last executing test programs: 10.550984322s ago: executing program 0 (id=2292): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)="983561f0131eddbf3e5f2c7d0805cae0e37229a616126683bdedd7fd271f7e7866295decb990364c9739b345a9426dd639e4a1d74ceb73983dd331746b8a9217e14b416e443bf64f8a9c51c46bdda3e0dc36fa242cdc121e11d979b4779faad457ad4de45e9d18eececcb02da3ab55be5772ef552925299775c71c3252f20170d65f0213444b3199fd627f7e641c67adeab14dddf0f5e6f3d8543d77306485150a6a7f3cd43e0b065dcebd39a8a61a26f4285765fe4af7bf67a2dd1584b4c33d8c60e32faae1f55cb6c097581d7b4211f7747c5472c5a952aa924369d267279f4130c3f38d1c80bed6ebcf810516a86c896444010e1b3b6468bb3f2238c24e760506cbf07be9fecc284d4ac8bb5b98344b01d6f56c2b17f5d8edd569c4fea1c29517b77acb76c390e7aaf9dc4ea426ef16b66d73a13d9640286e35f222cc705621f84de5a86a96e800f2844e57d80ca0c6ba1246a2d86f74000478fbac7c5898a82a025465b4f383b799b9ea980510a20e47743cfd3de585e38e8d67c3195fd2dfb21ad114ee934d11a451de46bd4e91c3919efad4f7778b50319a98017e3b0ef11c95c46d8b697a4fb602cc2f7afe2cd30842ff1de3c10397e9bcb076304ce0908b195f8c4369fd95d805919273e03a9b78b274539fb28ce813bef85729eeee5fa6240a55eb99888be4d8f112d557c9f2918cf62537a38e978595fa839cc41dc2f98981709bb0c858ef91b3883d79168f71124cf894d8c77bb95b8a8a80ce677aa2bcc4360db3f6d538019a5dae287e29c3d870b9e742244efc1ed2d297c028fe90b7bc1292e93c679f9c1b74cc83077eea5299a25f0b60e64dc9f468015ca5d628ab26658098aed32c828001775c3b0bd2d11967cb37b1708f97e109177e77cb6b332ecc34897cbe96d436a931f099b6808966bd8887d0214318bd69d9d42fdd0500e236ca470228a1f60575a55e1745ec41c1a180a97a54c96a7a6cd94f55da21eda09c35d18fd04717605ccceea3527fe14284b5dbdfc5b10a578394e4b69a9e8bf6bf8438b0ee68922314bfd6d99fac8414003bde72dcc95c095597eb623371cd6035313d015d55be3da19ec2b9451a5e88cc675a186b360416674c7b057772a0bd2eedf18f8712127906cc91c6dcf7f62f89e05f5d8919a2d402844d6aaeecb6668c39a5180f1e7d23e97b034a8c4392c5d74ef652f8a6c1d4dec242880d49dbcd82a02b34ad3116844f0136a7a6ad1d17517c75719ba996467fa23af252c34c9c8f2a5c1f5b6a6be5862f06952d39ded56b6274b2ebf488f70319871191046631d0547088c2a6916f9675799aeaef4ca2bba53e4806a09ca282ce3e07414740a675940361130eb3037f7c7b5d9c4f5deade82bab41e5eafdb7abb9ecd566c51f6311703ec8317905115d126a84739995fee371088e1890093a150cdc8f53471f19f6ab52e28df958b8453c4be6a7671eb43f635d5eb1a05356eee7e53455f79ebcc3665eff071c797894787167d29e7f35ce07ad9a3460b6aa2f5baf06d00024b1a2368eb42620ab4aa594d3ffb3be2dc9e30c83d9da51801c0ae98c64316c4026088174f418a594a1257d8d1fa1f96d3625a67a7ee09bba0051e69b04a6271542404734aa99d44f3f4a72063b62b330584d24eaa1b793c3d7c46570525e5f6f167559fdb518710fdc3862106fce39d0891dcb457d68c9afa71f21b4fc39516b1225354127589219d1adf0949d91260a772ad4674f0abefbd1bfef347c9d07d291f68ff794bf395590c6a54554edfd20f7eb9e8242f9cd4f92ae90103ad471bd02a35393929d78f7639ff6712b436f5127149e40af793590164d3a89edf58160e201586061d027a61015d92d1d327a1fda0a7152ba1fbc94a2b6efe21b50920a678949069423569202979cf599df1150287f89545b49e6b5f4c95bb80b1c99b170edb3226925ce3ba9f8368dee0a29f906abba0828645a0c1968d5d50449adcc5c153eaefba0082c16d96e445a84191fa358362fc634c7146774211cf506c92c03f29eb5ec9999d26b88091e448b7abce405ea79781135cefbf060f2e50d8b11fa8bd116288ec11e9fba89ac1fce0ac672d97c4efbc0bcfa03f54d25b0c26aff0d2cecda1de5b9075ec21932180a8a5e88c931aea6dd3ea9873947ce559b511a363ef41aacac10c6a6fa484ebf3f9ead776687d40dac67a12447806a95af5dd6ba774aaf818ab96d97ee03145ed3d43f490dbcaa564ccdef51da02be83d251dd215a4949942324cde1c5116455a4e690ede891c72f342c80a70f641c48d0ee2b56c3d27be244a29efb3105326f622b4df0e43b11d40989151a81ed6ae3e5a8d6bc7d0ab91f44ddc29091da4da792b8e38a63c2d8d35c66a25b727875146aa8dac1e9d6fa45e6e011ba0c5810d0a334930f008678903e29b5ed55147d4fa0cba0c5657ade822db5d6e4698d80a4de7ac147a1064ff6c448d16076459e5246d35d16ca1e26e8c00fec44860b78887402c33c22179e81b1b990dbc4427b807769a0c3e2b6f6c727ed1ae1e949a79c9f6bda3801846183765bb7e5d8af4478109aa0c2bca7bf2c9fb6494f24ec1e0bcba9c5019ede99aa30768b1d77228fa156b66625d8f541598f925ea6072f679c710349b8bfdc9c335172b77c71d54c38d761f934417c2464982b9020ad809f6fb832153fe51471f517e4b8ec25baf337e0d31d5f59449ce20bbfa93ae3aefaad5df582e12dcfb4c8cbd980898073f59e399d207cc37a66fc29fe6939e868024425bac14a5b4e32343cacd4db15b4533d7a64a570c232efae5e79c3ae13d302877999d24c7f7da342ec29cf4fca4e81ca529ac6d6864001f00ef06faadebaa0126b6686a55ce9d45bbfe477606592f08f519006b5dae7f4282b941528d4d286f70b244da6be5c3f180cf6d91b52ec2eb517b166660917bcf04484eb726f84bf0282e70d8a4f0ba37fe999ca4e8c4aace066caa6f1fe68fc7f5337c55d36b94a9a3ba54f2f6777ac2e98391987fdc58502fd9b3988acda8938541829a1c4c0948bd784e95fcc1589d0cc495fe7a118163ebd9eec9c8a84a5fcae858ca6ff3a19d70c202c1b0bf3aad9afeb01734d9222dcff2b26ed2a7753d7ed99cb459ae4d9aa84ca8b091e9a999b28baa568adf4b0e3325101951cc72076d6db9815e05823c568c85599abd416e9277384459b8eb6e82040564f57288ce810beca511a07e6248336252aa95f135e56b14bd21343df0abb4628708c472fcb4bc1ae73b8867393b3e49f173c43783241d1717a3d422237c2abe9b3219cee5ccdd3db4298d380fd2fd909077c591e713925f561c7fdd705e5dffdc79865f4638fc5ee404a04c310e329f6d9098cfabe38f413999fb249b203dc7921e65e4ec40ba32b02c19562246ed7c34b0d1e5e0f940bfdf2410938a516885795f77b421987158874c3cf13e1e882907b7b143ed66339a2f3c98eeb608d7245f5105d4d2a6c0e910892b53ea3d048e3d6c9b6aab55aa5164d2ae71db11c7e0ecc8532ff31c6c8eb42f94d6469154780f6b99ebc386b9fb7cdc0d38014a87617aeee38b622a8c0be77e4962c14edb321841f0bf148c1a1384ac51fa62fc1b3b2f895005b4d5cbffb243a259804c58c9083bebe8b6c6810acb4381bc3edf86965514a1be1c6ac058f854d4fc99bd1a4f85920d4dfda868d23a5812aadd397f6bf8f477e492d6198c0c42c6800426c7c755aa17cc1a457f73643e33a8414a0e9efd1b0fdb516424e1ce86c26a944d64183378e15664bcad4be7dfef05a89d5c53dcc62ba1ea2947f8e6d87000bcb9c140296919afb2bb3515414bf60af7aac9f749ee47793921e3886e9bd04191715cca1ad7cbc8bd56385968ede17b83c3f19d190b142fefedd7456db0dbf62f535f5ddcae20f03cb7b26a08c5b0f7c120801e41b8b5f8b6acde846b707daba9c34d49123a28912660dba43fc1a07632b4004905bfb72e3eee28cf6c33faeba3afa5cccc1833eab83f7f228a928eb18ca55d721bd4adf35623800268d0c6be12ca65df301356105194a305b1b040437f9ec27f44f81bdbcf08950ee4dad775f3119cd1168ee6adc9fdebd7ae417fb72bb8894ecf191d1380d75f66afeda56de48094ff12c15393006f7c3b85a3a9e5e7bf0b004a4c46c72342fa62757417fed7a52eedcba15713b47c889e1465b5e15f19b99ebab0c860e7af191a19e19828182a4a3687e1bdf25cc8621d2269bf6c61cf38eee880bbb8087888e886824303c1703f254debf0f52830adb7697d44664797d8d8bc54634289ad1039b744b6ee154a4a88d5f2fba35fe9460ec1035e34b381e8ac9a180efb38e74aeb2d6a158ab437433eb5a1296283e83f8da11aa5d5fc6b8f91942048260724cd33511e68d542e11d6cddb4bf7179101ffcdf7609c708992ce0ce149fb83bdd9f8a83fb1301915ad1dac035b73068e91b1aba35d539720e4dcb5b67949b8295fd9d1b519a000384819189ba02d4da02e12aaa30a9e34d6a16ea14b48070fdc1c774905aa043a2010f91935799446f8b1434ba881ef538561126e24286eaeace0995e0dbe5b90826e00e49d17de3a566237e584d8ad97227c8475297bd0e5681a931a4e5d353b9c6e86c67c9d71f74b6c36fc77587eba11ec31cec798cdb1e7028938fda7e001f09d70142d60315febfc35184ae4fae99de4293761c6c34c44272b4a99245f0a5104c028465e0cc517040b3d90fe5984ea5d45c49cad019505b2dac3d7d11d4285bc86c40b51185deb98fd6f902162af6c3ff5f2492ac761d58948a6d5d21b38b56e33f1af6a6c5191681de4c247145b692a3d7997863f51e91b8874db42079e917da19e48f514cdb01b7872fa90227a561f69c6636ad58f75b0549fb70efbcae") openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0xe282, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywe\x00', 0x0, 0x0) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) read$auto_media_devnode_fops_mc_devnode(r1, 0x0, 0x0) write$auto(r0, 0x0, 0x3ed3a798) 10.253666195s ago: executing program 0 (id=2293): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd23, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2404c09c}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r0, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x20000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) r2 = socket(0xa, 0x2, 0x3a) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000200)="aee0b8e7c69c10e0c15742274204589e770aa7bd9d154e2363b0a92cdbd7e1885256c7756ed772fccd69cc41139b9f49703273217b1e2a030229337f3a304580cdede355c5ece4a729acee9debbc3a43646fa0fad699a1d078e159824acc83f0394296878a879c334f1c7d2614a17b53f2b83d8b019f910d0f126e640828b27bdf06a634f84df5eb051358cc117b8b6f", 0x3}, 0x7) r4 = socket(0xa, 0x2, 0x73) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf252e00000018000180140002676538000000000000000000000000006b"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendto$auto(r4, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000000003f00"}, 0x1c) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/65, 0x41) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) 8.675125981s ago: executing program 0 (id=2297): msgctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000600)={{0x81, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x16}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x9, 0x7, 0x101, 0x3, 0xe, 0x8, @raw=0x2, @raw=0x2}) open(0x0, 0x161342, 0x100) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) (async) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = getsockopt$auto(r2, 0x6, 0x25, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async) setsockopt$auto(r3, 0xb8, 0x4, &(0x7f0000000000)='\x00', 0x4) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3b3d2abd7000fcdbdf25020000000a000900bbbbbbbbbbbb0000eaaeb87306be9a3cd848b9595c95826c1f515d1e64b2ee9478f79440cf06d3189ceff6367d95eabec9787847055f46ff046a8b0edbcd2c635c16de58400cdcdc30040c809b316f5a9fc08e2af2d49f254688d3c1ef1a3700eedb6dccb41126b36a65d033a4507c3a3a0130e2f351bafd7c94003f0ad2a1a6db5b2678976ae58cd093a7deb08d5f349ac57336717c02"], 0x20}}, 0x80) 8.157727656s ago: executing program 0 (id=2298): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) socket(0x10, 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2000d, 0x7, 0x16, 0x800000404, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0x7, 0x16, 0x800000404, 0x8000) eventfd2$auto(0xf1, 0x1) readv$auto(0x3, 0x0, 0x1da) (async) readv$auto(0x3, 0x0, 0x1da) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100026bd700ffedbdf25080000000600120108000800d533d8625a6cfce4aef88a309f0e2736b25f025924f82251a89ec374d602248215a8d732de9122b51be0a3beabf83e652aab388a323156a995fe30b5d45137430adf6676b62e92436e5e67559c214bea9a341ac7a435d625f994d02aa92ee5d18128bed9aef44253e670fd3ae71f1699a54f42fd80a7efd55f3e246d7ad03f0f25cb8a1e8fbb83aa9e3d604ab9ed15c2269e939f2d88ccb07b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) socket(0x2, 0x2, 0x5) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x2, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x200000000d3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x9]}, 0x0) (async) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x200000000d3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x9]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x88002, 0x0) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x88002, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, 0x0, 0x20000000) (async) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, 0x0, 0x20000000) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, 0x0, {0x1003, 0x9b72}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x1fe, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) (async) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, 0x0, {0x1003, 0x9b72}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x1fe, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) (async) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) 8.119367151s ago: executing program 3 (id=2299): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_CLEAR_HALT(r0, 0x4004550e, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000006c0)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x9, 0xfffffff7, 0x1}, 0xc8, 0x8, 0xffffffff, 0x5, @inferred, @raw=0x4, 0x0, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0xf9f, 0xdf, 0x9b72, 0x7, 0x28000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) getsockopt$auto_SO_TXREHASH(r1, 0xffffffff, 0x4a, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x800) madvise$auto(0x0, 0x200007, 0x19) 7.660478472s ago: executing program 3 (id=2301): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) keyctl$auto(0xa, 0xfffffffe, 0xffffffffffffffff, 0x8000, 0xe) mmap$auto(0xffffffffffffffff, 0x20007, 0x4400000000df, 0x16, 0xffffffffffffffff, 0x7ffc) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x0fGP\x97)\xcf\a\xfb\\n\x89CX\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\x104\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&d\x8a?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/163, 0x100000e3d6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r1 = open(0x0, 0xeee00, 0x31) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r1, 0x0) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780), 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7d7f, 0x42) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0x12, 0xffffffffffffffff, 0xfff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(r3, 0x0, 0xffffff1b) unshare$auto(0x40000080) 6.738224807s ago: executing program 0 (id=2305): ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) futex$auto(0x0, 0xd, 0x4, &(0x7f0000000000)={0x200000000000a, 0x6}, 0x0, 0x8) open(0x0, 0x183242, 0x154) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x10011, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r0, 0x0, 0xfffbfd72) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) mlockall$auto(0x8000000000000001) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 6.349488628s ago: executing program 2 (id=2306): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/veth1_to_hsr/base_reachable_time\x00', 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x80000000003) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0xa, 0xaf, 0x3, 0x17, r1, 0x80000004) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a9e127bd7000ffdbdf2501000000050006f2ce793e000800030001000700040096e300000500050003000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) 4.234410077s ago: executing program 3 (id=2313): mmap$auto(0x0, 0x8, 0xfffffffffffffffe, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x56a, &(0x7f00000001c0)='*]-,\x00', &(0x7f0000000200)="7c99fc0e6a0eb31fb80188e4620264f53255bc6282f9bd47a810b41a81c2680960a2aa0e27172f49a2bde1666a81332e1402a25b427f0281e6aed5be20", 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0xff) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r1) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000002e036dafcc82ab888fc4b817266bdc6fbc327d00b0e76d62df417bca48b44e9798a82c2cdada9a1808ddaf73c340544376d7f9db4e20de59868f145c45773ce0a7ee0a3500a494fb720f8f7221f8b1d5f2969ca2e9e8793cacc6426e721d155dbfa8b94d27a081d3d9d9b5", @ANYRES64=0xffffffffffffffff, @ANYBLOB="050326bd7000fcdbdf251f000000050004000900000008000200010000000800030004000000050006000e000000"], 0x34}, 0x1, 0x0, 0x0, 0x34044040}, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/sit0/ioam6_id\x00', 0x101800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioprio_set$auto(0x2, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r2, 0x0, 0x9, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) mprotect$auto(0xf991, 0xffffffffffffffff, 0xd) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), r2) sendmsg$auto_BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0x4, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="28d70000be47246423ffc4b22f526c5d977eb55f99762f3bec9051ea160ec45215382f5f3118c6090000002bb191211376e59ce54189fbd07b0c5c2c62575b691f7ad3b4", @ANYRESDEC=r3, @ANYBLOB="200005000000fddbdf25050000000c000c000a0000000000000008001b5dd314ed005dc706495ec211ffffce9613bf2b89b5e438718fc6d2aaf411dd43b7c2c6e1fa733b21555372f0c74feeeccbdce0645400bc2ea704ace909a01c0281902ede36dd58dfd115554b4243a0ff109506bbfb6dbf34a2a9fa1eed415a1dac7b0d94bd7d9bb78231e00c6c5f8a37ac5b11903e4a439d5e5c37a410db067b68443d706af404571735df0c25108ddb9352817d7db2a1c4a77aae5ee8"], 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) read$auto_clk_dump_fops_(r0, &(0x7f0000000080)=""/38, 0x26) close_range$auto(0x2, 0xffffffffffffffff, 0x80000100) socket(0xa, 0x5, 0x0) open(0x0, 0x8643, 0x15e) 3.783097355s ago: executing program 2 (id=2315): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)="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") openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0xe282, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywe\x00', 0x0, 0x0) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) read$auto_media_devnode_fops_mc_devnode(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r2) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r3, 0x225, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @local}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @remote}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x2bf97861}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_BLA_OWN={0x4}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x72a}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x3}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) write$auto(r1, &(0x7f0000000300)='%\x00', 0x3ed3a798) 3.566276787s ago: executing program 1 (id=2316): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x400000000000, 0x806121, 0x6) 3.453591649s ago: executing program 2 (id=2317): connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x8000000000000001, 0xffffffffffffffff, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x7, 0x7000000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2008, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd2/queue/minimum_io_size\x00', 0x14b140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/112, 0x70) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000000)={0x8, 0x3, 0x4, 0xba44, 0x2, 0x9, "e014265b728af441ecb9fb5793abc8fdffdbcd2c02d3c293fa98882f5336d79fc5b8202cb37fca80bc0f7019608d9e926b6d22c42432352d6ba627fafdbae669"}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) mmap$auto(0x0, 0x6, 0x9, 0x19, r2, 0x2) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/quota/writes\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) socketcall$auto_SYS_SOCKET(0x1, 0x0) socket(0x10, 