last executing test programs: 18m30.907252081s ago: executing program 1 (id=1096): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x101000, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x2101, 0x0) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) ioctl$auto_EVIOCRMFF(r0, 0x40044581, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x101000, 0x0) (async) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x2101, 0x0) (async) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) (async) ioctl$auto_EVIOCRMFF(r0, 0x40044581, 0x0) (async) 18m30.678210762s ago: executing program 1 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), r0) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYBLOB="8f0329bd7000fb"], 0x14}, 0x1, 0x0, 0x0, 0x40448c0}, 0x4000) ioctl$auto(0x3, 0x80000541b, 0x38) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x8009, 0x400000072, 0x8b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) setfsuid$auto(0x0) read$auto_regulator_summary_fops_(r1, 0x0, 0x0) ioctl$auto(0x3, 0x6f3e, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) 18m29.942478679s ago: executing program 1 (id=1100): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = socket(0x10, 0x2, 0x6) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_COORDINATOR={0x24, 0x1e, 0x0, 0x1, [@nested={0x1f, 0x122, 0x0, 0x1, [@nested={0x8, 0xf2, 0x0, 0x1, [@nested={0x4, 0xf7}]}, @generic="ebaaea8ba3bf5d644c5cd0907132b005c40a71"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) r2 = geteuid() sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f0000000080)={0x1668, r1, 0x522, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x3}, @NL802154_ATTR_SEC_KEY={0x10c, 0x30, 0x0, 0x1, [@nested={0xfd, 0x122, 0x0, 0x1, [@nested={0x4, 0x100}, @generic="046046be85e8f27c284f03e39bd0b6f4f8513d7af575be9b03f905a8b784fe4aa9697a79ec9f8f83392fdb035900905bc40c189ac55b6c149e1fa090abbfc79f5f1adfeb6718c405b740246254112db0b52ee262e6d16ef74c43b573cccd4398490f4836f4200db5cca19665f1bf6c07d4e90d9cd29df90819f914e68b0ffcb51b343976298c0ac1367988a37bbf1fc08c4a513eef29d1add55bb1c38c3210d2b7", @generic="e9daa621403c6b3bd55b9ae7ee18869e0f6751f91579516f432641059e3ce4b2ba9a999a557e781bf4f5953ed840d16d83bd6537e5397d73f9dfa25c956da5336f2d9f4fc71baa7aae5f0d494c033115", @nested={0x4, 0x44}]}, @typed={0x8, 0x85, 0x0, 0x0, @pid}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xb0, 0x2b, 0x0, 0x1, [@nested={0xaa, 0x48, 0x0, 0x1, [@generic="d900da0f005c7fafce6ec3b3f894329c2e8065096aaaf2d40be5c22b872bc98d88522f2dad90b8cdb81f6d1f0c0cc8e4e10e0f71080230c2d3355bcda174840d64b274fe9ddac93ed375745988cfee7daa6c4d99d8fe30f49c3e2dcb3302bd913869a040cffb8e378ae4e1b25e94311d549247a35130620b91026e69fa60bdb93c1fdf2330aed42af1ccf08ff3b5a5dcbc6dc75d0ff18ebe7451", @nested={0x4, 0x33}, @typed={0x4, 0xe3}, @nested={0x4, 0xa9}]}]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xcdc6}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x1468, 0x19, 0x0, 0x1, [@generic="078791b4d08cebe348b0a3478a09297137171ce9531b4478bd48c6a00e414067d84c63bc57a6fdce899933dfad10", @typed={0x8, 0xb6, 0x0, 0x0, @uid=r2}, @nested={0x10e1, 0x81, 0x0, 0x1, [@generic="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", @generic="113cb6347de5b96b3f4bc358e5c70d8a345cabc2bff179cddc5fcd6ffa1c0a7cd9abcd5cae18f7b608a62dea70769f66f4f6ea5c7f8fa5d66878a1ab1b5b3fe7512e9ce2e861151af3a9220b0f053fce30041d55bb275bc7eff4c25f5a0823438a656a037bd22d180ea0bd6b2a0a104e162bf73f3b642caf834bee9158c4fef8b7ec15796eb9e2cc2412711f671fbb7c2c13affa7ca3151365aad7cf242ce77647742210150b8b1bc6f47ce7e0ee35d7a408a2ba3543d8797a53051f80639d8ac65bcd0b4d3f0c3797cb961f30", @nested={0x4, 0x142}, @typed={0xc, 0x20, 0x0, 0x0, @u64}]}, @generic="fd0a344efc0267d5ab7b0d667692bca5ff626425ebbf47ca7040ca15493a28a36d46dc4c8a06e7e6442ad1d1b34d118f373019f5124b43718bccd92a6f700376a954", @generic="240f5253fb34125b549c1104273c14c155946e552d1a9f8160303db3abcad134e40387284128a99f0a65f6b34c586455f83fe54002aac92ecea728d39c8d838b8d438bf0b5eceda7332d63ba05249f91e3c772ff2d0eedf732f09e8bae58d2b94aeecb79cb65e6220aff2ee7e3e8c9d5bb2b2ebf", @typed={0x29, 0x26, 0x0, 0x0, @str='/sys/devices/netdevsim3/sriov_numvfs\x00'}, @nested={0xc, 0xc0, 0x0, 0x1, [@nested={0x4, 0x116}, @nested={0x4, 0x8d}]}, @nested={0x6f, 0xd4, 0x0, 0x1, [@nested={0x4, 0x2f}, @typed={0x4, 0x38}, @generic="aace7bc0a428e43ffe41d2550f53e0246b9c2bd04b1080c8c7a0edddf37800a21abeaf", @nested={0x4, 0x57}, @generic="d44961fe784c31d8e6d5636829cf3b42afe2a31f5ecd4d9dea57a453a520a1cd83c544e82d7f721b8e2e41796adf48b6ee4f43d2ec990d71ac949952"]}, @nested={0x1ea, 0x129, 0x0, 0x1, [@generic="80d3a1f93b9c83444b321d9f5c6347992159a462a42e37ba2feaa0d92949371a41cc28914033cf64e2749bd774ec61d92f320438a4f130821b228148ea9b0dfbda9e8b43e0d61122dcb2b5", @nested={0x4, 0xbe}, @nested={0x4, 0x1f}, @typed={0x8, 0x131, 0x0, 0x0, @u32=0x200}, @nested={0x4, 0xfc}, @typed={0x9f, 0xac, 0x0, 0x0, @binary="a22172f2b76b72db11d32258eea7f53bf82d04bf62df5d1c6b20eb72aaa9626816a69ff8624742252bedfcc077496c547820991146ce1b6bf6a468c94fd50de2791115e2f78f28d36e9d78cb3ea9848e1e2dc544e0598f5606b8ca0c61144e3585b342c9ac44329c8855b66a4e9ed4946ea4be4d5b823ccbc96c532163994052e81f38e114eaaff5d5950c6d60abd59747672ffab1ff589e4895b8"}, @generic="05405b8a7974ceec97f9c62437578d239c45767e51578c7c8b698e9d3016c21ecd4b77b94336cf762c0fcf6d1a9d13929ea22089c7b975de1f163054b1e7e5ef1196f22e6f5863226ad2dbc804bbd71faf109fb5a9e7681ae7c7598fd8", @generic="27209cf8f51e78af360d5e337c3b0aa9ceb1b85e7939f13a46596c8f2b5eafa59be9be9e1f0448c47a7df903d9e11bc659319cfd6c3290ae82f68b5090362237949a97f26e2b01d40a4706c02483b36c8ada4b7d2e98593b92474647ff4ead735d2c07173569e3", @generic="663731605eb54d7ae2b68a37aa9c2b6f751ab8d48c1c82e467552fff029f28da8ff6ac"]}]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9}]}, 0x1668}, 0x1, 0x0, 0x0, 0x4004800}, 0x28080) 18m29.68460916s ago: executing program 1 (id=1102): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) socket(0x18, 0x3, 0x2) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0) socket(0x25, 0x1, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) 18m28.638742471s ago: executing program 1 (id=1104): r0 = openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) mmap$auto(0x0, 0x20009, 0x8, 0x800100000eb1, r0, 0x9) mknod$auto(0x0, 0xcb, 0xfffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0) 18m27.95444889s ago: executing program 1 (id=1105): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/udp_ports_reset\x00', 0x1c1000, 0x0) (rerun: 64) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r1, &(0x7f00000000c0)="089aeefe3adf28d55ad16d729c7cf8a28a29a2420a390e05d3a3a066214d2ea8e8f83cdac25e79bec0b07a8ebb54a48cb218f351425d0715c5357a04b9e851fdc34ae467c2ab5abbddd778fa82f2659e3f68714923fa95b9698023ba9ddcb93fcbf84eded0cd924869a37712ea1c27e31b245d8b9aac5c8e8e4f26b7abc2552de99e5f706e39edad3b6fe48f9b872d2435a3d3cbaedcb95d1263232f37970dcf2441eb1b5d34", 0xa6) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, 0x0, 0x4000004) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x8, 0x1ff, 0xf8, r2, 0x8000) (async) mmap$auto(0x0, 0x7c0, 0x7, 0x8011, 0xffffffffffffffff, 0x1000) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x80402, 0x0) write$auto(r3, 0x0, 0xfffffdf2) 18m12.560860482s ago: executing program 32 (id=1105): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/udp_ports_reset\x00', 0x1c1000, 0x0) (rerun: 64) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r1, &(0x7f00000000c0)="089aeefe3adf28d55ad16d729c7cf8a28a29a2420a390e05d3a3a066214d2ea8e8f83cdac25e79bec0b07a8ebb54a48cb218f351425d0715c5357a04b9e851fdc34ae467c2ab5abbddd778fa82f2659e3f68714923fa95b9698023ba9ddcb93fcbf84eded0cd924869a37712ea1c27e31b245d8b9aac5c8e8e4f26b7abc2552de99e5f706e39edad3b6fe48f9b872d2435a3d3cbaedcb95d1263232f37970dcf2441eb1b5d34", 0xa6) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, 0x0, 0x4000004) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x8, 0x1ff, 0xf8, r2, 0x8000) (async) mmap$auto(0x0, 0x7c0, 0x7, 0x8011, 0xffffffffffffffff, 0x1000) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x80402, 0x0) write$auto(r3, 0x0, 0xfffffdf2) 7m28.502946248s ago: executing program 0 (id=2812): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129a00, 0x0) ioctl$auto(r1, 0x900064b5, 0xc14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="17000000", @ANYRES16=r3, @ANYBLOB="010027bd7000001400b223"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 7m28.089241537s ago: executing program 0 (id=2814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f0000000140)={{0x1, 0xee00, 0xffffffffffffffff, 0x5, 0x1, 0xd, 0x3}, 0xc0, 0xec08, 0x4, 0x9e3, @raw=0x3, @raw=0x5, 0x8000, 0x0, &(0x7f0000000080)="4bec0723d0becda4ae", &(0x7f00000000c0)="e702d934f93725a6400e8b15656e9ce70818ea6541c12d28c97c151fbc3019b7f3dc9985b1c8ae6f18bd5f7fbd904de56f516e48c32b5b3c09962d89d11f76224cf74f740347a3adda3369defe3067e8e12bb1f32d4ad4d7"}) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@typed={0x14, 0x15, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x41) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1c\x00', 0x80000, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_TMR_START(r4, 0x5402, &(0x7f0000000300)="8cb5a324a2aa97a5169dab0ff69d640c52c10426ce95eba3101c38a76a043c02ba8e8aedd1116f1ea6843cb5bdc629f8227cb437d355dffdaf0de241e1f97779411dd767f2cf79913efa5e4b6af35ce85fd99b02bc8b3939cbaf7f37621569785e24b3259ad4c0253dba46db048062f6761df42a9396d5175e81148d6162b519b54c") r5 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x341000, 0x0) getsockopt$auto_SO_BINDTOIFINDEX(r5, 0x8, 0x3e, &(0x7f0000000400)=',[#\x91\x00', &(0x7f0000000440)=0x1) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000480), 0x410000, 0x0) r7 = ioctl$auto_TUNSETCARRIER(r6, 0x400454e2, &(0x7f00000004c0)) ioctl$auto_dma_heap_fops_dma_heap(r7, 0x4, &(0x7f0000000500)="340be023f3b627793d9e1aa9e909fd866f2e5530fb18528561e70744a362b37e5b975b0ba8141b9fa1b52082977b7a436491fdbd24f8f8e96de12426a3278724b9f53f26e649ea899827df0b984ab1e74990e7b91c35b60a07110a555a20804b") r8 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cec8\x00', 0x321100, 0x0) ioctl$auto_CEC_DQEVENT(r8, 0xc0506107, &(0x7f00000005c0)={0x2, 0x7, 0xb9c0, @state_change={0x6, 0x40, 0x9}}) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000680)={0x1, &(0x7f0000000640)={0x7, 0x4f, 0x3, @inferred=r3}}) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(r5, 0x40184152, &(0x7f0000000780)={0x6, &(0x7f0000000740)=&(0x7f00000006c0)="7a746075b2654bb8c4750ef9bcae41684a4f29a6f9522bb6d4b1ff4c8f9d15bc9de293b084e7fd9fe215b14f9bff31ad1a7a32923b7a52d579a7b1d672db1dfd917a4d806f1b99290ec23bad8260e4e5447987bd9c42667479efb5dafeb8e208d0af433a7f5cb5d77b9d2f57d329c01d538ad9ebabe3b256", 0x138}) r10 = socket(0x5, 0x4, 0x8) read$auto_fops_u8_(r7, &(0x7f00000007c0)=""/111, 0x6f) fsconfig$auto_HIDEPID_OFF(r0, 0x7, &(0x7f0000000840)='nl80211\x00', &(0x7f0000000880)="78268f5262c42d586dd8923a4c1d0d78d77f8f04ac71409aed7687d8397307412b1e766d17d42dca50574f447790b5c9a42bb2d90aa3baf6bdd92401405553f97b983e01f99d66b072c800a3f662e6268cb3bd87645feeba7516dffc", 0x0) r11 = ioctl$auto_TUNSETLINK(r9, 0x400454cd, &(0x7f0000000900)=0x9) ioctl$auto_IOCTL_GET_NUM_DEVICES(r11, 0x40046104, &(0x7f0000000940)=0x7fff) mmap$auto(0xffffffffffffffe0, 0x0, 0x3, 0x14, r9, 0x0) r12 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000009c0), r9) sendmsg$auto_NBD_CMD_DISCONNECT(r10, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xec, r12, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0xfffffffc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0xa9, 0x7, 0x0, 0x1, [@generic="aab7e334a662b0277a41cfc6a31fbfdbca34d729ad8e8a9616b7c79bba6dc1ad29e127301ebf4bc68c430c0a11413113fb6f453af818762d47a930da3e6135a8a732c93e85146c774180f9cf240590e2fbb0733bbd6ee37a902bf785449e4270c1d9beaed3ee25c8e16f814966b34faf9820dd7b20c4f8bc921234d2e4e040c9ea2e8dc5b4c0632b38992e1e450f66c5f1ec5c73d34ad625fb7cc33e6b481a0c771fbaa2ab"]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4884}, 0x400) fcntl$auto_F_GET_SEALS(r11, 0x40a, 0x200000) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, r13, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4992}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'virt_wifi0\x00'}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x77}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r14 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/debug/netdevsim/netdevsim0/health/break_health\x00', 0x600, 0x0) setsockopt$auto_SO_KEEPALIVE(r14, 0x9, 0x9, &(0x7f0000000d40)='/{\x00', 0x7) select$auto(0x5e5, &(0x7f0000000d80)={[0x100000000, 0x1000, 0x4, 0x8000000000000000, 0x1, 0xffffffff80000000, 0x9, 0x22, 0xff5, 0xef5b, 0x7, 0x400, 0x5, 0xb, 0x80000000]}, &(0x7f0000000e00)={[0xffffffff, 0x8, 0xb, 0xc0000000, 0x183d59b2, 0x4, 0xa, 0x1, 0x5, 0x3, 0x0, 0x47a, 0x0, 0x10, 0x5b, 0x6]}, &(0x7f0000000e80)={[0x0, 0x2, 0x3, 0xff, 0x7, 0xa5c2, 0x4de, 0x8, 0xd88, 0xfffffffffffffff0, 0x10001, 0x0, 0x80000000, 0x3, 0xffff]}, &(0x7f0000000f00)={0xf, 0x5}) 7m27.668604552s ago: executing program 0 (id=2816): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x14480, 0x0) (async) socket(0x29, 0x2, 0x0) (async) prctl$auto_PR_SET_MDWE(0x41, 0x6, 0x9, 0x8000000000000000, 0xfffffffffffffffb) (async) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50ca4639", 0xfffffffffffffffe) (async) sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x4000840) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) (async) socket(0xa, 0x5, 0x84) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) 7m27.419022439s ago: executing program 0 (id=2819): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r2 = getsid$auto(0xffffffffffffffff) r3 = io_uring_setup$auto(0x6, 0x0) r4 = waitid$auto(0x65c6c5d, r3, &(0x7f0000000100)={@_si_pad}, 0x80000001, &(0x7f00000001c0)={{0x6, 0xad7}, {0x100000001, 0x9}, 0x5, 0x80000001, 0x12, 0x1000000, 0x57, 0xfffffffffffffff8, 0x8, 0x3, 0x8, 0x5, 0x8, 0xa970, 0x5, 0x6}) prctl$auto(0x9, 0x4, r4, 0x6, 0xb) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41006000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x126c, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd6}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_KEY={0x123a, 0x50, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @pid=r2}, @nested={0x104, 0x105, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @pid=r4}, @typed={0xf5, 0x11f, 0x0, 0x0, @binary="544384fc5f36f8bd0e4a92f25c76d8e617b2db653568141d9e2b86cec4362ce467f10374d1e9e70fb3af369c91dc550673e1748b9ad073e7fe45a3a9353940e5a585da25349e62ffae37f858b78367117684a5650fe3d92e19e0ae9838e08a3bb9bb6aca67b929f888332e4e40116a513ceac9ad4d445806dc3526635863a81b61b9ba5ae31d120762e3615aae0f481078a992efb4a38a2eb97bcacefb742a3305a50ab6d16a8c27874e69e95b488300b3f352511920fbfd9c38d013a3a748ea9be9f8eb4d6dab67a310c0ce8f888ea324ddb7917430fe450f618a2ff3adfe4a26365dec3a3dbe4c4a157da22c4f22722b"}]}, @nested={0xc, 0x5c, 0x0, 0x1, [@typed={0x8, 0x145, 0x0, 0x0, @u32=0x1}, @generic]}, @generic="8a6974846861f46a5637c654a16a0f1f16b7b89e05c3ae96fbd6386cb39215d8fa04c0730292119b8fe50b9ab7e820c0664be4cddeda07a927fcc981c62689e62ae183f6a1b777fd773d7e2933eff9cebfeaccbfe9d468a1fea53613fa96810da96bd05f0ae93fe8547efa", @generic="efccb7916208d71c8ff04566343eac6c60048f172faa6dc0b9fe89074c512611f64c5d339a7b3adeea395751c76fa81e0420f521379a48046c688076ce41885690588639bc2d69bc6528a25f46e5bad5a04c522ee387553386f2544cc14a5b2df7cedf55ecf717e16a844b54744e1e01ec3b2175af16b8307adf6f6f8ec4a781e7bde7b2d00ec74a2be8c2cde59cdb3e048bea51070194", @nested={0xc, 0xf7, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @u32=0xffffffff}]}, @typed={0xc, 0xe, 0x0, 0x0, @u64=0x9}, @generic="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", @typed={0x4, 0x14e}]}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x126c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 7m27.0132966s ago: executing program 0 (id=2820): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0x4e0) ioctl$auto_TIOCSCTTY(r0, 0x540e, &(0x7f0000000080)) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="0764bf0c3a308e07d345d602c719dcd480b8be7640719ed3a763140c2d51812e25554d57841c9fb05e0d93c1f01b5e166437"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'bond_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xc0, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x4}, @ETHTOOL_A_TSCONFIG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x661}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4801) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) 7m26.053448326s ago: executing program 0 (id=2826): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bus/usb/025/001\x00', 0x201, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r2, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x1c, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x4}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xd41b}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x4}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x24, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x8}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x6}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x1c, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xc31c}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x48000) (async) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000540)={0x0, 0x9, "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"}) write$auto(r0, &(0x7f0000000080)='{\x00', 0x3) (async) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) (async) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) (async) msgsnd$auto(0x0, &(0x7f0000000040)={0x5, 0x20}, 0x1000, 0xfffffffc) prctl$auto(0x44, 0x0, 0x0, 0x0, 0x0) clock_gettime$auto(0x9, &(0x7f0000000000)={0x7, 0xb}) (async) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4082, 0x96) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r4 = getpid() move_pages$auto(r4, 0x4, &(0x7f0000000280)=&(0x7f0000000240)="eb88d447a5a4e1ab10641be84e6c21e13367436b0d2e43a090b968a0ea1ffc26b1541b5687e8a2ce4bf8abe9835c1ac09ccf310998e14ce8c2cf1416899ce3", &(0x7f00000002c0)=0x4, &(0x7f0000000300)=0x91e4, 0xf) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) (async) fallocate$auto(r3, 0x1, 0x820, 0x7fff) 7m25.533070173s ago: executing program 33 (id=2826): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bus/usb/025/001\x00', 0x201, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r2, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x1c, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x4}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xd41b}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x4}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x24, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x8}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x6}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x1c, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xc31c}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x48000) (async) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000540)={0x0, 0x9, "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"}) write$auto(r0, &(0x7f0000000080)='{\x00', 0x3) (async) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) (async) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) (async) msgsnd$auto(0x0, &(0x7f0000000040)={0x5, 0x20}, 0x1000, 0xfffffffc) prctl$auto(0x44, 0x0, 0x0, 0x0, 0x0) clock_gettime$auto(0x9, &(0x7f0000000000)={0x7, 0xb}) (async) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4082, 0x96) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r4 = getpid() move_pages$auto(r4, 0x4, &(0x7f0000000280)=&(0x7f0000000240)="eb88d447a5a4e1ab10641be84e6c21e13367436b0d2e43a090b968a0ea1ffc26b1541b5687e8a2ce4bf8abe9835c1ac09ccf310998e14ce8c2cf1416899ce3", &(0x7f00000002c0)=0x4, &(0x7f0000000300)=0x91e4, 0xf) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) (async) fallocate$auto(r3, 0x1, 0x820, 0x7fff) 6.139957697s ago: executing program 4 (id=4546): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x1c, &(0x7f0000000400)={@siginfo_0_0={0xfffffff8, 0x101, 0x0, @_sigfault={0x0, @_trapno=0x3}}}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) 5.796123204s ago: executing program 5 (id=4547): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) statx$auto(r0, 0x0, 0x1003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) sendfile$auto(r2, r2, 0x0, 0x8) 5.555488793s ago: executing program 3 (id=4548): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe602}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r4 = socket(0xa, 0x3, 0x3a) request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(0x0, 0x0, &(0x7f0000000380)='e\x00P\x94\x14`\x1a\xfe\xaa?e\t\x8e\xddZo\x1e\x14W\x1cmB\xdb\x90D\xb7\x92]\x11\x03c&(\xfe\xa1@\x7f\xd4\xa2%d\x06\xc3O\xd9\xf4\x8fI:G\x93\xc2\xfb\x1a\a\xdbE8\xcb \x10\xf1y__kx\xc8\xb0\x84\xd4\xb7\xb3\x02\xfd\x85\xec\xc1\xebB\xcc\xfd\x19\xafs\xd7\x84\xf2>\xe7\xcf\xe5b7\xa7\xd2\x1f\x97X\xc4\xa8\x15\xb7\x95E\xd1\xcc\r\xcd\xec]]\xcf*W\xaaRXX\xc0mI\xaa\xa5\xe3?