last executing test programs: 27.5042707s ago: executing program 3 (id=4735): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x4f64a1d5) r2 = socket(0x2, 0x801, 0x6) setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xa4) madvise$auto(0x5, 0x10001, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="ad2c0029000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/module/cx231xx/parameters/card\x00', 0x8100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/4096, 0x1000) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000004) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) 26.260610394s ago: executing program 3 (id=4740): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f0000000100)="632d7efe595046ab5c98199adf260600de16baef6176e6021e1dcedc5b00e8fdd880fee6fb9ca2ac324280530000000000000000e0ffffff10", 0x39) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty60\x00', 0x42880, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r2, 0x3, &(0x7f0000000140)='\x00', &(0x7f0000000180)="9dccf46c6d025c4f30adf5a39b1895bcf84b1c8139f69099d3bb3b8101674aa795252bf7f2b8b0fe8e9f582f77cdc10fece2b2cd1f1407aba3da772b7cd7e7f0afd661ae97398cc9e961f7b61ff91c3c2c43249ed20457120e835d4e808f7b9e630623e89edaca812efaad2296f3", 0x5) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x165bc3, 0x0) sendfile$auto(r0, r3, 0x0, 0x4000000007) read$auto_mon_fops_binary_mon_bin(0xffffffffffffffff, &(0x7f00000000c0)=""/112, 0x70) 17.000134211s ago: executing program 0 (id=4761): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) socket(0x25, 0x1, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0xc000, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r4, 0x80044584, 0x0) 15.836905736s ago: executing program 0 (id=4764): r0 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0) mmap$auto(0xfffffffffffffffd, 0x0, 0xfffffffffffffe01, 0x8051, r1, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) r2 = socket(0x22, 0x1, 0x100) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) ptrace$auto_PTRACE_SETREGSET(0x4205, 0x0, 0xffffffffffffffff, 0x80000000009193) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYBLOB], 0x1c}}, 0x10) madvise$auto(0x0, 0xf663, 0x15) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x40, &(0x7f0000000080)={0x7fffffff, 0xc, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x5, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) gettimeofday$auto(&(0x7f0000000180)={0x2, 0x6}, &(0x7f0000000200)={0x8}) io_uring_enter$auto(r5, 0x9, 0x820e, 0x29, 0x0, 0x18) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) 14.576589809s ago: executing program 0 (id=4767): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x0, 0x0, 0xfffffffffffffffd, 0x804}, 0x2}, 0x9, 0x306, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) close_range$auto(r1, r1, 0x8000) socket(0xa, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYBLOB="00032abd7000fcdbed259700000004002280", @ANYBLOB="e70ea18b91a3b00a1db2ef357b587ba5bc8b0104e3120bf0c81d7f0208a1c2dbceb8e7ea5fb09c24e44647247c4f352f63b16e6cb85d832aaa7a596f8e20d111db8282b3df78d11fe93dd88be3dd4d8dbbed4f50f3414ebc70a7f118dbf7a00bd6ba6c75cb0802591dfdb7e1422b83685f00"/129, @ANYBLOB="73aa166de630c62d9bdc1337f90514a3b6744fa96eb475574812502481f2d7d6b8fb534f3982567d67ba32ddb10240714a8bd80a9844b4ee12c666b7f1273997fa5c84b9", @ANYBLOB="2f47be9ab76b7529b3bcfcc293c372bccca064c9e77edcc4d7a655ec21e43b9909215c183a4c14c4aa8e34249d38e6da7ee2343f034e92306524755d84dbbf91"], 0x18}, 0x1, 0x0, 0x0, 0x4040050}, 0x60801) socket(0xa, 0x801, 0x84) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @host}, 0x3a) mmap$auto(0x0, 0x20009, 0xe1, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0xa, 0x80000, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x2f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r5, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0xfff, 0x7, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0x2}, 0x6, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13.857645843s ago: executing program 0 (id=4769): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r0, 0x0, 0x0) read$auto(r0, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0xe1500000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5}, 0x7ff) 13.575018509s ago: executing program 0 (id=4770): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2e00, 0x0) r1 = socket(0xa, 0x2, 0x88) bind$auto(r1, &(0x7f0000000180)=@ethernet={0x6, @local}, 0x5) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, r2) prctl$auto(0xc, 0x1, 0x4, 0x5, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(r3, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) close_range$auto(0x2, 0x8, 0x0) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x1ff, 0xeb1, r2, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e1, 0x91) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 10.938411778s ago: executing program 0 (id=4777): mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006) get_robust_list$auto(0x0, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)={&(0x7f0000000080)}}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(r1, &(0x7f0000000380)=',{5,\x00', 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80008000) prctl$auto(0x2, 0x1000001, 0x0, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) prctl$auto(0x7, 0x1, 0x0, 0xe, 0x8) write$auto(r1, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc626) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c07, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sysfs$auto(0x2, 0x21, 0x0) 6.80245517s ago: executing program 2 (id=4785): mmap$auto(0x5, 0x400000085, 0xdf, 0x556, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0xfffffffffffffffe, 0xe981, 0x8001, 0xeb3, 0x401, 0x410000008002) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0xff) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x8, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) lsm_set_self_attr$auto(0x7, &(0x7f0000000040)={0x20009, 0x6454, 0x2, 0xa5, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb6f9f33d5342ed76cc5453f8e8634458e6bf54825f7be456def0174640630a658450b159e0d65748bb3538e"}, 0x6, 0x9) 5.767657206s ago: executing program 2 (id=4787): mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000003c0)={0xed2, 0x3, 0x3145, 0x5, 0xa8, 0x0}) get_robust_list$auto(r0, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)={&(0x7f0000000080)}}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(r2, &(0x7f0000000380)=',{5,\x00', 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80008000) prctl$auto(0x2, 0x1000001, r0, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) prctl$auto(0x7, 0x1, r0, 0xe, 0x8) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc626) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c07, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sysfs$auto(0x2, 0x21, 0x0) 5.353300185s ago: executing program 1 (id=4789): r0 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/bmAttributes\x00', 0x101, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0) mmap$auto(0xfffffffffffffffd, 0x0, 0xfffffffffffffe01, 0x8051, r1, 0x3) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) r2 = socket(0x22, 0x1, 0x100) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r3, 0xffffffffffffffff, 0x80000000009193) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x161900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10003b57db7636283c7b326795709cbd7000fddbdf653500000008004d010700000026d5018b572cc206000f4f3d45d579ed9afee745030d8abddd4c1e5899b0367303c756d667cd739479bab50a33835c256762a07551359bc618b55f0911563d9a83463e349243922c40f4473512dffdeea3"], 0x1c}}, 0x10) madvise$auto(0x0, 0xf663, 0x15) 4.180776321s ago: executing program 2 (id=4790): r0 = io_uring_setup$auto(0x5, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x8000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb0, 0x401, 0x300000000000) setsockopt$auto(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x8) shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) mmap$auto(0x0, 0x20009, 0xfffffffffffffffd, 0xeb2, 0x8, 0x1008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x3, 0x40, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)="b38fc65a6042f2dc99df8ce9af2a56fcfe7442") pipe$auto(&(0x7f00000000c0)) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000025c0)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB="0500380000000000060025000100000014000700", @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x20400, 0x0) 3.528790265s ago: executing program 1 (id=4791): mmap$auto(0x5, 0x400000085, 0xdf, 0x556, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0xfffffffffffffffe, 0xe981, 0x8001, 0xeb3, 0x401, 0x410000008002) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0xff) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x8, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) lsm_set_self_attr$auto(0x7, &(0x7f0000000040)={0x20009, 0x6454, 0x2, 0xa5, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb6f9f33d5342ed76cc5453f8e8634458e6bf54825f7be456def0174640630a658450b159e0d65748bb3538e"}, 0x6, 0x9) 3.511630041s ago: executing program 2 (id=4792): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty25\x00', 0x804c0, 0x0) close_range$auto(r0, 0x8, 0x42) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r4 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) read$auto_regulator_summary_fops_(r1, &(0x7f0000000200)=""/166, 0xa6) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r3, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) connect$auto(0x3, 0x0, 0x54) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000100)=""/153, 0x99) getpid() mincore$auto(0x1000, 0x8001, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x7fffffff, 0x13c, 0x1ff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 2.521388346s ago: executing program 1 (id=4793): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) socket(0x25, 0x1, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0xc000, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r8, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r4, 0x80044584, 0x0) 2.337220778s ago: executing program 3 (id=4741): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) lseek$auto(0x3, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x7fffffff) newfstatat$auto(r1, 0x0, 0x0, 0x3) newfstatat$auto(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x7) lseek$auto(0x3, 0x0, 0x1) munmap$auto(0x20008000, 0x40009) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x8, 0x83, &(0x7f00000000c0)={{0x0, 0xfffffffffffffffc}, {0x0, 0x887}}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r0, r2, 0x0, 0x4000000007) 2.256056248s ago: executing program 2 (id=4794): madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000003c0)={0xed2, 0x3, 0x3145, 0x5, 0xa8, 0x0}) get_robust_list$auto(r0, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)={&(0x7f0000000080)}}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(r2, &(0x7f0000000380)=',{5,\x00', 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80008000) prctl$auto(0x2, 0x1000001, r0, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) prctl$auto(0x7, 0x1, r0, 0xe, 0x8) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc626) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c07, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sysfs$auto(0x2, 0x21, 0x0) 2.127734481s ago: executing program 3 (id=4795): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'vxcan1\x00'}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x100, 0x0) r1 = io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x6, 0xfffffffffffffffb, 0x13, r1, 0x8000) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0xe0702, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x8000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb0, 0x401, 0x300000000000) setsockopt$auto(r0, 0x29, 0xd4, 0x0, 0x8) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) mmap$auto(0x0, 0x20009, 0xfffffffffffffffd, 0xeb2, 0x8, 0x1008000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x5420, 0x0) socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x3, 0x40, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8080) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)="b38fc65a6042f2dc99df8ce9af2a56fcfe744238519bceaee0") remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) bpf$auto(0x0, &(0x7f0000000280)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x4200000000000008, 0xd, r1, 0x4, 0x2}, 0x6f4) (fail_nth: 44) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 1.454349077s ago: executing program 1 (id=4796): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x3a) bind$auto(r1, &(0x7f0000000100)=@isdn={0x22, 0x9, 0xb, 0x2, 0x8}, 0x2) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x9, 0x3, 0xfffffffffffffff9, 0xffffffffffffff91, r2, 0x1) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x2) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xe8, 0x0, 0x6, 0x0}) 1.386427876s ago: executing program 3 (id=4797): r0 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0) mmap$auto(0xfffffffffffffffd, 0x0, 0xfffffffffffffe01, 0x8051, r1, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) r2 = socket(0x22, 0x1, 0x100) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) ptrace$auto_PTRACE_SETREGSET(0x4205, 0x0, 0xffffffffffffffff, 0x80000000009193) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_create$auto(0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYBLOB], 0x1c}}, 0x10) madvise$auto(0x0, 0xf663, 0x15) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x40, &(0x7f0000000080)={0x7fffffff, 0xc, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x5, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(r5, 0x9, 0x820e, 0x29, 0x0, 0x18) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) 1.237001267s ago: executing program 1 (id=4798): r0 = io_uring_setup$auto(0x5, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x8000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb0, 0x401, 0x300000000000) setsockopt$auto(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x8) shmget$auto(0x0, 0xfffffffffeffffff, 0x69c2) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) mmap$auto(0x0, 0x20009, 0xfffffffffffffffd, 0xeb2, 0x8, 0x1008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x3, 0x40, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)="b38fc65a6042f2dc99df8ce9af2a56fcfe7442") pipe$auto(&(0x7f00000000c0)) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000025c0)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB="0500380000000000060025000100000014000700", @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x20400, 0x0) 831.397778ms ago: executing program 1 (id=4799): socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) mmap$auto(0x0, 0x4, 0x4000000000dd, 0xfffffffffffffff8, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x25, 0x1, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948d, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, r4, 0x8000) 169.335479ms ago: executing program 3 (id=4800): mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000003c0)={0xed2, 0x3, 0x3145, 0x5, 0xa8, 0x0}) get_robust_list$auto(r0, &(0x7f0000000300)=&(0x7f0000000340)={{&(0x7f0000000440)={&(0x7f0000000080)}}, 0xfffffffffffff4c5, &(0x7f0000000480)={&(0x7f0000000200)}}, &(0x7f0000000240)=0xfffffffffffffe01) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(r2, &(0x7f0000000380)=',{5,\x00', 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80008000) prctl$auto(0x2, 0x1000001, r0, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) prctl$auto(0x7, 0x1, r0, 0xe, 0x8) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc626) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c07, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sysfs$auto(0x2, 0x21, 0x0) 0s ago: executing program 2 (id=4801): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) pread64$auto(r0, 0x0, 0x73528428, 0x10000) (fail_nth: 2) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): T8139] __x64_sys_openat+0x174/0x210 [ 1098.672966][ T8139] ? __pfx___x64_sys_openat+0x10/0x10 [ 1098.673000][ T8139] do_syscall_64+0xcd/0x4b0 [ 1098.673029][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.673047][ T8139] RIP: 0033:0x7f09d0f8eec9 [ 1098.673062][ T8139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.673078][ T8139] RSP: 002b:00007f09d1dc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1098.673093][ T8139] RAX: ffffffffffffffda RBX: 00007f09d11e5fa0 RCX: 00007f09d0f8eec9 [ 1098.673106][ T8139] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1098.673118][ T8139] RBP: 00007f09d1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1098.673128][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.673138][ T8139] R13: 00007f09d11e6038 R14: 00007f09d11e5fa0 R15: 00007ffc02160ec8 [ 1098.673159][ T8139] [ 1098.673170][ T8139] ALSA: seq_oss: can't create port [ 1100.859353][ T8182] binder: 8181:8182 ioctl 5380 2000000000c0 returned -22 [ 1101.055256][ T8184] binder: 8183:8184 ioctl c0306201 200000000000 returned -11 [ 1101.624003][ T8201] hub 8-0:1.0: USB hub found [ 1101.647577][ T8201] hub 8-0:1.0: 1 port detected [ 1102.611860][ T8243] binder: 8242:8243 ioctl 5380 2000000000c0 returned -22 [ 1104.473152][ T8321] svc: failed to register nfsdv3 RPC service (errno 111). [ 1104.491972][ T8321] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1104.613929][ T8337] binder: 8335:8337 ioctl 5380 2000000000c0 returned -22 [ 1104.709910][ T8337] sd 0:0:1:0: PR command failed: 1026 [ 1104.774339][ T8337] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1104.785424][ T8337] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1108.113907][ T8463] binder: 8458:8463 ioctl 5380 2000000000c0 returned -22 [ 1108.358497][ T8472] binder: 8471:8472 ioctl 5380 2000000000c0 returned -22 [ 1108.984862][ T8508] random: crng reseeded on system resumption [ 1110.765939][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1111.180678][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1111.207715][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.187408][ T8649] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1113.200524][ T8649] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1114.391799][ T8692] binder: 8682:8692 ioctl 5380 2000000000c0 returned -22 [ 1116.960930][ T8764] binder: 8763:8764 ioctl c0306201 200000000000 returned -11 [ 1118.670864][ T8766] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1119.237210][ T8819] binder: 8816:8819 ioctl c0306201 200000000000 returned -11 [ 1120.794788][ T8872] bond0: option all_slaves_active: invalid value () [ 1121.093292][ T8854] bond0: option all_slaves_active: invalid value () [ 1122.128508][ T8919] random: crng reseeded on system resumption [ 1123.147830][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1123.933233][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1124.086417][ T8976] binder: 8975:8976 ioctl 5380 2000000000c0 returned -22 [ 1124.514945][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3720'. [ 1124.868259][ T9049] binder: 9048:9049 ioctl 5380 2000000000c0 returned -22 [ 1125.232130][ T9059] binder: 9054:9059 ioctl 5380 2000000000c0 returned -22 [ 1128.943728][ T9177] binder: 9170:9177 ioctl c0306201 200000000000 returned -11 [ 1133.611926][ T9297] zswap: compressor not available [ 1137.631047][ T9468] binder: 9465:9468 ioctl 5380 2000000000c0 returned -22 [ 1137.645613][ T9468] sd 0:0:1:0: PR command failed: 1026 [ 1137.653210][ T9468] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1137.673948][ T9468] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1141.531310][ T9547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3774'. [ 1149.131396][ T9833] : Can't lookup blockdev [ 1156.376791][T10063] random: crng reseeded on system resumption [ 1156.517404][T10073] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 1157.425538][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1159.091480][T10120] binder: 10117:10120 ioctl 5380 2000000000c0 returned -22 [ 1159.099749][T10118] binder: 10113:10118 ioctl 5380 2000000000c0 returned -22 [ 1159.119074][T10120] sd 0:0:1:0: PR command failed: 1026 [ 1159.180791][T10120] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1159.195252][T10118] sd 0:0:1:0: PR command failed: 1026 [ 1159.205728][T10118] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1159.226631][T10120] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1159.246713][T10115] zswap: compressor 000 not available [ 1159.254949][T10118] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1161.448832][T10181] Invalid ELF header magic: != ELF [ 1161.979127][T10189] binder: 10187:10189 ioctl 5380 2000000000c0 returned -22 [ 1162.003119][T10189] sd 0:0:1:0: PR command failed: 1026 [ 1162.009096][T10189] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1162.016064][T10189] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1163.157468][T10217] FAULT_INJECTION: forcing a failure. [ 1163.157468][T10217] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.217774][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.2.3846 Not tainted syzkaller #0 PREEMPT(full) [ 1163.217798][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1163.217808][T10217] Call Trace: [ 1163.217815][T10217] [ 1163.217821][T10217] dump_stack_lvl+0x16c/0x1f0 [ 1163.217850][T10217] should_fail_ex+0x512/0x640 [ 1163.217871][T10217] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1163.217895][T10217] should_failslab+0xc2/0x120 [ 1163.217918][T10217] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1163.217943][T10217] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1163.217972][T10217] ? kstrdup+0x53/0x100 [ 1163.217988][T10217] kstrdup+0x53/0x100 [ 1163.218011][T10217] apply_subsystem_event_filter+0x47f/0x17e0 [ 1163.218041][T10217] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1163.218067][T10217] ? _copy_from_user+0x59/0xd0 [ 1163.218093][T10217] subsystem_filter_write+0x95/0x120 [ 1163.218116][T10217] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1163.218137][T10217] vfs_write+0x29d/0x11d0 [ 1163.218158][T10217] ? __pfx___mutex_lock+0x10/0x10 [ 1163.218179][T10217] ? __pfx_vfs_write+0x10/0x10 [ 1163.218202][T10217] ? __fget_files+0x20e/0x3c0 [ 1163.218226][T10217] ksys_write+0x12a/0x250 [ 1163.218243][T10217] ? __pfx_ksys_write+0x10/0x10 [ 1163.218266][T10217] do_syscall_64+0xcd/0x4b0 [ 1163.218289][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.218304][T10217] RIP: 0033:0x7ff49a78eec9 [ 1163.218317][T10217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1163.218332][T10217] RSP: 002b:00007ff49b5cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1163.218346][T10217] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78eec9 [ 1163.218356][T10217] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000008 [ 1163.218365][T10217] RBP: 00007ff49a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1163.218374][T10217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.218383][T10217] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1163.218403][T10217] [ 1163.974186][T10231] ubi0: attaching mtd0 [ 1163.981216][T10231] ubi0: scanning is finished [ 1163.985963][T10231] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1164.101093][T10236] Invalid ELF header magic: != ELF [ 1164.149815][T10238] binder: 10235:10238 ioctl 5380 2000000000c0 returned -22 [ 1164.174817][T10231] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1164.185989][T10238] sd 0:0:1:0: PR command failed: 1026 [ 1164.202350][T10238] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1164.236718][T10238] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1165.740260][T10304] binder: 10303:10304 ioctl 5380 2000000000c0 returned -22 [ 1165.765096][T10304] sd 0:0:1:0: PR command failed: 1026 [ 1165.777970][T10304] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1165.784942][T10304] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1170.302294][T10393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1171.952557][T10478] binder: 10477:10478 ioctl 5380 2000000000c0 returned -22 [ 1172.043591][T10478] sd 0:0:1:0: PR command failed: 1026 [ 1172.069771][T10478] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1172.113395][T10478] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1172.293811][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1172.300187][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1175.083932][T10612] openvswitch: netlink: IP tunnel TTL not specified. [ 1175.277612][T10627] binder: 10624:10627 ioctl 5380 2000000000c0 returned -22 [ 1175.479585][T10627] sd 0:0:1:0: PR command failed: 1026 [ 1175.505126][T10627] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1175.519540][T10627] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1176.983593][T10732] binder: 10728:10732 ioctl 5380 2000000000c0 returned -22 [ 1177.041163][T10732] sd 0:0:1:0: PR command failed: 1026 [ 1177.053225][T10732] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1177.060412][T10732] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1177.198029][T10738] ptrace attach of "./syz-executor exec"[10741] was attempted by "./syz-executor exec"[10738] [ 1185.811539][T10978] binder: 10976:10978 ioctl 5380 2000000000c0 returned -22 [ 1185.871513][T10978] sd 0:0:1:0: PR command failed: 1026 [ 1185.904800][T10978] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1185.979263][T10978] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1188.020722][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3938'. [ 1188.479080][T11053] binder: 11052:11053 ioctl 5380 2000000000c0 returned -22 [ 1188.503329][T11053] sd 0:0:1:0: PR command failed: 1026 [ 1188.514374][T11053] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1188.529112][T11053] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1190.722174][T11171] futex_wake_op: syz.2.3948 tries to shift op by -9; fix this program [ 1191.178555][T11185] binder: 11183:11185 ioctl 5380 2000000000c0 returned -22 [ 1192.010032][T11220] vcan0: tx drop: invalid da for name 0x000000000000efff [ 1194.801740][T11300] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input27 [ 1195.296360][T11327] random: crng reseeded on system resumption [ 1200.574311][T11531] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3979'. [ 1200.654109][T11531] : renamed from gre0 (while UP) [ 1200.681842][T11532] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3981'. [ 1200.741826][T11531] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3979'. [ 1202.019530][ T30] audit: type=1800 audit(4294967496.612:53): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3988" name="trace_pipe" dev="tracefs" ino=221 res=0 errno=0 [ 1202.148796][T11597] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2398573568.778631132.2301163385), cmd(11) [ 1203.618807][ T30] audit: type=1800 audit(4294967498.210:54): pid=11658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3995" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1204.096372][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 1204.218606][T11668] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input28 [ 1204.458807][T11678] usb usb24: usbfs: process 11678 (syz.1.3997) did not claim interface 0 before use [ 1204.551104][T11680] usb usb24: usbfs: process 11680 (syz.1.3997) did not claim interface 0 before use [ 1204.603405][T11681] netlink: 146 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1204.792066][T11692] netlink: 146 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1205.792062][T11719] input: 00 [ 1205.792062][T11719] as /devices/virtual/input/input29 [ 1205.843214][T11719] FAULT_INJECTION: forcing a failure. [ 1205.843214][T11719] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.863504][T11719] CPU: 0 UID: 0 PID: 11719 Comm: syz.2.4004 Not tainted syzkaller #0 PREEMPT(full) [ 1205.863541][T11719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1205.863555][T11719] Call Trace: [ 1205.863562][T11719] [ 1205.863572][T11719] dump_stack_lvl+0x16c/0x1f0 [ 1205.863614][T11719] should_fail_ex+0x512/0x640 [ 1205.863648][T11719] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1205.863677][T11719] should_failslab+0xc2/0x120 [ 1205.863710][T11719] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1205.863737][T11719] ? __kernfs_new_node+0xd2/0x8e0 [ 1205.863774][T11719] ? __kernfs_new_node+0xd2/0x8e0 [ 1205.863805][T11719] __kernfs_new_node+0xd2/0x8e0 [ 1205.863849][T11719] ? __pfx___kernfs_new_node+0x10/0x10 [ 1205.863890][T11719] ? find_held_lock+0x2b/0x80 [ 1205.863919][T11719] ? kernfs_root+0xee/0x2a0 [ 1205.863957][T11719] kernfs_new_node+0x13c/0x1e0 [ 1205.863998][T11719] __kernfs_create_file+0x53/0x350 [ 1205.864032][T11719] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1205.864076][T11719] sysfs_merge_group+0x1aa/0x340 [ 1205.864114][T11719] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1205.864157][T11719] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1205.864191][T11719] ? bus_to_subsys+0x131/0x160 [ 1205.864233][T11719] dpm_sysfs_add+0x237/0x280 [ 1205.864268][T11719] device_add+0x9a6/0x1aa0 [ 1205.864306][T11719] ? __pfx_device_add+0x10/0x10 [ 1205.864337][T11719] ? __pfx_exact_lock+0x10/0x10 [ 1205.864375][T11719] ? kobject_get+0xbb/0x150 [ 1205.864417][T11719] cdev_device_add+0xc2/0x1e0 [ 1205.864453][T11719] evdev_connect+0x3a4/0x4c0 [ 1205.864502][T11719] input_attach_handler.isra.0+0x173/0x250 [ 1205.864544][T11719] input_register_device+0xab9/0x1180 [ 1205.864588][T11719] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 1205.864619][T11719] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1205.864657][T11719] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1205.864693][T11719] ? find_held_lock+0x2b/0x80 [ 1205.864743][T11719] ? __pfx_uinput_ioctl+0x10/0x10 [ 1205.864774][T11719] __x64_sys_ioctl+0x18e/0x210 [ 1205.864802][T11719] do_syscall_64+0xcd/0x4b0 [ 1205.864850][T11719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.864879][T11719] RIP: 0033:0x7ff49a78eec9 [ 1205.864902][T11719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.864926][T11719] RSP: 002b:00007ff49b5cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1205.864952][T11719] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78eec9 [ 1205.864969][T11719] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 1205.864990][T11719] RBP: 00007ff49a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1205.865006][T11719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.865023][T11719] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1205.865064][T11719] [ 1206.242218][T11719] input: failed to attach handler evdev to device input29, error: -12 [ 1207.157667][T11745] FAULT_INJECTION: forcing a failure. [ 1207.157667][T11745] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.303739][T11745] CPU: 0 UID: 0 PID: 11745 Comm: syz.3.4009 Not tainted syzkaller #0 PREEMPT(full) [ 1207.303773][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1207.303787][T11745] Call Trace: [ 1207.303796][T11745] [ 1207.303805][T11745] dump_stack_lvl+0x16c/0x1f0 [ 1207.303850][T11745] should_fail_ex+0x512/0x640 [ 1207.303886][T11745] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 1207.303922][T11745] should_failslab+0xc2/0x120 [ 1207.303956][T11745] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 1207.303990][T11745] ? lockdep_init_map_type+0x5c/0x280 [ 1207.304014][T11745] ? __alloc_workqueue+0x670/0x1810 [ 1207.304054][T11745] ? lockdep_init_map_type+0x5c/0x280 [ 1207.304084][T11745] ? __alloc_workqueue+0x670/0x1810 [ 1207.304120][T11745] __alloc_workqueue+0x670/0x1810 [ 1207.304162][T11745] alloc_workqueue_noprof+0xd2/0x200 [ 1207.304197][T11745] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1207.304236][T11745] ? rcu_is_watching+0x12/0xc0 [ 1207.304264][T11745] ? trace_kmalloc+0x2b/0xd0 [ 1207.304299][T11745] ? __kmalloc_noprof+0x34f/0x880 [ 1207.304326][T11745] ? ieee80211_register_hw+0x15c9/0x4120 [ 1207.304361][T11745] ieee80211_register_hw+0x1f1a/0x4120 [ 1207.304392][T11745] ? lockdep_hardirqs_on+0x61/0x110 [ 1207.304427][T11745] ? __pfx__raw_spin_unlock_irqrestore+0x1/0x10 [ 1207.304477][T11745] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1207.304499][T11745] ? __pfx___debug_object_init+0x10/0x10 [ 1207.304539][T11745] ? find_held_lock+0x2b/0x80 [ 1207.304573][T11745] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1207.304604][T11745] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1207.304631][T11745] ? __hrtimer_setup+0x176/0x280 [ 1207.304660][T11745] mac80211_hwsim_new_radio+0x32c7/0x5650 [ 1207.304713][T11745] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1207.304755][T11745] hwsim_new_radio_nl+0xba2/0x1330 [ 1207.304790][T11745] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1207.304830][T11745] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1207.304859][T11745] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1207.304894][T11745] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1207.304925][T11745] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1207.304961][T11745] ? bpf_lsm_capable+0x9/0x10 [ 1207.304993][T11745] ? security_capable+0x7e/0x260 [ 1207.305029][T11745] ? ns_capable+0xd7/0x110 [ 1207.305065][T11745] genl_rcv_msg+0x55c/0x800 [ 1207.305100][T11745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1207.305130][T11745] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1207.305182][T11745] netlink_rcv_skb+0x155/0x420 [ 1207.305208][T11745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1207.305239][T11745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1207.305282][T11745] ? netlink_deliver_tap+0x1ae/0xd30 [ 1207.305327][T11745] genl_rcv+0x28/0x40 [ 1207.305352][T11745] netlink_unicast+0x5aa/0x870 [ 1207.305384][T11745] ? __pfx_netlink_unicast+0x10/0x10 [ 1207.305409][T11745] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1207.305545][T11745] ? __lock_acquire+0xb97/0x1ce0 [ 1207.305591][T11745] netlink_sendmsg+0x8c8/0xdd0 [ 1207.305622][T11745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.305653][T11745] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1207.305700][T11745] ____sys_sendmsg+0xa95/0xc70 [ 1207.305733][T11745] ? copy_msghdr_from_user+0x10a/0x160 [ 1207.305771][T11745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1207.305821][T11745] ___sys_sendmsg+0x134/0x1d0 [ 1207.305862][T11745] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.305952][T11745] __sys_sendmsg+0x16d/0x220 [ 1207.305991][T11745] ? __pfx___sys_sendmsg+0x10/0x10 [ 1207.306029][T11745] ? __x64_sys_futex+0x1e0/0x4c0 [ 1207.306093][T11745] do_syscall_64+0xcd/0x4b0 [ 1207.306134][T11745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.306162][T11745] RIP: 0033:0x7f09d0f8eec9 [ 1207.306186][T11745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.306214][T11745] RSP: 002b:00007f09d1da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.306241][T11745] RAX: ffffffffffffffda RBX: 00007f09d11e6090 RCX: 00007f09d0f8eec9 [ 1207.306259][T11745] RDX: 0000000004040040 RSI: 0000200000000300 RDI: 0000000000000006 [ 1207.306297][T11745] RBP: 00007f09d1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1207.306314][T11745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.306331][T11745] R13: 