0x2, 0x0) 3.251042722s ago: executing program 1 (id=2318): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x8040001}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x8a302, 0x0) socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000080)) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x1d, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendfile$auto(0x1, 0x3, 0x0, 0x0) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x96ff0100, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x5}, 0x9}, 0x16d, 0x6, 0x0) 3.204075551s ago: executing program 2 (id=2319): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2009, 0x4000000020df, 0xeb1, r1, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mkdir$auto(0x0, 0x3) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x0, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006}) socket(0x2, 0x80805, 0x0) r2 = eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000200)=""/36, 0x24) io_uring_setup$auto(0x85, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x1c9002, 0x0) ioctl$auto(r0, 0x5606, 0x7) 3.13266373s ago: executing program 3 (id=2320): pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0) write$auto(r1, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) read$auto_vcs_fops_vc_screen(r3, &(0x7f0000000080)=""/238, 0xffffffe9) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, &(0x7f0000000080)=""/209, 0xd1) membarrier$auto(0x2, 0x0, 0x9) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mlock$auto(0x1000, 0x6) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x100) 2.598620862s ago: executing program 2 (id=2321): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x2ab01, 0x0) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x83) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000008) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0xf, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x209, 0x81) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000400)={0x0, 0x10001, 0x2100003, 0xb1, 0x2, 0xffffffffffffffff, 0x10008, 0xc34e, 0x5, 0x2c, 0x2, 0x7}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001100)=""/4105, 0x1009) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.06112954s ago: executing program 1 (id=2322): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x98c7) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) 1.863499581s ago: executing program 0 (id=2323): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) keyctl$auto(0xa, 0xfffffffe, 0xffffffffffffffff, 0x8000, 0xe) mmap$auto(0xffffffffffffffff, 0x20007, 0x4400000000df, 0x16, 0xffffffffffffffff, 0x7ffc) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x0fGP\x97)\xcf\a\xfb\\n\x89CX\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\x104\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&d\x8a?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/163, 0x100000e3d6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r1 = open(0x0, 0xeee00, 0x31) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r1, 0x0) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c03000000000000", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7d7f, 0x42) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0x12, 0xffffffffffffffff, 0xfff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(r3, 0x0, 0xffffff1b) unshare$auto(0x40000080) 1.824413986s ago: executing program 3 (id=2324): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram8\x00', 0x80900, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40002, 0x300) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) ioctl$auto_TCFLSH2(r1, 0x5453, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r5, r5, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x5, 0x5, 0xffffffffffffffff, 0x2, 0x2) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) write$auto_mousedev_fops_mousedev(0xffffffffffffffff, 0x0, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0xf663, 0x15) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) r6 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)=0x3) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="070986acbdecd86de29e8200000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000080) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f00000012c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f00000000c0)={0x18c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cf9b82816caf011e9f62ab9d234451de10e2a7f86469ed26"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x38}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x69, 0xbd, "c8abff0b3971eea258bdf9e3000c7789f0356474b211f732a148434fb091c819b918ed3dff6cc9ca2f15b275fe5ce9e80885d4898a7b89f10e1cb107c8b56cc63e617a679aed477ac81cde084510731cf123f695812f815bcd1bb37ade5c6b3521fd6fc955"}, @NL80211_ATTR_CQM={0xce, 0x5e, 0x0, 0x1, [@generic="89e280d06ee2a4f7bce06801427f5b773296c87983597b871d8790b84a527fa7d0909510595db3097cdf6c5496d963d47a7118fef227e99701a6688cf2a8b4940d04d7c1bed1721cff42509e18ce4804e3cec4f002ad42b070ccd27af61403ecb2c36d1a97aad4295e6bf77f51a84bd2b46d7da8a2590f12fddab7f35dfa54ef0c193218486098f90e051d2b373bb7abf9310c21d61759c7c2124208a395007e2bd01e6f01b2cafc2178039c510c025d4d4bad79f825f2b9b05b99479011ed147df82ae8814a4a408af0"]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x44000}, 0x220088d1) 1.604127934s ago: executing program 1 (id=2325): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e66736400e0ffff0800030085000000080001"], 0x30}}, 0x4000) 1.114650191s ago: executing program 1 (id=2326): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x8000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) lsm_set_self_attr$auto(0x8, &(0x7f0000000040)={0x10000, 0xc7b, 0x2, 0xa5, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb6f9f33d5342ed76cc5453f8e8634458e6bf54825f7be456def0174640630a68b450b159e0d65748bb3538e"}, 0x6, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) close_range$auto(0x2, 0x8, 0x0) 260.786534ms ago: executing program 3 (id=2327): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)="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") openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0xe282, 0x0) (fail_nth: 2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywe\x00', 0x0, 0x0) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) read$auto_media_devnode_fops_mc_devnode(r1, 0x0, 0x0) write$auto(r0, &(0x7f0000000300)='%\x00', 0x3ed3a798) 46.36793ms ago: executing program 2 (id=2328): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000b00), 0xffffffffffffffff) getegid() mmap$auto(0x0, 0x20006, 0x405, 0x1c, r0, 0x9) prctl$auto_PR_SET_VMA(0x53564d41, 0xc000, 0x100000001, 0x8002, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x9, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680), 0x0) mmap$auto(0x0, 0x20007, 0x5, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedb49a02281df2503000000080003000402000006000700008000000000", @ANYRESDEC, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004805) socket(0x10, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYRES16=r1], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4000d, 0x9, 0x948b, 0x10001, 0x15f4da0a, 0x8000003, 0x80000000, 0x5f, 0x80000001, 0xb, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x500000a3d9) 0s ago: executing program 1 (id=2329): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x40009, 0x7, 0x9b74, 0x7, 0x28000) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x3) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x2404c084) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0004ff", @ANYRES16=r4, @ANYBLOB="01002cbd700001dcdf25020000000c0002002b6f2a2390808b000b0001006e65746465760000"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:06/wakeup/wakeup5/active_count\x00', 0x10201, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): _fget_files+0x200/0x3c0 [ 484.032314][T16727] ? do_writev+0x132/0x340 [ 484.032327][T16727] do_writev+0x132/0x340 [ 484.032342][T16727] ? __pfx_do_writev+0x10/0x10 [ 484.032362][T16727] do_syscall_64+0xcd/0x490 [ 484.032382][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.032397][T16727] RIP: 0033:0x7f7b9718ebe9 [ 484.032409][T16727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.032423][T16727] RSP: 002b:00007f7b97f62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 484.032437][T16727] RAX: ffffffffffffffda RBX: 00007f7b973b5fa0 RCX: 00007f7b9718ebe9 [ 484.032446][T16727] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 484.032455][T16727] RBP: 00007f7b97f62090 R08: 0000000000000000 R09: 0000000000000000 [ 484.032464][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.032472][T16727] R13: 00007f7b973b6038 R14: 00007f7b973b5fa0 R15: 00007ffe371c6c58 [ 484.032496][T16727] [ 484.032502][T16727] debugfs: out of free dentries, can not create file 'rc_rateidx_vht_mcs_mask_5ghz' [ 484.457295][T16729] netlink: 'syz.2.1382': attribute type 11 has an invalid length. [ 484.494210][T16729] netlink: 'syz.2.1382': attribute type 11 has an invalid length. [ 484.514344][T16729] netlink: 'syz.2.1382': attribute type 11 has an invalid length. [ 484.670482][T16739] net_ratelimit: 19 callbacks suppressed [ 484.670505][T16739] netlink: zone id is out of range [ 484.713114][T16739] netlink: zone id is out of range [ 484.728663][T16739] netlink: zone id is out of range [ 484.759944][T16739] netlink: zone id is out of range [ 484.766689][T16747] binder: 16732:16747 ioctl c00c620f 200000000180 returned -22 [ 484.793791][T16739] netlink: zone id is out of range [ 484.806034][T16739] netlink: zone id is out of range [ 484.811301][T16739] netlink: zone id is out of range [ 484.829809][T16739] netlink: zone id is out of range [ 484.843102][T16739] netlink: zone id is out of range [ 484.857359][T16739] netlink: zone id is out of range [ 485.098763][T16747] FAULT_INJECTION: forcing a failure. [ 485.098763][T16747] name failslab, interval 1, probability 0, space 0, times 0 [ 485.173898][T16747] CPU: 1 UID: 0 PID: 16747 Comm: syz.3.1383 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 485.173945][T16747] Tainted: [U]=USER [ 485.173954][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.173970][T16747] Call Trace: [ 485.173979][T16747] [ 485.173990][T16747] dump_stack_lvl+0x16c/0x1f0 [ 485.174028][T16747] should_fail_ex+0x512/0x640 [ 485.174064][T16747] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 485.174096][T16747] should_failslab+0xc2/0x120 [ 485.174130][T16747] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 485.174161][T16747] ? ptlock_alloc+0x1f/0x70 [ 485.174190][T16747] ptlock_alloc+0x1f/0x70 [ 485.174215][T16747] pte_alloc_one+0x82/0x3a0 [ 485.174243][T16747] do_pte_missing+0x1afc/0x3ba0 [ 485.174272][T16747] ? do_raw_spin_unlock+0x172/0x230 [ 485.174312][T16747] ? __pmd_alloc+0x3fb/0x930 [ 485.174351][T16747] __handle_mm_fault+0x152a/0x2a50 [ 485.174383][T16747] ? mt_find+0x3ef/0xa30 [ 485.174417][T16747] ? __pfx___handle_mm_fault+0x10/0x10 [ 485.174442][T16747] ? __pfx_mt_find+0x10/0x10 [ 485.174515][T16747] ? find_vma+0xbf/0x140 [ 485.174548][T16747] ? __pfx_find_vma+0x10/0x10 [ 485.174585][T16747] handle_mm_fault+0x589/0xd10 [ 485.174614][T16747] ? __bpf_trace_exceptions+0x1/0x40 [ 485.174651][T16747] do_user_addr_fault+0x7a6/0x1370 [ 485.174692][T16747] ? rcu_is_watching+0x12/0xc0 [ 485.174723][T16747] exc_page_fault+0x5c/0xb0 [ 485.174754][T16747] asm_exc_page_fault+0x26/0x30 [ 485.174779][T16747] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 485.174804][T16747] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 485.174830][T16747] RSP: 0018:ffffc90004897e68 EFLAGS: 00050212 [ 485.174851][T16747] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 485.174867][T16747] RDX: fffff52000912fda RSI: 0000000000000000 RDI: ffffc90004897ec0 [ 485.174891][T16747] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52000912fd9 [ 485.174908][T16747] R10: ffffc90004897ecf R11: 0000000000000000 R12: 0000000000000000 [ 485.174924][T16747] R13: ffffc90004897ec0 R14: 0000000000000000 R15: 0000000000000000 [ 485.174961][T16747] _copy_from_user+0x98/0xd0 [ 485.175002][T16747] __x64_sys_setrlimit+0xc6/0x160 [ 485.175037][T16747] ? xfd_validate_state+0x61/0x180 [ 485.175074][T16747] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 485.175116][T16747] ? rcu_is_watching+0x12/0xc0 [ 485.175145][T16747] do_syscall_64+0xcd/0x490 [ 485.175178][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.175203][T16747] RIP: 0033:0x7f67c258ebe9 [ 485.175224][T16747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.175247][T16747] RSP: 002b:00007f67c341d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 485.175271][T16747] RAX: ffffffffffffffda RBX: 00007f67c27b6270 RCX: 00007f67c258ebe9 [ 485.175287][T16747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 485.175302][T16747] RBP: 00007f67c2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 485.175318][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.175333][T16747] R13: 00007f67c27b6308 R14: 00007f67c27b6270 R15: 00007ffea3dfe4e8 [ 485.175369][T16747] [ 486.739335][T16835] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 486.783160][T16835] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 487.463579][T16889] nbd: must specify at least one socket [ 487.555992][T16900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 488.006282][ T30] audit: type=1804 audit(4294967552.105:108): pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1393" name=2F6E6577726F6F742F3239352F22050820 dev="tmpfs" ino=1581 res=1 errno=0 [ 488.098904][ T30] audit: type=1800 audit(4294967552.105:109): pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1393" name=22050820 dev="tmpfs" ino=1581 res=0 errno=0 [ 489.795213][ T6764] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.190202][T17012] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 490.199010][T17012] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 491.019577][T17039] FAULT_INJECTION: forcing a failure. [ 491.019577][T17039] name failslab, interval 1, probability 0, space 0, times 0 [ 491.072197][T17039] CPU: 0 UID: 0 PID: 17039 Comm: syz.1.1403 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 491.072229][T17039] Tainted: [U]=USER [ 491.072246][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.072254][T17039] Call Trace: [ 491.072260][T17039] [ 491.072266][T17039] dump_stack_lvl+0x16c/0x1f0 [ 491.072289][T17039] should_fail_ex+0x512/0x640 [ 491.072309][T17039] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 491.072328][T17039] ? __pfx_filemap_map_pages+0x10/0x10 [ 491.072344][T17039] should_failslab+0xc2/0x120 [ 491.072363][T17039] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 491.072380][T17039] ? ptlock_alloc+0x1f/0x70 [ 491.072395][T17039] ? __pfx_filemap_map_pages+0x10/0x10 [ 491.072411][T17039] ptlock_alloc+0x1f/0x70 [ 491.072425][T17039] pte_alloc_one+0x82/0x3a0 [ 491.072441][T17039] __do_fault+0x320/0x490 [ 491.072456][T17039] ? do_raw_spin_lock+0x12c/0x2b0 [ 491.072479][T17039] ? __pfx_filemap_map_pages+0x10/0x10 [ 491.072497][T17039] do_pte_missing+0x1a6/0x3ba0 [ 491.072512][T17039] ? do_raw_spin_unlock+0x172/0x230 [ 491.072534][T17039] ? __pmd_alloc+0x3fb/0x930 [ 491.072556][T17039] __handle_mm_fault+0x152a/0x2a50 [ 491.072573][T17039] ? mt_find+0x3ef/0xa30 [ 491.072593][T17039] ? __pfx___handle_mm_fault+0x10/0x10 [ 491.072606][T17039] ? __pfx_mt_find+0x10/0x10 [ 491.072634][T17039] ? find_vma+0xbf/0x140 [ 491.072652][T17039] ? __pfx_find_vma+0x10/0x10 [ 491.072672][T17039] handle_mm_fault+0x589/0xd10 [ 491.072687][T17039] ? __bpf_trace_exceptions+0x1/0x40 [ 491.072709][T17039] do_user_addr_fault+0x7a6/0x1370 [ 491.072732][T17039] ? rcu_is_watching+0x12/0xc0 [ 491.072749][T17039] exc_page_fault+0x5c/0xb0 [ 491.072766][T17039] asm_exc_page_fault+0x26/0x30 [ 491.072780][T17039] RIP: 0010:__put_user_4+0xd/0x20 [ 491.072798][T17039] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 6c 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 491.072811][T17039] RSP: 0018:ffffc9000219fb58 EFLAGS: 00050202 [ 491.072824][T17039] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000038 [ 491.072833][T17039] RDX: ffff888025b90000 RSI: ffffffff86cb227e RDI: ffffffff8c162980 [ 491.072841][T17039] RBP: 0000000000000038 R08: 0e23ec7e22d71a5a R09: 0000000000000001 [ 491.072850][T17039] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807be40c00 [ 491.072859][T17039] R13: ffff888078811000 R14: ffffffffffffffea R15: ffffffff86cb2200 [ 491.072868][T17039] ? __pfx_ppp_synctty_ioctl+0x10/0x10 [ 491.072890][T17039] ? ppp_synctty_ioctl+0x7e/0x260 [ 491.072907][T17039] ppp_synctty_ioctl+0x88/0x260 [ 491.072924][T17039] ? __pfx_ppp_synctty_ioctl+0x10/0x10 [ 491.072939][T17039] tty_ioctl+0x700/0x1680 [ 491.072959][T17039] ? __pfx_tty_ioctl+0x10/0x10 [ 491.072976][T17039] ? find_held_lock+0x2b/0x80 [ 491.072990][T17039] ? tomoyo_path_number_perm+0x295/0x580 [ 491.073011][T17039] ? tomoyo_path_number_perm+0x18d/0x580 [ 491.073029][T17039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 491.073047][T17039] ? find_held_lock+0x2b/0x80 [ 491.073066][T17039] ? __pfx_tty_ioctl+0x10/0x10 [ 491.073083][T17039] do_vfs_ioctl+0x1099/0x14f0 [ 491.073106][T17039] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 491.073133][T17039] ? find_held_lock+0x2b/0x80 [ 491.073146][T17039] ? hook_file_ioctl_common+0x145/0x410 [ 491.073173][T17039] ? __fget_files+0x20e/0x3c0 [ 491.073194][T17039] __x64_sys_ioctl+0x114/0x210 [ 491.073216][T17039] do_syscall_64+0xcd/0x490 [ 491.073235][T17039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.073259][T17039] RIP: 0033:0x7f228fd8ebe9 [ 491.073270][T17039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.073284][T17039] RSP: 002b:00007f2290b36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.073297][T17039] RAX: ffffffffffffffda RBX: 00007f228ffb5fa0 RCX: 00007f228fd8ebe9 [ 491.073306][T17039] RDX: 0000000000000038 RSI: 000000080000541b RDI: 0000000000000003 [ 491.073314][T17039] RBP: 00007f2290b36090 R08: 0000000000000000 R09: 0000000000000000 [ 