last executing test programs: 13.07108894s ago: executing program 0 (id=1732): unshare$auto(0x40000080) r0 = socket(0x21, 0x2, 0x2) write$auto(r0, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptybf\x00', 0x72180, 0x0) mmap$auto(0xfffffffffffeffff, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) ioctl$auto_VHOST_GET_FEATURES2(0xffffffffffffffff, 0x8008af00, &(0x7f0000000040)=0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{@raw=0x3, 0x80, 0x2, 0x0, "a9f05a6a0cbbd082092a95ec06adf21eb59dfcb4b3a6c3b1ecfb8d98d1feb38e54a01dccac34e40443ae5e27", @raw=0x1}, 0x5, 0x7fffffff, 0x2, @inferred, @integer={0x1, 0x5, 0xffff}, "a01cbc8c164c5942bd6eea1a3df33fdf204f2b46b319725ab8076dfba5b4a398a1f0bda152cf83a787cda209a79aaab1a52abcc12fdbf41ccb471c4c057f3986"}) connect$auto(0x3, &(0x7f0000000080)=@vsock, 0x51) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="15004928", @ANYRES16=0x0, @ANYBLOB="251729bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) modify_ldt$auto(0x2, &(0x7f0000000200)="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", 0x7) mmap$auto(0x3, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) write$auto(0x3, 0x0, 0xfdf3) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) socket(0x8, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x682, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r1, 0x80044dfb, &(0x7f0000000440)="8c650c7e995aed2adc1adda1b273474cf41bcaddfc2593d6800487f1cc6d7763e22f47bb2a2187b76b206b4e609af7de853594a9cc209dff965270381ef7ec26a0cfc50e32720f605835c4c8b24f56dbd2b43b8d051f5206a9d92aef363ec54c99c49bc8d5") 12.605179699s ago: executing program 0 (id=1735): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa}) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801) pread64$auto(r0, 0x0, 0x7, 0x100000000007) 11.437028403s ago: executing program 0 (id=1739): r0 = fcntl$auto_F_RDLCK(0xffffffffffffffff, 0xc, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) (async) read$auto(0xffffffffffffffff, 0x0, 0x1f40) stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa}) (async) stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r2, @new_prog_fd=r2, 0x7, @old_map_fd=r1}, 0x6f3) getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0) mmap$auto(0x5, 0x400005, 0x800000000000db, 0x9b72, r0, 0x8000) (async) mmap$auto(0x5, 0x400005, 0x800000000000db, 0x9b72, r0, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801) ioperm$auto(0x100000001, 0xe, 0x1) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) (async) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0xe, 0x100000000007) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) statmount$auto(0x0, &(0x7f00000005c0)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0xfffff1a0, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x7fff, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001], "80f0ad512349c230edd3e4b58bc13ab780db7a40b0620500b2ef890700646cb72e84872c40c33bb4931ed19df802252cd61e7c3cbd1dadd5bdfce0e532f961d46579a3d98dacb5a89540eba41c4248c230be36d4b6e52483c3"}, 0xfffff7fffffffffa, 0x81) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_setup$auto(0xffff, &(0x7f0000000580)) (async) io_setup$auto(0xffff, &(0x7f0000000580)) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x11, 0x3, 0x10) 8.66886996s ago: executing program 0 (id=1751): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, r0, 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x7, 0xdf, 0x65c, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) r1 = pidfd_open$auto(0x0, 0x0) setns(r1, 0x20000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0xfffffffffffff01b) capget$auto(0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r2, 0x6e69, 0x3ff, 0x0, 0x801e) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x10b201, 0x0) 7.159138492s ago: executing program 2 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_mr_vif\x00', 0x121000, 0x0) r2 = semctl$auto_GETPID(0x7, 0x9, 0xb, 0x0) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2fcb6de5f209b671, 0x0) r4 = set_tid_address$auto(&(0x7f00000000c0)=0x5) r5 = semctl$auto(0xffffffff, 0x10, 0x8, 0x100) r6 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000100), 0x26081, 0x0) sendmsg$auto_TIPC_NL_LINK_SET(r0, &(0x7f0000001c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000000140)={0x1218, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x367, 0x2, 0x0, 0x1, [@typed={0x4, 0x105}, @generic="fa454489f649750b9a8d87a639dc229b78579d9ffd4f99570b5443e49d4d5fb60afc776ba6343455c695154181878571384b7ee235938e01d2c4018358da257d274dc28a76cd498b104f11a1242435ab91182a15f53f6ae0bfb95fc0f10355831b30198e7566c250cd7e37858a74d141221fcb1295b83417d9fe74ec183428a5393487", @nested={0x134, 0x30, 0x0, 0x1, [@generic="a38612a071c833132a390caeced3b3590bf7642731a71a0e0fb96a9b24302bbac6fe4c4af3e34b7e883d5273b920f9874ce128a37d2c046d0bc8d8768f42000d573b3d1e864cc3867932df1573b150226450b894d7a6f6ec080a5321e184809bc81d431efe90a4788b798974076bd5b3eb269162df52201c80e3b29da99eda5b24bff80fd343dc9a43edd73c3cc4d3c6362b1d73b3b071337fc088fcfa99371b465146e441756659ba7fb5c4544b5f44b5174db02ddb615a0d9e9539562783c07610fb91277467707cd6f94de05ff496175027bf34e8690315396942bd45b39c65c642bcae9ce8c6581326e662ee37b8b1a05b62fa70d5", @typed={0x5, 0x144, 0x0, 0x0, @str='\x00'}, @generic="25417fd3f441cef7b59fe839013165aa99e6e572abe7fafdcd1d55a791", @typed={0xc, 0xfd, 0x0, 0x0, @u64}, @typed={0x8, 0x72, 0x0, 0x0, @fd=r1}]}, @typed={0xdb, 0x135, 0x0, 0x0, @binary="6c74c172448bfe40f7777ea7604b43e9e6a1cc9bc0c0ca30887a0d5bd0060e8df0efaaf60b18023dbd3e543e0e869e806d8cacd8b68ecee2d414b13edc6d79ef414fb7dd3feb06dfb2a8731406cba9cc64cc6a9da28ecd01a557bbd323857b2dcbb0361db550c1a0af74c73ffd533987ab7e06ba9af2db9c8001fd047d322903fb6cedb5ef240fce407558591e078f1cfcbd99dd31e9f1e2f1ae5b6e55a86de7607004308290f68971a870b43c55e74c1f7f34b804fb0c49292e745320f818767a88cdcafd2f419c466a5345a564ae3c7d19fe37e41df7"}, @nested={0x10, 0xbe, 0x0, 0x1, [@typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x7f}]}, @typed={0xba, 0x6e, 0x0, 0x0, @binary="978bf5dbd562335c4b31786c26997533184e0730e843847b6ea3ada019e6b3a316af11b760ce892607153dd0d399894407abc9072cb49ec89e8ec5c7eaf73cda92684e4691544f1fca12a6a070721692fdccbab2c635e84f29672ceaadbca11e727930d044472bf051e0b7d7c77f95a3e2bc30577adda6f114e2cf3dffca6e36b736c3eed540baf7fcca31980b29a2d48101c036e15518a0c637420fe0c1725f573cac2e1132a9f3cd2b158851e1af6c58e37e4605ee"}]}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0xd9}]}, @TIPC_NLA_LINK={0x40a, 0x4, 0x0, 0x1, [@generic="62aa62d9e3df41f392b9dffc4554175f48c7de2f14168e2f3db0a0f73cb06e3ac7e6382b0a63b5fd59b2c7a6b5977a5dd16a9933c108f97e814f603071da4e80492e59194fcd13b80d11a68b90687e1be9a6cf82a4dd4b2bfd25c08968c5e30ceaf8d7024ca650decda9da24e0b6d03b33c945d8f97440d75bb4a5343202ab1aec278c3fd318e5", @generic="8a744a62131178d136ca34c7aa6e87d1a7ec878ca14b56b9e0408baee2df82d26121116e66007c275ea08fa8f38d98500bcce802cb43b9aa394c820fd7f72f82872975d43cadfee50593a1e0b26e8f7404aef77f5296ae", @typed={0x8, 0x5a, 0x0, 0x0, @pid=r2}, @generic="fa46c81899005820f9b5c1c5177fa62072c1102ae475ab8e57b3a9bfcd2f284e3445981f25c7224867f1ecc4211406b860c368b10aa3dbf51a09b8727547e422008b0629c01e96ca84b77fb32e86ac731786b231af43fee67c0a4e57c25f0945b670208cf648aeb6fb956627ed2e0cc0320b0065884e1cf3ca49", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x116, 0x7e, 0x0, 0x1, [@generic="a6978de775e36b4dae5d119d81b9a4e75b2b725dcf1e115e486c24897d2a283e2305c91bb52368799f30682bb9591379561b63", @generic="edf281ee892c4e42db3b0924fd284d317d4f9d538d01ee357f3cc77e86ffb8775529b3d345840d4b24259bea4a3cfcf826121a9959ddfeb5638dea3c98c7cf8512066f6bed1a021857da0ada66ddb6e92f5283838a3cb157bd69e653b39b5b3ed78526488b7eaaa08f6ddf7f418c219c48910d93217e5c81fa88aabacb835475faf51538416bbef26e413ee25d915f8f52587945eb8f3f433a946a961fa18f1e5b459f5e3d9740ea676ad02e0d265a1724e7095a1850f4d18b45a617d777e4ae6f91f5457aee23b1745f88ae0dd051a8d2bfb2bf6cd51436fa234f8f3d5c6a"]}, @generic="d127e97f87f34523495f1cc4613d1615ffae5ee0f97a57ce0ff3af98a951fae50e5feb5bbe944242efc38ff8d3eef24614a199a5ee4d82f533f381f927bd242535ed75c221881d38673f4325380835a5a6a61eba8b261811a9dc8ca1199fb3e965a9e6b72fd1a3e7d1145195eafd9fed744377ed938709bf6b7058cae2c112f78eeaa9", @generic="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", @nested={0x4, 0x119}]}, @TIPC_NLA_PUBL={0xa88, 0x3, 0x0, 0x1, [@nested={0x185, 0x21, 0x0, 0x1, [@generic="707bfabd104396639a46070c0e1059c757a216bac13c8fa510552b2efbc83bb3e392b20a6d3319eee125d3e70d9a6ceddb00dd3707d32286c749893bef44d0006f15bad3707d63b0264ce920ba915975409785fd83a0b43194da4fadfd21230328e9a7d77048944996c1a8c9dcf142aef626acdf9bb37e65fc662a418107341cef8d4f13bc07cf472f79311edf1659047ebe4e3e3dcfed69e51d1ca24fce10d71ed07b6eabdbcb44c62d3d6a9af29023a26a1cdac436d485d815475308a1e98f6d1850637044da2449b2df84ba2c6d82b2c8d7355fff277665ee573b30163e8f1a7bf4518d24ea33a8d432091f9b6dd65c0d", @nested={0x4, 0xf}, @nested={0x4, 0x14d}, @typed={0x8, 0x10c, 0x0, 0x0, @fd=r3}, @generic="baa19250e13afb53cb1c700bb3a0771abcc9d8a471b8c3e6e6df9c8515c4eaff72627aece0f8dc7153d4958f265f42dbc26ddbf2979c9a011c7ccd846ea1bdc1fabda29e03ed58e8fee698addbaa58f0fd3975f9679afa440684720fd9a4db7ae4a5e3a442c8efcaf066e1e7dbf843bc4055d0", @typed={0xc, 0x8f, 0x0, 0x0, @u64=0xfffffffffffffffb}]}, @nested={0x36, 0x41, 0x0, 0x1, [@generic="a2651f34724a1e9f6d05ad2264ebe52eca0bd7f60fbb59b7473a2a0c0e52c731d8a14e6c4c0e79a5e9ec1fe62ad92f2f3e1a"]}, @nested={0x7d, 0xe8, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @pid=r4}, @typed={0x8, 0xad, 0x0, 0x0, @pid=r5}, @generic="d5da9759272a66972f9feed675921a20f935f9c560f0fa6378840644655bc71dc4dea17a88ffa25900ec05043e8ddda4a6102cd595dc10b77882374c48af591986e3c6214b916e5d625d315363da8c6ee1", @typed={0x8, 0x18, 0x0, 0x0, @u32}, @typed={0xc, 0x149, 0x0, 0x0, @u64=0x1}, @generic, @nested={0x4, 0x2b}]}, @typed={0x8, 0xc4, 0x0, 0x0, @fd=r6}, @generic="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", @nested={0xc, 0x140, 0x0, 0x1, [@nested={0x4}, @nested={0x4, 0x77}]}, @nested={0x2e, 0xc0, 0x0, 0x1, [@generic="a8e17c91cd45a32e53e23d57846bab8ea0c56c3e0dcb5d156e76a7012d868d92560f9b2a61b101ed35f4"]}]}]}, 0x1218}, 0x1, 0x0, 0x0, 0x21}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/bInterfaceNumber\x00', 0x103080, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DISABLE_SE(r7, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x70, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x7f}, @NFC_ATTR_VENDOR_DATA={0x41, 0x1f, "46e9ca9698600baadac696a6c968946c9e3bc0b293afd5700ecb8d539ce4f7eacadcc330ecda250c5a5ded3014b060bd1aeed0097d501a4a2bec88a6c7"}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x50008000}, 0x4040014) r9 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001e80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x180400, 0x0) read$auto_ftrace_subsystem_filter_fops_trace_events(r9, &(0x7f0000001ec0)=""/56, 0x38) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001f40), r0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001f80)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001fc0)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000022c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002280)={&(0x7f0000002000)={0x27c, r10, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xffffff7f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x581}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @u32=0x7f}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@local}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c1, 0x2, 0x0, 0x1, [@nested={0x13d, 0xec, 0x0, 0x1, [@generic="6f682c92b6f3cfb4453e2a457ce4ab71b85b18ed5b5a8eebe8c974148948", @nested={0x4, 0x14f}, @generic="b535eb5f4361df0bcca66d67704854e409fa5bde63efe59ae39635c8284debf259dd61f3a78704621cf31d0d726f2c56fae517c1265e079c36cb801a72df789a3cfd9efe02adf66f55923da124976007efe7d675c3641a9478f2f44c11a63d898db396be775ded9f597776d0c54ff138e223eec080c0ec1678d12e17c132ed701597cdb0aa177397eedf6dd2c97396e97ed2f0db22e09c93dd21e689f8a1a84a9dcf9973243a04e69670afeb00b82585cdb85beffd9a0279867d9dc49c", @generic="56ac69f473e361bf16c2d46cd90311049ea78e2449686985225ef9f291bedc7a62f49003aa521d205678aa29642b7f890f47d00b23b4936bdbe711ba163a17a24ad6e47d0b7f1e2a631d8be76a75c341d366bdca4b162597ccc4"]}, @typed={0x4, 0xe6}, @generic="cacb1fb474d89d45f5ffb21c51c50392efef07949c896e5cf76a4d74fb8186745e686ed24f70f565f71cc3006971f258b2deca549345fec0a4fdcbdd5f429158e097fea1818ac226d8978b749d6fa66d5860bea0a0748da6d9970e37332088f910966243d4863926aa9cf7c442e87f6ceaebe90eedfda435f8"]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x80}, 0x881) kexec_load$auto(0x1c0, 0x8, &(0x7f0000002340)={@buf=&(0x7f0000002300)="aa156a47b166f8ab455e382cea82e9cfefa82a367c22d83fb75fda29c8fc3d6409ff7a3d4da9d956", 0xfffffffffffffff7, 0x5, 0x5}, 0x8) r13 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000023c0), r7) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r13, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000024c0)='/sys/devices/virtual/block/nbd15/queue/iostats\x00', 0x30200, 0x0) socket(0xa, 0x1, 0x0) inotify_init1$auto(0x2) r14 = socketpair$auto(0x10, 0x10, 0x6, &(0x7f0000002500)=0x6c) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f0000002600)={{0x7ff, 0x0, 0x0, 0x3, 0x1, 0xdf40000, 0x400}, 0x1, 0x5, 0x100, 0x10, @raw=0x2, @raw=0x16, 0x9, 0x0, &(0x7f0000002540)="35efa2ac4051", &(0x7f0000002580)="5382dfbdc95905c01bd2fb608cc2c6535588f51ca3ddcacbcce3f6a6dbcb0dab1a3decf4043ed225e4a2d41167d64ce61ea99b9d52ead18c9d792b09c2f54927017beb325dcee729c0be"}) msgctl$auto_MSG_STAT(0xe1, 0xb, &(0x7f0000002700)={{0x9, r15, 0x0, 0x3, 0x57c, 0x1, 0x80}, &(0x7f0000002680)=0xf7, &(0x7f00000026c0), 0x6, 0x9, 0x8, 0x0, 0x8, 0x5, 0x1, 0xf, @raw=0x1, @raw=0x80000001}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r7, &(0x7f0000003b40)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003b00)={&(0x7f00000027c0)={0x1324, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r14}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x1}, @NL802154_ATTR_SEC_DEVKEY={0x12dc, 0x2f, 0x0, 0x1, [@generic="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", @nested={0x2d6, 0xab, 0x0, 0x1, [@nested={0x4, 0x5}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x4}, @generic="bb3e6c209fd49a49865529555fe1b0e435ffdb3fea3bb706a4ef9004f1f39236b1083651375a79fabaa90ebe342026c3897f9e957b146382d98519aaa52bdba12318f4ce2219b03344e1372e12f57eda18c231ad3769a3cd6605c4f2e7e4550a81da3e354d5b97555b8f4f7fd2ec69ae05adeb0abc56f09314a802a1bae4432d98ea8f7ca146d6ffaec2825e934a4e2f12dd04c866dbea4530135d5f3f83983ccdf65b5b1947677b8c656f687a3bd4ffa813425b3d5b17db03", @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xd9}, @typed={0xc, 0x13c, 0x0, 0x0, @str='ethtool\x00'}, @typed={0x5c, 0x44, 0x0, 0x0, @binary="a209a81c08b1aa6b221f9b039f230cf68fd50c7e7e95143bf6422066df14e03d542591e32d7253e84de368540e63d2dead64596b0138957cf314fcd0972b7eba98fd8ff24fce3fff94a6220e76ec6adebd475a6001109c3d"}, @generic="4fc93d58ac54210b4d4496a2bc1d753aa0ceb27ee3ca6d4612fcf1e714df7fea1c31f10fcc4e2f79bf415f1242c71a9b98ec8c3ab809cbca88a978bd9ce59893696fa58b13dea7a21eecb098f9ecf5dd69f891f150e059d35eb012e4ccfe12b2fc1679fe259546b8839b345b85d2b56d9da92ff8808c3cd9a1f7965a959c9b566f8d1dbc2c632f5e89f39f9df5ce4c48c4a80127667791ee6011e12503e291bd203f7189d445825379d771c4b9fd5a54eddaaca71da554a79039405f0105da9c226492bc631def407f6ed84c81e57f4275a2f42b9c4984dc4dfc57edbb0c9eb8d5d82f7b28a374c5c28485082100200bcafafc55d986", @generic="db80f0170e07073376d0b69962245fee6c354d1bf4e9bd3ddfa3f614eac141aa21dfdf281147cb9a827e96b4e2a5ad304db3f78b047084db0fc428c1d58481b019ba59ccebd5d9d0b91350c437", @generic="9d0dfb9622fe4238954a47af2bd375c4389ce3dcdb2324ef5f776b0a1311060ac754e04ad1c2059ae06c838000d47b06df328ab61521343f8912ddfd2d774695f8e7296e3e9e"]}]}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7fffffff}]}, 0x1324}, 0x1, 0x0, 0x0, 0x24040011}, 0x4040) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003b80)='/sys/devices/platform/vhci_hcd.15/usb40/40-0:1.0/usb40-port5/power/runtime_status\x00', 0x2100, 0x0) read$auto_event_inject_fops_trace(0xffffffffffffffff, &(0x7f0000003c00)=""/173, 0xad) 6.906858787s ago: executing program 2 (id=1756): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x3, 0xa, 0xffffffd) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xc, 0x10002, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x5) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x53564d41, 0x0, 0x0, 0xd, 0xf4ff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setsockopt$auto(r1, 0x6, 0x3, &(0x7f0000000040)='/dev/ram7\x00', 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x0, 0x0) ioctl$auto(r3, 0x541d, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2, 0x2) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) 4.929049239s ago: executing program 0 (id=1760): mmap$auto(0x0, 0x1000000000000c, 0xfffffffffffffff7, 0x2000000eb4, 0xffffffffffffffff, 0x4) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) rt_sigaction$auto(0x4, 0x0, 0x0, 0x8) gettid() mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x2, 0xfffffffffffefffd, 0x15) io_uring_setup$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x9, &(0x7f0000000000)={0xc, 0xf1, 0xb0, @raw=0x43}}) write$auto(0x3, 0x0, 0x5c8) madvise$auto(0x100000000, 0x200007, 0x19) r3 = socket(0x2, 0x2, 0x38) getsockopt$auto(r3, 0x3a, 0xce, 0x0, 0x0) mmap$auto(0x0, 0x408, 0x3, 0x20000000eb1, 0x401, 0x4000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) socket(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 4.46063129s ago: executing program 1 (id=1762): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x3, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) 4.209905321s ago: executing program 2 (id=1764): madvise$auto_MADV_REMOVE(0x80, 0x7e492839, 0x9) madvise$auto_MADV_REMOVE(0xfffffffffffffff7, 0x7, 0x9) madvise$auto_MADV_REMOVE(0x8, 0x8000000000000001, 0x9) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) read$auto_userio_fops_userio(r0, &(0x7f0000000040)=""/42, 0x2a) madvise$auto_MADV_REMOVE(0x3, 0x5, 0x9) madvise$auto_MADV_REMOVE(0x0, 0x8, 0x9) madvise$auto_MADV_REMOVE(0x6, 0x2, 0x9) madvise$auto_MADV_REMOVE(0x0, 0x9, 0x9) madvise$auto_MADV_REMOVE(0x1, 0x4, 0x9) madvise$auto_MADV_REMOVE(0x0, 0x5, 0x9) madvise$auto_MADV_REMOVE(0x2, 0x152fc0000000, 0x9) madvise$auto_MADV_REMOVE(0x1, 0x9, 0x9) madvise$auto_MADV_REMOVE(0x7, 0xf, 0x9) madvise$auto_MADV_REMOVE(0x80000000, 0x100, 0x9) madvise$auto_MADV_REMOVE(0x10, 0x5, 0x9) madvise$auto_MADV_REMOVE(0xfffffffffffffff7, 0x3, 0x9) madvise$auto_MADV_REMOVE(0x5, 0x8, 0x9) madvise$auto_MADV_REMOVE(0x2, 0x1, 0x9) ioctl$auto_TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)=0x5) madvise$auto_MADV_REMOVE(0x4, 0x4, 0x9) madvise$auto_MADV_REMOVE(0xee, 0x3ff, 0x9) madvise$auto_MADV_REMOVE(0x4, 0x1ff, 0x9) madvise$auto_MADV_REMOVE(0x3, 0x2, 0x9) madvise$auto_MADV_REMOVE(0x6, 0x1800000, 0x9) madvise$auto_MADV_REMOVE(0xacf, 0x3, 0x9) madvise$auto_MADV_REMOVE(0x8, 0x2000000, 0x9) madvise$auto_MADV_REMOVE(0xac5, 0x3, 0x9) madvise$auto_MADV_REMOVE(0x800, 0x8000, 0x9) madvise$auto_MADV_REMOVE(0x4, 0x40, 0x9) 3.190431305s ago: executing program 2 (id=1766): mmap$auto(0x0, 0x2020008, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x2, 0x4000) setsockopt$auto(r0, 0x11, 0x66, 0x0, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x3af4, 0x1b, 0x93c, 0x1ffdc, 0x5, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8003, 0xae, 0x9, 0x922, 0x7, 0x40005, 0x5, 0x6, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}, 0x1fe, 0x81) socket(0xaac6e166422458ed, 0x5, 0x2) shmctl$auto_SHM_LOCK(0x200, 0xb, &(0x7f0000000500)={{0x1, 0x0, 0xffffffffffffffff, 0x6, 0x7, 0x2, 0x5}, 0x4, 0x7fff800000000, 0x3, 0x1ff, @inferred, @inferred, 0x80, 0x0, &(0x7f0000000380)="18ca491be5c00c6cdb6cd66fb88afc9e8429e67cb828707c6492458b77b48d16bb1aae756aac3525ad22f86ec12e5375f151e2d6c45b0b39b19a41137fc7d8c33eb179e7884d9901401475eb2a09fc8e0709", &(0x7f0000000400)="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"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x1, 0x5, 0x0, 0x81, 0x6) syslog$auto(0x3, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x64, 0x0, 0xfff) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020aeb2, 0x38) setfsuid$auto(0xee00) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) signalfd$auto(0xffffffff, 0x0, 0x8) openat$dir(0xffffffffffffff9c, 0x0, 0x840, 0xc) socket(0x1d, 0x2, 0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x0, 0x9, 0x13, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 2.987787791s ago: executing program 3 (id=1767): capset$auto(0x0, 0x0) r0 = socket(0x1e, 0xa, 0x2) setsockopt$auto(r0, 0x110, 0x5, 0x0, 0x82) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0xc8c4}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b67, 0x1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xa0000000) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) socket(0x11, 0x1, 0x87) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000240)="285ecf7e037b55e1ab7a4f76992f65c6415bf83a1dbdf2c6c5e006b2e5e027c00f96dad6274a64b2878a42144a92217419d1586fc6d20bdf574fae2b958d59a2518677c559eba44de9112cf6c105ae3cdb84ec418b1a6f02d8fa7f9f93f6fd92bc4e4c39199566e6357935fffc05c8b7523b36cd1db40563ab0df018172ca9860267e22834fb3e01c71b86121c9b09f81877d895ba10c871673dc023c9a133074d031b377b9b1c638b2450d6e400") ioctl$auto(r3, 0x541c, r4) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f0000000580)="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", 0xace) setsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x9, 0x23, &(0x7f0000000140)='/dev/tty12\x00', 0x7) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x10000, 0x0) 2.860499226s ago: executing program 1 (id=1768): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) mmap$auto(0x8, 0x7, 0x8000000000000000, 0x800009b74, 0xffffffffffffffff, 0x0) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x80000000) read$auto(0x3, 0x0, 0x80) ioctl$auto_SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000004040)) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x100000000002, 0x783, 0x3, 0x8000000008011, 0xffffffffffffffff, 0x40) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x87, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto_SO_PRIORITY(0xffffffffffffffff, 0x3c00, 0xc, 0x0, 0x1) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) msgctl$auto(0x8000, 0x6, 0x0) socket(0x21, 0x2, 0x2) 2.59302398s ago: executing program 0 (id=1769): mmap$auto(0x0, 0xc0009, 0xbde, 0x400080000011, 0xffffffffffffffff, 0x28000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r0 = socket(0x15, 0x800, 