last executing test programs: 13.232989561s ago: executing program 1 (id=856): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_swap\x00', 0x100042, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7QOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19t\x8a\xe6\x14VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x91\xcaG\xdaa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x7, 0x7fffffff) (async) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010029bd701cfd34052503000000040001"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20044840) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) (async) madvise$auto(0x0, 0x200007, 0x19) (async) r3 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async) r4 = socket(0x10, 0x2, 0xf) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x8}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x7}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x2}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x7f}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x50084) (async) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r3, 0x9, r4}, 0x210) (async) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, &(0x7f0000000040)={0x8e, @uvalue, 0x6e}) 12.543672879s ago: executing program 3 (id=857): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd2d, 0x259fdbfb, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x3}]}, 0x1c}}, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x809, 0xeb1, 0x401, 0x80000000008000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\xff\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00'], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x1f40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x642, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) ustat$auto(0x801, 0x0) keyctl$auto(0xa, 0xfffffffffffffffd, 0x0, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 11.718582741s ago: executing program 1 (id=861): socket(0x11, 0x2, 0x3a) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r1) inotify_rm_watch$auto(0xffffffffffffffff, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) socket(0x1d, 0x3, 0x1) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') lseek$auto(r0, 0x7fffffffffffffff, 0x0) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) setsockopt$auto(r3, 0x3, 0x8, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x1) write$auto(r3, &(0x7f0000000700)='!dev_vhc&\x00', 0x9) 11.375646765s ago: executing program 3 (id=863): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = inotify_init1$auto(0x0) ioctl$auto(r1, 0x7, 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) mmap$auto(0x0, 0x400005, 0xdf, 0x12, 0x2, 0x8000000000008000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') getdents$auto(r2, 0x0, 0x400) ioctl$auto(r0, 0x1269, 0x8) 11.253275391s ago: executing program 1 (id=864): r0 = getpid() r1 = prctl$auto_PR_SCHED_CORE_GET(0x8, 0x0, r0, 0x9, 0x100) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x37, 0xfc, "bf4175b8ab238e4bb5c1dbe63c4d9dab1b351fbd211cefefe932ab02655511a338d3352b140ab970bd809456dca2a1e056f44c"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x96, 0xac, "0c813678b2e7ed83146e3cefab81fb2dbae09f2592e319e1ffa39f084ba7707c18183221a4211769c2c3ea647b9d408f5ce3fb0ae6c7bea270b2b70a31b7cacc9070a6bc80d5ff4df64c0a813f849b10e17a1f6dbded0af7f21671c87f863915099af00bce4272b3cc111af4094e59314fd1e2f30d71d54026b656f1a34b5f98aa70a472f943645f9e3b60f9b2f033a208db"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x60068094}, 0x8010) r3 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/available_events\x00', 0x509082, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x101, 0xffffffffffffffff, 0x8, 0xb7d, r4, 0x8) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x349000, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000002c0), r1) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x6}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x7}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008005}, 0x4) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000400)={0x658, r2, 0x106, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FREQ_KHZ={0x84, 0x124, 0x0, 0x1, [@nested={0x80, 0xb2, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic="288ca4c22875bea0cf8a3dce90bf3d6f2e554fe208fd6d4cd30279c5c83a9e1731797204df191665aa7ce5725d44d49781a0d2fd74436df0889c0b9ddea384555a51f45a9a045626f4284ac642a5711591626e45", @nested={0x4, 0xe3}, @nested={0x4, 0xda}, @nested={0x4, 0xa6}, @nested={0x4, 0xbd}, @typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, @NL80211_ATTR_IE={0x584, 0x2a, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0xc, 0x131, 0x0, 0x1, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x4}]}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@nested={0xc, 0x89, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfffffffe}]}, 0x658}, 0x1, 0x0, 0x0, 0x48888}, 0x4044000) r6 = socket(0x21, 0x3, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b00), r6) ioctl$auto(0xffffffffffffffff, 0x5, r4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001240)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001200)={&(0x7f0000000bc0)={0x604, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xdb, 0xbe, "f5a436be7eef4664b826f821cb4d9fc04f52abbdf02411dc9a9e58a3ad6f4ae83001ad68c22e6a6d4da99b9706b49ae93c7590815c567089a22868b805324d9bad6862624925140be985e70d8ad3ef062ba8eb349b7a0a3d66cbae5a4e97c3c5628f9df057b7885daf94253bb166d54f3050a24d2bb16cb6edd69cfe2b3f7a90f2ce1cb62d06858f84df3d7048ba6ac01fe2f3b88601bc22ff18970209be6dfd13ab24e128cbe083ec07a6711c8395a0ea61706003e031d434e700b2b31804392ebd070f2ccfa6289380f0c658ccf1670c89a63892dc68"}, @NL80211_ATTR_BSSID={0xdf, 0xf5, "a4bf9ae4214d27a844ee44a936ee7681e22d06255e51b49f4af678ed43dcaecae33be9b1ab0ef6cb5e37c1a2d2ca1c3bb67f8db13a3000648bcf348ca649539e373764c5e90800212e3d111e6e1ad41364398d2137f90717d53f267777eb9a7abac0efcec63e55a28c127ada408bd8d2d79d76a019b0b128500035d3e71eb649a376df0e1c2f3dd33dc9022fc1c114cba1731020ea4080e814777e00127cb04db6c2a2ad1a53c595abf395c37c5ef9b2fd3e75fbfd2b45b25d0e74f557ccf1bbacf124e1cbab6a3aed3bb617ff3078626387cfe1c09ea6c8ea5881"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MBSSID_CONFIG={0x28, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x2}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r8}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x3f5, 0x124, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0xe9, 0xe3, 0x0, 0x1, [@generic="abbdd8345a908bb08180f391f461d61b066194dad0ca97f6b50712141982e2174b85e69f73711196085f66e956a70dad3715c377119bbbaf921bd6d72fa16fb4b95bcc08ea03e864c531bad91f62e51963a087646f831589a311ce5302af5381c4289ca98365e7a0ff173d9baf1b053495be2b35632b0099ecdd5d5f756ac669f7f9dd6556c5aab31dcccd0047e5442ba182c6597e0f2529e95e7eb1f55e5147081564288a5ac333873a626674be0cc94d002ec317c3ac94a9d4f37e40542b87565e0175a53d56ad2c14d78d6288f6bd780f07dc577b40647c34e9dd8f", @typed={0x8, 0xa5, 0x0, 0x0, @fd=r4}]}, @nested={0x34, 0x5e, 0x0, 0x1, [@typed={0x20, 0xa5, 0x0, 0x0, @binary="7d89c0834d958ca2d373d9f71a168c0ffe502594a3cd1a3a38501bc4"}, @nested={0x4, 0x23}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xa8}]}, @typed={0x3f, 0x137, 0x0, 0x0, @binary="4d29af3abbfb4ea0f638d2ba5c78d3bda3aadb0bd66ad8ee79f93b1336233e25d76ec555933e3c2e7f0ed64903073bc87739058e0f88c56bfb3ddf"}, @generic="c139fc0ad384ae465a6244da251f83364ad49eff9909d5d0481a921576411d65e1a28d27fb1fb1a28cc95e28761502218fa70038309e639f7dae2af230522e7a8ef8bf42c850c3add5783f803eba0210463dd28fa67ac2c70c5cdfdd915d82ef1f61bc47214c6748d3f7fd8a72c4a08c66455fe4ecc28be1c70e6ee5c5088abba458291bc63d4c6a4ad1", @nested={0x124, 0x9a, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x92}, @nested={0x4, 0x9f}, @nested={0x4, 0x115}, @generic="60199400b032d2bccd1c412e1dd269a758cdac8a2610ca72aabdef24", @generic="3affdfdb87a834d52e37d5afac3a4be96595d14e5a9fc3ea5b920fddbdb0f779255709e70397975e01bb7c131b6cb89e12e7e2c7b35e3ba826481927a1aeed8b99f8e4c3167b5ee11c7c1e3d3d4301544760b7fec25377aeeeffed0775a3f7075b995b1481b8db054c475bf807280c7c652f9cd1bd9064e4eb6ec5efc7edf7c2cadd71846a375490092a81c730062e15b44802bb144e1e584a6059c3a038174ae23fc88414221bb6b6d07ce68ba4bdfac47952adbe4ea0dae50dd26d99d4c5522a5648991323827a597ca3bf8387d26094b36ad45a1e9d4f25881fc61b1079913581a13ee90f01ccc22dcd407f155425"]}, @nested={0x2a, 0x13d, 0x0, 0x1, [@nested={0x4, 0xd0}, @typed={0x4, 0xfb}, @nested={0x4, 0x45}, @generic="396f75b10122ba0b4b28dee61978219aba85fd298e25d2e588b1"]}, @generic="d7e4a23e3f871bde530253ef92799d6684d50c1be755a03650e2d1b17c797181621da9ba06fd1ceee8f38dfd8f3a0ef2443ab1eec37cf465c7854366cc8bd653d6c77476f7dc139b2ec00dc489d1c3c80ae57086fbab55b972abb7a9c350b8d0a17ea72a312a5040e8f16091f43e9cb6c7916abbb566519644af90bfaedc686ad03cb9d2ec7950b02123df621313968c5e8636262a70a5729aba38ebe0cfef1b348bb1f4471ebf29b56be703b2dd9c"]}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7a42f789}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x604}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000012c0), r6) sendmsg$auto_OVS_DP_CMD_GET(r9, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r10, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xffa48000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004011) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptyt4\x00', 0x240200, 0x0) r11 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000001400)='/proc/thread-self/smaps\x00', 0x1480, 0x0) r12 = socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000001440)=0x3) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x154, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8001}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "77098a0e2f883cca287e9921c903a920a8508dee01e28dc4"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x1}, @NL80211_ATTR_BEACON_TAIL={0x9a, 0xf, "7c524c1495be92c2d79ea8a5bbe4540b0b237e28765dbeb42852aa19d7624f0ec184c30bfcdc26162ad924c8104085361c8b9f767379bdfdda185eef4edc6d8bc2ce0298af7d996b84fe38158d9494011a895fa0c7d9f4711a4b47b21356f5df06e39d468de66c2614d534a05fdeebc3d0216fb94877b1da584062a7177ca7cadf3301ccddf8cfaef111d93c373779290fdde131cd0b"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x4c, 0x115, "da1383679b97c132cdd3871043de8b320111696867f5342321067323be0e2f950ee3055377ec8cfc2daa9c7813d3e046da56064cb338735a54c545b9aadf85210b6278f093a660fb"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "0f03dc7e6afbb7edff1eadb0bff52e8862f195f9d7e9561571c6"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}]}, 0x154}}, 0x4004480) madvise$auto(0x5, 0xb, 0xfffffff9) select$auto(0x77c4, &(0x7f00000016c0)={[0x3, 0x9, 0x4e, 0x0, 0x1, 0x10001, 0x8, 0x2, 0x7, 0x100000, 0x2, 0x7, 0x2, 0x5, 0x0, 0x100000000]}, &(0x7f0000001740)={[0x9, 0x0, 0x5, 0x2, 0xfff, 0x3, 0x3, 0x800, 0x8, 0x2, 0x6, 0x1, 0x32, 0x8, 0x524, 0x3]}, &(0x7f00000017c0)={[0x5, 0xffffffffffff3ece, 0x9, 0xd0f, 0x2, 0x4, 0x70, 0x0, 0x4, 0x0, 0xbef4, 0xe16, 0xffffffff, 0x34121659, 0x10001, 0x7fffffffffffffff]}, &(0x7f0000001840)={0x2, 0x155b}) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r12, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0x98, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x8b}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3ff}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x67, 0x9d, "36116f7bea22f605822185b47898efdb5130353171500691ef05a5052ef5634bb92c507327e1f4e4aa4ab2ee060b5d062cefb7a162da7f3dfbefb6797547aab8105064c8eaf122dd7bb98a04b3097bd118ee9803d3251f57b8050abcb7941bd9527a47"}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4001) close_range$auto(r11, r3, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a00), r12) ioctl$auto_USBDEVFS_GETDRIVER(r12, 0x41045508, &(0x7f0000001a40)={0x3, "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"}) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000001b80), r9) 11.009325918s ago: executing program 1 (id=865): mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10000, 0x41) rmdir$auto(&(0x7f0000000380)='./file0\x00') getdents$auto(r0, 0x0, 0x2) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/if_inet6\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x40, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') getdents$auto(r3, 0x0, 0x400) ioctl$auto(r1, 0x1269, 0x8) 10.272554924s ago: executing program 1 (id=868): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x3, 0x401, 0x7, 0x15, 0x2, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x151001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40084) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose3/address\x00', 0xc2502, 0x0) read$auto(r0, 0x0, 0x3ebc) write$auto(0x3, 0x0, 0xfdef) write$auto_console_fops_tty_io(r2, &(0x7f0000000080)="8b010000000000000024cf0215b133daa2f50be18eea4c3898835c1cc4e5ac57067d48cd4d7765a9ed", 0x29) signalfd$auto(0xffffffff, 0x0, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/conf/wlan0/igmpv3_unsolicited_report_interval\x00', 0x200, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mremap$auto(0x4000, 0x7ff, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000500), r0) 9.031238551s ago: executing program 3 (id=870): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x19, 0x1, 0x0, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) getsockopt$auto(0x100000006, 0x1, 0x28, 0xfffffffffffffffc, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cpu.max.burst\x00', 0x80302, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x1, 0x84) semctl$auto(0x8, 0x806, 0x13, 0x46) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x10000) (async) sendfile$auto(r0, r0, 0x0, 0x3) (async) fcntl$auto(0xffffffffffffffff, 0x4, 0xa553) 8.376393774s ago: executing program 1 (id=871): mmap$auto(0x0, 0x400008, 0xdc, 0x2000000009b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x4) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000000)=0x8) (rerun: 32) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) (rerun: 32) sendmsg$auto_NETDEV_CMD_NAPI_GET(r2, 0x0, 0x240080d0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) write$auto(r3, 0x0, 0xeffd) read$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000100)=""/74, 0x4a) (async) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy13/netdev:wlan0/user_power_level\x00', 0x8080, 0x0) (async) write$auto(0x3, 0x0, 0x1) socket(0x11, 0x3, 0x20000006) (async) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r4, 0x0, 0x400000, 0x9) (async) r5 = socket(0xa, 0x3, 0x3c) mmap$auto(0x4, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x800, 0x0) (async, rerun: 64) fcntl$auto_F_GET_SEALS(0xffffffffffffffff, 0x40a, 0x0) (async, rerun: 32) r7 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (rerun: 32) ioctl$auto_SIOCGIFHWADDR(r7, 0x8927, 0x0) (async, rerun: 64) ioctl$auto(r6, 0x5609, r5) (rerun: 64) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/lockdep\x00', 0x10b402, 0x0) 8.022587672s ago: executing program 3 (id=872): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) lsm_get_self_attr$auto(0xa3e, &(0x7f0000000000)={0x200, 0x3, 0x5, 0x8e, "4e4fca67a20229fb016462459c4418769fd02e2a677cb14272ed2abf5df6dc8851eb7546e9a453d2a0eacd56bf72e91d1ae618eb54e10acfacc7961620569c221cc0d2901d2d491051de2731e800dda1fbd4a696d683cc461e333e87f4c28d00ee5195912889752934aad2c7555a6f4a0c30344b23ae6c008cedfef52ce75fe49d99e603181adc4f709854b35f4d"}, &(0x7f00000000c0)=0x4006, 0x9) open(&(0x7f0000000100)='./file0\x00', 0x10040, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(r0, &(0x7f00000001c0)=@rc={0x1f, @none, 0x5}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x20000000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D1c\x00', 0x1091c0, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto(0x9, 0xc1b8, 0x4, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r1 = socket(0x29, 0x5, 0x0) syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) dup2$auto(r1, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r1, 0x0, 0x40) pwrite64$auto(0xffffffffffffffff, 0x0, 0x1, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe3102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0xfffffffc, 0x0, 0x803, 0x2) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) 6.418000389s ago: executing program 0 (id=876): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x40, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') getdents64$auto(r1, 0x0, 0x29) r2 = socket(0x10, 0x2, 0x14) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c0) ioctl$auto(r0, 0x1269, 0x8) 5.647602426s ago: executing program 0 (id=878): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x40, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') getdents64$auto(r1, 0x0, 0x29) ioctl$auto(r0, 0x1269, 0x8) (fail_nth: 6) 4.969818786s ago: executing program 0 (id=879): mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10000, 0x41) rmdir$auto(&(0x7f0000000380)='./file0\x00') getdents$auto(r0, 0x0, 0x2) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/if_inet6\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x40, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) getdents64$auto(0xffffffffffffffff, 0x0, 0x29) getdents$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto(r1, 0x1269, 0x8) 4.965422793s ago: executing program 3 (id=880): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x3, 0x401, 0x7, 0x15, 0x2, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x151001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40084) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose3/address\x00', 0xc2502, 0x0) read$auto(r0, 0x0, 0x3ebc) write$auto(0x3, 0x0, 0xfdef) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000080)="8b010000000000000024cf0215b133daa2f50be18eea4c3898835c1cc4e5ac57067d48cd4d7765a9ed", 0x29) signalfd$auto(0xffffffff, 0x0, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/conf/wlan0/igmpv3_unsolicited_report_interval\x00', 0x200, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mremap$auto(0x4000, 0x7ff, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000500), r0) 4.828289799s ago: executing program 2 (id=881): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x20003, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0xfffffffffffffffe, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x1b16, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16, @ANYBLOB="010029bd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x10, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6c200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r2, 0x0, 0x0, 0x2000000000040007) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x103300, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4c", 0x46) 4.318655008s ago: executing program 2 (id=882): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000001280)=""/143, 0x8f) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'rose0\x00'}) msgrcv$auto(0xff, &(0x7f00000000c0)={0x6, 0xd}, 0x2400000000, 0x6, 0x6bc2cc7d) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) flistxattr$auto(0x1, 