last executing test programs: 37.095303529s ago: executing program 1 (id=7243): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0x1e, 0x1, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x4}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) write$auto(0x1, 0x0, 0x80000000) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 35.734288047s ago: executing program 1 (id=7245): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/031/001\x00', 0x507380, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x2b, 0x2000a, 0xdf, 0xeb5, 0xffffffffffffffff, 0xffffffffffffffff) sysfs$auto(0x2, 0x26, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r0) keyctl$auto(0x2000000000000017, 0x100, 0xdd6a, 0xfffffffffffffffe, 0x4) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) sysfs$auto(0x6, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 14.592555683s ago: executing program 3 (id=7281): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) landlock_create_ruleset$auto(0x0, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=@bpf_attr_3={0x3, 0x200, 0xdd5, 0x4, 0xa, 0xd, 0x69, 0xff, 0x3, "083760b0c9f9d28a51a8e4b61727954d", 0x0, 0xf2f3, r3, 0x81, 0x7, 0x4, 0x1000, 0x7, 0xffffffff, 0x8, @attach_btf_obj_fd=r3, 0x0, 0x2, 0x82b1, 0x3ff, 0xc9, r3, r3}, 0xb611) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) semctl$auto_GETPID(0x0, 0xc0000000, 0xb, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mlock$auto(0x8001, 0xb) mlock$auto(0x7c88, 0x7fff) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x954) setsockopt$auto_SO_WIFI_STATUS(r0, 0x40, 0x29, &(0x7f0000000040)='\x00', 0x520279ee) 12.740602572s ago: executing program 0 (id=7286): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x1, 0xfffffffb, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xfffffffe}, 0x2, 0x5, 0x4, @inferred, @integer64={0x8, 0x0, 0xf}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x36}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) 12.728875631s ago: executing program 0 (id=7287): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 12.410940446s ago: executing program 0 (id=7295): r0 = socket(0x2, 0x3, 0xa) open(0x0, 0x0, 0xb5d1af1605322c7e) open(0x0, 0x149443, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x60482, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)={0xc}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lo/tx_queue_len\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1d\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 12.203058201s ago: executing program 0 (id=7289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000540)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd2a, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r3, &(0x7f0000000ec0)='9', 0x1) getsockopt$auto_SO_PASSCRED(r3, 0x7, 0x10, &(0x7f0000000400)='batadv\x00', &(0x7f0000000d00)=0x1fe) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x3, 0x2000d, 0x7, 0x17, r3, 0x10008000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000cc0)='MAC802154_HWSIM\x00', 0x8) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) r5 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) splice$auto(r0, 0x0, r5, 0x0, 0x3, 0x9) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000c40), 0x20400, 0x0) write$auto(r1, 0x0, 0x200000009) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snd/midiC2D2\x00', 0x12002, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000280)={{0x7ffffffb, 0x0, 0x0, 0x9, 0xe, 0x1}, 0x542, 0x0, 0x1, 0x74e98a1f, @raw=0xb, @raw=0x9, 0x5, 0x0, &(0x7f0000000180)="7ffa0fd433c4266ca37470d237070a502393cb3bfabc5eda1736999d0b7b62462bf79e80237d9854818b56db62e4e7fe4ddd52e75539abfac37082e0a7088c382ffc3f68db4731b91cb490", &(0x7f0000000440)="2785b8777b82f3a8a825106d030d94da2561717bc96785525c069cd0bc13ca27d99068868c0b5fa87c50614eeba0a336d52d8ebf21672d7718f9704b903d731e055a0006c66b38991d26feba6311034760c7f390911f838b10d2f995c2861e6a752ed810896099053e25a901c94c0708b657461710e25513accea8a55f8cfc9a4548d9a8b66d98656e36f331e57d052f843d0ea71a10"}) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[], 0x730}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) read$auto(r7, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) 12.117592212s ago: executing program 3 (id=7290): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r1 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x3bc, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_RXSC_CONFIG={0x3a4, 0x2, 0x0, 0x1, [@nested={0xec, 0xa0, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @u32}, @generic="069460b98f9dc7a0844bac5f99d369cf85b7bce7ccb087a4a7079f37a38c85546a1dfbe45293e1c9ccf3ee8620f4d72529d24805591014acb8307d7cf8cc62b9f36b528920f1b4bc64afda3bdfe4ed383e07f774e69ab8646329a2375160cfb891a0795e4ede43c691d8685b64a4f040a07717886be5977d1ffc0c3c3f572364026bf909ac97447dffdde3e50a8001bfb7c5b69d6fa1328b8345a2f160403ba385e450c1f61f62adf70d23b31d34fb2f5309a04b7cfee526a28046a7b13c529c3f3805dbcc2c6a1f68649b4fad4e5eed66fc7b6c635272097fbd8cc480b638f7"]}, @typed={0x8, 0x26, 0x0, 0x0, @pid}, @nested={0x1ee, 0xf9, 0x0, 0x1, [@generic="05897bc706c307f193c6007ea5de0588ac8eb37f8c3712ed1241d87f881ccbf47c57afb3a67ac52e329c4aa23f4156d8b8643ad3b58a62be750ea5333e772e370a8a25a54860b3e236a34e34094bcc73a55d501e5f68d24a98f1729125ebc629299a3cda7c00b937b83017066856b252422eebe585f264f022b7ea347ac199e2abb95e13754ff0c345596c17eedb10b723ebef6621557d", @typed={0x8, 0x8a, 0x0, 0x0, @u32=0x1}, @generic="c1ae278f4002a4d35b2fc584509534476e99ab4dfe88b029dcfb75", @generic="71714b582ed7f04f737447b1269c656ac2349fdb354466166c778784554f49d4d0bfd0ccac59d477df7bfa85", @nested={0x4, 0x8}, @generic="5dcb8d6d7d28f6cd916bccaeeb3b81fcbefa9f884fe62bd249bb367525aef91920dcb617101f865fd7fe7a82bbeffa93a21f35432a140c062b1859ee3ff812c8c8784c7e93b838bfce939a008524058d894a8a776b0034ebdf03799ddbe767b1738dfb9b9e24b19c9641a580a9094753cec0fdf061f3e7da08ef35e4a380f2938a15b881a60a1c29fa8a23bbe5ed831c13cc7f81a21cebe49aab1ccdb53054abd80270638a1c23e6a80db1d4574f553063aed8af06392ae421c8cff1ed07d7913b767f0a9c51c7497a74b1f6cbdde283eae15504cbe91c460126dacf5cf517f21147fcc725708b32256f7e272cd7648b01d1a005e84fc750", @typed={0x8, 0x89, 0x0, 0x0, @fd}]}, @generic, @nested={0xa9, 0x11f, 0x0, 0x1, [@generic="5b417f5250ad5387265634a5de59b43f52be81861de2314253d2ec56dacf650eae6d88a2de488bced3b7eaab1544baae2ac19e9172d76b520b406f3e30401bd2c49f6c5b7f62a107254249408c7a048be9ad66fc72286fc9c7", @typed={0x14, 0xeb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x8, 0x131, 0x0, 0x0, @uid}, @typed={0x23, 0x5, 0x0, 0x0, @str='/sys/kernel/debug/sync/sw_sync\x00'}, @nested={0x4, 0x106}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, @nested={0x4, 0x71}, @nested={0xc, 0xb2, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x4}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x4b8483, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1003, 0x15f4da07, 0x3, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x0, 0x2, 0xb]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev5\x00', 0x0, 0x0) (fail_nth: 1) 10.614406227s ago: executing program 0 (id=7292): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x81, 0x968c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x7ff, 0x400008, 0xdf, 0x9b72, 0x2, 0x5) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futimesat$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{&(0x7f0000000280), 0x1, 0x0, 0x5, 0x0, 0x5, 0x7fff}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) read$auto(0xffffffffffffffff, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0x100000001) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) 10.500654794s ago: executing program 3 (id=7294): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) clone$auto(0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) (fail_nth: 4) 7.800712739s ago: executing program 3 (id=7298): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x3f, 0x0) clone$auto(0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) 6.982062624s ago: executing program 3 (id=7300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x134, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff8001}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x954c}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff2e61}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x48000}, 0x2000001) r11 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x800, 0x0) writev$auto(r11, &(0x7f0000000cc0)={0x0, 0x2}, 0x8) setsockopt$auto(r1, 0x107, 0x16, 0x0, 0x4) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/37t\x00', 0x147000, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x400404, 0xe3, 0x9b72, 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x80000000006) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto(0x3, 0x0, 0x7) madvise$auto(0x0, 0x200008, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) 6.636242115s ago: executing program 1 (id=7248): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x40) readahead$auto(r0, 0x4, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0xe5e) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4004050) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x1b7480, 0x0) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x3, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) 5.676683112s ago: executing program 2 (id=7302): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250a000000080003000100000008000200", @ANYRES32, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (fail_nth: 4) 5.54269933s ago: executing program 2 (id=7303): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x1) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x7878, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0xfffffffffffffef0, 0x6, 0xffffffcc}, @HWSIM_ATTR_TX_INFO={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) r2 = fsopen$auto(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x203, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_VERSION={0x8, 0x2, 0xdcd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) getpriority$auto_PRIO_PGRP(0x1, 0x0) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="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", 0x1ea) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = socket(0xa, 0x5, 0x84) sendto$auto(r5, 0x0, 0x34000, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe040100"}, 0x1c) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 5.072283859s ago: executing program 2 (id=7304): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000540)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd2a, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r3, &(0x7f0000000ec0)='9', 0x1) getsockopt$auto_SO_PASSCRED(r3, 0x7, 0x10, &(0x7f0000000400)='batadv\x00', &(0x7f0000000d00)=0x1fe) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x3, 0x2000d, 0x7, 0x17, r3, 0x10008000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000cc0)='MAC802154_HWSIM\x00', 0x8) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) r5 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) splice$auto(r0, 0x0, r5, 0x0, 0x3, 0x9) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000c40), 0x20400, 0x0) write$auto(r1, 0x0, 0x200000009) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snd/midiC2D2\x00', 0x12002, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000280)={{0x7ffffffb, 0x0, 0x0, 0x9, 0xe, 0x1}, 0x542, 0x0, 0x1, 0x74e98a1f, @raw=0xb, @raw=0x9, 0x5, 0x0, &(0x7f0000000180)="7ffa0fd433c4266ca37470d237070a502393cb3bfabc5eda1736999d0b7b62462bf79e80237d9854818b56db62e4e7fe4ddd52e75539abfac37082e0a7088c382ffc3f68db4731b91cb490", &(0x7f0000000440)="2785b8777b82f3a8a825106d030d94da2561717bc96785525c069cd0bc13ca27d99068868c0b5fa87c50614eeba0a336d52d8ebf21672d7718f9704b903d731e055a0006c66b38991d26feba6311034760c7f390911f838b10d2f995c2861e6a752ed810896099053e25a901c94c0708b657461710e25513accea8a55f8cfc9a4548d9a8b66d98656e36f331e57d052f843d0ea71a10"}) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[], 0x730}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) read$auto(r7, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) 5.071563278s ago: executing program 0 (id=7312): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) close_range$auto(0x2, 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) io_uring_setup$auto(0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r4) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14e95219f93d7e806d982d811d00fa36be5a5a274fa217cee916c270bde836d701f53396af479c6b3e3ce0bae49a6d9f349aa602fd5ece9f5b05a279752d3d628fcff7bb97b658a3014115e5146f91419dee689f1cdf788e8553f30586c4c363356eaa2b00000000e8a5184ea8d6aa1def1aa0364b3bcf55e483e49e46df", @ANYRES16=r5, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x3ff, 0x8}, 0x9) 4.721826412s ago: executing program 1 (id=7305): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto(r1, 0x0, 0xff) unshare$auto(0x5) read$auto(0x3, 0x0, 0x3fffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r2, 0x0, 0x6) 3.398455221s ago: executing program 1 (id=7307): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_wireguard(0x0, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x2, 0xffffffffffff0002, 0x200) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x600480cc}, 0x20040844) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0xffffffffffffffff, 0x0, 0x39b8) r2 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x25b2c0, 0x0) read$auto_debug_help_fops_orangefs_debugfs(r2, &(0x7f00000010c0)=""/236, 0xfffffffffffffdf3) writev$auto(0x3, 0x0, 0x8) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000140), 0x101, 0x0) mmap$auto(0x0, 0x400008, 0x10000, 0x18, r3, 0x8002) socket(0x2b, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x29, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) 3.093976296s ago: executing program 2 (id=7308): connect$auto(0xffffffffffffffff, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mount$auto(&(0x7f00000002c0)='bond0\x00', 0x0, &(0x7f0000000380)='0\\[%+$\x00', 