0xfffffffe) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="d651d985eaf7"], 0x1ac}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x6}, 0x803}, 0xfffffff9, 0x10, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) mq_open$auto(0x0, 0x8, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x103800, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat2$auto(0x1, 0x0, 0x4, 0x1000) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 1.872985781s ago: executing program 2 (id=1770): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/extended_iref\x00', 0x18b440, 0x0) read$auto(r0, 0x0, 0x10000007) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/03.0\x00', 0x641, 0x0) write$auto(r1, 0x0, 0x9) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000100), 0x32c02, 0x0) r2 = epoll_create$auto(0x2) newfstatat$auto(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x101, 0x85, 0x5, 0x832, 0xee01, 0x0, 0x0, 0x7ff, 0x7ff, 0xdaaf, 0x83a2, 0x11e, 0x10000, 0x0, 0x1, 0x81, 0x8}, 0xfffffff1) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={"656dc26f3e30174718144e13a683e98f86f3ae12df0797cd8fc75a85ebbe7945", 0x2, 0x7d, 0x7fffffff, 0x5, 0x8, 0xffffffffffffffff}) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000300)={"9344d396ab16d88427768aa277d9e362cadd4466db4b0821765efb587232c761", 0x6, 0x500, 0x1, 0x3, 0x3}) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)="924b63998fc8789b9c765ad23a5a1da5b70cec9931f72d112722a0987dc8a2a1153be79ae881074b7b1379a2c73c2f1d5cebbea94c8514afece2a76cbdf85e23221fa99dc6527513c7eb7efd9c9df3126c2981dc9760e01b1fcfdcc92ee41e5fd1af19a06f1162f2dbcd23bc7b99d03ea8e6ac83ebc6069f2a0916164462ce6b882be70bb368ba29b2704f494882f0a44770b0c8dbef38ff749aaaeaac38d741", 0x3, &(0x7f0000000140)="7d237a6597e744b5a2e26a1b2af6bd72ed36cabaa8c451bf33fd5ab0eb967e2f9e2f8cfd16a2da9a85733396e594468adab802db02c3d24e4a27f9ab63b692048b7bfb9687da4c6a73b029e32e6b5c158f1b7297a566f7594087cd092f743f72d21b9fbedc65be", 0x1, &(0x7f00000001c0)="a358775642a6c3743d92fe761203e986f1578e3a3a9b99907505d9fca43b43063e10c35ff244da89de305e76c6464f12de1a72fd87f52d81600bdc07389315fba5401f008b5488c412c20db640758ba080016dcab6061059a07e19da42743ae3e256e44b383364c83aadafb2175c6b", &(0x7f00000000c0)=0x3}) setsockopt$auto_SO_REUSEPORT(r3, 0x1ff, 0xf, &(0x7f0000000280)='\xcb\x00', 0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x1, 0x106) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x5e, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0xeb0d, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 1.867941634s ago: executing program 3 (id=1771): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 1.502315008s ago: executing program 3 (id=1772): mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf2501000000100007800c00018008000180000000400c0002000600000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000ff0000030004020000060007040080000300000000", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000300000008000200", @ANYRES32=0x0, @ANYBLOB="0800030001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x401bf, 0x7, 0x3c, 0x65f, 0x1ffde, 0x84, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x80000000009, 0x6, 0xdec3, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x185c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060006004000000006000600070000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x4000844}, 0x40090) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x44801) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000003c0), 0x40300, 0x0) 1.488610165s ago: executing program 1 (id=1773): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.prssure\x00', 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000dfcd2be49c66d9f7c4b6963a6703b69604950ac2484185ad82a860ab838e22cba60cfd7bfd43", @ANYRES16=r2, @ANYBLOB="036c25bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) readahead$auto(r0, 0x4, 0x0) sysfs$auto(0x3, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresgid$auto(0x81, 0x800000a0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x2, 0x32, 0xfff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r1) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x2, 0x1, 0x3) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1c, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x41, 0xfff}}, 0x7, 0x5, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xa, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) 1.176756332s ago: executing program 3 (id=1774): ioperm$auto(0x3, 0xe, 0x2000000000000149) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video44\x00', 0x8a240, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020011, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020011, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) memfd_create$auto(0x0, 0x4) (async) memfd_create$auto(0x0, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4018aee1, 0x1000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) fcntl$auto_F_SETLKW(r4, 0x7, 0x0) (async) fcntl$auto_F_SETLKW(r4, 0x7, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r0, 0x5646, 0x7) 745.070047ms ago: executing program 1 (id=1775): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) recvfrom$auto(0x3, 0x0, 0x400d3a, 0xfd, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 527.734403ms ago: executing program 1 (id=1776): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/environ\x00', 0x400000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1a4, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_NAN_FUNC={0x7c, 0xf0, 0x0, 0x1, [@typed={0x14, 0x52, 0x0, 0x0, @ipv6=@private2}, @nested={0x64, 0x5a, 0x0, 0x1, [@generic="a3e768f2ef5aefa91646f03b3ddd82ed7037ed2b9681cb9283b78b9180f81c4e24095898ad437d9e7f3cc9e7f32127172a383dc7071f880439f174108f8bd35424581bb5", @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}}, @typed={0x8, 0xfb, 0x0, 0x0, @fd=r2}]}]}, @NL80211_ATTR_BEACON_TAIL={0xe8, 0xf, "7f1f37dd8c56b4ce6b0d15dc20505949aaae4f9a1fee1d5e4ffc21f8cb5d3175ea2af42174bbbe25cb7235cbcfd375939fd17fc1f900abef150023d2df7a1ce8778e9d49023df1e2b07d634eafc224090267b523cab72b4bda5fd565c07627ea54b455208a9c9bd713e4aee5162929f3e5bd219400ac1154fd2cee81714c1a031223652117162e455c12c1f4643997f3eeb1ae42fdb6babe1b6e3542ec2723e8d713b0346293ac8b43bfe9acfc513bd8dea00843ff8dbdeb4116c224881028ea55ec575cbce16e5208e19848f3da66d7a5c39a42793dcd93ced989bf96b648c548158eac"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}, @NL80211_ATTR_PUNCT_BITMAP={0x8}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000014}, 0x40080) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) select$auto(0x6, &(0x7f0000000040)={[0x5, 0x4, 0x6b, 0xff, 0xfffffffffffffffa, 0x3, 0x7, 0x11b, 0x5, 0x10, 0x91, 0xfe30, 0x4, 0x8, 0x1, 0x7]}, &(0x7f00000000c0)={[0x3, 0x2, 0x6, 0x8, 0xd, 0x7, 0x10001, 0x9, 0x100000001, 0x8, 0x46, 0x1, 0x3, 0x6, 0x6, 0xf5]}, &(0x7f0000000140)={[0x9, 0x0, 0xab, 0x4, 0x8001, 0x200, 0x3, 0x4, 0x3, 0x8000, 0x9, 0x5164a61c, 0x7, 0x40, 0x0, 0x3]}, &(0x7f00000001c0)={0x4, 0x6}) 370.654178ms ago: executing program 1 (id=1777): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x20000000) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(r0, 0x1, 0x9, 0x0, 0xeb66) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) socket(0xa, 0x3, 0x3b) sendmsg$auto_NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000040)={0x550, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x328, 0x6e, 0x0, 0x1, [@nested={0x13b, 0xd, 0x0, 0x1, [@generic="5cae3ecada74acb60c96c036ffb9fe3485f981da63e521a3dbc7e55b9fe78c7f470c1d2ea5d4e1e9fa0001962b2d3dd00978a21124217c91c10ead875aaa08909ec3bea31942a657ac2b2eef8f599c352cd3b611418b8b11ee88980ec8a6bc2dc6bc80791677e855e3db572b8a367044a060", @typed={0x8, 0x148, 0x0, 0x0, @u32=0x5}, @generic="7702519f4ab3d70aa5e2a6a1932618658c44942d01a2b8386df503110d84f6f3d2cb5a54e9443fef4e1b9ac40e47ce07173ce9a01e4c6c3b83b84a2ab27cea5dc1b044c1c031dff8b90f332c8a06555bc62d627446713b0fde725145d109cb93c5ee990b0d758bf3092d8c56253b8b28173ea7b235c0273c6416bab531e8cef03264c95447e4075facd14067801a36cb14f98a54804b0d9bcc0f28157574b3d0a46eac70df442ea204c4220621918d8cbf939969b6bda027142d5cee83"]}, @generic="90bc0e572c40bc08f571d5ff733813a84ee61f3df8c85af95b7eada6871ad77ff9d5d5d6b768603f56a1f6f3a76a331518ed655a95955446d6e4943b2108051e1d4116699215eab79db8f2e062118ec232712c0f5956ef15999e4e1cf7b9a43ab2ebad84d431bc9699d286e5cece19dd05a142dfb484051e36b51c911443ba93e73ace2f9260dee4dbcd69e39a30f81a9e6fc0d6ae457af90abd4e37af13c4dca50cb15ae613c5a212fdab818361e7fd568efb0848b12bd38344b1f8ba2b2f7119c1ede97d2a2e2c0c83e763cf6bc3c4297cffdefd817194a81dbf38340abc8a48890be6613bf4d16bc18f1379bc54ad0dc3d472", @nested={0xf2, 0xb0, 0x0, 0x1, [@typed={0x4, 0x7a}, @typed={0xc, 0xc5, 0x0, 0x0, @u64=0x1000}, @nested={0x4, 0xc3}, @nested={0x4, 0x119}, @nested={0x4, 0xba}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x42, 0x0, 0x0, @fd=r1}, @generic="cbaae0d9a808a82dd3c1b3534102f7781613e8fece23b1f535302c7850f925657fd8875386a9ecee254015040c0af96e7469c6275a9d8197655246cb7b90eb1c8c31d6b4c4f3a7f1dd48c4eac8dc17d7b096f39e544fbb3be79aceea56644befe2cb12b810f614cf8f652e286d367559de886d45257faf85845b5cf7980db49d1eaf721afe616d30d1b9c41ac4d48c3aa2758c23d8685560ba834ec87b5935b8d70635668fb5e6e455d8f3c88cc81b3a8af4b598a76970ebc34d91ad48e1df04eb62"]}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1eb, 0x75, 0x0, 0x1, [@typed={0x14, 0x97, 0x0, 0x0, @ipv6=@empty}, @generic="a6c5c28d50f1fd425da3a75ad1dafdc8012e2ba91e4b41456d9b610ba0105ff84d0688df41795067f47f87a102a8986bbba1414d190c0690690138cae29b8b", @nested={0x15a, 0x36, 0x0, 0x1, [@typed={0x5, 0x118, 0x0, 0x0, @str='\x00'}, @generic="b4099161a0226aa584bbda4ecd6e682e5add8bcc991b8472b1aa377cc16c6d2dc1dc2979826f5c8282a5fe5d26fcca89fb0a5e94c1884b1a5127486b08751d9a4ef545310a3d1206bf5b6de7212ec33e133d8314aa2e8a779f374df61084bf", @generic="b68b9779a72db9fd88ffef91be26ffa643c171f3bbf528bd725885036a2e9a68c32c8f2eb9768822aa9a2a211a30fb22369af4bb981cc0255803646f8de3e429521cafc023d92560cd668911bd89429b77fd02a02b1ece75f86602e9f41f11e41f750e689e9872696b95ed6eb245ca9085e89b259b5a0416230d1891ea1eecf77765faa36b0f9ed260d7db21ce35507afa2d2327ad7129e452c9cb5c25a192afcafc1bcacda338d8f89bd1e1f5a251d709160d30a62d712f9bb4f6d51695011b91de0e9b13fc88c593354be51e6263f109a2c97c95c2015a2d51e4d0e8b8af3c2062a0cc82ba8ebaed6fc6a5f7b5ff"]}, @generic="2e92f03121ab15d5b51c5b016ddc86466227362bec4a6040fb4d45bda0e2fcc5970f840f410fe5a6", @typed={0x7, 0x8c, 0x0, 0x0, @str='}]\x00'}, @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@remote}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}]}, 0x550}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}}, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af03, r4) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 224.845453ms ago: executing program 3 (id=1778): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-256kB/stats/shmem_fallback_charge\x00', 0x101100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000640)=""/177, 0xb1) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) 123.713555ms ago: executing program 2 (id=1779): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0xa, 0x3, 0x3c) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r6, 0x5609, r5) madvise$auto(0x0, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r7 = open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r8 = ioctl$auto_NS_GET_PID_FROM_PIDNS(r3, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1f6507b372a7171d7f02c15b56585f7267beff62c06636b6deffc8ba94eb5c20e23a59627901f0e77981ed837f8cc67cd77b6fee69b1c6a5cd30b5ec9e18bc10144be564ae43a3d0a6551a9a2772df4667cec64b376ccc84a8190b9a363ee28b195c26c63eb567c89b00fb506b0ce75028345424a75530a2da5802a433456bc08437a5876a47f73fe14c9ce4fa73c3b32c5dfd6a251bbaf4b10c8a237a19f7daaee6fc501cab1f44595d6cc94af4ceecf96c7f23a", @ANYRESOCT=0x0, @ANYRESDEC=r7, @ANYRES8=r8, @ANYRESOCT=r5, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) 0s ago: executing program 3 (id=1780): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r0, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x240, 0x0) pread64$auto(r1, 0x0, 0x200000000003, 0x2f4a3a23) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(r0, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x240, 0x0) (async) pread64$auto(r1, 0x0, 0x200000000003, 0x2f4a3a23) (async) kernel console output (not intermixed with test programs): ID: 11025 Comm: syz.0.1133 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 470.642797][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 470.642811][T11025] Call Trace: [ 470.642818][T11025] [ 470.642827][T11025] dump_stack_lvl+0x16c/0x1f0 [ 470.642865][T11025] should_fail_ex+0x512/0x640 [ 470.642898][T11025] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 470.642940][T11025] should_failslab+0xc2/0x120 [ 470.642969][T11025] __kmalloc_cache_noprof+0x6a/0x3e0 [ 470.643007][T11025] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 470.643038][T11025] ? kobject_uevent_env+0x265/0x1870 [ 470.643065][T11025] kobject_uevent_env+0x265/0x1870 [ 470.643088][T11025] ? __pfx_dev_uevent_name+0x10/0x10 [ 470.643129][T11025] ? __fget_files+0x20e/0x3c0 [ 470.643177][T11025] lo_ioctl+0x40e/0x27e0 [ 470.643216][T11025] ? kasan_save_stack+0x42/0x60 [ 470.643238][T11025] ? kasan_save_stack+0x33/0x60 [ 470.643260][T11025] ? kasan_save_track+0x14/0x30 [ 470.643283][T11025] ? kasan_save_free_info+0x3b/0x60 [ 470.643316][T11025] ? __kasan_slab_free+0x51/0x70 [ 470.643340][T11025] ? kfree+0x2b6/0x4d0 [ 470.643357][T11025] ? tomoyo_path_number_perm+0x470/0x580 [ 470.643384][T11025] ? security_file_ioctl+0x9b/0x240 [ 470.643411][T11025] ? __x64_sys_ioctl+0xb7/0x200 [ 470.643441][T11025] ? do_syscall_64+0xcd/0x230 [ 470.643473][T11025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.643506][T11025] ? __pfx_lo_ioctl+0x10/0x10 [ 470.643561][T11025] ? kasan_quarantine_put+0x10a/0x240 [ 470.643584][T11025] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.643618][T11025] ? find_held_lock+0x2b/0x80 [ 470.643641][T11025] ? tomoyo_path_number_perm+0x295/0x580 [ 470.643673][T11025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 470.643706][T11025] ? blkdev_common_ioctl+0x1dd/0x2480 [ 470.643732][T11025] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 470.643760][T11025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 470.643793][T11025] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 470.643821][T11025] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 470.643876][T11025] ? __pfx_lo_ioctl+0x10/0x10 [ 470.643909][T11025] blkdev_ioctl+0x274/0x6d0 [ 470.643936][T11025] ? __pfx_blkdev_ioctl+0x10/0x10 [ 470.643967][T11025] ? __pfx_blkdev_ioctl+0x10/0x10 [ 470.643994][T11025] __x64_sys_ioctl+0x190/0x200 [ 470.644029][T11025] do_syscall_64+0xcd/0x230 [ 470.644064][T11025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.644088][T11025] RIP: 0033:0x7f9a8258e969 [ 470.644106][T11025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.644129][T11025] RSP: 002b:00007f9a833be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.644155][T11025] RAX: ffffffffffffffda RBX: 00007f9a827b5fa0 RCX: 00007f9a8258e969 [ 470.644171][T11025] RDX: 0000000000000000 RSI: 0000000000004c06 RDI: 0000000000000000 [ 470.644184][T11025] RBP: 00007f9a833be090 R08: 0000000000000000 R09: 0000000000000000 [ 470.644198][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.644212][T11025] R13: 0000000000000000 R14: 00007f9a827b5fa0 R15: 00007ffc0e401e78 [ 470.644240][T11025] [ 472.013594][T11032] Invalid ELF header magic: != ELF [ 477.868482][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1154'. [ 478.454167][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 478.595799][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.643154][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 478.865890][T11125] bridge_slave_1 (unregistering): left allmulticast mode [ 478.917328][T11125] bridge_slave_1 (unregistering): left promiscuous mode [ 478.961929][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.407472][T11167] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1165'. [ 480.932566][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 484.276383][T11227] FAULT_INJECTION: forcing a failure. [ 484.276383][T11227] name failslab, interval 1, probability 0, space 0, times 0 [ 484.662300][T11227] CPU: 0 UID: 0 PID: 11227 Comm: syz.3.1178 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 484.662337][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 484.662351][T11227] Call Trace: [ 484.662359][T11227] [ 484.662368][T11227] dump_stack_lvl+0x16c/0x1f0 [ 484.662406][T11227] should_fail_ex+0x512/0x640 [ 484.662441][T11227] ? __kmalloc_noprof+0xbf/0x510 [ 484.662470][T11227] ? ops_init+0x77/0x5f0 [ 484.662497][T11227] should_failslab+0xc2/0x120 [ 484.662527][T11227] __kmalloc_noprof+0xd2/0x510 [ 484.662559][T11227] ops_init+0x77/0x5f0 [ 484.662591][T11227] setup_net+0x21e/0x850 [ 484.662623][T11227] ? __pfx_setup_net+0x10/0x10 [ 484.662651][T11227] ? lockdep_init_map_type+0x5c/0x280 [ 484.662684][T11227] ? __pfx_down_read_killable+0x10/0x10 [ 484.662726][T11227] ? debug_mutex_init+0x37/0x70 [ 484.662752][T11227] copy_net_ns+0x2a6/0x5f0 [ 484.662786][T11227] create_new_namespaces+0x3ea/0xad0 [ 484.662821][T11227] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 484.662858][T11227] ksys_unshare+0x45b/0xa40 [ 484.662892][T11227] ? __pfx_ksys_unshare+0x10/0x10 [ 484.662923][T11227] ? xfd_validate_state+0x5d/0x180 [ 484.662965][T11227] ? rcu_is_watching+0x12/0xc0 [ 484.662994][T11227] __x64_sys_unshare+0x31/0x40 [ 484.663026][T11227] do_syscall_64+0xcd/0x230 [ 484.663063][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.663087][T11227] RIP: 0033:0x7f5021d8e969 [ 484.663106][T11227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.663130][T11227] RSP: 002b:00007f5022c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 484.663152][T11227] RAX: ffffffffffffffda RBX: 00007f5021fb6160 RCX: 00007f5021d8e969 [ 484.663168][T11227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 484.663182][T11227] RBP: 00007f5021e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 484.663196][T11227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.663210][T11227] R13: 0000000000000000 R14: 00007f5021fb6160 R15: 00007fff2ed27878 [ 484.663240][T11227] [ 486.847923][T11271] sp0: Synchronizing with TNC [ 486.988213][T11269] [U] è [ 487.113518][T11272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 487.154128][T11272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 487.166796][T11272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 487.204838][T11272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 487.240853][T11272] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 488.037445][T11294] svc: failed to register nfsdv3 RPC service (errno 111). [ 488.073783][T11294] svc: failed to register nfsaclv3 RPC service (errno 111). [ 488.711785][ T5140] Bluetooth: hci0: command 0x0406 tx timeout [ 488.748035][ T5140] Bluetooth: hci2: unexpected event 0x3e length: 723 > 260 [ 488.748070][ T5140] Bluetooth: hci2: unexpected subevent 0x0d length: 722 > 260 [ 488.765047][ T5140] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 488.765121][ T5140] Bluetooth: hci2: Malformed LE Event: 0x0d [ 489.192087][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 489.198760][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 489.278778][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 489.494216][T11331] FAULT_INJECTION: forcing a failure. [ 489.494216][T11331] name fail_futex, interval 1, probability 0, space 0, times 0 [ 489.568592][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.1.1211 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 489.568628][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 489.568643][T11331] Call Trace: [ 489.568650][T11331] [ 489.568659][T11331] dump_stack_lvl+0x16c/0x1f0 [ 489.568699][T11331] should_fail_ex+0x512/0x640 [ 489.568739][T11331] get_futex_key+0x49e/0x1000 [ 489.568765][T11331] ? __pfx_try_to_wake_up+0x10/0x10 [ 489.568788][T11331] ? __pfx_get_futex_key+0x10/0x10 [ 489.568809][T11331] ? plist_check_head+0xa3/0x150 [ 489.568834][T11331] ? find_held_lock+0x2b/0x80 [ 489.568860][T11331] ? __lock_acquire+0xaa4/0x1ba0 [ 489.568894][T11331] futex_wake+0xe7/0x4e0 [ 489.568926][T11331] ? __pfx_futex_wake+0x10/0x10 [ 489.568961][T11331] ? find_held_lock+0x2b/0x80 [ 489.568981][T11331] ? __might_fault+0xe3/0x190 [ 489.569008][T11331] ? __might_fault+0xe3/0x190 [ 489.569033][T11331] ? __might_fault+0x13b/0x190 [ 489.569063][T11331] do_futex+0x1e3/0x350 [ 489.569089][T11331] ? __pfx_do_futex+0x10/0x10 [ 489.569113][T11331] ? _copy_from_user+0x59/0xd0 [ 489.569150][T11331] ? do_seccomp+0x333/0x2640 [ 489.569171][T11331] ? __pfx___might_resched+0x10/0x10 [ 489.569201][T11331] __x64_sys_futex+0x1e0/0x4c0 [ 489.569231][T11331] ? __pfx___x64_sys_futex+0x10/0x10 [ 489.569259][T11331] ? rcu_is_watching+0x12/0xc0 [ 489.569288][T11331] do_syscall_64+0xcd/0x230 [ 489.569326][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.569350][T11331] RIP: 0033:0x7fddcd18e969 [ 489.569368][T11331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.569466][T11331] RSP: 002b:00007fddcafd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 489.569489][T11331] RAX: ffffffffffffffda RBX: 00007fddcd3b6088 RCX: 00007fddcd18e969 [ 489.569505][T11331] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fddcd3b608c [ 489.569520][T11331] RBP: 00007fddcd3b6080 R08: 00007fddcdf0b000 R09: 0000000000000000 [ 489.569535][T11331] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fddcd3b608c [ 489.569551][T11331] R13: 0000000000000000 R14: 00007ffcd1c7a770 R15: 00007ffcd1c7a858 [ 489.569580][T11331] [ 489.812669][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.017560][T11353] netlink: 'syz.0.1217': attribute type 16 has an invalid length. [ 491.067447][T11353] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1217'. [ 491.357160][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 492.278574][T11362] Console: switching to colour VGA+ 80x25 [ 492.735614][T11367] Console: switching to colour frame buffer device 128x48 [ 493.648739][T11381] FAULT_INJECTION: forcing a failure. [ 493.648739][T11381] name fail_futex, interval 1, probability 0, space 0, times 0 [ 493.697903][T11381] CPU: 0 UID: 0 PID: 11381 Comm: syz.0.1223 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 493.697938][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 493.697953][T11381] Call Trace: [ 493.697961][T11381] [ 493.697970][T11381] dump_stack_lvl+0x16c/0x1f0 [ 493.698008][T11381] should_fail_ex+0x512/0x640 [ 493.698048][T11381] get_futex_key+0x49e/0x1000 [ 493.698074][T11381] ? __pfx_try_to_wake_up+0x10/0x10 [ 493.698107][T11381] ? __pfx_get_futex_key+0x10/0x10 [ 493.698129][T11381] ? plist_check_head+0xa3/0x150 [ 493.698154][T11381] ? find_held_lock+0x2b/0x80 [ 493.698180][T11381] ? __lock_acquire+0xaa4/0x1ba0 [ 493.698214][T11381] futex_wake+0xe7/0x4e0 [ 493.698248][T11381] ? __pfx_futex_wake+0x10/0x10 [ 493.698282][T11381] ? find_held_lock+0x2b/0x80 [ 493.698302][T11381] ? __might_fault+0xe3/0x190 [ 493.698329][T11381] ? __might_fault+0xe3/0x190 [ 493.698354][T11381] ? __might_fault+0x13b/0x190 [ 493.698385][T11381] do_futex+0x1e3/0x350 [ 493.698410][T11381] ? __pfx_do_futex+0x10/0x10 [ 493.698434][T11381] ? _copy_from_user+0x59/0xd0 [ 493.698470][T11381] ? do_seccomp+0x333/0x2640 [ 493.698491][T11381] ? __pfx___might_resched+0x10/0x10 [ 493.698521][T11381] __x64_sys_futex+0x1e0/0x4c0 [ 493.698551][T11381] ? __pfx___x64_sys_futex+0x10/0x10 [ 493.698578][T11381] ? rcu_is_watching+0x12/0xc0 [ 493.698608][T11381] do_syscall_64+0xcd/0x230 [ 493.698645][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.698669][T11381] RIP: 0033:0x7f9a8258e969 [ 493.698687][T11381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.698714][T11381] RSP: 002b:00007f9a833be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 493.698736][T11381] RAX: ffffffffffffffda RBX: 00007f9a827b5fa8 RCX: 00007f9a8258e969 [ 493.698752][T11381] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9a827b5fac [ 493.698767][T11381] RBP: 00007f9a827b5fa0 R08: 00007f9a833bf000 R09: 0000000000000000 [ 493.698782][T11381] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f9a827b5fac [ 493.698800][T11381] R13: 0000000000000000 R14: 00007ffc0e401d90 R15: 00007ffc0e401e78 [ 493.698829][T11381] [ 493.944745][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.674887][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 502.228950][T11476] FAULT_INJECTION: forcing a failure. [ 502.228950][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 502.435475][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.0.1249 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 502.435511][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 502.435526][T11476] Call Trace: [ 502.435534][T11476] [ 502.435543][T11476] dump_stack_lvl+0x16c/0x1f0 [ 502.435584][T11476] should_fail_ex+0x512/0x640 [ 502.435619][T11476] ? __kmalloc_noprof+0xbf/0x510 [ 502.435647][T11476] ? __vb2_queue_alloc+0x23e/0x1280 [ 502.435685][T11476] should_failslab+0xc2/0x120 [ 502.435715][T11476] __kmalloc_noprof+0xd2/0x510 [ 502.435741][T11476] ? bitmap_find_next_zero_area_off+0xb4/0xd0 [ 502.435774][T11476] __vb2_queue_alloc+0x23e/0x1280 [ 502.435813][T11476] ? vid_cap_queue_setup+0x461/0xe80 [ 502.435850][T11476] vb2_core_reqbufs+0xa90/0xfe0 [ 502.435895][T11476] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 502.435951][T11476] __vb2_init_fileio+0x3f1/0x1100 [ 502.435979][T11476] ? vb2_fop_read+0xe6/0x3e0 [ 502.436017][T11476] __vb2_perform_fileio+0x9c2/0x1660 [ 502.436049][T11476] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 502.436082][T11476] vb2_fop_read+0x215/0x3e0 [ 502.436124][T11476] v4l2_read+0x226/0x360 [ 502.436151][T11476] ? __pfx_v4l2_read+0x10/0x10 [ 502.436181][T11476] vfs_read+0x1de/0xc70 [ 502.436209][T11476] ? __pfx_vfs_read+0x10/0x10 [ 502.436229][T11476] ? find_held_lock+0x2b/0x80 [ 502.436252][T11476] ? __fget_files+0x204/0x3c0 [ 502.436294][T11476] ? __fget_files+0x20e/0x3c0 [ 502.436340][T11476] ksys_read+0x12a/0x240 [ 502.436361][T11476] ? __pfx_ksys_read+0x10/0x10 [ 502.436382][T11476] ? rcu_is_watching+0x12/0xc0 [ 502.436412][T11476] do_syscall_64+0xcd/0x230 [ 502.436450][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.436482][T11476] RIP: 0033:0x7f9a8258e969 [ 502.436501][T11476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.436525][T11476] RSP: 002b:00007f9a833be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.436547][T11476] RAX: ffffffffffffffda RBX: 00007f9a827b5fa0 RCX: 00007f9a8258e969 [ 502.436564][T11476] RDX: 0000000000070800 RSI: 0000200000000000 RDI: 0000000000000005 [ 502.436578][T11476] RBP: 00007f9a82610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 502.436593][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.436606][T11476] R13: 0000000000000000 R14: 00007f9a827b5fa0 R15: 00007ffc0e401e78 [ 502.436636][T11476] [ 503.441099][T11496] Console: switching to colour VGA+ 80x25 [ 505.163596][T11532] sysfs_service_op_show: Client not running :-5: [ 506.724088][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.731238][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.482094][T11614] FAULT_INJECTION: forcing a failure. [ 511.482094][T11614] name failslab, interval 1, probability 0, space 0, times 0 [ 511.679140][T11614] CPU: 0 UID: 0 PID: 11614 Comm: syz.0.1281 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 511.679176][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 511.679191][T11614] Call Trace: [ 511.679198][T11614] [ 511.679208][T11614] dump_stack_lvl+0x16c/0x1f0 [ 511.679247][T11614] should_fail_ex+0x512/0x640 [ 511.679281][T11614] ? fs_reclaim_acquire+0xae/0x150 [ 511.679321][T11614] should_failslab+0xc2/0x120 [ 511.679350][T11614] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 511.679378][T11614] ? security_inode_alloc+0x3b/0x2b0 [ 511.679409][T11614] security_inode_alloc+0x3b/0x2b0 [ 511.679437][T11614] inode_init_always_gfp+0xce4/0x1030 [ 511.679480][T11614] alloc_inode+0x86/0x240 [ 511.679509][T11614] alloc_anon_inode+0x28/0x3e0 [ 511.679549][T11614] secretmem_file_create.constprop.0+0x4d/0x2c0 [ 511.679584][T11614] __x64_sys_memfd_secret+0xc5/0x1a0 [ 511.679614][T11614] do_syscall_64+0xcd/0x230 [ 511.679651][T11614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.679675][T11614] RIP: 0033:0x7f9a8258e969 [ 511.679694][T11614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.679718][T11614] RSP: 002b:00007f9a833be038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 511.679740][T11614] RAX: ffffffffffffffda RBX: 00007f9a827b5fa0 RCX: 00007f9a8258e969 [ 511.679763][T11614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.679778][T11614] RBP: 00007f9a82610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 511.679792][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.679806][T11614] R13: 0000000000000000 R14: 00007f9a827b5fa0 R15: 00007ffc0e401e78 [ 511.679836][T11614] [ 514.169830][T11655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1292'. [ 523.094990][T11783] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1317'. [ 523.847018][T11779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 525.039370][T11811] usb usb17: usbfs: process 11811 (syz.1.1322) did not claim interface 0 before use [ 525.941950][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 525.988695][T11830] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1327'. [ 526.204337][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 527.040978][T11847] can: request_module (can-proto-4) failed. [ 527.396969][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1334'. [ 528.472081][T11878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1341'. [ 528.522468][T11878] veth1_macvtap: left promiscuous mode [ 528.788575][T11891] ima: policy update failed [ 528.828334][ T30] audit: type=1802 audit(4294968593.073:6): pid=11891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1342" res=0 errno=0 [ 529.464127][T11881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1338'. [ 529.996781][T11910] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1346'. [ 531.301222][T11924] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 531.679062][ T5140] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 532.303627][T11944] FAULT_INJECTION: forcing a failure. [ 532.303627][T11944] name failslab, interval 1, probability 0, space 0, times 0 [ 532.416595][T11944] CPU: 0 UID: 0 PID: 11944 Comm: syz.3.1356 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 532.416637][T11944] Tainted: [I]=FIRMWARE_WORKAROUND [ 532.416646][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 532.416659][T11944] Call Trace: [ 532.416667][T11944] [ 532.416676][T11944] dump_stack_lvl+0x16c/0x1f0 [ 532.416714][T11944] should_fail_ex+0x512/0x640 [ 532.416746][T11944] ? __kmalloc_noprof+0xbf/0x510 [ 532.416774][T11944] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 532.416813][T11944] should_failslab+0xc2/0x120 [ 532.416842][T11944] __kmalloc_noprof+0xd2/0x510 [ 532.416866][T11944] ? kasan_quarantine_put+0x10a/0x240 [ 532.416896][T11944] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 532.416939][T11944] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 532.416974][T11944] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.417009][T11944] ? trace_cap_capable+0x18d/0x200 [ 532.417039][T11944] ? bpf_lsm_capable+0x9/0x10 [ 532.417063][T11944] ? security_capable+0x7e/0x260 [ 532.417085][T11944] ? ns_capable+0xd7/0x110 [ 532.417112][T11944] genl_rcv_msg+0x55c/0x800 [ 532.417150][T11944] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.417182][T11944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 532.417220][T11944] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 532.417253][T11944] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 532.417292][T11944] ? __pfx_nl80211_post_doit+0x10/0x10 [ 532.417328][T11944] ? __lock_acquire+0xaa4/0x1ba0 [ 532.417365][T11944] netlink_rcv_skb+0x16a/0x440 [ 532.417394][T11944] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.417429][T11944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.417472][T11944] ? __pfx_down_read+0x10/0x10 [ 532.417510][T11944] ? netlink_deliver_tap+0x1ae/0xd30 [ 532.417542][T11944] genl_rcv+0x28/0x40 [ 532.417571][T11944] netlink_unicast+0x53a/0x7f0 [ 532.417604][T11944] ? __pfx_netlink_unicast+0x10/0x10 [ 532.417631][T11944] ? __lock_acquire+0xaa4/0x1ba0 [ 532.417669][T11944] netlink_sendmsg+0x8d1/0xdd0 [ 532.417703][T11944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.417743][T11944] ____sys_sendmsg+0xa95/0xc70 [ 532.417779][T11944] ? copy_msghdr_from_user+0x10a/0x160 [ 532.417805][T11944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.417852][T11944] ___sys_sendmsg+0x134/0x1d0 [ 532.417880][T11944] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.417943][T11944] __sys_sendmsg+0x16d/0x220 [ 532.417970][T11944] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.418005][T11944] ? rcu_is_watching+0x12/0xc0 [ 532.418034][T11944] do_syscall_64+0xcd/0x230 [ 532.418070][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.418094][T11944] RIP: 0033:0x7f5021d8e969 [ 532.418112][T11944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.418135][T11944] RSP: 002b:00007f5022cd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.418157][T11944] RAX: ffffffffffffffda RBX: 00007f5021fb5fa0 RCX: 00007f5021d8e969 [ 532.418172][T11944] RDX: 0000000020000084 RSI: 0000200000000080 RDI: 0000000000000003 [ 532.418187][T11944] RBP: 00007f5022cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 532.418202][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.418216][T11944] R13: 0000000000000000 R14: 00007f5021fb5fa0 R15: 00007fff2ed27878 [ 532.418244][T11944] [ 533.171763][T11948] FAULT_INJECTION: forcing a failure. [ 533.171763][T11948] name fail_futex, interval 1, probability 0, space 0, times 0 [ 533.232006][T11948] CPU: 0 UID: 0 PID: 11948 Comm: syz.0.1357 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 533.232050][T11948] Tainted: [I]=FIRMWARE_WORKAROUND [ 533.232059][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 533.232073][T11948] Call Trace: [ 533.232081][T11948] [ 533.232090][T11948] dump_stack_lvl+0x16c/0x1f0 [ 533.232129][T11948] should_fail_ex+0x512/0x640 [ 533.232172][T11948] ? __pfx___futex_wait+0x10/0x10 [ 533.232207][T11948] get_futex_key+0x49e/0x1000 [ 533.232233][T11948] ? __pfx_futex_wake_mark+0x10/0x10 [ 533.232264][T11948] ? __pfx_get_futex_key+0x10/0x10 [ 533.232294][T11948] ? __lock_acquire+0xaa4/0x1ba0 [ 533.232328][T11948] futex_wake+0xe7/0x4e0 [ 533.232360][T11948] ? __pfx_futex_wake+0x10/0x10 [ 533.232394][T11948] ? find_held_lock+0x2b/0x80 [ 533.232415][T11948] ? __might_fault+0xe3/0x190 [ 533.232441][T11948] ? __might_fault+0xe3/0x190 [ 533.232466][T11948] ? __might_fault+0x13b/0x190 [ 533.232497][T11948] do_futex+0x1e3/0x350 [ 533.232522][T11948] ? __pfx_do_futex+0x10/0x10 [ 533.232546][T11948] ? _copy_from_user+0x59/0xd0 [ 533.232582][T11948] ? do_seccomp+0x333/0x2640 [ 533.232603][T11948] ? __rseq_handle_notify_resume+0x69a/0x10c0 [ 533.232642][T11948] __x64_sys_futex+0x1e0/0x4c0 [ 533.232672][T11948] ? __pfx___x64_sys_futex+0x10/0x10 [ 533.232700][T11948] ? rcu_is_watching+0x12/0xc0 [ 533.232729][T11948] do_syscall_64+0xcd/0x230 [ 533.232766][T11948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.232790][T11948] RIP: 0033:0x7f9a8258e969 [ 533.232809][T11948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.232833][T11948] RSP: 002b:00007f9a833be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 533.232855][T11948] RAX: ffffffffffffffda RBX: 00007f9a827b5fa8 RCX: 00007f9a8258e969 [ 533.232871][T11948] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9a827b5fac [ 533.232885][T11948] RBP: 00007f9a827b5fa0 R08: 00007f9a833bf000 R09: 0000000000000000 [ 533.232900][T11948] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f9a827b5fac [ 533.232915][T11948] R13: 0000000000000000 R14: 00007ffc0e401d90 R15: 00007ffc0e401e78 [ 533.232944][T11948] [ 534.776957][T11973] Debayer A: ================= START STATUS ================= [ 534.962749][T11973] Debayer A: Debayer Mean Window Size: 3 [ 535.043812][T11973] Debayer A: ================== END STATUS ================== [ 535.794103][T11988] Console: switching to colour frame buffer device 128x48 [ 536.092685][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 536.157164][T11994] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1367'. [ 537.606031][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 538.330749][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 538.394288][T12033] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1378'. [ 539.374319][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 540.573008][T12076] ======================================================= [ 540.573008][T12076] WARNING: The mand mount option has been deprecated and [ 540.573008][T12076] and is ignored by this kernel. Remove the mand [ 540.573008][T12076] option from the mount to silence this warning. [ 540.573008][T12076] ======================================================= [ 540.611727][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.004536][T12138] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1401'. [ 546.064583][T12138] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1401'. [ 546.119497][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 546.441970][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 546.496324][T12143] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1402'. [ 546.927558][T12152] FAULT_INJECTION: forcing a failure. [ 546.927558][T12152] name failslab, interval 1, probability 0, space 0, times 0 [ 546.984945][T12152] CPU: 0 UID: 0 PID: 12152 Comm: syz.1.1405 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 546.984987][T12152] Tainted: [I]=FIRMWARE_WORKAROUND [ 546.984995][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 546.985009][T12152] Call Trace: [ 546.985016][T12152] [ 546.985025][T12152] dump_stack_lvl+0x16c/0x1f0 [ 546.985063][T12152] should_fail_ex+0x512/0x640 [ 546.985117][T12152] ? __kmalloc_noprof+0xbf/0x510 [ 546.985151][T12152] ? kernfs_fop_write_iter+0x237/0x510 [ 546.985182][T12152] should_failslab+0xc2/0x120 [ 546.985210][T12152] __kmalloc_noprof+0xd2/0x510 [ 546.985242][T12152] kernfs_fop_write_iter+0x237/0x510 [ 546.985276][T12152] do_iter_readv_writev+0x654/0x950 [ 546.985315][T12152] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 546.985365][T12152] vfs_writev+0x353/0xdc0 [ 546.985399][T12152] ? __pfx___mutex_trylock_common+0x10/0x10 [ 546.985434][T12152] ? __pfx___might_resched+0x10/0x10 [ 546.985464][T12152] ? __pfx_vfs_writev+0x10/0x10 [ 546.985501][T12152] ? __mutex_lock+0x1ca/0xb90 [ 546.985540][T12152] ? __pfx___mutex_lock+0x10/0x10 [ 546.985584][T12152] ? __fget_files+0x20e/0x3c0 [ 546.985623][T12152] ? __fget_files+0x110/0x3c0 [ 546.985666][T12152] ? do_writev+0x132/0x330 [ 546.985700][T12152] do_writev+0x132/0x330 [ 546.985736][T12152] ? __pfx_do_writev+0x10/0x10 [ 546.985771][T12152] ? rcu_is_watching+0x12/0xc0 [ 546.985799][T12152] do_syscall_64+0xcd/0x230 [ 546.985833][T12152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.985855][T12152] RIP: 0033:0x7fddcd18e969 [ 546.985872][T12152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.985893][T12152] RSP: 002b:00007fddcaff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 546.985913][T12152] RAX: ffffffffffffffda RBX: 00007fddcd3b5fa0 RCX: 00007fddcd18e969 [ 546.985927][T12152] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 546.985940][T12152] RBP: 00007fddcaff6090 R08: 0000000000000000 R09: 0000000000000000 [ 546.985954][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.985967][T12152] R13: 0000000000000000 R14: 00007fddcd3b5fa0 R15: 00007ffcd1c7a858 [ 546.985995][T12152] [ 547.824332][T12157] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 548.571235][T12171] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[12171] [ 548.606091][T12164] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 549.011717][T12179] tipc: Started in network mode [ 549.017691][T12179] tipc: Node identity ee00, cluster identity 4711 [ 549.051642][T12179] tipc: Node number set to 60928 [ 549.104743][T12179] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 549.132859][T12179] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 549.163594][T12179] memcg:ffff8880355cf001 [ 549.180804][T12179] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 549.221716][T12179] page_type: f5(slab) [ 549.227772][T12179] raw: 00fff00000000040 ffff88801fe86dc0 0000000000000000 dead000000000001 [ 549.285328][T12179] raw: 0000000000000000 0000000000150015 00000000f5000000 ffff8880355cf001 [ 549.391355][T12179] head: 00fff00000000040 ffff88801fe86dc0 0000000000000000 dead000000000001 [ 549.434233][T12179] head: 0000000000000000 0000000000150015 00000000f5000000 ffff8880355cf001 [ 549.464598][T12179] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 549.533566][T12179] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 549.561820][T12179] page dumped because: unmovable page [ 549.567810][T12179] page_owner tracks the page as allocated [ 549.617872][T12179] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5495, tgid 5495 (dhcpcd), ts 68990744747, free_ts 35956331865 [ 549.685133][T12179] post_alloc_hook+0x181/0x1b0 [ 549.690481][T12179] get_page_from_freelist+0x135c/0x3920 [ 549.704639][T12179] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 549.711219][T12179] alloc_pages_mpol+0x1fb/0x550 [ 549.749727][T12179] new_slab+0x244/0x340 [ 549.765956][T12179] ___slab_alloc+0xd9c/0x1940 [ 549.771517][T12179] __slab_alloc.constprop.0+0x56/0xb0 [ 549.788730][T12179] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 549.807936][T12179] sock_alloc_inode+0x25/0x1c0 [ 549.825675][T12179] alloc_inode+0x61/0x240 [ 549.840510][T12179] sock_alloc+0x40/0x280 [ 549.844810][T12180] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(2) [ 549.855634][T12179] __sock_create+0xc1/0x8d0 [ 549.855839][T12179] __sys_socket+0x14d/0x260 [ 549.883219][T12179] __x64_sys_socket+0x72/0xb0 [ 549.897479][T12179] do_syscall_64+0xcd/0x230 [ 549.915692][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.934605][T12179] page last free pid 1 tgid 1 stack trace: [ 549.952073][T12179] __free_frozen_pages+0x69d/0xff0 [ 549.965760][T12179] free_contig_range+0x135/0x3f0 [ 550.018153][T12179] destroy_args+0x66f/0x830 [ 550.045690][T12179] debug_vm_pgtable+0x130e/0x2d50 [ 550.054903][T12179] do_one_initcall+0x120/0x6e0 [ 550.070557][T12179] kernel_init_freeable+0x5c2/0x900 [ 550.076442][T12179] kernel_init+0x1c/0x2b0 [ 550.090869][T12179] ret_from_fork+0x45/0x80 [ 550.101825][T12179] ret_from_fork_asm+0x1a/0x30 [ 550.294097][T12210] FAULT_INJECTION: forcing a failure. [ 550.294097][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.312396][T12210] CPU: 0 UID: 0 PID: 12210 Comm: syz.0.1418 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 550.312446][T12210] Tainted: [I]=FIRMWARE_WORKAROUND [ 550.312459][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 550.312476][T12210] Call Trace: [ 550.312487][T12210] [ 550.312497][T12210] dump_stack_lvl+0x16c/0x1f0 [ 550.312545][T12210] should_fail_ex+0x512/0x640 [ 550.312594][T12210] _copy_from_iter+0x477/0x15b0 [ 550.312652][T12210] ? __pfx__copy_from_iter+0x10/0x10 [ 550.312699][T12210] ? rcu_is_watching+0x12/0xc0 [ 550.312728][T12210] ? trace_kmalloc+0x2b/0xd0 [ 550.312768][T12210] ? __kmalloc_noprof+0x242/0x510 [ 550.312813][T12210] kernfs_fop_write_iter+0x19a/0x510 [ 550.312860][T12210] do_iter_readv_writev+0x654/0x950 [ 550.312912][T12210] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 550.312983][T12210] vfs_writev+0x353/0xdc0 [ 550.313030][T12210] ? __pfx___mutex_trylock_common+0x10/0x10 [ 550.313073][T12210] ? __pfx___might_resched+0x10/0x10 [ 550.313115][T12210] ? __pfx_vfs_writev+0x10/0x10 [ 550.313170][T12210] ? __mutex_lock+0x1ca/0xb90 [ 550.313225][T12210] ? __pfx___mutex_lock+0x10/0x10 [ 550.313290][T12210] ? __fget_files+0x20e/0x3c0 [ 550.313335][T12210] ? __fget_files+0x110/0x3c0 [ 550.313391][T12210] ? do_writev+0x132/0x330 [ 550.313437][T12210] do_writev+0x132/0x330 [ 550.313486][T12210] ? __pfx_do_writev+0x10/0x10 [ 550.313532][T12210] ? rcu_is_watching+0x12/0xc0 [ 550.313573][T12210] do_syscall_64+0xcd/0x230 [ 550.313622][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.313653][T12210] RIP: 0033:0x7f9a8258e969 [ 550.313678][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.313707][T12210] RSP: 002b:00007f9a833be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 550.313737][T12210] RAX: ffffffffffffffda RBX: 00007f9a827b5fa0 RCX: 00007f9a8258e969 [ 550.313759][T12210] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 550.313778][T12210] RBP: 00007f9a833be090 R08: 0000000000000000 R09: 0000000000000000 [ 550.313797][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.313815][T12210] R13: 0000000000000000 R14: 