last executing test programs: 10.968455044s ago: executing program 0 (id=655): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) close_range$auto(r0, 0xa, 0x400000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/udp\x00', 0x101800, 0x0) pread64$auto(r2, 0x0, 0x10, 0x5) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) read$auto(0x3, 0x0, 0x400000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptye9\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) mmap$auto(0x800000000000006, 0x20009, 0x4000000000de, 0xeb1, 0xffffffffffffffff, 0x8001) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x5) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x40, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, 0x0) socket(0x2b, 0x80000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000033ceec66e7023110701029c5c39903cd4d56ba1f2945b7b61607d15af4c47e5e5d39dcacf78af96b4675b33c7533f8af4de4901b64a0c2902f0cc3f404e390a07932c4af0d4cf3dd2bc76b3c1c6d961b70e0a014737232e842b733ee67dcfda5afe6aaea0da9f7b287db7bc1bde3b03b3401951eb5db4f86dce61789ee16045ade3d96faf9bdbc817c29b82c98cb5620ec7bf0983967e9ef47cfbe4f70257002fc89d4f0318ee36e475e37cb9f", @ANYRESHEX=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) prctl$auto_PR_SET_VMA_ANON_NAME(0xfffffffe, 0x0, r3, 0x185, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc1}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.bfq.io_serviced_recursive\x00', 0x480000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000100)=""/151, 0x97) 9.537477979s ago: executing program 0 (id=657): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r5 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x15, r5, 0x300000000000) socket(0x10, 0x2, 0x0) memfd_secret$auto(0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x301001, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0x4048aecb, 0x0) getsockopt$auto(r1, 0x1, 0x0, 0x0, 0x0) ftruncate$auto(r0, 0x9) 9.125301727s ago: executing program 2 (id=658): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) connect$auto(0x3, &(0x7f0000000180)=@generic={0x29, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) ioctl$auto(r3, 0x8004510b, 0x3) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(0xffffffffffffffff, 0x5420, &(0x7f0000000040)="78dd94c049f56f45c970da6a70463277e016e248ecfa791a823dc78a80cf91a8c2f3880a97d1ea") r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r4, 0x4008af00, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 8.843867991s ago: executing program 3 (id=659): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x2a, 0x800, 0x2d2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose13/dev_port\x00', 0x8c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)=""/134, 0x86) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) sendmsg$auto_NL80211_CMD_VENDOR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES16=r6, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 8.453563121s ago: executing program 1 (id=660): r0 = socket(0x2, 0x3, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) readahead$auto(r0, 0x1, 0x1804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x100000000, 0x401008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20300, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) 8.445854096s ago: executing program 0 (id=661): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r3, 0x10001) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x2a, 0x800, 0x2d2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose13/dev_port\x00', 0x8c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)=""/134, 0x86) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) sendmsg$auto_NL80211_CMD_VENDOR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES16=r7, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 7.224332191s ago: executing program 2 (id=662): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) readahead$auto(r0, 0x1, 0x1804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x100000000, 0x401008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20300, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) 7.136907781s ago: executing program 3 (id=663): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, &(0x7f0000000280)=0x8) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x8001) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000000)='>', 0x8000, 0xff}, 0x2}, 0x1, 0xb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xffe00, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x10000, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r4, 0x5453, r4) getrandom$auto(0x0, 0x8, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf2503000000040007800c00020005000000000000000800010007"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) madvise$auto(0x110c230000, 0xcdc, 0x9) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r7, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) 7.113905827s ago: executing program 1 (id=664): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r2, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x2a, 0x800, 0x2d2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) 6.482450559s ago: executing program 0 (id=665): close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x105240, 0x0) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) sysfs$auto(0x1000006, 0x1, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) r1 = open(0x0, 0x2002, 0x1) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x3, 0x6) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) unshare$auto(0x40000080) fcntl$auto(0x0, 0x407, 0x100000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) unshare$auto(0x40000080) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1ac}}, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0) fadvise64$auto(r1, 0x7ff, 0xe00000000000, 0xffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock$auto(0xfbe8, 0x1000000000000004) waitid$auto_P_PID(0x1, 0x0, &(0x7f00000000c0)={@_si_pad}, 0x101, 0x0) 5.874116274s ago: executing program 3 (id=666): r0 = socket(0x2, 0x3, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) readahead$auto(r0, 0x1, 0x1804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x100000000, 0x401008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20300, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) 5.839526393s ago: executing program 2 (id=667): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r3, 0x10001) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x2a, 0x800, 0x2d2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose13/dev_port\x00', 0x8c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)=""/134, 0x86) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) sendmsg$auto_NL80211_CMD_VENDOR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES16=r7, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 4.664986787s ago: executing program 1 (id=668): ioperm$auto(0xefdd, 0x4, 0xfffffffa) semget$auto(0x80000000, 0x13c, 0x3ff) unshare$auto(0x40000080) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x7fffffff) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, r0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x84941, 0x0) close_range$auto(r2, r3, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) getsockopt$auto(r1, 0x84, 0x71, 0x0, 0x0) clone3$auto(0x0, 0x7) kill$auto_SIGCONT(0xffffffffffffffff, 0x12) 4.318738991s ago: executing program 3 (id=669): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f00000001c0)="dd2fe40a0900", 0x5ac, &(0x7f0000000100)={&(0x7f0000000340), 0x21}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) r1 = socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x4, 0x400008, 0x3, 0x9b72, r3, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xfdf3}, 0x100000007) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) r4 = socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffbfffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) madvise$auto(0x110c230000, 0x8031ca, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r5, &(0x7f000000be80)='batadv0\x00', 0xf) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) ioctl$auto(r1, 0xffffffff, r4) 4.056549135s ago: executing program 1 (id=670): r0 = socket(0x2, 0x3, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) readahead$auto(r0, 0x1, 0x1804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x100000000, 0x401008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20300, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) 2.39628132s ago: executing program 1 (id=671): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0xea, 0x4020009, 0x800000000000df, 0xeb1, r0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000300)={{0x3fe, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x81, @raw=0x1, @inferred, 0x0, 0x0, 0x0, 0x0}) r1 = setfsgid$auto(0xee00) fchown$auto(0xffffffffffffffff, 0xee00, r1) mmap$auto(0x0, 0x10018, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, r1) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x3ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x60000000000, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x0, 0x400, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0xa242, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/crash_hotplug\x00', 0x121000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/5, 0x5) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc5a0) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r3, 0x3) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) 2.322488146s ago: executing program 3 (id=672): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r3, 0x10001) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x2a, 0x800, 0x2d2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose13/dev_port\x00', 0x8c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)=""/134, 0x86) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) sendmsg$auto_NL80211_CMD_VENDOR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES16=r7, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 2.223325427s ago: executing program 0 (id=673): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xf0ee66fb4bcf069c, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@nested={0x77, 0x104, 0x0, 0x1, [@generic="2b41f0a940972a697d969291346305a558d61b0532ca4c45884e6ecc08f28cdd6d21fe6f91f57247eeacd9873d6628ce49e4a0d7eb79136ef67b6a", @nested={0x4, 0x49}, @nested={0x4, 0x48}, @typed={0x4, 0x126}, @typed={0x8, 0xdf, 0x0, 0x0, @pid}, @typed={0x8, 0x11e, 0x0, 0x0, @ipv4=@local}, @typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@mcast1}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r5 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r5, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) 2.21879068s ago: executing program 2 (id=674): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, &(0x7f0000000280)=0x8) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x8001) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000000)='>', 0x8000, 0xff}, 0x2}, 0x1, 0xb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xffe00, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x10000, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r4, 0x5453, r4) getrandom$auto(0x0, 0x8, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf2503000000040007800c00020005000000000000000800010007"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) madvise$auto(0x110c230000, 0xcdc, 0x9) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r7, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) 584.750231ms ago: executing program 2 (id=675): rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x242a82, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/cmci_disabled\x00', 0x20102, 0x0) ioctl$auto_BLKOPENZONE(r0, 0x40101286, &(0x7f0000000300)={0x6, 0x80000000}) mmap$auto(0x0, 0x949, 0x9, 0x4000000000011, r0, 0xfffffffffffffffd) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) ioctl$auto_BLKROGET(r2, 0x125e, 0x0) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = set_tid_address$auto(0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) lseek$auto(0x3, 0x8, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r5, 0x0, 0x1) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)=@prog_bind_map={r4, r1, 0x10000}, 0x4) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) unshare$auto(0xffffffffffff8001) getdents$auto(0xffffffffffffffff, &(0x7f0000000380)={0x80000000, 0xfffffffffffffff9, 0xa, "1318540ef92bec0cf2d1da3f0a55211c59bd7e9df61d16be10f52688d135f0ed3e56a1e0eea990eb205e3b50ab663b504409868dda9a21341ac4833a86a066dbce7833e6eb38c2d22bd7e213ce85d6e6037ecdcc38a1ead3250d433a1a283b24e91338054b5afb9849f9fade21d7387df4e1a2bb0728ef32d8e9e21af0879730ba651caaf37e8799fbdf21bfe0c56390bbd75624aa4769a88053d97add981e59f6cce89600c979c4e1993cc6fbd7ade0c7609a4bbb72"}, 0x7c4) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x1054}}, 0xc0040) membarrier$auto(0x4, 0x8000000000000000, 0x4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r6, 0x0, 0x1) socket(0x28, 0x5, 0x0) mmap$auto(0xfffffffffffffffc, 0xe983, 0x5, 0x200000eb1, 0x401, 0x8000) 248.479818ms ago: executing program 1 (id=676): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x501200, 0x108) socket(0xa, 0x3, 0x3b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0xc2481, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x5054c1, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000000)=0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x480200, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) ioctl$auto(0x1, 0x541b, 0x8) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) socket(0x10, 0x2, 0x6) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xd, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x5, 0xb, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x10081) 114.799512ms ago: executing program 0 (id=677): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_null_fops_mem(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x1c3481, 0x0) write$auto(r2, &(0x7f0000000180)='7\x00\x00\xec\x007\xfe(\xbd\xb0\x86\xe0K\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:a\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xb8\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacn\x05\xbd\xdd\x89\x93\xb8\'\xc2f\xcf\x8d\xaa\x00\xd5\x91\x9f\x96\xc6\xa4\'N\xebE\x8b', 0x5) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000001040), 0xffffffffffffffff) getsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x6, 0x45, &(0x7f00000010c0)='}h\x00', &(0x7f0000001100)=0x8) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x14) r3 = gettid() rt_sigqueueinfo$auto(r3, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x7f, 0x2, 0x9b72, 0x2, 0x7fff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram1/integrity/tag_size\x00', 0x68e00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000001c0)=""/112, 0x70) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011d3da4420008bd7100f9db5f250200000000000010", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x80) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)={0x464, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x3d1, 0x7f, "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"}, @NL80211_ATTR_S1G_CAPABILITY={0x73, 0x128, "53c747d9b1d945875d005afffaafc3f680b74d3e2b176513c3183c1b6c9fe5af4db4f679a360ffa9ea0e73c45155a40cddc64c2d17f82398b197778b07404b2eb130a8202d1dd2e8d8211ca9e8957b9471a06bc7baed792299fe97566ef46c8376afbff0f48fbead7a802ec9aac22b"}]}, 0x464}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) 97.255018ms ago: executing program 3 (id=678): r0 = socket(0x2, 0x3, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) readahead$auto(r0, 0x1, 0x1804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x100000000, 0x401008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20300, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) 0s ago: executing program 2 (id=679): ioperm$auto(0x3b, 0xf99b, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/enable\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/conf/batadv_slave_0/accept_local\x00', 0x82800, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) read$auto(r0, 0x0, 0x1ff) io_uring_register$auto_IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000180)="ce5d36ad3d4af4217dd841c54084e5761ad51f16b563f020984e96b28b913c5e31643ef72664760bb6130268337ea2ca3e2ad79abcb8dc25a797c399eebafcd5bd609aa5b48a32122072d1f648fbc94a4d1d8b3654194cc5a5c60f822b14249bef89bf4542a5cc5cd292fe45dc4fd4a244691ac5fc9d310957519ae5e2c89cfc487be1810cf05ed49772971f930bef98a673e5d9714227b6c7d526e104f09dd3f20ed9eb90ef36e0ba51798df34dae0b3a64279f08ae193613d960114394052158eb4e91289d2712a76fabcc5516c000cfba1cc0da71ea1cc966028055af7439aba9a1e03d7587143ca89f15b38a2800ce8816ab16557c55e2c2126cbf858430d52f926c34b348d901932c0ad41fbcfe66229ced4cdac77a7f0173849143468f4c8a342ac33d08a7f0d93076de85dbb9ab2f8ef4c43ae8ed39452e5374d1e197890caed17531e47635234d01870a06bb1b51c5d8d46e9e04da27a34c0c19f17e16538c8a9c7380b3e362219aa4fdaf62f70bb2d1d6d87f26206c3a23c8762c07e9f28f56dd3ca17086fb13e4257a11f1a4dd3ed3d5703c1804038f34288660a1ebf4dfe49ed8cd61345b93f82c55194551fb24ae6bd053b91ad8cd1fd07d0e8f89d34202eb998360185696ec3061f19d36dca25ebffa40345e4f82365dbbd2a059975fa24cf1382a4ac3e8681d9d3ed139a8934e1c3e1cc029397e694a17a0385e2f2407c186dd9a327794bebf9da126654287614231dd96bc2c3761ee9e47cfb5fe2da41090b1581116f571b34aa492f87dd9f2c9b84f134a19dd2543640fa135c4371fca41c5354ed3525b76e48b5a10249b079052a184f35190ecef359ad51952fe0322c8901bdc1bece3d0f2900c53356942ee8d9318027a14ad2be15ce1c73503d9354de4353922d56da26a416a32c18c4c0eb96149074994019f2250ce523e83f25e08825d8bd5fad730f2d1aebe772a33fdea9d722743debe0d50f109ce11406653372d264b191ea96ea41f52f9a3993ea01da3dbb1b23b78b4cc5d3a19175eae4f1eced7a6f66e16414d5379133e71d0e574a8ff0071a4ec59bb7031df1294233e521ed612a3c772b7f822db9d85ce2cb5dbbcf1739388d753c5bef912b3d4afff6944850668f88d77af9f178ad2bf0816fbac7abe14964a212783503c995d166751cd8bbce92f91af6b64dd294b6f4d754697a8f7604012e1fb14618aa291cfbad82ca218205b640bab3400f7b5404adeea43101c50a07e271781dd9788602d80f63584f132f0f332079a07105529c8131e3a1d7a6775493f8402ca76e093017df330976c544a1c0ca5dd6b2017165761fc0c5c842f2107f12270e7014b01c7a67e9e81d448dd82bcbdb3e81481e3173ed35e4d93853de6209aac094489fa777a418d29d7c59761f2c5be011857eb341e8c37d2db362b969ca2ef3f6df2220fa8b2d5dd5b946ad1417301c22d04c1fff4920b39afe0c297efc588abaedf88bac6393cd548097fb8384463f5d5b41294a9409ea3d4899e56484a50f8afe9740cf94e26f73da67cb4e760f8bcf9cfe87a548312f7c43a5379a84fa4c30d4d5330d352e1c9208b1effb082227aa31104d400986fe9ce50824a03537be9ff245a50db8f42542611c153c8ccaa7a5a717a29e5cf0a7f9dcf57335742a8d0cb4875f409d95388f1cdc3ec2dcade12ef11e824531f7824e8fc403951a67af6be1f1a3920f118e9787112f2f9812fc41c6b8def543a97a1fce9f50964189e7a1e185a19642209976f68f2df516104decad1d60931dc8a94726bc73783429410409b4a493ca1e9c3a7d60e5b886d50aeb6982520fa4624fd213a527721327ccfd46e6a143721b85653cd89303c0f18824f481e28d86915ee8783823385967f7d0c346362b277174499429fe0a49bc3633620ba5980a24e2769e293d66f5791d8cf8df326cc7359249a8cac0a72ca2a4