0x0, 0x9) bpf$auto(0x0, &(0x7f0000000240)=@bpf_attr_5={@target_fd, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0x6}, 0x92) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x1, &(0x7f0000000140)=@enable_stats={0x4}, 0x5) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r3 = socket(0x11, 0x3, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card1/pcm0p/xrun_debug\x00', 0x400, 0x0) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0c", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') getdents64$auto(r4, 0x0, 0xb) socketpair$auto(0xffff, 0x3, 0xf1, &(0x7f0000000200)=0x3) getdents$auto(r4, 0x0, 0x400) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/midiC2D3\x00', 0xc0001, 0x0) ioctl$auto_VHOST_SET_VRING_BUSYLOOP_TIMEOUT2(r5, 0x4008af23, &(0x7f0000000080)={0x0, 0x4}) r6 = socket(0x2, 0x1, 0x106) setsockopt$auto(r6, 0x6, 0xd, &(0x7f0000000040)='nsKcg>', 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$auto(r0, 0x1269, 0x8) 4.136828175s ago: executing program 0 (id=883): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) setreuid$auto(0x15, 0x5) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x3, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x7f, 0x6, 0x8000, 0x0, 0xa, 0x0, 0x2}) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000028, 0xe863, 0x2}, 0x0, 0x208, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x0) socket(0x2, 0xa, 0x106) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr13/ifalias\x00', 0xc0002, 0x0) setresuid$auto(0xd, 0x0, 0x221) prlimit64$auto(0x1, 0x3, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0x29, 0x3, 0x0) read$auto(r0, &(0x7f0000000240)='/\x00', 0x100000001) 3.738790821s ago: executing program 0 (id=884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgid(0x0) kcmp$auto(r5, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) getsockopt$auto(0x6, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyt7\x00', 0x601, 0x0) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x2f8, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x46, 0x148, "dc266fcebd92e437b03d6f7bf9019872a79c693a679ed22accb537c0e7b86a6641f38fba40c4623d6f5d31e08fa592572d8f8631d0b241452f8273acea88c518c6d7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x586}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9b, 0xac, "d5fb21b57f2aaef65f36010e3597d5a0d707fcc310c0f13f1ebf22f33ea9b602785d17a91c243cad82c39a98c0b2c14d849b4d627d5b63d863515931d690f629ad36f02ec82d5b866f3516187c3c764608ab53564ab8391b5b6ef78588cd1757d4795d34a59aa5569eb281557d56c9bee8d12c5c78e163ae057bf565ac20223d3123715a0c847638ac41ab7833bd8ce06fef549ad461d6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1cc, 0x6e, 0x0, 0x1, [@nested={0x93, 0x13, 0x0, 0x1, [@typed={0xc, 0x6a, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x6f}, @nested={0x4, 0x2b}, @generic="c25faa73bf97721b2e7fe95143b1df4243d7a1b6348b90f3b218e0a0770aa4e1b489e623f5ff856b54ee388a6b8dadd4eb04a8", @generic="64cdf396473de29b75a83c23a8ce87bf44d70bf9971e4409565bc21af82f56b6d475070ce56758b3532cdf5ec33066243ecb9f67a02f473e4c11b433fa9117a2982c99e2e1e725d3"]}, @typed={0x8, 0xb7, 0x0, 0x0, @str='nbd\x00'}, @typed={0xcc, 0xa4, 0x0, 0x0, @binary="c56a84c256ad4fd8ba75e95ecd35c9f5fd4dfa5d22328c676e5d677c8e2f0307160f3f6ba1bbeca9a75895ddc01903ef724fc8412a202abef021bac32e533a125720982de63da629fd62bf8d1268239b8c7d71beb4760e90075161a6202c360b16923d61a8d6e86e009e2762d84ca45b8da7206a0d3914260eafefb5fd1e3b50bd1b74b40becc6b90f4ef7df03c3b13ff8508fcca478438aa5a837df4b49fad47316276354ddce07bcba026dcd052555ad803bad6e77e3a82b0985affd52b6e1dff409d6ae74ca04"}, @typed={0x8, 0x76, 0x0, 0x0, @pid=r4}, @generic="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d"]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x7}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000009400)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 2.771717054s ago: executing program 0 (id=885): r0 = seccomp$auto(0x2, 0x10, &(0x7f0000000040)="c868ac3c7d6e1e08bbc96ff1dc2f99") unshare$auto(0x40000080) mmap$auto(0x80000001, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000080)={r1, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cpuset\x00', 0x181100, 0x0) (async) lseek$auto(0x3, 0x20000, 0x1) (async) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002) (async) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)) (async) mmap$auto(0x0, 0x0, 0x2, 0x100000eb1, 0x40000000000a1, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000007e8336c087535990ba86defcaee6e8f555f894088ea61477de49e30221d961203a5cb93e94abda6127f6ed21e4c1f3ed4fc1a1ede874cc71ebc0fce6f27c7dba45ed7f4c6cba4a3f001419447dc3ac4a78cfe4a9e35af2672c6e4e439b83880f0dea85cb74636ad8d160f4ecdb9a40b97282f2f0a272", @ANYRES16=r6, @ANYBLOB="010325bd7000ffdbdf250a00000008000a009a000000090002007664706100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000435bd7000ffdbdf250a000000060001007602000008000200272a240006000100407d000e0002002f6465762f63657334000000060001000300"/70], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x40) (async) removexattr$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r8, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) (async) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) 2.664651143s ago: executing program 2 (id=886): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal\x00', 0x10b142, 0x0) r0 = socket(0x2b, 0x1, 0x1) r1 = socketpair$auto(0x3, 0x5, 0x7, 0x0) r2 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@_si_pad}, 0x8, &(0x7f00000000c0)={{0x400, 0x3}, {0x6, 0x4}, 0xff, 0xeb473aa, 0x2, 0x4, 0x10001, 0x6, 0x8000, 0x10001, 0x5, 0x1000, 0x4b, 0x5, 0x9, 0x2}) fcntl$auto_F_SETFL(r0, 0x4, r2) write$auto(0x3, 0x0, 0xfdef) 1.914492521s ago: executing program 2 (id=887): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0xa0480, 0x0) read$auto_vga_arb_device_fops_vgaarb(r0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000080)={0x8000000000000000, &(0x7f0000000040), 0x2}) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 1.321000229s ago: executing program 2 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x936355e497c8b7e3, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (fail_nth: 13) 1.063767604s ago: executing program 3 (id=889): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x40, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') getdents64$auto(r1, 0x0, 0x29) ioctl$auto(r0, 0x1269, 0x8) (fail_nth: 7) 0s ago: executing program 2 (id=890): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = inotify_init1$auto(0x0) ioctl$auto(r1, 0x7, 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) mmap$auto(0x0, 0x400005, 0xdf, 0x12, 0x2, 0x8000000000008000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) getdents64$auto(0xffffffffffffffff, 0x0, 0x29) getdents$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto(r0, 0x1269, 0x8) kernel console output (not intermixed with test programs): hould_fail_ex+0x50a/0x650 [ 112.582810][ T6170] ? fs_reclaim_acquire+0xae/0x150 [ 112.582863][ T6170] should_failslab+0xc2/0x120 [ 112.582923][ T6170] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 112.582962][ T6170] ? find_held_lock+0x2d/0x110 [ 112.583012][ T6170] ? __d_alloc+0x35/0x8c0 [ 112.583055][ T6170] __d_alloc+0x35/0x8c0 [ 112.583105][ T6170] d_alloc_pseudo+0x1c/0xc0 [ 112.583154][ T6170] alloc_file_pseudo+0xd2/0x200 [ 112.583199][ T6170] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 112.583248][ T6170] ? alloc_fd+0x41f/0x760 [ 112.583286][ T6170] sock_alloc_file+0x50/0x1d0 [ 112.583323][ T6170] __sys_socket+0x1c2/0x260 [ 112.583368][ T6170] ? __pfx___sys_socket+0x10/0x10 [ 112.583413][ T6170] ? rcu_is_watching+0x12/0xc0 [ 112.583471][ T6170] __x64_sys_socket+0x72/0xb0 [ 112.583513][ T6170] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.583560][ T6170] do_syscall_64+0xcd/0x250 [ 112.583612][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.583659][ T6170] RIP: 0033:0x7f5a9438cda9 [ 112.583683][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.583713][ T6170] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 112.583740][ T6170] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 112.583760][ T6170] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 112.583777][ T6170] RBP: 00007f5a9440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.583795][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.583812][ T6170] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 112.583848][ T6170] [ 112.984365][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.154567][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.310104][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.464592][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.972918][ T6206] Trying to write to read-only block-device sda1 [ 120.207437][ T6280] Process accounting resumed [ 120.250556][ T6280] bonding: no command found in bonding_masters - use +ifname or -ifname [ 121.369103][ T5848] Bluetooth: hci3: unexpected event 0x03 length: 17 > 11 [ 122.769838][ T6313] usbip-vudc usbip-vudc.0: gadget not bound [ 123.719275][ T6336] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 125.731781][ T6356] ======================================================= [ 125.731781][ T6356] WARNING: The mand mount option has been deprecated and [ 125.731781][ T6356] and is ignored by this kernel. Remove the mand [ 125.731781][ T6356] option from the mount to silence this warning. [ 125.731781][ T6356] ======================================================= [ 126.889695][ T6353] syz.3.93 (6353) used greatest stack depth: 20608 bytes left [ 129.525520][ T6392] FAULT_INJECTION: forcing a failure. [ 129.525520][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 129.621412][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.3.102 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 129.621452][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 129.621469][ T6392] Call Trace: [ 129.621477][ T6392] [ 129.621488][ T6392] dump_stack_lvl+0x16c/0x1f0 [ 129.621539][ T6392] should_fail_ex+0x50a/0x650 [ 129.621575][ T6392] ? fs_reclaim_acquire+0xae/0x150 [ 129.621635][ T6392] should_failslab+0xc2/0x120 [ 129.621673][ T6392] __kmalloc_noprof+0xce/0x4f0 [ 129.621710][ T6392] ? snd_pcm_plugin_build+0x64/0x650 [ 129.621763][ T6392] snd_pcm_plugin_build+0x64/0x650 [ 129.621817][ T6392] snd_pcm_plugin_build_mulaw+0x281/0x7a0 [ 129.621846][ T6392] ? __pfx_mulaw_encode+0x10/0x10 [ 129.621895][ T6392] ? __pfx_snd_pcm_plugin_build_mulaw+0x10/0x10 [ 129.621953][ T6392] ? snd_pcm_hw_params+0xce/0x1b20 [ 129.621988][ T6392] snd_pcm_plug_format_plugins+0xbeb/0x1440 [ 129.622047][ T6392] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 129.622104][ T6392] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 129.622170][ T6392] snd_pcm_oss_change_params_locked+0x2eaf/0x3a50 [ 129.622228][ T6392] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 129.622272][ T6392] ? __pfx___mutex_lock+0x10/0x10 [ 129.622338][ T6392] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 129.622381][ T6392] snd_pcm_oss_sync+0x1d7/0x7f0 [ 129.622426][ T6392] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 129.622467][ T6392] snd_pcm_oss_release+0x28b/0x310 [ 129.622529][ T6392] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 129.622572][ T6392] __fput+0x3ff/0xb70 [ 129.622628][ T6392] task_work_run+0x14e/0x250 [ 129.622664][ T6392] ? __pfx_task_work_run+0x10/0x10 [ 129.622701][ T6392] ? __pfx___do_sys_close_range+0x10/0x10 [ 129.622745][ T6392] syscall_exit_to_user_mode+0x27b/0x2a0 [ 129.622794][ T6392] do_syscall_64+0xda/0x250 [ 129.622844][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.622887][ T6392] RIP: 0033:0x7f341fd8cda9 [ 129.622910][ T6392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.622939][ T6392] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 129.622975][ T6392] RAX: 0000000000000000 RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 129.622998][ T6392] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 129.623038][ T6392] RBP: 00007f341fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.623055][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.623077][ T6392] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 129.623136][ T6392] [ 130.264072][ T6392] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.995401][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 131.097906][ T6396] HfR: entered promiscuous mode [ 131.945104][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'. [ 132.061803][ T6407] hsr_slave_0: left promiscuous mode [ 132.305059][ T6407] hsr_slave_1: left promiscuous mode [ 134.188763][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'. [ 134.227598][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.257492][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.485761][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.513579][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.274380][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.318761][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.333489][ T6529] usbip-vudc usbip-vudc.0: gadget not bound [ 138.760310][ T6525] Invalid ELF header magic: != ELF [ 139.933875][ T6540] 0x0000000028d8-0x0000000028d9 : "" [ 139.969575][ T6540] ftl_cs: FTL header corrupt! [ 147.435411][ T6638] 0x0000000029de-0x0000000029df : "" [ 147.483368][ T6638] ftl_cs: FTL header corrupt! [ 148.031243][ T6646] 0x0000000029ef-0x0000000029f0 : "" [ 148.069124][ T6646] ftl_cs: FTL header corrupt! [ 154.280502][ T6739] FAULT_INJECTION: forcing a failure. [ 154.280502][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 154.520829][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: syz.0.179 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 154.520868][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.520887][ T6739] Call Trace: [ 154.520896][ T6739] [ 154.520908][ T6739] dump_stack_lvl+0x16c/0x1f0 [ 154.520964][ T6739] should_fail_ex+0x50a/0x650 [ 154.521000][ T6739] ? fs_reclaim_acquire+0xae/0x150 [ 154.521053][ T6739] should_failslab+0xc2/0x120 [ 154.521091][ T6739] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 154.521126][ T6739] ? __pfx___lock_acquire+0x10/0x10 [ 154.521162][ T6739] ? __d_alloc+0x35/0x8c0 [ 154.521207][ T6739] __d_alloc+0x35/0x8c0 [ 154.521258][ T6739] d_alloc+0x4a/0x1e0 [ 154.521298][ T6739] d_alloc_parallel+0xe7/0x12b0 [ 154.521347][ T6739] ? __pfx_lock_release+0x10/0x10 [ 154.521384][ T6739] ? trace_lock_acquire+0x14e/0x1f0 [ 154.521424][ T6739] ? __pfx_d_alloc_parallel+0x10/0x10 [ 154.521475][ T6739] ? lockdep_init_map_type+0x16d/0x7d0 [ 154.521518][ T6739] ? lockdep_init_map_type+0x16d/0x7d0 [ 154.521568][ T6739] proc_fill_cache+0x2eb/0x470 [ 154.521598][ T6739] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 154.521631][ T6739] ? __pfx_proc_fill_cache+0x10/0x10 [ 154.521675][ T6739] ? d_parent_ino+0x177/0x440 [ 154.521718][ T6739] ? __pfx_lock_release+0x10/0x10 [ 154.521776][ T6739] proc_pident_readdir+0x1b6/0x560 [ 154.521817][ T6739] iterate_dir+0x293/0xab0 [ 154.521874][ T6739] __x64_sys_getdents+0x148/0x2c0 [ 154.521920][ T6739] ? __x64_sys_futex+0x1ea/0x4c0 [ 154.521953][ T6739] ? __pfx___x64_sys_getdents+0x10/0x10 [ 154.522002][ T6739] ? xfd_validate_state+0x5d/0x180 [ 154.522041][ T6739] ? __pfx_filldir+0x10/0x10 [ 154.522104][ T6739] do_syscall_64+0xcd/0x250 [ 154.522157][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.522202][ T6739] RIP: 0033:0x7f4a4c58cda9 [ 154.522234][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.522263][ T6739] RSP: 002b:00007f4a4d3f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 154.522291][ T6739] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58cda9 [ 154.522310][ T6739] RDX: 00000000000007ff RSI: 0000000000000000 RDI: 0000000000000011 [ 154.522327][ T6739] RBP: 00007f4a4c60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.522343][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.522359][ T6739] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 154.522396][ T6739] [ 155.138861][ T6755] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 157.255537][ T6781] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 157.466948][ T6779] zswap: compressor not available [ 158.095220][ T6787] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 158.293350][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 158.881790][ T6796] FAULT_INJECTION: forcing a failure. [ 158.881790][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.994315][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.2.197 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 158.994355][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.994373][ T6796] Call Trace: [ 158.994381][ T6796] [ 158.994393][ T6796] dump_stack_lvl+0x16c/0x1f0 [ 158.994446][ T6796] should_fail_ex+0x50a/0x650 [ 158.994489][ T6796] _copy_to_user+0x32/0xd0 [ 158.994536][ T6796] simple_read_from_buffer+0xd0/0x160 [ 158.994589][ T6796] proc_fail_nth_read+0x198/0x270 [ 158.994635][ T6796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.994683][ T6796] ? rw_verify_area+0xcf/0x680 [ 158.994729][ T6796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.994775][ T6796] vfs_read+0x1df/0xbf0 [ 158.994806][ T6796] ? __fget_files+0x1fc/0x3a0 [ 158.994838][ T6796] ? __pfx___mutex_lock+0x10/0x10 [ 158.994896][ T6796] ? __pfx_vfs_read+0x10/0x10 [ 158.994938][ T6796] ? __fget_files+0x206/0x3a0 [ 158.994982][ T6796] ksys_read+0x12b/0x250 [ 158.995012][ T6796] ? __pfx_ksys_read+0x10/0x10 [ 158.995057][ T6796] do_syscall_64+0xcd/0x250 [ 158.995111][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.995156][ T6796] RIP: 0033:0x7f8718b8b7bc [ 158.995179][ T6796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.995207][ T6796] RSP: 002b:00007f871990b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.995234][ T6796] RAX: ffffffffffffffda RBX: 00007f8718da5fa0 RCX: 00007f8718b8b7bc [ 158.995252][ T6796] RDX: 000000000000000f RSI: 00007f871990b0a0 RDI: 0000000000000004 [ 158.995269][ T6796] RBP: 00007f871990b090 R08: 0000000000000000 R09: 0000000000000000 [ 158.995286][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.995303][ T6796] R13: 0000000000000000 R14: 00007f8718da5fa0 R15: 00007ffc1ece6bc8 [ 158.995340][ T6796] [ 160.594990][ T6819] FAULT_INJECTION: forcing a failure. [ 160.594990][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 160.678304][ T6819] CPU: 0 UID: 0 PID: 6819 Comm: syz.3.204 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 160.678343][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.678360][ T6819] Call Trace: [ 160.678369][ T6819] [ 160.678380][ T6819] dump_stack_lvl+0x16c/0x1f0 [ 160.678432][ T6819] should_fail_ex+0x50a/0x650 [ 160.678469][ T6819] ? fs_reclaim_acquire+0xae/0x150 [ 160.678521][ T6819] ? alloc_pipe_info+0x10e/0x590 [ 160.678556][ T6819] should_failslab+0xc2/0x120 [ 160.678595][ T6819] __kmalloc_cache_noprof+0x68/0x420 [ 160.678625][ T6819] ? trace_lock_acquire+0x14e/0x1f0 [ 160.678662][ T6819] alloc_pipe_info+0x10e/0x590 [ 160.678702][ T6819] splice_direct_to_actor+0x793/0xa40 [ 160.678762][ T6819] ? get_pid_task+0xfc/0x250 [ 160.678791][ T6819] ? __pfx_direct_splice_actor+0x10/0x10 [ 160.678845][ T6819] ? __pfx_aa_file_perm+0x10/0x10 [ 160.678883][ T6819] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 160.678937][ T6819] ? __fget_files+0x1fc/0x3a0 [ 160.678975][ T6819] do_splice_direct+0x178/0x250 [ 160.679026][ T6819] ? __pfx_do_splice_direct+0x10/0x10 [ 160.679077][ T6819] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 160.679133][ T6819] ? rw_verify_area+0xcf/0x680 [ 160.679186][ T6819] do_sendfile+0xafb/0xe40 [ 160.679239][ T6819] ? __pfx_do_sendfile+0x10/0x10 [ 160.679292][ T6819] ? __fget_files+0x206/0x3a0 [ 160.679332][ T6819] __x64_sys_sendfile64+0x1da/0x220 [ 160.679370][ T6819] ? ksys_write+0x1ba/0x250 [ 160.679399][ T6819] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 160.679451][ T6819] do_syscall_64+0xcd/0x250 [ 160.679502][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.679547][ T6819] RIP: 0033:0x7f341fd8cda9 [ 160.679570][ T6819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.679599][ T6819] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 160.679627][ T6819] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 160.679646][ T6819] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 160.679663][ T6819] RBP: 00007f3420b88090 R08: 0000000000000000 R09: 0000000000000000 [ 160.679680][ T6819] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 160.679696][ T6819] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 160.679732][ T6819] [ 161.245127][ T6822] usbip-vudc usbip-vudc.0: gadget not bound [ 162.809155][ T6849] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.914389][ T6849] CIFS mount error: No usable UNC path provided in device string! [ 162.914389][ T6849] [ 162.985537][ T6849] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 163.225428][ T6852] netlink: 342 bytes leftover after parsing attributes in process `syz.2.212'. [ 163.324656][ T6854] usbip-vudc usbip-vudc.0: gadget not bound [ 163.598042][ T6859] dyndbg: expected <4096 bytes into control [ 163.634699][ T6848] ima: policy update failed [ 163.664402][ T29] audit: type=1802 audit(6033290173.490:2): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.212" res=0 errno=0 [ 164.454971][ T6871] FAULT_INJECTION: forcing a failure. [ 164.454971][ T6871] name failslab, interval 1, probability 0, space 0, times 0 [ 164.544343][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz.0.217 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 164.544391][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 164.544409][ T6871] Call Trace: [ 164.544418][ T6871] [ 164.544429][ T6871] dump_stack_lvl+0x16c/0x1f0 [ 164.544485][ T6871] should_fail_ex+0x50a/0x650 [ 164.544520][ T6871] ? fs_reclaim_acquire+0xae/0x150 [ 164.544572][ T6871] should_failslab+0xc2/0x120 [ 164.544612][ T6871] __kmalloc_noprof+0xce/0x4f0 [ 164.544649][ T6871] ? alloc_pipe_info+0x1ec/0x590 [ 164.544694][ T6871] alloc_pipe_info+0x1ec/0x590 [ 164.544737][ T6871] splice_direct_to_actor+0x793/0xa40 [ 164.544792][ T6871] ? get_pid_task+0xfc/0x250 [ 164.544823][ T6871] ? __pfx_direct_splice_actor+0x10/0x10 [ 164.544879][ T6871] ? __pfx_aa_file_perm+0x10/0x10 [ 164.544920][ T6871] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 164.544975][ T6871] ? __fget_files+0x1fc/0x3a0 [ 164.545015][ T6871] do_splice_direct+0x178/0x250 [ 164.545066][ T6871] ? __pfx_do_splice_direct+0x10/0x10 [ 164.545120][ T6871] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 164.545178][ T6871] ? rw_verify_area+0xcf/0x680 [ 164.545228][ T6871] do_sendfile+0xafb/0xe40 [ 164.545289][ T6871] ? __pfx_do_sendfile+0x10/0x10 [ 164.545342][ T6871] ? __fget_files+0x206/0x3a0 [ 164.545391][ T6871] __x64_sys_sendfile64+0x1da/0x220 [ 164.545431][ T6871] ? ksys_write+0x1ba/0x250 [ 164.545463][ T6871] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 164.545516][ T6871] do_syscall_64+0xcd/0x250 [ 164.545572][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.545618][ T6871] RIP: 0033:0x7f4a4c58cda9 [ 164.545641][ T6871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.545673][ T6871] RSP: 002b:00007f4a4d3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 164.545702][ T6871] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58cda9 [ 164.545721][ T6871] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 164.545738][ T6871] RBP: 00007f4a4d3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 164.545760][ T6871] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 164.545776][ T6871] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 164.545813][ T6871] [ 164.938045][ T29] audit: type=1807 audit(6033290174.780:3): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 164.962227][ T6869] ima: policy update failed [ 164.982195][ T29] audit: type=1802 audit(6033290174.800:4): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.220" res=0 errno=0 [ 165.075110][ T29] audit: type=1802 audit(6033290174.880:5): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.220" res=0 errno=0 [ 165.956438][ T6889] usbip-vudc usbip-vudc.0: gadget not bound [ 166.418105][ T6895] [U] [ 166.421229][ T6895] [U] [ 166.424016][ T6895] [U] [ 166.426779][ T6895] [U] [ 166.472511][ T6895] [U] [ 166.475409][ T6895] [U] [ 166.478171][ T6895] [U] [ 166.480928][ T6895] [U] [ 166.610865][ T6895] [U] [ 166.613763][ T6895] [U] [ 166.616529][ T6895] [U] [ 166.619292][ T6895] [U] [ 166.669290][ T6895] [U] [ 166.672107][ T6895] [U] [ 166.674869][ T6895] [U] [ 166.677631][ T6895] [U] [ 166.742042][ T6895] [U] [ 166.744934][ T6895] [U] [ 166.747701][ T6895] [U] [ 166.750462][ T6895] [U] [ 166.854716][ T6895] [U] [ 166.857535][ T6895] [U] [ 166.860337][ T6895] [U] [ 166.863092][ T6895] [U] [ 167.141948][ T6895] [U] [ 167.144759][ T6895] [U] [ 167.147522][ T6895] [U] [ 167.150283][ T6895] [U] [ 167.290458][ T6895] [U] [ 167.293274][ T6895] [U] [ 167.296036][ T6895] [U] [ 167.298796][ T6895] [U] [ 167.344404][ T6895] [U] [ 167.347219][ T6895] [U] [ 167.349976][ T6895] [U] [ 167.352728][ T6895] [U] [ 167.461559][ T6895] [U] [ 167.464366][ T6895] [U] [ 167.467130][ T6895] [U] [ 167.469898][ T6895] [U] [ 167.537122][ T6895] [U] [ 167.546237][ T6895] [U] aò'P¾±h…“e¡ŒLYôªŠ#¤ ZÕÜf­¦ Óî‚”L‚…;qEñå>û\‚¼¶WU ©:Ð4IkM¹:;ë§dãD>é r}ŽËnˆZõÀ àÕ ý™ð [ 167.678368][ T6895] [U] é²µ‡ŒfQMzÊËLy ô$g… â—¤ŸŽÎ*öÙ,±z…Bu—Í¢ç¾xk²(.ׇظۜ½Ïul„f掫ÏÍQy·ø+û]Ÿ#Ùö¢ [ 167.729533][ T6895] [U] Æÿ ±\Ú"nL, p½2É^€§Ð3-È°’÷3?CÞI9E®ˆuð¹"Ò©ÚD5Ç… [ 167.774729][ T6895] [U] œN\a4ïK‹ý€—¥9ª3u pج?Þ–è‰܇ÿ’Ûa,¼fŽÞ˜ŸÎûn*+ÑH¢ÿ£F{¸‚±[µÀ…=Qäxÿ [ 167.783461][ T6895] [U] œJó;\f©l»ù­ºÊîÍ…‹†~°'– ;‹°¿óè¿#¾£ì¡*[Kçý]¤\‡rRuCüú®™{R;>zE¾Ɖ‚²‰MxžPÜ0¡¹æ»k/vÄÿ~vh‘‘ÿ£å¿ ƒº<"Äb¢H¿µÅñ5åà+|ÆqÞO¿n¯oÂC]!d‰;¡°6ßëÜŽ T [ 167.807684][ T6895] [U] x›}i8´-0Œ¬5VuIµä1¡¨$LFµÜÙH•HÛ€'ƒßáÔ¬íñÛ\j> öúlÄ•‹|Iî±Q [ 167.817296][ T6895] [U] ”¿Á@ºã4Io’}(¡ôè„Q‹ é)Ë¥cÉ}ÜB/ö0ŽžRc¡IV.Ë_lß./S'ïX;hšÿ`ïÎåLÖæâšG÷|ù}"Å¢v MN`å(Ÿ<ûrvZÔŸiòêÒ$ÕóÞ9Ñ‹ ÁݸƦÇqd?s*סÀ2…Íb€rµªðh¤mÌÑ"W€DVïÈåô Fì1`5ŒÍ29N]ÊTñMgÏÈô˜°{˜PÃÔ–û(w有wß:šQøŠ\Ù•ê˜ú´'#ÞÆ.Â$ »Ið{ÎÕ§‘Z½?€ âÒ«Ú;ª [ 167.841678][ T6895] [U] ËÍ5Ó]úQcœ¸øÔÂ(ÖÏ6Ò2Å£G³ûqç­ŸmDNV÷3º •ýJ‹^FRèâ北V\ã Gº• Éêã½*…Lò¿X ò›B³ŽoQ)›’ä4#!ÍG•×Ò ¢uSÒÊÁÁÐ*™î¹3A¬ŠñøÙ!3²Äãz`â´kr: [ 167.856696][ T6895] [U] ¯o°Ùûc’åe*H¼- [ 167.861199][ T6895] [U] FÆ@¯ª;ÉÁ‡'–JP- [ 167.865534][ T6895] [U] [ 167.868275][ T6895] [U] [ 167.871006][ T6895] [U] [ 167.881775][ T6895] [U] [ 167.884645][ T6895] [U] [ 167.887409][ T6895] [U] [ 167.890165][ T6895] [U] [ 167.898941][ T6895] [U] [ 167.901738][ T6895] [U] [ 167.904497][ T6895] [U] [ 167.907259][ T6895] [U] [ 167.910473][ T6895] [U] [ 167.913229][ T6895] [U] [ 167.915960][ T6895] [U] [ 167.918688][ T6895] [U] [ 168.392604][ T6920] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 168.985393][ T6921] 0x10000000000002d-0x190000000000002d : "" [ 168.991370][ T6921] mtd: partition "" is out of reach -- disabled [ 169.056872][ T6921] ftl_cs: FTL header not found. [ 170.034444][ T6938] usbip-vudc usbip-vudc.0: gadget not bound [ 172.314416][ T6956] 0x10000000000002d-0x190000000000002d : "" [ 172.320479][ T6956] mtd: partition "" is out of reach -- disabled [ 172.400726][ T6956] ftl_cs: FTL header not found. [ 175.515133][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 176.296171][ T6904] Process accounting resumed [ 176.301038][ T6904] [U] [ 176.660052][ T7037] FAULT_INJECTION: forcing a failure. [ 176.660052][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 176.674438][ T7037] CPU: 0 UID: 0 PID: 7037 Comm: syz.0.255 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 176.674477][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 176.674496][ T7037] Call Trace: [ 176.674505][ T7037] [ 176.674517][ T7037] dump_stack_lvl+0x16c/0x1f0 [ 176.674571][ T7037] should_fail_ex+0x50a/0x650 [ 176.674619][ T7037] ? fs_reclaim_acquire+0xae/0x150 [ 176.674677][ T7037] should_failslab+0xc2/0x120 [ 176.674718][ T7037] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 176.674758][ T7037] ? __kernfs_new_node+0xd3/0x890 [ 176.674817][ T7037] __kernfs_new_node+0xd3/0x890 [ 176.674871][ T7037] ? __pfx___kernfs_new_node+0x10/0x10 [ 176.674923][ T7037] ? __pfx_lock_release+0x10/0x10 [ 176.674963][ T7037] ? kernfs_add_one+0x39d/0x520 [ 176.675012][ T7037] ? up_write+0x1b2/0x520 [ 176.675063][ T7037] kernfs_new_node+0x186/0x240 [ 176.675105][ T7037] __kernfs_create_file+0x53/0x350 [ 176.675152][ T7037] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 176.675209][ T7037] internal_create_group+0x56c/0xf10 [ 176.675270][ T7037] ? __pfx_internal_create_group+0x10/0x10 [ 176.675327][ T7037] ? kernfs_create_link+0x1bd/0x240 [ 176.675398][ T7037] internal_create_groups+0x9d/0x150 [ 176.675454][ T7037] device_add+0x733/0x1a70 [ 176.675502][ T7037] ? __pfx_device_add+0x10/0x10 [ 176.675561][ T7037] add_disk_fwnode+0x468/0x1320 [ 176.675630][ T7037] zram_add+0x486/0x6b0 [ 176.675671][ T7037] ? __pfx_zram_add+0x10/0x10 [ 176.675737][ T7037] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.675777][ T7037] ? rcu_is_watching+0x12/0xc0 [ 176.675834][ T7037] ? __pfx_hot_add_show+0x10/0x10 [ 176.675876][ T7037] hot_add_show+0x21/0x80 [ 176.675917][ T7037] class_attr_show+0x6f/0xa0 [ 176.675958][ T7037] ? __pfx_class_attr_show+0x10/0x10 [ 176.675996][ T7037] sysfs_kf_seq_show+0x223/0x3e0 [ 176.676048][ T7037] seq_read_iter+0x4f4/0x12b0 [ 176.676116][ T7037] kernfs_fop_read_iter+0x414/0x580 [ 176.676156][ T7037] ? rw_verify_area+0xcf/0x680 [ 176.676208][ T7037] vfs_read+0x886/0xbf0 [ 176.676246][ T7037] ? __pfx_vfs_read+0x10/0x10 [ 176.676304][ T7037] ksys_read+0x12b/0x250 [ 176.676333][ T7037] ? __pfx_ksys_read+0x10/0x10 [ 176.676372][ T7037] do_syscall_64+0xcd/0x250 [ 176.676424][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.676472][ T7037] RIP: 0033:0x7f4a4c58cda9 [ 176.676496][ T7037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.676526][ T7037] RSP: 002b:00007f4a4d3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.676552][ T7037] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58cda9 [ 176.676571][ T7037] RDX: 0000000000001000 RSI: 0000000020000ec0 RDI: 0000000000000005 [ 176.676597][ T7037] RBP: 00007f4a4c60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.676614][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.676631][ T7037] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 176.676671][ T7037] [ 178.059520][ T7049] FAULT_INJECTION: forcing a failure. [ 178.059520][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 178.218096][ T7049] CPU: 1 UID: 0 PID: 7049 Comm: syz.3.258 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 178.218138][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.218156][ T7049] Call Trace: [ 178.218164][ T7049] [ 178.218176][ T7049] dump_stack_lvl+0x16c/0x1f0 [ 178.218231][ T7049] should_fail_ex+0x50a/0x650 [ 178.218268][ T7049] ? fs_reclaim_acquire+0xae/0x150 [ 178.218322][ T7049] should_failslab+0xc2/0x120 [ 178.218362][ T7049] __kmalloc_noprof+0xce/0x4f0 [ 178.218398][ T7049] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 178.218446][ T7049] ? tomoyo_realpath_from_path+0xbf/0x710 [ 178.218496][ T7049] tomoyo_realpath_from_path+0xbf/0x710 [ 178.218539][ T7049] ? tomoyo_path_number_perm+0x235/0x5b0 [ 178.218574][ T7049] tomoyo_path_number_perm+0x248/0x5b0 [ 178.218603][ T7049] ? tomoyo_path_number_perm+0x235/0x5b0 [ 178.218638][ T7049] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.218705][ T7049] ? __pfx_lock_release+0x10/0x10 [ 178.218743][ T7049] ? trace_lock_acquire+0x14e/0x1f0 [ 178.218777][ T7049] ? lock_acquire+0x2f/0xb0 [ 178.218813][ T7049] ? __fget_files+0x40/0x3a0 [ 178.218851][ T7049] ? __fget_files+0x206/0x3a0 [ 178.218890][ T7049] security_file_ioctl+0x9b/0x240 [ 178.218927][ T7049] __x64_sys_ioctl+0xb7/0x200 [ 178.218989][ T7049] do_syscall_64+0xcd/0x250 [ 178.219039][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.219101][ T7049] RIP: 0033:0x7f341fd8cda9 [ 178.219124][ T7049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.219153][ T7049] RSP: 002b:00007f3420b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.219182][ T7049] RAX: ffffffffffffffda RBX: 00007f341ffa6080 RCX: 00007f341fd8cda9 [ 178.219202][ T7049] RDX: 0000000000000000 RSI: 000000004004743b RDI: 0000000000000003 [ 178.219220][ T7049] RBP: 00007f3420b67090 R08: 0000000000000000 R09: 0000000000000000 [ 178.219237][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.219255][ T7049] R13: 0000000000000001 R14: 00007f341ffa6080 R15: 00007ffff13eaa58 [ 178.219293][ T7049] [ 178.435432][ T7049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.219357][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 179.238612][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 179.334321][ T29] audit: type=1800 audit(6033290189.160:6): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.260" name="file0" dev="tmpfs" ino=379 res=0 errno=0 [ 180.644999][ T7072] FAULT_INJECTION: forcing a failure. [ 180.644999][ T7072] name failslab, interval 1, probability 0, space 0, times 0 [ 180.744426][ T7072] CPU: 0 UID: 0 PID: 7072 Comm: syz.3.267 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 180.744466][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 180.744490][ T7072] Call Trace: [ 180.744498][ T7072] [ 180.744511][ T7072] dump_stack_lvl+0x16c/0x1f0 [ 180.744563][ T7072] should_fail_ex+0x50a/0x650 [ 180.744597][ T7072] ? fs_reclaim_acquire+0xae/0x150 [ 180.744648][ T7072] should_failslab+0xc2/0x120 [ 180.744687][ T7072] __kmalloc_noprof+0xce/0x4f0 [ 180.744719][ T7072] ? d_absolute_path+0x137/0x1b0 [ 180.744759][ T7072] ? tomoyo_encode2+0x100/0x3e0 [ 180.744800][ T7072] tomoyo_encode2+0x100/0x3e0 [ 180.744839][ T7072] tomoyo_realpath_from_path+0x1a7/0x710 [ 180.744887][ T7072] tomoyo_path_number_perm+0x248/0x5b0 [ 180.744916][ T7072] ? tomoyo_path_number_perm+0x235/0x5b0 [ 180.744950][ T7072] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.745013][ T7072] ? __pfx_lock_release+0x10/0x10 [ 180.745049][ T7072] ? trace_lock_acquire+0x14e/0x1f0 [ 180.745082][ T7072] ? lock_acquire+0x2f/0xb0 [ 180.745116][ T7072] ? __fget_files+0x40/0x3a0 [ 180.745154][ T7072] ? __fget_files+0x206/0x3a0 [ 180.745191][ T7072] security_file_ioctl+0x9b/0x240 [ 180.745235][ T7072] __x64_sys_ioctl+0xb7/0x200 [ 180.745290][ T7072] do_syscall_64+0xcd/0x250 [ 180.745342][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.745391][ T7072] RIP: 0033:0x7f341fd8cda9 [ 180.745414][ T7072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.745448][ T7072] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.745480][ T7072] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 180.745499][ T7072] RDX: 0000000000000000 RSI: 000000004004743b RDI: 0000000000000003 [ 180.745516][ T7072] RBP: 00007f3420b88090 R08: 0000000000000000 R09: 0000000000000000 [ 180.745534][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.745550][ T7072] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 180.745592][ T7072] [ 181.104284][ T7072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.331429][ T7105] FAULT_INJECTION: forcing a failure. [ 183.331429][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 183.424099][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz.3.275 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 183.424143][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 183.424161][ T7105] Call Trace: [ 183.424170][ T7105] [ 183.424183][ T7105] dump_stack_lvl+0x16c/0x1f0 [ 183.424239][ T7105] should_fail_ex+0x50a/0x650 [ 183.424274][ T7105] ? fs_reclaim_acquire+0xae/0x150 [ 183.424328][ T7105] should_failslab+0xc2/0x120 [ 183.424369][ T7105] __kmalloc_noprof+0xce/0x4f0 [ 183.424407][ T7105] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 183.424458][ T7105] apply_wqattrs_prepare+0xf8/0xbd0 [ 183.424502][ T7105] ? __alloc_workqueue+0x87c/0x1810 [ 183.424564][ T7105] apply_workqueue_attrs_locked+0x64/0xe0 [ 183.424610][ T7105] __alloc_workqueue+0xf34/0x1810 [ 183.424673][ T7105] alloc_workqueue+0xd3/0x200 [ 183.424723][ T7105] ? __pfx_alloc_workqueue+0x10/0x10 [ 183.424785][ T7105] ? rcu_is_watching+0x12/0xc0 [ 183.424834][ T7105] ? trace_kmalloc+0x2d/0xd0 [ 183.424879][ T7105] ? __pfx_lock_release+0x10/0x10 [ 183.424935][ T7105] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.424988][ T7105] ieee80211_register_hw+0x1de5/0x3ff0 [ 183.425036][ T7105] ? __debug_object_init+0x231/0x3e0 [ 183.425090][ T7105] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 183.425127][ T7105] ? net_generic+0xea/0x2a0 [ 183.425174][ T7105] ? lockdep_init_map_type+0x16d/0x7d0 [ 183.425218][ T7105] ? rcu_is_watching+0x12/0xc0 [ 183.425266][ T7105] ? trace_hrtimer_init+0x1a6/0x230 [ 183.425309][ T7105] ? __hrtimer_init+0x106/0x2c0 [ 183.425356][ T7105] mac80211_hwsim_new_radio+0x2c47/0x56d0 [ 183.425405][ T7105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.425478][ T7105] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 183.425545][ T7105] hwsim_new_radio_nl+0xb42/0x12b0 [ 183.425600][ T7105] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.425665][ T7105] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 183.425719][ T7105] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 183.425789][ T7105] genl_family_rcv_msg_doit+0x202/0x2f0 [ 183.425843][ T7105] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.425893][ T7105] ? trace_cap_capable+0x1a2/0x210 [ 183.425952][ T7105] ? bpf_lsm_capable+0x9/0x10 [ 183.425996][ T7105] ? security_capable+0x7e/0x260 [ 183.426046][ T7105] ? ns_capable+0xd7/0x110 [ 183.426090][ T7105] genl_rcv_msg+0x565/0x800 [ 183.426145][ T7105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.426199][ T7105] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.426265][ T7105] netlink_rcv_skb+0x165/0x410 [ 183.426310][ T7105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.426364][ T7105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.426427][ T7105] ? down_read+0xc9/0x330 [ 183.426456][ T7105] ? __pfx_down_read+0x10/0x10 [ 183.426488][ T7105] ? netlink_deliver_tap+0x1ae/0xca0 [ 183.426536][ T7105] genl_rcv+0x28/0x40 [ 183.426581][ T7105] netlink_unicast+0x53c/0x7f0 [ 183.426631][ T7105] ? __pfx_netlink_unicast+0x10/0x10 [ 183.426677][ T7105] ? __phys_addr_symbol+0x30/0x80 [ 183.426743][ T7105] ? __check_object_size+0x488/0x710 [ 183.426797][ T7105] netlink_sendmsg+0x8b8/0xd70 [ 183.426851][ T7105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.426915][ T7105] ____sys_sendmsg+0x9ae/0xb40 [ 183.426957][ T7105] ? copy_msghdr_from_user+0x10b/0x160 [ 183.426989][ T7105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.427052][ T7105] ___sys_sendmsg+0x135/0x1e0 [ 183.427087][ T7105] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.427137][ T7105] ? __pfx_lock_release+0x10/0x10 [ 183.427174][ T7105] ? trace_lock_acquire+0x14e/0x1f0 [ 183.427220][ T7105] ? __fget_files+0x206/0x3a0 [ 183.427264][ T7105] __sys_sendmsg+0x16e/0x220 [ 183.427298][ T7105] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.427330][ T7105] ? __x64_sys_futex+0x1e1/0x4c0 [ 183.427390][ T7105] do_syscall_64+0xcd/0x250 [ 183.427442][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.427488][ T7105] RIP: 0033:0x7f341fd8cda9 [ 183.427513][ T7105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.427543][ T7105] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.427572][ T7105] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 183.427592][ T7105] RDX: 00000000040000c0 RSI: 0000000020000300 RDI: 0000000000000007 [ 183.427610][ T7105] RBP: 00007f341fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 183.427628][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.427646][ T7105] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 183.427687][ T7105] [ 184.817076][ T7120] FAULT_INJECTION: forcing a failure. [ 184.817076][ T7120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.914381][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.0.279 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 184.914422][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 184.914439][ T7120] Call Trace: [ 184.914447][ T7120] [ 184.914458][ T7120] dump_stack_lvl+0x16c/0x1f0 [ 184.914511][ T7120] should_fail_ex+0x50a/0x650 [ 184.914554][ T7120] _copy_to_user+0x32/0xd0 [ 184.914599][ T7120] simple_read_from_buffer+0xd0/0x160 [ 184.914653][ T7120] proc_fail_nth_read+0x198/0x270 [ 184.914707][ T7120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.914754][ T7120] ? rw_verify_area+0xcf/0x680 [ 184.914799][ T7120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.914846][ T7120] vfs_read+0x1df/0xbf0 [ 184.914874][ T7120] ? __fget_files+0x1fc/0x3a0 [ 184.914906][ T7120] ? __pfx___mutex_lock+0x10/0x10 [ 184.914954][ T7120] ? __pfx_vfs_read+0x10/0x10 [ 184.914995][ T7120] ? __fget_files+0x206/0x3a0 [ 184.915042][ T7120] ksys_read+0x12b/0x250 [ 184.915071][ T7120] ? __pfx_ksys_read+0x10/0x10 [ 184.915111][ T7120] do_syscall_64+0xcd/0x250 [ 184.915164][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.915209][ T7120] RIP: 0033:0x7f4a4c58b7bc [ 184.915232][ T7120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.915261][ T7120] RSP: 002b:00007f4a4d3f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.915289][ T7120] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58b7bc [ 184.915308][ T7120] RDX: 000000000000000f RSI: 00007f4a4d3f30a0 RDI: 0000000000000004 [ 184.915326][ T7120] RBP: 00007f4a4d3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 184.915344][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.915361][ T7120] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 184.915400][ T7120] [ 187.485341][ T7150] FAULT_INJECTION: forcing a failure. [ 187.485341][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.664411][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.2.288 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 187.664452][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 187.664470][ T7150] Call Trace: [ 187.664478][ T7150] [ 187.664490][ T7150] dump_stack_lvl+0x16c/0x1f0 [ 187.664544][ T7150] should_fail_ex+0x50a/0x650 [ 187.664588][ T7150] _copy_to_user+0x32/0xd0 [ 187.664636][ T7150] simple_read_from_buffer+0xd0/0x160 [ 187.664689][ T7150] proc_fail_nth_read+0x198/0x270 [ 187.664738][ T7150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.664787][ T7150] ? rw_verify_area+0xcf/0x680 [ 187.664835][ T7150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.664883][ T7150] vfs_read+0x1df/0xbf0 [ 187.664913][ T7150] ? __fget_files+0x1fc/0x3a0 [ 187.664947][ T7150] ? __pfx___mutex_lock+0x10/0x10 [ 187.664997][ T7150] ? __pfx_vfs_read+0x10/0x10 [ 187.665038][ T7150] ? __fget_files+0x206/0x3a0 [ 187.665082][ T7150] ksys_read+0x12b/0x250 [ 187.665112][ T7150] ? __pfx_ksys_read+0x10/0x10 [ 187.665154][ T7150] do_syscall_64+0xcd/0x250 [ 187.665206][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.665252][ T7150] RIP: 0033:0x7f8718b8b7bc [ 187.665275][ T7150] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.665304][ T7150] RSP: 002b:00007f871990b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.665331][ T7150] RAX: ffffffffffffffda RBX: 00007f8718da5fa0 RCX: 00007f8718b8b7bc [ 187.665349][ T7150] RDX: 000000000000000f RSI: 00007f871990b0a0 RDI: 0000000000000004 [ 187.665366][ T7150] RBP: 00007f871990b090 R08: 0000000000000000 R09: 0000000000000000 [ 187.665383][ T7150] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 187.665407][ T7150] R13: 0000000000000000 R14: 00007f8718da5fa0 R15: 00007ffc1ece6bc8 [ 187.665446][ T7150] [ 188.536685][ T7162] usbip-vudc usbip-vudc.0: gadget not bound [ 188.982088][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 189.040387][ T7169] netlink: 326 bytes leftover after parsing attributes in process `syz.0.294'. [ 190.136612][ T7188] netlink: 'syz.2.301': attribute type 27 has an invalid length. [ 190.173437][ T7188] netlink: 334 bytes leftover after parsing attributes in process `syz.2.301'. [ 190.988171][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 191.520125][ T7204] netlink: 342 bytes leftover after parsing attributes in process `syz.1.306'. [ 192.730829][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.313'. [ 193.424615][ T7241] could not allocate digest TFM handle [ 193.901905][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.320'. [ 194.064689][ T7247] could not allocate digest TFM handle [ 194.639569][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'. [ 194.722150][ T7275] netlink: 334 bytes leftover after parsing attributes in process `syz.3.323'. [ 194.786415][ T7273] vxcan1: entered promiscuous mode [ 196.047855][ T7303] syz.0.330 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.024510][ T7350] can: request_module (can-proto-4) failed. [ 199.708878][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.715470][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.381156][ T7379] FAULT_INJECTION: forcing a failure. [ 201.381156][ T7379] name failslab, interval 1, probability 0, space 0, times 0 [ 201.406901][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.1.351 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 201.406945][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 201.406963][ T7379] Call Trace: [ 201.406973][ T7379] [ 201.406985][ T7379] dump_stack_lvl+0x16c/0x1f0 [ 201.407041][ T7379] should_fail_ex+0x50a/0x650 [ 201.407078][ T7379] ? fs_reclaim_acquire+0xae/0x150 [ 201.407132][ T7379] should_failslab+0xc2/0x120 [ 201.407173][ T7379] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 201.407210][ T7379] ? alloc_unbound_pwq+0x3ff/0xe10 [ 201.407260][ T7379] alloc_unbound_pwq+0x3ff/0xe10 [ 201.407313][ T7379] apply_wqattrs_prepare+0x3af/0xbd0 [ 201.407372][ T7379] apply_workqueue_attrs_locked+0x64/0xe0 [ 201.407419][ T7379] __alloc_workqueue+0xf34/0x1810 [ 201.407496][ T7379] alloc_workqueue+0xd3/0x200 [ 201.407547][ T7379] ? __pfx_alloc_workqueue+0x10/0x10 [ 201.407604][ T7379] ? rcu_is_watching+0x12/0xc0 [ 201.407653][ T7379] ? trace_kmalloc+0x2d/0xd0 [ 201.407700][ T7379] ? __pfx_lock_release+0x10/0x10 [ 201.407738][ T7379] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.407789][ T7379] ieee80211_register_hw+0x1de5/0x3ff0 [ 201.407837][ T7379] ? __debug_object_init+0x231/0x3e0 [ 201.407894][ T7379] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 201.407930][ T7379] ? net_generic+0xea/0x2a0 [ 201.407978][ T7379] ? lockdep_init_map_type+0x16d/0x7d0 [ 201.408020][ T7379] ? rcu_is_watching+0x12/0xc0 [ 201.408068][ T7379] ? trace_hrtimer_init+0x1a6/0x230 [ 201.408108][ T7379] ? __hrtimer_init+0x106/0x2c0 [ 201.408153][ T7379] mac80211_hwsim_new_radio+0x2c47/0x56d0 [ 201.408199][ T7379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.408271][ T7379] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 201.408339][ T7379] hwsim_new_radio_nl+0xb42/0x12b0 [ 201.408395][ T7379] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.408472][ T7379] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 201.408529][ T7379] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 201.408605][ T7379] genl_family_rcv_msg_doit+0x202/0x2f0 [ 201.408658][ T7379] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.408709][ T7379] ? trace_cap_capable+0x1a2/0x210 [ 201.408769][ T7379] ? bpf_lsm_capable+0x9/0x10 [ 201.408812][ T7379] ? security_capable+0x7e/0x260 [ 201.408858][ T7379] ? ns_capable+0xd7/0x110 [ 201.408902][ T7379] genl_rcv_msg+0x565/0x800 [ 201.408957][ T7379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.409009][ T7379] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.409074][ T7379] netlink_rcv_skb+0x165/0x410 [ 201.409120][ T7379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.409173][ T7379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.409234][ T7379] ? down_read+0xc9/0x330 [ 201.409264][ T7379] ? __pfx_down_read+0x10/0x10 [ 201.409296][ T7379] ? netlink_deliver_tap+0x1ae/0xca0 [ 201.409344][ T7379] genl_rcv+0x28/0x40 [ 201.409388][ T7379] netlink_unicast+0x53c/0x7f0 [ 201.409444][ T7379] ? __pfx_netlink_unicast+0x10/0x10 [ 201.409492][ T7379] ? __phys_addr_symbol+0x30/0x80 [ 201.409544][ T7379] ? __check_object_size+0x488/0x710 [ 201.409591][ T7379] netlink_sendmsg+0x8b8/0xd70 [ 201.409642][ T7379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.409701][ T7379] ____sys_sendmsg+0x9ae/0xb40 [ 201.409743][ T7379] ? copy_msghdr_from_user+0x10b/0x160 [ 201.409775][ T7379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.409837][ T7379] ___sys_sendmsg+0x135/0x1e0 [ 201.409871][ T7379] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.409920][ T7379] ? __pfx_lock_release+0x10/0x10 [ 201.409956][ T7379] ? trace_lock_acquire+0x14e/0x1f0 [ 201.410000][ T7379] ? __fget_files+0x206/0x3a0 [ 201.410044][ T7379] __sys_sendmsg+0x16e/0x220 [ 201.410077][ T7379] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.410108][ T7379] ? __x64_sys_futex+0x1e1/0x4c0 [ 201.410165][ T7379] do_syscall_64+0xcd/0x250 [ 201.410220][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.410263][ T7379] RIP: 0033:0x7f5a9438cda9 [ 201.410288][ T7379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.410317][ T7379] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.410345][ T7379] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 201.410365][ T7379] RDX: 00000000040000c0 RSI: 0000000020000300 RDI: 0000000000000007 [ 201.410382][ T7379] RBP: 00007f5a9440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.410399][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.410416][ T7379] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 201.410462][ T7379] [ 202.255410][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.353'. [ 202.308560][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.317344][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.366262][ T7390] bridge0: entered promiscuous mode [ 202.371552][ T7390] bridge0: entered allmulticast mode [ 203.564685][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.358'. [ 203.763123][ T7377] FAULT_INJECTION: forcing a failure. [ 203.763123][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 203.784497][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.0.348 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 203.784539][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 203.784556][ T7377] Call Trace: [ 203.784564][ T7377] [ 203.784575][ T7377] dump_stack_lvl+0x16c/0x1f0 [ 203.784630][ T7377] should_fail_ex+0x50a/0x650 [ 203.784666][ T7377] ? fs_reclaim_acquire+0xae/0x150 [ 203.784720][ T7377] should_failslab+0xc2/0x120 [ 203.784761][ T7377] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 203.784800][ T7377] ? vm_area_dup+0x53/0x300 [ 203.784848][ T7377] vm_area_dup+0x53/0x300 [ 203.784891][ T7377] __split_vma+0x181/0x1210 [ 203.784932][ T7377] ? __pfx___split_vma+0x10/0x10 [ 203.785020][ T7377] vms_gather_munmap_vmas+0x38b/0x1730 [ 203.785074][ T7377] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 203.785118][ T7377] ? mas_walk+0x6a6/0x910 [ 203.785179][ T7377] __mmap_region+0x328/0x2760 [ 203.785223][ T7377] ? __pfx___mmap_region+0x10/0x10 [ 203.785274][ T7377] ? hlock_class+0x4e/0x130 [ 203.785322][ T7377] ? mark_lock+0xb5/0xc60 [ 203.785363][ T7377] ? __pfx_mark_lock+0x10/0x10 [ 203.785401][ T7377] ? __pfx___schedule+0x10/0x10 [ 203.785445][ T7377] ? schedule+0x298/0x350 [ 203.785537][ T7377] ? cap_capable+0xb3/0x250 [ 203.785593][ T7377] mmap_region+0x1ab/0x3f0 [ 203.785641][ T7377] do_mmap+0xd8d/0x11b0 [ 203.785678][ T7377] ? __pfx_do_mmap+0x10/0x10 [ 203.785710][ T7377] ? __pfx_down_write_killable+0x10/0x10 [ 203.785741][ T7377] ? __pfx_lock_release+0x10/0x10 [ 203.785785][ T7377] vm_mmap_pgoff+0x203/0x3a0 [ 203.785827][ T7377] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 203.785868][ T7377] ? __x64_sys_futex+0x1e1/0x4c0 [ 203.785899][ T7377] ? __x64_sys_futex+0x1ea/0x4c0 [ 203.785937][ T7377] ksys_mmap_pgoff+0x7d/0x5c0 [ 203.785988][ T7377] ? rcu_is_watching+0x12/0xc0 [ 203.786048][ T7377] __x64_sys_mmap+0x125/0x190 [ 203.786099][ T7377] do_syscall_64+0xcd/0x250 [ 203.786152][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.786198][ T7377] RIP: 0033:0x7f4a4c58cda9 [ 203.786223][ T7377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.786252][ T7377] RSP: 002b:00007f4a4d3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 203.786283][ T7377] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58cda9 [ 203.786303][ T7377] RDX: fffffffffffffffe RSI: 0000000000400005 RDI: 0000000000000000 [ 203.786321][ T7377] RBP: 00007f4a4c60e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 203.786339][ T7377] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 203.786357][ T7377] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 203.786396][ T7377] [ 204.577974][ T7422] FAULT_INJECTION: forcing a failure. [ 204.577974][ T7422] name failslab, interval 1, probability 0, space 0, times 0 [ 204.654341][ T7422] CPU: 0 UID: 0 PID: 7422 Comm: syz.3.363 Not tainted 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 204.654382][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 204.654399][ T7422] Call Trace: [ 204.654408][ T7422] [ 204.654419][ T7422] dump_stack_lvl+0x16c/0x1f0 [ 204.654470][ T7422] should_fail_ex+0x50a/0x650 [ 204.654507][ T7422] ? fs_reclaim_acquire+0xae/0x150 [ 204.654561][ T7422] should_failslab+0xc2/0x120 [ 204.654599][ T7422] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 204.654636][ T7422] ? vma_merge_new_range+0x40a/0xbb0 [ 204.654670][ T7422] ? vm_area_alloc+0x1f/0x1c0 [ 204.654719][ T7422] vm_area_alloc+0x1f/0x1c0 [ 204.654761][ T7422] __mmap_region+0x108d/0x2760 [ 204.654803][ T7422] ? __pfx___mmap_region+0x10/0x10 [ 204.654853][ T7422] ? hlock_class+0x4e/0x130 [ 204.654901][ T7422] ? mark_lock+0xb5/0xc60 [ 204.654950][ T7422] ? hlock_class+0x4e/0x130 [ 204.654996][ T7422] ? __lock_acquire+0xcc5/0x3c40 [ 204.655081][ T7422] ? cap_capable+0xb3/0x250 [ 204.655136][ T7422] mmap_region+0x1ab/0x3f0 [ 204.655182][ T7422] do_mmap+0xd8d/0x11b0 [ 204.655218][ T7422] ? __pfx_do_mmap+0x10/0x10 [ 204.655249][ T7422] ? __pfx_down_write_killable+0x10/0x10 [ 204.655299][ T7422] vm_mmap_pgoff+0x203/0x3a0 [ 204.655340][ T7422] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 204.655373][ T7422] ? __fget_files+0x206/0x3a0 [ 204.655418][ T7422] ksys_mmap_pgoff+0x7d/0x5c0 [ 204.655469][ T7422] ? __pfx_ksys_write+0x10/0x10 [ 204.655504][ T7422] __x64_sys_mmap+0x125/0x190 [ 204.655554][ T7422] do_syscall_64+0xcd/0x250 [ 204.655606][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.655651][ T7422] RIP: 0033:0x7f341fd8cda9 [ 204.655674][ T7422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.655703][ T7422] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 204.655730][ T7422] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 204.655750][ T7422] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 204.655768][ T7422] RBP: 00007f3420b88090 R08: fffffffffffffffa R09: 0000000000008000 [ 204.655787][ T7422] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 204.655804][ T7422] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 204.655843][ T7422] [ 207.293290][ T7451] Process accounting paused [ 207.614763][ T7469] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.377'. [ 207.682078][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 208.489775][ T7479] zswap: compressor not available [ 208.511510][ T7483] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 209.248811][ T7498] FAULT_INJECTION: forcing a failure. [ 209.248811][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 209.381084][ T7498] CPU: 1 UID: 0 PID: 7498 Comm: syz.1.384 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 209.381130][ T7498] Tainted: [U]=USER [ 209.381139][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 209.381156][ T7498] Call Trace: [ 209.381165][ T7498] [ 209.381176][ T7498] dump_stack_lvl+0x16c/0x1f0 [ 209.381227][ T7498] should_fail_ex+0x50a/0x650 [ 209.381263][ T7498] ? fs_reclaim_acquire+0xae/0x150 [ 209.381316][ T7498] should_failslab+0xc2/0x120 [ 209.381354][ T7498] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 209.381390][ T7498] ? vma_merge_new_range+0x40a/0xbb0 [ 209.381425][ T7498] ? vm_area_alloc+0xe0/0x1c0 [ 209.381472][ T7498] vm_area_alloc+0xe0/0x1c0 [ 209.381512][ T7498] __mmap_region+0x108d/0x2760 [ 209.381554][ T7498] ? __pfx___mmap_region+0x10/0x10 [ 209.381603][ T7498] ? hlock_class+0x4e/0x130 [ 209.381649][ T7498] ? mark_lock+0xb5/0xc60 [ 209.381696][ T7498] ? hlock_class+0x4e/0x130 [ 209.381741][ T7498] ? __lock_acquire+0xcc5/0x3c40 [ 209.381830][ T7498] ? cap_capable+0xb3/0x250 [ 209.381884][ T7498] mmap_region+0x1ab/0x3f0 [ 209.381929][ T7498] do_mmap+0xd8d/0x11b0 [ 209.381965][ T7498] ? __pfx_do_mmap+0x10/0x10 [ 209.381995][ T7498] ? __pfx_down_write_killable+0x10/0x10 [ 209.382035][ T7498] vm_mmap_pgoff+0x203/0x3a0 [ 209.382075][ T7498] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 209.382111][ T7498] ? __fget_files+0x206/0x3a0 [ 209.382154][ T7498] ksys_mmap_pgoff+0x7d/0x5c0 [ 209.382203][ T7498] ? __pfx_ksys_write+0x10/0x10 [ 209.382238][ T7498] __x64_sys_mmap+0x125/0x190 [ 209.382286][ T7498] do_syscall_64+0xcd/0x250 [ 209.382337][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.382380][ T7498] RIP: 0033:0x7f5a9438cda9 [ 209.382403][ T7498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.382431][ T7498] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 209.382458][ T7498] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 209.382477][ T7498] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 209.382495][ T7498] RBP: 00007f5a95142090 R08: fffffffffffffffa R09: 0000000000008000 [ 209.382514][ T7498] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 209.382531][ T7498] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 209.382569][ T7498] syzkaller syzkaller login: [ 213.425267][ T7552] FAULT_INJECTION: forcing a failure. [ 213.425267][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 213.585654][ T7552] CPU: 0 UID: 0 PID: 7552 Comm: syz.2.400 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 213.585699][ T7552] Tainted: [U]=USER [ 213.585708][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 213.585725][ T7552] Call Trace: [ 213.585733][ T7552] [ 213.585743][ T7552] dump_stack_lvl+0x16c/0x1f0 [ 213.585792][ T7552] should_fail_ex+0x50a/0x650 [ 213.585826][ T7552] ? fs_reclaim_acquire+0xae/0x150 [ 213.585876][ T7552] should_failslab+0xc2/0x120 [ 213.585932][ T7552] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 213.585970][ T7552] ? mas_alloc_nodes+0x18b/0x880 [ 213.586019][ T7552] mas_alloc_nodes+0x18b/0x880 [ 213.586071][ T7552] mas_node_count_gfp+0x105/0x130 [ 213.586117][ T7552] mas_preallocate+0x53f/0xce0 [ 213.586154][ T7552] ? __pfx_mas_preallocate+0x10/0x10 [ 213.586204][ T7552] ? __raw_spin_lock_init+0x3a/0x110 [ 213.586259][ T7552] __mmap_region+0x1738/0x2760 [ 213.586302][ T7552] ? __pfx___mmap_region+0x10/0x10 [ 213.586352][ T7552] ? hlock_class+0x4e/0x130 [ 213.586400][ T7552] ? mark_lock+0xb5/0xc60 [ 213.586447][ T7552] ? hlock_class+0x4e/0x130 [ 213.586494][ T7552] ? __lock_acquire+0xcc5/0x3c40 [ 213.586577][ T7552] ? cap_capable+0xb3/0x250 [ 213.586631][ T7552] mmap_region+0x1ab/0x3f0 [ 213.586683][ T7552] do_mmap+0xd8d/0x11b0 [ 213.586720][ T7552] ? __pfx_do_mmap+0x10/0x10 [ 213.586751][ T7552] ? __pfx_down_write_killable+0x10/0x10 [ 213.586790][ T7552] vm_mmap_pgoff+0x203/0x3a0 [ 213.586832][ T7552] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 213.586866][ T7552] ? __fget_files+0x206/0x3a0 [ 213.586909][ T7552] ksys_mmap_pgoff+0x7d/0x5c0 [ 213.586981][ T7552] ? __pfx_ksys_write+0x10/0x10 [ 213.587018][ T7552] __x64_sys_mmap+0x125/0x190 [ 213.587069][ T7552] do_syscall_64+0xcd/0x250 [ 213.587122][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.587168][ T7552] RIP: 0033:0x7f8718b8cda9 [ 213.587197][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.587227][ T7552] RSP: 002b:00007f87169f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 213.587256][ T7552] RAX: ffffffffffffffda RBX: 00007f8718da6080 RCX: 00007f8718b8cda9 [ 213.587276][ T7552] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 213.587294][ T7552] RBP: 00007f87169f6090 R08: fffffffffffffffa R09: 0000000000008000 [ 213.587313][ T7552] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 213.587332][ T7552] R13: 0000000000000000 R14: 00007f8718da6080 R15: 00007ffc1ece6bc8 [ 213.587371][ T7552] [ 217.806814][ T7600] FAULT_INJECTION: forcing a failure. [ 217.806814][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 217.927143][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.2.413 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 217.927189][ T7600] Tainted: [U]=USER [ 217.927199][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.927216][ T7600] Call Trace: [ 217.927225][ T7600] [ 217.927236][ T7600] dump_stack_lvl+0x16c/0x1f0 [ 217.927288][ T7600] should_fail_ex+0x50a/0x650 [ 217.927325][ T7600] ? fs_reclaim_acquire+0xae/0x150 [ 217.927379][ T7600] should_failslab+0xc2/0x120 [ 217.927419][ T7600] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 217.927459][ T7600] ? shmem_alloc_inode+0x25/0x50 [ 217.927499][ T7600] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 217.927532][ T7600] shmem_alloc_inode+0x25/0x50 [ 217.927564][ T7600] alloc_inode+0x5d/0x230 [ 217.927604][ T7600] new_inode+0x22/0x210 [ 217.927647][ T7600] shmem_get_inode+0x194/0xf00 [ 217.927686][ T7600] ? __vm_enough_memory+0x184/0x3f0 [ 217.927725][ T7600] __shmem_file_setup+0x16f/0x300 [ 217.927771][ T7600] shmem_zero_setup+0x93/0x1b0 [ 217.927829][ T7600] __mmap_region+0x2021/0x2760 [ 217.927872][ T7600] ? __pfx___mmap_region+0x10/0x10 [ 217.927922][ T7600] ? hlock_class+0x4e/0x130 [ 217.927970][ T7600] ? mark_lock+0xb5/0xc60 [ 217.928018][ T7600] ? hlock_class+0x4e/0x130 [ 217.928066][ T7600] ? __lock_acquire+0xcc5/0x3c40 [ 217.928160][ T7600] ? cap_capable+0xb3/0x250 [ 217.928218][ T7600] mmap_region+0x1ab/0x3f0 [ 217.928263][ T7600] do_mmap+0xd8d/0x11b0 [ 217.928299][ T7600] ? __pfx_do_mmap+0x10/0x10 [ 217.928329][ T7600] ? __pfx_down_write_killable+0x10/0x10 [ 217.928369][ T7600] vm_mmap_pgoff+0x203/0x3a0 [ 217.928408][ T7600] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 217.928441][ T7600] ? __fget_files+0x206/0x3a0 [ 217.928484][ T7600] ksys_mmap_pgoff+0x7d/0x5c0 [ 217.928532][ T7600] ? __pfx_ksys_write+0x10/0x10 [ 217.928567][ T7600] __x64_sys_mmap+0x125/0x190 [ 217.928614][ T7600] do_syscall_64+0xcd/0x250 [ 217.928664][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.928707][ T7600] RIP: 0033:0x7f8718b8cda9 [ 217.928729][ T7600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.928757][ T7600] RSP: 002b:00007f87169f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 217.928783][ T7600] RAX: ffffffffffffffda RBX: 00007f8718da6080 RCX: 00007f8718b8cda9 [ 217.928810][ T7600] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 217.928828][ T7600] RBP: 00007f87169f6090 R08: fffffffffffffffa R09: 0000000000008000 [ 217.928846][ T7600] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 217.928864][ T7600] R13: 0000000000000000 R14: 00007f8718da6080 R15: 00007ffc1ece6bc8 [ 217.928901][ T7600] [ 218.226363][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.929189][ T7608] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 218.979565][ T7608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.416'. [ 219.085489][ T7611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.416'. [ 225.569337][ T7683] synth uevent: /bus/memstick: unknown uevent action string [ 233.036639][ T7749] FAULT_INJECTION: forcing a failure. [ 233.036639][ T7749] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 233.104352][ T7749] CPU: 1 UID: 0 PID: 7749 Comm: syz.2.454 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 233.104401][ T7749] Tainted: [U]=USER [ 233.104411][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.104429][ T7749] Call Trace: [ 233.104438][ T7749] [ 233.104450][ T7749] dump_stack_lvl+0x16c/0x1f0 [ 233.104508][ T7749] should_fail_ex+0x50a/0x650 [ 233.104554][ T7749] ? __pfx___might_resched+0x10/0x10 [ 233.104600][ T7749] should_fail_alloc_page+0xe7/0x130 [ 233.104645][ T7749] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 233.104716][ T7749] ? register_lock_class+0xb1/0x1240 [ 233.104761][ T7749] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 233.104806][ T7749] ? find_held_lock+0x2d/0x110 [ 233.104862][ T7749] ? weighted_interleave_nid+0x3ec/0x5b0 [ 233.104904][ T7749] ? __pfx_lock_release+0x10/0x10 [ 233.104943][ T7749] ? trace_lock_acquire+0x14e/0x1f0 [ 233.104973][ T7749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.105029][ T7749] ? __pfx_weighted_interleave_nid+0x10/0x10 [ 233.105071][ T7749] ? hlock_class+0x4e/0x130 [ 233.105117][ T7749] ? __lock_acquire+0xcc5/0x3c40 [ 233.105161][ T7749] ? policy_nodemask+0xea/0x4e0 [ 233.105206][ T7749] alloc_pages_mpol+0x1fc/0x540 [ 233.105248][ T7749] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 233.105290][ T7749] ? __lock_acquire+0x15a9/0x3c40 [ 233.105336][ T7749] folio_alloc_mpol_noprof+0x36/0x2f0 [ 233.105385][ T7749] vma_alloc_folio_noprof+0xee/0x1b0 [ 233.105433][ T7749] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 233.105480][ T7749] ? find_held_lock+0x2d/0x110 [ 233.105547][ T7749] do_pte_missing+0x202f/0x3e10 [ 233.105601][ T7749] __handle_mm_fault+0x1166/0x2c60 [ 233.105650][ T7749] ? __pfx___handle_mm_fault+0x10/0x10 [ 233.105685][ T7749] ? follow_page_pte+0x3ac/0x1490 [ 233.105719][ T7749] ? __pfx_lock_release+0x10/0x10 [ 233.105787][ T7749] handle_mm_fault+0x3fa/0xaa0 [ 233.105846][ T7749] __get_user_pages+0x773/0x36f0 [ 233.105891][ T7749] ? __pfx_mt_find+0x10/0x10 [ 233.105953][ T7749] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 233.105990][ T7749] ? __pfx___get_user_pages+0x10/0x10 [ 233.106025][ T7749] ? __mm_populate+0x21d/0x380 [ 233.106067][ T7749] populate_vma_page_range+0x27f/0x3a0 [ 233.106104][ T7749] ? __pfx_populate_vma_page_range+0x10/0x10 [ 233.106137][ T7749] ? __pfx_find_vma_intersection+0x10/0x10 [ 233.106186][ T7749] ? vm_mmap_pgoff+0x29b/0x3a0 [ 233.106222][ T7749] __mm_populate+0x1d6/0x380 [ 233.106257][ T7749] ? __pfx___mm_populate+0x10/0x10 [ 233.106294][ T7749] ? up_write+0x1b2/0x520 [ 233.106338][ T7749] vm_mmap_pgoff+0x2d3/0x3a0 [ 233.106373][ T7749] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 233.106410][ T7749] ? __x64_sys_futex+0x1e1/0x4c0 [ 233.106439][ T7749] ? __x64_sys_futex+0x1ea/0x4c0 [ 233.106474][ T7749] ksys_mmap_pgoff+0x7d/0x5c0 [ 233.106527][ T7749] ? rcu_is_watching+0x12/0xc0 [ 233.106575][ T7749] __x64_sys_mmap+0x125/0x190 [ 233.106619][ T7749] do_syscall_64+0xcd/0x250 [ 233.106667][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.106707][ T7749] RIP: 0033:0x7f8718b8cda9 [ 233.106730][ T7749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.106758][ T7749] RSP: 002b:00007f871990b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 233.106785][ T7749] RAX: ffffffffffffffda RBX: 00007f8718da5fa0 RCX: 00007f8718b8cda9 [ 233.106804][ T7749] RDX: fffffffffffffffe RSI: 0000000000400005 RDI: 0000000000000000 [ 233.106821][ T7749] RBP: 00007f8718c0e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 233.106839][ T7749] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 233.106855][ T7749] R13: 0000000000000000 R14: 00007f8718da5fa0 R15: 00007ffc1ece6bc8 [ 233.106891][ T7749] [ 237.298988][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'. [ 237.584420][ T7794] capability: warning: `syz.2.465' uses 32-bit capabilities (legacy support in use) [ 238.340588][ T7788] 0x000000003d6a-0x000000003d6b : "" [ 238.425016][ T7788] ftl_cs: FTL header corrupt! [ 239.944806][ T7793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.185294][ T7793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.361465][ T7793] bond0 (unregistering): Released all slaves [ 240.993652][ T7793] Process accounting resumed [ 242.639723][ T7502] syz.3.385 (7502) used greatest stack depth: 18976 bytes left [ 244.612466][ T7873] Process accounting resumed [ 244.986275][ T7877] Process accounting resumed [ 245.564454][ T7876] Process accounting resumed [ 247.719670][ T7904] FAULT_INJECTION: forcing a failure. [ 247.719670][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 247.939666][ T7904] CPU: 0 UID: 0 PID: 7904 Comm: syz.1.493 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 247.939712][ T7904] Tainted: [U]=USER [ 247.939722][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 247.939739][ T7904] Call Trace: [ 247.939748][ T7904] [ 247.939759][ T7904] dump_stack_lvl+0x16c/0x1f0 [ 247.939812][ T7904] should_fail_ex+0x50a/0x650 [ 247.939848][ T7904] ? fs_reclaim_acquire+0xae/0x150 [ 247.939903][ T7904] should_failslab+0xc2/0x120 [ 247.939943][ T7904] __kmalloc_node_noprof+0xd1/0x520 [ 247.939978][ T7904] ? file_tty_write.constprop.0+0x281/0x9a0 [ 247.940026][ T7904] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 247.940066][ T7904] __kvmalloc_node_noprof+0xad/0x1a0 [ 247.940101][ T7904] file_tty_write.constprop.0+0x6dd/0x9a0 [ 247.940149][ T7904] ? redirected_tty_write+0x1f/0x140 [ 247.940203][ T7904] redirected_tty_write+0xcc/0x140 [ 247.940250][ T7904] vfs_write+0x5ae/0x1150 [ 247.940283][ T7904] ? __pfx_redirected_tty_write+0x10/0x10 [ 247.940342][ T7904] ? __pfx_vfs_write+0x10/0x10 [ 247.940375][ T7904] ? __fget_files+0x40/0x3a0 [ 247.940426][ T7904] ksys_write+0x12b/0x250 [ 247.940456][ T7904] ? __pfx_ksys_write+0x10/0x10 [ 247.940498][ T7904] do_syscall_64+0xcd/0x250 [ 247.940548][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.940592][ T7904] RIP: 0033:0x7f5a9438cda9 [ 247.940616][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.940645][ T7904] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.940684][ T7904] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 247.940703][ T7904] RDX: 0000000000000046 RSI: 0000000020000140 RDI: 0000000000000003 [ 247.940720][ T7904] RBP: 00007f5a95142090 R08: 0000000000000000 R09: 0000000000000000 [ 247.940737][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.940754][ T7904] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 247.940791][ T7904] [ 248.957515][ T7908] 0x000000003ec8-0x000000003ec9 : "" [ 248.971411][ T7908] ftl_cs: FTL header corrupt! [ 253.705276][ T7963] FAULT_INJECTION: forcing a failure. [ 253.705276][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.864368][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: syz.1.507 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 253.864411][ T7963] Tainted: [U]=USER [ 253.864420][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 253.864437][ T7963] Call Trace: [ 253.864445][ T7963] [ 253.864456][ T7963] dump_stack_lvl+0x16c/0x1f0 [ 253.864543][ T7963] should_fail_ex+0x50a/0x650 [ 253.864586][ T7963] _copy_from_iter+0x29b/0x1400 [ 253.864633][ T7963] ? trace_lock_acquire+0x14e/0x1f0 [ 253.864669][ T7963] ? __pfx__copy_from_iter+0x10/0x10 [ 253.864711][ T7963] ? __virt_addr_valid+0x1a4/0x590 [ 253.864748][ T7963] ? __virt_addr_valid+0x5e/0x590 [ 253.864777][ T7963] ? __phys_addr_symbol+0x30/0x80 [ 253.864827][ T7963] ? __check_object_size+0x488/0x710 [ 253.864874][ T7963] file_tty_write.constprop.0+0x48d/0x9a0 [ 253.864934][ T7963] redirected_tty_write+0xcc/0x140 [ 253.864982][ T7963] vfs_write+0x5ae/0x1150 [ 253.865014][ T7963] ? __pfx_redirected_tty_write+0x10/0x10 [ 253.865073][ T7963] ? __pfx_vfs_write+0x10/0x10 [ 253.865107][ T7963] ? __fget_files+0x40/0x3a0 [ 253.865160][ T7963] ksys_write+0x12b/0x250 [ 253.865190][ T7963] ? __pfx_ksys_write+0x10/0x10 [ 253.865234][ T7963] do_syscall_64+0xcd/0x250 [ 253.865286][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.865329][ T7963] RIP: 0033:0x7f5a9438cda9 [ 253.865353][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.865383][ T7963] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.865415][ T7963] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 253.865435][ T7963] RDX: 0000000000000046 RSI: 0000000020000140 RDI: 0000000000000003 [ 253.865452][ T7963] RBP: 00007f5a95142090 R08: 0000000000000000 R09: 0000000000000000 [ 253.865469][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.865486][ T7963] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 253.865524][ T7963] [ 254.235001][ T7971] netlink: 146 bytes leftover after parsing attributes in process `syz.3.510'. [ 255.505717][ T7965] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 261.156641][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.163628][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.223381][ T8095] nbd: illegal input index -33554433 [ 264.064750][ T8118] FAULT_INJECTION: forcing a failure. [ 264.064750][ T8118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.135618][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.1.546 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 264.135677][ T8118] Tainted: [U]=USER [ 264.135686][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 264.135703][ T8118] Call Trace: [ 264.135729][ T8118] [ 264.135740][ T8118] dump_stack_lvl+0x16c/0x1f0 [ 264.135793][ T8118] should_fail_ex+0x50a/0x650 [ 264.135836][ T8118] _copy_from_user+0x2e/0xd0 [ 264.135882][ T8118] copy_msghdr_from_user+0x99/0x160 [ 264.135914][ T8118] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 264.135971][ T8118] ___sys_sendmsg+0xff/0x1e0 [ 264.136005][ T8118] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.136052][ T8118] ? __pfx_lock_release+0x10/0x10 [ 264.136089][ T8118] ? trace_lock_acquire+0x14e/0x1f0 [ 264.136132][ T8118] ? __fget_files+0x206/0x3a0 [ 264.136176][ T8118] __sys_sendmsg+0x16e/0x220 [ 264.136208][ T8118] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.136264][ T8118] do_syscall_64+0xcd/0x250 [ 264.136316][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.136361][ T8118] RIP: 0033:0x7f5a9438cda9 [ 264.136384][ T8118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.136414][ T8118] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.136442][ T8118] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 264.136461][ T8118] RDX: 0000000000048000 RSI: 0000000020000000 RDI: 0000000000000003 [ 264.136478][ T8118] RBP: 00007f5a95142090 R08: 0000000000000000 R09: 0000000000000000 [ 264.136495][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.136511][ T8118] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 264.136547][ T8118] [ 266.496484][ T8149] 0x00000000450f-0x000000004510 : "" [ 266.575637][ T8149] ftl_cs: FTL header corrupt! [ 267.738497][ T8169] FAULT_INJECTION: forcing a failure. [ 267.738497][ T8169] name failslab, interval 1, probability 0, space 0, times 0 [ 267.931743][ T8169] CPU: 1 UID: 0 PID: 8169 Comm: syz.1.559 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 267.931788][ T8169] Tainted: [U]=USER [ 267.931798][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.931815][ T8169] Call Trace: [ 267.931823][ T8169] [ 267.931834][ T8169] dump_stack_lvl+0x16c/0x1f0 [ 267.931885][ T8169] should_fail_ex+0x50a/0x650 [ 267.931920][ T8169] ? fs_reclaim_acquire+0xae/0x150 [ 267.931972][ T8169] should_failslab+0xc2/0x120 [ 267.932010][ T8169] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 267.932047][ T8169] ? __alloc_skb+0x2b3/0x380 [ 267.932101][ T8169] __alloc_skb+0x2b3/0x380 [ 267.932149][ T8169] ? __pfx___alloc_skb+0x10/0x10 [ 267.932199][ T8169] ? lock_acquire+0x2f/0xb0 [ 267.932246][ T8169] netlink_alloc_large_skb+0x69/0x130 [ 267.932290][ T8169] netlink_sendmsg+0x689/0xd70 [ 267.932339][ T8169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.932396][ T8169] ____sys_sendmsg+0x9ae/0xb40 [ 267.932437][ T8169] ? copy_msghdr_from_user+0x10b/0x160 [ 267.932467][ T8169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.932525][ T8169] ___sys_sendmsg+0x135/0x1e0 [ 267.932558][ T8169] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.932610][ T8169] ? __pfx_lock_release+0x10/0x10 [ 267.932646][ T8169] ? trace_lock_acquire+0x14e/0x1f0 [ 267.932686][ T8169] ? __fget_files+0x206/0x3a0 [ 267.932731][ T8169] __sys_sendmsg+0x16e/0x220 [ 267.932762][ T8169] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.932813][ T8169] do_syscall_64+0xcd/0x250 [ 267.932860][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.932901][ T8169] RIP: 0033:0x7f5a9438cda9 [ 267.932922][ T8169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.932950][ T8169] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.932975][ T8169] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 267.932992][ T8169] RDX: 0000000000048000 RSI: 0000000020000000 RDI: 0000000000000003 [ 267.933008][ T8169] RBP: 00007f5a95142090 R08: 0000000000000000 R09: 0000000000000000 [ 267.933023][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.933038][ T8169] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 267.933072][ T8169] [ 271.235501][ T8205] nbd: illegal input index -1593835521 [ 272.294675][ T8201] 0x00000000437e-0x00000000437f : "" [ 272.432481][ T8201] ftl_cs: FTL header corrupt! [ 273.904340][ T8237] Process accounting resumed [ 274.273447][ T8241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.577'. [ 275.814491][ T8255] Process accounting paused [ 276.428754][ T8264] 0x00000000469a-0x00000000469b : "" [ 276.447753][ T8264] ftl_cs: FTL header corrupt! [ 277.481257][ T8275] FAULT_INJECTION: forcing a failure. [ 277.481257][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.607590][ T8275] CPU: 0 UID: 0 PID: 8275 Comm: syz.0.588 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 277.607637][ T8275] Tainted: [U]=USER [ 277.607648][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 277.607665][ T8275] Call Trace: [ 277.607673][ T8275] [ 277.607684][ T8275] dump_stack_lvl+0x16c/0x1f0 [ 277.607738][ T8275] should_fail_ex+0x50a/0x650 [ 277.607781][ T8275] _copy_from_iter+0x29b/0x1400 [ 277.607828][ T8275] ? trace_lock_acquire+0x14e/0x1f0 [ 277.607859][ T8275] ? __alloc_skb+0x200/0x380 [ 277.607911][ T8275] ? __pfx__copy_from_iter+0x10/0x10 [ 277.607953][ T8275] ? __virt_addr_valid+0x1a4/0x590 [ 277.607995][ T8275] ? __virt_addr_valid+0x5e/0x590 [ 277.608024][ T8275] ? __phys_addr_symbol+0x30/0x80 [ 277.608074][ T8275] ? __check_object_size+0x488/0x710 [ 277.608120][ T8275] netlink_sendmsg+0x813/0xd70 [ 277.608182][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.608245][ T8275] ____sys_sendmsg+0x9ae/0xb40 [ 277.608280][ T8275] ? copy_msghdr_from_user+0x10b/0x160 [ 277.608307][ T8275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.608357][ T8275] ___sys_sendmsg+0x135/0x1e0 [ 277.608386][ T8275] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.608426][ T8275] ? __pfx_lock_release+0x10/0x10 [ 277.608457][ T8275] ? trace_lock_acquire+0x14e/0x1f0 [ 277.608493][ T8275] ? __fget_files+0x206/0x3a0 [ 277.608529][ T8275] __sys_sendmsg+0x16e/0x220 [ 277.608555][ T8275] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.608603][ T8275] do_syscall_64+0xcd/0x250 [ 277.608651][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.608689][ T8275] RIP: 0033:0x7f4a4c58cda9 [ 277.608709][ T8275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.608733][ T8275] RSP: 002b:00007f4a4d3f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.608757][ T8275] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58cda9 [ 277.608774][ T8275] RDX: 0000000000048000 RSI: 0000000020000000 RDI: 0000000000000003 [ 277.608789][ T8275] RBP: 00007f4a4d3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 277.608804][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.608819][ T8275] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 277.608851][ T8275] [ 278.294297][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 280.015875][ T8307] 0x000000004714-0x000000004715 : "" [ 280.037368][ T8307] ftl_cs: FTL header corrupt! [ 280.348514][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'. [ 281.011756][ T8327] FAULT_INJECTION: forcing a failure. [ 281.011756][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 281.054490][ T8327] CPU: 1 UID: 0 PID: 8327 Comm: syz.0.603 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 281.054536][ T8327] Tainted: [U]=USER [ 281.054546][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 281.054563][ T8327] Call Trace: [ 281.054572][ T8327] [ 281.054583][ T8327] dump_stack_lvl+0x16c/0x1f0 [ 281.054637][ T8327] should_fail_ex+0x50a/0x650 [ 281.054679][ T8327] should_failslab+0xc2/0x120 [ 281.054727][ T8327] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 281.054766][ T8327] ? skb_clone+0x190/0x3f0 [ 281.054802][ T8327] skb_clone+0x190/0x3f0 [ 281.054836][ T8327] netlink_deliver_tap+0xafd/0xca0 [ 281.054888][ T8327] netlink_unicast+0x5e1/0x7f0 [ 281.054938][ T8327] ? __pfx_netlink_unicast+0x10/0x10 [ 281.054985][ T8327] ? __phys_addr_symbol+0x30/0x80 [ 281.055036][ T8327] ? __check_object_size+0x488/0x710 [ 281.055082][ T8327] netlink_sendmsg+0x8b8/0xd70 [ 281.055134][ T8327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.055195][ T8327] ____sys_sendmsg+0x9ae/0xb40 [ 281.055237][ T8327] ? copy_msghdr_from_user+0x10b/0x160 [ 281.055269][ T8327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.055331][ T8327] ___sys_sendmsg+0x135/0x1e0 [ 281.055364][ T8327] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.055425][ T8327] ? __pfx_lock_release+0x10/0x10 [ 281.055461][ T8327] ? trace_lock_acquire+0x14e/0x1f0 [ 281.055504][ T8327] ? __fget_files+0x206/0x3a0 [ 281.055546][ T8327] __sys_sendmsg+0x16e/0x220 [ 281.055578][ T8327] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.055634][ T8327] do_syscall_64+0xcd/0x250 [ 281.055690][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.055734][ T8327] RIP: 0033:0x7f4a4c58cda9 [ 281.055756][ T8327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.055784][ T8327] RSP: 002b:00007f4a4d3f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.055810][ T8327] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58cda9 [ 281.055828][ T8327] RDX: 0000000000048000 RSI: 0000000020000000 RDI: 0000000000000003 [ 281.055845][ T8327] RBP: 00007f4a4d3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 281.055862][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.055878][ T8327] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 281.055914][ T8327] [ 281.318196][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.315817][ T8369] FAULT_INJECTION: forcing a failure. [ 283.315817][ T8369] name failslab, interval 1, probability 0, space 0, times 0 [ 283.365155][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.3.617 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 283.365200][ T8369] Tainted: [U]=USER [ 283.365209][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 283.365227][ T8369] Call Trace: [ 283.365240][ T8369] [ 283.365251][ T8369] dump_stack_lvl+0x16c/0x1f0 [ 283.365303][ T8369] should_fail_ex+0x50a/0x650 [ 283.365338][ T8369] ? fs_reclaim_acquire+0xae/0x150 [ 283.365390][ T8369] should_failslab+0xc2/0x120 [ 283.365429][ T8369] __kmalloc_noprof+0xce/0x4f0 [ 283.365464][ T8369] ? __pfx___mutex_lock+0x10/0x10 [ 283.365509][ T8369] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 283.365578][ T8369] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 283.365638][ T8369] genl_start+0x18e/0x960 [ 283.365701][ T8369] __netlink_dump_start+0x615/0x980 [ 283.365746][ T8369] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 283.365795][ T8369] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 283.365853][ T8369] ? __pfx_genl_get_cmd+0x10/0x10 [ 283.365892][ T8369] ? __pfx_genl_start+0x10/0x10 [ 283.365934][ T8369] ? __pfx_genl_dumpit+0x10/0x10 [ 283.365976][ T8369] ? __pfx_genl_done+0x10/0x10 [ 283.366024][ T8369] ? __radix_tree_lookup+0x21f/0x2c0 [ 283.366072][ T8369] genl_rcv_msg+0x470/0x800 [ 283.366122][ T8369] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.366166][ T8369] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.366206][ T8369] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 283.366236][ T8369] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 283.366264][ T8369] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 283.366308][ T8369] netlink_rcv_skb+0x165/0x410 [ 283.366349][ T8369] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.366396][ T8369] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.366452][ T8369] ? down_read+0xc9/0x330 [ 283.366478][ T8369] ? __pfx_down_read+0x10/0x10 [ 283.366507][ T8369] ? netlink_deliver_tap+0x1ae/0xca0 [ 283.366557][ T8369] genl_rcv+0x28/0x40 [ 283.366597][ T8369] netlink_unicast+0x53c/0x7f0 [ 283.366642][ T8369] ? __pfx_netlink_unicast+0x10/0x10 [ 283.366684][ T8369] ? __phys_addr_symbol+0x30/0x80 [ 283.366748][ T8369] ? __check_object_size+0x488/0x710 [ 283.366793][ T8369] netlink_sendmsg+0x8b8/0xd70 [ 283.366844][ T8369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.366903][ T8369] ____sys_sendmsg+0x9ae/0xb40 [ 283.366944][ T8369] ? copy_msghdr_from_user+0x10b/0x160 [ 283.366974][ T8369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.367054][ T8369] ___sys_sendmsg+0x135/0x1e0 [ 283.367088][ T8369] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.367137][ T8369] ? __pfx_lock_release+0x10/0x10 [ 283.367176][ T8369] ? trace_lock_acquire+0x14e/0x1f0 [ 283.367220][ T8369] ? __fget_files+0x206/0x3a0 [ 283.367264][ T8369] __sys_sendmsg+0x16e/0x220 [ 283.367297][ T8369] ? __pfx___sys_sendmsg+0x10/0x10 [ 283.367356][ T8369] do_syscall_64+0xcd/0x250 [ 283.367408][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.367452][ T8369] RIP: 0033:0x7f341fd8cda9 [ 283.367475][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.367504][ T8369] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.367540][ T8369] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 283.367560][ T8369] RDX: 0000000000048000 RSI: 0000000020000000 RDI: 0000000000000003 [ 283.367578][ T8369] RBP: 00007f3420b88090 R08: 0000000000000000 R09: 0000000000000000 [ 283.367596][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.367613][ T8369] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 283.367653][ T8369] [ 285.495033][ T8394] cougar: G6 mapped to space [ 286.701122][ T8416] FAULT_INJECTION: forcing a failure. [ 286.701122][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 286.759434][ T8416] CPU: 0 UID: 0 PID: 8416 Comm: syz.0.628 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 286.759481][ T8416] Tainted: [U]=USER [ 286.759490][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 286.759507][ T8416] Call Trace: [ 286.759515][ T8416] [ 286.759526][ T8416] dump_stack_lvl+0x16c/0x1f0 [ 286.759578][ T8416] should_fail_ex+0x50a/0x650 [ 286.759613][ T8416] ? fs_reclaim_acquire+0xae/0x150 [ 286.759663][ T8416] ? genl_start+0x1e7/0x960 [ 286.759706][ T8416] should_failslab+0xc2/0x120 [ 286.759743][ T8416] __kmalloc_cache_noprof+0x68/0x420 [ 286.759774][ T8416] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 286.759825][ T8416] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 286.759885][ T8416] genl_start+0x1e7/0x960 [ 286.759938][ T8416] __netlink_dump_start+0x615/0x980 [ 286.759987][ T8416] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 286.760042][ T8416] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 286.760103][ T8416] ? __pfx_genl_get_cmd+0x10/0x10 [ 286.760146][ T8416] ? __pfx_genl_start+0x10/0x10 [ 286.760207][ T8416] ? __pfx_genl_dumpit+0x10/0x10 [ 286.760262][ T8416] ? __pfx_genl_done+0x10/0x10 [ 286.760316][ T8416] ? __radix_tree_lookup+0x21f/0x2c0 [ 286.760369][ T8416] genl_rcv_msg+0x470/0x800 [ 286.760425][ T8416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.760475][ T8416] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 286.760508][ T8416] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 286.760540][ T8416] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 286.760588][ T8416] netlink_rcv_skb+0x165/0x410 [ 286.760633][ T8416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.760686][ T8416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.760748][ T8416] ? down_read+0xc9/0x330 [ 286.760777][ T8416] ? __pfx_down_read+0x10/0x10 [ 286.760809][ T8416] ? netlink_deliver_tap+0x1ae/0xca0 [ 286.760858][ T8416] genl_rcv+0x28/0x40 [ 286.760903][ T8416] netlink_unicast+0x53c/0x7f0 [ 286.760952][ T8416] ? __pfx_netlink_unicast+0x10/0x10 [ 286.760999][ T8416] ? __phys_addr_symbol+0x30/0x80 [ 286.761049][ T8416] ? __check_object_size+0x488/0x710 [ 286.761096][ T8416] netlink_sendmsg+0x8b8/0xd70 [ 286.761148][ T8416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.761216][ T8416] ____sys_sendmsg+0x9ae/0xb40 [ 286.761260][ T8416] ? copy_msghdr_from_user+0x10b/0x160 [ 286.761291][ T8416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.761351][ T8416] ___sys_sendmsg+0x135/0x1e0 [ 286.761385][ T8416] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.761432][ T8416] ? __pfx_lock_release+0x10/0x10 [ 286.761471][ T8416] ? trace_lock_acquire+0x14e/0x1f0 [ 286.761514][ T8416] ? __fget_files+0x206/0x3a0 [ 286.761559][ T8416] __sys_sendmsg+0x16e/0x220 [ 286.761603][ T8416] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.761660][ T8416] do_syscall_64+0xcd/0x250 [ 286.761713][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.761756][ T8416] RIP: 0033:0x7f4a4c58cda9 [ 286.761780][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.761808][ T8416] RSP: 002b:00007f4a4d3f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.761835][ T8416] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58cda9 [ 286.761854][ T8416] RDX: 0000000000048000 RSI: 0000000020000000 RDI: 0000000000000003 [ 286.761872][ T8416] RBP: 00007f4a4d3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 286.761890][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.761907][ T8416] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 286.761945][ T8416] [ 289.358521][ T8469] FAULT_INJECTION: forcing a failure. [ 289.358521][ T8469] name failslab, interval 1, probability 0, space 0, times 0 [ 289.507735][ T8469] CPU: 1 UID: 0 PID: 8469 Comm: syz.1.641 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 289.507784][ T8469] Tainted: [U]=USER [ 289.507793][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 289.507811][ T8469] Call Trace: [ 289.507819][ T8469] [ 289.507831][ T8469] dump_stack_lvl+0x16c/0x1f0 [ 289.507884][ T8469] should_fail_ex+0x50a/0x650 [ 289.507921][ T8469] ? fs_reclaim_acquire+0xae/0x150 [ 289.507975][ T8469] ? ethnl_tsinfo_start+0x95/0x3a0 [ 289.508008][ T8469] should_failslab+0xc2/0x120 [ 289.508048][ T8469] __kmalloc_cache_noprof+0x68/0x420 [ 289.508089][ T8469] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 289.508124][ T8469] ethnl_tsinfo_start+0x95/0x3a0 [ 289.508156][ T8469] ? kasan_save_track+0x14/0x30 [ 289.508193][ T8469] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 289.508226][ T8469] genl_start+0x5fa/0x960 [ 289.508281][ T8469] __netlink_dump_start+0x615/0x980 [ 289.508331][ T8469] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 289.508386][ T8469] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 289.508449][ T8469] ? __pfx_genl_get_cmd+0x10/0x10 [ 289.508493][ T8469] ? __pfx_genl_start+0x10/0x10 [ 289.508543][ T8469] ? __pfx_genl_dumpit+0x10/0x10 [ 289.508588][ T8469] ? __pfx_genl_done+0x10/0x10 [ 289.508642][ T8469] ? __radix_tree_lookup+0x21f/0x2c0 [ 289.508692][ T8469] genl_rcv_msg+0x470/0x800 [ 289.508755][ T8469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.508806][ T8469] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 289.508838][ T8469] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 289.508871][ T8469] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 289.508921][ T8469] netlink_rcv_skb+0x165/0x410 [ 289.508966][ T8469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.509019][ T8469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.509093][ T8469] ? down_read+0xc9/0x330 [ 289.509121][ T8469] ? __pfx_down_read+0x10/0x10 [ 289.509151][ T8469] ? netlink_deliver_tap+0x1ae/0xca0 [ 289.509197][ T8469] genl_rcv+0x28/0x40 [ 289.509239][ T8469] netlink_unicast+0x53c/0x7f0 [ 289.509286][ T8469] ? __pfx_netlink_unicast+0x10/0x10 [ 289.509331][ T8469] ? __phys_addr_symbol+0x30/0x80 [ 289.509381][ T8469] ? __check_object_size+0x488/0x710 [ 289.509426][ T8469] netlink_sendmsg+0x8b8/0xd70 [ 289.509477][ T8469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.509536][ T8469] ____sys_sendmsg+0x9ae/0xb40 [ 289.509577][ T8469] ? copy_msghdr_from_user+0x10b/0x160 [ 289.509607][ T8469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.509668][ T8469] ___sys_sendmsg+0x135/0x1e0 [ 289.509701][ T8469] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.509754][ T8469] ? __pfx_lock_release+0x10/0x10 [ 289.509789][ T8469] ? trace_lock_acquire+0x14e/0x1f0 [ 289.509832][ T8469] ? __fget_files+0x206/0x3a0 [ 289.509874][ T8469] __sys_sendmsg+0x16e/0x220 [ 289.509905][ T8469] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.509962][ T8469] do_syscall_64+0xcd/0x250 [ 289.510012][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.510055][ T8469] RIP: 0033:0x7f5a9438cda9 [ 289.510077][ T8469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.510105][ T8469] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.510132][ T8469] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 289.510150][ T8469] RDX: 0000000000048000 RSI: 0000000020000000 RDI: 0000000000000003 [ 289.510167][ T8469] RBP: 00007f5a95142090 R08: 0000000000000000 R09: 0000000000000000 [ 289.510183][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.510199][ T8469] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 289.510237][ T8469] [ 289.903399][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.122399][ T8497] 0x000000004cc1-0x000000004cc2 : "" [ 291.131877][ T8497] ftl_cs: FTL header corrupt! [ 291.935539][ T8505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.948801][ T8505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.988239][ T8505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.020147][ T8505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.944286][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.024296][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.031059][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.034265][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.309736][ T8545] FAULT_INJECTION: forcing a failure. [ 296.309736][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 296.384331][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.1.658 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 296.384381][ T8545] Tainted: [U]=USER [ 296.384392][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 296.384409][ T8545] Call Trace: [ 296.384422][ T8545] [ 296.384435][ T8545] dump_stack_lvl+0x16c/0x1f0 [ 296.384492][ T8545] should_fail_ex+0x50a/0x650 [ 296.384531][ T8545] ? fs_reclaim_acquire+0xae/0x150 [ 296.384586][ T8545] should_failslab+0xc2/0x120 [ 