0x6, &(0x7f00000003c0)) 1.955521152s ago: executing program 1 (id=7309): mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) r0 = io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1, 0x100000007, 0x800000000000000d, 0x8fd6, 0x19488, 0x3, 0x8, 0x7f, 0x2, 0xfffffbffffffffff, 0xdfe, 0x8, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x128e2, 0x0) write$auto(r2, &(0x7f00000001c0)='\b\x1c\xc7\x00\x80\x00\x00\x00\x00\x00\x00\x00', 0x89) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x8004) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x7) splice$auto(r0, &(0x7f0000000200)=0x2, r2, &(0x7f0000000240)=0x9, 0x4dc0000000000000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x9, 0x5c, 0x4, 0xffff}, &(0x7f0000000440)=0xf8, &(0x7f0000000480)=0x6, 0x2, 0x4, 0xfffffffffffffff8, 0xd3, 0x5, 0xb, 0x101, 0x7, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="34ed35f1", @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf251600000018000180140002006e657464657673696d300000000000000500040008000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="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", 0xcb6) socket(0x3, 0x2, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) sendfile$auto(0x1, r4, 0x0, 0x7ffff000) 510.262368ms ago: executing program 2 (id=7310): mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x400eb1, 0xfffffffffffffffa, 0x1000000000008000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) close_range$auto(0x2, 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) io_uring_setup$auto(0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0xffffffff, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0xf9}, 0xb) bpf$auto(0x4, &(0x7f0000000500)=@enable_stats={0x1}, 0x9) 316.653888ms ago: executing program 3 (id=7311): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x18) write$auto(r1, 0x0, 0xff) unshare$auto(0x5) read$auto(0x3, 0x0, 0xf34) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r2, 0x0, 0x6) 0s ago: executing program 2 (id=7313): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x985}, 0x4) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000600)='/Eev7audio1\x00VI\xa3\xaa\x01\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\x8eZ|\xffGP\x97)\xcf\a\xfb\\nD\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb\xd9\xce\xb3\xfa\xcd(\xa6\x9c\xc7I\xb65T\xa4Y8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x06k\xa2\xc2\xa7n\xf8>\"\xfd@\xee\xf9\xa4\xf4\xb4\x90\x95\f\xc2\xb6\x15\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xda\xe4\x15\xcbx\x01w\xeb\xf4R\x9663\x840\tL\xd2r\xf7\f#\xccR\xfc\xc0e~b\x99`S_\xba\a%Ta\xdf\xbc\x85\x99\xfe\xf8\x05n\xfa\xb9-ph\xf2\x87\x92\x9d\x10!\x83\xecV\x19\xd2\x96W\x9d\x8b\xd6bt\xea\xe4\x9c\xbf\x01t@\x85/D\xba\x14.w\xf57\xbe\x804\f\xeep\x9f\xa7\xc25\\\xe9m0\xcf\xbe;\x83E\x17C\xda||A\xe6R;\x00\x00', 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r8, 0x0, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       [ 2901.177172][T13119] FAULT_INJECTION: forcing a failure. [ 2901.177172][T13119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2901.190448][T13119] CPU: 0 UID: 0 PID: 13119 Comm: syz.3.7075 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2901.190486][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2901.190503][T13119] Call Trace: [ 2901.190512][T13119] [ 2901.190523][T13119] dump_stack_lvl+0x16c/0x1f0 [ 2901.190563][T13119] should_fail_ex+0x512/0x640 [ 2901.190605][T13119] _copy_from_user+0x2e/0xd0 [ 2901.190674][T13119] copy_msghdr_from_user+0x98/0x160 [ 2901.190713][T13119] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2901.190757][T13119] ? kfree+0x24f/0x4d0 [ 2901.190784][T13119] ? __lock_acquire+0x62e/0x1ce0 [ 2901.190866][T13119] ___sys_recvmsg+0xdb/0x1a0 [ 2901.190917][T13119] ? __pfx____sys_recvmsg+0x10/0x10 [ 2901.190996][T13119] ? __pfx___might_resched+0x10/0x10 [ 2901.191038][T13119] do_recvmmsg+0x2fe/0x750 [ 2901.191084][T13119] ? __pfx_do_recvmmsg+0x10/0x10 [ 2901.191123][T13119] ? ksys_write+0x190/0x250 [ 2901.191166][T13119] ? __mutex_unlock_slowpath+0x163/0x800 [ 2901.191221][T13119] ? __fget_files+0x20e/0x3c0 [ 2901.191265][T13119] __x64_sys_recvmmsg+0x22a/0x280 [ 2901.191311][T13119] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2901.191367][T13119] do_syscall_64+0xcd/0x490 [ 2901.191412][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2901.191444][T13119] RIP: 0033:0x7fac7258ebe9 [ 2901.191470][T13119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2901.191501][T13119] RSP: 002b:00007fac7338b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2901.191531][T13119] RAX: ffffffffffffffda RBX: 00007fac727b5fa0 RCX: 00007fac7258ebe9 [ 2901.191553][T13119] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2901.191573][T13119] RBP: 00007fac7338b090 R08: 0000000000000000 R09: 0000000000000000 [ 2901.191593][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2901.191612][T13119] R13: 00007fac727b6038 R14: 00007fac727b5fa0 R15: 00007fff90b221a8 [ 2901.191681][T13119] [ 2901.389209][ C0] vkms_vblank_simulate: vblank timer overrun [ 2902.200338][T13143] FAULT_INJECTION: forcing a failure. [ 2902.200338][T13143] name failslab, interval 1, probability 0, space 0, times 0 [ 2902.246555][T13143] CPU: 1 UID: 0 PID: 13143 Comm: syz.0.7080 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2902.246629][T13143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2902.246649][T13143] Call Trace: [ 2902.246661][T13143] [ 2902.246674][T13143] dump_stack_lvl+0x16c/0x1f0 [ 2902.246719][T13143] should_fail_ex+0x512/0x640 [ 2902.246762][T13143] ? fs_reclaim_acquire+0xae/0x150 [ 2902.246814][T13143] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2902.246860][T13143] should_failslab+0xc2/0x120 [ 2902.246903][T13143] __kmalloc_noprof+0xd2/0x510 [ 2902.246950][T13143] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2902.247000][T13143] ? tomoyo_profile+0x47/0x60 [ 2902.247053][T13143] tomoyo_path_number_perm+0x245/0x580 [ 2902.247091][T13143] ? tomoyo_path_number_perm+0x237/0x580 [ 2902.247134][T13143] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2902.247177][T13143] ? find_held_lock+0x2b/0x80 [ 2902.247246][T13143] ? find_held_lock+0x2b/0x80 [ 2902.247277][T13143] ? hook_file_ioctl_common+0x145/0x410 [ 2902.247329][T13143] ? __fget_files+0x20e/0x3c0 [ 2902.247371][T13143] security_file_ioctl+0x9b/0x240 [ 2902.247416][T13143] __x64_sys_ioctl+0xb7/0x210 [ 2902.247470][T13143] do_syscall_64+0xcd/0x490 [ 2902.247515][T13143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2902.247549][T13143] RIP: 0033:0x7f500578ebe9 [ 2902.247573][T13143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2902.247613][T13143] RSP: 002b:00007f500663e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2902.247645][T13143] RAX: ffffffffffffffda RBX: 00007f50059b5fa0 RCX: 00007f500578ebe9 [ 2902.247667][T13143] RDX: 0000200000000200 RSI: 00000000c1105511 RDI: 0000000000000003 [ 2902.247687][T13143] RBP: 00007f500663e090 R08: 0000000000000000 R09: 0000000000000000 [ 2902.247707][T13143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2902.247727][T13143] R13: 00007f50059b6038 R14: 00007f50059b5fa0 R15: 00007ffd86fcd758 [ 2902.247770][T13143] [ 2902.247782][T13143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2902.601775][T13145] netlink: 'syz.1.7081': attribute type 11 has an invalid length. [ 2902.610090][T13145] netlink: 'syz.1.7081': attribute type 11 has an invalid length. [ 2902.637306][T13151] program syz.2.7082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2902.655246][T13151] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2902.827373][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2902.835379][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2904.567002][T13188] ubi0: attaching mtd0 [ 2904.655846][T13190] FAULT_INJECTION: forcing a failure. [ 2904.655846][T13190] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.655879][T13188] ubi0: scanning is finished [ 2904.673985][T13190] CPU: 1 UID: 0 PID: 13190 Comm: syz.1.7091 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2904.674020][T13190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2904.674037][T13190] Call Trace: [ 2904.674046][T13190] [ 2904.674057][T13190] dump_stack_lvl+0x16c/0x1f0 [ 2904.674102][T13190] should_fail_ex+0x512/0x640 [ 2904.674139][T13190] ? fs_reclaim_acquire+0xae/0x150 [ 2904.674184][T13190] ? tomoyo_encode2+0x100/0x3e0 [ 2904.674220][T13190] should_failslab+0xc2/0x120 [ 2904.674257][T13190] __kmalloc_noprof+0xd2/0x510 [ 2904.674288][T13190] ? d_absolute_path+0x136/0x1a0 [ 2904.674332][T13190] tomoyo_encode2+0x100/0x3e0 [ 2904.674375][T13190] tomoyo_encode+0x29/0x50 [ 2904.674411][T13190] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2904.674462][T13190] tomoyo_path_number_perm+0x245/0x580 [ 2904.674495][T13190] ? tomoyo_path_number_perm+0x237/0x580 [ 2904.674532][T13190] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2904.674569][T13190] ? find_held_lock+0x2b/0x80 [ 2904.674633][T13190] ? find_held_lock+0x2b/0x80 [ 2904.674659][T13190] ? hook_file_ioctl_common+0x145/0x410 [ 2904.674705][T13190] ? __fget_files+0x20e/0x3c0 [ 2904.674740][T13190] security_file_ioctl+0x9b/0x240 [ 2904.674776][T13190] __x64_sys_ioctl+0xb7/0x210 [ 2904.674824][T13190] do_syscall_64+0xcd/0x490 [ 2904.674863][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2904.674891][T13190] RIP: 0033:0x7fb5b198ebe9 [ 2904.674914][T13190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2904.674959][T13190] RSP: 002b:00007fb5afbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2904.674988][T13190] RAX: ffffffffffffffda RBX: 00007fb5b1bb6180 RCX: 00007fb5b198ebe9 [ 2904.675008][T13190] RDX: 0000000000000000 RSI: 0000000040046f41 RDI: 0000000000000003 [ 2904.675025][T13190] RBP: 00007fb5afbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 2904.675043][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2904.675071][T13190] R13: 00007fb5b1bb6218 R14: 00007fb5b1bb6180 R15: 00007ffe3b3f4da8 [ 2904.675109][T13190] [ 2904.676312][T13190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2905.294239][T13188] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2905.305364][T13188] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2905.312805][T13188] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2905.329754][T13188] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 2905.337652][T13188] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2905.456321][T13188] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2905.649018][T13188] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3890757733 [ 2905.659393][T13188] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2905.684028][T13190] ubi0: detaching mtd0 [ 2905.696857][T13194] ubi0: background thread "ubi_bgt0d" started, PID 13194 [ 2905.730737][T13190] ubi0: mtd0 is detached [ 2906.911742][T13227] FAULT_INJECTION: forcing a failure. [ 2906.911742][T13227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2906.934262][T13227] CPU: 1 UID: 0 PID: 13227 Comm: syz.2.7099 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2906.934296][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2906.934310][T13227] Call Trace: [ 2906.934317][T13227] [ 2906.934325][T13227] dump_stack_lvl+0x16c/0x1f0 [ 2906.934355][T13227] should_fail_ex+0x512/0x640 [ 2906.934389][T13227] _copy_from_user+0x2e/0xd0 [ 2906.934424][T13227] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 2906.934470][T13227] snd_rawmidi_write+0x26e/0xc10 [ 2906.934498][T13227] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2906.934522][T13227] ? __pfx_default_wake_function+0x10/0x10 [ 2906.934546][T13227] ? bpf_lsm_file_permission+0x9/0x10 [ 2906.934577][T13227] ? security_file_permission+0x71/0x210 [ 2906.934607][T13227] ? rw_verify_area+0xcf/0x6c0 [ 2906.934630][T13227] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2906.934651][T13227] vfs_write+0x29d/0x11d0 [ 2906.934681][T13227] ? __pfx_vfs_write+0x10/0x10 [ 2906.934703][T13227] ? find_held_lock+0x2b/0x80 [ 2906.934725][T13227] ? __fget_files+0x204/0x3c0 [ 2906.934751][T13227] ? __fget_files+0x20e/0x3c0 [ 2906.934781][T13227] ksys_write+0x1f8/0x250 [ 2906.934805][T13227] ? __pfx_ksys_write+0x10/0x10 [ 2906.934837][T13227] do_syscall_64+0xcd/0x490 [ 2906.934872][T13227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2906.934894][T13227] RIP: 0033:0x7fbadd78ebe9 [ 2906.934911][T13227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2906.934932][T13227] RSP: 002b:00007fbadb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2906.934952][T13227] RAX: ffffffffffffffda RBX: 00007fbadd9b6090 RCX: 00007fbadd78ebe9 [ 2906.934967][T13227] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2906.934980][T13227] RBP: 00007fbadb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2906.934993][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2906.935006][T13227] R13: 00007fbadd9b6128 R14: 00007fbadd9b6090 R15: 00007ffcfd5d6b68 [ 2906.935032][T13227] [ 2907.326604][T13227] netlink: 342 bytes leftover after parsing attributes in process `syz.2.7099'. [ 2907.550821][T13236] netlink: 342 bytes leftover after parsing attributes in process `syz.3.7100'. [ 2908.096410][T13243] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7103'. [ 2908.157676][T13243] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7103'. [ 2908.601222][T13258] blktrace: Concurrent blktraces are not allowed on loop2 [ 2908.716199][T13258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7105'. [ 2908.755296][T13258] bridge0: port 3(vlan1) entered disabled state [ 2908.787584][T13258] vlan1 (unregistering): left allmulticast mode [ 2908.795651][T13258] veth0_vlan: left allmulticast mode [ 2908.801056][T13258] vlan1 (unregistering): left promiscuous mode [ 2908.820851][T13258] bridge0: port 3(vlan1) entered disabled state [ 2910.308045][T13286] FAULT_INJECTION: forcing a failure. [ 2910.308045][T13286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2910.327277][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.1.7113 