491.073322][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.073330][T17039] R13: 00007f228ffb6038 R14: 00007f228ffb5fa0 R15: 00007ffedc56e3c8 [ 491.073348][T17039] [ 493.287084][ T30] audit: type=1804 audit(4294967557.385:110): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1409" name=2F6E6577726F6F742F3532382F22050820 dev="tmpfs" ino=2835 res=1 errno=0 [ 493.384516][ T30] audit: type=1800 audit(4294967557.385:111): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1409" name=22050820 dev="tmpfs" ino=2835 res=0 errno=0 [ 493.538707][T17161] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 493.561892][T17161] EXT4-fs (sda1): This should not happen!! Data will be lost [ 493.561892][T17161] [ 494.720861][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 494.801436][ T6759] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3559 with max blocks 25 with error 117 [ 494.818816][ T6759] EXT4-fs (sda1): This should not happen!! Data will be lost [ 494.818816][ T6759] [ 494.858676][ T6759] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1327 with max blocks 70 with error 117 [ 494.874718][ T6759] EXT4-fs (sda1): This should not happen!! Data will be lost [ 494.874718][ T6759] [ 494.911543][ T6759] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1803 with max blocks 2 with error 117 [ 494.951093][ T6759] EXT4-fs (sda1): This should not happen!! Data will be lost [ 494.951093][ T6759] [ 496.045110][T17287] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 496.098032][T17287] EXT4-fs (sda1): This should not happen!! Data will be lost [ 496.098032][T17287] [ 497.711287][T17317] zswap: compressor not available [ 497.761361][T17322] Setting dangerous option i915.mitigations - tainting kernel [ 498.364740][T17430] FAULT_INJECTION: forcing a failure. [ 498.364740][T17430] name failslab, interval 1, probability 0, space 0, times 0 [ 498.385621][T17430] CPU: 1 UID: 0 PID: 17430 Comm: syz.1.1424 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 498.385662][T17430] Tainted: [U]=USER [ 498.385670][T17430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.385683][T17430] Call Trace: [ 498.385692][T17430] [ 498.385701][T17430] dump_stack_lvl+0x16c/0x1f0 [ 498.385738][T17430] should_fail_ex+0x512/0x640 [ 498.385783][T17430] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 498.385811][T17430] should_failslab+0xc2/0x120 [ 498.385841][T17430] __kmalloc_cache_noprof+0x6a/0x3e0 [ 498.385866][T17430] ? ila_xlat_nl_dump_start+0xee/0x1c0 [ 498.385897][T17430] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 498.385922][T17430] ila_xlat_nl_dump_start+0xee/0x1c0 [ 498.385948][T17430] genl_start+0x5fc/0x980 [ 498.385983][T17430] __netlink_dump_start+0x60e/0x990 [ 498.386011][T17430] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 498.386044][T17430] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 498.386083][T17430] ? __pfx_genl_get_cmd+0x10/0x10 [ 498.386109][T17430] ? __pfx_genl_start+0x10/0x10 [ 498.386136][T17430] ? __pfx_genl_dumpit+0x10/0x10 [ 498.386162][T17430] ? __pfx_genl_done+0x10/0x10 [ 498.386196][T17430] ? __radix_tree_lookup+0x21f/0x2c0 [ 498.386228][T17430] genl_rcv_msg+0x46e/0x800 [ 498.386265][T17430] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.386297][T17430] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 498.386322][T17430] ? __pfx_ila_xlat_nl_dump+0x10/0x10 [ 498.386345][T17430] ? __pfx_ila_xlat_nl_dump_done+0x10/0x10 [ 498.386383][T17430] netlink_rcv_skb+0x158/0x420 [ 498.386411][T17430] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.386445][T17430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.386491][T17430] ? netlink_deliver_tap+0x1ae/0xd30 [ 498.386524][T17430] genl_rcv+0x28/0x40 [ 498.386552][T17430] netlink_unicast+0x5a7/0x870 [ 498.386586][T17430] ? __pfx_netlink_unicast+0x10/0x10 [ 498.386614][T17430] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 498.386640][T17430] ? __lock_acquire+0xb97/0x1ce0 [ 498.386680][T17430] netlink_sendmsg+0x8d1/0xdd0 [ 498.386715][T17430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.386749][T17430] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 498.386789][T17430] ____sys_sendmsg+0xa95/0xc70 [ 498.386826][T17430] ? copy_msghdr_from_user+0x10a/0x160 [ 498.386855][T17430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.386906][T17430] ___sys_sendmsg+0x134/0x1d0 [ 498.386936][T17430] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.386996][T17430] ? __mutex_unlock_slowpath+0x140/0x800 [ 498.387037][T17430] __sys_sendmsg+0x16d/0x220 [ 498.387067][T17430] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.387121][T17430] do_syscall_64+0xcd/0x490 [ 498.387154][T17430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.387178][T17430] RIP: 0033:0x7f228fd8ebe9 [ 498.387199][T17430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.387220][T17430] RSP: 002b:00007f2290b36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.387244][T17430] RAX: ffffffffffffffda RBX: 00007f228ffb5fa0 RCX: 00007f228fd8ebe9 [ 498.387259][T17430] RDX: 0000000020004814 RSI: 0000200000000100 RDI: 0000000000000003 [ 498.387275][T17430] RBP: 00007f2290b36090 R08: 0000000000000000 R09: 0000000000000000 [ 498.387288][T17430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.387301][T17430] R13: 00007f228ffb6038 R14: 00007f228ffb5fa0 R15: 00007ffedc56e3c8 [ 498.387332][T17430] [ 500.946802][T17507] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 500.954902][T17507] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 501.470274][T11684] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 901 with max blocks 17 with error 117 [ 501.501284][T11684] EXT4-fs (sda1): This should not happen!! Data will be lost [ 501.501284][T11684] [ 501.551120][T11684] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1806 with max blocks 1 with error 117 [ 501.578507][T11684] EXT4-fs (sda1): This should not happen!! Data will be lost [ 501.578507][T11684] [ 501.609549][T11684] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1808 with max blocks 1 with error 117 [ 501.671988][T11684] EXT4-fs (sda1): This should not happen!! Data will be lost [ 501.671988][T11684] [ 501.767430][T11684] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1811 with max blocks 1 with error 117 [ 501.789306][T11684] EXT4-fs (sda1): This should not happen!! Data will be lost [ 501.789306][T11684] [ 502.498444][T17552] zswap: compressor not available [ 502.508642][T17554] Setting dangerous option i915.mitigations - tainting kernel [ 503.476554][T17578] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 503.513278][T17578] EXT4-fs (sda1): This should not happen!! Data will be lost [ 503.513278][T17578] [ 503.549820][T17587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1443'. [ 503.559582][T17587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.567086][T17587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.587338][T17587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.596997][T17587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.643957][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 503.776183][T17571] zswap: compressor not available [ 503.852028][T17569] Setting dangerous option i915.mitigations - tainting kernel [ 504.751757][T17635] svc: failed to register nfsdv3 RPC service (errno 111). [ 504.778462][T17635] svc: failed to register nfsaclv3 RPC service (errno 111). [ 505.418698][T11686] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.478717][ T36] failed to send hello msg [ 505.483393][ T36] failed while handling packet from 1:16384 [ 505.598431][T17641] svc: failed to register nfsdv3 RPC service (errno 512). [ 505.653511][T17641] svc: failed to register nfsaclv3 RPC service (errno 512). [ 506.010520][ T30] audit: type=1800 audit(4294967570.045:112): pid=17689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1455" name="members" dev="configfs" ino=37325 res=0 errno=0 [ 506.670562][T17715] FAULT_INJECTION: forcing a failure. [ 506.670562][T17715] name failslab, interval 1, probability 0, space 0, times 0 [ 506.699365][T17715] CPU: 0 UID: 0 PID: 17715 Comm: syz.2.1457 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 506.699406][T17715] Tainted: [U]=USER [ 506.699414][T17715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.699427][T17715] Call Trace: [ 506.699435][T17715] [ 506.699444][T17715] dump_stack_lvl+0x16c/0x1f0 [ 506.699479][T17715] should_fail_ex+0x512/0x640 [ 506.699509][T17715] ? fs_reclaim_acquire+0xae/0x150 [ 506.699545][T17715] should_failslab+0xc2/0x120 [ 506.699576][T17715] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 506.699604][T17715] ? security_inode_alloc+0x3b/0x2b0 [ 506.699636][T17715] security_inode_alloc+0x3b/0x2b0 [ 506.699664][T17715] inode_init_always_gfp+0xce4/0x1030 [ 506.699696][T17715] alloc_inode+0x86/0x240 [ 506.699730][T17715] new_inode+0x22/0x1c0 [ 506.699764][T17715] __debugfs_create_file+0x11c/0x6b0 [ 506.699797][T17715] debugfs_create_file_short+0x41/0x60 [ 506.699829][T17715] ieee80211_debugfs_recreate_netdev+0x5a6/0x17e0 [ 506.699864][T17715] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 506.699897][T17715] ? __pfx___might_resched+0x10/0x10 [ 506.699929][T17715] drv_remove_interface+0x2bf/0x640 [ 506.699968][T17715] __ieee80211_suspend+0x857/0x1310 [ 506.700007][T17715] reset_write+0x7a/0x2a0 [ 506.700041][T17715] short_proxy_write+0x135/0x1a0 [ 506.700079][T17715] ? __pfx_short_proxy_write+0x10/0x10 [ 506.700128][T17715] vfs_writev+0x5df/0xde0 [ 506.700166][T17715] ? __pfx_vfs_writev+0x10/0x10 [ 506.700189][T17715] ? __mutex_lock+0x1c4/0x10b0 [ 506.700218][T17715] ? find_held_lock+0x2b/0x80 [ 506.700252][T17715] ? __pfx___mutex_lock+0x10/0x10 [ 506.700296][T17715] ? __fget_files+0x20e/0x3c0 [ 506.700319][T17715] ? __fget_files+0x200/0x3c0 [ 506.700354][T17715] ? do_writev+0x132/0x340 [ 506.700377][T17715] do_writev+0x132/0x340 [ 506.700402][T17715] ? __pfx_do_writev+0x10/0x10 [ 506.700439][T17715] do_syscall_64+0xcd/0x490 [ 506.700472][T17715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.700497][T17715] RIP: 0033:0x7f4ac158ebe9 [ 506.700518][T17715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.700542][T17715] RSP: 002b:00007f4ac24cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 506.700566][T17715] RAX: ffffffffffffffda RBX: 00007f4ac17b5fa0 RCX: 00007f4ac158ebe9 [ 506.700582][T17715] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 506.700596][T17715] RBP: 00007f4ac24cc090 R08: 0000000000000000 R09: 0000000000000000 [ 506.700610][T17715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.700622][T17715] R13: 00007f4ac17b6038 R14: 00007f4ac17b5fa0 R15: 00007ffe17815618 [ 506.700656][T17715] [ 506.700695][T17715] debugfs: out of free dentries, can not create file 'hw_queues' [ 506.794915][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.794997][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.110657][T17721] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.1.1458: Error -117 reading block bitmap for 5 [ 507.381017][T17719] can: request_module (can-proto-3) failed. [ 507.491653][T17664] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 510.514499][T17775] zswap: compressor not available [ 510.591876][T17784] Setting dangerous option i915.mitigations - tainting kernel [ 511.517890][T17819] svc: failed to register nfsdv3 RPC service (errno 111). [ 511.531610][T17819] svc: failed to register nfsaclv3 RPC service (errno 111). [ 512.724916][T17858] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.1479: bg 1: bad block bitmap checksum [ 512.739206][T17858] EXT4-fs: 2 callbacks suppressed [ 512.739228][T17858] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2065 with max blocks 1 with error 74 [ 512.757115][T17858] EXT4-fs (sda1): This should not happen!! Data will be lost [ 512.757115][T17858] [ 514.014275][T17871] FAULT_INJECTION: forcing a failure. [ 514.014275][T17871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.027720][T17871] CPU: 0 UID: 0 PID: 17871 Comm: syz.1.1482 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 514.027762][T17871] Tainted: [U]=USER [ 514.027770][T17871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.027784][T17871] Call Trace: [ 514.027792][T17871] [ 514.027801][T17871] dump_stack_lvl+0x16c/0x1f0 [ 514.027836][T17871] should_fail_ex+0x512/0x640 [ 514.027872][T17871] _copy_to_user+0x32/0xd0 [ 514.027911][T17871] simple_read_from_buffer+0xcb/0x170 [ 514.027952][T17871] proc_fail_nth_read+0x197/0x240 [ 514.027979][T17871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.028009][T17871] ? rw_verify_area+0xcf/0x6c0 [ 514.028033][T17871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.028059][T17871] vfs_read+0x1e4/0xcf0 [ 514.028091][T17871] ? __pfx___mutex_lock+0x10/0x10 [ 514.028121][T17871] ? __pfx_vfs_read+0x10/0x10 [ 514.028158][T17871] ? __fget_files+0x20e/0x3c0 [ 514.028194][T17871] ksys_read+0x12a/0x250 [ 514.028220][T17871] ? __pfx_ksys_read+0x10/0x10 [ 514.028258][T17871] do_syscall_64+0xcd/0x490 [ 514.028290][T17871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.028315][T17871] RIP: 0033:0x7f228fd8d5fc [ 514.028335][T17871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 514.028358][T17871] RSP: 002b:00007f2290b36030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.028383][T17871] RAX: ffffffffffffffda RBX: 00007f228ffb5fa0 RCX: 00007f228fd8d5fc [ 514.028400][T17871] RDX: 000000000000000f RSI: 00007f2290b360a0 RDI: 0000000000000004 [ 514.028415][T17871] RBP: 00007f2290b36090 R08: 0000000000000000 R09: 0000000000000000 [ 514.028430][T17871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.028444][T17871] R13: 00007f228ffb6038 R14: 00007f228ffb5fa0 R15: 00007ffedc56e3c8 [ 514.028479][T17871] [ 514.889578][ T30] audit: type=1804 audit(4294967578.885:113): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1486" name=2F6E6577726F6F742F3535372F22050820 dev="tmpfs" ino=2987 res=1 errno=0 [ 515.041900][ T30] audit: type=1800 audit(4294967578.885:114): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1486" name=22050820 dev="tmpfs" ino=2987 res=0 errno=0 [ 515.324761][T17933] __vm_enough_memory: pid: 17933, comm: syz.3.1487, bytes: 4398046511104 not enough memory for the allocation [ 518.453361][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 519.759588][T17992] FAULT_INJECTION: forcing a failure. [ 519.759588][T17992] name failslab, interval 1, probability 0, space 0, times 0 [ 519.828504][T17992] CPU: 1 UID: 0 PID: 17992 Comm: syz.2.1499 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 519.828543][T17992] Tainted: [U]=USER [ 519.828550][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.828563][T17992] Call Trace: [ 519.828570][T17992] [ 519.828580][T17992] dump_stack_lvl+0x16c/0x1f0 [ 519.828614][T17992] should_fail_ex+0x512/0x640 [ 519.828643][T17992] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 519.828677][T17992] should_failslab+0xc2/0x120 [ 519.828709][T17992] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 519.828738][T17992] ? __d_alloc+0x32/0xae0 [ 519.828773][T17992] __d_alloc+0x32/0xae0 [ 519.828799][T17992] ? kasan_save_stack+0x42/0x60 [ 519.828823][T17992] ? kasan_save_stack+0x33/0x60 [ 519.828854][T17992] d_alloc_parallel+0x111/0x1480 [ 519.828889][T17992] ? drv_remove_interface+0x2bf/0x640 [ 519.828922][T17992] ? __ieee80211_suspend+0x857/0x1310 [ 519.828951][T17992] ? short_proxy_write+0x135/0x1a0 [ 519.828984][T17992] ? vfs_writev+0x5df/0xde0 [ 519.829008][T17992] ? do_writev+0x132/0x340 [ 519.829031][T17992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.829062][T17992] ? __pfx_d_alloc_parallel+0x10/0x10 [ 519.829102][T17992] ? lockdep_init_map_type+0x5c/0x280 [ 519.829136][T17992] ? lockdep_init_map_type+0x5c/0x280 [ 519.829173][T17992] __lookup_slow+0x193/0x460 [ 519.829210][T17992] ? __pfx___lookup_slow+0x10/0x10 [ 519.829249][T17992] ? perf_trace_mm_compaction_try_to_compact_pages+0x430/0x4b0 [ 519.829295][T17992] ? perf_trace_mm_compaction_try_to_compact_pages+0x430/0x4b0 [ 519.829331][T17992] ? d_lookup+0xe7/0x190 [ 519.829373][T17992] lookup_noperm+0xe1/0x110 [ 519.829410][T17992] simple_start_creating+0xd1/0x1b0 [ 519.829447][T17992] start_creating.part.0+0x82/0x190 [ 519.829475][T17992] __debugfs_create_file+0xa7/0x6b0 [ 519.829512][T17992] debugfs_create_file_short+0x41/0x60 [ 519.829546][T17992] ieee80211_debugfs_recreate_netdev+0x716/0x17e0 [ 519.829580][T17992] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 519.829614][T17992] ? __pfx___might_resched+0x10/0x10 [ 519.829647][T17992] drv_remove_interface+0x2bf/0x640 [ 519.829684][T17992] __ieee80211_suspend+0x857/0x1310 [ 519.829722][T17992] reset_write+0x7a/0x2a0 [ 519.829756][T17992] short_proxy_write+0x135/0x1a0 [ 519.829794][T17992] ? __pfx_short_proxy_write+0x10/0x10 [ 519.829826][T17992] vfs_writev+0x5df/0xde0 [ 519.829862][T17992] ? __pfx_vfs_writev+0x10/0x10 [ 519.829886][T17992] ? __mutex_lock+0x1c4/0x10b0 [ 519.829915][T17992] ? find_held_lock+0x2b/0x80 [ 519.829952][T17992] ? __pfx___mutex_lock+0x10/0x10 [ 519.829995][T17992] ? __fget_files+0x20e/0x3c0 [ 519.830018][T17992] ? __fget_files+0x200/0x3c0 [ 519.830057][T17992] ? do_writev+0x132/0x340 [ 519.830080][T17992] do_writev+0x132/0x340 [ 519.830105][T17992] ? __pfx_do_writev+0x10/0x10 [ 519.830142][T17992] do_syscall_64+0xcd/0x490 [ 519.830175][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.830193][T17992] RIP: 0033:0x7f4ac158ebe9 [ 519.830208][T17992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.830226][T17992] RSP: 002b:00007f4ac24cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 519.830245][T17992] RAX: ffffffffffffffda RBX: 00007f4ac17b5fa0 RCX: 00007f4ac158ebe9 [ 519.830257][T17992] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 519.830268][T17992] RBP: 00007f4ac24cc090 R08: 0000000000000000 R09: 0000000000000000 [ 519.830282][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.830296][T17992] R13: 00007f4ac17b6038 R14: 00007f4ac17b5fa0 R15: 00007ffe17815618 [ 519.830331][T17992] [ 520.605563][ T30] audit: type=1804 