149db7a080c8f44545ca86272c56f7b342d77c0043e451d7551c7ddfafaa26b05bbbf2c704c88090169bc5be37b4c1de614b887e27ab35ac669cd61079fbc20d11b3a95ea3ba0824ae931e0a4e8422b68b581e0a2fd80c1914444614ce585a771acfe6af9236301353919ef3a097b5ec74c7c980ee689be89d3eddc2810fe1fafcf47e06e389f4083ffe5b13263542c7bbf5ed254fc6173f7e8bd88d4dd61aeb42856f3ab4649fe6ef2c9ddff7ef95552f9b75fcc9e98c8f945febc0f34d41b9051b885a9e8956e4bdc90b4aacbe8185d0c49bf98696592ecb41fe575f9449797d4f76982eee94af37bc4d93b8293db3056582f630b567faabbd3b3d549711abfdc908de8b8d7ac08045c239cd0fa76d921d196404248658c5edb609bb6286451e8400b6944dce8f1fef01d25444a9a1aef2fcb26bf727f46a8e6704343740916b6fc32db658caa1f01bc47095644802d1f6e6b683d1c6aa2d6083191260abdcf7ab955e13b6c6990e1c78f64a0606fa796064f458866b82747fb6cb806b3f5b938c7a57eddf1095c592b20346ab8ceebf7453cea478b273151c2d2dffc42671b8ca782267375855cf329f7d97b57576dd44390139c5e3276df05bbd780adbe71be87a7b4073639c4e33b082027d34f39a9abd2eaccf12cdeb4cf6f060bd0c7e32ee252f075f4f905587b5669b88d54d7331e41a623d8acf2c9892062a9d34191c87c7829aa3053a0e40d4ad508c540ee2d47a5c409712effd68e8d60abe87cc5223ff96eaa5736ec10e00fe63136a571864ca2bee15c2081349ed0c2c107aed03aaa894bc90d9ae8293bbce09bd54cd8a4aa23ff4fbfb144abaec6b9d48186c9089a7777f88170c64a397af700a23eeb473abd932658e2bb58bec18a060b662a66c3769bce916721e4a2dee705239a0971bfa9203138b8722aba32c0f18a8aea268d2f778ac9d611633267ba2228ab1c9c6c4a7fa63506caa15476dc5f22c9046c3e3cb4779e946c8fcf3fc552df740bee56958d3ec5bf0db1c064191f47831f8189190a890c752bc36501d35a374b864100374f51e9ebe2c3e05033ca67427d2e26ca87ef21469fbba7889e5bfe263b49284917c2722a999fa11c7faa235692a7b2f08d5a78bd0a908a385848c445880fe1d863d43c43ea0cf555082ac9ce7a69efce90a82c4f9b460dd953559c380429690d95a248b855bcdd100652b59429683192dbd7fbc8b6a0cf4b97b44a5ba79a9fdbb9c05d0ecfa2abd4311f64f3272b53a4026f0e4ae0ab75e406d4a125565a31ea360e4ed80f0755e6225b0e3a5006a49b0facdb57b92f71c3890571b7a95991f66c93f46bac1a94c38dc4dff825d6f24e85eb0fc6e89131b9163dceca600abb84c41a30c6db67fc8746794798add294d5737f47221938d2f5ced2ee327a64bd746195b13ec6ee9545fe15c153d72dc327abc5d746df0cbbbacb8b22d416c0bf3a67e6229825a4777e094c1a70e4c3f0dc504efc370ed5a7c24452f95c003d799dbd7e875671d9009143280fa7746b61d14d57ce429b66635e0e957fa10199aa95f269551e192567708327972e0081a293b7c6f5e99c6306b219cc93a4c2700df69c4c05fb9e442e2ff77f31107de6930e8510f64a1eafb2910668c5d67973ce11865e90907f7e7c38a60d83715f00e37db344a837014bc43681f7a8e6defb29a3eace5e1f0368f62b970b8b3ac044d109eeee04bbb6e5948bc32f03cb3f5f938574decdca1ea653bbc021a3f83023815752568251aa7e46e38c6a13510a6c7cb406ab37ba4cd36b93e6585cd859079334fe2a6bc2a1f955506826c0def0447843cde0cba2e834829719ee55264055fd73b2057b8e28f4e33cd0e9c0255e3b597e1a160e09e9ce39c0e18cd518de89578326c9f3b31ad6dbd3eb7b7396e975a3b0233743b0067bb6962975d8fcd02863328513aff4d9c0ad05cc824ed37728caba552af18f883d80865c3c23254b75619a51140a108c297d8678bbc5ba1f5fbef7e2c254e1571405babcd036403f68415fb9b2ad2cd78d58d08d4245889bc90e791ffcfcfef3de5cca88368cd14e108d047ae69714c0d2b38ddfe26732d55f1f8ac94cfcd35e61bac6ab28232af6920495f58329ae76948b59906147f953620eb766a12e92590064683f9aa46458ae088b61e203f1eabe97f498580f0631ebfd00c8f39518dd36bce315471fe6b4e292fe2fdda7b3331aed99d5e7b8b530fcdac18de2cc56f6247c29b618816df7f310ccfd62382742bbc30792cfbf507d9bfdb819d707baa1af1cd9e9adce4bc4ac9c4e75fa7e22bdc13582224b49eebd8f63ca19a7acd498513eb751e6f3329667041a085161ff6430ffc4d856992362c4121e18d86b7bea8cbac1af8763392580300c4eb004ef48ba7314503b7137dae9fe33c80ed0c6513efddcf7257046093d5cc63f15e59861f99175971bdb4e425c06295180e23559ef01ab0d11f2e418696da49bc0971b8310f3c02e71fe9c9dc4a38af48514a82df3cc316714d3a6fa37dfc1fb0fd830de1d36e55fe881825f8151f359bf02075ae0ea2fff2492cf4a02f5ecefccaf4bfd72c2801318135e46486807dcfca8c65a87d5adbb78e0e9d9b1532c18103477d43c080994ca6a8cda73a71778351d85fbad4faa60efa8185811d0fce2859aa9b3f6ff8400aa8cbe903cef692f419c66573f594f7077718a44ba0215d09436d4c97c8e0fa0120b526eefe61f30165b4acd9ef1e150ae6f77adba4838e80c8b8552c560a63c231e4cafc931544492610b6bfe509c89283742603d1c83477702aa87ff44c95f46f8e86ed4f7b2f031a46ed6e17fedb2ba4026c3a3f6573e5b906e5fd6757966d2cb1144d7604f66efa2ee2f89caaf9064b23d05df235d3da1b1eb3585c35a73ad9c6e7008b0febef70dcb0f3ae8be1cebb9cf92ed86cbd9f0d3c2d90d6eca116756682f6a8dbe39eba00dadb8386da9364209f14ade5d8b05ab1e5ae5e0660f0272334be869b9cd46a28d7739a448a4382fc23ae2ff09f97c26074492a1e8026ff6d903561198f0789d77df70da15cc1f9040a0233a1e46d6f5d08045d92e37292da1861e7c90f89cea2cf946a54427228003457fbce382693e9d0691a684b10fffec13ab726110f0c62c356e9f4a540b6ee2f94b17a74fc2b51ecca18073e7d317f4d1c408352af34c9bfbc5b695b052788f4f73ee00045230099ed6a658444bdda3ebd5c20f30a9d77bfa1a982501c90cf19274e3af006bdfeaa9a39d1bea029c8c270313ec6c0d68032a3362bb7fe4f3a5accdcef014a3906ec4a0af7fdaf73afc2c9917d84bbb262cb1dbb97bdb044b6fd19c0e297fd106241ea07867dfa7d3e0ce95d5d2e39faed8122716487ae2a96c6b2aaa64c8a67780abad1e043025bb8e438bd558c9fb8380e82ec2a10c953f40dcf8430065a0c49be9a1f1ed2ddf7ed688092a171bef9c505856f394a717120753d94b94a12c13bf68014f390e91ae5a76ed9734189fef394a553b0673592858fde3a855e7aa997a2335f39ff4e0c9ff1fe8b546e8ec290c5d25f0f1ea585d5bafd4dad9ca60c8161789d456a7bba4e77f35931f165f9dfda78fb8f607b3c38a5d340eaa1cbb2f29415bc0d5481f16bbbac3c9284161764ae9fa3f26432144fdca44875b636eb8ef026efdc10178cc6279a380be21b811664f448e62391a1dfda022f15534dc29860327551f4ea6158f4631ec741922c036aee84f09cc92e5d8c0f2f21274958be35ed5818af5175119741b29685cd57186bb936c3bf0eaf54d7cc957af499cbe5c8e57f8d30862fd6eaa", 0x5) write$auto(0x3, 0x0, 0xfdef) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x388}, 0x1, 0x0, 0x0, 0x4}, 0x400c080) r3 = open(0x0, 0x161342, 0x100) r4 = fcntl$auto(0x3, 0x4, 0xa553) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=r4}, 0xa3) syz_clone3(&(0x7f0000000640)={0x20100, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2b}, &(0x7f0000000300)=""/107, 0x6b, &(0x7f0000000bc0)=""/250, 0x0, 0x0, {r7}}, 0x58) waitid$auto(0x2, r6, &(0x7f0000000280)={@_si_pad}, 0x8, 0x0) shmctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000000700)={{0x7, 0x0, 0xee01, 0x1, 0x1ff, 0x5, 0x8001}, 0xda, 0x0, 0x5, 0x0, @raw=0x1, @raw=0x8, 0x8, 0x0, &(0x7f0000000dc0)="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", 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r5, 0x8000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) rt_tgsigqueueinfo$auto(0x0, 0x0, 0xe, &(0x7f0000000100)={@siginfo_0_0={0x2a, 0x5, 0xb2, @_rt={0x0, 0x0, @sival_ptr=&(0x7f0000000380)}}}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001240)={0x19c, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x23}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4000000}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xfffffffc}, @ETHTOOL_A_LINKMODES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5f9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xfffffffd}, @ETHTOOL_A_LINKMODES_OURS={0xd9, 0x3, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @fd}, @generic="102ad574e037b4ee53515eccabbe2d6f7efaee54615acbcdc652fefc36006ad4d966d890c0b94ad1f04b817ad931ebb1eef9ea4bae31f3bb4338a2aae6e4b68b8fe7bc6b46bfd6bad1ff0c812ba47f154fa2857c02a858f462d4aee9db6a170ad6d6e2aba99bc096317b0a0f247b444112222ec07fe2d047c50ea0b8adffebd2affbb061d65588c56a6905aa17705c188ffb53f1c5375b44187a5eee04f999a0c7e51b5b80b4950e08767f584fae8fe4a810b1a5bac51906856ae1fea92cbfb4fffb933bca5532aa68ccedfa31"]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) move_pages$auto(0x1, 0xf56, 0x0, 0x0, 0x0, 0xfffffffc) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) kernel console output (not intermixed with test programs): Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.577766][ T6322] Call Trace: [ 154.577776][ T6322] [ 154.577788][ T6322] dump_stack_lvl+0x16c/0x1f0 [ 154.577861][ T6322] should_fail_ex+0x512/0x640 [ 154.577909][ T6322] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 154.577965][ T6322] should_failslab+0xc2/0x120 [ 154.577997][ T6322] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 154.578049][ T6322] ? __kernfs_new_node+0xd2/0x8e0 [ 154.578100][ T6322] __kernfs_new_node+0xd2/0x8e0 [ 154.578152][ T6322] ? __pfx___kernfs_new_node+0x10/0x10 [ 154.578219][ T6322] ? find_held_lock+0x2b/0x80 [ 154.578256][ T6322] ? kernfs_root+0xee/0x2a0 [ 154.578311][ T6322] kernfs_new_node+0x13c/0x1e0 [ 154.578371][ T6322] __kernfs_create_file+0x53/0x350 [ 154.578413][ T6322] sysfs_add_file_mode_ns+0x207/0x3c0 [ 154.578484][ T6322] sysfs_merge_group+0x1aa/0x340 [ 154.578550][ T6322] ? __pfx_sysfs_merge_group+0x10/0x10 [ 154.578605][ T6322] ? __pfx_dev_add_physical_location+0x10/0x10 [ 154.578639][ T6322] ? bus_to_subsys+0x131/0x160 [ 154.578684][ T6322] dpm_sysfs_add+0x237/0x280 [ 154.578720][ T6322] device_add+0x9a6/0x1a70 [ 154.578759][ T6322] ? __pfx_device_add+0x10/0x10 [ 154.578791][ T6322] ? __pfx___mutex_lock+0x10/0x10 [ 154.578845][ T6322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.578907][ T6322] input_register_device+0x7e8/0x1130 [ 154.578962][ T6322] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 154.579004][ T6322] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 154.579051][ T6322] ? find_held_lock+0x2b/0x80 [ 154.579107][ T6322] ? __pfx_uinput_ioctl+0x10/0x10 [ 154.579143][ T6322] __x64_sys_ioctl+0x18e/0x210 [ 154.579187][ T6322] do_syscall_64+0xcd/0x490 [ 154.579241][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.579275][ T6322] RIP: 0033:0x7fbcac98e929 [ 154.579301][ T6322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.579333][ T6322] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.579368][ T6322] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 154.579390][ T6322] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 154.579410][ T6322] RBP: 00007fbcaca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 154.579430][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.579451][ T6322] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 154.579495][ T6322] [ 155.603996][ T6335] FAULT_INJECTION: forcing a failure. [ 155.603996][ T6335] name failslab, interval 1, probability 0, space 0, times 0 [ 155.645979][ T6335] CPU: 1 UID: 0 PID: 6335 Comm: syz.0.83 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 155.646023][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.646042][ T6335] Call Trace: [ 155.646051][ T6335] [ 155.646063][ T6335] dump_stack_lvl+0x16c/0x1f0 [ 155.646117][ T6335] should_fail_ex+0x512/0x640 [ 155.646164][ T6335] ? __kmalloc_noprof+0xbf/0x510 [ 155.646215][ T6335] ? iovec_from_user+0x108/0x140 [ 155.646264][ T6335] should_failslab+0xc2/0x120 [ 155.646295][ T6335] __kmalloc_noprof+0xd2/0x510 [ 155.646352][ T6335] iovec_from_user+0x108/0x140 [ 155.646424][ T6335] __import_iovec+0x88/0x650 [ 155.646464][ T6335] import_iovec+0x86/0xb0 [ 155.646499][ T6335] vfs_readv+0x19a/0x8b0 [ 155.646553][ T6335] ? __pfx_vfs_readv+0x10/0x10 [ 155.646626][ T6335] ? __fget_files+0x20e/0x3c0 [ 155.646683][ T6335] ? do_preadv+0x1a6/0x270 [ 155.646724][ T6335] do_preadv+0x1a6/0x270 [ 155.646769][ T6335] ? __pfx_do_preadv+0x10/0x10 [ 155.646822][ T6335] do_syscall_64+0xcd/0x490 [ 155.646870][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.646902][ T6335] RIP: 0033:0x7fbcac98e929 [ 155.646927][ T6335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.646958][ T6335] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 155.646989][ T6335] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 155.647009][ T6335] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000005 [ 155.647029][ T6335] RBP: 00007fbcaca10b39 R08: 0000000000000400 R09: 0000000000000000 [ 155.647048][ T6335] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 155.647066][ T6335] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 155.647106][ T6335] [ 159.372678][ T6382] vivid-003: ================= START STATUS ================= [ 159.387755][ T6382] vivid-003: Radio HW Seek Mode: Bounded [ 159.393631][ T6382] vivid-003: Radio Programmable HW Seek: false [ 159.400047][ T6382] vivid-003: RDS Rx I/O Mode: Block I/O [ 159.407716][ T6382] vivid-003: Generate RBDS Instead of RDS: false [ 159.414248][ T6382] vivid-003: RDS Reception: true [ 159.467397][ T6382] vivid-003: RDS Program Type: 0 inactive [ 159.492711][ T6382] vivid-003: RDS PS Name: inactive [ 159.570228][ T6382] vivid-003: RDS Radio Text: inactive [ 159.580923][ T6382] vivid-003: RDS Traffic Announcement: false inactive [ 159.590072][ T6382] vivid-003: RDS Traffic Program: false inactive [ 159.598948][ T6382] vivid-003: RDS Music: false inactive [ 159.607833][ T6382] vivid-003: ================== END STATUS ================== [ 163.194232][ T6420] vivid-003: ================= START STATUS ================= [ 163.227565][ T6420] vivid-003: Radio HW Seek Mode: Bounded [ 163.286115][ T6420] vivid-003: Radio Programmable HW Seek: false [ 163.391588][ T6420] vivid-003: RDS Rx I/O Mode: Block I/O [ 163.416373][ T6420] vivid-003: Generate RBDS Instead of RDS: false [ 163.425357][ T6420] vivid-003: RDS Reception: true [ 163.547266][ T6420] vivid-003: RDS Program Type: 0 inactive [ 163.597367][ T6420] vivid-003: RDS PS Name: inactive [ 163.619446][ T6420] vivid-003: RDS Radio Text: inactive [ 163.643829][ T6420] vivid-003: RDS Traffic Announcement: false inactive [ 163.717327][ T6420] vivid-003: RDS Traffic Program: false inactive [ 163.723859][ T6420] vivid-003: RDS Music: false inactive [ 163.766291][ T6420] vivid-003: ================== END STATUS ================== [ 163.864707][ T6427] FAULT_INJECTION: forcing a failure. [ 163.864707][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 163.892366][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.1.104 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 163.892409][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.892428][ T6427] Call Trace: [ 163.892438][ T6427] [ 163.892449][ T6427] dump_stack_lvl+0x16c/0x1f0 [ 163.892501][ T6427] should_fail_ex+0x512/0x640 [ 163.892552][ T6427] should_failslab+0xc2/0x120 [ 163.892581][ T6427] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 163.892626][ T6427] ? skb_clone+0x190/0x3f0 [ 163.892676][ T6427] skb_clone+0x190/0x3f0 [ 163.892724][ T6427] netlink_deliver_tap+0xabd/0xd30 [ 163.892783][ T6427] netlink_unicast+0x5df/0x7f0 [ 163.892827][ T6427] ? __pfx_netlink_unicast+0x10/0x10 [ 163.892871][ T6427] netlink_sendmsg+0x8d1/0xdd0 [ 163.892908][ T6427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.892955][ T6427] ____sys_sendmsg+0xa98/0xc70 [ 163.892990][ T6427] ? copy_msghdr_from_user+0x10a/0x160 [ 163.893035][ T6427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.893078][ T6427] ? __pfx_futex_wake_mark+0x10/0x10 [ 163.893129][ T6427] ___sys_sendmsg+0x134/0x1d0 [ 163.893176][ T6427] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.893221][ T6427] ? __futex_hash.constprop.0+0x1e9/0x440 [ 163.893290][ T6427] ? do_futex+0x122/0x350 [ 163.893354][ T6427] __sys_sendmsg+0x16d/0x220 [ 163.893403][ T6427] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.893450][ T6427] ? __x64_sys_futex+0x1e0/0x4c0 [ 163.893513][ T6427] do_syscall_64+0xcd/0x490 [ 163.893565][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.893615][ T6427] RIP: 0033:0x7efeb358e929 [ 163.893641][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.893671][ T6427] RSP: 002b:00007efeb44ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.893702][ T6427] RAX: ffffffffffffffda RBX: 00007efeb37b5fa0 RCX: 00007efeb358e929 [ 163.893723][ T6427] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000000 [ 163.893744][ T6427] RBP: 00007efeb3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.893763][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.893803][ T6427] R13: 0000000000000000 R14: 00007efeb37b5fa0 R15: 00007fff0b5336f8 [ 163.893844][ T6427] [ 164.459635][ T6430] netlink: zone id is out of range [ 164.478960][ T6430] netlink: del zone limit has 4 unknown bytes [ 164.539363][ T6434] netlink: set zone limit has 8 unknown bytes [ 166.276904][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 166.568164][ T6464] FAULT_INJECTION: forcing a failure. [ 166.568164][ T6464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.582200][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.2.113 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 166.582241][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.582260][ T6464] Call Trace: [ 166.582270][ T6464] [ 166.582282][ T6464] dump_stack_lvl+0x16c/0x1f0 [ 166.582335][ T6464] should_fail_ex+0x512/0x640 [ 166.582388][ T6464] should_fail_alloc_page+0xe7/0x130 [ 166.582422][ T6464] prepare_alloc_pages+0x3c2/0x610 [ 166.582467][ T6464] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 166.582520][ T6464] ? copy_splice_read+0x1a8/0xba0 [ 166.582558][ T6464] ? stack_trace_save+0x8e/0xc0 [ 166.582596][ T6464] ? __pfx_stack_trace_save+0x10/0x10 [ 166.582633][ T6464] ? stack_depot_save_flags+0x28/0xa40 [ 166.582691][ T6464] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.582739][ T6464] ? kasan_save_stack+0x33/0x60 [ 166.582785][ T6464] ? __kasan_kmalloc+0xaa/0xb0 [ 166.582829][ T6464] ? copy_splice_read+0x1a8/0xba0 [ 166.582872][ T6464] ? do_splice_read+0x282/0x370 [ 166.582909][ T6464] ? splice_direct_to_actor+0x2a1/0xa30 [ 166.582948][ T6464] ? do_splice_direct+0x174/0x240 [ 166.582987][ T6464] ? do_sendfile+0xb06/0xe50 [ 166.583028][ T6464] ? __x64_sys_sendfile64+0x1d8/0x220 [ 166.583056][ T6464] ? do_syscall_64+0xcd/0x490 [ 166.583134][ T6464] alloc_pages_bulk_noprof+0x71c/0x1410 [ 166.583197][ T6464] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 166.583256][ T6464] ? trace_kmalloc+0x2b/0xd0 [ 166.583287][ T6464] ? __kmalloc_noprof+0x242/0x510 [ 166.583344][ T6464] copy_splice_read+0x1e1/0xba0 [ 166.583384][ T6464] ? __pfx_pipe_to_null+0x10/0x10 [ 166.583442][ T6464] ? __pfx_copy_splice_read+0x10/0x10 [ 166.583479][ T6464] ? pipe_unlock+0x4a/0x70 [ 166.583527][ T6464] ? __pfx_splice_from_pipe+0x10/0x10 [ 166.583581][ T6464] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 166.583630][ T6464] ? __pfx_copy_splice_read+0x10/0x10 [ 166.583669][ T6464] do_splice_read+0x282/0x370 [ 166.583714][ T6464] splice_direct_to_actor+0x2a1/0xa30 [ 166.583759][ T6464] ? __pfx_direct_splice_actor+0x10/0x10 [ 166.583809][ T6464] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 166.583892][ T6464] do_splice_direct+0x174/0x240 [ 166.583936][ T6464] ? __pfx_do_splice_direct+0x10/0x10 [ 166.583980][ T6464] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 166.584025][ T6464] ? bpf_lsm_file_permission+0x9/0x10 [ 166.584061][ T6464] ? security_file_permission+0x71/0x210 [ 166.584107][ T6464] ? rw_verify_area+0xcf/0x680 [ 166.584154][ T6464] do_sendfile+0xb06/0xe50 [ 166.584217][ T6464] ? __pfx_do_sendfile+0x10/0x10 [ 166.584279][ T6464] ? __pfx___might_resched+0x10/0x10 [ 166.584321][ T6464] ? __x64_sys_futex+0x1e0/0x4c0 [ 166.584359][ T6464] ? __x64_sys_futex+0x1e9/0x4c0 [ 166.584405][ T6464] __x64_sys_sendfile64+0x1d8/0x220 [ 166.584438][ T6464] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 166.584484][ T6464] do_syscall_64+0xcd/0x490 [ 166.584536][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.584569][ T6464] RIP: 0033:0x7faffb18e929 [ 166.584595][ T6464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.584627][ T6464] RSP: 002b:00007faffc076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 166.584658][ T6464] RAX: ffffffffffffffda RBX: 00007faffb3b5fa0 RCX: 00007faffb18e929 [ 166.584679][ T6464] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 166.584697][ T6464] RBP: 00007faffb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 166.584716][ T6464] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 166.584736][ T6464] R13: 0000000000000000 R14: 00007faffb3b5fa0 R15: 00007ffe82ac2658 [ 166.584777][ T6464] [ 166.593374][ T6466] sp0: Synchronizing with TNC [ 167.248391][ T6478] syz.0.117 (6478): /proc/6477/oom_adj is deprecated, please use /proc/6477/oom_score_adj instead. [ 167.279743][ T6478] FAULT_INJECTION: forcing a failure. [ 167.279743][ T6478] name failslab, interval 1, probability 0, space 0, times 0 [ 167.311391][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.0.117 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 167.311435][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.311454][ T6478] Call Trace: [ 167.311465][ T6478] [ 167.311477][ T6478] dump_stack_lvl+0x16c/0x1f0 [ 167.311538][ T6478] should_fail_ex+0x512/0x640 [ 167.311585][ T6478] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 167.311640][ T6478] should_failslab+0xc2/0x120 [ 167.311671][ T6478] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 167.311719][ T6478] ? d_instantiate+0x77/0x90 [ 167.311746][ T6478] ? alloc_empty_file+0x55/0x1e0 [ 167.311786][ T6478] alloc_empty_file+0x55/0x1e0 [ 167.311822][ T6478] alloc_file_pseudo+0x13a/0x230 [ 167.311860][ T6478] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 167.311892][ T6478] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 167.311950][ T6478] create_pipe_files+0x364/0x930 [ 167.312006][ T6478] do_pipe2+0xaf/0x1c0 [ 167.312055][ T6478] ? __pfx_do_pipe2+0x10/0x10 [ 167.312106][ T6478] ? xfd_validate_state+0x61/0x180 [ 167.312147][ T6478] ? __pfx_ksys_write+0x10/0x10 [ 167.312199][ T6478] __x64_sys_pipe+0x33/0x50 [ 167.312247][ T6478] do_syscall_64+0xcd/0x490 [ 167.312299][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.312330][ T6478] RIP: 0033:0x7fbcac98e929 [ 167.312354][ T6478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.312382][ T6478] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 167.312411][ T6478] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 167.312433][ T6478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.312451][ T6478] RBP: 00007fbcaca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 167.312471][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.312490][ T6478] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 167.312538][ T6478] [ 168.153106][ T6493] FAULT_INJECTION: forcing a failure. [ 168.153106][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 168.168071][ T6493] CPU: 0 UID: 0 PID: 6493 Comm: syz.3.120 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 168.168103][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.168118][ T6493] Call Trace: [ 168.168125][ T6493] [ 168.168134][ T6493] dump_stack_lvl+0x16c/0x1f0 [ 168.168175][ T6493] should_fail_ex+0x512/0x640 [ 168.168221][ T6493] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 168.168258][ T6493] should_failslab+0xc2/0x120 [ 168.168279][ T6493] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 168.168311][ T6493] ? __d_lookup+0x25c/0x4a0 [ 168.168354][ T6493] ? __d_alloc+0x31/0xaa0 [ 168.168394][ T6493] __d_alloc+0x31/0xaa0 [ 168.168445][ T6493] d_alloc+0x4a/0x1e0 [ 168.168481][ T6493] __rpc_lookup_create_exclusive+0x119/0x140 [ 168.168510][ T6493] ? __pfx___rpc_lookup_create_exclusive+0x10/0x10 [ 168.168541][ T6493] ? rpc_populate.constprop.0+0x1ae/0x5d0 [ 168.168574][ T6493] rpc_mkpipe_dentry+0xf1/0x400 [ 168.168607][ T6493] rpc_fill_super+0x4b5/0x840 [ 168.168637][ T6493] ? sget_fc+0x808/0xc20 [ 168.168672][ T6493] ? __pfx_rpc_fill_super+0x10/0x10 [ 168.168703][ T6493] get_tree_keyed+0x10e/0x1d0 [ 168.168736][ T6493] vfs_get_tree+0x8e/0x340 [ 168.168770][ T6493] vfs_cmd_create+0xd7/0x2a0 [ 168.168793][ T6493] __do_sys_fsconfig+0x7b8/0xbe0 [ 168.168817][ T6493] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 168.168853][ T6493] do_syscall_64+0xcd/0x490 [ 168.168891][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.168913][ T6493] RIP: 0033:0x7f52d978e929 [ 168.168931][ T6493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.168952][ T6493] RSP: 002b:00007f52d75f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 168.168973][ T6493] RAX: ffffffffffffffda RBX: 00007f52d99b5fa0 RCX: 00007f52d978e929 [ 168.168988][ T6493] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 168.169001][ T6493] RBP: 00007f52d9810b39 R08: 0000000000000000 R09: 0000000000000000 [ 168.169014][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.169028][ T6493] R13: 0000000000000000 R14: 00007f52d99b5fa0 R15: 00007ffd34f1a388 [ 168.169056][ T6493] [ 168.732317][ T6484] FAULT_INJECTION: forcing a failure. [ 168.732317][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 168.791697][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.0.127 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 168.791745][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.791765][ T6484] Call Trace: [ 168.791776][ T6484] [ 168.791789][ T6484] dump_stack_lvl+0x16c/0x1f0 [ 168.791845][ T6484] should_fail_ex+0x512/0x640 [ 168.791892][ T6484] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 168.791946][ T6484] should_failslab+0xc2/0x120 [ 168.791977][ T6484] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 168.792028][ T6484] ? __alloc_skb+0x2b2/0x380 [ 168.792079][ T6484] __alloc_skb+0x2b2/0x380 [ 168.792124][ T6484] ? __pfx___alloc_skb+0x10/0x10 [ 168.792168][ T6484] ? rcu_is_watching+0x12/0xc0 [ 168.792205][ T6484] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 168.792254][ T6484] ? audit_log_start+0x2c5/0x7f0 [ 168.792301][ T6484] audit_log_start+0x2ea/0x7f0 [ 168.792346][ T6484] ? __pfx_audit_log_start+0x10/0x10 [ 168.792391][ T6484] ? rcu_is_watching+0x12/0xc0 [ 168.792432][ T6484] ? __local_bh_enable_ip+0xa4/0x120 [ 168.792477][ T6484] ? arch_do_signal_or_restart+0x211/0x790 [ 168.792526][ T6484] audit_seccomp+0x60/0x1f0 [ 168.792580][ T6484] __secure_computing+0x2bf/0x320 [ 168.792620][ T6484] syscall_trace_enter+0x89/0x260 [ 168.792673][ T6484] do_syscall_64+0x347/0x490 [ 168.792724][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.792775][ T6484] RIP: 0033:0x7fbcac98e929 [ 168.792801][ T6484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.792832][ T6484] RSP: 002b:00007fbcad7a89f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 168.792864][ T6484] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fbcac98e929 [ 168.792885][ T6484] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 000000000000000b [ 168.792904][ T6484] RBP: 00007fbcad7a9040 R08: 00007fbcad7aa000 R09: 000000000000000b [ 168.792925][ T6484] R10: 0000000000007d02 R11: 0000000000000246 R12: 0000000000000000 [ 168.792944][ T6484] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 168.792986][ T6484] [ 168.793026][ T6484] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 169.071058][ T6484] audit: out of memory in audit_log_start [ 173.230887][ T6539] vivid-003: ================= START STATUS ================= [ 173.238969][ T6539] vivid-003: Radio HW Seek Mode: Bounded [ 173.244829][ T6539] vivid-003: Radio Programmable HW Seek: false [ 173.252112][ T6539] vivid-003: RDS Rx I/O Mode: Block I/O [ 173.258191][ T6539] vivid-003: Generate RBDS Instead of RDS: false [ 173.264783][ T6539] vivid-003: RDS Reception: true [ 173.273581][ T6539] vivid-003: RDS Program Type: 0 inactive [ 173.280011][ T6539] vivid-003: RDS PS Name: inactive [ 173.303953][ T6539] vivid-003: RDS Radio Text: inactive [ 173.320642][ T6539] vivid-003: RDS Traffic Announcement: false inactive [ 173.328754][ T6539] vivid-003: RDS Traffic Program: false inactive [ 173.359027][ T6539] vivid-003: RDS Music: false inactive [ 173.409993][ T6539] vivid-003: ================== END STATUS ================== [ 173.624835][ T6547] FAULT_INJECTION: forcing a failure. [ 173.624835][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 173.827441][ T6547] CPU: 1 UID: 0 PID: 6547 Comm: syz.0.133 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 173.827489][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.827508][ T6547] Call Trace: [ 173.827519][ T6547] [ 173.827531][ T6547] dump_stack_lvl+0x16c/0x1f0 [ 173.827585][ T6547] should_fail_ex+0x512/0x640 [ 173.827632][ T6547] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 173.827706][ T6547] should_failslab+0xc2/0x120 [ 173.827738][ T6547] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 173.827790][ T6547] ? do_raw_spin_lock+0x12c/0x2b0 [ 173.827843][ T6547] ? ptlock_alloc+0x1f/0x70 [ 173.827893][ T6547] ptlock_alloc+0x1f/0x70 [ 173.827935][ T6547] pte_alloc_one+0x82/0x3a0 [ 173.827966][ T6547] __do_fault+0x320/0x490 [ 173.828017][ T6547] ? __pfx_filemap_map_pages+0x10/0x10 [ 173.828071][ T6547] __handle_mm_fault+0x374c/0x5490 [ 173.828129][ T6547] ? __pfx___handle_mm_fault+0x10/0x10 [ 173.828170][ T6547] ? __pfx_mt_find+0x10/0x10 [ 173.828243][ T6547] ? find_vma+0xbf/0x140 [ 173.828275][ T6547] ? __pfx_find_vma+0x10/0x10 [ 173.828321][ T6547] handle_mm_fault+0x589/0xd10 [ 173.828366][ T6547] ? __pkru_allows_pkey+0x41/0xb0 [ 173.828418][ T6547] do_user_addr_fault+0x7a6/0x1370 [ 173.828471][ T6547] ? rcu_is_watching+0x12/0xc0 [ 173.828510][ T6547] exc_page_fault+0x5c/0xb0 [ 173.828562][ T6547] asm_exc_page_fault+0x26/0x30 [ 173.828594][ T6547] RIP: 0010:__put_user_4+0xd/0x20 [ 173.828643][ T6547] Code: 66 89 01 31 c9 0f 01 ca e9 d0 5a 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 173.828673][ T6547] RSP: 0018:ffffc900023bfd10 EFLAGS: 00050246 [ 173.828699][ T6547] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 173.828717][ T6547] RDX: 0000000000080000 RSI: ffffffff855008fc RDI: ffffffff8c157060 [ 173.828732][ T6547] RBP: 0000000000000000 R08: 3b8f596bbd88045d R09: 0000000000000000 [ 173.828747][ T6547] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880326bc000 [ 173.828761][ T6547] R13: 0000000080045439 R14: fffffffffffffdfd R15: 0000000100000003 [ 173.828785][ T6547] ? pty_unix98_ioctl+0xfc/0x2d0 [ 173.828820][ T6547] pty_unix98_ioctl+0x10e/0x2d0 [ 173.828849][ T6547] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 173.828880][ T6547] tty_ioctl+0x65e/0x1640 [ 173.828918][ T6547] ? __pfx_tty_ioctl+0x10/0x10 [ 173.828963][ T6547] ? find_held_lock+0x2b/0x80 [ 173.828987][ T6547] ? hook_file_ioctl_common+0x145/0x410 [ 173.829019][ T6547] ? __fget_files+0x20e/0x3c0 [ 173.829057][ T6547] ? __pfx_tty_ioctl+0x10/0x10 [ 173.829096][ T6547] __x64_sys_ioctl+0x18e/0x210 [ 173.829126][ T6547] do_syscall_64+0xcd/0x490 [ 173.829164][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.829187][ T6547] RIP: 0033:0x7fbcac98e929 [ 173.829205][ T6547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.829227][ T6547] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.829259][ T6547] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 173.829274][ T6547] RDX: 0000000000000000 RSI: 0000000080045439 RDI: 0000000000000006 [ 173.829287][ T6547] RBP: 00007fbcaca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 173.829307][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.829321][ T6547] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 173.829349][ T6547] [ 176.036014][ T6578] netlink: 252 bytes leftover after parsing attributes in process `syz.0.139'. [ 176.051336][ T6578] netlink: 252 bytes leftover after parsing attributes in process `syz.0.139'. [ 176.738970][ T6585] netlink: 186 bytes leftover after parsing attributes in process `syz.2.141'. [ 176.925180][ T6590] FAULT_INJECTION: forcing a failure. [ 176.925180][ T6590] name failslab, interval 1, probability 0, space 0, times 0 [ 176.997366][ T6590] CPU: 0 UID: 0 PID: 6590 Comm: syz.0.143 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 176.997410][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.997428][ T6590] Call Trace: [ 176.997438][ T6590] [ 176.997450][ T6590] dump_stack_lvl+0x16c/0x1f0 [ 176.997505][ T6590] should_fail_ex+0x512/0x640 [ 176.997553][ T6590] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 176.997602][ T6590] should_failslab+0xc2/0x120 [ 176.997633][ T6590] __kmalloc_cache_noprof+0x6a/0x3e0 [ 176.997678][ T6590] ? snd_midi_event_new+0x6f/0x210 [ 176.997737][ T6590] snd_midi_event_new+0x6f/0x210 [ 176.997790][ T6590] snd_virmidi_output_open+0x106/0x670 [ 176.997827][ T6590] open_substream+0x47b/0x9b0 [ 176.997870][ T6590] rawmidi_open_priv+0x543/0x6e0 [ 176.997920][ T6590] snd_rawmidi_open+0x4cc/0xbf0 [ 176.997971][ T6590] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 176.998017][ T6590] ? __pfx_default_wake_function+0x10/0x10 [ 176.998078][ T6590] ? kobject_get_unless_zero+0x156/0x1e0 [ 176.998137][ T6590] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 176.998177][ T6590] snd_open+0x1fe/0x450 [ 176.998230][ T6590] ? __pfx_snd_open+0x10/0x10 [ 176.998279][ T6590] chrdev_open+0x234/0x6a0 [ 176.998329][ T6590] ? __pfx_apparmor_file_open+0x10/0x10 [ 176.998372][ T6590] ? __pfx_chrdev_open+0x10/0x10 [ 176.998428][ T6590] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 176.998490][ T6590] do_dentry_open+0x741/0x1c10 [ 176.998536][ T6590] ? __pfx_chrdev_open+0x10/0x10 [ 176.998591][ T6590] vfs_open+0x82/0x3f0 [ 176.998629][ T6590] path_openat+0x1de4/0x2cb0 [ 176.998687][ T6590] ? __pfx_path_openat+0x10/0x10 [ 176.998734][ T6590] ? __lock_acquire+0xb8a/0x1c90 [ 176.998781][ T6590] do_filp_open+0x20b/0x470 [ 176.998823][ T6590] ? __pfx_do_filp_open+0x10/0x10 [ 176.998913][ T6590] ? alloc_fd+0x471/0x7d0 [ 176.998968][ T6590] do_sys_openat2+0x11b/0x1d0 [ 176.999003][ T6590] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.999055][ T6590] __x64_sys_openat+0x174/0x210 [ 176.999100][ T6590] ? __pfx___x64_sys_openat+0x10/0x10 [ 176.999156][ T6590] do_syscall_64+0xcd/0x490 [ 176.999210][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.999243][ T6590] RIP: 0033:0x7fbcac98e929 [ 176.999269][ T6590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.999311][ T6590] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.999340][ T6590] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 176.999360][ T6590] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 176.999378][ T6590] RBP: 00007fbcaca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 176.999396][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.999414][ T6590] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 176.999451][ T6590] [ 177.370848][ T6597] vivid-003: ================= START STATUS ================= [ 177.379296][ T6597] vivid-003: Radio HW Seek Mode: Bounded [ 177.385027][ T6597] vivid-003: Radio Programmable HW Seek: false [ 177.391340][ T6597] vivid-003: RDS Rx I/O Mode: Block I/O [ 177.396980][ T6597] vivid-003: Generate RBDS Instead of RDS: false [ 177.403560][ T6597] vivid-003: RDS Reception: true [ 177.408670][ T6597] vivid-003: RDS Program Type: 0 inactive [ 177.414485][ T6597] vivid-003: RDS PS Name: inactive [ 177.419817][ T6597] vivid-003: RDS Radio Text: inactive [ 177.425397][ T6597] vivid-003: RDS Traffic Announcement: false inactive [ 177.432300][ T6597] vivid-003: RDS Traffic Program: false inactive [ 177.438750][ T6597] vivid-003: RDS Music: false inactive [ 177.444305][ T6597] vivid-003: ================== END STATUS ================== [ 177.991007][ T6613] vivid-003: ================= START STATUS ================= [ 177.999651][ T6613] vivid-003: Radio HW Seek Mode: Bounded [ 178.005395][ T6613] vivid-003: Radio Programmable HW Seek: false [ 178.011700][ T6613] vivid-003: RDS Rx I/O Mode: Block I/O [ 178.017389][ T6613] vivid-003: Generate RBDS Instead of RDS: false [ 178.023811][ T6613] vivid-003: RDS Reception: true [ 178.031609][ T6613] vivid-003: RDS Program Type: 0 inactive [ 178.037505][ T6613] vivid-003: RDS PS Name: inactive [ 178.042968][ T6613] vivid-003: RDS Radio Text: inactive [ 178.048687][ T6613] vivid-003: RDS Traffic Announcement: false inactive [ 178.070170][ T6613] vivid-003: RDS Traffic Program: false inactive [ 178.190411][ T6613] vivid-003: RDS Music: false inactive [ 178.198879][ T6613] vivid-003: ================== END STATUS ================== [ 181.932132][ T6664] vivid-003: ================= START STATUS ================= [ 181.977415][ T6660] netlink: 338 bytes leftover after parsing attributes in process `syz.3.154'. [ 181.988604][ T6664] vivid-003: Radio HW Seek Mode: Bounded [ 181.994296][ T6664] vivid-003: Radio Programmable HW Seek: false [ 182.042130][ T6663] netlink: 338 bytes leftover after parsing attributes in process `syz.3.154'. [ 182.061786][ T6664] vivid-003: RDS Rx I/O Mode: Block I/O [ 182.093236][ T6664] vivid-003: Generate RBDS Instead of RDS: false [ 182.118038][ T6663] netlink: 338 bytes leftover after parsing attributes in process `syz.3.154'. [ 182.140846][ T6663] netlink: 338 bytes leftover after parsing attributes in process `syz.3.154'. [ 182.150844][ T6664] vivid-003: RDS Reception: true [ 182.155837][ T6664] vivid-003: RDS Program Type: 0 inactive [ 182.195252][ T6664] vivid-003: RDS PS Name: inactive [ 182.201096][ T6663] netlink: 338 bytes leftover after parsing attributes in process `syz.3.154'. [ 182.201382][ T6664] vivid-003: RDS Radio Text: inactive [ 182.223538][ T6664] vivid-003: RDS Traffic Announcement: false inactive [ 182.231881][ T6664] vivid-003: RDS Traffic Program: false inactive [ 182.256294][ T6663] netlink: 338 bytes leftover after parsing attributes in process `syz.3.154'. [ 182.265325][ T6664] vivid-003: RDS Music: false inactive [ 182.265392][ T6664] vivid-003: ================== END STATUS ================== [ 182.283189][ T6663] netlink: 338 bytes leftover after parsing attributes in process `syz.3.154'. [ 182.299965][ T6663] netlink: 338 bytes leftover after parsing attributes in process `syz.3.154'. [ 183.474366][ T6679] FAULT_INJECTION: forcing a failure. [ 183.474366][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 183.487425][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.2.158 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 183.487467][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.487488][ T6679] Call Trace: [ 183.487499][ T6679] [ 183.487515][ T6679] dump_stack_lvl+0x16c/0x1f0 [ 183.487571][ T6679] should_fail_ex+0x512/0x640 [ 183.487619][ T6679] ? __kmalloc_noprof+0xbf/0x510 [ 183.487670][ T6679] ? copy_splice_read+0x1a8/0xba0 [ 183.487710][ T6679] should_failslab+0xc2/0x120 [ 183.487741][ T6679] __kmalloc_noprof+0xd2/0x510 [ 183.487802][ T6679] copy_splice_read+0x1a8/0xba0 [ 183.487844][ T6679] ? __pfx_pipe_to_null+0x10/0x10 [ 183.487905][ T6679] ? __pfx_copy_splice_read+0x10/0x10 [ 183.487944][ T6679] ? pipe_unlock+0x4a/0x70 [ 183.487994][ T6679] ? __pfx_splice_from_pipe+0x10/0x10 [ 183.488050][ T6679] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 183.488101][ T6679] ? __pfx_copy_splice_read+0x10/0x10 [ 183.488141][ T6679] do_splice_read+0x282/0x370 [ 183.488186][ T6679] splice_direct_to_actor+0x2a1/0xa30 [ 183.488231][ T6679] ? __pfx_direct_splice_actor+0x10/0x10 [ 183.488284][ T6679] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 183.488353][ T6679] do_splice_direct+0x174/0x240 [ 183.488402][ T6679] ? __pfx_do_splice_direct+0x10/0x10 [ 183.488446][ T6679] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 183.488489][ T6679] ? bpf_lsm_file_permission+0x9/0x10 [ 183.488523][ T6679] ? security_file_permission+0x71/0x210 [ 183.488567][ T6679] ? rw_verify_area+0xcf/0x680 [ 183.488611][ T6679] do_sendfile+0xb06/0xe50 [ 183.488662][ T6679] ? __pfx_do_sendfile+0x10/0x10 [ 183.488713][ T6679] ? __x64_sys_futex+0x1e0/0x4c0 [ 183.488752][ T6679] ? __x64_sys_futex+0x1e9/0x4c0 [ 183.488795][ T6679] __x64_sys_sendfile64+0x1d8/0x220 [ 183.488828][ T6679] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 183.488872][ T6679] do_syscall_64+0xcd/0x490 [ 183.488923][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.488956][ T6679] RIP: 0033:0x7faffb18e929 [ 183.488981][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.489012][ T6679] RSP: 002b:00007faffc076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 183.489044][ T6679] RAX: ffffffffffffffda RBX: 00007faffb3b5fa0 RCX: 00007faffb18e929 [ 183.489065][ T6679] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 183.489084][ T6679] RBP: 00007faffb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 183.489103][ T6679] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 183.489123][ T6679] R13: 0000000000000000 R14: 00007faffb3b5fa0 R15: 00007ffe82ac2658 [ 183.489164][ T6679] [ 183.949553][ T6684] FAULT_INJECTION: forcing a failure. [ 183.949553][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 184.010310][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.1.160 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 184.010351][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.010375][ T6684] Call Trace: [ 184.010385][ T6684] [ 184.010398][ T6684] dump_stack_lvl+0x16c/0x1f0 [ 184.010450][ T6684] should_fail_ex+0x512/0x640 [ 184.010495][ T6684] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 184.010549][ T6684] should_failslab+0xc2/0x120 [ 184.010579][ T6684] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 184.010629][ T6684] ? __d_alloc+0x31/0xaa0 [ 184.010681][ T6684] __d_alloc+0x31/0xaa0 [ 184.010734][ T6684] d_alloc_pseudo+0x1c/0xc0 [ 184.010769][ T6684] alloc_file_pseudo+0xcf/0x230 [ 184.010806][ T6684] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 184.010841][ T6684] ? security_inode_init_security_anon+0x79/0x240 [ 184.010887][ T6684] secretmem_file_create.constprop.0+0x89/0x270 [ 184.010923][ T6684] __x64_sys_memfd_secret+0xc5/0x1a0 [ 184.010954][ T6684] do_syscall_64+0xcd/0x490 [ 184.011004][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.011036][ T6684] RIP: 0033:0x7efeb358e929 [ 184.011060][ T6684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.011090][ T6684] RSP: 002b:00007efeb44ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 184.011119][ T6684] RAX: ffffffffffffffda RBX: 00007efeb37b5fa0 RCX: 00007efeb358e929 [ 184.011139][ T6684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.011157][ T6684] RBP: 00007efeb3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.011176][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.011194][ T6684] R13: 0000000000000000 R14: 00007efeb37b5fa0 R15: 00007fff0b5336f8 [ 184.011234][ T6684] [ 184.030708][ T6688] vivid-003: ================= START STATUS ================= [ 184.215513][ T6688] vivid-003: Radio HW Seek Mode: Bounded [ 184.221348][ T6688] vivid-003: Radio Programmable HW Seek: false [ 184.228826][ T6688] vivid-003: RDS Rx I/O Mode: Block I/O [ 184.234525][ T6688] vivid-003: Generate RBDS Instead of RDS: false [ 184.246920][ T6688] vivid-003: RDS Reception: true [ 184.252925][ T6688] vivid-003: RDS Program Type: 0 inactive [ 184.297333][ T6688] vivid-003: RDS PS Name: inactive [ 184.302675][ T6688] vivid-003: RDS Radio Text: inactive [ 184.324360][ T6688] vivid-003: RDS Traffic Announcement: false inactive [ 184.382482][ T6688] vivid-003: RDS Traffic Program: false inactive [ 184.394639][ T6688] vivid-003: RDS Music: false inactive [ 184.406682][ T6688] vivid-003: ================== END STATUS ================== [ 184.484495][ T6699] vivid-003: ================= START STATUS ================= [ 184.525202][ T6699] vivid-003: Radio HW Seek Mode: Bounded [ 184.624030][ T6699] vivid-003: Radio Programmable HW Seek: false [ 184.630380][ T6699] vivid-003: RDS Rx I/O Mode: Block I/O [ 184.636136][ T6699] vivid-003: Generate RBDS Instead of RDS: false [ 184.645776][ T6699] vivid-003: RDS Reception: true [ 184.662800][ T6699] vivid-003: RDS Program Type: 0 inactive [ 184.696980][ T6699] vivid-003: RDS PS Name: inactive [ 184.711180][ T6699] vivid-003: RDS Radio Text: inactive [ 184.716784][ T6699] vivid-003: RDS Traffic Announcement: false inactive [ 184.725200][ T6699] vivid-003: RDS Traffic Program: false inactive [ 184.734660][ T6699] vivid-003: RDS Music: false inactive [ 184.744815][ T6699] vivid-003: ================== END STATUS ================== [ 186.512146][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'. [ 186.650002][ T6720] vivid-003: ================= START STATUS ================= [ 186.662386][ T6720] vivid-003: Radio HW Seek Mode: Bounded [ 186.674369][ T6720] vivid-003: Radio Programmable HW Seek: false [ 186.686725][ T6720] vivid-003: RDS Rx I/O Mode: Block I/O [ 186.699245][ T6720] vivid-003: Generate RBDS Instead of RDS: false [ 186.711656][ T6720] vivid-003: RDS Reception: true [ 186.716838][ T6720] vivid-003: RDS Program Type: 0 inactive [ 186.726172][ T6720] vivid-003: RDS PS Name: inactive [ 186.731630][ T6720] vivid-003: RDS Radio Text: inactive [ 186.742579][ T6720] vivid-003: RDS Traffic Announcement: false inactive [ 186.761234][ T6720] vivid-003: RDS Traffic Program: false inactive [ 186.807587][ T6720] vivid-003: RDS Music: false inactive [ 186.807625][ T6720] vivid-003: ================== END STATUS ================== [ 187.049107][ T6728] binder: 6727:6728 ioctl 400c620e 200000000080 returned -22 [ 187.351560][ T6732] FAULT_INJECTION: forcing a failure. [ 187.351560][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 187.365422][ T6732] CPU: 1 UID: 0 PID: 6732 Comm: syz.2.172 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 187.365453][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.365471][ T6732] Call Trace: [ 187.365479][ T6732] [ 187.365488][ T6732] dump_stack_lvl+0x16c/0x1f0 [ 187.365527][ T6732] should_fail_ex+0x512/0x640 [ 187.365562][ T6732] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 187.365607][ T6732] should_failslab+0xc2/0x120 [ 187.365642][ T6732] __kmalloc_cache_noprof+0x6a/0x3e0 [ 187.365687][ T6732] ? register_netdevice+0x4eb/0x2270 [ 187.365737][ T6732] register_netdevice+0x4eb/0x2270 [ 187.365781][ T6732] ? __pfx_register_netdevice+0x10/0x10 [ 187.365822][ T6732] ? rcu_is_watching+0x12/0xc0 [ 187.365852][ T6732] ? trace_kmalloc+0x2b/0xd0 [ 187.365874][ T6732] ? __kmalloc_noprof+0x242/0x510 [ 187.365914][ T6732] register_netdev+0x34/0x50 [ 187.365935][ T6732] mkiss_open+0x4cd/0x9a0 [ 187.365976][ T6732] ? __pfx_mkiss_open+0x10/0x10 [ 187.366012][ T6732] tty_ldisc_open+0x9c/0x120 [ 187.366050][ T6732] tty_set_ldisc+0x32b/0x780 [ 187.366093][ T6732] tty_ioctl+0xc2e/0x1640 [ 187.366132][ T6732] ? __pfx_tty_ioctl+0x10/0x10 [ 187.366177][ T6732] ? find_held_lock+0x2b/0x80 [ 187.366201][ T6732] ? hook_file_ioctl_common+0x145/0x410 [ 187.366233][ T6732] ? __fget_files+0x20e/0x3c0 [ 187.366269][ T6732] ? __pfx_tty_ioctl+0x10/0x10 [ 187.366308][ T6732] __x64_sys_ioctl+0x18e/0x210 [ 187.366350][ T6732] do_syscall_64+0xcd/0x490 [ 187.366388][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.366412][ T6732] RIP: 0033:0x7faffb18e929 [ 187.366431][ T6732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.366455][ T6732] RSP: 002b:00007faffc076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.366477][ T6732] RAX: ffffffffffffffda RBX: 00007faffb3b5fa0 RCX: 00007faffb18e929 [ 187.366492][ T6732] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000005 [ 187.366510][ T6732] RBP: 00007faffb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.366524][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.366538][ T6732] R13: 0000000000000000 R14: 00007faffb3b5fa0 R15: 00007ffe82ac2658 [ 187.366571][ T6732] [ 187.591884][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.014697][ T6736] vivid-003: ================= START STATUS ================= [ 188.023580][ T6736] vivid-003: Radio HW Seek Mode: Bounded [ 188.033259][ T6740] input: f¬ as /devices/virtual/input/input7 [ 188.056185][ T6736] vivid-003: Radio Programmable HW Seek: false [ 188.073601][ T6736] vivid-003: RDS Rx I/O Mode: Block I/O [ 188.092146][ T6736] vivid-003: Generate RBDS Instead of RDS: false [ 188.137475][ T6736] vivid-003: RDS Reception: true [ 188.142566][ T6736] vivid-003: RDS Program Type: 0 inactive [ 188.160267][ T6736] vivid-003: RDS PS Name: inactive [ 188.200704][ T6736] vivid-003: RDS Radio Text: inactive [ 188.206240][ T6736] vivid-003: RDS Traffic Announcement: false inactive [ 188.245013][ T6736] vivid-003: RDS Traffic Program: false inactive [ 188.280150][ T6736] vivid-003: RDS Music: false inactive [ 188.292986][ T6736] vivid-003: ================== END STATUS ================== [ 188.303219][ T6745] vivid-003: ================= START STATUS ================= [ 188.339299][ T6745] vivid-003: Radio HW Seek Mode: Bounded [ 188.351604][ T6745] vivid-003: Radio Programmable HW Seek: false [ 188.381697][ T6745] vivid-003: RDS Rx I/O Mode: Block I/O [ 188.399592][ T6745] vivid-003: Generate RBDS Instead of RDS: false [ 188.406054][ T6745] vivid-003: RDS Reception: true [ 188.411360][ T6745] vivid-003: RDS Program Type: 0 inactive [ 188.417323][ T6745] vivid-003: RDS PS Name: inactive [ 188.422621][ T6745] vivid-003: RDS Radio Text: inactive [ 188.428316][ T6745] vivid-003: RDS Traffic Announcement: false inactive [ 188.435357][ T6745] vivid-003: RDS Traffic Program: false inactive [ 188.442432][ T6745] vivid-003: RDS Music: false inactive [ 188.448187][ T6745] vivid-003: ================== END STATUS ================== [ 193.013497][ T6785] vivid-003: ================= START STATUS ================= [ 193.057310][ T6785] vivid-003: Radio HW Seek Mode: Bounded [ 193.068623][ T6785] vivid-003: Radio Programmable HW Seek: false [ 193.074978][ T6785] vivid-003: RDS Rx I/O Mode: Block I/O [ 193.095780][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 193.114243][ T6785] vivid-003: Generate RBDS Instead of RDS: false [ 193.121881][ T6785] vivid-003: RDS Reception: true [ 193.134308][ T6789] netlink: 25 bytes leftover after parsing attributes in process `syz.1.185'. [ 193.141289][ T6785] vivid-003: RDS Program Type: 0 inactive [ 193.167864][ T6785] vivid-003: RDS PS Name: inactive [ 193.203301][ T6785] vivid-003: RDS Radio Text: inactive [ 193.211396][ T6785] vivid-003: RDS Traffic Announcement: false inactive [ 193.221680][ T6785] vivid-003: RDS Traffic Program: false inactive [ 193.229838][ T6785] vivid-003: RDS Music: false inactive [ 193.278226][ T6785] vivid-003: ================== END STATUS ================== [ 193.745265][ T6802] vivid-003: ================= START STATUS ================= [ 193.875472][ T6802] vivid-003: Radio HW Seek Mode: Bounded [ 193.893577][ T6802] vivid-003: Radio Programmable HW Seek: false [ 193.958017][ T6802] vivid-003: RDS Rx I/O Mode: Block I/O [ 193.963811][ T6802] vivid-003: Generate RBDS Instead of RDS: false [ 194.092851][ T6802] vivid-003: RDS Reception: true [ 194.117545][ T6802] vivid-003: RDS Program Type: 0 inactive [ 194.123339][ T6802] vivid-003: RDS PS Name: inactive [ 194.147209][ T6802] vivid-003: RDS Radio Text: inactive [ 194.156779][ T6802] vivid-003: RDS Traffic Announcement: false inactive [ 194.164652][ T6802] vivid-003: RDS Traffic Program: false inactive [ 194.173288][ T6802] vivid-003: RDS Music: false inactive [ 194.185518][ T6802] vivid-003: ================== END STATUS ================== [ 196.745733][ T6820] FAULT_INJECTION: forcing a failure. [ 196.745733][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 196.763724][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.0.192 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 196.763767][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.763786][ T6820] Call Trace: [ 196.763798][ T6820] [ 196.763810][ T6820] dump_stack_lvl+0x16c/0x1f0 [ 196.763863][ T6820] should_fail_ex+0x512/0x640 [ 196.763909][ T6820] ? __kmalloc_noprof+0xbf/0x510 [ 196.763960][ T6820] ? copy_splice_read+0x1a8/0xba0 [ 196.763999][ T6820] should_failslab+0xc2/0x120 [ 196.764029][ T6820] __kmalloc_noprof+0xd2/0x510 [ 196.764087][ T6820] copy_splice_read+0x1a8/0xba0 [ 196.764129][ T6820] ? __pfx_pipe_to_null+0x10/0x10 [ 196.764210][ T6820] ? __pfx_copy_splice_read+0x10/0x10 [ 196.764249][ T6820] ? pipe_unlock+0x4a/0x70 [ 196.764298][ T6820] ? __pfx_splice_from_pipe+0x10/0x10 [ 196.764352][ T6820] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 196.764402][ T6820] ? __pfx_copy_splice_read+0x10/0x10 [ 196.764443][ T6820] do_splice_read+0x282/0x370 [ 196.764489][ T6820] splice_direct_to_actor+0x2a1/0xa30 [ 196.764536][ T6820] ? __pfx_direct_splice_actor+0x10/0x10 [ 196.764589][ T6820] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 196.764645][ T6820] do_splice_direct+0x174/0x240 [ 196.764697][ T6820] ? __pfx_do_splice_direct+0x10/0x10 [ 196.764742][ T6820] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 196.764787][ T6820] ? bpf_lsm_file_permission+0x9/0x10 [ 196.764823][ T6820] ? security_file_permission+0x71/0x210 [ 196.764869][ T6820] ? rw_verify_area+0xcf/0x680 [ 196.764916][ T6820] do_sendfile+0xb06/0xe50 [ 196.764969][ T6820] ? __pfx_do_sendfile+0x10/0x10 [ 196.765023][ T6820] ? __x64_sys_futex+0x1e0/0x4c0 [ 196.765063][ T6820] ? __x64_sys_futex+0x1e9/0x4c0 [ 196.765109][ T6820] __x64_sys_sendfile64+0x1d8/0x220 [ 196.765141][ T6820] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 196.765185][ T6820] do_syscall_64+0xcd/0x490 [ 196.765240][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.765273][ T6820] RIP: 0033:0x7fbcac98e929 [ 196.765300][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.765333][ T6820] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 196.765375][ T6820] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 196.765397][ T6820] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 196.765415][ T6820] RBP: 00007fbcaca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 196.765435][ T6820] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 196.765455][ T6820] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 196.765496][ T6820] [ 202.175569][ T6878] FAULT_INJECTION: forcing a failure. [ 202.175569][ T6878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.259957][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.2.205 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 202.259993][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.260006][ T6878] Call Trace: [ 202.260014][ T6878] [ 202.260022][ T6878] dump_stack_lvl+0x16c/0x1f0 [ 202.260061][ T6878] should_fail_ex+0x512/0x640 [ 202.260098][ T6878] should_fail_alloc_page+0xe7/0x130 [ 202.260123][ T6878] prepare_alloc_pages+0x3c2/0x610 [ 202.260154][ T6878] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 202.260193][ T6878] ? copy_splice_read+0x1a8/0xba0 [ 202.260220][ T6878] ? stack_trace_save+0x8e/0xc0 [ 202.260259][ T6878] ? __pfx_stack_trace_save+0x10/0x10 [ 202.260286][ T6878] ? stack_depot_save_flags+0x28/0xa40 [ 202.260328][ T6878] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.260363][ T6878] ? kasan_save_stack+0x33/0x60 [ 202.260396][ T6878] ? __kasan_kmalloc+0xaa/0xb0 [ 202.260428][ T6878] ? copy_splice_read+0x1a8/0xba0 [ 202.260454][ T6878] ? do_splice_read+0x282/0x370 [ 202.260486][ T6878] ? splice_direct_to_actor+0x2a1/0xa30 [ 202.260514][ T6878] ? do_splice_direct+0x174/0x240 [ 202.260541][ T6878] ? do_sendfile+0xb06/0xe50 [ 202.260569][ T6878] ? __x64_sys_sendfile64+0x1d8/0x220 [ 202.260589][ T6878] ? do_syscall_64+0xcd/0x490 [ 202.260643][ T6878] alloc_pages_bulk_noprof+0x71c/0x1410 [ 202.260688][ T6878] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 202.260734][ T6878] ? trace_kmalloc+0x2b/0xd0 [ 202.260764][ T6878] ? __kmalloc_noprof+0x242/0x510 [ 202.260820][ T6878] copy_splice_read+0x1e1/0xba0 [ 202.260861][ T6878] ? __pfx_pipe_to_null+0x10/0x10 [ 202.260918][ T6878] ? __pfx_copy_splice_read+0x10/0x10 [ 202.260957][ T6878] ? pipe_unlock+0x4a/0x70 [ 202.261006][ T6878] ? __pfx_splice_from_pipe+0x10/0x10 [ 202.261060][ T6878] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 202.261109][ T6878] ? __pfx_copy_splice_read+0x10/0x10 [ 202.261149][ T6878] do_splice_read+0x282/0x370 [ 202.261194][ T6878] splice_direct_to_actor+0x2a1/0xa30 [ 202.261245][ T6878] ? __pfx_direct_splice_actor+0x10/0x10 [ 202.261297][ T6878] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 202.261357][ T6878] do_splice_direct+0x174/0x240 [ 202.261399][ T6878] ? __pfx_do_splice_direct+0x10/0x10 [ 202.261443][ T6878] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 202.261485][ T6878] ? bpf_lsm_file_permission+0x9/0x10 [ 202.261518][ T6878] ? security_file_permission+0x71/0x210 [ 202.261561][ T6878] ? rw_verify_area+0xcf/0x680 [ 202.261604][ T6878] do_sendfile+0xb06/0xe50 [ 202.261652][ T6878] ? __pfx_do_sendfile+0x10/0x10 [ 202.261695][ T6878] ? __pfx___schedule+0x10/0x10 [ 202.261735][ T6878] ? irqentry_exit+0x3b/0x90 [ 202.261793][ T6878] __x64_sys_sendfile64+0x1d8/0x220 [ 202.261826][ T6878] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 202.261871][ T6878] do_syscall_64+0xcd/0x490 [ 202.261923][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.261955][ T6878] RIP: 0033:0x7faffb18e929 [ 202.261981][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.262013][ T6878] RSP: 002b:00007faffc076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 202.262042][ T6878] RAX: ffffffffffffffda RBX: 00007faffb3b5fa0 RCX: 00007faffb18e929 [ 202.262082][ T6878] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 202.262101][ T6878] RBP: 00007faffb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 202.262122][ T6878] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 202.262143][ T6878] R13: 0000000000000000 R14: 00007faffb3b5fa0 R15: 00007ffe82ac2658 [ 202.262185][ T6878] [ 202.616446][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.524311][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.531000][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.226384][ T6917] syz.3.213 (6917): attempted to duplicate a private mapping with mremap. This is not supported. [ 207.102011][ T6931] FAULT_INJECTION: forcing a failure. [ 207.102011][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 207.115893][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.2.217 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 