00007f9a827b5fa0 R15: 00007ffc0e401e78 [ 550.313858][T12210] [ 550.954195][T12215] FAULT_INJECTION: forcing a failure. [ 550.954195][T12215] name failslab, interval 1, probability 0, space 0, times 0 [ 551.015468][T12215] CPU: 1 UID: 0 PID: 12215 Comm: syz.2.1419 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 551.015525][T12215] Tainted: [I]=FIRMWARE_WORKAROUND [ 551.015537][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 551.015556][T12215] Call Trace: [ 551.015566][T12215] [ 551.015579][T12215] dump_stack_lvl+0x16c/0x1f0 [ 551.015629][T12215] should_fail_ex+0x512/0x640 [ 551.015675][T12215] ? __kmalloc_noprof+0xbf/0x510 [ 551.015712][T12215] ? snd_pcm_plugin_build+0x434/0x650 [ 551.015763][T12215] should_failslab+0xc2/0x120 [ 551.015804][T12215] __kmalloc_noprof+0xd2/0x510 [ 551.015849][T12215] snd_pcm_plugin_build+0x434/0x650 [ 551.015917][T12215] snd_pcm_plugin_build_rate+0x27c/0x760 [ 551.015957][T12215] ? __pfx_snd_pcm_plugin_build_rate+0x10/0x10 [ 551.016006][T12215] snd_pcm_plug_format_plugins+0x866/0x1430 [ 551.016066][T12215] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 551.016126][T12215] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.016179][T12215] snd_pcm_oss_change_params_locked+0x2eeb/0x3b40 [ 551.016251][T12215] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 551.016336][T12215] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 551.016394][T12215] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 551.016445][T12215] ? hook_file_ioctl_common+0x145/0x410 [ 551.016484][T12215] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 551.016539][T12215] ? __fget_files+0x20e/0x3c0 [ 551.016597][T12215] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 551.016648][T12215] __x64_sys_ioctl+0x190/0x200 [ 551.016697][T12215] do_syscall_64+0xcd/0x230 [ 551.016748][T12215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.016782][T12215] RIP: 0033:0x7fbde8f8e969 [ 551.016807][T12215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.016840][T12215] RSP: 002b:00007fbde9d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.016880][T12215] RAX: ffffffffffffffda RBX: 00007fbde91b6080 RCX: 00007fbde8f8e969 [ 551.016903][T12215] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000007 [ 551.016923][T12215] RBP: 00007fbde9010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 551.016943][T12215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.016962][T12215] R13: 0000000000000000 R14: 00007fbde91b6080 R15: 00007ffecb27c0d8 [ 551.017005][T12215] [ 552.029196][T12237] Console: switching to colour VGA+ 80x25 [ 552.362267][T12245] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[12245] [ 552.419460][T12245] netlink: 'syz.3.1426': attribute type 3 has an invalid length. [ 552.449689][T12248] tipc: Can't bind to reserved service type 1 [ 552.450164][T12248] FAULT_INJECTION: forcing a failure. [ 552.450164][T12248] name fail_futex, interval 1, probability 0, space 0, times 0 [ 552.450211][T12248] CPU: 0 UID: 0 PID: 12248 Comm: syz.1.1427 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 552.450266][T12248] Tainted: [I]=FIRMWARE_WORKAROUND [ 552.450277][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 552.450296][T12248] Call Trace: [ 552.450306][T12248] [ 552.450318][T12248] dump_stack_lvl+0x16c/0x1f0 [ 552.450369][T12248] should_fail_ex+0x512/0x640 [ 552.450423][T12248] get_futex_key+0x49e/0x1000 [ 552.450459][T12248] ? kasan_save_track+0x14/0x30 [ 552.450494][T12248] ? __pfx_get_futex_key+0x10/0x10 [ 552.450525][T12248] ? __sigqueue_free+0xba/0x2a0 [ 552.450570][T12248] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 552.450614][T12248] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 552.450658][T12248] ? do_syscall_64+0xda/0x230 [ 552.450703][T12248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.450748][T12248] futex_wait_setup+0x78/0x290 [ 552.450800][T12248] __futex_wait+0x266/0x3c0 [ 552.450843][T12248] ? __pfx___futex_wait+0x10/0x10 [ 552.450893][T12248] ? __pfx_futex_wake_mark+0x10/0x10 [ 552.450953][T12248] futex_wait+0xe8/0x380 [ 552.450995][T12248] ? __pfx_futex_wait+0x10/0x10 [ 552.451032][T12248] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.451109][T12248] ? find_held_lock+0x2b/0x80 [ 552.451145][T12248] do_futex+0x229/0x350 [ 552.451179][T12248] ? __pfx_do_futex+0x10/0x10 [ 552.451218][T12248] ? arch_do_signal_or_restart+0x211/0x7a0 [ 552.451269][T12248] __x64_sys_futex+0x1e0/0x4c0 [ 552.451309][T12248] ? __pfx___x64_sys_futex+0x10/0x10 [ 552.451348][T12248] ? rcu_is_watching+0x12/0xc0 [ 552.451389][T12248] do_syscall_64+0xcd/0x230 [ 552.451439][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.451473][T12248] RIP: 0033:0x7fddcd18e969 [ 552.451497][T12248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.451529][T12248] RSP: 002b:00007fddcaff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 552.451559][T12248] RAX: ffffffffffffffda RBX: 00007fddcd3b5fa8 RCX: 00007fddcd18e969 [ 552.451581][T12248] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fddcd3b5fa8 [ 552.451601][T12248] RBP: 00007fddcd3b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 552.451620][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fddcd3b5fac [ 552.451641][T12248] R13: 0000000000000000 R14: 00007ffcd1c7a770 R15: 00007ffcd1c7a858 [ 552.451678][T12248] [ 552.465151][T12241] Console: switching to colour frame buffer device 128x48 [ 552.642849][T12250] FAULT_INJECTION: forcing a failure. [ 552.642849][T12250] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.643085][T12250] CPU: 1 UID: 0 PID: 12250 Comm: syz.3.1428 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 552.643133][T12250] Tainted: [I]=FIRMWARE_WORKAROUND [ 552.643145][T12250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 552.643162][T12250] Call Trace: [ 552.643172][T12250] [ 552.643183][T12250] dump_stack_lvl+0x16c/0x1f0 [ 552.643232][T12250] should_fail_ex+0x512/0x640 [ 552.643286][T12250] should_fail_alloc_page+0xe7/0x130 [ 552.643327][T12250] prepare_alloc_pages+0x3c2/0x610 [ 552.643373][T12250] ? bpf_ksym_find+0x124/0x1c0 [ 552.643425][T12250] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 552.643465][T12250] ? __kernel_text_address+0xd/0x40 [ 552.643516][T12250] ? unwind_get_return_address+0x59/0xa0 [ 552.643552][T12250] ? arch_stack_walk+0xa6/0x100 [ 552.643601][T12250] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.643640][T12250] ? stack_trace_save+0x8e/0xc0 [ 552.643673][T12250] ? __pfx_stack_trace_save+0x10/0x10 [ 552.643712][T12250] ? look_up_lock_class+0x6b/0x150 [ 552.643757][T12250] ? register_lock_class+0x41/0x4c0 [ 552.643812][T12250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 552.643855][T12250] ? policy_nodemask+0xea/0x4e0 [ 552.643897][T12250] alloc_pages_mpol+0x1fb/0x550 [ 552.643939][T12250] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 552.643991][T12250] alloc_pages_noprof+0x131/0x390 [ 552.644033][T12250] __pmd_alloc+0x3f/0x870 [ 552.644077][T12250] ? find_held_lock+0x2b/0x80 [ 552.644111][T12250] __handle_mm_fault+0x948/0x2a40 [ 552.644156][T12250] ? __pfx___handle_mm_fault+0x10/0x10 [ 552.644213][T12250] ? find_vma+0xbf/0x140 [ 552.644256][T12250] ? __pfx_find_vma+0x10/0x10 [ 552.644306][T12250] handle_mm_fault+0x3fe/0xad0 [ 552.644346][T12250] do_user_addr_fault+0x7a6/0x1370 [ 552.644383][T12250] ? rcu_is_watching+0x12/0xc0 [ 552.644417][T12250] exc_page_fault+0x5c/0xc0 [ 552.644461][T12250] asm_exc_page_fault+0x26/0x30 [ 552.644491][T12250] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 552.644526][T12250] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 552.644557][T12250] RSP: 0018:ffffc90002e47a10 EFLAGS: 00050206 [ 552.644582][T12250] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 552.644601][T12250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888034bb0000 [ 552.644619][T12250] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10069761ff [ 552.644639][T12250] R10: ffff888034bb0fff R11: 0000000000000000 R12: ffffc90002e47d80 [ 552.644659][T12250] R13: 0000000000000000 R14: ffffc90002e47d88 R15: ffff888034bb0000 [ 552.644718][T12250] _copy_from_iter+0x50c/0x15b0 [ 552.644778][T12250] ? __pfx__copy_from_iter+0x10/0x10 [ 552.644839][T12250] ? rcu_is_watching+0x12/0xc0 [ 552.644869][T12250] ? trace_kmalloc+0x2b/0xd0 [ 552.644909][T12250] ? __kmalloc_noprof+0x242/0x510 [ 552.644955][T12250] kernfs_fop_write_iter+0x19a/0x510 [ 552.645003][T12250] do_iter_readv_writev+0x654/0x950 [ 552.645056][T12250] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 552.645127][T12250] vfs_writev+0x353/0xdc0 [ 552.645172][T12250] ? __pfx___mutex_trylock_common+0x10/0x10 [ 552.645219][T12250] ? __pfx___might_resched+0x10/0x10 [ 552.645261][T12250] ? __pfx_vfs_writev+0x10/0x10 [ 552.645310][T12250] ? __mutex_lock+0x1ca/0xb90 [ 552.645365][T12250] ? __pfx___mutex_lock+0x10/0x10 [ 552.645426][T12250] ? __fget_files+0x20e/0x3c0 [ 552.645472][T12250] ? __fget_files+0x110/0x3c0 [ 552.645532][T12250] ? do_writev+0x132/0x330 [ 552.645578][T12250] do_writev+0x132/0x330 [ 552.645627][T12250] ? __pfx_do_writev+0x10/0x10 [ 552.645674][T12250] ? rcu_is_watching+0x12/0xc0 [ 552.645715][T12250] do_syscall_64+0xcd/0x230 [ 552.645763][T12250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.645802][T12250] RIP: 0033:0x7f5021d8e969 [ 552.645826][T12250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.645855][T12250] RSP: 002b:00007f5022cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 552.645883][T12250] RAX: ffffffffffffffda RBX: 00007f5021fb5fa0 RCX: 00007f5021d8e969 [ 552.645904][T12250] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 552.645923][T12250] RBP: 00007f5022cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 552.645941][T12250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.645960][T12250] R13: 0000000000000000 R14: 00007f5021fb5fa0 R15: 00007fff2ed27878 [ 552.646003][T12250] [ 552.855614][T12246] FAULT_INJECTION: forcing a failure. [ 552.855614][T12246] name failslab, interval 1, probability 0, space 0, times 0 [ 552.855666][T12246] CPU: 0 UID: 0 PID: 12246 Comm: syz.0.1425 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 552.855715][T12246] Tainted: [I]=FIRMWARE_WORKAROUND [ 552.855727][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 552.855747][T12246] Call Trace: [ 552.855757][T12246] [ 552.855768][T12246] dump_stack_lvl+0x16c/0x1f0 [ 552.855820][T12246] should_fail_ex+0x512/0x640 [ 552.855866][T12246] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 552.855921][T12246] should_failslab+0xc2/0x120 [ 552.855960][T12246] __kmalloc_cache_noprof+0x6a/0x3e0 [ 552.856014][T12246] ? __pfx___might_resched+0x10/0x10 [ 552.856059][T12246] ? snd_card_file_add+0x52/0x330 [ 552.856105][T12246] ? rcu_is_watching+0x12/0xc0 [ 552.856138][T12246] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 552.856193][T12246] snd_card_file_add+0x52/0x330 [ 552.856237][T12246] ? snd_lookup_minor_data+0xc7/0x180 [ 552.856281][T12246] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 552.856339][T12246] snd_pcm_open+0xf1/0x730 [ 552.856397][T12246] ? __pfx_snd_pcm_open+0x10/0x10 [ 552.856478][T12246] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 552.856533][T12246] snd_pcm_playback_open+0x86/0xe0 [ 552.856569][T12246] snd_open+0x1fe/0x450 [ 552.856610][T12246] ? __pfx_snd_open+0x10/0x10 [ 552.856650][T12246] chrdev_open+0x231/0x6a0 [ 552.856683][T12246] ? __pfx_apparmor_file_open+0x10/0x10 [ 552.856730][T12246] ? __pfx_chrdev_open+0x10/0x10 [ 552.856766][T12246] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 552.856823][T12246] do_dentry_open+0x741/0x1c10 [ 552.856858][T12246] ? __pfx_chrdev_open+0x10/0x10 [ 552.856902][T12246] vfs_open+0x82/0x3f0 [ 552.856955][T12246] path_openat+0x1e5e/0x2d40 [ 552.857001][T12246] ? __pfx_path_openat+0x10/0x10 [ 552.857055][T12246] do_filp_open+0x20b/0x470 [ 552.857088][T12246] ? __pfx_do_filp_open+0x10/0x10 [ 552.857155][T12246] ? alloc_fd+0x471/0x7d0 [ 552.857222][T12246] do_sys_openat2+0x11b/0x1d0 [ 552.857267][T12246] ? __pfx_do_sys_openat2+0x10/0x10 [ 552.857338][T12246] __x64_sys_openat+0x174/0x210 [ 552.857383][T12246] ? __pfx___x64_sys_openat+0x10/0x10 [ 552.857436][T12246] ? do_user_addr_fault+0x843/0x1370 [ 552.857485][T12246] do_syscall_64+0xcd/0x230 [ 552.857540][T12246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.857574][T12246] RIP: 0033:0x7f9a8258e969 [ 552.857603][T12246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.857635][T12246] RSP: 002b:00007f9a8339d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 552.857672][T12246] RAX: ffffffffffffffda RBX: 00007f9a827b6080 RCX: 00007f9a8258e969 [ 552.857696][T12246] RDX: 0000000000080000 RSI: 0000200000000c40 RDI: ffffffffffffff9c [ 552.857718][T12246] RBP: 00007f9a82610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 552.857737][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.857756][T12246] R13: 0000000000000000 R14: 00007f9a827b6080 R15: 00007ffc0e401e78 [ 552.857798][T12246] [ 555.781846][T12257] tty tty12: ldisc open failed (-12), clearing slot 11 [ 558.048141][T12311] can: request_module (can-proto-3) failed. [ 560.904404][ T1151] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 562.980829][T12399] random: crng reseeded on system resumption [ 564.407637][T12423] FAULT_INJECTION: forcing a failure. [ 564.407637][T12423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 564.433077][T12423] CPU: 1 UID: 0 PID: 12423 Comm: syz.3.1464 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 564.433126][T12423] Tainted: [I]=FIRMWARE_WORKAROUND [ 564.433137][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 564.433154][T12423] Call Trace: [ 564.433164][T12423] [ 564.433174][T12423] dump_stack_lvl+0x16c/0x1f0 [ 564.433220][T12423] should_fail_ex+0x512/0x640 [ 564.433267][T12423] should_fail_alloc_page+0xe7/0x130 [ 564.433306][T12423] prepare_alloc_pages+0x3c2/0x610 [ 564.433357][T12423] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 564.433393][T12423] ? stack_trace_save+0x8e/0xc0 [ 564.433422][T12423] ? __pfx_stack_trace_save+0x10/0x10 [ 564.433451][T12423] ? stack_depot_save_flags+0x28/0xa50 [ 564.433496][T12423] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 564.433536][T12423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 564.433568][T12423] ? __kasan_slab_alloc+0x89/0x90 [ 564.433600][T12423] ? __pmd_alloc+0xc3/0x870 [ 564.433641][T12423] ? handle_mm_fault+0x3fe/0xad0 [ 564.433666][T12423] ? do_user_addr_fault+0x7a6/0x1370 [ 564.433692][T12423] ? exc_page_fault+0x5c/0xc0 [ 564.433726][T12423] ? asm_exc_page_fault+0x26/0x30 [ 564.433753][T12423] ? rep_movs_alternative+0x4a/0x90 [ 564.433782][T12423] ? _copy_from_iter+0x50c/0x15b0 [ 564.433823][T12423] ? kernfs_fop_write_iter+0x19a/0x510 [ 564.433887][T12423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 564.433931][T12423] ? policy_nodemask+0xea/0x4e0 [ 564.433969][T12423] alloc_pages_mpol+0x1fb/0x550 [ 564.434007][T12423] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 564.434042][T12423] ? cgroup_rstat_updated+0x2a/0xb20 [ 564.434096][T12423] alloc_pages_noprof+0x131/0x390 [ 564.434133][T12423] pte_alloc_one+0x19/0x380 [ 564.434166][T12423] do_pte_missing+0x1c0b/0x3fb0 [ 564.434196][T12423] ? do_raw_spin_unlock+0x172/0x230 [ 564.434244][T12423] ? __pmd_alloc+0x3c2/0x870 [ 564.434283][T12423] ? find_held_lock+0x2b/0x80 [ 564.434313][T12423] __handle_mm_fault+0x103d/0x2a40 [ 564.434354][T12423] ? __pfx___handle_mm_fault+0x10/0x10 [ 564.434407][T12423] ? find_vma+0xbf/0x140 [ 564.434445][T12423] ? __pfx_find_vma+0x10/0x10 [ 564.434490][T12423] handle_mm_fault+0x3fe/0xad0 [ 564.434526][T12423] do_user_addr_fault+0x7a6/0x1370 [ 564.434560][T12423] ? rcu_is_watching+0x12/0xc0 [ 564.434591][T12423] exc_page_fault+0x5c/0xc0 [ 564.434629][T12423] asm_exc_page_fault+0x26/0x30 [ 564.434657][T12423] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 564.434689][T12423] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 564.434718][T12423] RSP: 0018:ffffc9000b1d7a10 EFLAGS: 00050206 [ 564.434741][T12423] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 564.434760][T12423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880331e4000 [ 564.434777][T12423] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100663c9ff [ 564.434794][T12423] R10: ffff8880331e4fff R11: 0000000000000000 R12: ffffc9000b1d7d80 [ 564.434812][T12423] R13: 0000000000000000 R14: ffffc9000b1d7d88 R15: ffff8880331e4000 [ 564.434851][T12423] _copy_from_iter+0x50c/0x15b0 [ 564.434915][T12423] ? __pfx__copy_from_iter+0x10/0x10 [ 564.434961][T12423] ? rcu_is_watching+0x12/0xc0 [ 564.434987][T12423] ? trace_kmalloc+0x2b/0xd0 [ 564.435023][T12423] ? __kmalloc_noprof+0x242/0x510 [ 564.435065][T12423] kernfs_fop_write_iter+0x19a/0x510 [ 564.435109][T12423] do_iter_readv_writev+0x654/0x950 [ 564.435160][T12423] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 564.435224][T12423] vfs_writev+0x353/0xdc0 [ 564.435267][T12423] ? __pfx___mutex_trylock_common+0x10/0x10 [ 564.435309][T12423] ? __pfx___might_resched+0x10/0x10 [ 564.435347][T12423] ? __pfx_vfs_writev+0x10/0x10 [ 564.435391][T12423] ? __mutex_lock+0x1ca/0xb90 [ 564.435441][T12423] ? __pfx___mutex_lock+0x10/0x10 [ 564.435496][T12423] ? __fget_files+0x20e/0x3c0 [ 564.435539][T12423] ? __fget_files+0x110/0x3c0 [ 564.435593][T12423] ? do_writev+0x132/0x330 [ 564.435634][T12423] do_writev+0x132/0x330 [ 564.435679][T12423] ? __pfx_do_writev+0x10/0x10 [ 564.435722][T12423] ? rcu_is_watching+0x12/0xc0 [ 564.435760][T12423] do_syscall_64+0xcd/0x230 [ 564.435804][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.435833][T12423] RIP: 0033:0x7f5021d8e969 [ 564.435856][T12423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.435894][T12423] RSP: 002b:00007f5022cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 564.435921][T12423] RAX: ffffffffffffffda RBX: 00007f5021fb5fa0 RCX: 00007f5021d8e969 [ 564.435939][T12423] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 564.435957][T12423] RBP: 00007f5022cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 564.435974][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.435991][T12423] R13: 0000000000000000 R14: 00007f5021fb5fa0 R15: 00007fff2ed27878 [ 564.436030][T12423] [ 564.735784][T12426] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 565.461505][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.143360][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.569898][T12449] Console: switching to colour VGA+ 80x25 [ 566.991232][T12449] Console: switching to colour frame buffer device 128x48 [ 568.199907][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.207093][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.674141][T12477] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 570.066250][T12467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 570.084523][T12467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 570.122326][T12467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.140218][T12494] Console: switching to colour VGA+ 80x25 [ 570.143060][T12467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 570.272944][T12494] Console: switching to colour frame buffer device 128x48 [ 570.599163][T12502] Console: switching to colour VGA+ 80x25 [ 570.675889][ T5140] Bluetooth: hci0: command 0x0406 tx timeout [ 570.727675][ T5140] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 570.813170][T12502] Console: switching to colour frame buffer device 128x48 [ 571.703121][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 572.113171][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 572.194693][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 572.201368][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 572.450984][ T30] audit: type=1804 audit(4294968636.671:7): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1484" name="/newroot/366/file0" dev="tmpfs" ino=1956 res=1 errno=0 [ 572.545136][ T30] audit: type=1800 audit(4294968636.711:8): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1484" name="file0" dev="tmpfs" ino=1956 res=0 errno=0 [ 572.623486][ T30] audit: type=1800 audit(4294968636.721:9): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1484" name="file0" dev="tmpfs" ino=1956 res=0 errno=0 [ 573.897684][T12545] FAULT_INJECTION: forcing a failure. [ 573.897684][T12545] name failslab, interval 1, probability 0, space 0, times 0 [ 573.944105][T12545] CPU: 1 UID: 0 PID: 12545 Comm: syz.3.1488 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 573.944156][T12545] Tainted: [I]=FIRMWARE_WORKAROUND [ 573.944168][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 573.944186][T12545] Call Trace: [ 573.944196][T12545] [ 573.944208][T12545] dump_stack_lvl+0x16c/0x1f0 [ 573.944257][T12545] should_fail_ex+0x512/0x640 [ 573.944299][T12545] ? fs_reclaim_acquire+0xae/0x150 [ 573.944345][T12545] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 573.944388][T12545] should_failslab+0xc2/0x120 [ 573.944435][T12545] __kmalloc_noprof+0xd2/0x510 [ 573.944477][T12545] tomoyo_realpath_from_path+0xc2/0x6e0 [ 573.944523][T12545] ? tomoyo_profile+0x47/0x60 [ 573.944574][T12545] tomoyo_path_number_perm+0x245/0x580 [ 573.944609][T12545] ? tomoyo_path_number_perm+0x237/0x580 [ 573.944650][T12545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 573.944689][T12545] ? find_held_lock+0x2b/0x80 [ 573.944756][T12545] ? hook_file_ioctl_common+0x145/0x410 [ 573.944808][T12545] security_file_ioctl+0x9b/0x240 [ 573.944848][T12545] __x64_sys_ioctl+0xb7/0x200 [ 573.944893][T12545] do_syscall_64+0xcd/0x230 [ 573.944938][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.944969][T12545] RIP: 0033:0x7f5021d8e969 [ 573.944992][T12545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.945022][T12545] RSP: 002b:00007f5022cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.945050][T12545] RAX: ffffffffffffffda RBX: 00007f5021fb5fa0 RCX: 00007f5021d8e969 [ 573.945070][T12545] RDX: 0000000000000000 RSI: 0000000000004c0a RDI: 0000000000000000 [ 573.945088][T12545] RBP: 00007f5022cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 573.945106][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.945124][T12545] R13: 0000000000000000 R14: 00007f5021fb5fa0 R15: 00007fff2ed27878 [ 573.945163][T12545] [ 573.945175][T12545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.806292][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 575.690069][T12577] : Can't lookup blockdev [ 578.060798][T12613] Console: switching to colour VGA+ 80x25 [ 578.418603][T12616] Console: switching to colour frame buffer