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2910.327320][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2910.327340][T13286] Call Trace: [ 2910.327352][T13286] [ 2910.327365][T13286] dump_stack_lvl+0x16c/0x1f0 [ 2910.327410][T13286] should_fail_ex+0x512/0x640 [ 2910.327463][T13286] core_sys_select+0x4c5/0xc10 [ 2910.327511][T13286] ? __pfx_core_sys_select+0x10/0x10 [ 2910.327564][T13286] ? proc_fail_nth_write+0x9f/0x220 [ 2910.327636][T13286] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2910.327692][T13286] kern_select+0x15d/0x1e0 [ 2910.327727][T13286] ? __pfx_kern_select+0x10/0x10 [ 2910.327768][T13286] ? __pfx_ksys_write+0x10/0x10 [ 2910.327805][T13286] ? xfd_validate_state+0x61/0x180 [ 2910.327872][T13286] __x64_sys_select+0xbd/0x160 [ 2910.327905][T13286] ? do_syscall_64+0x91/0x490 [ 2910.327946][T13286] ? lockdep_hardirqs_on+0x7c/0x110 [ 2910.327984][T13286] do_syscall_64+0xcd/0x490 [ 2910.328026][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2910.328068][T13286] RIP: 0033:0x7fb5b198ebe9 [ 2910.328092][T13286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2910.328121][T13286] RSP: 002b:00007fb5afbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 2910.328150][T13286] RAX: ffffffffffffffda RBX: 00007fb5b1bb6180 RCX: 00007fb5b198ebe9 [ 2910.328169][T13286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 2910.328187][T13286] RBP: 00007fb5afbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 2910.328206][T13286] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2910.328225][T13286] R13: 00007fb5b1bb6218 R14: 00007fb5b1bb6180 R15: 00007ffe3b3f4da8 [ 2910.328264][T13286] [ 2910.510034][ C1] vkms_vblank_simulate: vblank timer overrun [ 2911.242580][T13309] __vm_enough_memory: pid: 13309, comm: syz.2.7120, bytes: 4398046511104 not enough memory for the allocation [ 2912.371125][T13328] FAULT_INJECTION: forcing a failure. [ 2912.371125][T13328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2912.389847][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.3.7122 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2912.389886][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2912.389903][T13328] Call Trace: [ 2912.389930][T13328] [ 2912.389941][T13328] dump_stack_lvl+0x16c/0x1f0 [ 2912.389983][T13328] should_fail_ex+0x512/0x640 [ 2912.390030][T13328] core_sys_select+0x4c5/0xc10 [ 2912.390083][T13328] ? __pfx_core_sys_select+0x10/0x10 [ 2912.390121][T13328] ? proc_fail_nth_write+0x9f/0x220 [ 2912.390182][T13328] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2912.390229][T13328] kern_select+0x15d/0x1e0 [ 2912.390259][T13328] ? __pfx_kern_select+0x10/0x10 [ 2912.390293][T13328] ? __pfx_ksys_write+0x10/0x10 [ 2912.390332][T13328] __x64_sys_select+0xbd/0x160 [ 2912.390361][T13328] ? do_syscall_64+0x91/0x490 [ 2912.390396][T13328] ? lockdep_hardirqs_on+0x7c/0x110 [ 2912.390430][T13328] do_syscall_64+0xcd/0x490 [ 2912.390468][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2912.390497][T13328] RIP: 0033:0x7fac7258ebe9 [ 2912.390519][T13328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2912.390547][T13328] RSP: 002b:00007fac73349038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 2912.390574][T13328] RAX: ffffffffffffffda RBX: 00007fac727b6180 RCX: 00007fac7258ebe9 [ 2912.390593][T13328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 2912.390610][T13328] RBP: 00007fac73349090 R08: 0000000000000000 R09: 0000000000000000 [ 2912.390635][T13328] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2912.390653][T13328] R13: 00007fac727b6218 R14: 00007fac727b6180 R15: 00007fff90b221a8 [ 2912.390689][T13328] [ 2912.842726][T13335] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7124'. [ 2916.822997][T13395] can: request_module (can-proto-5) failed. [ 2917.648023][T13415] FAULT_INJECTION: forcing a failure. [ 2917.648023][T13415] name failslab, interval 1, probability 0, space 0, times 0 [ 2917.674938][T13415] CPU: 0 UID: 0 PID: 13415 Comm: syz.1.7138 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2917.674979][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2917.674997][T13415] Call Trace: [ 2917.675008][T13415] [ 2917.675019][T13415] dump_stack_lvl+0x16c/0x1f0 [ 2917.675061][T13415] should_fail_ex+0x512/0x640 [ 2917.675103][T13415] ? __kvmalloc_node_noprof+0x124/0x620 [ 2917.675139][T13415] should_failslab+0xc2/0x120 [ 2917.675178][T13415] __kvmalloc_node_noprof+0x137/0x620 [ 2917.675214][T13415] ? listxattr+0x4a/0x1a0 [ 2917.675250][T13415] ? listxattr+0x4a/0x1a0 [ 2917.675284][T13415] listxattr+0x4a/0x1a0 [ 2917.675313][T13415] path_listxattrat+0x151/0x370 [ 2917.675346][T13415] ? __pfx_path_listxattrat+0x10/0x10 [ 2917.675389][T13415] do_syscall_64+0xcd/0x490 [ 2917.675431][T13415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2917.675462][T13415] RIP: 0033:0x7fb5b198ebe9 [ 2917.675486][T13415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2917.675516][T13415] RSP: 002b:00007fb5afbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 2917.675544][T13415] RAX: ffffffffffffffda RBX: 00007fb5b1bb5fa0 RCX: 00007fb5b198ebe9 [ 2917.675564][T13415] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000200000000040 [ 2917.675582][T13415] RBP: 00007fb5afbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2917.675618][T13415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2917.675638][T13415] R13: 00007fb5b1bb6038 R14: 00007fb5b1bb5fa0 R15: 00007ffe3b3f4da8 [ 2917.675679][T13415] [ 2919.299557][ T30] audit: type=1806 audit(1754902005.774:134): res=-14 [ 2919.662381][T13471] FAULT_INJECTION: forcing a failure. [ 2919.662381][T13471] name failslab, interval 1, probability 0, space 0, times 0 [ 2919.692961][T13471] CPU: 0 UID: 0 PID: 13471 Comm: syz.0.7152 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2919.693008][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2919.693025][T13471] Call Trace: [ 2919.693036][T13471] [ 2919.693047][T13471] dump_stack_lvl+0x16c/0x1f0 [ 2919.693094][T13471] should_fail_ex+0x512/0x640 [ 2919.693133][T13471] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2919.693167][T13471] should_failslab+0xc2/0x120 [ 2919.693206][T13471] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2919.693236][T13471] ? __pfx___mutex_lock+0x10/0x10 [ 2919.693274][T13471] ? snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0xa4/0x6b0 [ 2919.693330][T13471] snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0xa4/0x6b0 [ 2919.693400][T13471] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2919.693444][T13471] snd_mixer_oss_get_volume1+0x236/0x610 [ 2919.693496][T13471] snd_mixer_oss_ioctl1+0x28b/0x1e40 [ 2919.693536][T13471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2919.693585][T13471] ? __pfx_snd_mixer_oss_get_volume1+0x10/0x10 [ 2919.693636][T13471] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 2919.693677][T13471] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2919.693740][T13471] ? find_held_lock+0x2b/0x80 [ 2919.693770][T13471] ? hook_file_ioctl_common+0x145/0x410 [ 2919.693826][T13471] ? __fget_files+0x20e/0x3c0 [ 2919.693867][T13471] snd_mixer_oss_ioctl+0x3e/0x50 [ 2919.693908][T13471] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 2919.693949][T13471] __x64_sys_ioctl+0x18e/0x210 [ 2919.694007][T13471] do_syscall_64+0xcd/0x490 [ 2919.694051][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2919.694083][T13471] RIP: 0033:0x7f500578ebe9 [ 2919.694108][T13471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2919.694140][T13471] RSP: 002b:00007f500663e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2919.694169][T13471] RAX: ffffffffffffffda RBX: 00007f50059b5fa0 RCX: 00007f500578ebe9 [ 2919.694190][T13471] RDX: 0010000000000402 RSI: 0000000080004508 RDI: 0000000000000003 [ 2919.694210][T13471] RBP: 00007f500663e090 R08: 0000000000000000 R09: 0000000000000000 [ 2919.694230][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2919.694250][T13471] R13: 00007f50059b6038 R14: 00007f50059b5fa0 R15: 00007ffd86fcd758 [ 2919.694285][T13471] [ 2919.921175][ C0] vkms_vblank_simulate: vblank timer overrun [ 2920.303741][T22111] smpboot: CPU 1 is now offline [ 2920.316164][T13480] Invalid ELF header magic: != ELF [ 2920.361086][T13482] Invalid ELF header magic: != ELF [ 2920.845555][T13485] device-mapper: ioctl: Invalid ioctl structure: name ¢, dev 7f00010002 [ 2920.927188][T13485] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7158'. [ 2922.680550][ T5183] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 2923.232282][T13534] FAULT_INJECTION: forcing a failure. [ 2923.232282][T13534] name failslab, interval 1, probability 0, space 0, times 0 [ 2923.302262][T13534] CPU: 0 UID: 0 PID: 13534 Comm: syz.1.7171 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2923.302294][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2923.302309][T13534] Call Trace: [ 2923.302317][T13534] [ 2923.302325][T13534] dump_stack_lvl+0x16c/0x1f0 [ 2923.302358][T13534] should_fail_ex+0x512/0x640 [ 2923.302390][T13534] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2923.302428][T13534] should_failslab+0xc2/0x120 [ 2923.302459][T13534] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2923.302487][T13534] ? shmem_alloc_inode+0x25/0x50 [ 2923.302523][T13534] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 2923.302553][T13534] shmem_alloc_inode+0x25/0x50 [ 2923.302584][T13534] alloc_inode+0x61/0x240 [ 2923.302617][T13534] new_inode+0x22/0x1c0 [ 2923.302647][T13534] ? trace_cap_capable+0x18d/0x200 [ 2923.302673][T13534] shmem_get_inode+0x19a/0xfb0 [ 2923.302709][T13534] ? __vm_enough_memory+0x184/0x3f0 [ 2923.302744][T13534] __shmem_file_setup+0x279/0x330 [ 2923.302771][T13534] shmem_zero_setup+0x93/0x1a0 [ 2923.302812][T13534] __mmap_region+0x2081/0x27b0 [ 2923.302841][T13534] ? __pfx___mmap_region+0x10/0x10 [ 2923.302872][T13534] ? is_bpf_text_address+0x8a/0x1a0 [ 2923.302899][T13534] ? bpf_ksym_find+0x124/0x1c0 [ 2923.302919][T13534] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2923.302946][T13534] ? is_bpf_text_address+0x94/0x1a0 [ 2923.302972][T13534] ? kernel_text_address+0x8d/0x100 [ 2923.303013][T13534] ? __kernel_text_address+0xd/0x40 [ 2923.303086][T13534] ? trace_cap_capable+0x18d/0x200 [ 2923.303116][T13534] mmap_region+0x1ab/0x3f0 [ 2923.303141][T13534] ? __get_unmapped_area+0x267/0x440 [ 2923.303175][T13534] do_mmap+0xa3e/0x1210 [ 2923.303209][T13534] ? __pfx_do_mmap+0x10/0x10 [ 2923.303240][T13534] ? __pfx_down_write_killable+0x10/0x10 [ 2923.303275][T13534] vm_mmap_pgoff+0x29e/0x470 [ 2923.303310][T13534] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2923.303342][T13534] ? __fget_files+0x20e/0x3c0 [ 2923.303372][T13534] ksys_mmap_pgoff+0x7d/0x5c0 [ 2923.303407][T13534] ? __pfx_ksys_write+0x10/0x10 [ 2923.303436][T13534] __x64_sys_mmap+0x125/0x190 [ 2923.303472][T13534] do_syscall_64+0xcd/0x490 [ 2923.303502][T13534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2923.303524][T13534] RIP: 0033:0x7fb5b198ebe9 [ 2923.303540][T13534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2923.303562][T13534] RSP: 002b:00007fb5afbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2923.303583][T13534] RAX: ffffffffffffffda RBX: 00007fb5b1bb5fa0 RCX: 00007fb5b198ebe9 [ 2923.303598][T13534] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 2923.303611][T13534] RBP: 00007fb5afbf6090 R08: ffffffffffffffff R09: 0000000000008000 [ 2923.303625][T13534] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 2923.303638][T13534] R13: 00007fb5b1bb6038 R14: 00007fb5b1bb5fa0 R15: 00007ffe3b3f4da8 [ 2923.303665][T13534] [ 2923.588767][ C0] vkms_vblank_simulate: vblank timer overrun [ 2925.834728][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7181'. [ 2925.937500][T13579] netlink: 93 bytes leftover after parsing attributes in process `syz.1.7181'. [ 2926.077837][T13583] Invalid ELF header magic: != ELF [ 2927.794377][T13600] FAULT_INJECTION: forcing a failure. [ 2927.794377][T13600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2927.933145][T13600] CPU: 0 UID: 0 PID: 13600 Comm: syz.0.7187 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2927.933179][T13600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2927.933193][T13600] Call Trace: [ 2927.933201][T13600] [ 2927.933209][T13600] dump_stack_lvl+0x16c/0x1f0 [ 2927.933241][T13600] should_fail_ex+0x512/0x640 [ 2927.933277][T13600] _copy_from_user+0x2e/0xd0 [ 2927.933313][T13600] vmemdup_user+0x66/0xe0 [ 2927.933343][T13600] __sys_bpf+0x3cad/0x4de0 [ 2927.933380][T13600] ? __pfx___sys_bpf+0x10/0x10 [ 2927.933414][T13600] ? ksys_write+0x190/0x250 [ 2927.933445][T13600] ? __mutex_unlock_slowpath+0x163/0x800 [ 2927.933490][T13600] ? fput+0x9b/0xd0 [ 2927.933521][T13600] ? ksys_write+0x1ac/0x250 [ 2927.933546][T13600] ? __pfx_ksys_write+0x10/0x10 [ 2927.933577][T13600] __x64_sys_bpf+0x78/0xc0 [ 2927.933610][T13600] ? lockdep_hardirqs_on+0x7c/0x110 [ 2927.933637][T13600] do_syscall_64+0xcd/0x490 [ 2927.933667][T13600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2927.933692][T13600] RIP: 0033:0x7f500578ebe9 [ 2927.933709][T13600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2927.933731][T13600] RSP: 002b:00007f500663e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2927.933753][T13600] RAX: ffffffffffffffda RBX: 00007f50059b5fa0 RCX: 00007f500578ebe9 [ 2927.933768][T13600] RDX: 0000000000000009 RSI: 0000200000000500 RDI: 0000000000000004 [ 2927.933782][T13600] RBP: 00007f500663e090 R08: 0000000000000000 R09: 0000000000000000 [ 2927.933796][T13600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2927.933809][T13600] R13: 00007f50059b6038 R14: 00007f50059b5fa0 R15: 00007ffd86fcd758 [ 2927.933838][T13600] [ 2928.115544][ C0] vkms_vblank_simulate: vblank timer overrun [ 2929.256615][T13615] FAULT_INJECTION: forcing a failure. [ 2929.256615][T13615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2929.340325][T13615] CPU: 0 UID: 0 PID: 13615 