00007f09d11e6128 R14: 00007f09d11e6090 R15: 00007ffc02160ec8 [ 1207.306370][T11745] [ 1208.684031][T11787] binder: 11784:11787 ioctl 5380 2000000000c0 returned -22 [ 1208.726130][T11787] sd 0:0:1:0: PR command failed: 1026 [ 1208.734227][T11787] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1208.741138][T11787] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1209.564883][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4020'. [ 1210.438446][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1211.661865][T11873] kafs: addr_prefs: Invalid Command [ 1212.251549][T11889] input: f¬ as /devices/virtual/input/input30 [ 1217.220919][T12104] netlink: 'syz.2.4050': attribute type 64 has an invalid length. [ 1217.228752][T12104] netlink: 74 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1217.624998][T12125] FAULT_INJECTION: forcing a failure. [ 1217.624998][T12125] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.638372][T12125] CPU: 1 UID: 0 PID: 12125 Comm: syz.0.4051 Not tainted syzkaller #0 PREEMPT(full) [ 1217.638398][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1217.638407][T12125] Call Trace: [ 1217.638413][T12125] [ 1217.638420][T12125] dump_stack_lvl+0x16c/0x1f0 [ 1217.638445][T12125] should_fail_ex+0x512/0x640 [ 1217.638466][T12125] ? fs_reclaim_acquire+0xae/0x150 [ 1217.638491][T12125] should_failslab+0xc2/0x120 [ 1217.638517][T12125] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1217.638533][T12125] ? __pfx_map_id_range_down+0x10/0x10 [ 1217.638548][T12125] ? security_inode_alloc+0x3b/0x2b0 [ 1217.638574][T12125] ? security_inode_alloc+0x3b/0x2b0 [ 1217.638594][T12125] security_inode_alloc+0x3b/0x2b0 [ 1217.638616][T12125] inode_init_always_gfp+0xce4/0x1030 [ 1217.638636][T12125] alloc_inode+0x86/0x240 [ 1217.638656][T12125] new_inode+0x22/0x1c0 [ 1217.638677][T12125] __debugfs_create_file+0x11c/0x6b0 [ 1217.638696][T12125] debugfs_create_file_full+0x41/0x60 [ 1217.638713][T12125] kvm_dev_ioctl+0x177a/0x1af0 [ 1217.638736][T12125] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1217.638759][T12125] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1217.638775][T12125] __x64_sys_ioctl+0x18e/0x210 [ 1217.638791][T12125] do_syscall_64+0xcd/0x4b0 [ 1217.638813][T12125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.638829][T12125] RIP: 0033:0x7f37c2b8eec9 [ 1217.638842][T12125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.638856][T12125] RSP: 002b:00007f37c3add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1217.638870][T12125] RAX: ffffffffffffffda RBX: 00007f37c2de5fa0 RCX: 00007f37c2b8eec9 [ 1217.638879][T12125] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 1217.638888][T12125] RBP: 00007f37c2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1217.638897][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.638906][T12125] R13: 00007f37c2de6038 R14: 00007f37c2de5fa0 R15: 00007ffe01d89fd8 [ 1217.638924][T12125] [ 1217.638946][T12125] debugfs: out of free dentries, can not create file 'halt_attempted_poll' [ 1222.333249][T12292] sd 0:0:1:0: PR command failed: 1026 [ 1222.338711][T12292] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1222.349848][T12292] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1224.958047][T12392] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 1225.649878][T12411] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1227.941902][ T30] audit: type=1400 audit(4294967522.657:55): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12477 comm="syz.1.4096" [ 1229.014656][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 1229.675355][ T8313] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1231.280895][T12607] batman_adv: Routing algorithm '7' is not supported [ 1232.845024][T12661] openvswitch: netlink: Key 13 has unexpected len 4 expected 24 [ 1233.116922][T12558] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1233.409555][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.416114][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1234.476155][T12687] __vm_enough_memory: pid: 12687, comm: syz.3.4123, bytes: 4398046511104 not enough memory for the allocation [ 1234.803935][T12675] delete_channel: no stack [ 1235.987788][T12742] ptrace attach of "./syz-executor exec"[12743] was attempted by "./syz-executor exec"[12742] [ 1237.020327][T12757] FAULT_INJECTION: forcing a failure. [ 1237.020327][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.048931][T12757] CPU: 1 UID: 0 PID: 12757 Comm: syz.1.4132 Not tainted syzkaller #0 PREEMPT(full) [ 1237.048955][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1237.048967][T12757] Call Trace: [ 1237.048973][T12757] [ 1237.048979][T12757] dump_stack_lvl+0x16c/0x1f0 [ 1237.049008][T12757] should_fail_ex+0x512/0x640 [ 1237.049029][T12757] ? fs_reclaim_acquire+0xae/0x150 [ 1237.049052][T12757] should_failslab+0xc2/0x120 [ 1237.049081][T12757] __kmalloc_noprof+0xdd/0x880 [ 1237.049096][T12757] ? tomoyo_encode2+0x100/0x3e0 [ 1237.049116][T12757] ? tomoyo_encode2+0x100/0x3e0 [ 1237.049131][T12757] tomoyo_encode2+0x100/0x3e0 [ 1237.049151][T12757] tomoyo_encode+0x29/0x50 [ 1237.049166][T12757] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1237.049189][T12757] tomoyo_get_exe+0x63/0xa0 [ 1237.049210][T12757] tomoyo_write_control+0x689/0x1430 [ 1237.049238][T12757] ? __pfx_tomoyo_write_control+0x10/0x10 [ 1237.049263][T12757] ? __pfx_tomoyo_write+0x10/0x10 [ 1237.049280][T12757] vfs_write+0x29d/0x11d0 [ 1237.049301][T12757] ? __pfx_vfs_write+0x10/0x10 [ 1237.049319][T12757] ? do_sys_openat2+0x157/0x1d0 [ 1237.049331][T12757] ? __pfx_do_sys_openat2+0x10/0x10 [ 1237.049354][T12757] ksys_write+0x12a/0x250 [ 1237.049370][T12757] ? __pfx_ksys_write+0x10/0x10 [ 1237.049393][T12757] do_syscall_64+0xcd/0x4b0 [ 1237.049415][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.049429][T12757] RIP: 0033:0x7f2e7c58eec9 [ 1237.049445][T12757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1237.049459][T12757] RSP: 002b:00007f2e7d355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1237.049473][T12757] RAX: ffffffffffffffda RBX: 00007f2e7c7e6090 RCX: 00007f2e7c58eec9 [ 1237.049483][T12757] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1237.049492][T12757] RBP: 00007f2e7d355090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.049500][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.049509][T12757] R13: 00007f2e7c7e6128 R14: 00007f2e7c7e6090 R15: 00007ffe67239098 [ 1237.049527][T12757] [ 1237.050046][T12757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1238.940837][T12820] openvswitch: netlink: Key 13 has unexpected len 4 expected 24 [ 1241.538504][T12858] sd 0:0:1:0: PR command failed: 1026 [ 1241.593873][T12858] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1241.625769][T12858] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1242.848085][ T8310] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 1244.976405][T12987] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 1245.554569][T13007] FAULT_INJECTION: forcing a failure. [ 1245.554569][T13007] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.664259][T13007] CPU: 0 UID: 0 PID: 13007 Comm: syz.0.4163 Tainted: G I syzkaller #0 PREEMPT(full) [ 1245.664289][T13007] Tainted: [I]=FIRMWARE_WORKAROUND [ 1245.664295][T13007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1245.664305][T13007] Call Trace: [ 1245.664310][T13007] [ 1245.664316][T13007] dump_stack_lvl+0x16c/0x1f0 [ 1245.664344][T13007] should_fail_ex+0x512/0x640 [ 1245.664365][T13007] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1245.664386][T13007] should_failslab+0xc2/0x120 [ 1245.664407][T13007] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1245.664424][T13007] ? security_file_alloc+0x34/0x2b0 [ 1245.664445][T13007] ? security_file_alloc+0x34/0x2b0 [ 1245.664460][T13007] security_file_alloc+0x34/0x2b0 [ 1245.664477][T13007] init_file+0x93/0x4c0 [ 1245.664498][T13007] alloc_empty_file+0x73/0x1e0 [ 1245.664520][T13007] path_openat+0xda/0x2cb0 [ 1245.664544][T13007] ? __pfx_path_openat+0x10/0x10 [ 1245.664566][T13007] do_filp_open+0x20b/0x470 [ 1245.664584][T13007] ? __pfx_do_filp_open+0x10/0x10 [ 1245.664621][T13007] ? alloc_fd+0x471/0x7d0 [ 1245.664643][T13007] do_sys_openat2+0x11b/0x1d0 [ 1245.664658][T13007] ? __pfx_do_sys_openat2+0x10/0x10 [ 1245.664679][T13007] __x64_sys_openat+0x174/0x210 [ 1245.664693][T13007] ? __pfx___x64_sys_openat+0x10/0x10 [ 1245.664715][T13007] do_syscall_64+0xcd/0x4b0 [ 1245.664738][T13007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.664752][T13007] RIP: 0033:0x7f37c2b8eec9 [ 1245.664765][T13007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.664779][T13007] RSP: 002b:00007f37c3a9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1245.664794][T13007] RAX: ffffffffffffffda RBX: 00007f37c2de6180 RCX: 00007f37c2b8eec9 [ 1245.664805][T13007] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1245.664814][T13007] RBP: 00007f37c2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1245.664823][T13007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.664831][T13007] R13: 00007f37c2de6218 R14: 00007f37c2de6180 R15: 00007ffe01d89fd8 [ 1245.664850][T13007] [ 1246.408207][T13060] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4167'. [ 1247.385292][T13098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4170'. [ 1247.475989][ T8310] Bluetooth: hci2: hcon ffff88807f168000 sent 1 < count 256 [ 1247.796237][T13106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4171'. [ 1248.157422][T13120] FAULT_INJECTION: forcing a failure. [ 1248.157422][T13120] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.171646][T13120] CPU: 0 UID: 0 PID: 13120 Comm: syz.1.4173 Tainted: G I syzkaller #0 PREEMPT(full) [ 1248.171683][T13120] Tainted: [I]=FIRMWARE_WORKAROUND [ 1248.171692][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1248.171707][T13120] Call Trace: [ 1248.171716][T13120] [ 1248.171725][T13120] dump_stack_lvl+0x16c/0x1f0 [ 1248.171756][T13120] should_fail_ex+0x512/0x640 [ 1248.171778][T13120] ? fs_reclaim_acquire+0xae/0x150 [ 1248.171807][T13120] should_failslab+0xc2/0x120 [ 1248.171833][T13120] __kmalloc_noprof+0xdd/0x880 [ 1248.171847][T13120] ? kfree+0x252/0x6d0 [ 1248.171859][T13120] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1248.171881][T13120] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1248.171898][T13120] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1248.171920][T13120] tomoyo_get_exe+0x63/0xa0 [ 1248.171941][T13120] tomoyo_write_control+0x689/0x1430 [ 1248.171969][T13120] ? __pfx_tomoyo_write_control+0x10/0x10 [ 1248.171993][T13120] ? __pfx_tomoyo_write+0x10/0x10 [ 1248.172010][T13120] vfs_write+0x29d/0x11d0 [ 1248.172037][T13120] ? __pfx_vfs_write+0x10/0x10 [ 1248.172055][T13120] ? do_sys_openat2+0x157/0x1d0 [ 1248.172067][T13120] ? __pfx_do_sys_openat2+0x10/0x10 [ 1248.172090][T13120] ksys_write+0x12a/0x250 [ 1248.172106][T13120] ? __pfx_ksys_write+0x10/0x10 [ 1248.172129][T13120] do_syscall_64+0xcd/0x4b0 [ 1248.172151][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.172165][T13120] RIP: 0033:0x7f2e7c58eec9 [ 1248.172177][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.172191][T13120] RSP: 002b:00007f2e7d355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1248.172204][T13120] RAX: ffffffffffffffda RBX: 00007f2e7c7e6090 RCX: 00007f2e7c58eec9 [ 1248.172214][T13120] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1248.172223][T13120] RBP: 00007f2e7d355090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.172232][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.172240][T13120] R13: 00007f2e7c7e6128 R14: 00007f2e7c7e6090 R15: 00007ffe67239098 [ 1248.172259][T13120] [ 1248.172266][T13120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1248.421805][T13123] FAULT_INJECTION: forcing a failure. [ 1248.421805][T13123] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.511460][T13123] CPU: 1 UID: 0 PID: 13123 Comm: syz.0.4176 Tainted: G I syzkaller #0 PREEMPT(full) [ 1248.511506][T13123] Tainted: [I]=FIRMWARE_WORKAROUND [ 1248.511517][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1248.511534][T13123] Call Trace: [ 1248.511543][T13123] [ 1248.511554][T13123] dump_stack_lvl+0x16c/0x1f0 [ 1248.511598][T13123] should_fail_ex+0x512/0x640 [ 1248.511637][T13123] ? __kmalloc_noprof+0xca/0x880 [ 1248.511670][T13123] should_failslab+0xc2/0x120 [ 1248.511706][T13123] __kmalloc_noprof+0xdd/0x880 [ 1248.511734][T13123] ? slhc_init+0x3dd/0x570 [ 1248.511770][T13123] ? slhc_init+0x3dd/0x570 [ 1248.511797][T13123] slhc_init+0x3dd/0x570 [ 1248.511825][T13123] ? kasan_save_track+0x14/0x30 [ 1248.511861][T13123] slip_open+0x8ee/0x1150 [ 1248.511894][T13123] ? __pfx_n_tty_close+0x10/0x10 [ 1248.511925][T13123] ? __pfx_slip_open+0x10/0x10 [ 1248.511956][T13123] ? down_write+0x14d/0x200 [ 1248.511983][T13123] ? __pfx_slip_open+0x10/0x10 [ 1248.512023][T13123] tty_ldisc_open+0x9f/0x120 [ 1248.512059][T13123] tty_set_ldisc+0x32b/0x780 [ 1248.512102][T13123] tty_ioctl+0xc2d/0x1680 [ 1248.512144][T13123] ? __pfx_tty_ioctl+0x10/0x10 [ 1248.512194][T13123] ? find_held_lock+0x2b/0x80 [ 1248.512226][T13123] ? hook_file_ioctl_common+0x145/0x410 [ 1248.512264][T13123] ? __fget_files+0x20e/0x3c0 [ 1248.512301][T13123] ? __pfx_tty_ioctl+0x10/0x10 [ 1248.512347][T13123] __x64_sys_ioctl+0x18e/0x210 [ 1248.512376][T13123] do_syscall_64+0xcd/0x4b0 [ 1248.512418][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.512446][T13123] RIP: 0033:0x7f37c2b8eec9 [ 1248.512467][T13123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.512491][T13123] RSP: 002b:00007f37c3add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.512517][T13123] RAX: ffffffffffffffda RBX: 00007f37c2de5fa0 RCX: 00007f37c2b8eec9 [ 1248.512534][T13123] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 000000000000000b [ 1248.512551][T13123] RBP: 00007f37c2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1248.512568][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.512584][T13123] R13: 00007f37c2de6038 R14: 00007f37c2de5fa0 R15: 00007ffe01d89fd8 [ 1248.512621][T13123] [ 1250.337736][T13244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4184'. [ 1250.370678][T13247] sg_write: data in/out 45639919/6 bytes for SCSI command 0x14-- guessing data in; [ 1250.370678][T13247] program syz.2.4185 not setting count and/or reply_len properly [ 1251.060136][T13278] FAULT_INJECTION: forcing a failure. [ 1251.060136][T13278] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.075271][T13278] CPU: 0 UID: 0 PID: 13278 Comm: syz.1.4187 Tainted: G I syzkaller #0 PREEMPT(full) [ 1251.075311][T13278] Tainted: [I]=FIRMWARE_WORKAROUND [ 1251.075320][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1251.075334][T13278] Call Trace: [ 1251.075344][T13278] [ 1251.075354][T13278] dump_stack_lvl+0x16c/0x1f0 [ 1251.075395][T13278] should_fail_ex+0x512/0x640 [ 1251.075430][T13278] ? fs_reclaim_acquire+0xae/0x150 [ 1251.075469][T13278] should_failslab+0xc2/0x120 [ 1251.075504][T13278] __kmalloc_noprof+0xdd/0x880 [ 1251.075531][T13278] ? tomoyo_encode2+0x100/0x3e0 [ 1251.075567][T13278] ? tomoyo_encode2+0x100/0x3e0 [ 1251.075591][T13278] tomoyo_encode2+0x100/0x3e0 [ 1251.075625][T13278] tomoyo_encode+0x29/0x50 [ 1251.075651][T13278] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1251.075692][T13278] tomoyo_get_exe+0x63/0xa0 [ 1251.075734][T13278] tomoyo_write_control+0x689/0x1430 [ 1251.075784][T13278] ? __pfx_tomoyo_write_control+0x10/0x10 [ 1251.075829][T13278] ? __pfx_tomoyo_write+0x10/0x10 [ 1251.075858][T13278] vfs_write+0x29d/0x11d0 [ 1251.075898][T13278] ? __pfx_vfs_write+0x10/0x10 [ 1251.075929][T13278] ? do_sys_openat2+0x157/0x1d0 [ 1251.075952][T13278] ? __pfx_do_sys_openat2+0x10/0x10 [ 1251.075994][T13278] ksys_write+0x12a/0x250 [ 1251.076024][T13278] ? __pfx_ksys_write+0x10/0x10 [ 1251.076065][T13278] do_syscall_64+0xcd/0x4b0 [ 1251.076104][T13278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.076130][T13278] RIP: 0033:0x7f2e7c58eec9 [ 1251.076150][T13278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1251.076174][T13278] RSP: 002b:00007f2e7d355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1251.076198][T13278] RAX: ffffffffffffffda RBX: 00007f2e7c7e6090 RCX: 00007f2e7c58eec9 [ 1251.076215][T13278] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1251.076230][T13278] RBP: 00007f2e7d355090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.076245][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.076259][T13278] R13: 00007f2e7c7e6128 R14: 00007f2e7c7e6090 R15: 00007ffe67239098 [ 1251.076296][T13278] [ 1251.153723][T13278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1252.041231][T13363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4194'. [ 1252.425721][T13381] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1252.930527][T13404] sd 0:0:1:0: PR command failed: 1026 [ 1252.945681][T13404] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1252.955538][T13404] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1253.400345][T13440] block nbd8: NBD_DISCONNECT [ 1253.510134][T13458] syz.0.4204 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1257.360919][T13718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4219'. [ 1257.877781][T13735] FAULT_INJECTION: forcing a failure. [ 1257.877781][T13735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.877832][T13735] CPU: 0 UID: 0 PID: 13735 Comm: syz.2.4223 Tainted: G I syzkaller #0 PREEMPT(full) [ 1257.877856][T13735] Tainted: [I]=FIRMWARE_WORKAROUND [ 1257.877862][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1257.877870][T13735] Call Trace: [ 1257.877881][T13735] [ 1257.877887][T13735] dump_stack_lvl+0x16c/0x1f0 [ 