296.384627][ T8545] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 296.384665][ T8545] ? lock_acquire+0x2f/0xb0 [ 296.384701][ T8545] ? __proc_create+0xa4/0x8b0 [ 296.384735][ T8545] ? __proc_create+0x2c3/0x8b0 [ 296.384777][ T8545] __proc_create+0x2c3/0x8b0 [ 296.384814][ T8545] ? __pfx___proc_create+0x10/0x10 [ 296.384852][ T8545] ? lock_acquire+0x2f/0xb0 [ 296.384901][ T8545] proc_create_reg+0x7d/0x180 [ 296.384942][ T8545] proc_create_net_data+0x8f/0x1b0 [ 296.384982][ T8545] ? __pfx_proc_create_net_data+0x10/0x10 [ 296.385023][ T8545] ? __pfx_uevent_net_rcv+0x10/0x10 [ 296.385063][ T8545] ? __pfx_dev_proc_net_init+0x10/0x10 [ 296.385105][ T8545] wext_proc_init+0x53/0x70 [ 296.385138][ T8545] dev_proc_net_init+0x10b/0x220 [ 296.385187][ T8545] ops_init+0x1df/0x5f0 [ 296.385228][ T8545] setup_net+0x21f/0x860 [ 296.385267][ T8545] ? __pfx_setup_net+0x10/0x10 [ 296.385299][ T8545] ? down_read_killable+0xcc/0x380 [ 296.385332][ T8545] ? __pfx_down_read_killable+0x10/0x10 [ 296.385369][ T8545] ? debug_mutex_init+0x37/0x70 [ 296.385423][ T8545] copy_net_ns+0x2b4/0x6c0 [ 296.385464][ T8545] create_new_namespaces+0x3ea/0xad0 [ 296.385520][ T8545] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 296.385572][ T8545] ksys_unshare+0x45d/0xa40 [ 296.385625][ T8545] ? __pfx_ksys_unshare+0x10/0x10 [ 296.385675][ T8545] ? xfd_validate_state+0x5d/0x180 [ 296.385732][ T8545] __x64_sys_unshare+0x31/0x40 [ 296.385783][ T8545] do_syscall_64+0xcd/0x250 [ 296.385837][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.385883][ T8545] RIP: 0033:0x7f5a9438cda9 [ 296.385908][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.385939][ T8545] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 296.385969][ T8545] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 296.385989][ T8545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 296.386007][ T8545] RBP: 00007f5a9440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 296.386025][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.386042][ T8545] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 296.386081][ T8545] [ 299.145692][ T8585] FAULT_INJECTION: forcing a failure. [ 299.145692][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 299.330065][ T8585] CPU: 1 UID: 0 PID: 8585 Comm: syz.2.663 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 299.330112][ T8585] Tainted: [U]=USER [ 299.330122][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 299.330146][ T8585] Call Trace: [ 299.330154][ T8585] [ 299.330166][ T8585] dump_stack_lvl+0x16c/0x1f0 [ 299.330218][ T8585] should_fail_ex+0x50a/0x650 [ 299.330255][ T8585] ? fs_reclaim_acquire+0xae/0x150 [ 299.330311][ T8585] should_failslab+0xc2/0x120 [ 299.330351][ T8585] __kmalloc_noprof+0xce/0x4f0 [ 299.330387][ T8585] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 299.330424][ T8585] ? tomoyo_realpath_from_path+0xbf/0x710 [ 299.330469][ T8585] tomoyo_realpath_from_path+0xbf/0x710 [ 299.330511][ T8585] ? tomoyo_path_number_perm+0x235/0x5b0 [ 299.330546][ T8585] tomoyo_path_number_perm+0x248/0x5b0 [ 299.330574][ T8585] ? tomoyo_path_number_perm+0x235/0x5b0 [ 299.330608][ T8585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.330675][ T8585] ? __pfx_lock_release+0x10/0x10 [ 299.330712][ T8585] ? trace_lock_acquire+0x14e/0x1f0 [ 299.330746][ T8585] ? lock_acquire+0x2f/0xb0 [ 299.330781][ T8585] ? __fget_files+0x40/0x3a0 [ 299.330819][ T8585] ? __fget_files+0x206/0x3a0 [ 299.330858][ T8585] security_file_ioctl+0x9b/0x240 [ 299.330893][ T8585] __x64_sys_ioctl+0xb7/0x200 [ 299.330943][ T8585] do_syscall_64+0xcd/0x250 [ 299.330996][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.331046][ T8585] RIP: 0033:0x7f8718b8cda9 [ 299.331070][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.331101][ T8585] RSP: 002b:00007f87169f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.331129][ T8585] RAX: ffffffffffffffda RBX: 00007f8718da6080 RCX: 00007f8718b8cda9 [ 299.331157][ T8585] RDX: 0000000000000008 RSI: 0000000000001269 RDI: 0000000000000003 [ 299.331175][ T8585] RBP: 00007f87169f6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.331194][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.331212][ T8585] R13: 0000000000000000 R14: 00007f8718da6080 R15: 00007ffc1ece6bc8 [ 299.331251][ T8585] [ 299.444564][ T8585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.797642][ T8593] Process accounting resumed [ 299.931003][ T8593] Process accounting resumed [ 299.987638][ T8593] Process accounting resumed [ 300.069189][ T8593] Process accounting resumed [ 300.091499][ T8593] Process accounting resumed [ 300.100101][ T8593] Process accounting resumed [ 300.716257][ T8594] Process accounting resumed [ 301.524915][ T8587] usb usb15: usbfs: process 8587 (syz.0.666) did not claim interface 0 before use [ 301.567300][ T8608] delete_channel: no stack [ 302.914343][ T8617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.921095][ T8617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.070823][ T8617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.144752][ T8617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.704449][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.237243][ T8652] 0x000000004a56-0x000000004a57 : "" [ 304.268145][ T8652] ftl_cs: FTL header corrupt! [ 304.690022][ T8655] net_ratelimit: 1 callbacks suppressed [ 304.690050][ T8655] openvswitch: netlink: Multiple metadata blocks provided [ 304.984678][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 305.144410][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 305.224365][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.154818][ T8531] Process accounting resumed [ 307.269174][ T8687] svc: failed to register nfsdv3 RPC service (errno 111). [ 307.344631][ T8687] svc: failed to register nfsaclv3 RPC service (errno 111). [ 322.593221][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.604776][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.330576][ T8927] netlink: 252 bytes leftover after parsing attributes in process `syz.1.739'. [ 327.382289][ T8927] netlink: 252 bytes leftover after parsing attributes in process `syz.1.739'. [ 327.697778][ T8932] vivid-003: ================= START STATUS ================= [ 327.818756][ T8932] vivid-003: Radio HW Seek Mode: Bounded [ 327.899300][ T8932] vivid-003: Radio Programmable HW Seek: false [ 327.974275][ T8932] vivid-003: RDS Rx I/O Mode: Block I/O [ 327.980470][ T8932] vivid-003: Generate RBDS Instead of RDS: false [ 328.124275][ T8932] vivid-003: RDS Reception: true [ 328.224395][ T8932] vivid-003: RDS Program Type: 0 inactive [ 328.230806][ T8932] vivid-003: RDS PS Name: inactive [ 328.324306][ T8932] vivid-003: RDS Radio Text: inactive [ 328.412286][ T8932] vivid-003: RDS Traffic Announcement: false inactive [ 328.494322][ T8932] vivid-003: RDS Traffic Program: false inactive [ 328.501562][ T8932] vivid-003: RDS Music: false inactive [ 328.542568][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.742'. [ 328.641297][ T8932] vivid-003: ================== END STATUS ================== [ 328.676705][ T8940] Process accounting resumed [ 328.745127][ T8940] Process accounting resumed [ 328.851147][ T8943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 328.915195][ T8943] netlink: 'syz.2.744': attribute type 1 has an invalid length. [ 330.759899][ T8852] Process accounting paused [ 332.457162][ T8977] Invalid ELF header magic: != ELF [ 337.341834][ T8869] Process accounting paused [ 337.712935][ T9029] 0x000000005516-0x000000005517 : "" [ 337.797979][ T9029] ftl_cs: FTL header corrupt! [ 338.846034][ T9043] 0x00000000555d-0x00000000555e : "" [ 338.916314][ T9043] ftl_cs: FTL header corrupt! [ 341.345447][ T9072] 0x000000005203-0x000000005204 : "" [ 341.368709][ T9072] ftl_cs: FTL header corrupt! [ 345.148220][ T9114] 0x0000000055a1-0x0000000055a2 : "" [ 345.194909][ T9114] ftl_cs: FTL header corrupt! [ 345.343212][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'. [ 346.968526][ T9131] Process accounting resumed [ 348.208070][ T8986] Process accounting resumed [ 348.243498][ T9136] kAFS: bad VL server IP address [ 348.478811][ T9117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.686347][ T9117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.900810][ T9117] bond0 (unregistering): Released all slaves [ 351.492145][ T9158] could not allocate digest TFM handle [ 351.994373][ T9161] could not allocate digest TFM handle [ 356.220329][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 360.913228][ T9254] 0x000000005370-0x000000005371 : "" [ 361.146639][ T9254] ftl_cs: FTL header corrupt! [ 361.812258][ T9254] Process accounting resumed [ 362.186490][ T9269] netlink: 342 bytes leftover after parsing attributes in process `syz.3.818'. [ 362.196575][ T9272] netlink: 342 bytes leftover after parsing attributes in process `syz.3.818'. [ 365.324998][ T9301] warning: `syz.1.821' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 366.068350][ T9316] FAULT_INJECTION: forcing a failure. [ 366.068350][ T9316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 366.169498][ T9313] cougar: G6 mapped to F18 [ 366.188339][ T9316] CPU: 0 UID: 0 PID: 9316 Comm: syz.1.826 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 366.188399][ T9316] Tainted: [U]=USER [ 366.188410][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.188428][ T9316] Call Trace: [ 366.188437][ T9316] [ 366.188449][ T9316] dump_stack_lvl+0x16c/0x1f0 [ 366.188502][ T9316] should_fail_ex+0x50a/0x650 [ 366.188537][ T9316] ? __pfx___might_resched+0x10/0x10 [ 366.188582][ T9316] should_fail_alloc_page+0xe7/0x130 [ 366.188623][ T9316] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 366.188681][ T9316] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 366.188721][ T9316] ? hlock_class+0x4e/0x130 [ 366.188765][ T9316] ? mark_lock+0xb5/0xc60 [ 366.188801][ T9316] ? __pfx_mark_lock+0x10/0x10 [ 366.188838][ T9316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 366.188876][ T9316] ? hlock_class+0x4e/0x130 [ 366.188917][ T9316] ? mark_lock+0xb5/0xc60 [ 366.188950][ T9316] ? hlock_class+0x4e/0x130 [ 366.189003][ T9316] ? hlock_class+0x4e/0x130 [ 366.189047][ T9316] ? __lock_acquire+0xcc5/0x3c40 [ 366.189083][ T9316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 366.189126][ T9316] ? policy_nodemask+0xea/0x4e0 [ 366.189166][ T9316] alloc_pages_mpol+0x1fc/0x540 [ 366.189205][ T9316] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 366.189252][ T9316] ? __lock_acquire+0x15a9/0x3c40 [ 366.189294][ T9316] folio_alloc_mpol_noprof+0x36/0x2f0 [ 366.189339][ T9316] vma_alloc_folio_noprof+0xee/0x1b0 [ 366.189401][ T9316] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 366.189450][ T9316] ? find_held_lock+0x2d/0x110 [ 366.189510][ T9316] do_pte_missing+0x202f/0x3e10 [ 366.189563][ T9316] __handle_mm_fault+0x1166/0x2c60 [ 366.189612][ T9316] ? __pfx___handle_mm_fault+0x10/0x10 [ 366.189647][ T9316] ? follow_page_pte+0x3ac/0x1490 [ 366.189680][ T9316] ? __pfx_lock_release+0x10/0x10 [ 366.189747][ T9316] handle_mm_fault+0x3fa/0xaa0 [ 366.189790][ T9316] __get_user_pages+0x773/0x36f0 [ 366.189829][ T9316] ? __pfx_mt_find+0x10/0x10 [ 366.189877][ T9316] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 366.189919][ T9316] ? __pfx___get_user_pages+0x10/0x10 [ 366.189962][ T9316] ? __mm_populate+0x21d/0x380 [ 366.190007][ T9316] populate_vma_page_range+0x27f/0x3a0 [ 366.190047][ T9316] ? __pfx_populate_vma_page_range+0x10/0x10 [ 366.190084][ T9316] ? __pfx_find_vma_intersection+0x10/0x10 [ 366.190136][ T9316] ? vm_mmap_pgoff+0x29b/0x3a0 [ 366.190174][ T9316] __mm_populate+0x1d6/0x380 [ 366.190223][ T9316] ? __pfx___mm_populate+0x10/0x10 [ 366.190270][ T9316] ? up_write+0x1b2/0x520 [ 366.190315][ T9316] vm_mmap_pgoff+0x2d3/0x3a0 [ 366.190350][ T9316] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 366.190387][ T9316] ? __x64_sys_futex+0x1e1/0x4c0 [ 366.190416][ T9316] ? __x64_sys_futex+0x1ea/0x4c0 [ 366.190453][ T9316] ksys_mmap_pgoff+0x7d/0x5c0 [ 366.190503][ T9316] ? rcu_is_watching+0x12/0xc0 [ 366.190556][ T9316] __x64_sys_mmap+0x125/0x190 [ 366.190604][ T9316] do_syscall_64+0xcd/0x250 [ 366.190666][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.190706][ T9316] RIP: 0033:0x7f5a9438cda9 [ 366.190730][ T9316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.190757][ T9316] RSP: 002b:00007f5a95142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 366.190783][ T9316] RAX: ffffffffffffffda RBX: 00007f5a945a5fa0 RCX: 00007f5a9438cda9 [ 366.190801][ T9316] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 366.190817][ T9316] RBP: 00007f5a9440e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 366.190834][ T9316] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 366.190851][ T9316] R13: 0000000000000000 R14: 00007f5a945a5fa0 R15: 00007fff1952cea8 [ 366.190887][ T9316] [ 366.595933][ T9319] tty tty12: ldisc open failed (-12), clearing slot 11 [ 367.185833][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 367.227891][ T9328] netlink: 'syz.2.829': attribute type 5 has an invalid length. [ 367.249558][ T9328] netlink: 314 bytes leftover after parsing attributes in process `syz.2.829'. [ 367.295857][ T9333] [U] [ 367.298910][ T9333] [U] [ 367.301936][ T9333] [U] [ 367.304952][ T9333] [U] [ 367.320907][ T9333] [U] [ 367.323954][ T9333] [U] [ 367.326947][ T9333] [U] [ 367.329932][ T9333] [U] [ 367.334290][ T9331] FAULT_INJECTION: forcing a failure. [ 367.334290][ T9331] name failslab, interval 1, probability 0, space 0, times 0 [ 367.348795][ T9331] CPU: 1 UID: 0 PID: 9331 Comm: syz.3.832 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 367.348844][ T9331] Tainted: [U]=USER [ 367.348854][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 367.348873][ T9331] Call Trace: [ 367.348881][ T9331] [ 367.348893][ T9331] dump_stack_lvl+0x16c/0x1f0 [ 367.348949][ T9331] should_fail_ex+0x50a/0x650 [ 367.348986][ T9331] ? fs_reclaim_acquire+0xae/0x150 [ 367.349044][ T9331] should_failslab+0xc2/0x120 [ 367.349085][ T9331] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 367.349126][ T9331] ? __kernfs_new_node+0xd3/0x890 [ 367.349184][ T9331] __kernfs_new_node+0xd3/0x890 [ 367.349241][ T9331] ? __pfx___kernfs_new_node+0x10/0x10 [ 367.349311][ T9331] ? __pfx_lock_release+0x10/0x10 [ 367.349353][ T9331] ? kernfs_add_one+0x39d/0x520 [ 367.349413][ T9331] ? up_write+0x1b2/0x520 [ 367.349466][ T9331] kernfs_new_node+0x186/0x240 [ 367.349512][ T9331] __kernfs_create_file+0x53/0x350 [ 367.349563][ T9331] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 367.349627][ T9331] internal_create_group+0x56c/0xf10 [ 367.349696][ T9331] ? __pfx_internal_create_group+0x10/0x10 [ 367.349762][ T9331] ? kernfs_create_link+0x1bd/0x240 [ 367.349815][ T9331] internal_create_groups+0x9d/0x150 [ 367.349871][ T9331] device_add+0x6d3/0x1a70 [ 367.349922][ T9331] ? __pfx_device_add+0x10/0x10 [ 367.349971][ T9331] ? __init_waitqueue_head+0xca/0x150 [ 367.350036][ T9331] netdev_register_kobject+0x183/0x3a0 [ 367.350079][ T9331] register_netdevice+0x147b/0x1e50 [ 367.350123][ T9331] ? __pfx_register_netdevice+0x10/0x10 [ 367.350160][ T9331] ? alloc_netdev_mqs+0x1038/0x13e0 [ 367.350202][ T9331] internal_dev_create+0x2d3/0x520 [ 367.350257][ T9331] ovs_vport_add+0x144/0x4e0 [ 367.350310][ T9331] new_vport+0x16/0x1d0 [ 367.350350][ T9331] ovs_dp_cmd_new+0x6b0/0xe50 [ 367.350410][ T9331] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 367.350462][ T9331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 367.350537][ T9331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 367.350603][ T9331] genl_family_rcv_msg_doit+0x202/0x2f0 [ 367.350658][ T9331] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 367.350713][ T9331] ? trace_cap_capable+0x1a2/0x210 [ 367.350773][ T9331] ? bpf_lsm_capable+0x9/0x10 [ 367.350821][ T9331] ? security_capable+0x7e/0x260 [ 367.350872][ T9331] ? ns_capable+0xd7/0x110 [ 367.350916][ T9331] genl_rcv_msg+0x565/0x800 [ 367.350975][ T9331] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.351029][ T9331] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 367.351118][ T9331] netlink_rcv_skb+0x165/0x410 [ 367.351166][ T9331] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.351224][ T9331] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.351289][ T9331] ? down_read+0xc9/0x330 [ 367.351323][ T9331] ? __pfx_down_read+0x10/0x10 [ 367.351356][ T9331] ? netlink_deliver_tap+0x1ae/0xca0 [ 367.351416][ T9331] genl_rcv+0x28/0x40 [ 367.351461][ T9331] netlink_unicast+0x53c/0x7f0 [ 367.351516][ T9331] ? __pfx_netlink_unicast+0x10/0x10 [ 367.351564][ T9331] ? __phys_addr_symbol+0x30/0x80 [ 367.351620][ T9331] ? __check_object_size+0x488/0x710 [ 367.351669][ T9331] netlink_sendmsg+0x8b8/0xd70 [ 367.351727][ T9331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.351793][ T9331] ____sys_sendmsg+0x9ae/0xb40 [ 367.351837][ T9331] ? copy_msghdr_from_user+0x10b/0x160 [ 367.351870][ T9331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.351934][ T9331] ___sys_sendmsg+0x135/0x1e0 [ 367.351969][ T9331] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.352023][ T9331] ? __pfx_lock_release+0x10/0x10 [ 367.352062][ T9331] ? trace_lock_acquire+0x14e/0x1f0 [ 367.352111][ T9331] ? __fget_files+0x206/0x3a0 [ 367.352158][ T9331] __sys_sendmsg+0x16e/0x220 [ 367.352192][ T9331] ? __pfx___sys_sendmsg+0x10/0x10 [ 367.352228][ T9331] ? __x64_sys_futex+0x1e1/0x4c0 [ 367.352287][ T9331] do_syscall_64+0xcd/0x250 [ 367.352345][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.352399][ T9331] RIP: 0033:0x7f341fd8cda9 [ 367.352429][ T9331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.352460][ T9331] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.352491][ T9331] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 367.352512][ T9331] RDX: 0000000002000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 367.352530][ T9331] RBP: 00007f341fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 367.352549][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.352571][ T9331] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 367.352612][ T9331] [ 367.860485][ T9333] [U] [ 367.863542][ T9333] [U] [ 367.866561][ T9333] [U] [ 367.869580][ T9333] [U] [ 368.047558][ T9333] [U] [ 368.050617][ T9333] [U] [ 368.053630][ T9333] [U] [ 368.056643][ T9333] [U] [ 368.155365][ T9337] netlink: 252 bytes leftover after parsing attributes in process `syz.0.831'. [ 368.222220][ T9333] [U] [ 368.225274][ T9333] [U] [ 368.228307][ T9333] [U] [ 368.281135][ T9340] netlink: 252 bytes leftover after parsing attributes in process `syz.0.831'. [ 368.400219][ T9332] [U] [ 369.923869][ T9368] 0x000000005c6b-0x000000005c6c : "" [ 369.944662][ T9368] ftl_cs: FTL header corrupt! [ 372.215902][ T9414] netlink: 342 bytes leftover after parsing attributes in process `syz.1.849'. [ 372.275810][ T9415] netlink: 342 bytes leftover after parsing attributes in process `syz.1.849'. [ 373.089384][ T9427] 0x100000000000058-0x1900000000000058 : "ÿÿ" [ 373.114252][ T9427] mtd: partition "ÿÿ" is out of reach -- disabled [ 373.136377][ T9427] ftl_cs: FTL header not found. [ 375.178207][ T29] audit: type=1807 audit(6033290385.020:7): UNKNOWN=§Ö res=0 [ 375.204208][ T29] audit: type=1802 audit(6033290385.020:8): pid=9461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.858" res=0 errno=0 [ 376.433077][ T9482] 0x10000000000005d-0x190000000000005d : "ff" [ 376.462463][ T9482] mtd: partition "ff" is out of reach -- disabled [ 376.488179][ T9482] ftl_cs: FTL header not found. [ 376.644485][ T9464] ima: policy update failed [ 376.649647][ T29] audit: type=1802 audit(6033290386.490:9): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.858" res=0 errno=0 [ 376.705065][ T29] audit: type=1800 audit(6033290386.540:10): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.867" name="file0" dev="tmpfs" ino=1126 res=0 errno=0 [ 376.871971][ T9480] 0x10000000000005d-0x190000000000005d : "ÿÿ" [ 376.898570][ T9480] mtd: partition "ÿÿ" is out of reach -- disabled [ 376.983598][ T9480] ftl_cs: FTL header not found. [ 379.484712][ T9529] cougar: G6 mapped to space [ 379.619578][ T9508] Process accounting paused [ 379.732888][ T9527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.749004][ T9529] netlink: 342 bytes leftover after parsing attributes in process `syz.2.873'. [ 379.763386][ T9527] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.784440][ T9527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.791413][ T9527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.918226][ T9528] ima: policy update failed [ 379.923383][ T29] audit: type=1802 audit(6033290389.760:11): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.873" res=0 errno=0 [ 380.537222][ T9543] usb usb32: usbfs: process 9543 (syz.2.875) did not claim interface 0 before use [ 380.954891][ T9550] 0x000000006659-0x00000000665a : "" [ 381.059779][ T9550] ftl_cs: FTL header corrupt! [ 381.506652][ T9557] FAULT_INJECTION: forcing a failure. [ 381.506652][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 381.538826][ T9557] CPU: 0 UID: 0 PID: 9557 Comm: syz.0.878 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 381.538876][ T9557] Tainted: [U]=USER [ 381.538886][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 381.538903][ T9557] Call Trace: [ 381.538912][ T9557] [ 381.538923][ T9557] dump_stack_lvl+0x16c/0x1f0 [ 381.538976][ T9557] should_fail_ex+0x50a/0x650 [ 381.539012][ T9557] ? fs_reclaim_acquire+0xae/0x150 [ 381.539069][ T9557] should_failslab+0xc2/0x120 [ 381.539108][ T9557] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 381.539153][ T9557] ? allocate_partition+0x1b8/0x1b40 [ 381.539216][ T9557] kstrdup+0x42/0xb0 [ 381.539263][ T9557] allocate_partition+0x1b8/0x1b40 [ 381.539328][ T9557] mtd_add_partition+0x1b6/0x650 [ 381.539383][ T9557] ? __pfx_mtd_add_partition+0x10/0x10 [ 381.539453][ T9557] mtdchar_blkpg_ioctl+0x20d/0x250 [ 381.539488][ T9557] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 381.539535][ T9557] ? __might_fault+0xe3/0x190 [ 381.539579][ T9557] ? __might_fault+0xe3/0x190 [ 381.539631][ T9557] mtdchar_ioctl+0xbbe/0x2050 [ 381.539701][ T9557] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 381.539737][ T9557] ? __mutex_trylock_common+0xea/0x250 [ 381.539780][ T9557] ? __pfx___mutex_trylock_common+0x10/0x10 [ 381.539835][ T9557] ? __mutex_lock+0x1cc/0xb10 [ 381.539889][ T9557] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 381.539924][ T9557] ? __pfx___mutex_lock+0x10/0x10 [ 381.539971][ T9557] ? __pfx_lock_release+0x10/0x10 [ 381.540044][ T9557] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 381.540089][ T9557] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 381.540128][ T9557] __x64_sys_ioctl+0x190/0x200 [ 381.540177][ T9557] do_syscall_64+0xcd/0x250 [ 381.540240][ T9557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.540284][ T9557] RIP: 0033:0x7f4a4c58cda9 [ 381.540311][ T9557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.540340][ T9557] RSP: 002b:00007f4a4d3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.540367][ T9557] RAX: ffffffffffffffda RBX: 00007f4a4c7a5fa0 RCX: 00007f4a4c58cda9 [ 381.540390][ T9557] RDX: 0000000000000008 RSI: 0000000000001269 RDI: 0000000000000003 [ 381.540407][ T9557] RBP: 00007f4a4d3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 381.540443][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.540461][ T9557] R13: 0000000000000000 R14: 00007f4a4c7a5fa0 R15: 00007ffc68a0ad28 [ 381.540504][ T9557] [ 381.540516][ T9557] memory allocation error while creating partitions for "mtdram test device" [ 381.784415][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 381.817416][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 381.864385][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 381.864530][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 383.174270][ T9573] syz.0.883 uses obsolete (PF_INET,SOCK_PACKET) [ 383.585553][ T9574] 0x100000000000066-0x1900000000000066 : "" [ 383.592115][ T9574] mtd: partition "" is out of reach -- disabled [ 383.703760][ T9574] ftl_cs: FTL header not found. [ 384.053690][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.060759][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.066510][ T9597] FAULT_INJECTION: forcing a failure. [ 386.066510][ T9597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.132826][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: syz.2.888 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 386.132875][ T9597] Tainted: [U]=USER [ 386.132890][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 386.132908][ T9597] Call Trace: [ 386.132916][ T9597] [ 386.132928][ T9597] dump_stack_lvl+0x16c/0x1f0 [ 386.132981][ T9597] should_fail_ex+0x50a/0x650 [ 386.133029][ T9597] _copy_to_user+0x32/0xd0 [ 386.133080][ T9597] simple_read_from_buffer+0xd0/0x160 [ 386.133135][ T9597] proc_fail_nth_read+0x198/0x270 [ 386.133183][ T9597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.133232][ T9597] ? rw_verify_area+0xcf/0x680 [ 386.133283][ T9597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.133334][ T9597] vfs_read+0x1df/0xbf0 [ 386.133365][ T9597] ? __fget_files+0x1fc/0x3a0 [ 386.133399][ T9597] ? __pfx___mutex_lock+0x10/0x10 [ 386.133454][ T9597] ? __pfx_vfs_read+0x10/0x10 [ 386.133497][ T9597] ? __fget_files+0x206/0x3a0 [ 386.133544][ T9597] ksys_read+0x12b/0x250 [ 386.133587][ T9597] ? __pfx_ksys_read+0x10/0x10 [ 386.133631][ T9597] do_syscall_64+0xcd/0x250 [ 386.133687][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.133732][ T9597] RIP: 0033:0x7f8718b8b7bc [ 386.133755][ T9597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 386.133789][ T9597] RSP: 002b:00007f871990b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.133817][ T9597] RAX: ffffffffffffffda RBX: 00007f8718da5fa0 RCX: 00007f8718b8b7bc [ 386.133838][ T9597] RDX: 000000000000000f RSI: 00007f871990b0a0 RDI: 0000000000000004 [ 386.133855][ T9597] RBP: 00007f871990b090 R08: 0000000000000000 R09: 0000000000000000 [ 386.133878][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.133895][ T9597] R13: 0000000000000000 R14: 00007f8718da5fa0 R15: 00007ffc1ece6bc8 [ 386.133933][ T9597] [ 386.676363][ T9599] 0x00000000671f-0x000000006720 : "" [ 386.682283][ T9599] FAULT_INJECTION: forcing a failure. [ 386.682283][ T9599] name failslab, interval 1, probability 0, space 0, times 0 [ 386.774266][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.3.889 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 386.774312][ T9599] Tainted: [U]=USER [ 386.774322][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 386.774340][ T9599] Call Trace: [ 386.774349][ T9599] [ 386.774359][ T9599] dump_stack_lvl+0x16c/0x1f0 [ 386.774415][ T9599] should_fail_ex+0x50a/0x650 [ 386.774450][ T9599] ? fs_reclaim_acquire+0xae/0x150 [ 386.774502][ T9599] should_failslab+0xc2/0x120 [ 386.774542][ T9599] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 386.774586][ T9599] ? kvasprintf_const+0x66/0x1a0 [ 386.774637][ T9599] kvasprintf+0xbd/0x160 [ 386.774682][ T9599] ? __pfx_kvasprintf+0x10/0x10 [ 386.774733][ T9599] ? idr_alloc_u32+0x210/0x2f0 [ 386.774792][ T9599] kvasprintf_const+0x66/0x1a0 [ 386.774841][ T9599] kobject_set_name_vargs+0x5a/0x140 [ 386.774876][ T9599] dev_set_name+0xc8/0x100 [ 386.774924][ T9599] ? __pfx_dev_set_name+0x10/0x10 [ 386.774975][ T9599] ? idr_alloc+0xde/0x130 [ 386.775017][ T9599] ? __pfx_idr_alloc+0x10/0x10 [ 386.775061][ T9599] ? __mutex_lock+0x1cc/0xb10 [ 386.775112][ T9599] ? add_mtd_device+0x83f/0x1700 [ 386.775161][ T9599] add_mtd_device+0x8fe/0x1700 [ 386.775210][ T9599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 386.775267][ T9599] ? __pfx_add_mtd_device+0x10/0x10 [ 386.775325][ T9599] mtd_add_partition+0x300/0x650 [ 386.775379][ T9599] ? __pfx_mtd_add_partition+0x10/0x10 [ 386.775451][ T9599] mtdchar_blkpg_ioctl+0x20d/0x250 [ 386.775483][ T9599] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 386.775540][ T9599] ? __might_fault+0xe3/0x190 [ 386.775583][ T9599] ? __might_fault+0xe3/0x190 [ 386.775636][ T9599] mtdchar_ioctl+0xbbe/0x2050 [ 386.775676][ T9599] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 386.775715][ T9599] ? __mutex_trylock_common+0xea/0x250 [ 386.775759][ T9599] ? __pfx___mutex_trylock_common+0x10/0x10 [ 386.775822][ T9599] ? __mutex_lock+0x1cc/0xb10 [ 386.775873][ T9599] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 386.775910][ T9599] ? __pfx___mutex_lock+0x10/0x10 [ 386.775958][ T9599] ? __pfx_lock_release+0x10/0x10 [ 386.776021][ T9599] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 386.776054][ T9599] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 386.776091][ T9599] __x64_sys_ioctl+0x190/0x200 [ 386.776143][ T9599] do_syscall_64+0xcd/0x250 [ 386.776197][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.776242][ T9599] RIP: 0033:0x7f341fd8cda9 [ 386.776267][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.776298][ T9599] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.776327][ T9599] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 386.776346][ T9599] RDX: 0000000000000008 RSI: 0000000000001269 RDI: 0000000000000003 [ 386.776364][ T9599] RBP: 00007f3420b88090 R08: 0000000000000000 R09: 0000000000000000 [ 386.776382][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.776399][ T9599] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 386.776438][ T9599] [ 387.120820][ T9599] ------------[ cut here ]------------ [ 387.128796][ T9599] WARNING: CPU: 1 PID: 9599 at drivers/mtd/mtdpart.c:37 release_mtd_partition+0x71/0x90 [ 387.139734][ T9599] Modules linked in: [ 387.144070][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.3.889 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 387.157350][ T9599] Tainted: [U]=USER [ 387.161566][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 387.172735][ T9599] RIP: 0010:release_mtd_partition+0x71/0x90 [ 387.179341][ T9599] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 ef 84 cd fb 48 89 df 5b 5d e9 e5 84 cd fb e8 70 4a 75 fb 90 <0f> 0b 90 eb c2 e8 a5 29 d8 fb eb db 48 89 ef e8 9b 29 d8 fb eb a5 [ 387.201263][ T9599] RSP: 0000:ffffc900187bf828 EFLAGS: 00010293 [ 387.208074][ T9599] RAX: 0000000000000000 RBX: ffff888064d6a000 RCX: ffffffff8b417ab8 [ 387.216933][ T9599] RDX: ffff88807d848000 RSI: ffffffff86439150 RDI: ffff888064d6a000 [ 387.225880][ T9599] RBP: ffff888064d6a648 R08: 0000000000000001 R09: 0000000000000001 [ 387.235261][ T9599] R10: 0000000000000019 R11: ffffffff81000130 R12: 0000000000000000 [ 387.244081][ T9599] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.253171][ T9599] FS: 00007f3420b886c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 387.263088][ T9599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.270446][ T9599] CR2: 0000000003392000 CR3: 0000000030556000 CR4: 00000000003526f0 [ 387.279332][ T9599] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 387.288191][ T9599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 387.297080][ T9599] Call Trace: [ 387.300745][ T9599] [ 387.304007][ T9599] ? __warn+0xea/0x3c0 [ 387.308624][ T9599] ? release_mtd_partition+0x71/0x90 [ 387.314551][ T9599] ? report_bug+0x3c0/0x580 [ 387.319568][ T9599] ? handle_bug+0x54/0xa0 [ 387.324444][ T9599] ? exc_invalid_op+0x17/0x50 [ 387.330068][ T9599] ? asm_exc_invalid_op+0x1a/0x20 [ 387.335731][ T9599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.342507][ T9599] ? delete_node+0x418/0x8e0 [ 387.347691][ T9599] ? release_mtd_partition+0x70/0x90 [ 387.353615][ T9599] ? release_mtd_partition+0x71/0x90 [ 387.359591][ T9599] ? release_mtd_partition+0x70/0x90 [ 387.365519][ T9599] mtd_release+0xa0/0xd0 [ 387.370238][ T9599] ? __pfx_mtd_release+0x10/0x10 [ 387.375788][ T9599] device_release+0xa1/0x240 [ 387.380909][ T9599] kobject_put+0x1e4/0x5a0 [ 387.385908][ T9599] put_device+0x1f/0x30 [ 387.390545][ T9599] add_mtd_device+0xbb3/0x1700 [ 387.395922][ T9599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.402585][ T9599] ? __pfx_add_mtd_device+0x10/0x10 [ 387.408449][ T9599] mtd_add_partition+0x300/0x650 [ 387.413960][ T9599] ? __pfx_mtd_add_partition+0x10/0x10 [ 387.420121][ T9599] mtdchar_blkpg_ioctl+0x20d/0x250 [ 387.425847][ T9599] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 387.432510][ T9599] ? __might_fault+0xe3/0x190 [ 387.437816][ T9599] ? __might_fault+0xe3/0x190 [ 387.443036][ T9599] mtdchar_ioctl+0xbbe/0x2050 [ 387.448323][ T9599] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 387.454007][ T9599] ? __mutex_trylock_common+0xea/0x250 [ 387.460149][ T9599] ? __pfx___mutex_trylock_common+0x10/0x10 [ 387.466751][ T9599] ? __mutex_lock+0x1cc/0xb10 [ 387.471965][ T9599] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 387.478018][ T9599] ? __pfx___mutex_lock+0x10/0x10 [ 387.483627][ T9599] ? __pfx_lock_release+0x10/0x10 [ 387.489334][ T9599] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 387.495417][ T9599] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 387.501968][ T9599] __x64_sys_ioctl+0x190/0x200 [ 387.508322][ T9599] do_syscall_64+0xcd/0x250 [ 387.513353][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.519979][ T9599] RIP: 0033:0x7f341fd8cda9 [ 387.524926][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.546953][ T9599] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.556609][ T9599] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 387.565477][ T9599] RDX: 0000000000000008 RSI: 0000000000001269 RDI: 0000000000000003 [ 387.574395][ T9599] RBP: 00007f3420b88090 R08: 0000000000000000 R09: 0000000000000000 [ 387.583214][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.592078][ T9599] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 387.600959][ T9599] [ 387.604362][ T9599] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 387.612399][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.3.889 Tainted: G U 6.13.0-syzkaller-09734-g2a9f04bde07a #0 [ 387.625325][ T9599] Tainted: [U]=USER [ 387.629516][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 387.640587][ T9599] Call Trace: [ 387.644201][ T9599] [ 387.647435][ T9599] dump_stack_lvl+0x3d/0x1f0 [ 387.652516][ T9599] panic+0x71d/0x800 [ 387.656861][ T9599] ? __pfx_panic+0x10/0x10 [ 387.661732][ T9599] ? show_trace_log_lvl+0x29d/0x3d0 [ 387.667487][ T9599] ? check_panic_on_warn+0x1f/0xb0 [ 387.673126][ T9599] ? release_mtd_partition+0x71/0x90 [ 387.678970][ T9599] check_panic_on_warn+0xab/0xb0 [ 387.684423][ T9599] __warn+0xf6/0x3c0 [ 387.688720][ T9599] ? release_mtd_partition+0x71/0x90 [ 387.694570][ T9599] report_bug+0x3c0/0x580 [ 387.699360][ T9599] handle_bug+0x54/0xa0 [ 387.703944][ T9599] exc_invalid_op+0x17/0x50 [ 387.708907][ T9599] asm_exc_invalid_op+0x1a/0x20 [ 387.714299][ T9599] RIP: 0010:release_mtd_partition+0x71/0x90 [ 387.720805][ T9599] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 ef 84 cd fb 48 89 df 5b 5d e9 e5 84 cd fb e8 70 4a 75 fb 90 <0f> 0b 90 eb c2 e8 a5 29 d8 fb eb db 48 89 ef e8 9b 29 d8 fb eb a5 [ 387.742400][ T9599] RSP: 0000:ffffc900187bf828 EFLAGS: 00010293 [ 387.749086][ T9599] RAX: 0000000000000000 RBX: ffff888064d6a000 RCX: ffffffff8b417ab8 [ 387.757865][ T9599] RDX: ffff88807d848000 RSI: ffffffff86439150 RDI: ffff888064d6a000 [ 387.766643][ T9599] RBP: ffff888064d6a648 R08: 0000000000000001 R09: 0000000000000001 [ 387.775425][ T9599] R10: 0000000000000019 R11: ffffffff81000130 R12: 0000000000000000 [ 387.784204][ T9599] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.792985][ T9599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.799690][ T9599] ? delete_node+0x418/0x8e0 [ 387.804770][ T9599] ? release_mtd_partition+0x70/0x90 [ 387.810614][ T9599] ? release_mtd_partition+0x70/0x90 [ 387.816464][ T9599] mtd_release+0xa0/0xd0 [ 387.821147][ T9599] ? __pfx_mtd_release+0x10/0x10 [ 387.826592][ T9599] device_release+0xa1/0x240 [ 387.831678][ T9599] kobject_put+0x1e4/0x5a0 [ 387.836557][ T9599] put_device+0x1f/0x30 [ 387.841182][ T9599] add_mtd_device+0xbb3/0x1700 [ 387.846456][ T9599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.853067][ T9599] ? __pfx_add_mtd_device+0x10/0x10 [ 387.858825][ T9599] mtd_add_partition+0x300/0x650 [ 387.864295][ T9599] ? __pfx_mtd_add_partition+0x10/0x10 [ 387.870354][ T9599] mtdchar_blkpg_ioctl+0x20d/0x250 [ 387.875995][ T9599] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 387.882213][ T9599] ? __might_fault+0xe3/0x190 [ 387.887421][ T9599] ? __might_fault+0xe3/0x190 [ 387.892597][ T9599] mtdchar_ioctl+0xbbe/0x2050 [ 387.897787][ T9599] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 387.903425][ T9599] ? __mutex_trylock_common+0xea/0x250 [ 387.909450][ T9599] ? __pfx___mutex_trylock_common+0x10/0x10 [ 387.915964][ T9599] ? __mutex_lock+0x1cc/0xb10 [ 387.921137][ T9599] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 387.927096][ T9599] ? __pfx___mutex_lock+0x10/0x10 [ 387.932654][ T9599] ? __pfx_lock_release+0x10/0x10 [ 387.938231][ T9599] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 387.943964][ T9599] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 387.950475][ T9599] __x64_sys_ioctl+0x190/0x200 [ 387.955755][ T9599] do_syscall_64+0xcd/0x250 [ 387.960741][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.967248][ T9599] RIP: 0033:0x7f341fd8cda9 [ 387.972113][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.993690][ T9599] RSP: 002b:00007f3420b88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.002957][ T9599] RAX: ffffffffffffffda RBX: 00007f341ffa5fa0 RCX: 00007f341fd8cda9 [ 388.011733][ T9599] RDX: 0000000000000008 RSI: 0000000000001269 RDI: 0000000000000003 [ 388.020508][ T9599] RBP: 00007f3420b88090 R08: 0000000000000000 R09: 0000000000000000 [ 388.029304][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.038094][ T9599] R13: 0000000000000000 R14: 00007f341ffa5fa0 R15: 00007ffff13eaa58 [ 388.046890][ T9599] [ 388.050527][ T9599] Kernel Offset: disabled [ 388.055337][ T9599] Rebooting in 86400 seconds..