Comm: syz.3.7192 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2929.340355][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2929.340369][T13615] Call Trace: [ 2929.340376][T13615] [ 2929.340384][T13615] dump_stack_lvl+0x16c/0x1f0 [ 2929.340415][T13615] should_fail_ex+0x512/0x640 [ 2929.340449][T13615] _copy_to_iter+0x29f/0x16f0 [ 2929.340485][T13615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2929.340530][T13615] ? kfree+0x2b4/0x4d0 [ 2929.340551][T13615] ? dump_cpumask+0x1fc/0x340 [ 2929.340574][T13615] ? __pfx__copy_to_iter+0x10/0x10 [ 2929.340612][T13615] ? dump_cpumask+0x203/0x340 [ 2929.340636][T13615] ? rps_default_mask_sysctl+0x141/0x210 [ 2929.340664][T13615] proc_sys_call_handler+0x342/0x570 [ 2929.340699][T13615] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 2929.340749][T13615] ? rw_verify_area+0xcf/0x6c0 [ 2929.340774][T13615] vfs_read+0x8bf/0xcf0 [ 2929.340804][T13615] ? __pfx___mutex_lock+0x10/0x10 [ 2929.340832][T13615] ? __pfx_vfs_read+0x10/0x10 [ 2929.340901][T13615] ksys_read+0x12a/0x250 [ 2929.340927][T13615] ? __pfx_ksys_read+0x10/0x10 [ 2929.340963][T13615] do_syscall_64+0xcd/0x490 [ 2929.340995][T13615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2929.341020][T13615] RIP: 0033:0x7fac7258ebe9 [ 2929.341038][T13615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2929.341061][T13615] RSP: 002b:00007fac7338b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2929.341083][T13615] RAX: ffffffffffffffda RBX: 00007fac727b5fa0 RCX: 00007fac7258ebe9 [ 2929.341099][T13615] RDX: 0000000000000f34 RSI: 0000000000000000 RDI: 0000000000000003 [ 2929.341113][T13615] RBP: 00007fac7338b090 R08: 0000000000000000 R09: 0000000000000000 [ 2929.341128][T13615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2929.341142][T13615] R13: 00007fac727b6038 R14: 00007fac727b5fa0 R15: 00007fff90b221a8 [ 2929.341172][T13615] [ 2929.538163][ C0] vkms_vblank_simulate: vblank timer overrun [ 2929.582706][T13618] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 2929.794156][ T30] audit: type=1800 audit(1754902016.084:135): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7193" name="features" dev="configfs" ino=217878 res=0 errno=0 [ 2931.250235][ T30] audit: type=1800 audit(1754902017.734:136): pid=13626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7195" name="discovery_nqn" dev="configfs" ino=217925 res=0 errno=0 [ 2932.442764][ T30] audit: type=1800 audit(1754902018.924:137): pid=13638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7198" name="discovery_nqn" dev="configfs" ino=217994 res=0 errno=0 [ 2932.850459][ T30] audit: type=1800 audit(1754902019.334:138): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7200" name="discovery_nqn" dev="configfs" ino=218017 res=0 errno=0 [ 2935.833696][T13693] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2935.841984][T13693] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2935.850535][T13693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2935.860193][T13693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2935.867919][T13693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2936.642575][T13701] kAFS: Invalid Command on /proc/fs/afs/cells file [ 2937.225026][T13708] FAULT_INJECTION: forcing a failure. [ 2937.225026][T13708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2937.287127][T13708] CPU: 0 UID: 0 PID: 13708 Comm: syz.0.7215 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2937.287161][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2937.287185][T13708] Call Trace: [ 2937.287193][T13708] [ 2937.287202][T13708] dump_stack_lvl+0x16c/0x1f0 [ 2937.287236][T13708] should_fail_ex+0x512/0x640 [ 2937.287272][T13708] _copy_from_user+0x2e/0xd0 [ 2937.287310][T13708] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 2937.287362][T13708] snd_rawmidi_write+0x26e/0xc10 [ 2937.287393][T13708] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2937.287420][T13708] ? __pfx_default_wake_function+0x10/0x10 [ 2937.287446][T13708] ? bpf_lsm_file_permission+0x9/0x10 [ 2937.287481][T13708] ? security_file_permission+0x71/0x210 [ 2937.287514][T13708] ? rw_verify_area+0xcf/0x6c0 [ 2937.287539][T13708] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2937.287562][T13708] vfs_write+0x29d/0x11d0 [ 2937.287595][T13708] ? __pfx_vfs_write+0x10/0x10 [ 2937.287620][T13708] ? find_held_lock+0x2b/0x80 [ 2937.287644][T13708] ? __fget_files+0x204/0x3c0 [ 2937.287673][T13708] ? __fget_files+0x20e/0x3c0 [ 2937.287696][T13708] ? rcu_watching_snap_stopped_since+0x100/0x110 [ 2937.287731][T13708] ksys_write+0x1f8/0x250 [ 2937.287758][T13708] ? __pfx_ksys_write+0x10/0x10 [ 2937.287794][T13708] do_syscall_64+0xcd/0x490 [ 2937.287826][T13708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2937.287850][T13708] RIP: 0033:0x7f500578ebe9 [ 2937.287868][T13708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2937.287891][T13708] RSP: 002b:00007f50065fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2937.287914][T13708] RAX: ffffffffffffffda RBX: 00007f50059b6180 RCX: 00007f500578ebe9 [ 2937.287930][T13708] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000008 [ 2937.287945][T13708] RBP: 00007f50065fc090 R08: 0000000000000000 R09: 0000000000000000 [ 2937.287960][T13708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2937.287973][T13708] R13: 00007f50059b6218 R14: 00007f50059b6180 R15: 00007ffd86fcd758 [ 2937.288003][T13708] [ 2937.735223][T12861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2937.948960][T13693] Bluetooth: hci2: command tx timeout [ 2938.008185][T12861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2938.096677][T13692] chnl_net:caif_netlink_parms(): no params data found [ 2938.208291][T12861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2938.554854][T12861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2939.190661][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 2939.218091][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 2939.278669][T13692] bridge_slave_0: entered allmulticast mode [ 2939.321154][T13692] bridge_slave_0: entered promiscuous mode [ 2939.496427][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 2939.524708][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 2939.545965][T13692] bridge_slave_1: entered allmulticast mode [ 2939.576231][T13692] bridge_slave_1: entered promiscuous mode [ 2939.987752][T12861] bridge_slave_1: left allmulticast mode [ 2940.012785][T12861] bridge_slave_1: left promiscuous mode [ 2940.028728][T13693] Bluetooth: hci2: command tx timeout [ 2940.063530][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 2940.108255][T12861] bridge_slave_0: left allmulticast mode [ 2940.143117][T12861] bridge_slave_0: left promiscuous mode [ 2940.173886][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 2941.050694][T12861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2941.084923][T12861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2941.101291][T12861] bond0 (unregistering): Released all slaves [ 2941.141545][T13692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2941.319470][T13692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2941.912071][T13692] team0: Port device team_slave_0 added [ 2941.967330][T13692] team0: Port device team_slave_1 added [ 2942.103269][T13693] Bluetooth: hci2: command tx timeout [ 2942.202228][T13692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2942.245938][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2942.359908][T13692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2942.466119][T12861] hsr_slave_0: left promiscuous mode [ 2942.487917][T12861] hsr_slave_1: left promiscuous mode [ 2942.507132][T12861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2942.538575][T12861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2942.598068][T12861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2942.633025][T12861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2942.709725][T12861] veth1_macvtap: left promiscuous mode [ 2942.729610][T12861] veth1_vlan: left promiscuous mode [ 2942.756736][T12861] veth0_vlan: left promiscuous mode [ 2943.578176][T12861] team0 (unregistering): Port device team_slave_1 removed [ 2943.620480][T12861] team0 (unregistering): Port device team_slave_0 removed [ 2944.006843][T13692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2944.027562][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2944.063486][T13692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2944.184739][T13693] Bluetooth: hci2: command tx timeout [ 2944.346964][T13692] hsr_slave_0: entered promiscuous mode [ 2944.379258][T13692] hsr_slave_1: entered promiscuous mode [ 2944.408449][T13692] debugfs: 'hsr0' already exists in 'hsr' [ 2944.431069][T13692] Cannot create hsr debugfs directory [ 2944.461610][T13792] FAULT_INJECTION: forcing a failure. [ 2944.461610][T13792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2944.507383][T13792] CPU: 0 UID: 0 PID: 13792 Comm: syz.3.7226 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2944.507416][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2944.507431][T13792] Call Trace: [ 2944.507439][T13792] [ 2944.507448][T13792] dump_stack_lvl+0x16c/0x1f0 [ 2944.507482][T13792] should_fail_ex+0x512/0x640 [ 2944.507526][T13792] _copy_from_user+0x2e/0xd0 [ 2944.507564][T13792] pidfd_ioctl+0x82b/0x26b0 [ 2944.507588][T13792] ? __pfx_pidfd_ioctl+0x10/0x10 [ 2944.507640][T13792] ? __pfx_pidfd_ioctl+0x10/0x10 [ 2944.507679][T13792] __x64_sys_ioctl+0x18e/0x210 [ 2944.507718][T13792] do_syscall_64+0xcd/0x490 [ 2944.507749][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2944.507788][T13792] RIP: 0033:0x7fac7258ebe9 [ 2944.507806][T13792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2944.507829][T13792] RSP: 002b:00007fac7338b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2944.507859][T13792] RAX: ffffffffffffffda RBX: 00007fac727b5fa0 RCX: 00007fac7258ebe9 [ 2944.507873][T13792] RDX: 0000000000000005 RSI: 00000000c060ff0b RDI: 0000000000000003 [ 2944.507884][T13792] RBP: 00007fac7338b090 R08: 0000000000000000 R09: 0000000000000000 [ 2944.507896][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2944.507908][T13792] R13: 00007fac727b6038 R14: 00007fac727b5fa0 R15: 00007fff90b221a8 [ 2944.507933][T13792] [ 2944.658275][ C0] vkms_vblank_simulate: vblank timer overrun [ 2944.783540][T13797] syz.3.7227 (13797): attempted to duplicate a private mapping with mremap. This is not supported. [ 2945.896292][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2945.904466][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2945.925080][ T30] audit: type=1800 audit(1754902032.414:139): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7228" name="discovery_nqn" dev="configfs" ino=219248 res=0 errno=0 [ 2945.946123][ C0] vkms_vblank_simulate: vblank timer overrun [ 2946.703326][T13809] FAULT_INJECTION: forcing a failure. [ 2946.703326][T13809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2946.935375][T13809] CPU: 0 UID: 0 PID: 13809 Comm: syz.0.7229 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2946.935406][T13809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2946.935423][T13809] Call Trace: [ 2946.935431][T13809] [ 2946.935439][T13809] dump_stack_lvl+0x16c/0x1f0 [ 2946.935473][T13809] should_fail_ex+0x512/0x640 [ 2946.935507][T13809] core_sys_select+0x4c5/0xc10 [ 2946.935537][T13809] ? __pfx_core_sys_select+0x10/0x10 [ 2946.935564][T13809] ? proc_fail_nth_write+0x9f/0x220 [ 2946.935609][T13809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2946.935645][T13809] kern_select+0x15d/0x1e0 [ 2946.935666][T13809] ? __pfx_kern_select+0x10/0x10 [ 2946.935692][T13809] ? __pfx_ksys_write+0x10/0x10 [ 2946.935721][T13809] __x64_sys_select+0xbd/0x160 [ 2946.935742][T13809] ? do_syscall_64+0x91/0x490 [ 2946.935769][T13809] ? lockdep_hardirqs_on+0x7c/0x110 [ 2946.935794][T13809] do_syscall_64+0xcd/0x490 [ 2946.935822][T13809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2946.935844][T13809] RIP: 0033:0x7f500578ebe9 [ 2946.935863][T13809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2946.935888][T13809] RSP: 002b:00007f500661d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 2946.935908][T13809] RAX: ffffffffffffffda RBX: 00007f50059b6090 RCX: 00007f500578ebe9 [ 2946.935922][T13809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 2946.935935][T13809] RBP: 00007f500661d090 R08: 0000000000000000 R09: 0000000000000000 [ 2946.935948][T13809] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2946.935962][T13809] R13: 00007f50059b6128 R14: 00007f50059b6090 R15: 00007ffd86fcd758 [ 2946.935988][T13809] [ 2947.114526][ C0] vkms_vblank_simulate: vblank timer overrun [ 2947.662458][T13832] FAULT_INJECTION: forcing a failure. [ 2947.662458][T13832] name failslab, interval 1, probability 0, space 0, times 0 [ 2947.676616][T13833] FAULT_INJECTION: forcing a failure. [ 2947.676616][T13833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2947.728619][T13833] CPU: 0 UID: 0 PID: 13833 Comm: syz.1.7233 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2947.728657][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2947.728670][T13833] Call Trace: [ 2947.728678][T13833] [ 2947.728686][T13833] dump_stack_lvl+0x16c/0x1f0 [ 2947.728716][T13833] should_fail_ex+0x512/0x640 [ 2947.728750][T13833] _copy_to_user+0x32/0xd0 [ 2947.728786][T13833] simple_read_from_buffer+0xcb/0x170 [ 2947.728824][T13833] proc_fail_nth_read+0x197/0x240 [ 2947.728849][T13833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2947.728874][T13833] ? rw_verify_area+0xcf/0x6c0 [ 2947.728895][T13833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2947.728918][T13833] vfs_read+0x1e4/0xcf0 [ 2947.728945][T13833] ? __pfx___mutex_lock+0x10/0x10 [ 2947.728973][T13833] ? __pfx_vfs_read+0x10/0x10 [ 2947.729004][T13833] ? __fget_files+0x20e/0x3c0 [ 2947.729035][T13833] ksys_read+0x12a/0x250 [ 2947.729077][T13833] ? __pfx_ksys_read+0x10/0x10 [ 