\xae!\x83\xc4\xc1\x84?4\xe8]\xaa)I\xb5', 0xfffffffffffffff8) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r6 = open_tree$auto(0xffffffffffffff9c, 0x0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r7) r9 = prctl$auto_SIGCONT(0x800, 0x12, 0xffffffffffffffff, 0x4, 0x0) r10 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000040), r4) sendmsg$auto_CGROUPSTATS_CMD_GET(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r10, 0x704, 0x70bd27, 0x25dfdbfc, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r4}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r6}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000075}, 0x4000) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r7, &(0x7f0000000140)={0x0, 0x9e, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000004", @ANYRES16=r8, @ANYBLOB="a3ff2dbd7000fddbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) read$auto(r0, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) 5.505596417s ago: executing program 4 (id=4549): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x7ffffffc}, 0x6, 0x1, 0x4, 0x1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) socket(0x18, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000140)="0a1b9a5c305c0a", 0x7) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) mmap$auto(0x0, 0x0, 0x7ffd, 0xe238, 0x602, 0x5) rseq$auto(0x0, 0x6, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r4, 0x0, 0x5, 0x66a6, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r3, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) r6 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x109280, 0x0) read$auto(r6, &(0x7f0000000100)='\xcb%)\x00', 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) 5.308842814s ago: executing program 3 (id=4552): mmap$auto(0x0, 0x4005, 0xa, 0x80009b76, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0xb}, 0x800009}, 0x2009, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xec) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) 4.993040209s ago: executing program 5 (id=4553): unshare$auto(0x584) r0 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0xc, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capset$auto(0x0, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, 0x0, 0x4000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write$auto(r1, 0x0, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/40u\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_DELAY2(r0, 0x80084121, &(0x7f00000001c0)=0x8) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) socket(0x25, 0x2, 0x73) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) close_range$auto(0x2, 0xa, 0x0) 4.702039771s ago: executing program 3 (id=4555): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x2581, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000002c0)="7d4d6bac0100120f61d46fa8bde75da51a623287db278095f41e2b4d632ace21614c750afbd0191b8c164503877b7cd66c378cf6425762ea79b301a6db57cb5ef3a0392c34dd645277ef7199cdac255e8daf7be8a03eca2e82abad870123f1187331598ca1cd9d375d24dfcac162dc073ba50c4e37c90144536919e57f0010f3c308ddc398c6acbf510e69d2bb0f40f36093da09288350830000274aadaa47cf39641f3242a828d217cd3166f273aebc3d42c6dca5a87eb66a1c8e5947daf4d841fd") statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x5, 0x800000400008, 0xfffffffffffffffe, 0x10012, r0, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = prctl$auto(0x39, 0x1001, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, &(0x7f0000000080)="c2", 0x1) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x440200, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) unshare$auto(0x40000080) unshare$auto(0xdeff612) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r3, 0x8000) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f0000000900)=""/4096, 0x1000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'}) 3.830678649s ago: executing program 4 (id=4556): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) statx$auto(r0, 0x0, 0x1003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) sendfile$auto(r2, r2, 0x0, 0x8) 3.652616771s ago: executing program 5 (id=4557): mmap$auto(0x4, 0x7a1c, 0xe3, 0x100000eb1, 0x40000000000a1, 0xc4) ioctl$auto_TIOCMGET2(0xffffffffffffffff, 0x5415, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x80f0}, 0x6b) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/flags\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto(r2, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.10/usb30/30-0:1.0/usb30-port4/power/runtime_active_time\x00', 0xfc82, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, 0x0, 0x3) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D0c\x00', 0x34544, 0x0) write$auto(r1, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x4) r4 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto(0x3, 0x0, 0x100082) read$auto_component_list_fops_(r4, &(0x7f0000000100)=""/78, 0x4e) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0xccb}, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') mmap$auto(0x4, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) 3.22164104s ago: executing program 5 (id=4558): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/last_error_time\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/217, 0xd9) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x3b, 0x5, 0x8) 3.045607088s ago: executing program 4 (id=4559): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) socket(0x10, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe5e, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.78072479s ago: executing program 4 (id=4561): readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x9, &(0x7f0000000100)=@bpf_attr_1={0xffffffffffffffff, 0x1000, @value=0x3, 0x400084047dc}, 0x8e) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x6) write$auto(0xca, &(0x7f0000000240)='\x04>\x01\x06\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8%6\x9c%\x96$_*\xb1|S\xcb&\x90{\x9a\\S\xa2(Q\xcc\xae\x04(\xb8~kYHi\x1cd\x91g\xdd\\\xa4\x10\x83\xce\a', 0x7f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f00000000c0)={"67b005c1c2760bd1eeb6eb479d03912acfb5074ad05689c042577e4d145c43b5", 0x4, 0xfff, 0x7fffffff, 0x9, 0xa00, 0x0}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/25/smp_affinity\x00', 0x80000, 0x0) pread64$auto(r4, 0x0, 0x40000000f42c, 0x5) prctl$auto(0x20007, 0x0, r3, 0x8, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) vmsplice$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000002c0)="ff6e1aa3c451e8c60f45edf2c3561400d3936be86ea407a91b245024172505f6673576c7faa6ca983441816d9f148a572c4bdbd60ee5b03213be26fba9b02efa06466e5da4484d1a4319dc80517045b4573f9ddd7ff7ae4386c324b8dcd0d823ed71db552c444b2bc764bc85d25748b2a2a20f79e0e149cb3a0277591e4d1f1d5bfeaa4d02c3d7ae519474b1f6d98895c5bbcb3523db0fc1f8e88054a5bf5891b95b7703a56f7ad4c8c63f9a29f8ee11", 0x1}, 0x88, 0x3) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) getpid() sendfile$auto(r1, r0, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x200440c0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) 2.737496758s ago: executing program 2 (id=4562): r0 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x103440, 0x0) pread64$auto(r0, 0x0, 0x5, 0x3) 2.559464823s ago: executing program 2 (id=4563): r0 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x103440, 0x0) pread64$auto(r0, 0x0, 0x5, 0x3) (fail_nth: 1) 2.131193716s ago: executing program 2 (id=4564): socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xf, 0x940, 0x4, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x5, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa2abd132, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x4, 0x40000081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0) write$auto(r2, 0x0, 0xc) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) 1.865095917s ago: executing program 3 (id=4565): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x2044b, 0x7, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800e, 0x80000001, 0x4, 0x80200000000001, 0x381, 0xde3, 0x800000000008, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x0, 0xc3f, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfff]}, 0xa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) modify_ldt$auto(0x2, 0xfffffffffffffffc, 0x23b94) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(r0, &(0x7f00000004c0)={{&(0x7f0000000040)="68bf2fba42671489de56dc9aea092da79d6baec03881d170c9ba52dcebbec2bef7e3b0fe104d4bab6d3485d14d5f7ad7641a56032963e734fff828fe6addebfee1d75e2bf5fcf632577abb7bbe5848e7e12468776b2434d0b431b6c0ab50e0a1b802dbeda2166e04e624df4071558d7ebfe90db595f69e3248937c38fb3efce82a60ed58769de38d35eed0d2d3a00c01250123018728f4230f5870b5caf3c86acd133476da19e89da4e39979986741f96a2aec38920ae3cf7e61a4b51c097bd1baf94701", 0x1, &(0x7f0000000140)={&(0x7f0000000380)="3d7eb98500d04a582781c1aedfc4c6113e4bed204c097d5206d2f6c52a78c2b1b78ec419e48ed2d1049b2f113e5b23fadd63353d3b358c151c6fc8aed44204849fd56c94b202899fdc36f93e80b93a96562d6d1235a245f0454eb6d2c8967baddce6", 0x2954}, 0x27, &(0x7f0000000400)="13bdea70880f3ecd407223919595b622fa4c297a528c0f005fe0b703550c940bd4980103197e247e795680e58aa96003f4fce37cad9babfbeada76e9583801b9854be53d6621565f3c35d659ebaee27079ac580db6749e01dda13716086d7a142bf5aeffbea260e51ae4cb24decd1db075a5258dc71829930df2d24660ea14372f0fec67f176f4", 0x8001, 0x1}, 0x3}, 0xc, 0x7, &(0x7f0000000500)={0x2, 0x101}) 1.370753579s ago: executing program 3 (id=4566): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop3/queue/iostats\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyy2/power/runtime_suspended_time\x00', 0x80000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 795.699234ms ago: executing program 2 (id=4567): mmap$auto(0x7, 0xe980, 0xffffffffffff823c, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x2) write$auto(0x800000000000c8, 0x0, 0x1a) shutdown$auto(0x200000003, 0x2) set_mempolicy$auto(0x8003, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x2, 0x1fc) close_range$auto(0x2, 0x8, 0x0) 724.950202ms ago: executing program 5 (id=4568): mmap$auto(0x7, 0xe980, 0xffffffffffff823c, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x2) write$auto(0x800000000000c8, 0x0, 0x1a) shutdown$auto(0x200000003, 0x2) set_mempolicy$auto(0x8003, 0x0, 0x4) socket(0x2b, 0x2, 0x1fc) close_range$auto(0x2, 0x8, 0x0) 709.699289ms ago: executing program 3 (id=4569): io_getevents$auto(0x5, 0x35ef, 0xaf, &(0x7f0000000000)={0x80000001, 0xd, 0x2}, &(0x7f0000000080)={0x9, 0x8000}) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = mq_open$auto(0x0, 0x83, 0x7, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xe}, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x54) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x232340, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r5, 0x1269, 0x0) ioctl$auto_OTPERASE(r5, 0x400c4d19, 0x0) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x7, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf25010000000800010020100000100007800c007e800400bd0004009a800c0002000100000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/0:0:0:0\x00', 0x121641, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, r2, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x4f4, 0x5}, 0x10) 554.756093ms ago: executing program 5 (id=4570): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x1c, &(0x7f0000000400)={@siginfo_0_0={0xfffffff8, 0x101, 0x0, @_sigfault={0x0, @_trapno=0x3}}}) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) 499.868765ms ago: executing program 4 (id=4571): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) r1 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0) pread64$auto(r1, 0x0, 0x8c, 0xffff) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/ns/cgroup\x00', 0x200, 0x0) r3 = ioctl$auto_NS_GET_PID_FROM_PIDNS(r2, 0x8004b706, &(0x7f0000000200)=0x4) mmap$auto(0x0, 0x8000020000000f9, 0xfffffffffffffff3, 0xeb1, 0x401, 0x7ffd) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000280)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) r4 = ioctl$auto_dma_heap_fops_dma_heap(r3, 0x9f, &(0x7f00000002c0)="1fdc18d0b324cd2b70c10b4205f96f8372cb14656558cf63d2a51ec44b9667b8f3ca5827127fe84455919f025bd17ad971767fafcd04692a28501f025b9a319864381f570eb64b93b49d868a9049320eb0ee9eb683f4acd0c380c48e806f29cf238881ea170366636468774db89575b1ef0d1dccf830968df77145e4b30af8bb9285844466972fe5639381aac4639677d3ee5e62b5e02cd2cd3e427eb2d7362a04010eda890ebdc406615b6c689e29a3bf733fb9b3af0befc185654c07a3ace8af3d3cf5069c45888bfe3226af5955") r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/devices/uprobe/format/retprobe\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000002c40)=""/25, 0x19) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), r3) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x5ef6dcac47fcfa12}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_NONCES={0x25, 0xf3, "539bbcc65f74ff5ffe16b5b30989a03ab657398e861ad11f585a10fa547d3af0f8"}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x3a, 0x129, "871e29185e5e49821c25975f42ebd7d6270bc8210d8333f50d5be3f1826e7bb1d020a19aec7f27863c6981cacae80969cb7ae8a0bc40"}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x800) mremap$auto(0x110c230000, 0x4, 0x4, 0x7, 0x100000000) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) r7 = gettid() sched_setaffinity$auto(0x0, 0x9899, &(0x7f00000000c0)=0xf19d) rt_sigqueueinfo$auto(r7, 0x1, 0x0) r8 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) connect$auto(r8, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x84) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x80014, 0x7e73, @_sigsys={&(0x7f00000003c0)="d1941d640401eeabc2430d6222069f4fb5aef32e43329f60610c0a4d36bdba310fc998aeba51a33213a228123ff60534d4a7a12a1b775c12de42df513c8c2fc403621bec44ebe208e178f7d4c3ebd1", 0xa4a0, 0x3}}}) r9 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x2, 0x0) shmdt$auto(&(0x7f0000000240)='/proc/self/ns/cgroup\x00') ioctl$auto_FBIOPAN_DISPLAY(r9, 0x4606, &(0x7f0000000000)) 490.484985ms ago: executing program 2 (id=4572): r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) 0s ago: executing program 2 (id=4573): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe3a, 0xdb, 0x9b72, 0x5, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r0, 0x0, 0x5, 0x66a6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) open(0x0, 0x22240, 0x155) socket$nl_generic(0x10, 0x3, 0x10) mq_notify$auto(r0, &(0x7f0000000040)={@sival_int=0x375, @inferred, 0x1}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) kernel console output (not intermixed with test programs): 0000000246 R12: 0000000000000000 [ 1454.752451][T25932] R13: 00007f20d41e6038 R14: 00007ffe50a6cdf0 R15: 00007ffe50a6ced8 [ 1454.752499][T25932] [ 1455.156468][T25944] FAULT_INJECTION: forcing a failure. [ 1455.156468][T25944] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.169384][T25944] CPU: 0 UID: 0 PID: 25944 Comm: syz.5.3889 Tainted: G I syzkaller #0 PREEMPT(full) [ 1455.169422][T25944] Tainted: [I]=FIRMWARE_WORKAROUND [ 1455.169431][T25944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1455.169445][T25944] Call Trace: [ 1455.169453][T25944] [ 1455.169463][T25944] dump_stack_lvl+0x16c/0x1f0 [ 1455.169493][T25944] should_fail_ex+0x512/0x640 [ 1455.169536][T25944] ? __kmalloc_noprof+0xca/0x880 [ 1455.169577][T25944] should_failslab+0xc2/0x120 [ 1455.169609][T25944] __kmalloc_noprof+0xdd/0x880 [ 1455.169647][T25944] ? kernfs_fop_read_iter+0x447/0x610 [ 1455.169676][T25944] ? kernfs_fop_read_iter+0x447/0x610 [ 1455.169698][T25944] kernfs_fop_read_iter+0x447/0x610 [ 1455.169721][T25944] ? rw_verify_area+0xcf/0x6c0 [ 1455.169746][T25944] vfs_read+0x8bf/0xcf0 [ 1455.169777][T25944] ? __pfx_vfs_read+0x10/0x10 [ 1455.169799][T25944] ? find_held_lock+0x2b/0x80 [ 1455.169842][T25944] __x64_sys_pread64+0x1eb/0x250 [ 1455.169870][T25944] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1455.169907][T25944] do_syscall_64+0xcd/0xfa0 [ 1455.169935][T25944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.169959][T25944] RIP: 0033:0x7f20d3f8efc9 [ 1455.169977][T25944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1455.170001][T25944] RSP: 002b:00007f20d4f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1455.170024][T25944] RAX: ffffffffffffffda RBX: 00007f20d41e5fa0 RCX: 00007f20d3f8efc9 [ 1455.170040][T25944] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 1455.170054][T25944] RBP: 00007f20d4f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.170068][T25944] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1455.170089][T25944] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1455.170124][T25944] [ 1455.486400][T25949] FAULT_INJECTION: forcing a failure. [ 1455.486400][T25949] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.501353][T25949] CPU: 1 UID: 0 PID: 25949 Comm: syz.4.3890 Tainted: G I syzkaller #0 PREEMPT(full) [ 1455.501409][T25949] Tainted: [I]=FIRMWARE_WORKAROUND [ 1455.501423][T25949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1455.501443][T25949] Call Trace: [ 1455.501455][T25949] [ 1455.501533][T25949] dump_stack_lvl+0x16c/0x1f0 [ 1455.501580][T25949] should_fail_ex+0x512/0x640 [ 1455.501629][T25949] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1455.501670][T25949] should_failslab+0xc2/0x120 [ 1455.501717][T25949] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1455.501753][T25949] ? d_alloc_parallel+0x864/0x1510 [ 1455.501802][T25949] ? proc_alloc_inode+0x25/0x200 [ 1455.501854][T25949] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1455.501898][T25949] ? proc_alloc_inode+0x25/0x200 [ 1455.501939][T25949] proc_alloc_inode+0x25/0x200 [ 1455.501981][T25949] alloc_inode+0x64/0x240 [ 1455.502027][T25949] new_inode+0x22/0x1c0 [ 1455.502077][T25949] proc_pid_make_inode+0x22/0x160 [ 1455.502121][T25949] proc_ns_dir_lookup+0x25b/0x390 [ 1455.502170][T25949] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 1455.502211][T25949] lookup_open.isra.0+0x4da/0x1580 [ 1455.502274][T25949] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1455.502356][T25949] ? mnt_get_write_access+0x1e9/0x2f0 [ 1455.502412][T25949] path_openat+0x893/0x2cb0 [ 1455.502458][T25949] ? __pfx___schedule+0x10/0x10 [ 1455.502502][T25949] ? __pfx_path_openat+0x10/0x10 [ 1455.502553][T25949] do_filp_open+0x20b/0x470 [ 1455.502592][T25949] ? __pfx_do_filp_open+0x10/0x10 [ 1455.502629][T25949] ? lockdep_hardirqs_on+0x7c/0x110 [ 1455.502680][T25949] ? __pfx_kfree_link+0x10/0x10 [ 1455.502743][T25949] ? alloc_fd+0x471/0x7d0 [ 1455.502788][T25949] do_sys_openat2+0x11b/0x1d0 [ 1455.502838][T25949] ? __pfx_do_sys_openat2+0x10/0x10 [ 1455.502895][T25949] ? __pfx___schedule+0x10/0x10 [ 1455.502934][T25949] __x64_sys_openat+0x174/0x210 [ 1455.502985][T25949] ? __pfx___x64_sys_openat+0x10/0x10 [ 1455.503038][T25949] ? xfd_validate_state+0x61/0x180 [ 1455.503100][T25949] do_syscall_64+0xcd/0xfa0 [ 1455.503140][T25949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.503174][T25949] RIP: 0033:0x7f6e05b8d810 [ 1455.503199][T25949] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1455.503232][T25949] RSP: 002b:00007f6e06adcf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1455.503265][T25949] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e05b8d810 [ 1455.503289][T25949] RDX: 0000000000000002 RSI: 00007f6e06adcfa0 RDI: 00000000ffffff9c [ 1455.503310][T25949] RBP: 00007f6e06adcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.503331][T25949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1455.503350][T25949] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1455.503396][T25949] [ 