audit(4294967584.695:115): pid=18000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1502" name=2F6E6577726F6F742F3536322F22050820 dev="tmpfs" ino=3014 res=1 errno=0 [ 520.633309][ T30] audit: type=1800 audit(4294967584.695:116): pid=18000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1502" name=22050820 dev="tmpfs" ino=3014 res=0 errno=0 [ 522.258144][T18086] ubi0: detaching mtd0 [ 522.332831][T18086] ubi0: mtd0 is detached [ 523.030928][T18086] can0: slcan on pty238. [ 524.214623][T18085] can0 (unregistered): slcan off pty238. [ 524.379072][T18164] svc: failed to register nfsdv3 RPC service (errno 111). [ 524.439657][T18164] svc: failed to register nfsaclv3 RPC service (errno 111). [ 524.826314][T18184] FAULT_INJECTION: forcing a failure. [ 524.826314][T18184] name failslab, interval 1, probability 0, space 0, times 0 [ 524.840763][T18184] CPU: 0 UID: 0 PID: 18184 Comm: syz.1.1515 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 524.840806][T18184] Tainted: [U]=USER [ 524.840815][T18184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.840830][T18184] Call Trace: [ 524.840839][T18184] [ 524.840847][T18184] dump_stack_lvl+0x16c/0x1f0 [ 524.840895][T18184] should_fail_ex+0x512/0x640 [ 524.840929][T18184] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 524.840960][T18184] should_failslab+0xc2/0x120 [ 524.840992][T18184] __kmalloc_cache_noprof+0x6a/0x3e0 [ 524.841018][T18184] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 524.841058][T18184] ? kasan_save_track+0x14/0x30 [ 524.841090][T18184] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 524.841135][T18184] ? __mutex_lock+0x1c4/0x10b0 [ 524.841171][T18184] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 524.841211][T18184] ? __pfx___mutex_lock+0x10/0x10 [ 524.841248][T18184] ? __fsnotify_parent+0x24b/0xc40 [ 524.841283][T18184] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 524.841318][T18184] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 524.841337][T18184] snd_pcm_oss_sync+0x1de/0x840 [ 524.841369][T18184] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 524.841392][T18184] snd_pcm_oss_release+0x28b/0x310 [ 524.841417][T18184] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 524.841437][T18184] __fput+0x3ff/0xb70 [ 524.841476][T18184] task_work_run+0x150/0x240 [ 524.841514][T18184] ? __pfx_task_work_run+0x10/0x10 [ 524.841548][T18184] ? __pfx___do_sys_close_range+0x10/0x10 [ 524.841583][T18184] exit_to_user_mode_loop+0xeb/0x110 [ 524.841619][T18184] do_syscall_64+0x3f6/0x490 [ 524.841653][T18184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.841676][T18184] RIP: 0033:0x7f228fd8ebe9 [ 524.841696][T18184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.841718][T18184] RSP: 002b:00007f2290b15038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 524.841742][T18184] RAX: 0000000000000000 RBX: 00007f228ffb6090 RCX: 00007f228fd8ebe9 [ 524.841757][T18184] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 524.841771][T18184] RBP: 00007f228fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 524.841785][T18184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.841800][T18184] R13: 00007f228ffb6128 R14: 00007f228ffb6090 R15: 00007ffedc56e3c8 [ 524.841833][T18184] [ 525.100113][T18183] FAULT_INJECTION: forcing a failure. [ 525.100113][T18183] name failslab, interval 1, probability 0, space 0, times 0 [ 525.113668][T18183] CPU: 1 UID: 0 PID: 18183 Comm: syz.1.1515 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 525.113715][T18183] Tainted: [U]=USER [ 525.113723][T18183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.113738][T18183] Call Trace: [ 525.113745][T18183] [ 525.113754][T18183] dump_stack_lvl+0x16c/0x1f0 [ 525.113801][T18183] should_fail_ex+0x512/0x640 [ 525.113834][T18183] ? fs_reclaim_acquire+0xae/0x150 [ 525.113870][T18183] should_failslab+0xc2/0x120 [ 525.113899][T18183] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 525.113927][T18183] ? jbd2__journal_start+0x193/0x6a0 [ 525.113967][T18183] jbd2__journal_start+0x193/0x6a0 [ 525.114005][T18183] __ext4_journal_start_sb+0x195/0x690 [ 525.114035][T18183] ? ext4_punch_hole+0x77e/0x1080 [ 525.114072][T18183] ext4_punch_hole+0x77e/0x1080 [ 525.114113][T18183] ext4_fallocate+0x22d7/0x37a0 [ 525.114160][T18183] ? __pfx_ext4_fallocate+0x10/0x10 [ 525.114192][T18183] vfs_fallocate+0x5b4/0x10e0 [ 525.114223][T18183] ? __pfx_vfs_fallocate+0x10/0x10 [ 525.114252][T18183] ? madvise_vma_behavior+0x2b20/0x2d60 [ 525.114295][T18183] madvise_vma_behavior+0x2ad7/0x2d60 [ 525.114331][T18183] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 525.114361][T18183] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 525.114399][T18183] ? __pfx_mas_prev+0x10/0x10 [ 525.114437][T18183] ? find_vma_prev+0xda/0x160 [ 525.114467][T18183] ? find_held_lock+0x2b/0x80 [ 525.114491][T18183] ? __pfx_find_vma_prev+0x10/0x10 [ 525.114523][T18183] ? futex_unqueue+0x133/0x2c0 [ 525.114563][T18183] ? __futex_wait+0x24c/0x2f0 [ 525.114604][T18183] madvise_walk_vmas+0x31f/0x9c0 [ 525.114644][T18183] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 525.114690][T18183] madvise_do_behavior+0x1e2/0x530 [ 525.114723][T18183] ? futex_private_hash_put+0x18a/0x300 [ 525.114755][T18183] ? __pfx_madvise_do_behavior+0x10/0x10 [ 525.114800][T18183] ? down_read+0x13d/0x480 [ 525.114855][T18183] do_madvise+0x176/0x240 [ 525.114889][T18183] ? __pfx_do_madvise+0x10/0x10 [ 525.114921][T18183] ? do_futex+0x122/0x350 [ 525.114977][T18183] ? xfd_validate_state+0x61/0x180 [ 525.115011][T18183] ? __pfx_ksys_write+0x10/0x10 [ 525.115047][T18183] __x64_sys_madvise+0xa9/0x110 [ 525.115080][T18183] ? lockdep_hardirqs_on+0x7c/0x110 [ 525.115109][T18183] do_syscall_64+0xcd/0x490 [ 525.115143][T18183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.115168][T18183] RIP: 0033:0x7f228fd8ebe9 [ 525.115190][T18183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.115215][T18183] RSP: 002b:00007f2290b36038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 525.115241][T18183] RAX: ffffffffffffffda RBX: 00007f228ffb5fa0 RCX: 00007f228fd8ebe9 [ 525.115258][T18183] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 525.115274][T18183] RBP: 00007f228fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 525.115291][T18183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.115307][T18183] R13: 00007f228ffb6038 R14: 00007f228ffb5fa0 R15: 00007ffedc56e3c8 [ 525.115344][T18183] [ 525.654822][T18183] EXT4-fs error (device sda1) in ext4_punch_hole:4467: Out of memory [ 528.412353][T18288] mkiss: ax0: crc mode is auto. [ 528.687318][T18301] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 528.694777][T18301] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 529.000661][T18310] block2mtd: parameter too long [ 529.033385][T18310] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1529'. [ 529.033674][T18309] netlink: 'syz.1.1529': attribute type 10 has an invalid length. [ 529.064307][T18309] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1529'. [ 529.550168][T18327] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1533'. [ 530.822670][T18366] program syz.1.1536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.546576][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 531.810732][T18322] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1530'. [ 532.014180][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 532.035285][T18388] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1530'. [ 532.131715][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 534.586700][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056abf000: rx timeout, send abort [ 534.595646][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056abf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 534.914874][T18490] FAULT_INJECTION: forcing a failure. [ 534.914874][T18490] name failslab, interval 1, probability 0, space 0, times 0 [ 534.927822][T18490] CPU: 0 UID: 0 PID: 18490 Comm: syz.2.1544 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 534.927850][T18490] Tainted: [U]=USER [ 534.927855][T18490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.927864][T18490] Call Trace: [ 534.927870][T18490] [ 534.927876][T18490] dump_stack_lvl+0x16c/0x1f0 [ 534.927898][T18490] should_fail_ex+0x512/0x640 [ 534.927918][T18490] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 534.927938][T18490] should_failslab+0xc2/0x120 [ 534.927957][T18490] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 534.927974][T18490] ? ptlock_alloc+0x1f/0x70 [ 534.927991][T18490] ptlock_alloc+0x1f/0x70 [ 534.928004][T18490] pte_alloc_one+0x82/0x3a0 [ 534.928020][T18490] do_pte_missing+0x1afc/0x3ba0 [ 534.928035][T18490] ? do_raw_spin_unlock+0x172/0x230 [ 534.928058][T18490] ? __pmd_alloc+0x3fb/0x930 [ 534.928079][T18490] __handle_mm_fault+0x152a/0x2a50 [ 534.928096][T18490] ? mt_find+0x3ef/0xa30 [ 534.928115][T18490] ? __pfx___handle_mm_fault+0x10/0x10 [ 534.928128][T18490] ? __pfx_mt_find+0x10/0x10 [ 534.928165][T18490] ? find_vma+0xbf/0x140 [ 534.928184][T18490] ? __pfx_find_vma+0x10/0x10 [ 534.928204][T18490] handle_mm_fault+0x589/0xd10 [ 534.928220][T18490] ? __bpf_trace_exceptions+0x1/0x40 [ 534.928242][T18490] do_user_addr_fault+0x7a6/0x1370 [ 534.928266][T18490] ? rcu_is_watching+0x12/0xc0 [ 534.928282][T18490] exc_page_fault+0x5c/0xb0 [ 534.928299][T18490] asm_exc_page_fault+0x26/0x30 [ 534.928313][T18490] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 534.928328][T18490] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 534.928341][T18490] RSP: 0018:ffffc90018ebfe68 EFLAGS: 00050212 [ 534.928354][T18490] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 534.928363][T18490] RDX: fffff520031d7fda RSI: 0000000000000000 RDI: ffffc90018ebfec0 [ 534.928372][T18490] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff520031d7fd9 [ 534.928381][T18490] R10: ffffc90018ebfecf R11: 0000000000000000 R12: 0000000000000000 [ 534.928389][T18490] R13: ffffc90018ebfec0 R14: 0000000000000000 R15: 0000000000000000 [ 534.928407][T18490] _copy_from_user+0x98/0xd0 [ 534.928430][T18490] __x64_sys_setrlimit+0xc6/0x160 [ 534.928449][T18490] ? xfd_validate_state+0x61/0x180 [ 534.928469][T18490] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 534.928491][T18490] ? rcu_is_watching+0x12/0xc0 [ 534.928506][T18490] do_syscall_64+0xcd/0x490 [ 534.928525][T18490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.928538][T18490] RIP: 0033:0x7f4ac158ebe9 [ 534.928549][T18490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.928562][T18490] RSP: 002b:00007f4ac24cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 534.928574][T18490] RAX: ffffffffffffffda RBX: 00007f4ac17b5fa0 RCX: 00007f4ac158ebe9 [ 534.928584][T18490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 534.928592][T18490] RBP: 00007f4ac1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 534.928600][T18490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.928608][T18490] R13: 00007f4ac17b6038 R14: 00007f4ac17b5fa0 R15: 00007ffe17815618 [ 534.928626][T18490] [ 535.805721][T18492] FAULT_INJECTION: forcing a failure. [ 535.805721][T18492] name failslab, interval 1, probability 0, space 0, times 0 [ 535.869218][T18492] CPU: 0 UID: 0 PID: 18492 Comm: syz.2.1546 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 535.869261][T18492] Tainted: [U]=USER [ 535.869269][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.869283][T18492] Call Trace: [ 535.869293][T18492] [ 535.869304][T18492] dump_stack_lvl+0x16c/0x1f0 [ 535.869348][T18492] should_fail_ex+0x512/0x640 [ 535.869379][T18492] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 535.869414][T18492] should_failslab+0xc2/0x120 [ 535.869448][T18492] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 535.869475][T18492] ? __d_alloc+0x32/0xae0 [ 535.869508][T18492] __d_alloc+0x32/0xae0 [ 535.869532][T18492] ? kasan_save_stack+0x42/0x60 [ 535.869557][T18492] ? kasan_save_stack+0x33/0x60 [ 535.869585][T18492] d_alloc_parallel+0x111/0x1480 [ 535.869620][T18492] ? drv_remove_interface+0x2bf/0x640 [ 535.869651][T18492] ? __ieee80211_suspend+0x857/0x1310 [ 535.869679][T18492] ? short_proxy_write+0x135/0x1a0 [ 535.869712][T18492] ? vfs_writev+0x5df/0xde0 [ 535.869740][T18492] ? do_writev+0x132/0x340 [ 535.869764][T18492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.869793][T18492] ? __pfx_d_alloc_parallel+0x10/0x10 [ 535.869829][T18492] ? lockdep_init_map_type+0x5c/0x280 [ 535.869862][T18492] ? lockdep_init_map_type+0x5c/0x280 [ 535.869899][T18492] __lookup_slow+0x193/0x460 [ 535.869932][T18492] ? __pfx___lookup_slow+0x10/0x10 [ 535.869970][T18492] ? perf_trace_mm_compaction_try_to_compact_pages+0x430/0x4b0 [ 535.870015][T18492] ? perf_trace_mm_compaction_try_to_compact_pages+0x430/0x4b0 [ 535.870051][T18492] ? d_lookup+0xe7/0x190 [ 535.870089][T18492] lookup_noperm+0xe1/0x110 [ 535.870125][T18492] simple_start_creating+0xd1/0x1b0 [ 535.870156][T18492] start_creating.part.0+0x82/0x190 [ 535.870186][T18492] __debugfs_create_file+0xa7/0x6b0 [ 535.870219][T18492] debugfs_create_file_short+0x41/0x60 [ 535.870260][T18492] ieee80211_debugfs_recreate_netdev+0x756/0x17e0 [ 535.870303][T18492] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 535.870351][T18492] ? __pfx___might_resched+0x10/0x10 [ 535.870385][T18492] drv_remove_interface+0x2bf/0x640 [ 535.870422][T18492] __ieee80211_suspend+0x857/0x1310 [ 535.870462][T18492] reset_write+0x7a/0x2a0 [ 535.870506][T18492] short_proxy_write+0x135/0x1a0 [ 535.870545][T18492] ? __pfx_short_proxy_write+0x10/0x10 [ 535.870577][T18492] vfs_writev+0x5df/0xde0 [ 535.870614][T18492] ? __pfx_vfs_writev+0x10/0x10 [ 535.870638][T18492] ? __mutex_lock+0x1c4/0x10b0 [ 535.870667][T18492] ? find_held_lock+0x2b/0x80 [ 535.870700][T18492] ? __pfx___mutex_lock+0x10/0x10 [ 535.870746][T18492] ? __fget_files+0x20e/0x3c0 [ 535.870769][T18492] ? __fget_files+0x200/0x3c0 [ 535.870805][T18492] ? do_writev+0x132/0x340 [ 535.870828][T18492] do_writev+0x132/0x340 [ 535.870870][T18492] ? __pfx_do_writev+0x10/0x10 [ 535.870908][T18492] do_syscall_64+0xcd/0x490 [ 535.870942][T18492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.870967][T18492] RIP: 0033:0x7f4ac158ebe9 [ 535.870988][T18492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.871011][T18492] RSP: 002b:00007f4ac24cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 535.871035][T18492] RAX: ffffffffffffffda RBX: 00007f4ac17b5fa0 RCX: 00007f4ac158ebe9 [ 535.871052][T18492] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 535.871068][T18492] RBP: 00007f4ac24cc090 R08: 0000000000000000 R09: 0000000000000000 [ 535.871083][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.871098][T18492] R13: 00007f4ac17b6038 R14: 00007f4ac17b5fa0 R15: 00007ffe17815618 [ 535.871135][T18492] [ 536.922784][T18510] sp0: Synchronizing with TNC [ 538.782592][ T30] audit: type=1804 audit(4294967602.865:117): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1555" name=2F6E6577726F6F742F3332332F22050820 dev="tmpfs" ino=1735 res=1 errno=0 [ 538.932173][ T30] audit: type=1800 audit(4294967602.865:118): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1555" name=22050820 dev="tmpfs" ino=1735 res=0 errno=0 [ 544.439246][T18684] validate_nla: 1 callbacks suppressed [ 544.439268][T18684] netlink: 'syz.3.1566': attribute type 1 has an invalid length. [ 545.360630][T18720] can: request_module (can-proto-0) failed. [ 546.262630][T18756] FAULT_INJECTION: forcing a failure. [ 546.262630][T18756] name fail_futex, interval 1, probability 0, space 0, times 0 [ 546.298726][T18756] CPU: 0 UID: 0 PID: 18756 Comm: syz.1.1575 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 546.298757][T18756] Tainted: [U]=USER [ 546.298761][T18756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.298770][T18756] Call Trace: [ 546.298775][T18756] [ 546.298782][T18756] dump_stack_lvl+0x16c/0x1f0 [ 546.298805][T18756] should_fail_ex+0x512/0x640 [ 546.298829][T18756] get_futex_key+0x1d0/0x1560 [ 546.298851][T18756] ? __pfx_get_futex_key+0x10/0x10 [ 546.298868][T18756] ? __up_read+0x1f8/0x750 [ 546.298893][T18756] futex_wake+0xea/0x530 [ 546.298915][T18756] ? __pfx_futex_wake+0x10/0x10 [ 546.298938][T18756] ? up_write+0x1b2/0x520 [ 546.298959][T18756] do_futex+0x1e3/0x350 [ 546.298977][T18756] ? __pfx_do_futex+0x10/0x10 [ 546.298994][T18756] ? __pfx_do_sys_openat2+0x10/0x10 [ 546.299019][T18756] __x64_sys_futex+0x1e0/0x4c0 [ 546.299039][T18756] ? __pfx___x64_sys_futex+0x10/0x10 [ 546.299057][T18756] ? xfd_validate_state+0x61/0x180 [ 546.299083][T18756] do_syscall_64+0xcd/0x490 [ 546.299102][T18756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.299116][T18756] RIP: 0033:0x7f228fd8ebe9 [ 546.299128][T18756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.299142][T18756] RSP: 002b:00007f2290b360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 546.299157][T18756] RAX: ffffffffffffffda RBX: 00007f228ffb5fa8 RCX: 00007f228fd8ebe9 [ 546.299166][T18756] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f228ffb5fac [ 546.299174][T18756] RBP: 00007f228ffb5fa0 R08: 00007f2290b37000 R09: 0000000000000000 [ 546.299183][T18756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.299191][T18756] R13: 00007f228ffb6038 R14: 00007ffedc56e2e0 R15: 00007ffedc56e3c8 [ 546.299209][T18756] [ 547.127130][T18746] svc: failed to register nfsdv3 RPC service (errno 111). [ 547.183643][T18746] svc: failed to register nfsaclv3 RPC service (errno 512). [ 548.080903][ T30] audit: type=1804 audit(4294969660.215:119): pid=18798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1577" name=2F6E6577726F6F742F3332362F22050820 dev="tmpfs" ino=1751 res=1 errno=0 [ 548.103722][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.154016][ T30] audit: type=1800 audit(4294969660.215:120): pid=18798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1577" name=22050820 dev="tmpfs" ino=1751 res=0 errno=0 [ 548.998437][T18814] can: request_module (can-proto-0) failed. [ 550.652793][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 550.945995][T18932] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 551.046575][T18932] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 