2947.729111][T13833] do_syscall_64+0xcd/0x490 [ 2947.729142][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2947.729165][T13833] RIP: 0033:0x7fb5b198d5fc [ 2947.729183][T13833] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2947.729217][T13833] RSP: 002b:00007fb5afbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2947.729238][T13833] RAX: ffffffffffffffda RBX: 00007fb5b1bb5fa0 RCX: 00007fb5b198d5fc [ 2947.729252][T13833] RDX: 000000000000000f RSI: 00007fb5afbf60a0 RDI: 0000000000000004 [ 2947.729266][T13833] RBP: 00007fb5afbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2947.729279][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2947.729292][T13833] R13: 00007fb5b1bb6038 R14: 00007fb5b1bb5fa0 R15: 00007ffe3b3f4da8 [ 2947.729319][T13833] [ 2947.912412][ C0] vkms_vblank_simulate: vblank timer overrun [ 2947.974876][T13832] CPU: 0 UID: 0 PID: 13832 Comm: syz.0.7232 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2947.974909][T13832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2947.974924][T13832] Call Trace: [ 2947.974932][T13832] [ 2947.974941][T13832] dump_stack_lvl+0x16c/0x1f0 [ 2947.974974][T13832] should_fail_ex+0x512/0x640 [ 2947.975007][T13832] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2947.975034][T13832] should_failslab+0xc2/0x120 [ 2947.975066][T13832] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2947.975090][T13832] ? madvise_collapse+0x1a6/0xaa0 [ 2947.975129][T13832] madvise_collapse+0x1a6/0xaa0 [ 2947.975168][T13832] ? __pfx_madvise_collapse+0x10/0x10 [ 2947.975208][T13832] ? is_bpf_text_address+0x8a/0x1a0 [ 2947.975239][T13832] ? bpf_ksym_find+0x124/0x1c0 [ 2947.975268][T13832] madvise_vma_behavior+0x10a4/0x2d60 [ 2947.975307][T13832] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 2947.975336][T13832] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2947.975374][T13832] ? __pfx_mas_prev+0x10/0x10 [ 2947.975410][T13832] ? find_vma_prev+0xda/0x160 [ 2947.975452][T13832] ? __pfx_find_vma_prev+0x10/0x10 [ 2947.975502][T13832] madvise_walk_vmas+0x31f/0x9c0 [ 2947.975541][T13832] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 2947.975585][T13832] madvise_do_behavior+0x1e2/0x530 [ 2947.975622][T13832] ? __pfx_madvise_do_behavior+0x10/0x10 [ 2947.975658][T13832] ? down_read+0x13d/0x480 [ 2947.975696][T13832] ? find_held_lock+0x2b/0x80 [ 2947.975725][T13832] do_madvise+0x176/0x240 [ 2947.975758][T13832] ? __pfx_do_madvise+0x10/0x10 [ 2947.975800][T13832] ? __fget_files+0x20e/0x3c0 [ 2947.975836][T13832] ? __pfx_ksys_write+0x10/0x10 [ 2947.975869][T13832] __x64_sys_madvise+0xa9/0x110 [ 2947.975902][T13832] ? lockdep_hardirqs_on+0x7c/0x110 [ 2947.975930][T13832] do_syscall_64+0xcd/0x490 [ 2947.975974][T13832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2947.975997][T13832] RIP: 0033:0x7f500578ebe9 [ 2947.976015][T13832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2947.976037][T13832] RSP: 002b:00007f500663e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2947.976058][T13832] RAX: ffffffffffffffda RBX: 00007f50059b5fa0 RCX: 00007f500578ebe9 [ 2947.976073][T13832] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 2947.976086][T13832] RBP: 00007f500663e090 R08: 0000000000000000 R09: 0000000000000000 [ 2947.976102][T13832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2947.976116][T13832] R13: 00007f50059b6038 R14: 00007f50059b5fa0 R15: 00007ffd86fcd758 [ 2947.976144][T13832] [ 2948.235180][ C0] vkms_vblank_simulate: vblank timer overrun [ 2948.630108][T13851] usbip-vudc usbip-vudc.0: gadget not bound [ 2949.267152][T13859] ubi0: attaching mtd0 [ 2949.304256][T13859] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 2949.378628][T13859] ubi0: scanning is finished [ 2949.487145][T13692] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2949.527039][T13692] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2949.579122][T13692] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2949.630503][T13692] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2949.881166][T13859] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2950.018108][T13692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2950.063313][T13859] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2950.127845][T13692] 8021q: adding VLAN 0 to HW filter on device team0 [ 2950.175358][T13859] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2950.212748][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 2950.219932][T12861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2950.317597][T13859] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 2950.358448][T12867] bridge0: port 2(bridge_slave_1) entered blocking state [ 2950.365668][T12867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2950.479078][T13859] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2950.601565][T13859] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2950.712321][T13859] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3890757733 [ 2950.853787][T13859] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2950.909738][T13860] ubi0: detaching mtd0 [ 2950.915955][T13879] ubi0: background thread "ubi_bgt0d" started, PID 13879 [ 2950.967254][T13860] ubi0: mtd0 is detached [ 2951.008964][T13863] ubi0: attaching mtd0 [ 2951.015604][T13863] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 2951.098583][T13863] ubi0: scanning is finished [ 2951.395573][T13863] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 2951.712695][T13692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2952.012930][T13692] veth0_vlan: entered promiscuous mode [ 2952.067751][T13692] veth1_vlan: entered promiscuous mode [ 2952.295971][T13692] veth0_macvtap: entered promiscuous mode [ 2952.347467][T13692] veth1_macvtap: entered promiscuous mode [ 2952.496009][T13692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2952.623798][T13692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2952.714660][T12866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2952.879388][T12866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2952.937354][T12866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2953.123366][T12866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2953.153958][T13926] binder: 13925:13926 ioctl 541b 38 returned -22 [ 2953.282683][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2953.371983][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2953.544300][T12861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2953.552136][T12861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2955.004837][T13953] FAULT_INJECTION: forcing a failure. [ 2955.004837][T13953] name failslab, interval 1, probability 0, space 0, times 0 [ 2955.238146][T13953] CPU: 0 UID: 0 PID: 13953 Comm: syz.3.7249 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2955.238180][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2955.238195][T13953] Call Trace: [ 2955.238202][T13953] [ 2955.238211][T13953] dump_stack_lvl+0x16c/0x1f0 [ 2955.238243][T13953] should_fail_ex+0x512/0x640 [ 2955.238274][T13953] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2955.238304][T13953] should_failslab+0xc2/0x120 [ 2955.238334][T13953] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2955.238360][T13953] ? is_bpf_text_address+0x94/0x1a0 [ 2955.238389][T13953] ? alloc_empty_file+0x55/0x1e0 [ 2955.238437][T13953] alloc_empty_file+0x55/0x1e0 [ 2955.238490][T13953] path_openat+0xda/0x2cb0 [ 2955.238525][T13953] ? stack_trace_save+0x8e/0xc0 [ 2955.238557][T13953] ? __pfx_path_openat+0x10/0x10 [ 2955.238585][T13953] ? stack_depot_save_flags+0x29/0x9c0 [ 2955.238624][T13953] do_filp_open+0x20b/0x470 [ 2955.238649][T13953] ? kasan_save_track+0x14/0x30 [ 2955.238676][T13953] ? __pfx_do_filp_open+0x10/0x10 [ 2955.238702][T13953] ? __x64_sys_execve+0x74/0xb0 [ 2955.238726][T13953] ? do_syscall_64+0xcd/0x490 [ 2955.238754][T13953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2955.238810][T13953] do_open_execat+0xf9/0x3a0 [ 2955.238835][T13953] ? __pfx_do_open_execat+0x10/0x10 [ 2955.238870][T13953] alloc_bprm+0x2d/0x710 [ 2955.238897][T13953] do_execveat_common.isra.0+0x1ce/0x610 [ 2955.238930][T13953] __x64_sys_execve+0x8e/0xb0 [ 2955.238957][T13953] do_syscall_64+0xcd/0x490 [ 2955.238988][T13953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2955.239012][T13953] RIP: 0033:0x7fac7258ebe9 [ 2955.239030][T13953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2955.239053][T13953] RSP: 002b:00007fac7336a038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2955.239076][T13953] RAX: ffffffffffffffda RBX: 00007fac727b6090 RCX: 00007fac7258ebe9 [ 2955.239095][T13953] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 2955.239112][T13953] RBP: 00007fac7336a090 R08: 0000000000000000 R09: 0000000000000000 [ 2955.239126][T13953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2955.239141][T13953] R13: 00007fac727b6128 R14: 00007fac727b6090 R15: 00007fff90b221a8 [ 2955.239177][T13953] [ 2955.468709][ C0] vkms_vblank_simulate: vblank timer overrun [ 2956.172045][T13964] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 2956.266227][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2956.325570][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2956.385230][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2956.494959][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2956.523242][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2956.536511][T13974] netlink: 342 bytes leftover after parsing attributes in process `syz.3.7253'. [ 2957.097330][T13983] FAULT_INJECTION: forcing a failure. [ 2957.097330][T13983] name failslab, interval 1, probability 0, space 0, times 0 [ 2957.183152][T13983] CPU: 0 UID: 0 PID: 13983 Comm: syz.0.7250 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2957.183186][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2957.183201][T13983] Call Trace: [ 2957.183210][T13983] [ 2957.183220][T13983] dump_stack_lvl+0x16c/0x1f0 [ 2957.183252][T13983] should_fail_ex+0x512/0x640 [ 2957.183285][T13983] ? fs_reclaim_acquire+0xae/0x150 [ 2957.183324][T13983] should_failslab+0xc2/0x120 [ 2957.183356][T13983] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2957.183392][T13983] ? security_inode_alloc+0x3b/0x2b0 [ 2957.183424][T13983] security_inode_alloc+0x3b/0x2b0 [ 2957.183451][T13983] inode_init_always_gfp+0xce4/0x1030 [ 2957.183484][T13983] alloc_inode+0x86/0x240 [ 2957.183518][T13983] sock_alloc+0x40/0x280 [ 2957.183553][T13983] __sock_create+0xc1/0x8d0 [ 2957.183596][T13983] inet_ctl_sock_create+0x94/0x230 [ 2957.183637][T13983] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 2957.183676][T13983] ? ndisc_net_init+0x1bc/0x250 [ 2957.183703][T13983] ? __pfx_ndisc_net_init+0x10/0x10 [ 2957.183733][T13983] igmp6_net_init+0x1b2/0x470 [ 2957.183762][T13983] ? __pfx_igmp6_net_init+0x10/0x10 [ 2957.183788][T13983] ops_init+0x1e2/0x5f0 [ 2957.183822][T13983] setup_net+0x10f/0x380 [ 2957.183852][T13983] ? lockdep_init_map_type+0x5c/0x280 [ 2957.183886][T13983] ? __pfx_setup_net+0x10/0x10 [ 2957.183920][T13983] ? debug_mutex_init+0x37/0x70 [ 2957.183958][T13983] copy_net_ns+0x2a6/0x5f0 [ 2957.183992][T13983] create_new_namespaces+0x3ea/0xa90 [ 2957.184024][T13983] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2957.184053][T13983] ksys_unshare+0x45b/0xa40 [ 2957.184084][T13983] ? __pfx_ksys_unshare+0x10/0x10 [ 2957.184116][T13983] ? xfd_validate_state+0x61/0x180 [ 2957.184157][T13983] __x64_sys_unshare+0x31/0x40 [ 2957.184193][T13983] do_syscall_64+0xcd/0x490 [ 2957.184226][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2957.184249][T13983] RIP: 0033:0x7f500578ebe9 [ 2957.184267][T13983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2957.184289][T13983] RSP: 002b:00007f500661d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2957.184311][T13983] RAX: ffffffffffffffda RBX: 00007f50059b6090 RCX: 00007f500578ebe9 [ 2957.184326][T13983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2957.184340][T13983] RBP: 00007f5005811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2957.184353][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2957.184373][T13983] R13: 00007f50059b6128 R14: 00007f50059b6090 R15: 00007ffd86fcd758 [ 2957.184402][T13983] [ 2957.184484][T13983] socket: no more sockets [ 2958.112214][T13990] FAULT_INJECTION: forcing a failure. [ 2958.112214][T13990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2958.293662][T13990] CPU: 0 UID: 0 PID: 13990 Comm: syz.3.7254 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2958.293694][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2958.293707][T13990] Call Trace: [ 2958.293714][T13990] [ 2958.293722][T13990] dump_stack_lvl+0x16c/0x1f0 [ 2958.293752][T13990] should_fail_ex+0x512/0x640 [ 2958.293786][T13990] _copy_from_user+0x2e/0xd0 [ 2958.293821][T13990] copy_msghdr_from_user+0x98/0x160 [ 2958.293849][T13990] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2958.293880][T13990] ? kfree+0x24f/0x4d0 [ 2958.293899][T13990] ? __lock_acquire+0x62e/0x1ce0 [ 2958.293933][T13990] ___sys_recvmsg+0xdb/0x1a0 [ 2958.293959][T13990] ? __pfx____sys_recvmsg+0x10/0x10 [ 2958.293999][T13990] ? __pfx___might_resched+0x10/0x10 [ 2958.294026][T13990] do_recvmmsg+0x2fe/0x750 [ 2958.294056][T13990] ? __pfx_do_recvmmsg+0x10/0x10 [ 2958.294082][T13990] ? ksys_write+0x190/0x250 [ 2958.294110][T13990] ? __mutex_unlock_slowpath+0x163/0x800 [ 2958.294146][T13990] ? __fget_files+0x20e/0x3c0 [ 2958.294175][T13990] __x64_sys_recvmmsg+0x22a/0x280 [ 2958.294205][T13990] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2958.294242][T13990] do_syscall_64+0xcd/0x490 [ 2958.294271][T13990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2958.294293][T13990] RIP: 0033:0x7fac7258ebe9 [ 2958.294309][T13990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2958.294336][T13990] RSP: 002b:00007fac7338b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2958.294357][T13990] RAX: ffffffffffffffda RBX: 00007fac727b5fa0 RCX: 00007fac7258ebe9 [ 