last executing test programs: 5.849603094s ago: executing program 1 (id=499): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="13042dbd7000fbdbdf250b00000008000300", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) shutdown$auto(0x200000003, 0x2) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80b3060100"}, 0x1c) (fail_nth: 13) 5.223686002s ago: executing program 1 (id=502): select$auto(0x1ff, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0xff, 0x9, 0x250, 0x100000001, 0x7, 0x4dec, 0x1, 0x3f, 0xd, 0xd59, 0x6, 0xff, 0x21, 0x6]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x2404c084) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyx7\x00', 0x581000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x7, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_keepalive_probes\x00', 0x40100, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 5.054765336s ago: executing program 3 (id=503): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40980, 0x0) mmap$auto(0xfffffffffffffffc, 0x202000b, 0x7f, 0x200000000eb1, 0xffffffffffffffff, 0x8000) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="08001579998289adc3670971e3f9c17798b2d90422c3559052d004ed31419faa7958c285cad735b352df46bb9365d77cc149039a8cdeb26757a6a3541f3cae7012d6c6b3ec1178974c4921d103f4671b1f4e6258d1228664a24ea871b5406ddbf4153c8864abca817f0b8aa70d6212e07e3123a665bef549c2f4b0604dcbc1e75d728636907d4e2533868e2dfe67dd20"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) writev$auto(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040), 0x7fff}, 0x9) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa1\x00', 0x1, 0x0) mmap$auto(0x810b, 0x7, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_tun_fops_tun(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x600007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x145, 0x8, 0x4, 0x9b72, 0x2, 0x8000000000008000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 4.437534049s ago: executing program 1 (id=505): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6c51, 0x0) mmap$auto(0x0, 0x10000, 0x5, 0x8000000008011, r0, 0x8008000) madvise$auto(0x0, 0x8, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a80)=ANY=[@ANYBLOB="010025bd7000fbdbdf251f0000002a000e4cdc0e692184223731c162994248da730bbd64461539b678d760f59a00"/55, @ANYBLOB="f9994240", @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20040054) close_range$auto(r1, 0x8, 0xe1) socketpair$auto(0x402, 0x0, 0x1, 0x0) r3 = socketpair$auto(0xf, 0x7, 0x8, 0x0) mmap$auto(0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x13, 0x2, 0x7) mmap$auto(0x0, 0x800002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)="ded84b4b00bf5acd32f40d32a44feb555d15b7b2aef948299e3569c6d6c1c493529b8ffcb2f8db9b8c293c1fbd190c12bfe12d24df8be073a8aba0568fac4600db5a33188703f20bc346ac69ecf3caec5075324061d3989a", 0x58) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x7ffffffffffffffe, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0xba8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x801, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyec\x00', 0x113203, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC1\x00', 0xe0800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) r5 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00'}) read$auto(0x3, 0x0, 0x80) 4.378073006s ago: executing program 2 (id=506): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/early_stop\x00', 0x80302, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = socket(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$auto(0x40, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000680)="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", 0x658) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x36}, 0x5, &(0x7f0000000140), 0x7, 0x1000}, 0x5}, 0xfffffff3, 0x100) 3.837886806s ago: executing program 2 (id=507): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f0000000000)="0aec78c355d6943c3460749d278bda77ca23abd4706282c76f72dd6269bf40f4edb668cf253d4d5ec1b3545c2f303a0de6b152043e24e7e40a2b7e11d043102e7b564bb7796cf50bb8139ce4e0e4325f994848d866bdd8324d2cb695a3630274a09c98b0722d314ef924aef2d76bca982f3a3b68658ebc3f73045e34a64d3b4d447140a389ab2b7b10a4ec728217a1d70071f8a9", 0x94) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) set_mempolicy$auto(0x1, 0x0, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r1 = io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000400)=0xfffff000) io_uring_enter$auto(r1, 0x11, 0x2688, 0x105, 0x0, 0x7) fsopen$auto(0x0, 0x1) 3.532175674s ago: executing program 3 (id=509): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x5) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x101201, 0x0, 0x7}, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) unshare$auto(0x8000400) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x80000eb1, 0xfffffffffffffffa, 0x8000) setreuid$auto(0x9, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x621f, 0x10004) getpriority$auto(0x2, 0x9) io_uring_setup$auto(0x6, 0x0) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, 0x0, 0x8d0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) 2.942728568s ago: executing program 3 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r1, 0xab02, r1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x100}, @NL80211_ATTR_PEER_AID={0x6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xb6, 0x125, "9515222f5d6acf427863f080b6ca72f435624105e5d277d51ff0be943a04e3d35d079e63d43d797368b07a844b1304ea04f32147e70dda7a06f48ef1991055a3cdd25b74768acc31d343bc574943489461ff9ae056af4ace53d1482cc3cb8587197a4f1a1ef4542c341de1565c16b65fd6e851b7ca5a07cb8111703e4085a073f2761ea3322a653adc084293fbe8d8d8cf6be63a4117ff280bf582db06e75af0ab3bad3f74a7310cbac382a8f326860c0c84"}]}, 0xfc}}, 0xc004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x0, 0x0) socket(0x1, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) read$auto(0xffffffffffffffff, 0x0, 0xf) modify_ldt$auto(0x1, 0x0, 0x10) 2.679997912s ago: executing program 3 (id=512): write$auto(0xca, 0x0, 0x1ff) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioperm$auto(0x2, 0x4, 0x87) close_range$auto(0x2, 0x8, 0x0) 2.600256031s ago: executing program 2 (id=513): mmap$auto(0x0, 0x4, 0xd9, 0x13, 0x96ab, 0x800000008002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0xa) fcntl$auto(0xff80000000000000, 0x409, 0x3f) writev$auto(0x0, &(0x7f0000000000)={0x0, 0x202}, 0x9) 2.444249159s ago: executing program 2 (id=514): select$auto(0x1ff, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0xff, 0x9, 0x250, 0x100000001, 0x7, 0x4dec, 0x1, 0x3f, 0xd, 0xd59, 0x6, 0xff, 0x21, 0x6]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x2404c084) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyx7\x00', 0x581000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x7, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40100, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 2.204532857s ago: executing program 0 (id=515): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_FEATURES2(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0xffffffff) r0 = socket(0xa, 0x5, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="13042dbd7000fbdbdf250b00000008000300", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) shutdown$auto(0x200000003, 0x2) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80b3060100"}, 0x1c) 1.990045466s ago: executing program 0 (id=516): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) ioctl$auto(0xc8, 0x800454df, 0x5c8d) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, 0x0, 0x40) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001740)='/sys/devices/virtual/vtconsole/vtcon1/name\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001780)=""/217, 0xd9) setresuid$auto(0x2, 0x7, 0x8080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) 1.77054343s ago: executing program 0 (id=517): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40980, 0x0) mmap$auto(0xfffffffffffffffc, 0x202000b, 0x7f, 0x200000000eb1, 0xffffffffffffffff, 0x8000) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="08001579998289adc3670971e3f9c17798b2d90422c3559052d004ed31419faa7958c285cad735b352df46bb9365d77cc149039a8cdeb26757a6a3541f3cae7012d6c6b3ec1178974c4921d103f4671b1f4e6258d1228664a24ea871b5406ddbf4153c8864abca817f0b8aa70d6212e07e3123a665bef549c2f4b0604dcbc1e75d728636907d4e2533868e2dfe67dd20"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) writev$auto(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040), 0x7fff}, 0x9) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa1\x00', 0x1, 0x0) mmap$auto(0x810b, 0x7, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_tun_fops_tun(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x600007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x145, 0x8, 0x4, 0x9b72, 0x2, 0x8000000000008000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 1.699103246s ago: executing program 2 (id=518): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002400)='/sys/devices/virtual/mtd/mtd0/mtdblock0/ro\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) getdents$auto(r0, &(0x7f00000002c0)={0x800, 0x7, 0x43f, "694e35b9d41e181fcace6be5f28fdeb373a62873d9b2445d6f402374b39b814a9306349576d6d59f6aa6b148bf30c1824e5867e9fbda6ba5356a05656ee3ab77904f800377786443351f953c2c3fc10af304b60e61b4f2ed74a3a55bcbf31611f6cea89dcd64277a4843d59dfc3b29c22050a0363c8d6d764d909a5620ee1103847a04520398b761473fbe3adb79722e16dd4cc19af5abb1fb0176d6aa8de2d080e629f53833d92f7752d4d9755f42a330d234a94ae0e43636d168e6c6b277019f60d59732699fe3eca5dc7600"/218}, 0x8004c3) mbind$auto(0x0, 0x764, 0x4, &(0x7f0000000280)=0x1, 0x3, 0x4) close_range$auto(0x2, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r1 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000040)=""/159, 0x9f) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000180)=""/78, 0x4e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) madvise$auto(0x2, 0x1ff, 0x9) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f00003460fac93497d76d"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x2, 0x4}, 0x77, 0x8, 0x0, 0x60bd) r2 = socket(0x10, 0x2, 0x0) madvise$auto(0x80000001, 0x101, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffbfffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0x2, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) setfsuid$auto(0x1) unshare$auto(0x40000080) madvise$auto(0x0, 0x20200, 0x15) close_range$auto(0x2, 0x8, 0x0) 1.575889079s ago: executing program 3 (id=519): r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) write$auto(r0, 0x0, 0xfffffde9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(r0, r0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x10d100, 0x0) setsockopt$auto_SO_KEEPALIVE(r2, 0x6, 0x9, &(0x7f0000000180)='/dev/sequencer2\x00', 0x800) write$auto(r1, 0x0, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r4, 0x9201, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0) r5 = socket(0x1f, 0x800, 0xffffff01) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}}, 0x4004000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x74d042, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x6482, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400, 0xdf, 0x8000000000000eb1, r5, 0x0) socket(0xa, 0x801, 0x84) socket(0x15, 0x1, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) mmap$auto(0x0, 0x4, 0x200, 0x200000000fd, r6, 0x0) mmap$auto(0x0, 0x400008, 0x7fffffff, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffff91f, 0xe) 1.530315894s ago: executing program 1 (id=520): readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x110c231f00, 0x1, 0x9) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) listen$auto(0x3, 0x8d) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f00000007c0)=""/153, 0x99) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x4, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x800, 0x45e) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56e) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x18) mlock$auto(0x5, 0xffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_RNDADDENTROPY2(r4, 0x40085203, 0x0) ptrace$auto(0x10, r3, 0x1000000009, 0x7fb) ptrace$auto(0xf, r3, 0x1, 0x4f) 604.51682ms ago: executing program 0 (id=521): openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) preadv$auto(0x40000000000003, &(0x7f00000006c0)={0x0, 0xfffffffe}, 0x6, 0x8, 0x5) 389.974403ms ago: executing program 0 (id=522): listen$auto(0xffffffffffffffff, 0xc1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0xbe2c, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x9, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x58, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7b8000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0xd26b, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 368.114674ms ago: executing program 1 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4044000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0) write$auto(r2, 0x0, 0x80000001) getrlimit$auto(0xffff, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf250d0000000c0006000b000000000000000800010009000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$auto(r0, &(0x7f0000000040)=@hci={0x1f, 0x3, 0x4}, 0x2c245dfb) r3 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0)={@_si_pad}, 0x6, &(0x7f0000000240)={{0xb, 0x2}, {0x3, 0x8238}, 0x2, 0x2, 0xffffffffffffffff, 0x4, 0x2, 0x57f, 0x2, 0x8, 0x8000000000000001, 0x10000, 0x2000000, 0x0, 0x7, 0xec}) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r3, 0x0, 0x4) acct$auto(&(0x7f0000000000)=']\x00') 197.940961ms ago: executing program 0 (id=524): openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) preadv$auto(0x40000000000003, &(0x7f00000006c0)={0x0, 0xfffffffe}, 0x6, 0x8, 0x5) (fail_nth: 2) 75.25731ms ago: executing program 2 (id=525): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @broadcast}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @random="70b28a70c5dc"}, @HSR_A_IF1_AGE={0x8, 0x3, 0x36}, @HSR_A_IF2_SEQ={0x6, 0x7, 0xff}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) socket(0xa, 0x1, 0x84) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) 59.429023ms ago: executing program 3 (id=526): select$auto(0x1ff, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0xff, 0x9, 0x250, 0x100000001, 0x7, 0x4dec, 0x1, 0x3f, 0xd, 0xd59, 0x6, 0xff, 0x21, 0x6]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x2404c084) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyx7\x00', 0x581000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x7, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40100, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 1 (id=527): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mknod$auto(0x0, 0x1001, 0x4) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1540, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/oom_adj\x00', 0x0, 0x0) madvise$auto(0x5, 0x5c7, 0x81) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000010c0)=""/95, 0x5f) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) capget$auto(&(0x7f0000000100)={0x6}, &(0x7f0000000140)={0x1, 0x7, 0x4}) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): _adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.666740][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.689610][ T5837] veth1_macvtap: entered promiscuous mode [ 101.720507][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.734618][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.743475][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.743534][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.769875][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.781841][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.792847][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.805843][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.819255][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.867358][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.877802][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.886728][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.895674][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.952070][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.968685][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.979937][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.992772][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.002875][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.013587][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.028159][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.065235][ T5847] Bluetooth: hci0: command tx timeout [ 102.074942][ T5847] Bluetooth: hci1: command tx timeout [ 102.085847][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.107662][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.117625][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.128242][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.139104][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.149868][ T5847] Bluetooth: hci2: command tx timeout [ 102.155041][ T55] Bluetooth: hci3: command tx timeout [ 102.155989][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.173239][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.216433][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.226518][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.235954][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.244770][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.325600][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.333495][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.435580][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.449062][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.491745][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.512819][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.658902][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.689521][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.717851][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.746312][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.826559][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.855535][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.954400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.262545][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.714661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 103.978875][ T5918] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 104.055603][ T5918] CIFS mount error: No usable UNC path provided in device string! [ 104.055603][ T5918] [ 104.095503][ T5918] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.144554][ T55] Bluetooth: hci1: command tx timeout [ 104.145579][ T5847] Bluetooth: hci0: command tx timeout [ 104.229317][ T5847] Bluetooth: hci3: command tx timeout [ 104.229938][ T55] Bluetooth: hci2: command tx timeout [ 104.762763][ T5937] Zero length message leads to an empty skb [ 105.287862][ T5936] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 105.312927][ T5936] netlink: 230 bytes leftover after parsing attributes in process `syz.1.7'. [ 105.382133][ T5938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 105.414639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.432489][ T5936] team0: Port device team_slave_1 removed [ 105.455859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 105.465311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 105.474110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.586832][ T5942] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 105.607560][ T5942] netlink: 230 bytes leftover after parsing attributes in process `syz.2.10'. [ 105.710144][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'. [ 105.842519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.021011][ T5942] team0: Port device team_slave_1 removed [ 106.269657][ T5949] netlink: 'syz.3.11': attribute type 10 has an invalid length. [ 106.284326][ T5949] netlink: 230 bytes leftover after parsing attributes in process `syz.3.11'. [ 106.371329][ T5951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11'. [ 106.456185][ T5949] team0: Port device team_slave_1 removed [ 106.488509][ T5957] FAULT_INJECTION: forcing a failure. [ 106.488509][ T5957] name failslab, interval 1, probability 0, space 0, times 1 [ 106.515835][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.2.13 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 106.515884][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.515910][ T5957] Call Trace: [ 106.515921][ T5957] [ 106.515938][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 106.515993][ T5957] should_fail_ex+0x512/0x640 [ 106.516033][ T5957] ? __kmalloc_node_noprof+0xc5/0x500 [ 106.516081][ T5957] should_failslab+0xc2/0x120 [ 106.516127][ T5957] __kmalloc_node_noprof+0xd8/0x500 [ 106.516167][ T5957] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.516218][ T5957] ? alloc_inode+0x86/0x240 [ 106.516259][ T5957] ? alloc_slab_obj_exts+0x41/0xa0 [ 106.516292][ T5957] ? do_syscall_64+0xcd/0x230 [ 106.516345][ T5957] alloc_slab_obj_exts+0x41/0xa0 [ 106.516378][ T5957] new_slab+0x28c/0x340 [ 106.516413][ T5957] ___slab_alloc+0xd9c/0x1940 [ 106.516447][ T5957] ? sk_prot_alloc+0x60/0x2a0 [ 106.516499][ T5957] ? ___slab_alloc+0x31/0x1940 [ 106.516541][ T5957] ? sk_prot_alloc+0x60/0x2a0 [ 106.516585][ T5957] ? __slab_alloc.constprop.0+0x56/0xb0 [ 106.516614][ T5957] __slab_alloc.constprop.0+0x56/0xb0 [ 106.516647][ T5957] kmem_cache_alloc_noprof+0xef/0x3b0 [ 106.516682][ T5957] ? sk_prot_alloc+0x60/0x2a0 [ 106.516730][ T5957] sk_prot_alloc+0x60/0x2a0 [ 106.516776][ T5957] sk_alloc+0x36/0xc20 [ 106.516811][ T5957] inet_create+0x3a1/0x1090 [ 106.516838][ T5957] ? inet_create+0x93/0x1090 [ 106.516868][ T5957] __sock_create+0x335/0x8d0 [ 106.516902][ T5957] __sys_socket+0x14d/0x260 [ 106.516931][ T5957] ? __pfx___sys_socket+0x10/0x10 [ 106.516960][ T5957] ? rcu_is_watching+0x12/0xc0 [ 106.516998][ T5957] __x64_sys_socket+0x72/0xb0 [ 106.517024][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.517063][ T5957] do_syscall_64+0xcd/0x230 [ 106.517106][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.517135][ T5957] RIP: 0033:0x7fca3158e169 [ 106.517167][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.517194][ T5957] RSP: 002b:00007fca323de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 106.517229][ T5957] RAX: ffffffffffffffda RBX: 00007fca317b5fa0 RCX: 00007fca3158e169 [ 106.517247][ T5957] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 106.517264][ T5957] RBP: 00007fca31610a68 R08: 0000000000000000 R09: 0000000000000000 [ 106.517281][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.517297][ T5957] R13: 0000000000000000 R14: 00007fca317b5fa0 R15: 00007ffc4dd6ee68 [ 106.517333][ T5957] [ 106.953128][ T5963] vivid-003: ================= START STATUS ================= [ 107.016871][ T5963] vivid-003: Radio HW Seek Mode: Bounded [ 107.022788][ T5963] vivid-003: Radio Programmable HW Seek: false [ 107.079436][ T5963] vivid-003: RDS Rx I/O Mode: Block I/O [ 107.098750][ T5963] vivid-003: Generate RBDS Instead of RDS: false [ 107.113427][ T5963] vivid-003: RDS Reception: true [ 107.133992][ T5963] vivid-003: RDS Program Type: 0 inactive [ 107.168474][ T5963] vivid-003: RDS PS Name: inactive [ 107.173797][ T5963] vivid-003: RDS Radio Text: inactive [ 107.189273][ T5954] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 107.209819][ T5954] netlink: 230 bytes leftover after parsing attributes in process `syz.1.12'. [ 107.223985][ T5965] FAULT_INJECTION: forcing a failure. [ 107.223985][ T5965] name failslab, interval 1, probability 0, space 0, times 0 [ 107.246965][ T5963] vivid-003: RDS Traffic Announcement: false inactive [ 107.253842][ T5963] vivid-003: RDS Traffic Program: false inactive [ 107.260432][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: syz.0.14 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 107.260482][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.260501][ T5965] Call Trace: [ 107.260512][ T5965] [ 107.260525][ T5965] dump_stack_lvl+0x16c/0x1f0 [ 107.260577][ T5965] should_fail_ex+0x512/0x640 [ 107.260614][ T5965] ? __kmalloc_noprof+0xbf/0x510 [ 107.260654][ T5965] ? lsm_blob_alloc+0x68/0x90 [ 107.260701][ T5965] should_failslab+0xc2/0x120 [ 107.260742][ T5965] __kmalloc_noprof+0xd2/0x510 [ 107.260797][ T5965] lsm_blob_alloc+0x68/0x90 [ 107.260851][ T5965] security_sk_alloc+0x30/0x270 [ 107.260898][ T5965] sk_prot_alloc+0xfb/0x2a0 [ 107.260954][ T5965] sk_alloc+0x36/0xc20 [ 107.260995][ T5965] inet_create+0x3a1/0x1090 [ 107.261048][ T5965] ? inet_create+0x93/0x1090 [ 107.261087][ T5965] __sock_create+0x335/0x8d0 [ 107.261127][ T5965] __sys_socket+0x14d/0x260 [ 107.261161][ T5965] ? __pfx___sys_socket+0x10/0x10 [ 107.261202][ T5965] ? rcu_is_watching+0x12/0xc0 [ 107.261243][ T5965] __x64_sys_socket+0x72/0xb0 [ 107.261274][ T5965] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.261324][ T5965] do_syscall_64+0xcd/0x230 [ 107.261381][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.261413][ T5965] RIP: 0033:0x7f727ed8e169 [ 107.261440][ T5965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.261473][ T5965] RSP: 002b:00007f727fbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 107.261504][ T5965] RAX: ffffffffffffffda RBX: 00007f727efb5fa0 RCX: 00007f727ed8e169 [ 107.261525][ T5965] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 107.261543][ T5965] RBP: 00007f727ee10a68 R08: 0000000000000000 R09: 0000000000000000 [ 107.261562][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.261581][ T5965] R13: 0000000000000000 R14: 00007f727efb5fa0 R15: 00007ffe3eb01fb8 [ 107.261621][ T5965] [ 107.484197][ T5963] vivid-003: RDS Music: false inactive [ 107.490369][ T5963] vivid-003: ================== END STATUS ================== [ 107.529971][ T5955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'. [ 108.661093][ T5983] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 108.677504][ T5983] netlink: 230 bytes leftover after parsing attributes in process `syz.1.21'. [ 108.790011][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 109.693528][ T5997] netlink: 'syz.1.25': attribute type 10 has an invalid length. [ 110.234457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.176161][ T6015] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 111.219768][ T6015] __nla_validate_parse: 3 callbacks suppressed [ 111.219786][ T6015] netlink: 230 bytes leftover after parsing attributes in process `syz.0.28'. [ 111.269020][ T6015] team0: Port device team_slave_1 removed [ 111.620062][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 111.885654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.125691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.489009][ T6044] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 113.517481][ T6044] netlink: 230 bytes leftover after parsing attributes in process `syz.1.34'. [ 113.704837][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 119.881345][ T6108] netlink: 'syz.2.46': attribute type 10 has an invalid length. [ 119.897540][ T6108] netlink: 230 bytes leftover after parsing attributes in process `syz.2.46'. [ 120.030577][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 120.337885][ T6114] netlink: 'syz.3.48': attribute type 10 has an invalid length. [ 120.355413][ T6114] netlink: 230 bytes leftover after parsing attributes in process `syz.3.48'. [ 120.404666][ T6124] netlink: 338 bytes leftover after parsing attributes in process `syz.0.51'. [ 120.456017][ T6114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.48'. [ 120.639800][ T30] audit: type=1800 audit(6040200546.325:2): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.53" name="lu_gp_id" dev="configfs" ino=7603 res=0 errno=0 [ 120.927856][ T6136] netlink: 330 bytes leftover after parsing attributes in process `syz.3.55'. [ 122.376292][ T6158] netlink: 338 bytes leftover after parsing attributes in process `syz.3.59'. [ 122.385637][ T6158] ipvlan1: entered allmulticast mode [ 122.391059][ T6158] veth0_vlan: entered allmulticast mode [ 122.709297][ T6156] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.823712][ T6149] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 122.831601][ T6149] netlink: 230 bytes leftover after parsing attributes in process `syz.1.57'. [ 123.018787][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 123.051753][ T6162] netlink: 326 bytes leftover after parsing attributes in process `syz.3.61'. [ 124.202678][ T6176] random: crng reseeded on system resumption [ 125.208089][ T6196] random: crng reseeded on system resumption [ 126.521917][ T6217] random: crng reseeded on system resumption [ 126.920438][ T6210] netlink: 'syz.1.71': attribute type 10 has an invalid length. [ 126.964486][ T6210] netlink: 230 bytes leftover after parsing attributes in process `syz.1.71'. [ 127.569061][ T6215] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 127.611774][ T6215] netlink: 230 bytes leftover after parsing attributes in process `syz.3.73'. [ 127.646853][ T6227] FAULT_INJECTION: forcing a failure. [ 127.646853][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 127.659828][ T6227] CPU: 0 UID: 0 PID: 6227 Comm: syz.0.75 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 127.659875][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.659899][ T6227] Call Trace: [ 127.659909][ T6227] [ 127.659921][ T6227] dump_stack_lvl+0x16c/0x1f0 [ 127.659999][ T6227] should_fail_ex+0x512/0x640 [ 127.660037][ T6227] ? __kmalloc_noprof+0xbf/0x510 [ 127.660079][ T6227] ? lsm_blob_alloc+0x68/0x90 [ 127.660129][ T6227] should_failslab+0xc2/0x120 [ 127.660172][ T6227] __kmalloc_noprof+0xd2/0x510 [ 127.660219][ T6227] lsm_blob_alloc+0x68/0x90 [ 127.660272][ T6227] security_sk_alloc+0x30/0x270 [ 127.660310][ T6227] sk_prot_alloc+0xfb/0x2a0 [ 127.660365][ T6227] sk_alloc+0x36/0xc20 [ 127.660406][ T6227] inet_create+0x3a1/0x1090 [ 127.660438][ T6227] ? inet_create+0x93/0x1090 [ 127.660474][ T6227] __sock_create+0x335/0x8d0 [ 127.660514][ T6227] __sys_socket+0x14d/0x260 [ 127.660547][ T6227] ? __pfx___sys_socket+0x10/0x10 [ 127.660581][ T6227] ? rcu_is_watching+0x12/0xc0 [ 127.660622][ T6227] __x64_sys_socket+0x72/0xb0 [ 127.660654][ T6227] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.660698][ T6227] do_syscall_64+0xcd/0x230 [ 127.660749][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.660781][ T6227] RIP: 0033:0x7f727ed8e169 [ 127.660816][ T6227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.660848][ T6227] RSP: 002b:00007f727fbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 127.660882][ T6227] RAX: ffffffffffffffda RBX: 00007f727efb5fa0 RCX: 00007f727ed8e169 [ 127.660903][ T6227] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 127.660922][ T6227] RBP: 00007f727ee10a68 R08: 0000000000000000 R09: 0000000000000000 [ 127.660942][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.660967][ T6227] R13: 0000000000000000 R14: 00007f727efb5fa0 R15: 00007ffe3eb01fb8 [ 127.661008][ T6227] [ 128.267037][ T6237] netlink: 206 bytes leftover after parsing attributes in process `syz.0.79'. [ 128.543687][ T6244] netlink: 326 bytes leftover after parsing attributes in process `syz.2.81'. [ 129.186816][ T6238] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 129.194842][ T6238] netlink: 230 bytes leftover after parsing attributes in process `syz.3.78'. [ 129.841223][ T6249] netlink: 'syz.1.82': attribute type 10 has an invalid length. [ 129.849206][ T6249] netlink: 230 bytes leftover after parsing attributes in process `syz.1.82'. [ 133.535994][ T6299] netlink: 'syz.1.90': attribute type 10 has an invalid length. [ 133.648071][ T6299] netlink: 230 bytes leftover after parsing attributes in process `syz.1.90'. [ 133.765084][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 135.285587][ T6317] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 135.293402][ T6317] netlink: 230 bytes leftover after parsing attributes in process `syz.3.94'. [ 135.413300][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'. [ 135.478372][ T6330] FAULT_INJECTION: forcing a failure. [ 135.478372][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 135.501915][ T6330] CPU: 1 UID: 0 PID: 6330 Comm: syz.2.97 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 135.501965][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.501985][ T6330] Call Trace: [ 135.501996][ T6330] [ 135.502009][ T6330] dump_stack_lvl+0x16c/0x1f0 [ 135.502063][ T6330] should_fail_ex+0x512/0x640 [ 135.502111][ T6330] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 135.502150][ T6330] should_failslab+0xc2/0x120 [ 135.502194][ T6330] __kmalloc_cache_noprof+0x6a/0x3e0 [ 135.502228][ T6330] ? snd_seq_timer_new+0x42/0x190 [ 135.502277][ T6330] snd_seq_timer_new+0x42/0x190 [ 135.502321][ T6330] snd_seq_queue_alloc+0x177/0x550 [ 135.502364][ T6330] snd_seq_ioctl_create_queue+0xa9/0x380 [ 135.502414][ T6330] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 135.502471][ T6330] alloc_seq_queue+0xda/0x180 [ 135.502521][ T6330] ? __pfx_alloc_seq_queue+0x10/0x10 [ 135.502597][ T6330] ? mark_held_locks+0x49/0x80 [ 135.502641][ T6330] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.502687][ T6330] snd_seq_oss_open+0x38c/0xa20 [ 135.502747][ T6330] odev_open+0x6f/0x90 [ 135.502791][ T6330] ? __pfx_odev_open+0x10/0x10 [ 135.502837][ T6330] soundcore_open+0x409/0x580 [ 135.502887][ T6330] ? __pfx_soundcore_open+0x10/0x10 [ 135.502944][ T6330] chrdev_open+0x231/0x6a0 [ 135.502979][ T6330] ? __pfx_apparmor_file_open+0x10/0x10 [ 135.503021][ T6330] ? __pfx_chrdev_open+0x10/0x10 [ 135.503061][ T6330] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 135.503126][ T6330] do_dentry_open+0x741/0x1c10 [ 135.503163][ T6330] ? __pfx_chrdev_open+0x10/0x10 [ 135.503209][ T6330] vfs_open+0x82/0x3f0 [ 135.503257][ T6330] path_openat+0x1e5e/0x2d40 [ 135.503304][ T6330] ? __pfx_path_openat+0x10/0x10 [ 135.503366][ T6330] do_filp_open+0x20b/0x470 [ 135.503402][ T6330] ? __pfx_do_filp_open+0x10/0x10 [ 135.503503][ T6330] ? alloc_fd+0x471/0x7d0 [ 135.503547][ T6330] do_sys_openat2+0x11b/0x1d0 [ 135.503593][ T6330] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.503643][ T6330] ? __pfx___might_resched+0x10/0x10 [ 135.503693][ T6330] __x64_sys_openat+0x174/0x210 [ 135.503741][ T6330] ? __pfx___x64_sys_openat+0x10/0x10 [ 135.503790][ T6330] ? rcu_is_watching+0x12/0xc0 [ 135.503835][ T6330] do_syscall_64+0xcd/0x230 [ 135.503886][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.503922][ T6330] RIP: 0033:0x7fca3158e169 [ 135.503948][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.503978][ T6330] RSP: 002b:00007fca323de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.504008][ T6330] RAX: ffffffffffffffda RBX: 00007fca317b5fa0 RCX: 00007fca3158e169 [ 135.504029][ T6330] RDX: 0000000000000080 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 135.504049][ T6330] RBP: 00007fca31610a68 R08: 0000000000000000 R09: 0000000000000000 [ 135.504068][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.504086][ T6330] R13: 0000000000000000 R14: 00007fca317b5fa0 R15: 00007ffc4dd6ee68 [ 135.504137][ T6330] [ 136.001348][ T6334] process 'syz.3.99' launched './file0' with NULL argv: empty string added [ 136.081233][ T6324] netlink: 'syz.0.96': attribute type 10 has an invalid length. [ 136.089074][ T6324] netlink: 230 bytes leftover after parsing attributes in process `syz.0.96'. [ 136.143082][ T6324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.96'. [ 137.137465][ T6343] netlink: 'syz.0.102': attribute type 10 has an invalid length. [ 137.242085][ T6343] netlink: 230 bytes leftover after parsing attributes in process `syz.0.102'. [ 138.055594][ T6366] FAULT_INJECTION: forcing a failure. [ 138.055594][ T6366] name failslab, interval 1, probability 0, space 0, times 0 [ 138.124749][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.131367][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.196702][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.1.106 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 138.196737][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.196751][ T6366] Call Trace: [ 138.196759][ T6366] [ 138.196767][ T6366] dump_stack_lvl+0x16c/0x1f0 [ 138.196805][ T6366] should_fail_ex+0x512/0x640 [ 138.196832][ T6366] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 138.196866][ T6366] should_failslab+0xc2/0x120 [ 138.196897][ T6366] __kmalloc_cache_noprof+0x6a/0x3e0 [ 138.196922][ T6366] ? sctp_endpoint_new+0x7c/0xcd0 [ 138.196963][ T6366] sctp_endpoint_new+0x7c/0xcd0 [ 138.197003][ T6366] sctp_init_sock+0xe2d/0x1330 [ 138.197036][ T6366] ? sock_init_data_uid+0x7f6/0xa00 [ 138.197061][ T6366] ? __pfx_sctp_init_sock+0x10/0x10 [ 138.197096][ T6366] inet_create+0x936/0x1090 [ 138.197120][ T6366] ? inet_create+0x93/0x1090 [ 138.197146][ T6366] __sock_create+0x335/0x8d0 [ 138.197175][ T6366] __sys_socket+0x14d/0x260 [ 138.197199][ T6366] ? __pfx___sys_socket+0x10/0x10 [ 138.197223][ T6366] ? rcu_is_watching+0x12/0xc0 [ 138.197251][ T6366] __x64_sys_socket+0x72/0xb0 [ 138.197273][ T6366] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.197305][ T6366] do_syscall_64+0xcd/0x230 [ 138.197340][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.197363][ T6366] RIP: 0033:0x7f1ece98e169 [ 138.197381][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.197403][ T6366] RSP: 002b:00007f1ecf7c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 138.197425][ T6366] RAX: ffffffffffffffda RBX: 00007f1ecebb6160 RCX: 00007f1ece98e169 [ 138.197440][ T6366] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 138.197453][ T6366] RBP: 00007f1ecea10a68 R08: 0000000000000000 R09: 0000000000000000 [ 138.197467][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.197480][ T6366] R13: 0000000000000000 R14: 00007f1ecebb6160 R15: 00007ffe64db1ce8 [ 138.197508][ T6366] [ 138.692884][ T6356] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 138.784072][ T6356] netlink: 230 bytes leftover after parsing attributes in process `syz.3.104'. [ 138.941769][ T6358] netlink: 'syz.0.105': attribute type 10 has an invalid length. [ 138.951628][ T6358] netlink: 230 bytes leftover after parsing attributes in process `syz.0.105'. [ 138.957644][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.104'. [ 139.853810][ T6380] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 139.862048][ T6380] netlink: 230 bytes leftover after parsing attributes in process `syz.3.109'. [ 140.763500][ T6393] FAULT_INJECTION: forcing a failure. [ 140.763500][ T6393] name failslab, interval 1, probability 0, space 0, times 0 [ 140.776793][ T6393] CPU: 1 UID: 0 PID: 6393 Comm: syz.3.112 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 140.776838][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.776858][ T6393] Call Trace: [ 140.776869][ T6393] [ 140.776882][ T6393] dump_stack_lvl+0x16c/0x1f0 [ 140.776935][ T6393] should_fail_ex+0x512/0x640 [ 140.776974][ T6393] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 140.777012][ T6393] should_failslab+0xc2/0x120 [ 140.777055][ T6393] __kmalloc_cache_noprof+0x6a/0x3e0 [ 140.777090][ T6393] ? fuse_dev_alloc+0x8e/0x280 [ 140.777132][ T6393] ? kasan_save_track+0x14/0x30 [ 140.777172][ T6393] fuse_dev_alloc+0x8e/0x280 [ 140.777218][ T6393] fuse_dev_alloc_install+0x13/0x40 [ 140.777263][ T6393] cuse_channel_open+0x100/0x7f0 [ 140.777302][ T6393] ? __pfx_cuse_channel_open+0x10/0x10 [ 140.777346][ T6393] misc_open+0x35a/0x420 [ 140.777389][ T6393] ? __pfx_misc_open+0x10/0x10 [ 140.777432][ T6393] chrdev_open+0x231/0x6a0 [ 140.777468][ T6393] ? __pfx_apparmor_file_open+0x10/0x10 [ 140.777513][ T6393] ? __pfx_chrdev_open+0x10/0x10 [ 140.777581][ T6393] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 140.777642][ T6393] do_dentry_open+0x741/0x1c10 [ 140.777680][ T6393] ? __pfx_chrdev_open+0x10/0x10 [ 140.777727][ T6393] vfs_open+0x82/0x3f0 [ 140.777777][ T6393] path_openat+0x1e5e/0x2d40 [ 140.777827][ T6393] ? __pfx_path_openat+0x10/0x10 [ 140.777873][ T6393] do_filp_open+0x20b/0x470 [ 140.777907][ T6393] ? __pfx_do_filp_open+0x10/0x10 [ 140.777973][ T6393] ? alloc_fd+0x471/0x7d0 [ 140.778015][ T6393] do_sys_openat2+0x11b/0x1d0 [ 140.778061][ T6393] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.778124][ T6393] __x64_sys_openat+0x174/0x210 [ 140.778172][ T6393] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.778222][ T6393] ? rcu_is_watching+0x12/0xc0 [ 140.778268][ T6393] do_syscall_64+0xcd/0x230 [ 140.778318][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.778351][ T6393] RIP: 0033:0x7f894a58e169 [ 140.778377][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.778406][ T6393] RSP: 002b:00007f894b3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.778436][ T6393] RAX: ffffffffffffffda RBX: 00007f894a7b5fa0 RCX: 00007f894a58e169 [ 140.778456][ T6393] RDX: 0000000000000040 RSI: 0000200000001b40 RDI: ffffffffffffff9c [ 140.778476][ T6393] RBP: 00007f894a610a68 R08: 0000000000000000 R09: 0000000000000000 [ 140.778495][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.778513][ T6393] R13: 0000000000000000 R14: 00007f894a7b5fa0 R15: 00007ffe031df2f8 [ 140.778555][ T6393] [ 141.271631][ T6388] FAULT_INJECTION: forcing a failure. [ 141.271631][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 141.285483][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.1.111 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 141.285516][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.285530][ T6388] Call Trace: [ 141.285537][ T6388] [ 141.285546][ T6388] dump_stack_lvl+0x16c/0x1f0 [ 141.285595][ T6388] should_fail_ex+0x512/0x640 [ 141.285622][ T6388] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 141.285651][ T6388] should_failslab+0xc2/0x120 [ 141.285682][ T6388] __kmalloc_cache_noprof+0x6a/0x3e0 [ 141.285707][ T6388] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 141.285739][ T6388] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 141.285765][ T6388] drm_atomic_get_connector_state+0x388/0x740 [ 141.285798][ T6388] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 141.285831][ T6388] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 141.285857][ T6388] ? ww_mutex_lock+0x37/0x160 [ 141.285891][ T6388] ? modeset_lock+0x114/0x6e0 [ 141.285929][ T6388] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 141.285961][ T6388] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 141.285993][ T6388] ? drm_client_rotation+0x4d9/0x6a0 [ 141.286021][ T6388] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 141.286056][ T6388] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 141.286114][ T6388] drm_client_modeset_commit_locked+0x14d/0x580 [ 141.286143][ T6388] drm_client_modeset_commit+0x4f/0x80 [ 141.286168][ T6388] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 141.286206][ T6388] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 141.286237][ T6388] drm_fbdev_client_restore+0x2c/0x40 [ 141.286265][ T6388] drm_client_dev_restore+0x1f3/0x2a0 [ 141.286294][ T6388] drm_release+0x2c4/0x360 [ 141.286317][ T6388] ? __pfx_drm_release+0x10/0x10 [ 141.286352][ T6388] __fput+0x3ff/0xb70 [ 141.286390][ T6388] task_work_run+0x14d/0x240 [ 141.286425][ T6388] ? __pfx_task_work_run+0x10/0x10 [ 141.286457][ T6388] ? __pfx___do_sys_close_range+0x10/0x10 [ 141.286491][ T6388] ? rcu_is_watching+0x12/0xc0 [ 141.286524][ T6388] syscall_exit_to_user_mode+0x27b/0x2a0 [ 141.286567][ T6388] do_syscall_64+0xda/0x230 [ 141.286605][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.286628][ T6388] RIP: 0033:0x7f1ece98e169 [ 141.286647][ T6388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.286669][ T6388] RSP: 002b:00007f1ecf80a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 141.286690][ T6388] RAX: 0000000000000000 RBX: 00007f1ecebb5fa0 RCX: 00007f1ece98e169 [ 141.286704][ T6388] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 141.286717][ T6388] RBP: 00007f1ecea10a68 R08: 0000000000000000 R09: 0000000000000000 [ 141.286731][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.286744][ T6388] R13: 0000000000000000 R14: 00007f1ecebb5fa0 R15: 00007ffe64db1ce8 [ 141.286775][ T6388] [ 143.111101][ T6399] kexec: Could not allocate control_code_buffer [ 145.675775][ T6451] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 145.683658][ T6451] netlink: 230 bytes leftover after parsing attributes in process `syz.1.121'. [ 145.804146][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.121'. [ 148.816738][ T6525] could not allocate digest TFM handle [ 150.092706][ T6547] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 150.110090][ T6547] netlink: 230 bytes leftover after parsing attributes in process `syz.1.140'. [ 150.399669][ T6563] FAULT_INJECTION: forcing a failure. [ 150.399669][ T6563] name failslab, interval 1, probability 0, space 0, times 0 [ 150.412598][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.1.146 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 150.412655][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.412673][ T6563] Call Trace: [ 150.412683][ T6563] [ 150.412694][ T6563] dump_stack_lvl+0x16c/0x1f0 [ 150.412744][ T6563] should_fail_ex+0x512/0x640 [ 150.412786][ T6563] should_failslab+0xc2/0x120 [ 150.412827][ T6563] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 150.412866][ T6563] ? __inet_hash_connect+0x7cb/0x1e30 [ 150.412911][ T6563] __inet_hash_connect+0x7cb/0x1e30 [ 150.412959][ T6563] ? __pfx___inet_check_established+0x10/0x10 [ 150.413001][ T6563] ? __pfx___inet_hash_connect+0x10/0x10 [ 150.413047][ T6563] ? inet_hash_connect+0x125/0x260 [ 150.413088][ T6563] tcp_v4_connect+0xdf7/0x1ba0 [ 150.413152][ T6563] ? __pfx_tcp_v4_connect+0x10/0x10 [ 150.413206][ T6563] ? __local_bh_enable_ip+0xa4/0x120 [ 150.413250][ T6563] mptcp_connect+0x579/0xfe0 [ 150.413293][ T6563] __inet_stream_connect+0x3c5/0x1020 [ 150.413332][ T6563] ? __pfx___inet_stream_connect+0x10/0x10 [ 150.413362][ T6563] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 150.413417][ T6563] ? __pfx_inet_stream_connect+0x10/0x10 [ 150.413448][ T6563] ? __local_bh_enable_ip+0xa4/0x120 [ 150.413490][ T6563] ? __pfx_inet_stream_connect+0x10/0x10 [ 150.413518][ T6563] inet_stream_connect+0x57/0xa0 [ 150.413549][ T6563] __sys_connect_file+0x13e/0x1a0 [ 150.413590][ T6563] __sys_connect+0x14d/0x170 [ 150.413624][ T6563] ? __pfx___sys_connect+0x10/0x10 [ 150.413704][ T6563] ? __pfx_ksys_write+0x10/0x10 [ 150.413746][ T6563] __x64_sys_connect+0x72/0xb0 [ 150.413779][ T6563] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.413840][ T6563] do_syscall_64+0xcd/0x230 [ 150.413888][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.413923][ T6563] RIP: 0033:0x7f1ece98e169 [ 150.413948][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.413978][ T6563] RSP: 002b:00007f1ecf80a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 150.414007][ T6563] RAX: ffffffffffffffda RBX: 00007f1ecebb5fa0 RCX: 00007f1ece98e169 [ 150.414028][ T6563] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 150.414047][ T6563] RBP: 00007f1ecf80a090 R08: 0000000000000000 R09: 0000000000000000 [ 150.414066][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.414084][ T6563] R13: 0000000000000000 R14: 00007f1ecebb5fa0 R15: 00007ffe64db1ce8 [ 150.414125][ T6563] [ 151.095127][ T6575] netlink: 'syz.3.150': attribute type 4 has an invalid length. [ 151.104886][ T6575] netlink: 314 bytes leftover after parsing attributes in process `syz.3.150'. [ 151.110492][ T6576] netlink: 'syz.3.150': attribute type 4 has an invalid length. [ 151.121772][ T6576] netlink: 314 bytes leftover after parsing attributes in process `syz.3.150'. [ 152.516479][ T6588] netlink: 'syz.0.153': attribute type 10 has an invalid length. [ 152.524534][ T6588] netlink: 230 bytes leftover after parsing attributes in process `syz.0.153'. [ 153.984302][ T6611] FAULT_INJECTION: forcing a failure. [ 153.984302][ T6611] name failslab, interval 1, probability 0, space 0, times 0 [ 154.062009][ T6611] CPU: 1 UID: 0 PID: 6611 Comm: syz.2.160 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 154.062054][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.062071][ T6611] Call Trace: [ 154.062081][ T6611] [ 154.062092][ T6611] dump_stack_lvl+0x16c/0x1f0 [ 154.062141][ T6611] should_fail_ex+0x512/0x640 [ 154.062184][ T6611] should_failslab+0xc2/0x120 [ 154.062253][ T6611] __kmalloc_cache_noprof+0x6a/0x3e0 [ 154.062288][ T6611] ? __sctp_v6_cmp_addr+0x206/0x530 [ 154.062315][ T6611] ? sctp_add_bind_addr+0xae/0x3f0 [ 154.062364][ T6611] sctp_add_bind_addr+0xae/0x3f0 [ 154.062411][ T6611] sctp_copy_local_addr_list+0x39d/0x5a0 [ 154.062467][ T6611] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 154.062524][ T6611] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 154.062584][ T6611] ? sctp_bind_addr_copy+0xe0/0x530 [ 154.062626][ T6611] sctp_bind_addr_copy+0xe0/0x530 [ 154.062680][ T6611] sctp_connect_new_asoc+0x1d7/0x790 [ 154.062720][ T6611] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 154.062767][ T6611] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 154.062803][ T6611] sctp_sendmsg+0x15f9/0x1ee0 [ 154.062852][ T6611] ? __pfx_sctp_sendmsg+0x10/0x10 [ 154.062907][ T6611] ? __might_fault+0xe3/0x190 [ 154.062947][ T6611] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.062995][ T6611] ? __pfx_sctp_sendmsg+0x10/0x10 [ 154.063032][ T6611] inet_sendmsg+0x119/0x140 [ 154.063065][ T6611] __sys_sendto+0x431/0x510 [ 154.063105][ T6611] ? __pfx___sys_sendto+0x10/0x10 [ 154.063180][ T6611] ? ksys_write+0x1b9/0x240 [ 154.063213][ T6611] ? __pfx_ksys_write+0x10/0x10 [ 154.063251][ T6611] ? rcu_is_watching+0x12/0xc0 [ 154.063288][ T6611] __x64_sys_sendto+0xe0/0x1c0 [ 154.063325][ T6611] ? do_syscall_64+0x91/0x230 [ 154.063369][ T6611] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.063412][ T6611] do_syscall_64+0xcd/0x230 [ 154.063462][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.063494][ T6611] RIP: 0033:0x7fca3158e169 [ 154.063518][ T6611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.063547][ T6611] RSP: 002b:00007fca323de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 154.063575][ T6611] RAX: ffffffffffffffda RBX: 00007fca317b5fa0 RCX: 00007fca3158e169 [ 154.063595][ T6611] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000003 [ 154.063612][ T6611] RBP: 00007fca323de090 R08: 0000200000000000 R09: 000000000000001c [ 154.063630][ T6611] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000002 [ 154.063647][ T6611] R13: 0000000000000000 R14: 00007fca317b5fa0 R15: 00007ffc4dd6ee68 [ 154.063688][ T6611] [ 155.285281][ T6607] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 155.338829][ T6607] netlink: 230 bytes leftover after parsing attributes in process `syz.0.158'. [ 157.074458][ T6639] netlink: 'syz.0.168': attribute type 10 has an invalid