device 128x48 [ 578.762476][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 578.828229][T12627] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1506'. [ 578.859985][T12626] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1506'. [ 579.437972][T12640] netlink: 'syz.0.1509': attribute type 2 has an invalid length. [ 579.618032][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 579.629272][T12646] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1511'. [ 581.878983][T12700] FAULT_INJECTION: forcing a failure. [ 581.878983][T12700] name failslab, interval 1, probability 0, space 0, times 0 [ 581.913503][T12700] CPU: 0 UID: 0 PID: 12700 Comm: syz.2.1526 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 581.913563][T12700] Tainted: [I]=FIRMWARE_WORKAROUND [ 581.913575][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 581.913601][T12700] Call Trace: [ 581.913613][T12700] [ 581.913626][T12700] dump_stack_lvl+0x16c/0x1f0 [ 581.913677][T12700] should_fail_ex+0x512/0x640 [ 581.913725][T12700] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 581.913784][T12700] should_failslab+0xc2/0x120 [ 581.913825][T12700] __kmalloc_cache_noprof+0x6a/0x3e0 [ 581.913878][T12700] ? rcu_is_watching+0x12/0xc0 [ 581.913908][T12700] ? snd_pcm_open+0x2ed/0x730 [ 581.913965][T12700] snd_pcm_open+0x2ed/0x730 [ 581.914024][T12700] ? __pfx_snd_pcm_open+0x10/0x10 [ 581.914082][T12700] ? __pfx_default_wake_function+0x10/0x10 [ 581.914127][T12700] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 581.914183][T12700] snd_pcm_playback_open+0x86/0xe0 [ 581.914215][T12700] snd_open+0x1fe/0x450 [ 581.914256][T12700] ? __pfx_snd_open+0x10/0x10 [ 581.914297][T12700] chrdev_open+0x231/0x6a0 [ 581.914330][T12700] ? __pfx_apparmor_file_open+0x10/0x10 [ 581.914372][T12700] ? __pfx_chrdev_open+0x10/0x10 [ 581.914410][T12700] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 581.914467][T12700] do_dentry_open+0x741/0x1c10 [ 581.914502][T12700] ? __pfx_chrdev_open+0x10/0x10 [ 581.914544][T12700] vfs_open+0x82/0x3f0 [ 581.914597][T12700] path_openat+0x1e5e/0x2d40 [ 581.914644][T12700] ? __pfx_path_openat+0x10/0x10 [ 581.914687][T12700] do_filp_open+0x20b/0x470 [ 581.914719][T12700] ? __pfx_do_filp_open+0x10/0x10 [ 581.914781][T12700] ? alloc_fd+0x471/0x7d0 [ 581.914845][T12700] do_sys_openat2+0x11b/0x1d0 [ 581.914888][T12700] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.914950][T12700] __x64_sys_openat+0x174/0x210 [ 581.914995][T12700] ? __pfx___x64_sys_openat+0x10/0x10 [ 581.915043][T12700] ? rcu_is_watching+0x12/0xc0 [ 581.915085][T12700] do_syscall_64+0xcd/0x230 [ 581.915137][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.915169][T12700] RIP: 0033:0x7fbde8f8e969 [ 581.915196][T12700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.915228][T12700] RSP: 002b:00007fbde9d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.915260][T12700] RAX: ffffffffffffffda RBX: 00007fbde91b5fa0 RCX: 00007fbde8f8e969 [ 581.915281][T12700] RDX: 000000000016b042 RSI: 0000200000005480 RDI: ffffffffffffff9c [ 581.915302][T12700] RBP: 00007fbde9010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 581.915322][T12700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.915342][T12700] R13: 0000000000000000 R14: 00007fbde91b5fa0 R15: 00007ffecb27c0d8 [ 581.915385][T12700] [ 582.219332][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.434331][T12697] FAULT_INJECTION: forcing a failure. [ 582.434331][T12697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.448903][T12697] CPU: 0 UID: 0 PID: 12697 Comm: syz.0.1523 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 582.448941][T12697] Tainted: [I]=FIRMWARE_WORKAROUND [ 582.448950][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 582.448964][T12697] Call Trace: [ 582.448972][T12697] [ 582.448981][T12697] dump_stack_lvl+0x16c/0x1f0 [ 582.449022][T12697] should_fail_ex+0x512/0x640 [ 582.449059][T12697] strncpy_from_user+0x3b/0x2e0 [ 582.449092][T12697] getname_flags.part.0+0x8f/0x550 [ 582.449125][T12697] getname_flags+0x93/0xf0 [ 582.449160][T12697] do_sys_openat2+0xb8/0x1d0 [ 582.449190][T12697] ? __pfx_do_sys_openat2+0x10/0x10 [ 582.449223][T12697] ? __fget_files+0x20e/0x3c0 [ 582.449263][T12697] __x64_sys_openat+0x174/0x210 [ 582.449293][T12697] ? __pfx___x64_sys_openat+0x10/0x10 [ 582.449323][T12697] ? ksys_write+0x1b9/0x240 [ 582.449354][T12697] do_syscall_64+0xcd/0x230 [ 582.449389][T12697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.449412][T12697] RIP: 0033:0x7f9a8258e969 [ 582.449430][T12697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.449453][T12697] RSP: 002b:00007f9a8335b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 582.449480][T12697] RAX: ffffffffffffffda RBX: 00007f9a827b6240 RCX: 00007f9a8258e969 [ 582.449496][T12697] RDX: 0000000000020240 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 582.449511][T12697] RBP: 00007f9a8335b090 R08: 0000000000000000 R09: 0000000000000000 [ 582.449526][T12697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.449539][T12697] R13: 0000000000000000 R14: 00007f9a827b6240 R15: 00007ffc0e401e78 [ 582.449568][T12697] [ 582.648967][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.726190][T12685] random: crng reseeded on system resumption [ 583.917578][T12718] CIFS mount error: No usable UNC path provided in device string! [ 583.917578][T12718] [ 583.928757][T12718] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 583.942746][T12718] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[12718] [ 585.136893][T12739] netlink: 294 bytes leftover after parsing attributes in process `syz.0.1534'. [ 585.163202][T12739] FAULT_INJECTION: forcing a failure. [ 585.163202][T12739] name failslab, interval 1, probability 0, space 0, times 0 [ 585.182753][T12739] CPU: 1 UID: 0 PID: 12739 Comm: syz.0.1534 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 585.182806][T12739] Tainted: [I]=FIRMWARE_WORKAROUND [ 585.182818][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 585.182838][T12739] Call Trace: [ 585.182848][T12739] [ 585.182860][T12739] dump_stack_lvl+0x16c/0x1f0 [ 585.182925][T12739] should_fail_ex+0x512/0x640 [ 585.182969][T12739] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 585.183020][T12739] should_failslab+0xc2/0x120 [ 585.183059][T12739] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 585.183096][T12739] ? __alloc_skb+0x2b2/0x380 [ 585.183136][T12739] __alloc_skb+0x2b2/0x380 [ 585.183169][T12739] ? __pfx___alloc_skb+0x10/0x10 [ 585.183200][T12739] ? __pfx_tc_new_tfilter+0x10/0x10 [ 585.183258][T12739] netlink_ack+0x15d/0xb80 [ 585.183311][T12739] netlink_rcv_skb+0x347/0x440 [ 585.183351][T12739] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 585.183393][T12739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.183455][T12739] ? netlink_deliver_tap+0x1ae/0xd30 [ 585.183501][T12739] netlink_unicast+0x53a/0x7f0 [ 585.183554][T12739] ? __pfx_netlink_unicast+0x10/0x10 [ 585.183592][T12739] ? __lock_acquire+0xaa4/0x1ba0 [ 585.183644][T12739] netlink_sendmsg+0x8d1/0xdd0 [ 585.183691][T12739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.183747][T12739] ____sys_sendmsg+0xa95/0xc70 [ 585.183794][T12739] ? copy_msghdr_from_user+0x10a/0x160 [ 585.183829][T12739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.183882][T12739] ? kfree+0x252/0x4d0 [ 585.183905][T12739] ? __pfx__kstrtoull+0x10/0x10 [ 585.183950][T12739] ___sys_sendmsg+0x134/0x1d0 [ 585.183986][T12739] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.184056][T12739] ? __pfx___might_resched+0x10/0x10 [ 585.184098][T12739] __sys_sendmmsg+0x200/0x420 [ 585.184140][T12739] ? __pfx___sys_sendmmsg+0x10/0x10 [ 585.184190][T12739] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 585.184254][T12739] ? fput+0x70/0xf0 [ 585.184289][T12739] ? ksys_write+0x1b9/0x240 [ 585.184317][T12739] ? __pfx_ksys_write+0x10/0x10 [ 585.184343][T12739] ? rcu_is_watching+0x12/0xc0 [ 585.184376][T12739] __x64_sys_sendmmsg+0x9c/0x100 [ 585.184409][T12739] ? lockdep_hardirqs_on+0x7c/0x110 [ 585.184452][T12739] do_syscall_64+0xcd/0x230 [ 585.184500][T12739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.184542][T12739] RIP: 0033:0x7f9a8258e969 [ 585.184567][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.184597][T12739] RSP: 002b:00007f9a833be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 585.184626][T12739] RAX: ffffffffffffffda RBX: 00007f9a827b5fa0 RCX: 00007f9a8258e969 [ 585.184647][T12739] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 585.184665][T12739] RBP: 00007f9a833be090 R08: 0000000000000000 R09: 0000000000000000 [ 585.184684][T12739] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 585.184703][T12739] R13: 0000000000000000 R14: 00007f9a827b5fa0 R15: 00007ffc0e401e78 [ 585.184744][T12739] [ 586.902470][T12769] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1541'. [ 588.692473][T12803] Invalid ELF header magic: != ELF [ 589.220249][T12821] Console: switching to colour VGA+ 80x25 [ 589.774851][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1553'. [ 590.168501][T12834] net_ratelimit: 77 callbacks suppressed [ 590.168524][T12834] openvswitch: netlink: Duplicate or invalid key (type 0). [ 590.474441][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.500762][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.546032][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.623330][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.651080][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.678739][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.696996][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.714228][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.733722][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.759047][T12844] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 590.804691][T12845] delete_channel: no stack [ 591.031452][T12853] netlink: 294 bytes leftover after parsing attributes in process `syz.0.1560'. [ 591.112870][T12853] FAULT_INJECTION: forcing a failure. [ 591.112870][T12853] name failslab, interval 1, probability 0, space 0, times 0 [ 591.133061][T12853] CPU: 0 UID: 0 PID: 12853 Comm: syz.0.1560 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 591.133100][T12853] Tainted: [I]=FIRMWARE_WORKAROUND [ 591.133108][T12853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 591.133122][T12853] Call Trace: [ 591.133129][T12853] [ 591.133138][T12853] dump_stack_lvl+0x16c/0x1f0 [ 591.133175][T12853] should_fail_ex+0x512/0x640 [ 591.133211][T12853] should_failslab+0xc2/0x120 [ 591.133239][T12853] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 591.133264][T12853] ? skb_clone+0x190/0x3f0 [ 591.133294][T12853] skb_clone+0x190/0x3f0 [ 591.133321][T12853] netlink_deliver_tap+0xabd/0xd30 [ 591.133353][T12853] netlink_unicast+0x6b2/0x7f0 [ 591.133384][T12853] ? __pfx_netlink_unicast+0x10/0x10 [ 591.133420][T12853] netlink_ack+0x696/0xb80 [ 591.133455][T12853] netlink_rcv_skb+0x347/0x440 [ 591.133483][T12853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 591.133512][T12853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.133555][T12853] ? netlink_deliver_tap+0x1ae/0xd30 [ 591.133586][T12853] netlink_unicast+0x53a/0x7f0 [ 591.133617][T12853] ? __pfx_netlink_unicast+0x10/0x10 [ 591.133642][T12853] ? __lock_acquire+0xaa4/0x1ba0 [ 591.133678][T12853] netlink_sendmsg+0x8d1/0xdd0 [ 591.133710][T12853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.133748][T12853] ____sys_sendmsg+0xa95/0xc70 [ 591.133780][T12853] ? copy_msghdr_from_user+0x10a/0x160 [ 591.133805][T12853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.133850][T12853] ? kfree+0x252/0x4d0 [ 591.133867][T12853] ? __pfx__kstrtoull+0x10/0x10 [ 591.133899][T12853] ___sys_sendmsg+0x134/0x1d0 [ 591.133927][T12853] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.133980][T12853] ? __pfx___might_resched+0x10/0x10 [ 591.134012][T12853] __sys_sendmmsg+0x200/0x420 [ 591.134043][T12853] ? __pfx___sys_sendmmsg+0x10/0x10 [ 591.134079][T12853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 591.134126][T12853] ? fput+0x70/0xf0 [ 591.134153][T12853] ? ksys_write+0x1b9/0x240 [ 591.134174][T12853] ? __pfx_ksys_write+0x10/0x10 [ 591.134195][T12853] ? rcu_is_watching+0x12/0xc0 [ 591.134220][T12853] __x64_sys_sendmmsg+0x9c/0x100 [ 591.134258][T12853] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.134289][T12853] do_syscall_64+0xcd/0x230 [ 591.134324][T12853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.134365][T12853] RIP: 0033:0x7f9a8258e969 [ 591.134384][T12853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.134407][T12853] RSP: 002b:00007f9a833be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 591.134429][T12853] RAX: ffffffffffffffda RBX: 00007f9a827b5fa0 RCX: 00007f9a8258e969 [ 591.134445][T12853] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 591.134459][T12853] RBP: 00007f9a833be090 R08: 0000000000000000 R09: 0000000000000000 [ 591.134473][T12853] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 591.134487][T12853] R13: 0000000000000000 R14: 00007f9a827b5fa0 R15: 00007ffc0e401e78 [ 591.134516][T12853] [ 591.764449][T12861] FAULT_INJECTION: forcing a failure. [ 591.764449][T12861] name failslab, interval 1, probability 0, space 0, times 0 [ 591.778641][T12861] CPU: 0 UID: 0 PID: 12861 Comm: syz.2.1563 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 591.778694][T12861] Tainted: [I]=FIRMWARE_WORKAROUND [ 591.778706][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 591.778724][T12861] Call Trace: [ 591.778734][T12861] [ 591.778746][T12861] dump_stack_lvl+0x16c/0x1f0 [ 591.778796][T12861] should_fail_ex+0x512/0x640 [ 591.778849][T12861] ? fs_reclaim_acquire+0xae/0x150 [ 591.778901][T12861] should_failslab+0xc2/0x120 [ 591.778941][T12861] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 591.778980][T12861] ? security_inode_alloc+0x3b/0x2b0 [ 591.779023][T12861] security_inode_alloc+0x3b/0x2b0 [ 591.779061][T12861] inode_init_always_gfp+0xce4/0x1030 [ 591.779120][T12861] alloc_inode+0x86/0x240 [ 591.779160][T12861] alloc_anon_inode+0x28/0x3e0 [ 591.779211][T12861] secretmem_file_create.constprop.0+0x4d/0x2c0 [ 591.779257][T12861] __x64_sys_memfd_secret+0xc5/0x1a0 [ 591.779295][T12861] do_syscall_64+0xcd/0x230 [ 591.779340][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.779371][T12861] RIP: 0033:0x7fbde8f8e969 [ 591.779395][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.779426][T12861] RSP: 002b:00007fbde9d31038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 591.779456][T12861] RAX: ffffffffffffffda RBX: 00007fbde91b5fa0 RCX: 00007fbde8f8e969 [ 591.779477][T12861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 591.779494][T12861] RBP: 00007fbde9010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 591.779512][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.779529][T12861] R13: 0000000000000000 R14: 00007fbde91b5fa0 R15: 00007ffecb27c0d8 [ 591.779570][T12861] [ 592.536901][T12879] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1568'. [ 592.558850][T12879] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1568'. [ 593.719507][T12891] misc userio: No port type given on /dev/userio [ 593.811669][T12904] Invalid ELF header magic: != ELF [ 594.801861][T12927] FAULT_INJECTION: forcing a failure. [ 594.801861][T12927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 594.843369][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.2.1579 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 594.843421][T12927] Tainted: [I]=FIRMWARE_WORKAROUND [ 594.843434][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 594.843453][T12927] Call Trace: [ 594.843463][T12927] [ 594.843474][T12927] dump_stack_lvl+0x16c/0x1f0 [ 594.843524][T12927] should_fail_ex+0x512/0x640 [ 594.843584][T12927] should_fail_alloc_page+0xe7/0x130 [ 594.843626][T12927] prepare_alloc_pages+0x3c2/0x610 [ 594.843683][T12927] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 594.843723][T12927] ? stack_trace_save+0x8e/0xc0 [ 594.843756][T12927] ? __pfx_stack_trace_save+0x10/0x10 [ 594.843788][T12927] ? stack_depot_save_flags+0x28/0xa50 [ 594.843838][T12927] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 594.843879][T12927] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 594.843915][T12927] ? __kasan_slab_alloc+0x89/0x90 [ 594.843951][T12927] ? __pmd_alloc+0xc3/0x870 [ 594.843995][T12927] ? handle_mm_fault+0x3fe/0xad0 [ 594.844023][T12927] ? do_user_addr_fault+0x7a6/0x1370 [ 594.844052][T12927] ? exc_page_fault+0x5c/0xc0 [ 594.844091][T12927] ? asm_exc_page_fault+0x26/0x30 [ 594.844120][T12927] ? rep_movs_alternative+0x4a/0x90 [ 594.844153][T12927] ? _copy_from_user+0x98/0xd0 [ 594.844198][T12927] ? lo_ioctl+0x44d/0x27e0 [ 594.844260][T12927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 594.844305][T12927] ? policy_nodemask+0xea/0x4e0 [ 594.844348][T12927] alloc_pages_mpol+0x1fb/0x550 [ 594.844393][T12927] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 594.844432][T12927] ? cgroup_rstat_updated+0x2a/0xb20 [ 594.844490][T12927] alloc_pages_noprof+0x131/0x390 [ 594.844531][T12927] pte_alloc_one+0x19/0x380 [ 594.844585][T12927] do_pte_missing+0x1c0b/0x3fb0 [ 594.844619][T12927] ? do_raw_spin_unlock+0x172/0x230 [ 594.844671][T12927] ? __pmd_alloc+0x3c2/0x870 [ 594.844715][T12927] ? find_held_lock+0x2b/0x80 [ 594.844748][T12927] __handle_mm_fault+0x103d/0x2a40 [ 594.844791][T12927] ? __pfx___handle_mm_fault+0x10/0x10 [ 594.844848][T12927] ? find_vma+0xbf/0x140 [ 594.844890][T12927] ? __pfx_find_vma+0x10/0x10 [ 594.844937][T12927] handle_mm_fault+0x3fe/0xad0 [ 594.844977][T12927] do_user_addr_fault+0x7a6/0x1370 [ 594.845014][T12927] ? rcu_is_watching+0x12/0xc0 [ 594.845047][T12927] exc_page_fault+0x5c/0xc0 [ 594.845091][T12927] asm_exc_page_fault+0x26/0x30 [ 594.845121][T12927] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 594.845155][T12927] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 594.845184][T12927] RSP: 0018:ffffc90002f07900 EFLAGS: 00050206 [ 594.845206][T12927] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000130 [ 594.845223][T12927] RDX: fffff520005e0fb7 RSI: 0000000000000000 RDI: ffffc90002f07c88 [ 594.845241][T12927] RBP: 0000000000000130 R08: 0000000000000001 R09: fffff520005e0fb6 [ 594.845261][T12927] R10: ffffc90002f07db7 R11: 0000000000000000 R12: 0000000000000000 [ 594.845279][T12927] R13: ffffc90002f07c88 R14: 000000000000000a R15: 00000000fffffff2 [ 594.845320][T12927] _copy_from_user+0x98/0xd0 [ 594.845368][T12927] lo_ioctl+0x44d/0x27e0 [ 594.845421][T12927] ? kasan_save_stack+0x42/0x60 [ 594.845451][T12927] ? kasan_save_stack+0x33/0x60 [ 594.845481][T12927] ? kasan_save_track+0x14/0x30 [ 594.845511][T12927] ? kasan_save_free_info+0x3b/0x60 [ 594.845556][T12927] ? __kasan_slab_free+0x51/0x70 [ 594.845597][T12927] ? kfree+0x2b6/0x4d0 [ 594.845620][T12927] ? tomoyo_path_number_perm+0x470/0x580 [ 594.845656][T12927] ? security_file_ioctl+0x9b/0x240 [ 594.845690][T12927] ? __x64_sys_ioctl+0xb7/0x200 [ 594.845730][T12927] ? do_syscall_64+0xcd/0x230 [ 594.845771][T12927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.845814][T12927] ? __pfx_lo_ioctl+0x10/0x10 [ 594.845887][T12927] ? kasan_quarantine_put+0x10a/0x240 [ 594.845917][T12927] ? lockdep_hardirqs_on+0x7c/0x110 [ 594.845960][T12927] ? find_held_lock+0x2b/0x80 [ 594.845986][T12927] ? tomoyo_path_number_perm+0x295/0x580 [ 594.846028][T12927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 594.846073][T12927] ? blkdev_common_ioctl+0x1dd/0x2480 [ 594.846108][T12927] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 594.846191][T12927] ? __pfx_lo_ioctl+0x10/0x10 [ 594.846236][T12927] blkdev_ioctl+0x274/0x6d0 [ 594.846271][T12927] ? __pfx_blkdev_ioctl+0x10/0x10 [ 594.846315][T12927] ? __pfx_blkdev_ioctl+0x10/0x10 [ 594.846353][T12927] __x64_sys_ioctl+0x190/0x200 [ 594.846398][T12927] do_syscall_64+0xcd/0x230 [ 594.846446][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.846477][T12927] RIP: 0033:0x7fbde8f8e969 [ 594.846501][T12927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.846532][T12927] RSP: 002b:00007fbde9d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.846560][T12927] RAX: ffffffffffffffda RBX: 00007fbde91b5fa0 RCX: 00007fbde8f8e969 [ 594.846588][T12927] RDX: 0000000000000000 RSI: 0000000000004c0a RDI: 0000000000000000 [ 594.846607][T12927] RBP: 00007fbde9d31090 R08: 0000000000000000 R09: 0000000000000000 [ 594.846626][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.846644][T12927] R13: 0000000000000000 R14: 00007fbde91b5fa0 R15: 00007ffecb27c0d8 [ 594.846687][T12927] [ 595.724582][T12924] kexec: Could not allocate control_code_buffer [ 596.020975][T12937] netlink: 294 bytes leftover after parsing attributes in process `syz.2.1582'. [ 596.351214][T12942] misc userio: No port type given on /dev/userio [ 596.845717][T12953] Console: switching to colour frame buffer device 128x48 [ 596.998969][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 597.033164][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 597.360275][T12964] FAULT_INJECTION: forcing a failure. [ 597.360275][T12964] name failslab, interval 1, probability 0, space 0, times 0 [ 597.376620][T12964] CPU: 0 UID: 0 PID: 12964 Comm: syz.1.1590 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 597.376669][T12964] Tainted: [I]=FIRMWARE_WORKAROUND [ 597.376680][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 597.376697][T12964] Call Trace: [ 597.376706][T12964] [ 597.376718][T12964] dump_stack_lvl+0x16c/0x1f0 [ 597.376768][T12964] should_fail_ex+0x512/0x640 [ 597.376820][T12964] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 597.376860][T12964] should_failslab+0xc2/0x120 [ 597.376900][T12964] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 597.376936][T12964] ? ptlock_alloc+0x1f/0x70 [ 597.376972][T12964] ptlock_alloc+0x1f/0x70 [ 597.377001][T12964] pte_alloc_one+0x6d/0x380 [ 597.377038][T12964] do_pte_missing+0x1c0b/0x3fb0 [ 597.377071][T12964] ? do_raw_spin_unlock+0x172/0x230 [ 597.377123][T12964] ? __pmd_alloc+0x3c2/0x870 [ 597.377167][T12964] ? find_held_lock+0x2b/0x80 [ 597.377200][T12964] __handle_mm_fault+0x103d/0x2a40 [ 597.377245][T12964] ? __pfx___handle_mm_fault+0x10/0x10 [ 597.377302][T12964] ? find_vma+0xbf/0x140 [ 597.377345][T12964] ? __pfx_find_vma+0x10/0x10 [ 597.377394][T12964] handle_mm_fault+0x3fe/0xad0 [ 597.377434][T12964] do_user_addr_fault+0x7a6/0x1370 [ 597.377471][T12964] ? rcu_is_watching+0x12/0xc0 [ 597.377504][T12964] exc_page_fault+0x5c/0xc0 [ 597.377546][T12964] asm_exc_page_fault+0x26/0x30 [ 