551.159992][T18932] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 551.877066][T16057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 551.898627][T16057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 551.905579][T11681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.919088][T16057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 551.931258][T16057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.939616][T16057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.107321][T11681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.669251][T11681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.803355][T11681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.712004][T11681] bridge_slave_1: left allmulticast mode [ 553.718893][T11681] bridge_slave_1: left promiscuous mode [ 553.727509][T11681] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.745993][T11681] bridge_slave_0: left allmulticast mode [ 553.769861][T11681] bridge_slave_0: left promiscuous mode [ 553.779627][T11681] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.985629][T16057] Bluetooth: hci2: command tx timeout [ 554.008076][T19152] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 554.040328][T19152] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 554.324444][T11681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.337911][T11681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.350177][T11681] bond0 (unregistering): Released all slaves [ 554.411750][T18963] chnl_net:caif_netlink_parms(): no params data found [ 554.838345][T18963] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.846527][T18963] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.855223][T18963] bridge_slave_0: entered allmulticast mode [ 554.897153][T18963] bridge_slave_0: entered promiscuous mode [ 555.019578][T18963] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.042504][T18963] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.068627][T18963] bridge_slave_1: entered allmulticast mode [ 555.078554][T18963] bridge_slave_1: entered promiscuous mode [ 555.289650][T18963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.320760][ T30] audit: type=1800 audit(4294969667.492:121): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1599" name="lu_gp_id" dev="configfs" ino=38809 res=0 errno=0 [ 555.406346][T18963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.554900][T11681] hsr_slave_0: left promiscuous mode [ 555.584309][T11681] hsr_slave_1: left promiscuous mode [ 555.628348][T11681] veth1_macvtap: left promiscuous mode [ 555.636499][T11681] veth1_vlan: left promiscuous mode [ 555.645020][T11681] veth0_vlan: left promiscuous mode [ 556.049348][T16057] Bluetooth: hci2: command tx timeout [ 556.449709][T11681] team0 (unregistering): Port device team_slave_0 removed [ 557.321932][T18963] team0: Port device team_slave_0 added [ 557.404326][T18963] team0: Port device team_slave_1 added [ 557.562345][T18963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.569358][T18963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.658103][T18963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.783714][T18963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.803259][T18963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.840352][T18963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.075715][T18963] hsr_slave_0: entered promiscuous mode [ 558.104089][T19443] FAULT_INJECTION: forcing a failure. [ 558.104089][T19443] name failslab, interval 1, probability 0, space 0, times 0 [ 558.104673][T18963] hsr_slave_1: entered promiscuous mode [ 558.129037][T16057] Bluetooth: hci2: command tx timeout [ 558.145029][T19443] CPU: 1 UID: 0 PID: 19443 Comm: syz.2.1603 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 558.145077][T19443] Tainted: [U]=USER [ 558.145086][T19443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.145102][T19443] Call Trace: [ 558.145112][T19443] [ 558.145122][T19443] dump_stack_lvl+0x16c/0x1f0 [ 558.145162][T19443] should_fail_ex+0x512/0x640 [ 558.145195][T19443] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 558.145225][T19443] should_failslab+0xc2/0x120 [ 558.145258][T19443] __kmalloc_cache_noprof+0x6a/0x3e0 [ 558.145285][T19443] ? copy_ipcs+0x19f/0x610 [ 558.145319][T19443] copy_ipcs+0x19f/0x610 [ 558.145343][T19443] ? copy_utsname+0xab/0x470 [ 558.145383][T19443] create_new_namespaces+0x20a/0xa90 [ 558.145413][T19443] ? security_capable+0x7e/0x260 [ 558.145442][T19443] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 558.145472][T19443] ksys_unshare+0x45b/0xa40 [ 558.145505][T19443] ? __pfx_ksys_unshare+0x10/0x10 [ 558.145548][T19443] ? xfd_validate_state+0x61/0x180 [ 558.145601][T19443] __x64_sys_unshare+0x31/0x40 [ 558.145635][T19443] do_syscall_64+0xcd/0x490 [ 558.145671][T19443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.145696][T19443] RIP: 0033:0x7f4ac158ebe9 [ 558.145727][T19443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.145753][T19443] RSP: 002b:00007f4ac24cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.145778][T19443] RAX: ffffffffffffffda RBX: 00007f4ac17b5fa0 RCX: 00007f4ac158ebe9 [ 558.145797][T19443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 558.145813][T19443] RBP: 00007f4ac1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 558.145829][T19443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.145845][T19443] R13: 00007f4ac17b6038 R14: 00007f4ac17b5fa0 R15: 00007ffe17815618 [ 558.145878][T19443] [ 558.342297][T18963] debugfs: 'hsr0' already exists in 'hsr' [ 558.371613][T18963] Cannot create hsr debugfs directory [ 560.190849][T16057] Bluetooth: hci2: command tx timeout [ 561.006778][T18963] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 561.040787][T19614] zswap: compressor not available [ 561.068570][T18963] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 561.092933][T19610] Setting dangerous option i915.mitigations - tainting kernel [ 561.135318][T18963] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 561.147634][T18963] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 561.612925][T18963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.705392][T18963] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.758942][T11681] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.766238][T11681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.803651][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.810863][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.042203][T19645] zswap: compressor not available [ 562.058574][T19653] Setting dangerous option i915.mitigations - tainting kernel [ 562.881819][T19679] FAULT_INJECTION: forcing a failure. [ 562.881819][T19679] name failslab, interval 1, probability 0, space 0, times 0 [ 562.903367][ T30] audit: type=1804 audit(4294969675.092:122): pid=19678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1616" name=2F6E6577726F6F742F3333382F22050820 dev="tmpfs" ino=1816 res=1 errno=0 [ 562.931740][T19679] CPU: 1 UID: 0 PID: 19679 Comm: syz.0.1617 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 562.931784][T19679] Tainted: [U]=USER [ 562.931793][T19679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.931818][T19679] Call Trace: [ 562.931827][T19679] [ 562.931837][T19679] dump_stack_lvl+0x16c/0x1f0 [ 562.931873][T19679] should_fail_ex+0x512/0x640 [ 562.931906][T19679] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 562.931940][T19679] should_failslab+0xc2/0x120 [ 562.931959][ T30] audit: type=1800 audit(4294969675.092:123): pid=19678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1616" name=22050820 dev="tmpfs" ino=1816 res=0 errno=0 [ 562.931971][T19679] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 562.932003][T19679] ? __d_alloc+0x32/0xae0 [ 562.932037][T19679] __d_alloc+0x32/0xae0 [ 562.932073][T19679] ? trace_kmem_cache_alloc+0x28/0xc0 [ 562.932109][T19679] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 562.932143][T19679] d_alloc_pseudo+0x1c/0xc0 [ 562.932180][T19679] alloc_file_pseudo+0xcf/0x230 [ 562.932219][T19679] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 562.932262][T19679] sock_alloc_file+0x50/0x210 [ 562.932297][T19679] do_accept+0x240/0x530 [ 562.932321][T19679] ? do_raw_spin_lock+0x12c/0x2b0 [ 562.932357][T19679] ? __pfx_do_accept+0x10/0x10 [ 562.932405][T19679] __sys_accept4+0x100/0x1c0 [ 562.932430][T19679] ? __pfx___sys_accept4+0x10/0x10 [ 562.932467][T19679] __x64_sys_accept+0x74/0xb0 [ 562.932492][T19679] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.932522][T19679] do_syscall_64+0xcd/0x490 [ 562.932554][T19679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.932579][T19679] RIP: 0033:0x7f7b9718ebe9 [ 562.932600][T19679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.932625][T19679] RSP: 002b:00007f7b97f62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 562.932648][T19679] RAX: ffffffffffffffda RBX: 00007f7b973b5fa0 RCX: 00007f7b9718ebe9 [ 562.932666][T19679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 562.932682][T19679] RBP: 00007f7b97211e19 R08: 0000000000000000 R09: 0000000000000000 [ 562.932695][T19679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.932709][T19679] R13: 00007f7b973b6038 R14: 00007f7b973b5fa0 R15: 00007ffe371c6c58 [ 562.932742][T19679] [ 563.462888][T18963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.538730][T19698] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 563.546975][T19698] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 563.733914][T18963] veth0_vlan: entered promiscuous mode [ 563.768549][T18963] veth1_vlan: entered promiscuous mode [ 564.484203][T18963] veth0_macvtap: entered promiscuous mode [ 564.589259][T18963] veth1_macvtap: entered promiscuous mode [ 564.829898][T18963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.842140][T18963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.940123][ T6759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.958719][T19729] zswap: compressor not available [ 564.975584][ T6759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.011632][T19741] Setting dangerous option i915.mitigations - tainting kernel [ 565.031212][ T6759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.085716][ T6759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.288318][T11687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.320499][T11687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.428360][T11684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.451485][T11684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.615362][T19831] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 566.624000][T19831] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 567.874929][T19906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1632'. [ 568.070036][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.076383][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.160231][T19900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.187859][T19900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 568.207008][T19900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.335055][T19900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 568.384392][T19926] can: request_module (can-proto-0) failed. [ 568.394665][T19900] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 568.451272][T19913] hub 8-0:1.0: USB hub found [ 568.544903][T19913] hub 8-0:1.0: 1 port detected [ 568.551115][T19900] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 569.730919][T20016] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 569.740423][T20016] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 569.817756][T16057] Bluetooth: hci0: command 0x0c1a tx timeout [ 570.216218][T16057] Bluetooth: hci3: command 0x0c1a tx timeout [ 570.222900][T16057] Bluetooth: hci1: command 0x0c1a tx timeout [ 570.387119][T16057] Bluetooth: hci2: command 0x0c1a tx timeout [ 570.644983][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 570.884998][T20048] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 571.000508][T20054] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 572.064269][ T30] audit: type=1800 audit(4294969684.309:124): pid=20113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1646" name="dbroot" dev="configfs" ino=42334 res=0 errno=0 [ 572.370238][ T30] audit: type=1806 audit(4294969684.631:125): xattr=22050820 res=-22 [ 572.458958][T16057] Bluetooth: hci2: command 0x0c1a tx timeout [ 572.506551][T20165] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 572.514923][T20165] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 573.981944][T20224] random: crng reseeded on system resumption [ 574.513379][T16057] Bluetooth: hci2: command 0x0c1a tx timeout [ 576.595874][T20314] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 576.622511][T20314] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 577.247527][T11686] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1353 with max blocks 6 with error 117 [ 577.339402][T11686] EXT4-fs (sda1): This should not happen!! Data will be lost [ 577.339402][T11686] [ 577.371424][T11686] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1379 with max blocks 18 with error 117 [ 577.490860][T11686] EXT4-fs (sda1): This should not happen!! Data will be lost [ 577.490860][T11686] [ 579.221899][T20380] zswap: compressor not available [ 579.227196][T20401] Setting dangerous option i915.mitigations - tainting kernel [ 579.924986][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 580.908099][T20512] svc: failed to register nfsdv3 RPC service (errno 111). [ 580.966208][T20512] svc: failed to register nfsaclv3 RPC service (errno 111). [ 581.530377][T20526] can: request_module (can-proto-0) failed. [ 582.157449][T20544] bridge0: port 3(veth1_macvtap) entered blocking state [ 582.167094][T20544] bridge0: port 3(veth1_macvtap) entered disabled state [ 582.177971][T20544] veth1_macvtap: entered allmulticast mode [ 582.187219][T20544] veth1_macvtap: left allmulticast mode [ 582.221234][T20542] vivid-003: ================= START STATUS ================= [ 582.233582][T20542] vivid-003: Radio HW Seek Mode: Bounded [ 582.277612][T20542] vivid-003: Radio Programmable HW Seek: false [ 582.284086][T20542] vivid-003: RDS Rx I/O Mode: Block I/O [ 582.289844][T20542] vivid-003: Generate RBDS Instead of RDS: false [ 582.300182][T20542] vivid-003: RDS Reception: true [ 582.310733][T20542] vivid-003: RDS Program Type: 0 inactive [ 582.362513][T20542] vivid-003: RDS PS Name: inactive [ 582.367784][T20542] vivid-003: RDS Radio Text: inactive [ 582.388235][T20542] vivid-003: RDS Traffic Announcement: false inactive [ 582.398489][T20542] vivid-003: RDS Traffic Program: false inactive [ 582.409068][T20542] vivid-003: RDS Music: false inactive [ 582.415366][T20542] vivid-003: ================== END STATUS ================== [ 582.424763][T20547] vivid-003: ================= START STATUS ================= [ 582.482254][T20547] vivid-003: Radio HW Seek Mode: Bounded [ 582.488149][T20547] vivid-003: Radio Programmable HW Seek: false [ 582.519856][T20547] vivid-003: RDS Rx I/O Mode: Block I/O [ 582.532874][T20547] vivid-003: Generate RBDS Instead of RDS: false [ 582.558921][ T30] audit: type=1804 audit(4294969694.874:126): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1678" name=2F6E6577726F6F742F3334322F22050820 dev="tmpfs" ino=1824 res=1 errno=0 [ 582.586011][T20547] vivid-003: RDS Reception: true [ 582.598249][T20547] vivid-003: RDS Program Type: 0 inactive [ 582.630676][ T30] audit: type=1800 audit(4294969694.874:127): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1678" name=22050820 dev="tmpfs" ino=1824 res=0 errno=0 [ 582.655205][T20547] vivid-003: RDS PS Name: inactive [ 582.669744][T20547] vivid-003: RDS Radio Text: inactive [ 582.675870][T20547] vivid-003: RDS Traffic Announcement: false inactive [ 582.683099][T20547] vivid-003: RDS Traffic Program: false inactive [ 582.698973][T20547] vivid-003: RDS Music: false inactive [ 582.706741][T20547] vivid-003: ================== END STATUS ================== [ 583.745734][T20562] zswap: compressor not available [ 583.910515][T20580] Setting dangerous option i915.mitigations - tainting kernel [ 586.388317][ T30] audit: type=1804 audit(4294969698.724:128): pid=20683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1699" name=2F6E6577726F6F742F33332F22050820 dev="tmpfs" ino=191 res=1 errno=0 [ 586.451920][ T30] audit: type=1800 audit(4294969698.724:129): pid=20683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1699" name=22050820 dev="tmpfs" ino=191 res=0 errno=0 [ 586.584336][T20687] FAULT_INJECTION: forcing a failure. [ 586.584336][T20687] name fail_futex, interval 1, probability 0, space 0, times 0 [ 586.817177][T20687] CPU: 1 UID: 0 PID: 20687 Comm: syz.0.1700 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 586.817222][T20687] Tainted: [U]=USER [ 586.817231][T20687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.817245][T20687] Call Trace: [ 586.817253][T20687] [ 586.817263][T20687] dump_stack_lvl+0x16c/0x1f0 [ 586.817297][T20687] should_fail_ex+0x512/0x640 [ 586.817335][T20687] get_futex_key+0x1d0/0x1560 [ 586.817371][T20687] ? __pfx_get_futex_key+0x10/0x10 [ 586.817400][T20687] ? __pfx___schedule+0x10/0x10 [ 586.817427][T20687] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 586.817483][T20687] futex_wait_setup+0x9d/0x550 [ 586.817532][T20687] __futex_wait+0x194/0x2f0 [ 586.817569][T20687] ? __pfx___futex_wait+0x10/0x10 [ 586.817610][T20687] ? __pfx_futex_wake_mark+0x10/0x10 [ 586.817651][T20687] ? futex_private_hash_put+0x176/0x300 [ 586.817686][T20687] ? futex_private_hash_put+0x18a/0x300 [ 586.817717][T20687] futex_wait+0xe8/0x380 [ 586.817752][T20687] ? __pfx_futex_wait+0x10/0x10 [ 586.817795][T20687] ? trace_sched_exit_tp+0xd1/0x120 [ 586.817832][T20687] ? __schedule+0x11a3/0x5de0 [ 586.817864][T20687] do_futex+0x229/0x350 [ 586.817894][T20687] ? __pfx_do_futex+0x10/0x10 [ 586.817935][T20687] __x64_sys_futex+0x1e0/0x4c0 [ 586.817971][T20687] ? __pfx___x64_sys_futex+0x10/0x10 [ 586.818002][T20687] ? xfd_validate_state+0x61/0x180 [ 586.818035][T20687] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 586.818080][T20687] do_syscall_64+0xcd/0x490 [ 586.818114][T20687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.818141][T20687] RIP: 0033:0x7f7b9718ebe9 [ 586.818162][T20687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.818187][T20687] RSP: 002b:00007f7b97f620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 586.818211][T20687] RAX: ffffffffffffffda RBX: 00007f7b973b5fa8 RCX: 00007f7b9718ebe9 [ 586.818229][T20687] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b973b5fa8 [ 586.818245][T20687] RBP: 00007f7b973b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 586.818261][T20687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.818276][T20687] R13: 00007f7b973b6038 R14: 00007ffe371c6b70 R15: 00007ffe371c6c58 [ 586.818309][T20687] [ 587.562663][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 587.980516][T20719] zswap: compressor not available [ 588.048164][T20722] Setting dangerous option i915.mitigations - tainting kernel [ 589.535378][ T30] audit: type=1804 audit(4294969701.850:130): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1708" name=2F6E6577726F6F742F33342F22050820 dev="tmpfs" ino=197 res=1 errno=0 [ 589.688908][ T30] audit: type=1800 audit(4294969701.850:131): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1708" name=22050820 dev="tmpfs" ino=197 res=0 errno=0 [ 590.768370][T20845] can: request_module (can-proto-0) failed. [ 591.804423][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 592.348622][T20886] zswap: compressor not available [ 592.480314][T20894] Setting dangerous option i915.mitigations - tainting kernel [ 593.392115][T20948] ======================================================= [ 593.392115][T20948] WARNING: The mand mount option has been deprecated and [ 593.392115][T20948] and is ignored by this kernel. Remove the mand [ 593.392115][T20948] option from the mount to silence this warning. [ 593.392115][T20948] ======================================================= [ 595.099059][T20963] net_ratelimit: 19 callbacks suppressed [ 595.099080][T20963] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 597.009089][T21053] can: request_module (can-proto-0) failed. [ 598.180569][T21090] ecryptfs_parse_packet_length: Error parsing packet length [ 598.208327][T21090] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 601.362414][T21194] can: request_module (can-proto-0) failed. [ 603.100843][T21263] zswap: compressor not available [ 603.107611][T21287] Setting dangerous option i915.mitigations - tainting kernel [ 603.163905][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 605.194459][T21348] zswap: compressor not available [ 605.532593][T21340] zswap: compressor not available [ 605.539965][T21357] Setting dangerous option i915.mitigations - tainting kernel [ 606.473261][T21390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.176450][T21416] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 607.795494][ T6763] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3159 with max blocks 333 with error 117 [ 607.927676][ T6763] EXT4-fs (sda1): This should not happen!! Data will be lost [ 607.927676][ T6763] [ 608.215606][T21438] netlink: 'syz.0.1764': attribute type 11 has an invalid length. [ 608.237243][T21438] netlink: 'syz.0.1764': attribute type 11 has an invalid length. [ 608.271739][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 608.318217][T21438] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1764'. [ 608.376952][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'. [ 608.516858][T21438] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1764'. [ 609.122232][T21486] ICMPv6: process `syz.0.1767' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 609.338529][T21490] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 609.372140][T21490] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 610.286770][ T30] audit: type=1804 audit(4294969722.748:132): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1771" name=2F6E6577726F6F742F3336312F22050820 dev="tmpfs" ino=1922 res=1 errno=0 [ 610.438451][ T30] audit: type=1800 audit(4294969722.748:133): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1771" name=22050820 dev="tmpfs" ino=1922 res=0 errno=0 [ 610.825610][T21560] FAULT_INJECTION: forcing a failure. [ 610.825610][T21560] name failslab, interval 1, probability 0, space 0, times 0 [ 610.840112][T21560] CPU: 1 UID: 0 PID: 21560 Comm: syz.1.1773 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 610.840140][T21560] Tainted: [U]=USER [ 610.840144][T21560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.840153][T21560] Call Trace: [ 610.840159][T21560] [ 610.840165][T21560] dump_stack_lvl+0x16c/0x1f0 [ 610.840188][T21560] should_fail_ex+0x512/0x640 [ 610.840208][T21560] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 610.840225][T21560] should_failslab+0xc2/0x120 [ 610.840243][T21560] __kmalloc_cache_noprof+0x6a/0x3e0 [ 610.840258][T21560] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 610.840291][T21560] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 610.840317][T21560] ? trace_contention_end+0xdd/0x130 [ 610.840336][T21560] ? __mutex_lock+0x1c4/0x10b0 [ 610.840358][T21560] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 610.840382][T21560] ? __pfx___mutex_lock+0x10/0x10 [ 610.840398][T21560] ? __lock_acquire+0xb97/0x1ce0 [ 610.840427][T21560] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 610.840450][T21560] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 610.840473][T21560] ? lockdep_hardirqs_on+0x7c/0x110 [ 610.840493][T21560] snd_pcm_oss_poll+0x5a5/0xb90 [ 610.840515][T21560] ? __pfx___pollwait+0x10/0x10 [ 610.840530][T21560] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 610.840551][T21560] ? __fget_files+0x20e/0x3c0 [ 610.840570][T21560] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 610.840591][T21560] do_select+0xd3a/0x17e0 [ 610.840620][T21560] ? __pfx_do_select+0x10/0x10 [ 610.840635][T21560] ? __pfx___pollwait+0x10/0x10 [ 610.840664][T21560] ? __pfx_pollwake+0x10/0x10 [ 610.840679][T21560] ? __pfx_pollwake+0x10/0x10 [ 610.840694][T21560] ? __pfx_pollwake+0x10/0x10 [ 610.840709][T21560] ? __pfx_pollwake+0x10/0x10 [ 610.840724][T21560] ? __pfx_pollwake+0x10/0x10 [ 610.840739][T21560] ? __pfx_pollwake+0x10/0x10 [ 610.840754][T21560] ? __pfx_pollwake+0x10/0x10 [ 610.840769][T21560] ? __pfx_pollwake+0x10/0x10 [ 610.840788][T21560] ? find_held_lock+0x2b/0x80 [ 610.840800][T21560] ? __might_fault+0xe3/0x190 [ 610.840816][T21560] ? __might_fault+0xe3/0x190 [ 610.840830][T21560] ? __might_fault+0x13b/0x190 [ 610.840852][T21560] ? core_sys_select+0x453/0xc10 [ 610.840865][T21560] core_sys_select+0x453/0xc10 [ 610.840884][T21560] ? __pfx_core_sys_select+0x10/0x10 [ 610.840902][T21560] ? proc_fail_nth_write+0x9f/0x220 [ 610.840933][T21560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 610.840956][T21560] kern_select+0x15d/0x1e0 [ 610.840970][T21560] ? __pfx_kern_select+0x10/0x10 [ 610.840989][T21560] ? syscall_user_dispatch+0x78/0x140 [ 610.841014][T21560] __x64_sys_select+0xbd/0x160 [ 610.841028][T21560] ? syscall_trace_enter+0x5e/0x240 [ 610.841050][T21560] do_syscall_64+0xcd/0x490 [ 610.841078][T21560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.841093][T21560] RIP: 0033:0x7fcebf18ebe9 [ 610.841106][T21560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.841119][T21560] RSP: 002b:00007fcebff16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 610.841134][T21560] RAX: ffffffffffffffda RBX: 00007fcebf3b5fa0 RCX: 00007fcebf18ebe9 [ 610.841146][T21560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 610.841154][T21560] RBP: 00007fcebff16090 R08: 0000000000000000 R09: 0000000000000000 [ 610.841163][T21560] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 610.841172][T21560] R13: 00007fcebf3b6038 R14: 00007fcebf3b5fa0 R15: 00007ffe2e549ea8 [ 610.841191][T21560] [ 612.302001][T21619] can: request_module (can-proto-0) failed. [ 613.045222][T21646] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 613.052570][T21646] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 615.626880][T21736] can: request_module (can-proto-0) failed. [ 616.722380][T21764] can: request_module (can-proto-0) failed. [ 617.370888][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 622.379256][T21990] zswap: compressor not available [ 622.388833][T21987] Setting dangerous option i915.mitigations - tainting kernel [ 622.541954][T21997] can: request_module (can-proto-0) failed. [ 623.022446][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 624.426381][T22031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1818'. [ 624.490071][T22018] ima: policy update failed [ 624.495147][ T30] audit: type=1802 audit(4294969737.032:134): pid=22018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1817" res=0 errno=0 [ 624.538867][T22031] bridge_slave_1: left allmulticast mode [ 624.564622][T22031] bridge_slave_1: left promiscuous mode [ 624.591534][T22031] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.982022][T22031] bridge_slave_0: left allmulticast mode [ 625.010899][T22031] bridge_slave_0: left promiscuous mode [ 625.190033][T22031] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.279715][T22023] ima: policy update failed [ 625.329928][ T30] audit: type=1802 audit(4294969737.856:135): pid=22023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1814" res=0 errno=0 [ 625.449697][T22039] can: request_module (can-proto-0) failed. [ 626.265758][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 627.059837][T22088] binder: 22083:22088 ioctl c00c620f 200000000180 returned -22 [ 627.182547][T22074] random: crng reseeded on system resumption [ 627.506742][T22102] sysfs_service_op_show: Client not running :-5: [ 629.113508][ T30] audit: type=1804 audit(4294969741.676:136): pid=22086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1827" name=2F6E6577726F6F742F3337352F22050820 dev="tmpfs" ino=1997 res=1 errno=0 [ 629.229129][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.245624][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.696479][ T30] audit: type=1800 audit(4294969741.676:137): pid=22086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1827" name=22050820 dev="tmpfs" ino=1997 res=0 errno=0 [ 631.163948][T22190] FAULT_INJECTION: forcing a failure. [ 631.163948][T22190] name failslab, interval 1, probability 0, space 0, times 0 [ 631.179171][T22190] CPU: 1 UID: 0 PID: 22190 Comm: syz.1.1837 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 631.179214][T22190] Tainted: [U]=USER [ 631.179222][T22190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.179237][T22190] Call Trace: [ 631.179247][T22190] [ 631.179266][T22190] dump_stack_lvl+0x16c/0x1f0 [ 631.179308][T22190] should_fail_ex+0x512/0x640 [ 631.179343][T22190] ? fs_reclaim_acquire+0xae/0x150 [ 631.179379][T22190] ? tomoyo_encode2+0x100/0x3e0 [ 631.179410][T22190] should_failslab+0xc2/0x120 [ 631.179439][T22190] __kmalloc_noprof+0xd2/0x510 [ 631.179464][T22190] ? d_absolute_path+0x136/0x1a0 [ 631.179502][T22190] tomoyo_encode2+0x100/0x3e0 [ 631.179534][T22190] tomoyo_encode+0x29/0x50 [ 631.179562][T22190] tomoyo_realpath_from_path+0x18f/0x6e0 [ 631.179600][T22190] tomoyo_mkdev_perm+0x22b/0x570 [ 631.179624][T22190] ? tomoyo_mkdev_perm+0x217/0x570 [ 631.179651][T22190] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 631.179679][T22190] ? __lock_acquire+0xb97/0x1ce0 [ 631.179716][T22190] ? do_raw_spin_lock+0x12c/0x2b0 [ 631.179769][T22190] ? __pfx_current_check_access_path+0x10/0x10 [ 631.179806][T22190] ? simple_lookup+0x105/0x1d0 [ 631.179836][T22190] tomoyo_path_mknod+0x12a/0x190 [ 631.179861][T22190] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 631.179887][T22190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 631.179930][T22190] security_path_mknod+0x161/0x310 [ 631.179963][T22190] do_mknodat+0x239/0x5d0 [ 631.179998][T22190] ? __pfx_do_mknodat+0x10/0x10 [ 631.180025][T22190] ? getname_flags.part.0+0x1c5/0x550 [ 631.180071][T22190] __x64_sys_mknod+0x87/0xb0 [ 631.180102][T22190] do_syscall_64+0xcd/0x490 [ 631.180137][T22190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.180164][T22190] RIP: 0033:0x7fcebf18ebe9 [ 631.180186][T22190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.180211][T22190] RSP: 002b:00007fcebff16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 631.180238][T22190] RAX: ffffffffffffffda RBX: 00007fcebf3b5fa0 RCX: 00007fcebf18ebe9 [ 631.180267][T22190] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 631.180284][T22190] RBP: 00007fcebf211e19 R08: 0000000000000000 R09: 0000000000000000 [ 631.180301][T22190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.180318][T22190] R13: 00007fcebf3b6038 R14: 00007fcebf3b5fa0 R15: 00007ffe2e549ea8 [ 631.180356][T22190] [ 631.180529][T22190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 633.259084][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 634.721862][T22331] random: crng reseeded on system resumption [ 635.719554][T22387] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 635.729553][T22387] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 636.792002][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 636.884024][T22414] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 637.489428][ T10] Process accounting resumed [ 638.090102][T22445] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 638.192260][ T6769] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3370 with max blocks 122 with error 117 [ 638.242124][ T6769] EXT4-fs (sda1): This should not happen!! Data will be lost [ 638.242124][ T6769] [ 638.325240][ T6769] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1350 with max blocks 47 with error 117 [ 638.342500][ T6769] EXT4-fs (sda1): This should not happen!! Data will be lost [ 638.342500][ T6769] [ 639.446531][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 640.145720][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 640.329090][T22484] ksmbd: Unknown IPC event: 14, ignore. [ 640.334835][T22483] ksmbd: Unknown IPC event: 14, ignore. [ 640.483435][T22487] svc: failed to register nfsdv3 RPC service (errno 111). [ 640.881816][T22487] svc: failed to register nfsaclv3 RPC service (errno 111). [ 642.252482][T22521] vhci_hcd: invalid port number 16 [ 642.257632][T22521] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 643.300051][ T30] audit: type=1804 audit(4294969755.930:138): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1878" name=2F6E6577726F6F742F3131392F22050820 dev="tmpfs" ino=642 res=1 errno=0 [ 643.686256][ T30] audit: type=1800 audit(4294969755.960:139): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1878" name=22050820 dev="tmpfs" ino=642 res=0 errno=0 [ 644.944215][T22570] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1880'. [ 645.355587][T22572] futex_wake_op: syz.3.1881 tries to shift op by -9; fix this program [ 647.328464][T22646] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 647.652276][T22657] svc: failed to register nfsdv3 RPC service (errno 111). [ 647.660628][T22657] svc: failed to register nfsaclv3 RPC service (errno 111). [ 647.800910][T22668] FAULT_INJECTION: forcing a failure. [ 647.800910][T22668] name fail_futex, interval 1, probability 0, space 0, times 0 [ 647.837929][T22668] CPU: 0 UID: 0 PID: 22668 Comm: syz.0.1892 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 647.837979][T22668] Tainted: [U]=USER [ 647.837990][T22668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.838006][T22668] Call Trace: [ 647.838016][T22668] [ 647.838026][T22668] dump_stack_lvl+0x16c/0x1f0 [ 647.838066][T22668] should_fail_ex+0x512/0x640 [ 647.838105][T22668] get_futex_key+0x1d0/0x1560 [ 647.838143][T22668] ? __pfx_get_futex_key+0x10/0x10 [ 647.838185][T22668] futex_wait_setup+0x9d/0x550 [ 647.838231][T22668] __futex_wait+0x194/0x2f0 [ 647.838269][T22668] ? __pfx___futex_wait+0x10/0x10 [ 647.838309][T22668] ? __pfx_futex_wake_mark+0x10/0x10 [ 647.838349][T22668] ? futex_private_hash_put+0x176/0x300 [ 647.838393][T22668] ? futex_private_hash_put+0x18a/0x300 [ 647.838427][T22668] futex_wait+0xe8/0x380 [ 647.838465][T22668] ? __pfx_futex_wait+0x10/0x10 [ 647.838514][T22668] ? find_held_lock+0x2b/0x80 [ 647.838547][T22668] do_futex+0x229/0x350 [ 647.838580][T22668] ? __pfx_do_futex+0x10/0x10 [ 647.838621][T22668] __x64_sys_futex+0x1e0/0x4c0 [ 647.838654][T22668] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 647.838689][T22668] ? __pfx___x64_sys_futex+0x10/0x10 [ 647.838722][T22668] ? xfd_validate_state+0x61/0x180 [ 647.838770][T22668] do_syscall_64+0xcd/0x490 [ 647.838805][T22668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.838833][T22668] RIP: 0033:0x7f7b9718ebe9 [ 647.838854][T22668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.838881][T22668] RSP: 002b:00007f7b97f620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 647.838906][T22668] RAX: ffffffffffffffda RBX: 00007f7b973b5fa8 RCX: 00007f7b9718ebe9 [ 647.838925][T22668] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b973b5fa8 [ 647.838942][T22668] RBP: 00007f7b973b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 647.838958][T22668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.838974][T22668] R13: 00007f7b973b6038 R14: 00007ffe371c6b70 R15: 00007ffe371c6c58 [ 647.839009][T22668] [ 648.627102][ T30] audit: type=1804 audit(4294969761.288:140): pid=22713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1894" name=2F6E6577726F6F742F3132342F22050820 dev="tmpfs" ino=668 res=1 errno=0 [ 648.678049][ T30] audit: type=1800 audit(4294969761.318:141): pid=22713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1894" name=22050820 dev="tmpfs" ino=668 res=0 errno=0 [ 649.031995][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 649.416690][T22762] device-mapper: ioctl: Unable to rename non-existent device,  to [ 650.575213][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 653.703306][T22911] binder: 