1457.632119][T26000] FAULT_INJECTION: forcing a failure. [ 1457.632119][T26000] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.674697][T26000] CPU: 1 UID: 0 PID: 26000 Comm: syz.4.3904 Tainted: G I syzkaller #0 PREEMPT(full) [ 1457.674749][T26000] Tainted: [I]=FIRMWARE_WORKAROUND [ 1457.674762][T26000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1457.674782][T26000] Call Trace: [ 1457.674792][T26000] [ 1457.674806][T26000] dump_stack_lvl+0x16c/0x1f0 [ 1457.674847][T26000] should_fail_ex+0x512/0x640 [ 1457.674905][T26000] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1457.674953][T26000] should_failslab+0xc2/0x120 [ 1457.674999][T26000] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1457.675041][T26000] ? kasprintf+0xc7/0x100 [ 1457.675080][T26000] ? kvasprintf+0xbc/0x160 [ 1457.675107][T26000] kvasprintf+0xbc/0x160 [ 1457.675142][T26000] ? __pfx_kvasprintf+0x10/0x10 [ 1457.675181][T26000] ? __lock_acquire+0xb8a/0x1c90 [ 1457.675232][T26000] kasprintf+0xc7/0x100 [ 1457.675262][T26000] ? __pfx_kasprintf+0x10/0x10 [ 1457.675297][T26000] ? __mutex_trylock_common+0xe9/0x250 [ 1457.675343][T26000] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1457.675401][T26000] bitmap_print_to_buf+0xa8/0x130 [ 1457.675437][T26000] ? __pfx_bitmap_print_to_buf+0x10/0x10 [ 1457.675484][T26000] die_cpus_list_read+0x145/0x1d0 [ 1457.675532][T26000] ? __pfx_die_cpus_list_read+0x10/0x10 [ 1457.675571][T26000] ? sysfs_file_kobj+0xe4/0x290 [ 1457.675615][T26000] ? __pfx_die_cpus_list_read+0x10/0x10 [ 1457.675650][T26000] sysfs_kf_bin_read+0x156/0x210 [ 1457.675692][T26000] kernfs_fop_read_iter+0x32b/0x610 [ 1457.675724][T26000] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1457.675766][T26000] vfs_read+0x8bf/0xcf0 [ 1457.675807][T26000] ? __pfx_vfs_read+0x10/0x10 [ 1457.675838][T26000] ? find_held_lock+0x2b/0x80 [ 1457.675898][T26000] __x64_sys_pread64+0x1eb/0x250 [ 1457.675936][T26000] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1457.675987][T26000] do_syscall_64+0xcd/0xfa0 [ 1457.676026][T26000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.676058][T26000] RIP: 0033:0x7f6e05b8efc9 [ 1457.676084][T26000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1457.676115][T26000] RSP: 002b:00007f6e06add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1457.676146][T26000] RAX: ffffffffffffffda RBX: 00007f6e05de5fa0 RCX: 00007f6e05b8efc9 [ 1457.676168][T26000] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 1457.676188][T26000] RBP: 00007f6e06add090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.676209][T26000] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1457.676229][T26000] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1457.676276][T26000] [ 1458.474064][T26007] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 1458.567927][T26007] ep_00: uevent: failed to send synthetic uevent: -22 [ 1460.777453][T26039] FAULT_INJECTION: forcing a failure. [ 1460.777453][T26039] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1460.797037][T26039] CPU: 0 UID: 0 PID: 26039 Comm: syz.4.3913 Tainted: G I syzkaller #0 PREEMPT(full) [ 1460.797092][T26039] Tainted: [I]=FIRMWARE_WORKAROUND [ 1460.797106][T26039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1460.797126][T26039] Call Trace: [ 1460.797138][T26039] [ 1460.797152][T26039] dump_stack_lvl+0x16c/0x1f0 [ 1460.797193][T26039] should_fail_ex+0x512/0x640 [ 1460.797248][T26039] get_futex_key+0x1d0/0x1560 [ 1460.797298][T26039] ? __pfx_get_futex_key+0x10/0x10 [ 1460.797357][T26039] futex_wake+0xea/0x530 [ 1460.797416][T26039] ? __pfx_futex_wake+0x10/0x10 [ 1460.797466][T26039] ? rcu_is_watching+0x12/0xc0 [ 1460.797520][T26039] do_futex+0x1e3/0x350 [ 1460.797566][T26039] ? __pfx_do_futex+0x10/0x10 [ 1460.797611][T26039] ? __fput+0x68d/0xb70 [ 1460.797656][T26039] ? __pfx___might_resched+0x10/0x10 [ 1460.797696][T26039] __x64_sys_futex+0x1e0/0x4c0 [ 1460.797744][T26039] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1460.797784][T26039] ? __pfx___x64_sys_futex+0x10/0x10 [ 1460.797847][T26039] do_syscall_64+0xcd/0xfa0 [ 1460.797888][T26039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.797922][T26039] RIP: 0033:0x7f6e05b8efc9 [ 1460.797948][T26039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1460.797982][T26039] RSP: 002b:00007f6e06add0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1460.798021][T26039] RAX: ffffffffffffffda RBX: 00007f6e05de5fa8 RCX: 00007f6e05b8efc9 [ 1460.798044][T26039] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6e05de5fac [ 1460.798066][T26039] RBP: 00007f6e05de5fa0 R08: 00007f6e06ade000 R09: 0000000000000000 [ 1460.798089][T26039] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1460.798111][T26039] R13: 00007f6e05de6038 R14: 00007ffe65322bc0 R15: 00007ffe65322ca8 [ 1460.798157][T26039] [ 1461.084258][T26043] usb usb15: usbfs: process 26043 (syz.4.3915) did not claim interface 0 before use [ 1461.754786][T26062] 0x000200000001-0xa29656a63616329 : "" [ 1461.764233][T26062] mtd: partition "" is out of reach -- disabled [ 1461.808876][T26062] ftl_cs: FTL header not found. [ 1462.971541][T26091] FAULT_INJECTION: forcing a failure. [ 1462.971541][T26091] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1463.027605][T26091] CPU: 1 UID: 0 PID: 26091 Comm: syz.2.3926 Tainted: G I syzkaller #0 PREEMPT(full) [ 1463.027662][T26091] Tainted: [I]=FIRMWARE_WORKAROUND [ 1463.027676][T26091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1463.027696][T26091] Call Trace: [ 1463.027707][T26091] [ 1463.027722][T26091] dump_stack_lvl+0x16c/0x1f0 [ 1463.027766][T26091] should_fail_ex+0x512/0x640 [ 1463.027825][T26091] get_futex_key+0x1d0/0x1560 [ 1463.027874][T26091] ? __pfx_get_futex_key+0x10/0x10 [ 1463.027932][T26091] futex_wake+0xea/0x530 [ 1463.027998][T26091] ? __pfx_futex_wake+0x10/0x10 [ 1463.028048][T26091] ? rcu_is_watching+0x12/0xc0 [ 1463.028101][T26091] do_futex+0x1e3/0x350 [ 1463.028148][T26091] ? __pfx_do_futex+0x10/0x10 [ 1463.028195][T26091] ? __fput+0x68d/0xb70 [ 1463.028239][T26091] ? __pfx___might_resched+0x10/0x10 [ 1463.028279][T26091] __x64_sys_futex+0x1e0/0x4c0 [ 1463.028326][T26091] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1463.028379][T26091] ? __pfx___x64_sys_futex+0x10/0x10 [ 1463.028444][T26091] do_syscall_64+0xcd/0xfa0 [ 1463.028484][T26091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.028518][T26091] RIP: 0033:0x7f00ba78efc9 [ 1463.028544][T26091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1463.028579][T26091] RSP: 002b:00007f00bb7120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1463.028611][T26091] RAX: ffffffffffffffda RBX: 00007f00ba9e5fa8 RCX: 00007f00ba78efc9 [ 1463.028634][T26091] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f00ba9e5fac [ 1463.028657][T26091] RBP: 00007f00ba9e5fa0 R08: 00007f00bb713000 R09: 0000000000000000 [ 1463.028678][T26091] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1463.028699][T26091] R13: 00007f00ba9e6038 R14: 00007ffc5a4c80e0 R15: 00007ffc5a4c81c8 [ 1463.028742][T26091] [ 1463.593554][T26097] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 1463.622998][T26100] FAULT_INJECTION: forcing a failure. [ 1463.622998][T26100] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.637201][T26100] CPU: 0 UID: 0 PID: 26100 Comm: syz.4.3929 Tainted: G I syzkaller #0 PREEMPT(full) [ 1463.637239][T26100] Tainted: [I]=FIRMWARE_WORKAROUND [ 1463.637248][T26100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1463.637263][T26100] Call Trace: [ 1463.637271][T26100] [ 1463.637281][T26100] dump_stack_lvl+0x16c/0x1f0 [ 1463.637311][T26100] should_fail_ex+0x512/0x640 [ 1463.637347][T26100] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1463.637375][T26100] should_failslab+0xc2/0x120 [ 1463.637408][T26100] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1463.637432][T26100] ? __pmd_alloc+0xbf/0x8b0 [ 1463.637468][T26100] ? __pmd_alloc+0xbf/0x8b0 [ 1463.637499][T26100] __pmd_alloc+0xbf/0x8b0 [ 1463.637534][T26100] __handle_mm_fault+0xada/0x2aa0 [ 1463.637586][T26100] ? mt_find+0x3e2/0xa20 [ 1463.637619][T26100] ? __pfx___handle_mm_fault+0x10/0x10 [ 1463.637655][T26100] ? __pfx_mt_find+0x10/0x10 [ 1463.637699][T26100] ? find_vma+0xbf/0x140 [ 1463.637731][T26100] ? __pfx_find_vma+0x10/0x10 [ 1463.637762][T26100] handle_mm_fault+0x589/0xd10 [ 1463.637801][T26100] ? __pkru_allows_pkey+0x11/0xb0 [ 1463.637840][T26100] do_user_addr_fault+0x7a6/0x1370 [ 1463.637866][T26100] ? rcu_is_watching+0x12/0xc0 [ 1463.637895][T26100] exc_page_fault+0x64/0xc0 [ 1463.637921][T26100] asm_exc_page_fault+0x26/0x30 [ 1463.637945][T26100] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1463.637981][T26100] Code: e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f [ 1463.638005][T26100] RSP: 0018:ffffc9000b1b7b80 EFLAGS: 00050202 [ 1463.638024][T26100] RAX: 000000000000000a RBX: 0000000000000001 RCX: 0000000000000001 [ 1463.638039][T26100] RDX: ffffed1006665d44 RSI: ffff88803332ea20 RDI: 0000000000000000 [ 1463.638054][T26100] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1006665d44 [ 1463.638074][T26100] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9000b1b7d88 [ 1463.638093][T26100] R13: 0000000000000001 R14: ffff88803332ea20 R15: 00007ffffffff000 [ 1463.638135][T26100] _copy_to_iter+0x383/0x1710 [ 1463.638192][T26100] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1463.638223][T26100] ? die_cpus_list_read+0x145/0x1d0 [ 1463.638251][T26100] ? __pfx__copy_to_iter+0x10/0x10 [ 1463.638291][T26100] ? find_held_lock+0x2b/0x80 [ 1463.638325][T26100] kernfs_fop_read_iter+0x3a6/0x610 [ 1463.638349][T26100] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1463.638379][T26100] vfs_read+0x8bf/0xcf0 [ 1463.638411][T26100] ? __pfx_vfs_read+0x10/0x10 [ 1463.638433][T26100] ? find_held_lock+0x2b/0x80 [ 1463.638476][T26100] __x64_sys_pread64+0x1eb/0x250 [ 1463.638504][T26100] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1463.638540][T26100] do_syscall_64+0xcd/0xfa0 [ 1463.638568][T26100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.638591][T26100] RIP: 0033:0x7f6e05b8efc9 [ 1463.638609][T26100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1463.638657][T26100] RSP: 002b:00007f6e06add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1463.638679][T26100] RAX: ffffffffffffffda RBX: 00007f6e05de5fa0 RCX: 00007f6e05b8efc9 [ 1463.638694][T26100] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1463.638708][T26100] RBP: 00007f6e06add090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.638728][T26100] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1463.638742][T26100] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1463.638774][T26100] [ 1464.366089][T26104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1464.576944][T24224] Bluetooth: hci4: command 0x0406 tx timeout [ 1465.052759][T26123] usb usb37: usbfs: process 26123 (syz.4.3936) did not claim interface 5 before use [ 1465.631603][T26135] FAULT_INJECTION: forcing a failure. [ 1465.631603][T26135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1465.698053][T26135] CPU: 1 UID: 0 PID: 26135 Comm: syz.4.3939 Tainted: G I syzkaller #0 PREEMPT(full) [ 1465.698107][T26135] Tainted: [I]=FIRMWARE_WORKAROUND [ 1465.698121][T26135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1465.698140][T26135] Call Trace: [ 1465.698152][T26135] [ 1465.698165][T26135] dump_stack_lvl+0x16c/0x1f0 [ 1465.698208][T26135] should_fail_ex+0x512/0x640 [ 1465.698265][T26135] should_fail_alloc_page+0xe7/0x130 [ 1465.698312][T26135] prepare_alloc_pages+0x3c2/0x610 [ 1465.698356][T26135] ? arch_stack_walk+0xa6/0x100 [ 1465.698394][T26135] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1465.698458][T26135] ? stack_trace_save+0x8e/0xc0 [ 1465.698496][T26135] ? __pfx_stack_trace_save+0x10/0x10 [ 1465.698546][T26135] ? stack_depot_save_flags+0x29/0x9c0 [ 1465.698599][T26135] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1465.698637][T26135] ? kasan_save_stack+0x42/0x60 [ 1465.698674][T26135] ? kasan_save_stack+0x33/0x60 [ 1465.698710][T26135] ? kasan_save_track+0x14/0x30 [ 1465.698746][T26135] ? __kasan_slab_alloc+0x89/0x90 [ 1465.698785][T26135] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1465.698817][T26135] ? __pmd_alloc+0xbf/0x8b0 [ 1465.698858][T26135] ? __handle_mm_fault+0xada/0x2aa0 [ 1465.698910][T26135] ? _copy_to_iter+0x383/0x1710 [ 1465.698960][T26135] ? kernfs_fop_read_iter+0x3a6/0x610 [ 1465.698990][T26135] ? vfs_read+0x8bf/0xcf0 [ 1465.699021][T26135] ? __x64_sys_pread64+0x1eb/0x250 [ 1465.699057][T26135] ? do_syscall_64+0xcd/0xfa0 [ 1465.699090][T26135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.699130][T26135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1465.699187][T26135] ? policy_nodemask+0xea/0x4e0 [ 1465.699237][T26135] alloc_pages_mpol+0x1fb/0x550 [ 1465.699283][T26135] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1465.699327][T26135] ? __lock_acquire+0xb8a/0x1c90 [ 1465.699380][T26135] ? __pfx_filemap_map_pages+0x10/0x10 [ 1465.699411][T26135] alloc_pages_noprof+0x131/0x390 [ 1465.699458][T26135] pte_alloc_one+0x1e/0x350 [ 1465.699496][T26135] __do_fault+0x320/0x490 [ 1465.699534][T26135] ? do_raw_spin_lock+0x12c/0x2b0 [ 1465.699588][T26135] ? __pfx_filemap_map_pages+0x10/0x10 [ 1465.699619][T26135] do_pte_missing+0x1a6/0x3ba0 [ 1465.699671][T26135] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 1465.699723][T26135] ? __pmd_alloc+0x64f/0x8b0 [ 1465.699771][T26135] __handle_mm_fault+0x1556/0x2aa0 [ 1465.699828][T26135] ? mt_find+0x3e2/0xa20 [ 1465.699869][T26135] ? __pfx___handle_mm_fault+0x10/0x10 [ 1465.699918][T26135] ? __pfx_mt_find+0x10/0x10 [ 1465.699980][T26135] ? find_vma+0xbf/0x140 [ 1465.700019][T26135] ? __pfx_find_vma+0x10/0x10 [ 1465.700063][T26135] handle_mm_fault+0x589/0xd10 [ 1465.700117][T26135] ? __pkru_allows_pkey+0x11/0xb0 [ 1465.700170][T26135] do_user_addr_fault+0x7a6/0x1370 [ 1465.700205][T26135] ? rcu_is_watching+0x12/0xc0 [ 1465.700246][T26135] exc_page_fault+0x64/0xc0 [ 1465.700283][T26135] asm_exc_page_fault+0x26/0x30 [ 1465.700314][T26135] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1465.700362][T26135] Code: e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f [ 1465.700395][T26135] RSP: 0018:ffffc90003187b80 EFLAGS: 00050202 [ 1465.700422][T26135] RAX: 000000000000000a RBX: 0000000000000001 RCX: 0000000000000001 [ 1465.700442][T26135] RDX: ffffed100ecf6f00 RSI: ffff8880767b7800 RDI: 0000000000000000 [ 1465.700464][T26135] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100ecf6f00 [ 1465.700486][T26135] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90003187d88 [ 1465.700507][T26135] R13: 0000000000000001 R14: ffff8880767b7800 R15: 00007ffffffff000 [ 1465.700558][T26135] _copy_to_iter+0x383/0x1710 [ 1465.700614][T26135] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1465.700655][T26135] ? die_cpus_list_read+0x145/0x1d0 [ 1465.700696][T26135] ? __pfx__copy_to_iter+0x10/0x10 [ 1465.700751][T26135] ? find_held_lock+0x2b/0x80 [ 1465.700799][T26135] kernfs_fop_read_iter+0x3a6/0x610 [ 1465.700834][T26135] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1465.700877][T26135] vfs_read+0x8bf/0xcf0 [ 1465.700920][T26135] ? __pfx_vfs_read+0x10/0x10 [ 1465.700952][T26135] ? find_held_lock+0x2b/0x80 [ 1465.701013][T26135] __x64_sys_pread64+0x1eb/0x250 [ 1465.701054][T26135] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1465.701106][T26135] do_syscall_64+0xcd/0xfa0 [ 1465.701145][T26135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.701177][T26135] RIP: 0033:0x7f6e05b8efc9 [ 1465.701203][T26135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1465.701235][T26135] RSP: 002b:00007f6e06add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1465.701265][T26135] RAX: ffffffffffffffda RBX: 00007f6e05de5fa0 RCX: 00007f6e05b8efc9 [ 1465.701287][T26135] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1465.701306][T26135] RBP: 00007f6e06add090 R08: 0000000000000000 R09: 0000000000000000 [ 1465.701327][T26135] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1465.701347][T26135] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1465.701393][T26135] [ 1467.267435][T26141] can0: slcan on ttyS2. [ 1467.529040][T26142] can0 (unregistered): slcan off ttyS2. [ 1468.349853][T26171] FAULT_INJECTION: forcing a failure. [ 1468.349853][T26171] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.538699][T26171] CPU: 0 UID: 0 PID: 26171 Comm: syz.2.3948 Tainted: G I syzkaller #0 PREEMPT(full) [ 1468.538752][T26171] Tainted: [I]=FIRMWARE_WORKAROUND [ 1468.538766][T26171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1468.538785][T26171] Call Trace: [ 1468.538797][T26171] [ 1468.538809][T26171] dump_stack_lvl+0x16c/0x1f0 [ 1468.538852][T26171] should_fail_ex+0x512/0x640 [ 1468.538901][T26171] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1468.538940][T26171] ? __pfx_filemap_map_pages+0x10/0x10 [ 1468.538971][T26171] should_failslab+0xc2/0x120 [ 1468.539017][T26171] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1468.539049][T26171] ? __lock_acquire+0xb8a/0x1c90 [ 1468.539092][T26171] ? ptlock_alloc+0x1f/0x70 [ 1468.539147][T26171] ? __pfx_filemap_map_pages+0x10/0x10 [ 1468.539178][T26171] ? ptlock_alloc+0x1f/0x70 [ 1468.539225][T26171] ptlock_alloc+0x1f/0x70 [ 1468.539275][T26171] pte_alloc_one+0x84/0x350 [ 1468.539313][T26171] __do_fault+0x320/0x490 [ 1468.539345][T26171] ? do_raw_spin_lock+0x12c/0x2b0 [ 1468.539405][T26171] ? __pfx_filemap_map_pages+0x10/0x10 [ 1468.539434][T26171] do_pte_missing+0x1a6/0x3ba0 [ 1468.539496][T26171] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 1468.539548][T26171] ? __pmd_alloc+0x64f/0x8b0 [ 1468.539597][T26171] __handle_mm_fault+0x1556/0x2aa0 [ 1468.539653][T26171] ? mt_find+0x3e2/0xa20 [ 1468.539695][T26171] ? __pfx___handle_mm_fault+0x10/0x10 [ 1468.539744][T26171] ? __pfx_mt_find+0x10/0x10 [ 1468.539808][T26171] ? find_vma+0xbf/0x140 [ 1468.539846][T26171] ? __pfx_find_vma+0x10/0x10 [ 1468.539889][T26171] handle_mm_fault+0x589/0xd10 [ 1468.539942][T26171] ? __pkru_allows_pkey+0x11/0xb0 [ 1468.539996][T26171] do_user_addr_fault+0x7a6/0x1370 [ 1468.540034][T26171] ? rcu_is_watching+0x12/0xc0 [ 1468.540074][T26171] exc_page_fault+0x64/0xc0 [ 1468.540111][T26171] asm_exc_page_fault+0x26/0x30 [ 1468.540143][T26171] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1468.540192][T26171] Code: e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f [ 1468.540224][T26171] RSP: 0018:ffffc90004b57b80 EFLAGS: 00050202 [ 1468.540252][T26171] RAX: 000000000000000a RBX: 0000000000000001 RCX: 0000000000000001 [ 1468.540273][T26171] RDX: ffffed100ecf5c70 RSI: ffff8880767ae380 RDI: 0000000000000000 [ 1468.540294][T26171] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100ecf5c70 [ 1468.540316][T26171] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90004b57d88 [ 1468.540337][T26171] R13: 0000000000000001 R14: ffff8880767ae380 R15: 00007ffffffff000 [ 1468.540382][T26171] _copy_to_iter+0x383/0x1710 [ 1468.540440][T26171] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1468.540493][T26171] ? die_cpus_list_read+0x145/0x1d0 [ 1468.540534][T26171] ? __pfx__copy_to_iter+0x10/0x10 [ 1468.540588][T26171] ? find_held_lock+0x2b/0x80 [ 1468.540638][T26171] kernfs_fop_read_iter+0x3a6/0x610 [ 1468.540674][T26171] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1468.540716][T26171] vfs_read+0x8bf/0xcf0 [ 1468.540761][T26171] ? __pfx_vfs_read+0x10/0x10 [ 1468.540794][T26171] ? find_held_lock+0x2b/0x80 [ 1468.540855][T26171] __x64_sys_pread64+0x1eb/0x250 [ 1468.540896][T26171] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1468.540948][T26171] do_syscall_64+0xcd/0xfa0 [ 1468.540987][T26171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.541020][T26171] RIP: 0033:0x7f00ba78efc9 [ 1468.541046][T26171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.541077][T26171] RSP: 002b:00007f00bb712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1468.541108][T26171] RAX: ffffffffffffffda RBX: 00007f00ba9e5fa0 RCX: 00007f00ba78efc9 [ 1468.541131][T26171] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1468.541152][T26171] RBP: 00007f00bb712090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.541172][T26171] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1468.541192][T26171] R13: 