last executing test programs: 44.48309963s ago: executing program 2 (id=2337): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) faccessat$auto(0xffffffffffffffff, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) 43.760327133s ago: executing program 2 (id=2340): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r1, &(0x7f0000001080)=""/157, 0x9d) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000001280)=ANY=[@ANYBLOB="20da0100"/15, @ANYBLOB="010029bd7000fbdbdf25760000000c009900ff7f0000000000002c392317dbb5629cf806f72e38b386d5cc5399ff7792475fc6c3d7285737c380a204d373dfa3f28eb5c89f5892cfe9fb1a37da1636ecdce834bfff36689b4a21bb20bfaa3a2a684e8c1a5ee541690c68979fe5b82b1cf858605e", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x80) 42.855216627s ago: executing program 2 (id=2346): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r2, 0x0, 0x2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r4, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) 41.746187945s ago: executing program 2 (id=2350): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) faccessat$auto(0xffffffffffffffff, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) 41.15559294s ago: executing program 2 (id=2351): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff549042f4d94e13d7855e68b736ec90d98b3cc7629a"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5cedd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r1) setsockopt$auto(r2, 0x80, 0xfffffffe, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x3ff) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x4, 0x7ff) socket(0xa, 0x2, 0x40000000) 40.11993577s ago: executing program 2 (id=2356): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r0, 0x0, 0x20) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r1, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd) 39.405433707s ago: executing program 0 (id=2365): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r2, 0x0, 0x2) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) 38.844639411s ago: executing program 0 (id=2359): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r1, &(0x7f0000001080)=""/157, 0x9d) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000001280)=ANY=[@ANYBLOB="20da0100"/15, @ANYBLOB="010029bd7000fbdbdf25760000000c009900ff7f0000000000002c392317dbb5629cf806f72e38b386d5cc5399ff7792475fc6c3d7285737c380a204d373dfa3f28eb5c89f5892cfe9fb1a37da1636ecdce834bfff36689b4a21bb20bfaa3a2a684e8c1a5ee541690c68979fe5b82b1cf858605e", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x80) 37.858130364s ago: executing program 0 (id=2362): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) adjtimex$auto(0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r3, 0x0, 0x9) socket(0xa, 0x6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0x800, 0x4) read$auto(r0, 0x0, 0x20) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x109200, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) 36.318582357s ago: executing program 0 (id=2373): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r2, 0x0, 0x2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r4, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) 35.708384541s ago: executing program 0 (id=2366): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r1, &(0x7f0000001080)=""/157, 0x9d) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000001280)=ANY=[@ANYBLOB="20da0100"/15, @ANYBLOB="010029bd7000fbdbdf25760000000c009900ff7f0000000000002c392317dbb5629cf806f72e38b386d5cc5399ff7792475fc6c3d7285737c380a204d373dfa3f28eb5c89f5892cfe9fb1a37da1636ecdce834bfff36689b4a21bb20bfaa3a2a684e8c1a5ee541690c68979fe5b82b1cf858605e", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x80) 32.120348677s ago: executing program 0 (id=2378): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r2, 0x0, 0x2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r4, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) 30.981720291s ago: executing program 1 (id=2372): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff549042f4d94e13d7855e68b736ec90d98b3cc7629a"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5cedd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r1) setsockopt$auto(r2, 0x80, 0xfffffffe, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x3ff) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x40000000) 30.032755935s ago: executing program 1 (id=2375): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r1, &(0x7f0000001080)=""/157, 0x9d) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000001280)=ANY=[@ANYBLOB="20da0100"/15, @ANYBLOB="010029bd7000fbdbdf25760000000c009900ff7f0000000000002c392317dbb5629cf806f72e38b386d5cc5399ff7792475fc6c3d7285737c380a204d373dfa3f28eb5c89f5892cfe9fb1a37da1636ecdce834bfff36689b4a21bb20bfaa3a2a684e8c1a5ee541690c68979fe5b82b1cf858605e", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x80) 28.971434556s ago: executing program 1 (id=2376): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff549042f4d94e13d7855e68b736ec90d98b3cc7629a"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5cedd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r1) setsockopt$auto(r2, 0x80, 0xfffffffe, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x3ff) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x40000000) 27.971631092s ago: executing program 1 (id=2380): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) adjtimex$auto(0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r3, 0x0, 0x9) socket(0xa, 0x6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0x800, 0x4) read$auto(r0, 0x0, 0x20) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x109200, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) 26.983453205s ago: executing program 3 (id=2381): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) adjtimex$auto(0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r3, 0x0, 0x9) socket(0xa, 0x6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0x800, 0x4) read$auto(r0, 0x0, 0x20) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x109200, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) 26.981571075s ago: executing program 1 (id=2382): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r1, &(0x7f0000001080)=""/157, 0x9d) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000001280)=ANY=[@ANYBLOB="20da0100"/15, @ANYBLOB="010029bd7000fbdbdf25760000000c009900ff7f0000000000002c392317dbb5629cf806f72e38b386d5cc5399ff7792475fc6c3d7285737c380a204d373dfa3f28eb5c89f5892cfe9fb1a37da1636ecdce834bfff36689b4a21bb20bfaa3a2a684e8c1a5ee541690c68979fe5b82b1cf858605e", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x80) 25.976617664s ago: executing program 1 (id=2383): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) 25.973200904s ago: executing program 3 (id=2384): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8800, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.9/usb27/27-0:1.0/usb27-port8/over_current_count\x00', 0x0, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) recvmmsg$auto(0x3, 0x0, 0xfff, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmdt$auto(0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc0, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "96015337514b1833fd49fabab95ebc0677273bf0aa82d9c22000"}, @NL80211_ATTR_S1G_CAPABILITY={0x59, 0x128, "c09bbba5bf38b799e65113cbe8d903a4b431afc351e0dcd208e5b0f7c329af41698f70eade42850f9dcb3d237045f948b3cdecbdf858f070d90f232aff5094fa3632bc4ef55bfe13d50b61bde0ce0efc91ac20b86c"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7e}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x7}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_MAC={0x18, 0x6, "45adbd2f1b4bd53719bb915cb73007f030315477"}]}, 0xc0}}, 0x80) 25.604419665s ago: executing program 3 (id=2385): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) adjtimex$auto(0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, 0x0, 0x88d4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, 0x0, 0x9) socket(0xa, 0x6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0x800, 0x4) read$auto(r0, 0x0, 0x20) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x109200, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) 24.978529859s ago: executing program 3 (id=2386): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) adjtimex$auto(0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, 0x0, 0x88d4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, 0x0, 0x9) socket(0xa, 0x6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0x800, 0x4) read$auto(r0, 0x0, 0x20) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x109200, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) 16.512858413s ago: executing program 32 (id=2378): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r2, 0x0, 0x2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r4, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) 16.499577268s ago: executing program 3 (id=2388): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r1, &(0x7f0000001080)=""/157, 0x9d) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x1e1f00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000001280)=ANY=[@ANYBLOB="20da0100"/15, @ANYBLOB="010029bd7000fbdbdf25760000000c009900ff7f0000000000002c392317dbb5629cf806f72e38b386d5cc5399ff7792475fc6c3d7285737c380a204d373dfa3f28eb5c89f5892cfe9fb1a37da1636ecdce834bfff36689b4a21bb20bfaa3a2a684e8c1a5ee541690c68979fe5b82b1cf858605e", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x80) 15.490051616s ago: executing program 3 (id=2389): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r0, 0x0, 0x20) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r1, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) 10.010589686s ago: executing program 33 (id=2383): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r1, 0x0, 0x20) openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, r0, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) 0s ago: executing program 34 (id=2389): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r0, 0x0, 0x20) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r1, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC2\x00', 0xc40, 0x0) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): 828.185608][T17195] __kernfs_new_node+0xd2/0x8e0 [ 828.185644][T17195] ? __pfx___kernfs_new_node+0x10/0x10 [ 828.185681][T17195] ? find_held_lock+0x2b/0x80 [ 828.185706][T17195] ? kernfs_root+0xee/0x2a0 [ 828.185742][T17195] kernfs_new_node+0x13c/0x1e0 [ 828.185782][T17195] __kernfs_create_file+0x53/0x350 [ 828.185811][T17195] sysfs_add_file_mode_ns+0x207/0x3c0 [ 828.185849][T17195] internal_create_group+0x578/0xf30 [ 828.185904][T17195] ? __pfx_internal_create_group+0x10/0x10 [ 828.185942][T17195] ? kernfs_create_link+0x1bd/0x240 [ 828.185971][T17195] internal_create_groups+0x9d/0x150 [ 828.186001][T17195] device_add+0x731/0x1aa0 [ 828.186036][T17195] ? __pfx_device_add+0x10/0x10 [ 828.186063][T17195] ? __pfx___might_resched+0x10/0x10 [ 828.186085][T17195] ? lockdep_hardirqs_on+0x7c/0x110 [ 828.186121][T17195] __add_disk+0x457/0xf00 [ 828.186156][T17195] add_disk_fwnode+0x13f/0x5d0 [ 828.186185][T17195] loop_add+0x903/0xb70 [ 828.186219][T17195] ? __pfx_loop_add+0x10/0x10 [ 828.186275][T17195] ? find_held_lock+0x2b/0x80 [ 828.186305][T17195] loop_control_ioctl+0x13e/0x630 [ 828.186337][T17195] ? __pfx_loop_control_ioctl+0x10/0x10 [ 828.186380][T17195] ? __pfx_loop_control_ioctl+0x10/0x10 [ 828.186419][T17195] __x64_sys_ioctl+0x18b/0x210 [ 828.186460][T17195] do_syscall_64+0xcd/0x490 [ 828.186487][T17195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.186512][T17195] RIP: 0033:0x7f37bdd8eb69 [ 828.186532][T17195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.186557][T17195] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.186583][T17195] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 828.186600][T17195] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 828.186616][T17195] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 828.186630][T17195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.186645][T17195] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 828.186678][T17195] [ 829.678783][T17214] FAULT_INJECTION: forcing a failure. [ 829.678783][T17214] name failslab, interval 1, probability 0, space 0, times 0 [ 829.746500][T17214] CPU: 0 UID: 0 PID: 17214 Comm: syz.2.2171 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 829.746525][T17214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 829.746534][T17214] Call Trace: [ 829.746540][T17214] [ 829.746545][T17214] dump_stack_lvl+0x16c/0x1f0 [ 829.746566][T17214] should_fail_ex+0x512/0x640 [ 829.746584][T17214] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 829.746602][T17214] should_failslab+0xc2/0x120 [ 829.746621][T17214] __kmalloc_cache_noprof+0x6a/0x3e0 [ 829.746637][T17214] ? rand_initialize_disk+0x3f/0xc0 [ 829.746661][T17214] rand_initialize_disk+0x3f/0xc0 [ 829.746682][T17214] __alloc_disk_node+0x2c5/0x630 [ 829.746702][T17214] __blk_mq_alloc_disk+0x89/0x120 [ 829.746726][T17214] loop_add+0x490/0xb70 [ 829.746750][T17214] ? __pfx_loop_add+0x10/0x10 [ 829.746784][T17214] ? find_held_lock+0x2b/0x80 [ 829.746802][T17214] loop_control_ioctl+0x13e/0x630 [ 829.746823][T17214] ? __pfx_loop_control_ioctl+0x10/0x10 [ 829.746847][T17214] ? __pfx_loop_control_ioctl+0x10/0x10 [ 829.746869][T17214] __x64_sys_ioctl+0x18b/0x210 [ 829.746892][T17214] do_syscall_64+0xcd/0x490 [ 829.746909][T17214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.746923][T17214] RIP: 0033:0x7fa84ef8eb69 [ 829.746935][T17214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.746949][T17214] RSP: 002b:00007fa84fd21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.746963][T17214] RAX: ffffffffffffffda RBX: 00007fa84f1b5fa0 RCX: 00007fa84ef8eb69 [ 829.746972][T17214] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 829.746981][T17214] RBP: 00007fa84f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 829.746989][T17214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.746997][T17214] R13: 0000000000000000 R14: 00007fa84f1b5fa0 R15: 00007ffd1e6430e8 [ 829.747014][T17214] [ 830.009292][T17221] FAULT_INJECTION: forcing a failure. [ 830.009292][T17221] name failslab, interval 1, probability 0, space 0, times 0 [ 830.022399][T17221] CPU: 0 UID: 0 PID: 17221 Comm: syz.0.2173 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 830.022422][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 830.022432][T17221] Call Trace: [ 830.022438][T17221] [ 830.022443][T17221] dump_stack_lvl+0x16c/0x1f0 [ 830.022463][T17221] should_fail_ex+0x512/0x640 [ 830.022482][T17221] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 830.022502][T17221] should_failslab+0xc2/0x120 [ 830.022521][T17221] __kmalloc_cache_node_noprof+0x6d/0x420 [ 830.022538][T17221] ? blkg_alloc+0xb7/0xb00 [ 830.022559][T17221] blkg_alloc+0xb7/0xb00 [ 830.022582][T17221] blkcg_init_disk+0x51/0x160 [ 830.022604][T17221] __alloc_disk_node+0x299/0x630 [ 830.022622][T17221] __blk_mq_alloc_disk+0x89/0x120 [ 830.022639][T17221] loop_add+0x490/0xb70 [ 830.022661][T17221] ? __pfx_loop_add+0x10/0x10 [ 830.022693][T17221] ? find_held_lock+0x2b/0x80 [ 830.022710][T17221] loop_control_ioctl+0x13e/0x630 [ 830.022731][T17221] ? __pfx_loop_control_ioctl+0x10/0x10 [ 830.022755][T17221] ? __pfx_loop_control_ioctl+0x10/0x10 [ 830.022777][T17221] __x64_sys_ioctl+0x18b/0x210 [ 830.022800][T17221] do_syscall_64+0xcd/0x490 [ 830.022816][T17221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.022831][T17221] RIP: 0033:0x7fdd03f8eb69 [ 830.022843][T17221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.022856][T17221] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.022870][T17221] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 830.022879][T17221] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 830.022887][T17221] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 830.022896][T17221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.022904][T17221] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 830.022921][T17221] [ 830.548464][T17229] vhci_hcd: invalid port number 16 [ 830.565186][T17229] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 830.608567][T17231] vhci_hcd: invalid port number 16 [ 830.624810][T17231] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 831.234580][T17238] vhci_hcd: invalid port number 16 [ 831.266253][T17238] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 832.145883][T17251] FAULT_INJECTION: forcing a failure. [ 832.145883][T17251] name failslab, interval 1, probability 0, space 0, times 0 [ 832.160158][T17251] CPU: 1 UID: 0 PID: 17251 Comm: syz.0.2178 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 832.160181][T17251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 832.160190][T17251] Call Trace: [ 832.160196][T17251] [ 832.160202][T17251] dump_stack_lvl+0x16c/0x1f0 [ 832.160230][T17251] should_fail_ex+0x512/0x640 [ 832.160248][T17251] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 832.160266][T17251] should_failslab+0xc2/0x120 [ 832.160286][T17251] __kmalloc_cache_noprof+0x6a/0x3e0 [ 832.160301][T17251] ? rand_initialize_disk+0x3f/0xc0 [ 832.160325][T17251] rand_initialize_disk+0x3f/0xc0 [ 832.160345][T17251] __alloc_disk_node+0x2c5/0x630 [ 832.160364][T17251] __blk_mq_alloc_disk+0x89/0x120 [ 832.160382][T17251] loop_add+0x490/0xb70 [ 832.160404][T17251] ? __pfx_loop_add+0x10/0x10 [ 832.160437][T17251] ? find_held_lock+0x2b/0x80 [ 832.160454][T17251] loop_control_ioctl+0x13e/0x630 [ 832.160476][T17251] ? __pfx_loop_control_ioctl+0x10/0x10 [ 832.160500][T17251] ? __pfx_loop_control_ioctl+0x10/0x10 [ 832.160521][T17251] __x64_sys_ioctl+0x18b/0x210 [ 832.160550][T17251] do_syscall_64+0xcd/0x490 [ 832.160567][T17251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.160583][T17251] RIP: 0033:0x7fdd03f8eb69 [ 832.160595][T17251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.160609][T17251] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.160623][T17251] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 832.160632][T17251] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 832.160640][T17251] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 832.160648][T17251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.160656][T17251] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 832.160674][T17251] [ 832.433033][T17256] FAULT_INJECTION: forcing a failure. [ 832.433033][T17256] name failslab, interval 1, probability 0, space 0, times 0 [ 832.487429][T17256] CPU: 1 UID: 0 PID: 17256 Comm: syz.2.2180 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 832.487468][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 832.487484][T17256] Call Trace: [ 832.487492][T17256] [ 832.487502][T17256] dump_stack_lvl+0x16c/0x1f0 [ 832.487535][T17256] should_fail_ex+0x512/0x640 [ 832.487565][T17256] ? fs_reclaim_acquire+0xae/0x150 [ 832.487605][T17256] should_failslab+0xc2/0x120 [ 832.487637][T17256] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 832.487666][T17256] ? __kernfs_new_node+0xd2/0x8e0 [ 832.487700][T17256] __kernfs_new_node+0xd2/0x8e0 [ 832.487737][T17256] ? __pfx___kernfs_new_node+0x10/0x10 [ 832.487773][T17256] ? find_held_lock+0x2b/0x80 [ 832.487807][T17256] ? kernfs_root+0xee/0x2a0 [ 832.487844][T17256] kernfs_new_node+0x13c/0x1e0 [ 832.487883][T17256] __kernfs_create_file+0x53/0x350 [ 832.487912][T17256] sysfs_add_file_mode_ns+0x207/0x3c0 [ 832.487950][T17256] internal_create_group+0x578/0xf30 [ 832.487990][T17256] ? __pfx_internal_create_group+0x10/0x10 [ 832.488027][T17256] ? kernfs_create_link+0x1bd/0x240 [ 832.488056][T17256] internal_create_groups+0x9d/0x150 [ 832.488090][T17256] device_add+0x731/0x1aa0 [ 832.488126][T17256] ? __pfx_device_add+0x10/0x10 [ 832.488154][T17256] ? __pfx___might_resched+0x10/0x10 [ 832.488178][T17256] ? lockdep_hardirqs_on+0x7c/0x110 [ 832.488215][T17256] __add_disk+0x457/0xf00 [ 832.488250][T17256] add_disk_fwnode+0x13f/0x5d0 [ 832.488282][T17256] loop_add+0x903/0xb70 [ 832.488318][T17256] ? __pfx_loop_add+0x10/0x10 [ 832.488375][T17256] ? find_held_lock+0x2b/0x80 [ 832.488403][T17256] loop_control_ioctl+0x13e/0x630 [ 832.488441][T17256] ? __pfx_loop_control_ioctl+0x10/0x10 [ 832.488480][T17256] ? __pfx_loop_control_ioctl+0x10/0x10 [ 832.488516][T17256] __x64_sys_ioctl+0x18b/0x210 [ 832.488554][T17256] do_syscall_64+0xcd/0x490 [ 832.488583][T17256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.488610][T17256] RIP: 0033:0x7fa84ef8eb69 [ 832.488630][T17256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.488655][T17256] RSP: 002b:00007fa84fd21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.488680][T17256] RAX: ffffffffffffffda RBX: 00007fa84f1b5fa0 RCX: 00007fa84ef8eb69 [ 832.488698][T17256] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 832.488713][T17256] RBP: 00007fa84f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 832.488728][T17256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.488743][T17256] R13: 0000000000000000 R14: 00007fa84f1b5fa0 R15: 00007ffd1e6430e8 [ 832.488777][T17256] [ 833.010683][T17268] vhci_hcd: invalid port number 16 [ 833.018198][T17268] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 833.290709][T17274] vhci_hcd: invalid port number 16 [ 833.339920][T17274] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 833.682168][T17284] vhci_hcd: invalid port number 16 [ 833.725376][T17284] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 835.502252][T17300] vhci_hcd: invalid port number 16 [ 835.508199][T17300] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 835.536434][T17302] vhci_hcd: invalid port number 16 [ 835.543424][T17305] vhci_hcd: invalid port number 16 [ 835.545206][T17306] vhci_hcd: invalid port number 16 [ 835.549651][T17305] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 835.563606][T17306] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 835.572412][T17302] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 837.025820][T17327] FAULT_INJECTION: forcing a failure. [ 837.025820][T17327] name failslab, interval 1, probability 0, space 0, times 0 [ 837.038683][T17327] CPU: 1 UID: 0 PID: 17327 Comm: syz.1.2191 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 837.038719][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 837.038734][T17327] Call Trace: [ 837.038743][T17327] [ 837.038752][T17327] dump_stack_lvl+0x16c/0x1f0 [ 837.038785][T17327] should_fail_ex+0x512/0x640 [ 837.038814][T17327] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 837.038842][T17327] should_failslab+0xc2/0x120 [ 837.038870][T17327] __kmalloc_cache_noprof+0x6a/0x3e0 [ 837.038897][T17327] ? rand_initialize_disk+0x3f/0xc0 [ 837.038937][T17327] rand_initialize_disk+0x3f/0xc0 [ 837.038971][T17327] __alloc_disk_node+0x2c5/0x630 [ 837.039005][T17327] __blk_mq_alloc_disk+0x89/0x120 [ 837.039034][T17327] loop_add+0x490/0xb70 [ 837.039071][T17327] ? __pfx_loop_add+0x10/0x10 [ 837.039131][T17327] ? find_held_lock+0x2b/0x80 [ 837.039161][T17327] loop_control_ioctl+0x13e/0x630 [ 837.039201][T17327] ? __pfx_loop_control_ioctl+0x10/0x10 [ 837.039243][T17327] ? __pfx_loop_control_ioctl+0x10/0x10 [ 837.039281][T17327] __x64_sys_ioctl+0x18b/0x210 [ 837.039320][T17327] do_syscall_64+0xcd/0x490 [ 837.039349][T17327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.039374][T17327] RIP: 0033:0x7f37bdd8eb69 [ 837.039405][T17327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.039430][T17327] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.039454][T17327] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 837.039471][T17327] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 837.039487][T17327] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 837.039503][T17327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.039518][T17327] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 837.039552][T17327] [ 837.581933][T17337] input: f¬ as /devices/virtual/input/input115 [ 837.657758][T17341] vhci_hcd: invalid port number 16 [ 837.662916][T17341] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 838.750161][T17355] FAULT_INJECTION: forcing a failure. [ 838.750161][T17355] name failslab, interval 1, probability 0, space 0, times 0 [ 838.803023][T17355] CPU: 0 UID: 0 PID: 17355 Comm: syz.2.2198 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 838.803063][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 838.803078][T17355] Call Trace: [ 838.803088][T17355] [ 838.803098][T17355] dump_stack_lvl+0x16c/0x1f0 [ 838.803131][T17355] should_fail_ex+0x512/0x640 [ 838.803161][T17355] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 838.803192][T17355] should_failslab+0xc2/0x120 [ 838.803225][T17355] __kmalloc_cache_noprof+0x6a/0x3e0 [ 838.803252][T17355] ? rand_initialize_disk+0x3f/0xc0 [ 838.803301][T17355] rand_initialize_disk+0x3f/0xc0 [ 838.803338][T17355] __alloc_disk_node+0x2c5/0x630 [ 838.803370][T17355] __blk_mq_alloc_disk+0x89/0x120 [ 838.803400][T17355] loop_add+0x490/0xb70 [ 838.803438][T17355] ? __pfx_loop_add+0x10/0x10 [ 838.803493][T17355] ? find_held_lock+0x2b/0x80 [ 838.803523][T17355] loop_control_ioctl+0x13e/0x630 [ 838.803563][T17355] ? __pfx_loop_control_ioctl+0x10/0x10 [ 838.803606][T17355] ? __pfx_loop_control_ioctl+0x10/0x10 [ 838.803647][T17355] __x64_sys_ioctl+0x18b/0x210 [ 838.803687][T17355] do_syscall_64+0xcd/0x490 [ 838.803717][T17355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.803744][T17355] RIP: 0033:0x7fa84ef8eb69 [ 838.803764][T17355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.803789][T17355] RSP: 002b:00007fa84fd21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 838.803813][T17355] RAX: ffffffffffffffda RBX: 00007fa84f1b5fa0 RCX: 00007fa84ef8eb69 [ 838.803830][T17355] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 838.803844][T17355] RBP: 00007fa84f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 838.803858][T17355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.803889][T17355] R13: 0000000000000000 R14: 00007fa84f1b5fa0 R15: 00007ffd1e6430e8 [ 838.803918][T17355] [ 839.372413][T17370] vhci_hcd: invalid port number 16 [ 839.385732][T17368] vhci_hcd: invalid port number 16 [ 839.387154][T17370] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 839.399672][T17368] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 840.524753][T17382] FAULT_INJECTION: forcing a failure. [ 840.524753][T17382] name failslab, interval 1, probability 0, space 0, times 0 [ 840.595140][T17382] CPU: 0 UID: 0 PID: 17382 Comm: syz.1.2203 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 840.595164][T17382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 840.595173][T17382] Call Trace: [ 840.595179][T17382] [ 840.595185][T17382] dump_stack_lvl+0x16c/0x1f0 [ 840.595206][T17382] should_fail_ex+0x512/0x640 [ 840.595224][T17382] ? fs_reclaim_acquire+0xae/0x150 [ 840.595248][T17382] should_failslab+0xc2/0x120 [ 840.595268][T17382] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 840.595286][T17382] ? __kernfs_new_node+0xd2/0x8e0 [ 840.595306][T17382] __kernfs_new_node+0xd2/0x8e0 [ 840.595326][T17382] ? __pfx___kernfs_new_node+0x10/0x10 [ 840.595348][T17382] ? find_held_lock+0x2b/0x80 [ 840.595363][T17382] ? kernfs_root+0xee/0x2a0 [ 840.595384][T17382] kernfs_new_node+0x13c/0x1e0 [ 840.595407][T17382] __kernfs_create_file+0x53/0x350 [ 840.595424][T17382] sysfs_add_file_mode_ns+0x207/0x3c0 [ 840.595445][T17382] internal_create_group+0x578/0xf30 [ 840.595468][T17382] ? __pfx_internal_create_group+0x10/0x10 [ 840.595490][T17382] ? kernfs_create_link+0x1bd/0x240 [ 840.595507][T17382] internal_create_groups+0x9d/0x150 [ 840.595527][T17382] device_add+0x731/0x1aa0 [ 840.595549][T17382] ? __pfx_device_add+0x10/0x10 [ 840.595566][T17382] ? __pfx___might_resched+0x10/0x10 [ 840.595579][T17382] ? lockdep_hardirqs_on+0x7c/0x110 [ 840.595599][T17382] __add_disk+0x457/0xf00 [ 840.595619][T17382] add_disk_fwnode+0x13f/0x5d0 [ 840.595637][T17382] loop_add+0x903/0xb70 [ 840.595660][T17382] ? __pfx_loop_add+0x10/0x10 [ 840.595693][T17382] ? find_held_lock+0x2b/0x80 [ 840.595709][T17382] loop_control_ioctl+0x13e/0x630 [ 840.595730][T17382] ? __pfx_loop_control_ioctl+0x10/0x10 [ 840.595754][T17382] ? __pfx_loop_control_ioctl+0x10/0x10 [ 840.595776][T17382] __x64_sys_ioctl+0x18b/0x210 [ 840.595799][T17382] do_syscall_64+0xcd/0x490 [ 840.595816][T17382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.595831][T17382] RIP: 0033:0x7f37bdd8eb69 [ 840.595843][T17382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.595857][T17382] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.595871][T17382] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 840.595880][T17382] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 840.595889][T17382] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 840.595907][T17382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.595916][T17382] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 840.595935][T17382] [ 841.080971][T17386] FAULT_INJECTION: forcing a failure. [ 841.080971][T17386] name failslab, interval 1, probability 0, space 0, times 0 [ 841.084714][T17389] FAULT_INJECTION: forcing a failure. [ 841.084714][T17389] name failslab, interval 1, probability 0, space 0, times 0 [ 841.115154][T17389] CPU: 1 UID: 0 PID: 17389 Comm: syz.2.2205 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 841.115193][T17389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 841.115209][T17389] Call Trace: [ 841.115218][T17389] [ 841.115229][T17389] dump_stack_lvl+0x16c/0x1f0 [ 841.115263][T17389] should_fail_ex+0x512/0x640 [ 841.115294][T17389] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 841.115325][T17389] should_failslab+0xc2/0x120 [ 841.115360][T17389] __kmalloc_cache_noprof+0x6a/0x3e0 [ 841.115387][T17389] ? percpu_ref_init+0xec/0x410 [ 841.115416][T17389] ? __pfx_blkg_release+0x10/0x10 [ 841.115451][T17389] percpu_ref_init+0xec/0x410 [ 841.115476][T17389] ? kasan_save_track+0x14/0x30 [ 841.115508][T17389] blkg_alloc+0xea/0xb00 [ 841.115550][T17389] blkcg_init_disk+0x51/0x160 [ 841.115589][T17389] __alloc_disk_node+0x299/0x630 [ 841.115623][T17389] __blk_mq_alloc_disk+0x89/0x120 [ 841.115653][T17389] loop_add+0x490/0xb70 [ 841.115692][T17389] ? __pfx_loop_add+0x10/0x10 [ 841.115753][T17389] ? find_held_lock+0x2b/0x80 [ 841.115785][T17389] loop_control_ioctl+0x13e/0x630 [ 841.115824][T17389] ? __pfx_loop_control_ioctl+0x10/0x10 [ 841.115866][T17389] ? __pfx_loop_control_ioctl+0x10/0x10 [ 841.115904][T17389] __x64_sys_ioctl+0x18b/0x210 [ 841.115945][T17389] do_syscall_64+0xcd/0x490 [ 841.115975][T17389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.116002][T17389] RIP: 0033:0x7fa84ef8eb69 [ 841.116023][T17389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.116048][T17389] RSP: 002b:00007fa84fd21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.116074][T17389] RAX: ffffffffffffffda RBX: 00007fa84f1b5fa0 RCX: 00007fa84ef8eb69 [ 841.116092][T17389] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 841.116108][T17389] RBP: 00007fa84f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 841.116124][T17389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.116147][T17389] R13: 0000000000000000 R14: 00007fa84f1b5fa0 R15: 00007ffd1e6430e8 [ 841.116182][T17389] [ 841.133900][T17386] CPU: 0 UID: 0 PID: 17386 Comm: syz.3.2204 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 841.133939][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 841.133954][T17386] Call Trace: [ 841.133964][T17386] [ 841.133974][T17386] dump_stack_lvl+0x16c/0x1f0 [ 841.134007][T17386] should_fail_ex+0x512/0x640 [ 841.134038][T17386] ? fs_reclaim_acquire+0xae/0x150 [ 841.134079][T17386] should_failslab+0xc2/0x120 [ 841.134111][T17386] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 841.134142][T17386] ? __kernfs_new_node+0xd2/0x8e0 [ 841.134177][T17386] __kernfs_new_node+0xd2/0x8e0 [ 841.134212][T17386] ? __pfx___kernfs_new_node+0x10/0x10 [ 841.134253][T17386] ? find_held_lock+0x2b/0x80 [ 841.134279][T17386] ? kernfs_root+0xee/0x2a0 [ 841.134316][T17386] kernfs_new_node+0x13c/0x1e0 [ 841.134356][T17386] __kernfs_create_file+0x53/0x350 [ 841.134385][T17386] sysfs_add_file_mode_ns+0x207/0x3c0 [ 841.134423][T17386] internal_create_group+0x578/0xf30 [ 841.134463][T17386] ? __pfx_internal_create_group+0x10/0x10 [ 841.134500][T17386] ? kernfs_create_link+0x1bd/0x240 [ 841.134530][T17386] internal_create_groups+0x9d/0x150 [ 841.134565][T17386] device_add+0x731/0x1aa0 [ 841.134603][T17386] ? __pfx_device_add+0x10/0x10 [ 841.134631][T17386] ? __pfx___might_resched+0x10/0x10 [ 841.134655][T17386] ? lockdep_hardirqs_on+0x7c/0x110 [ 841.134692][T17386] __add_disk+0x457/0xf00 [ 841.134727][T17386] add_disk_fwnode+0x13f/0x5d0 [ 841.134759][T17386] loop_add+0x903/0xb70 [ 841.134795][T17386] ? __pfx_loop_add+0x10/0x10 [ 841.134866][T17386] ? find_held_lock+0x2b/0x80 [ 841.134896][T17386] loop_control_ioctl+0x13e/0x630 [ 841.134934][T17386] ? __pfx_loop_control_ioctl+0x10/0x10 [ 841.134976][T17386] ? __pfx_loop_control_ioctl+0x10/0x10 [ 841.135014][T17386] __x64_sys_ioctl+0x18b/0x210 [ 841.135068][T17386] do_syscall_64+0xcd/0x490 [ 841.135099][T17386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.135124][T17386] RIP: 0033:0x7f907958eb69 [ 841.135145][T17386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.135169][T17386] RSP: 002b:00007f907a4dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.135193][T17386] RAX: ffffffffffffffda RBX: 00007f90797b5fa0 RCX: 00007f907958eb69 [ 841.135211][T17386] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 841.135228][T17386] RBP: 00007f9079611df1 R08: 0000000000000000 R09: 0000000000000000 [ 841.135244][T17386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.135259][T17386] R13: 0000000000000000 R14: 00007f90797b5fa0 R15: 00007fffc7211998 [ 841.135293][T17386] [ 841.673409][T17391] FAULT_INJECTION: forcing a failure. [ 841.673409][T17391] name failslab, interval 1, probability 0, space 0, times 0 [ 841.686356][T17391] CPU: 1 UID: 0 PID: 17391 Comm: syz.1.2215 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 841.686396][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 841.686413][T17391] Call Trace: [ 841.686421][T17391] [ 841.686431][T17391] dump_stack_lvl+0x16c/0x1f0 [ 841.686464][T17391] should_fail_ex+0x512/0x640 [ 841.686507][T17391] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 841.686538][T17391] should_failslab+0xc2/0x120 [ 841.686571][T17391] __kmalloc_cache_noprof+0x6a/0x3e0 [ 841.686599][T17391] ? rand_initialize_disk+0x3f/0xc0 [ 841.686643][T17391] rand_initialize_disk+0x3f/0xc0 [ 841.686679][T17391] __alloc_disk_node+0x2c5/0x630 [ 841.686715][T17391] __blk_mq_alloc_disk+0x89/0x120 [ 841.686745][T17391] loop_add+0x490/0xb70 [ 841.686783][T17391] ? __pfx_loop_add+0x10/0x10 [ 841.686887][T17391] ? find_held_lock+0x2b/0x80 [ 841.686919][T17391] loop_control_ioctl+0x13e/0x630 [ 841.686960][T17391] ? __pfx_loop_control_ioctl+0x10/0x10 [ 841.687004][T17391] ? __pfx_loop_control_ioctl+0x10/0x10 [ 841.687044][T17391] __x64_sys_ioctl+0x18b/0x210 [ 841.687085][T17391] do_syscall_64+0xcd/0x490 [ 841.687115][T17391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.687141][T17391] RIP: 0033:0x7f37bdd8eb69 [ 841.687163][T17391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.687190][T17391] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.687216][T17391] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 841.687236][T17391] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 841.687253][T17391] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 841.687271][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.687287][T17391] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 841.687323][T17391] [ 842.011551][T17396] vhci_hcd: invalid port number 16 [ 842.056101][T17396] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 843.092048][T17409] FAULT_INJECTION: forcing a failure. [ 843.092048][T17409] name failslab, interval 1, probability 0, space 0, times 0 [ 843.107648][T17409] CPU: 1 UID: 0 PID: 17409 Comm: syz.0.2211 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 843.107671][T17409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 843.107682][T17409] Call Trace: [ 843.107688][T17409] [ 843.107694][T17409] dump_stack_lvl+0x16c/0x1f0 [ 843.107714][T17409] should_fail_ex+0x512/0x640 [ 843.107731][T17409] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 843.107749][T17409] should_failslab+0xc2/0x120 [ 843.107768][T17409] __kmalloc_cache_noprof+0x6a/0x3e0 [ 843.107783][T17409] ? percpu_ref_init+0xec/0x410 [ 843.107800][T17409] ? __pfx_blkg_release+0x10/0x10 [ 843.107819][T17409] percpu_ref_init+0xec/0x410 [ 843.107833][T17409] ? kasan_save_track+0x14/0x30 [ 843.107850][T17409] blkg_alloc+0xea/0xb00 [ 843.107873][T17409] blkcg_init_disk+0x51/0x160 [ 843.107895][T17409] __alloc_disk_node+0x299/0x630 [ 843.107914][T17409] __blk_mq_alloc_disk+0x89/0x120 [ 843.107932][T17409] loop_add+0x490/0xb70 [ 843.107953][T17409] ? __pfx_loop_add+0x10/0x10 [ 843.107993][T17409] ? find_held_lock+0x2b/0x80 [ 843.108010][T17409] loop_control_ioctl+0x13e/0x630 [ 843.108033][T17409] ? __pfx_loop_control_ioctl+0x10/0x10 [ 843.108057][T17409] ? __pfx_loop_control_ioctl+0x10/0x10 [ 843.108080][T17409] __x64_sys_ioctl+0x18b/0x210 [ 843.108104][T17409] do_syscall_64+0xcd/0x490 [ 843.108121][T17409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.108135][T17409] RIP: 0033:0x7fdd03f8eb69 [ 843.108147][T17409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.108161][T17409] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.108175][T17409] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 843.108184][T17409] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 843.108193][T17409] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 843.108201][T17409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.108209][T17409] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 843.108226][T17409] [ 843.766130][T17418] vhci_hcd: invalid port number 16 [ 843.799865][T17418] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 843.819478][T17420] vhci_hcd: invalid port number 16 [ 843.824610][T17420] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 845.041532][T17445] FAULT_INJECTION: forcing a failure. [ 845.041532][T17445] name failslab, interval 1, probability 0, space 0, times 0 [ 845.054609][T17445] CPU: 1 UID: 0 PID: 17445 Comm: syz.1.2219 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 845.054644][T17445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 845.054660][T17445] Call Trace: [ 845.054668][T17445] [ 845.054676][T17445] dump_stack_lvl+0x16c/0x1f0 [ 845.054708][T17445] should_fail_ex+0x512/0x640 [ 845.054735][T17445] ? fs_reclaim_acquire+0xae/0x150 [ 845.054773][T17445] should_failslab+0xc2/0x120 [ 845.054815][T17445] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 845.054844][T17445] ? __asan_memcpy+0x3c/0x60 [ 845.054870][T17445] ? __kernfs_new_node+0xd2/0x8e0 [ 845.054904][T17445] __kernfs_new_node+0xd2/0x8e0 [ 845.054940][T17445] ? __pfx___kernfs_new_node+0x10/0x10 [ 845.054978][T17445] ? find_held_lock+0x2b/0x80 [ 845.055003][T17445] ? kernfs_root+0xee/0x2a0 [ 845.055038][T17445] kernfs_new_node+0x13c/0x1e0 [ 845.055078][T17445] kernfs_create_dir_ns+0x4c/0x1a0 [ 845.055115][T17445] sysfs_create_dir_ns+0x13a/0x2b0 [ 845.055145][T17445] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 845.055172][T17445] ? find_held_lock+0x2b/0x80 [ 845.055202][T17445] ? class_dir_child_ns_type+0xd/0x60 [ 845.055235][T17445] kobject_add_internal+0x2c4/0x9b0 [ 845.055269][T17445] kobject_add+0x16e/0x240 [ 845.055296][T17445] ? __pfx_kobject_add+0x10/0x10 [ 845.055326][T17445] ? get_device_parent+0x1c5/0x4e0 [ 845.055355][T17445] ? kobject_put+0xab/0x5a0 [ 845.055391][T17445] device_add+0x288/0x1aa0 [ 845.055420][T17445] ? __pfx_dev_set_name+0x10/0x10 [ 845.055453][T17445] ? __pfx_device_add+0x10/0x10 [ 845.055483][T17445] ? __pfx___might_resched+0x10/0x10 [ 845.055506][T17445] ? lockdep_hardirqs_on+0x7c/0x110 [ 845.055544][T17445] __add_disk+0x457/0xf00 [ 845.055581][T17445] add_disk_fwnode+0x13f/0x5d0 [ 845.055614][T17445] loop_add+0x903/0xb70 [ 845.055652][T17445] ? __pfx_loop_add+0x10/0x10 [ 845.055714][T17445] ? find_held_lock+0x2b/0x80 [ 845.055745][T17445] loop_control_ioctl+0x13e/0x630 [ 845.055782][T17445] ? __pfx_loop_control_ioctl+0x10/0x10 [ 845.055835][T17445] ? __pfx_loop_control_ioctl+0x10/0x10 [ 845.055875][T17445] __x64_sys_ioctl+0x18b/0x210 [ 845.055916][T17445] do_syscall_64+0xcd/0x490 [ 845.055946][T17445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.055972][T17445] RIP: 0033:0x7f37bdd8eb69 [ 845.055993][T17445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.056018][T17445] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.056043][T17445] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 845.056061][T17445] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 845.056078][T17445] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 845.056094][T17445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.056110][T17445] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 845.056146][T17445] [ 845.361176][T17445] kobject: kobject_add_internal failed for loop83 (error: -12 parent: block) [ 845.379910][T17447] FAULT_INJECTION: forcing a failure. [ 845.379910][T17447] name failslab, interval 1, probability 0, space 0, times 0 [ 845.392611][T17447] CPU: 1 UID: 0 PID: 17447 Comm: syz.0.2218 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 845.392649][T17447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 845.392663][T17447] Call Trace: [ 845.392672][T17447] [ 845.392682][T17447] dump_stack_lvl+0x16c/0x1f0 [ 845.392715][T17447] should_fail_ex+0x512/0x640 [ 845.392746][T17447] ? fs_reclaim_acquire+0xae/0x150 [ 845.392783][T17447] should_failslab+0xc2/0x120 [ 845.392823][T17447] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 845.392854][T17447] ? __pfx_try_to_wake_up+0x10/0x10 [ 845.392878][T17447] ? __kernfs_new_node+0xd2/0x8e0 [ 845.392915][T17447] __kernfs_new_node+0xd2/0x8e0 [ 845.392950][T17447] ? wake_up_q+0xae/0x130 [ 845.392972][T17447] ? __pfx___kernfs_new_node+0x10/0x10 [ 845.393007][T17447] ? find_held_lock+0x2b/0x80 [ 845.393030][T17447] ? kernfs_root+0xee/0x2a0 [ 845.393060][T17447] kernfs_new_node+0x13c/0x1e0 [ 845.393096][T17447] __kernfs_create_file+0x53/0x350 [ 845.393121][T17447] sysfs_add_file_mode_ns+0x207/0x3c0 [ 845.393144][T17447] internal_create_group+0x578/0xf30 [ 845.393177][T17447] ? __pfx_internal_create_group+0x10/0x10 [ 845.393213][T17447] ? kernfs_create_link+0x1bd/0x240 [ 845.393237][T17447] internal_create_groups+0x9d/0x150 [ 845.393257][T17447] device_add+0x731/0x1aa0 [ 845.393279][T17447] ? __pfx_device_add+0x10/0x10 [ 845.393296][T17447] ? __pfx___might_resched+0x10/0x10 [ 845.393310][T17447] ? lockdep_hardirqs_on+0x7c/0x110 [ 845.393330][T17447] __add_disk+0x457/0xf00 [ 845.393350][T17447] add_disk_fwnode+0x13f/0x5d0 [ 845.393369][T17447] loop_add+0x903/0xb70 [ 845.393391][T17447] ? __pfx_loop_add+0x10/0x10 [ 845.393423][T17447] ? find_held_lock+0x2b/0x80 [ 845.393440][T17447] loop_control_ioctl+0x13e/0x630 [ 845.393462][T17447] ? __pfx_loop_control_ioctl+0x10/0x10 [ 845.393486][T17447] ? __pfx_loop_control_ioctl+0x10/0x10 [ 845.393508][T17447] __x64_sys_ioctl+0x18b/0x210 [ 845.393531][T17447] do_syscall_64+0xcd/0x490 [ 845.393548][T17447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.393563][T17447] RIP: 0033:0x7fdd03f8eb69 [ 845.393578][T17447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.393592][T17447] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.393606][T17447] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 845.393616][T17447] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 845.393625][T17447] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 845.393633][T17447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.393642][T17447] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 845.393661][T17447] [ 845.829939][T17453] vhci_hcd: invalid port number 16 [ 845.835133][T17453] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 845.908015][T17457] vhci_hcd: invalid port number 16 [ 845.913176][T17457] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 847.714216][T17491] vhci_hcd: invalid port number 16 [ 847.750202][T17491] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 848.977414][T17509] FAULT_INJECTION: forcing a failure. [ 848.977414][T17509] name failslab, interval 1, probability 0, space 0, times 0 [ 848.990501][T17509] CPU: 0 UID: 0 PID: 17509 Comm: syz.0.2229 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 848.990524][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 848.990533][T17509] Call Trace: [ 848.990538][T17509] [ 848.990544][T17509] dump_stack_lvl+0x16c/0x1f0 [ 848.990565][T17509] should_fail_ex+0x512/0x640 [ 848.990583][T17509] ? fs_reclaim_acquire+0xae/0x150 [ 848.990606][T17509] should_failslab+0xc2/0x120 [ 848.990626][T17509] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 848.990644][T17509] ? __kernfs_new_node+0xd2/0x8e0 [ 848.990664][T17509] __kernfs_new_node+0xd2/0x8e0 [ 848.990684][T17509] ? __pfx___kernfs_new_node+0x10/0x10 [ 848.990706][T17509] ? find_held_lock+0x2b/0x80 [ 848.990721][T17509] ? kernfs_root+0xee/0x2a0 [ 848.990742][T17509] kernfs_new_node+0x13c/0x1e0 [ 848.990765][T17509] kernfs_create_dir_ns+0x4c/0x1a0 [ 848.990788][T17509] internal_create_group+0x34d/0xf30 [ 848.990811][T17509] ? __pfx_internal_create_group+0x10/0x10 [ 848.990832][T17509] ? kernfs_create_link+0x1bd/0x240 [ 848.990849][T17509] internal_create_groups+0x9d/0x150 [ 848.990869][T17509] device_add+0x731/0x1aa0 [ 848.990891][T17509] ? __pfx_device_add+0x10/0x10 [ 848.990908][T17509] ? __pfx___might_resched+0x10/0x10 [ 848.990922][T17509] ? lockdep_hardirqs_on+0x7c/0x110 [ 848.990942][T17509] __add_disk+0x457/0xf00 [ 848.990962][T17509] add_disk_fwnode+0x13f/0x5d0 [ 848.990980][T17509] loop_add+0x903/0xb70 [ 848.991002][T17509] ? __pfx_loop_add+0x10/0x10 [ 848.991036][T17509] ? find_held_lock+0x2b/0x80 [ 848.991052][T17509] loop_control_ioctl+0x13e/0x630 [ 848.991073][T17509] ? __pfx_loop_control_ioctl+0x10/0x10 [ 848.991098][T17509] ? __pfx_loop_control_ioctl+0x10/0x10 [ 848.991120][T17509] __x64_sys_ioctl+0x18b/0x210 [ 848.991143][T17509] do_syscall_64+0xcd/0x490 [ 848.991159][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.991174][T17509] RIP: 0033:0x7fdd03f8eb69 [ 848.991186][T17509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.991200][T17509] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.991214][T17509] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 848.991223][T17509] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 848.991241][T17509] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 848.991250][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.991259][T17509] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 848.991279][T17509] [ 849.415488][T17511] FAULT_INJECTION: forcing a failure. [ 849.415488][T17511] name failslab, interval 1, probability 0, space 0, times 0 [ 849.428181][T17511] CPU: 0 UID: 0 PID: 17511 Comm: syz.0.2231 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 849.428203][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 849.428213][T17511] Call Trace: [ 849.428219][T17511] [ 849.428226][T17511] dump_stack_lvl+0x16c/0x1f0 [ 849.428246][T17511] should_fail_ex+0x512/0x640 [ 849.428264][T17511] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 849.428282][T17511] should_failslab+0xc2/0x120 [ 849.428301][T17511] __kmalloc_cache_noprof+0x6a/0x3e0 [ 849.428316][T17511] ? percpu_ref_init+0xec/0x410 [ 849.428332][T17511] ? __pfx_blkg_release+0x10/0x10 [ 849.428351][T17511] percpu_ref_init+0xec/0x410 [ 849.428365][T17511] ? kasan_save_track+0x14/0x30 [ 849.428382][T17511] blkg_alloc+0xea/0xb00 [ 849.428405][T17511] blkcg_init_disk+0x51/0x160 [ 849.428427][T17511] __alloc_disk_node+0x299/0x630 [ 849.428447][T17511] __blk_mq_alloc_disk+0x89/0x120 [ 849.428473][T17511] loop_add+0x490/0xb70 [ 849.428497][T17511] ? __pfx_loop_add+0x10/0x10 [ 849.428530][T17511] ? find_held_lock+0x2b/0x80 [ 849.428546][T17511] loop_control_ioctl+0x13e/0x630 [ 849.428568][T17511] ? __pfx_loop_control_ioctl+0x10/0x10 [ 849.428591][T17511] ? __pfx_loop_control_ioctl+0x10/0x10 [ 849.428613][T17511] __x64_sys_ioctl+0x18b/0x210 [ 849.428637][T17511] do_syscall_64+0xcd/0x490 [ 849.428653][T17511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.428668][T17511] RIP: 0033:0x7fdd03f8eb69 [ 849.428681][T17511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.428694][T17511] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.428708][T17511] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 849.428717][T17511] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 849.428726][T17511] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 849.428734][T17511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.428743][T17511] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 849.428761][T17511] [ 849.822284][T17515] vhci_hcd: invalid port number 16 [ 849.898320][T17517] vhci_hcd: invalid port number 16 [ 849.908386][T17515] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 849.934207][T17517] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 850.159467][T17522] FAULT_INJECTION: forcing a failure. [ 850.159467][T17522] name failslab, interval 1, probability 0, space 0, times 0 [ 850.260450][T17522] CPU: 0 UID: 0 PID: 17522 Comm: syz.0.2235 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 850.260489][T17522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 850.260499][T17522] Call Trace: [ 850.260505][T17522] [ 850.260510][T17522] dump_stack_lvl+0x16c/0x1f0 [ 850.260532][T17522] should_fail_ex+0x512/0x640 [ 850.260549][T17522] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 850.260568][T17522] should_failslab+0xc2/0x120 [ 850.260587][T17522] __kmalloc_cache_noprof+0x6a/0x3e0 [ 850.260602][T17522] ? rand_initialize_disk+0x3f/0xc0 [ 850.260626][T17522] rand_initialize_disk+0x3f/0xc0 [ 850.260646][T17522] __alloc_disk_node+0x2c5/0x630 [ 850.260665][T17522] __blk_mq_alloc_disk+0x89/0x120 [ 850.260683][T17522] loop_add+0x490/0xb70 [ 850.260705][T17522] ? __pfx_loop_add+0x10/0x10 [ 850.260737][T17522] ? find_held_lock+0x2b/0x80 [ 850.260754][T17522] loop_control_ioctl+0x13e/0x630 [ 850.260775][T17522] ? __pfx_loop_control_ioctl+0x10/0x10 [ 850.260798][T17522] ? __pfx_loop_control_ioctl+0x10/0x10 [ 850.260819][T17522] __x64_sys_ioctl+0x18b/0x210 [ 850.260843][T17522] do_syscall_64+0xcd/0x490 [ 850.260859][T17522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.260874][T17522] RIP: 0033:0x7fdd03f8eb69 [ 850.260886][T17522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.260899][T17522] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 850.260913][T17522] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 850.260922][T17522] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 850.260931][T17522] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 850.260939][T17522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.260947][T17522] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 850.260964][T17522] [ 851.304880][T17534] FAULT_INJECTION: forcing a failure. [ 851.304880][T17534] name failslab, interval 1, probability 0, space 0, times 0 [ 851.318090][T17534] CPU: 1 UID: 0 PID: 17534 Comm: syz.3.2237 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 851.318112][T17534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 851.318121][T17534] Call Trace: [ 851.318127][T17534] [ 851.318132][T17534] dump_stack_lvl+0x16c/0x1f0 [ 851.318152][T17534] should_fail_ex+0x512/0x640 [ 851.318170][T17534] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 851.318198][T17534] should_failslab+0xc2/0x120 [ 851.318217][T17534] __kmalloc_cache_noprof+0x6a/0x3e0 [ 851.318233][T17534] ? rand_initialize_disk+0x3f/0xc0 [ 851.318259][T17534] rand_initialize_disk+0x3f/0xc0 [ 851.318279][T17534] __alloc_disk_node+0x2c5/0x630 [ 851.318299][T17534] __blk_mq_alloc_disk+0x89/0x120 [ 851.318316][T17534] loop_add+0x490/0xb70 [ 851.318337][T17534] ? __pfx_loop_add+0x10/0x10 [ 851.318369][T17534] ? find_held_lock+0x2b/0x80 [ 851.318397][T17534] loop_control_ioctl+0x13e/0x630 [ 851.318419][T17534] ? __pfx_loop_control_ioctl+0x10/0x10 [ 851.318444][T17534] ? __pfx_loop_control_ioctl+0x10/0x10 [ 851.318466][T17534] __x64_sys_ioctl+0x18b/0x210 [ 851.318490][T17534] do_syscall_64+0xcd/0x490 [ 851.318506][T17534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.318521][T17534] RIP: 0033:0x7f907958eb69 [ 851.318533][T17534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.318546][T17534] RSP: 002b:00007f907a4dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.318560][T17534] RAX: ffffffffffffffda RBX: 00007f90797b5fa0 RCX: 00007f907958eb69 [ 851.318569][T17534] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 851.318578][T17534] RBP: 00007f9079611df1 R08: 0000000000000000 R09: 0000000000000000 [ 851.318586][T17534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.318594][T17534] R13: 0000000000000000 R14: 00007f90797b5fa0 R15: 00007fffc7211998 [ 851.318611][T17534] [ 852.760941][T17568] vhci_hcd: invalid port number 16 [ 852.773455][T17568] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 853.163894][T17575] vhci_hcd: invalid port number 16 [ 853.170008][T17575] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 853.737019][T17585] vhci_hcd: invalid port number 16 [ 853.742178][T17585] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 853.945222][T17590] vhci_hcd: invalid port number 16 [ 854.052240][T17590] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 855.091063][T17613] FAULT_INJECTION: forcing a failure. [ 855.091063][T17613] name failslab, interval 1, probability 0, space 0, times 0 [ 855.178712][T17613] CPU: 1 UID: 0 PID: 17613 Comm: syz.1.2255 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 855.178736][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 855.178745][T17613] Call Trace: [ 855.178750][T17613] [ 855.178756][T17613] dump_stack_lvl+0x16c/0x1f0 [ 855.178776][T17613] should_fail_ex+0x512/0x640 [ 855.178795][T17613] ? fs_reclaim_acquire+0xae/0x150 [ 855.178819][T17613] should_failslab+0xc2/0x120 [ 855.178838][T17613] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 855.178856][T17613] ? __kernfs_new_node+0xd2/0x8e0 [ 855.178876][T17613] __kernfs_new_node+0xd2/0x8e0 [ 855.178899][T17613] ? __pfx___kernfs_new_node+0x10/0x10 [ 855.178921][T17613] ? find_held_lock+0x2b/0x80 [ 855.178936][T17613] ? kernfs_root+0xee/0x2a0 [ 855.178958][T17613] kernfs_new_node+0x13c/0x1e0 [ 855.178988][T17613] __kernfs_create_file+0x53/0x350 [ 855.179005][T17613] sysfs_add_file_mode_ns+0x207/0x3c0 [ 855.179026][T17613] internal_create_group+0x578/0xf30 [ 855.179051][T17613] ? __pfx_internal_create_group+0x10/0x10 [ 855.179072][T17613] ? kernfs_create_link+0x1bd/0x240 [ 855.179088][T17613] internal_create_groups+0x9d/0x150 [ 855.179108][T17613] device_add+0x731/0x1aa0 [ 855.179130][T17613] ? __pfx_device_add+0x10/0x10 [ 855.179147][T17613] ? __pfx___might_resched+0x10/0x10 [ 855.179160][T17613] ? lockdep_hardirqs_on+0x7c/0x110 [ 855.179182][T17613] __add_disk+0x457/0xf00 [ 855.179201][T17613] add_disk_fwnode+0x13f/0x5d0 [ 855.179219][T17613] loop_add+0x903/0xb70 [ 855.179241][T17613] ? __pfx_loop_add+0x10/0x10 [ 855.179274][T17613] ? find_held_lock+0x2b/0x80 [ 855.179290][T17613] loop_control_ioctl+0x13e/0x630 [ 855.179320][T17613] ? __pfx_loop_control_ioctl+0x10/0x10 [ 855.179344][T17613] ? __pfx_loop_control_ioctl+0x10/0x10 [ 855.179367][T17613] __x64_sys_ioctl+0x18b/0x210 [ 855.179391][T17613] do_syscall_64+0xcd/0x490 [ 855.179408][T17613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.179422][T17613] RIP: 0033:0x7f37bdd8eb69 [ 855.179435][T17613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.179449][T17613] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.179463][T17613] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 855.179472][T17613] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 855.179481][T17613] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 855.179489][T17613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.179497][T17613] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 855.179516][T17613] [ 856.319294][T17634] vhci_hcd: invalid port number 16 [ 856.324685][T17634] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 857.570927][T17659] FAULT_INJECTION: forcing a failure. [ 857.570927][T17659] name failslab, interval 1, probability 0, space 0, times 0 [ 857.587792][T17659] CPU: 0 UID: 0 PID: 17659 Comm: syz.1.2262 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 857.587832][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 857.587847][T17659] Call Trace: [ 857.587856][T17659] [ 857.587867][T17659] dump_stack_lvl+0x16c/0x1f0 [ 857.587901][T17659] should_fail_ex+0x512/0x640 [ 857.587932][T17659] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 857.587963][T17659] should_failslab+0xc2/0x120 [ 857.587994][T17659] __kmalloc_cache_noprof+0x6a/0x3e0 [ 857.588023][T17659] ? rand_initialize_disk+0x3f/0xc0 [ 857.588063][T17659] rand_initialize_disk+0x3f/0xc0 [ 857.588100][T17659] __alloc_disk_node+0x2c5/0x630 [ 857.588135][T17659] __blk_mq_alloc_disk+0x89/0x120 [ 857.588165][T17659] loop_add+0x490/0xb70 [ 857.588204][T17659] ? __pfx_loop_add+0x10/0x10 [ 857.588263][T17659] ? find_held_lock+0x2b/0x80 [ 857.588294][T17659] loop_control_ioctl+0x13e/0x630 [ 857.588331][T17659] ? __pfx_loop_control_ioctl+0x10/0x10 [ 857.588374][T17659] ? __pfx_loop_control_ioctl+0x10/0x10 [ 857.588410][T17659] __x64_sys_ioctl+0x18b/0x210 [ 857.588451][T17659] do_syscall_64+0xcd/0x490 [ 857.588481][T17659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.588506][T17659] RIP: 0033:0x7f37bdd8eb69 [ 857.588529][T17659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.588554][T17659] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 857.588588][T17659] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 857.588606][T17659] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 857.588622][T17659] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 857.588638][T17659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.588653][T17659] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 857.588687][T17659] [ 858.199071][T17673] vhci_hcd: invalid port number 16 [ 858.219361][T17673] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 858.668460][T17689] vhci_hcd: invalid port number 16 [ 858.673637][T17689] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 859.419446][T17699] vhci_hcd: invalid port number 16 [ 859.432060][T17699] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 862.169956][T17754] vhci_hcd: invalid port number 16 [ 862.176643][T17754] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 862.241023][T17757] vhci_hcd: invalid port number 16 [ 862.249882][T17757] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 864.368149][T17793] FAULT_INJECTION: forcing a failure. [ 864.368149][T17793] name failslab, interval 1, probability 0, space 0, times 0 [ 864.381739][T17793] CPU: 0 UID: 0 PID: 17793 Comm: syz.0.2297 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 864.381762][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 864.381772][T17793] Call Trace: [ 864.381778][T17793] [ 864.381783][T17793] dump_stack_lvl+0x16c/0x1f0 [ 864.381804][T17793] should_fail_ex+0x512/0x640 [ 864.381822][T17793] ? fs_reclaim_acquire+0xae/0x150 [ 864.381847][T17793] should_failslab+0xc2/0x120 [ 864.381883][T17793] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 864.381901][T17793] ? __asan_memcpy+0x3c/0x60 [ 864.381915][T17793] ? __kernfs_new_node+0xd2/0x8e0 [ 864.381936][T17793] __kernfs_new_node+0xd2/0x8e0 [ 864.381956][T17793] ? __pfx___kernfs_new_node+0x10/0x10 [ 864.381978][T17793] ? find_held_lock+0x2b/0x80 [ 864.381999][T17793] ? kernfs_root+0xee/0x2a0 [ 864.382021][T17793] kernfs_new_node+0x13c/0x1e0 [ 864.382045][T17793] kernfs_create_dir_ns+0x4c/0x1a0 [ 864.382068][T17793] sysfs_create_dir_ns+0x13a/0x2b0 [ 864.382087][T17793] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 864.382103][T17793] ? find_held_lock+0x2b/0x80 [ 864.382119][T17793] ? class_dir_child_ns_type+0xd/0x60 [ 864.382139][T17793] kobject_add_internal+0x2c4/0x9b0 [ 864.382160][T17793] kobject_add+0x16e/0x240 [ 864.382176][T17793] ? __pfx_kobject_add+0x10/0x10 [ 864.382193][T17793] ? get_device_parent+0x1c5/0x4e0 [ 864.382210][T17793] ? kobject_put+0xab/0x5a0 [ 864.382231][T17793] device_add+0x288/0x1aa0 [ 864.382263][T17793] ? __pfx_dev_set_name+0x10/0x10 [ 864.382284][T17793] ? __pfx_device_add+0x10/0x10 [ 864.382302][T17793] ? __pfx___might_resched+0x10/0x10 [ 864.382315][T17793] ? lockdep_hardirqs_on+0x7c/0x110 [ 864.382336][T17793] __add_disk+0x457/0xf00 [ 864.382356][T17793] add_disk_fwnode+0x13f/0x5d0 [ 864.382374][T17793] loop_add+0x903/0xb70 [ 864.382396][T17793] ? __pfx_loop_add+0x10/0x10 [ 864.382429][T17793] ? find_held_lock+0x2b/0x80 [ 864.382445][T17793] loop_control_ioctl+0x13e/0x630 [ 864.382466][T17793] ? __pfx_loop_control_ioctl+0x10/0x10 [ 864.382490][T17793] ? __pfx_loop_control_ioctl+0x10/0x10 [ 864.382512][T17793] __x64_sys_ioctl+0x18b/0x210 [ 864.382535][T17793] do_syscall_64+0xcd/0x490 [ 864.382551][T17793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.382566][T17793] RIP: 0033:0x7fdd03f8eb69 [ 864.382578][T17793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.382591][T17793] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.382606][T17793] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 864.382616][T17793] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 864.382625][T17793] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 864.382634][T17793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.382642][T17793] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 864.382662][T17793] [ 864.382682][T17793] kobject: kobject_add_internal failed for loop92 (error: -12 parent: block) [ 865.451331][T17820] vhci_hcd: invalid port number 16 [ 865.460413][T17820] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 867.669050][T17870] vhci_hcd: invalid port number 16 [ 867.672487][T17868] FAULT_INJECTION: forcing a failure. [ 867.672487][T17868] name failslab, interval 1, probability 0, space 0, times 0 [ 867.675451][T17870] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 867.689308][T17868] CPU: 1 UID: 0 PID: 17868 Comm: syz.1.2304 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 867.689347][T17868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 867.689361][T17868] Call Trace: [ 867.689369][T17868] [ 867.689380][T17868] dump_stack_lvl+0x16c/0x1f0 [ 867.689413][T17868] should_fail_ex+0x512/0x640 [ 867.689443][T17868] ? fs_reclaim_acquire+0xae/0x150 [ 867.689482][T17868] should_failslab+0xc2/0x120 [ 867.689515][T17868] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 867.689547][T17868] ? __kernfs_new_node+0xd2/0x8e0 [ 867.689583][T17868] __kernfs_new_node+0xd2/0x8e0 [ 867.689616][T17868] ? kernfs_add_one+0x37d/0x840 [ 867.689648][T17868] ? __pfx___kernfs_new_node+0x10/0x10 [ 867.689686][T17868] ? find_held_lock+0x2b/0x80 [ 867.689712][T17868] ? kernfs_root+0xee/0x2a0 [ 867.689749][T17868] kernfs_new_node+0x13c/0x1e0 [ 867.689797][T17868] __kernfs_create_file+0x53/0x350 [ 867.689829][T17868] sysfs_add_file_mode_ns+0x207/0x3c0 [ 867.689869][T17868] sysfs_create_file_ns+0x13d/0x1d0 [ 867.689899][T17868] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 867.689926][T17868] ? down_read+0x13d/0x480 [ 867.689954][T17868] ? __pfx___up_read+0x10/0x10 [ 867.689989][T17868] ? acpi_device_notify+0x351/0x480 [ 867.690020][T17868] device_create_file+0xf2/0x1e0 [ 867.690057][T17868] device_add+0x2bf/0x1aa0 [ 867.690089][T17868] ? __pfx_dev_set_name+0x10/0x10 [ 867.690124][T17868] ? __pfx_device_add+0x10/0x10 [ 867.690154][T17868] ? __pfx___might_resched+0x10/0x10 [ 867.690177][T17868] ? lockdep_hardirqs_on+0x7c/0x110 [ 867.690214][T17868] __add_disk+0x457/0xf00 [ 867.690251][T17868] add_disk_fwnode+0x13f/0x5d0 [ 867.690284][T17868] loop_add+0x903/0xb70 [ 867.690320][T17868] ? __pfx_loop_add+0x10/0x10 [ 867.690381][T17868] ? find_held_lock+0x2b/0x80 [ 867.690410][T17868] loop_control_ioctl+0x13e/0x630 [ 867.690446][T17868] ? __pfx_loop_control_ioctl+0x10/0x10 [ 867.690487][T17868] ? __pfx_loop_control_ioctl+0x10/0x10 [ 867.690522][T17868] __x64_sys_ioctl+0x18b/0x210 [ 867.690560][T17868] do_syscall_64+0xcd/0x490 [ 867.690590][T17868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.690615][T17868] RIP: 0033:0x7f37bdd8eb69 [ 867.690635][T17868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.690659][T17868] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.690683][T17868] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 867.690700][T17868] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 867.690715][T17868] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 867.690730][T17868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.690745][T17868] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 867.690785][T17868] [ 868.188860][T17875] vhci_hcd: invalid port number 16 [ 868.206668][T17875] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 869.081935][T17889] vhci_hcd: invalid port number 16 [ 869.111425][T17889] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 869.371041][T17896] FAULT_INJECTION: forcing a failure. [ 869.371041][T17896] name failslab, interval 1, probability 0, space 0, times 0 [ 869.384125][T17896] CPU: 1 UID: 0 PID: 17896 Comm: syz.1.2310 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 869.384148][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 869.384158][T17896] Call Trace: [ 869.384163][T17896] [ 869.384169][T17896] dump_stack_lvl+0x16c/0x1f0 [ 869.384190][T17896] should_fail_ex+0x512/0x640 [ 869.384208][T17896] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 869.384226][T17896] should_failslab+0xc2/0x120 [ 869.384247][T17896] __kmalloc_cache_noprof+0x6a/0x3e0 [ 869.384261][T17896] ? percpu_ref_init+0xec/0x410 [ 869.384279][T17896] ? __pfx_blkg_release+0x10/0x10 [ 869.384299][T17896] percpu_ref_init+0xec/0x410 [ 869.384313][T17896] ? kasan_save_track+0x14/0x30 [ 869.384330][T17896] blkg_alloc+0xea/0xb00 [ 869.384353][T17896] blkcg_init_disk+0x51/0x160 [ 869.384376][T17896] __alloc_disk_node+0x299/0x630 [ 869.384395][T17896] __blk_mq_alloc_disk+0x89/0x120 [ 869.384412][T17896] loop_add+0x490/0xb70 [ 869.384434][T17896] ? __pfx_loop_add+0x10/0x10 [ 869.384466][T17896] ? find_held_lock+0x2b/0x80 [ 869.384484][T17896] loop_control_ioctl+0x13e/0x630 [ 869.384506][T17896] ? __pfx_loop_control_ioctl+0x10/0x10 [ 869.384531][T17896] ? __pfx_loop_control_ioctl+0x10/0x10 [ 869.384553][T17896] __x64_sys_ioctl+0x18b/0x210 [ 869.384576][T17896] do_syscall_64+0xcd/0x490 [ 869.384593][T17896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.384607][T17896] RIP: 0033:0x7f37bdd8eb69 [ 869.384619][T17896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.384633][T17896] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 869.384647][T17896] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 869.384656][T17896] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 869.384665][T17896] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 869.384673][T17896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.384681][T17896] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 869.384699][T17896] [ 871.222913][T17933] vhci_hcd: invalid port number 16 [ 871.228507][T17933] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 871.258477][T17931] FAULT_INJECTION: forcing a failure. [ 871.258477][T17931] name failslab, interval 1, probability 0, space 0, times 0 [ 871.273073][T17931] CPU: 1 UID: 0 PID: 17931 Comm: syz.3.2320 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 871.273097][T17931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 871.273107][T17931] Call Trace: [ 871.273113][T17931] [ 871.273119][T17931] dump_stack_lvl+0x16c/0x1f0 [ 871.273139][T17931] should_fail_ex+0x512/0x640 [ 871.273157][T17931] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 871.273174][T17931] should_failslab+0xc2/0x120 [ 871.273194][T17931] __kmalloc_cache_noprof+0x6a/0x3e0 [ 871.273209][T17931] ? percpu_ref_init+0xec/0x410 [ 871.273226][T17931] ? __pfx_blkg_release+0x10/0x10 [ 871.273245][T17931] percpu_ref_init+0xec/0x410 [ 871.273258][T17931] ? kasan_save_track+0x14/0x30 [ 871.273276][T17931] blkg_alloc+0xea/0xb00 [ 871.273299][T17931] blkcg_init_disk+0x51/0x160 [ 871.273321][T17931] __alloc_disk_node+0x299/0x630 [ 871.273343][T17931] __blk_mq_alloc_disk+0x89/0x120 [ 871.273370][T17931] loop_add+0x490/0xb70 [ 871.273407][T17931] ? __pfx_loop_add+0x10/0x10 [ 871.273450][T17931] ? find_held_lock+0x2b/0x80 [ 871.273467][T17931] loop_control_ioctl+0x13e/0x630 [ 871.273503][T17931] ? __pfx_loop_control_ioctl+0x10/0x10 [ 871.273528][T17931] ? __pfx_loop_control_ioctl+0x10/0x10 [ 871.273550][T17931] __x64_sys_ioctl+0x18b/0x210 [ 871.273575][T17931] do_syscall_64+0xcd/0x490 [ 