length. [ 157.082360][ T6639] netlink: 230 bytes leftover after parsing attributes in process `syz.0.168'. [ 157.219662][ T6662] bridge0: port 3(team0) entered blocking state [ 157.257689][ T6662] bridge0: port 3(team0) entered disabled state [ 157.284208][ T6662] team0: entered allmulticast mode [ 157.313256][ T6662] team_slave_0: entered allmulticast mode [ 157.376503][ T6662] team0: entered promiscuous mode [ 157.381628][ T6662] team_slave_0: entered promiscuous mode [ 158.707612][ T6682] FAULT_INJECTION: forcing a failure. [ 158.707612][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 158.734045][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.3.181 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 158.734087][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.734105][ T6682] Call Trace: [ 158.734114][ T6682] [ 158.734125][ T6682] dump_stack_lvl+0x16c/0x1f0 [ 158.734173][ T6682] should_fail_ex+0x512/0x640 [ 158.734209][ T6682] ? __kvmalloc_node_noprof+0x122/0x600 [ 158.734248][ T6682] should_failslab+0xc2/0x120 [ 158.734290][ T6682] __kvmalloc_node_noprof+0x135/0x600 [ 158.734327][ T6682] ? __pfx___mutex_lock+0x10/0x10 [ 158.734373][ T6682] ? traverse.part.0.constprop.0+0x392/0x640 [ 158.734432][ T6682] ? traverse.part.0.constprop.0+0x392/0x640 [ 158.734482][ T6682] traverse.part.0.constprop.0+0x392/0x640 [ 158.734546][ T6682] seq_read_iter+0x932/0x12c0 [ 158.734599][ T6682] ? aa_file_perm+0x4d6/0xfb0 [ 158.734646][ T6682] ? __pfx__kstrtoull+0x10/0x10 [ 158.734710][ T6682] seq_read+0x39e/0x4e0 [ 158.734757][ T6682] ? find_held_lock+0x2b/0x80 [ 158.734790][ T6682] ? __pfx_seq_read+0x10/0x10 [ 158.734842][ T6682] ? __lock_acquire+0x5ca/0x1ba0 [ 158.734883][ T6682] ? copy_iovec_from_user+0x138/0x170 [ 158.734928][ T6682] ? iovec_from_user+0xbb/0x140 [ 158.734990][ T6682] full_proxy_read+0x13c/0x200 [ 158.735030][ T6682] ? __pfx_full_proxy_read+0x10/0x10 [ 158.735069][ T6682] vfs_readv+0x6bc/0x8a0 [ 158.735096][ T6682] ? get_pid_task+0x106/0x250 [ 158.735153][ T6682] ? __pfx_vfs_readv+0x10/0x10 [ 158.735185][ T6682] ? find_held_lock+0x2b/0x80 [ 158.735242][ T6682] ? __fget_files+0x20e/0x3c0 [ 158.735283][ T6682] ? do_preadv+0x1af/0x270 [ 158.735311][ T6682] do_preadv+0x1af/0x270 [ 158.735342][ T6682] ? __pfx_do_preadv+0x10/0x10 [ 158.735369][ T6682] ? rcu_is_watching+0x12/0xc0 [ 158.735413][ T6682] do_syscall_64+0xcd/0x230 [ 158.735464][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.735496][ T6682] RIP: 0033:0x7f894a58e169 [ 158.735520][ T6682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.735550][ T6682] RSP: 002b:00007f894b3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 158.735579][ T6682] RAX: ffffffffffffffda RBX: 00007f894a7b5fa0 RCX: 00007f894a58e169 [ 158.735599][ T6682] RDX: 0000000000000006 RSI: 00002000000006c0 RDI: 0040000000000003 [ 158.735619][ T6682] RBP: 00007f894b3b7090 R08: 0000000000000005 R09: 0000000000000000 [ 158.735637][ T6682] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 158.735655][ T6682] R13: 0000000000000000 R14: 00007f894a7b5fa0 R15: 00007ffe031df2f8 [ 158.735721][ T6682] [ 159.921852][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.183'. [ 159.951725][ T6691] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.987630][ T6687] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 160.467128][ T6700] Ignoring unsupported numa_zonelist_order value: [ 160.467128][ T6700] [ 161.767420][ T6717] FAULT_INJECTION: forcing a failure. [ 161.767420][ T6717] name failslab, interval 1, probability 0, space 0, times 0 [ 161.841255][ T6717] CPU: 0 UID: 0 PID: 6717 Comm: syz.0.190 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 161.841300][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.841319][ T6717] Call Trace: [ 161.841329][ T6717] [ 161.841341][ T6717] dump_stack_lvl+0x16c/0x1f0 [ 161.841390][ T6717] should_fail_ex+0x512/0x640 [ 161.841428][ T6717] ? __kmalloc_noprof+0xbf/0x510 [ 161.841482][ T6717] ? alloc_pipe_info+0x1ec/0x590 [ 161.841520][ T6717] should_failslab+0xc2/0x120 [ 161.841562][ T6717] __kmalloc_noprof+0xd2/0x510 [ 161.841608][ T6717] alloc_pipe_info+0x1ec/0x590 [ 161.841648][ T6717] splice_direct_to_actor+0x77d/0xa30 [ 161.841701][ T6717] ? __pfx_direct_splice_actor+0x10/0x10 [ 161.841765][ T6717] ? __pfx_aa_file_perm+0x10/0x10 [ 161.841810][ T6717] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 161.841859][ T6717] ? get_pid_task+0xfc/0x250 [ 161.841916][ T6717] do_splice_direct+0x174/0x240 [ 161.841967][ T6717] ? __pfx_do_splice_direct+0x10/0x10 [ 161.842018][ T6717] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 161.842073][ T6717] ? rw_verify_area+0xcf/0x680 [ 161.842126][ T6717] do_sendfile+0xafd/0xe50 [ 161.842165][ T6717] ? __pfx_do_sendfile+0x10/0x10 [ 161.842211][ T6717] __x64_sys_sendfile64+0x154/0x220 [ 161.842254][ T6717] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 161.842292][ T6717] ? rcu_is_watching+0x12/0xc0 [ 161.842336][ T6717] do_syscall_64+0xcd/0x230 [ 161.842385][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.842416][ T6717] RIP: 0033:0x7f727ed8e169 [ 161.842440][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.842469][ T6717] RSP: 002b:00007f727fbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 161.842584][ T6717] RAX: ffffffffffffffda RBX: 00007f727efb5fa0 RCX: 00007f727ed8e169 [ 161.842606][ T6717] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 161.842625][ T6717] RBP: 00007f727fbc0090 R08: 0000000000000000 R09: 0000000000000000 [ 161.842643][ T6717] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 161.842662][ T6717] R13: 0000000000000000 R14: 00007f727efb5fa0 R15: 00007ffe3eb01fb8 [ 161.842712][ T6717] [ 163.471568][ T6733] FAULT_INJECTION: forcing a failure. [ 163.471568][ T6733] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.516735][ T6733] CPU: 0 UID: 0 PID: 6733 Comm: syz.3.195 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 163.516778][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.516802][ T6733] Call Trace: [ 163.516812][ T6733] [ 163.516823][ T6733] dump_stack_lvl+0x16c/0x1f0 [ 163.516873][ T6733] should_fail_ex+0x512/0x640 [ 163.516918][ T6733] _copy_from_user+0x2e/0xd0 [ 163.516960][ T6733] copy_msghdr_from_user+0x98/0x160 [ 163.517004][ T6733] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 163.517054][ T6733] ? __pfx__kstrtoull+0x10/0x10 [ 163.517112][ T6733] ___sys_sendmsg+0xfe/0x1d0 [ 163.517157][ T6733] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.517220][ T6733] ? find_held_lock+0x2b/0x80 [ 163.517279][ T6733] __sys_sendmmsg+0x200/0x420 [ 163.517327][ T6733] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.517385][ T6733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.517450][ T6733] ? fput+0x70/0xf0 [ 163.517488][ T6733] ? ksys_write+0x1b9/0x240 [ 163.517527][ T6733] ? __pfx_ksys_write+0x10/0x10 [ 163.517554][ T6733] ? rcu_is_watching+0x12/0xc0 [ 163.517591][ T6733] __x64_sys_sendmmsg+0x9c/0x100 [ 163.517632][ T6733] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.517676][ T6733] do_syscall_64+0xcd/0x230 [ 163.517727][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.517758][ T6733] RIP: 0033:0x7f894a58e169 [ 163.517782][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.517811][ T6733] RSP: 002b:00007f894b3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.517840][ T6733] RAX: ffffffffffffffda RBX: 00007f894a7b5fa0 RCX: 00007f894a58e169 [ 163.517860][ T6733] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 163.517879][ T6733] RBP: 00007f894b3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.517897][ T6733] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 163.517915][ T6733] R13: 0000000000000000 R14: 00007f894a7b5fa0 R15: 00007ffe031df2f8 [ 163.517955][ T6733] [ 169.302867][ T6848] FAULT_INJECTION: forcing a failure. [ 169.302867][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 169.367866][ T6848] CPU: 1 UID: 0 PID: 6848 Comm: syz.1.225 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 169.367922][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.367942][ T6848] Call Trace: [ 169.367953][ T6848] [ 169.367965][ T6848] dump_stack_lvl+0x16c/0x1f0 [ 169.368019][ T6848] should_fail_ex+0x512/0x640 [ 169.368057][ T6848] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 169.368096][ T6848] should_failslab+0xc2/0x120 [ 169.368139][ T6848] __kmalloc_cache_noprof+0x6a/0x3e0 [ 169.368174][ T6848] ? kstrdup_quotable_cmdline+0x132/0x210 [ 169.368224][ T6848] ? kstrdup_quotable_cmdline+0x52/0x210 [ 169.368282][ T6848] kstrdup_quotable_cmdline+0x52/0x210 [ 169.368338][ T6848] __report_access+0x77/0x3c0 [ 169.368378][ T6848] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.368423][ T6848] task_work_run+0x14d/0x240 [ 169.368458][ T6848] ? __pfx_task_work_run+0x10/0x10 [ 169.368502][ T6848] syscall_exit_to_user_mode+0x27b/0x2a0 [ 169.368553][ T6848] do_syscall_64+0xda/0x230 [ 169.368605][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.368638][ T6848] RIP: 0033:0x7f1ece98e169 [ 169.368664][ T6848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.368696][ T6848] RSP: 002b:00007f1ecf80a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 169.368728][ T6848] RAX: ffffffffffffffff RBX: 00007f1ecebb5fa0 RCX: 00007f1ece98e169 [ 169.368749][ T6848] RDX: ffffffffffffff56 RSI: 0010000000000001 RDI: 0000000000000010 [ 169.368770][ T6848] RBP: 00007f1ecea10a68 R08: 0000000000000000 R09: 0000000000000000 [ 169.368789][ T6848] R10: 000000000000868f R11: 0000000000000246 R12: 0000000000000000 [ 169.368809][ T6848] R13: 0000000000000000 R14: 00007f1ecebb5fa0 R15: 00007ffe64db1ce8 [ 169.368850][ T6848] [ 169.369049][ T6848] ptrace attach of "./syz-executor exec"[5842] was attempted by "(null)"[6848] [ 170.831551][ T6855] FAULT_INJECTION: forcing a failure. [ 170.831551][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 170.872281][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.0.227 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 170.872332][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.872352][ T6855] Call Trace: [ 170.872363][ T6855] [ 170.872375][ T6855] dump_stack_lvl+0x16c/0x1f0 [ 170.872430][ T6855] should_fail_ex+0x512/0x640 [ 170.872468][ T6855] ? __kmalloc_noprof+0xbf/0x510 [ 170.872511][ T6855] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 170.872559][ T6855] should_failslab+0xc2/0x120 [ 170.872602][ T6855] __kmalloc_noprof+0xd2/0x510 [ 170.872645][ T6855] ? drm_atomic_add_affected_planes+0x32b/0x3f0 [ 170.872694][ T6855] vkms_crtc_atomic_check+0x3c5/0x880 [ 170.872763][ T6855] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 170.872810][ T6855] drm_atomic_helper_check_planes+0x4da/0x900 [ 170.872873][ T6855] drm_atomic_helper_check+0xae/0x190 [ 170.872925][ T6855] vkms_atomic_check+0x1d9/0x250 [ 170.872965][ T6855] ? __pfx_vkms_atomic_check+0x10/0x10 [ 170.873008][ T6855] drm_atomic_check_only+0x19c7/0x3130 [ 170.873069][ T6855] drm_atomic_commit+0x136/0x300 [ 170.873105][ T6855] ? __pfx_drm_atomic_commit+0x10/0x10 [ 170.873141][ T6855] ? __pfx___drm_printfn_info+0x10/0x10 [ 170.873189][ T6855] ? drm_client_rotation+0x4d9/0x6a0 [ 170.873228][ T6855] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 170.873277][ T6855] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 170.873359][ T6855] drm_client_modeset_commit_locked+0x14d/0x580 [ 170.873401][ T6855] drm_client_modeset_commit+0x4f/0x80 [ 170.873436][ T6855] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 170.873489][ T6855] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 170.873534][ T6855] drm_fbdev_client_restore+0x2c/0x40 [ 170.873574][ T6855] drm_client_dev_restore+0x1f3/0x2a0 [ 170.873615][ T6855] drm_release+0x2c4/0x360 [ 170.873648][ T6855] ? __pfx_drm_release+0x10/0x10 [ 170.873697][ T6855] __fput+0x3ff/0xb70 [ 170.873757][ T6855] task_work_run+0x14d/0x240 [ 170.873791][ T6855] ? __pfx_task_work_run+0x10/0x10 [ 170.873824][ T6855] ? __pfx___do_sys_close_range+0x10/0x10 [ 170.873857][ T6855] ? rcu_is_watching+0x12/0xc0 [ 170.873897][ T6855] syscall_exit_to_user_mode+0x27b/0x2a0 [ 170.873945][ T6855] do_syscall_64+0xda/0x230 [ 170.873995][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.874027][ T6855] RIP: 0033:0x7f727ed8e169 [ 170.874053][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.874086][ T6855] RSP: 002b:00007f727fbc0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 170.874117][ T6855] RAX: 0000000000000000 RBX: 00007f727efb5fa0 RCX: 00007f727ed8e169 [ 170.874138][ T6855] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 170.874157][ T6855] RBP: 00007f727ee10a68 R08: 0000000000000000 R09: 0000000000000000 [ 170.874176][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.874195][ T6855] R13: 0000000000000000 R14: 00007f727efb5fa0 R15: 00007ffe3eb01fb8 [ 170.874240][ T6855] [ 171.171662][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.062289][ T6881] bridge0: port 3(team0) entered blocking state [ 173.092752][ T6881] bridge0: port 3(team0) entered disabled state [ 173.151697][ T6881] team0: entered allmulticast mode [ 173.182795][ T6881] team_slave_0: entered allmulticast mode [ 173.219013][ T6881] team0: entered promiscuous mode [ 173.373547][ T6881] team_slave_0: entered promiscuous mode [ 173.496619][ T6881] bridge0: port 3(team0) entered blocking state [ 173.503329][ T6881] bridge0: port 3(team0) entered forwarding state [ 175.619699][ T6950] FAULT_INJECTION: forcing a failure. [ 175.619699][ T6950] name fail_futex, interval 1, probability 0, space 0, times 1 [ 175.709149][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.0.250 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 175.709196][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.709216][ T6950] Call Trace: [ 175.709227][ T6950] [ 175.709239][ T6950] dump_stack_lvl+0x16c/0x1f0 [ 175.709293][ T6950] should_fail_ex+0x512/0x640 [ 175.709339][ T6950] get_futex_key+0x49e/0x1000 [ 175.709380][ T6950] ? __pfx_get_futex_key+0x10/0x10 [ 175.709430][ T6950] futex_wake+0xe7/0x4e0 [ 175.709477][ T6950] ? __pfx_futex_wake+0x10/0x10 [ 175.709527][ T6950] ? kmem_cache_free+0x2d4/0x4d0 [ 175.709563][ T6950] ? fd_install+0x225/0x750 [ 175.709589][ T6950] ? putname+0x154/0x1a0 [ 175.709635][ T6950] do_futex+0x1e3/0x350 [ 175.709673][ T6950] ? __pfx_do_futex+0x10/0x10 [ 175.709723][ T6950] __x64_sys_futex+0x1e0/0x4c0 [ 175.709764][ T6950] ? __x64_sys_openat+0x174/0x210 [ 175.709811][ T6950] ? __pfx___x64_sys_futex+0x10/0x10 [ 175.709852][ T6950] ? rcu_is_watching+0x12/0xc0 [ 175.709897][ T6950] do_syscall_64+0xcd/0x230 [ 175.709958][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.709992][ T6950] RIP: 0033:0x7f727ed8e169 [ 175.710018][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.710050][ T6950] RSP: 002b:00007f727fbc00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 175.710080][ T6950] RAX: ffffffffffffffda RBX: 00007f727efb5fa8 RCX: 00007f727ed8e169 [ 175.710101][ T6950] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f727efb5fac [ 175.710121][ T6950] RBP: 00007f727efb5fa0 R08: 00007f727fbc1000 R09: 0000000000000000 [ 175.710140][ T6950] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f727efb5fac [ 175.710160][ T6950] R13: 0000000000000000 R14: 00007ffe3eb01ed0 R15: 00007ffe3eb01fb8 [ 175.710201][ T6950] [ 177.070151][ T6973] [U]  [ 177.073195][ T6973] [U] [ 177.075963][ T6973] [U] [ 177.078719][ T6973] [U] [ 177.085680][ T6960] bridge0: port 3(team0) entered blocking state [ 177.117738][ T6973] [U] [ 177.120624][ T6973] [U] [ 177.123382][ T6973] [U] [ 177.126132][ T6973] [U] [ 177.130142][ T6960] bridge0: port 3(team0) entered disabled state [ 177.153367][ T6960] team0: entered allmulticast mode [ 177.164942][ T6973] [U] [ 177.167902][ T6973] [U] [ 177.170662][ T6973] [U] [ 177.173418][ T6973] [U] [ 177.180444][ T6960] team_slave_0: entered allmulticast mode [ 177.187057][ T6973] [U] [ 177.189823][ T6973] [U] [ 177.192587][ T6973] [U] [ 177.195337][ T6973] [U] [ 177.204440][ T6973] [U] [ 177.207223][ T6973] [U] [ 177.209953][ T6973] [U] [ 177.212678][ T6973] [U] [ 177.222601][ T6973] [U] [ 177.225392][ T6973] [U] [ 177.228132][ T6973] [U] [ 177.230866][ T6973] [U] [ 177.238920][ T6960] team0: entered promiscuous mode [ 177.251307][ T6960] team_slave_0: entered promiscuous mode [ 177.260579][ T6973] [U] [ 177.263360][ T6973] [U] [ 177.266114][ T6973] [U] [ 177.268867][ T6973] [U] [ 177.277040][ T6973] [U] [ 177.279812][ T6973] [U] [ 177.282587][ T6973] [U] [ 177.285438][ T6973] [U] [ 177.290990][ T6960] bridge0: port 3(team0) entered blocking state [ 177.297457][ T6960] bridge0: port 3(team0) entered forwarding state [ 177.315877][ T6973] [U] [ 177.318661][ T6973] [U] [ 177.321494][ T6973] [U] [ 177.324243][ T6973] [U] [ 177.331062][ T6973] [U] [ 177.333955][ T6973] [U] [ 177.336718][ T6973] [U] [ 177.339486][ T6973] [U] [ 177.362269][ T6973] [U] [ 177.365071][ T6973] [U] [ 177.367841][ T6973] [U] [ 177.370605][ T6973] [U] [ 177.381488][ T6973] [U] [ 177.384287][ T6973] [U] [ 