2958.294372][T13990] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2958.294385][T13990] RBP: 00007fac7338b090 R08: 0000000000000000 R09: 0000000000000000 [ 2958.294398][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2958.294411][T13990] R13: 00007fac727b6038 R14: 00007fac727b5fa0 R15: 00007fff90b221a8 [ 2958.294438][T13990] [ 2958.773343][T17187] Bluetooth: hci3: command tx timeout [ 2958.811677][T13983] Failed to initialize the IGMP6 autojoin socket (err -23) [ 2959.180213][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2959.444722][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2959.698689][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2960.199756][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2960.735647][T13961] chnl_net:caif_netlink_parms(): no params data found [ 2960.823300][T17187] Bluetooth: hci3: command tx timeout [ 2961.982386][ T13] bridge_slave_1: left allmulticast mode [ 2962.019921][ T13] bridge_slave_1: left promiscuous mode [ 2962.046678][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2962.058266][T14286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2962.102965][ T30] audit: type=1326 audit(1754902048.584:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.7260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f500578ebe9 code=0x0 [ 2962.135233][T14287] FAULT_INJECTION: forcing a failure. [ 2962.135233][T14287] name failslab, interval 1, probability 0, space 0, times 0 [ 2962.150072][ T13] bridge_slave_0: left allmulticast mode [ 2962.180044][ T13] bridge_slave_0: left promiscuous mode [ 2962.206368][T14287] CPU: 0 UID: 0 PID: 14287 Comm: syz.0.7260 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2962.206395][T14287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2962.206409][T14287] Call Trace: [ 2962.206417][T14287] [ 2962.206425][T14287] dump_stack_lvl+0x16c/0x1f0 [ 2962.206455][T14287] should_fail_ex+0x512/0x640 [ 2962.206485][T14287] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2962.206509][T14287] should_failslab+0xc2/0x120 [ 2962.206538][T14287] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2962.206560][T14287] ? sctp_association_new+0xbb/0x2a00 [ 2962.206684][T14287] sctp_association_new+0xbb/0x2a00 [ 2962.206734][T14287] ? sctp_v4_scope+0x171/0x1a0 [ 2962.206790][T14287] sctp_connect_new_asoc+0x1a8/0x770 [ 2962.206855][T14287] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2962.206890][T14287] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 2962.206932][T14287] __sctp_connect+0x3f3/0xc60 [ 2962.206967][T14287] ? do_raw_spin_lock+0x12c/0x2b0 [ 2962.207005][T14287] ? __pfx___sctp_connect+0x10/0x10 [ 2962.207040][T14287] ? __pfx_sctp_inet_connect+0x10/0x10 [ 2962.207074][T14287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2962.207122][T14287] ? __pfx_sctp_inet_connect+0x10/0x10 [ 2962.207152][T14287] sctp_inet_connect+0x15f/0x200 [ 2962.207186][T14287] __sys_connect_file+0x141/0x1a0 [ 2962.207215][T14287] __sys_connect+0x13b/0x160 [ 2962.207246][T14287] ? __pfx___sys_connect+0x10/0x10 [ 2962.207281][T14287] ? xfd_validate_state+0x61/0x180 [ 2962.207315][T14287] ? __pfx_ksys_read+0x10/0x10 [ 2962.207348][T14287] __x64_sys_connect+0x72/0xb0 [ 2962.207372][T14287] ? lockdep_hardirqs_on+0x7c/0x110 [ 2962.207399][T14287] do_syscall_64+0xcd/0x490 [ 2962.207432][T14287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2962.207456][T14287] RIP: 0033:0x7f500578ebe9 [ 2962.207474][T14287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2962.207498][T14287] RSP: 002b:00007f500663e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2962.207520][T14287] RAX: ffffffffffffffda RBX: 00007f50059b5fa0 RCX: 00007f500578ebe9 [ 2962.207536][T14287] RDX: 0000000000000054 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2962.207551][T14287] RBP: 00007f5005811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2962.207565][T14287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2962.207579][T14287] R13: 00007f50059b6038 R14: 00007f50059b5fa0 R15: 00007ffd86fcd758 [ 2962.207609][T14287] [ 2962.207905][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2962.903635][T17187] Bluetooth: hci3: command tx timeout [ 2963.146948][T14311] FAULT_INJECTION: forcing a failure. [ 2963.146948][T14311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2963.186695][T14311] CPU: 0 UID: 0 PID: 14311 Comm: syz.0.7262 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2963.186729][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2963.186743][T14311] Call Trace: [ 2963.186751][T14311] [ 2963.186760][T14311] dump_stack_lvl+0x16c/0x1f0 [ 2963.186794][T14311] should_fail_ex+0x512/0x640 [ 2963.186832][T14311] _copy_from_user+0x2e/0xd0 [ 2963.186870][T14311] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 2963.186921][T14311] snd_rawmidi_write+0x26e/0xc10 [ 2963.186953][T14311] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2963.186979][T14311] ? __pfx_default_wake_function+0x10/0x10 [ 2963.187005][T14311] ? bpf_lsm_file_permission+0x9/0x10 [ 2963.187040][T14311] ? security_file_permission+0x71/0x210 [ 2963.187073][T14311] ? rw_verify_area+0xcf/0x6c0 [ 2963.187099][T14311] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2963.187128][T14311] vfs_write+0x29d/0x11d0 [ 2963.187161][T14311] ? __pfx_vfs_write+0x10/0x10 [ 2963.187186][T14311] ? find_held_lock+0x2b/0x80 [ 2963.187210][T14311] ? __fget_files+0x204/0x3c0 [ 2963.187240][T14311] ? __fget_files+0x20e/0x3c0 [ 2963.187273][T14311] ksys_write+0x1f8/0x250 [ 2963.187300][T14311] ? __pfx_ksys_write+0x10/0x10 [ 2963.187335][T14311] do_syscall_64+0xcd/0x490 [ 2963.187367][T14311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2963.187392][T14311] RIP: 0033:0x7f500578ebe9 [ 2963.187411][T14311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2963.187435][T14311] RSP: 002b:00007f500661d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2963.187459][T14311] RAX: ffffffffffffffda RBX: 00007f50059b6090 RCX: 00007f500578ebe9 [ 2963.187475][T14311] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2963.187490][T14311] RBP: 00007f500661d090 R08: 0000000000000000 R09: 0000000000000000 [ 2963.187505][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2963.187519][T14311] R13: 00007f50059b6128 R14: 00007f50059b6090 R15: 00007ffd86fcd758 [ 2963.187548][T14311] [ 2963.190606][T14311] netlink: 342 bytes leftover after parsing attributes in process `syz.0.7262'. [ 2964.256112][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2964.275718][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.282074][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2964.329434][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2964.348868][ T13] bond0 (unregistering): Released all slaves [ 2964.372325][T13961] bridge0: port 1(bridge_slave_0) entered blocking state [ 2964.392103][T13961] bridge0: port 1(bridge_slave_0) entered disabled state [ 2964.450766][T13961] bridge_slave_0: entered allmulticast mode [ 2964.471229][T14326] netlink: 342 bytes leftover after parsing attributes in process `syz.2.7265'. [ 2964.484310][T13961] bridge_slave_0: entered promiscuous mode [ 2964.526566][T13961] bridge0: port 2(bridge_slave_1) entered blocking state [ 2964.565274][T13961] bridge0: port 2(bridge_slave_1) entered disabled state [ 2964.572486][T13961] bridge_slave_1: entered allmulticast mode [ 2964.631732][T13961] bridge_slave_1: entered promiscuous mode [ 2964.983595][T17187] Bluetooth: hci3: command tx timeout [ 2965.078490][T13961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2965.177596][T13961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2965.742085][T13961] team0: Port device team_slave_0 added [ 2965.988027][ T13] hsr_slave_0: left promiscuous mode [ 2966.045438][ T13] hsr_slave_1: left promiscuous mode [ 2966.096431][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2966.125926][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2966.162661][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2966.218036][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2966.394022][ T13] veth1_macvtap: left promiscuous mode [ 2966.439347][ T13] veth1_vlan: left promiscuous mode [ 2966.488971][ T13] veth0_vlan: left promiscuous mode [ 2969.427462][ T13] team0 (unregistering): Port device team_slave_1 removed [ 2969.833652][ T13] team0 (unregistering): Port device team_slave_0 removed [ 2970.761882][T13961] team0: Port device team_slave_1 added [ 2970.969980][T13961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2970.998411][T13961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2971.024314][ C0] vkms_vblank_simulate: vblank timer overrun [ 2971.074280][T13961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2971.105432][T13961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2971.122562][T13961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2971.175178][T13961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2971.591595][T13961] hsr_slave_0: entered promiscuous mode [ 2971.691937][T13961] hsr_slave_1: entered promiscuous mode [ 2973.457368][T14558] FAULT_INJECTION: forcing a failure. [ 2973.457368][T14558] name failslab, interval 1, probability 0, space 0, times 0 [ 2973.573278][T14558] CPU: 0 UID: 0 PID: 14558 Comm: syz.2.7278 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2973.573311][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2973.573325][T14558] Call Trace: [ 2973.573334][T14558] [ 2973.573343][T14558] dump_stack_lvl+0x16c/0x1f0 [ 2973.573377][T14558] should_fail_ex+0x512/0x640 [ 2973.573421][T14558] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2973.573451][T14558] should_failslab+0xc2/0x120 [ 2973.573481][T14558] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2973.573505][T14558] ? trace_cap_capable+0x18d/0x200 [ 2973.573528][T14558] ? vm_area_dup+0x27/0x8d0 [ 2973.573554][T14558] vm_area_dup+0x27/0x8d0 [ 2973.573583][T14558] dup_mmap+0x877/0x21d0 [ 2973.573628][T14558] ? __pfx_dup_mmap+0x10/0x10 [ 2973.573680][T14558] copy_process+0x4081/0x7690 [ 2973.573721][T14558] ? __pfx_copy_process+0x10/0x10 [ 2973.573755][T14558] ? futex_private_hash_put+0x176/0x300 [ 2973.573785][T14558] ? futex_private_hash_put+0x18a/0x300 [ 2973.573817][T14558] kernel_clone+0xfc/0x930 [ 2973.573844][T14558] ? __pfx_futex_wake+0x10/0x10 [ 2973.573876][T14558] ? __pfx_kernel_clone+0x10/0x10 [ 2973.573926][T14558] __do_sys_clone+0xce/0x120 [ 2973.573954][T14558] ? __pfx___do_sys_clone+0x10/0x10 [ 2973.573981][T14558] ? ksys_unshare+0x687/0xa40 [ 2973.574025][T14558] ? xfd_validate_state+0x61/0x180 [ 2973.574067][T14558] do_syscall_64+0xcd/0x490 [ 2973.574099][T14558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2973.574122][T14558] RIP: 0033:0x7f2d4e98ebe9 [ 2973.574139][T14558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2973.574163][T14558] RSP: 002b:00007f2d4f73ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2973.574184][T14558] RAX: ffffffffffffffda RBX: 00007f2d4ebb5fa0 RCX: 00007f2d4e98ebe9 [ 2973.574199][T14558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 2973.574213][T14558] RBP: 00007f2d4ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2973.574226][T14558] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2973.574240][T14558] R13: 00007f2d4ebb6038 R14: 00007f2d4ebb5fa0 R15: 00007ffc90270818 [ 2973.574269][T14558] [ 2973.797732][ C0] vkms_vblank_simulate: vblank timer overrun [ 2975.057097][ T30] audit: type=1806 audit(1754902061.544:141): res=-14 [ 2975.321673][T14699] FAULT_INJECTION: forcing a failure. [ 2975.321673][T14699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2975.387865][T14699] CPU: 0 UID: 0 PID: 14699 Comm: syz.0.7285 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2975.387893][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2975.387906][T14699] Call Trace: [ 2975.387913][T14699] [ 2975.387921][T14699] dump_stack_lvl+0x16c/0x1f0 [ 2975.387949][T14699] should_fail_ex+0x512/0x640 [ 2975.387981][T14699] should_fail_alloc_page+0xe7/0x130 [ 2975.388010][T14699] prepare_alloc_pages+0x3c2/0x610 [ 2975.388045][T14699] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 2975.388071][T14699] ? stack_trace_save+0x8e/0xc0 [ 2975.388093][T14699] ? __pfx_stack_trace_save+0x10/0x10 [ 2975.388114][T14699] ? rcu_is_watching+0x12/0xc0 [ 2975.388134][T14699] ? stack_depot_save_flags+0x29/0x9c0 [ 2975.388168][T14699] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2975.388192][T14699] ? __kasan_slab_alloc+0x89/0x90 [ 2975.388215][T14699] ? __pmd_alloc+0xbf/0x930 [ 2975.388245][T14699] ? handle_mm_fault+0x589/0xd10 [ 2975.388263][T14699] ? do_user_addr_fault+0x7a6/0x1370 [ 2975.388293][T14699] ? exc_page_fault+0x5c/0xb0 [ 2975.388314][T14699] ? asm_exc_page_fault+0x26/0x30 [ 2975.388333][T14699] ? rep_movs_alternative+0xf/0x90 [ 2975.388363][T14699] ? _copy_from_user+0x98/0xd0 [ 2975.388393][T14699] ? do_sock_getsockopt+0x3ca/0x440 [ 2975.388433][T14699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2975.388464][T14699] ? policy_nodemask+0xea/0x4e0 [ 2975.388493][T14699] alloc_pages_mpol+0x1fb/0x550 [ 2975.388520][T14699] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2975.388553][T14699] alloc_pages_noprof+0x131/0x390 [ 2975.388580][T14699] pte_alloc_one+0x1c/0x3a0 [ 2975.388602][T14699] do_pte_missing+0x1afc/0x3ba0 [ 2975.388623][T14699] ? do_raw_spin_unlock+0x172/0x230 [ 2975.388656][T14699] ? __pmd_alloc+0x3fb/0x930 [ 2975.388687][T14699] __handle_mm_fault+0x152a/0x2a50 [ 2975.388711][T14699] ? mt_find+0x3ef/0xa30 [ 2975.388739][T14699] ? __pfx___handle_mm_fault+0x10/0x10 [ 2975.388757][T14699] ? __pfx_mt_find+0x10/0x10 [ 2975.388805][T14699] ? find_vma+0xbf/0x140 [ 2975.388831][T14699] ? __pfx_find_vma+0x10/0x10 [ 2975.388859][T14699] handle_mm_fault+0x589/0xd10 [ 2975.388881][T14699] ? __bpf_trace_exceptions+0x1/0x40 [ 2975.388913][T14699] do_user_addr_fault+0x7a6/0x1370 [ 2975.388947][T14699] ? rcu_is_watching+0x12/0xc0 [ 2975.388969][T14699] exc_page_fault+0x5c/0xb0 [ 2975.388993][T14699] asm_exc_page_fault+0x26/0x30 [ 2975.389012][T14699] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 2975.389044][T14699] Code: c4 10 e9 14 23 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 2975.389065][T14699] RSP: 0018:ffffc900047a7d70 EFLAGS: 00050202 [ 2975.389081][T14699] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 2975.389094][T14699] RDX: fffff520008f4fbc RSI: 0000000000000000 RDI: ffffc900047a7de0 [ 2975.389107][T14699] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520008f4fbc [ 2975.389119][T14699] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 2975.389131][T14699] R13: ffffc900047a7de0 R14: 0000000000000000 R15: 0000000000000000 [ 2975.389156][T14699] _copy_from_user+0x98/0xd0 [ 2975.389188][T14699] do_sock_getsockopt+0x3ca/0x440 [ 2975.389219][T14699] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2975.389248][T14699] ? __fget_files+0x204/0x3c0 [ 2975.389281][T14699] __sys_getsockopt+0x123/0x1b0 [ 2975.389311][T14699] __x64_sys_getsockopt+0xbd/0x160 [ 2975.389334][T14699] ? do_syscall_64+0x91/0x490 [ 2975.389359][T14699] ? lockdep_hardirqs_on+0x7c/0x110 [ 2975.389382][T14699] do_syscall_64+0xcd/0x490 [ 2975.389409][T14699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2975.389428][T14699] RIP: 0033:0x7f500578ebe9 [ 2975.389443][T14699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2975.389462][T14699] RSP: 002b:00007f500663e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2975.389479][T14699] RAX: ffffffffffffffda RBX: 00007f50059b5fa0 RCX: 00007f500578ebe9 [ 2975.389492][T14699] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000003 [ 2975.389504][T14699] RBP: 00007f500663e090 R08: 0000000000000000 R09: 0000000000000000 [ 2975.389517][T14699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2975.389529][T14699] R13: 00007f50059b6038 R14: 00007f50059b5fa0 R15: 00007ffd86fcd758 [ 2975.389554][T14699] [ 2976.778779][T14742] zram0: detected capacity change from 0 to 8 [ 2977.064982][T14744] FAULT_INJECTION: forcing a failure. [ 2977.064982][T14744] name failslab, interval 1, probability 0, space 0, times 0 [ 2977.177675][T13961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2977.188186][T14744] CPU: 0 UID: 0 PID: 14744 Comm: syz.3.7290 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2977.188213][T14744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2977.188225][T14744] Call Trace: [ 2977.188232][T14744] [ 2977.188240][T14744] dump_stack_lvl+0x16c/0x1f0 [ 2977.188269][T14744] should_fail_ex+0x512/0x640 [ 2977.188297][T14744] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2977.188324][T14744] should_failslab+0xc2/0x120 [ 2977.188351][T14744] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2977.188375][T14744] ? getname_flags.part.0+0x4c/0x550 [ 2977.188410][T14744] getname_flags.part.0+0x4c/0x550 [ 2977.188443][T14744] getname_flags+0x93/0xf0 [ 2977.188465][T14744] do_sys_openat2+0xb8/0x1d0 [ 2977.188496][T14744] ? __pfx_do_sys_openat2+0x10/0x10 [ 2977.188549][T14744] ? __fget_files+0x20e/0x3c0 [ 2977.188576][T14744] __x64_sys_openat+0x174/0x210 [ 2977.188616][T14744] ? __pfx___x64_sys_openat+0x10/0x10 [ 2977.188648][T14744] ? ksys_write+0x1ac/0x250 [ 2977.188681][T14744] do_syscall_64+0xcd/0x490 [ 2977.188710][T14744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2977.188732][T14744] RIP: 0033:0x7fac7258ebe9 [ 2977.188749][T14744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2977.188770][T14744] RSP: 002b:00007fac7338b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2977.188790][T14744] RAX: ffffffffffffffda RBX: 00007fac727b5fa0 RCX: 00007fac7258ebe9 [ 2977.188805][T14744] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2977.188818][T14744] RBP: 00007fac7338b090 R08: 0000000000000000 R09: 0000000000000000 [ 2977.188831][T14744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2977.188844][T14744] R13: 00007fac727b6038 R14: 00007fac727b5fa0 R15: 00007fff90b221a8 [ 2977.188870][T14744] [ 2977.405799][T13961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2977.457551][T13961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2977.468901][T13961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2978.050703][T13961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2978.168783][T13961] 8021q: adding VLAN 0 to HW filter on device team0 [ 2978.244671][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 2978.251802][T12861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2978.364414][T12867] bridge0: port 2(bridge_slave_1) entered blocking state [ 2978.371588][T12867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2978.435464][T14834] FAULT_INJECTION: forcing a failure. [ 2978.435464][T14834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2978.512126][T13961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2978.639079][T13961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2978.677072][T14834] CPU: 0 UID: 0 PID: 14834 Comm: syz.3.7294 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2978.677105][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2978.677119][T14834] Call Trace: [ 2978.677127][T14834] [ 2978.677136][T14834] dump_stack_lvl+0x16c/0x1f0 [ 2978.677170][T14834] should_fail_ex+0x512/0x640 [ 2978.677208][T14834] _copy_from_user+0x2e/0xd0 [ 2978.677246][T14834] kstrtouint_from_user+0xd6/0x1d0 [ 2978.677317][T14834] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2978.677345][T14834] ? __lock_acquire+0xb97/0x1ce0 [ 2978.677390][T14834] proc_fail_nth_write+0x83/0x220 [ 2978.677417][T14834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2978.677450][T14834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2978.677480][T14834] vfs_write+0x29d/0x11d0 [ 2978.677512][T14834] ? __pfx___mutex_lock+0x10/0x10 [ 2978.677543][T14834] ? __pfx_vfs_write+0x10/0x10 [ 2978.677579][T14834] ? __fget_files+0x20e/0x3c0 [ 2978.677613][T14834] ksys_write+0x12a/0x250 [ 2978.677639][T14834] ? __pfx_ksys_write+0x10/0x10 [ 2978.677676][T14834] do_syscall_64+0xcd/0x490 [ 2978.677708][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2978.677732][T14834] RIP: 0033:0x7fac7258d69f [ 2978.677755][T14834] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2978.677779][T14834] RSP: 002b:00007fac7338b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2978.677810][T14834] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac7258d69f [ 2978.677824][T14834] RDX: 0000000000000001 RSI: 00007fac7338b0a0 RDI: 0000000000000005 [ 2978.677837][T14834] RBP: 00007fac7338b090 R08: 0000000000000000 R09: 0000000000000000 [ 2978.677849][T14834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2978.677861][T14834] R13: 00007fac727b6038 R14: 00007fac727b5fa0 R15: 00007fff90b221a8 [ 2978.677887][T14834] [ 2979.184298][T14851] FAULT_INJECTION: forcing a failure. [ 2979.184298][T14851] name failslab, interval 1, probability 0, space 0, times 0 [ 2979.233236][T14851] CPU: 0 UID: 0 PID: 14851 Comm: syz.2.7296 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2979.233263][T14851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2979.233293][T14851] Call Trace: [ 2979.233300][T14851] [ 2979.233308][T14851] dump_stack_lvl+0x16c/0x1f0 [ 2979.233339][T14851] should_fail_ex+0x512/0x640 [ 2979.233373][T14851] should_failslab+0xc2/0x120 [ 2979.233409][T14851] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2979.233432][T14851] ? proc_thread_self_get_link+0x1c6/0x240 [ 2979.233466][T14851] proc_thread_self_get_link+0x1c6/0x240 [ 2979.233495][T14851] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 2979.233523][T14851] step_into+0x195b/0x2270 [ 2979.233550][T14851] ? __pfx_step_into+0x10/0x10 [ 2979.233575][T14851] ? lookup_fast+0x156/0x610 [ 2979.233600][T14851] walk_component+0xfc/0x5b0 [ 2979.233623][T14851] link_path_walk+0x627/0xe20 [ 2979.233655][T14851] path_openat+0x1b0/0x2cb0 [ 2979.233678][T14851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2979.233709][T14851] ? __pfx_path_openat+0x10/0x10 [ 2979.233741][T14851] do_filp_open+0x20b/0x470 [ 2979.233767][T14851] ? __pfx_do_filp_open+0x10/0x10 [ 2979.233816][T14851] ? alloc_fd+0x471/0x7d0 [ 2979.233846][T14851] do_sys_openat2+0x11b/0x1d0 [ 2979.233879][T14851] ? __pfx_do_sys_openat2+0x10/0x10 [ 2979.233941][T14851] __x64_sys_openat+0x174/0x210 [ 2979.233977][T14851] ? __pfx___x64_sys_openat+0x10/0x10 [ 2979.234024][T14851] do_syscall_64+0xcd/0x490 [ 2979.234055][T14851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2979.234078][T14851] RIP: 0033:0x7f2d4e98d550 [ 2979.234096][T14851] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 2979.234119][T14851] RSP: 002b:00007f2d4f73ffe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2979.234141][T14851] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2d4e98d550 [ 2979.234156][T14851] RDX: 0000000000000002 RSI: 00007f2d4ea120d3 RDI: 00000000ffffff9c [ 2979.234171][T14851] RBP: 00007f2d4ea120d3 R08: 0000000000000000 R09: 00007f2d4f741000 [ 2979.234186][T14851] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 2979.234200][T14851] R13: 00007f2d4ebb6038 R14: 00007f2d4ebb5fa0 R15: 00007ffc90270818 [ 2979.234229][T14851] [ 2979.234454][T14851] FAULT_INJECTION: forcing a failure. [ 2979.234454][T14851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2979.578895][T13961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2979.648959][T13961] veth0_vlan: entered promiscuous mode [ 2979.699516][T13961] veth1_vlan: entered promiscuous mode [ 2979.844026][T13961] veth0_macvtap: entered promiscuous mode [ 2979.886702][T13961] veth1_macvtap: entered promiscuous mode [ 2979.961430][T13961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2979.996571][T13961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2980.111975][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.151304][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.357639][T14851] CPU: 0 UID: 0 PID: 14851 Comm: syz.2.7296 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2980.357674][T14851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2980.357689][T14851] Call Trace: [ 2980.357697][T14851] [ 2980.357706][T14851] dump_stack_lvl+0x16c/0x1f0 [ 2980.357740][T14851] should_fail_ex+0x512/0x640 [ 2980.357777][T14851] _copy_from_user+0x2e/0xd0 [ 2980.357828][T14851] memdup_user+0x6b/0xe0 [ 2980.357870][T14851] strndup_user+0x78/0xe0 [ 2980.357897][T14851] __x64_sys_mount+0x180/0x310 [ 2980.357925][T14851] ? __pfx___x64_sys_mount+0x10/0x10 [ 2980.357960][T14851] do_syscall_64+0xcd/0x490 [ 2980.357988][T14851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2980.358010][T14851] RIP: 0033:0x7f2d4e98ebe9 [ 2980.358026][T14851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2980.358048][T14851] RSP: 002b:00007f2d4f740038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2980.358069][T14851] RAX: ffffffffffffffda RBX: 00007f2d4ebb5fa0 RCX: 00007f2d4e98ebe9 [ 2980.358083][T14851] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 00002000000002c0 [ 2980.358097][T14851] RBP: 00007f2d4f740090 R08: 00002000000003c0 R09: 0000000000000000 [ 2980.358111][T14851] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 2980.358123][T14851] R13: 00007f2d4ebb6038 R14: 00007f2d4ebb5fa0 R15: 00007ffc90270818 [ 2980.358150][T14851] [ 2980.832373][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.858998][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2981.621469][T12867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2981.701275][T12867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2981.881790][T12867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2981.941325][T12867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2982.088938][T14889] FAULT_INJECTION: forcing a failure. [ 2982.088938][T14889] name failslab, interval 1, probability 0, space 0, times 0 [ 2982.161197][T14889] CPU: 0 UID: 0 PID: 14889 Comm: syz.2.7301 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2982.161232][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2982.161246][T14889] Call Trace: [ 2982.161254][T14889] [ 2982.161263][T14889] dump_stack_lvl+0x16c/0x1f0 [ 2982.161296][T14889] should_fail_ex+0x512/0x640 [ 2982.161328][T14889] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2982.161358][T14889] should_failslab+0xc2/0x120 [ 2982.161389][T14889] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2982.161414][T14889] ? __pfx___might_resched+0x10/0x10 [ 2982.161439][T14889] ? __anon_vma_prepare+0xae/0x5e0 [ 2982.161468][T14889] __anon_vma_prepare+0xae/0x5e0 [ 2982.161491][T14889] ? __filemap_get_folio+0x32b/0xc30 [ 2982.161525][T14889] __vmf_anon_prepare+0x11c/0x240 [ 2982.161561][T14889] hugetlb_fault+0x1ba4/0x2f40 [ 2982.161590][T14889] ? __pfx_hugetlb_fault+0x10/0x10 [ 2982.161623][T14889] ? find_vma+0xbf/0x140 [ 2982.161652][T14889] ? __pfx_find_vma+0x10/0x10 [ 2982.161685][T14889] handle_mm_fault+0xbfa/0xd10 [ 2982.161709][T14889] ? __bpf_trace_exceptions+0x1/0x40 [ 2982.161746][T14889] do_user_addr_fault+0x7a6/0x1370 [ 2982.161785][T14889] ? rcu_is_watching+0x12/0xc0 [ 2982.161811][T14889] exc_page_fault+0x5c/0xb0 [ 2982.161838][T14889] asm_exc_page_fault+0x26/0x30 [ 2982.161861][T14889] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2982.161899][T14889] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2982.161922][T14889] RSP: 0018:ffffc9000bc07d18 EFLAGS: 00050202 [ 2982.161941][T14889] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000078 [ 2982.161956][T14889] RDX: fffff52001780fd1 RSI: 0000000000000000 RDI: ffffc9000bc07e10 [ 2982.161971][T14889] RBP: 0000000000000078 R08: 0000000000000001 R09: fffff52001780fd0 [ 2982.161986][T14889] R10: ffffc9000bc07e87 R11: 0000000000000000 R12: 0000000000000000 [ 2982.162000][T14889] R13: ffffc9000bc07e10 R14: 0000000000000000 R15: 0000000000000000 [ 2982.162029][T14889] _copy_from_user+0x98/0xd0 [ 2982.162066][T14889] io_uring_setup+0xb4/0x2080 [ 2982.162099][T14889] ? __pfx_io_uring_setup+0x10/0x10 [ 2982.162131][T14889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2982.162171][T14889] ? __fget_files+0x20e/0x3c0 [ 