207.115942][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.115963][ T6931] Call Trace: [ 207.115990][ T6931] [ 207.116003][ T6931] dump_stack_lvl+0x16c/0x1f0 [ 207.116060][ T6931] should_fail_ex+0x512/0x640 [ 207.116106][ T6931] ? __kmalloc_noprof+0xbf/0x510 [ 207.116158][ T6931] ? copy_splice_read+0x1a8/0xba0 [ 207.116195][ T6931] should_failslab+0xc2/0x120 [ 207.116225][ T6931] __kmalloc_noprof+0xd2/0x510 [ 207.116282][ T6931] copy_splice_read+0x1a8/0xba0 [ 207.116324][ T6931] ? __pfx_pipe_to_null+0x10/0x10 [ 207.116381][ T6931] ? __pfx_copy_splice_read+0x10/0x10 [ 207.116419][ T6931] ? pipe_unlock+0x4a/0x70 [ 207.116467][ T6931] ? __pfx_splice_from_pipe+0x10/0x10 [ 207.116524][ T6931] ? __pfx_copy_splice_read+0x10/0x10 [ 207.116562][ T6931] do_splice_read+0x282/0x370 [ 207.116606][ T6931] splice_direct_to_actor+0x2a1/0xa30 [ 207.116653][ T6931] ? __pfx_direct_splice_actor+0x10/0x10 [ 207.116771][ T6931] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 207.116828][ T6931] do_splice_direct+0x174/0x240 [ 207.116887][ T6931] ? __pfx_do_splice_direct+0x10/0x10 [ 207.116932][ T6931] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 207.116976][ T6931] ? bpf_lsm_file_permission+0x9/0x10 [ 207.117012][ T6931] ? security_file_permission+0x71/0x210 [ 207.117059][ T6931] ? rw_verify_area+0xcf/0x680 [ 207.117106][ T6931] do_sendfile+0xb06/0xe50 [ 207.117157][ T6931] ? __pfx_do_sendfile+0x10/0x10 [ 207.117208][ T6931] ? __x64_sys_futex+0x1e0/0x4c0 [ 207.117248][ T6931] ? __x64_sys_futex+0x1e9/0x4c0 [ 207.117292][ T6931] __x64_sys_sendfile64+0x1d8/0x220 [ 207.117326][ T6931] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 207.117371][ T6931] do_syscall_64+0xcd/0x490 [ 207.117424][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.117457][ T6931] RIP: 0033:0x7faffb18e929 [ 207.117483][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.117514][ T6931] RSP: 002b:00007faffc076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 207.117544][ T6931] RAX: ffffffffffffffda RBX: 00007faffb3b5fa0 RCX: 00007faffb18e929 [ 207.117567][ T6931] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 207.117586][ T6931] RBP: 00007faffb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 207.117606][ T6931] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 207.117627][ T6931] R13: 0000000000000000 R14: 00007faffb3b5fa0 R15: 00007ffe82ac2658 [ 207.117669][ T6931] [ 207.974458][ T6947] vivid-003: ================= START STATUS ================= [ 207.992071][ T6947] vivid-003: Radio HW Seek Mode: Bounded [ 208.130623][ T6947] vivid-003: Radio Programmable HW Seek: false [ 208.136989][ T6947] vivid-003: RDS Rx I/O Mode: Block I/O [ 208.143092][ T6947] vivid-003: Generate RBDS Instead of RDS: false [ 208.150821][ T6947] vivid-003: RDS Reception: true [ 208.164709][ T6947] vivid-003: RDS Program Type: 0 inactive [ 208.170884][ T6947] vivid-003: RDS PS Name: inactive [ 208.176359][ T6947] vivid-003: RDS Radio Text: inactive [ 208.182228][ T6947] vivid-003: RDS Traffic Announcement: false inactive [ 208.189354][ T6947] vivid-003: RDS Traffic Program: false inactive [ 208.196547][ T6947] vivid-003: RDS Music: false inactive [ 208.204866][ T6947] vivid-003: ================== END STATUS ================== [ 208.787444][ T6959] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 210.274708][ T6962] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 211.238601][ T5858] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 212.829073][ T7002] FAULT_INJECTION: forcing a failure. [ 212.829073][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 212.892632][ T7002] CPU: 1 UID: 0 PID: 7002 Comm: syz.2.233 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 212.892677][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.892695][ T7002] Call Trace: [ 212.892705][ T7002] [ 212.892718][ T7002] dump_stack_lvl+0x16c/0x1f0 [ 212.892772][ T7002] should_fail_ex+0x512/0x640 [ 212.892821][ T7002] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 212.892877][ T7002] should_failslab+0xc2/0x120 [ 212.892909][ T7002] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 212.892953][ T7002] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 212.893001][ T7002] ? __d_alloc+0x31/0xaa0 [ 212.893050][ T7002] __d_alloc+0x31/0xaa0 [ 212.893092][ T7002] ? _raw_spin_unlock+0x28/0x50 [ 212.893132][ T7002] d_make_root+0x3e/0x90 [ 212.893157][ T7002] simple_fill_super+0x278/0x720 [ 212.893203][ T7002] ? __pfx_nfsd_fill_super+0x10/0x10 [ 212.893235][ T7002] nfsd_fill_super+0x90/0x530 [ 212.893265][ T7002] ? __pfx_set_anon_super_fc+0x10/0x10 [ 212.893303][ T7002] ? __pfx_nfsd_fill_super+0x10/0x10 [ 212.893333][ T7002] get_tree_keyed+0x10e/0x1d0 [ 212.893376][ T7002] vfs_get_tree+0x8e/0x340 [ 212.893409][ T7002] path_mount+0x1414/0x2020 [ 212.893456][ T7002] ? kmem_cache_free+0x2d1/0x4d0 [ 212.893497][ T7002] ? __pfx_path_mount+0x10/0x10 [ 212.893557][ T7002] ? putname+0x154/0x1a0 [ 212.893588][ T7002] __x64_sys_mount+0x28d/0x310 [ 212.893635][ T7002] ? __pfx___x64_sys_mount+0x10/0x10 [ 212.893693][ T7002] do_syscall_64+0xcd/0x490 [ 212.893739][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.893768][ T7002] RIP: 0033:0x7faffb18e929 [ 212.893791][ T7002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.893819][ T7002] RSP: 002b:00007faffc055038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.893847][ T7002] RAX: ffffffffffffffda RBX: 00007faffb3b6080 RCX: 00007faffb18e929 [ 212.893867][ T7002] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 0000000000000000 [ 212.893886][ T7002] RBP: 00007faffb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 212.893903][ T7002] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 212.893920][ T7002] R13: 0000000000000000 R14: 00007faffb3b6080 R15: 00007ffe82ac2658 [ 212.893958][ T7002] [ 214.493807][ T7015] vivid-003: ================= START STATUS ================= [ 214.577572][ T7015] vivid-003: Radio HW Seek Mode: Bounded [ 214.620052][ T7015] vivid-003: Radio Programmable HW Seek: false [ 214.653096][ T7015] vivid-003: RDS Rx I/O Mode: Block I/O [ 214.703274][ T7015] vivid-003: Generate RBDS Instead of RDS: false [ 214.735008][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.238'. [ 214.752369][ T7015] vivid-003: RDS Reception: true [ 214.767876][ T7015] vivid-003: RDS Program Type: 0 inactive [ 214.787373][ T7021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.797596][ T7015] vivid-003: RDS PS Name: inactive [ 214.803308][ T7015] vivid-003: RDS Radio Text: inactive [ 214.818790][ T7021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.837831][ T7015] vivid-003: RDS Traffic Announcement: false inactive [ 214.846173][ T7021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.854131][ T7015] vivid-003: RDS Traffic Program: false inactive [ 214.861849][ T7015] vivid-003: RDS Music: false inactive [ 214.872339][ T7015] vivid-003: ================== END STATUS ================== [ 214.887233][ T7021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.777361][ T7069] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 219.639413][ T7070] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 225.631770][ T7146] vivid-003: ================= START STATUS ================= [ 225.650716][ T7146] vivid-003: Radio HW Seek Mode: Bounded [ 225.679212][ T7146] vivid-003: Radio Programmable HW Seek: false [ 225.698366][ T7146] vivid-003: RDS Rx I/O Mode: Block I/O [ 225.704161][ T7146] vivid-003: Generate RBDS Instead of RDS: false [ 225.711433][ T7146] vivid-003: RDS Reception: true [ 225.716554][ T7146] vivid-003: RDS Program Type: 0 inactive [ 225.725352][ T7146] vivid-003: RDS PS Name: inactive [ 225.775058][ T7146] vivid-003: RDS Radio Text: inactive [ 225.803040][ T7146] vivid-003: RDS Traffic Announcement: false inactive [ 225.835969][ T7146] vivid-003: RDS Traffic Program: false inactive [ 225.843186][ T7146] vivid-003: RDS Music: false inactive [ 225.853222][ T7146] vivid-003: ================== END STATUS ================== [ 227.092034][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 227.098257][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 227.104320][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 227.110556][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 227.398004][ T7173] vivid-003: ================= START STATUS ================= [ 227.405755][ T7173] vivid-003: Radio HW Seek Mode: Bounded [ 227.412056][ T7173] vivid-003: Radio Programmable HW Seek: false [ 227.418387][ T7173] vivid-003: RDS Rx I/O Mode: Block I/O [ 227.424473][ T7173] vivid-003: Generate RBDS Instead of RDS: false [ 227.562996][ T7173] vivid-003: RDS Reception: true [ 227.572294][ T7173] vivid-003: RDS Program Type: 0 inactive [ 227.610649][ T7173] vivid-003: RDS PS Name: inactive [ 227.616021][ T7173] vivid-003: RDS Radio Text: inactive [ 227.695589][ T7173] vivid-003: RDS Traffic Announcement: false inactive [ 227.709693][ T7173] vivid-003: RDS Traffic Program: false inactive [ 227.735384][ T7173] vivid-003: RDS Music: false inactive [ 227.797384][ T7173] vivid-003: ================== END STATUS ================== [ 229.354172][ T7193] vivid-003: ================= START STATUS ================= [ 229.577300][ T7193] vivid-003: Radio HW Seek Mode: Bounded [ 229.592143][ T7193] vivid-003: Radio Programmable HW Seek: false [ 229.653185][ T7193] vivid-003: RDS Rx I/O Mode: Block I/O [ 229.667214][ T7193] vivid-003: Generate RBDS Instead of RDS: false [ 229.726405][ T7193] vivid-003: RDS Reception: true [ 229.767599][ T7193] vivid-003: RDS Program Type: 0 inactive [ 229.791955][ T7193] vivid-003: RDS PS Name: inactive [ 229.883838][ T7193] vivid-003: RDS Radio Text: inactive [ 229.904994][ T7193] vivid-003: RDS Traffic Announcement: false inactive [ 229.914885][ T7193] vivid-003: RDS Traffic Program: false inactive [ 229.926807][ T7193] vivid-003: RDS Music: false inactive [ 229.938743][ T7193] vivid-003: ================== END STATUS ================== [ 230.943251][ T7206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.141132][ T7206] nfs4: Unknown parameter '' [ 233.850739][ T7242] vivid-003: ================= START STATUS ================= [ 233.889016][ T7242] vivid-003: Radio HW Seek Mode: Bounded [ 233.900723][ T7242] vivid-003: Radio Programmable HW Seek: false [ 233.923849][ T7242] vivid-003: RDS Rx I/O Mode: Block I/O [ 233.951381][ T7242] vivid-003: Generate RBDS Instead of RDS: false [ 234.013242][ T7242] vivid-003: RDS Reception: true [ 234.232571][ T7242] vivid-003: RDS Program Type: 0 inactive [ 234.248888][ T7242] vivid-003: RDS PS Name: inactive [ 234.288653][ T7242] vivid-003: RDS Radio Text: inactive [ 234.301050][ T7242] vivid-003: RDS Traffic Announcement: false inactive [ 234.310278][ T7242] vivid-003: RDS Traffic Program: false inactive [ 234.317209][ T7242] vivid-003: RDS Music: false inactive [ 234.331673][ T7242] vivid-003: ================== END STATUS ================== [ 236.332230][ T7269] netlink: 326 bytes leftover after parsing attributes in process `syz.0.291'. [ 239.463065][ T7313] netlink: 342 bytes leftover after parsing attributes in process `syz.3.300'. [ 239.865025][ T7315] FAULT_INJECTION: forcing a failure. [ 239.865025][ T7315] name failslab, interval 1, probability 0, space 0, times 0 [ 239.954515][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.0.301 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 239.954563][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.954584][ T7315] Call Trace: [ 239.954596][ T7315] [ 239.954608][ T7315] dump_stack_lvl+0x16c/0x1f0 [ 239.954666][ T7315] should_fail_ex+0x512/0x640 [ 239.954716][ T7315] ? __kmalloc_noprof+0xbf/0x510 [ 239.954770][ T7315] ? ima_write_template_field_data+0x5d/0x1f0 [ 239.954811][ T7315] should_failslab+0xc2/0x120 [ 239.954844][ T7315] __kmalloc_noprof+0xd2/0x510 [ 239.954894][ T7315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.954938][ T7315] ima_write_template_field_data+0x5d/0x1f0 [ 239.954989][ T7315] ima_eventdigest_init_common+0x154/0x430 [ 239.955037][ T7315] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 239.955111][ T7315] ? rcu_is_watching+0x12/0xc0 [ 239.955148][ T7315] ? trace_kmalloc+0x2b/0xd0 [ 239.955181][ T7315] ? __kmalloc_noprof+0x242/0x510 [ 239.955240][ T7315] ima_alloc_init_template+0x39d/0x720 [ 239.955285][ T7315] ima_add_violation+0x123/0x3d0 [ 239.955323][ T7315] ? __pfx_ima_add_violation+0x10/0x10 [ 239.955367][ T7315] ? ima_d_path+0x12b/0x2a0 [ 239.955398][ T7315] ? __pfx_ima_d_path+0x10/0x10 [ 239.955446][ T7315] ? lockdep_init_map_type+0x5c/0x280 [ 239.955495][ T7315] ? ima_inode_get+0x39e/0x580 [ 239.955550][ T7315] process_measurement+0x1783/0x23e0 [ 239.955615][ T7315] ? __pfx_process_measurement+0x10/0x10 [ 239.955671][ T7315] ? futex_unqueue+0x133/0x2c0 [ 239.955771][ T7315] ima_file_mmap+0x1b1/0x1d0 [ 239.955821][ T7315] ? __pfx_ima_file_mmap+0x10/0x10 [ 239.955868][ T7315] ? __lock_acquire+0x622/0x1c90 [ 239.955923][ T7315] security_mmap_file+0x88c/0x990 [ 239.955969][ T7315] vm_mmap_pgoff+0xec/0x450 [ 239.956005][ T7315] ? find_held_lock+0x2b/0x80 [ 239.956056][ T7315] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 239.956099][ T7315] ? __fget_files+0x20e/0x3c0 [ 239.956168][ T7315] ksys_mmap_pgoff+0x32c/0x5c0 [ 239.956213][ T7315] __x64_sys_mmap+0x125/0x190 [ 239.956266][ T7315] do_syscall_64+0xcd/0x490 [ 239.956320][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.956353][ T7315] RIP: 0033:0x7fbcac98e929 [ 239.956379][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.956409][ T7315] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 239.956447][ T7315] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 239.956470][ T7315] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 239.956489][ T7315] RBP: 00007fbcaca10b39 R08: 0000000000000003 R09: 0000000000000000 [ 239.956509][ T7315] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 239.956529][ T7315] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 239.956572][ T7315] [ 240.281638][ T30] audit: type=1804 audit(1751992448.115:2): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.301" name="/newroot/77/file0" dev="tmpfs" ino=411 res=0 errno=0 [ 240.303112][ T30] audit: type=1800 audit(1751992448.115:3): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.301" name="file0" dev="tmpfs" ino=411 res=0 errno=0 [ 240.468388][ T7317] random: crng reseeded on system resumption [ 240.645754][ T7321] vivid-003: ================= START STATUS ================= [ 240.664336][ T7321] vivid-003: Radio HW Seek Mode: Bounded [ 240.671529][ T7321] vivid-003: Radio Programmable HW Seek: false [ 240.683417][ T7321] vivid-003: RDS Rx I/O Mode: Block I/O [ 240.723756][ T7321] vivid-003: Generate RBDS Instead of RDS: false [ 240.731206][ T7321] vivid-003: RDS Reception: true [ 240.740050][ T7321] vivid-003: RDS Program Type: 0 inactive [ 240.749563][ T7321] vivid-003: RDS PS Name: inactive [ 240.755117][ T7321] vivid-003: RDS Radio Text: inactive [ 240.762002][ T7321] vivid-003: RDS Traffic Announcement: false inactive [ 240.770791][ T7321] vivid-003: RDS Traffic Program: false inactive [ 240.891430][ T7321] vivid-003: RDS Music: false inactive [ 240.891476][ T7321] vivid-003: ================== END STATUS ================== [ 244.130925][ T7371] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 245.903791][ T7394] vivid-003: ================= START STATUS ================= [ 245.930199][ T7394] vivid-003: Radio HW Seek Mode: Bounded [ 245.952359][ T7394] vivid-003: Radio Programmable HW Seek: false [ 245.979853][ T7394] vivid-003: RDS Rx I/O Mode: Block I/O [ 246.030070][ T7394] vivid-003: Generate RBDS Instead of RDS: false [ 246.039387][ T7394] vivid-003: RDS Reception: true [ 246.056985][ T7394] vivid-003: RDS Program Type: 0 inactive [ 246.084332][ T7394] vivid-003: RDS PS Name: inactive [ 246.092892][ T7394] vivid-003: RDS Radio Text: inactive [ 246.098829][ T7394] vivid-003: RDS Traffic Announcement: false inactive [ 246.110834][ T7394] vivid-003: RDS Traffic Program: false inactive [ 246.136562][ T7394] vivid-003: RDS Music: false inactive [ 246.146734][ T7394] vivid-003: ================== END STATUS ================== [ 247.043995][ T7401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.238504][ T7409] ======================================================= [ 247.238504][ T7409] WARNING: The mand mount option has been deprecated and [ 247.238504][ T7409] and is ignored by this kernel. Remove the mand [ 247.238504][ T7409] option from the mount to silence this warning. [ 247.238504][ T7409] ======================================================= [ 247.938013][ T7417] FAULT_INJECTION: forcing a failure. [ 247.938013][ T7417] name fail_futex, interval 1, probability 0, space 0, times 1 [ 248.064056][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.1.323 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 248.064102][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.064135][ T7417] Call Trace: [ 248.064146][ T7417] [ 248.064159][ T7417] dump_stack_lvl+0x16c/0x1f0 [ 248.064218][ T7417] should_fail_ex+0x512/0x640 [ 248.064274][ T7417] get_futex_key+0x1d0/0x1540 [ 248.064327][ T7417] ? __pfx_get_futex_key+0x10/0x10 [ 248.064368][ T7417] ? __pfx___schedule+0x10/0x10 [ 248.064411][ T7417] ? psi_group_change+0x6dc/0xd20 [ 248.064465][ T7417] futex_wait_setup+0x84/0x510 [ 248.064526][ T7417] __futex_wait+0x194/0x2f0 [ 248.064575][ T7417] ? __pfx___futex_wait+0x10/0x10 [ 248.064636][ T7417] ? __pfx_futex_wake_mark+0x10/0x10 [ 248.064692][ T7417] ? plist_check_head+0xa3/0x150 [ 248.064728][ T7417] ? find_held_lock+0x2b/0x80 [ 248.064776][ T7417] futex_wait+0xe8/0x380 [ 248.064840][ T7417] ? __pfx_futex_wait+0x10/0x10 [ 248.064913][ T7417] do_futex+0x229/0x350 [ 248.064954][ T7417] ? __pfx_do_futex+0x10/0x10 [ 248.065000][ T7417] ? __pfx___might_resched+0x10/0x10 [ 248.065042][ T7417] __x64_sys_futex+0x1e0/0x4c0 [ 248.065086][ T7417] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 248.065131][ T7417] ? __pfx___x64_sys_futex+0x10/0x10 [ 248.065173][ T7417] ? xfd_validate_state+0x61/0x180 [ 248.065217][ T7417] ? __pfx___do_sys_close_range+0x10/0x10 [ 248.065280][ T7417] do_syscall_64+0xcd/0x490 [ 248.065333][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.065365][ T7417] RIP: 0033:0x7efeb358e929 [ 248.065391][ T7417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.065423][ T7417] RSP: 002b:00007efeb44ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 248.065454][ T7417] RAX: ffffffffffffffda RBX: 00007efeb37b6088 RCX: 00007efeb358e929 [ 248.065476][ T7417] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efeb37b6088 [ 248.065496][ T7417] RBP: 00007efeb37b6080 R08: 0000000000000000 R09: 0000000000000000 [ 248.065517][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efeb37b608c [ 248.065537][ T7417] R13: 0000000000000000 R14: 00007fff0b533610 R15: 00007fff0b5336f8 [ 248.065585][ T7417] [ 251.309209][ T7448] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 254.393540][ T7483] [U]  [ 254.396639][ T7483] [U] [ 254.399378][ T7483] [U] [ 254.402104][ T7483] [U] [ 254.495843][ T7483] [U] [ 254.498607][ T7483] [U] [ 254.501325][ T7483] [U] [ 254.504042][ T7483] [U] [ 254.534180][ T5863] Bluetooth: hci0: unexpected event 0x1d length: 10 > 5 [ 254.543423][ T7483] [U] [ 254.553165][ T7483] [U] [ 254.555885][ T7483] [U] [ 254.558605][ T7483] [U] [ 254.689471][ T7483] [U] [ 254.692299][ T7483] [U] [ 254.695073][ T7483] [U] [ 254.697841][ T7483] [U] [ 254.824140][ T7483] [U] [ 254.826970][ T7483] [U] [ 254.829744][ T7483] [U] [ 254.832522][ T7483] [U] [ 254.928025][ T7483] [U] [ 254.930843][ T7483] [U] [ 254.933613][ T7483] [U] [ 254.936391][ T7483] [U] [ 254.946557][ T7503] random: crng reseeded on system resumption [ 254.994576][ T7483] [U] [ 254.997471][ T7483] [U] [ 255.000329][ T7483] [U] [ 255.003105][ T7483] [U] [ 255.013675][ T7483] [U] [ 255.016489][ T7483] [U] [ 255.019262][ T7483] [U] [ 255.022036][ T7483] [U] [ 255.043437][ T7483] [U] [ 255.046258][ T7483] [U] [ 255.049031][ T7483] [U] [ 255.051804][ T7483] [U] [ 255.058779][ T7483] [U] [ 255.061577][ T7483] [U] [ 255.064350][ T7483] [U] [ 255.067138][ T7483] [U] [ 255.082348][ T7483] [U] [ 255.085124][ T7483] [U] [ 255.087842][ T7483] [U] [ 255.090557][ T7483] [U] [ 255.112692][ T7483] [U] [ 255.115564][ T7483] [U] [ 255.118288][ T7483] [U] [ 255.121003][ T7483] [U] [ 255.235454][ T7497] tipc: Withdrawal distribution failure [ 255.238388][ T7483] [U] [ 255.749731][ T7523] vivid-003: ================= START STATUS ================= [ 255.761263][ T7523] vivid-003: Radio HW Seek Mode: Bounded [ 255.773991][ T7523] vivid-003: Radio Programmable HW Seek: false [ 255.948968][ T7523] vivid-003: RDS Rx I/O Mode: Block I/O [ 255.967411][ T7523] vivid-003: Generate RBDS Instead of RDS: false [ 255.973832][ T7523] vivid-003: RDS Reception: true [ 256.037429][ T7523] vivid-003: RDS Program Type: 0 inactive [ 256.054447][ T7523] vivid-003: RDS PS Name: inactive [ 256.152465][ T7523] vivid-003: RDS Radio Text: inactive [ 256.162538][ T7523] vivid-003: RDS Traffic Announcement: false inactive [ 256.193224][ T7523] vivid-003: RDS Traffic Program: false inactive [ 256.377414][ T7523] vivid-003: RDS Music: false inactive [ 256.480317][ T7523] vivid-003: ================== END STATUS ================== [ 259.068237][ T7574] random: crng reseeded on system resumption [ 264.374788][ T7659] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 265.784747][ T7675] vhci_hcd: invalid port number 16 [ 265.829493][ T7675] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 265.972298][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.979385][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.292770][ T7733] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 269.372103][ T7733] FAULT_INJECTION: forcing a failure. [ 269.372103][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 269.387315][ T7733] CPU: 1 UID: 0 PID: 7733 Comm: syz.0.377 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 269.387354][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.387371][ T7733] Call Trace: [ 269.387380][ T7733] [ 269.387391][ T7733] dump_stack_lvl+0x16c/0x1f0 [ 269.387440][ T7733] should_fail_ex+0x512/0x640 [ 269.387481][ T7733] ? __kmalloc_noprof+0xbf/0x510 [ 269.387525][ T7733] ? sk_prot_alloc+0x1a8/0x2a0 [ 269.387551][ T7733] should_failslab+0xc2/0x120 [ 269.387578][ T7733] __kmalloc_noprof+0xd2/0x510 [ 269.387616][ T7733] ? evm_inode_alloc_security+0x49/0xc0 [ 269.387660][ T7733] ? security_inode_alloc+0xcf/0x2b0 [ 269.387695][ T7733] sk_prot_alloc+0x1a8/0x2a0 [ 269.387726][ T7733] sk_alloc+0x36/0xc20 [ 269.387765][ T7733] __netlink_create+0x5e/0x2c0 [ 269.387809][ T7733] __netlink_kernel_create+0xed/0x750 [ 269.387839][ T7733] ? __pfx___netlink_kernel_create+0x10/0x10 [ 269.387866][ T7733] ? find_held_lock+0x2b/0x80 [ 269.387896][ T7733] ? audit_net_init+0x190/0x440 [ 269.387953][ T7733] audit_net_init+0x1ae/0x440 [ 269.387987][ T7733] ? __pfx_audit_net_init+0x10/0x10 [ 269.388030][ T7733] ? __pfx_audit_receive+0x10/0x10 [ 269.388069][ T7733] ? __pfx_audit_multicast_bind+0x10/0x10 [ 269.388109][ T7733] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 269.388150][ T7733] ? __kmalloc_noprof+0x242/0x510 [ 269.388199][ T7733] ? __pfx_audit_net_init+0x10/0x10 [ 269.388233][ T7733] ops_init+0x1df/0x5f0 [ 269.388289][ T7733] setup_net+0x1ff/0x510 [ 269.388333][ T7733] ? lockdep_init_map_type+0x5c/0x280 [ 269.388375][ T7733] ? __pfx_setup_net+0x10/0x10 [ 269.388422][ T7733] ? debug_mutex_init+0x37/0x70 [ 269.388454][ T7733] copy_net_ns+0x2a6/0x5f0 [ 269.388487][ T7733] create_new_namespaces+0x3ea/0xa90 [ 269.388529][ T7733] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 269.388565][ T7733] ksys_unshare+0x45b/0xa40 [ 269.388605][ T7733] ? __pfx_ksys_unshare+0x10/0x10 [ 269.388646][ T7733] ? xfd_validate_state+0x61/0x180 [ 269.388696][ T7733] __x64_sys_unshare+0x31/0x40 [ 269.388735][ T7733] do_syscall_64+0xcd/0x490 [ 269.388781][ T7733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.388810][ T7733] RIP: 0033:0x7fbcac98e929 [ 269.388833][ T7733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.388862][ T7733] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 269.388889][ T7733] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 269.388909][ T7733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 269.388927][ T7733] RBP: 00007fbcaca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 269.388945][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.388962][ T7733] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 269.388999][ T7733] [ 269.389154][ T7733] audit: cannot initialize netlink socket in namespace [ 270.423526][ T7749] vivid-003: ================= START STATUS ================= [ 270.431604][ T7749] vivid-003: Radio HW Seek Mode: Bounded [ 270.447242][ T7749] vivid-003: Radio Programmable HW Seek: false [ 270.467670][ T7749] vivid-003: RDS Rx I/O Mode: Block I/O [ 270.473422][ T7749] vivid-003: Generate RBDS Instead of RDS: false [ 270.528883][ T7749] vivid-003: RDS Reception: true [ 270.541988][ T7749] vivid-003: RDS Program Type: 0 inactive [ 270.581014][ T7749] vivid-003: RDS PS Name: inactive [ 270.586461][ T7749] vivid-003: RDS Radio Text: inactive [ 270.592343][ T7749] vivid-003: RDS Traffic Announcement: false inactive [ 270.599773][ T7749] vivid-003: RDS Traffic Program: false inactive [ 270.606573][ T7749] vivid-003: RDS Music: false inactive [ 270.697480][ T7749] vivid-003: ================== END STATUS ================== [ 271.950666][ T7760] batman_adv: Routing algorithm '' is not supported [ 277.430215][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.440463][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.557829][ T7817] vivid-003: ================= START STATUS ================= [ 277.602464][ T7817] vivid-003: Radio HW Seek Mode: Bounded [ 277.631321][ T7817] vivid-003: Radio Programmable HW Seek: false [ 277.657267][ T7817] vivid-003: RDS Rx I/O Mode: Block I/O [ 277.677100][ T7817] vivid-003: Generate RBDS Instead of RDS: false [ 277.713896][ T7817] vivid-003: RDS Reception: true [ 277.739291][ T7817] vivid-003: RDS Program Type: 0 inactive [ 277.767338][ T7817] vivid-003: RDS PS Name: inactive [ 277.772696][ T7817] vivid-003: RDS Radio Text: inactive [ 277.779567][ T7817] vivid-003: RDS Traffic Announcement: false inactive [ 277.829667][ T7817] vivid-003: RDS Traffic Program: false inactive [ 277.849698][ T7817] vivid-003: RDS Music: false inactive [ 277.863329][ T7817] vivid-003: ================== END STATUS ================== [ 278.216936][ T7826] vhci_hcd: invalid port number 16 [ 278.227263][ T7826] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 284.467977][ T7886] vivid-003: ================= START STATUS ================= [ 284.475687][ T7886] vivid-003: Radio HW Seek Mode: Bounded [ 284.547321][ T7886] vivid-003: Radio Programmable HW Seek: false [ 284.622562][ T7886] vivid-003: RDS Rx I/O Mode: Block I/O [ 284.654386][ T7886] vivid-003: Generate RBDS Instead of RDS: false [ 284.675655][ T7886] vivid-003: RDS Reception: true [ 284.712902][ T7886] vivid-003: RDS Program Type: 0 inactive [ 284.737439][ T7886] vivid-003: RDS PS Name: inactive [ 284.789332][ T7886] vivid-003: RDS Radio Text: inactive [ 284.829485][ T7886] vivid-003: RDS Traffic Announcement: false inactive [ 284.853296][ T7886] vivid-003: RDS Traffic Program: false inactive [ 284.890642][ T7886] vivid-003: RDS Music: false inactive [ 284.896399][ T7886] vivid-003: ================== END STATUS ================== [ 287.580351][ T7939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'. [ 287.699507][ T7943] hsr_slave_0 (unregistering): hsr_addr_subst_dest: Unknown node [ 287.707768][ T7943] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 287.888992][ T7939] hsr_slave_0 (unregistering): left promiscuous mode [ 288.285823][ T7949] FAULT_INJECTION: forcing a failure. [ 288.285823][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 288.302092][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.1.412 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 288.302136][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.302155][ T7949] Call Trace: [ 288.302165][ T7949] [ 288.302177][ T7949] dump_stack_lvl+0x16c/0x1f0 [ 288.302233][ T7949] should_fail_ex+0x512/0x640 [ 288.302281][ T7949] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 288.302334][ T7949] should_failslab+0xc2/0x120 [ 288.302366][ T7949] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 288.302415][ T7949] ? __proc_create+0xc3/0x8c0 [ 288.302467][ T7949] ? __proc_create+0x2ce/0x8c0 [ 288.302523][ T7949] __proc_create+0x2ce/0x8c0 [ 288.302575][ T7949] ? __pfx___proc_create+0x10/0x10 [ 288.302644][ T7949] _proc_mkdir+0xb9/0x200 [ 288.302672][ T7949] ? __pfx__proc_mkdir+0x10/0x10 [ 288.302714][ T7949] nfs_fs_proc_net_init+0x9b/0x1e0 [ 288.302759][ T7949] nfs_net_init+0x130/0x340 [ 288.302802][ T7949] ? __pfx_nfs_net_init+0x10/0x10 [ 288.302841][ T7949] ops_init+0x1df/0x5f0 [ 288.302897][ T7949] setup_net+0x1ff/0x510 [ 288.302960][ T7949] ? lockdep_init_map_type+0x5c/0x280 [ 288.303010][ T7949] ? __pfx_setup_net+0x10/0x10 [ 288.303066][ T7949] ? debug_mutex_init+0x37/0x70 [ 288.303106][ T7949] copy_net_ns+0x2a6/0x5f0 [ 288.303142][ T7949] create_new_namespaces+0x3ea/0xa90 [ 288.303191][ T7949] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 288.303231][ T7949] ksys_unshare+0x45b/0xa40 [ 288.303277][ T7949] ? __pfx_ksys_unshare+0x10/0x10 [ 288.303325][ T7949] ? xfd_validate_state+0x61/0x180 [ 288.303382][ T7949] __x64_sys_unshare+0x31/0x40 [ 288.303429][ T7949] do_syscall_64+0xcd/0x490 [ 288.303482][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.303516][ T7949] RIP: 0033:0x7efeb358e929 [ 288.303543][ T7949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.303576][ T7949] RSP: 002b:00007efeb44ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 288.303607][ T7949] RAX: ffffffffffffffda RBX: 00007efeb37b5fa0 RCX: 00007efeb358e929 [ 288.303629][ T7949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 288.303649][ T7949] RBP: 00007efeb3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 288.303668][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.303688][ T7949] R13: 0000000000000000 R14: 00007efeb37b5fa0 R15: 00007fff0b5336f8 [ 288.303731][ T7949] [ 290.145941][ T7976] vivid-003: ================= START STATUS ================= [ 290.197303][ T7976] vivid-003: Radio HW Seek Mode: Bounded [ 290.258490][ T7976] vivid-003: Radio Programmable HW Seek: false [ 290.268680][ T7976] vivid-003: RDS Rx I/O Mode: Block I/O [ 290.277214][ T7976] vivid-003: Generate RBDS Instead of RDS: false [ 290.283732][ T7976] vivid-003: RDS Reception: true [ 290.291781][ T7976] vivid-003: RDS Program Type: 0 inactive [ 290.338532][ T7976] vivid-003: RDS PS Name: inactive [ 290.347699][ T7976] vivid-003: RDS Radio Text: inactive [ 290.368244][ T7976] vivid-003: RDS Traffic Announcement: false inactive [ 290.375088][ T7976] vivid-003: RDS Traffic Program: false inactive [ 290.440503][ T7976] vivid-003: RDS Music: false inactive [ 290.467204][ T7976] vivid-003: ================== END STATUS ================== [ 297.988575][ T8041] random: crng reseeded on system resumption [ 301.086159][ T8078] batman_adv: Routing algorithm '' is not supported [ 303.788809][ T8119] random: crng reseeded on system resumption [ 305.343417][ T8147] vivid-003: ================= START STATUS ================= [ 305.407587][ T8147] vivid-003: Radio HW Seek Mode: Bounded [ 305.413338][ T8147] vivid-003: Radio Programmable HW Seek: false [ 305.495381][ T8147] vivid-003: RDS Rx I/O Mode: Block I/O [ 305.501584][ T8147] vivid-003: Generate RBDS Instead of RDS: false [ 305.541864][ T8147] vivid-003: RDS Reception: true [ 305.568166][ T8147] vivid-003: RDS Program Type: 0 inactive [ 305.573957][ T8147] vivid-003: RDS PS Name: inactive [ 305.579810][ T8147] vivid-003: RDS Radio Text: inactive [ 305.587448][ T8147] vivid-003: RDS Traffic Announcement: false inactive [ 305.594628][ T8147] vivid-003: RDS Traffic Program: false inactive [ 305.618298][ T8147] vivid-003: RDS Music: false inactive [ 305.752424][ T8147] vivid-003: ================== END STATUS ================== [ 312.168417][ T8228] vivid-003: ================= START STATUS ================= [ 312.330431][ T8228] vivid-003: Radio HW Seek Mode: Bounded [ 312.336190][ T8228] vivid-003: Radio Programmable HW Seek: false [ 312.417253][ T8228] vivid-003: RDS Rx I/O Mode: Block I/O [ 312.439353][ T8228] vivid-003: Generate RBDS Instead of RDS: false [ 312.501540][ T8228] vivid-003: RDS Reception: true [ 312.517679][ T8228] vivid-003: RDS Program Type: 0 inactive [ 312.658697][ T8228] vivid-003: RDS PS Name: inactive [ 312.664041][ T8228] vivid-003: RDS Radio Text: inactive [ 312.670129][ T8228] vivid-003: RDS Traffic Announcement: false inactive [ 312.677625][ T8228] vivid-003: RDS Traffic Program: false inactive [ 312.684024][ T8228] vivid-003: RDS Music: false inactive [ 312.691680][ T8228] vivid-003: ================== END STATUS ================== [ 316.984552][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'. [ 317.338860][ T8272] vivid-003: ================= START STATUS ================= [ 317.346891][ T8272] vivid-003: Radio HW Seek Mode: Bounded [ 317.355488][ T8272] vivid-003: Radio Programmable HW Seek: false [ 317.387486][ T8272] vivid-003: RDS Rx I/O Mode: Block I/O [ 317.393165][ T8272] vivid-003: Generate RBDS Instead of RDS: false [ 317.418721][ T8272] vivid-003: RDS Reception: true [ 317.427453][ T8272] vivid-003: RDS Program Type: 0 inactive [ 317.457224][ T8272] vivid-003: RDS PS Name: inactive [ 317.464427][ T8272] vivid-003: RDS Radio Text: inactive [ 317.492450][ T8272] vivid-003: RDS Traffic Announcement: false inactive [ 317.500180][ T8272] vivid-003: RDS Traffic Program: false inactive [ 317.506634][ T8272] vivid-003: RDS Music: false inactive [ 317.512522][ T8272] vivid-003: ================== END STATUS ================== [ 318.242243][ T8276] ptp ptp0: new virtual clock ptp1 [ 318.276749][ T8276] ptp ptp0: new virtual clock ptp2 [ 318.358344][ T8276] ptp ptp0: new virtual clock ptp3 [ 318.407273][ T8276] ptp ptp0: guarantee physical clock free running [ 318.570372][ T8288] vivid-003: ================= START STATUS ================= [ 318.617319][ T8288] vivid-003: Radio HW Seek Mode: Bounded [ 318.623061][ T8288] vivid-003: Radio Programmable HW Seek: false [ 318.647673][ T8288] vivid-003: RDS Rx I/O Mode: Block I/O [ 318.653329][ T8288] vivid-003: Generate RBDS Instead of RDS: false [ 318.685483][ T8288] vivid-003: RDS Reception: true [ 318.727370][ T8288] vivid-003: RDS Program Type: 0 inactive [ 318.734738][ T8288] vivid-003: RDS PS Name: inactive [ 318.741553][ T8288] vivid-003: RDS Radio Text: inactive [ 318.747306][ T8288] vivid-003: RDS Traffic Announcement: false inactive [ 318.756084][ T8288] vivid-003: RDS Traffic Program: false inactive [ 318.763561][ T8288] vivid-003: RDS Music: false inactive [ 318.776399][ T8288] vivid-003: ================== END STATUS ================== [ 319.854842][ T8307] input: f¬ as /devices/virtual/input/input13 [ 322.277586][ T8347] vivid-003: ================= START STATUS ================= [ 322.285310][ T8347] vivid-003: Radio HW Seek Mode: Bounded [ 322.487344][ T8347] vivid-003: Radio Programmable HW Seek: false [ 322.493613][ T8347] vivid-003: RDS Rx I/O Mode: Block I/O [ 322.499342][ T8347] vivid-003: Generate RBDS Instead of RDS: false [ 322.505751][ T8347] vivid-003: RDS Reception: true [ 322.511149][ T8347] vivid-003: RDS Program Type: 0 inactive [ 322.516967][ T8347] vivid-003: RDS PS Name: inactive [ 322.592728][ T8347] vivid-003: RDS Radio Text: inactive [ 322.687634][ T8347] vivid-003: RDS Traffic Announcement: false inactive [ 322.753577][ T8347] vivid-003: RDS Traffic Program: false inactive [ 322.835781][ T8347] vivid-003: RDS Music: false inactive [ 322.844129][ T8347] vivid-003: ================== END STATUS ================== [ 325.164255][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'. [ 325.607042][ T8399] team0: Port device team_slave_1 removed [ 327.409597][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.417385][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.358382][ T8461] vivid-003: ================= START STATUS ================= [ 331.405913][ T8461] vivid-003: Radio HW Seek Mode: Bounded [ 331.418083][ T8461] vivid-003: Radio Programmable HW Seek: false [ 331.476862][ T8461] vivid-003: RDS Rx I/O Mode: Block I/O [ 331.507040][ T8461] vivid-003: Generate RBDS Instead of RDS: false [ 331.529751][ T8461] vivid-003: RDS Reception: true [ 331.544099][ T8461] vivid-003: RDS Program Type: 0 inactive [ 331.557201][ T8461] vivid-003: RDS PS Name: inactive [ 331.569593][ T8461] vivid-003: RDS Radio Text: inactive [ 331.585455][ T8461] vivid-003: RDS Traffic Announcement: false inactive [ 331.599958][ T8461] vivid-003: RDS Traffic Program: false inactive [ 331.610067][ T8461] vivid-003: RDS Music: false inactive [ 331.624587][ T8461] vivid-003: ================== END STATUS ================== [ 331.786526][ T8454] syz.0.496: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.807478][ T8454] CPU: 1 UID: 0 PID: 8454 Comm: syz.0.496 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 331.807521][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.807542][ T8454] Call Trace: [ 331.807553][ T8454] [ 331.807566][ T8454] dump_stack_lvl+0x16c/0x1f0 [ 331.807621][ T8454] warn_alloc+0x248/0x3a0 [ 331.807675][ T8454] ? __pfx_warn_alloc+0x10/0x10 [ 331.807740][ T8454] ? packet_set_ring+0xb07/0x18d0 [ 331.807777][ T8454] ? __vmalloc_node_noprof+0xad/0xf0 [ 331.807812][ T8454] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 331.807853][ T8454] ? packet_set_ring+0xb07/0x18d0 [ 331.807889][ T8454] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.807920][ T8454] ? alloc_pages_mpol+0x25a/0x550 [ 331.807944][ T8454] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 331.807971][ T8454] ? packet_set_ring+0xb07/0x18d0 [ 331.807998][ T8454] __vmalloc_node_noprof+0xad/0xf0 [ 331.808028][ T8454] ? packet_set_ring+0xb07/0x18d0 [ 331.808059][ T8454] packet_set_ring+0xb07/0x18d0 [ 331.808099][ T8454] packet_setsockopt+0x121b/0x33c0 [ 331.808138][ T8454] ? __pfx_packet_setsockopt+0x10/0x10 [ 331.808176][ T8454] ? aa_sk_perm+0x2f4/0xb10 [ 331.808206][ T8454] ? __pfx_aa_sk_perm+0x10/0x10 [ 331.808234][ T8454] ? errseq_sample+0x53/0x70 [ 331.808276][ T8454] ? __pfx_packet_setsockopt+0x10/0x10 [ 331.808309][ T8454] do_sock_setsockopt+0x221/0x470 [ 331.808333][ T8454] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 331.808375][ T8454] __sys_setsockopt+0x120/0x1a0 [ 331.808421][ T8454] __x64_sys_setsockopt+0xbd/0x160 [ 331.808454][ T8454] ? do_syscall_64+0x91/0x490 [ 331.808489][ T8454] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.808522][ T8454] do_syscall_64+0xcd/0x490 [ 331.808559][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.808584][ T8454] RIP: 0033:0x7fbcac98e929 [ 331.808602][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.808626][ T8454] RSP: 002b:00007fbcad788038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.808648][ T8454] RAX: ffffffffffffffda RBX: 00007fbcacbb6080 RCX: 00007fbcac98e929 [ 331.808664][ T8454] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006 [ 331.808678][ T8454] RBP: 00007fbcaca10b39 R08: 000000000000ce24 R09: 0000000000000000 [ 331.808693][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.808707][ T8454] R13: 0000000000000000 R14: 00007fbcacbb6080 R15: 00007ffc576bf5e8 [ 331.808736][ T8454] [ 331.808744][ T8454] Mem-Info: [ 332.099305][ T8460] vhci_hcd: invalid port number 16 [ 332.105933][ T8460] vhci_hcd: invalid port number 16 [ 332.109432][ T8454] active_anon:4739 inactive_anon:4299 isolated_anon:0 [ 332.109432][ T8454] active_file:16405 inactive_file:44457 isolated_file:0 [ 332.109432][ T8454] unevictable:768 dirty:1234 writeback:0 [ 332.109432][ T8454] slab_reclaimable:10208 slab_unreclaimable:94179 [ 332.109432][ T8454] mapped:26844 shmem:1362 pagetables:1087 [ 332.109432][ T8454] sec_pagetables:0 bounce:0 [ 332.109432][ T8454] kernel_misc_reclaimable:0 [ 332.109432][ T8454] free:1315658 free_pcp:11649 free_cma:0 [ 332.178711][ T8454] Node 0 active_anon:18956kB inactive_anon:17920kB active_file:65600kB inactive_file:177648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107376kB dirty:4932kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11724kB pagetables:4196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.377205][ T8454] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.507381][ T8454] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.778949][ T8454] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 332.820263][ T8454] Node 0 DMA32 free:1346988kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18908kB inactive_anon:15684kB active_file:64368kB inactive_file:177568kB unevictable:1536kB writepending:4928kB present:3129332kB managed:2540356kB mlocked:0kB bounce:0kB free_pcp:29684kB local_pcp:9172kB free_cma:0kB [ 332.961979][ T8454] lowmem_reserve[]: 0 0 1 1 1 [ 332.966806][ T8454] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1232kB inactive_file:80kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 333.083133][ T8454] lowmem_reserve[]: 0 0 0 0 0 [ 333.201723][ T8454] Node 1 Normal free:3905560kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:180kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13248kB local_pcp:3200kB free_cma:0kB [ 333.431341][ T8454] lowmem_reserve[]: 0 0 0 0 0 [ 333.566227][ T8454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 333.642967][ T8454] Node 0 DMA32: 764*4kB (M) 341*8kB (UME) 704*16kB (M) 580*32kB (UME) 358*64kB (UME) 302*128kB (ME) 245*256kB (UM) 164*512kB (UME) 66*1024kB (UME) 30*2048kB (UME) 233*4096kB (M) = 1327256kB [ 333.875325][ T8454] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 333.947908][ T8454] Node 1 Normal: 182*4kB (UME) 50*8kB (UME) 37*16kB (UME) 181*32kB (UME) 57*64kB (UME) 11*128kB (UME) 3*256kB (M) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3905560kB [ 334.039758][ T8454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.058748][ T8454] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 334.085271][ T8454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.109550][ T8454] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.187459][ T8454] 62249 total pagecache pages [ 334.192194][ T8454] 0 pages in swap cache [ 334.196351][ T8454] Free swap = 124996kB [ 334.216216][ T8454] Total swap = 124996kB [ 334.223309][ T8454] 2097051 pages RAM [ 334.227720][ T8480] vivid-003: ================= START STATUS ================= [ 334.235521][ T8454] 0 pages HighMem/MovableOnly [ 334.240428][ T8480] vivid-003: Radio HW Seek Mode: Bounded [ 334.250178][ T8454] 429984 pages reserved [ 334.256390][ T8454] 0 pages cma reserved [ 334.260908][ T8480] vivid-003: Radio Programmable HW Seek: false [ 334.287388][ T8480] vivid-003: RDS Rx I/O Mode: Block I/O [ 334.297272][ T8480] vivid-003: Generate RBDS Instead of RDS: false [ 334.314999][ T8480] vivid-003: RDS Reception: true [ 334.409018][ T8480] vivid-003: RDS Program Type: 0 inactive [ 334.451931][ T8480] vivid-003: RDS PS Name: inactive [ 334.462443][ T8480] vivid-003: RDS Radio Text: inactive [ 334.468310][ T8480] vivid-003: RDS Traffic Announcement: false inactive [ 334.477260][ T8480] vivid-003: RDS Traffic Program: false inactive [ 334.487178][ T8480] vivid-003: RDS Music: false inactive [ 334.494238][ T8480] vivid-003: ================== END STATUS ================== [ 345.340544][ T8584] FAULT_INJECTION: forcing a failure. [ 345.340544][ T8584] name failslab, interval 1, probability 0, space 0, times 0 [ 345.364154][ T8584] CPU: 0 UID: 0 PID: 8584 Comm: syz.1.519 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 345.364195][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.364210][ T8584] Call Trace: [ 345.364218][ T8584] [ 345.364227][ T8584] dump_stack_lvl+0x16c/0x1f0 [ 345.364267][ T8584] should_fail_ex+0x512/0x640 [ 345.364302][ T8584] ? __kmalloc_noprof+0xbf/0x510 [ 345.364340][ T8584] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 345.364365][ T8584] should_failslab+0xc2/0x120 [ 345.364387][ T8584] __kmalloc_noprof+0xd2/0x510 [ 345.364444][ T8584] apply_wqattrs_prepare+0xf8/0xbd0 [ 345.364482][ T8584] apply_workqueue_attrs_locked+0x64/0xe0 [ 345.364510][ T8584] __alloc_workqueue+0xf41/0x1810 [ 345.364552][ T8584] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 345.364590][ T8584] alloc_workqueue+0xd2/0x200 [ 345.364620][ T8584] ? __pfx_alloc_workqueue+0x10/0x10 [ 345.364659][ T8584] ? __pfx___debug_object_init+0x10/0x10 [ 345.364692][ T8584] nci_register_device+0x394/0xb80 [ 345.364726][ T8584] ? __pfx_nci_register_device+0x10/0x10 [ 345.364761][ T8584] ? lockdep_init_map_type+0x5c/0x280 [ 345.364819][ T8584] virtual_ncidev_open+0x141/0x220 [ 345.364856][ T8584] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 345.364886][ T8584] misc_open+0x35d/0x420 [ 345.364915][ T8584] ? __pfx_misc_open+0x10/0x10 [ 345.364944][ T8584] chrdev_open+0x234/0x6a0 [ 345.364981][ T8584] ? __pfx_apparmor_file_open+0x10/0x10 [ 345.365012][ T8584] ? __pfx_chrdev_open+0x10/0x10 [ 345.365052][ T8584] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 345.365090][ T8584] do_dentry_open+0x741/0x1c10 [ 345.365126][ T8584] ? __pfx_chrdev_open+0x10/0x10 [ 345.365169][ T8584] vfs_open+0x82/0x3f0 [ 345.365209][ T8584] path_openat+0x1de4/0x2cb0 [ 345.365254][ T8584] ? __pfx_path_openat+0x10/0x10 [ 345.365290][ T8584] ? __lock_acquire+0xb8a/0x1c90 [ 345.365326][ T8584] do_filp_open+0x20b/0x470 [ 345.365362][ T8584] ? __pfx_do_filp_open+0x10/0x10 [ 345.365418][ T8584] ? alloc_fd+0x471/0x7d0 [ 345.365459][ T8584] do_sys_openat2+0x11b/0x1d0 [ 345.365484][ T8584] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.365523][ T8584] __x64_sys_openat+0x174/0x210 [ 345.365555][ T8584] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.365597][ T8584] do_syscall_64+0xcd/0x490 [ 345.365636][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.365660][ T8584] RIP: 0033:0x7efeb358e929 [ 345.365680][ T8584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.365703][ T8584] RSP: 002b:00007efeb44ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.365726][ T8584] RAX: ffffffffffffffda RBX: 00007efeb37b5fa0 RCX: 00007efeb358e929 [ 345.365742][ T8584] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 345.365757][ T8584] RBP: 00007efeb3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 345.365772][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.365786][ T8584] R13: 0000000000000000 R14: 00007efeb37b5fa0 R15: 00007fff0b5336f8 [ 345.365816][ T8584] [ 352.751355][ T8661] vivid-003: ================= START STATUS ================= [ 352.761402][ T8661] vivid-003: Radio HW Seek Mode: Bounded [ 352.803422][ T8661] vivid-003: Radio Programmable HW Seek: false [ 352.848430][ T8661] vivid-003: RDS Rx I/O Mode: Block I/O [ 352.854661][ T8661] vivid-003: Generate RBDS Instead of RDS: false [ 352.861613][ T8661] vivid-003: RDS Reception: true [ 352.867181][ T8661] vivid-003: RDS Program Type: 0 inactive [ 352.875934][ T8661] vivid-003: RDS PS Name: inactive [ 352.913410][ T8661] vivid-003: RDS Radio Text: inactive [ 352.926502][ T8661] vivid-003: RDS Traffic Announcement: false inactive [ 352.946924][ T8661] vivid-003: RDS Traffic Program: false inactive [ 352.955223][ T8661] vivid-003: RDS Music: false inactive [ 352.961248][ T8661] vivid-003: ================== END STATUS ================== [ 353.170997][ T8673] vivid-003: ================= START STATUS ================= [ 353.200726][ T8673] vivid-003: Radio HW Seek Mode: Bounded [ 353.206474][ T8673] vivid-003: Radio Programmable HW Seek: false [ 353.214032][ T8673] vivid-003: RDS Rx I/O Mode: Block I/O [ 353.223107][ T8673] vivid-003: Generate RBDS Instead of RDS: false [ 353.230020][ T8673] vivid-003: RDS Reception: true [ 353.235178][ T8673] vivid-003: RDS Program Type: 0 inactive [ 353.241544][ T8673] vivid-003: RDS PS Name: inactive [ 353.246921][ T8673] vivid-003: RDS Radio Text: inactive [ 353.252993][ T8673] vivid-003: RDS Traffic Announcement: false inactive [ 353.261953][ T8673] vivid-003: RDS Traffic Program: false inactive [ 353.268711][ T8673] vivid-003: RDS Music: false inactive [ 353.274369][ T8673] vivid-003: ================== END STATUS ================== [ 356.113078][ T8697] binder: 8691:8697 ioctl c00c620f 200000000340 returned -22 [ 356.446519][ T8717] vivid-003: ================= START STATUS ================= [ 356.459076][ T8717] vivid-003: Radio HW Seek Mode: Bounded [ 356.474965][ T8717] vivid-003: Radio Programmable HW Seek: false [ 356.495384][ T8717] vivid-003: RDS Rx I/O Mode: Block I/O [ 356.516525][ T8717] vivid-003: Generate RBDS Instead of RDS: false [ 356.625502][ T8717] vivid-003: RDS Reception: true [ 356.654770][ T8717] vivid-003: RDS Program Type: 0 inactive [ 356.660865][ T8717] vivid-003: RDS PS Name: inactive [ 356.704829][ T8717] vivid-003: RDS Radio Text: inactive [ 356.716166][ T8717] vivid-003: RDS Traffic Announcement: false inactive [ 356.724028][ T8717] vivid-003: RDS Traffic Program: false inactive [ 356.825239][ T8717] vivid-003: RDS Music: false inactive [ 356.830999][ T8717] vivid-003: ================== END STATUS ================== [ 358.748385][ T8739] vivid-003: ================= START STATUS ================= [ 358.756102][ T8739] vivid-003: Radio HW Seek Mode: Bounded [ 358.895078][ T8739] vivid-003: Radio Programmable HW Seek: false [ 358.918119][ T8739] vivid-003: RDS Rx I/O Mode: Block I/O [ 358.993842][ T8739] vivid-003: Generate RBDS Instead of RDS: false [ 359.005552][ T8739] vivid-003: RDS Reception: true [ 359.027494][ T8739] vivid-003: RDS Program Type: 0 inactive [ 359.036727][ T8739] vivid-003: RDS PS Name: inactive [ 359.042591][ T8739] vivid-003: RDS Radio Text: inactive [ 359.048908][ T8739] vivid-003: RDS Traffic Announcement: false inactive [ 359.080763][ T8739] vivid-003: RDS Traffic Program: false inactive [ 359.133744][ T8739] vivid-003: RDS Music: false inactive [ 359.150937][ T8739] vivid-003: ================== END STATUS ================== [ 359.200371][ T8741] vivid-003: ================= START STATUS ================= [ 359.233922][ T8741] vivid-003: Radio HW Seek Mode: Bounded [ 359.245024][ T8741] vivid-003: Radio Programmable HW Seek: false [ 359.263135][ T8741] vivid-003: RDS Rx I/O Mode: Block I/O [ 359.306861][ T8741] vivid-003: Generate RBDS Instead of RDS: false [ 359.334739][ T8741] vivid-003: RDS Reception: true [ 359.380101][ T8741] vivid-003: RDS Program Type: 0 inactive [ 359.437434][ T8741] vivid-003: RDS PS Name: inactive [ 359.445684][ T8741] vivid-003: RDS Radio Text: inactive [ 359.478804][ T8741] vivid-003: RDS Traffic Announcement: false inactive [ 359.489034][ T8741] vivid-003: RDS Traffic Program: false inactive [ 359.495648][ T8741] vivid-003: RDS Music: false inactive [ 359.503597][ T8741] vivid-003: ================== END STATUS ================== [ 361.491686][ T8768] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 363.551765][ T8789] ptrace attach of "./syz-executor exec"[8790] was attempted by "./syz-executor exec"[8789] [ 364.948293][ T8810] vivid-003: ================= START STATUS ================= [ 364.997989][ T8810] vivid-003: Radio HW Seek Mode: Bounded [ 365.003750][ T8810] vivid-003: Radio Programmable HW Seek: false [ 365.040124][ T8810] vivid-003: RDS Rx I/O Mode: Block I/O [ 365.056397][ T8810] vivid-003: Generate RBDS Instead of RDS: false [ 365.083416][ T8810] vivid-003: RDS Reception: true [ 365.187345][ T8810] vivid-003: RDS Program Type: 0 inactive [ 365.289939][ T8810] vivid-003: RDS PS Name: inactive [ 365.336070][ T8810] vivid-003: RDS Radio Text: inactive [ 365.407558][ T8810] vivid-003: RDS Traffic Announcement: false inactive [ 365.502100][ T8810] vivid-003: RDS Traffic Program: false inactive [ 365.509190][ T8810] vivid-003: RDS Music: false inactive [ 365.518860][ T8810] vivid-003: ================== END STATUS ================== [ 369.820600][ T8866] vivid-003: ================= START STATUS ================= [ 369.886978][ T8866] vivid-003: Radio HW Seek Mode: Bounded [ 369.893269][ T8866] vivid-003: Radio Programmable HW Seek: false [ 369.900720][ T8866] vivid-003: RDS Rx I/O Mode: Block I/O [ 369.911319][ T8866] vivid-003: Generate RBDS Instead of RDS: false [ 369.918201][ T8866] vivid-003: RDS Reception: true [ 369.923688][ T8866] vivid-003: RDS Program Type: 0 inactive [ 369.929736][ T8866] vivid-003: RDS PS Name: inactive [ 369.935122][ T8866] vivid-003: RDS Radio Text: inactive [ 369.940788][ T8866] vivid-003: RDS Traffic Announcement: false inactive [ 369.947732][ T8866] vivid-003: RDS Traffic Program: false inactive [ 369.954205][ T8866] vivid-003: RDS Music: false inactive [ 369.959963][ T8866] vivid-003: ================== END STATUS ================== [ 370.080263][ T8871] FAULT_INJECTION: forcing a failure. [ 370.080263][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 370.144419][ T8871] CPU: 1 UID: 0 PID: 8871 Comm: syz.3.575 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 370.144467][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.144488][ T8871] Call Trace: [ 370.144499][ T8871] [ 370.144511][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 370.144568][ T8871] should_fail_ex+0x512/0x640 [ 370.144614][ T8871] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 370.144670][ T8871] should_failslab+0xc2/0x120 [ 370.144700][ T8871] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 370.144752][ T8871] ? __d_alloc+0x31/0xaa0 [ 370.144809][ T8871] __d_alloc+0x31/0xaa0 [ 370.144865][ T8871] ? do_raw_spin_lock+0x12c/0x2b0 [ 370.144923][ T8871] d_alloc+0x4a/0x1e0 [ 370.144975][ T8871] d_alloc_name+0x83/0xb0 [ 370.145024][ T8871] ? __pfx_d_alloc_name+0x10/0x10 [ 370.145085][ T8871] simple_fill_super+0x2eb/0x720 [ 370.145134][ T8871] ? __pfx_nfsd_fill_super+0x10/0x10 [ 370.145170][ T8871] nfsd_fill_super+0x90/0x530 [ 370.145203][ T8871] ? __pfx_set_anon_super_fc+0x10/0x10 [ 370.145246][ T8871] ? __pfx_nfsd_fill_super+0x10/0x10 [ 370.145279][ T8871] get_tree_keyed+0x10e/0x1d0 [ 370.145326][ T8871] vfs_get_tree+0x8e/0x340 [ 370.145365][ T8871] path_mount+0x1414/0x2020 [ 370.145417][ T8871] ? kmem_cache_free+0x2d1/0x4d0 [ 370.145464][ T8871] ? __pfx_path_mount+0x10/0x10 [ 370.145524][ T8871] ? putname+0x154/0x1a0 [ 370.145560][ T8871] __x64_sys_mount+0x28d/0x310 [ 370.145613][ T8871] ? __pfx___x64_sys_mount+0x10/0x10 [ 370.145677][ T8871] do_syscall_64+0xcd/0x490 [ 370.145730][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.145763][ T8871] RIP: 0033:0x7f52d978e929 [ 370.145809][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.145843][ T8871] RSP: 002b:00007f52d75d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.145882][ T8871] RAX: ffffffffffffffda RBX: 00007f52d99b6080 RCX: 00007f52d978e929 [ 370.145905][ T8871] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 370.145927][ T8871] RBP: 00007f52d9810b39 R08: 0000000000000000 R09: 0000000000000000 [ 370.145948][ T8871] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 370.145969][ T8871] R13: 0000000000000000 R14: 00007f52d99b6080 R15: 00007ffd34f1a388 [ 370.146013][ T8871] [ 370.475292][ T8876] warning: `syz.0.576' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 373.609763][ T8909] vivid-003: ================= START STATUS ================= [ 373.682843][ T8909] vivid-003: Radio HW Seek Mode: Bounded [ 373.700959][ T8909] vivid-003: Radio Programmable HW Seek: false [ 373.735857][ T8909] vivid-003: RDS Rx I/O Mode: Block I/O [ 373.742033][ T8909] vivid-003: Generate RBDS Instead of RDS: false [ 373.754878][ T8909] vivid-003: RDS Reception: true [ 373.761857][ T8909] vivid-003: RDS Program Type: 0 inactive [ 373.803118][ T8909] vivid-003: RDS PS Name: inactive [ 373.833393][ T8909] vivid-003: RDS Radio Text: inactive [ 373.845161][ T8909] vivid-003: RDS Traffic Announcement: false inactive [ 373.874748][ T8909] vivid-003: RDS Traffic Program: false inactive [ 373.896466][ T8909] vivid-003: RDS Music: false inactive [ 373.930117][ T8909] vivid-003: ================== END STATUS ================== [ 376.093261][ T8933] ALSA: mixer_oss: invalid OSS volume '0' [ 376.099319][ T8933] ALSA: mixer_oss: invalid OSS volume '' [ 376.120149][ T8942] vivid-003: ================= START STATUS ================= [ 376.224315][ T8942] vivid-003: Radio HW Seek Mode: Bounded [ 376.352104][ T8942] vivid-003: Radio Programmable HW Seek: false [ 376.358701][ T8942] vivid-003: RDS Rx I/O Mode: Block I/O [ 376.457324][ T8942] vivid-003: Generate RBDS Instead of RDS: false [ 376.463776][ T8942] vivid-003: RDS Reception: true [ 376.607561][ T8942] vivid-003: RDS Program Type: 0 inactive [ 376.613417][ T8942] vivid-003: RDS PS Name: inactive [ 376.772736][ T8942] vivid-003: RDS Radio Text: inactive [ 376.819990][ T8942] vivid-003: RDS Traffic Announcement: false inactive [ 376.847388][ T8942] vivid-003: RDS Traffic Program: false inactive [ 376.854614][ T8942] vivid-003: RDS Music: false inactive [ 376.877621][ T8942] vivid-003: ================== END STATUS ================== [ 380.024960][ T8987] vivid-003: ================= START STATUS ================= [ 380.053618][ T8987] vivid-003: Radio HW Seek Mode: Bounded [ 380.067217][ T8987] vivid-003: Radio Programmable HW Seek: false [ 380.083712][ T8987] vivid-003: RDS Rx I/O Mode: Block I/O [ 380.101690][ T8987] vivid-003: Generate RBDS Instead of RDS: false [ 380.131810][ T8987] vivid-003: RDS Reception: true [ 380.159764][ T8987] vivid-003: RDS Program Type: 0 inactive [ 380.219345][ T8987] vivid-003: RDS PS Name: inactive [ 380.310122][ T8987] vivid-003: RDS Radio Text: inactive [ 380.315724][ T8987] vivid-003: RDS Traffic Announcement: false inactive [ 380.322769][ T8987] vivid-003: RDS Traffic Program: false inactive [ 380.329269][ T8987] vivid-003: RDS Music: false inactive [ 380.386064][ T8987] vivid-003: ================== END STATUS ================== [ 381.498901][ T9004] netlink: 25 bytes leftover after parsing attributes in process `syz.1.602'. [ 382.099997][ T9013] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 383.567532][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.608'. [ 385.317463][ T9046] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967293.4294967295.4294967293), cmd(2) [ 386.347614][ T9059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.613'. [ 387.811475][ T9071] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.130985][ T9080] FAULT_INJECTION: forcing a failure. [ 388.130985][ T9080] name failslab, interval 1, probability 0, space 0, times 0 [ 388.167293][ T9080] CPU: 0 UID: 0 PID: 9080 Comm: syz.0.617 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 388.167345][ T9080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.167364][ T9080] Call Trace: [ 388.167375][ T9080] [ 388.167390][ T9080] dump_stack_lvl+0x16c/0x1f0 [ 388.167445][ T9080] should_fail_ex+0x512/0x640 [ 388.167489][ T9080] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 388.167537][ T9080] should_failslab+0xc2/0x120 [ 388.167564][ T9080] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 388.167608][ T9080] ? shmem_alloc_inode+0x25/0x50 [ 388.167640][ T9080] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 388.167666][ T9080] shmem_alloc_inode+0x25/0x50 [ 388.167692][ T9080] alloc_inode+0x61/0x240 [ 388.167721][ T9080] new_inode+0x22/0x1c0 [ 388.167751][ T9080] shmem_get_inode+0x19a/0xfb0 [ 388.167789][ T9080] shmem_mknod+0x1a8/0x450 [ 388.167825][ T9080] vfs_create+0x4dd/0x7a0 [ 388.167862][ T9080] do_mknodat+0x3d3/0x5d0 [ 388.167904][ T9080] ? __pfx_do_mknodat+0x10/0x10 [ 388.167940][ T9080] ? getname_flags.part.0+0x1c5/0x550 [ 388.167978][ T9080] __x64_sys_mknod+0x87/0xb0 [ 388.168018][ T9080] do_syscall_64+0xcd/0x490 [ 388.168062][ T9080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.168088][ T9080] RIP: 0033:0x7fbcac98e929 [ 388.168110][ T9080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.168138][ T9080] RSP: 002b:00007fbcad7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 388.168164][ T9080] RAX: ffffffffffffffda RBX: 00007fbcacbb5fa0 RCX: 00007fbcac98e929 [ 388.168182][ T9080] RDX: 000000000000010b RSI: 0000000000000006 RDI: 0000200000000280 [ 388.168199][ T9080] RBP: 00007fbcaca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 388.168216][ T9080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.168232][ T9080] R13: 0000000000000000 R14: 00007fbcacbb5fa0 R15: 00007ffc576bf5e8 [ 388.168266][ T9080] [ 388.857808][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.869013][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.359624][ T9092] vivid-003: ================= START STATUS ================= [ 389.371785][ T9092] vivid-003: Radio HW Seek Mode: Bounded [ 389.378800][ T9092] vivid-003: Radio Programmable HW Seek: false [ 389.386379][ T9092] vivid-003: RDS Rx I/O Mode: Block I/O [ 389.394993][ T9092] vivid-003: Generate RBDS Instead of RDS: false [ 389.434034][ T9092] vivid-003: RDS Reception: true [ 389.440176][ T9092] vivid-003: RDS Program Type: 0 inactive [ 389.446191][ T9092] vivid-003: RDS PS Name: inactive [ 389.453672][ T9092] vivid-003: RDS Radio Text: inactive [ 389.468695][ T9092] vivid-003: RDS Traffic Announcement: false inactive [ 389.488920][ T9092] vivid-003: RDS Traffic Program: false inactive [ 389.542659][ T9092] vivid-003: RDS Music: false inactive [ 389.555357][ T9092] vivid-003: ================== END STATUS ================== [ 389.579088][ T9093] vivid-003: ================= START STATUS ================= [ 389.878111][ T9093] vivid-003: Radio HW Seek Mode: Bounded [ 389.883869][ T9093] vivid-003: Radio Programmable HW Seek: false [ 389.942128][ T9093] vivid-003: RDS Rx I/O Mode: Block I/O [ 389.976589][ T9093] vivid-003: Generate RBDS Instead of RDS: false [ 389.998148][ T9093] vivid-003: RDS Reception: true [ 390.161633][ T9093] vivid-003: RDS Program Type: 0 inactive [ 390.253845][ T9093] vivid-003: RDS PS Name: inactive [ 390.259580][ T9093] vivid-003: RDS Radio Text: inactive [ 390.265327][ T9093] vivid-003: RDS Traffic Announcement: false inactive [ 390.274726][ T9093] vivid-003: RDS Traffic Program: false inactive [ 390.281790][ T9093] vivid-003: RDS Music: false inactive [ 390.287854][ T9093] vivid-003: ================== END STATUS ================== [ 394.860919][ T9146] vivid-003: ================= START STATUS ================= [ 394.914397][ T9146] vivid-003: Radio HW Seek Mode: Bounded [ 394.940740][ T9146] vivid-003: Radio Programmable HW Seek: false [ 394.998961][ T9146] vivid-003: RDS Rx I/O Mode: Block I/O [ 395.006612][ T9146] vivid-003: Generate RBDS Instead of RDS: false [ 395.013508][ T9146] vivid-003: RDS Reception: true [ 395.022119][ T9146] vivid-003: RDS Program Type: 0 inactive [ 395.047162][ T9146] vivid-003: RDS PS Name: inactive [ 395.088971][ T9146] vivid-003: RDS Radio Text: inactive [ 395.097219][ T9146] vivid-003: RDS Traffic Announcement: false inactive [ 395.107215][ T9146] vivid-003: RDS Traffic Program: false inactive [ 395.118955][ T9146] vivid-003: RDS Music: false inactive [ 395.124864][ T9146] vivid-003: ================== END STATUS ================== [ 395.701645][ T9161] vivid-003: ================= START STATUS ================= [ 395.766357][ T9161] vivid-003: Radio HW Seek Mode: Bounded [ 395.766390][ T9161] vivid-003: Radio Programmable HW Seek: false [ 395.766415][ T9161] vivid-003: RDS Rx I/O Mode: Block I/O [ 395.766438][ T9161] vivid-003: Generate RBDS Instead of RDS: false [ 395.766463][ T9161] vivid-003: RDS Reception: true [ 395.766485][ T9161] vivid-003: RDS Program Type: 0 inactive [ 395.766515][ T9161] vivid-003: RDS PS Name: inactive [ 395.766542][ T9161] vivid-003: RDS Radio Text: inactive [ 395.766569][ T9161] vivid-003: RDS Traffic Announcement: false inactive [ 395.766598][ T9161] vivid-003: RDS Traffic Program: false inactive [ 395.766626][ T9161] vivid-003: RDS Music: false inactive [ 395.766654][ T9161] vivid-003: ================== END STATUS ================== [ 400.747900][ T9214] vivid-003: ================= START STATUS ================= [ 400.755604][ T9214] vivid-003: Radio HW Seek Mode: Bounded [ 400.830355][ T9214] vivid-003: Radio Programmable HW Seek: false [ 400.912078][ T9214] vivid-003: RDS Rx I/O Mode: Block I/O [ 400.967251][ T9214] vivid-003: Generate RBDS Instead of RDS: false [ 400.973700][ T9214] vivid-003: RDS Reception: true [ 401.017608][ T9214] vivid-003: RDS Program Type: 0 inactive [ 401.170885][ T9214] vivid-003: RDS PS Name: inactive [ 401.223082][ T9214] vivid-003: RDS Radio Text: inactive [ 401.337378][ T9214] vivid-003: RDS Traffic Announcement: false inactive [ 401.531808][ T9214] vivid-003: RDS Traffic Program: false inactive [ 401.661100][ T9214] vivid-003: RDS Music: false inactive [ 401.666691][ T9214] vivid-003: ================== END STATUS ================== [ 402.570279][ T9224] ptp: physical clock is free running [ 403.105578][ T9234] vivid-003: ================= START STATUS ================= [ 403.156758][ T9234] vivid-003: Radio HW Seek Mode: Bounded [ 403.218043][ T9234] vivid-003: Radio Programmable HW Seek: false [ 403.296661][ T9234] vivid-003: RDS Rx I/O Mode: Block I/O [ 403.330436][ T9234] vivid-003: Generate RBDS Instead of RDS: false [ 403.336906][ T9234] vivid-003: RDS Reception: true [ 403.387371][ T9234] vivid-003: RDS Program Type: 0 inactive [ 403.433305][ T9234] vivid-003: RDS PS Name: inactive [ 403.471300][ T9234] vivid-003: RDS Radio Text: inactive [ 403.532420][ T9234] vivid-003: RDS Traffic Announcement: false inactive [ 403.539538][ T9234] vivid-003: RDS Traffic Program: false inactive [ 403.557592][ T9234] vivid-003: RDS Music: false inactive [ 403.563174][ T9234] vivid-003: ================== END STATUS ================== [ 406.615973][ T9284] vivid-003: ================= START STATUS ================= [ 406.630043][ T9284] vivid-003: Radio HW Seek Mode: Bounded [ 406.636378][ T9284] vivid-003: Radio Programmable HW Seek: false [ 406.644274][ T9284] vivid-003: RDS Rx I/O Mode: Block I/O [ 406.654948][ T9284] vivid-003: Generate RBDS Instead of RDS: false [ 406.662028][ T9284] vivid-003: RDS Reception: true [ 406.670755][ T9286] sg_write: data in/out 1624916139/266 bytes for SCSI command 0x7f-- guessing data in; [ 406.670755][ T9286] program syz.1.656 not setting count and/or reply_len properly [ 406.691840][ T9284] vivid-003: RDS Program Type: 0 inactive [ 406.700154][ T9284] vivid-003: RDS PS Name: inactive [ 406.705480][ T9284] vivid-003: RDS Radio Text: inactive [ 406.717860][ T9284] vivid-003: RDS Traffic Announcement: false inactive [ 406.724842][ T9284] vivid-003: RDS Traffic Program: false inactive [ 406.734944][ T9284] vivid-003: RDS Music: false inactive [ 406.741580][ T9284] vivid-003: ================== END STATUS ================== [ 406.751546][ T9281] vivid-003: ================= START STATUS ================= [ 406.763936][ T9281] vivid-003: Radio HW Seek Mode: Bounded [ 406.888937][ T9281] vivid-003: Radio Programmable HW Seek: false [ 406.895217][ T9281] vivid-003: RDS Rx I/O Mode: Block I/O [ 406.940696][ T9281] vivid-003: Generate RBDS Instead of RDS: false [ 406.962583][ T9281] vivid-003: RDS Reception: true [ 406.998472][ T9281] vivid-003: RDS Program Type: 0 inactive [ 407.014101][ T9281] vivid-003: RDS PS Name: inactive [ 407.022324][ T9281] vivid-003: RDS Radio Text: inactive [ 407.583590][ T9281] vivid-003: RDS Traffic Announcement: false inactive [ 407.590797][ T9281] vivid-003: RDS Traffic Program: false inactive [ 407.597596][ T9281] vivid-003: RDS Music: false inactive [ 407.603243][ T9281] vivid-003: ================== END STATUS ================== [ 408.537017][ T9308] vivid-003: ================= START STATUS ================= [ 408.640753][ T9308] vivid-003: Radio HW Seek Mode: Bounded [ 408.646525][ T9308] vivid-003: Radio Programmable HW Seek: false [ 408.718454][ T9308] vivid-003: RDS Rx I/O Mode: Block I/O [ 408.727348][ T9308] vivid-003: Generate RBDS Instead of RDS: false [ 408.733776][ T9308] vivid-003: RDS Reception: true [ 408.743084][ T9308] vivid-003: RDS Program Type: 0 inactive [ 408.749967][ T9308] vivid-003: RDS PS Name: inactive [ 408.755275][ T9308] vivid-003: RDS Radio Text: inactive [ 408.762171][ T9308] vivid-003: RDS Traffic Announcement: false inactive [ 408.770837][ T9308] vivid-003: RDS Traffic Program: false inactive [ 408.779117][ T9308] vivid-003: RDS Music: false inactive [ 408.790183][ T9308] vivid-003: ================== END STATUS ================== [ 413.655438][ T9377] can: request_module (can-proto-3) failed. [ 413.797315][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 413.847480][ T9348] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 414.573885][ T9348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 414.769814][ T9348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.786495][ T9348] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 414.840510][ T9348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 414.852967][ T9348] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 414.933688][ T9348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.952681][ T9348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 415.255769][ T9388] ubi0: attaching mtd0 [ 415.263345][ T9388] ubi0: scanning is finished [ 415.293927][ T9388] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 415.527040][ T9388] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 416.117366][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 416.540810][ T9408] block nbd7: not configured, cannot reconfigure [ 416.837323][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 416.918931][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 416.997258][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 417.798684][ T9426] ptp ptp0: delete virtual clock ptp3 [ 417.925946][ T9426] [ 417.928343][ T9426] ====================================================== [ 417.935382][ T9426] WARNING: possible circular locking dependency detected [ 417.942430][ T9426] 6.16.0-rc5-syzkaller #0 Not tainted [ 417.947828][ T9426] ------------------------------------------------------ [ 417.954875][ T9426] syz.2.679/9426 is trying to acquire lock: [ 417.960797][ T9426] ffff88814a694130 (&clk->rwsem){++++}-{4:4}, at: posix_clock_unregister+0x4d/0xd0 [ 417.970205][ T9426] [ 417.970205][ T9426] but task is already holding lock: [ 417.977612][ T9426] ffff888030b6a868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 417.987188][ T9426] [ 417.987188][ T9426] which lock already depends on the new lock. [ 417.987188][ T9426] [ 417.997617][ T9426] [ 417.997617][ T9426] the existing dependency chain (in reverse order) is: [ 418.006647][ T9426] [ 418.006647][ T9426] -> #1 (&ptp->n_vclocks_mux){+.+.}-{4:4}: [ 418.014687][ T9426] __mutex_lock+0x199/0xb90 [ 418.019765][ T9426] ptp_clock_adjtime+0x527/0x760 [ 418.025265][ T9426] pc_clock_adjtime+0x115/0x1e0 [ 418.030676][ T9426] __do_sys_clock_adjtime+0x172/0x290 [ 418.036603][ T9426] do_syscall_64+0xcd/0x490 [ 418.041664][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.048111][ T9426] [ 418.048111][ T9426] -> #0 (&clk->rwsem){++++}-{4:4}: [ 418.055459][ T9426] __lock_acquire+0x126f/0x1c90 [ 418.060861][ T9426] lock_acquire+0x179/0x350 [ 418.065914][ T9426] down_write+0x92/0x200 [ 418.070701][ T9426] posix_clock_unregister+0x4d/0xd0 [ 418.076443][ T9426] ptp_clock_unregister+0x14f/0x250 [ 418.082193][ T9426] ptp_vclock_unregister+0x11a/0x160 [ 418.088030][ T9426] unregister_vclock+0x108/0x1a0 [ 418.093527][ T9426] device_for_each_child_reverse+0x133/0x1a0 [ 418.100073][ T9426] n_vclocks_store+0x4b6/0x6d0 [ 418.105387][ T9426] dev_attr_store+0x58/0x80 [ 418.110436][ T9426] sysfs_kf_write+0xf2/0x150 [ 418.115580][ T9426] kernfs_fop_write_iter+0x354/0x510 [ 418.121416][ T9426] vfs_write+0x6c4/0x1150 [ 418.126303][ T9426] ksys_write+0x12a/0x250 [ 418.131196][ T9426] do_syscall_64+0xcd/0x490 [ 418.136274][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.142717][ T9426] [ 418.142717][ T9426] other info that might help us debug this: [ 418.142717][ T9426] [ 418.152959][ T9426] Possible unsafe locking scenario: [ 418.152959][ T9426] [ 418.160430][ T9426] CPU0 CPU1 [ 418.165809][ T9426] ---- ---- [ 418.171192][ T9426] lock(&ptp->n_vclocks_mux); [ 418.175984][ T9426] lock(&clk->rwsem); [ 418.182599][ T9426] lock(&ptp->n_vclocks_mux); [ 418.189909][ T9426] lock(&clk->rwsem); [ 418.194003][ T9426] [ 418.194003][ T9426] *** DEADLOCK *** [ 418.194003][ T9426] [ 418.202172][ T9426] 5 locks held by syz.2.679/9426: [ 418.207209][ T9426] #0: ffff8880787d22b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 418.216328][ T9426] #1: ffff8880367b4428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 418.225367][ T9426] #2: ffff88805d19ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 418.235173][ T9426] #3: ffff88814c2594b8 (kn->active#106){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 418.245338][ T9426] #4: ffff888030b6a868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 418.255323][ T9426] [ 418.255323][ T9426] stack backtrace: [ 418.261229][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.2.679 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 418.261263][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.261280][ T9426] Call Trace: [ 418.261290][ T9426] [ 418.261300][ T9426] dump_stack_lvl+0x116/0x1f0 [ 418.261344][ T9426] print_circular_bug+0x275/0x350 [ 418.261383][ T9426] check_noncircular+0x14c/0x170 [ 418.261425][ T9426] __lock_acquire+0x126f/0x1c90 [ 418.261468][ T9426] lock_acquire+0x179/0x350 [ 418.261505][ T9426] ? posix_clock_unregister+0x4d/0xd0 [ 418.261541][ T9426] ? __pfx___might_resched+0x10/0x10 [ 418.261571][ T9426] ? cdev_default_release+0x35/0x50 [ 418.261617][ T9426] down_write+0x92/0x200 [ 418.261641][ T9426] ? posix_clock_unregister+0x4d/0xd0 [ 418.261673][ T9426] ? __pfx_down_write+0x10/0x10 [ 418.261697][ T9426] ? kobject_put+0x210/0x5a0 [ 418.261743][ T9426] posix_clock_unregister+0x4d/0xd0 [ 418.261775][ T9426] ptp_clock_unregister+0x14f/0x250 [ 418.261810][ T9426] ptp_vclock_unregister+0x11a/0x160 [ 418.261852][ T9426] unregister_vclock+0x108/0x1a0 [ 418.261889][ T9426] ? __pfx_unregister_vclock+0x10/0x10 [ 418.261925][ T9426] device_for_each_child_reverse+0x133/0x1a0 [ 418.261965][ T9426] ? __pfx_device_for_each_child_reverse+0x10/0x10 [ 418.262003][ T9426] ? __pfx_kstrtouint+0x10/0x10 [ 418.262039][ T9426] n_vclocks_store+0x4b6/0x6d0 [ 418.262083][ T9426] ? __pfx_n_vclocks_store+0x10/0x10 [ 418.262121][ T9426] ? find_held_lock+0x2b/0x80 [ 418.262151][ T9426] ? __pfx_n_vclocks_store+0x10/0x10 [ 418.262187][ T9426] dev_attr_store+0x58/0x80 [ 418.262212][ T9426] ? __pfx_dev_attr_store+0x10/0x10 [ 418.262237][ T9426] sysfs_kf_write+0xf2/0x150 [ 418.262271][ T9426] kernfs_fop_write_iter+0x354/0x510 [ 418.262299][ T9426] ? __pfx_sysfs_kf_write+0x10/0x10 [ 418.262335][ T9426] vfs_write+0x6c4/0x1150 [ 418.262374][ T9426] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 418.262404][ T9426] ? __pfx___mutex_lock+0x10/0x10 [ 418.262447][ T9426] ? __pfx_vfs_write+0x10/0x10 [ 418.262496][ T9426] ksys_write+0x12a/0x250 [ 418.262535][ T9426] ? __pfx_ksys_write+0x10/0x10 [ 418.262579][ T9426] do_syscall_64+0xcd/0x490 [ 418.262622][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.262650][ T9426] RIP: 0033:0x7faffb18e929 [ 418.262671][ T9426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.262699][ T9426] RSP: 002b:00007faffc076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.262725][ T9426] RAX: ffffffffffffffda RBX: 00007faffb3b5fa0 RCX: 00007faffb18e929 [ 418.262743][ T9426] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 418.262760][ T9426] RBP: 00007faffb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 418.262777][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.262794][ T9426] R13: 0000000000000000 R14: 00007faffb3b5fa0 R15: 00007ffe82ac2658 [ 418.262820][ T9426] [ 418.621716][ T9426] ptp ptp0: delete virtual clock ptp2 [ 418.813847][ T9426] ptp ptp0: delete virtual clock ptp1 [ 418.850497][ T9426] ptp ptp0: only physical clock in use now [ 418.917253][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 418.998912][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 419.077158][ T5863] Bluetooth: hci3: command 0x0406 tx timeout