871.273592][T17931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.273615][T17931] RIP: 0033:0x7f907958eb69 [ 871.273635][T17931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.273661][T17931] RSP: 002b:00007f907a4dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.273686][T17931] RAX: ffffffffffffffda RBX: 00007f90797b5fa0 RCX: 00007f907958eb69 [ 871.273701][T17931] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 871.273710][T17931] RBP: 00007f9079611df1 R08: 0000000000000000 R09: 0000000000000000 [ 871.273718][T17931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.273728][T17931] R13: 0000000000000000 R14: 00007f90797b5fa0 R15: 00007fffc7211998 [ 871.273746][T17931] [ 871.822711][T17944] vhci_hcd: invalid port number 16 [ 871.830970][T17944] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 874.983884][T18008] vhci_hcd: invalid port number 16 [ 874.991591][T18008] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 875.498336][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.504892][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.910928][T18019] FAULT_INJECTION: forcing a failure. [ 875.910928][T18019] name failslab, interval 1, probability 0, space 0, times 0 [ 875.924003][T18019] CPU: 0 UID: 0 PID: 18019 Comm: syz.2.2337 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 875.924026][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.924036][T18019] Call Trace: [ 875.924041][T18019] [ 875.924048][T18019] dump_stack_lvl+0x16c/0x1f0 [ 875.924068][T18019] should_fail_ex+0x512/0x640 [ 875.924087][T18019] ? fs_reclaim_acquire+0xae/0x150 [ 875.924114][T18019] should_failslab+0xc2/0x120 [ 875.924135][T18019] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 875.924155][T18019] ? find_held_lock+0x2b/0x80 [ 875.924168][T18019] ? kstrdup_const+0x63/0x80 [ 875.924187][T18019] kstrdup+0x53/0x100 [ 875.924205][T18019] kstrdup_const+0x63/0x80 [ 875.924221][T18019] __kernfs_new_node+0x9b/0x8e0 [ 875.924242][T18019] ? __pfx___kernfs_new_node+0x10/0x10 [ 875.924264][T18019] ? find_held_lock+0x2b/0x80 [ 875.924278][T18019] ? kernfs_root+0xee/0x2a0 [ 875.924299][T18019] kernfs_new_node+0x13c/0x1e0 [ 875.924322][T18019] kernfs_create_dir_ns+0x4c/0x1a0 [ 875.924344][T18019] sysfs_create_dir_ns+0x13a/0x2b0 [ 875.924369][T18019] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 875.924386][T18019] ? find_held_lock+0x2b/0x80 [ 875.924404][T18019] ? class_dir_child_ns_type+0xd/0x60 [ 875.924425][T18019] kobject_add_internal+0x2c4/0x9b0 [ 875.924446][T18019] kobject_add+0x16e/0x240 [ 875.924463][T18019] ? __pfx_kobject_add+0x10/0x10 [ 875.924480][T18019] ? get_device_parent+0x1c5/0x4e0 [ 875.924497][T18019] ? kobject_put+0xab/0x5a0 [ 875.924517][T18019] device_add+0x288/0x1aa0 [ 875.924536][T18019] ? __pfx_dev_set_name+0x10/0x10 [ 875.924557][T18019] ? __pfx_device_add+0x10/0x10 [ 875.924574][T18019] ? __pfx___might_resched+0x10/0x10 [ 875.924587][T18019] ? lockdep_hardirqs_on+0x7c/0x110 [ 875.924608][T18019] __add_disk+0x457/0xf00 [ 875.924628][T18019] add_disk_fwnode+0x13f/0x5d0 [ 875.924646][T18019] loop_add+0x903/0xb70 [ 875.924667][T18019] ? __pfx_loop_add+0x10/0x10 [ 875.924701][T18019] ? find_held_lock+0x2b/0x80 [ 875.924717][T18019] loop_control_ioctl+0x13e/0x630 [ 875.924739][T18019] ? __pfx_loop_control_ioctl+0x10/0x10 [ 875.924763][T18019] ? __pfx_loop_control_ioctl+0x10/0x10 [ 875.924785][T18019] __x64_sys_ioctl+0x18b/0x210 [ 875.924808][T18019] do_syscall_64+0xcd/0x490 [ 875.924825][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.924840][T18019] RIP: 0033:0x7fa84ef8eb69 [ 875.924855][T18019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.924870][T18019] RSP: 002b:00007fa84fd21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.924885][T18019] RAX: ffffffffffffffda RBX: 00007fa84f1b5fa0 RCX: 00007fa84ef8eb69 [ 875.924895][T18019] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 875.924905][T18019] RBP: 00007fa84f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 875.924914][T18019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.924929][T18019] R13: 0000000000000000 R14: 00007fa84f1b5fa0 R15: 00007ffd1e6430e8 [ 875.924961][T18019] [ 876.288241][T18019] kobject: kobject_add_internal failed for loop96 (error: -12 parent: block) [ 877.183430][T18043] vhci_hcd: invalid port number 16 [ 877.188762][T18043] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 877.611143][T18048] FAULT_INJECTION: forcing a failure. [ 877.611143][T18048] name failslab, interval 1, probability 0, space 0, times 0 [ 877.625199][T18048] CPU: 1 UID: 0 PID: 18048 Comm: syz.3.2345 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 877.625239][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 877.625255][T18048] Call Trace: [ 877.625264][T18048] [ 877.625274][T18048] dump_stack_lvl+0x16c/0x1f0 [ 877.625308][T18048] should_fail_ex+0x512/0x640 [ 877.625339][T18048] ? fs_reclaim_acquire+0xae/0x150 [ 877.625380][T18048] should_failslab+0xc2/0x120 [ 877.625413][T18048] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 877.625449][T18048] ? __kernfs_new_node+0xd2/0x8e0 [ 877.625486][T18048] __kernfs_new_node+0xd2/0x8e0 [ 877.625519][T18048] ? kernfs_add_one+0x37d/0x840 [ 877.625553][T18048] ? __pfx___kernfs_new_node+0x10/0x10 [ 877.625594][T18048] ? find_held_lock+0x2b/0x80 [ 877.625622][T18048] ? kernfs_root+0xee/0x2a0 [ 877.625659][T18048] kernfs_new_node+0x13c/0x1e0 [ 877.625700][T18048] __kernfs_create_file+0x53/0x350 [ 877.625730][T18048] sysfs_add_file_mode_ns+0x207/0x3c0 [ 877.625769][T18048] sysfs_create_file_ns+0x13d/0x1d0 [ 877.625799][T18048] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 877.625825][T18048] ? down_read+0x13d/0x480 [ 877.625855][T18048] ? __pfx___up_read+0x10/0x10 [ 877.625890][T18048] ? acpi_device_notify+0x351/0x480 [ 877.625923][T18048] device_create_file+0xf2/0x1e0 [ 877.625962][T18048] device_add+0x2bf/0x1aa0 [ 877.625995][T18048] ? __pfx_dev_set_name+0x10/0x10 [ 877.626031][T18048] ? __pfx_device_add+0x10/0x10 [ 877.626072][T18048] ? __pfx___might_resched+0x10/0x10 [ 877.626097][T18048] ? lockdep_hardirqs_on+0x7c/0x110 [ 877.626138][T18048] __add_disk+0x457/0xf00 [ 877.626175][T18048] add_disk_fwnode+0x13f/0x5d0 [ 877.626209][T18048] loop_add+0x903/0xb70 [ 877.626247][T18048] ? __pfx_loop_add+0x10/0x10 [ 877.626306][T18048] ? find_held_lock+0x2b/0x80 [ 877.626337][T18048] loop_control_ioctl+0x13e/0x630 [ 877.626375][T18048] ? __pfx_loop_control_ioctl+0x10/0x10 [ 877.626417][T18048] ? __pfx_loop_control_ioctl+0x10/0x10 [ 877.626456][T18048] __x64_sys_ioctl+0x18b/0x210 [ 877.626496][T18048] do_syscall_64+0xcd/0x490 [ 877.626525][T18048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.626552][T18048] RIP: 0033:0x7f907958eb69 [ 877.626574][T18048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.626600][T18048] RSP: 002b:00007f907a4dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.626625][T18048] RAX: ffffffffffffffda RBX: 00007f90797b5fa0 RCX: 00007f907958eb69 [ 877.626643][T18048] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 877.626660][T18048] RBP: 00007f9079611df1 R08: 0000000000000000 R09: 0000000000000000 [ 877.626676][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.626692][T18048] R13: 0000000000000000 R14: 00007f90797b5fa0 R15: 00007fffc7211998 [ 877.626728][T18048] [ 878.090468][T18053] FAULT_INJECTION: forcing a failure. [ 878.090468][T18053] name failslab, interval 1, probability 0, space 0, times 0 [ 878.125807][T18053] CPU: 0 UID: 0 PID: 18053 Comm: syz.2.2346 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 878.125848][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.125865][T18053] Call Trace: [ 878.125874][T18053] [ 878.125885][T18053] dump_stack_lvl+0x16c/0x1f0 [ 878.125919][T18053] should_fail_ex+0x512/0x640 [ 878.125950][T18053] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 878.125981][T18053] should_failslab+0xc2/0x120 [ 878.126015][T18053] __kmalloc_cache_noprof+0x6a/0x3e0 [ 878.126042][T18053] ? rand_initialize_disk+0x3f/0xc0 [ 878.126084][T18053] rand_initialize_disk+0x3f/0xc0 [ 878.126118][T18053] __alloc_disk_node+0x2c5/0x630 [ 878.126159][T18053] __blk_mq_alloc_disk+0x89/0x120 [ 878.126190][T18053] loop_add+0x490/0xb70 [ 878.126229][T18053] ? __pfx_loop_add+0x10/0x10 [ 878.126289][T18053] ? find_held_lock+0x2b/0x80 [ 878.126321][T18053] loop_control_ioctl+0x13e/0x630 [ 878.126358][T18053] ? __pfx_loop_control_ioctl+0x10/0x10 [ 878.126401][T18053] ? __pfx_loop_control_ioctl+0x10/0x10 [ 878.126440][T18053] __x64_sys_ioctl+0x18b/0x210 [ 878.126480][T18053] do_syscall_64+0xcd/0x490 [ 878.126510][T18053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.126536][T18053] RIP: 0033:0x7fa84ef8eb69 [ 878.126557][T18053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.126582][T18053] RSP: 002b:00007fa84fd21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.126607][T18053] RAX: ffffffffffffffda RBX: 00007fa84f1b5fa0 RCX: 00007fa84ef8eb69 [ 878.126625][T18053] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 878.126641][T18053] RBP: 00007fa84f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 878.126657][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.126672][T18053] R13: 0000000000000000 R14: 00007fa84f1b5fa0 R15: 00007ffd1e6430e8 [ 878.126707][T18053] [ 878.346547][T18057] vhci_hcd: invalid port number 16 [ 878.352651][T18057] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 878.603652][T18064] FAULT_INJECTION: forcing a failure. [ 878.603652][T18064] name failslab, interval 1, probability 0, space 0, times 0 [ 878.625593][T18064] CPU: 0 UID: 0 PID: 18064 Comm: syz.2.2350 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 878.625632][T18064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.625648][T18064] Call Trace: [ 878.625657][T18064] [ 878.625667][T18064] dump_stack_lvl+0x16c/0x1f0 [ 878.625700][T18064] should_fail_ex+0x512/0x640 [ 878.625730][T18064] ? fs_reclaim_acquire+0xae/0x150 [ 878.625773][T18064] should_failslab+0xc2/0x120 [ 878.625807][T18064] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 878.625842][T18064] ? find_held_lock+0x2b/0x80 [ 878.625865][T18064] ? kstrdup_const+0x63/0x80 [ 878.625900][T18064] kstrdup+0x53/0x100 [ 878.625932][T18064] kstrdup_const+0x63/0x80 [ 878.625960][T18064] __kernfs_new_node+0x9b/0x8e0 [ 878.625998][T18064] ? __pfx___kernfs_new_node+0x10/0x10 [ 878.626039][T18064] ? find_held_lock+0x2b/0x80 [ 878.626066][T18064] ? kernfs_root+0xee/0x2a0 [ 878.626104][T18064] kernfs_new_node+0x13c/0x1e0 [ 878.626146][T18064] kernfs_create_dir_ns+0x4c/0x1a0 [ 878.626186][T18064] sysfs_create_dir_ns+0x13a/0x2b0 [ 878.626227][T18064] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 878.626257][T18064] ? find_held_lock+0x2b/0x80 [ 878.626289][T18064] ? class_dir_child_ns_type+0xd/0x60 [ 878.626326][T18064] kobject_add_internal+0x2c4/0x9b0 [ 878.626363][T18064] kobject_add+0x16e/0x240 [ 878.626392][T18064] ? __pfx_kobject_add+0x10/0x10 [ 878.626423][T18064] ? get_device_parent+0x1c5/0x4e0 [ 878.626455][T18064] ? kobject_put+0xab/0x5a0 [ 878.626493][T18064] device_add+0x288/0x1aa0 [ 878.626526][T18064] ? __pfx_dev_set_name+0x10/0x10 [ 878.626562][T18064] ? __pfx_device_add+0x10/0x10 [ 878.626593][T18064] ? __pfx___might_resched+0x10/0x10 [ 878.626617][T18064] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.626656][T18064] __add_disk+0x457/0xf00 [ 878.626693][T18064] add_disk_fwnode+0x13f/0x5d0 [ 878.626726][T18064] loop_add+0x903/0xb70 [ 878.626765][T18064] ? __pfx_loop_add+0x10/0x10 [ 878.626827][T18064] ? find_held_lock+0x2b/0x80 [ 878.626858][T18064] loop_control_ioctl+0x13e/0x630 [ 878.626896][T18064] ? __pfx_loop_control_ioctl+0x10/0x10 [ 878.626939][T18064] ? __pfx_loop_control_ioctl+0x10/0x10 [ 878.626978][T18064] __x64_sys_ioctl+0x18b/0x210 [ 878.627019][T18064] do_syscall_64+0xcd/0x490 [ 878.627049][T18064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.627075][T18064] RIP: 0033:0x7fa84ef8eb69 [ 878.627096][T18064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.627121][T18064] RSP: 002b:00007fa84fd21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.627146][T18064] RAX: ffffffffffffffda RBX: 00007fa84f1b5fa0 RCX: 00007fa84ef8eb69 [ 878.627165][T18064] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 878.627182][T18064] RBP: 00007fa84f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 878.627197][T18064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.627220][T18064] R13: 0000000000000000 R14: 00007fa84f1b5fa0 R15: 00007ffd1e6430e8 [ 878.627255][T18064] [ 878.627269][T18064] kobject: kobject_add_internal failed for loop97 (error: -12 parent: block) [ 879.247674][T18072] vhci_hcd: invalid port number 16 [ 879.252836][T18072] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 879.572448][T18075] FAULT_INJECTION: forcing a failure. [ 879.572448][T18075] name failslab, interval 1, probability 0, space 0, times 0 [ 879.586680][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.1.2352 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 879.586717][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 879.586734][T18075] Call Trace: [ 879.586743][T18075] [ 879.586753][T18075] dump_stack_lvl+0x16c/0x1f0 [ 879.586788][T18075] should_fail_ex+0x512/0x640 [ 879.586819][T18075] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 879.586849][T18075] should_failslab+0xc2/0x120 [ 879.586893][T18075] __kmalloc_cache_noprof+0x6a/0x3e0 [ 879.586920][T18075] ? percpu_ref_init+0xec/0x410 [ 879.586949][T18075] ? __pfx_blkg_release+0x10/0x10 [ 879.586983][T18075] percpu_ref_init+0xec/0x410 [ 879.587007][T18075] ? kasan_save_track+0x14/0x30 [ 879.587039][T18075] blkg_alloc+0xea/0xb00 [ 879.587081][T18075] blkcg_init_disk+0x51/0x160 [ 879.587120][T18075] __alloc_disk_node+0x299/0x630 [ 879.587155][T18075] __blk_mq_alloc_disk+0x89/0x120 [ 879.587184][T18075] loop_add+0x490/0xb70 [ 879.587223][T18075] ? __pfx_loop_add+0x10/0x10 [ 879.587283][T18075] ? find_held_lock+0x2b/0x80 [ 879.587314][T18075] loop_control_ioctl+0x13e/0x630 [ 879.587352][T18075] ? __pfx_loop_control_ioctl+0x10/0x10 [ 879.587394][T18075] ? __pfx_loop_control_ioctl+0x10/0x10 [ 879.587433][T18075] __x64_sys_ioctl+0x18b/0x210 [ 879.587473][T18075] do_syscall_64+0xcd/0x490 [ 879.587503][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.587530][T18075] RIP: 0033:0x7f37bdd8eb69 [ 879.587550][T18075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.587575][T18075] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.587600][T18075] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 879.587617][T18075] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 879.587633][T18075] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 879.587649][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.587665][T18075] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 879.587698][T18075] [ 880.198241][T18090] FAULT_INJECTION: forcing a failure. [ 880.198241][T18090] name failslab, interval 1, probability 0, space 0, times 0 [ 880.211364][T18090] CPU: 1 UID: 0 PID: 18090 Comm: syz.2.2356 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 880.211402][T18090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 880.211417][T18090] Call Trace: [ 880.211426][T18090] [ 880.211437][T18090] dump_stack_lvl+0x16c/0x1f0 [ 880.211469][T18090] should_fail_ex+0x512/0x640 [ 880.211499][T18090] ? fs_reclaim_acquire+0xae/0x150 [ 880.211540][T18090] should_failslab+0xc2/0x120 [ 880.211574][T18090] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 880.211605][T18090] ? __kernfs_new_node+0xd2/0x8e0 [ 880.211640][T18090] __kernfs_new_node+0xd2/0x8e0 [ 880.211673][T18090] ? __pfx___kernfs_new_node+0x10/0x10 [ 880.211711][T18090] ? find_held_lock+0x2b/0x80 [ 880.211735][T18090] ? kernfs_root+0xee/0x2a0 [ 880.211771][T18090] kernfs_new_node+0x13c/0x1e0 [ 880.211807][T18090] __kernfs_create_file+0x53/0x350 [ 880.211848][T18090] sysfs_add_file_mode_ns+0x207/0x3c0 [ 880.211884][T18090] internal_create_group+0x578/0xf30 [ 880.211921][T18090] ? __pfx_internal_create_group+0x10/0x10 [ 880.211958][T18090] ? kernfs_create_link+0x1bd/0x240 [ 880.211987][T18090] internal_create_groups+0x9d/0x150 [ 880.212020][T18090] device_add+0x731/0x1aa0 [ 880.212057][T18090] ? __pfx_device_add+0x10/0x10 [ 880.212085][T18090] ? __pfx___might_resched+0x10/0x10 [ 880.212108][T18090] ? lockdep_hardirqs_on+0x7c/0x110 [ 880.212145][T18090] __add_disk+0x457/0xf00 [ 880.212178][T18090] add_disk_fwnode+0x13f/0x5d0 [ 880.212206][T18090] loop_add+0x903/0xb70 [ 880.212229][T18090] ? __pfx_loop_add+0x10/0x10 [ 880.212265][T18090] ? find_held_lock+0x2b/0x80 [ 880.212282][T18090] loop_control_ioctl+0x13e/0x630 [ 880.212304][T18090] ? __pfx_loop_control_ioctl+0x10/0x10 [ 880.212328][T18090] ? __pfx_loop_control_ioctl+0x10/0x10 [ 880.212352][T18090] __x64_sys_ioctl+0x18b/0x210 [ 880.212375][T18090] do_syscall_64+0xcd/0x490 [ 880.212391][T18090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.212406][T18090] RIP: 0033:0x7fa84ef8eb69 [ 880.212419][T18090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.212432][T18090] RSP: 002b:00007fa84fd21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.212447][T18090] RAX: ffffffffffffffda RBX: 00007fa84f1b5fa0 RCX: 00007fa84ef8eb69 [ 880.212456][T18090] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 880.212464][T18090] RBP: 00007fa84f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 