597.377577][T12964] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 597.377619][T12964] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 597.377650][T12964] RSP: 0018:ffffc9000486f900 EFLAGS: 00050206 [ 597.377675][T12964] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000130 [ 597.377694][T12964] RDX: fffff5200090dfb7 RSI: 0000000000000000 RDI: ffffc9000486fc88 [ 597.377713][T12964] RBP: 0000000000000130 R08: 0000000000000001 R09: fffff5200090dfb6 [ 597.377732][T12964] R10: ffffc9000486fdb7 R11: 0000000000000000 R12: 0000000000000000 [ 597.377750][T12964] R13: ffffc9000486fc88 R14: 000000000000000a R15: 00000000fffffff2 [ 597.377788][T12964] _copy_from_user+0x98/0xd0 [ 597.377834][T12964] lo_ioctl+0x44d/0x27e0 [ 597.377882][T12964] ? kasan_save_stack+0x42/0x60 [ 597.377910][T12964] ? kasan_save_stack+0x33/0x60 [ 597.377938][T12964] ? kasan_save_track+0x14/0x30 [ 597.377966][T12964] ? kasan_save_free_info+0x3b/0x60 [ 597.378007][T12964] ? __kasan_slab_free+0x51/0x70 [ 597.378036][T12964] ? kfree+0x2b6/0x4d0 [ 597.378058][T12964] ? tomoyo_path_number_perm+0x470/0x580 [ 597.378091][T12964] ? security_file_ioctl+0x9b/0x240 [ 597.378124][T12964] ? __x64_sys_ioctl+0xb7/0x200 [ 597.378159][T12964] ? do_syscall_64+0xcd/0x230 [ 597.378197][T12964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.378237][T12964] ? __pfx_lo_ioctl+0x10/0x10 [ 597.378307][T12964] ? kasan_quarantine_put+0x10a/0x240 [ 597.378335][T12964] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.378377][T12964] ? find_held_lock+0x2b/0x80 [ 597.378404][T12964] ? tomoyo_path_number_perm+0x295/0x580 [ 597.378444][T12964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.378484][T12964] ? blkdev_common_ioctl+0x1dd/0x2480 [ 597.378517][T12964] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.378600][T12964] ? __pfx_lo_ioctl+0x10/0x10 [ 597.378642][T12964] blkdev_ioctl+0x274/0x6d0 [ 597.378674][T12964] ? __pfx_blkdev_ioctl+0x10/0x10 [ 597.378714][T12964] ? __pfx_blkdev_ioctl+0x10/0x10 [ 597.378750][T12964] __x64_sys_ioctl+0x190/0x200 [ 597.378793][T12964] do_syscall_64+0xcd/0x230 [ 597.378837][T12964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.378866][T12964] RIP: 0033:0x7fddcd18e969 [ 597.378888][T12964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.378915][T12964] RSP: 002b:00007fddcaff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.378940][T12964] RAX: ffffffffffffffda RBX: 00007fddcd3b5fa0 RCX: 00007fddcd18e969 [ 597.378959][T12964] RDX: 0000000000000000 RSI: 0000000000004c0a RDI: 0000000000000000 [ 597.378976][T12964] RBP: 00007fddcaff6090 R08: 0000000000000000 R09: 0000000000000000 [ 597.378994][T12964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.379010][T12964] R13: 0000000000000000 R14: 00007fddcd3b5fa0 R15: 00007ffcd1c7a858 [ 597.379047][T12964] [ 597.852454][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.338793][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1591'. [ 599.896412][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 599.916276][T13003] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1599'. [ 600.070256][T13000] FAULT_INJECTION: forcing a failure. [ 600.070256][T13000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 600.086413][T13000] CPU: 0 UID: 0 PID: 13000 Comm: syz.0.1597 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 600.086453][T13000] Tainted: [I]=FIRMWARE_WORKAROUND [ 600.086462][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 600.086475][T13000] Call Trace: [ 600.086483][T13000] [ 600.086491][T13000] dump_stack_lvl+0x16c/0x1f0 [ 600.086529][T13000] should_fail_ex+0x512/0x640 [ 600.086566][T13000] should_fail_alloc_page+0xe7/0x130 [ 600.086597][T13000] prepare_alloc_pages+0x3c2/0x610 [ 600.086638][T13000] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 600.086667][T13000] ? kernel_text_address+0x8d/0x100 [ 600.086706][T13000] ? __kernel_text_address+0xd/0x40 [ 600.086742][T13000] ? unwind_get_return_address+0x59/0xa0 [ 600.086769][T13000] ? arch_stack_walk+0xa6/0x100 [ 600.086801][T13000] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 600.086829][T13000] ? __lock_acquire+0x5ca/0x1ba0 [ 600.086861][T13000] ? stack_trace_save+0x8e/0xc0 [ 600.086891][T13000] ? look_up_lock_class+0x6b/0x150 [ 600.086927][T13000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 600.086961][T13000] ? policy_nodemask+0xea/0x4e0 [ 600.087003][T13000] alloc_pages_mpol+0x1fb/0x550 [ 600.087041][T13000] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 600.087092][T13000] folio_alloc_mpol_noprof+0x36/0x2f0 [ 600.087136][T13000] vma_alloc_folio_noprof+0xed/0x1e0 [ 600.087179][T13000] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 600.087221][T13000] ? find_held_lock+0x2b/0x80 [ 600.087251][T13000] ? do_wp_page+0x229a/0x58e0 [ 600.087303][T13000] do_wp_page+0x209a/0x58e0 [ 600.087362][T13000] ? __pfx_do_wp_page+0x10/0x10 [ 600.087420][T13000] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 600.087466][T13000] ? ___pte_offset_map+0x1bc/0x540 [ 600.087520][T13000] __handle_mm_fault+0x1ada/0x2a40 [ 600.087563][T13000] ? __pfx___handle_mm_fault+0x10/0x10 [ 600.087619][T13000] ? find_vma+0xbf/0x140 [ 600.087659][T13000] ? __pfx_find_vma+0x10/0x10 [ 600.087708][T13000] handle_mm_fault+0x3fe/0xad0 [ 600.087748][T13000] do_user_addr_fault+0x7a6/0x1370 [ 600.087784][T13000] ? rcu_is_watching+0x12/0xc0 [ 600.087818][T13000] exc_page_fault+0x5c/0xc0 [ 600.087859][T13000] asm_exc_page_fault+0x26/0x30 [ 600.087888][T13000] RIP: 0010:__put_user_4+0xd/0x20 [ 600.087932][T13000] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 600.087962][T13000] RSP: 0018:ffffc9000b147ba8 EFLAGS: 00050206 [ 600.087988][T13000] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9a8335b990 [ 600.088007][T13000] RDX: 1ffff11004bc5855 RSI: ffffffff817963a9 RDI: 00007f9a8335b990 [ 600.088028][T13000] RBP: ffff888025e2bc00 R08: e7151b5d2ecc2001 R09: 0000000000000001 [ 600.088049][T13000] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888025e2c2a8 [ 600.088068][T13000] R13: ffff8880280ab2c4 R14: ffff88802fbda500 R15: 0000000000000000 [ 600.088101][T13000] ? mm_release+0x209/0x300 [ 600.088140][T13000] mm_release+0x235/0x300 [ 600.088175][T13000] do_exit+0x898/0x2c30 [ 600.088215][T13000] ? __pfx_futex_wake_mark+0x10/0x10 [ 600.088264][T13000] ? __pfx_do_exit+0x10/0x10 [ 600.088306][T13000] ? do_raw_spin_lock+0x12c/0x2b0 [ 600.088354][T13000] ? find_held_lock+0x2b/0x80 [ 600.088410][T13000] do_group_exit+0xd3/0x2a0 [ 600.088458][T13000] get_signal+0x2673/0x26d0 [ 600.088500][T13000] ? __fget_files+0x204/0x3c0 [ 600.088556][T13000] ? __pfx_get_signal+0x10/0x10 [ 600.088590][T13000] ? do_futex+0x122/0x350 [ 600.088624][T13000] ? __pfx_do_futex+0x10/0x10 [ 600.088663][T13000] arch_do_signal_or_restart+0x8f/0x7a0 [ 600.088709][T13000] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 600.088770][T13000] ? rcu_is_watching+0x12/0xc0 [ 600.088807][T13000] syscall_exit_to_user_mode+0x150/0x2a0 [ 600.088852][T13000] do_syscall_64+0xda/0x230 [ 600.088889][T13000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.088912][T13000] RIP: 0033:0x7f9a8258e969 [ 600.088930][T13000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.088952][T13000] RSP: 002b:00007f9a8335b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 600.088973][T13000] RAX: fffffffffffffe00 RBX: 00007f9a827b6248 RCX: 00007f9a8258e969 [ 600.088988][T13000] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9a827b6248 [ 600.089002][T13000] RBP: 00007f9a827b6240 R08: 0000000000000000 R09: 0000000000000000 [ 600.089016][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a827b624c [ 600.089029][T13000] R13: 0000000000000000 R14: 00007ffc0e401d90 R15: 00007ffc0e401e78 [ 600.089058][T13000] [ 600.585841][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.424884][T13012] FAULT_INJECTION: forcing a failure. [ 601.424884][T13012] name failslab, interval 1, probability 0, space 0, times 0 [ 601.438965][T13012] CPU: 1 UID: 0 PID: 13012 Comm: syz.3.1602 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 601.439019][T13012] Tainted: [I]=FIRMWARE_WORKAROUND [ 601.439042][T13012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 601.439061][T13012] Call Trace: [ 601.439073][T13012] [ 601.439085][T13012] dump_stack_lvl+0x16c/0x1f0 [ 601.439137][T13012] should_fail_ex+0x512/0x640 [ 601.439185][T13012] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 601.439228][T13012] should_failslab+0xc2/0x120 [ 601.439269][T13012] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 601.439305][T13012] ? d_instantiate+0x77/0x90 [ 601.439338][T13012] ? alloc_empty_file+0x55/0x1e0 [ 601.439386][T13012] alloc_empty_file+0x55/0x1e0 [ 601.439429][T13012] alloc_file_pseudo+0x13a/0x230 [ 601.439474][T13012] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 601.439529][T13012] __anon_inode_getfile+0xf7/0x370 [ 601.439590][T13012] io_uring_setup+0x14cf/0x1ff0 [ 601.439637][T13012] ? __pfx_io_uring_setup+0x10/0x10 [ 601.439687][T13012] ? find_held_lock+0x2b/0x80 [ 601.439737][T13012] ? rcu_is_watching+0x12/0xc0 [ 601.439776][T13012] __x64_sys_io_uring_setup+0xc2/0x170 [ 601.439817][T13012] do_syscall_64+0xcd/0x230 [ 601.439868][T13012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.439900][T13012] RIP: 0033:0x7f5021d8e969 [ 601.439925][T13012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.439957][T13012] RSP: 002b:00007f5022cd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 601.439986][T13012] RAX: ffffffffffffffda RBX: 00007f5021fb5fa0 RCX: 00007f5021d8e969 [ 601.440009][T13012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 601.440039][T13012] RBP: 00007f5021e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 601.440060][T13012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.440080][T13012] R13: 0000000000000000 R14: 00007f5021fb5fa0 R15: 00007fff2ed27878 [ 601.440123][T13012] [ 601.880103][T13018] FAULT_INJECTION: forcing a failure. [ 601.880103][T13018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 602.040376][T13018] CPU: 1 UID: 0 PID: 13018 Comm: syz.0.1604 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 602.040429][T13018] Tainted: [I]=FIRMWARE_WORKAROUND [ 602.040441][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 602.040460][T13018] Call Trace: [ 602.040469][T13018] [ 602.040481][T13018] dump_stack_lvl+0x16c/0x1f0 [ 602.040529][T13018] should_fail_ex+0x512/0x640 [ 602.040581][T13018] should_fail_alloc_page+0xe7/0x130 [ 602.040625][T13018] prepare_alloc_pages+0x3c2/0x610 [ 602.040681][T13018] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 602.040729][T13018] ? __lock_acquire+0x5ca/0x1ba0 [ 602.040779][T13018] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 602.040838][T13018] ? find_held_lock+0x2b/0x80 [ 602.040868][T13018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.040915][T13018] ? policy_nodemask+0xea/0x4e0 [ 602.040957][T13018] alloc_pages_mpol+0x1fb/0x550 [ 602.041031][T13018] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 602.041083][T13018] folio_alloc_mpol_noprof+0x36/0x2f0 [ 602.041132][T13018] shmem_alloc_folio+0x135/0x160 [ 602.041165][T13018] shmem_alloc_and_add_folio+0x499/0xc20 [ 602.041213][T13018] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 602.041257][T13018] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 602.041304][T13018] shmem_get_folio_gfp+0x687/0x1530 [ 602.041354][T13018] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 602.041397][T13018] ? filemap_map_pages+0xf6c/0x1680 [ 602.041443][T13018] shmem_fault+0x1fe/0xa30 [ 602.041484][T13018] ? __pfx_shmem_fault+0x10/0x10 [ 602.041529][T13018] ? __pfx_filemap_map_pages+0x10/0x10 [ 602.041584][T13018] __do_fault+0x10a/0x490 [ 602.041627][T13018] do_pte_missing+0x1031/0x3fb0 [ 602.041660][T13018] ? do_raw_spin_unlock+0x172/0x230 [ 602.041712][T13018] ? __pmd_alloc+0x3c2/0x870 [ 602.041755][T13018] ? find_held_lock+0x2b/0x80 [ 602.041787][T13018] __handle_mm_fault+0x103d/0x2a40 [ 602.041832][T13018] ? __pfx___handle_mm_fault+0x10/0x10 [ 602.041889][T13018] ? find_vma+0xbf/0x140 [ 602.041929][T13018] ? __pfx_find_vma+0x10/0x10 [ 602.041977][T13018] handle_mm_fault+0x3fe/0xad0 [ 602.042024][T13018] do_user_addr_fault+0x7a6/0x1370 [ 602.042061][T13018] ? rcu_is_watching+0x12/0xc0 [ 602.042094][T13018] exc_page_fault+0x5c/0xc0 [ 602.042136][T13018] asm_exc_page_fault+0x26/0x30 [ 602.042167][T13018] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 602.042202][T13018] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 602.042233][T13018] RSP: 0018:ffffc9000b147900 EFLAGS: 00050206 [ 602.042258][T13018] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000130 [ 602.042278][T13018] RDX: fffff52001628fb7 RSI: 0000000000000000 RDI: ffffc9000b147c88 [ 602.042298][T13018] RBP: 0000000000000130 R08: 0000000000000001 R09: fffff52001628fb6 [ 602.042318][T13018] R10: ffffc9000b147db7 R11: 0000000000000000 R12: 0000000000000000 [ 602.042336][T13018] R13: ffffc9000b147c88 R14: 000000000000000a R15: 00000000fffffff2 [ 602.042378][T13018] _copy_from_user+0x98/0xd0 [ 602.042429][T13018] lo_ioctl+0x44d/0x27e0 [ 602.042483][T13018] ? kasan_save_stack+0x42/0x60 [ 602.042514][T13018] ? kasan_save_stack+0x33/0x60 [ 602.042555][T13018] ? kasan_save_track+0x14/0x30 [ 602.042585][T13018] ? kasan_save_free_info+0x3b/0x60 [ 602.042627][T13018] ? __kasan_slab_free+0x51/0x70 [ 602.042660][T13018] ? kfree+0x2b6/0x4d0 [ 602.042682][T13018] ? tomoyo_path_number_perm+0x470/0x580 [ 602.042735][T13018] ? security_file_ioctl+0x9b/0x240 [ 602.042772][T13018] ? __x64_sys_ioctl+0xb7/0x200 [ 602.042811][T13018] ? do_syscall_64+0xcd/0x230 [ 602.042849][T13018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.042892][T13018] ? __pfx_lo_ioctl+0x10/0x10 [ 602.042968][T13018] ? kasan_quarantine_put+0x10a/0x240 [ 602.043006][T13018] ? lockdep_hardirqs_on+0x7c/0x110 [ 602.043053][T13018] ? find_held_lock+0x2b/0x80 [ 602.043084][T13018] ? tomoyo_path_number_perm+0x295/0x580 [ 602.043128][T13018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.043173][T13018] ? blkdev_common_ioctl+0x1dd/0x2480 [ 602.043209][T13018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 602.043292][T13018] ? __pfx_lo_ioctl+0x10/0x10 [ 602.043337][T13018] blkdev_ioctl+0x274/0x6d0 [ 602.043372][T13018] ? __pfx_blkdev_ioctl+0x10/0x10 [ 602.043413][T13018] ? __pfx_blkdev_ioctl+0x10/0x10 [ 602.043451][T13018] __x64_sys_ioctl+0x190/0x200 [ 602.043496][T13018] do_syscall_64+0xcd/0x230 [ 602.043543][T13018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.043573][T13018] RIP: 0033:0x7f9a8258e969 [ 602.043597][T13018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.043626][T13018] RSP: 002b:00007f9a833be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.043652][T13018] RAX: ffffffffffffffda RBX: 00007f9a827b5fa0 RCX: 00007f9a8258e969 [ 602.043673][T13018] RDX: 0000000000000000 RSI: 0000000000004c0a RDI: 0000000000000000 [ 602.043691][T13018] RBP: 00007f9a833be090 R08: 0000000000000000 R09: 0000000000000000 [ 602.043709][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.043726][T13018] R13: 0000000000000000 R14: 00007f9a827b5fa0 R15: 00007ffc0e401e78 [ 602.043765][T13018] [ 603.782900][T13034] Console: switching to colour VGA+ 80x25 [ 603.989351][T13034] kAFS: Invalid Command on /proc/fs/afs/cells file [ 606.399570][T13072] FAULT_INJECTION: forcing a failure. [ 606.399570][T13072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.503490][T13075] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1618'. [ 606.521757][T13072] CPU: 1 UID: 0 PID: 13072 Comm: syz.1.1615 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 606.521809][T13072] Tainted: [I]=FIRMWARE_WORKAROUND [ 606.521821][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 606.521838][T13072] Call Trace: [ 606.521848][T13072] [ 606.521859][T13072] dump_stack_lvl+0x16c/0x1f0 [ 606.521918][T13072] should_fail_ex+0x512/0x640 [ 606.521971][T13072] _copy_to_user+0x32/0xd0 [ 606.522024][T13072] simple_read_from_buffer+0xcb/0x170 [ 606.522075][T13072] proc_fail_nth_read+0x197/0x270 [ 606.522122][T13072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.522169][T13072] ? rw_verify_area+0xcf/0x680 [ 606.522216][T13072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.522262][T13072] vfs_read+0x1de/0xc70 [ 606.522300][T13072] ? __pfx_vfs_read+0x10/0x10 [ 606.522343][T13072] ? __pfx_lo_ioctl+0x10/0x10 [ 606.522388][T13072] ? blkdev_ioctl+0x110/0x6d0 [ 606.522429][T13072] ksys_read+0x12a/0x240 [ 606.522458][T13072] ? __pfx_ksys_read+0x10/0x10 [ 606.522499][T13072] do_syscall_64+0xcd/0x230 [ 606.522548][T13072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.522581][T13072] RIP: 0033:0x7fddcd18d37c [ 606.522606][T13072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 606.522635][T13072] RSP: 002b:00007fddcaff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.522664][T13072] RAX: ffffffffffffffda RBX: 00007fddcd3b5fa0 RCX: 00007fddcd18d37c [ 606.522684][T13072] RDX: 000000000000000f RSI: 00007fddcaff60a0 RDI: 0000000000000001 [ 606.522703][T13072] RBP: 00007fddcaff6090 R08: 0000000000000000 R09: 0000000000000000 [ 606.522722][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.522741][T13072] R13: 0000000000000000 R14: 00007fddcd3b5fa0 R15: 00007ffcd1c7a858 [ 606.522781][T13072] [ 606.737934][T13075] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1618'. [ 607.571284][T13082] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1620'. [ 607.747237][T13084] can: request_module (can-proto-0) failed. [ 609.037540][T13102] random: crng reseeded on system resumption [ 612.136584][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 612.147382][T13146] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1635'. [ 614.349372][ T30] audit: type=1800 audit(4294968678.540:10): pid=13175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1643" name="version" dev="configfs" ino=48768 res=0 errno=0 [ 616.016859][T13200] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 616.111006][T13200] hub 8-0:1.0: USB hub found [ 616.151758][T13200] hub 8-0:1.0: 1 port detected [ 617.613662][T13228] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1658'. [ 617.630649][T13229] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1658'. [ 620.177747][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1663'. [ 620.252173][T13254] HfR: entered promiscuous mode [ 620.270831][T13255] HfR: left promiscuous mode [ 620.309325][T13254] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 621.268035][T13265] netlink: 86 bytes leftover after parsing attributes in process `syz.0.1662'. [ 622.583863][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 622.630423][T13307] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1673'. [ 624.379252][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 624.385957][T13298] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 625.089282][T13298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.101365][T13298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.108186][T13298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 625.408269][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 625.488886][T13351] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1683'. [ 625.957465][T13354] can: request_module (can-proto-0) failed. [ 626.460805][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 626.508517][T13371] validate_nla: 23 callbacks suppressed [ 626.508543][T13371] netlink: 'syz.2.1690': attribute type 4 has an invalid length. [ 626.523467][T13371] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1690'. [ 626.537451][T13371] netlink: 'syz.2.1690': attribute type 4 has an invalid length. [ 626.550574][T13371] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1690'. [ 627.200610][T13369] Bluetooth: hci3: command 0x0406 tx timeout [ 627.200640][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 627.560810][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 627.704849][T13406] netlink: 294 bytes leftover after parsing attributes in process `syz.3.1698'. [ 628.923199][T13424] FAULT_INJECTION: forcing a failure. [ 628.923199][T13424] name failslab, interval 1, probability 0, space 0, times 0 [ 628.939945][T13424] CPU: 0 UID: 0 PID: 13424 Comm: syz.2.1703 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 628.940011][T13424] Tainted: [I]=FIRMWARE_WORKAROUND [ 628.940024][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 628.940043][T13424] Call Trace: [ 628.940053][T13424] [ 628.940065][T13424] dump_stack_lvl+0x16c/0x1f0 [ 628.940120][T13424] should_fail_ex+0x512/0x640 [ 628.940165][T13424] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 628.940206][T13424] should_failslab+0xc2/0x120 [ 628.940246][T13424] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 628.940283][T13424] ? copy_process+0x4bd/0x91a0 [ 628.940332][T13424] copy_process+0x4bd/0x91a0 [ 628.940388][T13424] ? preempt_schedule_thunk+0x16/0x30 [ 628.940452][T13424] ? __pfx_copy_process+0x10/0x10 [ 628.940497][T13424] ? try_to_wake_up+0xa2f/0x1680 [ 628.940532][T13424] ? __pfx_try_to_wake_up+0x10/0x10 [ 628.940564][T13424] ? plist_check_head+0xa3/0x150 [ 628.940599][T13424] ? find_held_lock+0x2b/0x80 [ 628.940636][T13424] ? wake_up_q+0xb0/0x160 [ 628.940663][T13424] ? do_raw_spin_unlock+0x172/0x230 [ 628.940721][T13424] kernel_clone+0xfc/0x960 [ 628.940762][T13424] ? __pfx_futex_wake+0x10/0x10 [ 628.940801][T13424] ? __pfx_kernel_clone+0x10/0x10 [ 628.940853][T13424] ? __might_fault+0xe3/0x190 [ 628.940901][T13424] ? 0xffffffff81000000 [ 628.940923][T13424] __do_sys_clone+0xce/0x120 [ 628.940972][T13424] ? __pfx___do_sys_clone+0x10/0x10 [ 628.941015][T13424] ? __do_sys_capset+0xf9/0x460 [ 628.941051][T13424] ? 0xffffffff81000000 [ 628.941091][T13424] ? rcu_is_watching+0x12/0xc0 [ 628.941134][T13424] do_syscall_64+0xcd/0x230 [ 628.941185][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.941218][T13424] RIP: 0033:0x7fbde8f8e969 [ 628.941244][T13424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.941276][T13424] RSP: 002b:00007fbde9d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 628.941308][T13424] RAX: ffffffffffffffda RBX: 00007fbde91b5fa0 RCX: 00007fbde8f8e969 [ 628.941330][T13424] RDX: 9999999999999999 RSI: 0000000000000007 RDI: 0000000000000007 [ 628.941349][T13424] RBP: 00007fbde9010ab1 R08: 0000000000000006 R09: 0000000000000000 [ 628.941369][T13424] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.941393][T13424] R13: 0000000000000000 R14: 00007fbde91b5fa0 R15: 00007ffecb27c0d8 [ 628.941418][T13424] ? 