2982.162204][T14889] ? ksys_write+0x1ac/0x250 [ 2982.162231][T14889] ? __pfx_ksys_write+0x10/0x10 [ 2982.162263][T14889] __x64_sys_io_uring_setup+0xc2/0x170 [ 2982.162293][T14889] do_syscall_64+0xcd/0x490 [ 2982.162324][T14889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2982.162347][T14889] RIP: 0033:0x7f2d4e98ebe9 [ 2982.162364][T14889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2982.162386][T14889] RSP: 002b:00007f2d4f740038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2982.162407][T14889] RAX: ffffffffffffffda RBX: 00007f2d4ebb5fa0 RCX: 00007f2d4e98ebe9 [ 2982.162421][T14889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2982.162434][T14889] RBP: 00007f2d4f740090 R08: 0000000000000000 R09: 0000000000000000 [ 2982.162448][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2982.162462][T14889] R13: 00007f2d4ebb6038 R14: 00007f2d4ebb5fa0 R15: 00007ffc90270818 [ 2982.162491][T14889] [ 2982.485013][ C0] vkms_vblank_simulate: vblank timer overrun [ 2983.969900][T14913] zram: Cannot change disksize for initialized device [ 2985.918019][T14983] FAULT_INJECTION: forcing a failure. [ 2985.918019][T14983] name failslab, interval 1, probability 0, space 0, times 0 [ 2986.047913][T13693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2986.063651][T13693] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2986.071442][T13693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2986.081582][T13693] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2986.090037][T13693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2986.209476][T14983] CPU: 0 UID: 0 PID: 14983 Comm: syz.2.7308 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2986.209522][T14983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2986.209536][T14983] Call Trace: [ 2986.209544][T14983] [ 2986.209553][T14983] dump_stack_lvl+0x16c/0x1f0 [ 2986.209584][T14983] should_fail_ex+0x512/0x640 [ 2986.209615][T14983] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2986.209659][T14983] should_failslab+0xc2/0x120 [ 2986.209690][T14983] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2986.209729][T14983] ? copy_mount_options+0x55/0x190 [ 2986.209760][T14983] ? _copy_from_user+0x59/0xd0 [ 2986.209795][T14983] copy_mount_options+0x55/0x190 [ 2986.209836][T14983] __x64_sys_mount+0x1ac/0x310 [ 2986.209884][T14983] ? __pfx___x64_sys_mount+0x10/0x10 [ 2986.209923][T14983] do_syscall_64+0xcd/0x490 [ 2986.209955][T14983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2986.209979][T14983] RIP: 0033:0x7f2d4e98ebe9 [ 2986.209997][T14983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2986.210020][T14983] RSP: 002b:00007f2d4f740038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2986.210043][T14983] RAX: ffffffffffffffda RBX: 00007f2d4ebb5fa0 RCX: 00007f2d4e98ebe9 [ 2986.210058][T14983] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 00002000000002c0 [ 2986.210072][T14983] RBP: 00007f2d4ea11e19 R08: 00002000000003c0 R09: 0000000000000000 [ 2986.210087][T14983] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 2986.210101][T14983] R13: 00007f2d4ebb6038 R14: 00007f2d4ebb5fa0 R15: 00007ffc90270818 [ 2986.210129][T14983] [ 2986.374768][ C0] vkms_vblank_simulate: vblank timer overrun [ 2988.183448][T13693] Bluetooth: hci4: command tx timeout [ 2988.980843][T15063] ================================================================== [ 2988.988945][T15063] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 2988.996907][T15063] Read of size 8 at addr ffff88802a1d6000 by task syz.2.7313/15063 [ 2989.004811][T15063] [ 2989.007140][T15063] CPU: 0 UID: 0 PID: 15063 Comm: syz.2.7313 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2989.007171][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2989.007186][T15063] Call Trace: [ 2989.007196][T15063] [ 2989.007206][T15063] dump_stack_lvl+0x116/0x1f0 [ 2989.007239][T15063] print_report+0xcd/0x630 [ 2989.007271][T15063] ? __virt_addr_valid+0x81/0x610 [ 2989.007301][T15063] ? __phys_addr+0xe8/0x180 [ 2989.007331][T15063] ? force_devcd_write+0x312/0x340 [ 2989.007363][T15063] kasan_report+0xe0/0x110 [ 2989.007394][T15063] ? force_devcd_write+0x312/0x340 [ 2989.007429][T15063] force_devcd_write+0x312/0x340 [ 2989.007461][T15063] ? __pfx_force_devcd_write+0x10/0x10 [ 2989.007493][T15063] ? __debugfs_file_get+0x1fe/0x840 [ 2989.007540][T15063] ? __pfx___debugfs_file_get+0x10/0x10 [ 2989.007581][T15063] full_proxy_write+0x12e/0x1a0 [ 2989.007626][T15063] ? __pfx_full_proxy_write+0x10/0x10 [ 2989.007663][T15063] vfs_write+0x29d/0x11d0 [ 2989.007693][T15063] ? __pfx___mutex_lock+0x10/0x10 [ 2989.007725][T15063] ? __pfx_vfs_write+0x10/0x10 [ 2989.007756][T15063] ? __fget_files+0x20e/0x3c0 [ 2989.007789][T15063] ksys_write+0x12a/0x250 [ 2989.007828][T15063] ? __pfx_ksys_write+0x10/0x10 [ 2989.007858][T15063] do_syscall_64+0xcd/0x490 [ 2989.007887][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2989.007923][T15063] RIP: 0033:0x7f2d4e98ebe9 [ 2989.007941][T15063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2989.007970][T15063] RSP: 002b:00007f2d4f740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2989.007989][T15063] RAX: ffffffffffffffda RBX: 00007f2d4ebb5fa0 RCX: 00007f2d4e98ebe9 [ 2989.008004][T15063] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 2989.008018][T15063] RBP: 00007f2d4ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2989.008031][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2989.008044][T15063] R13: 00007f2d4ebb6038 R14: 00007f2d4ebb5fa0 R15: 00007ffc90270818 [ 2989.008065][T15063] [ 2989.008072][T15063] [ 2989.215087][T15063] Allocated by task 1324: [ 2989.219425][T15063] kasan_save_stack+0x33/0x60 [ 2989.224126][T15063] kasan_save_track+0x14/0x30 [ 2989.228823][T15063] __kasan_kmalloc+0xaa/0xb0 [ 2989.233433][T15063] vhci_open+0x4c/0x430 [ 2989.237620][T15063] misc_open+0x35a/0x420 [ 2989.241868][T15063] chrdev_open+0x231/0x6a0 [ 2989.246290][T15063] do_dentry_open+0x97f/0x1530 [ 2989.251082][T15063] vfs_open+0x82/0x3f0 [ 2989.255163][T15063] path_openat+0x1de4/0x2cb0 [ 2989.259763][T15063] do_filp_open+0x20b/0x470 [ 2989.264288][T15063] do_sys_openat2+0x11b/0x1d0 [ 2989.268973][T15063] __x64_sys_openat+0x174/0x210 [ 2989.273837][T15063] do_syscall_64+0xcd/0x490 [ 2989.278348][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2989.284241][T15063] [ 2989.286560][T15063] Freed by task 1324: [ 2989.290531][T15063] kasan_save_stack+0x33/0x60 [ 2989.295226][T15063] kasan_save_track+0x14/0x30 [ 2989.299908][T15063] kasan_save_free_info+0x3b/0x60 [ 2989.304937][T15063] __kasan_slab_free+0x60/0x70 [ 2989.309712][T15063] kfree+0x2b4/0x4d0 [ 2989.313626][T15063] vhci_release+0xbb/0xf0 [ 2989.317957][T15063] __fput+0x3ff/0xb70 [ 2989.321943][T15063] task_work_run+0x150/0x240 [ 2989.326563][T15063] do_exit+0x86f/0x2bf0 [ 2989.330731][T15063] do_group_exit+0xd3/0x2a0 [ 2989.335248][T15063] get_signal+0x2673/0x26d0 [ 2989.339754][T15063] arch_do_signal_or_restart+0x8f/0x790 [ 2989.345306][T15063] exit_to_user_mode_loop+0x84/0x110 [ 2989.350602][T15063] do_syscall_64+0x3f6/0x490 [ 2989.355204][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2989.361094][T15063] [ 2989.363424][T15063] The buggy address belongs to the object at ffff88802a1d6000 [ 2989.363424][T15063] which belongs to the cache kmalloc-1k of size 1024 [ 2989.377475][T15063] The buggy address is located 0 bytes inside of [ 2989.377475][T15063] freed 1024-byte region [ffff88802a1d6000, ffff88802a1d6400) [ 2989.391187][T15063] [ 2989.393502][T15063] The buggy address belongs to the physical page: [ 2989.399911][T15063] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a1d0 [ 2989.408663][T15063] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2989.417164][T15063] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2989.424705][T15063] page_type: f5(slab) [ 2989.428681][T15063] raw: 00fff00000000040 ffff88801b841dc0 ffffea0000cf7200 dead000000000002 [ 2989.437270][T15063] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2989.445854][T15063] head: 00fff00000000040 ffff88801b841dc0 ffffea0000cf7200 dead000000000002 [ 2989.454532][T15063] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2989.463207][T15063] head: 00fff00000000003 ffffea0000a87401 00000000ffffffff 00000000ffffffff [ 2989.471877][T15063] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2989.480537][T15063] page dumped because: kasan: bad access detected [ 2989.486948][T15063] page_owner tracks the page as allocated [ 2989.492665][T15063] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1156, tgid 1156 (kworker/u8:6), ts 1413482844572, free_ts 1413272042841 [ 2989.512295][T15063] post_alloc_hook+0x1c0/0x230 [ 2989.517062][T15063] get_page_from_freelist+0x132b/0x38e0 [ 2989.522613][T15063] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 2989.528508][T15063] alloc_pages_mpol+0x1fb/0x550 [ 2989.533378][T15063] new_slab+0x247/0x330 [ 2989.537540][T15063] ___slab_alloc+0xcf2/0x1740 [ 2989.542218][T15063] __slab_alloc.constprop.0+0x56/0xb0 [ 2989.547591][T15063] __kmalloc_noprof+0x2f2/0x510 [ 2989.552449][T15063] ieee802_11_parse_elems_full+0x1db/0x3780 [ 2989.558412][T15063] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 2989.564521][T15063] ieee80211_iface_work+0xe2e/0x1360 [ 2989.569822][T15063] cfg80211_wiphy_work+0x2c7/0x580 [ 2989.574962][T15063] process_one_work+0x9cc/0x1b70 [ 2989.579914][T15063] worker_thread+0x6c8/0xf10 [ 2989.584522][T15063] kthread+0x3c5/0x780 [ 2989.588600][T15063] ret_from_fork+0x5d4/0x6f0 [ 2989.593205][T15063] page last free pid 5528 tgid 5528 stack trace: [ 2989.599531][T15063] __free_frozen_pages+0x7d5/0x10f0 [ 2989.604731][T15063] __put_partials+0x165/0x1c0 [ 2989.609412][T15063] qlist_free_all+0x4d/0x120 [ 2989.614012][T15063] kasan_quarantine_reduce+0x195/0x1e0 [ 2989.619474][T15063] __kasan_slab_alloc+0x69/0x90 [ 2989.624350][T15063] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 2989.630360][T15063] __alloc_skb+0x2b2/0x380 [ 2989.634804][T15063] alloc_skb_with_frags+0xe0/0x860 [ 2989.639928][T15063] sock_alloc_send_pskb+0x7fb/0x990 [ 2989.645132][T15063] unix_dgram_sendmsg+0x3e9/0x17f0 [ 2989.650266][T15063] __sys_sendto+0x4a0/0x520 [ 2989.654785][T15063] __x64_sys_sendto+0xe0/0x1c0 [ 2989.659557][T15063] do_syscall_64+0xcd/0x490 [ 2989.664087][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2989.670001][T15063] [ 2989.672325][T15063] Memory state around the buggy address: [ 2989.678440][T15063] ffff88802a1d5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2989.686507][T15063] ffff88802a1d5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2989.694570][T15063] >ffff88802a1d6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2989.702650][T15063] ^ [ 2989.706723][T15063] ffff88802a1d6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2989.714790][T15063] ffff88802a1d6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2989.722857][T15063] ================================================================== [ 2989.731104][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2990.398581][T13693] Bluetooth: hci4: command tx timeout [ 2991.077253][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2991.407739][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2991.727902][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2992.412586][ T79] bridge_slave_1: left allmulticast mode [ 2992.461209][ T79] bridge_slave_1: left promiscuous mode [ 2992.523433][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 2992.594612][T15063] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2992.601843][T15063] CPU: 0 UID: 0 PID: 15063 Comm: syz.2.7313 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 2992.612170][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2992.622245][T15063] Call Trace: [ 2992.625523][T15063] [ 2992.628457][T15063] dump_stack_lvl+0x3d/0x1f0 [ 2992.633061][T15063] vpanic+0x6e8/0x7a0 [ 2992.637060][T15063] ? __pfx_vpanic+0x10/0x10 [ 2992.641583][T15063] ? __pfx_vprintk_emit+0x10/0x10 [ 2992.646637][T15063] ? force_devcd_write+0x312/0x340 [ 2992.651793][T15063] panic+0xca/0xd0 [ 2992.655565][T15063] ? __pfx_panic+0x10/0x10 [ 2992.660000][T15063] ? force_devcd_write+0x312/0x340 [ 2992.665128][T15063] ? preempt_schedule_common+0x44/0xc0 [ 2992.670590][T15063] ? preempt_schedule_thunk+0x16/0x30 [ 2992.675972][T15063] check_panic_on_warn+0xab/0xb0 [ 2992.680926][T15063] end_report+0x107/0x170 [ 2992.685291][T15063] kasan_report+0xee/0x110 [ 2992.689733][T15063] ? force_devcd_write+0x312/0x340 [ 2992.694865][T15063] force_devcd_write+0x312/0x340 [ 2992.699817][T15063] ? __pfx_force_devcd_write+0x10/0x10 [ 2992.705295][T15063] ? __debugfs_file_get+0x1fe/0x840 [ 2992.710515][T15063] ? __pfx___debugfs_file_get+0x10/0x10 [ 2992.716089][T15063] full_proxy_write+0x12e/0x1a0 [ 2992.720975][T15063] ? __pfx_full_proxy_write+0x10/0x10 [ 2992.726377][T15063] vfs_write+0x29d/0x11d0 [ 2992.730724][T15063] ? __pfx___mutex_lock+0x10/0x10 [ 2992.735761][T15063] ? __pfx_vfs_write+0x10/0x10 [ 2992.740544][T15063] ? __fget_files+0x20e/0x3c0 [ 2992.745244][T15063] ksys_write+0x12a/0x250 [ 2992.749591][T15063] ? __pfx_ksys_write+0x10/0x10 [ 2992.754465][T15063] do_syscall_64+0xcd/0x490 [ 2992.759005][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2992.765083][T15063] RIP: 0033:0x7f2d4e98ebe9 [ 2992.769506][T15063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2992.789131][T15063] RSP: 002b:00007f2d4f740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2992.797569][T15063] RAX: ffffffffffffffda RBX: 00007f2d4ebb5fa0 RCX: 00007f2d4e98ebe9 [ 2992.805547][T15063] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 2992.813519][T15063] RBP: 00007f2d4ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2992.821493][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2992.829487][T15063] R13: 00007f2d4ebb6038 R14: 00007f2d4ebb5fa0 R15: 00007ffc90270818 [ 2992.837477][T15063] [ 2992.840571][T15063] Kernel Offset: disabled [ 2992.844898][T15063] Rebooting in 86400 seconds..