00007f00ba9e6038 R14: 00007f00ba9e5fa0 R15: 00007ffc5a4c81c8 [ 1468.541239][T26171] [ 1468.944859][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.816557][T26206] netlink: 'syz.5.3956': attribute type 2 has an invalid length. [ 1470.871125][T26207] ima: policy update failed [ 1470.879040][ T30] audit: type=1802 audit(4294967433.153:25): pid=26207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3957" res=0 errno=0 [ 1471.700313][T26225] random: crng reseeded on system resumption [ 1473.204245][T26258] FAULT_INJECTION: forcing a failure. [ 1473.204245][T26258] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.235105][T26258] CPU: 0 UID: 0 PID: 26258 Comm: syz.4.3971 Tainted: G I syzkaller #0 PREEMPT(full) [ 1473.235164][T26258] Tainted: [I]=FIRMWARE_WORKAROUND [ 1473.235178][T26258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1473.235199][T26258] Call Trace: [ 1473.235212][T26258] [ 1473.235225][T26258] dump_stack_lvl+0x16c/0x1f0 [ 1473.235269][T26258] should_fail_ex+0x512/0x640 [ 1473.235320][T26258] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1473.235360][T26258] should_failslab+0xc2/0x120 [ 1473.235406][T26258] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1473.235442][T26258] ? vm_area_alloc+0x1f/0x160 [ 1473.235515][T26258] ? vm_area_alloc+0x1f/0x160 [ 1473.235567][T26258] vm_area_alloc+0x1f/0x160 [ 1473.235619][T26258] __mmap_region+0xf85/0x27a0 [ 1473.235655][T26258] ? find_held_lock+0x2b/0x80 [ 1473.235691][T26258] ? __pfx___mmap_region+0x10/0x10 [ 1473.235730][T26258] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1473.235770][T26258] ? rcu_is_watching+0x12/0xc0 [ 1473.235805][T26258] ? finish_task_switch.isra.0+0x221/0xc10 [ 1473.235843][T26258] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 1473.235918][T26258] ? __pfx___schedule+0x10/0x10 [ 1473.236003][T26258] ? trace_cap_capable+0x18d/0x200 [ 1473.236066][T26258] mmap_region+0x1ab/0x3f0 [ 1473.236103][T26258] ? __get_unmapped_area+0x267/0x440 [ 1473.236152][T26258] do_mmap+0xa3e/0x1210 [ 1473.236204][T26258] ? __pfx_do_mmap+0x10/0x10 [ 1473.236248][T26258] ? __pfx_down_write_killable+0x10/0x10 [ 1473.236302][T26258] vm_mmap_pgoff+0x29e/0x470 [ 1473.236354][T26258] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1473.236409][T26258] ? __x64_sys_futex+0x1e0/0x4c0 [ 1473.236454][T26258] ? __x64_sys_futex+0x1e9/0x4c0 [ 1473.236508][T26258] ksys_mmap_pgoff+0x7d/0x5c0 [ 1473.236549][T26258] ? xfd_validate_state+0x61/0x180 [ 1473.236596][T26258] ? __pfx_do_writev+0x10/0x10 [ 1473.236635][T26258] __x64_sys_mmap+0x125/0x190 [ 1473.236691][T26258] do_syscall_64+0xcd/0xfa0 [ 1473.236742][T26258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.236778][T26258] RIP: 0033:0x7f6e05b8efc9 [ 1473.236804][T26258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1473.236839][T26258] RSP: 002b:00007f6e06add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1473.236872][T26258] RAX: ffffffffffffffda RBX: 00007f6e05de5fa0 RCX: 00007f6e05b8efc9 [ 1473.236895][T26258] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 1473.236917][T26258] RBP: 00007f6e05c11f91 R08: 0000000000000405 R09: 0000000000008000 [ 1473.236939][T26258] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1473.236960][T26258] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1473.237007][T26258] [ 1474.094666][T26270] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1477.681764][T26297] openvswitch: netlink: Key type 261 is out of range max 32 [ 1478.476026][T26310] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1479.971224][T26338] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 1480.395207][T26347] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3994'. [ 1482.136893][T26366] kvm: kvm [26365]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000077) [ 1482.270251][T26372] random: crng reseeded on system resumption [ 1483.949899][T26403] FAULT_INJECTION: forcing a failure. [ 1483.949899][T26403] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.978009][T26403] CPU: 1 UID: 0 PID: 26403 Comm: syz.2.4010 Tainted: G I syzkaller #0 PREEMPT(full) [ 1483.978063][T26403] Tainted: [I]=FIRMWARE_WORKAROUND [ 1483.978077][T26403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1483.978097][T26403] Call Trace: [ 1483.978108][T26403] [ 1483.978120][T26403] dump_stack_lvl+0x16c/0x1f0 [ 1483.978161][T26403] should_fail_ex+0x512/0x640 [ 1483.978210][T26403] ? fs_reclaim_acquire+0xae/0x150 [ 1483.978258][T26403] should_failslab+0xc2/0x120 [ 1483.978304][T26403] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1483.978338][T26403] ? __pfx_map_id_range_down+0x10/0x10 [ 1483.978391][T26403] ? security_inode_alloc+0x3b/0x2b0 [ 1483.978449][T26403] ? security_inode_alloc+0x3b/0x2b0 [ 1483.978497][T26403] security_inode_alloc+0x3b/0x2b0 [ 1483.978549][T26403] inode_init_always_gfp+0xce4/0x1030 [ 1483.978593][T26403] alloc_inode+0x86/0x240 [ 1483.978649][T26403] path_from_stashed+0x25b/0x750 [ 1483.978685][T26403] ? do_raw_spin_unlock+0x172/0x230 [ 1483.978748][T26403] ns_get_path+0x60/0x80 [ 1483.978782][T26403] proc_ns_get_link+0x121/0x230 [ 1483.978824][T26403] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1483.978870][T26403] ? atime_needs_update+0x8b/0x710 [ 1483.978922][T26403] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1483.978964][T26403] step_into+0x196c/0x21a0 [ 1483.979005][T26403] ? __pfx_step_into+0x10/0x10 [ 1483.979035][T26403] ? find_held_lock+0x2b/0x80 [ 1483.979083][T26403] path_openat+0x6db/0x2cb0 [ 1483.979134][T26403] ? __pfx_path_openat+0x10/0x10 [ 1483.979173][T26403] ? __lock_acquire+0xb8a/0x1c90 [ 1483.979223][T26403] do_filp_open+0x20b/0x470 [ 1483.979260][T26403] ? __pfx_do_filp_open+0x10/0x10 [ 1483.979329][T26403] ? alloc_fd+0x471/0x7d0 [ 1483.979374][T26403] do_sys_openat2+0x11b/0x1d0 [ 1483.979424][T26403] ? __pfx_do_sys_openat2+0x10/0x10 [ 1483.979487][T26403] __x64_sys_openat+0x174/0x210 [ 1483.979538][T26403] ? __pfx___x64_sys_openat+0x10/0x10 [ 1483.979607][T26403] do_syscall_64+0xcd/0xfa0 [ 1483.979656][T26403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.979692][T26403] RIP: 0033:0x7f00ba78d810 [ 1483.979720][T26403] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1483.979753][T26403] RSP: 002b:00007f00bb711f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1483.979786][T26403] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f00ba78d810 [ 1483.979810][T26403] RDX: 0000000000000002 RSI: 00007f00bb711fa0 RDI: 00000000ffffff9c [ 1483.979830][T26403] RBP: 00007f00bb711fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.979851][T26403] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1483.979873][T26403] R13: 00007f00ba9e6038 R14: 00007f00ba9e5fa0 R15: 00007ffc5a4c81c8 [ 1483.979917][T26403] [ 1484.956320][T26419] usb usb2: usbfs: process 26419 (syz.5.4015) did not claim interface 0 before use [ 1485.925567][T26438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4021'. [ 1485.957126][T26438] hsr_slave_0: left promiscuous mode [ 1485.975657][T26438] hsr_slave_1: left promiscuous mode [ 1486.389951][T26447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1486.443122][T26449] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1486.533527][T26454] FAULT_INJECTION: forcing a failure. [ 1486.533527][T26454] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.574611][T26454] CPU: 1 UID: 0 PID: 26454 Comm: syz.5.4024 Tainted: G I syzkaller #0 PREEMPT(full) [ 1486.574666][T26454] Tainted: [I]=FIRMWARE_WORKAROUND [ 1486.574679][T26454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1486.574700][T26454] Call Trace: [ 1486.574711][T26454] [ 1486.574725][T26454] dump_stack_lvl+0x16c/0x1f0 [ 1486.574768][T26454] should_fail_ex+0x512/0x640 [ 1486.574819][T26454] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1486.574861][T26454] should_failslab+0xc2/0x120 [ 1486.574905][T26454] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1486.574942][T26454] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1486.574986][T26454] ? __d_alloc+0x32/0xae0 [ 1486.575031][T26454] ? __d_alloc+0x32/0xae0 [ 1486.575067][T26454] __d_alloc+0x32/0xae0 [ 1486.575111][T26454] path_from_stashed+0x427/0x750 [ 1486.575145][T26454] ? do_raw_spin_unlock+0x172/0x230 [ 1486.575208][T26454] ns_get_path+0x60/0x80 [ 1486.575243][T26454] proc_ns_get_link+0x121/0x230 [ 1486.575285][T26454] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1486.575332][T26454] ? atime_needs_update+0x8b/0x710 [ 1486.575395][T26454] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1486.575438][T26454] step_into+0x196c/0x21a0 [ 1486.575480][T26454] ? __pfx_step_into+0x10/0x10 [ 1486.575511][T26454] ? find_held_lock+0x2b/0x80 [ 1486.575560][T26454] path_openat+0x6db/0x2cb0 [ 1486.575611][T26454] ? __pfx_path_openat+0x10/0x10 [ 1486.575651][T26454] ? __lock_acquire+0xb8a/0x1c90 [ 1486.575701][T26454] do_filp_open+0x20b/0x470 [ 1486.575739][T26454] ? __pfx_do_filp_open+0x10/0x10 [ 1486.575807][T26454] ? alloc_fd+0x471/0x7d0 [ 1486.575853][T26454] do_sys_openat2+0x11b/0x1d0 [ 1486.575903][T26454] ? __pfx_do_sys_openat2+0x10/0x10 [ 1486.575969][T26454] __x64_sys_openat+0x174/0x210 [ 1486.576021][T26454] ? __pfx___x64_sys_openat+0x10/0x10 [ 1486.576089][T26454] do_syscall_64+0xcd/0xfa0 [ 1486.576129][T26454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.576164][T26454] RIP: 0033:0x7f20d3f8d810 [ 1486.576191][T26454] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1486.576224][T26454] RSP: 002b:00007f20d4eecf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1486.576256][T26454] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20d3f8d810 [ 1486.576279][T26454] RDX: 0000000000000002 RSI: 00007f20d4eecfa0 RDI: 00000000ffffff9c [ 1486.576322][T26454] RBP: 00007f20d4eecfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.576352][T26454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1486.576373][T26454] R13: 00007f20d41e6128 R14: 00007f20d41e6090 R15: 00007ffe50a6ced8 [ 1486.576419][T26454] [ 1487.973402][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.988714][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.350881][T26485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4029'. [ 1490.258776][T26499] FAULT_INJECTION: forcing a failure. [ 1490.258776][T26499] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.272653][T26499] CPU: 0 UID: 0 PID: 26499 Comm: syz.5.4033 Tainted: G I syzkaller #0 PREEMPT(full) [ 1490.272708][T26499] Tainted: [I]=FIRMWARE_WORKAROUND [ 1490.272722][T26499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1490.272743][T26499] Call Trace: [ 1490.272754][T26499] [ 1490.272768][T26499] dump_stack_lvl+0x16c/0x1f0 [ 1490.272811][T26499] should_fail_ex+0x512/0x640 [ 1490.272860][T26499] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1490.272920][T26499] should_failslab+0xc2/0x120 [ 1490.272975][T26499] __kmalloc_cache_noprof+0x72/0x780 [ 1490.273032][T26499] ? snd_seq_pool_new+0x44/0x230 [ 1490.273092][T26499] ? snd_seq_pool_new+0x44/0x230 [ 1490.273135][T26499] ? __pfx_snd_seq_open+0x10/0x10 [ 1490.273168][T26499] snd_seq_pool_new+0x44/0x230 [ 1490.273217][T26499] snd_seq_fifo_new+0x5a/0x260 [ 1490.273267][T26499] snd_seq_open+0x15c/0x590 [ 1490.273305][T26499] ? __pfx_snd_seq_open+0x10/0x10 [ 1490.273339][T26499] snd_open+0x22d/0x4c0 [ 1490.273380][T26499] ? __pfx_snd_open+0x10/0x10 [ 1490.273418][T26499] chrdev_open+0x234/0x6a0 [ 1490.273457][T26499] ? __pfx_apparmor_file_open+0x10/0x10 [ 1490.273506][T26499] ? __pfx_chrdev_open+0x10/0x10 [ 1490.273550][T26499] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1490.273597][T26499] do_dentry_open+0x982/0x1530 [ 1490.273638][T26499] ? __pfx_chrdev_open+0x10/0x10 [ 1490.273688][T26499] vfs_open+0x82/0x3f0 [ 1490.273742][T26499] path_openat+0x1de4/0x2cb0 [ 1490.273794][T26499] ? __pfx_path_openat+0x10/0x10 [ 1490.273834][T26499] ? __lock_acquire+0xb8a/0x1c90 [ 1490.273887][T26499] do_filp_open+0x20b/0x470 [ 1490.273924][T26499] ? __pfx_do_filp_open+0x10/0x10 [ 1490.274005][T26499] ? alloc_fd+0x471/0x7d0 [ 1490.274053][T26499] do_sys_openat2+0x11b/0x1d0 [ 1490.274102][T26499] ? __pfx_do_sys_openat2+0x10/0x10 [ 1490.274170][T26499] __x64_sys_openat+0x174/0x210 [ 1490.274221][T26499] ? __pfx___x64_sys_openat+0x10/0x10 [ 1490.274290][T26499] do_syscall_64+0xcd/0xfa0 [ 1490.274331][T26499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.274366][T26499] RIP: 0033:0x7f20d3f8efc9 [ 1490.274395][T26499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.274429][T26499] RSP: 002b:00007f20d4f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1490.274462][T26499] RAX: ffffffffffffffda RBX: 00007f20d41e5fa0 RCX: 00007f20d3f8efc9 [ 1490.274485][T26499] RDX: 0000000000086403 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1490.274508][T26499] RBP: 00007f20d4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1490.274529][T26499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.274549][T26499] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1490.274592][T26499] [ 1495.169188][T26593] netlink: 'syz.2.4054': attribute type 1 has an invalid length. [ 1497.785470][T26610] FAULT_INJECTION: forcing a failure. [ 1497.785470][T26610] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1497.924778][T26610] CPU: 1 UID: 7 PID: 26610 Comm: syz.4.4057 Tainted: G I syzkaller #0 PREEMPT(full) [ 1497.924838][T26610] Tainted: [I]=FIRMWARE_WORKAROUND [ 1497.924851][T26610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1497.924871][T26610] Call Trace: [ 1497.924882][T26610] [ 1497.924898][T26610] dump_stack_lvl+0x16c/0x1f0 [ 1497.924941][T26610] should_fail_ex+0x512/0x640 [ 1497.925006][T26610] get_futex_key+0x1d0/0x1560 [ 1497.925056][T26610] ? __pfx_get_futex_key+0x10/0x10 [ 1497.925105][T26610] ? __mutex_trylock_common+0xe9/0x250 [ 1497.925168][T26610] futex_wake+0xea/0x530 [ 1497.925234][T26610] ? __pfx_futex_wake+0x10/0x10 [ 1497.925279][T26610] ? __lock_acquire+0xb8a/0x1c90 [ 1497.925340][T26610] do_futex+0x1e3/0x350 [ 1497.925384][T26610] ? __pfx_do_futex+0x10/0x10 [ 1497.925424][T26610] ? __might_fault+0xe3/0x190 [ 1497.925469][T26610] mm_release+0x24e/0x300 [ 1497.925505][T26610] do_exit+0x68e/0x2bf0 [ 1497.925557][T26610] ? __pfx_do_exit+0x10/0x10 [ 1497.925603][T26610] ? do_raw_spin_lock+0x12c/0x2b0 [ 1497.925651][T26610] ? find_held_lock+0x2b/0x80 [ 1497.925691][T26610] do_group_exit+0xd3/0x2a0 [ 1497.925739][T26610] get_signal+0x2671/0x26d0 [ 1497.925791][T26610] ? __pfx_get_signal+0x10/0x10 [ 1497.925828][T26610] ? do_futex+0x122/0x350 [ 1497.925873][T26610] ? __pfx_do_futex+0x10/0x10 [ 1497.925921][T26610] arch_do_signal_or_restart+0x8f/0x790 [ 1497.925964][T26610] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1497.926014][T26610] ? set_cred_ucounts+0x10f/0x200 [ 1497.926077][T26610] exit_to_user_mode_loop+0x85/0x130 [ 1497.926130][T26610] do_syscall_64+0x426/0xfa0 [ 1497.926169][T26610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.926211][T26610] RIP: 0033:0x7f6e05b8efc9 [ 1497.926237][T26610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.926270][T26610] RSP: 002b:00007f6e06a9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1497.926302][T26610] RAX: fffffffffffffe00 RBX: 00007f6e05de6188 RCX: 00007f6e05b8efc9 [ 1497.926325][T26610] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6e05de6188 [ 1497.926346][T26610] RBP: 00007f6e05de6180 R08: 0000000000000000 R09: 0000000000000000 [ 1497.926367][T26610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.926388][T26610] R13: 00007f6e05de6218 R14: 00007ffe65322bc0 R15: 00007ffe65322ca8 [ 1497.926433][T26610] [ 1498.749276][T26632] zswap: compressor not available [ 1499.197245][T26639] netlink: 'syz.4.4066': attribute type 1 has an invalid length. [ 1499.439070][T26648] netlink: 'syz.3.4069': attribute type 1 has an invalid length. [ 1502.538739][T26696] netlink: 'syz.5.4080': attribute type 1 has an invalid length. [ 1503.572000][T26703] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 1504.291105][T26725] FAULT_INJECTION: forcing a failure. [ 1504.291105][T26725] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.349662][T26725] CPU: 1 UID: 0 PID: 26725 Comm: syz.2.4089 Tainted: G I syzkaller #0 PREEMPT(full) [ 1504.349720][T26725] Tainted: [I]=FIRMWARE_WORKAROUND [ 1504.349735][T26725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1504.349756][T26725] Call Trace: [ 1504.349768][T26725] [ 1504.349781][T26725] dump_stack_lvl+0x16c/0x1f0 [ 1504.349826][T26725] should_fail_ex+0x512/0x640 [ 1504.349893][T26725] ? __kmalloc_noprof+0xca/0x880 [ 1504.349950][T26725] should_failslab+0xc2/0x120 [ 1504.349997][T26725] __kmalloc_noprof+0xdd/0x880 [ 1504.350048][T26725] ? find_held_lock+0x2b/0x80 [ 1504.350081][T26725] ? create_ruleset+0x21/0x140 [ 1504.350137][T26725] ? create_ruleset+0x21/0x140 [ 1504.350183][T26725] create_ruleset+0x21/0x140 [ 1504.350233][T26725] landlock_create_ruleset+0x77/0x230 [ 1504.350290][T26725] __do_sys_landlock_create_ruleset+0x255/0x4e0 [ 1504.350343][T26725] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 1504.350410][T26725] do_syscall_64+0xcd/0xfa0 [ 1504.350450][T26725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.350483][T26725] RIP: 0033:0x7f00ba78efc9 [ 1504.350509][T26725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1504.350542][T26725] RSP: 002b:00007f00bb712038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 1504.350575][T26725] RAX: ffffffffffffffda RBX: 00007f00ba9e5fa0 RCX: 00007f00ba78efc9 [ 1504.350597][T26725] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000000 [ 1504.350618][T26725] RBP: 00007f00ba811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1504.350639][T26725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.350660][T26725] R13: 00007f00ba9e6038 R14: 00007f00ba9e5fa0 R15: 00007ffc5a4c81c8 [ 1504.350705][T26725] [ 1504.975905][T26733] random: crng reseeded on system resumption [ 1507.970116][T26807] netlink: 'syz.4.4113': attribute type 1 has an invalid length. [ 1510.665385][T26872] FAULT_INJECTION: forcing a failure. [ 1510.665385][T26872] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.678450][T26872] CPU: 0 UID: 0 PID: 26872 Comm: syz.5.4130 Tainted: G I syzkaller #0 PREEMPT(full) [ 1510.678490][T26872] Tainted: [I]=FIRMWARE_WORKAROUND [ 1510.678499][T26872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1510.678514][T26872] Call Trace: [ 1510.678521][T26872] [ 1510.678531][T26872] dump_stack_lvl+0x16c/0x1f0 [ 1510.678561][T26872] should_fail_ex+0x512/0x640 [ 1510.678597][T26872] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1510.678627][T26872] should_failslab+0xc2/0x120 [ 1510.678660][T26872] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1510.678685][T26872] ? __lock_acquire+0xb8a/0x1c90 [ 1510.678718][T26872] ? __d_alloc+0x32/0xae0 [ 1510.678751][T26872] ? __d_alloc+0x32/0xae0 [ 1510.678776][T26872] __d_alloc+0x32/0xae0 [ 1510.678806][T26872] d_alloc_parallel+0x111/0x1510 [ 1510.678850][T26872] ? find_held_lock+0x2b/0x80 [ 1510.678876][T26872] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1510.678921][T26872] ? __d_lookup+0x266/0x4a0 [ 1510.678990][T26872] lookup_open.isra.0+0x665/0x1580 [ 1510.679046][T26872] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1510.679104][T26872] ? lookup_fast+0x156/0x610 [ 1510.679130][T26872] path_openat+0x893/0x2cb0 [ 1510.679166][T26872] ? __pfx_path_openat+0x10/0x10 [ 1510.679195][T26872] ? __lock_acquire+0xb8a/0x1c90 [ 1510.679231][T26872] do_filp_open+0x20b/0x470 [ 1510.679259][T26872] ? __pfx_do_filp_open+0x10/0x10 [ 1510.679296][T26872] ? __pfx_kfree_link+0x10/0x10 [ 1510.679339][T26872] ? alloc_fd+0x471/0x7d0 [ 1510.679371][T26872] do_sys_openat2+0x11b/0x1d0 [ 1510.679407][T26872] ? __pfx_do_sys_openat2+0x10/0x10 [ 1510.679454][T26872] __x64_sys_openat+0x174/0x210 [ 1510.679490][T26872] ? __pfx___x64_sys_openat+0x10/0x10 [ 1510.679539][T26872] do_syscall_64+0xcd/0xfa0 [ 1510.679568][T26872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.679594][T26872] RIP: 0033:0x7f20d3f8d810 [ 1510.679613][T26872] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1510.679637][T26872] RSP: 002b:00007f20d4f0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1510.679660][T26872] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20d3f8d810 [ 1510.679676][T26872] RDX: 0000000000000000 RSI: 00007f20d4f0dfa0 RDI: 00000000ffffff9c [ 1510.679690][T26872] RBP: 00007f20d4f0dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1510.679705][T26872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1510.679719][T26872] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1510.679751][T26872] [ 1511.936920][T26896] netlink: zone id is out of range [ 1511.942562][T26896] netlink: zone id is out of range [ 1511.960891][T26896] netlink: zone id is out of range [ 1511.972549][T26896] netlink: zone id is out of range [ 1511.985612][T26896] netlink: zone id is out of range [ 1511.991298][T26896] netlink: zone id is out of range [ 1511.999662][T26896] netlink: zone id is out of range [ 1512.012862][T26896] netlink: zone id is out of range [ 1512.019760][T26896] netlink: zone id is out of range [ 1512.068594][T26896] netlink: zone id is out of range [ 1512.586826][T26907] FAULT_INJECTION: forcing a failure. [ 1512.586826][T26907] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.600341][T26907] CPU: 0 UID: 0 PID: 26907 Comm: syz.4.4139 Tainted: G I syzkaller #0 PREEMPT(full) [ 1512.600395][T26907] Tainted: [I]=FIRMWARE_WORKAROUND [ 1512.600409][T26907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1512.600429][T26907] Call Trace: [ 1512.600442][T26907] [ 1512.600454][T26907] dump_stack_lvl+0x16c/0x1f0 [ 1512.600498][T26907] should_fail_ex+0x512/0x640 [ 1512.600549][T26907] ? __kmalloc_noprof+0xca/0x880 [ 1512.600607][T26907] should_failslab+0xc2/0x120 [ 1512.600655][T26907] __kmalloc_noprof+0xdd/0x880 [ 1512.600718][T26907] ? alloc_pipe_info+0x1ec/0x590 [ 1512.600767][T26907] ? alloc_pipe_info+0x1ec/0x590 [ 1512.600807][T26907] alloc_pipe_info+0x1ec/0x590 [ 1512.600853][T26907] create_pipe_files+0x8c/0x9a0 [ 1512.600900][T26907] do_pipe2+0xaf/0x1c0 [ 1512.600939][T26907] ? __pfx_do_pipe2+0x10/0x10 [ 1512.600982][T26907] ? xfd_validate_state+0x61/0x180 [ 1512.601042][T26907] __x64_sys_pipe2+0x54/0x80 [ 1512.601084][T26907] do_syscall_64+0xcd/0xfa0 [ 1512.601124][T26907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.601158][T26907] RIP: 0033:0x7f6e05b8efc9 [ 1512.601185][T26907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.601218][T26907] RSP: 002b:00007f6e06add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1512.601252][T26907] RAX: ffffffffffffffda RBX: 00007f6e05de5fa0 RCX: 00007f6e05b8efc9 [ 1512.601275][T26907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1512.601297][T26907] RBP: 00007f6e05c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1512.601319][T26907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1512.601340][T26907] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1512.601387][T26907] [ 1512.603805][T26907] netlink: 'syz.4.4139': attribute type 5 has an invalid length. [ 1512.817989][T26907] netlink: 'syz.4.4139': attribute type 1 has an invalid length. [ 1512.878442][T26910] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4140'. [ 1513.286553][T26919] FAULT_INJECTION: forcing a failure. [ 1513.286553][T26919] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.325390][T26919] CPU: 1 UID: 0 PID: 26919 Comm: syz.4.4141 Tainted: G I syzkaller #0 PREEMPT(full) [ 1513.325444][T26919] Tainted: [I]=FIRMWARE_WORKAROUND [ 1513.325457][T26919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1513.325479][T26919] Call Trace: [ 1513.325490][T26919] [ 1513.325503][T26919] dump_stack_lvl+0x16c/0x1f0 [ 1513.325546][T26919] should_fail_ex+0x512/0x640 [ 1513.325594][T26919] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1513.325635][T26919] should_failslab+0xc2/0x120 [ 1513.325691][T26919] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1513.325726][T26919] ? __lock_acquire+0xb8a/0x1c90 [ 1513.325772][T26919] ? __d_alloc+0x32/0xae0 [ 1513.325819][T26919] ? __d_alloc+0x32/0xae0 [ 1513.325854][T26919] __d_alloc+0x32/0xae0 [ 1513.325897][T26919] d_alloc_parallel+0x111/0x1510 [ 1513.325959][T26919] ? find_held_lock+0x2b/0x80 [ 1513.325994][T26919] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1513.326048][T26919] ? __d_lookup+0x266/0x4a0 [ 1513.326108][T26919] lookup_open.isra.0+0x665/0x1580 [ 1513.326171][T26919] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1513.326254][T26919] ? lookup_fast+0x156/0x610 [ 1513.326291][T26919] path_openat+0x893/0x2cb0 [ 1513.326344][T26919] ? __pfx_path_openat+0x10/0x10 [ 1513.326384][T26919] ? __lock_acquire+0xb8a/0x1c90 [ 1513.326435][T26919] do_filp_open+0x20b/0x470 [ 1513.326472][T26919] ? __pfx_do_filp_open+0x10/0x10 [ 1513.326525][T26919] ? __pfx_kfree_link+0x10/0x10 [ 1513.326586][T26919] ? alloc_fd+0x471/0x7d0 [ 1513.326631][T26919] do_sys_openat2+0x11b/0x1d0 [ 1513.326689][T26919] ? __pfx_do_sys_openat2+0x10/0x10 [ 1513.326756][T26919] __x64_sys_openat+0x174/0x210 [ 1513.326801][T26919] ? __pfx___x64_sys_openat+0x10/0x10 [ 1513.326858][T26919] do_syscall_64+0xcd/0xfa0 [ 1513.326893][T26919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.326921][T26919] RIP: 0033:0x7f6e05b8d810 [ 1513.326945][T26919] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1513.326973][T26919] RSP: 002b:00007f6e06adcf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1513.327000][T26919] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e05b8d810 [ 1513.327018][T26919] RDX: 0000000000000000 RSI: 00007f6e06adcfa0 RDI: 00000000ffffff9c [ 1513.327037][T26919] RBP: 00007f6e06adcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1513.327056][T26919] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1513.327074][T26919] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1513.327112][T26919] [ 1514.374915][T26937] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 1515.896502][T26957] FAULT_INJECTION: forcing a failure. [ 1515.896502][T26957] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.926616][T26957] CPU: 0 UID: 0 PID: 26957 Comm: syz.4.4151 Tainted: G I syzkaller #0 PREEMPT(full) [ 1515.926672][T26957] Tainted: [I]=FIRMWARE_WORKAROUND [ 1515.926687][T26957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1515.926708][T26957] Call Trace: [ 1515.926720][T26957] [ 1515.926734][T26957] dump_stack_lvl+0x16c/0x1f0 [ 1515.926778][T26957] should_fail_ex+0x512/0x640 [ 1515.926828][T26957] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1515.926871][T26957] should_failslab+0xc2/0x120 [ 1515.926917][T26957] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1515.926952][T26957] ? __lock_acquire+0xb8a/0x1c90 [ 1515.927001][T26957] ? __d_alloc+0x32/0xae0 [ 1515.927047][T26957] ? __d_alloc+0x32/0xae0 [ 1515.927084][T26957] __d_alloc+0x32/0xae0 [ 1515.927128][T26957] d_alloc_parallel+0x111/0x1510 [ 1515.927191][T26957] ? find_held_lock+0x2b/0x80 [ 1515.927228][T26957] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1515.927282][T26957] ? __d_lookup+0x266/0x4a0 [ 1515.927342][T26957] lookup_open.isra.0+0x665/0x1580 [ 1515.927404][T26957] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1515.927486][T26957] ? lookup_fast+0x156/0x610 [ 1515.927522][T26957] path_openat+0x893/0x2cb0 [ 1515.927582][T26957] ? __pfx_path_openat+0x10/0x10 [ 1515.927622][T26957] ? __lock_acquire+0xb8a/0x1c90 [ 1515.927673][T26957] do_filp_open+0x20b/0x470 [ 1515.927712][T26957] ? __pfx_do_filp_open+0x10/0x10 [ 1515.927766][T26957] ? __pfx_kfree_link+0x10/0x10 [ 1515.927828][T26957] ? alloc_fd+0x471/0x7d0 [ 1515.927875][T26957] do_sys_openat2+0x11b/0x1d0 [ 1515.927924][T26957] ? __pfx_do_sys_openat2+0x10/0x10 [ 1515.927991][T26957] __x64_sys_openat+0x174/0x210 [ 1515.928042][T26957] ? __pfx___x64_sys_openat+0x10/0x10 [ 1515.928113][T26957] do_syscall_64+0xcd/0xfa0 [ 1515.928155][T26957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.928190][T26957] RIP: 0033:0x7f6e05b8d810 [ 1515.928217][T26957] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1515.928251][T26957] RSP: 002b:00007f6e06adcf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1515.928285][T26957] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e05b8d810 [ 1515.928309][T26957] RDX: 0000000000000000 RSI: 00007f6e06adcfa0 RDI: 00000000ffffff9c [ 1515.928330][T26957] RBP: 00007f6e06adcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1515.928352][T26957] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1515.928373][T26957] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1515.928421][T26957] [ 1516.617508][T18667] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 1520.538412][T27035] netlink: 'syz.3.4167': attribute type 1 has an invalid length. [ 1522.320925][T27060] FAULT_INJECTION: forcing a failure. [ 1522.320925][T27060] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.333842][T27060] CPU: 1 UID: 0 PID: 27060 Comm: syz.4.4174 Tainted: G I syzkaller #0 PREEMPT(full) [ 1522.333894][T27060] Tainted: [I]=FIRMWARE_WORKAROUND [ 1522.333908][T27060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1522.333927][T27060] Call Trace: [ 1522.333940][T27060] [ 1522.333954][T27060] dump_stack_lvl+0x16c/0x1f0 [ 1522.333995][T27060] should_fail_ex+0x512/0x640 [ 1522.334051][T27060] ? fs_reclaim_acquire+0xae/0x150 [ 1522.334095][T27060] should_failslab+0xc2/0x120 [ 1522.334138][T27060] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1522.334169][T27060] ? __pfx_map_id_range_down+0x10/0x10 [ 1522.334219][T27060] ? security_inode_alloc+0x3b/0x2b0 [ 1522.334275][T27060] ? security_inode_alloc+0x3b/0x2b0 [ 1522.334322][T27060] security_inode_alloc+0x3b/0x2b0 [ 1522.334370][T27060] inode_init_always_gfp+0xce4/0x1030 [ 1522.334411][T27060] alloc_inode+0x86/0x240 [ 1522.334453][T27060] path_from_stashed+0x25b/0x750 [ 1522.334486][T27060] ? do_raw_spin_unlock+0x172/0x230 [ 1522.334545][T27060] ns_get_path+0x60/0x80 [ 1522.334578][T27060] proc_ns_get_link+0x121/0x230 [ 1522.334618][T27060] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1522.334662][T27060] ? atime_needs_update+0x8b/0x710 [ 1522.334709][T27060] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1522.334749][T27060] step_into+0x196c/0x21a0 [ 1522.334787][T27060] ? __pfx_step_into+0x10/0x10 [ 1522.334816][T27060] ? find_held_lock+0x2b/0x80 [ 1522.334862][T27060] path_openat+0x6db/0x2cb0 [ 1522.334909][T27060] ? __pfx_path_openat+0x10/0x10 [ 1522.334946][T27060] ? __lock_acquire+0xb8a/0x1c90 [ 1522.334992][T27060] do_filp_open+0x20b/0x470 [ 1522.335037][T27060] ? __pfx_do_filp_open+0x10/0x10 [ 1522.335100][T27060] ? alloc_fd+0x471/0x7d0 [ 1522.335141][T27060] do_sys_openat2+0x11b/0x1d0 [ 1522.335190][T27060] ? __pfx_do_sys_openat2+0x10/0x10 [ 1522.335253][T27060] __x64_sys_openat+0x174/0x210 [ 1522.335302][T27060] ? __pfx___x64_sys_openat+0x10/0x10 [ 1522.335365][T27060] do_syscall_64+0xcd/0xfa0 [ 1522.335405][T27060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.335438][T27060] RIP: 0033:0x7f6e05b8d810 [ 1522.335464][T27060] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1522.335497][T27060] RSP: 002b:00007f6e06adcf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1522.335530][T27060] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e05b8d810 [ 1522.335552][T27060] RDX: 0000000000000002 RSI: 00007f6e06adcfa0 RDI: 00000000ffffff9c [ 1522.335573][T27060] RBP: 00007f6e06adcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1522.335594][T27060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1522.335615][T27060] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1522.335661][T27060] [ 1522.701924][T27062] FAULT_INJECTION: forcing a failure. [ 1522.701924][T27062] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.715042][T27062] CPU: 0 UID: 0 PID: 27062 Comm: syz.5.4173 Tainted: G I syzkaller #0 PREEMPT(full) [ 1522.715098][T27062] Tainted: [I]=FIRMWARE_WORKAROUND [ 1522.715113][T27062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1522.715134][T27062] Call Trace: [ 1522.715147][T27062] [ 1522.715161][T27062] dump_stack_lvl+0x16c/0x1f0 [ 1522.715205][T27062] should_fail_ex+0x512/0x640 [ 1522.715257][T27062] ? fs_reclaim_acquire+0xae/0x150 [ 1522.715306][T27062] should_failslab+0xc2/0x120 [ 1522.715353][T27062] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1522.715387][T27062] ? __pfx_map_id_range_down+0x10/0x10 [ 1522.715441][T27062] ? security_inode_alloc+0x3b/0x2b0 [ 1522.715499][T27062] ? security_inode_alloc+0x3b/0x2b0 [ 1522.715545][T27062] security_inode_alloc+0x3b/0x2b0 [ 1522.715598][T27062] inode_init_always_gfp+0xce4/0x1030 [ 1522.715669][T27062] alloc_inode+0x86/0x240 [ 1522.715716][T27062] path_from_stashed+0x25b/0x750 [ 1522.715752][T27062] ? do_raw_spin_unlock+0x172/0x230 [ 1522.715814][T27062] ns_get_path+0x60/0x80 [ 1522.715849][T27062] proc_ns_get_link+0x121/0x230 [ 1522.715892][T27062] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1522.715954][T27062] ? atime_needs_update+0x8b/0x710 [ 1522.716013][T27062] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1522.716056][T27062] step_into+0x196c/0x21a0 [ 1522.716098][T27062] ? __pfx_step_into+0x10/0x10 [ 1522.716128][T27062] ? find_held_lock+0x2b/0x80 [ 1522.716178][T27062] path_openat+0x6db/0x2cb0 [ 1522.716229][T27062] ? __pfx_path_openat+0x10/0x10 [ 1522.716270][T27062] ? __lock_acquire+0xb8a/0x1c90 [ 1522.716326][T27062] do_filp_open+0x20b/0x470 [ 1522.716369][T27062] ? __pfx_do_filp_open+0x10/0x10 [ 1522.716439][T27062] ? alloc_fd+0x471/0x7d0 [ 1522.716486][T27062] do_sys_openat2+0x11b/0x1d0 [ 1522.716537][T27062] ? __pfx_do_sys_openat2+0x10/0x10 [ 1522.716604][T27062] __x64_sys_openat+0x174/0x210 [ 1522.716656][T27062] ? __pfx___x64_sys_openat+0x10/0x10 [ 1522.716724][T27062] do_syscall_64+0xcd/0xfa0 [ 1522.716768][T27062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.716804][T27062] RIP: 0033:0x7f20d3f8d810 [ 1522.716831][T27062] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1522.716865][T27062] RSP: 002b:00007f20d4f0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1522.716899][T27062] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20d3f8d810 [ 1522.716922][T27062] RDX: 0000000000000002 RSI: 00007f20d4f0dfa0 RDI: 00000000ffffff9c [ 1522.716945][T27062] RBP: 00007f20d4f0dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1522.716967][T27062] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1522.716989][T27062] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1522.717044][T27062] [ 1523.144043][T27073] netlink: 266 bytes leftover after parsing attributes in process `syz.2.4175'. [ 1523.154240][T27073] IPv6: NLM_F_CREATE should be specified when creating new route [ 1524.032585][ T30] audit: type=1800 audit(4294967304.468:26): pid=27085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4180" name="lu_gp_id" dev="configfs" ino=116434 res=0 errno=0 [ 1525.466288][T27110] FAULT_INJECTION: forcing a failure. [ 1525.466288][T27110] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.716533][T27110] CPU: 0 UID: 0 PID: 27110 Comm: syz.5.4186 Tainted: G I syzkaller #0 PREEMPT(full) [ 1525.716596][T27110] Tainted: [I]=FIRMWARE_WORKAROUND [ 1525.716611][T27110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1525.716633][T27110] Call Trace: [ 1525.716645][T27110] [ 1525.716659][T27110] dump_stack_lvl+0x16c/0x1f0 [ 1525.716714][T27110] should_fail_ex+0x512/0x640 [ 1525.716764][T27110] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1525.716811][T27110] should_failslab+0xc2/0x120 [ 1525.716855][T27110] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1525.716896][T27110] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1525.716940][T27110] ? __d_alloc+0x32/0xae0 [ 1525.716989][T27110] ? __d_alloc+0x32/0xae0 [ 1525.717025][T27110] __d_alloc+0x32/0xae0 [ 1525.717071][T27110] path_from_stashed+0x427/0x750 [ 1525.717106][T27110] ? do_raw_spin_unlock+0x172/0x230 [ 1525.717173][T27110] ns_get_path+0x60/0x80 [ 1525.717211][T27110] proc_ns_get_link+0x121/0x230 [ 1525.717253][T27110] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1525.717304][T27110] ? atime_needs_update+0x8b/0x710 [ 1525.717356][T27110] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1525.717403][T27110] step_into+0x196c/0x21a0 [ 1525.717443][T27110] ? __pfx_step_into+0x10/0x10 [ 1525.717473][T27110] ? find_held_lock+0x2b/0x80 [ 1525.717521][T27110] path_openat+0x6db/0x2cb0 [ 1525.717571][T27110] ? __pfx_path_openat+0x10/0x10 [ 1525.717612][T27110] ? __lock_acquire+0xb8a/0x1c90 [ 1525.717666][T27110] do_filp_open+0x20b/0x470 [ 1525.717715][T27110] ? __pfx_do_filp_open+0x10/0x10 [ 1525.717785][T27110] ? alloc_fd+0x471/0x7d0 [ 1525.717832][T27110] do_sys_openat2+0x11b/0x1d0 [ 1525.717883][T27110] ? __pfx_do_sys_openat2+0x10/0x10 [ 1525.717951][T27110] __x64_sys_openat+0x174/0x210 [ 1525.718004][T27110] ? __pfx___x64_sys_openat+0x10/0x10 [ 1525.718072][T27110] do_syscall_64+0xcd/0xfa0 [ 1525.718113][T27110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.718149][T27110] RIP: 0033:0x7f20d3f8d810 [ 1525.718178][T27110] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1525.718212][T27110] RSP: 002b:00007f20d4eecf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1525.718246][T27110] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20d3f8d810 [ 1525.718268][T27110] RDX: 0000000000000002 RSI: 00007f20d4eecfa0 RDI: 00000000ffffff9c [ 1525.718290][T27110] RBP: 00007f20d4eecfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1525.718312][T27110] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1525.718333][T27110] R13: 00007f20d41e6128 R14: 00007f20d41e6090 R15: 00007ffe50a6ced8 [ 1525.718380][T27110] [ 1528.112411][T27134] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1528.123666][T27134] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1528.164527][T27134] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1528.183220][T27134] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1528.193358][T27134] page dumped because: unmovable page [ 1528.200166][T27134] page_owner info is not present (never set?) [ 1528.752604][T27144] FAULT_INJECTION: forcing a failure. [ 1528.752604][T27144] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.794227][T27144] CPU: 0 UID: 0 PID: 27144 Comm: syz.5.4198 Tainted: G I syzkaller #0 PREEMPT(full) [ 1528.794280][T27144] Tainted: [I]=FIRMWARE_WORKAROUND [ 1528.794293][T27144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1528.794312][T27144] Call Trace: [ 1528.794324][T27144] [ 1528.794337][T27144] dump_stack_lvl+0x16c/0x1f0 [ 1528.794386][T27144] should_fail_ex+0x512/0x640 [ 1528.794436][T27144] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1528.794481][T27144] should_failslab+0xc2/0x120 [ 1528.794525][T27144] __kvmalloc_node_noprof+0x141/0x9c0 [ 1528.794568][T27144] ? seq_read_iter+0x830/0x12d0 [ 1528.794627][T27144] ? seq_read_iter+0x830/0x12d0 [ 1528.794675][T27144] seq_read_iter+0x830/0x12d0 [ 1528.794747][T27144] seq_read+0x3a3/0x570 [ 1528.794797][T27144] ? __pfx_seq_read+0x10/0x10 [ 1528.794877][T27144] full_proxy_read+0x131/0x1a0 [ 1528.794921][T27144] ? __pfx_full_proxy_read+0x10/0x10 [ 1528.794964][T27144] vfs_read+0x1e4/0xcf0 [ 1528.795005][T27144] ? __pfx___mutex_lock+0x10/0x10 [ 1528.795043][T27144] ? __pfx_vfs_read+0x10/0x10 [ 1528.795089][T27144] ? __fget_files+0x20e/0x3c0 [ 1528.795134][T27144] ksys_read+0x12a/0x250 [ 1528.795169][T27144] ? __pfx_ksys_read+0x10/0x10 [ 1528.795215][T27144] do_syscall_64+0xcd/0xfa0 [ 1528.795254][T27144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.795286][T27144] RIP: 0033:0x7f20d3f8efc9 [ 1528.795311][T27144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.795342][T27144] RSP: 002b:00007f20d4f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1528.795380][T27144] RAX: ffffffffffffffda RBX: 00007f20d41e5fa0 RCX: 00007f20d3f8efc9 [ 1528.795402][T27144] RDX: 000000000000004e RSI: 0000200000000100 RDI: 0000000000000009 [ 1528.795422][T27144] RBP: 00007f20d4f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.795442][T27144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.795461][T27144] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1528.795508][T27144] [ 1529.177018][T27144] FAULT_INJECTION: forcing a failure. [ 1529.177018][T27144] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.239383][T27144] CPU: 1 UID: 0 PID: 27144 Comm: syz.5.4198 Tainted: G I syzkaller #0 PREEMPT(full) [ 1529.239434][T27144] Tainted: [I]=FIRMWARE_WORKAROUND [ 