880.212473][T18090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.212482][T18090] R13: 0000000000000000 R14: 00007fa84f1b5fa0 R15: 00007ffd1e6430e8 [ 880.212500][T18090] [ 881.071504][T18098] vhci_hcd: invalid port number 16 [ 881.102026][T18103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 881.110775][T18103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 881.121128][T18103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 881.130509][T18098] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 881.140187][T18103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 881.153105][T18103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 881.747752][T18108] FAULT_INJECTION: forcing a failure. [ 881.747752][T18108] name failslab, interval 1, probability 0, space 0, times 0 [ 881.766348][T18108] CPU: 1 UID: 0 PID: 18108 Comm: syz.1.2360 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 881.766372][T18108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 881.766381][T18108] Call Trace: [ 881.766387][T18108] [ 881.766393][T18108] dump_stack_lvl+0x16c/0x1f0 [ 881.766413][T18108] should_fail_ex+0x512/0x640 [ 881.766431][T18108] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 881.766448][T18108] should_failslab+0xc2/0x120 [ 881.766467][T18108] __kmalloc_cache_noprof+0x6a/0x3e0 [ 881.766482][T18108] ? percpu_ref_init+0xec/0x410 [ 881.766498][T18108] ? __pfx_blkg_release+0x10/0x10 [ 881.766517][T18108] percpu_ref_init+0xec/0x410 [ 881.766530][T18108] ? kasan_save_track+0x14/0x30 [ 881.766547][T18108] blkg_alloc+0xea/0xb00 [ 881.766571][T18108] blkcg_init_disk+0x51/0x160 [ 881.766593][T18108] __alloc_disk_node+0x299/0x630 [ 881.766612][T18108] __blk_mq_alloc_disk+0x89/0x120 [ 881.766629][T18108] loop_add+0x490/0xb70 [ 881.766652][T18108] ? __pfx_loop_add+0x10/0x10 [ 881.766684][T18108] ? find_held_lock+0x2b/0x80 [ 881.766701][T18108] loop_control_ioctl+0x13e/0x630 [ 881.766732][T18108] ? __pfx_loop_control_ioctl+0x10/0x10 [ 881.766757][T18108] ? __pfx_loop_control_ioctl+0x10/0x10 [ 881.766780][T18108] __x64_sys_ioctl+0x18b/0x210 [ 881.766805][T18108] do_syscall_64+0xcd/0x490 [ 881.766822][T18108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.766837][T18108] RIP: 0033:0x7f37bdd8eb69 [ 881.766848][T18108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.766862][T18108] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 881.766876][T18108] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 881.766885][T18108] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 881.766893][T18108] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 881.766901][T18108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.766909][T18108] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 881.766927][T18108] [ 882.289428][T18101] chnl_net:caif_netlink_parms(): no params data found [ 882.380682][T18118] vhci_hcd: invalid port number 16 [ 882.385916][T18118] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 882.409747][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.704203][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.016333][T18101] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.023537][T18101] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.031144][T18101] bridge_slave_0: entered allmulticast mode [ 883.056658][T18101] bridge_slave_0: entered promiscuous mode [ 883.094687][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.155736][T18101] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.206883][T18101] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.237780][T18101] bridge_slave_1: entered allmulticast mode [ 883.245715][T18103] Bluetooth: hci4: command tx timeout [ 883.270188][T18101] bridge_slave_1: entered promiscuous mode [ 883.454338][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.552930][T18101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.587423][T18101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.721432][T18101] team0: Port device team_slave_0 added [ 883.734723][T18101] team0: Port device team_slave_1 added [ 884.079139][T18101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.096715][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.128548][T18101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.199126][T18101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.213094][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.243786][T18101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.266583][T18149] FAULT_INJECTION: forcing a failure. [ 884.266583][T18149] name failslab, interval 1, probability 0, space 0, times 0 [ 884.282887][ T59] bridge_slave_1: left allmulticast mode [ 884.295034][T18149] CPU: 0 UID: 0 PID: 18149 Comm: syz.0.2373 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 884.295067][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 884.295083][T18149] Call Trace: [ 884.295092][T18149] [ 884.295103][T18149] dump_stack_lvl+0x16c/0x1f0 [ 884.295135][T18149] should_fail_ex+0x512/0x640 [ 884.295166][T18149] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 884.295194][T18149] should_failslab+0xc2/0x120 [ 884.295226][T18149] __kmalloc_cache_noprof+0x6a/0x3e0 [ 884.295253][T18149] ? devlink_fmsg_u8_pair_put+0x225/0x2f0 [ 884.295279][T18149] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 884.295308][T18149] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 884.295337][T18149] devlink_fmsg_obj_nest_end+0xa2/0xc0 [ 884.295366][T18149] nsim_dev_dummy_fmsg_put+0x100/0x1e0 [ 884.295397][T18149] devlink_health_do_dump+0x240/0x620 [ 884.295429][T18149] devlink_health_report+0x3c9/0x9c0 [ 884.295463][T18149] ? __pfx_devlink_health_report+0x10/0x10 [ 884.295490][T18149] ? _copy_from_user+0x59/0xd0 [ 884.295527][T18149] nsim_dev_health_break_write+0x166/0x210 [ 884.295556][T18149] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 884.295594][T18149] full_proxy_write+0x131/0x1a0 [ 884.295629][T18149] ? __pfx_full_proxy_write+0x10/0x10 [ 884.295661][T18149] vfs_write+0x2a0/0x1150 [ 884.295697][T18149] ? __pfx___mutex_lock+0x10/0x10 [ 884.295733][T18149] ? __pfx_vfs_write+0x10/0x10 [ 884.295773][T18149] ? __fget_files+0x20e/0x3c0 [ 884.295811][T18149] ksys_write+0x12a/0x250 [ 884.295839][T18149] ? __pfx_ksys_write+0x10/0x10 [ 884.295880][T18149] do_syscall_64+0xcd/0x490 [ 884.295911][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.295937][T18149] RIP: 0033:0x7fdd03f8eb69 [ 884.295959][T18149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.295983][T18149] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 884.296008][T18149] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 884.296025][T18149] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 884.296039][T18149] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 884.296054][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.296069][T18149] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 884.296105][T18149] [ 884.304739][ T59] bridge_slave_1: left promiscuous mode [ 884.559865][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.580997][ T59] bridge_slave_0: left allmulticast mode [ 884.586761][ T59] bridge_slave_0: left promiscuous mode [ 884.592646][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.667192][T18158] vhci_hcd: invalid port number 16 [ 884.675072][T18158] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 885.335083][T18103] Bluetooth: hci4: command tx timeout [ 886.037590][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.064002][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.086508][ T59] bond0 (unregistering): Released all slaves [ 886.101710][T18176] FAULT_INJECTION: forcing a failure. [ 886.101710][T18176] name failslab, interval 1, probability 0, space 0, times 0 [ 886.134625][T18176] CPU: 1 UID: 0 PID: 18176 Comm: syz.3.2368 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 886.134650][T18176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 886.134659][T18176] Call Trace: [ 886.134664][T18176] [ 886.134671][T18176] dump_stack_lvl+0x16c/0x1f0 [ 886.134691][T18176] should_fail_ex+0x512/0x640 [ 886.134709][T18176] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 886.134726][T18176] should_failslab+0xc2/0x120 [ 886.134746][T18176] __kmalloc_cache_noprof+0x6a/0x3e0 [ 886.134761][T18176] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 886.134781][T18176] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 886.134798][T18176] devlink_fmsg_u8_pair_put+0x270/0x2f0 [ 886.134815][T18176] ? __pfx_devlink_fmsg_u8_pair_put+0x10/0x10 [ 886.134831][T18176] ? __kasan_kmalloc+0x70/0xb0 [ 886.134853][T18176] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 886.134871][T18176] nsim_dev_dummy_fmsg_put+0xf8/0x1e0 [ 886.134893][T18176] devlink_health_do_dump+0x240/0x620 [ 886.134913][T18176] devlink_health_report+0x3c9/0x9c0 [ 886.134944][T18176] ? __pfx_devlink_health_report+0x10/0x10 [ 886.134971][T18176] ? _copy_from_user+0x59/0xd0 [ 886.134998][T18176] nsim_dev_health_break_write+0x166/0x210 [ 886.135015][T18176] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 886.135037][T18176] full_proxy_write+0x131/0x1a0 [ 886.135059][T18176] ? __pfx_full_proxy_write+0x10/0x10 [ 886.135077][T18176] vfs_write+0x2a0/0x1150 [ 886.135096][T18176] ? __pfx___mutex_lock+0x10/0x10 [ 886.135112][T18176] ? __pfx_vfs_write+0x10/0x10 [ 886.135133][T18176] ? __fget_files+0x20e/0x3c0 [ 886.135154][T18176] ksys_write+0x12a/0x250 [ 886.135170][T18176] ? __pfx_ksys_write+0x10/0x10 [ 886.135191][T18176] do_syscall_64+0xcd/0x490 [ 886.135208][T18176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.135223][T18176] RIP: 0033:0x7f907958eb69 [ 886.135236][T18176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.135250][T18176] RSP: 002b:00007f907a4dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 886.135264][T18176] RAX: ffffffffffffffda RBX: 00007f90797b5fa0 RCX: 00007f907958eb69 [ 886.135273][T18176] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 886.135282][T18176] RBP: 00007f9079611df1 R08: 0000000000000000 R09: 0000000000000000 [ 886.135291][T18176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.135299][T18176] R13: 0000000000000000 R14: 00007f90797b5fa0 R15: 00007fffc7211998 [ 886.135319][T18176] [ 886.632957][T18101] hsr_slave_0: entered promiscuous mode [ 886.640612][T18101] hsr_slave_1: entered promiscuous mode [ 886.649192][T18101] debugfs: 'hsr0' already exists in 'hsr' [ 886.655009][T18101] Cannot create hsr debugfs directory [ 886.942276][ T59] hsr_slave_0: left promiscuous mode [ 886.953788][ T59] hsr_slave_1: left promiscuous mode [ 886.966200][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.973796][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.982270][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.989978][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.020434][ T59] veth1_macvtap: left promiscuous mode [ 887.029890][ T59] veth0_macvtap: left promiscuous mode [ 887.036168][ T59] veth1_vlan: left promiscuous mode [ 887.041658][ T59] veth0_vlan: left promiscuous mode [ 887.405296][T18103] Bluetooth: hci4: command tx timeout [ 887.580976][ T59] team0 (unregistering): Port device team_slave_1 removed [ 887.612702][ T59] team0 (unregistering): Port device team_slave_0 removed [ 888.188478][T18194] vhci_hcd: invalid port number 16 [ 888.193638][T18194] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 888.214838][T18196] vhci_hcd: invalid port number 16 [ 888.230229][T18196] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 889.354119][T18220] vhci_hcd: invalid port number 16 [ 889.369035][T18220] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 889.436790][T18223] vhci_hcd: invalid port number 16 [ 889.442028][T18223] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 889.485552][T18103] Bluetooth: hci4: command tx timeout [ 891.338280][T18270] vhci_hcd: invalid port number 16 [ 891.358647][T18272] vhci_hcd: invalid port number 16 [ 891.363932][T18272] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 891.372810][T18270] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 904.119422][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 904.128268][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 904.137652][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 904.148000][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.159617][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 904.378595][T18330] chnl_net:caif_netlink_parms(): no params data found [ 904.487500][T18330] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.497064][T18330] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.504380][T18330] bridge_slave_0: entered allmulticast mode [ 904.513529][T18330] bridge_slave_0: entered promiscuous mode [ 904.526358][T18330] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.534042][T18330] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.543463][T18330] bridge_slave_1: entered allmulticast mode [ 904.552990][T18330] bridge_slave_1: entered promiscuous mode [ 904.652374][T18330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.670765][T18330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.718520][T18330] team0: Port device team_slave_0 added [ 904.727420][T18330] team0: Port device team_slave_1 added [ 904.771652][T18330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.779381][T18330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.805820][T18330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.818948][T18330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.830462][T18330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.856768][T18330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.915143][T18330] hsr_slave_0: entered promiscuous mode [ 904.921434][T18330] hsr_slave_1: entered promiscuous mode [ 904.928330][T18330] debugfs: 'hsr0' already exists in 'hsr' [ 904.934074][T18330] Cannot create hsr debugfs directory [ 906.205086][ T5864] Bluetooth: hci3: command tx timeout [ 908.285158][ T5864] Bluetooth: hci3: command tx timeout [ 910.367645][ T5864] Bluetooth: hci3: command tx timeout [ 910.516018][T18103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 910.527701][T18103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 910.537526][T18103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 910.547373][T18103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 910.555257][T18103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 910.726431][T18345] chnl_net:caif_netlink_parms(): no params data found [ 910.798821][T18345] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.809509][T18345] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.817272][T18345] bridge_slave_0: entered allmulticast mode [ 910.824371][T18345] bridge_slave_0: entered promiscuous mode [ 910.832701][T18345] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.839929][T18345] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.847225][T18345] bridge_slave_1: entered allmulticast mode [ 910.854248][T18345] bridge_slave_1: entered promiscuous mode [ 910.884121][T18345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.897391][T18345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.933465][T18345] team0: Port device team_slave_0 added [ 910.941448][T18345] team0: Port device team_slave_1 added [ 910.971844][T18345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.978949][T18345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.005322][T18345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.018301][T18345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.025469][T18345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.051693][T18345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.097018][T18345] hsr_slave_0: entered promiscuous mode [ 911.103449][T18345] hsr_slave_1: entered promiscuous mode [ 911.109712][T18345] debugfs: 'hsr0' already exists in 'hsr' [ 911.115710][T18345] Cannot create hsr debugfs directory [ 912.445120][T18103] Bluetooth: hci3: command tx timeout [ 912.605211][T18103] Bluetooth: hci5: command tx timeout [ 914.685152][T18103] Bluetooth: hci5: command tx timeout [ 916.765087][T18103] Bluetooth: hci5: command tx timeout [ 918.845215][T18103] Bluetooth: hci5: command tx timeout [ 920.694057][ T5864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 920.705376][ T5864] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 920.714519][ T5864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 920.724077][ T5864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 920.732429][ T5864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 920.897190][T18356] chnl_net:caif_netlink_parms(): no params data found [ 920.979701][T18356] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.987117][T18356] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.994319][T18356] bridge_slave_0: entered allmulticast mode [ 921.002522][T18356] bridge_slave_0: entered promiscuous mode [ 921.010882][T18356] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.018158][T18356] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.025820][T18356] bridge_slave_1: entered allmulticast mode [ 921.032840][T18356] bridge_slave_1: entered promiscuous mode [ 921.065440][T18356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.077960][T18356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.116006][T18356] team0: Port device team_slave_0 added [ 921.123857][T18356] team0: Port device team_slave_1 added [ 921.151635][T18356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.160384][T18356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.186737][T18356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.199849][T18356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.207259][T18356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.233309][T18356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.282052][T18356] hsr_slave_0: entered promiscuous mode [ 921.288395][T18356] hsr_slave_1: entered promiscuous mode [ 921.294538][T18356] debugfs: 'hsr0' already exists in 'hsr' [ 921.300897][T18356] Cannot create hsr debugfs directory [ 922.765142][ T5864] Bluetooth: hci6: command tx timeout [ 924.845109][ T5864] Bluetooth: hci6: command tx timeout [ 926.925071][ T5864] Bluetooth: hci6: command tx timeout [ 929.015107][ T5864] Bluetooth: hci6: command tx timeout [ 936.931211][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.937676][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.583262][T18103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 941.594789][T18103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 941.604149][T18103] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 941.613909][T18103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 941.622746][T18103] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 941.793513][T18367] chnl_net:caif_netlink_parms(): no params data found [ 941.869632][T18367] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.876947][T18367] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.884216][T18367] bridge_slave_0: entered allmulticast mode [ 941.891637][T18367] bridge_slave_0: entered promiscuous mode [ 941.902180][T18367] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.909785][T18367] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.917389][T18367] bridge_slave_1: entered allmulticast mode [ 941.924632][T18367] bridge_slave_1: entered promiscuous mode [ 941.958698][T18367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.972321][T18367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.007466][T18367] team0: Port device team_slave_0 added [ 942.015458][T18367] team0: Port device team_slave_1 added [ 942.046833][T18367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.053875][T18367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.081357][T18367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.094033][T18367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.101448][T18367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.128886][T18367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.177212][T18367] hsr_slave_0: entered promiscuous mode [ 942.183564][T18367] hsr_slave_1: entered promiscuous mode [ 942.190552][T18367] debugfs: 'hsr0' already exists in 'hsr' [ 942.196657][T18367] Cannot create hsr debugfs directory [ 943.725211][ T5864] Bluetooth: hci7: command tx timeout [ 945.805108][ T5864] Bluetooth: hci7: command tx timeout [ 947.885253][ T5864] Bluetooth: hci7: command tx timeout [ 949.965890][ T5864] Bluetooth: hci7: command tx timeout [ 964.138903][T18103] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 964.147975][T18103] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 964.156559][T18103] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 964.169404][T18103] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 964.177611][T18103] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 964.351938][T18384] chnl_net:caif_netlink_parms(): no params data found [ 964.438726][T18384] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.446119][T18384] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.453489][T18384] bridge_slave_0: entered allmulticast mode [ 964.462243][T18384] bridge_slave_0: entered promiscuous mode [ 964.472242][T18384] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.479751][T18384] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.487665][T18384] bridge_slave_1: entered allmulticast mode [ 964.494869][T18384] bridge_slave_1: entered promiscuous mode [ 964.528806][T18384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.540528][T18384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.575923][T18384] team0: Port device team_slave_0 added [ 964.583660][T18384] team0: Port device team_slave_1 added [ 964.612907][T18384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.620960][T18384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.648297][T18384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.663442][T18384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.670610][T18384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.698700][T18384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.745805][T18384] hsr_slave_0: entered promiscuous mode [ 964.752296][T18384] hsr_slave_1: entered promiscuous mode [ 964.758808][T18384] debugfs: 'hsr0' already exists in 'hsr' [ 964.764535][T18384] Cannot create hsr debugfs directory [ 966.205176][ T5864] Bluetooth: hci8: command tx timeout [ 968.285133][T18103] Bluetooth: hci8: command tx timeout [ 970.365108][ T5864] Bluetooth: hci8: command tx timeout [ 971.211232][T18103] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 971.221189][T18103] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 971.230741][T18103] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 971.240320][T18103] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 971.249725][T18103] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 971.433975][T18394] chnl_net:caif_netlink_parms(): no params data found [ 971.517436][T18394] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.524746][T18394] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.532512][T18394] bridge_slave_0: entered allmulticast mode [ 971.542726][T18394] bridge_slave_0: entered promiscuous mode [ 971.550715][T18394] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.558218][T18394] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.566040][T18394] bridge_slave_1: entered allmulticast mode [ 971.574148][T18394] bridge_slave_1: entered promiscuous mode [ 971.607492][T18394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.619451][T18394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.655855][T18394] team0: Port device team_slave_0 added [ 971.663850][T18394] team0: Port device team_slave_1 added [ 971.699295][T18394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.706779][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.733116][T18394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.747004][T18394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.754256][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.780606][T18394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.830362][T18394] hsr_slave_0: entered promiscuous mode [ 971.836967][T18394] hsr_slave_1: entered promiscuous mode [ 971.844341][T18394] debugfs: 'hsr0' already exists in 'hsr' [ 971.850301][T18394] Cannot create hsr debugfs directory [ 972.445084][ T5864] Bluetooth: hci8: command tx timeout [ 973.325298][ T5864] Bluetooth: hci9: command tx timeout [ 975.405624][ T5864] Bluetooth: hci9: command tx timeout [ 977.485274][ T5864] Bluetooth: hci9: command tx timeout [ 979.565322][ T5864] Bluetooth: hci9: command tx timeout [ 981.242185][T18103] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 981.257226][T18103] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 981.267156][T18103] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 981.277801][T18103] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 981.285788][T18103] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 981.469397][T18404] chnl_net:caif_netlink_parms(): no params data found [ 981.549003][T18404] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.557071][T18404] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.564373][T18404] bridge_slave_0: entered allmulticast mode [ 981.574299][T18404] bridge_slave_0: entered promiscuous mode [ 981.583112][T18404] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.590679][T18404] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.598254][T18404] bridge_slave_1: entered allmulticast mode [ 981.606330][T18404] bridge_slave_1: entered promiscuous mode [ 981.640812][T18404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.653933][T18404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.692866][T18404] team0: Port device team_slave_0 added [ 981.700981][T18404] team0: Port device team_slave_1 added [ 981.739248][T18404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.746650][T18404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.773079][T18404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.787620][T18404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.795087][T18404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.821147][T18404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.870462][T18404] hsr_slave_0: entered promiscuous mode [ 981.878960][T18404] hsr_slave_1: entered promiscuous mode [ 981.885437][T18404] debugfs: 'hsr0' already exists in 'hsr' [ 981.891190][T18404] Cannot create hsr debugfs directory [ 983.325175][ T5864] Bluetooth: hci10: command tx timeout [ 985.405126][ T5864] Bluetooth: hci10: command tx timeout [ 987.485127][T18103] Bluetooth: hci10: command tx timeout [ 989.565412][T18103] Bluetooth: hci10: command tx timeout [ 998.378186][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.384528][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.116545][ T5864] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1002.130267][ T5864] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1002.138770][ T5864] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1002.148272][ T5864] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1002.158359][ T5864] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1002.344729][T18414] chnl_net:caif_netlink_parms(): no params data found [ 1002.428770][T18414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.436305][T18414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.443534][T18414] bridge_slave_0: entered allmulticast mode [ 1002.452211][T18414] bridge_slave_0: entered promiscuous mode [ 1002.462078][T18414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.469888][T18414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.478236][T18414] bridge_slave_1: entered allmulticast mode [ 1002.485668][T18414] bridge_slave_1: entered promiscuous mode [ 1002.520899][T18414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.533051][T18414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.572918][T18414] team0: Port device team_slave_0 added [ 1002.581229][T18414] team0: Port device team_slave_1 added [ 1002.611897][T18414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.619404][T18414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.645679][T18414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.659674][T18414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.667620][T18414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.693913][T18414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.743994][T18414] hsr_slave_0: entered promiscuous mode [ 1002.750641][T18414] hsr_slave_1: entered promiscuous mode [ 1002.757130][T18414] debugfs: 'hsr0' already exists in 'hsr' [ 1002.762872][T18414] Cannot create hsr debugfs directory [ 1004.205479][T18423] Bluetooth: hci11: command tx timeout [ 1005.567723][T18423] Bluetooth: hci4: command 0x0406 tx timeout [ 1006.285188][ T5864] Bluetooth: hci11: command tx timeout [ 1008.365094][ T5864] Bluetooth: hci11: command tx timeout [ 1010.445204][ T5864] Bluetooth: hci11: command tx timeout [ 1024.168574][T18423] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1024.177611][T18423] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1024.186155][T18423] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1024.194750][T18423] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1024.204435][T18423] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1024.399658][T18432] chnl_net:caif_netlink_parms(): no params data found [ 1024.478296][T18432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.485995][T18432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.493222][T18432] bridge_slave_0: entered allmulticast mode [ 1024.501062][T18432] bridge_slave_0: entered promiscuous mode [ 1024.509004][T18432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.516319][T18432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.523660][T18432] bridge_slave_1: entered allmulticast mode [ 1024.531126][T18432] bridge_slave_1: entered promiscuous mode [ 1024.565004][T18432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.578693][T18432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.612806][T18432] team0: Port device team_slave_0 added [ 1024.622684][T18432] team0: Port device team_slave_1 added [ 1024.652687][T18432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.661355][T18432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.689420][T18432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.702089][T18432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.709483][T18432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.735665][T18432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.787648][T18432] hsr_slave_0: entered promiscuous mode [ 1024.794023][T18432] hsr_slave_1: entered promiscuous mode [ 1024.801884][T18432] debugfs: 'hsr0' already exists in 'hsr' [ 1024.807712][T18432] Cannot create hsr debugfs directory [ 1026.285153][ T5864] Bluetooth: hci12: command tx timeout [ 1028.365141][ T5864] Bluetooth: hci12: command tx timeout [ 1030.445082][T18423] Bluetooth: hci12: command tx timeout [ 1031.165242][T18423] Bluetooth: hci3: command 0x0406 tx timeout [ 1031.212682][T18423] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1031.222599][T18423] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1031.231284][T18423] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1031.240397][T18423] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1031.248976][T18423] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1031.457072][T18444] chnl_net:caif_netlink_parms(): no params data found [ 1031.539461][T18444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.547771][T18444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.555441][T18444] bridge_slave_0: entered allmulticast mode [ 1031.562765][T18444] bridge_slave_0: entered promiscuous mode [ 1031.572184][T18444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.579845][T18444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.587990][T18444] bridge_slave_1: entered allmulticast mode [ 1031.595866][T18444] bridge_slave_1: entered promiscuous mode [ 1031.630745][T18444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.643369][T18444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.685773][T18444] team0: Port device team_slave_0 added [ 1031.693513][T18444] team0: Port device team_slave_1 added [ 1031.724250][T18444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.731566][T18444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.758670][T18444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.772229][T18444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.779255][T18444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.805451][T18444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.859543][T18444] hsr_slave_0: entered promiscuous mode [ 1031.866158][T18444] hsr_slave_1: entered promiscuous mode [ 1031.872543][T18444] debugfs: 'hsr0' already exists in 'hsr' [ 1031.878410][T18444] Cannot create hsr debugfs directory [ 1032.525046][ T5864] Bluetooth: hci12: command tx timeout [ 1033.325442][ T5864] Bluetooth: hci13: command tx timeout [ 1035.405131][T18423] Bluetooth: hci13: command tx timeout [ 1036.285180][T18423] Bluetooth: hci5: command 0x0406 tx timeout [ 1037.495195][ T5864] Bluetooth: hci13: command tx timeout [ 1039.325710][ T31] INFO: task syz-executor:18101 blocked for more than 143 seconds. [ 1039.333652][ T31] Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 [ 1039.341195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1039.349942][ T31] task:syz-executor state:D stack:23960 pid:18101 tgid:18101 ppid:1 task_flags:0x480140 flags:0x00004006 [ 1039.361976][ T31] Call Trace: [ 1039.365409][ T31] [ 1039.368351][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1039.372870][ T31] ? __pfx___schedule+0x10/0x10 [ 1039.388582][ T31] ? find_held_lock+0x2b/0x80 [ 1039.393422][ T31] ? schedule+0x2d7/0x3a0 [ 1039.415148][ T31] schedule+0xe7/0x3a0 [ 1039.419305][ T31] schedule_timeout+0x257/0x290 [ 1039.424202][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1039.475278][ T31] ? mark_held_locks+0x49/0x80 [ 1039.480112][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1039.490645][ T31] __wait_for_common+0x2fc/0x4e0 [ 1039.495974][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1039.501385][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1039.507015][ T31] remove_one+0x312/0x420 [ 1039.511367][ T31] ? find_next_child+0x18f/0x280 [ 1039.516401][ T31] __simple_recursive_removal+0x15b/0x610 [ 1039.522163][ T31] ? __pfx_remove_one+0x10/0x10 [ 1039.527210][ T31] debugfs_remove+0x5d/0x80 [ 1039.532848][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 1039.537943][ T31] nsim_dev_reload_destroy+0x144/0x4d0 [ 1039.543860][ T31] nsim_drv_remove+0x52/0x1d0 [ 1039.548723][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1039.554216][ T31] device_remove+0xc8/0x170 [ 1039.558831][ T31] device_release_driver_internal+0x44b/0x620 [ 1039.565269][ T5864] Bluetooth: hci13: command tx timeout [ 1039.568448][ T31] bus_remove_device+0x22f/0x420 [ 1039.576702][ T31] device_del+0x396/0x9f0 [ 1039.581075][ T31] ? __pfx_device_del+0x10/0x10 [ 1039.586147][ T31] device_unregister+0x1d/0xc0 [ 1039.590938][ T31] del_device_store+0x355/0x4a0 [ 1039.597589][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1039.603015][ T31] ? find_held_lock+0x2b/0x80 [ 1039.608133][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1039.613004][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1039.619549][ T31] bus_attr_store+0x71/0xb0 [ 1039.624101][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1039.629476][ T31] sysfs_kf_write+0xef/0x150 [ 1039.635483][ T31] kernfs_fop_write_iter+0x351/0x510 [ 1039.640814][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1039.646821][ T31] vfs_write+0x6c7/0x1150 [ 1039.651204][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1039.657087][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1039.662071][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1039.667385][ T31] ksys_write+0x12a/0x250 [ 1039.671736][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1039.676791][ T31] do_syscall_64+0xcd/0x490 [ 1039.681317][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.687286][ T31] RIP: 0033:0x7fdb8438d61f [ 1039.691706][ T31] RSP: 002b:00007ffe9d250f40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1039.700196][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fdb8438d61f [ 1039.708222][ T31] RDX: 0000000000000001 RSI: 00007ffe9d250f90 RDI: 0000000000000005 [ 1039.716288][ T31] RBP: 00007fdb84413085 R08: 0000000000000000 R09: 00007ffe9d250d97 [ 1039.724284][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1039.733641][ T31] R13: 00007ffe9d250f90 R14: 00007fdb850e4620 R15: 0000000000000003 [ 1039.741919][ T31] [ 1039.745181][ T31] INFO: task syz.0.2378:18198 blocked for more than 143 seconds. [ 1039.752999][ T31] Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 [ 1039.760632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1039.769396][ T31] task:syz.0.2378 state:D stack:27320 pid:18198 tgid:18197 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 1039.781399][ T31] Call Trace: [ 1039.784668][ T31] [ 1039.787671][ T31] __schedule+0x1190/0x5de0 [ 1039.792201][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1039.797208][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1039.802156][ T31] ? __pfx___schedule+0x10/0x10 [ 1039.807198][ T31] ? find_held_lock+0x2b/0x80 [ 1039.811922][ T31] ? schedule+0x2d7/0x3a0 [ 1039.816360][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 1039.821833][ T31] schedule+0xe7/0x3a0 [ 1039.826018][ T31] schedule_preempt_disabled+0x13/0x30 [ 1039.831501][ T31] __mutex_lock+0x82a/0x10b0 [ 1039.837259][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 1039.842781][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1039.848014][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 1039.853510][ T31] devlink_health_report+0x3ba/0x9c0 [ 1039.859011][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 1039.864988][ T31] ? _copy_from_user+0x59/0xd0 [ 1039.869792][ T31] nsim_dev_health_break_write+0x166/0x210 [ 1039.875698][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1039.882054][ T31] full_proxy_write+0x131/0x1a0 [ 1039.887166][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1039.892581][ T31] vfs_write+0x2a0/0x1150 [ 1039.897031][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1039.902071][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1039.906940][ T31] ? __fget_files+0x20e/0x3c0 [ 1039.911661][ T31] ksys_write+0x12a/0x250 [ 1039.916044][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1039.920909][ T31] do_syscall_64+0xcd/0x490 [ 1039.925497][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.931399][ T31] RIP: 0033:0x7fdd03f8eb69 [ 1039.935883][ T31] RSP: 002b:00007fdd04d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1039.945393][ T31] RAX: ffffffffffffffda RBX: 00007fdd041b5fa0 RCX: 00007fdd03f8eb69 [ 1039.953390][ T31] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 1039.961450][ T31] RBP: 00007fdd04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1039.974071][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.983558][ T31] R13: 0000000000000000 R14: 00007fdd041b5fa0 R15: 00007fffd9c3f558 [ 1039.991811][ T31] [ 1039.994972][ T31] INFO: task syz.1.2383:18306 blocked for more than 144 seconds. [ 1040.002729][ T31] Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 [ 1040.010115][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1040.021029][ T31] task:syz.1.2383 state:D stack:27320 pid:18306 tgid:18305 ppid:5869 task_flags:0x400140 flags:0x00004004 [ 1040.033108][ T31] Call Trace: [ 1040.036488][ T31] [ 1040.040068][ T31] __schedule+0x1190/0x5de0 [ 1040.044644][ T31] ? check_path.constprop.0+0x24/0x50 [ 1040.050172][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1040.055253][ T31] ? __pfx___schedule+0x10/0x10 [ 1040.060143][ T31] ? find_held_lock+0x2b/0x80 [ 1040.064832][ T31] ? schedule+0x2d7/0x3a0 [ 1040.069241][ T31] schedule+0xe7/0x3a0 [ 1040.073337][ T31] schedule_preempt_disabled+0x13/0x30 [ 1040.078886][ T31] rwsem_down_read_slowpath+0x64e/0xbf0 [ 1040.084540][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1040.090682][ T31] ? __pfx___might_resched+0x10/0x10 [ 1040.096050][ T31] ? find_held_lock+0x2b/0x80 [ 1040.100764][ T31] down_read+0xef/0x480 [ 1040.105032][ T31] ? mnt_get_write_access+0x54/0x300 [ 1040.110348][ T31] ? __pfx_down_read+0x10/0x10 [ 1040.115259][ T31] ? mnt_get_write_access+0x20c/0x300 [ 1040.120685][ T31] path_openat+0x818/0x2cb0 [ 1040.125666][ T31] ? __pfx_path_openat+0x10/0x10 [ 1040.130658][ T31] do_filp_open+0x20b/0x470 [ 1040.135346][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1040.140417][ T31] ? alloc_fd+0x471/0x7d0 [ 1040.145393][ T31] do_sys_openat2+0x11b/0x1d0 [ 1040.150146][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1040.155812][ T31] __x64_sys_openat+0x174/0x210 [ 1040.160702][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1040.166974][ T31] do_syscall_64+0xcd/0x490 [ 1040.171528][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.177788][ T31] RIP: 0033:0x7f37bdd8eb69 [ 1040.182221][ T31] RSP: 002b:00007f37bbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1040.190851][ T31] RAX: ffffffffffffffda RBX: 00007f37bdfb5fa0 RCX: 00007f37bdd8eb69 [ 1040.198886][ T31] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1040.207056][ T31] RBP: 00007f37bde11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1040.215194][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.223177][ T31] R13: 0000000000000000 R14: 00007f37bdfb5fa0 R15: 00007ffc5b41fa68 [ 1040.231311][ T31] [ 1040.234383][ T31] [ 1040.234383][ T31] Showing all locks held in the system: [ 1040.251346][ T31] 1 lock held by khungtaskd/31: [ 1040.258319][ T31] #0: ffffffff8e5c0fe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1040.268465][ T31] 4 locks held by kworker/u8:4/59: [ 1040.273624][ T31] 3 locks held by kworker/u8:7/1150: [ 1040.281607][ T31] #0: ffff8880b843a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1040.291827][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1040.300784][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30 [ 1040.309914][ T31] 2 locks held by getty/5627: [ 1040.314625][ T31] #0: ffff88814defe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1040.324563][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1040.334767][ T31] 7 locks held by syz-executor/18101: [ 1040.340274][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.349964][ T31] #1: ffff8880580d9c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.359993][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.370167][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.380667][ T31] #4: ffff88805b50d0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 1040.391372][ T31] #5: ffff88805b50e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 1040.401629][ T31] #6: ffff88805875dfd8 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 [ 1040.413554][ T31] 3 locks held by syz.0.2378/18198: [ 1040.419109][ T31] #0: ffff88802f7d2638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1040.428568][ T31] #1: ffff8881412fe428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.438026][ T31] #2: ffff88805b50e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x3ba/0x9c0 [ 1040.449922][ T31] 2 locks held by syz.1.2383/18306: [ 1040.455593][ T31] #0: ffff8881412fe428 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 [ 1040.465319][ T31] #1: ffff88805875dfd8 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 [ 1040.476247][ T31] 4 locks held by syz-executor/18330: [ 1040.481626][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.491083][ T31] #1: ffff8880255f2c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.501173][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.511507][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.522001][ T31] 2 locks held by syz.3.2389/18342: [ 1040.527404][ T31] #0: ffff8881412fe428 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 [ 1040.536752][ T31] #1: ffff88805875dfd8 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 [ 1040.547286][ T31] 4 locks held by syz-executor/18345: [ 1040.553645][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.562771][ T31] #1: ffff88807ee9c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.572613][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.582760][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.593202][ T31] 4 locks held by syz-executor/18356: [ 1040.598635][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.608003][ T31] #1: ffff88805b2db888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.617893][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.628224][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.638687][ T31] 4 locks held by syz-executor/18367: [ 1040.644079][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.653119][ T31] #1: ffff888059e95888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.663786][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.674018][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.684819][ T31] 4 locks held by syz-executor/18384: [ 1040.691269][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.700658][ T31] #1: ffff88807da1a088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.710532][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.720662][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.731050][ T31] 4 locks held by syz-executor/18394: [ 1040.736637][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.745741][ T31] #1: ffff888059847088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.755556][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.767066][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.777465][ T31] 4 locks held by syz-executor/18404: [ 1040.782840][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.791937][ T31] #1: ffff888059346888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.801830][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.811987][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.822358][ T31] 4 locks held by syz-executor/18414: [ 1040.828128][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.837453][ T31] #1: ffff8880592e4488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.848132][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.859198][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.869779][ T31] 4 locks held by syz-executor/18432: [ 1040.875226][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.884250][ T31] #1: ffff888059e87488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.894143][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.904330][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.914719][ T31] 4 locks held by syz-executor/18444: [ 1040.920127][ T31] #0: ffff888024846428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.929443][ T31] #1: ffff888059451088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1040.939384][ T31] #2: ffff888143bae968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1040.950701][ T31] #3: ffffffff8f8f2088 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1040.962321][ T31] [ 1040.964671][ T31] ============================================= [ 1040.964671][ T31] [ 1040.973210][ T31] NMI backtrace for cpu 0 [ 1040.973230][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 1040.973255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1040.973267][ T31] Call Trace: [ 1040.973273][ T31] [ 1040.973281][ T31] dump_stack_lvl+0x116/0x1f0 [ 1040.973306][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1040.973333][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1040.973362][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1040.973391][ T31] watchdog+0xf0e/0x1260 [ 1040.973429][ T31] ? __pfx_watchdog+0x10/0x10 [ 1040.973453][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1040.973474][ T31] ? __kthread_parkme+0x19e/0x250 [ 1040.973499][ T31] ? __pfx_watchdog+0x10/0x10 [ 1040.973525][ T31] kthread+0x3c5/0x780 [ 1040.973552][ T31] ? __pfx_kthread+0x10/0x10 [ 1040.973580][ T31] ? rcu_is_watching+0x12/0xc0 [ 1040.973599][ T31] ? __pfx_kthread+0x10/0x10 [ 1040.973626][ T31] ret_from_fork+0x5d7/0x6f0 [ 1040.973654][ T31] ? __pfx_kthread+0x10/0x10 [ 1040.973681][ T31] ret_from_fork_asm+0x1a/0x30 [ 1040.973716][ T31] [ 1040.973725][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1041.092725][ C1] NMI backtrace for cpu 1 [ 1041.092744][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 1041.092773][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1041.092787][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1041.092816][ C1] Code: dc 65 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 91 1a 00 fb f4 3c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1041.092840][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 1041.092859][ C1] RAX: 0000000000b1bbf9 RBX: 0000000000000001 RCX: ffffffff8b8f7bf9 [ 1041.092874][ C1] RDX: 0000000000000000 RSI: ffffffff8de47ea4 RDI: ffffffff8c161580 [ 1041.092890][ C1] RBP: ffffed1003c55b40 R08: 0000000000000001 R09: ffffed10170a6655 [ 1041.092906][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1041.092921][ C1] R13: ffff88801e2ada00 R14: ffffffff90ab2890 R15: 0000000000000000 [ 1041.092936][ C1] FS: 0000000000000000(0000) GS:ffff8881247ce000(0000) knlGS:0000000000000000 [ 1041.092958][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1041.092974][ C1] CR2: 000055613c2d8000 CR3: 000000000e380000 CR4: 00000000003526f0 [ 1041.092989][ C1] Call Trace: [ 1041.092997][ C1] [ 1041.093005][ C1] default_idle+0x13/0x20 [ 1041.093031][ C1] default_idle_call+0x6d/0xb0 [ 1041.093058][ C1] do_idle+0x391/0x510 [ 1041.093083][ C1] ? __pfx_do_idle+0x10/0x10 [ 1041.093106][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1041.093150][ C1] cpu_startup_entry+0x4f/0x60 [ 1041.093174][ C1] start_secondary+0x21d/0x2b0 [ 1041.093206][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1041.093241][ C1] common_startup_64+0x13e/0x148 [ 1041.093276][ C1] [ 1041.093733][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1041.272733][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11741-g5998f2bca43e #0 PREEMPT(full) [ 1041.284185][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1041.294237][ T31] Call Trace: [ 1041.297520][ T31] [ 1041.300461][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1041.305050][ T31] vpanic+0x6e8/0x7a0 [ 1041.309038][ T31] ? __pfx_vpanic+0x10/0x10 [ 1041.313629][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1041.319621][ T31] panic+0xca/0xd0 [ 1041.323345][ T31] ? __pfx_panic+0x10/0x10 [ 1041.327764][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1041.333272][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1041.339686][ T31] ? watchdog+0xd78/0x1260 [ 1041.344104][ T31] ? watchdog+0xd6b/0x1260 [ 1041.348520][ T31] watchdog+0xd89/0x1260 [ 1041.352777][ T31] ? __pfx_watchdog+0x10/0x10 [ 1041.357456][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1041.362685][ T31] ? __kthread_parkme+0x19e/0x250 [ 1041.367710][ T31] ? __pfx_watchdog+0x10/0x10 [ 1041.372389][ T31] kthread+0x3c5/0x780 [ 1041.376469][ T31] ? __pfx_kthread+0x10/0x10 [ 1041.381066][ T31] ? rcu_is_watching+0x12/0xc0 [ 1041.385825][ T31] ? __pfx_kthread+0x10/0x10 [ 1041.390424][ T31] ret_from_fork+0x5d7/0x6f0 [ 1041.395025][ T31] ? __pfx_kthread+0x10/0x10 [ 1041.399720][ T31] ret_from_fork_asm+0x1a/0x30 [ 1041.404517][ T31] [ 1041.407788][ T31] Kernel Offset: disabled [ 1041.412107][ T31] Rebooting in 86400 seconds..