1257.877913][T13735] should_fail_ex+0x512/0x640 [ 1257.877943][T13735] _copy_from_iter+0x463/0x1720 [ 1257.877970][T13735] ? __pfx__copy_from_iter+0x10/0x10 [ 1257.878008][T13735] ? rcu_is_watching+0x12/0xc0 [ 1257.878038][T13735] ? trace_kmalloc+0x2b/0xd0 [ 1257.878061][T13735] ? __kmalloc_noprof+0x34f/0x880 [ 1257.878075][T13735] ? kernfs_fop_write_iter+0x237/0x570 [ 1257.878095][T13735] kernfs_fop_write_iter+0x19a/0x570 [ 1257.878113][T13735] do_iter_readv_writev+0x662/0x9e0 [ 1257.878131][T13735] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1257.878156][T13735] vfs_writev+0x35f/0xde0 [ 1257.878177][T13735] ? __pfx_vfs_writev+0x10/0x10 [ 1257.878191][T13735] ? __mutex_lock+0x1c5/0x1060 [ 1257.878217][T13735] ? __pfx___mutex_lock+0x10/0x10 [ 1257.878247][T13735] ? __fget_files+0x20e/0x3c0 [ 1257.878267][T13735] ? __fget_files+0x120/0x3c0 [ 1257.878301][T13735] ? do_writev+0x132/0x340 [ 1257.878323][T13735] do_writev+0x132/0x340 [ 1257.878349][T13735] ? __pfx_do_writev+0x10/0x10 [ 1257.878386][T13735] do_syscall_64+0xcd/0x4b0 [ 1257.878421][T13735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.878446][T13735] RIP: 0033:0x7ff49a78eec9 [ 1257.878466][T13735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.878489][T13735] RSP: 002b:00007ff49b5cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1257.878513][T13735] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78eec9 [ 1257.878529][T13735] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1257.878545][T13735] RBP: 00007ff49b5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.878560][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.878575][T13735] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1257.878610][T13735] [ 1258.467712][T13754] sd 0:0:1:0: PR command failed: 1026 [ 1258.486435][T13754] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1258.541809][T13754] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1258.833105][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1260.331250][T13822] : Can't lookup blockdev [ 1260.493437][T13822] tipc: Started in network mode [ 1260.544910][T13828] FAULT_INJECTION: forcing a failure. [ 1260.544910][T13828] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.558450][T13822] tipc: Node identity fe820562, cluster identity 4711 [ 1260.565448][T13822] tipc: Node number set to 4269933922 [ 1260.635887][T13828] CPU: 0 UID: 0 PID: 13828 Comm: syz.0.4237 Tainted: G I syzkaller #0 PREEMPT(full) [ 1260.635929][T13828] Tainted: [I]=FIRMWARE_WORKAROUND [ 1260.635939][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1260.635954][T13828] Call Trace: [ 1260.635963][T13828] [ 1260.635974][T13828] dump_stack_lvl+0x16c/0x1f0 [ 1260.636014][T13828] should_fail_ex+0x512/0x640 [ 1260.636049][T13828] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1260.636078][T13828] should_failslab+0xc2/0x120 [ 1260.636114][T13828] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1260.636143][T13828] ? skb_clone+0x190/0x3f0 [ 1260.636184][T13828] ? skb_clone+0x190/0x3f0 [ 1260.636219][T13828] skb_clone+0x190/0x3f0 [ 1260.636256][T13828] netlink_deliver_tap+0xabd/0xd30 [ 1260.636301][T13828] netlink_unicast+0x64c/0x870 [ 1260.636331][T13828] ? __pfx_netlink_unicast+0x10/0x10 [ 1260.636352][T13828] ? __asan_memset+0x23/0x50 [ 1260.636380][T13828] ? __build_skb_around+0x278/0x3b0 [ 1260.636410][T13828] ? is_vmalloc_addr+0x86/0xa0 [ 1260.636442][T13828] netlink_sendmsg+0x8c8/0xdd0 [ 1260.636472][T13828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1260.636500][T13828] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1260.636542][T13828] ____sys_sendmsg+0xa95/0xc70 [ 1260.636575][T13828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1260.636608][T13828] ? __pfx__kstrtoull+0x10/0x10 [ 1260.636651][T13828] ___sys_sendmsg+0x134/0x1d0 [ 1260.636689][T13828] ? __pfx____sys_sendmsg+0x10/0x10 [ 1260.636742][T13828] ? find_held_lock+0x2b/0x80 [ 1260.636796][T13828] __sys_sendmmsg+0x200/0x420 [ 1260.636836][T13828] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1260.636884][T13828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1260.636938][T13828] ? fput+0x9b/0xd0 [ 1260.636978][T13828] ? ksys_write+0x1ac/0x250 [ 1260.637006][T13828] ? __pfx_ksys_write+0x10/0x10 [ 1260.637042][T13828] __x64_sys_sendmmsg+0x9c/0x100 [ 1260.637078][T13828] ? lockdep_hardirqs_on+0x7c/0x110 [ 1260.637110][T13828] do_syscall_64+0xcd/0x4b0 [ 1260.637148][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.637173][T13828] RIP: 0033:0x7f37c2b8eec9 [ 1260.637193][T13828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1260.637216][T13828] RSP: 002b:00007f37c3add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1260.637240][T13828] RAX: ffffffffffffffda RBX: 00007f37c2de5fa0 RCX: 00007f37c2b8eec9 [ 1260.637257][T13828] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 1260.637272][T13828] RBP: 00007f37c3add090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.637288][T13828] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1260.637302][T13828] R13: 00007f37c2de6038 R14: 00007f37c2de5fa0 R15: 00007ffe01d89fd8 [ 1260.637337][T13828] [ 1260.637564][T13828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4237'. [ 1260.748138][ T30] audit: type=1800 audit(4294967555.637:56): pid=13829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4235" name="features" dev="configfs" ino=111145 res=0 errno=0 [ 1261.235270][T13831] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4238'. [ 1262.325596][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1262.913883][T13866] FAULT_INJECTION: forcing a failure. [ 1262.913883][T13866] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.976607][T13866] CPU: 0 UID: 0 PID: 13866 Comm: syz.3.4242 Tainted: G I syzkaller #0 PREEMPT(full) [ 1262.976655][T13866] Tainted: [I]=FIRMWARE_WORKAROUND [ 1262.976666][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1262.976684][T13866] Call Trace: [ 1262.976695][T13866] [ 1262.976706][T13866] dump_stack_lvl+0x16c/0x1f0 [ 1262.976750][T13866] should_fail_ex+0x512/0x640 [ 1262.976789][T13866] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1262.976823][T13866] should_failslab+0xc2/0x120 [ 1262.976861][T13866] __kmalloc_cache_noprof+0x72/0x780 [ 1262.976892][T13866] ? netdev_create_hash+0x3c/0xc0 [ 1262.976924][T13866] ? netdev_create_hash+0x3c/0xc0 [ 1262.976948][T13866] ? __pfx_netdev_init+0x10/0x10 [ 1262.976970][T13866] netdev_create_hash+0x3c/0xc0 [ 1262.976997][T13866] ? __pfx_netdev_init+0x10/0x10 [ 1262.977021][T13866] netdev_init+0x70/0x230 [ 1262.977044][T13866] ops_init+0x1e2/0x5f0 [ 1262.977084][T13866] setup_net+0x100/0x390 [ 1262.977108][T13866] ? __pfx_setup_net+0x10/0x10 [ 1262.977131][T13866] ? debug_mutex_init+0x37/0x70 [ 1262.977166][T13866] copy_net_ns+0x2f8/0x690 [ 1262.977194][T13866] create_new_namespaces+0x3ea/0xa90 [ 1262.977236][T13866] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1262.977273][T13866] ksys_unshare+0x45b/0xa40 [ 1262.977311][T13866] ? __pfx_ksys_unshare+0x10/0x10 [ 1262.977350][T13866] ? xfd_validate_state+0x61/0x180 [ 1262.977386][T13866] __x64_sys_unshare+0x31/0x40 [ 1262.977433][T13866] do_syscall_64+0xcd/0x4b0 [ 1262.977474][T13866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.977501][T13866] RIP: 0033:0x7f09d0f8eec9 [ 1262.977522][T13866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1262.977548][T13866] RSP: 002b:00007f09d1dc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1262.977574][T13866] RAX: ffffffffffffffda RBX: 00007f09d11e5fa0 RCX: 00007f09d0f8eec9 [ 1262.977592][T13866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1262.977609][T13866] RBP: 00007f09d1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1262.977626][T13866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.977642][T13866] R13: 00007f09d11e6038 R14: 00007f09d11e5fa0 R15: 00007ffc02160ec8 [ 1262.977680][T13866] [ 1263.055737][T13875] netlink: 314 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1263.273041][T13880] i2c i2c-0: delete_device: Can't parse I2C address [ 1263.274324][T13870] hub 1-0:1.0: USB hub found [ 1263.286805][T13870] hub 1-0:1.0: 1 port detected [ 1263.676859][T13898] sd 0:0:1:0: PR command failed: 1026 [ 1263.727988][T13898] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1263.788097][T13898] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1264.877728][T13963] FAULT_INJECTION: forcing a failure. [ 1264.877728][T13963] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.947382][T13963] CPU: 1 UID: 0 PID: 13963 Comm: syz.0.4250 Tainted: G I syzkaller #0 PREEMPT(full) [ 1264.947421][T13963] Tainted: [I]=FIRMWARE_WORKAROUND [ 1264.947430][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1264.947444][T13963] Call Trace: [ 1264.947452][T13963] [ 1264.947462][T13963] dump_stack_lvl+0x16c/0x1f0 [ 1264.947503][T13963] should_fail_ex+0x512/0x640 [ 1264.947538][T13963] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1264.947572][T13963] should_failslab+0xc2/0x120 [ 1264.947607][T13963] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1264.947633][T13963] ? __pmd_alloc+0xbf/0x8b0 [ 1264.947674][T13963] ? __pmd_alloc+0xbf/0x8b0 [ 1264.947704][T13963] __pmd_alloc+0xbf/0x8b0 [ 1264.947742][T13963] __handle_mm_fault+0xada/0x2aa0 [ 1264.947774][T13963] ? mt_find+0x3e2/0xa20 [ 1264.947800][T13963] ? __pfx___handle_mm_fault+0x10/0x10 [ 1264.947823][T13963] ? __pfx_mt_find+0x10/0x10 [ 1264.947869][T13963] ? find_vma+0xbf/0x140 [ 1264.947898][T13963] ? __pfx_find_vma+0x10/0x10 [ 1264.947932][T13963] handle_mm_fault+0x589/0xd10 [ 1264.947967][T13963] ? __pkru_allows_pkey+0x31/0xb0 [ 1264.947997][T13963] do_user_addr_fault+0x7a6/0x1370 [ 1264.948030][T13963] ? rcu_is_watching+0x12/0xc0 [ 1264.948066][T13963] exc_page_fault+0x5c/0xb0 [ 1264.948100][T13963] asm_exc_page_fault+0x26/0x30 [ 1264.948124][T13963] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1264.948152][T13963] Code: 23 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1264.948176][T13963] RSP: 0018:ffffc9000c5b7a08 EFLAGS: 00050206 [ 1264.948197][T13963] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 1264.948212][T13963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888066f88000 [ 1264.948228][T13963] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100cdf11ff [ 1264.948244][T13963] R10: ffff888066f88fff R11: 0000000000000000 R12: 0000000000000000 [ 1264.948259][T13963] R13: ffffc9000c5b7d80 R14: ffff888066f88000 R15: 0000000000000000 [ 1264.948297][T13963] _copy_from_iter+0x4eb/0x1720 [ 1264.948343][T13963] ? __pfx__copy_from_iter+0x10/0x10 [ 1264.948379][T13963] ? rcu_is_watching+0x12/0xc0 [ 1264.948412][T13963] ? trace_kmalloc+0x2b/0xd0 [ 1264.948443][T13963] ? __kmalloc_noprof+0x34f/0x880 [ 1264.948469][T13963] ? kernfs_fop_write_iter+0x237/0x570 [ 1264.948504][T13963] kernfs_fop_write_iter+0x19a/0x570 [ 1264.948537][T13963] do_iter_readv_writev+0x662/0x9e0 [ 1264.948568][T13963] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1264.948614][T13963] vfs_writev+0x35f/0xde0 [ 1264.948653][T13963] ? __pfx_vfs_writev+0x10/0x10 [ 1264.948679][T13963] ? __mutex_lock+0x1c5/0x1060 [ 1264.948724][T13963] ? __pfx___mutex_lock+0x10/0x10 [ 1264.948770][T13963] ? __fget_files+0x20e/0x3c0 [ 1264.948794][T13963] ? __fget_files+0x120/0x3c0 [ 1264.948829][T13963] ? do_writev+0x132/0x340 [ 1264.948852][T13963] do_writev+0x132/0x340 [ 1264.948879][T13963] ? __pfx_do_writev+0x10/0x10 [ 1264.948918][T13963] do_syscall_64+0xcd/0x4b0 [ 1264.948962][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.948987][T13963] RIP: 0033:0x7f37c2b8eec9 [ 1264.949007][T13963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.949029][T13963] RSP: 002b:00007f37c3add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1264.949048][T13963] RAX: ffffffffffffffda RBX: 00007f37c2de5fa0 RCX: 00007f37c2b8eec9 [ 1264.949064][T13963] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1264.949079][T13963] RBP: 00007f37c3add090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.949094][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.949107][T13963] R13: 00007f37c2de6038 R14: 00007f37c2de5fa0 R15: 00007ffe01d89fd8 [ 1264.949140][T13963] [ 1265.768863][T13989] FAULT_INJECTION: forcing a failure. [ 1265.768863][T13989] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.860373][T13989] CPU: 1 UID: 0 PID: 13989 Comm: syz.1.4252 Tainted: G I syzkaller #0 PREEMPT(full) [ 1265.860416][T13989] Tainted: [I]=FIRMWARE_WORKAROUND [ 1265.860425][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1265.860439][T13989] Call Trace: [ 1265.860447][T13989] [ 1265.860457][T13989] dump_stack_lvl+0x16c/0x1f0 [ 1265.860497][T13989] should_fail_ex+0x512/0x640 [ 1265.860531][T13989] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1265.860564][T13989] should_failslab+0xc2/0x120 [ 1265.860599][T13989] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1265.860630][T13989] ? sock_alloc_inode+0x25/0x1c0 [ 1265.860662][T13989] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1265.860683][T13989] ? sock_alloc_inode+0x25/0x1c0 [ 1265.860704][T13989] sock_alloc_inode+0x25/0x1c0 [ 1265.860726][T13989] alloc_inode+0x64/0x240 [ 1265.860758][T13989] sock_alloc+0x40/0x280 [ 1265.860781][T13989] __sock_create+0xc1/0x8d0 [ 1265.860817][T13989] mptcp_subflow_create_socket+0xec/0xa10 [ 1265.860856][T13989] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1265.860894][T13989] __mptcp_nmpc_sk+0x182/0x890 [ 1265.860924][T13989] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1265.860955][T13989] ? __local_bh_enable_ip+0xa4/0x120 [ 1265.860992][T13989] mptcp_setsockopt+0x1cb9/0x3220 [ 1265.861016][T13989] ? aa_sk_perm+0x2f4/0xb10 [ 1265.861047][T13989] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1265.861076][T13989] ? find_held_lock+0x2b/0x80 [ 1265.861109][T13989] ? aa_sock_opt_perm+0xfd/0x1c0 [ 1265.861141][T13989] ? sock_common_setsockopt+0x2e/0xf0 [ 1265.861167][T13989] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1265.861197][T13989] do_sock_setsockopt+0xf3/0x1d0 [ 1265.861227][T13989] __sys_setsockopt+0x120/0x1a0 [ 1265.861267][T13989] __x64_sys_setsockopt+0xbd/0x160 [ 1265.861299][T13989] ? do_syscall_64+0x91/0x4b0 [ 1265.861332][T13989] ? lockdep_hardirqs_on+0x7c/0x110 [ 1265.861365][T13989] do_syscall_64+0xcd/0x4b0 [ 1265.861402][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.861427][T13989] RIP: 0033:0x7f2e7c58eec9 [ 1265.861448][T13989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.861472][T13989] RSP: 002b:00007f2e7a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1265.861496][T13989] RAX: ffffffffffffffda RBX: 00007f2e7c7e6180 RCX: 00007f2e7c58eec9 [ 1265.861514][T13989] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 1265.861528][T13989] RBP: 00007f2e7a7f6090 R08: 0000000000000009 R09: 0000000000000000 [ 1265.861543][T13989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.861556][T13989] R13: 00007f2e7c7e6218 R14: 00007f2e7c7e6180 R15: 00007ffe67239098 [ 1265.861587][T13989] [ 1265.861599][T13989] socket: no more sockets [ 1268.040600][T14052] FAULT_INJECTION: forcing a failure. [ 1268.040600][T14052] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.085390][T14052] CPU: 0 UID: 0 PID: 14052 Comm: syz.2.4261 Tainted: G I syzkaller #0 PREEMPT(full) [ 1268.085431][T14052] Tainted: [I]=FIRMWARE_WORKAROUND [ 1268.085439][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1268.085448][T14052] Call Trace: [ 1268.085455][T14052] [ 1268.085461][T14052] dump_stack_lvl+0x16c/0x1f0 [ 1268.085488][T14052] should_fail_ex+0x512/0x640 [ 1268.085521][T14052] ? fs_reclaim_acquire+0xae/0x150 [ 1268.085554][T14052] should_failslab+0xc2/0x120 [ 1268.085630][T14052] __kmalloc_noprof+0xdd/0x880 [ 1268.085646][T14052] ? tomoyo_encode2+0x100/0x3e0 [ 1268.085666][T14052] ? tomoyo_encode2+0x100/0x3e0 [ 1268.085682][T14052] tomoyo_encode2+0x100/0x3e0 [ 1268.085701][T14052] tomoyo_encode+0x29/0x50 [ 1268.085717][T14052] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1268.085740][T14052] tomoyo_path_number_perm+0x245/0x580 [ 1268.085754][T14052] ? tomoyo_path_number_perm+0x237/0x580 [ 1268.085770][T14052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1268.085785][T14052] ? find_held_lock+0x2b/0x80 [ 1268.085819][T14052] ? find_held_lock+0x2b/0x80 [ 1268.085840][T14052] ? hook_file_ioctl_common+0x145/0x410 [ 1268.085861][T14052] ? __fget_files+0x20e/0x3c0 [ 1268.085880][T14052] security_file_ioctl+0x9b/0x240 [ 1268.085898][T14052] __x64_sys_ioctl+0xb7/0x210 [ 1268.085913][T14052] do_syscall_64+0xcd/0x4b0 [ 1268.085935][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.085950][T14052] RIP: 0033:0x7ff49a78eec9 [ 1268.085963][T14052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1268.085976][T14052] RSP: 002b:00007ff49b5cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.085990][T14052] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78eec9 [ 1268.085999][T14052] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000007 [ 1268.086008][T14052] RBP: 00007ff49b5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.086017][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.086026][T14052] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1268.086049][T14052] [ 1268.086067][T14052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1268.735778][T14050] FAULT_INJECTION: forcing a failure. [ 1268.735778][T14050] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.748909][T14050] CPU: 0 UID: 0 PID: 14050 Comm: syz.1.4260 Tainted: G I syzkaller #0 PREEMPT(full) [ 1268.748936][T14050] Tainted: [I]=FIRMWARE_WORKAROUND [ 1268.748943][T14050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1268.748952][T14050] Call Trace: [ 1268.748960][T14050] [ 