1529.239447][T27144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1529.239467][T27144] Call Trace: [ 1529.239478][T27144] [ 1529.239491][T27144] dump_stack_lvl+0x16c/0x1f0 [ 1529.239532][T27144] should_fail_ex+0x512/0x640 [ 1529.239580][T27144] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1529.239621][T27144] should_failslab+0xc2/0x120 [ 1529.239666][T27144] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1529.239702][T27144] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1529.239745][T27144] ? __d_alloc+0x32/0xae0 [ 1529.239788][T27144] ? __d_alloc+0x32/0xae0 [ 1529.239823][T27144] __d_alloc+0x32/0xae0 [ 1529.239865][T27144] path_from_stashed+0x427/0x750 [ 1529.239899][T27144] ? do_raw_spin_unlock+0x172/0x230 [ 1529.239958][T27144] ns_get_path+0x60/0x80 [ 1529.239992][T27144] proc_ns_get_link+0x121/0x230 [ 1529.240033][T27144] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1529.240086][T27144] ? atime_needs_update+0x8b/0x710 [ 1529.240135][T27144] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1529.240174][T27144] step_into+0x196c/0x21a0 [ 1529.240214][T27144] ? __pfx_step_into+0x10/0x10 [ 1529.240242][T27144] ? find_held_lock+0x2b/0x80 [ 1529.240290][T27144] path_openat+0x6db/0x2cb0 [ 1529.240340][T27144] ? __pfx_path_openat+0x10/0x10 [ 1529.240379][T27144] ? __lock_acquire+0xb8a/0x1c90 [ 1529.240429][T27144] do_filp_open+0x20b/0x470 [ 1529.240467][T27144] ? __pfx_do_filp_open+0x10/0x10 [ 1529.240535][T27144] ? alloc_fd+0x471/0x7d0 [ 1529.240579][T27144] do_sys_openat2+0x11b/0x1d0 [ 1529.240625][T27144] ? __pfx_do_sys_openat2+0x10/0x10 [ 1529.240689][T27144] __x64_sys_openat+0x174/0x210 [ 1529.240736][T27144] ? __pfx___x64_sys_openat+0x10/0x10 [ 1529.240804][T27144] do_syscall_64+0xcd/0xfa0 [ 1529.240841][T27144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.240872][T27144] RIP: 0033:0x7f20d3f8d810 [ 1529.240898][T27144] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1529.240931][T27144] RSP: 002b:00007f20d4f0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1529.240962][T27144] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20d3f8d810 [ 1529.240985][T27144] RDX: 0000000000000002 RSI: 00007f20d4f0dfa0 RDI: 00000000ffffff9c [ 1529.241006][T27144] RBP: 00007f20d4f0dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1529.241028][T27144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1529.241049][T27144] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1529.241101][T27144] [ 1529.318782][T27155] program syz.4.4200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1529.567068][T27155] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1531.038144][T18667] Bluetooth: hci1: unexpected event 0x05 length: 438 > 4 [ 1532.480366][T27207] FAULT_INJECTION: forcing a failure. [ 1532.480366][T27207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1532.520036][T27207] CPU: 1 UID: 0 PID: 27207 Comm: syz.5.4214 Tainted: G I syzkaller #0 PREEMPT(full) [ 1532.520084][T27207] Tainted: [I]=FIRMWARE_WORKAROUND [ 1532.520096][T27207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1532.520114][T27207] Call Trace: [ 1532.520125][T27207] [ 1532.520137][T27207] dump_stack_lvl+0x16c/0x1f0 [ 1532.520175][T27207] should_fail_ex+0x512/0x640 [ 1532.520228][T27207] _copy_to_iter+0x463/0x1710 [ 1532.520286][T27207] ? __pfx__copy_to_iter+0x10/0x10 [ 1532.520333][T27207] ? trace_kmalloc+0x2b/0xd0 [ 1532.520370][T27207] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 1532.520409][T27207] ? seq_printf+0x1ea/0x250 [ 1532.520464][T27207] seq_read_iter+0xd02/0x12d0 [ 1532.520528][T27207] seq_read+0x3a3/0x570 [ 1532.520576][T27207] ? __pfx_seq_read+0x10/0x10 [ 1532.520668][T27207] full_proxy_read+0x131/0x1a0 [ 1532.520715][T27207] ? __pfx_full_proxy_read+0x10/0x10 [ 1532.520761][T27207] vfs_read+0x1e4/0xcf0 [ 1532.520805][T27207] ? __pfx___mutex_lock+0x10/0x10 [ 1532.520844][T27207] ? __pfx_vfs_read+0x10/0x10 [ 1532.520890][T27207] ? __fget_files+0x20e/0x3c0 [ 1532.520936][T27207] ksys_read+0x12a/0x250 [ 1532.520972][T27207] ? __pfx_ksys_read+0x10/0x10 [ 1532.521020][T27207] do_syscall_64+0xcd/0xfa0 [ 1532.521060][T27207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.521105][T27207] RIP: 0033:0x7f20d3f8efc9 [ 1532.521132][T27207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.521164][T27207] RSP: 002b:00007f20d4f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1532.521195][T27207] RAX: ffffffffffffffda RBX: 00007f20d41e5fa0 RCX: 00007f20d3f8efc9 [ 1532.521217][T27207] RDX: 000000000000004e RSI: 0000200000000100 RDI: 0000000000000009 [ 1532.521239][T27207] RBP: 00007f20d4f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.521259][T27207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.521280][T27207] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1532.521326][T27207] [ 1532.522337][T27207] FAULT_INJECTION: forcing a failure. [ 1532.522337][T27207] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.774192][T27207] CPU: 1 UID: 0 PID: 27207 Comm: syz.5.4214 Tainted: G I syzkaller #0 PREEMPT(full) [ 1532.774244][T27207] Tainted: [I]=FIRMWARE_WORKAROUND [ 1532.774257][T27207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1532.774277][T27207] Call Trace: [ 1532.774288][T27207] [ 1532.774301][T27207] dump_stack_lvl+0x16c/0x1f0 [ 1532.774343][T27207] should_fail_ex+0x512/0x640 [ 1532.774391][T27207] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1532.774432][T27207] should_failslab+0xc2/0x120 [ 1532.774477][T27207] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1532.774512][T27207] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1532.774554][T27207] ? __d_alloc+0x32/0xae0 [ 1532.774599][T27207] ? __d_alloc+0x32/0xae0 [ 1532.774634][T27207] __d_alloc+0x32/0xae0 [ 1532.774677][T27207] path_from_stashed+0x427/0x750 [ 1532.774712][T27207] ? do_raw_spin_unlock+0x172/0x230 [ 1532.774773][T27207] ns_get_path+0x60/0x80 [ 1532.774808][T27207] proc_ns_get_link+0x121/0x230 [ 1532.774850][T27207] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1532.774902][T27207] ? atime_needs_update+0x8b/0x710 [ 1532.774952][T27207] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1532.774993][T27207] step_into+0x196c/0x21a0 [ 1532.775032][T27207] ? __pfx_step_into+0x10/0x10 [ 1532.775063][T27207] ? find_held_lock+0x2b/0x80 [ 1532.775109][T27207] path_openat+0x6db/0x2cb0 [ 1532.775157][T27207] ? __pfx_path_openat+0x10/0x10 [ 1532.775194][T27207] ? __lock_acquire+0xb8a/0x1c90 [ 1532.775241][T27207] do_filp_open+0x20b/0x470 [ 1532.775278][T27207] ? __pfx_do_filp_open+0x10/0x10 [ 1532.775345][T27207] ? alloc_fd+0x471/0x7d0 [ 1532.775389][T27207] do_sys_openat2+0x11b/0x1d0 [ 1532.775438][T27207] ? __pfx_do_sys_openat2+0x10/0x10 [ 1532.775502][T27207] __x64_sys_openat+0x174/0x210 [ 1532.775552][T27207] ? __pfx___x64_sys_openat+0x10/0x10 [ 1532.775618][T27207] do_syscall_64+0xcd/0xfa0 [ 1532.775657][T27207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.775690][T27207] RIP: 0033:0x7f20d3f8d810 [ 1532.775716][T27207] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1532.775747][T27207] RSP: 002b:00007f20d4f0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1532.775777][T27207] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20d3f8d810 [ 1532.775799][T27207] RDX: 0000000000000002 RSI: 00007f20d4f0dfa0 RDI: 00000000ffffff9c [ 1532.775819][T27207] RBP: 00007f20d4f0dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1532.775840][T27207] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1532.775860][T27207] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1532.775914][T27207] [ 1533.597353][T27228] FAULT_INJECTION: forcing a failure. [ 1533.597353][T27228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1533.703325][T27228] CPU: 1 UID: 0 PID: 27228 Comm: syz.4.4219 Tainted: G I syzkaller #0 PREEMPT(full) [ 1533.703377][T27228] Tainted: [I]=FIRMWARE_WORKAROUND [ 1533.703389][T27228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1533.703409][T27228] Call Trace: [ 1533.703419][T27228] [ 1533.703431][T27228] dump_stack_lvl+0x16c/0x1f0 [ 1533.703479][T27228] should_fail_ex+0x512/0x640 [ 1533.703532][T27228] should_fail_alloc_page+0xe7/0x130 [ 1533.703580][T27228] prepare_alloc_pages+0x3c2/0x610 [ 1533.703635][T27228] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1533.703672][T27228] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 1533.703711][T27228] ? rcu_is_watching+0x12/0xc0 [ 1533.703744][T27228] ? trace_sched_exit_tp+0xd1/0x120 [ 1533.703793][T27228] ? __schedule+0x11a3/0x5de0 [ 1533.703829][T27228] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1533.703869][T27228] ? const_folio_flags+0x5b/0x100 [ 1533.703919][T27228] ? __pfx___schedule+0x10/0x10 [ 1533.703955][T27228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1533.704012][T27228] ? policy_nodemask+0xea/0x4e0 [ 1533.704059][T27228] alloc_pages_mpol+0x1fb/0x550 [ 1533.704104][T27228] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1533.704147][T27228] ? preempt_schedule_thunk+0x16/0x30 [ 1533.704208][T27228] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1533.704260][T27228] vma_alloc_folio_noprof+0xed/0x1e0 [ 1533.704314][T27228] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1533.704366][T27228] ? rcu_read_unlock+0x2d/0xb0 [ 1533.704406][T27228] do_wp_page+0x2084/0x52b0 [ 1533.704462][T27228] ? __pfx_do_wp_page+0x10/0x10 [ 1533.704510][T27228] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1533.704564][T27228] ? ___pte_offset_map+0x2ad/0x4f0 [ 1533.704620][T27228] __handle_mm_fault+0x1ae3/0x2aa0 [ 1533.704677][T27228] ? mt_find+0x3e2/0xa20 [ 1533.704718][T27228] ? __pfx___handle_mm_fault+0x10/0x10 [ 1533.704766][T27228] ? __pfx_mt_find+0x10/0x10 [ 1533.704828][T27228] ? find_vma+0xbf/0x140 [ 1533.704866][T27228] ? __pfx_find_vma+0x10/0x10 [ 1533.704908][T27228] handle_mm_fault+0x589/0xd10 [ 1533.704959][T27228] ? __pkru_allows_pkey+0x11/0xb0 [ 1533.705011][T27228] do_user_addr_fault+0x7a6/0x1370 [ 1533.705048][T27228] ? rcu_is_watching+0x12/0xc0 [ 1533.705087][T27228] exc_page_fault+0x64/0xc0 [ 1533.705122][T27228] asm_exc_page_fault+0x26/0x30 [ 1533.705154][T27228] RIP: 0010:__put_user_4+0xd/0x20 [ 1533.705188][T27228] Code: 66 89 01 31 c9 0f 01 ca e9 c0 80 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 80 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1533.705221][T27228] RSP: 0018:ffffc90004af7d48 EFLAGS: 00050246 [ 1533.705248][T27228] RAX: 00000000fffffff3 RBX: 0000000000000000 RCX: 0000000000000000 [ 1533.705268][T27228] RDX: ffff88802e9c1e40 RSI: ffffffff8225cbc0 RDI: ffffffff8bf07240 [ 1533.705290][T27228] RBP: ffff888078588dc0 R08: 007da75da6d4f6ed R09: 0000000000000000 [ 1533.705312][T27228] R10: 0000000000000000 R11: 0000000000000001 R12: ffffea00053f0030 [ 1533.705333][T27228] R13: 0000000000000000 R14: 00000000fffffff3 R15: 0000000000000000 [ 1533.705368][T27228] ? kernel_move_pages+0xb70/0x12f0 [ 1533.705424][T27228] kernel_move_pages+0xb85/0x12f0 [ 1533.705492][T27228] ? __pfx_kernel_move_pages+0x10/0x10 [ 1533.705556][T27228] ? fput+0x9b/0xd0 [ 1533.705608][T27228] ? ksys_write+0x1ac/0x250 [ 1533.705644][T27228] ? __pfx_ksys_write+0x10/0x10 [ 1533.705685][T27228] __x64_sys_move_pages+0xe0/0x1c0 [ 1533.705734][T27228] ? do_syscall_64+0x91/0xfa0 [ 1533.705768][T27228] ? lockdep_hardirqs_on+0x7c/0x110 [ 1533.705802][T27228] do_syscall_64+0xcd/0xfa0 [ 1533.705841][T27228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.705872][T27228] RIP: 0033:0x7f6e05b8efc9 [ 1533.705898][T27228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.705929][T27228] RSP: 002b:00007f6e06a9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1533.705960][T27228] RAX: ffffffffffffffda RBX: 00007f6e05de6180 RCX: 00007f6e05b8efc9 [ 1533.705983][T27228] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 1533.706002][T27228] RBP: 00007f6e06a9b090 R08: 0000000000000000 R09: 0000000000000002 [ 1533.706023][T27228] R10: 0000200000001140 R11: 0000000000000246 R12: 0000000000000001 [ 1533.706044][T27228] R13: 00007f6e05de6218 R14: 00007f6e05de6180 R15: 00007ffe65322ca8 [ 1533.706089][T27228] [ 1536.020844][T27273] netlink: 'syz.4.4230': attribute type 1 has an invalid length. [ 1536.502854][T27280] FAULT_INJECTION: forcing a failure. [ 1536.502854][T27280] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.568028][T27280] CPU: 0 UID: 0 PID: 27280 Comm: syz.5.4232 Tainted: G I syzkaller #0 PREEMPT(full) [ 1536.568067][T27280] Tainted: [I]=FIRMWARE_WORKAROUND [ 1536.568077][T27280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1536.568092][T27280] Call Trace: [ 1536.568100][T27280] [ 1536.568110][T27280] dump_stack_lvl+0x16c/0x1f0 [ 1536.568142][T27280] should_fail_ex+0x512/0x640 [ 1536.568178][T27280] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1536.568221][T27280] should_failslab+0xc2/0x120 [ 1536.568254][T27280] __kmalloc_cache_noprof+0x72/0x780 [ 1536.568294][T27280] ? net_generic+0xf4/0x2a0 [ 1536.568317][T27280] ? fib_net_init+0x1a4/0x3f0 [ 1536.568350][T27280] ? fib_net_init+0x1a4/0x3f0 [ 1536.568377][T27280] fib_net_init+0x1a4/0x3f0 [ 1536.568403][T27280] ? __pfx___register_sysctl_table+0x10/0x10 [ 1536.568441][T27280] ? __pfx_fib_net_init+0x10/0x10 [ 1536.568468][T27280] ? lockdep_init_map_type+0x5c/0x280 [ 1536.568504][T27280] ? do_init_timer+0xc9/0x110 [ 1536.568534][T27280] ? devinet_init_net+0x5c2/0x910 [ 1536.568575][T27280] ? __pfx_fib_net_init+0x10/0x10 [ 1536.568602][T27280] ops_init+0x1e2/0x5f0 [ 1536.568629][T27280] setup_net+0x100/0x390 [ 1536.568653][T27280] ? __pfx_setup_net+0x10/0x10 [ 1536.568679][T27280] ? debug_mutex_init+0x37/0x70 [ 1536.568708][T27280] copy_net_ns+0x2f8/0x690 [ 1536.568738][T27280] create_new_namespaces+0x3ea/0xa90 [ 1536.568773][T27280] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1536.568803][T27280] ksys_unshare+0x45b/0xa40 [ 1536.568836][T27280] ? __pfx_ksys_unshare+0x10/0x10 [ 1536.568869][T27280] ? xfd_validate_state+0x61/0x180 [ 1536.568913][T27280] __x64_sys_unshare+0x31/0x40 [ 1536.568945][T27280] do_syscall_64+0xcd/0xfa0 [ 1536.568974][T27280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.568998][T27280] RIP: 0033:0x7f20d3f8efc9 [ 1536.569018][T27280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1536.569047][T27280] RSP: 002b:00007f20d4f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1536.569070][T27280] RAX: ffffffffffffffda RBX: 00007f20d41e5fa0 RCX: 00007f20d3f8efc9 [ 1536.569086][T27280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1536.569102][T27280] RBP: 00007f20d4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1536.569117][T27280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.569132][T27280] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1536.569164][T27280] [ 1537.458798][T27292] ptrace attach of "./syz-executor exec"[18387] was attempted by ""[27292] [ 1541.819479][ T30] audit: type=1326 audit(4294967322.341:27): auid=4294967295 uid=2 gid=0 ses=4294967295 subj=unconfined pid=27370 comm="syz.4.4253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e05b8efc9 code=0x0 [ 1542.915969][T27399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4260'. [ 1542.971821][T27399] geneve1: entered promiscuous mode [ 1543.025833][T27399] geneve1: entered allmulticast mode [ 1543.062443][T27403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4260'. [ 1543.622656][T18601] Process accounting resumed [ 1544.843082][T27455] netlink: 'syz.3.4272': attribute type 1 has an invalid length. [ 1549.098329][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.104937][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.427718][T27527] netlink: 'syz.4.4285': attribute type 1 has an invalid length. [ 1550.615459][T27547] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 1554.326171][T27615] nfs4: Unknown parameter 'nfsd' [ 1556.014546][T18667] Bluetooth: hci2: ACL packet for unknown connection handle 4 [ 1556.294453][T27646] snd_aloop snd_aloop.0: control 7:257:7::0 is already present [ 1557.953974][T18667] Bluetooth: hci2: ACL packet for unknown connection handle 4 [ 1561.026835][T18667] Bluetooth: hci3: unexpected event 0x05 length: 1 < 4 [ 1562.627408][T27771] netlink: 302 bytes leftover after parsing attributes in process `syz.3.4346'. [ 1563.708696][T27786] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1563.859639][T27784] netlink: 'syz.5.4356': attribute type 1 has an invalid length. [ 1564.065786][T18667] Bluetooth: hci4: unexpected event 0x05 length: 1 < 4 [ 1566.838645][T27836] zram0: detected capacity change from 8 to 0 [ 1567.023299][T18667] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1567.275493][T27850] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1567.691944][T27864] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1567.725176][T27864] QAT: Device 250 not found [ 1568.713913][T27883] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1568.792095][T27885] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1568.920878][T18667] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1569.472416][T27903] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1571.032997][T27940] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1571.068519][T27940] IPv6: NLM_F_CREATE should be specified when creating new route [ 1571.089206][T27943] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1571.106635][T27940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1571.114781][T27940] IPv6: NLM_F_CREATE should be set when creating new route [ 1571.122065][T27940] IPv6: NLM_F_CREATE should be set when creating new route [ 1571.209692][T27943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1572.898943][T27966] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1573.825100][T18667] Bluetooth: hci3: unexpected event 0x04 length: 1 < 10 [ 1574.113484][T28000] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1574.154582][T28000] QAT: Device 250 not found [ 1575.315910][T28033] FAULT_INJECTION: forcing a failure. [ 1575.315910][T28033] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.343925][T28033] CPU: 1 UID: 0 PID: 28033 Comm: syz.2.4411 Tainted: G I syzkaller #0 PREEMPT(full) [ 1575.343974][T28033] Tainted: [I]=FIRMWARE_WORKAROUND [ 1575.343984][T28033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1575.344001][T28033] Call Trace: [ 1575.344011][T28033] [ 1575.344024][T28033] dump_stack_lvl+0x16c/0x1f0 [ 1575.344061][T28033] should_fail_ex+0x512/0x640 [ 1575.344104][T28033] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1575.344137][T28033] should_failslab+0xc2/0x120 [ 1575.344173][T28033] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1575.344200][T28033] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1575.344235][T28033] ? __d_alloc+0x32/0xae0 [ 1575.344272][T28033] ? __d_alloc+0x32/0xae0 [ 1575.344299][T28033] __d_alloc+0x32/0xae0 [ 1575.344333][T28033] path_from_stashed+0x427/0x750 [ 1575.344364][T28033] ? do_raw_spin_unlock+0x172/0x230 [ 1575.344420][T28033] ns_get_path+0x60/0x80 [ 1575.344450][T28033] proc_ns_get_link+0x121/0x230 [ 1575.344488][T28033] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1575.344530][T28033] ? atime_needs_update+0x8b/0x710 [ 1575.344572][T28033] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1575.344607][T28033] step_into+0x196c/0x21a0 [ 1575.344649][T28033] ? __pfx_step_into+0x10/0x10 [ 1575.344674][T28033] ? find_held_lock+0x2b/0x80 [ 1575.344715][T28033] path_openat+0x6db/0x2cb0 [ 1575.344758][T28033] ? __pfx_path_openat+0x10/0x10 [ 1575.344796][T28033] ? __lock_acquire+0xb8a/0x1c90 [ 1575.344842][T28033] do_filp_open+0x20b/0x470 [ 1575.344878][T28033] ? __pfx_do_filp_open+0x10/0x10 [ 1575.344940][T28033] ? alloc_fd+0x471/0x7d0 [ 1575.344980][T28033] do_sys_openat2+0x11b/0x1d0 [ 1575.345025][T28033] ? __pfx_do_sys_openat2+0x10/0x10 [ 1575.345081][T28033] __x64_sys_openat+0x174/0x210 [ 1575.345122][T28033] ? __pfx___x64_sys_openat+0x10/0x10 [ 1575.345182][T28033] do_syscall_64+0xcd/0xfa0 [ 1575.345221][T28033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.345255][T28033] RIP: 0033:0x7f00ba78d810 [ 1575.345282][T28033] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1575.345316][T28033] RSP: 002b:00007f00bb711f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1575.345348][T28033] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f00ba78d810 [ 1575.345371][T28033] RDX: 