22910:22911 unknown command 4294967282 [ 653.709687][T22911] binder: 22910:22911 ioctl c0306201 2000000000c0 returned -22 [ 653.991197][T22930] vhci_hcd: invalid port number 255 [ 653.996438][T22930] vhci_hcd: default hub control req: 5903 v0001 i00ff l1 [ 654.264029][T22942] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 654.272098][T22942] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 654.740305][ T30] audit: type=1804 audit(4294969767.379:142): pid=22873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1909" name=2F6E6577726F6F742F3338372F22050820 dev="tmpfs" ino=2059 res=1 errno=0 [ 654.848574][ T30] audit: type=1800 audit(4294969767.379:143): pid=22873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1909" name=22050820 dev="tmpfs" ino=2059 res=0 errno=0 [ 655.385967][T22964] openvswitch: netlink: Multiple metadata blocks provided [ 656.773062][T16057] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 657.012709][T23014] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 657.032616][T23014] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 657.436928][T23028] can: request_module (can-proto-0) failed. [ 657.969051][T23063] can: request_module (can-proto-0) failed. [ 659.251775][T23113] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 659.398193][T23126] FAULT_INJECTION: forcing a failure. [ 659.398193][T23126] name fail_futex, interval 1, probability 0, space 0, times 0 [ 659.515263][T23126] CPU: 1 UID: 0 PID: 23126 Comm: syz.2.1932 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 659.515306][T23126] Tainted: [U]=USER [ 659.515315][T23126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 659.515328][T23126] Call Trace: [ 659.515338][T23126] [ 659.515347][T23126] dump_stack_lvl+0x16c/0x1f0 [ 659.515383][T23126] should_fail_ex+0x512/0x640 [ 659.515421][T23126] get_futex_key+0x1d0/0x1560 [ 659.515455][T23126] ? __pfx_get_futex_key+0x10/0x10 [ 659.515483][T23126] ? futex_private_hash_put+0x176/0x300 [ 659.515521][T23126] futex_wake+0xea/0x530 [ 659.515559][T23126] ? __pfx_futex_wake+0x10/0x10 [ 659.515603][T23126] ? __lock_acquire+0x62e/0x1ce0 [ 659.515642][T23126] do_futex+0x1e3/0x350 [ 659.515673][T23126] ? __pfx_do_futex+0x10/0x10 [ 659.515712][T23126] __x64_sys_futex+0x1e0/0x4c0 [ 659.515745][T23126] ? fdget_pos+0x2b8/0x370 [ 659.515774][T23126] ? __pfx___x64_sys_futex+0x10/0x10 [ 659.515803][T23126] ? ksys_read+0x1ac/0x250 [ 659.515830][T23126] ? __pfx_ksys_read+0x10/0x10 [ 659.515867][T23126] do_syscall_64+0xcd/0x490 [ 659.515900][T23126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.515924][T23126] RIP: 0033:0x7f4ac158ebe9 [ 659.515944][T23126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.515968][T23126] RSP: 002b:00007f4ac24480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 659.515991][T23126] RAX: ffffffffffffffda RBX: 00007f4ac17b6368 RCX: 00007f4ac158ebe9 [ 659.516009][T23126] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ac17b636c [ 659.516024][T23126] RBP: 00007f4ac17b6360 R08: 00007f4ac24cd000 R09: 0000000000000000 [ 659.516040][T23126] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 659.516056][T23126] R13: 00007f4ac17b63f8 R14: 00007ffe17815530 R15: 00007ffe17815618 [ 659.516090][T23126] [ 662.134812][T23172] FAULT_INJECTION: forcing a failure. [ 662.134812][T23172] name failslab, interval 1, probability 0, space 0, times 0 [ 662.586878][T23188] : Can't lookup blockdev [ 662.599922][ T30] audit: type=1800 audit(4294969775.330:144): pid=23188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1942" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 662.821674][T23172] CPU: 1 UID: 0 PID: 23172 Comm: syz.0.1938 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 662.821721][T23172] Tainted: [U]=USER [ 662.821730][T23172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.821746][T23172] Call Trace: [ 662.821755][T23172] [ 662.821766][T23172] dump_stack_lvl+0x16c/0x1f0 [ 662.821803][T23172] should_fail_ex+0x512/0x640 [ 662.821858][T23172] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 662.821895][T23172] should_failslab+0xc2/0x120 [ 662.821929][T23172] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 662.821960][T23172] ? lockdep_init_map_type+0x5c/0x280 [ 662.821992][T23172] ? __d_alloc+0x32/0xae0 [ 662.822028][T23172] __d_alloc+0x32/0xae0 [ 662.822062][T23172] d_alloc_pseudo+0x1c/0xc0 [ 662.822100][T23172] alloc_file_pseudo+0xcf/0x230 [ 662.822140][T23172] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 662.822178][T23172] ? alloc_fd+0x471/0x7d0 [ 662.822212][T23172] sock_alloc_file+0x50/0x210 [ 662.822369][T23172] __sys_socket+0x1c0/0x260 [ 662.822400][T23172] ? __pfx___sys_socket+0x10/0x10 [ 662.822425][T23172] ? xfd_validate_state+0x61/0x180 [ 662.822470][T23172] __x64_sys_socket+0x72/0xb0 [ 662.822494][T23172] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.822526][T23172] do_syscall_64+0xcd/0x490 [ 662.822561][T23172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.822587][T23172] RIP: 0033:0x7f7b9718ebe9 [ 662.822610][T23172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.822636][T23172] RSP: 002b:00007f7b97f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 662.822662][T23172] RAX: ffffffffffffffda RBX: 00007f7b973b6180 RCX: 00007f7b9718ebe9 [ 662.822680][T23172] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 662.822696][T23172] RBP: 00007f7b97211e19 R08: 0000000000000000 R09: 0000000000000000 [ 662.822712][T23172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.822728][T23172] R13: 00007f7b973b6218 R14: 00007f7b973b6180 R15: 00007ffe371c6c58 [ 662.822763][T23172] [ 666.258503][ T30] audit: type=1804 audit(4294969779.019:145): pid=23391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1951" name=2F6E6577726F6F742F3134342F22050820 dev="tmpfs" ino=772 res=1 errno=0 [ 666.282535][ T30] audit: type=1800 audit(4294969779.019:146): pid=23391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1951" name=22050820 dev="tmpfs" ino=772 res=0 errno=0 [ 667.275873][T23422] ecryptfs_miscdev_write: Invalid packet size [0] [ 668.212122][T23500] can: request_module (can-proto-0) failed. [ 668.665525][ T49] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 907 with max blocks 11 with error 117 [ 668.694389][ T49] EXT4-fs (sda1): This should not happen!! Data will be lost [ 668.694389][ T49] [ 669.043412][T23508] svc: failed to register nfsdv3 RPC service (errno 111). [ 669.085638][T23508] svc: failed to register nfsaclv3 RPC service (errno 111). [ 669.727182][T23517] random: crng reseeded on system resumption [ 670.137172][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1959'. [ 671.132861][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 671.404582][ T30] audit: type=1804 audit(4294969784.176:147): pid=23564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1964" name=2F6E6577726F6F742F3430322F22050820 dev="tmpfs" ino=2153 res=1 errno=0 [ 671.966613][ T30] audit: type=1800 audit(4294969784.176:148): pid=23564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1964" name=22050820 dev="tmpfs" ino=2153 res=0 errno=0 [ 672.173975][T23628] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 672.181424][T23628] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 673.752628][T23672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1973'. [ 673.812393][ T30] audit: type=1806 audit(4294969786.558:149): xattr="." res=0 [ 674.000113][T23675] can: request_module (can-proto-0) failed. [ 674.492351][T23678] svc: failed to register nfsdv3 RPC service (errno 111). [ 674.540527][T23678] svc: failed to register nfsaclv3 RPC service (errno 111). [ 678.758686][T23775] can: request_module (can-proto-0) failed. [ 679.030496][T23792] svc: failed to register nfsdv3 RPC service (errno 111). [ 679.037037][T23787] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 679.119910][T23792] svc: failed to register nfsaclv3 RPC service (errno 111). [ 680.400550][T23849] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 680.444673][T23849] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 680.885447][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1994'. [ 682.827280][T23912] netlink: 'syz.0.1998': attribute type 2 has an invalid length. [ 683.991980][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 685.690619][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 686.389925][ T30] audit: type=1804 audit(4294969799.244:150): pid=24016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2011" name=2F6E6577726F6F742F3431322F22050820 dev="tmpfs" ino=2209 res=1 errno=0 [ 686.417731][ T30] audit: type=1800 audit(4294969799.274:151): pid=24016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2011" name=22050820 dev="tmpfs" ino=2209 res=0 errno=0 [ 686.656373][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 688.146609][T24080] can: request_module (can-proto-0) failed. [ 688.958701][T24113] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 688.973429][T24113] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 688.980739][T24113] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 688.986957][T24113] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 690.206861][T24156] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 690.315834][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.330664][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.690314][T24158] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 691.027614][T16057] Bluetooth: hci2: command 0x0c1a tx timeout [ 691.033676][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 691.040389][ T5874] Bluetooth: hci1: command 0x0c1a tx timeout [ 691.046598][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 691.600518][T24239] svc: failed to register nfsdv3 RPC service (errno 111). [ 691.613953][T24239] svc: failed to register nfsaclv3 RPC service (errno 111). [ 691.641781][T24247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 691.739340][T24249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 693.538716][T24275] zswap: compressor not available [ 694.079854][T24321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 694.917674][T24327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 695.502349][T24343] svc: failed to register nfsdv3 RPC service (errno 111). [ 696.286300][T24343] svc: failed to register nfsaclv3 RPC service (errno 111). [ 696.409780][T24364] can: request_module (can-proto-0) failed. [ 697.530671][T24425] can: request_module (can-proto-0) failed. [ 699.914563][T24481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 700.557891][T24491] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 700.689046][T24491] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 701.126542][T24503] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 701.913849][T24523] can: request_module (can-proto-0) failed. [ 702.003841][T24527] can: request_module (can-proto-0) failed. [ 702.018030][T24510] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 702.290179][T24532] zswap: compressor not available [ 702.296338][T24534] Setting dangerous option i915.mitigations - tainting kernel [ 702.813942][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 702.945167][T24563] vivid-003: ================= START STATUS ================= [ 702.952918][T24563] vivid-003: Radio HW Seek Mode: Bounded [ 702.959262][T24563] vivid-003: Radio Programmable HW Seek: false [ 702.965496][T24563] vivid-003: RDS Rx I/O Mode: Block I/O [ 702.971168][T24563] vivid-003: Generate RBDS Instead of RDS: false [ 702.977591][T24563] vivid-003: RDS Reception: true [ 702.982530][T24563] vivid-003: RDS Program Type: 0 inactive [ 702.988354][T24563] vivid-003: RDS PS Name: inactive [ 702.993644][T24563] vivid-003: RDS Radio Text: inactive [ 702.999237][T24563] vivid-003: RDS Traffic Announcement: false inactive [ 703.019527][T24563] vivid-003: RDS Traffic Program: false inactive [ 703.031737][T24563] vivid-003: RDS Music: false inactive [ 703.040528][T24563] vivid-003: ================== END STATUS ================== [ 704.428247][T24589] svc: failed to register nfsdv3 RPC service (errno 111). [ 704.454990][T24589] svc: failed to register nfsaclv3 RPC service (errno 111). [ 704.788050][T24603] can: request_module (can-proto-0) failed. [ 705.765887][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 706.366904][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 708.675964][T24729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 712.866808][T24831] can: request_module (can-proto-0) failed. [ 712.948106][T24816] cgroup: fork rejected by pids controller in /syz0 [ 714.436927][T24859] can: request_module (can-proto-0) failed. [ 715.405133][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'. [ 717.575489][ T30] audit: type=1804 audit(4294969830.576:152): pid=24951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2115" name=2F6E6577726F6F742F3432362F22050820 dev="tmpfs" ino=2263 res=1 errno=0 [ 717.659376][ T30] audit: type=1800 audit(4294969830.576:153): pid=24951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2115" name=22050820 dev="tmpfs" ino=2263 res=0 errno=0 [ 719.181450][ T30] audit: type=1804 audit(4294969832.064:154): pid=25019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2121" name=2F6E6577726F6F742F3231372F22050820 dev="tmpfs" ino=1154 res=1 errno=0 [ 719.373267][ T30] audit: type=1800 audit(4294969832.064:155): pid=25019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2121" name=22050820 dev="tmpfs" ino=1154 res=0 errno=0 [ 721.781379][T25079] svc: failed to register nfsdv3 RPC service (errno 111). [ 721.933309][T25079] svc: failed to register nfsaclv3 RPC service (errno 111). [ 721.955472][ T30] audit: type=1804 audit(4294969834.979:156): pid=25093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2130" name="/newroot/218/file0" dev="tmpfs" ino=1160 res=1 errno=0 [ 722.256771][ T30] audit: type=1804 audit(4294969834.989:157): pid=25093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2130" name="/newroot/218/file0" dev="tmpfs" ino=1160 res=1 errno=0 [ 725.123624][T25120] can: request_module (can-proto-0) failed. [ 728.449490][ T30] audit: type=1804 audit(4294969841.523:158): pid=25241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2146" name=2F6E6577726F6F742F3434342F22050820 dev="tmpfs" ino=2393 res=1 errno=0 [ 728.521159][ T30] audit: type=1800 audit(4294969841.523:159): pid=25241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2146" name=22050820 dev="tmpfs" ino=2393 res=0 errno=0 [ 729.637152][ T6770] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3536 with max blocks 48 with error 117 [ 729.679135][ T6770] EXT4-fs (sda1): This should not happen!! Data will be lost [ 729.679135][ T6770] [ 733.091705][ T30] audit: type=1804 audit(4294969846.197:160): pid=25409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2161" name=2F6E6577726F6F742F3233322F22050820 dev="tmpfs" ino=1233 res=1 errno=0 [ 733.118999][ T30] audit: type=1800 audit(4294969846.197:161): pid=25409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2161" name=22050820 dev="tmpfs" ino=1233 res=0 errno=0 [ 735.411219][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 735.649948][T25496] netlink: 'syz.0.2169': attribute type 19 has an invalid length. [ 735.658519][T25496] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2169'. [ 740.074631][ T30] audit: type=1804 audit(4294969853.203:162): pid=25651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2179" name=2F6E6577726F6F742F3233382F22050820 dev="tmpfs" ino=1264 res=1 errno=0 [ 740.211836][T24199] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 740.251546][ T30] audit: type=1800 audit(4294969853.213:163): pid=25651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2179" name=22050820 dev="tmpfs" ino=1264 res=0 errno=0 [ 743.092038][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 743.104242][T25739] vivid-007: ================= START STATUS ================= [ 743.303961][T25739] vivid-007: Generate PTS: true [ 743.466425][T25739] vivid-007: Generate SCR: true [ 743.728715][T25739] tpg source WxH: 320x240 (Y'CbCr) [ 743.778099][T25739] tpg field: 1 [ 743.793346][T25739] tpg crop: (0,0)/320x240 [ 743.831374][T25739] tpg compose: (0,0)/320x240 [ 743.902571][T25739] tpg colorspace: 8 [ 743.989574][T25739] tpg transfer function: 0/0 [ 744.021236][T25739] tpg Y'CbCr encoding: 0/0 [ 744.044808][T25739] tpg quantization: 0/0 [ 744.049008][T25739] tpg RGB range: 0/2 [ 744.090487][T25739] vivid-007: ================== END STATUS ================== [ 745.223834][T25767] svc: failed to register nfsdv3 RPC service (errno 111). [ 745.335326][T25767] svc: failed to register nfsaclv3 RPC service (errno 111). [ 746.114056][T25778] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 746.120418][T25778] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 746.126807][T25778] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 746.139205][T25778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 746.156252][T25779] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 746.648663][T25795] netlink: 'syz.1.2198': attribute type 1 has an invalid length. [ 746.775681][T25801] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2199'. [ 746.902330][ T30] audit: type=1804 audit(4294969860.079:164): pid=25786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2196" name=2F6E6577726F6F742F3435382F22050820 dev="tmpfs" ino=2468 res=1 errno=0 [ 747.503191][ T30] audit: type=1800 audit(4294969860.079:165): pid=25786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2196" name=22050820 dev="tmpfs" ino=2468 res=0 errno=0 [ 747.533688][T24199] Bluetooth: hci0: command 0x0c1a tx timeout [ 747.699053][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'. [ 747.839280][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 747.978528][T25808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2200'. [ 748.173922][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 748.184774][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 748.195910][T24199] Bluetooth: hci2: command 0x0c1a tx timeout [ 751.438127][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.453600][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.537737][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'. [ 753.391762][T25937] can: request_module (can-proto-0) failed. [ 754.975314][T25985] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 754.982857][T25985] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 755.031757][T25982] FAULT_INJECTION: forcing a failure. [ 755.031757][T25982] name fail_futex, interval 1, probability 0, space 0, times 0 [ 755.405824][T25982] CPU: 0 UID: 0 PID: 25982 Comm: syz.2.2219 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 755.405871][T25982] Tainted: [U]=USER [ 755.405880][T25982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 755.405897][T25982] Call Trace: [ 755.405906][T25982] [ 755.405917][T25982] dump_stack_lvl+0x16c/0x1f0 [ 755.405957][T25982] should_fail_ex+0x512/0x640 [ 755.405997][T25982] get_futex_key+0x1d0/0x1560 [ 755.406033][T25982] ? __pfx_get_futex_key+0x10/0x10 [ 755.406078][T25982] futex_wait_setup+0x9d/0x550 [ 755.406125][T25982] __futex_wait+0x194/0x2f0 [ 755.406162][T25982] ? __pfx___futex_wait+0x10/0x10 [ 755.406204][T25982] ? __pfx_futex_wake_mark+0x10/0x10 [ 755.406244][T25982] ? futex_private_hash_put+0x176/0x300 [ 755.406279][T25982] ? futex_private_hash_put+0x18a/0x300 [ 755.406313][T25982] futex_wait+0xe8/0x380 [ 755.406347][T25982] ? __pfx_futex_wait+0x10/0x10 [ 755.406402][T25982] do_futex+0x229/0x350 [ 755.406434][T25982] ? __pfx_do_futex+0x10/0x10 [ 755.406473][T25982] __x64_sys_futex+0x1e0/0x4c0 [ 755.406509][T25982] ? __pfx___x64_sys_futex+0x10/0x10 [ 755.406539][T25982] ? __sys_getsockopt+0x144/0x1b0 [ 755.406580][T25982] do_syscall_64+0xcd/0x490 [ 755.406627][T25982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.406653][T25982] RIP: 0033:0x7f4ac158ebe9 [ 755.406675][T25982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.406701][T25982] RSP: 002b:00007f4ac24cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 755.406726][T25982] RAX: ffffffffffffffda RBX: 00007f4ac17b5fa8 RCX: 00007f4ac158ebe9 [ 755.406744][T25982] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ac17b5fa8 [ 755.406760][T25982] RBP: 00007f4ac17b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 755.406776][T25982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.406790][T25982] R13: 00007f4ac17b6038 R14: 00007ffe17815530 R15: 00007ffe17815618 [ 755.406820][T25982] [ 755.630551][T25982] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 755.750881][T25982] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 757.658655][T16057] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 759.208306][T26118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 759.711242][T24199] Bluetooth: hci0: command 0x0c1a tx timeout [ 764.263753][T26204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 766.201190][ T30] audit: type=1804 audit(4294967305.186:166): pid=26254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2259" name=2F6E6577726F6F742F3237372F22050820 dev="tmpfs" ino=1471 res=1 errno=0 [ 766.473187][ T30] audit: type=1800 audit(4294967305.186:167): pid=26254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2259" name=22050820 dev="tmpfs" ino=1471 res=0 errno=0 [ 768.408946][T26300] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 768.426948][T26300] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 768.518093][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 771.011966][T26320] zswap: compressor not available [ 771.046813][T26319] Setting dangerous option i915.mitigations - tainting kernel [ 772.354800][T26355] vivid-003: ================= START STATUS ================= [ 772.362487][T26355] vivid-003: Radio HW Seek Mode: Bounded [ 772.409033][T26355] vivid-003: Radio Programmable HW Seek: false [ 772.435848][T26355] vivid-003: RDS Rx I/O Mode: Block I/O [ 772.441478][T26355] vivid-003: Generate RBDS Instead of RDS: false [ 772.451567][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 772.462171][T26355] vivid-003: RDS Reception: true [ 772.469172][T26355] vivid-003: RDS Program Type: 0 inactive [ 772.475108][T26355] vivid-003: RDS PS Name: inactive [ 772.480353][T26355] vivid-003: RDS Radio Text: inactive [ 772.486388][T26355] vivid-003: RDS Traffic Announcement: false inactive [ 772.496609][T26355] vivid-003: RDS Traffic Program: false inactive [ 772.503102][T26355] vivid-003: RDS Music: false inactive [ 772.514061][T26355] vivid-003: ================== END STATUS ================== [ 773.937378][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 777.239791][T26470] zswap: compressor not available [ 777.281055][T26474] Setting dangerous option i915.mitigations - tainting kernel [ 777.404315][T26488] sp0: Synchronizing with TNC [ 782.098164][T26616] random: crng reseeded on system resumption [ 782.637381][T26644] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 783.360458][T26655] can: request_module (can-proto-0) failed. [ 784.954882][T24199] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 784.954920][T24199] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 784.971052][T24199] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 784.971081][T24199] Bluetooth: hci1: Unknown advertising packet type: 0x3d [ 784.978129][T24199] Bluetooth: hci1: Unknown advertising packet type: 0x1c [ 784.985495][T24199] Bluetooth: hci1: adv larger than maximum supported [ 784.992931][T24199] Bluetooth: hci1: adv larger than maximum supported [ 784.999934][T24199] Bluetooth: hci1: Malformed LE Event: 0x0d [ 785.023184][T24199] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 785.023210][T24199] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 785.038614][T24199] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 785.038643][T24199] Bluetooth: hci1: Unknown advertising packet type: 0x3d [ 785.045680][T24199] Bluetooth: hci1: Unknown advertising packet type: 0x1c [ 785.052851][T24199] Bluetooth: hci1: adv larger than maximum supported [ 785.059947][T24199] Bluetooth: hci1: adv larger than maximum supported [ 785.067175][T24199] Bluetooth: hci1: Malformed LE Event: 0x0d [ 786.447814][T26734] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 786.455401][T26734] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 788.193256][T26826] svc: failed to register nfsdv3 RPC service (errno 111). [ 788.201847][T26826] svc: failed to register nfsaclv3 RPC service (errno 111). [ 788.488280][T26840] FAULT_INJECTION: forcing a failure. [ 788.488280][T26840] name failslab, interval 1, probability 0, space 0, times 0 [ 788.520697][T26840] CPU: 1 UID: 0 PID: 26840 Comm: syz.1.2314 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 788.520740][T26840] Tainted: [U]=USER [ 788.520749][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.520763][T26840] Call Trace: [ 788.520772][T26840] [ 788.520783][T26840] dump_stack_lvl+0x16c/0x1f0 [ 788.520818][T26840] should_fail_ex+0x512/0x640 [ 788.520850][T26840] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 788.520883][T26840] should_failslab+0xc2/0x120 [ 788.520914][T26840] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 788.520943][T26840] ? getname_flags.part.0+0x4c/0x550 [ 788.520984][T26840] getname_flags.part.0+0x4c/0x550 [ 788.521037][T26840] getname_flags+0x93/0xf0 [ 788.521064][T26840] do_sys_openat2+0xb8/0x1d0 [ 788.521099][T26840] ? __pfx_do_sys_openat2+0x10/0x10 [ 788.521138][T26840] ? __fget_files+0x20e/0x3c0 [ 788.521169][T26840] __x64_sys_openat+0x174/0x210 [ 788.521203][T26840] ? __pfx___x64_sys_openat+0x10/0x10 [ 788.521237][T26840] ? ksys_write+0x1ac/0x250 [ 788.521275][T26840] do_syscall_64+0xcd/0x490 [ 788.521309][T26840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.521335][T26840] RIP: 0033:0x7fcebf18ebe9 [ 788.521355][T26840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.521380][T26840] RSP: 002b:00007fcebff16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 788.521404][T26840] RAX: ffffffffffffffda RBX: 00007fcebf3b5fa0 RCX: 00007fcebf18ebe9 [ 788.521421][T26840] RDX: 000000000000e282 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 788.521438][T26840] RBP: 00007fcebff16090 R08: 0000000000000000 R09: 0000000000000000 [ 788.521453][T26840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.521468][T26840] R13: 00007fcebf3b6038 R14: 00007fcebf3b5fa0 R15: 00007ffe2e549ea8 [ 788.521502][T26840] [ 789.220141][T26852] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 789.241957][T26852] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 789.665477][T26863] can: request_module (can-proto-0) failed. [ 791.062977][T26899] svc: failed to register nfsdv3 RPC service (errno 111). [ 791.072108][T26899] svc: failed to register nfsaclv3 RPC service (errno 111). [ 791.104956][T26886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'. [ 791.626740][ T30] audit: type=1804 audit(4294967330.779:168): pid=26896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2323" name=2F6E6577726F6F742F3437392F22050820 dev="tmpfs" ino=2581 res=1 errno=0 [ 791.662814][T26892] zswap: compressor not available [ 791.764058][ T30] audit: type=1800 audit(4294967330.779:169): pid=26896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2323" name=22050820 dev="tmpfs" ino=2581 res=0 errno=0 [ 792.561211][T26926] FAULT_INJECTION: forcing a failure. [ 792.561211][T26926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.606948][T26926] CPU: 1 UID: 0 PID: 26926 Comm: syz.3.2327 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 792.606993][T26926] Tainted: [U]=USER [ 792.607001][T26926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.607016][T26926] Call Trace: [ 792.607025][T26926] [ 792.607035][T26926] dump_stack_lvl+0x16c/0x1f0 [ 792.607071][T26926] should_fail_ex+0x512/0x640 [ 792.607108][T26926] strncpy_from_user+0x3b/0x2e0 [ 792.607144][T26926] getname_flags.part.0+0x8f/0x550 [ 792.607184][T26926] getname_flags+0x93/0xf0 [ 792.607210][T26926] do_sys_openat2+0xb8/0x1d0 [ 792.607245][T26926] ? __pfx_do_sys_openat2+0x10/0x10 [ 792.607283][T26926] ? __fget_files+0x20e/0x3c0 [ 792.607316][T26926] __x64_sys_openat+0x174/0x210 [ 792.607350][T26926] ? __pfx___x64_sys_openat+0x10/0x10 [ 792.607384][T26926] ? ksys_write+0x1ac/0x250 [ 792.607424][T26926] do_syscall_64+0xcd/0x490 [ 792.607457][T26926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.607482][T26926] RIP: 0033:0x7f67c258ebe9 [ 792.607502][T26926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.607526][T26926] RSP: 002b:00007f67c3480038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 792.607551][T26926] RAX: ffffffffffffffda RBX: 00007f67c27b5fa0 RCX: 00007f67c258ebe9 [ 792.607568][T26926] RDX: 000000000000e282 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 792.607584][T26926] RBP: 00007f67c3480090 R08: 0000000000000000 R09: 0000000000000000 [ 792.607600][T26926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.607615][T26926] R13: 00007f67c27b6038 R14: 00007f67c27b5fa0 R15: 00007ffea3dfe4e8 [ 792.607649][T26926] [ 792.925593][T26939] FAULT_INJECTION: forcing a failure. [ 792.925593][T26939] name failslab, interval 1, probability 0, space 0, times 0 [ 792.939838][T26939] CPU: 1 UID: 0 PID: 26939 Comm: syz.1.2329 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 792.939866][T26939] Tainted: [U]=USER [ 792.939871][T26939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.939880][T26939] Call Trace: [ 792.939886][T26939] [ 792.939934][T26939] dump_stack_lvl+0x16c/0x1f0 [ 792.939959][T26939] should_fail_ex+0x512/0x640 [ 792.939980][T26939] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 792.940001][T26939] should_failslab+0xc2/0x120 [ 792.940022][T26939] __kmalloc_cache_noprof+0x6a/0x3e0 [ 792.940038][T26939] ? percpu_ref_init+0xec/0x410 [ 792.940057][T26939] ? __pfx_css_release+0x10/0x10 [ 792.940076][T26939] percpu_ref_init+0xec/0x410 [ 792.940093][T26939] ? init_and_link_css+0x32c/0x700 [ 792.940109][T26939] cgroup_apply_control_enable+0x50b/0xbb0 [ 792.940137][T26939] cgroup_mkdir+0x5e7/0x11f0 [ 792.940162][T26939] ? __pfx_cgroup_mkdir+0x10/0x10 [ 792.940186][T26939] kernfs_iop_mkdir+0x111/0x190 [ 792.940206][T26939] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 792.940225][T26939] vfs_mkdir+0x590/0x8c0 [ 792.940241][T26939] do_mkdirat+0x304/0x3e0 [ 792.940259][T26939] ? __pfx_do_mkdirat+0x10/0x10 [ 792.940278][T26939] ? getname_flags.part.0+0x1c5/0x550 [ 792.940301][T26939] __x64_sys_mkdir+0xef/0x140 [ 792.940318][T26939] do_syscall_64+0xcd/0x490 [ 792.940338][T26939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.940352][T26939] RIP: 0033:0x7fcebf18ebe9 [ 792.940365][T26939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.940379][T26939] RSP: 002b:00007fcebff16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 792.940393][T26939] RAX: ffffffffffffffda RBX: 00007fcebf3b5fa0 RCX: 00007fcebf18ebe9 [ 792.940403][T26939] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 792.940411][T26939] RBP: 00007fcebf211e19 R08: 0000000000000000 R09: 0000000000000000 [ 792.940420][T26939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.940429][T26939] R13: 00007fcebf3b6038 R14: 00007fcebf3b5fa0 R15: 00007ffe2e549ea8 [ 792.940449][T26939] [ 793.242994][ T24] ------------[ cut here ]------------ [ 793.251473][ T24] WARNING: CPU: 1 PID: 24 at kernel/cgroup/rstat.c:488 css_rstat_exit+0x368/0x470 [ 793.261340][ T24] Modules linked in: [ 793.266312][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 793.280067][ T24] Tainted: [U]=USER [ 793.283872][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 793.294138][ T24] Workqueue: cgroup_destroy css_free_rwork_fn [ 793.300429][ T24] RIP: 0010:css_rstat_exit+0x368/0x470 [ 793.306376][ T24] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 19 08 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 0b 08 07 00 90 0f 0b 90 e9 30 ff ff ff [ 793.326489][ T24] RSP: 0018:ffffc900001e7bc0 EFLAGS: 00010293 [ 793.332560][ T24] RAX: 0000000000000000 RBX: ffff8880265a9a00 RCX: ffff8881246c6000 [ 793.341207][ T24] RDX: ffff88801ea80000 RSI: ffffffff81b407a7 RDI: ffffffff8df57e60 [ 793.349496][ T24] RBP: ffff8880265a9a08 R08: 0000000000000005 R09: 0000000000000007 [ 793.357676][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880265a9a20 [ 793.365914][ T24] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 793.373911][ T24] FS: 0000000000000000(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 793.383343][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.390376][ T24] CR2: 00007ffea3dfcfc8 CR3: 0000000076dee000 CR4: 00000000003526f0 [ 793.398759][ T24] Call Trace: [ 793.402038][ T24] [ 793.405230][ T24] css_free_rwork_fn+0x80/0x12e0 [ 793.410175][ T24] ? rcu_is_watching+0x12/0xc0 [ 793.415234][ T24] process_one_work+0x9cc/0x1b70 [ 793.420531][ T24] ? __pfx_delayed_vfree_work+0x10/0x10 [ 793.426447][ T24] ? __pfx_process_one_work+0x10/0x10 [ 793.431856][ T24] ? assign_work+0x1a0/0x250 [ 793.436626][ T24] worker_thread+0x6c8/0xf10 [ 793.441311][ T24] ? __pfx_worker_thread+0x10/0x10 [ 793.446573][ T24] kthread+0x3c5/0x780 [ 793.450735][ T24] ? __pfx_kthread+0x10/0x10 [ 793.455477][ T24] ? rcu_is_watching+0x12/0xc0 [ 793.460231][ T24] ? __pfx_kthread+0x10/0x10 [ 793.465040][ T24] ret_from_fork+0x5d4/0x6f0 [ 793.469989][ T24] ? __pfx_kthread+0x10/0x10 [ 793.474579][ T24] ret_from_fork_asm+0x1a/0x30 [ 793.479974][ T24] [ 793.482983][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 793.490254][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G U 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 793.503697][ T24] Tainted: [U]=USER [ 793.507488][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 793.517539][ T24] Workqueue: cgroup_destroy css_free_rwork_fn [ 793.523636][ T24] Call Trace: [ 793.526906][ T24] [ 793.529830][ T24] dump_stack_lvl+0x3d/0x1f0 [ 793.534419][ T24] vpanic+0x6e8/0x7a0 [ 793.538409][ T24] ? __pfx_vpanic+0x10/0x10 [ 793.542909][ T24] ? css_rstat_exit+0x368/0x470 [ 793.547762][ T24] panic+0xca/0xd0 [ 793.551478][ T24] ? __pfx_panic+0x10/0x10 [ 793.555892][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 793.560997][ T24] check_panic_on_warn+0xab/0xb0 [ 793.566274][ T24] __warn+0xf6/0x3c0 [ 793.570164][ T24] ? css_rstat_exit+0x368/0x470 [ 793.575008][ T24] report_bug+0x3c3/0x580 [ 793.579331][ T24] ? css_rstat_exit+0x368/0x470 [ 793.584174][ T24] handle_bug+0x184/0x210 [ 793.588533][ T24] exc_invalid_op+0x17/0x50 [ 793.593054][ T24] asm_exc_invalid_op+0x1a/0x20 [ 793.598188][ T24] RIP: 0010:css_rstat_exit+0x368/0x470 [ 793.603666][ T24] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 19 08 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 0b 08 07 00 90 0f 0b 90 e9 30 ff ff ff [ 793.623277][ T24] RSP: 0018:ffffc900001e7bc0 EFLAGS: 00010293 [ 793.629344][ T24] RAX: 0000000000000000 RBX: ffff8880265a9a00 RCX: ffff8881246c6000 [ 793.637322][ T24] RDX: ffff88801ea80000 RSI: ffffffff81b407a7 RDI: ffffffff8df57e60 [ 793.645297][ T24] RBP: ffff8880265a9a08 R08: 0000000000000005 R09: 0000000000000007 [ 793.653262][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880265a9a20 [ 793.661232][ T24] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 793.669203][ T24] ? css_rstat_exit+0x367/0x470 [ 793.674067][ T24] css_free_rwork_fn+0x80/0x12e0 [ 793.679013][ T24] ? rcu_is_watching+0x12/0xc0 [ 793.683769][ T24] process_one_work+0x9cc/0x1b70 [ 793.688707][ T24] ? __pfx_delayed_vfree_work+0x10/0x10 [ 793.694250][ T24] ? __pfx_process_one_work+0x10/0x10 [ 793.699624][ T24] ? assign_work+0x1a0/0x250 [ 793.704232][ T24] worker_thread+0x6c8/0xf10 [ 793.708825][ T24] ? __pfx_worker_thread+0x10/0x10 [ 793.713952][ T24] kthread+0x3c5/0x780 [ 793.718148][ T24] ? __pfx_kthread+0x10/0x10 [ 793.722749][ T24] ? rcu_is_watching+0x12/0xc0 [ 793.727507][ T24] ? __pfx_kthread+0x10/0x10 [ 793.732096][ T24] ret_from_fork+0x5d4/0x6f0 [ 793.736722][ T24] ? __pfx_kthread+0x10/0x10 [ 793.741354][ T24] ret_from_fork_asm+0x1a/0x30 [ 793.746143][ T24] [ 793.749840][ T24] Kernel Offset: disabled [ 793.754276][ T24] Rebooting in 86400 seconds..