1268.748967][T14050] dump_stack_lvl+0x16c/0x1f0 [ 1268.748996][T14050] should_fail_ex+0x512/0x640 [ 1268.749022][T14050] should_failslab+0xc2/0x120 [ 1268.749045][T14050] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1268.749063][T14050] ? pcpu_alloc_noprof+0x949/0x14c0 [ 1268.749078][T14050] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1268.749101][T14050] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1268.749118][T14050] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1268.749141][T14050] idr_get_free+0x528/0xa30 [ 1268.749166][T14050] idr_alloc_u32+0x190/0x2f0 [ 1268.749188][T14050] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1268.749209][T14050] ? lock_acquire+0x179/0x350 [ 1268.749234][T14050] idr_alloc_cyclic+0x10b/0x230 [ 1268.749255][T14050] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1268.749273][T14050] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1268.749289][T14050] ? lsm_blob_alloc+0x2b/0x90 [ 1268.749311][T14050] map_create+0x143e/0x27e0 [ 1268.749333][T14050] ? __pfx_map_create+0x10/0x10 [ 1268.749347][T14050] ? __might_fault+0xe3/0x190 [ 1268.749363][T14050] ? __might_fault+0xe3/0x190 [ 1268.749377][T14050] ? __might_fault+0x13b/0x190 [ 1268.749400][T14050] __sys_bpf+0x3d9d/0x4980 [ 1268.749415][T14050] ? futex_private_hash_put+0x18a/0x300 [ 1268.749437][T14050] ? __pfx___sys_bpf+0x10/0x10 [ 1268.749453][T14050] ? __pfx_futex_wait+0x10/0x10 [ 1268.749478][T14050] ? do_futex+0x122/0x350 [ 1268.749518][T14050] ? fput+0x9b/0xd0 [ 1268.749541][T14050] ? xfd_validate_state+0x61/0x180 [ 1268.749555][T14050] ? __pfx_ksys_write+0x10/0x10 [ 1268.749576][T14050] __x64_sys_bpf+0x78/0xc0 [ 1268.749593][T14050] ? lockdep_hardirqs_on+0x7c/0x110 [ 1268.749613][T14050] do_syscall_64+0xcd/0x4b0 [ 1268.749635][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.749651][T14050] RIP: 0033:0x7f2e7c58eec9 [ 1268.749664][T14050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1268.749679][T14050] RSP: 002b:00007f2e7d355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1268.749694][T14050] RAX: ffffffffffffffda RBX: 00007f2e7c7e6090 RCX: 00007f2e7c58eec9 [ 1268.749704][T14050] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 1268.749713][T14050] RBP: 00007f2e7c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1268.749723][T14050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1268.749732][T14050] R13: 00007f2e7c7e6128 R14: 00007f2e7c7e6090 R15: 00007ffe67239098 [ 1268.749751][T14050] [ 1269.502772][T14121] __vm_enough_memory: pid: 14121, comm: syz.2.4266, bytes: 4398046511104 not enough memory for the allocation [ 1272.337126][T14214] FAULT_INJECTION: forcing a failure. [ 1272.337126][T14214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.383567][T14214] CPU: 1 UID: 0 PID: 14214 Comm: syz.0.4274 Tainted: G I syzkaller #0 PREEMPT(full) [ 1272.383609][T14214] Tainted: [I]=FIRMWARE_WORKAROUND [ 1272.383619][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1272.383634][T14214] Call Trace: [ 1272.383643][T14214] [ 1272.383653][T14214] dump_stack_lvl+0x16c/0x1f0 [ 1272.383695][T14214] should_fail_ex+0x512/0x640 [ 1272.383732][T14214] _copy_from_iter+0x29f/0x1720 [ 1272.383772][T14214] ? __alloc_skb+0x200/0x380 [ 1272.383806][T14214] ? __pfx__copy_from_iter+0x10/0x10 [ 1272.383845][T14214] ? __pfx___might_resched+0x10/0x10 [ 1272.383872][T14214] ? __lock_acquire+0xb97/0x1ce0 [ 1272.383914][T14214] netlink_sendmsg+0x820/0xdd0 [ 1272.383943][T14214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.383971][T14214] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1272.384011][T14214] ____sys_sendmsg+0xa95/0xc70 [ 1272.384039][T14214] ? copy_msghdr_from_user+0x10a/0x160 [ 1272.384074][T14214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1272.384106][T14214] ? kfree+0x252/0x6d0 [ 1272.384126][T14214] ? __pfx__kstrtoull+0x10/0x10 [ 1272.384156][T14214] ___sys_sendmsg+0x134/0x1d0 [ 1272.384191][T14214] ? __pfx____sys_sendmsg+0x10/0x10 [ 1272.384259][T14214] ? __pfx___might_resched+0x10/0x10 [ 1272.384295][T14214] __sys_sendmmsg+0x200/0x420 [ 1272.384335][T14214] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1272.384409][T14214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1272.384465][T14214] ? fput+0x9b/0xd0 [ 1272.384499][T14214] ? ksys_write+0x1ac/0x250 [ 1272.384527][T14214] ? __pfx_ksys_write+0x10/0x10 [ 1272.384562][T14214] __x64_sys_sendmmsg+0x9c/0x100 [ 1272.384598][T14214] ? lockdep_hardirqs_on+0x7c/0x110 [ 1272.384631][T14214] do_syscall_64+0xcd/0x4b0 [ 1272.384669][T14214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.384694][T14214] RIP: 0033:0x7f37c2b8eec9 [ 1272.384715][T14214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.384738][T14214] RSP: 002b:00007f37c3add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1272.384762][T14214] RAX: ffffffffffffffda RBX: 00007f37c2de5fa0 RCX: 00007f37c2b8eec9 [ 1272.384780][T14214] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 1272.384795][T14214] RBP: 00007f37c3add090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.384810][T14214] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 1272.384825][T14214] R13: 00007f37c2de6038 R14: 00007f37c2de5fa0 R15: 00007ffe01d89fd8 [ 1272.384859][T14214] [ 1272.960491][T14237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1274.402833][T14318] netlink: 'syz.0.4283': attribute type 22 has an invalid length. [ 1274.432444][T14318] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4283'. [ 1274.826781][T14327] sd 0:0:1:0: PR command failed: 1026 [ 1274.845666][T14327] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1274.882440][T14327] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1276.447387][T14387] binder: 14385:14387 ioctl c00c6211 0 returned -14 [ 1278.162954][T14450] sd 0:0:1:0: PR command failed: 1026 [ 1278.168428][T14450] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1278.220329][T14450] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1280.432290][T14553] FAULT_INJECTION: forcing a failure. [ 1280.432290][T14553] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.047932][T14553] CPU: 1 UID: 0 PID: 14553 Comm: syz.2.4308 Tainted: G I syzkaller #0 PREEMPT(full) [ 1281.047958][T14553] Tainted: [I]=FIRMWARE_WORKAROUND [ 1281.047964][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1281.047972][T14553] Call Trace: [ 1281.047977][T14553] [ 1281.047983][T14553] dump_stack_lvl+0x16c/0x1f0 [ 1281.048009][T14553] should_fail_ex+0x512/0x640 [ 1281.048031][T14553] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1281.048046][T14553] should_failslab+0xc2/0x120 [ 1281.048068][T14553] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1281.048085][T14553] ? skb_clone+0x190/0x3f0 [ 1281.048115][T14553] ? skb_clone+0x190/0x3f0 [ 1281.048134][T14553] skb_clone+0x190/0x3f0 [ 1281.048156][T14553] netlink_deliver_tap+0xabd/0xd30 [ 1281.048181][T14553] netlink_unicast+0x64c/0x870 [ 1281.048197][T14553] ? __pfx_netlink_unicast+0x10/0x10 [ 1281.048210][T14553] ? __pfx___might_resched+0x10/0x10 [ 1281.048228][T14553] ? __lock_acquire+0xb97/0x1ce0 [ 1281.048254][T14553] netlink_sendmsg+0x8c8/0xdd0 [ 1281.048271][T14553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1281.048286][T14553] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1281.048310][T14553] ____sys_sendmsg+0xa95/0xc70 [ 1281.048327][T14553] ? copy_msghdr_from_user+0x10a/0x160 [ 1281.048348][T14553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1281.048366][T14553] ? kfree+0x252/0x6d0 [ 1281.048378][T14553] ? __pfx__kstrtoull+0x10/0x10 [ 1281.048399][T14553] ___sys_sendmsg+0x134/0x1d0 [ 1281.048421][T14553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1281.048458][T14553] ? __pfx___might_resched+0x10/0x10 [ 1281.048479][T14553] __sys_sendmmsg+0x200/0x420 [ 1281.048502][T14553] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1281.048529][T14553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1281.048558][T14553] ? fput+0x9b/0xd0 [ 1281.048578][T14553] ? ksys_write+0x1ac/0x250 [ 1281.048594][T14553] ? __pfx_ksys_write+0x10/0x10 [ 1281.048614][T14553] __x64_sys_sendmmsg+0x9c/0x100 [ 1281.048634][T14553] ? lockdep_hardirqs_on+0x7c/0x110 [ 1281.048653][T14553] do_syscall_64+0xcd/0x4b0 [ 1281.048674][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.048689][T14553] RIP: 0033:0x7ff49a78eec9 [ 1281.048701][T14553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1281.048714][T14553] RSP: 002b:00007ff49b5cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1281.048727][T14553] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78eec9 [ 1281.048737][T14553] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 1281.048746][T14553] RBP: 00007ff49b5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.048754][T14553] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 1281.048763][T14553] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1281.048781][T14553] [ 1281.048802][T14553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1281.729335][T14564] sd 0:0:1:0: PR command failed: 1026 [ 1281.734892][T14564] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1281.741646][T14564] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1289.608366][T14855] kAFS: No cell specified [ 1289.667898][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4340'. [ 1291.840787][T14938] sd 0:0:1:0: PR command failed: 1026 [ 1291.912167][T14938] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1291.959050][T14938] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1294.548649][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.554975][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.729006][T15147] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1297.366178][T15187] FAULT_INJECTION: forcing a failure. [ 1297.366178][T15187] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.379471][T15187] CPU: 0 UID: 0 PID: 15187 Comm: syz.2.4366 Tainted: G I syzkaller #0 PREEMPT(full) [ 1297.379522][T15187] Tainted: [I]=FIRMWARE_WORKAROUND [ 1297.379534][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1297.379551][T15187] Call Trace: [ 1297.379561][T15187] [ 1297.379572][T15187] dump_stack_lvl+0x16c/0x1f0 [ 1297.379620][T15187] should_fail_ex+0x512/0x640 [ 1297.379660][T15187] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1297.379697][T15187] should_failslab+0xc2/0x120 [ 1297.379736][T15187] __kmalloc_cache_noprof+0x72/0x780 [ 1297.379767][T15187] ? vkms_plane_duplicate_state+0x45/0x130 [ 1297.379807][T15187] ? vkms_plane_duplicate_state+0x45/0x130 [ 1297.379838][T15187] vkms_plane_duplicate_state+0x45/0x130 [ 1297.379872][T15187] drm_atomic_get_plane_state+0x20b/0x590 [ 1297.379908][T15187] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1297.379942][T15187] ? __pfx___might_resched+0x10/0x10 [ 1297.379988][T15187] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1297.380021][T15187] ? __mutex_lock+0x1c5/0x1060 [ 1297.380056][T15187] ? rcu_is_watching+0x12/0xc0 [ 1297.380123][T15187] drm_client_modeset_commit_locked+0x14d/0x580 [ 1297.380163][T15187] drm_client_modeset_commit+0x4f/0x80 [ 1297.380207][T15187] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 1297.380242][T15187] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1297.380285][T15187] drm_fbdev_client_restore+0x2c/0x40 [ 1297.380326][T15187] drm_client_dev_restore+0x1f6/0x2a0 [ 1297.380367][T15187] drm_release+0x2c4/0x360 [ 1297.380401][T15187] ? __pfx_drm_release+0x10/0x10 [ 1297.380429][T15187] __fput+0x402/0xb70 [ 1297.380483][T15187] task_work_run+0x150/0x240 [ 1297.380516][T15187] ? __pfx_task_work_run+0x10/0x10 [ 1297.380547][T15187] ? __pfx___do_sys_close_range+0x10/0x10 [ 1297.380581][T15187] ? syscall_user_dispatch+0x78/0x140 [ 1297.380620][T15187] exit_to_user_mode_loop+0xec/0x130 [ 1297.380650][T15187] do_syscall_64+0x419/0x4b0 [ 1297.380692][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.380720][T15187] RIP: 0033:0x7ff49a78eec9 [ 1297.380742][T15187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.380766][T15187] RSP: 002b:00007ff49b5aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1297.380791][T15187] RAX: 0000000000000000 RBX: 00007ff49a9e6090 RCX: 00007ff49a78eec9 [ 1297.380808][T15187] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1297.380824][T15187] RBP: 00007ff49a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1297.380841][T15187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.380857][T15187] R13: 00007ff49a9e6128 R14: 00007ff49a9e6090 R15: 00007ffd2dabe3c8 [ 1297.380897][T15187] [ 1298.199683][T15241] dyndbg: expected <4096 bytes into control [ 1299.532424][T15302] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1299.605605][T15295] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input32 [ 1300.320194][T15320] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1300.707831][T15362] random: crng reseeded on system resumption [ 1301.902153][T15410] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1302.201868][T15428] 0x000200000001-0xa29656a63616329 : "" [ 1302.207430][T15428] mtd: partition "" is out of reach -- disabled [ 1302.218606][T15450] FAULT_INJECTION: forcing a failure. [ 1302.218606][T15450] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.307398][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.1.4388 Tainted: G I syzkaller #0 PREEMPT(full) [ 1302.307439][T15450] Tainted: [I]=FIRMWARE_WORKAROUND [ 1302.307449][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1302.307464][T15450] Call Trace: [ 1302.307472][T15450] [ 1302.307483][T15450] dump_stack_lvl+0x16c/0x1f0 [ 1302.307527][T15450] should_fail_ex+0x512/0x640 [ 1302.307565][T15450] ? __kmalloc_noprof+0xca/0x880 [ 1302.307597][T15450] should_failslab+0xc2/0x120 [ 1302.307635][T15450] __kmalloc_noprof+0xdd/0x880 [ 1302.307663][T15450] ? lsm_blob_alloc+0x68/0x90 [ 1302.307702][T15450] ? lsm_blob_alloc+0x68/0x90 [ 1302.307733][T15450] lsm_blob_alloc+0x68/0x90 [ 1302.307768][T15450] security_sk_alloc+0x30/0x270 [ 1302.307812][T15450] sk_prot_alloc+0x1c7/0x2a0 [ 1302.307846][T15450] sk_alloc+0x36/0xc20 [ 1302.307885][T15450] can_create+0x1e5/0x630 [ 1302.307938][T15450] __sock_create+0x338/0x8d0 [ 1302.307977][T15450] __sys_socket+0x14d/0x260 [ 1302.308010][T15450] ? __pfx___sys_socket+0x10/0x10 [ 1302.308041][T15450] ? xfd_validate_state+0x61/0x180 [ 1302.308066][T15450] ? __pfx_ksys_write+0x10/0x10 [ 1302.308105][T15450] __x64_sys_socket+0x72/0xb0 [ 1302.308134][T15450] ? lockdep_hardirqs_on+0x7c/0x110 [ 1302.308170][T15450] do_syscall_64+0xcd/0x4b0 [ 1302.308210][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.308237][T15450] RIP: 0033:0x7f2e7c58eec9 [ 1302.308259][T15450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.308283][T15450] RSP: 002b:00007f2e7a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1302.308308][T15450] RAX: ffffffffffffffda RBX: 00007f2e7c7e6180 RCX: 00007f2e7c58eec9 [ 1302.308326][T15450] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 1302.308342][T15450] RBP: 00007f2e7c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1302.308358][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.308374][T15450] R13: 00007f2e7c7e6218 R14: 00007f2e7c7e6180 R15: 00007ffe67239098 [ 1302.308409][T15450] [ 1302.748600][T15428] ftl_cs: FTL header not found. [ 1304.402912][T15523] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1304.759093][T15537] sd 0:0:1:0: PR command failed: 1026 [ 1304.781115][T15537] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1304.788547][T15537] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1306.138341][T15592] openvswitch: netlink: Key 13 has unexpected len 0 expected 24 [ 1306.397601][T15593] FAULT_INJECTION: forcing a failure. [ 1306.397601][T15593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1306.452372][T15593] CPU: 1 UID: 0 PID: 15593 Comm: syz.3.4405 Tainted: G I syzkaller #0 PREEMPT(full) [ 1306.452415][T15593] Tainted: [I]=FIRMWARE_WORKAROUND [ 1306.452426][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1306.452441][T15593] Call Trace: [ 1306.452450][T15593] [ 1306.452460][T15593] dump_stack_lvl+0x16c/0x1f0 [ 1306.452503][T15593] should_fail_ex+0x512/0x640 [ 1306.452546][T15593] should_fail_alloc_page+0xe7/0x130 [ 1306.452583][T15593] prepare_alloc_pages+0x3c2/0x610 [ 1306.452619][T15593] ? rcu_is_watching+0x12/0xc0 [ 1306.452650][T15593] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1306.452690][T15593] ? __lock_acquire+0x62e/0x1ce0 [ 1306.452735][T15593] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1306.452781][T15593] ? __lock_acquire+0x62e/0x1ce0 [ 1306.452821][T15593] ? __lock_acquire+0x62e/0x1ce0 [ 1306.452852][T15593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1306.452882][T15593] ? policy_nodemask+0xea/0x4e0 [ 1306.452916][T15593] alloc_pages_mpol+0x1fb/0x550 [ 1306.452951][T15593] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1306.452989][T15593] ? __lock_acquire+0x62e/0x1ce0 [ 1306.453029][T15593] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1306.453055][T15593] vma_alloc_folio_noprof+0xed/0x1e0 [ 1306.453081][T15593] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1306.453117][T15593] do_pte_missing+0x2202/0x3ba0 [ 1306.453144][T15593] ? find_held_lock+0x2b/0x80 [ 1306.453181][T15593] __handle_mm_fault+0x1556/0x2aa0 [ 1306.453217][T15593] ? __pfx___handle_mm_fault+0x10/0x10 [ 1306.453245][T15593] ? __pte_offset_map_lock+0x174/0x310 [ 1306.453288][T15593] ? find_held_lock+0x2b/0x80 [ 1306.453336][T15593] ? follow_page_pte+0x5cf/0x1390 [ 1306.453379][T15593] handle_mm_fault+0x589/0xd10 [ 1306.453413][T15593] __get_user_pages+0x54e/0x3530 [ 1306.453465][T15593] ? __pfx___get_user_pages+0x10/0x10 [ 1306.453511][T15593] populate_vma_page_range+0x267/0x3f0 [ 