0000000000000002 RSI: 00007f00bb711fa0 RDI: 00000000ffffff9c [ 1575.345393][T28033] RBP: 00007f00bb711fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.345415][T28033] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1575.345437][T28033] R13: 00007f00ba9e6038 R14: 00007f00ba9e5fa0 R15: 00007ffc5a4c81c8 [ 1575.345483][T28033] [ 1575.348867][T18667] Bluetooth: hci2: unexpected event 0x04 length: 1 < 10 [ 1575.695685][T28039] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 1576.095034][T18667] Bluetooth: hci1: unexpected event 0x04 length: 1 < 10 [ 1576.604723][T28071] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1576.980425][T28077] FAULT_INJECTION: forcing a failure. [ 1576.980425][T28077] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.009389][T28077] CPU: 1 UID: 0 PID: 28077 Comm: syz.5.4425 Tainted: G I syzkaller #0 PREEMPT(full) [ 1577.009445][T28077] Tainted: [I]=FIRMWARE_WORKAROUND [ 1577.009458][T28077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1577.009479][T28077] Call Trace: [ 1577.009491][T28077] [ 1577.009505][T28077] dump_stack_lvl+0x16c/0x1f0 [ 1577.009547][T28077] should_fail_ex+0x512/0x640 [ 1577.009599][T28077] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1577.009641][T28077] should_failslab+0xc2/0x120 [ 1577.009686][T28077] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1577.009722][T28077] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1577.009764][T28077] ? __d_alloc+0x32/0xae0 [ 1577.009810][T28077] ? __d_alloc+0x32/0xae0 [ 1577.009844][T28077] __d_alloc+0x32/0xae0 [ 1577.009893][T28077] path_from_stashed+0x427/0x750 [ 1577.009929][T28077] ? do_raw_spin_unlock+0x172/0x230 [ 1577.009998][T28077] ns_get_path+0x60/0x80 [ 1577.010033][T28077] proc_ns_get_link+0x121/0x230 [ 1577.010078][T28077] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1577.010124][T28077] ? atime_needs_update+0x8b/0x710 [ 1577.010175][T28077] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1577.010227][T28077] step_into+0x196c/0x21a0 [ 1577.010268][T28077] ? __pfx_step_into+0x10/0x10 [ 1577.010298][T28077] ? find_held_lock+0x2b/0x80 [ 1577.010347][T28077] path_openat+0x6db/0x2cb0 [ 1577.010398][T28077] ? __pfx_path_openat+0x10/0x10 [ 1577.010438][T28077] ? __lock_acquire+0xb8a/0x1c90 [ 1577.010488][T28077] do_filp_open+0x20b/0x470 [ 1577.010527][T28077] ? __pfx_do_filp_open+0x10/0x10 [ 1577.010594][T28077] ? alloc_fd+0x471/0x7d0 [ 1577.010640][T28077] do_sys_openat2+0x11b/0x1d0 [ 1577.010689][T28077] ? __pfx_do_sys_openat2+0x10/0x10 [ 1577.010754][T28077] __x64_sys_openat+0x174/0x210 [ 1577.010806][T28077] ? __pfx___x64_sys_openat+0x10/0x10 [ 1577.010872][T28077] do_syscall_64+0xcd/0xfa0 [ 1577.010913][T28077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.010946][T28077] RIP: 0033:0x7f20d3f8d810 [ 1577.010973][T28077] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1577.011005][T28077] RSP: 002b:00007f20d4eecf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1577.011037][T28077] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20d3f8d810 [ 1577.011059][T28077] RDX: 0000000000000002 RSI: 00007f20d4eecfa0 RDI: 00000000ffffff9c [ 1577.011082][T28077] RBP: 00007f20d4eecfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.011102][T28077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1577.011123][T28077] R13: 00007f20d41e6128 R14: 00007f20d41e6090 R15: 00007ffe50a6ced8 [ 1577.011166][T28077] [ 1579.028580][T28112] netlink: 'syz.3.4434': attribute type 1 has an invalid length. [ 1579.228542][T28122] FAULT_INJECTION: forcing a failure. [ 1579.228542][T28122] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.275522][T28122] CPU: 1 UID: 0 PID: 28122 Comm: syz.2.4438 Tainted: G I syzkaller #0 PREEMPT(full) [ 1579.275575][T28122] Tainted: [I]=FIRMWARE_WORKAROUND [ 1579.275589][T28122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1579.275608][T28122] Call Trace: [ 1579.275620][T28122] [ 1579.275634][T28122] dump_stack_lvl+0x16c/0x1f0 [ 1579.275675][T28122] should_fail_ex+0x512/0x640 [ 1579.275728][T28122] should_failslab+0xc2/0x120 [ 1579.275771][T28122] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1579.275805][T28122] ? __alloc_skb+0x2b2/0x380 [ 1579.275861][T28122] ? __alloc_skb+0x2b2/0x380 [ 1579.275902][T28122] __alloc_skb+0x2b2/0x380 [ 1579.275946][T28122] ? __pfx___alloc_skb+0x10/0x10 [ 1579.276001][T28122] ? kasan_quarantine_put+0xb0/0x240 [ 1579.276050][T28122] __pskb_copy_fclone+0xef/0xb50 [ 1579.276094][T28122] tipc_sk_mcast_rcv+0x52d/0xfa0 [ 1579.276142][T28122] ? __lock_acquire+0xb8a/0x1c90 [ 1579.276198][T28122] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 1579.276245][T28122] ? __lock_acquire+0x622/0x1c90 [ 1579.276307][T28122] ? find_held_lock+0x2b/0x80 [ 1579.276339][T28122] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 1579.276392][T28122] tipc_mcast_xmit+0x711/0xfe0 [ 1579.276435][T28122] ? __pfx__copy_from_iter+0x10/0x10 [ 1579.276482][T28122] ? __pfx___alloc_skb+0x10/0x10 [ 1579.276540][T28122] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 1579.276586][T28122] ? __lock_acquire+0x622/0x1c90 [ 1579.276669][T28122] ? tipc_send_group_bcast+0x803/0xa50 [ 1579.276707][T28122] tipc_send_group_bcast+0x803/0xa50 [ 1579.276761][T28122] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1579.276800][T28122] ? css_rstat_updated+0x1c2/0x510 [ 1579.276841][T28122] ? __pfx_woken_wake_function+0x10/0x10 [ 1579.276912][T28122] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1579.276945][T28122] ? find_held_lock+0x2b/0x80 [ 1579.276993][T28122] __tipc_sendmsg+0x4ab/0x19a0 [ 1579.277037][T28122] ? lock_acquire+0x179/0x350 [ 1579.277090][T28122] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1579.277176][T28122] ? __local_bh_enable_ip+0xa4/0x120 [ 1579.277220][T28122] tipc_sendmsg+0x4f/0x70 [ 1579.277275][T28122] sock_write_iter+0x566/0x610 [ 1579.277316][T28122] ? __pfx_sock_write_iter+0x10/0x10 [ 1579.277370][T28122] ? __futex_wait+0x24b/0x2f0 [ 1579.277420][T28122] ? copy_iovec_from_user+0x131/0x170 [ 1579.277484][T28122] do_iter_readv_writev+0x662/0x9e0 [ 1579.277519][T28122] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1579.277558][T28122] ? bpf_lsm_file_permission+0x9/0x10 [ 1579.277595][T28122] ? security_file_permission+0x71/0x210 [ 1579.277629][T28122] ? rw_verify_area+0xcf/0x6c0 [ 1579.277662][T28122] vfs_writev+0x35f/0xde0 [ 1579.277705][T28122] ? __pfx_vfs_writev+0x10/0x10 [ 1579.277766][T28122] ? __fget_files+0x20e/0x3c0 [ 1579.277807][T28122] ? do_writev+0x28c/0x340 [ 1579.277835][T28122] do_writev+0x28c/0x340 [ 1579.277867][T28122] ? __pfx_do_writev+0x10/0x10 [ 1579.277911][T28122] do_syscall_64+0xcd/0xfa0 [ 1579.277949][T28122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.277991][T28122] RIP: 0033:0x7f00ba78efc9 [ 1579.278017][T28122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1579.278049][T28122] RSP: 002b:00007f00bb712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1579.278081][T28122] RAX: ffffffffffffffda RBX: 00007f00ba9e5fa0 RCX: 00007f00ba78efc9 [ 1579.278103][T28122] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1579.278123][T28122] RBP: 00007f00ba811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1579.278143][T28122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.278163][T28122] R13: 00007f00ba9e6038 R14: 00007f00ba9e5fa0 R15: 00007ffc5a4c81c8 [ 1579.278205][T28122] [ 1579.281378][T28122] tipc: Failed to clone mcast rcv buffer [ 1580.084086][T28136] netlink: 'syz.3.4442': attribute type 3 has an invalid length. [ 1580.745640][T28151] FAULT_INJECTION: forcing a failure. [ 1580.745640][T28151] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.782634][T28151] CPU: 1 UID: 0 PID: 28151 Comm: syz.4.4445 Tainted: G I syzkaller #0 PREEMPT(full) [ 1580.782691][T28151] Tainted: [I]=FIRMWARE_WORKAROUND [ 1580.782705][T28151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1580.782725][T28151] Call Trace: [ 1580.782737][T28151] [ 1580.782751][T28151] dump_stack_lvl+0x16c/0x1f0 [ 1580.782803][T28151] should_fail_ex+0x512/0x640 [ 1580.782854][T28151] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1580.782894][T28151] should_failslab+0xc2/0x120 [ 1580.782937][T28151] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1580.782973][T28151] ? find_held_lock+0x2b/0x80 [ 1580.783003][T28151] ? alloc_inode+0xc3/0x240 [ 1580.783056][T28151] ? alloc_inode+0xc3/0x240 [ 1580.783097][T28151] alloc_inode+0xc3/0x240 [ 1580.783142][T28151] path_from_stashed+0x25b/0x750 [ 1580.783177][T28151] ? do_raw_spin_unlock+0x172/0x230 [ 1580.783240][T28151] ns_get_path+0x60/0x80 [ 1580.783275][T28151] proc_ns_get_link+0x121/0x230 [ 1580.783318][T28151] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1580.783363][T28151] ? atime_needs_update+0x8b/0x710 [ 1580.783413][T28151] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1580.783454][T28151] step_into+0x196c/0x21a0 [ 1580.783493][T28151] ? __pfx_step_into+0x10/0x10 [ 1580.783523][T28151] ? find_held_lock+0x2b/0x80 [ 1580.783570][T28151] path_openat+0x6db/0x2cb0 [ 1580.783622][T28151] ? __pfx_path_openat+0x10/0x10 [ 1580.783661][T28151] ? __lock_acquire+0xb8a/0x1c90 [ 1580.783712][T28151] do_filp_open+0x20b/0x470 [ 1580.783748][T28151] ? __pfx_do_filp_open+0x10/0x10 [ 1580.783825][T28151] ? alloc_fd+0x471/0x7d0 [ 1580.783871][T28151] do_sys_openat2+0x11b/0x1d0 [ 1580.783920][T28151] ? __pfx_do_sys_openat2+0x10/0x10 [ 1580.783984][T28151] __x64_sys_openat+0x174/0x210 [ 1580.784033][T28151] ? __pfx___x64_sys_openat+0x10/0x10 [ 1580.784098][T28151] do_syscall_64+0xcd/0xfa0 [ 1580.784140][T28151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.784174][T28151] RIP: 0033:0x7f6e05b8d810 [ 1580.784201][T28151] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1580.784226][T28151] RSP: 002b:00007f6e06adcf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1580.784250][T28151] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e05b8d810 [ 1580.784265][T28151] RDX: 0000000000000002 RSI: 00007f6e06adcfa0 RDI: 00000000ffffff9c [ 1580.784280][T28151] RBP: 00007f6e06adcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.784294][T28151] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1580.784309][T28151] R13: 00007f6e05de6038 R14: 00007f6e05de5fa0 R15: 00007ffe65322ca8 [ 1580.784353][T28151] [ 1582.983725][T18667] Bluetooth: hci4: unexpected event 0x05 length: 1 < 4 [ 1583.338726][T28219] FAULT_INJECTION: forcing a failure. [ 1583.338726][T28219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.378961][T28219] CPU: 0 UID: 0 PID: 28219 Comm: syz.5.4461 Tainted: G I syzkaller #0 PREEMPT(full) [ 1583.379014][T28219] Tainted: [I]=FIRMWARE_WORKAROUND [ 1583.379027][T28219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1583.379047][T28219] Call Trace: [ 1583.379058][T28219] [ 1583.379071][T28219] dump_stack_lvl+0x16c/0x1f0 [ 1583.379112][T28219] should_fail_ex+0x512/0x640 [ 1583.379168][T28219] _copy_from_user+0x2e/0xd0 [ 1583.379219][T28219] load_msg+0x253/0x4a0 [ 1583.379264][T28219] do_msgrcv+0x202/0x16c0 [ 1583.379303][T28219] ? do_futex+0x122/0x350 [ 1583.379346][T28219] ? __pfx_do_msg_fill+0x10/0x10 [ 1583.379397][T28219] ? __pfx_do_msgrcv+0x10/0x10 [ 1583.379436][T28219] ? __x64_sys_futex+0x1e0/0x4c0 [ 1583.379483][T28219] ? fput+0x9b/0xd0 [ 1583.379528][T28219] ? xfd_validate_state+0x61/0x180 [ 1583.379573][T28219] ? __pfx_ksys_write+0x10/0x10 [ 1583.379629][T28219] ? do_syscall_64+0xcd/0xfa0 [ 1583.379663][T28219] do_syscall_64+0xcd/0xfa0 [ 1583.379701][T28219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.379735][T28219] RIP: 0033:0x7f20d3f8efc9 [ 1583.379761][T28219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.379793][T28219] RSP: 002b:00007f20d4ecc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 1583.379825][T28219] RAX: ffffffffffffffda RBX: 00007f20d41e6180 RCX: 00007f20d3f8efc9 [ 1583.379848][T28219] RDX: 0000002400000000 RSI: 0000000000000000 RDI: 00000000000000fe [ 1583.379870][T28219] RBP: 00007f20d4011f91 R08: 000000006bc2cc7d R09: 0000000000000000 [ 1583.379891][T28219] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1583.379911][T28219] R13: 00007f20d41e6218 R14: 00007f20d41e6180 R15: 00007ffe50a6ced8 [ 1583.379957][T28219] [ 1583.792300][T28224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 1586.414781][T28276] ima: policy update failed [ 1586.444221][ T30] audit: type=1802 audit(4294967367.193:28): pid=28276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4478" res=0 errno=0 [ 1586.456915][T28278] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 1586.879097][T28287] block2mtd: Using custom MTD label '' for dev [ 1586.924280][T28287] block2mtd: error: cannot open device [ 1586.941660][T28287] aoe: could not set interface list: too many interfaces [ 1586.969834][T28287] block2mtd: Using custom MTD label '' for dev [ 1587.008353][T28289] aoe: could not set interface list: too many interfaces [ 1587.022308][T28287] block2mtd: error: cannot open device [ 1588.379658][T28328] netlink: 'syz.2.4489': attribute type 1 has an invalid length. [ 1589.449505][T28334] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1589.476833][ T30] audit: type=1800 audit(4294967370.218:29): pid=28344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4494" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1590.341190][T28337] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 1593.238822][T24224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1593.259177][T24224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1593.283934][T24224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1593.297710][T24224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1593.305908][T24224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1594.385613][T28406] FAULT_INJECTION: forcing a failure. [ 1594.385613][T28406] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.403905][T28406] CPU: 1 UID: 0 PID: 28406 Comm: syz.5.4511 Tainted: G I syzkaller #0 PREEMPT(full) [ 1594.403960][T28406] Tainted: [I]=FIRMWARE_WORKAROUND [ 1594.403973][T28406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1594.403993][T28406] Call Trace: [ 1594.404003][T28406] [ 1594.404017][T28406] dump_stack_lvl+0x16c/0x1f0 [ 1594.404059][T28406] should_fail_ex+0x512/0x640 [ 1594.404109][T28406] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1594.404148][T28406] should_failslab+0xc2/0x120 [ 1594.404193][T28406] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1594.404229][T28406] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1594.404272][T28406] ? __d_alloc+0x32/0xae0 [ 1594.404316][T28406] ? __d_alloc+0x32/0xae0 [ 1594.404352][T28406] __d_alloc+0x32/0xae0 [ 1594.404395][T28406] path_from_stashed+0x427/0x750 [ 1594.404430][T28406] ? do_raw_spin_unlock+0x172/0x230 [ 1594.404488][T28406] ns_get_path+0x60/0x80 [ 1594.404534][T28406] proc_ns_get_link+0x121/0x230 [ 1594.404578][T28406] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1594.404624][T28406] ? atime_needs_update+0x8b/0x710 [ 1594.404674][T28406] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1594.404715][T28406] step_into+0x196c/0x21a0 [ 1594.404754][T28406] ? __pfx_step_into+0x10/0x10 [ 1594.404785][T28406] ? find_held_lock+0x2b/0x80 [ 1594.404834][T28406] path_openat+0x6db/0x2cb0 [ 1594.404886][T28406] ? __pfx_path_openat+0x10/0x10 [ 1594.404927][T28406] ? __lock_acquire+0xb8a/0x1c90 [ 1594.404976][T28406] do_filp_open+0x20b/0x470 [ 1594.405014][T28406] ? __pfx_do_filp_open+0x10/0x10 [ 1594.405082][T28406] ? alloc_fd+0x471/0x7d0 [ 1594.405127][T28406] do_sys_openat2+0x11b/0x1d0 [ 1594.405175][T28406] ? __pfx_do_sys_openat2+0x10/0x10 [ 1594.405240][T28406] __x64_sys_openat+0x174/0x210 [ 1594.405290][T28406] ? __pfx___x64_sys_openat+0x10/0x10 [ 1594.405357][T28406] do_syscall_64+0xcd/0xfa0 [ 1594.405422][T28406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.405456][T28406] RIP: 0033:0x7f20d3f8d810 [ 1594.405483][T28406] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1594.405525][T28406] RSP: 002b:00007f20d4f0df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1594.405564][T28406] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20d3f8d810 [ 1594.405586][T28406] RDX: 0000000000000002 RSI: 00007f20d4f0dfa0 RDI: 00000000ffffff9c [ 1594.405608][T28406] RBP: 00007f20d4f0dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.405628][T28406] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1594.405649][T28406] R13: 00007f20d41e6038 R14: 00007f20d41e5fa0 R15: 00007ffe50a6ced8 [ 1594.405691][T28406] [ 1595.014946][T17022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.050284][T28391] chnl_net:caif_netlink_parms(): no params data found [ 1595.123112][T17022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.223837][T17022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.241923][T28391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.250011][T28391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.257528][T28391] bridge_slave_0: entered allmulticast mode [ 1595.267486][T28391] bridge_slave_0: entered promiscuous mode [ 1595.278209][T28391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.295929][T28391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.305912][T28391] bridge_slave_1: entered allmulticast mode [ 1595.316779][T28391] bridge_slave_1: entered promiscuous mode [ 1595.351028][T17022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.372125][T28427] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1595.411064][T18667] Bluetooth: hci0: command tx timeout [ 1595.497327][T28391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.556485][T28391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.831730][T28391] team0: Port device team_slave_0 added [ 1595.951067][T28391] team0: Port device team_slave_1 added [ 1596.266917][T28391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1596.279867][T28391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.309773][T28434] nbd: illegal input index -560326505 [ 1596.365733][T28391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1596.563121][T28391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1596.578931][T28391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.605385][T28391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.478142][T18667] Bluetooth: hci0: command tx timeout [ 1597.698433][T17022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.719683][T17022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.730421][T17022] bond0 (unregistering): Released all slaves [ 1597.887609][T28391] hsr_slave_0: entered promiscuous mode [ 1597.894494][T28391] hsr_slave_1: entered promiscuous mode [ 1597.901844][T28391] debugfs: 'hsr0' already exists in 'hsr' [ 1597.908602][T28391] Cannot create hsr debugfs directory [ 1597.937833][T17022] tipc: Left network mode [ 1598.079056][T28456] FAULT_INJECTION: forcing a failure. [ 1598.079056][T28456] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.100139][T28456] CPU: 0 UID: 0 PID: 28456 Comm: syz.4.4521 Tainted: G I syzkaller #0 PREEMPT(full) [ 1598.100197][T28456] Tainted: [I]=FIRMWARE_WORKAROUND [ 1598.100212][T28456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1598.100232][T28456] Call Trace: [ 1598.100244][T28456] [ 1598.100257][T28456] dump_stack_lvl+0x16c/0x1f0 [ 1598.100302][T28456] should_fail_ex+0x512/0x640 [ 1598.100354][T28456] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1598.100396][T28456] should_failslab+0xc2/0x120 [ 1598.100441][T28456] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1598.100477][T28456] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1598.100518][T28456] ? __d_alloc+0x32/0xae0 [ 1598.100562][T28456] ? __d_alloc+0x32/0xae0 [ 1598.100598][T28456] __d_alloc+0x32/0xae0 [ 1598.100641][T28456] path_from_stashed+0x427/0x750 [ 1598.100676][T28456] ? do_raw_spin_unlock+0x172/0x230 [ 1598.100738][T28456] ns_get_path+0x60/0x80 [ 1598.100773][T28456] proc_ns_get_link+0x121/0x230 [ 1598.100815][T28456] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1598.100861][T28456] ? atime_needs_update+0x8b/0x710 [ 1598.100913][T28456] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1598.100955][T28456] step_into+0x196c/0x21a0 [ 1598.100995][T28456] ? __pfx_step_into+0x10/0x10 [ 1598.101027][T28456] ? find_held_lock+0x2b/0x80 [ 