177.387031][ T6973] [U] [ 177.389757][ T6973] [U] [ 177.393586][ T6973] [U] [ 177.396376][ T6973] [U] [ 177.399130][ T6973] [U] [ 177.401891][ T6973] [U] [ 177.409211][ T6973] [U] [ 177.412011][ T6973] [U] [ 177.414775][ T6973] [U] [ 177.417548][ T6973] [U] [ 177.421450][ T6973] [U] [ 177.424219][ T6973] [U] [ 177.426974][ T6973] [U] [ 177.429729][ T6973] [U] [ 177.444927][ T6973] [U] [ 177.447715][ T6973] [U] [ 177.450465][ T6973] [U] [ 177.453231][ T6973] [U] [ 177.460190][ T6973] [U] [ 177.462963][ T6973] [U] [ 177.465721][ T6973] [U] [ 177.468473][ T6973] [U] [ 177.473424][ T6973] [U] [ 177.476197][ T6973] [U] [ 177.478953][ T6973] [U] [ 177.481705][ T6973] [U] [ 177.492793][ T6973] [U] [ 177.495579][ T6973] [U] [ 177.498337][ T6973] [U] [ 177.501091][ T6973] [U] [ 177.505144][ T6973] [U] [ 177.507912][ T6973] [U] [ 177.510664][ T6973] [U] [ 177.513412][ T6973] [U] [ 177.517216][ T6973] [U] [ 177.520003][ T6973] [U] [ 177.522758][ T6973] [U] [ 177.525606][ T6973] [U] [ 177.532223][ T6973] [U] [ 177.534993][ T6973] [U] [ 177.537746][ T6973] [U] [ 177.540499][ T6973] [U] [ 177.546145][ T6973] [U] [ 177.548913][ T6973] [U] [ 177.551661][ T6973] [U] [ 177.554413][ T6973] [U] [ 177.584143][ T6973] [U] [ 177.586938][ T6973] [U] [ 177.589703][ T6973] [U] [ 177.592456][ T6973] [U] [ 177.620637][ T6973] [U] [ 177.623518][ T6973] [U] [ 177.626276][ T6973] [U] [ 177.629013][ T6973] [U] [ 177.639093][ T6973] [U] [ 177.641882][ T6973] [U] [ 177.644660][ T6973] [U] [ 177.647505][ T6973] [U] [ 177.653775][ T6973] [U] [ 177.656556][ T6973] [U] [ 177.659297][ T6973] [U] [ 177.662038][ T6973] [U] [ 177.672229][ T6978] FAULT_INJECTION: forcing a failure. [ 177.672229][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.685964][ T6973] [U] [ 177.688731][ T6973] [U] [ 177.691503][ T6973] [U] [ 177.694264][ T6973] [U] [ 177.701787][ T6973] [U] [ 177.704581][ T6973] [U] [ 177.707334][ T6973] [U] [ 177.710083][ T6973] [U] [ 177.718949][ T6978] CPU: 1 UID: 0 PID: 6978 Comm: syz.2.256 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 177.718992][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.719010][ T6978] Call Trace: [ 177.719020][ T6978] [ 177.719031][ T6978] dump_stack_lvl+0x16c/0x1f0 [ 177.719082][ T6978] should_fail_ex+0x512/0x640 [ 177.719126][ T6978] _copy_to_user+0x32/0xd0 [ 177.719171][ T6978] simple_read_from_buffer+0xcb/0x170 [ 177.719223][ T6978] proc_fail_nth_read+0x197/0x270 [ 177.719273][ T6978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.719324][ T6978] ? rw_verify_area+0xcf/0x680 [ 177.719373][ T6978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.719422][ T6978] vfs_read+0x1de/0xc70 [ 177.719460][ T6978] ? __pfx___mutex_lock+0x10/0x10 [ 177.719504][ T6978] ? __pfx_vfs_read+0x10/0x10 [ 177.719548][ T6978] ? __fget_files+0x20e/0x3c0 [ 177.719590][ T6978] ksys_read+0x12a/0x240 [ 177.719622][ T6978] ? __pfx_ksys_read+0x10/0x10 [ 177.719667][ T6978] do_syscall_64+0xcd/0x230 [ 177.719717][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.719749][ T6978] RIP: 0033:0x7fca3158cb7c [ 177.719773][ T6978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.719808][ T6978] RSP: 002b:00007fca323de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.719837][ T6978] RAX: ffffffffffffffda RBX: 00007fca317b5fa0 RCX: 00007fca3158cb7c [ 177.719862][ T6978] RDX: 000000000000000f RSI: 00007fca323de0a0 RDI: 0000000000000003 [ 177.719882][ T6978] RBP: 00007fca323de090 R08: 0000000000000000 R09: 0000000000000000 [ 177.719900][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.719918][ T6978] R13: 0000000000000001 R14: 00007fca317b5fa0 R15: 00007ffc4dd6ee68 [ 177.719960][ T6978] [ 177.723432][ T6973] [U] [ 177.908255][ T6973] [U] [ 177.911003][ T6973] [U] [ 177.913750][ T6973] [U] [ 177.927139][ T6973] [U] [ 177.929993][ T6973] [U] [ 177.932749][ T6973] [U] [ 177.935498][ T6973] [U] [ 177.984524][ T6973] [U] [ 177.987389][ T6973] [U] [ 177.990242][ T6973] [U] [ 177.993004][ T6973] [U] [ 177.995764][ T6973] [U] [ 178.114734][ T6973] [U] [ 178.985859][ T6992] netlink: 330 bytes leftover after parsing attributes in process `syz.1.261'. [ 179.240693][ T6992] syz.1.261 (6992) used greatest stack depth: 20552 bytes left [ 179.252404][ T7015] CIFS: VFS: Invalid SecurityFlags:  [ 180.141525][ T7027] random: crng reseeded on system resumption [ 181.157302][ T7057] FAULT_INJECTION: forcing a failure. [ 181.157302][ T7057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.227515][ T7057] CPU: 1 UID: 0 PID: 7057 Comm: syz.0.277 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 181.227559][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.227577][ T7057] Call Trace: [ 181.227586][ T7057] [ 181.227597][ T7057] dump_stack_lvl+0x16c/0x1f0 [ 181.227649][ T7057] should_fail_ex+0x512/0x640 [ 181.227692][ T7057] _copy_from_user+0x2e/0xd0 [ 181.227734][ T7057] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 181.227784][ T7057] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 181.227835][ T7057] ? __local_bh_enable_ip+0xa4/0x120 [ 181.227875][ T7057] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.227925][ T7057] do_ipv6_setsockopt+0x2e71/0x4320 [ 181.227982][ T7057] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 181.228032][ T7057] ? __lock_acquire+0xaa4/0x1ba0 [ 181.228094][ T7057] ? __mutex_trylock_common+0xe9/0x250 [ 181.228144][ T7057] ? __pfx___mutex_trylock_common+0x10/0x10 [ 181.228193][ T7057] ? __pfx___might_resched+0x10/0x10 [ 181.228234][ T7057] ? rcu_is_watching+0x12/0xc0 [ 181.228266][ T7057] ? trace_contention_end+0xdd/0x130 [ 181.228314][ T7057] ? __mutex_lock+0x1ca/0xb90 [ 181.228373][ T7057] ? smc_setsockopt+0x100/0xa00 [ 181.228410][ T7057] ? __pfx___mutex_lock+0x10/0x10 [ 181.228464][ T7057] ? ipv6_setsockopt+0xcb/0x170 [ 181.228507][ T7057] ipv6_setsockopt+0xcb/0x170 [ 181.228558][ T7057] tcp_setsockopt+0xa4/0x100 [ 181.228601][ T7057] smc_setsockopt+0x1b3/0xa00 [ 181.228632][ T7057] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 181.228690][ T7057] ? __pfx_smc_setsockopt+0x10/0x10 [ 181.228723][ T7057] ? find_held_lock+0x2b/0x80 [ 181.228766][ T7057] ? __pfx_smc_setsockopt+0x10/0x10 [ 181.228799][ T7057] do_sock_setsockopt+0x221/0x470 [ 181.228850][ T7057] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 181.228927][ T7057] __sys_setsockopt+0x120/0x1a0 [ 181.228977][ T7057] __x64_sys_setsockopt+0xbd/0x160 [ 181.229015][ T7057] ? do_syscall_64+0x91/0x230 [ 181.229060][ T7057] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.229104][ T7057] do_syscall_64+0xcd/0x230 [ 181.229155][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.229187][ T7057] RIP: 0033:0x7f727ed8e169 [ 181.229211][ T7057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.229241][ T7057] RSP: 002b:00007f727fb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.229269][ T7057] RAX: ffffffffffffffda RBX: 00007f727efb6080 RCX: 00007f727ed8e169 [ 181.229290][ T7057] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0400000000000003 [ 181.229309][ T7057] RBP: 00007f727fb9f090 R08: 000000000000056b R09: 0000000000000000 [ 181.229328][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.229346][ T7057] R13: 0000000000000000 R14: 00007f727efb6080 R15: 00007ffe3eb01fb8 [ 181.229395][ T7057] [ 183.744023][ T7133] bridge0: port 3(team0) entered blocking state [ 183.757444][ T7138] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[7138] [ 183.887108][ T7133] bridge0: port 3(team0) entered disabled state [ 184.136995][ T7133] team0: entered allmulticast mode [ 184.142156][ T7133] team_slave_0: entered allmulticast mode [ 184.328408][ T7133] team0: entered promiscuous mode [ 184.333482][ T7133] team_slave_0: entered promiscuous mode [ 184.426326][ T7133] bridge0: port 3(team0) entered blocking state [ 184.432790][ T7133] bridge0: port 3(team0) entered forwarding state [ 185.888622][ T7148] nfs: Bad value for 'source' [ 185.907287][ T7148] input: f as /devices/virtual/input/input5 [ 186.653015][ T7172] netlink: 338 bytes leftover after parsing attributes in process `syz.1.295'. [ 186.675001][ T7158] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.684901][ T7158] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.732217][ T7158] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.764557][ T7158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.784332][ T7158] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.825190][ T7158] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.854697][ T7158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.860992][ T7158] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.873800][ T7158] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.892302][ T7158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.904627][ T7158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 186.917094][ T7158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 188.299091][ T7204] netlink: 'syz.2.302': attribute type 10 has an invalid length. [ 188.344064][ T7204] netlink: 230 bytes leftover after parsing attributes in process `syz.2.302'. [ 188.401366][ T7204] FAULT_INJECTION: forcing a failure. [ 188.401366][ T7204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.417020][ T7204] CPU: 0 UID: 0 PID: 7204 Comm: syz.2.302 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 188.417062][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.417084][ T7204] Call Trace: [ 188.417094][ T7204] [ 188.417109][ T7204] dump_stack_lvl+0x16c/0x1f0 [ 188.417158][ T7204] should_fail_ex+0x512/0x640 [ 188.417200][ T7204] _copy_to_user+0x32/0xd0 [ 188.417243][ T7204] simple_read_from_buffer+0xcb/0x170 [ 188.417293][ T7204] proc_fail_nth_read+0x197/0x270 [ 188.417339][ T7204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.417387][ T7204] ? rw_verify_area+0xcf/0x680 [ 188.417432][ T7204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.417478][ T7204] vfs_read+0x1de/0xc70 [ 188.417514][ T7204] ? __pfx___mutex_lock+0x10/0x10 [ 188.417558][ T7204] ? __pfx_vfs_read+0x10/0x10 [ 188.417599][ T7204] ? __fget_files+0x20e/0x3c0 [ 188.417625][ T7204] ? do_io_getevents+0xe0/0x170 [ 188.417682][ T7204] ksys_read+0x12a/0x240 [ 188.417713][ T7204] ? __pfx_ksys_read+0x10/0x10 [ 188.417759][ T7204] ? rcu_is_watching+0x12/0xc0 [ 188.417802][ T7204] do_syscall_64+0xcd/0x230 [ 188.417850][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.417880][ T7204] RIP: 0033:0x7fca3158cb7c [ 188.417904][ T7204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 188.417945][ T7204] RSP: 002b:00007fca323de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.417978][ T7204] RAX: ffffffffffffffda RBX: 00007fca317b5fa0 RCX: 00007fca3158cb7c [ 188.417998][ T7204] RDX: 000000000000000f RSI: 00007fca323de0a0 RDI: 0000000000000007 [ 188.418015][ T7204] RBP: 00007fca323de090 R08: 0000000000000000 R09: 0000000000000000 [ 188.418032][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.418049][ T7204] R13: 0000000000000000 R14: 00007fca317b5fa0 R15: 00007ffc4dd6ee68 [ 188.418088][ T7204] [ 188.663970][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.783992][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.864184][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.949158][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.714063][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.864867][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.946661][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.024406][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.769161][ T55] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 192.421826][ T7311] syz.2.319 uses obsolete (PF_INET,SOCK_PACKET) [ 192.525900][ T7315] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 192.789849][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.944107][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.024266][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.106100][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.355092][ T7338] FAULT_INJECTION: forcing a failure. [ 194.355092][ T7338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.419627][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.1.325 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 194.419670][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.419687][ T7338] Call Trace: [ 194.419696][ T7338] [ 194.419706][ T7338] dump_stack_lvl+0x16c/0x1f0 [ 194.419754][ T7338] should_fail_ex+0x512/0x640 [ 194.419797][ T7338] _copy_from_user+0x2e/0xd0 [ 194.419838][ T7338] copy_msghdr_from_user+0x98/0x160 [ 194.419879][ T7338] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 194.419940][ T7338] ___sys_sendmsg+0xfe/0x1d0 [ 194.419984][ T7338] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.420071][ T7338] __sys_sendmsg+0x16d/0x220 [ 194.420115][ T7338] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.420181][ T7338] do_syscall_64+0xcd/0x230 [ 194.420230][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.420261][ T7338] RIP: 0033:0x7f1ece98e169 [ 194.420292][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.420321][ T7338] RSP: 002b:00007f1ecf80a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.420367][ T7338] RAX: ffffffffffffffda RBX: 00007f1ecebb5fa0 RCX: 00007f1ece98e169 [ 194.420387][ T7338] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 194.420406][ T7338] RBP: 00007f1ecf80a090 R08: 0000000000000000 R09: 0000000000000000 [ 194.420424][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.420442][ T7338] R13: 0000000000000000 R14: 00007f1ecebb5fa0 R15: 00007ffe64db1ce8 [ 194.420482][ T7338] [ 196.260353][ T7376] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[7376] [ 197.289290][ T7390] nfs: Bad value for 'source' [ 197.352596][ T7390] input: f as /devices/virtual/input/input6 [ 197.389225][ T7396] FAULT_INJECTION: forcing a failure. [ 197.389225][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 197.402386][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.2.341 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 197.402431][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.402450][ T7396] Call Trace: [ 197.402460][ T7396] [ 197.402472][ T7396] dump_stack_lvl+0x16c/0x1f0 [ 197.402527][ T7396] should_fail_ex+0x512/0x640 [ 197.402573][ T7396] should_failslab+0xc2/0x120 [ 197.402619][ T7396] __kmalloc_cache_noprof+0x6a/0x3e0 [ 197.402655][ T7396] ? report_access+0x100/0x5b0 [ 197.402713][ T7396] report_access+0x100/0x5b0 [ 197.402762][ T7396] yama_ptrace_access_check+0x589/0xd10 [ 197.402814][ T7396] security_ptrace_access_check+0xb2/0x210 [ 197.402852][ T7396] __ptrace_may_access+0x498/0x950 [ 197.402900][ T7396] ptrace_attach+0x21a/0x5f0 [ 197.402946][ T7396] __x64_sys_ptrace+0x287/0x2c0 [ 197.402993][ T7396] do_syscall_64+0xcd/0x230 [ 197.403043][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.403076][ T7396] RIP: 0033:0x7fca3158e169 [ 197.403101][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.403133][ T7396] RSP: 002b:00007fca323de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 197.403164][ T7396] RAX: ffffffffffffffda RBX: 00007fca317b5fa0 RCX: 00007fca3158e169 [ 197.403185][ T7396] RDX: ffffffffffffff56 RSI: 0010000000000001 RDI: 0000000000000010 [ 197.403206][ T7396] RBP: 00007fca31610a68 R08: 0000000000000000 R09: 0000000000000000 [ 197.403225][ T7396] R10: 000000000000868f R11: 0000000000000246 R12: 0000000000000000 [ 197.403244][ T7396] R13: 0000000000000000 R14: 00007fca317b5fa0 R15: 00007ffc4dd6ee68 [ 197.403286][ T7396] [ 197.572656][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.016241][ T7409] capability: warning: `syz.3.339' uses 32-bit capabilities (legacy support in use) [ 199.509729][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.516313][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.553306][ T55] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 201.716289][ T7460] mmap: syz.2.348 (7460) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 204.437374][ T7511] nfs: Bad value for 'source' [ 204.445402][ T7511] input: f as /devices/virtual/input/input7 [ 204.868951][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 206.330406][ T7537] zswap: compressor not available [ 207.659430][ T7574] nfs: Bad value for 'source' [ 207.676760][ T7574] input: f as /devices/virtual/input/input8 [ 208.101771][ T7571] FAULT_INJECTION: forcing a failure. [ 208.101771][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 208.114673][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.0.376 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 208.114715][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.114732][ T7571] Call Trace: [ 208.114743][ T7571] [ 208.114754][ T7571] dump_stack_lvl+0x16c/0x1f0 [ 208.114802][ T7571] should_fail_ex+0x512/0x640 [ 208.114846][ T7571] ? __kmalloc_noprof+0xbf/0x510 [ 208.114885][ T7571] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 208.114925][ T7571] should_failslab+0xc2/0x120 [ 208.114963][ T7571] __kmalloc_noprof+0xd2/0x510 [ 208.114995][ T7571] ? drm_atomic_add_affected_planes+0x32b/0x3f0 [ 208.115036][ T7571] vkms_crtc_atomic_check+0x3c5/0x880 [ 208.115086][ T7571] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 208.115125][ T7571] drm_atomic_helper_check_planes+0x4da/0x900 [ 208.115178][ T7571] drm_atomic_helper_check+0xae/0x190 [ 208.115221][ T7571] vkms_atomic_check+0x1d9/0x250 [ 208.115255][ T7571] ? __pfx_vkms_atomic_check+0x10/0x10 [ 208.115292][ T7571] drm_atomic_check_only+0x19c7/0x3130 [ 208.115344][ T7571] drm_atomic_commit+0x136/0x300 [ 208.115378][ T7571] ? __pfx_drm_atomic_commit+0x10/0x10 [ 208.115413][ T7571] ? __pfx___drm_printfn_info+0x10/0x10 [ 208.115461][ T7571] ? drm_client_rotation+0x4d9/0x6a0 [ 208.115499][ T7571] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 208.115547][ T7571] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 208.115627][ T7571] drm_client_modeset_commit_locked+0x14d/0x580 [ 208.115668][ T7571] drm_client_modeset_commit+0x4f/0x80 [ 208.115702][ T7571] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 208.115754][ T7571] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 208.115797][ T7571] drm_fbdev_client_restore+0x2c/0x40 [ 208.115849][ T7571] drm_client_dev_restore+0x1f3/0x2a0 [ 208.115891][ T7571] drm_release+0x2c4/0x360 [ 208.115924][ T7571] ? __pfx_drm_release+0x10/0x10 [ 208.115974][ T7571] __fput+0x3ff/0xb70 [ 208.116026][ T7571] task_work_run+0x14d/0x240 [ 208.116060][ T7571] ? __pfx_task_work_run+0x10/0x10 [ 208.116091][ T7571] ? __pfx___do_sys_close_range+0x10/0x10 [ 208.116124][ T7571] ? rcu_is_watching+0x12/0xc0 [ 208.116164][ T7571] syscall_exit_to_user_mode+0x27b/0x2a0 [ 208.116216][ T7571] do_syscall_64+0xda/0x230 [ 208.116269][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.116302][ T7571] RIP: 0033:0x7f727ed8e169 [ 208.116327][ T7571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.116357][ T7571] RSP: 002b:00007f727fbc0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 208.116386][ T7571] RAX: 0000000000000000 RBX: 00007f727efb5fa0 RCX: 00007f727ed8e169 [ 208.116406][ T7571] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 208.116424][ T7571] RBP: 00007f727ee10a68 R08: 0000000000000000 R09: 0000000000000000 [ 208.116443][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.116461][ T7571] R13: 0000000000000000 R14: 00007f727efb5fa0 R15: 00007ffe3eb01fb8 [ 208.116504][ T7571] [ 210.884408][ T7620] nfs: Bad value for 'source' [ 210.905108][ T7620] input: f as /devices/virtual/input/input9 [ 211.640418][ T7616] zswap: compressor not available [ 211.963409][ T7646] FAULT_INJECTION: forcing a failure. [ 211.963409][ T7646] name failslab, interval 1, probability 0, space 0, times 0 [ 211.976618][ T7646] CPU: 0 UID: 0 PID: 7646 Comm: syz.1.392 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 211.976665][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.976686][ T7646] Call Trace: [ 211.976697][ T7646] [ 211.976709][ T7646] dump_stack_lvl+0x16c/0x1f0 [ 211.976765][ T7646] should_fail_ex+0x512/0x640 [ 211.976805][ T7646] ? fs_reclaim_acquire+0xae/0x150 [ 211.976865][ T7646] should_failslab+0xc2/0x120 [ 211.976910][ T7646] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 211.976954][ T7646] ? security_inode_alloc+0x3b/0x2b0 [ 211.977000][ T7646] security_inode_alloc+0x3b/0x2b0 [ 211.977041][ T7646] inode_init_always_gfp+0xce4/0x1030 [ 211.977083][ T7646] alloc_inode+0x86/0x240 [ 211.977129][ T7646] sock_alloc+0x40/0x280 [ 211.977182][ T7646] __sock_create+0xc1/0x8d0 [ 211.977223][ T7646] __sys_socket+0x14d/0x260 [ 211.977256][ T7646] ? __pfx___sys_socket+0x10/0x10 [ 211.977292][ T7646] ? rcu_is_watching+0x12/0xc0 [ 211.977333][ T7646] __x64_sys_socket+0x72/0xb0 [ 211.977365][ T7646] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.977410][ T7646] do_syscall_64+0xcd/0x230 [ 211.977455][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.977494][ T7646] RIP: 0033:0x7f1ece98e169 [ 211.977522][ T7646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.977550][ T7646] RSP: 002b:00007f1ecf80a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 211.977577][ T7646] RAX: ffffffffffffffda RBX: 00007f1ecebb5fa0 RCX: 00007f1ece98e169 [ 211.977596][ T7646] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 211.977613][ T7646] RBP: 00007f1ecea10a68 R08: 0000000000000000 R09: 0000000000000000 [ 211.977629][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.977646][ T7646] R13: 0000000000000000 R14: 00007f1ecebb5fa0 R15: 00007ffe64db1ce8 [ 211.977679][ T7646] [ 212.176414][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.202990][ T7646] socket: no more sockets [ 212.931639][ T7663] netlink: set zone limit has 8 unknown bytes [ 215.920757][ T7706] FAULT_INJECTION: forcing a failure. [ 215.920757][ T7706] name failslab, interval 1, probability 0, space 0, times 0 [ 215.933549][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.3.407 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 215.933594][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.933614][ T7706] Call Trace: [ 215.933626][ T7706] [ 215.933639][ T7706] dump_stack_lvl+0x16c/0x1f0 [ 215.933693][ T7706] should_fail_ex+0x512/0x640 [ 215.933732][ T7706] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 215.933773][ T7706] should_failslab+0xc2/0x120 [ 215.933817][ T7706] __kmalloc_cache_noprof+0x6a/0x3e0 [ 215.933851][ T7706] ? ww_mutex_lock+0x37/0x160 [ 215.933902][ T7706] ? vkms_plane_duplicate_state+0x45/0x130 [ 215.933943][ T7706] ? modeset_lock+0x114/0x6e0 [ 215.933992][ T7706] vkms_plane_duplicate_state+0x45/0x130 [ 215.934055][ T7706] drm_atomic_get_plane_state+0x20b/0x590 [ 215.934095][ T7706] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 215.934133][ T7706] ? __pfx___might_resched+0x10/0x10 [ 215.934181][ T7706] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 215.934261][ T7706] drm_client_modeset_commit_locked+0x14d/0x580 [ 215.934313][ T7706] drm_client_modeset_commit+0x4f/0x80 [ 215.934348][ T7706] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 215.934400][ T7706] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 215.934443][ T7706] drm_fbdev_client_restore+0x2c/0x40 [ 215.934483][ T7706] drm_client_dev_restore+0x1f3/0x2a0 [ 215.934525][ T7706] drm_release+0x2c4/0x360 [ 215.934557][ T7706] ? __pfx_drm_release+0x10/0x10 [ 215.934607][ T7706] __fput+0x3ff/0xb70 [ 215.934660][ T7706] task_work_run+0x14d/0x240 [ 215.934692][ T7706] ? __pfx_task_work_run+0x10/0x10 [ 215.934723][ T7706] ? __pfx___do_sys_close_range+0x10/0x10 [ 215.934756][ T7706] ? rcu_is_watching+0x12/0xc0 [ 215.934796][ T7706] syscall_exit_to_user_mode+0x27b/0x2a0 [ 215.934847][ T7706] do_syscall_64+0xda/0x230 [ 215.934898][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.934931][ T7706] RIP: 0033:0x7f894a58e169 [ 215.934957][ T7706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.934988][ T7706] RSP: 002b:00007f894b3b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 215.935019][ T7706] RAX: 0000000000000000 RBX: 00007f894a7b5fa0 RCX: 00007f894a58e169 [ 215.935130][ T7706] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 215.935153][ T7706] RBP: 00007f894a610a68 R08: 0000000000000000 R09: 0000000000000000 [ 215.935177][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.935199][ T7706] R13: 0000000000000000 R14: 00007f894a7b5fa0 R15: 00007ffe031df2f8 [ 215.935249][ T7706] [ 216.656482][ T7713] FAULT_INJECTION: forcing a failure. [ 216.656482][ T7713] name failslab, interval 1, probability 0, space 0, times 0 [ 216.670154][ T7713] CPU: 0 UID: 0 PID: 7713 Comm: syz.1.408 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 216.670197][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.670215][ T7713] Call Trace: [ 216.670225][ T7713] [ 216.670237][ T7713] dump_stack_lvl+0x16c/0x1f0 [ 216.670290][ T7713] should_fail_ex+0x512/0x640 [ 216.670327][ T7713] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 216.670372][ T7713] should_failslab+0xc2/0x120 [ 216.670414][ T7713] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 216.670456][ T7713] ? shmem_alloc_inode+0x25/0x50 [ 216.670511][ T7713] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 216.670559][ T7713] shmem_alloc_inode+0x25/0x50 [ 216.670608][ T7713] alloc_inode+0x61/0x240 [ 216.670652][ T7713] new_inode+0x22/0x1c0 [ 216.670692][ T7713] ? trace_cap_capable+0x18d/0x200 [ 216.670738][ T7713] shmem_get_inode+0x19a/0xfb0 [ 216.670773][ T7713] ? __vm_enough_memory+0x184/0x3f0 [ 216.670829][ T7713] __shmem_file_setup+0x16f/0x300 [ 216.670870][ T7713] shmem_zero_setup+0x93/0x1a0 [ 216.670918][ T7713] __mmap_region+0x2036/0x27c0 [ 216.670963][ T7713] ? __pfx___mmap_region+0x10/0x10 [ 216.671002][ T7713] ? trace_sched_exit_tp+0xde/0x130 [ 216.671073][ T7713] ? __pfx___schedule+0x10/0x10 [ 216.671163][ T7713] ? trace_cap_capable+0x18d/0x200 [ 216.671199][ T7713] ? cap_capable+0xb3/0x250 [ 216.671239][ T7713] mmap_region+0x1ab/0x3f0 [ 216.671288][ T7713] do_mmap+0xd8e/0x11b0 [ 216.671348][ T7713] ? __pfx_do_mmap+0x10/0x10 [ 216.671400][ T7713] ? __pfx_down_write_killable+0x10/0x10 [ 216.671462][ T7713] vm_mmap_pgoff+0x281/0x450 [ 216.671521][ T7713] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 216.671581][ T7713] ? __x64_sys_futex+0x1e0/0x4c0 [ 216.671618][ T7713] ? __x64_sys_futex+0x1e9/0x4c0 [ 216.671662][ T7713] ksys_mmap_pgoff+0x7d/0x5c0 [ 216.671720][ T7713] ? rcu_is_watching+0x12/0xc0 [ 216.671757][ T7713] __x64_sys_mmap+0x125/0x190 [ 216.671798][ T7713] do_syscall_64+0xcd/0x230 [ 216.671850][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.671883][ T7713] RIP: 0033:0x7f1ece98e169 [ 216.671909][ T7713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.671940][ T7713] RSP: 002b:00007f1ecf7e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 216.671971][ T7713] RAX: ffffffffffffffda RBX: 00007f1ecebb6080 RCX: 00007f1ece98e169 [ 216.671992][ T7713] RDX: 20004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 216.672012][ T7713] RBP: 00007f1ecea10a68 R08: 0000000000000401 R09: 0000000000008000 [ 216.672031][ T7713] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 216.672049][ T7713] R13: 0000000000000000 R14: 00007f1ecebb6080 R15: 00007ffe64db1ce8 [ 216.672089][ T7713] [ 220.387859][ T7811] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 222.420511][ T7840] netlink: 330 bytes leftover after parsing attributes in process `syz.0.438'. [ 223.248349][ T7861] nfs: Bad value for 'source' [ 223.256835][ T7861] input: f as /devices/virtual/input/input12 [ 223.318377][ T7858] nfs: Bad value for 'source' [ 223.346149][ T7858] input: f as /devices/virtual/input/input13 [ 223.602589][ T7872] netlink: 330 bytes leftover after parsing attributes in process `syz.1.446'. [ 223.785454][ T7879] netlink: 338 bytes leftover after parsing attributes in process `syz.0.449'. [ 223.946298][ T7879] ipvlan1: entered allmulticast mode [ 223.952362][ T7879] veth0_vlan: entered allmulticast mode [ 224.245363][ T7886] FAULT_INJECTION: forcing a failure. [ 224.245363][ T7886] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.324965][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.1.450 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 224.325012][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.325031][ T7886] Call Trace: [ 224.325042][ T7886] [ 224.325054][ T7886] dump_stack_lvl+0x16c/0x1f0 [ 224.325106][ T7886] should_fail_ex+0x512/0x640 [ 224.325152][ T7886] get_futex_key+0x49e/0x1000 [ 224.325194][ T7886] ? __pfx_get_futex_key+0x10/0x10 [ 224.325245][ T7886] futex_wake+0xe7/0x4e0 [ 224.325294][ T7886] ? __pfx_futex_wake+0x10/0x10 [ 224.325344][ T7886] ? kmem_cache_free+0x2d4/0x4d0 [ 224.325381][ T7886] ? fd_install+0x225/0x750 [ 224.325408][ T7886] ? putname+0x154/0x1a0 [ 224.325454][ T7886] do_futex+0x1e3/0x350 [ 224.325494][ T7886] ? __pfx_do_futex+0x10/0x10 [ 224.325544][ T7886] __x64_sys_futex+0x1e0/0x4c0 [ 224.325586][ T7886] ? __x64_sys_openat+0x174/0x210 [ 224.325634][ T7886] ? __pfx___x64_sys_futex+0x10/0x10 [ 224.325674][ T7886] ? rcu_is_watching+0x12/0xc0 [ 224.325719][ T7886] do_syscall_64+0xcd/0x230 [ 224.325770][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.325802][ T7886] RIP: 0033:0x7f1ece98e169 [ 224.325827][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.325857][ T7886] RSP: 002b:00007f1ecf7e90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.325896][ T7886] RAX: ffffffffffffffda RBX: 00007f1ecebb6088 RCX: 00007f1ece98e169 [ 224.325918][ T7886] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1ecebb608c [ 224.325938][ T7886] RBP: 00007f1ecebb6080 R08: 00007f1ecf80b000 R09: 0000000000000000 [ 224.325959][ T7886] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f1ecebb608c [ 224.325978][ T7886] R13: 0000000000000000 R14: 00007ffe64db1c00 R15: 00007ffe64db1ce8 [ 224.326019][ T7886] [ 225.340249][ T7869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.348050][ T7869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.384223][ T7869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.405622][ T7869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.023255][ T7910] nfs: Bad value for 'source' [ 226.051561][ T7910] input: f as /devices/virtual/input/input14 [ 226.144103][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 226.738605][ T7926] netlink: 338 bytes leftover after parsing attributes in process `syz.0.459'. [ 227.321940][ T7917] FAULT_INJECTION: forcing a failure. [ 227.321940][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 227.344187][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.3.457 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 227.344239][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.344259][ T7917] Call Trace: [ 227.344270][ T7917] [ 227.344282][ T7917] dump_stack_lvl+0x16c/0x1f0 [ 227.344338][ T7917] should_fail_ex+0x512/0x640 [ 227.344376][ T7917] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 227.344415][ T7917] should_failslab+0xc2/0x120 [ 227.344457][ T7917] __kmalloc_cache_noprof+0x6a/0x3e0 [ 227.344493][ T7917] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 227.344537][ T7917] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 227.344574][ T7917] drm_atomic_get_connector_state+0x388/0x740 [ 227.344621][ T7917] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 227.344664][ T7917] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 227.344700][ T7917] ? ww_mutex_lock+0x37/0x160 [ 227.344749][ T7917] ? modeset_lock+0x114/0x6e0 [ 227.344802][ T7917] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 227.344854][ T7917] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 227.344900][ T7917] ? drm_client_rotation+0x4d9/0x6a0 [ 227.344939][ T7917] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 227.344989][ T7917] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 227.345072][ T7917] drm_client_modeset_commit_locked+0x14d/0x580 [ 227.345113][ T7917] drm_client_modeset_commit+0x4f/0x80 [ 227.345148][ T7917] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 227.345203][ T7917] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 227.345246][ T7917] drm_fbdev_client_restore+0x2c/0x40 [ 227.345285][ T7917] drm_client_dev_restore+0x1f3/0x2a0 [ 227.345325][ T7917] drm_release+0x2c4/0x360 [ 227.345358][ T7917] ? __pfx_drm_release+0x10/0x10 [ 227.345408][ T7917] __fput+0x3ff/0xb70 [ 227.345462][ T7917] task_work_run+0x14d/0x240 [ 227.345496][ T7917] ? __pfx_task_work_run+0x10/0x10 [ 227.345528][ T7917] ? __pfx___do_sys_close_range+0x10/0x10 [ 227.345560][ T7917] ? rcu_is_watching+0x12/0xc0 [ 227.345601][ T7917] syscall_exit_to_user_mode+0x27b/0x2a0 [ 227.345650][ T7917] do_syscall_64+0xda/0x230 [ 227.345704][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.345736][ T7917] RIP: 0033:0x7f894a58e169 [ 227.345761][ T7917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.345791][ T7917] RSP: 002b:00007f894b3b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 227.345820][ T7917] RAX: 0000000000000000 RBX: 00007f894a7b5fa0 RCX: 00007f894a58e169 [ 227.345838][ T7917] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 227.345871][ T7917] RBP: 00007f894a610a68 R08: 0000000000000000 R09: 0000000000000000 [ 227.345891][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.345910][ T7917] R13: 0000000000000000 R14: 00007f894a7b5fa0 R15: 00007ffe031df2f8 [ 227.345954][ T7917] [ 227.696196][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.702282][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 227.708891][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.186214][ T7924] FAULT_INJECTION: forcing a failure. [ 228.186214][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 228.289490][ T7924] CPU: 0 UID: 0 PID: 7924 Comm: syz.1.465 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 228.289542][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.289562][ T7924] Call Trace: [ 228.289573][ T7924] [ 228.289586][ T7924] dump_stack_lvl+0x16c/0x1f0 [ 228.289640][ T7924] should_fail_ex+0x512/0x640 [ 228.289677][ T7924] ? __kmalloc_noprof+0xbf/0x510 [ 228.289719][ T7924] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 228.289766][ T7924] should_failslab+0xc2/0x120 [ 228.289810][ T7924] __kmalloc_noprof+0xd2/0x510 [ 228.289846][ T7924] ? drm_atomic_add_affected_planes+0x32b/0x3f0 [ 228.289894][ T7924] vkms_crtc_atomic_check+0x3c5/0x880 [ 228.289953][ T7924] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 228.290000][ T7924] drm_atomic_helper_check_planes+0x4da/0x900 [ 228.290063][ T7924] drm_atomic_helper_check+0xae/0x190 [ 228.290115][ T7924] vkms_atomic_check+0x1d9/0x250 [ 228.290156][ T7924] ? __pfx_vkms_atomic_check+0x10/0x10 [ 228.290200][ T7924] drm_atomic_check_only+0x19c7/0x3130 [ 228.290262][ T7924] drm_atomic_commit+0x136/0x300 [ 228.290298][ T7924] ? __pfx_drm_atomic_commit+0x10/0x10 [ 228.290334][ T7924] ? __pfx___drm_printfn_info+0x10/0x10 [ 228.290382][ T7924] ? drm_client_rotation+0x4d9/0x6a0 [ 228.290422][ T7924] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 228.290484][ T7924] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 228.290567][ T7924] drm_client_modeset_commit_locked+0x14d/0x580 [ 228.290610][ T7924] drm_client_modeset_commit+0x4f/0x80 [ 228.290647][ T7924] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 228.290703][ T7924] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 228.290755][ T7924] drm_fbdev_client_restore+0x2c/0x40 [ 228.290797][ T7924] drm_client_dev_restore+0x1f3/0x2a0 [ 228.290839][ T7924] drm_release+0x2c4/0x360 [ 228.290874][ T7924] ? __pfx_drm_release+0x10/0x10 [ 228.290925][ T7924] __fput+0x3ff/0xb70 [ 228.290979][ T7924] task_work_run+0x14d/0x240 [ 228.291014][ T7924] ? __pfx_task_work_run+0x10/0x10 [ 228.291047][ T7924] ? __pfx___do_sys_close_range+0x10/0x10 [ 228.291081][ T7924] ? rcu_is_watching+0x12/0xc0 [ 228.291124][ T7924] syscall_exit_to_user_mode+0x27b/0x2a0 [ 228.291175][ T7924] do_syscall_64+0xda/0x230 [ 228.291227][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.291260][ T7924] RIP: 0033:0x7f1ece98e169 [ 228.291285][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.291317][ T7924] RSP: 002b:00007f1ecf7e9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 228.291348][ T7924] RAX: 0000000000000000 RBX: 00007f1ecebb6080 RCX: 00007f1ece98e169 [ 228.291368][ T7924] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 228.291387][ T7924] RBP: 00007f1ecea10a68 R08: 0000000000000000 R09: 0000000000000000 [ 228.291407][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.291426][ T7924] R13: 0000000000000000 R14: 00007f1ecebb6080 R15: 00007ffe64db1ce8 [ 228.291477][ T7924] [ 229.189836][ T7953] nfs: Bad value for 'source' [ 229.214144][ T7953] input: f as /devices/virtual/input/input15 [ 229.474453][ T7949] FAULT_INJECTION: forcing a failure. [ 229.474453][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 229.528005][ T7949] CPU: 0 UID: 0 PID: 7949 Comm: syz.2.466 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 229.528053][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.528073][ T7949] Call Trace: [ 229.528084][ T7949] [ 229.528096][ T7949] dump_stack_lvl+0x16c/0x1f0 [ 229.528149][ T7949] should_fail_ex+0x512/0x640 [ 229.528186][ T7949] ? __kmalloc_noprof+0xbf/0x510 [ 229.528228][ T7949] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 229.528275][ T7949] should_failslab+0xc2/0x120 [ 229.528344][ T7949] __kmalloc_noprof+0xd2/0x510 [ 229.528403][ T7949] ? drm_atomic_add_affected_planes+0x32b/0x3f0 [ 229.528453][ T7949] vkms_crtc_atomic_check+0x3c5/0x880 [ 229.528513][ T7949] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 229.528560][ T7949] drm_atomic_helper_check_planes+0x4da/0x900 [ 229.528623][ T7949] drm_atomic_helper_check+0xae/0x190 [ 229.528673][ T7949] vkms_atomic_check+0x1d9/0x250 [ 229.528714][ T7949] ? __pfx_vkms_atomic_check+0x10/0x10 [ 229.528757][ T7949] drm_atomic_check_only+0x19c7/0x3130 [ 229.528819][ T7949] drm_atomic_commit+0x136/0x300 [ 229.528856][ T7949] ? __pfx_drm_atomic_commit+0x10/0x10 [ 229.528892][ T7949] ? __pfx___drm_printfn_info+0x10/0x10 [ 229.528940][ T7949] ? drm_client_rotation+0x4d9/0x6a0 [ 229.528979][ T7949] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 229.529028][ T7949] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 229.529111][ T7949] drm_client_modeset_commit_locked+0x14d/0x580 [ 229.529154][ T7949] drm_client_modeset_commit+0x4f/0x80 [ 229.529190][ T7949] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 229.529245][ T7949] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 229.529289][ T7949] drm_fbdev_client_restore+0x2c/0x40 [ 229.529342][ T7949] drm_client_dev_restore+0x1f3/0x2a0 [ 229.529385][ T7949] drm_release+0x2c4/0x360 [ 229.529419][ T7949] ? __pfx_drm_release+0x10/0x10 [ 229.529470][ T7949] __fput+0x3ff/0xb70 [ 229.529525][ T7949] task_work_run+0x14d/0x240 [ 229.529559][ T7949] ? __pfx_task_work_run+0x10/0x10 [ 229.529592][ T7949] ? __pfx___do_sys_close_range+0x10/0x10 [ 229.529626][ T7949] ? rcu_is_watching+0x12/0xc0 [ 229.529669][ T7949] syscall_exit_to_user_mode+0x27b/0x2a0 [ 229.529721][ T7949] do_syscall_64+0xda/0x230 [ 229.529781][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.529814][ T7949] RIP: 0033:0x7fca3158e169 [ 229.529841][ T7949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.529872][ T7949] RSP: 002b:00007fca323de038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 229.529902][ T7949] RAX: 0000000000000000 RBX: 00007fca317b5fa0 RCX: 00007fca3158e169 [ 229.529923][ T7949] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 229.529943][ T7949] RBP: 00007fca31610a68 R08: 0000000000000000 R09: 0000000000000000 [ 229.529962][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.529981][ T7949] R13: 0000000000000000 R14: 00007fca317b5fa0 R15: 00007ffc4dd6ee68 [ 229.530025][ T7949] [ 231.456284][ T7977] could not allocate digest TFM handle [ 232.370459][ T7974] FAULT_INJECTION: forcing a failure. [ 232.370459][ T7974] name failslab, interval 1, probability 0, space 0, times 0 [ 232.383710][ T7974] CPU: 1 UID: 0 PID: 7974 Comm: syz.0.473 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 232.383752][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.383770][ T7974] Call Trace: [ 232.383780][ T7974] [ 232.383791][ T7974] dump_stack_lvl+0x16c/0x1f0 [ 232.383843][ T7974] should_fail_ex+0x512/0x640 [ 232.383884][ T7974] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 232.383926][ T7974] should_failslab+0xc2/0x120 [ 232.383967][ T7974] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 232.384002][ T7974] ? vma_merge_new_range+0x3f8/0xc10 [ 232.384038][ T7974] ? vm_area_alloc+0x1f/0x160 [ 232.384083][ T7974] vm_area_alloc+0x1f/0x160 [ 232.384122][ T7974] __mmap_region+0xfd0/0x27c0 [ 232.384159][ T7974] ? finish_task_switch.isra.0+0x221/0xc10 [ 232.384197][ T7974] ? __pfx___mmap_region+0x10/0x10 [ 232.384234][ T7974] ? trace_sched_exit_tp+0xde/0x130 [ 232.384310][ T7974] ? __pfx___schedule+0x10/0x10 [ 232.384416][ T7974] ? trace_cap_capable+0x18d/0x200 [ 232.384453][ T7974] ? cap_capable+0xb3/0x250 [ 232.384492][ T7974] mmap_region+0x1ab/0x3f0 [ 232.384540][ T7974] do_mmap+0xd8e/0x11b0 [ 232.384598][ T7974] ? __pfx_do_mmap+0x10/0x10 [ 232.384650][ T7974] ? __pfx_down_write_killable+0x10/0x10 [ 232.384712][ T7974] vm_mmap_pgoff+0x281/0x450 [ 232.384770][ T7974] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 232.384828][ T7974] ? __x64_sys_futex+0x1e0/0x4c0 [ 232.384866][ T7974] ? __x64_sys_futex+0x1e9/0x4c0 [ 232.384908][ T7974] ksys_mmap_pgoff+0x7d/0x5c0 [ 232.384957][ T7974] ? rcu_is_watching+0x12/0xc0 [ 232.384994][ T7974] __x64_sys_mmap+0x125/0x190 [ 232.385035][ T7974] do_syscall_64+0xcd/0x230 [ 232.385086][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.385120][ T7974] RIP: 0033:0x7f727ed8e169 [ 232.385144][ T7974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.385174][ T7974] RSP: 002b:00007f727fbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 232.385206][ T7974] RAX: ffffffffffffffda RBX: 00007f727efb5fa0 RCX: 00007f727ed8e169 [ 232.385228][ T7974] RDX: 20004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 232.385249][ T7974] RBP: 00007f727ee10a68 R08: 0000000000000401 R09: 0000000000008000 [ 232.385268][ T7974] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 232.385295][ T7974] R13: 0000000000000000 R14: 00007f727efb5fa0 R15: 00007ffe3eb01fb8 [ 232.385336][ T7974] [ 232.387170][ T7982] FAULT_INJECTION: forcing a failure. [ 232.387170][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 232.661540][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.3.475 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 232.661591][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.661611][ T7982] Call Trace: [ 232.661622][ T7982] [ 232.661635][ T7982] dump_stack_lvl+0x16c/0x1f0 [ 232.661693][ T7982] should_fail_ex+0x512/0x640 [ 232.661732][ T7982] ? __kmalloc_noprof+0xbf/0x510 [ 232.661774][ T7982] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 232.661820][ T7982] should_failslab+0xc2/0x120 [ 232.661864][ T7982] __kmalloc_noprof+0xd2/0x510 [ 232.661902][ T7982] ? drm_atomic_add_affected_planes+0x32b/0x3f0 [ 232.661949][ T7982] vkms_crtc_atomic_check+0x3c5/0x880 [ 232.662015][ T7982] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 232.662063][ T7982] drm_atomic_helper_check_planes+0x4da/0x900 [ 232.662125][ T7982] drm_atomic_helper_check+0xae/0x190 [ 232.662177][ T7982] vkms_atomic_check+0x1d9/0x250 [ 232.662218][ T7982] ? __pfx_vkms_atomic_check+0x10/0x10 [ 232.662261][ T7982] drm_atomic_check_only+0x19c7/0x3130 [ 232.662322][ T7982] drm_atomic_commit+0x136/0x300 [ 232.662359][ T7982] ? __pfx_drm_atomic_commit+0x10/0x10 [ 232.662395][ T7982] ? __pfx___drm_printfn_info+0x10/0x10 [ 232.662443][ T7982] ? drm_client_rotation+0x4d9/0x6a0 [ 232.662482][ T7982] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 232.662532][ T7982] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 232.662614][ T7982] drm_client_modeset_commit_locked+0x14d/0x580 [ 232.662656][ T7982] drm_client_modeset_commit+0x4f/0x80 [ 232.662691][ T7982] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 232.662746][ T7982] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 232.662790][ T7982] drm_fbdev_client_restore+0x2c/0x40 [ 232.662831][ T7982] drm_client_dev_restore+0x1f3/0x2a0 [ 232.662872][ T7982] drm_release+0x2c4/0x360 [ 232.662905][ T7982] ? __pfx_drm_release+0x10/0x10 [ 232.662956][ T7982] __fput+0x3ff/0xb70 [ 232.663017][ T7982] task_work_run+0x14d/0x240 [ 232.663050][ T7982] ? __pfx_task_work_run+0x10/0x10 [ 232.663082][ T7982] ? __pfx___do_sys_close_range+0x10/0x10 [ 232.663116][ T7982] ? rcu_is_watching+0x12/0xc0 [ 232.663159][ T7982] syscall_exit_to_user_mode+0x27b/0x2a0 [ 232.663208][ T7982] do_syscall_64+0xda/0x230 [ 232.663259][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.663292][ T7982] RIP: 0033:0x7f894a58e169 [ 232.663318][ T7982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.663350][ T7982] RSP: 002b:00007f894b3b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 232.663382][ T7982] RAX: 0000000000000000 RBX: 00007f894a7b5fa0 RCX: 00007f894a58e169 [ 232.663402][ T7982] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 232.663421][ T7982] RBP: 00007f894a610a68 R08: 0000000000000000 R09: 0000000000000000 [ 232.663440][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.663459][ T7982] R13: 0000000000000000 R14: 00007f894a7b5fa0 R15: 00007ffe031df2f8 [ 232.663502][ T7982] [ 233.628311][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 234.076414][ T8028] nfs: Bad value for 'source' [ 234.556207][ T8002] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.563475][ T8002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.574277][ T8002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.582530][ T8002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.566967][ T8045] FAULT_INJECTION: forcing a failure. [ 235.566967][ T8045] name failslab, interval 1, probability 0, space 0, times 0 [ 235.594686][ T8045] CPU: 1 UID: 0 PID: 8045 Comm: syz.2.489 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 235.594733][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.594752][ T8045] Call Trace: [ 235.594763][ T8045] [ 235.594774][ T8045] dump_stack_lvl+0x16c/0x1f0 [ 235.594837][ T8045] should_fail_ex+0x512/0x640 [ 235.594876][ T8045] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 235.594932][ T8045] should_failslab+0xc2/0x120 [ 235.594977][ T8045] __kmalloc_cache_noprof+0x6a/0x3e0 [ 235.595014][ T8045] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 235.595059][ T8045] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 235.595098][ T8045] drm_atomic_get_connector_state+0x388/0x740 [ 235.595146][ T8045] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 235.595192][ T8045] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 235.595230][ T8045] ? ww_mutex_lock+0x37/0x160 [ 235.595279][ T8045] ? modeset_lock+0x114/0x6e0 [ 235.595334][ T8045] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 235.595381][ T8045] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 235.595428][ T8045] ? drm_client_rotation+0x4d9/0x6a0 [ 235.595467][ T8045] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 235.595517][ T8045] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 235.595601][ T8045] drm_client_modeset_commit_locked+0x14d/0x580 [ 235.595644][ T8045] drm_client_modeset_commit+0x4f/0x80 [ 235.595680][ T8045] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 235.595735][ T8045] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 235.595779][ T8045] drm_fbdev_client_restore+0x2c/0x40 [ 235.595830][ T8045] drm_client_dev_restore+0x1f3/0x2a0 [ 235.595872][ T8045] drm_release+0x2c4/0x360 [ 235.595907][ T8045] ? __pfx_drm_release+0x10/0x10 [ 235.595959][ T8045] __fput+0x3ff/0xb70 [ 235.596013][ T8045] task_work_run+0x14d/0x240 [ 235.596049][ T8045] ? __pfx_task_work_run+0x10/0x10 [ 235.596081][ T8045] ? __pfx___do_sys_close_range+0x10/0x10 [ 235.596116][ T8045] ? rcu_is_watching+0x12/0xc0 [ 235.596159][ T8045] syscall_exit_to_user_mode+0x27b/0x2a0 [ 235.596210][ T8045] do_syscall_64+0xda/0x230 [ 235.596263][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.596296][ T8045] RIP: 0033:0x7fca3158e169 [ 235.596322][ T8045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.596354][ T8045] RSP: 002b:00007fca323bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 235.596384][ T8045] RAX: 0000000000000000 RBX: 00007fca317b6080 RCX: 00007fca3158e169 [ 235.596404][ T8045] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 235.596423][ T8045] RBP: 00007fca31610a68 R08: 0000000000000000 R09: 0000000000000000 [ 235.596443][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.596462][ T8045] R13: 0000000000000000 R14: 00007fca317b6080 R15: 00007ffc4dd6ee68 [ 235.596507][ T8045] [ 235.907984][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.189597][ T8060] nfs: Bad value for 'source' [ 236.222858][ T8060] input: f as /devices/virtual/input/input16 [ 236.348186][ T8066] FAULT_INJECTION: forcing a failure. [ 236.348186][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 236.364488][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.2.496 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 236.364550][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.364570][ T8066] Call Trace: [ 236.364580][ T8066] [ 236.364592][ T8066] dump_stack_lvl+0x16c/0x1f0 [ 236.364644][ T8066] should_fail_ex+0x512/0x640 [ 236.364693][ T8066] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 236.364736][ T8066] should_failslab+0xc2/0x120 [ 236.364778][ T8066] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 236.364818][ T8066] ? vm_area_dup+0x25/0x760 [ 236.364865][ T8066] vm_area_dup+0x25/0x760 [ 236.364911][ T8066] __split_vma+0x17f/0x1030 [ 236.364954][ T8066] ? __pfx___split_vma+0x10/0x10 [ 236.365011][ T8066] vms_gather_munmap_vmas+0x392/0x1310 [ 236.365056][ T8066] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 236.365099][ T8066] ? mas_walk+0x6a6/0x910 [ 236.365157][ T8066] __mmap_region+0x314/0x27c0 [ 236.365201][ T8066] ? __pfx___mmap_region+0x10/0x10 [ 236.365238][ T8066] ? bpf_ksym_find+0x124/0x1c0 [ 236.365280][ T8066] ? __kernel_text_address+0xd/0x40 [ 236.365310][ T8066] ? unwind_get_return_address+0x59/0xa0 [ 236.365351][ T8066] ? arch_stack_walk+0xa6/0x100 [ 236.365396][ T8066] ? __lock_acquire+0x5ca/0x1ba0 [ 236.365498][ T8066] ? trace_cap_capable+0x18d/0x200 [ 236.365535][ T8066] ? cap_capable+0xb3/0x250 [ 236.365573][ T8066] mmap_region+0x1ab/0x3f0 [ 236.365621][ T8066] do_mmap+0xd8e/0x11b0 [ 236.365684][ T8066] ? __pfx_do_mmap+0x10/0x10 [ 236.365735][ T8066] ? __pfx_down_write_killable+0x10/0x10 [ 236.365796][ T8066] vm_mmap_pgoff+0x281/0x450 [ 236.365854][ T8066] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 236.365909][ T8066] ? __fget_files+0x20e/0x3c0 [ 236.365952][ T8066] ksys_mmap_pgoff+0x7d/0x5c0 [ 236.366000][ T8066] ? __pfx_ksys_write+0x10/0x10 [ 236.366031][ T8066] ? rcu_is_watching+0x12/0xc0 [ 236.366068][ T8066] __x64_sys_mmap+0x125/0x190 [ 236.366119][ T8066] do_syscall_64+0xcd/0x230 [ 236.366167][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.366198][ T8066] RIP: 0033:0x7fca3158e169 [ 236.366221][ T8066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.366252][ T8066] RSP: 002b:00007fca323de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 236.366281][ T8066] RAX: ffffffffffffffda RBX: 00007fca317b5fa0 RCX: 00007fca3158e169 [ 236.366301][ T8066] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 236.366320][ T8066] RBP: 00007fca323de090 R08: 0000000000000401 R09: 0000000000008000 [ 236.366340][ T8066] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 236.366358][ T8066] R13: 0000000000000000 R14: 00007fca317b5fa0 R15: 00007ffc4dd6ee68 [ 236.366398][ T8066] [ 236.373833][ T8066] netlink: 'syz.2.496': attribute type 10 has an invalid length. [ 236.696751][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.703056][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.709304][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.734814][ T8066] netlink: 230 bytes leftover after parsing attributes in process `syz.2.496'. [ 236.970519][ T8063] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 236.988779][ T8063] netlink: 230 bytes leftover after parsing attributes in process `syz.3.495'. [ 237.107299][ T8078] FAULT_INJECTION: forcing a failure. [ 237.107299][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 237.144008][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz.1.499 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 237.144060][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.144078][ T8078] Call Trace: [ 237.144088][ T8078] [ 237.144099][ T8078] dump_stack_lvl+0x16c/0x1f0 [ 237.144148][ T8078] should_fail_ex+0x512/0x640 [ 237.144193][ T8078] should_failslab+0xc2/0x120 [ 237.144234][ T8078] __kmalloc_cache_noprof+0x6a/0x3e0 [ 237.144268][ T8078] ? __sctp_v6_cmp_addr+0x206/0x530 [ 237.144298][ T8078] ? sctp_add_bind_addr+0xae/0x3f0 [ 237.144345][ T8078] sctp_add_bind_addr+0xae/0x3f0 [ 237.144396][ T8078] sctp_copy_local_addr_list+0x39d/0x5a0 [ 237.144452][ T8078] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 237.144510][ T8078] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 237.144569][ T8078] ? sctp_bind_addr_copy+0xe0/0x530 [ 237.144616][ T8078] sctp_bind_addr_copy+0xe0/0x530 [ 237.144667][ T8078] sctp_connect_new_asoc+0x1d7/0x790 [ 237.144706][ T8078] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 237.144756][ T8078] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 237.144800][ T8078] sctp_sendmsg+0x15f9/0x1ee0 [ 237.144851][ T8078] ? __pfx_sctp_sendmsg+0x10/0x10 [ 237.144906][ T8078] ? __might_fault+0xe3/0x190 [ 237.144969][ T8078] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.145018][ T8078] ? __pfx_sctp_sendmsg+0x10/0x10 [ 237.145056][ T8078] inet_sendmsg+0x119/0x140 [ 237.145093][ T8078] __sys_sendto+0x431/0x510 [ 237.145133][ T8078] ? __pfx___sys_sendto+0x10/0x10 [ 237.145213][ T8078] ? ksys_write+0x1b9/0x240 [ 237.145245][ T8078] ? __pfx_ksys_write+0x10/0x10 [ 237.145279][ T8078] ? rcu_is_watching+0x12/0xc0 [ 237.145317][ T8078] __x64_sys_sendto+0xe0/0x1c0 [ 237.145354][ T8078] ? do_syscall_64+0x91/0x230 [ 237.145400][ T8078] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.145444][ T8078] do_syscall_64+0xcd/0x230 [ 237.145494][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.145525][ T8078] RIP: 0033:0x7f1ece98e169 [ 237.145550][ T8078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.145580][ T8078] RSP: 002b:00007f1ecf80a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 237.145609][ T8078] RAX: ffffffffffffffda RBX: 00007f1ecebb5fa0 RCX: 00007f1ece98e169 [ 237.145630][ T8078] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000003 [ 237.145648][ T8078] RBP: 00007f1ecf80a090 R08: 0000200000000000 R09: 000000000000001c [ 237.145667][ T8078] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000002 [ 237.145685][ T8078] R13: 0000000000000000 R14: 00007f1ecebb5fa0 R15: 00007ffe64db1ce8 [ 237.145727][ T8078] [ 237.537084][ T8084] netlink: 'syz.3.500': attribute type 11 has an invalid length. [ 237.613165][ T8088] netlink: 330 bytes leftover after parsing attributes in process `syz.3.501'. [ 237.689582][ T8088] aoe: could not set interface list: too many interfaces [ 237.792019][ T8076] netlink: 330 bytes leftover after parsing attributes in process `syz.0.498'. [ 238.130059][ T8096] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 238.143571][ T8096] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 238.170911][ T8096] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 238.195257][ T8096] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 238.217563][ T8096] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 238.240797][ T8096] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 238.279569][ T8096] head: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 238.348186][ T8096] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 238.389142][ T8074] kexec: Could not allocate control_code_buffer [ 238.407983][ T8096] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 238.451432][ T8098] could not allocate digest TFM handle binfmt_misc [ 238.452526][ T8096] page dumped because: unmovable page [ 238.493073][ T8096] page_owner tracks the page as allocated [ 238.527510][ T8096] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 95119394695, free_ts 35811739050 [ 238.616642][ T8096] post_alloc_hook+0x181/0x1b0 [ 238.634037][ T8096] get_page_from_freelist+0x135c/0x3920 [ 238.652500][ T8096] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 238.678714][ T8096] alloc_pages_mpol+0x1fb/0x550 [ 238.683682][ T8096] alloc_pages_noprof+0x131/0x390 [ 238.691192][ T8096] skb_page_frag_refill+0x186/0x5a0 [ 238.702144][ T8096] try_fill_recv+0x79c/0x2690 [ 238.714134][ T8096] virtnet_poll+0x1e23/0x3c00 [ 238.732866][ T8096] __napi_poll.constprop.0+0xb7/0x550 [ 238.747583][ T8096] net_rx_action+0xa97/0x1010 [ 238.760268][ T8096] handle_softirqs+0x216/0x8e0 [ 238.775577][ T8096] __irq_exit_rcu+0x109/0x170 [ 238.787394][ T8096] irq_exit_rcu+0x9/0x30 [ 238.803179][ T8096] common_interrupt+0xbf/0xe0 [ 238.808478][ T8096] asm_common_interrupt+0x26/0x40 [ 238.823818][ T8096] page last free pid 1 tgid 1 stack trace: [ 238.832939][ T8096] __free_frozen_pages+0x69d/0xff0 [ 238.838622][ T8096] free_contig_range+0x135/0x3f0 [ 238.844320][ T8096] destroy_args+0x66f/0x830 [ 238.854933][ T8096] debug_vm_pgtable+0x130e/0x2d50 [ 238.864311][ T8096] do_one_initcall+0x120/0x6e0 [ 238.879548][ T8096] kernel_init_freeable+0x5c2/0x900 [ 238.889709][ T8096] kernel_init+0x1c/0x2b0 [ 238.899866][ T8096] ret_from_fork+0x45/0x80 [ 238.910793][ T8096] ret_from_fork_asm+0x1a/0x30 [ 239.488625][ T8120] FAULT_INJECTION: forcing a failure. [ 239.488625][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 239.536501][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.3.509 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 239.536546][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.536565][ T8120] Call Trace: [ 239.536574][ T8120] [ 239.536586][ T8120] dump_stack_lvl+0x16c/0x1f0 [ 239.536634][ T8120] should_fail_ex+0x512/0x640 [ 239.536668][ T8120] ? fs_reclaim_acquire+0xae/0x150 [ 239.536717][ T8120] should_failslab+0xc2/0x120 [ 239.536755][ T8120] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 239.536789][ T8120] ? security_inode_alloc+0x3b/0x2b0 [ 239.536826][ T8120] security_inode_alloc+0x3b/0x2b0 [ 239.536859][ T8120] inode_init_always_gfp+0xce4/0x1030 [ 239.536891][ T8120] ? __pfx_mqueue_fill_super+0x10/0x10 [ 239.536916][ T8120] alloc_inode+0x86/0x240 [ 239.536952][ T8120] new_inode+0x22/0x1c0 [ 239.536989][ T8120] ? __pfx_mqueue_fill_super+0x10/0x10 [ 239.537014][ T8120] mqueue_get_inode+0x2e/0xdd0 [ 239.537056][ T8120] ? sget_fc+0x808/0xc20 [ 239.537084][ T8120] ? __pfx_mqueue_fill_super+0x10/0x10 [ 239.537109][ T8120] mqueue_fill_super+0x112/0x210 [ 239.537135][ T8120] get_tree_nodev+0xda/0x190 [ 239.537164][ T8120] mqueue_get_tree+0xf1/0x130 [ 239.537189][ T8120] vfs_get_tree+0x8b/0x340 [ 239.537230][ T8120] fc_mount+0x16/0xc0 [ 239.537268][ T8120] mq_init_ns+0x426/0x620 [ 239.537302][ T8120] copy_ipcs+0x383/0x610 [ 239.537345][ T8120] ? copy_utsname+0xab/0x470 [ 239.537385][ T8120] create_new_namespaces+0x20a/0xad0 [ 239.537419][ T8120] ? security_capable+0x7e/0x260 [ 239.537451][ T8120] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 239.537488][ T8120] ksys_unshare+0x45b/0xa40 [ 239.537531][ T8120] ? __pfx_ksys_unshare+0x10/0x10 [ 239.537571][ T8120] ? xfd_validate_state+0x5d/0x180 [ 239.537602][ T8120] ? rcu_is_watching+0x12/0xc0 [ 239.537639][ T8120] __x64_sys_unshare+0x31/0x40 [ 239.537679][ T8120] do_syscall_64+0xcd/0x230 [ 239.537723][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.537751][ T8120] RIP: 0033:0x7f894a58e169 [ 239.537774][ T8120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.537803][ T8120] RSP: 002b:00007f894b3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 239.537830][ T8120] RAX: ffffffffffffffda RBX: 00007f894a7b5fa0 RCX: 00007f894a58e169 [ 239.537849][ T8120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 239.537867][ T8120] RBP: 00007f894a610a68 R08: 0000000000000000 R09: 0000000000000000 [ 239.537884][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.537901][ T8120] R13: 0000000000000000 R14: 00007f894a7b5fa0 R15: 00007ffe031df2f8 [ 239.537937][ T8120] [ 242.758523][ T8175] FAULT_INJECTION: forcing a failure. [ 242.758523][ T8175] name failslab, interval 1, probability 0, space 0, times 0 [ 242.878707][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.0.524 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 242.878755][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.878774][ T8175] Call Trace: [ 242.878784][ T8175] [ 242.878796][ T8175] dump_stack_lvl+0x16c/0x1f0 [ 242.878847][ T8175] should_fail_ex+0x512/0x640 [ 242.878884][ T8175] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 242.878922][ T8175] should_failslab+0xc2/0x120 [ 242.878964][ T8175] __kmalloc_cache_noprof+0x6a/0x3e0 [ 242.879002][ T8175] ? trace_kmalloc+0x2b/0xd0 [ 242.879045][ T8175] ? __kvmalloc_node_noprof+0x296/0x600 [ 242.879080][ T8175] ? gpiolib_seq_start+0x69/0x270 [ 242.879132][ T8175] ? traverse.part.0.constprop.0+0x392/0x640 [ 242.879187][ T8175] gpiolib_seq_start+0x69/0x270 [ 242.879239][ T8175] traverse.part.0.constprop.0+0xac/0x640 [ 242.879304][ T8175] seq_read_iter+0x932/0x12c0 [ 242.879356][ T8175] ? aa_file_perm+0x4d6/0xfb0 [ 242.879401][ T8175] ? __pfx__kstrtoull+0x10/0x10 [ 242.879457][ T8175] seq_read+0x39e/0x4e0 [ 242.879501][ T8175] ? find_held_lock+0x2b/0x80 [ 242.879533][ T8175] ? __pfx_seq_read+0x10/0x10 [ 242.879580][ T8175] ? __lock_acquire+0x5ca/0x1ba0 [ 242.879621][ T8175] ? copy_iovec_from_user+0x138/0x170 [ 242.879665][ T8175] ? iovec_from_user+0xbb/0x140 [ 242.879726][ T8175] full_proxy_read+0x13c/0x200 [ 242.879765][ T8175] ? __pfx_full_proxy_read+0x10/0x10 [ 242.879803][ T8175] vfs_readv+0x6bc/0x8a0 [ 242.879830][ T8175] ? get_pid_task+0x106/0x250 [ 242.879888][ T8175] ? __pfx_vfs_readv+0x10/0x10 [ 242.879920][ T8175] ? find_held_lock+0x2b/0x80 [ 242.879978][ T8175] ? __fget_files+0x20e/0x3c0 [ 242.880025][ T8175] ? do_preadv+0x1af/0x270 [ 242.880053][ T8175] do_preadv+0x1af/0x270 [ 242.880084][ T8175] ? __pfx_do_preadv+0x10/0x10 [ 242.880111][ T8175] ? rcu_is_watching+0x12/0xc0 [ 242.880156][ T8175] do_syscall_64+0xcd/0x230 [ 242.880207][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.880240][ T8175] RIP: 0033:0x7f727ed8e169 [ 242.880264][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.880296][ T8175] RSP: 002b:00007f727fbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 242.880326][ T8175] RAX: ffffffffffffffda RBX: 00007f727efb5fa0 RCX: 00007f727ed8e169 [ 242.880346][ T8175] RDX: 0000000000000006 RSI: 00002000000006c0 RDI: 0040000000000003 [ 242.880367][ T8175] RBP: 00007f727fbc0090 R08: 0000000000000005 R09: 0000000000000000 [ 242.880386][ T8175] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 242.880405][ T8175] R13: 0000000000000000 R14: 00007f727efb5fa0 R15: 00007ffe3eb01fb8 [ 242.880445][ T8175] [ 242.880515][ T8175] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 243.157461][ T8175] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 243.165982][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.0.524 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 243.177891][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.188053][ T8175] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0 [ 243.193566][ T8175] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b [ 243.213198][ T8175] RSP: 0018:ffffc9000443f9a0 EFLAGS: 00010247 [ 243.219307][ T8175] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88802e0a7140 [ 243.227292][ T8175] RDX: 0000000000000000 RSI: ffffffff850306ee RDI: 0000000000000004 [ 243.235276][ T8175] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 243.243279][ T8175] R10: ffffffff8e589ab3 R11: 0000000000000001 R12: ffffffff8bf841c0 [ 243.251264][ T8175] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802e0a7140 [ 243.259247][ T8175] FS: 00007f727fbc06c0(0000) GS:ffff8881249bf000(0000) knlGS:0000000000000000 [ 243.268193][ T8175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.274791][ T8175] CR2: 00007fca322e56c0 CR3: 000000002646a000 CR4: 00000000003526f0 [ 243.282781][ T8175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.290763][ T8175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.298746][ T8175] Call Trace: [ 243.302048][ T8175] [ 243.304992][ T8175] traverse.part.0.constprop.0+0x2bd/0x640 [ 243.310844][ T8175] seq_read_iter+0x932/0x12c0 [ 243.315556][ T8175] ? aa_file_perm+0x4d6/0xfb0 [ 243.320262][ T8175] ? __pfx__kstrtoull+0x10/0x10 [ 243.325148][ T8175] seq_read+0x39e/0x4e0 [ 243.329335][ T8175] ? find_held_lock+0x2b/0x80 [ 243.334028][ T8175] ? __pfx_seq_read+0x10/0x10 [ 243.338731][ T8175] ? __lock_acquire+0x5ca/0x1ba0 [ 243.343708][ T8175] ? copy_iovec_from_user+0x138/0x170 [ 243.349107][ T8175] ? iovec_from_user+0xbb/0x140 [ 243.353995][ T8175] full_proxy_read+0x13c/0x200 [ 243.358801][ T8175] ? __pfx_full_proxy_read+0x10/0x10 [ 243.364108][ T8175] vfs_readv+0x6bc/0x8a0 [ 243.368364][ T8175] ? get_pid_task+0x106/0x250 [ 243.373072][ T8175] ? __pfx_vfs_readv+0x10/0x10 [ 243.377853][ T8175] ? find_held_lock+0x2b/0x80 [ 243.382554][ T8175] ? __fget_files+0x20e/0x3c0 [ 243.387254][ T8175] ? do_preadv+0x1af/0x270 [ 243.391685][ T8175] do_preadv+0x1af/0x270 [ 243.395946][ T8175] ? __pfx_do_preadv+0x10/0x10 [ 243.400724][ T8175] ? rcu_is_watching+0x12/0xc0 [ 243.405509][ T8175] do_syscall_64+0xcd/0x230 [ 243.410044][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.415958][ T8175] RIP: 0033:0x7f727ed8e169 [ 243.420385][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.440027][ T8175] RSP: 002b:00007f727fbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 243.448460][ T8175] RAX: ffffffffffffffda RBX: 00007f727efb5fa0 RCX: 00007f727ed8e169 [ 243.456462][ T8175] RDX: 0000000000000006 RSI: 00002000000006c0 RDI: 0040000000000003 [ 243.464446][ T8175] RBP: 00007f727fbc0090 R08: 0000000000000005 R09: 0000000000000000 [ 243.472431][ T8175] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 243.480415][ T8175] R13: 0000000000000000 R14: 00007f727efb5fa0 R15: 00007ffe3eb01fb8 [ 243.488412][ T8175] [ 243.491442][ T8175] Modules linked in: [ 243.496380][ T8175] ---[ end trace 0000000000000000 ]--- [ 243.514074][ T8175] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0 [ 243.519714][ T8175] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b [ 243.552503][ T8175] RSP: 0018:ffffc9000443f9a0 EFLAGS: 00010247 [ 243.563478][ T8175] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88802e0a7140 [ 243.581925][ T8175] RDX: 0000000000000000 RSI: ffffffff850306ee RDI: 0000000000000004 [ 243.601171][ T8175] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 243.646736][ T8175] R10: ffffffff8e589ab3 R11: 0000000000000001 R12: ffffffff8bf841c0 [ 243.664883][ T8184] netlink: 186 bytes leftover after parsing attributes in process `syz.2.525'. [ 243.675111][ T8175] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802e0a7140 [ 243.683153][ T8175] FS: 00007f727fbc06c0(0000) GS:ffff8881249bf000(0000) knlGS:0000000000000000 [ 243.744815][ T8175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.763954][ T8175] CR2: 0000001b30b1bff8 CR3: 000000002646a000 CR4: 00000000003526f0 [ 243.784135][ T8175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.826561][ T8185] netlink: 326 bytes leftover after parsing attributes in process `syz.2.525'. [ 243.881477][ T8175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.893358][ T8175] Kernel panic - not syncing: Fatal exception [ 243.899822][ T8175] Kernel Offset: disabled [ 243.904187][ T8175] Rebooting in 86400 seconds..