0xffffffff81000000 [ 628.941450][T13424] [ 629.239364][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.246319][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.253962][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.262801][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.268802][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.276298][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.284701][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.290732][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.298246][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.307012][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.313141][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.320860][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.329316][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.335609][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.343156][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.351378][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.357464][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.364941][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.373214][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.379233][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.386740][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.395035][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.401585][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.409112][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.418810][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.424856][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.432341][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.440488][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.446604][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.454081][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.462342][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.468328][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.475816][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.491477][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.497651][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.505889][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.514607][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.520597][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.541789][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.586620][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.634714][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.659417][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 629.682341][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.689520][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.726348][T13432] sd 0:0:1:0: PR command failed: 1026 [ 629.773720][T13432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 629.852390][T13432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 631.451785][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'. [ 632.748108][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1720'. [ 634.703599][ T30] audit: type=1804 audit(4294968698.892:11): pid=13552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1729" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 635.953225][T13576] FAULT_INJECTION: forcing a failure. [ 635.953225][T13576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.011771][T13576] CPU: 1 UID: 0 PID: 13576 Comm: syz.2.1734 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 636.011823][T13576] Tainted: [I]=FIRMWARE_WORKAROUND [ 636.011835][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 636.011853][T13576] Call Trace: [ 636.011863][T13576] [ 636.011874][T13576] dump_stack_lvl+0x16c/0x1f0 [ 636.011924][T13576] should_fail_ex+0x512/0x640 [ 636.011977][T13576] strncpy_from_user+0x3b/0x2e0 [ 636.012024][T13576] getname_flags.part.0+0x8f/0x550 [ 636.012069][T13576] getname_flags+0x93/0xf0 [ 636.012118][T13576] do_sys_openat2+0xb8/0x1d0 [ 636.012160][T13576] ? __pfx_do_sys_openat2+0x10/0x10 [ 636.012206][T13576] ? __fget_files+0x20e/0x3c0 [ 636.012263][T13576] __x64_sys_openat+0x174/0x210 [ 636.012306][T13576] ? __pfx___x64_sys_openat+0x10/0x10 [ 636.012340][T13576] ? ksys_write+0x1b9/0x240 [ 636.012364][T13576] ? rcu_is_watching+0x12/0xc0 [ 636.012397][T13576] do_syscall_64+0xcd/0x230 [ 636.012437][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.012471][T13576] RIP: 0033:0x7fbde8f8e969 [ 636.012491][T13576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.012516][T13576] RSP: 002b:00007fbde9d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 636.012540][T13576] RAX: ffffffffffffffda RBX: 00007fbde91b6080 RCX: 00007fbde8f8e969 [ 636.012558][T13576] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 636.012574][T13576] RBP: 00007fbde9d10090 R08: 0000000000000000 R09: 0000000000000000 [ 636.012590][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.012605][T13576] R13: 0000000000000000 R14: 00007fbde91b6080 R15: 00007ffecb27c0d8 [ 636.012638][T13576] [ 637.104579][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1740'. [ 637.115496][T13594] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1740'. [ 637.587336][T13612] FAULT_INJECTION: forcing a failure. [ 637.587336][T13612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.607034][T13612] CPU: 1 UID: 0 PID: 13612 Comm: syz.1.1745 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 637.607087][T13612] Tainted: [I]=FIRMWARE_WORKAROUND [ 637.607099][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 637.607116][T13612] Call Trace: [ 637.607126][T13612] [ 637.607137][T13612] dump_stack_lvl+0x16c/0x1f0 [ 637.607185][T13612] should_fail_ex+0x512/0x640 [ 637.607235][T13612] _copy_from_iter+0x2a4/0x15b0 [ 637.607288][T13612] ? __alloc_skb+0x200/0x380 [ 637.607321][T13612] ? __pfx__copy_from_iter+0x10/0x10 [ 637.607383][T13612] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 637.607419][T13612] ? __lock_acquire+0xaa4/0x1ba0 [ 637.607468][T13612] netlink_sendmsg+0x829/0xdd0 [ 637.607516][T13612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.607571][T13612] ____sys_sendmsg+0xa95/0xc70 [ 637.607617][T13612] ? copy_msghdr_from_user+0x10a/0x160 [ 637.607652][T13612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.607716][T13612] ___sys_sendmsg+0x134/0x1d0 [ 637.607753][T13612] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.607840][T13612] __sys_sendmsg+0x16d/0x220 [ 637.607876][T13612] ? __pfx___sys_sendmsg+0x10/0x10 [ 637.607922][T13612] ? rcu_is_watching+0x12/0xc0 [ 637.607961][T13612] do_syscall_64+0xcd/0x230 [ 637.608010][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.608041][T13612] RIP: 0033:0x7fddcd18e969 [ 637.608066][T13612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.608095][T13612] RSP: 002b:00007fddcaff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.608123][T13612] RAX: ffffffffffffffda RBX: 00007fddcd3b5fa0 RCX: 00007fddcd18e969 [ 637.608143][T13612] RDX: 0000000004000050 RSI: 0000200000000180 RDI: 0000000000000002 [ 637.608163][T13612] RBP: 00007fddcaff6090 R08: 0000000000000000 R09: 0000000000000000 [ 637.608182][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.608199][T13612] R13: 0000000000000000 R14: 00007fddcd3b5fa0 R15: 00007ffcd1c7a858 [ 637.608239][T13612] [ 638.342663][T13618] FAULT_INJECTION: forcing a failure. [ 638.342663][T13618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 638.380427][T13618] CPU: 1 UID: 0 PID: 13618 Comm: syz.1.1746 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 638.380478][T13618] Tainted: [I]=FIRMWARE_WORKAROUND [ 638.380489][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 638.380515][T13618] Call Trace: [ 638.380526][T13618] [ 638.380537][T13618] dump_stack_lvl+0x16c/0x1f0 [ 638.380582][T13618] should_fail_ex+0x512/0x640 [ 638.380634][T13618] should_fail_alloc_page+0xe7/0x130 [ 638.380676][T13618] prepare_alloc_pages+0x3c2/0x610 [ 638.380732][T13618] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 638.380774][T13618] ? __lock_acquire+0x5ca/0x1ba0 [ 638.380822][T13618] ? __lock_acquire+0x5ca/0x1ba0 [ 638.380867][T13618] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 638.380925][T13618] ? filemap_get_entry+0x1a7/0x3b0 [ 638.380974][T13618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 638.381020][T13618] ? policy_nodemask+0xea/0x4e0 [ 638.381063][T13618] alloc_pages_mpol+0x1fb/0x550 [ 638.381103][T13618] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 638.381141][T13618] ? _raw_spin_unlock+0x28/0x50 [ 638.381178][T13618] ? swap_entry_swapped+0x122/0x190 [ 638.381217][T13618] ? __pfx_swap_entry_swapped+0x10/0x10 [ 638.381259][T13618] folio_alloc_mpol_noprof+0x36/0x2f0 [ 638.381308][T13618] __read_swap_cache_async+0x3b6/0x5a0 [ 638.381366][T13618] ? __pfx___read_swap_cache_async+0x10/0x10 [ 638.381420][T13618] ? swp_swap_info+0xce/0x130 [ 638.381459][T13618] ? __pfx_swp_swap_info+0x10/0x10 [ 638.381501][T13618] ? __pfx_stack_trace_save+0x10/0x10 [ 638.381545][T13618] swap_cluster_readahead+0x3eb/0x710 [ 638.381586][T13618] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 638.381644][T13618] ? get_vma_policy+0x242/0x3c0 [ 638.381690][T13618] swapin_readahead+0x13a/0xd60 [ 638.381733][T13618] ? __pfx_swapin_readahead+0x10/0x10 [ 638.381761][T13618] ? __filemap_get_folio+0x333/0xc10 [ 638.381813][T13618] ? swap_cache_get_folio+0x1df/0x450 [ 638.381867][T13618] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 638.381914][T13618] ? __pfx_get_swap_device+0x10/0x10 [ 638.381953][T13618] ? do_swap_page+0x127/0x6030 [ 638.382004][T13618] do_swap_page+0x67e/0x6030 [ 638.382071][T13618] ? __pfx_do_swap_page+0x10/0x10 [ 638.382123][T13618] ? __pfx_default_wake_function+0x10/0x10 [ 638.382157][T13618] ? ___pte_offset_map+0x1bc/0x540 [ 638.382210][T13618] __handle_mm_fault+0x1056/0x2a40 [ 638.382254][T13618] ? __pfx___handle_mm_fault+0x10/0x10 [ 638.382313][T13618] ? find_vma+0xbf/0x140 [ 638.382355][T13618] ? __pfx_find_vma+0x10/0x10 [ 638.382404][T13618] handle_mm_fault+0x3fe/0xad0 [ 638.382444][T13618] do_user_addr_fault+0x7a6/0x1370 [ 638.382480][T13618] ? rcu_is_watching+0x12/0xc0 [ 638.382524][T13618] exc_page_fault+0x5c/0xc0 [ 638.382566][T13618] asm_exc_page_fault+0x26/0x30 [ 638.382597][T13618] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 638.382637][T13618] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 f7 85 bb fc 48 83 fd 07 76 22 e8 7c 8a bb fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 a8 85 bb fc 45 85 ff 0f 84 [ 638.382668][T13618] RSP: 0018:ffffc90003f2fd10 EFLAGS: 00050246 [ 638.382694][T13618] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84ff11b6 [ 638.382714][T13618] RDX: ffff88802fdc3c00 RSI: ffffffff84ff1254 RDI: 0000000000000007 [ 638.382734][T13618] RBP: 0000000000000fe0 R08: 0000000000000007 R09: 0000000000000007 [ 638.382751][T13618] R10: 0000000000000fe0 R11: 0000000000000000 R12: 0000000000000000 [ 638.382770][T13618] R13: ffff8880310cd520 R14: 0000000000000fe0 R15: 0000000000000000 [ 638.382801][T13618] ? strncpy_from_user+0xa6/0x2e0 [ 638.382840][T13618] ? strncpy_from_user+0x144/0x2e0 [ 638.382891][T13618] getname_flags.part.0+0x8f/0x550 [ 638.382938][T13618] getname_flags+0x93/0xf0 [ 638.382988][T13618] do_sys_openat2+0xb8/0x1d0 [ 638.383031][T13618] ? __pfx_do_sys_openat2+0x10/0x10 [ 638.383078][T13618] ? __fget_files+0x20e/0x3c0 [ 638.383137][T13618] __x64_sys_openat+0x174/0x210 [ 638.383178][T13618] ? __pfx___x64_sys_openat+0x10/0x10 [ 638.383217][T13618] ? ksys_write+0x1b9/0x240 [ 638.383246][T13618] ? rcu_is_watching+0x12/0xc0 [ 638.383286][T13618] do_syscall_64+0xcd/0x230 [ 638.383331][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.383360][T13618] RIP: 0033:0x7fddcd18e969 [ 638.383385][T13618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.383414][T13618] RSP: 002b:00007fddcafd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 638.383439][T13618] RAX: ffffffffffffffda RBX: 00007fddcd3b6080 RCX: 00007fddcd18e969 [ 638.383458][T13618] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 638.383476][T13618] RBP: 00007fddcafd5090 R08: 0000000000000000 R09: 0000000000000000 [ 638.383495][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.383521][T13618] R13: 0000000000000000 R14: 00007fddcd3b6080 R15: 00007ffcd1c7a858 [ 638.383559][T13618] [ 638.997738][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1747'. [ 640.316146][T13637] bridge0: port 2(team0) entered blocking state [ 640.323292][T13637] bridge0: port 2(team0) entered disabled state [ 640.330504][T13637] team0: entered allmulticast mode [ 640.336310][T13637] team_slave_1: entered allmulticast mode [ 640.346197][T13637] team0: entered promiscuous mode [ 640.352030][T13637] team_slave_1: entered promiscuous mode [ 640.364215][T13637] bridge0: port 2(team0) entered blocking state [ 640.371213][T13637] bridge0: port 2(team0) entered forwarding state [ 642.655684][T13670] FAULT_INJECTION: forcing a failure. [ 642.655684][T13670] name failslab, interval 1, probability 0, space 0, times 0 [ 642.681840][T13670] CPU: 1 UID: 0 PID: 13670 Comm: syz.1.1758 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 642.681889][T13670] Tainted: [I]=FIRMWARE_WORKAROUND [ 642.681901][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 642.681919][T13670] Call Trace: [ 642.681929][T13670] [ 642.681940][T13670] dump_stack_lvl+0x16c/0x1f0 [ 642.681990][T13670] should_fail_ex+0x512/0x640 [ 642.682032][T13670] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 642.682072][T13670] should_failslab+0xc2/0x120 [ 642.682110][T13670] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 642.682146][T13670] ? alloc_empty_file+0x55/0x1e0 [ 642.682192][T13670] alloc_empty_file+0x55/0x1e0 [ 642.682249][T13670] path_openat+0xe0/0x2d40 [ 642.682280][T13670] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 642.682330][T13670] ? __pfx___up_read+0x10/0x10 [ 642.682379][T13670] ? __pfx_path_openat+0x10/0x10 [ 642.682421][T13670] do_filp_open+0x20b/0x470 [ 642.682451][T13670] ? __pfx_do_filp_open+0x10/0x10 [ 642.682480][T13670] ? rcu_is_watching+0x12/0xc0 [ 642.682538][T13670] ? alloc_fd+0x471/0x7d0 [ 642.682599][T13670] do_sys_openat2+0x11b/0x1d0 [ 642.682641][T13670] ? __pfx_do_sys_openat2+0x10/0x10 [ 642.682688][T13670] ? __fget_files+0x20e/0x3c0 [ 642.682741][T13670] __x64_sys_openat+0x174/0x210 [ 642.682782][T13670] ? __pfx___x64_sys_openat+0x10/0x10 [ 642.682823][T13670] ? ksys_write+0x1b9/0x240 [ 642.682851][T13670] ? rcu_is_watching+0x12/0xc0 [ 642.682892][T13670] do_syscall_64+0xcd/0x230 [ 642.682939][T13670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.682971][T13670] RIP: 0033:0x7fddcd18e969 [ 642.682996][T13670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.683025][T13670] RSP: 002b:00007fddcafd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 642.683054][T13670] RAX: ffffffffffffffda RBX: 00007fddcd3b6080 RCX: 00007fddcd18e969 [ 642.683074][T13670] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 642.683093][T13670] RBP: 00007fddcafd5090 R08: 0000000000000000 R09: 0000000000000000 [ 642.683112][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.683130][T13670] R13: 0000000000000000 R14: 00007fddcd3b6080 R15: 00007ffcd1c7a858 [ 642.683171][T13670] [ 644.124037][T13687] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 644.462530][T13685] Invalid ELF header magic: != ELF [ 645.603218][ T5140] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 646.682291][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 646.693538][T13735] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1771'. [ 646.865520][ T5140] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 647.069760][T13742] Invalid ELF header magic: != ELF [ 691.116237][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.123307][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.545589][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.554354][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.142165][ T31] INFO: task jbd2/sda1-8:5162 blocked for more than 143 seconds. [ 810.150762][ T31] Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 810.161257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.170914][ T31] task:jbd2/sda1-8 state:D stack:26456 pid:5162 tgid:5162 ppid:2 task_flags:0x240040 flags:0x00004000 [ 810.184241][ T31] Call Trace: [ 810.187883][ T31] [ 810.191145][ T31] __schedule+0x116f/0x5de0 [ 810.196263][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 810.201865][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 810.207364][ T31] ? __pfx___schedule+0x10/0x10 [ 810.212825][ T31] ? find_held_lock+0x2b/0x80 [ 810.218017][ T31] ? schedule+0x2d7/0x3a0 [ 810.225508][ T31] schedule+0xe7/0x3a0 [ 810.230053][ T31] io_schedule+0xbf/0x130 [ 810.235575][ T31] bit_wait_io+0x15/0xe0 [ 810.240759][ T31] __wait_on_bit+0x62/0x180 [ 810.248606][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 810.254282][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 810.260255][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 810.267082][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 810.273223][ T31] ? __pfx___might_resched+0x10/0x10 [ 810.279097][ T31] __wait_on_buffer+0x64/0x70 [ 810.284381][ T31] jbd2_journal_commit_transaction+0x382e/0x6830 [ 810.291436][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 810.298913][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 810.305479][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 810.313036][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 810.319691][ T31] ? find_held_lock+0x2b/0x80 [ 810.324994][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 810.331454][ T31] ? rcu_is_watching+0x12/0xc0 [ 810.336793][ T31] kjournald2+0x1f4/0x760 [ 810.342820][ T31] ? __pfx_kjournald2+0x10/0x10 [ 810.348225][ T31] ? find_held_lock+0x2b/0x80 [ 810.353562][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 810.360304][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.366129][ T31] ? __kthread_parkme+0x19e/0x250 [ 810.371781][ T31] ? __pfx_kjournald2+0x10/0x10 [ 810.377166][ T31] kthread+0x3c2/0x780 [ 810.381781][ T31] ? __pfx_kthread+0x10/0x10 [ 810.386880][ T31] ? __pfx_kthread+0x10/0x10 [ 810.392008][ T31] ? __pfx_kthread+0x10/0x10 [ 810.397106][ T31] ? __pfx_kthread+0x10/0x10 [ 810.402289][ T31] ? rcu_is_watching+0x12/0xc0 [ 810.407561][ T31] ? __pfx_kthread+0x10/0x10 [ 810.412815][ T31] ret_from_fork+0x45/0x80 [ 810.417728][ T31] ? __pfx_kthread+0x10/0x10 [ 810.422951][ T31] ret_from_fork_asm+0x1a/0x30 [ 810.428260][ T31] [ 810.431664][ T31] INFO: task syz-executor:5817 blocked for more than 143 seconds. [ 810.440275][ T31] Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 810.450864][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.460693][ T31] task:syz-executor state:D stack:23272 pid:5817 tgid:5817 ppid:5816 task_flags:0x440100 flags:0x00000002 [ 810.477128][ T31] Call Trace: [ 810.480897][ T31] [ 810.484260][ T31] __schedule+0x116f/0x5de0 [ 810.489288][ T31] ? __pfx___schedule+0x10/0x10 [ 810.494810][ T31] ? find_held_lock+0x2b/0x80 [ 810.499994][ T31] ? schedule+0x2d7/0x3a0 [ 810.504833][ T31] schedule+0xe7/0x3a0 [ 810.509351][ T31] io_schedule+0xbf/0x130 [ 810.514227][ T31] bit_wait_io+0x15/0xe0 [ 810.518967][ T31] __wait_on_bit+0x62/0x180 [ 810.524017][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 810.529497][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 810.535556][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 810.542255][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 810.548310][ T31] do_get_write_access+0x93d/0x12a0 [ 810.554320][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 810.561188][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 810.568003][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 810.574335][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 810.580432][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 810.586497][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 810.593205][ T31] ? rcu_is_watching+0x12/0xc0 [ 810.598509][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 810.605992][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 810.611844][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 810.618092][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 810.624609][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 810.630102][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 810.636419][ T31] ext4_dirty_inode+0xd9/0x130 [ 810.641756][ T31] ? rcu_is_watching+0x12/0xc0 [ 810.647039][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 810.652667][ T31] generic_update_time+0xcf/0xf0 [ 810.658145][ T31] file_update_time+0x17d/0x1c0 [ 810.663578][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 810.669148][ T31] ? anon_pipe_read+0xc85/0x1210 [ 810.674651][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 810.680693][ T31] ? vm_normal_page+0x13b/0x2b0 [ 810.686103][ T31] ? find_held_lock+0x2b/0x80 [ 810.691278][ T31] ? find_held_lock+0x2b/0x80 [ 810.696496][ T31] do_page_mkwrite+0x171/0x380 [ 810.701949][ T31] do_wp_page+0xb9e/0x58e0 [ 810.706867][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 810.712360][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 810.717957][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 810.723994][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 810.729687][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 810.735429][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 810.741472][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 810.747287][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 810.753113][ T31] handle_mm_fault+0x3fe/0xad0 [ 810.758373][ T31] do_user_addr_fault+0x60c/0x1370 [ 810.764126][ T31] exc_page_fault+0x5c/0xc0 [ 810.769229][ T31] asm_exc_page_fault+0x26/0x30 [ 810.774657][ T31] RIP: 0033:0x7fb86c0689c5 [ 810.779551][ T31] RSP: 002b:00007ffe5df55920 EFLAGS: 00010202 [ 810.786325][ T31] RAX: 00007fb86936af28 RBX: 00007ffe5df55a20 RCX: 0000000000000000 [ 810.795182][ T31] RDX: 00007fb86936af24 RSI: 0000000000000008 RDI: 00007ffe5df55a20 [ 810.804029][ T31] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 810.812921][ T31] R10: 00007ffe5df55a00 R11: 0000000000000000 R12: 0000000000000000 [ 810.821762][ T31] R13: 00000000000950d8 R14: fffffffffff6af28 R15: 00000000000950d8 [ 810.830583][ T31] [ 810.834016][ T31] INFO: task syz.1.1777:13764 blocked for more than 144 seconds. [ 810.842570][ T31] Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 810.852852][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.862451][ T31] task:syz.1.1777 state:D stack:26488 pid:13764 tgid:13764 ppid:5835 task_flags:0x440040 flags:0x00000004 [ 810.875696][ T31] Call Trace: [ 810.879349][ T31] [ 810.882679][ T31] __schedule+0x116f/0x5de0 [ 810.887701][ T31] ? __pfx___schedule+0x10/0x10 [ 810.893147][ T31] ? find_held_lock+0x2b/0x80 [ 810.898326][ T31] ? schedule+0x2d7/0x3a0 [ 810.903189][ T31] schedule+0xe7/0x3a0 [ 810.907708][ T31] io_schedule+0xbf/0x130 [ 810.912556][ T31] bit_wait_io+0x15/0xe0 [ 810.917272][ T31] __wait_on_bit+0x62/0x180 [ 810.922692][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 810.928181][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 810.934163][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 810.940800][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 810.946906][ T31] do_get_write_access+0x93d/0x12a0 [ 810.952827][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 810.959448][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 810.966235][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 810.972443][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 810.978523][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 810.984589][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 810.991228][ T31] ? rcu_is_watching+0x12/0xc0 [ 810.996661][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 811.002951][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 811.008730][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 811.015040][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 811.021287][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 811.026887][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 811.032890][ T31] ext4_dirty_inode+0xd9/0x130 [ 811.038160][ T31] ? rcu_is_watching+0x12/0xc0 [ 811.043493][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 811.049073][ T31] generic_update_time+0xcf/0xf0 [ 811.054603][ T31] file_update_time+0x17d/0x1c0 [ 811.059981][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 811.065595][ T31] ? rcu_is_watching+0x12/0xc0 [ 811.070879][ T31] ? trace_sched_exit_tp+0xde/0x130 [ 811.076685][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 811.082785][ T31] ? vm_normal_page+0x13b/0x2b0 [ 811.088273][ T31] ? find_held_lock+0x2b/0x80 [ 811.093528][ T31] ? find_held_lock+0x2b/0x80 [ 811.098720][ T31] do_page_mkwrite+0x171/0x380 [ 811.104063][ T31] do_wp_page+0xb9e/0x58e0 [ 811.109002][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 811.114437][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 811.120020][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 811.126047][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 811.131778][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 811.137467][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 811.143578][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 811.149401][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 811.155258][ T31] handle_mm_fault+0x3fe/0xad0 [ 811.160561][ T31] do_user_addr_fault+0x60c/0x1370 [ 811.166281][ T31] exc_page_fault+0x5c/0xc0 [ 811.171293][ T31] asm_exc_page_fault+0x26/0x30 [ 811.176707][ T31] RIP: 0033:0x7fddcd06eada [ 811.181662][ T31] RSP: 002b:00007ffcd1c7a8e0 EFLAGS: 00010212 [ 811.188367][ T31] RAX: 0000001b2fef0928 RBX: 00007fddcdee5720 RCX: 0000001b2fef0920 [ 811.197203][ T31] RDX: 0000001b2fb20224 RSI: 0000000000000008 RDI: 00007fddcdee5720 [ 811.206076][ T31] RBP: ffffffff8230791b R08: 00007fddcd3b6118 R09: 00007fddcd3a2000 [ 811.214951][ T31] R10: 00007fddcc3fd008 R11: 0000000000000011 R12: 0000000000000011 [ 811.223788][ T31] R13: 0000000000000001 R14: ffffffff82307071 R15: 0000000000000001 [ 811.232637][ T31] ? __x64_sys_read+0x11/0xb0 [ 811.237822][ T31] ? __x64_sys_pread64+0x1bb/0x250 [ 811.243551][ T31] [ 811.246896][ T31] INFO: task syz.2.1779:13771 blocked for more than 144 seconds. [ 811.255477][ T31] Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 811.265669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 811.275327][ T31] task:syz.2.1779 state:D stack:25672 pid:13771 tgid:13771 ppid:5836 task_flags:0x440040 flags:0x00000004 [ 811.288570][ T31] Call Trace: [ 811.292252][ T31] [ 811.295510][ T31] __schedule+0x116f/0x5de0 [ 811.300492][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 811.306004][ T31] ? __pfx___schedule+0x10/0x10 [ 811.311392][ T31] ? find_held_lock+0x2b/0x80 [ 811.316600][ T31] ? schedule+0x2d7/0x3a0 [ 811.321408][ T31] schedule+0xe7/0x3a0 [ 811.325980][ T31] io_schedule+0xbf/0x130 [ 811.330787][ T31] bit_wait_io+0x15/0xe0 [ 811.335523][ T31] __wait_on_bit+0x62/0x180 [ 811.340525][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 811.346042][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 811.352055][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 811.358682][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 811.364839][ T31] do_get_write_access+0x93d/0x12a0 [ 811.370635][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 811.377310][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 811.384101][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 811.390259][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 811.396390][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 811.402440][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 811.409083][ T31] ? rcu_is_watching+0x12/0xc0 [ 811.414433][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 811.420662][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 811.426522][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 811.432830][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 811.439070][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 811.444567][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 811.450508][ T31] ext4_dirty_inode+0xd9/0x130 [ 811.455813][ T31] ? rcu_is_watching+0x12/0xc0 [ 811.461083][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 811.466690][ T31] generic_update_time+0xcf/0xf0 [ 811.472216][ T31] file_update_time+0x17d/0x1c0 [ 811.477598][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 811.483216][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 811.488702][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 811.494842][ T31] ? vm_normal_page+0x13b/0x2b0 [ 811.500228][ T31] ? find_held_lock+0x2b/0x80 [ 811.505449][ T31] ? find_held_lock+0x2b/0x80 [ 811.510630][ T31] do_page_mkwrite+0x171/0x380 [ 811.515968][ T31] do_wp_page+0xb9e/0x58e0 [ 811.520901][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 811.526325][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 811.531955][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 811.537926][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 811.543671][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 811.549355][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 811.555466][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 811.561236][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 811.567078][ T31] handle_mm_fault+0x3fe/0xad0 [ 811.572411][ T31] do_user_addr_fault+0x60c/0x1370 [ 811.578096][ T31] exc_page_fault+0x5c/0xc0 [ 811.583146][ T31] asm_exc_page_fault+0x26/0x30 [ 811.588554][ T31] RIP: 0033:0x7fbde8e6eba8 [ 811.593672][ T31] RSP: 002b:00007ffecb27c110 EFLAGS: 00010202 [ 811.600408][ T31] RAX: fffffffffffe8c3c RBX: 00007fbde9ce5720 RCX: 0000001b30008c38 [ 811.609283][ T31] RDX: 0000001b2fc20220 RSI: 0000000000000004 RDI: 00007fbde9ce5720 [ 811.618156][ T31] RBP: ffffffff84c35dda R08: 00007fbde91b62d8 R09: 00007fbde91a2000 [ 811.627025][ T31] R10: 00007fbde69d5008 R11: 000000000000000b R12: 000000000000000b [ 811.635955][ T31] R13: 0000000000000000 R14: ffffffff84c354b0 R15: 0000000000000000 [ 811.644790][ T31] ? __x64_sys_io_uring_setup+0x10/0x170 [ 811.651037][ T31] ? io_buffer_add_list+0x9a/0xd0 [ 811.656651][ T31] [ 811.659998][ T31] INFO: task syz.2.1779:13773 blocked for more than 144 seconds. [ 811.669080][ T31] Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 811.679392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 811.690265][ T31] task:syz.2.1779 state:D stack:27880 pid:13773 tgid:13771 ppid:5836 task_flags:0x400140 flags:0x00004006 [ 811.703766][ T31] Call Trace: [ 811.707413][ T31] [ 811.710663][ T31] __schedule+0x116f/0x5de0 [ 811.715899][ T31] ? check_path.constprop.0+0x24/0x50 [ 811.722087][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 811.727579][ T31] ? __pfx___schedule+0x10/0x10 [ 811.733009][ T31] ? find_held_lock+0x2b/0x80 [ 811.738194][ T31] ? schedule+0x2d7/0x3a0 [ 811.743123][ T31] schedule+0xe7/0x3a0 [ 811.747655][ T31] io_schedule+0xbf/0x130 [ 811.752520][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 811.758378][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 811.764486][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 811.770933][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 811.777124][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 811.783327][ T31] folio_wait_writeback+0x3c/0x90 [ 811.788888][ T31] __filemap_fdatawait_range+0x11f/0x200 [ 811.795159][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 811.802056][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 811.807612][ T31] ? find_held_lock+0x2b/0x80 [ 811.812833][ T31] ? find_held_lock+0x2b/0x80 [ 811.818024][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 811.823469][ T31] filemap_fdatawait_keep_errors+0x21/0x30 [ 811.829907][ T31] sync_inodes_sb+0x5fa/0xa70 [ 811.835142][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 811.840538][ T31] ? __pfx_sync_inodes_sb+0x10/0x10 [ 811.846367][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 811.852256][ T31] sync_filesystem+0x177/0x290 [ 811.857532][ T31] ? __pfx_fs_bdev_sync+0x10/0x10 [ 811.863241][ T31] fs_bdev_sync+0x2c/0x40 [ 811.868058][ T31] blkdev_common_ioctl+0x1742/0x2480 [ 811.874205][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 811.880834][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 811.887425][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 811.893739][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 811.899336][ T31] ? find_held_lock+0x2b/0x80 [ 811.904569][ T31] blkdev_ioctl+0x1cb/0x6d0 [ 811.909574][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 811.915177][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 811.920764][ T31] __x64_sys_ioctl+0x190/0x200 [ 811.926087][ T31] do_syscall_64+0xcd/0x230 [ 811.931093][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.937653][ T31] RIP: 0033:0x7fbde8f8e969 [ 811.942626][ T31] RSP: 002b:00007fbde9d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.951989][ T31] RAX: ffffffffffffffda RBX: 00007fbde91b6080 RCX: 00007fbde8f8e969 [ 811.960794][ T31] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000005 [ 811.969649][ T31] RBP: 00007fbde9010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 811.978580][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.987425][ T31] R13: 0000000000000000 R14: 00007fbde91b6080 R15: 00007ffecb27c0d8 [ 811.996283][ T31] [ 811.999640][ T31] INFO: task syz.3.1780:13774 blocked for more than 145 seconds. [ 812.008269][ T31] Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 812.018552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.028155][ T31] task:syz.3.1780 state:D stack:26440 pid:13774 tgid:13774 ppid:5831 task_flags:0x440040 flags:0x00000006 [ 812.041411][ T31] Call Trace: [ 812.045171][ T31] [ 812.048422][ T31] __schedule+0x116f/0x5de0 [ 812.053516][ T31] ? __pfx___schedule+0x10/0x10 [ 812.058900][ T31] ? find_held_lock+0x2b/0x80 [ 812.064198][ T31] ? schedule+0x2d7/0x3a0 [ 812.069008][ T31] schedule+0xe7/0x3a0 [ 812.073591][ T31] io_schedule+0xbf/0x130 [ 812.078404][ T31] bit_wait_io+0x15/0xe0 [ 812.083167][ T31] __wait_on_bit+0x62/0x180 [ 812.088179][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 812.093712][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 812.099669][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 812.106380][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 812.112604][ T31] do_get_write_access+0x93d/0x12a0 [ 812.118387][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 812.125067][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 812.131852][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 812.138017][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 812.144107][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 812.150062][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 812.156739][ T31] ? rcu_is_watching+0x12/0xc0 [ 812.162065][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 812.168303][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 812.174095][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 812.180341][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 812.186646][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 812.192169][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 812.198126][ T31] ext4_dirty_inode+0xd9/0x130 [ 812.203435][ T31] ? rcu_is_watching+0x12/0xc0 [ 812.208730][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 812.214372][ T31] generic_update_time+0xcf/0xf0 [ 812.219855][ T31] file_update_time+0x17d/0x1c0 [ 812.225294][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 812.230893][ T31] ? rcu_is_watching+0x12/0xc0 [ 812.236235][ T31] ? trace_sched_exit_tp+0xde/0x130 [ 812.242070][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 812.248096][ T31] ? vm_normal_page+0x13b/0x2b0 [ 812.253537][ T31] ? find_held_lock+0x2b/0x80 [ 812.258821][ T31] ? find_held_lock+0x2b/0x80 [ 812.264050][ T31] do_page_mkwrite+0x171/0x380 [ 812.269355][ T31] do_wp_page+0xb9e/0x58e0 [ 812.274316][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 812.279720][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 812.285360][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 812.291327][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 812.297054][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 812.303280][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 812.309338][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 812.315139][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 812.320932][ T31] handle_mm_fault+0x3fe/0xad0 [ 812.326260][ T31] do_user_addr_fault+0x60c/0x1370 [ 812.331991][ T31] exc_page_fault+0x5c/0xc0 [ 812.336992][ T31] asm_exc_page_fault+0x26/0x30 [ 812.342410][ T31] RIP: 0033:0x7f5021c60dd1 [ 812.347306][ T31] RSP: 002b:00007fff2ed27970 EFLAGS: 00010202 [ 812.354054][ T31] RAX: 0000001b2fd5ff78 RBX: 00007f5022ae5720 RCX: 0000000000000001 [ 812.362921][ T31] RDX: 0000001b2fd5ff77 RSI: 0000000000000008 RDI: 00007f5022ae5720 [ 812.371783][ T31] RBP: 00007f5021fb6038 R08: 0000000000000000 R09: 0000000000000026 [ 812.380598][ T31] R10: 0000000000000001 R11: 000676ccac939fed R12: 0000000000000001 [ 812.389518][ T31] R13: 0000000000000026 R14: 0000000000000000 R15: 0000000000000000 [ 812.398381][ T31] [ 812.401783][ T31] [ 812.401783][ T31] Showing all locks held in the system: [ 812.410293][ T31] 1 lock held by khungtaskd/31: [ 812.415703][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 812.426696][ T31] 3 locks held by syz-executor/5817: [ 812.432586][ T31] #0: ffff888031e7d6c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 812.442943][ T31] #1: ffff888035938518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 812.453456][ T31] #2: ffff88803593c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 812.464128][ T31] 2 locks held by kworker/u8:9/6700: [ 812.469962][ T31] #0: ffff8880b8439f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 812.480970][ T31] #1: ffff888012022018 (&pid_list->lock){-.-.}-{2:2}, at: trace_pid_list_is_set+0x4c/0x150 [ 812.492315][ T31] 2 locks held by getty/10898: [ 812.497574][ T31] #0: ffff888035ba10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 812.508441][ T31] #1: ffffc9000b23b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 812.519773][ T31] 3 locks held by syz.1.1777/13764: [ 812.525602][ T31] #0: ffff88802a39e448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 812.535974][ T31] #1: ffff888035938518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 812.546577][ T31] #2: ffff88803593c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 812.557737][ T31] 3 locks held by syz.2.1779/13771: [ 812.563542][ T31] #0: ffff88802939dd08 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 812.573898][ T31] #1: ffff888035938518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 812.584420][ T31] #2: ffff88803593c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 812.595089][ T31] 2 locks held by syz.2.1779/13773: [ 812.600826][ T31] #0: ffff8880359380e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 812.611813][ T31] #1: ffff888035938948 (&s->s_sync_lock){+.+.}-{4:4}, at: sync_inodes_sb+0x231/0xa70 [ 812.622588][ T31] 3 locks held by syz.3.1780/13774: [ 812.628354][ T31] #0: ffff88807c77e308 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 812.639077][ T31] #1: ffff888035938518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 812.649860][ T31] #2: ffff88803593c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 812.660545][ T31] [ 812.663170][ T31] ============================================= [ 812.663170][ T31] [ 812.672547][ T31] NMI backtrace for cpu 1 [ 812.672579][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 812.672632][ T31] Tainted: [I]=FIRMWARE_WORKAROUND [ 812.672644][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 812.672662][ T31] Call Trace: [ 812.672672][ T31] [ 812.672683][ T31] dump_stack_lvl+0x116/0x1f0 [ 812.672731][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 812.672766][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 812.672816][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 812.672854][ T31] watchdog+0xf70/0x12c0 [ 812.672900][ T31] ? __pfx_watchdog+0x10/0x10 [ 812.672938][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 812.672980][ T31] ? __kthread_parkme+0x19e/0x250 [ 812.673019][ T31] ? __pfx_watchdog+0x10/0x10 [ 812.673057][ T31] kthread+0x3c2/0x780 [ 812.673100][ T31] ? __pfx_kthread+0x10/0x10 [ 812.673139][ T31] ? __pfx_kthread+0x10/0x10 [ 812.673179][ T31] ? __pfx_kthread+0x10/0x10 [ 812.673242][ T31] ? __pfx_kthread+0x10/0x10 [ 812.673283][ T31] ? rcu_is_watching+0x12/0xc0 [ 812.673311][ T31] ? __pfx_kthread+0x10/0x10 [ 812.673354][ T31] ret_from_fork+0x45/0x80 [ 812.673399][ T31] ? __pfx_kthread+0x10/0x10 [ 812.673440][ T31] ret_from_fork_asm+0x1a/0x30 [ 812.673501][ T31] [ 812.673514][ T31] Sending NMI from CPU 1 to CPUs 0: [ 812.826347][ C0] NMI backtrace for cpu 0 [ 812.826374][ C0] CPU: 0 UID: 0 PID: 5064 Comm: kworker/u8:8 Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 812.826418][ C0] Tainted: [I]=FIRMWARE_WORKAROUND [ 812.826429][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 812.826455][ C0] Workqueue: bat_events batadv_nc_worker [ 812.826494][ C0] RIP: 0010:batadv_nc_worker+0x19f/0x1030 [ 812.826532][ C0] Code: c6 e8 25 dc 83 f6 58 45 85 e4 0f 85 7e 0a 00 00 e8 d6 e0 83 f6 48 89 d8 48 c1 e8 03 42 80 3c 38 00 0f 85 8f 0d 00 00 4c 8b 33 <4d> 85 f6 0f 84 ba 06 00 00 e8 b3 e0 83 f6 49 81 ee c8 01 00 00 0f [ 812.826561][ C0] RSP: 0018:ffffc9000ef7fb30 EFLAGS: 00000246 [ 812.826582][ C0] RAX: 1ffff1100c2ba868 RBX: ffff8880615d4340 RCX: ffffffff8b36c689 [ 812.826602][ C0] RDX: ffff888035a0da00 RSI: ffffffff8b36bbfa RDI: 0000000000000001 [ 812.826621][ C0] RBP: 0000000000000068 R08: 0000000000000001 R09: 0000000000000000 [ 812.826639][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 812.826657][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 812.826675][ C0] FS: 0000000000000000(0000) GS:ffff8881249ec000(0000) knlGS:0000000000000000 [ 812.826702][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.826722][ C0] CR2: 000055741d3aa168 CR3: 000000000e180000 CR4: 00000000003526f0 [ 812.826742][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 812.826759][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 812.826777][ C0] Call Trace: [ 812.826787][ C0] [ 812.826799][ C0] ? tpg_update_mv_step+0x103/0x750 [ 812.826839][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 812.826879][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 812.826920][ C0] ? rcu_is_watching+0x12/0xc0 [ 812.826950][ C0] process_one_work+0x9cc/0x1b70 [ 812.827004][ C0] ? __pfx_process_one_work+0x10/0x10 [ 812.827054][ C0] ? assign_work+0x1a0/0x250 [ 812.827097][ C0] worker_thread+0x6c8/0xf10 [ 812.827150][ C0] ? __pfx_worker_thread+0x10/0x10 [ 812.827195][ C0] kthread+0x3c2/0x780 [ 812.827236][ C0] ? __pfx_kthread+0x10/0x10 [ 812.827274][ C0] ? __pfx_kthread+0x10/0x10 [ 812.827313][ C0] ? __pfx_kthread+0x10/0x10 [ 812.827352][ C0] ? __pfx_kthread+0x10/0x10 [ 812.827391][ C0] ? rcu_is_watching+0x12/0xc0 [ 812.827417][ C0] ? __pfx_kthread+0x10/0x10 [ 812.827465][ C0] ret_from_fork+0x45/0x80 [ 812.827509][ C0] ? __pfx_kthread+0x10/0x10 [ 812.827549][ C0] ret_from_fork_asm+0x1a/0x30 [ 812.827599][ C0] [ 812.829002][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 813.111461][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 813.126200][ T31] Tainted: [I]=FIRMWARE_WORKAROUND [ 813.131838][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 813.142931][ T31] Call Trace: [ 813.146552][ T31] [ 813.149793][ T31] dump_stack_lvl+0x3d/0x1f0 [ 813.154891][ T31] panic+0x71c/0x800 [ 813.159209][ T31] ? __pfx_panic+0x10/0x10 [ 813.164097][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 813.170045][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 813.176655][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 813.182601][ T31] ? watchdog+0xdda/0x12c0 [ 813.187482][ T31] ? watchdog+0xdcd/0x12c0 [ 813.192372][ T31] watchdog+0xdeb/0x12c0 [ 813.197087][ T31] ? __pfx_watchdog+0x10/0x10 [ 813.202255][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 813.208007][ T31] ? __kthread_parkme+0x19e/0x250 [ 813.213557][ T31] ? __pfx_watchdog+0x10/0x10 [ 813.218726][ T31] kthread+0x3c2/0x780 [ 813.223236][ T31] ? __pfx_kthread+0x10/0x10 [ 813.228370][ T31] ? __pfx_kthread+0x10/0x10 [ 813.233456][ T31] ? __pfx_kthread+0x10/0x10 [ 813.238538][ T31] ? __pfx_kthread+0x10/0x10 [ 813.243614][ T31] ? rcu_is_watching+0x12/0xc0 [ 813.248873][ T31] ? __pfx_kthread+0x10/0x10 [ 813.253955][ T31] ret_from_fork+0x45/0x80 [ 813.258882][ T31] ? __pfx_kthread+0x10/0x10 [ 813.264077][ T31] ret_from_fork_asm+0x1a/0x30 [ 813.269387][ T31] [ 813.272850][ T31] Kernel Offset: disabled [ 813.277621][ T31] Rebooting in 86400 seconds..