1598.101074][T28456] path_openat+0x6db/0x2cb0 [ 1598.101134][T28456] ? __pfx_path_openat+0x10/0x10 [ 1598.101175][T28456] ? __lock_acquire+0xb8a/0x1c90 [ 1598.101225][T28456] do_filp_open+0x20b/0x470 [ 1598.101263][T28456] ? __pfx_do_filp_open+0x10/0x10 [ 1598.101330][T28456] ? alloc_fd+0x471/0x7d0 [ 1598.101374][T28456] do_sys_openat2+0x11b/0x1d0 [ 1598.101423][T28456] ? __pfx_do_sys_openat2+0x10/0x10 [ 1598.101490][T28456] __x64_sys_openat+0x174/0x210 [ 1598.101541][T28456] ? __pfx___x64_sys_openat+0x10/0x10 [ 1598.101609][T28456] do_syscall_64+0xcd/0xfa0 [ 1598.101649][T28456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.101684][T28456] RIP: 0033:0x7f6e05b8d810 [ 1598.101712][T28456] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1598.101745][T28456] RSP: 002b:00007f6e06abbf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1598.101779][T28456] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e05b8d810 [ 1598.101801][T28456] RDX: 0000000000000002 RSI: 00007f6e06abbfa0 RDI: 00000000ffffff9c [ 1598.101824][T28456] RBP: 00007f6e06abbfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1598.101846][T28456] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1598.101867][T28456] R13: 00007f6e05de6128 R14: 00007f6e05de6090 R15: 00007ffe65322ca8 [ 1598.101914][T28456] [ 1598.724911][T28465] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1598.959905][T28474] netlink: 'syz.5.4524': attribute type 19 has an invalid length. [ 1599.004017][T28474] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4524'. [ 1599.556815][T18667] Bluetooth: hci0: command tx timeout [ 1599.647045][T17022] hsr_slave_0: left promiscuous mode [ 1599.654589][T17022] hsr_slave_1: left promiscuous mode [ 1599.697105][T17022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.704571][T17022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.748585][T17022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1599.756554][T17022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.812188][T17022] veth1_macvtap: left promiscuous mode [ 1599.830690][T17022] veth0_macvtap: left promiscuous mode [ 1599.846864][T17022] veth1_vlan: left promiscuous mode [ 1599.885431][T17022] veth0_vlan: left promiscuous mode [ 1600.763392][T28497] ima: policy update failed [ 1600.779334][ T30] audit: type=1802 audit(4294967381.607:30): pid=28497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.4527" res=0 errno=0 [ 1601.436213][T17022] team0 (unregistering): Port device team_slave_1 removed [ 1601.549159][T17022] team0 (unregistering): Port device team_slave_0 removed [ 1601.617990][T18667] Bluetooth: hci0: command tx timeout [ 1603.668388][T28391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1603.708819][T28391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1603.777187][T28391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1603.869380][T28391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1604.079073][T28538] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1604.298434][T28391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.450410][T28391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.509400][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.516627][T17243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.602685][T17243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.609880][T17243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.901000][T28541] zswap: compressor not available [ 1604.982531][T28544] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1606.184576][T28391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.435037][T28391] veth0_vlan: entered promiscuous mode [ 1606.496513][T28391] veth1_vlan: entered promiscuous mode [ 1606.578605][T28391] veth0_macvtap: entered promiscuous mode [ 1606.605308][T28391] veth1_macvtap: entered promiscuous mode [ 1606.657917][T28391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.770292][T28391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.830445][T17243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.852514][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1606.886559][T17243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.910327][T17243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.963678][T17022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.152141][T19574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.164184][T19574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.243777][T17022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.255220][T17022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.286019][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1607.817202][T28619] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1608.047814][T18667] Bluetooth: hci0: unexpected event 0x04 length: 1 < 10 [ 1608.599243][T28634] zswap: compressor not available [ 1608.607519][T28639] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1609.465464][T28667] program syz.3.4555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1609.798433][T28670] sctp: [Deprecated]: syz.3.4555 (pid 28670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1609.798433][T28670] Use struct sctp_sack_info instead [ 1610.219136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1610.225891][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.587197][T28682] zswap: compressor not available [ 1610.620004][T28689] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1610.902822][T28700] ima: policy update failed [ 1610.920639][ T30] audit: type=1802 audit(4294967391.780:31): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4559" res=0 errno=0 [ 1611.103197][T18667] Bluetooth: hci4: unexpected subevent 0x06 length: 123 > 10 [ 1611.116352][T28708] blktrace: Concurrent blktraces are not allowed on sg0 [ 1611.273708][T28713] FAULT_INJECTION: forcing a failure. [ 1611.273708][T28713] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.297235][T28713] CPU: 0 UID: 0 PID: 28713 Comm: syz.2.4563 Tainted: G I syzkaller #0 PREEMPT(full) [ 1611.297286][T28713] Tainted: [I]=FIRMWARE_WORKAROUND [ 1611.297299][T28713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1611.297318][T28713] Call Trace: [ 1611.297328][T28713] [ 1611.297340][T28713] dump_stack_lvl+0x16c/0x1f0 [ 1611.297378][T28713] should_fail_ex+0x512/0x640 [ 1611.297424][T28713] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1611.297466][T28713] should_failslab+0xc2/0x120 [ 1611.297510][T28713] __kvmalloc_node_noprof+0x141/0x9c0 [ 1611.297547][T28713] ? traverse.part.0.constprop.0+0x397/0x650 [ 1611.297602][T28713] ? traverse.part.0.constprop.0+0x397/0x650 [ 1611.297646][T28713] traverse.part.0.constprop.0+0x397/0x650 [ 1611.297703][T28713] seq_read_iter+0x93c/0x12d0 [ 1611.297774][T28713] seq_read+0x3a3/0x570 [ 1611.297818][T28713] ? __pfx_seq_read+0x10/0x10 [ 1611.297868][T28713] ? get_pid_task+0xfc/0x250 [ 1611.297924][T28713] full_proxy_read+0x131/0x1a0 [ 1611.297964][T28713] ? __pfx_full_proxy_read+0x10/0x10 [ 1611.298008][T28713] vfs_read+0x1e4/0xcf0 [ 1611.298052][T28713] ? __pfx_vfs_read+0x10/0x10 [ 1611.298082][T28713] ? find_held_lock+0x2b/0x80 [ 1611.298116][T28713] ? __fget_files+0x204/0x3c0 [ 1611.298154][T28713] ? __fget_files+0x20e/0x3c0 [ 1611.298183][T28713] ? __fget_files+0x130/0x3c0 [ 1611.298226][T28713] __x64_sys_pread64+0x1eb/0x250 [ 1611.298264][T28713] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1611.298315][T28713] do_syscall_64+0xcd/0xfa0 [ 1611.298353][T28713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.298385][T28713] RIP: 0033:0x7f00ba78efc9 [ 1611.298411][T28713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1611.298442][T28713] RSP: 002b:00007f00bb712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1611.298472][T28713] RAX: ffffffffffffffda RBX: 00007f00ba9e5fa0 RCX: 00007f00ba78efc9 [ 1611.298494][T28713] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1611.298513][T28713] RBP: 00007f00bb712090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.298533][T28713] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1611.298553][T28713] R13: 00007f00ba9e6038 R14: 00007f00ba9e5fa0 R15: 00007ffc5a4c81c8 [ 1611.298597][T28713] [ 1611.700074][T28715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1612.719479][T28715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.736887][T28715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.798964][T28715] bond0 (unregistering): Released all slaves [ 1613.156184][T18667] Bluetooth: hci4: command 0x0406 tx timeout [ 1613.257032][T28736] futex_wake_op: syz.3.4569 tries to shift op by -2048; fix this program [ 1613.299003][T28736] 0x000000000001-0x000000020000 : "" [ 1613.304907][T28736] FAULT_INJECTION: forcing a failure. [ 1613.304907][T28736] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.362738][T28736] CPU: 1 UID: 0 PID: 28736 Comm: syz.3.4569 Tainted: G I syzkaller #0 PREEMPT(full) [ 1613.362792][T28736] Tainted: [I]=FIRMWARE_WORKAROUND [ 1613.362806][T28736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1613.362826][T28736] Call Trace: [ 1613.362838][T28736] [ 1613.362850][T28736] dump_stack_lvl+0x16c/0x1f0 [ 1613.362892][T28736] should_fail_ex+0x512/0x640 [ 1613.362942][T28736] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1613.362981][T28736] should_failslab+0xc2/0x120 [ 1613.363026][T28736] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1613.363061][T28736] ? __kernfs_new_node+0xd2/0x8e0 [ 1613.363113][T28736] ? __kernfs_new_node+0xd2/0x8e0 [ 1613.363155][T28736] __kernfs_new_node+0xd2/0x8e0 [ 1613.363202][T28736] ? __pfx___kernfs_new_node+0x10/0x10 [ 1613.363257][T28736] ? find_held_lock+0x2b/0x80 [ 1613.363293][T28736] ? kernfs_root+0xee/0x2a0 [ 1613.363344][T28736] kernfs_new_node+0x13c/0x1e0 [ 1613.363400][T28736] __kernfs_create_file+0x53/0x350 [ 1613.363441][T28736] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1613.363520][T28736] internal_create_group+0x578/0xf30 [ 1613.363585][T28736] ? __pfx_internal_create_group+0x10/0x10 [ 1613.363635][T28736] ? kernfs_create_link+0x1bd/0x240 [ 1613.363676][T28736] internal_create_groups+0x9d/0x150 [ 1613.363725][T28736] device_add+0x731/0x1aa0 [ 1613.363778][T28736] ? lockdep_init_map_type+0x5c/0x280 [ 1613.363828][T28736] ? __pfx_device_add+0x10/0x10 [ 1613.363876][T28736] ? lockdep_init_map_type+0x5c/0x280 [ 1613.363925][T28736] ? __init_waitqueue_head+0xca/0x150 [ 1613.363990][T28736] add_mtd_device+0x999/0x1850 [ 1613.364052][T28736] ? __pfx_add_mtd_device+0x10/0x10 [ 1613.364117][T28736] mtd_add_partition+0x30c/0x670 [ 1613.364155][T28736] ? __pfx_mtd_add_partition+0x10/0x10 [ 1613.364189][T28736] ? __might_fault+0xe3/0x190 [ 1613.364222][T28736] ? __might_fault+0xe3/0x190 [ 1613.364279][T28736] mtdchar_blkpg_ioctl+0x20b/0x250 [ 1613.364316][T28736] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1613.364391][T28736] mtdchar_ioctl+0xbc4/0x2090 [ 1613.364435][T28736] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1613.364477][T28736] ? __mutex_trylock_common+0xe9/0x250 [ 1613.364534][T28736] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1613.364603][T28736] ? rcu_is_watching+0x12/0xc0 [ 1613.364642][T28736] ? __mutex_lock+0x1c5/0x1060 [ 1613.364683][T28736] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1613.364741][T28736] ? __pfx___mutex_lock+0x10/0x10 [ 1613.364782][T28736] ? find_held_lock+0x2b/0x80 [ 1613.364838][T28736] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1613.364874][T28736] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1613.364914][T28736] __x64_sys_ioctl+0x18e/0x210 [ 1613.364963][T28736] do_syscall_64+0xcd/0xfa0 [ 1613.365003][T28736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.365035][T28736] RIP: 0033:0x7fcf0458efc9 [ 1613.365061][T28736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1613.365094][T28736] RSP: 002b:00007fcf05440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1613.365126][T28736] RAX: ffffffffffffffda RBX: 00007fcf047e5fa0 RCX: 00007fcf0458efc9 [ 1613.365150][T28736] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000007 [ 1613.365170][T28736] RBP: 00007fcf04611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1613.365190][T28736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.365210][T28736] R13: 00007fcf047e6038 R14: 00007fcf047e5fa0 R15: 00007fffa9ba04f8 [ 1613.365256][T28736] [ 1613.758016][T28736] ------------[ cut here ]------------ [ 1613.763735][T28736] WARNING: CPU: 0 PID: 28736 at drivers/mtd/mtdpart.c:37 release_mtd_partition+0x71/0x90 [ 1613.773812][T28736] Modules linked in: [ 1613.778203][T28736] CPU: 0 UID: 0 PID: 28736 Comm: syz.3.4569 Tainted: G I syzkaller #0 PREEMPT(full) [ 1613.789852][T28736] Tainted: [I]=FIRMWARE_WORKAROUND [ 1613.795278][T28736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1613.806731][T28736] RIP: 0010:release_mtd_partition+0x71/0x90 [ 1613.813869][T28736] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 bf 52 de fb 48 89 df 5b 5d e9 b5 52 de fb e8 a0 2c 82 fb 90 <0f> 0b 90 eb c2 e8 65 c3 e9 fb eb db 48 89 ef e8 5b c3 e9 fb eb a5 [ 1613.834867][T28736] RSP: 0018:ffffc90003eaf830 EFLAGS: 00010287 [ 1613.841014][T28736] RAX: 0000000000024ec9 RBX: ffff88807b25a000 RCX: ffffc9001742f000 [ 1613.849605][T28736] RDX: 0000000000080000 RSI: ffffffff863a3d60 RDI: ffff88807b25a000 [ 1613.858459][T28736] RBP: ffff88807b25a650 R08: 0000000000000001 R09: 0000000000000001 [ 1613.866829][T28736] R10: 0000000000000005 R11: ffffffff81000130 R12: 0000000000000000 [ 1613.875209][T28736] R13: dffffc0000000000 R14: ffff8880202dc9c0 R15: 0000000000000000 [ 1613.883668][T28736] FS: 00007fcf054406c0(0000) GS:ffff888124a12000(0000) knlGS:0000000000000000 [ 1613.892890][T28736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1613.899523][T28736] CR2: 00007f72209b27e8 CR3: 00000000522e4000 CR4: 00000000003526f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1613.908352][T28736] Call Trace: [ 1613.911675][T28736] [ 1613.916566][T28736] mtd_release+0xa0/0xd0 [ 1613.920886][T28736] ? __pfx_mtd_release+0x10/0x10 [ 1613.926323][T28736] device_release+0xa4/0x240 [ 1613.930978][T28736] kobject_put+0x1e7/0x5a0 [ 1613.935544][T28736] put_device+0x1f/0x30 [ 1613.939802][T28736] add_mtd_device+0xc47/0x1850 [ 1613.944781][T28736] ? __pfx_add_mtd_device+0x10/0x10 [ 1613.950568][T28736] mtd_add_partition+0x30c/0x670 [ 1613.956028][T28736] ? __pfx_mtd_add_partition+0x10/0x10 [ 1613.961868][T28736] ? __might_fault+0xe3/0x190 [ 1613.966660][T28736] ? __might_fault+0xe3/0x190 [ 1613.971418][T28736] mtdchar_blkpg_ioctl+0x20b/0x250 [ 1613.976907][T28736] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1613.982776][T28736] mtdchar_ioctl+0xbc4/0x2090 [ 1613.987522][T28736] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1613.992846][T28736] ? __mutex_trylock_common+0xe9/0x250 [ 1613.998380][T28736] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1614.004392][T28736] ? rcu_is_watching+0x12/0xc0 [ 1614.009948][T28736] ? __mutex_lock+0x1c5/0x1060 [ 1614.015888][T28736] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1614.021009][T28736] ? __pfx___mutex_lock+0x10/0x10 [ 1614.026566][T28736] ? find_held_lock+0x2b/0x80 [ 1614.031340][T28736] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1614.036972][T28736] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1614.043004][T28736] __x64_sys_ioctl+0x18e/0x210 [ 1614.047851][T28736] do_syscall_64+0xcd/0xfa0 [ 1614.053000][T28736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.059613][T28736] RIP: 0033:0x7fcf0458efc9 [ 1614.064367][T28736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1614.084485][T28736] RSP: 002b:00007fcf05440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.093044][T28736] RAX: ffffffffffffffda RBX: 00007fcf047e5fa0 RCX: 00007fcf0458efc9 [ 1614.101079][T28736] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000007 [ 1614.109879][T28736] RBP: 00007fcf04611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1614.119164][T28736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.127695][T28736] R13: 00007fcf047e6038 R14: 00007fcf047e5fa0 R15: 00007fffa9ba04f8 [ 1614.135826][T28736] [ 1614.138895][T28736] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1614.146224][T28736] CPU: 0 UID: 0 PID: 28736 Comm: syz.3.4569 Tainted: G I syzkaller #0 PREEMPT(full) [ 1614.157233][T28736] Tainted: [I]=FIRMWARE_WORKAROUND [ 1614.162381][T28736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1614.172495][T28736] Call Trace: [ 1614.175822][T28736] [ 1614.178793][T28736] dump_stack_lvl+0x3d/0x1f0 [ 1614.183447][T28736] vpanic+0x640/0x6f0 [ 1614.187504][T28736] ? release_mtd_partition+0x71/0x90 [ 1614.192844][T28736] panic+0xca/0xd0 [ 1614.196634][T28736] ? __pfx_panic+0x10/0x10 [ 1614.201134][T28736] check_panic_on_warn+0xab/0xb0 [ 1614.206141][T28736] __warn+0xf6/0x3c0 [ 1614.210087][T28736] ? release_mtd_partition+0x71/0x90 [ 1614.215402][T28736] report_bug+0x3c3/0x580 [ 1614.219761][T28736] ? release_mtd_partition+0x71/0x90 [ 1614.225073][T28736] handle_bug+0x184/0x210 [ 1614.229437][T28736] exc_invalid_op+0x17/0x50 [ 1614.233982][T28736] asm_exc_invalid_op+0x1a/0x20 [ 1614.238865][T28736] RIP: 0010:release_mtd_partition+0x71/0x90 [ 1614.244786][T28736] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 bf 52 de fb 48 89 df 5b 5d e9 b5 52 de fb e8 a0 2c 82 fb 90 <0f> 0b 90 eb c2 e8 65 c3 e9 fb eb db 48 89 ef e8 5b c3 e9 fb eb a5 [ 1614.264426][T28736] RSP: 0018:ffffc90003eaf830 EFLAGS: 00010287 [ 1614.270527][T28736] RAX: 0000000000024ec9 RBX: ffff88807b25a000 RCX: ffffc9001742f000 [ 1614.278561][T28736] RDX: 0000000000080000 RSI: ffffffff863a3d60 RDI: ffff88807b25a000 [ 1614.286573][T28736] RBP: ffff88807b25a650 R08: 0000000000000001 R09: 0000000000000001 [ 1614.294570][T28736] R10: 0000000000000005 R11: ffffffff81000130 R12: 0000000000000000 [ 1614.302565][T28736] R13: dffffc0000000000 R14: ffff8880202dc9c0 R15: 0000000000000000 [ 1614.310570][T28736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.316677][T28736] ? release_mtd_partition+0x70/0x90 [ 1614.321995][T28736] mtd_release+0xa0/0xd0 [ 1614.326266][T28736] ? __pfx_mtd_release+0x10/0x10 [ 1614.331228][T28736] device_release+0xa4/0x240 [ 1614.335845][T28736] kobject_put+0x1e7/0x5a0 [ 1614.340295][T28736] put_device+0x1f/0x30 [ 1614.344501][T28736] add_mtd_device+0xc47/0x1850 [ 1614.349400][T28736] ? __pfx_add_mtd_device+0x10/0x10 [ 1614.354658][T28736] mtd_add_partition+0x30c/0x670 [ 1614.359632][T28736] ? __pfx_mtd_add_partition+0x10/0x10 [ 1614.365196][T28736] ? __might_fault+0xe3/0x190 [ 1614.369912][T28736] ? __might_fault+0xe3/0x190 [ 1614.374658][T28736] mtdchar_blkpg_ioctl+0x20b/0x250 [ 1614.379856][T28736] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1614.385548][T28736] mtdchar_ioctl+0xbc4/0x2090 [ 1614.390254][T28736] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1614.395398][T28736] ? __mutex_trylock_common+0xe9/0x250 [ 1614.400897][T28736] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1614.406838][T28736] ? rcu_is_watching+0x12/0xc0 [ 1614.411640][T28736] ? __mutex_lock+0x1c5/0x1060 [ 1614.416442][T28736] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1614.421507][T28736] ? __pfx___mutex_lock+0x10/0x10 [ 1614.426575][T28736] ? find_held_lock+0x2b/0x80 [ 1614.431428][T28736] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1614.436669][T28736] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1614.442618][T28736] __x64_sys_ioctl+0x18e/0x210 [ 1614.447434][T28736] do_syscall_64+0xcd/0xfa0 [ 1614.451974][T28736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.457989][T28736] RIP: 0033:0x7fcf0458efc9 [ 1614.462452][T28736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1614.482174][T28736] RSP: 002b:00007fcf05440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.490616][T28736] RAX: ffffffffffffffda RBX: 00007fcf047e5fa0 RCX: 00007fcf0458efc9 [ 1614.498616][T28736] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000007 [ 1614.506693][T28736] RBP: 00007fcf04611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1614.514769][T28736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.522757][T28736] R13: 00007fcf047e6038 R14: 00007fcf047e5fa0 R15: 00007fffa9ba04f8 [ 1614.530767][T28736] [ 1614.534079][T28736] Kernel Offset: disabled [ 1614.538437][T28736] Rebooting in 86400 seconds..