1306.453551][T15593] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1306.453584][T15593] ? __pfx_find_vma_intersection+0x10/0x10 [ 1306.453618][T15593] ? do_mmap+0x69c/0x1210 [ 1306.453656][T15593] __mm_populate+0x1d8/0x380 [ 1306.453696][T15593] ? __pfx___mm_populate+0x10/0x10 [ 1306.453734][T15593] ? up_write+0x1b2/0x520 [ 1306.453761][T15593] vm_mmap_pgoff+0x37f/0x470 [ 1306.453797][T15593] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1306.453838][T15593] ? __x64_sys_futex+0x1e0/0x4c0 [ 1306.453869][T15593] ? __x64_sys_futex+0x1e9/0x4c0 [ 1306.453908][T15593] ksys_mmap_pgoff+0x7d/0x5c0 [ 1306.453939][T15593] ? xfd_validate_state+0x61/0x180 [ 1306.453961][T15593] ? __pfx_do_writev+0x10/0x10 [ 1306.453994][T15593] __x64_sys_mmap+0x125/0x190 [ 1306.454024][T15593] do_syscall_64+0xcd/0x4b0 [ 1306.454064][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.454091][T15593] RIP: 0033:0x7f09d0f8eec9 [ 1306.454112][T15593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.454137][T15593] RSP: 002b:00007f09d1dc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1306.454163][T15593] RAX: ffffffffffffffda RBX: 00007f09d11e5fa0 RCX: 00007f09d0f8eec9 [ 1306.454180][T15593] RDX: 000000000000000a RSI: 0000000000040009 RDI: 0000000000000000 [ 1306.454196][T15593] RBP: 00007f09d1011f91 R08: 0000000000000002 R09: 0000000000028000 [ 1306.454213][T15593] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1306.454228][T15593] R13: 00007f09d11e6038 R14: 00007f09d11e5fa0 R15: 00007ffc02160ec8 [ 1306.454272][T15593] [ 1306.823182][T15609] netlink: 62 bytes leftover after parsing attributes in process `syz.2.4410'. [ 1308.133689][T15664] FAULT_INJECTION: forcing a failure. [ 1308.133689][T15664] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.379166][T15664] CPU: 0 UID: 0 PID: 15664 Comm: syz.0.4412 Tainted: G I syzkaller #0 PREEMPT(full) [ 1308.379218][T15664] Tainted: [I]=FIRMWARE_WORKAROUND [ 1308.379230][T15664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1308.379246][T15664] Call Trace: [ 1308.379256][T15664] [ 1308.379272][T15664] dump_stack_lvl+0x16c/0x1f0 [ 1308.379316][T15664] should_fail_ex+0x512/0x640 [ 1308.379353][T15664] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1308.379390][T15664] should_failslab+0xc2/0x120 [ 1308.379427][T15664] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1308.379459][T15664] ? sk_prot_alloc+0x60/0x2a0 [ 1308.379494][T15664] ? sk_prot_alloc+0x60/0x2a0 [ 1308.379520][T15664] ? find_held_lock+0x2b/0x80 [ 1308.379549][T15664] sk_prot_alloc+0x60/0x2a0 [ 1308.379581][T15664] sk_alloc+0x36/0xc20 [ 1308.379619][T15664] inet_create+0x3a1/0x1040 [ 1308.379654][T15664] ? inet_create+0x93/0x1040 [ 1308.379693][T15664] __sock_create+0x338/0x8d0 [ 1308.379731][T15664] mptcp_subflow_create_socket+0xec/0xa10 [ 1308.379764][T15664] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1308.379805][T15664] __mptcp_nmpc_sk+0x182/0x890 [ 1308.379836][T15664] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1308.379870][T15664] ? __local_bh_enable_ip+0xa4/0x120 [ 1308.379910][T15664] mptcp_getsockopt+0xcf8/0xe20 [ 1308.379938][T15664] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1308.379964][T15664] ? find_held_lock+0x2b/0x80 [ 1308.379993][T15664] ? __might_fault+0xe3/0x190 [ 1308.380022][T15664] ? __might_fault+0xe3/0x190 [ 1308.380048][T15664] ? __might_fault+0x13b/0x190 [ 1308.380089][T15664] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1308.380117][T15664] do_sock_getsockopt+0x34a/0x440 [ 1308.380148][T15664] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1308.380176][T15664] ? __fget_files+0x204/0x3c0 [ 1308.380231][T15664] __sys_getsockopt+0x123/0x1b0 [ 1308.380279][T15664] __x64_sys_getsockopt+0xbd/0x160 [ 1308.380317][T15664] ? do_syscall_64+0x91/0x4b0 [ 1308.380354][T15664] ? lockdep_hardirqs_on+0x7c/0x110 [ 1308.380390][T15664] do_syscall_64+0xcd/0x4b0 [ 1308.380431][T15664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.380459][T15664] RIP: 0033:0x7f37c2b8eec9 [ 1308.380481][T15664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1308.380508][T15664] RSP: 002b:00007f37c3a9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1308.380533][T15664] RAX: ffffffffffffffda RBX: 00007f37c2de6180 RCX: 00007f37c2b8eec9 [ 1308.380552][T15664] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 1308.380568][T15664] RBP: 00007f37c2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1308.380584][T15664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1308.380599][T15664] R13: 00007f37c2de6218 R14: 00007f37c2de6180 R15: 00007ffe01d89fd8 [ 1308.380636][T15664] [ 1313.745665][T15907] sd 0:0:1:0: PR command failed: 1026 [ 1313.827967][T15907] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1313.835112][T15907] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1315.002850][T15955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4433'. [ 1315.171066][T15955] macsec0: entered promiscuous mode [ 1316.183150][T16029] sd 0:0:1:0: PR command failed: 1026 [ 1316.190428][T16029] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1316.201990][T16029] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1318.402444][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4443'. [ 1319.370421][T16106] openvswitch: netlink: Key 13 has unexpected len 0 expected 24 [ 1320.485849][T16144] FAULT_INJECTION: forcing a failure. [ 1320.485849][T16144] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.621059][T16144] CPU: 1 UID: 0 PID: 16144 Comm: syz.1.4454 Tainted: G I syzkaller #0 PREEMPT(full) [ 1320.621097][T16144] Tainted: [I]=FIRMWARE_WORKAROUND [ 1320.621106][T16144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1320.621121][T16144] Call Trace: [ 1320.621130][T16144] [ 1320.621140][T16144] dump_stack_lvl+0x16c/0x1f0 [ 1320.621177][T16144] should_fail_ex+0x512/0x640 [ 1320.621208][T16144] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1320.621240][T16144] should_failslab+0xc2/0x120 [ 1320.621274][T16144] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1320.621301][T16144] ? __alloc_skb+0x2b2/0x380 [ 1320.621340][T16144] ? __alloc_skb+0x2b2/0x380 [ 1320.621369][T16144] __alloc_skb+0x2b2/0x380 [ 1320.621400][T16144] ? __pfx___alloc_skb+0x10/0x10 [ 1320.621437][T16144] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1320.621472][T16144] ? __lock_acquire+0xb97/0x1ce0 [ 1320.621511][T16144] netlink_alloc_large_skb+0x69/0x140 [ 1320.621549][T16144] netlink_sendmsg+0x698/0xdd0 [ 1320.621579][T16144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1320.621617][T16144] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1320.621658][T16144] ____sys_sendmsg+0xa95/0xc70 [ 1320.621685][T16144] ? copy_msghdr_from_user+0x10a/0x160 [ 1320.621719][T16144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1320.621762][T16144] ___sys_sendmsg+0x134/0x1d0 [ 1320.621799][T16144] ? __pfx____sys_sendmsg+0x10/0x10 [ 1320.621874][T16144] __sys_sendmsg+0x16d/0x220 [ 1320.621909][T16144] ? __pfx___sys_sendmsg+0x10/0x10 [ 1320.621966][T16144] do_syscall_64+0xcd/0x4b0 [ 1320.622008][T16144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.622031][T16144] RIP: 0033:0x7f2e7c58eec9 [ 1320.622048][T16144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.622070][T16144] RSP: 002b:00007f2e7d376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.622092][T16144] RAX: ffffffffffffffda RBX: 00007f2e7c7e5fa0 RCX: 00007f2e7c58eec9 [ 1320.622107][T16144] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1320.622123][T16144] RBP: 00007f2e7d376090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.622138][T16144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.622153][T16144] R13: 00007f2e7c7e6038 R14: 00007f2e7c7e5fa0 R15: 00007ffe67239098 [ 1320.622188][T16144] [ 1324.114442][T16257] FAULT_INJECTION: forcing a failure. [ 1324.114442][T16257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1324.138238][T16257] CPU: 1 UID: 0 PID: 16257 Comm: syz.1.4470 Tainted: G I syzkaller #0 PREEMPT(full) [ 1324.138284][T16257] Tainted: [I]=FIRMWARE_WORKAROUND [ 1324.138294][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1324.138308][T16257] Call Trace: [ 1324.138314][T16257] [ 1324.138320][T16257] dump_stack_lvl+0x16c/0x1f0 [ 1324.138348][T16257] should_fail_ex+0x512/0x640 [ 1324.138373][T16257] should_fail_alloc_page+0xe7/0x130 [ 1324.138396][T16257] prepare_alloc_pages+0x3c2/0x610 [ 1324.138417][T16257] ? arch_stack_walk+0xa6/0x100 [ 1324.138436][T16257] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1324.138464][T16257] ? stack_trace_save+0x8e/0xc0 [ 1324.138492][T16257] ? __pfx_stack_trace_save+0x10/0x10 [ 1324.138511][T16257] ? stack_depot_save_flags+0x29/0x9c0 [ 1324.138536][T16257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1324.138555][T16257] ? kasan_save_stack+0x42/0x60 [ 1324.138573][T16257] ? kasan_save_stack+0x33/0x60 [ 1324.138590][T16257] ? kasan_save_track+0x14/0x30 [ 1324.138607][T16257] ? __kasan_slab_alloc+0x89/0x90 [ 1324.138625][T16257] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1324.138640][T16257] ? security_inode_alloc+0x3b/0x2b0 [ 1324.138661][T16257] ? inode_init_always_gfp+0xce4/0x1030 [ 1324.138679][T16257] ? do_syscall_64+0xcd/0x4b0 [ 1324.138699][T16257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.138717][T16257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1324.138735][T16257] ? policy_nodemask+0xea/0x4e0 [ 1324.138757][T16257] alloc_pages_mpol+0x1fb/0x550 [ 1324.138779][T16257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1324.138804][T16257] ___kmalloc_large_node+0xed/0x160 [ 1324.138828][T16257] __kmalloc_large_node_noprof+0x1c/0x70 [ 1324.138852][T16257] __kmalloc_noprof.cold+0xc/0x62 [ 1324.138873][T16257] ? sk_prot_alloc+0x1a8/0x2a0 [ 1324.138891][T16257] ? sk_prot_alloc+0x1a8/0x2a0 [ 1324.138906][T16257] sk_prot_alloc+0x1a8/0x2a0 [ 1324.138923][T16257] sk_alloc+0x36/0xc20 [ 1324.138945][T16257] can_create+0x1e5/0x630 [ 1324.138969][T16257] __sock_create+0x338/0x8d0 [ 1324.138993][T16257] __sys_socket+0x14d/0x260 [ 1324.139021][T16257] ? __pfx___sys_socket+0x10/0x10 [ 1324.139044][T16257] ? xfd_validate_state+0x61/0x180 [ 1324.139057][T16257] ? __pfx_ksys_write+0x10/0x10 [ 1324.139079][T16257] __x64_sys_socket+0x72/0xb0 [ 1324.139096][T16257] ? lockdep_hardirqs_on+0x7c/0x110 [ 1324.139115][T16257] do_syscall_64+0xcd/0x4b0 [ 1324.139138][T16257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.139152][T16257] RIP: 0033:0x7f2e7c58eec9 [ 1324.139165][T16257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.139186][T16257] RSP: 002b:00007f2e7a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1324.139205][T16257] RAX: ffffffffffffffda RBX: 00007f2e7c7e6180 RCX: 00007f2e7c58eec9 [ 1324.139215][T16257] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 1324.139224][T16257] RBP: 00007f2e7c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1324.139233][T16257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.139241][T16257] R13: 00007f2e7c7e6218 R14: 00007f2e7c7e6180 R15: 00007ffe67239098 [ 1324.139259][T16257] [ 1325.076740][T16264] openvswitch: netlink: Key 13 has unexpected len 0 expected 24 [ 1326.063313][T16306] FAULT_INJECTION: forcing a failure. [ 1326.063313][T16306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.200738][T16306] CPU: 0 UID: 0 PID: 16306 Comm: syz.1.4477 Tainted: G I syzkaller #0 PREEMPT(full) [ 1326.200780][T16306] Tainted: [I]=FIRMWARE_WORKAROUND [ 1326.200789][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1326.200804][T16306] Call Trace: [ 1326.200813][T16306] [ 1326.200823][T16306] dump_stack_lvl+0x16c/0x1f0 [ 1326.200865][T16306] should_fail_ex+0x512/0x640 [ 1326.200906][T16306] _copy_from_iter+0x29f/0x1720 [ 1326.200948][T16306] ? __alloc_skb+0x200/0x380 [ 1326.200982][T16306] ? __pfx__copy_from_iter+0x10/0x10 [ 1326.201022][T16306] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1326.201057][T16306] ? __lock_acquire+0xb97/0x1ce0 [ 1326.201102][T16306] netlink_sendmsg+0x820/0xdd0 [ 1326.201130][T16306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1326.201153][T16306] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1326.201203][T16306] ____sys_sendmsg+0xa95/0xc70 [ 1326.201232][T16306] ? copy_msghdr_from_user+0x10a/0x160 [ 1326.201267][T16306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1326.201312][T16306] ___sys_sendmsg+0x134/0x1d0 [ 1326.201351][T16306] ? __pfx____sys_sendmsg+0x10/0x10 [ 1326.201434][T16306] __sys_sendmsg+0x16d/0x220 [ 1326.201471][T16306] ? __pfx___sys_sendmsg+0x10/0x10 [ 1326.201530][T16306] do_syscall_64+0xcd/0x4b0 [ 1326.201570][T16306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.201596][T16306] RIP: 0033:0x7f2e7c58eec9 [ 1326.201617][T16306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.201640][T16306] RSP: 002b:00007f2e7d376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1326.201664][T16306] RAX: ffffffffffffffda RBX: 00007f2e7c7e5fa0 RCX: 00007f2e7c58eec9 [ 1326.201681][T16306] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1326.201696][T16306] RBP: 00007f2e7d376090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.201712][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.201727][T16306] R13: 00007f2e7c7e6038 R14: 00007f2e7c7e5fa0 R15: 00007ffe67239098 [ 1326.201761][T16306] [ 1327.586230][T16312] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1327.625267][T16312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1327.646801][T16312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1327.652748][T16312] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1328.049128][T16312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1329.625458][ T8310] Bluetooth: hci1: command 0x0406 tx timeout [ 1329.631716][ T8310] Bluetooth: hci4: command 0x0406 tx timeout [ 1329.704954][T16392] Bluetooth: hci2: command 0x0406 tx timeout [ 1329.899603][T16392] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 1330.102814][T16392] Bluetooth: hci0: command 0x0406 tx timeout [ 1331.785884][T16392] Bluetooth: hci2: command 0x0406 tx timeout [ 1331.877188][ T30] audit: type=1107 audit(4294967355.944:57): pid=16429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1332.211901][ T30] audit: type=1107 audit(4294967355.985:58): pid=16429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1332.582533][T16445] program syz.0.4495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1332.718982][T16450] [U] [ 1332.725269][T16443] [U] [ 1334.578584][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1334.585948][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1334.638478][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1334.645975][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1334.682597][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1334.692148][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1334.752818][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1334.763302][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.057119][ T30] audit: type=1804 audit(4294967359.161:59): pid=16487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4505" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=266 res=1 errno=0 [ 1337.915096][T16589] sd 0:0:1:0: PR command failed: 1026 [ 1337.920552][T16589] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1338.080440][T16589] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1339.618158][T16392] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1339.667313][T16392] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1342.113250][T16705] sd 0:0:1:0: PR command failed: 1026 [ 1342.130413][T16705] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1342.144661][T16705] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1342.335346][T16709] netlink: 314 bytes leftover after parsing attributes in process `syz.2.4533'. [ 1345.989266][T16820] sd 0:0:1:0: PR command failed: 1026 [ 1345.995383][T16820] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1346.002811][T16820] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1349.413216][T16905] openvswitch: netlink: Key 13 has unexpected len 0 expected 24 [ 1349.441899][T16905] FAULT_INJECTION: forcing a failure. [ 1349.441899][T16905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.511943][T16905] CPU: 1 UID: 0 PID: 16905 Comm: syz.2.4559 Tainted: G I syzkaller #0 PREEMPT(full) [ 1349.511986][T16905] Tainted: [I]=FIRMWARE_WORKAROUND [ 1349.511996][T16905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1349.512011][T16905] Call Trace: [ 1349.512020][T16905] [ 1349.512030][T16905] dump_stack_lvl+0x16c/0x1f0 [ 1349.512070][T16905] should_fail_ex+0x512/0x640 [ 1349.512110][T16905] _copy_to_user+0x32/0xd0 [ 1349.512136][T16905] simple_read_from_buffer+0xcb/0x170 [ 1349.512165][T16905] proc_fail_nth_read+0x197/0x240 [ 1349.512196][T16905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1349.512226][T16905] ? rw_verify_area+0xcf/0x6c0 [ 1349.512251][T16905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1349.512290][T16905] vfs_read+0x1e4/0xcf0 [ 1349.512321][T16905] ? __pfx___mutex_lock+0x10/0x10 [ 1349.512353][T16905] ? __pfx_vfs_read+0x10/0x10 [ 1349.512386][T16905] ? __fget_files+0x20e/0x3c0 [ 1349.512426][T16905] ksys_read+0x12a/0x250 [ 1349.512450][T16905] ? __pfx_ksys_read+0x10/0x10 [ 1349.512480][T16905] do_syscall_64+0xcd/0x4b0 [ 1349.512515][T16905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.512538][T16905] RIP: 0033:0x7ff49a78d8dc [ 1349.512557][T16905] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1349.512578][T16905] RSP: 002b:00007ff49b5cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1349.512601][T16905] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78d8dc [ 1349.512619][T16905] RDX: 000000000000000f RSI: 00007ff49b5cb0a0 