127] ? __fget_files+0x20e/0x3c0 [ 823.286752][T17127] ksys_write+0x12a/0x250 [ 823.291151][T17127] ? __pfx_ksys_write+0x10/0x10 [ 823.296045][T17127] do_syscall_64+0xcd/0x490 [ 823.300594][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.306521][T17127] RIP: 0033:0x7f9b5738ebe9 [ 823.310956][T17127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.330854][T17127] RSP: 002b:00007f9b581cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 823.339304][T17127] RAX: ffffffffffffffda RBX: 00007f9b575b5fa0 RCX: 00007f9b5738ebe9 [ 823.347395][T17127] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 823.355393][T17127] RBP: 00007f9b57411e19 R08: 0000000000000000 R09: 0000000000000000 [ 823.363391][T17127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.371647][T17127] R13: 00007f9b575b6038 R14: 00007f9b575b5fa0 R15: 00007ffc6015b308 [ 823.379655][T17127] [ 823.383145][T17127] Kernel Offset: disabled [ 823.387525][T17127] Rebooting in 86400 seconds..