RDI: 0000000000000004 [ 1349.512634][T16905] RBP: 00007ff49b5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.512648][T16905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.512660][T16905] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1349.512693][T16905] [ 1350.889796][T16922] netlink: set zone limit has 8 unknown bytes [ 1352.174911][T16954] sd 0:0:1:0: PR command failed: 1026 [ 1352.188301][T16954] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1352.207879][T16954] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1352.964220][T16937] random: crng reseeded on system resumption [ 1353.599022][T17004] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 1353.599022][T17004] program syz.3.4576 not setting count and/or reply_len properly [ 1353.934645][T17028] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1354.053837][T17028] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1355.665915][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1355.672467][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1355.755119][T17089] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1356.123812][T17092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4583'. [ 1357.238866][ C1] sd 0:0:1:0: [sda] tag#2284 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1357.249428][ C1] sd 0:0:1:0: [sda] tag#2284 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 1357.781327][T17140] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4590'. [ 1360.057845][T17228] sg_write: data in/out 45639919/6 bytes for SCSI command 0x14-- guessing data in; [ 1360.057845][T17228] program syz.1.4602 not setting count and/or reply_len properly [ 1367.062561][T17452] sg_write: data in/out 45639919/6 bytes for SCSI command 0x14-- guessing data in; [ 1367.062561][T17452] program syz.2.4623 not setting count and/or reply_len properly [ 1369.863456][T17541] sd 0:0:1:0: PR command failed: 1026 [ 1369.891584][T17541] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1369.935440][T17541] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1372.301136][T17613] sg_write: data in/out 45639919/6 bytes for SCSI command 0x14-- guessing data in; [ 1372.301136][T17613] program syz.0.4643 not setting count and/or reply_len properly [ 1372.801116][T17628] openvswitch: netlink: Key 13 has unexpected len 0 expected 24 [ 1375.050810][T17728] [U]  [ 1375.739308][T17728] [U] [ 1378.606534][T17815] sd 0:0:1:0: PR command failed: 1026 [ 1378.630593][T17815] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1378.638548][T17815] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1380.407974][T17871] FAULT_INJECTION: forcing a failure. [ 1380.407974][T17871] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.487726][T17871] CPU: 1 UID: 0 PID: 17871 Comm: syz.1.4680 Tainted: G I syzkaller #0 PREEMPT(full) [ 1380.487758][T17871] Tainted: [I]=FIRMWARE_WORKAROUND [ 1380.487764][T17871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1380.487773][T17871] Call Trace: [ 1380.487779][T17871] [ 1380.487785][T17871] dump_stack_lvl+0x16c/0x1f0 [ 1380.487811][T17871] should_fail_ex+0x512/0x640 [ 1380.487837][T17871] ? __kmalloc_noprof+0xca/0x880 [ 1380.487855][T17871] should_failslab+0xc2/0x120 [ 1380.487881][T17871] __kmalloc_noprof+0xdd/0x880 [ 1380.487896][T17871] ? kernfs_fop_write_iter+0x237/0x570 [ 1380.487914][T17871] ? kernfs_fop_write_iter+0x237/0x570 [ 1380.487928][T17871] kernfs_fop_write_iter+0x237/0x570 [ 1380.487946][T17871] iter_file_splice_write+0xa21/0x12e0 [ 1380.487974][T17871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1380.487994][T17871] ? __pfx_copy_splice_read+0x10/0x10 [ 1380.488018][T17871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1380.488036][T17871] direct_splice_actor+0x192/0x6c0 [ 1380.488054][T17871] splice_direct_to_actor+0x345/0xa30 [ 1380.488077][T17871] ? __pfx_direct_splice_actor+0x10/0x10 [ 1380.488096][T17871] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1380.488111][T17871] ? get_pid_task+0xfc/0x250 [ 1380.488129][T17871] do_splice_direct+0x174/0x240 [ 1380.488145][T17871] ? __pfx_do_splice_direct+0x10/0x10 [ 1380.488160][T17871] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1380.488178][T17871] ? rw_verify_area+0xcf/0x6c0 [ 1380.488195][T17871] do_sendfile+0xb06/0xe50 [ 1380.488214][T17871] ? __pfx_do_sendfile+0x10/0x10 [ 1380.488230][T17871] ? __fget_files+0x20e/0x3c0 [ 1380.488251][T17871] __x64_sys_sendfile64+0x1d8/0x220 [ 1380.488270][T17871] ? ksys_write+0x1ac/0x250 [ 1380.488286][T17871] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1380.488311][T17871] do_syscall_64+0xcd/0x4b0 [ 1380.488333][T17871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.488348][T17871] RIP: 0033:0x7f2e7c58eec9 [ 1380.488360][T17871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1380.488373][T17871] RSP: 002b:00007f2e7d376038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1380.488387][T17871] RAX: ffffffffffffffda RBX: 00007f2e7c7e5fa0 RCX: 00007f2e7c58eec9 [ 1380.488397][T17871] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1380.488405][T17871] RBP: 00007f2e7d376090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.488414][T17871] R10: 0000004000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1380.488423][T17871] R13: 00007f2e7c7e6038 R14: 00007f2e7c7e5fa0 R15: 00007ffe67239098 [ 1380.488441][T17871] [ 1382.713265][T17906] FAULT_INJECTION: forcing a failure. [ 1382.713265][T17906] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1382.762092][T17906] CPU: 0 UID: 0 PID: 17906 Comm: syz.1.4683 Tainted: G I syzkaller #0 PREEMPT(full) [ 1382.762118][T17906] Tainted: [I]=FIRMWARE_WORKAROUND [ 1382.762124][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1382.762132][T17906] Call Trace: [ 1382.762138][T17906] [ 1382.762144][T17906] dump_stack_lvl+0x16c/0x1f0 [ 1382.762170][T17906] should_fail_ex+0x512/0x640 [ 1382.762194][T17906] get_futex_key+0xff0/0x1560 [ 1382.762217][T17906] ? __pfx_get_futex_key+0x10/0x10 [ 1382.762236][T17906] ? find_held_lock+0x2b/0x80 [ 1382.762255][T17906] ? __up_read+0x1f8/0x750 [ 1382.762272][T17906] futex_wake+0xea/0x530 [ 1382.762288][T17906] ? __pfx_futex_wake+0x10/0x10 [ 1382.762306][T17906] ? rcu_is_watching+0x12/0xc0 [ 1382.762330][T17906] do_futex+0x1e3/0x350 [ 1382.762351][T17906] ? __pfx_do_futex+0x10/0x10 [ 1382.762373][T17906] ? mm_release+0x209/0x300 [ 1382.762392][T17906] mm_release+0x24e/0x300 [ 1382.762410][T17906] do_exit+0x68e/0x2bf0 [ 1382.762427][T17906] ? __pfx_do_exit+0x10/0x10 [ 1382.762439][T17906] ? do_raw_spin_lock+0x12c/0x2b0 [ 1382.762454][T17906] ? find_held_lock+0x2b/0x80 [ 1382.762473][T17906] do_group_exit+0xd3/0x2a0 [ 1382.762487][T17906] get_signal+0x2671/0x26d0 [ 1382.762512][T17906] ? __pfx_get_signal+0x10/0x10 [ 1382.762534][T17906] ? do_futex+0x122/0x350 [ 1382.762554][T17906] ? __pfx_do_futex+0x10/0x10 [ 1382.762576][T17906] arch_do_signal_or_restart+0x8f/0x790 [ 1382.762598][T17906] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1382.762622][T17906] ? __pfx_do_writev+0x10/0x10 [ 1382.762643][T17906] exit_to_user_mode_loop+0x85/0x130 [ 1382.762659][T17906] do_syscall_64+0x419/0x4b0 [ 1382.762681][T17906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.762695][T17906] RIP: 0033:0x7f2e7c58eec9 [ 1382.762708][T17906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1382.762721][T17906] RSP: 002b:00007f2e7a7b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1382.762735][T17906] RAX: fffffffffffffe00 RBX: 00007f2e7c7e6368 RCX: 00007f2e7c58eec9 [ 1382.762744][T17906] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e7c7e6368 [ 1382.762753][T17906] RBP: 00007f2e7c7e6360 R08: 0000000000000000 R09: 0000000000000000 [ 1382.762762][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.762770][T17906] R13: 00007f2e7c7e63f8 R14: 00007ffe67238fb0 R15: 00007ffe67239098 [ 1382.762788][T17906] [ 1385.009519][T17966] sd 0:0:1:0: PR command failed: 1026 [ 1385.027249][T17966] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1385.048924][T17966] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1392.638852][T18211] FAULT_INJECTION: forcing a failure. [ 1392.638852][T18211] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.652080][T18211] CPU: 0 UID: 0 PID: 18211 Comm: syz.1.4715 Tainted: G I syzkaller #0 PREEMPT(full) [ 1392.652107][T18211] Tainted: [I]=FIRMWARE_WORKAROUND [ 1392.652113][T18211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1392.652122][T18211] Call Trace: [ 1392.652128][T18211] [ 1392.652135][T18211] dump_stack_lvl+0x16c/0x1f0 [ 1392.652162][T18211] should_fail_ex+0x512/0x640 [ 1392.652184][T18211] ? fs_reclaim_acquire+0xae/0x150 [ 1392.652207][T18211] should_failslab+0xc2/0x120 [ 1392.652228][T18211] __kmalloc_noprof+0xdd/0x880 [ 1392.652243][T18211] ? find_held_lock+0x2b/0x80 [ 1392.652260][T18211] ? usb_alloc_urb+0x66/0xa0 [ 1392.652277][T18211] ? usb_alloc_urb+0x66/0xa0 [ 1392.652289][T18211] usb_alloc_urb+0x66/0xa0 [ 1392.652309][T18211] do_proc_control+0x2ef/0x10a0 [ 1392.652330][T18211] ? __might_fault+0x13b/0x190 [ 1392.652348][T18211] ? __pfx_do_proc_control+0x10/0x10 [ 1392.652369][T18211] usbdev_ioctl+0x22ff/0x4070 [ 1392.652387][T18211] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1392.652407][T18211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1392.652484][T18211] ? do_vfs_ioctl+0x128/0x14f0 [ 1392.652506][T18211] ? find_held_lock+0x2b/0x80 [ 1392.652524][T18211] ? hook_file_ioctl_common+0x145/0x410 [ 1392.652545][T18211] ? __fget_files+0x20e/0x3c0 [ 1392.652564][T18211] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1392.652580][T18211] __x64_sys_ioctl+0x18e/0x210 [ 1392.652596][T18211] do_syscall_64+0xcd/0x4b0 [ 1392.652619][T18211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.652635][T18211] RIP: 0033:0x7f2e7c58eec9 [ 1392.652647][T18211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1392.652662][T18211] RSP: 002b:00007f2e7d376038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.652676][T18211] RAX: ffffffffffffffda RBX: 00007f2e7c7e5fa0 RCX: 00007f2e7c58eec9 [ 1392.652686][T18211] RDX: 00002000000001c0 RSI: 00000000c0185500 RDI: 0000000000000007 [ 1392.652695][T18211] RBP: 00007f2e7c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1392.652704][T18211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1392.652712][T18211] R13: 00007f2e7c7e6038 R14: 00007f2e7c7e5fa0 R15: 00007ffe67239098 [ 1392.652731][T18211] [ 1393.131374][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4713'. [ 1394.546481][T18256] sg_write: data in/out 26863/6 bytes for SCSI command 0x0-- guessing data in; [ 1394.546481][T18256] program syz.1.4720 not setting count and/or reply_len properly [ 1394.942351][T18262] sg_write: data in/out 26863/6 bytes for SCSI command 0x0-- guessing data in; [ 1394.942351][T18262] program syz.1.4721 not setting count and/or reply_len properly [ 1396.540965][T18314] sg_write: data in/out 26863/6 bytes for SCSI command 0x0-- guessing data in; [ 1396.540965][T18314] program syz.2.4730 not setting count and/or reply_len properly [ 1399.814232][ T8313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1399.825969][ T8313] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1399.836032][ T8313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1399.846707][ T8313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1399.855099][ T8313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1400.578508][T18377] chnl_net:caif_netlink_parms(): no params data found [ 1401.349779][T18377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.399631][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.408661][T18377] bridge_slave_0: entered allmulticast mode [ 1401.418626][T18377] bridge_slave_0: entered promiscuous mode [ 1401.431301][T18377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.442700][T18377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.481269][T18377] bridge_slave_1: entered allmulticast mode [ 1401.502699][T18377] bridge_slave_1: entered promiscuous mode [ 1401.706256][T10842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.883884][T10842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.894450][ T8313] Bluetooth: hci3: command tx timeout [ 1402.025178][T18377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.248401][T10842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.283760][T18377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.371905][T10842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.463476][T18618] sd 0:0:1:0: PR command failed: 1026 [ 1402.479316][T18618] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1402.486633][T18618] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1402.543293][T18377] team0: Port device team_slave_0 added [ 1402.574208][T18377] team0: Port device team_slave_1 added [ 1402.742109][T18377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.763324][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.826062][T18377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.927358][T18377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.934889][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.961135][T18377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.443955][T10842] bridge_slave_1: left allmulticast mode [ 1403.546271][T10842] bridge_slave_1: left promiscuous mode [ 1403.568199][T10842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.589446][T10842] bridge_slave_0: left allmulticast mode [ 1403.626024][T10842] bridge_slave_0: left promiscuous mode [ 1403.637617][T10842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.958967][ T8313] Bluetooth: hci3: command tx timeout [ 1404.952210][T10842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.980998][T10842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.991559][T10842] bond0 (unregistering): Released all slaves [ 1405.012926][T18377] hsr_slave_0: entered promiscuous mode [ 1405.021408][T18377] hsr_slave_1: entered promiscuous mode [ 1405.042783][T18377] debugfs: 'hsr0' already exists in 'hsr' [ 1405.058196][T18377] Cannot create hsr debugfs directory [ 1406.033486][ T8313] Bluetooth: hci3: command tx timeout [ 1406.498417][T10842] hsr_slave_0: left promiscuous mode [ 1406.536090][T10842] hsr_slave_1: left promiscuous mode [ 1406.564200][T10842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1406.627879][T10842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.659893][T10842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1406.676766][T10842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.697507][T10842] veth1_macvtap: left promiscuous mode [ 1406.707245][T10842] veth0_macvtap: left promiscuous mode [ 1406.712819][T10842] veth1_vlan: left promiscuous mode [ 1406.724067][T10842] veth0_vlan: left promiscuous mode [ 1408.106414][ T8313] Bluetooth: hci3: command tx timeout [ 1411.079311][ T30] audit: type=1800 audit(4294967337.323:60): pid=19027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4769" name="lu_gp_id" dev="configfs" ino=122322 res=0 errno=0 [ 1411.418653][T18377] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1411.884561][T18377] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1411.987326][T18377] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1412.408354][T18377] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1412.909102][T18377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.001517][T18377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.054884][T10844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.062120][T10844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.064953][T19090] binder: 19089:19090 ioctl c018620c 0 returned -14 [ 1413.183994][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.191256][T10844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.133712][T10845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.725601][T10845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.934784][T10845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.066582][T18377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.263681][T16392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1415.284063][T16392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1415.294454][T16392] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1415.303282][T16392] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1415.315257][T16392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1415.388730][T18377] veth0_vlan: entered promiscuous mode [ 1415.585004][T10845] bridge_slave_1: left allmulticast mode [ 1415.597684][T10845] bridge_slave_1: left promiscuous mode [ 1415.648745][T10845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.660575][T10845] bridge_slave_0: left allmulticast mode [ 1415.666254][T10845] bridge_slave_0: left promiscuous mode [ 1415.672473][T10845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.026975][T19226] FAULT_INJECTION: forcing a failure. [ 1416.026975][T19226] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.056149][T19226] CPU: 1 UID: 0 PID: 19226 Comm: syz.1.4780 Tainted: G I syzkaller #0 PREEMPT(full) [ 1416.056196][T19226] Tainted: [I]=FIRMWARE_WORKAROUND [ 1416.056207][T19226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1416.056225][T19226] Call Trace: [ 1416.056235][T19226] [ 1416.056247][T19226] dump_stack_lvl+0x16c/0x1f0 [ 1416.056296][T19226] should_fail_ex+0x512/0x640 [ 1416.056336][T19226] ? fs_reclaim_acquire+0xae/0x150 [ 1416.056380][T19226] should_failslab+0xc2/0x120 [ 1416.056419][T19226] __kmalloc_cache_noprof+0x72/0x780 [ 1416.056451][T19226] ? do_proc_control+0x335/0x10a0 [ 1416.056487][T19226] ? do_proc_control+0x335/0x10a0 [ 1416.056513][T19226] do_proc_control+0x335/0x10a0 [ 1416.056545][T19226] ? __might_fault+0x13b/0x190 [ 1416.056577][T19226] ? __pfx_do_proc_control+0x10/0x10 [ 1416.056617][T19226] usbdev_ioctl+0x22ff/0x4070 [ 1416.056651][T19226] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1416.056688][T19226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1416.056722][T19226] ? do_vfs_ioctl+0x128/0x14f0 [ 1416.056768][T19226] ? find_held_lock+0x2b/0x80 [ 1416.056801][T19226] ? hook_file_ioctl_common+0x145/0x410 [ 1416.056843][T19226] ? __fget_files+0x20e/0x3c0 [ 1416.056880][T19226] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1416.056911][T19226] __x64_sys_ioctl+0x18e/0x210 [ 1416.056941][T19226] do_syscall_64+0xcd/0x4b0 [ 1416.057026][T19226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.057055][T19226] RIP: 0033:0x7f2e7c58eec9 [ 1416.057078][T19226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.057105][T19226] RSP: 002b:00007f2e7d376038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1416.057131][T19226] RAX: ffffffffffffffda RBX: 00007f2e7c7e5fa0 RCX: 00007f2e7c58eec9 [ 1416.057150][T19226] RDX: 00002000000001c0 RSI: 00000000c0185500 RDI: 0000000000000007 [ 1416.057168][T19226] RBP: 00007f2e7c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1416.057185][T19226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.057201][T19226] R13: 00007f2e7c7e6038 R14: 00007f2e7c7e5fa0 R15: 00007ffe67239098 [ 1416.057240][T19226] [ 1416.776604][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1416.785404][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.277832][T10845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.318382][T10845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.380386][T10845] bond0 (unregistering): Released all slaves [ 1417.409445][ T8313] Bluetooth: hci2: command tx timeout [ 1417.507166][T18377] veth1_vlan: entered promiscuous mode [ 1417.680370][T19265] FAULT_INJECTION: forcing a failure. [ 1417.680370][T19265] name failslab, interval 1, probability 0, space 0, times 0 [ 1417.728603][T19265] CPU: 1 UID: 0 PID: 19265 Comm: syz.2.4784 Tainted: G I syzkaller #0 PREEMPT(full) [ 1417.728646][T19265] Tainted: [I]=FIRMWARE_WORKAROUND [ 1417.728657][T19265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1417.728672][T19265] Call Trace: [ 1417.728682][T19265] [ 1417.728692][T19265] dump_stack_lvl+0x16c/0x1f0 [ 1417.728735][T19265] should_fail_ex+0x512/0x640 [ 1417.728771][T19265] ? fs_reclaim_acquire+0xae/0x150 [ 1417.728820][T19265] should_failslab+0xc2/0x120 [ 1417.728856][T19265] __kmalloc_cache_noprof+0x72/0x780 [ 1417.728885][T19265] ? do_proc_control+0x335/0x10a0 [ 1417.728916][T19265] ? do_proc_control+0x335/0x10a0 [ 1417.728940][T19265] do_proc_control+0x335/0x10a0 [ 1417.728968][T19265] ? __might_fault+0x13b/0x190 [ 1417.728997][T19265] ? __pfx_do_proc_control+0x10/0x10 [ 1417.729034][T19265] usbdev_ioctl+0x22ff/0x4070 [ 1417.729067][T19265] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1417.729100][T19265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1417.729132][T19265] ? do_vfs_ioctl+0x128/0x14f0 [ 1417.729171][T19265] ? find_held_lock+0x2b/0x80 [ 1417.729201][T19265] ? hook_file_ioctl_common+0x145/0x410 [ 1417.729237][T19265] ? __fget_files+0x20e/0x3c0 [ 1417.729272][T19265] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1417.729300][T19265] __x64_sys_ioctl+0x18e/0x210 [ 1417.729325][T19265] do_syscall_64+0xcd/0x4b0 [ 1417.729363][T19265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.729388][T19265] RIP: 0033:0x7ff49a78eec9 [ 1417.729410][T19265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.729436][T19265] RSP: 002b:00007ff49b5cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1417.729467][T19265] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78eec9 [ 1417.729485][T19265] RDX: 00002000000001c0 RSI: 00000000c0185500 RDI: 0000000000000007 [ 1417.729503][T19265] RBP: 00007ff49a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1417.729519][T19265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1417.729535][T19265] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1417.729571][T19265] [ 1418.215347][T18377] veth0_macvtap: entered promiscuous mode [ 1418.376617][T18377] veth1_macvtap: entered promiscuous mode [ 1418.598475][T18377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.796835][T18377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.835133][T19182] chnl_net:caif_netlink_parms(): no params data found [ 1418.890896][T10850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.936208][T10845] hsr_slave_0: left promiscuous mode [ 1418.946480][T10845] hsr_slave_1: left promiscuous mode [ 1418.960571][T10845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.993193][T10845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.009206][T10845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.018833][T10845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.075581][T10845] veth1_macvtap: left promiscuous mode [ 1419.084907][T10845] veth0_macvtap: left promiscuous mode [ 1419.100932][T10845] veth1_vlan: left promiscuous mode [ 1419.106996][T10845] veth0_vlan: left promiscuous mode [ 1419.479089][ T8313] Bluetooth: hci2: command tx timeout [ 1420.708522][T10845] team0 (unregistering): Port device team_slave_1 removed [ 1420.750853][T10845] team0 (unregistering): Port device team_slave_0 removed [ 1421.186846][T10850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.195705][T10850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.256360][T10850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.555478][ T8313] Bluetooth: hci2: command tx timeout [ 1421.646258][T19182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.661347][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.671075][T19182] bridge_slave_0: entered allmulticast mode [ 1421.707600][T19182] bridge_slave_0: entered promiscuous mode [ 1421.825690][T19182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.887610][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.894820][T19182] bridge_slave_1: entered allmulticast mode [ 1421.908145][T19182] bridge_slave_1: entered promiscuous mode [ 1421.917809][T10846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.034839][T10846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.200826][T19182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.238946][T10820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.267583][T19182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.283122][T10820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.609627][T19182] team0: Port device team_slave_0 added [ 1422.669838][T19182] team0: Port device team_slave_1 added [ 1423.445307][T19182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.452993][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.480343][T19182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.581600][T19182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.595294][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.627252][ T8313] Bluetooth: hci2: command tx timeout [ 1423.635194][T19182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.799890][T19182] hsr_slave_0: entered promiscuous mode [ 1423.819445][T19182] hsr_slave_1: entered promiscuous mode [ 1423.872760][T19182] debugfs: 'hsr0' already exists in 'hsr' [ 1423.911335][T19182] Cannot create hsr debugfs directory [ 1424.329762][T19677] random: crng reseeded on system resumption [ 1424.892553][T19719] FAULT_INJECTION: forcing a failure. [ 1424.892553][T19719] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.936036][T19719] CPU: 0 UID: 0 PID: 19719 Comm: syz.2.4801 Tainted: G I syzkaller #0 PREEMPT(full) [ 1424.936063][T19719] Tainted: [I]=FIRMWARE_WORKAROUND [ 1424.936068][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1424.936077][T19719] Call Trace: [ 1424.936084][T19719] [ 1424.936091][T19719] dump_stack_lvl+0x16c/0x1f0 [ 1424.936116][T19719] should_fail_ex+0x512/0x640 [ 1424.936138][T19719] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1424.936155][T19719] should_failslab+0xc2/0x120 [ 1424.936176][T19719] __kmalloc_cache_noprof+0x72/0x780 [ 1424.936192][T19719] ? s_start+0x7b/0x320 [ 1424.936206][T19719] ? trace_kmalloc+0x2b/0xd0 [ 1424.936227][T19719] ? s_start+0x7b/0x320 [ 1424.936240][T19719] s_start+0x7b/0x320 [ 1424.936256][T19719] traverse.part.0.constprop.0+0xaf/0x650 [ 1424.936272][T19719] ? aa_file_perm+0x28f/0x12e0 [ 1424.936294][T19719] seq_read_iter+0x93c/0x12d0 [ 1424.936311][T19719] ? __pfx_aa_file_perm+0x10/0x10 [ 1424.936336][T19719] seq_read+0x3a3/0x570 [ 1424.936350][T19719] ? __pfx_seq_read+0x10/0x10 [ 1424.936364][T19719] ? get_pid_task+0xfc/0x250 [ 1424.936386][T19719] ? rw_verify_area+0xcf/0x6c0 [ 1424.936400][T19719] ? __pfx_seq_read+0x10/0x10 [ 1424.936414][T19719] vfs_read+0x1e4/0xcf0 [ 1424.936435][T19719] ? __pfx_vfs_read+0x10/0x10 [ 1424.936449][T19719] ? find_held_lock+0x2b/0x80 [ 1424.936467][T19719] ? __fget_files+0x204/0x3c0 [ 1424.936486][T19719] ? __fget_files+0x20e/0x3c0 [ 1424.936499][T19719] ? __fget_files+0x120/0x3c0 [ 1424.936519][T19719] __x64_sys_pread64+0x1eb/0x250 [ 1424.936538][T19719] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1424.936561][T19719] do_syscall_64+0xcd/0x4b0 [ 1424.936584][T19719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.936598][T19719] RIP: 0033:0x7ff49a78eec9 [ 1424.936611][T19719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.936625][T19719] RSP: 002b:00007ff49b5cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1424.936639][T19719] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78eec9 [ 1424.936649][T19719] RDX: 0000000073528428 RSI: 0000000000000000 RDI: 0000000000000003 [ 1424.936657][T19719] RBP: 00007ff49b5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.936666][T19719] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.936675][T19719] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1424.936693][T19719] [ 1424.936702][T19719] [ 1425.178489][T19719] ===================================== [ 1425.184031][T19719] WARNING: bad unlock balance detected! [ 1425.189563][T19719] syzkaller #0 Tainted: G I [ 1425.195521][T19719] ------------------------------------- [ 1425.201043][T19719] syz.2.4801/19719 is trying to release lock (event_mutex) at: [ 1425.208585][T19719] [] traverse.part.0.constprop.0+0x2c0/0x650 [ 1425.216121][T19719] but there are no more locks to release! [ 1425.221814][T19719] [ 1425.221814][T19719] other info that might help us debug this: [ 1425.229850][T19719] 1 lock held by syz.2.4801/19719: [ 1425.234940][T19719] #0: ffff888022736d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1425.243800][T19719] [ 1425.243800][T19719] stack backtrace: [ 1425.249689][T19719] CPU: 0 UID: 0 PID: 19719 Comm: syz.2.4801 Tainted: G I syzkaller #0 PREEMPT(full) [ 1425.249711][T19719] Tainted: [I]=FIRMWARE_WORKAROUND [ 1425.249717][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1425.249726][T19719] Call Trace: [ 1425.249733][T19719] [ 1425.249740][T19719] dump_stack_lvl+0x116/0x1f0 [ 1425.249808][T19719] ? traverse.part.0.constprop.0+0x2c0/0x650 [ 1425.249824][T19719] print_unlock_imbalance_bug+0x11b/0x130 [ 1425.249845][T19719] ? traverse.part.0.constprop.0+0x2c0/0x650 [ 1425.249858][T19719] lock_release+0x242/0x2f0 [ 1425.249879][T19719] __mutex_unlock_slowpath+0xa2/0x7b0 [ 1425.249899][T19719] ? rcu_is_watching+0x12/0xc0 [ 1425.249916][T19719] ? trace_kmalloc+0x2b/0xd0 [ 1425.249935][T19719] ? __kmalloc_cache_noprof+0x2ca/0x780 [ 1425.249949][T19719] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1425.249969][T19719] ? rcu_is_watching+0x12/0xc0 [ 1425.249985][T19719] ? kfree+0x252/0x6d0 [ 1425.249998][T19719] ? __kasan_kmalloc+0x8a/0xb0 [ 1425.250017][T19719] traverse.part.0.constprop.0+0x2c0/0x650 [ 1425.250031][T19719] ? aa_file_perm+0x28f/0x12e0 [ 1425.250051][T19719] seq_read_iter+0x93c/0x12d0 [ 1425.250065][T19719] ? __pfx_aa_file_perm+0x10/0x10 [ 1425.250082][T19719] seq_read+0x3a3/0x570 [ 1425.250095][T19719] ? __pfx_seq_read+0x10/0x10 [ 1425.250108][T19719] ? get_pid_task+0xfc/0x250 [ 1425.250128][T19719] ? rw_verify_area+0xcf/0x6c0 [ 1425.250142][T19719] ? __pfx_seq_read+0x10/0x10 [ 1425.250154][T19719] vfs_read+0x1e4/0xcf0 [ 1425.250172][T19719] ? __pfx_vfs_read+0x10/0x10 [ 1425.250186][T19719] ? find_held_lock+0x2b/0x80 [ 1425.250202][T19719] ? __fget_files+0x204/0x3c0 [ 1425.250218][T19719] ? __fget_files+0x20e/0x3c0 [ 1425.250232][T19719] ? __fget_files+0x120/0x3c0 [ 1425.250248][T19719] __x64_sys_pread64+0x1eb/0x250 [ 1425.250265][T19719] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1425.250285][T19719] do_syscall_64+0xcd/0x4b0 [ 1425.250311][T19719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.250325][T19719] RIP: 0033:0x7ff49a78eec9 [ 1425.250338][T19719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.250351][T19719] RSP: 002b:00007ff49b5cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1425.250364][T19719] RAX: ffffffffffffffda RBX: 00007ff49a9e5fa0 RCX: 00007ff49a78eec9 [ 1425.250374][T19719] RDX: 0000000073528428 RSI: 0000000000000000 RDI: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1425.250382][T19719] RBP: 00007ff49b5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.250391][T19719] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.250399][T19719] R13: 00007ff49a9e6038 R14: 00007ff49a9e5fa0 R15: 00007ffd2dabe3c8 [ 1425.250412][T19719] [ 1425.666826][T19647] PM: hibernation: Basic memory bitmaps freed [ 1425.673092][T19677] caif:caif_disconnect_client(): nothing to disconnect [ 1426.694509][T10850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.822628][T10850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.904010][T10850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.983975][T10850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.113748][T10850] bridge_slave_1: left allmulticast mode [ 1427.123345][T10850] bridge_slave_1: left promiscuous mode [ 1427.131782][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.147629][T10850] bridge_slave_0: left allmulticast mode [ 1427.153717][T10850] bridge_slave_0: left promiscuous mode [ 1427.162688][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.323621][T10850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.334610][T10850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.344831][T10850] bond0 (unregistering): Released all slaves [ 1427.572268][T10850] hsr_slave_0: left promiscuous mode [ 1427.578423][T10850] hsr_slave_1: left promiscuous mode [ 1427.584241][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.592217][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.615363][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.623071][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.635728][T10850] veth1_macvtap: left promiscuous mode [ 1427.641267][T10850] veth0_macvtap: left promiscuous mode [ 1427.650658][T10850] veth1_vlan: left promiscuous mode [ 1427.656522][T10850] veth0_vlan: left promiscuous mode [ 1427.773643][T10850] team0 (unregistering): Port device team_slave_1 removed [ 1427.799184][T10850] team0 (unregistering): Port device team_slave_0 removed [ 1428.199936][T10850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.253092][T10850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.288176][T10850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.354591][T10850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.439755][T10850] bridge_slave_1: left allmulticast mode [ 1428.447026][T10850] bridge_slave_1: left promiscuous mode [ 1428.453518][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.462026][T10850] bridge_slave_0: left allmulticast mode [ 1428.467661][T10850] bridge_slave_0: left promiscuous mode [ 1428.473649][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.483037][T10850] bridge_slave_1: left allmulticast mode [ 1428.488687][T10850] bridge_slave_1: left promiscuous mode [ 1428.494485][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.503257][T10850] bridge_slave_0: left allmulticast mode [ 1428.508926][T10850] bridge_slave_0: left promiscuous mode [ 1428.514766][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.597712][T10850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.607299][T10850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.616891][T10850] bond0 (unregistering): Released all slaves [ 1428.695577][T10850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.707099][T10850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.716623][T10850] bond0 (unregistering): Released all slaves [ 1428.787660][T10850] tipc: Left network mode [ 1429.101085][T10850] hsr_slave_0: left promiscuous mode [ 1429.106967][T10850] hsr_slave_1: left promiscuous mode [ 1429.113538][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.121507][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.140333][T10850] hsr_slave_0: left promiscuous mode [ 1429.146300][T10850] hsr_slave_1: left promiscuous mode [ 1429.152462][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.160496][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.168721][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.176113][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.190991][T10850] veth1_macvtap: left promiscuous mode [ 1429.196545][T10850] veth0_macvtap: left promiscuous mode [ 1429.202495][T10850] veth1_vlan: left promiscuous mode [ 1429.207866][T10850] veth0_vlan: left promiscuous mode [ 1429.395662][T10850] team0 (unregistering): Port device team_slave_1 removed [ 1429.426738][T10850] team0 (unregistering): Port device team_slave_0 removed [ 1429.564965][T10850] team0 (unregistering): Port device team_slave_1 removed [ 1429.598436][T10850] team0 (unregistering): Port device team_slave_0 removed